Changeset 0.28.0 (#172)

server/database/migrations/sqlite/002_teams.sql

@@ -1,4 +1,5 @@
 -- Chat Switchboard — 002 Teams & Access Control (SQLite)
+-- Consolidated v0.28.0
 
 CREATE TABLE IF NOT EXISTS teams (
     id          TEXT PRIMARY KEY,
@@ -17,8 +18,7 @@ CREATE TABLE IF NOT EXISTS team_members (
     id          TEXT PRIMARY KEY,
     team_id     TEXT NOT NULL REFERENCES teams(id) ON DELETE CASCADE,
     user_id     TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
-    role        TEXT NOT NULL DEFAULT 'member'
-                CHECK (role IN ('admin', 'member')),
+    role        TEXT NOT NULL DEFAULT 'member' CHECK (role IN ('admin', 'member')),
     joined_at   TEXT DEFAULT (datetime('now')),
     UNIQUE(team_id, user_id)
 );
@@ -30,22 +30,18 @@ CREATE TABLE IF NOT EXISTS groups (
     id          TEXT PRIMARY KEY,
     name        TEXT NOT NULL,
     description TEXT NOT NULL DEFAULT '',
-    scope       TEXT NOT NULL DEFAULT 'global'
-                CHECK (scope IN ('global', 'team')),
+    scope       TEXT NOT NULL DEFAULT 'global' CHECK (scope IN ('global', 'team')),
     team_id     TEXT REFERENCES teams(id) ON DELETE CASCADE,
-    created_by  TEXT NOT NULL REFERENCES users(id),
+    created_by  TEXT REFERENCES users(id),
+    source      TEXT NOT NULL DEFAULT 'manual' CHECK (source IN ('manual', 'oidc', 'system')),
+    permissions          TEXT NOT NULL DEFAULT '[]',
+    token_budget_daily   INTEGER,
+    token_budget_monthly INTEGER,
+    allowed_models       TEXT,
     created_at  TEXT DEFAULT (datetime('now')),
-    updated_at  TEXT DEFAULT (datetime('now')),
-
-    CHECK (
-        (scope = 'global' AND team_id IS NULL) OR
-        (scope = 'team' AND team_id IS NOT NULL)
-    )
+    updated_at  TEXT DEFAULT (datetime('now'))
 );
 
-CREATE UNIQUE INDEX IF NOT EXISTS idx_groups_name_scope
-    ON groups(name, COALESCE(team_id, ''));
-
 CREATE TABLE IF NOT EXISTS group_members (
     id          TEXT PRIMARY KEY,
     group_id    TEXT NOT NULL REFERENCES groups(id) ON DELETE CASCADE,
@@ -57,3 +53,14 @@ CREATE TABLE IF NOT EXISTS group_members (
 
 CREATE INDEX IF NOT EXISTS idx_group_members_group ON group_members(group_id);
 CREATE INDEX IF NOT EXISTS idx_group_members_user ON group_members(user_id);
+
+INSERT OR IGNORE INTO groups
+    (id, name, description, scope, created_by, source, permissions, created_at, updated_at)
+VALUES (
+    '00000000-0000-0000-0000-000000000001',
+    'Everyone',
+    'Implicit group — all authenticated users receive these permissions.',
+    'global', NULL, 'system',
+    '["model.use","kb.read","channel.create"]',
+    datetime('now'), datetime('now')
+);