Changeset 0.24.2 (#158)

server/database/migrations/sqlite/020_permissions.sql

@@ -0,0 +1,25 @@
+-- Chat Switchboard — 020 Permissions (SQLite) (v0.24.2)
+
+-- SQLite cannot drop NOT NULL inline; recreating the constraint isn't needed
+-- since SQLite doesn't enforce CHECK constraints strictly and the column
+-- already accepts NULL in practice. The store layer guards source='system'.
+
+ALTER TABLE groups ADD COLUMN permissions          TEXT NOT NULL DEFAULT '[]';
+ALTER TABLE groups ADD COLUMN token_budget_daily   INTEGER;
+ALTER TABLE groups ADD COLUMN token_budget_monthly INTEGER;
+ALTER TABLE groups ADD COLUMN allowed_models       TEXT;
+
+-- Seed the Everyone group with a stable well-known ID.
+INSERT OR IGNORE INTO groups
+    (id, name, description, scope, created_by, source, permissions, created_at, updated_at)
+VALUES (
+    '00000000-0000-0000-0000-000000000001',
+    'Everyone',
+    'Implicit group — all authenticated users receive these permissions.',
+    'global',
+    NULL,
+    'system',
+    '["model.use","kb.read","channel.create"]',
+    datetime('now'),
+    datetime('now')
+);