fix: Propagate public visibility to nested children in registerPublicRoute (#608)

* fix: Propagate public visibility to nested children in registerPublicRoute

Fix issue #607

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* refactor: simplify applyPublicVisibility helper

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* refactor: rename applyPublicVisibility to applyPublicVisibilityToChildren

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: alexasselin008

.changeset/cozy-routes-inherit.md

@@ -0,0 +1,6 @@
+---
+"@squide/react-router": patch
+"@squide/firefly": patch
+---
+
+Fixed `registerPublicRoute` to propagate the public visibility to nested children. Children with an explicit visibility option are preserved.

packages/react-router/src/ReactRouterRuntime.ts

@@ -34,6 +34,22 @@ function logRoutesTree(routes: Route[], depth: number = 0) {
     return log;
 }
 
+function applyPublicVisibilityToChildren(routes: Route[]) {
+    return routes.map(x => {
+        const route: Route = {
+            $visibility: "public",
+            ...x
+        };
+
+        if (route.children) {
+            // Recursively go through the children.
+            route.children = applyPublicVisibilityToChildren(route.children);
+        }
+
+        return route;
+    });
+}
+
 export interface IReactRouterRuntime extends IRuntime<Route, RootNavigationItem> {}
 
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
@@ -163,7 +179,8 @@ export class ReactRouterRuntime<TRuntime extends ReactRouterRuntime = any> exten
     registerPublicRoute(route: Omit<Route, "$visibility">, options?: RegisterRouteOptions) {
         this.registerRoute({
             $visibility: "public",
-            ...route
+            ...route,
+            ...(route.children ? { children: applyPublicVisibilityToChildren(route.children) } : {})
         } as Route, options);
     }
 

packages/react-router/tests/ReactRouterRuntime.test.tsx

@@ -2517,6 +2517,143 @@ describe.concurrent("startDeferredRegistrationScope & completeDeferredRegistrati
     });
 });
 
+describe.concurrent("registerPublicRoute", () => {
+    function registerPublicRoutesOutlet(runtime: ReactRouterRuntime) {
+        runtime.registerRoute(PublicRoutes);
+    }
+
+    function getPublicRoutes(routes: Route[]): Route[] | undefined {
+        for (const route of routes) {
+            if (isPublicRoutesOutletRoute(route)) {
+                return route.children!;
+            }
+
+            if (route.children) {
+                const publicRoutes = getPublicRoutes(route.children);
+
+                if (publicRoutes) {
+                    return publicRoutes;
+                }
+            }
+        }
+    }
+
+    test.concurrent("should register a flat public route", ({ expect }) => {
+        const runtime = new ReactRouterRuntime({
+            loggers: [new NoopLogger()]
+        });
+
+        registerPublicRoutesOutlet(runtime);
+
+        runtime.registerPublicRoute({
+            path: "/foo",
+            element: <div>Hello!</div>
+        });
+
+        const routes = getPublicRoutes(runtime.routes)!;
+
+        expect(routes.length).toBe(1);
+        expect(routes[0].path).toBe("/foo");
+        expect(routes[0].$visibility).toBe("public");
+    });
+
+    test.concurrent("when a child route has no visibility option, the child route is considered as a \"public\" route", ({ expect }) => {
+        const runtime = new ReactRouterRuntime({
+            loggers: [new NoopLogger()]
+        });
+
+        registerPublicRoutesOutlet(runtime);
+
+        runtime.registerPublicRoute({
+            element: <div>Layout</div>,
+            children: [
+                {
+                    path: "/foo",
+                    element: <div>Foo</div>
+                },
+                {
+                    path: "/bar",
+                    element: <div>Bar</div>
+                }
+            ]
+        });
+
+        const routes = getPublicRoutes(runtime.routes)!;
+
+        expect(routes[0].$visibility).toBe("public");
+        expect(routes[0].children![0].$visibility).toBe("public");
+        expect(routes[0].children![1].$visibility).toBe("public");
+    });
+
+    test.concurrent("should register a child route with an explicit visibility", ({ expect }) => {
+        const runtime = new ReactRouterRuntime({
+            loggers: [new NoopLogger()]
+        });
+
+        registerPublicRoutesOutlet(runtime);
+
+        runtime.registerPublicRoute({
+            element: <div>Layout</div>,
+            children: [
+                {
+                    $visibility: "protected",
+                    path: "/protected-child",
+                    element: <div>Protected</div>
+                },
+                {
+                    path: "/public-child",
+                    element: <div>Public</div>
+                }
+            ]
+        });
+
+        const routes = getPublicRoutes(runtime.routes)!;
+
+        expect(routes[0].children![0].$visibility).toBe("protected");
+        expect(routes[0].children![1].$visibility).toBe("public");
+    });
+
+    test.concurrent("when a deeply nested route has no visibility option, the deeply nested route is considered as a \"public\" route", ({ expect }) => {
+        const runtime = new ReactRouterRuntime({
+            loggers: [new NoopLogger()]
+        });
+
+        registerPublicRoutesOutlet(runtime);
+
+        runtime.registerPublicRoute({
+            element: <div>Root</div>,
+            children: [
+                {
+                    element: <div>Layout</div>,
+                    children: [
+                        {
+                            path: "/reviews",
+                            children: [
+                                {
+                                    index: true,
+                                    element: <div>Index</div>
+                                }
+                            ]
+                        },
+                        {
+                            path: "/reviews/auth-redirect",
+                            element: <div>Auth</div>
+                        }
+                    ]
+                }
+            ]
+        });
+
+        const routes = getPublicRoutes(runtime.routes)!;
+
+        expect(routes[0].$visibility).toBe("public");
+        expect(routes[0].children![0].$visibility).toBe("public");
+        expect(routes[0].children![0].children![0].$visibility).toBe("public");
+        expect(routes[0].children![0].children![0].children![0].$visibility).toBe("public");
+        expect(routes[0].children![0].children![1].$visibility).toBe("public");
+    });
+});
+
 describe.concurrent("_validateRegistrations", () => {
     describe.concurrent("managed routes", () => {
         test.concurrent("when public routes are registered but the public routes outlet is missing, the error message mentions the PublicRoutes outlet", ({ expect }) => {