fix(avatar): prevent takeover loops and isolate settings

digital-avatar-app/backend/database.py

@@ -38,7 +38,7 @@ def init_db():
         ("avatars", "owner_id", "VARCHAR DEFAULT ''"),
         ("authorizations", "takeover_enabled", "BOOLEAN DEFAULT 0"),
         ("authorizations", "takeover_mode", "VARCHAR DEFAULT 'immediate'"),
-        ("authorizations", "takeover_delay_seconds", "INTEGER DEFAULT 30"),
+        ("authorizations", "takeover_delay_seconds", "INTEGER DEFAULT 180"),
         ("avatars", "share_token", "VARCHAR DEFAULT NULL"),
         ("token_account", "user_id", "VARCHAR DEFAULT ''"),
         ("token_account", "total_granted", "BIGINT DEFAULT 0"),
@@ -47,6 +47,7 @@ def init_db():
         ("token_account", "updated_at", "TIMESTAMP"),
     )
     _normalize_optional_unique_values()
+    _normalize_takeover_delays()
     _create_token_indexes()
 
 
@@ -66,6 +67,15 @@ def _normalize_optional_unique_values():
         conn.exec_driver_sql("UPDATE avatars SET share_token = NULL WHERE share_token = ''")
 
 
+def _normalize_takeover_delays():
+    with engine.begin() as conn:
+        # The old 30-second column default was never wired into the scheduler.
+        conn.exec_driver_sql(
+            "UPDATE authorizations SET takeover_delay_seconds = 180 "
+            "WHERE takeover_delay_seconds IS NULL OR takeover_delay_seconds = 30"
+        )
+
+
 def _create_token_indexes():
     with engine.begin() as conn:
         conn.exec_driver_sql(