-- 0002_wiregui_capabilities.sql
-- Add peer-specific firewall association and structured port semantics

ALTER TABLE firewall_rules ADD COLUMN peer_id TEXT REFERENCES peers(id) ON DELETE CASCADE;
ALTER TABLE firewall_rules ADD COLUMN port_range TEXT;

CREATE INDEX IF NOT EXISTS idx_firewall_peer_id ON firewall_rules(peer_id);