-- Operator-issued entry (2026-07-01): when the physical entry button is broken, an operator
-- may ISSUE an entry ticket (a flagged mint, gated on real vehicle presence — radar + camera).
-- New permission `session:create` in @parking/shared. The built-in `admin` role gets ALL
-- permissions in code (auth.ts ADMIN_PERMS), so no seed row is needed for it. This grants the
-- default `operator` role the ability to issue — an admin can revoke it per-role in the Roles
-- UI (it's data). Idempotent via the UNIQUE(role_id, permission) index.
-- See wiki/concepts/operator-issued-entry.md.
INSERT OR IGNORE INTO `role_permissions` (`role_id`, `permission`) VALUES
	('operator','session:create');