@shivaedev/create-app 0.19.0 → 0.20.0

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 0.20.0 - 2026-10-27
+
+### Added
+
+- Admin pages declare domain permissions shared by RPC middleware and client route metadata. Generated apps declare one role per file, with explicit grants and one permission fallback page.
+- Users with `roles.assign` assign a user's single role from the application's declared role set. Role changes cannot remove the final holder of that permission.
+
+### Breaking
+
+- Replace `OpenAdmin` and `AdminPermission` with each page's domain permission: `ReadUsers`/`UsersPermission` or `ReadJobs`/`JobsPermission`. Custom `adminPage` declarations must pass their own `permissionMiddleware` as `permission`; provide its `permissionLayer` at the server host and use `page.route.permission` with React's `permissionGuard` and `PermissionBoundary`.
+- Replace the `UsersPage` singleton with `usersPage(AppAccess)` and register `usersHandlers(UsersPage, AppAccess)`. Pass `roles={AppAccess.Role.literals}` to `UsersView`. Server callers pass `AppAccess` first to `listUsers` and `changeUserRole`.
+- Replace `ChangeUserRoles` with `AssignRoles` (`roles.assign`), and handle `LastRoleAssigner` instead of `LastOwner`. User results contain `role` instead of `roles`; `changeRole` takes `{ userId, role }` without `grant`. The fixed `UserRole` Schema is removed; use `AppAccess.Role`.
+- Existing generated apps must migrate stored comma-separated roles to one declared role string before running the new app. Preserve every final role assigner's access during that data migration. Run the create-app updater to merge the starter's new role files, imports, server permission Layers and client permission boundary; resolve customized wiring conflicts and install dependencies. The updater does not migrate database values. Bootstrap now creates one `owner` role, whose explicit grants include access to all admin pages.
+
 ## 0.19.0 - 2026-10-27
 
 ### Changed

package/README.md

@@ -40,6 +40,6 @@ Run `pnpm run setup` after cloning the generated repository to install dependenc
 
 Run `pnpm dlx @shivaedev/create-app@latest update` in a generated app with a clean Git working tree to take later starter changes. The command reads `.create-app.json`, downloads the recorded generator’s starter and uses Git’s three-way merge to replay its changes against the current starter; app edits survive, deleted files stay deleted, and conflicts are listed and left for you to resolve. A successful merge records the current generator version; review the changes, run `pnpm install` and commit them yourself.
 
-The default starter mounts `/admin/users` beside Jobs. Administrators see paginated users; owners grant and revoke roles through the protected native RPC contract. New `admin:create` accounts hold both roles. Existing apps receive the Users registration and route through the same three-way updater, including conflicts when those parts were customized.
+The default starter mounts `/admin/users` beside Jobs. Roles are declared in code, one file per role, with explicit grants. Users store one role string. Callers with `users.read` see paginated users; callers with `roles.assign` assign a declared role through native RPC, which protects the last role assigner. Client permission routes share one fallback page. New `admin:create` accounts receive the owner role and all admin permissions. Existing apps receive the Users registration and route through the same three-way updater, including conflicts when those parts were customized.
 
 The command also supports `--help` and `--version`. See the [framework quickstart](https://github.com/ShivaeDev/platform/blob/main/docs/framework/quickstart.md) for the starter's application and deployment workflow.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shivaedev/create-app",
-  "version": "0.19.0",
+  "version": "0.20.0",
   "description": "Create and install a Platform application from the maintained starter",
   "homepage": "https://github.com/ShivaeDev/platform/tree/main/packages/create-app#readme",
   "bugs": {
@@ -58,13 +58,13 @@
     "README.md"
   ],
   "dependencies": {
-    "@shivaedev/sql": "0.22.0"
+    "@shivaedev/sql": "0.23.0"
   },
   "devDependencies": {
     "@effect/platform-node": "4.0.5",
     "@effect/platform-node-shared": "4.0.5",
     "@shivaedev/quality": "0.42.0",
-    "@shivaedev/test-story": "0.21.0",
+    "@shivaedev/test-story": "0.21.1",
     "@types/node": "24.19.2",
     "effect": "4.0.5",
     "esbuild": "0.28.2",