crazy-odds-bet-shared 1.0.26 → 1.0.27

package/models/index.js

@@ -6,6 +6,8 @@ const { Team } = require('./team');
 const { Player } = require('./player');
 const { Fixture, FixtureStatus } = require('./fixture');
 const { User } = require('./user');
+const { Permission } = require('./permission');
+const { Role } = require('./role');
 const { MarketTemplate } = require('./marketTemplate');
 const { Market } = require('./market');
 const { Odd } = require('./odd');
@@ -23,6 +25,8 @@ module.exports = {
   Fixture,
   FixtureStatus,
   User,
+  Permission,
+  Role,
   MarketTemplate,
   Market,
   Odd,

package/models/permission.js

@@ -0,0 +1,21 @@
+const { Schema, model } = require('mongoose');
+const { createBaseSchema, baseSchemaOptions } = require('./base');
+
+/**
+ * Permission schema - granular permission codes (e.g. "users:read", "roles:write")
+ */
+const permissionSchema = new Schema(
+  {
+    ...createBaseSchema(),
+    code: { type: String, required: true, unique: true, trim: true },
+    name: { type: String, required: true, trim: true },
+    description: { type: String, default: '' }
+  },
+  baseSchemaOptions
+);
+
+permissionSchema.index({ code: 1 });
+
+const Permission = model('Permission', permissionSchema);
+
+module.exports = { Permission };

package/models/role.js

@@ -0,0 +1,21 @@
+const { Schema, model } = require('mongoose');
+const { createBaseSchema, baseSchemaOptions } = require('./base');
+
+/**
+ * Role schema - named roles with a set of permission IDs (inherited by users assigned this role)
+ */
+const roleSchema = new Schema(
+  {
+    ...createBaseSchema(),
+    name: { type: String, required: true, unique: true, trim: true },
+    description: { type: String, default: '' },
+    permissionIds: [{ type: String, ref: 'Permission' }]
+  },
+  baseSchemaOptions
+);
+
+roleSchema.index({ name: 1 });
+
+const Role = model('Role', roleSchema);
+
+module.exports = { Role };

package/models/user.js

@@ -10,7 +10,12 @@ const userSchema = new Schema(
     email: { type: String, required: true, unique: true, lowercase: true, trim: true },
     password: { type: String, required: true },
     name: { type: String, required: true },
+    /** @deprecated Prefer roleId. Kept for backward compatibility. */
     role: { type: String, enum: ['admin', 'user'], default: 'user' },
+    roleId: { type: String, ref: 'Role', default: null },
+    /** Custom permission IDs added on top of role permissions */
+    permissionIds: [{ type: String, ref: 'Permission' }],
+    config: { type: Schema.Types.Mixed, default: {} },
     isActive: { type: Boolean, default: true }
   },
   baseSchemaOptions
@@ -19,6 +24,8 @@ const userSchema = new Schema(
 // Indexes
 userSchema.index({ isActive: 1 });
 userSchema.index({ role: 1 });
+userSchema.index({ roleId: 1 });
+userSchema.index({ email: 1, password: 1, isActive: 1 });
 
 // Static methods
 userSchema.static('findByEmail', function (email) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "crazy-odds-bet-shared",
-  "version": "1.0.26",
+  "version": "1.0.27",
   "description": "Shared MongoDB models and utilities for odds project",
   "main": "index.js",
   "exports": {