-- Replace the two-state is_private flag with a three-state visibility token
-- (public / internal / private), GitLab-style. The is_private column is left in
-- place but is no longer read or written.
ALTER TABLE repos ADD COLUMN visibility TEXT NOT NULL DEFAULT 'private';
UPDATE repos SET visibility = CASE WHEN is_private THEN 'private' ELSE 'public' END;