# `Gamend.Accounts.Scope`
[🔗](https://github.com/appsinacup/gamend/blob/v1.0.7/lib/gamend/accounts/scope.ex#L1)

Defines the scope of the caller to be used throughout the app.

The scope carries only the caller's `user_id`, never a cached `%User{}`
snapshot: a scope can outlive the request that built it (a socket stays open
for hours), so the user is always resolved fresh via `user/1`, which reads
through `Gamend.Accounts.get_user/1`'s cache. This keeps mutable state
(lobby_id, online, is_admin) current instead of frozen at connect time.

A `%Scope{}` always represents an authenticated caller — `for_user/1` returns
`nil` for an anonymous one — so a `%Scope{}` match implies a present user_id.

`authenticated_at` is a session fact (from the session token, virtual on
`User`) that cannot be re-derived from the DB row, so it is carried on the
scope and merged back onto the freshly-resolved user by `user/1` — this is
what `sudo_mode?` checks.

# `for_user`

Creates a scope for the given user, or nil when anonymous.

# `user`

Resolves the caller's user fresh (cached), with the session's
`authenticated_at` merged back on. nil if the scope is nil or the user is gone.

# `user_id`

The caller's id, or nil for a nil scope.

---

*Consult [api-reference.md](api-reference.md) for complete listing*