feat: add events app + "multi-tenants" aka multi-events

polylan_submitter/market/api.py

@@ -17,11 +17,13 @@ from market.schemas import (
 
 router = Router(tags=["market"])
 
+PREFIX = "/events/{event_path}/market"
 
-@router.get("/", response=List[MarketListSchema])
-def list_markets(request):
+
+@router.get(f"{PREFIX}/", response=List[MarketListSchema])
+def list_markets(request, event_path: str):
     """List all markets (excludes draft markets)."""
-    markets = Market.objects.exclude(status=Market.Status.DRAFT)
+    markets = Market.for_event.exclude(status=Market.Status.DRAFT)
     # Prefetch options with total_bets annotation sorted by total_bets desc, then text asc
     options_queryset = MarketOption.objects.annotate(
         total_bets=Coalesce(Sum("user_bets__amount"), 0)
@@ -30,38 +32,40 @@ def list_markets(request):
     return markets.prefetch_related(Prefetch("options", queryset=options_queryset))
 
 
-@router.get("/user/bets", response=List[UserBetSchema])
-def list_user_bets(request):
+@router.get(f"{PREFIX}/user/bets", response=List[UserBetSchema])
+def list_user_bets(request, event_path: str):
     """List all bets placed by the current user."""
     if not request.user.is_authenticated:
         raise HttpError(401, "Authentication required")
 
     return (
-        UserBet.objects.filter(user=request.user)
+        UserBet.objects.filter(user=request.user, option__market__event=request.event)
         .select_related("option__market")
         .prefetch_related("option__market__options")
     )
 
 
-@router.post("/{market_uuid}/actions/close")
-def close_market(request, market_uuid: str):
+@router.post(f"{PREFIX}/{{market_uuid}}/actions/close")
+def close_market(request, event_path: str, market_uuid: str):
     """Close a market. Admin only."""
     if not request.user.is_staff:
         raise HttpError(403, "Permission denied")
 
-    market = get_object_or_404(Market, uuid=market_uuid)
+    market = get_object_or_404(Market, uuid=market_uuid, event=request.event)
     market.status = Market.Status.CLOSED
     market.save(update_fields=["status", "updated_at"])
     return {"status": Market.Status.CLOSED}
 
 
-@router.post("/{market_uuid}/actions/resolve", response=MarketListSchema)
-def resolve_market(request, market_uuid: str, payload: ResolveMarketSchema):
+@router.post(f"{PREFIX}/{{market_uuid}}/actions/resolve", response=MarketListSchema)
+def resolve_market(
+    request, event_path: str, market_uuid: str, payload: ResolveMarketSchema
+):
     """Resolve a market with a winning option. Admin only."""
     if not request.user.is_staff:
         raise HttpError(403, "Permission denied")
 
-    market = get_object_or_404(Market, uuid=market_uuid)
+    market = get_object_or_404(Market, uuid=market_uuid, event=request.event)
     winning_option = get_object_or_404(MarketOption, uuid=payload.winning_option_uuid)
 
     if winning_option.market_id != market.id:
@@ -129,13 +133,15 @@ def resolve_market(request, market_uuid: str, payload: ResolveMarketSchema):
     return market
 
 
-@router.post("/{market_uuid}/bets", response=UserBetSchema)
-def create_bet(request, market_uuid: str, payload: UserBetCreateSchema):
+@router.post(f"{PREFIX}/{{market_uuid}}/bets", response=UserBetSchema)
+def create_bet(
+    request, event_path: str, market_uuid: str, payload: UserBetCreateSchema
+):
     """Place a bet on a market option."""
     if not request.user.is_authenticated:
         raise HttpError(401, "Authentication required")
 
-    market = get_object_or_404(Market, uuid=market_uuid)
+    market = get_object_or_404(Market, uuid=market_uuid, event=request.event)
     option = get_object_or_404(MarketOption, uuid=payload.option_uuid)
 
     if option.market_id != market.id: