Changeset 0.24.2 (#158)

docs/ROADMAP.md

@@ -1430,15 +1430,15 @@ group infrastructure.
 Depends on: auth abstraction (v0.24.0). Parallel to v0.24.1.
 See [DESIGN-0.24.0.md](DESIGN-0.24.0.md) §v0.24.2 for full spec.
 
-- [ ] Permission constants (`domain.action` convention, code-level enum)
-- [ ] `permissions` JSONB column on groups
-- [ ] `ResolvePermissions()`: union of group permissions + `DefaultUserPerms`
-- [ ] `RequirePermission()` middleware
-- [ ] Token budgets: per-group daily/monthly ceilings, enforced in completion handler
-- [ ] Model access control: per-group model allowlists
-- [ ] Admin UI: permission checklist, budget fields, model picker on group edit
-- [ ] `DefaultUserPerms` override via `global_config` key `default_permissions`
-- [ ] Migration 020: permissions, budgets, allowed_models on groups
+- [x] Permission constants (`domain.action` convention, code-level enum)
+- [x] `permissions` JSONB column on groups
+- [x] `ResolvePermissions()`: union of group permissions + Everyone group
+- [x] `RequirePermission()` middleware
+- [x] Token budgets: per-group daily/monthly ceilings, enforced in completion handler
+- [x] Model access control: per-group model allowlists
+- [x] Admin UI: permission checklist, budget fields, model picker on group edit
+- [x] Everyone group supersedes `DefaultUserPerms` (seeded in migration, editable in admin)
+- [x] Migration 020: permissions, budgets, allowed_models on groups
 
 ---