@everystack/server 0.4.40 → 0.4.42

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `@everystack/server` are documented here.
 
 Format based on [Keep a Changelog](https://keepachangelog.com/).
 
+## [0.4.42] - 2026-10-31
+
+### Fixed
+
+- a granted definer role is not a request role in the lifecycle check
+
+## [0.4.41] - 2026-10-31
+
+### Fixed
+
+- destroyExpired links a module's raw models itself
+
 ## [0.4.40] - 2026-10-30
 
 ### BREAKING CHANGES

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@everystack/server",
-  "version": "0.4.40",
+  "version": "0.4.42",
   "description": "Server runtime primitives for Lambda — event adapters, routing, SSR, image processing",
   "license": "AGPL-3.0-only",
   "author": "Scalable Technology, Inc. <licensing@scalable.technology>",
@@ -207,11 +207,11 @@
     "sst": "4.13.1",
     "ts-jest": "29.4.9",
     "typescript": "5.9.3",
-    "@everystack/auth": "0.4.10",
-    "@everystack/cli": "0.4.104"
+    "@everystack/cli": "0.4.106",
+    "@everystack/auth": "0.4.10"
   },
   "dependencies": {
-    "@everystack/model": "0.4.25"
+    "@everystack/model": "0.4.26"
   },
   "scripts": {
     "test": "jest",

package/src/destroy.ts

@@ -1,6 +1,6 @@
 /** Generated SQL owns removal; this module brackets it with root hooks. */
 import { sql, type SQL } from 'drizzle-orm';
-import { isVeto, lifecycleDestroyOrder, pgType, type DestroyContext, type ModelDescriptor } from '@everystack/model';
+import { isVeto, lifecycleDestroyOrder, linkModels, pgType, type DestroyContext, type ModelDescriptor } from '@everystack/model';
 import type { SessionCapableDb, SessionTx } from './db-session';
 
 type Row = Record<string, unknown>;
@@ -127,6 +127,7 @@ const context = (row: Row): DestroyContext => Object.freeze({
  * commit fails. afterDestroy runs after commit, best-effort: a crash can lose it.
  * `role`: every transaction opens with SET LOCAL ROLE, so a least-privilege login (NOINHERIT,
  * granted the app roles) runs it as a role that manages the tables. Never everystack_lifecycle.
+ * `models` may be a module's raw array: it is linked here (linkModels) before the destroy order is read.
  */
 export async function destroyExpired(
   db: SessionCapableDb,
@@ -149,7 +150,8 @@ export async function destroyExpired(
   for (const [name, value] of [['batch', batch], ['statementTimeoutMs', timeout]] as const) {
     if (!Number.isInteger(value) || value <= 0 || value > 2147483647) throw new Error(`${name} must be a positive PostgreSQL integer`);
   }
-  const order = lifecycleDestroyOrder(models);
+  // A module's raw models still hold name references; linking an already linked set is a no-op.
+  const order = lifecycleDestroyOrder(linkModels(models));
   const byName = new Map(models.map(m => [m.schema === 'public' ? m.table : label(m), m]));
   const result: DestroyResult = { perTable: {}, order };
   const report = async (fault: DestroyFault): Promise<void> => {

package/src/plugin.ts

@@ -1482,6 +1482,9 @@ export function dbPlugin(options: DbPluginOptions): Plugin {
           // The lifecycle catalog check's roles, as sent. executeReconcile refuses lifecycle-owned
           // objects when they are absent or malformed (an older CLI): fail closed, never skipped.
           applicationRoles: p.applicationRoles,
+          // The role declaration, optional: absent (an older CLI), the check runs as before.
+          requestRoles: p.requestRoles,
+          declaredOwners: p.declaredOwners,
           actor: p.actor ?? null,
           gitRef: p.gitRef ?? null,
         });