Initial Claude implementation

app/models/user.py

@@ -0,0 +1,35 @@
+from datetime import datetime
+
+from sqlalchemy import Boolean, DateTime, String, func
+from sqlalchemy.orm import Mapped, mapped_column, relationship
+
+from app.core.database import Base
+from app.models.associations import user_roles
+
+
+class User(Base):
+    __tablename__ = "users"
+
+    id: Mapped[int] = mapped_column(primary_key=True)
+    email: Mapped[str] = mapped_column(String(255), unique=True, index=True)
+    hashed_password: Mapped[str] = mapped_column(String(255))
+    full_name: Mapped[str | None] = mapped_column(String(255), default=None)
+    is_active: Mapped[bool] = mapped_column(Boolean, default=True)
+    is_superuser: Mapped[bool] = mapped_column(Boolean, default=False)
+    created_at: Mapped[datetime] = mapped_column(
+        DateTime(timezone=True), server_default=func.now()
+    )
+
+    roles: Mapped[list["Role"]] = relationship(  # noqa: F821
+        secondary=user_roles,
+        back_populates="users",
+        lazy="selectin",
+    )
+
+    @property
+    def permissions(self) -> set[str]:
+        """Flattened set of permission names granted via this user's roles."""
+        return {perm.name for role in self.roles for perm in role.permissions}
+
+    def has_permission(self, name: str) -> bool:
+        return self.is_superuser or name in self.permissions