@trackunit/react-graphql-tools 1.17.7 → 1.17.8

package/CHANGELOG.md

@@ -1,3 +1,19 @@
+## 1.17.8 (2026-08-31)
+
+### 🩹 Fixes
+
+- **react-graphql-tools:** narrow the scope-audit exports on the published barrel ([#25190](https://github.com/Trackunit/manager/issues/25190))
+
+### 🧱 Updated Dependencies
+
+- Updated iris-app-build-utilities to 2.4.28
+- Updated react-vite-test-setup to 0.0.117
+
+### ❤️ Thank You
+
+- Cursor @cursoragent
+- Mikkel Thorbjørn Andersen
+
 ## 1.17.7 (2026-08-31)
 
 ### 🧱 Updated Dependencies

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trackunit/react-graphql-tools",
-  "version": "1.17.7",
+  "version": "1.17.8",
   "main": "src/index.js",
   "executors": "./executors.json",
   "generators": "./generators.json",
@@ -19,7 +19,7 @@
     "tslib": "^2.6.2",
     "@nx/devkit": "23.1.0",
     "@nx/js": "23.1.0",
-    "@trackunit/iris-app-build-utilities": "2.4.27",
+    "@trackunit/iris-app-build-utilities": "2.4.28",
     "graphql": "^16.10.0"
   },
   "migrations": "./migrations.json",

package/src/executors/createHooks/collectPermissions.d.ts

@@ -7,6 +7,12 @@ import { GraphQLSchema } from "graphql";
  * disk) or the schema file is missing (e.g. isolated test workspaces).
  */
 export declare const loadAuthSchema: (nxRoot: string) => GraphQLSchema | null;
+/**
+ * Recursively reads every `.graphql` source document under a directory, skipping generated output.
+ * `*-manager.graphql` is excluded to match codegen's default document globs, so an operation that was
+ * never generated can't shadow a generated one of the same name.
+ */
+export declare const readGraphqlDocuments: (directory: string) => Array<string>;
 /**
  * Builds a map of operation name -> sorted, de-duplicated authorization scopes required by that
  * operation, from raw GraphQL operation/fragment source documents.

package/src/executors/createHooks/collectPermissions.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.collectOperationPermissions = exports.collectPermissionsFromDocuments = exports.loadAuthSchema = void 0;
+exports.collectOperationPermissions = exports.collectPermissionsFromDocuments = exports.readGraphqlDocuments = exports.loadAuthSchema = void 0;
 const iris_app_build_utilities_1 = require("@trackunit/iris-app-build-utilities");
 const fs_1 = require("fs");
 const graphql_1 = require("graphql");
@@ -133,7 +133,7 @@ const readGraphqlDocuments = (directory) => {
         if (entry.isDirectory()) {
             if (entry.name === "generated" || entry.name === "node_modules")
                 continue;
-            documents.push(...readGraphqlDocuments(fullPath));
+            documents.push(...(0, exports.readGraphqlDocuments)(fullPath));
         }
         else if (entry.name.endsWith(".graphql") && !entry.name.endsWith("-manager.graphql")) {
             documents.push((0, fs_1.readFileSync)(fullPath, { encoding: "utf-8" }));
@@ -141,6 +141,7 @@ const readGraphqlDocuments = (directory) => {
     }
     return documents;
 };
+exports.readGraphqlDocuments = readGraphqlDocuments;
 /**
  * Builds a map of operation name -> sorted, de-duplicated authorization scopes required by that
  * operation, from raw GraphQL operation/fragment source documents.
@@ -194,7 +195,7 @@ exports.collectPermissionsFromDocuments = collectPermissionsFromDocuments;
 const collectOperationPermissions = (schema, generatedFilePath) => {
     // <lib>/src/generated/graphql-api/graphql.ts -> <lib>/src
     const documentsDirectory = (0, path_1.join)((0, path_1.dirname)(generatedFilePath), "..", "..");
-    return (0, exports.collectPermissionsFromDocuments)(schema, readGraphqlDocuments(documentsDirectory));
+    return (0, exports.collectPermissionsFromDocuments)(schema, (0, exports.readGraphqlDocuments)(documentsDirectory));
 };
 exports.collectOperationPermissions = collectOperationPermissions;
 //# sourceMappingURL=collectPermissions.js.map

package/src/executors/createHooks/collectProjectScopes.d.ts

@@ -0,0 +1,17 @@
+import { GraphQLSchema } from "graphql";
+/**
+ * Drops the memoised per-project scopes. Exposed for tests, which build a fresh schema per case.
+ */
+export declare const clearProjectScopesCache: () => void;
+/**
+ * Resolves the authorization scopes every GraphQL operation in a project requires, as one sorted,
+ * de-duplicated list.
+ *
+ * A project requiring no scopes and a project with no GraphQL at all both yield an empty list —
+ * callers that need to tell those apart should inspect the project's documents themselves.
+ *
+ * @param schema The authorization-annotated schema to resolve field directives against.
+ * @param projectRoot Absolute path to the project whose `.graphql` documents should be scanned.
+ * @returns {Array<string>} Sorted, de-duplicated scopes required by the project.
+ */
+export declare const collectProjectScopes: (schema: GraphQLSchema, projectRoot: string) => Array<string>;

package/src/executors/createHooks/collectProjectScopes.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.collectProjectScopes = exports.clearProjectScopesCache = void 0;
+const collectPermissions_1 = require("./collectPermissions");
+/**
+ * A workspace-wide scan asks the same library for its scopes once per app that depends on it,
+ * so results are cached per project root. The cache is only valid for the schema that produced
+ * it; a different schema resets it rather than returning stale answers.
+ */
+let cachedSchema;
+const scopesByProjectRoot = new Map();
+/**
+ * Drops the memoised per-project scopes. Exposed for tests, which build a fresh schema per case.
+ */
+const clearProjectScopesCache = () => {
+    cachedSchema = undefined;
+    scopesByProjectRoot.clear();
+};
+exports.clearProjectScopesCache = clearProjectScopesCache;
+/**
+ * Resolves the authorization scopes every GraphQL operation in a project requires, as one sorted,
+ * de-duplicated list.
+ *
+ * A project requiring no scopes and a project with no GraphQL at all both yield an empty list —
+ * callers that need to tell those apart should inspect the project's documents themselves.
+ *
+ * @param schema The authorization-annotated schema to resolve field directives against.
+ * @param projectRoot Absolute path to the project whose `.graphql` documents should be scanned.
+ * @returns {Array<string>} Sorted, de-duplicated scopes required by the project.
+ */
+const collectProjectScopes = (schema, projectRoot) => {
+    if (cachedSchema !== schema) {
+        cachedSchema = schema;
+        scopesByProjectRoot.clear();
+    }
+    const cached = scopesByProjectRoot.get(projectRoot);
+    if (cached !== undefined)
+        return cached;
+    const permissionsByOperation = (0, collectPermissions_1.collectPermissionsFromDocuments)(schema, (0, collectPermissions_1.readGraphqlDocuments)(projectRoot));
+    const scopes = new Set();
+    for (const operationScopes of permissionsByOperation.values()) {
+        operationScopes.forEach(scope => scopes.add(scope));
+    }
+    const sorted = [...scopes].sort();
+    scopesByProjectRoot.set(projectRoot, sorted);
+    return sorted;
+};
+exports.collectProjectScopes = collectProjectScopes;
+//# sourceMappingURL=collectProjectScopes.js.map

package/src/index.d.ts

@@ -2,3 +2,5 @@ export type { CreateGraphqlHooksExecutorSchema } from "./executors/createHooks/s
 export type { AddGraphqlGeneratorSchema } from "./generators/add-graphql/schema";
 export { CreateGraphqlHooks } from "./executors/createHooks/executor";
 export { addGraphqlGenerator } from "./generators/add-graphql/generator";
+export { collectPermissionsFromDocuments, loadAuthSchema } from "./executors/createHooks/collectPermissions";
+export { collectProjectScopes } from "./executors/createHooks/collectProjectScopes";

package/src/index.js

@@ -1,8 +1,13 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.addGraphqlGenerator = exports.CreateGraphqlHooks = void 0;
+exports.collectProjectScopes = exports.loadAuthSchema = exports.collectPermissionsFromDocuments = exports.addGraphqlGenerator = exports.CreateGraphqlHooks = void 0;
 var executor_1 = require("./executors/createHooks/executor");
 Object.defineProperty(exports, "CreateGraphqlHooks", { enumerable: true, get: function () { return executor_1.CreateGraphqlHooks; } });
 var generator_1 = require("./generators/add-graphql/generator");
 Object.defineProperty(exports, "addGraphqlGenerator", { enumerable: true, get: function () { return generator_1.addGraphqlGenerator; } });
+var collectPermissions_1 = require("./executors/createHooks/collectPermissions");
+Object.defineProperty(exports, "collectPermissionsFromDocuments", { enumerable: true, get: function () { return collectPermissions_1.collectPermissionsFromDocuments; } });
+Object.defineProperty(exports, "loadAuthSchema", { enumerable: true, get: function () { return collectPermissions_1.loadAuthSchema; } });
+var collectProjectScopes_1 = require("./executors/createHooks/collectProjectScopes");
+Object.defineProperty(exports, "collectProjectScopes", { enumerable: true, get: function () { return collectProjectScopes_1.collectProjectScopes; } });
 //# sourceMappingURL=index.js.map