Remove empty and unused nodes from redacted query after validation of generic-auth directives

[enisdenjo]

Causing issues with graphql-hive/gateway#1629 due to malformed queries for query planning.

The generic-auth plugin leaves document nodes broken after validation and redaction of unauthenticated fields. Given a schema:

type Query {
  public: String
  person: Person
}
interface Person {
  name: String
}
type Admin implements Person @authenticated {
  name: String
  email: String
}

the following user query:

{
  public
  person {
    name
    ... on Admin {
      email
    }
  }
}

will be incorrectly redacted to:

{
  public
  person {
    name
-   ... on Admin
  }
}

secondly, the following query:

{
  public
  person {
    ... on Admin {
      email
    }
  }
}

will be incorrectly redacted to:

{
  public
- person {
-   ... on Admin
- }
}

finally, the following query:

{
  public
  person {
    ...A
  }
}
fragment A on Admin {
  email
}

will be incorrectly redacted to:

query {
  public
- person {
-   ...A
- }
}
- fragment A on Admin 

TODO

While working on the task, I noticed more issues with the generic-plugin itself (was broken without the fixes too) see skipped tests in use-generic-auth.spec.ts.

[github-actions]

🚀 Snapshot Release (alpha)

The latest changes of this PR are available as alpha on npm (based on the declared changesets):

Package	Version	Info
@envelop/extended-validation	6.1.0-alpha-20251028160214-ce57cdb81d833297676a1b62d7767b7e1d151725	npm ↗︎ unpkg ↗︎
@envelop/generic-auth	10.0.1-alpha-20251028160214-ce57cdb81d833297676a1b62d7767b7e1d151725	npm ↗︎ unpkg ↗︎

[github-actions]

💻 Website Preview

The latest changes are available as preview in: https://3dc7073a.envelop.pages.dev