sprint10+11: AI permission filter + API token scopes + merge check + owner transfer service + auto-transfer on deactivation

2026-07-29 02:37:51 +02:00
parent b7ccd9e6c3
commit 2c14368b90
7 changed files with 234 additions and 9 deletions
@@ -43,7 +43,7 @@ class ApiToken(Base, TenantMixin):
    )
    token_hash: Mapped[str] = mapped_column(String(255), nullable=False, index=True)
    name: Mapped[str] = mapped_column(String(200), nullable=False)
-    scopes: Mapped[list] = mapped_column(JSONB, nullable=False)
+    scopes: Mapped[list[str]] = mapped_column(JSONB, nullable=False, default=list)
    expires_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True), nullable=True)
    last_used_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True), nullable=True)
    created_at: Mapped[datetime] = mapped_column(