@stardeck-customer-apps/compose 0.15.0 → 0.16.0

package/dist/cli.js

@@ -2278,7 +2278,18 @@ var modulePermissionClaimSchema = import_zod.z.object({
    * External Viewer never holds one. An organization that wants different access duplicates the
    * standard role and edits the copy.
    */
-  roles: import_zod.z.array(import_zod.z.enum(MODULE_PERMISSION_DEFAULT_ROLES)).optional()
+  roles: import_zod.z.array(import_zod.z.enum(MODULE_PERMISSION_DEFAULT_ROLES)).optional(),
+  /**
+   * Keys this one takes over (a retired or renamed key). On the update that stops declaring
+   * them, every custom role still holding one is granted this key before the old one goes,
+   * so nobody loses access in the change. Standard roles follow `roles` as always.
+   */
+  replaces: import_zod.z.array(
+    import_zod.z.string().regex(
+      /^[a-z0-9][a-z0-9-]*:[a-z0-9][a-z0-9-]*$/,
+      "must be a lowercase resource:action key"
+    )
+  ).max(20).optional()
 }).strict();
 var seedBundleSchema = import_zod.z.object({
   table: tableNameSchema,

package/dist/index.js

@@ -2396,7 +2396,18 @@ var modulePermissionClaimSchema = import_zod2.z.object({
    * External Viewer never holds one. An organization that wants different access duplicates the
    * standard role and edits the copy.
    */
-  roles: import_zod2.z.array(import_zod2.z.enum(MODULE_PERMISSION_DEFAULT_ROLES)).optional()
+  roles: import_zod2.z.array(import_zod2.z.enum(MODULE_PERMISSION_DEFAULT_ROLES)).optional(),
+  /**
+   * Keys this one takes over (a retired or renamed key). On the update that stops declaring
+   * them, every custom role still holding one is granted this key before the old one goes,
+   * so nobody loses access in the change. Standard roles follow `roles` as always.
+   */
+  replaces: import_zod2.z.array(
+    import_zod2.z.string().regex(
+      /^[a-z0-9][a-z0-9-]*:[a-z0-9][a-z0-9-]*$/,
+      "must be a lowercase resource:action key"
+    )
+  ).max(20).optional()
 }).strict();
 var seedBundleSchema = import_zod2.z.object({
   table: tableNameSchema,

package/dist/index.mjs

@@ -2377,7 +2377,18 @@ var modulePermissionClaimSchema = z2.object({
    * External Viewer never holds one. An organization that wants different access duplicates the
    * standard role and edits the copy.
    */
-  roles: z2.array(z2.enum(MODULE_PERMISSION_DEFAULT_ROLES)).optional()
+  roles: z2.array(z2.enum(MODULE_PERMISSION_DEFAULT_ROLES)).optional(),
+  /**
+   * Keys this one takes over (a retired or renamed key). On the update that stops declaring
+   * them, every custom role still holding one is granted this key before the old one goes,
+   * so nobody loses access in the change. Standard roles follow `roles` as always.
+   */
+  replaces: z2.array(
+    z2.string().regex(
+      /^[a-z0-9][a-z0-9-]*:[a-z0-9][a-z0-9-]*$/,
+      "must be a lowercase resource:action key"
+    )
+  ).max(20).optional()
 }).strict();
 var seedBundleSchema = z2.object({
   table: tableNameSchema,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stardeck-customer-apps/compose",
-  "version": "0.15.0",
+  "version": "0.16.0",
   "description": "Regenerates a Stardeck app's Module-rail artifacts — the six src/*.gen.ts registries and every route/endpoint stub — from src/modules/*/module.json",
   "main": "dist/index.js",
   "module": "dist/index.mjs",