1756fb92 · zzmq.dev@gmail.com/zz
Commit
1756fb92abb60391ffe5d61a9a12367c81c572cc
Rename reader RBAC role to viewer Direct instruction; contributor stays contributor. repo_roles.role has a DB-enforced CHECK constraint (SQLite can't ALTER a CHECK), so migration 0010 renames+recreates the table and translates any existing 'reader' rows to 'viewer' rather than dropping the cache -- unlike ladder_index (migration 0009), there's no bulk-rebuild function for repo_roles, so data had to be preserved, not just regenerated. Confirmed live: no repo ever had an actual 'reader' grant (D1 cache showed only 'owner' rows), so the source-of-truth roles.json files on each repo's zz-meta branch never drifted from this. Updates RbacRole, RBAC_RANK, repoRoleFor's default, both literal <select> option lists, ROLE_BADGE_VARIANT, and the CLI's role-grant description text. engine/types.ts/roles.ts deliberately untouched -- confirmed dead code, zero live callers.
Troy Howard <thoward37@gmail.com> -- 2026-10-13T06:37:43.000Z