refactor(auth): remove bot owner linkage and enforce bot-level permissions

2026-04-03 13:21:03 +00:00
parent 6998936858
commit aeb4f10fd0
12 changed files with 104 additions and 43 deletions
@@ -363,8 +363,8 @@ curl -X POST "http://localhost:8000/auth/bots" \
  -H "Authorization: Bearer <ADMIN_TOKEN>" \
  -H "Content-Type: application/json" \
  -d '{
-    "owner_user_id": "user-1",
    "name": "market-bot",
+    "permission": "trade-write",
    "description": "External trading bot"
  }'
 ```
@@ -374,8 +374,8 @@ Response 201:
 ```json
 {
  "id": "bot-1",
-  "owner_user_id": "user-1",
  "name": "market-bot",
+  "permission": "trade-write",
  "description": "External trading bot",
  "is_active": true,
  "created_at": "2026-04-03T00:00:00Z",
@@ -466,8 +466,8 @@ Response 200:
 ```json
 {
  "id": "bot-1",
-  "owner_user_id": "user-1",
  "name": "market-bot",
+  "permission": "trade-write",
  "description": "External trading bot",
  "is_active": false,
  "created_at": "2026-04-03T00:00:00Z",