// Player · Teams — self-scoped reads. Neither handler takes an identity from the // caller; both use req.user.id, which the tier's requireAuth has already proved. const teams = require('../../../model/teams/teams.model') const log = require('../../../utils/logger')('teams') async function listMine(req, res) { try { return res.json(await teams.listForUser(req.user.id)) } catch (err) { log.error('player teams: list failed', { message: err.message }) return res.status(500).json({ message: 'Internal Server Error' }) } } async function getMyAccess(req, res) { try { const resolved = await teams.accessForUser(req.params.slug, req.user.id) if (!resolved) return res.status(404).json({ message: 'Team not found' }) return res.json(resolved) } catch (err) { log.error('player teams: access failed', { message: err.message }) return res.status(500).json({ message: 'Internal Server Error' }) } } module.exports = { listMine, getMyAccess }