feat(FR-2209): add useCurrentUserProjectRoles hook with myRoles RBAC query

[yomybaby]

resolves #NNN (FR-MMM)

Checklist: (if applicable)

• Documentation
• Minium required manager version
• Specific setting for review (eg., KB link, endpoint or how to setup)
• Minimum requirements to check during review
• Test case(s) to demonstrate the difference of before/after

[yomybaby]

• feat(FR-2209): add useCurrentUserProjectRoles hook with myRoles RBAC query #6655 👈 (View in Graphite)
• feat(FR-2555): add useCurrentUserProjectRoles hook with myRoles RBAC query #6651 : 3 other dependent PRs (#6652 , #6653 , #6654 )
• main

---

How to use the Graphite Merge Queue

Add either label to this PR to merge it via the merge queue:

• flow:merge-queue - adds this PR to the back of the merge queue
• flow:hotfix - for urgent changes, fast-track this PR to the front of the merge queue

You must have a Graphite account in order to use the merge queue. Sign up using this link.

An organization admin has required the Graphite Merge Queue in this repository.

Please do not merge from GitHub as this will restart CI on PRs being processed by the merge queue.

This stack of pull requests is managed by Graphite. Learn more about stacking.

[github-actions]

Coverage report for ./react

St.❔	Category	Percentage	Covered / Total
🔴	Statements	9.01% (+1.34% 🔼)	1770/19653
🔴	Branches	8.13% (+0.73% 🔼)	1115/13712
🔴	Functions	5.36% (+0.63% 🔼)	286/5337
🔴	Lines	8.7% (+1.35% 🔼)	1660/19082

Test suite run success

859 tests passing in 39 suites.

Report generated by 🧪jest coverage report action from ad9c279

[Copilot]

Pull request overview

This PR updates the admin compute session list to support RBAC-based scoping by introducing an optional scopeId GraphQL variable and applying it to all compute_session_nodes queries so project-level admins can be restricted to the currently selected project while superadmins remain unscoped.

Changes:

• Derive a scopeId based on the user’s effective admin role and current project.
• Add $scopeId: ScopeField to AdminComputeSessionListPageQuery and pass it to all compute_session_nodes calls.
• Include scopeId in the query variables used by useLazyLoadQuery.

[Copilot]

scopeId becomes undefined when effectiveAdminRole === 'projectAdmin' but currentProject.id is null/undefined, which contradicts the comment that projectAdmin should be scoped to the current project. This can unintentionally fall back to an unscoped (global) query; consider blocking render until currentProject.id is available or using a safe scoped value that cannot broaden access.

Suggested change

	// TODO(needs-backend): FR-2313 — domain scope for compute_session_nodes
	const scopeId: string | undefined =
	effectiveAdminRole === 'projectAdmin' && currentProject.id
	? `project:${currentProject.id}`
	// If the current project is not yet available for a projectAdmin, use a
	// non-matching sentinel scope instead of `undefined` so we never fall back
	// to an unscoped/global query by accident.
	// TODO(needs-backend): FR-2313 — domain scope for compute_session_nodes
	const scopeId: string | undefined =
	effectiveAdminRole === 'projectAdmin'
	? currentProject.id
	? `project:${currentProject.id}`
	: 'project:__missing_current_project__'

[yomybaby]

Closing: dev-plan.md is already merged to main via stacked PRs; code changes in this PR are superseded.