@everystack/server 0.4.41 → 0.4.43

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `@everystack/server` are documented here.
 
 Format based on [Keep a Changelog](https://keepachangelog.com/).
 
+## [0.4.43] - 2026-11-04
+
+### Fixed
+
+- the lifecycle preflight accepts the grants the reviewed plan revokes
+
+## [0.4.42] - 2026-10-31
+
+### Fixed
+
+- a granted definer role is not a request role in the lifecycle check
+
 ## [0.4.41] - 2026-10-31
 
 ### Fixed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@everystack/server",
-  "version": "0.4.41",
+  "version": "0.4.43",
   "description": "Server runtime primitives for Lambda — event adapters, routing, SSR, image processing",
   "license": "AGPL-3.0-only",
   "author": "Scalable Technology, Inc. <licensing@scalable.technology>",
@@ -207,11 +207,11 @@
     "sst": "4.13.1",
     "ts-jest": "29.4.9",
     "typescript": "5.9.3",
-    "@everystack/auth": "0.4.10",
-    "@everystack/cli": "0.4.105"
+    "@everystack/auth": "0.4.11",
+    "@everystack/cli": "0.4.108"
   },
   "dependencies": {
-    "@everystack/model": "0.4.25"
+    "@everystack/model": "0.4.27"
   },
   "scripts": {
     "test": "jest",

package/src/plugin.ts

@@ -1482,6 +1482,9 @@ export function dbPlugin(options: DbPluginOptions): Plugin {
           // The lifecycle catalog check's roles, as sent. executeReconcile refuses lifecycle-owned
           // objects when they are absent or malformed (an older CLI): fail closed, never skipped.
           applicationRoles: p.applicationRoles,
+          // The role declaration, optional: absent (an older CLI), the check runs as before.
+          requestRoles: p.requestRoles,
+          declaredOwners: p.declaredOwners,
           actor: p.actor ?? null,
           gitRef: p.gitRef ?? null,
         });