Update app.py

app.py

@@ -37,7 +37,7 @@ async def create_game(request: Request):
         "currentChallenge": None,
         "pendingCardLoss": None,
         "votes": [],
-        "permissions": {player_name: True}  # default permission True for the creator
+        "permissions": {player_name: {"steal": True, "gain": True}
     }
 
     return {"success": True, "message": "Game created successfully!"}
@@ -94,14 +94,16 @@ async def handle_action(request: Request):
         return {"success": True, "challenge": game.get("challenge", None)}
 
     if action == 'steal':
-        game["challenge"] = {
-            "action": 'steal',
-            "challenger": player,
-            "target": target,
-            "challengeType": 'steal',
-            "status": 'pending'
-        }
-        return {"success": True, "message": f"Steal initiated by {player} targeting {target}. Awaiting response from {target}."}
+        if game["permissions"].get(player, {}).get("steal", True):
+            game["challenge"] = {
+                "action": 'steal',
+                "challenger": player,
+                "target": target,
+                "challengeType": 'steal',
+                "status": 'pending'
+            }
+            game["permissions"][player]["steal"] = False
+            return {"success": True, "message": f"Steal initiated by {player} targeting {target}. Awaiting response from {target}."}
 
     if action == 'challengeResponse':
         if not game.get("challenge"):
@@ -144,10 +146,10 @@ async def handle_action(request: Request):
         for p in game["players"]:
             if p["name"] == player:
                 player_found = True
-                if not game["permissions"].get(player, False):
+                if game["permissions"].get(player, {}).get("gain", True):
                     raise HTTPException(status_code=403, detail="You already took coins, and cannot take income.")
                 p["coins"] += 1
-                game["permissions"][player] = False  # set permission to false after taking income
+                game["permissions"][player]["gain"] = False
                 return {"success": True, "message": f"Player {player} now has {p['coins']} coins."}
         if not player_found:
             raise HTTPException(status_code=404, detail="Player not found in the game.")
@@ -166,7 +168,8 @@ async def join_game(request: Request):
 
     game["players"].append(player_name)
     # Add the new player's permission as True in the dictionary
-    game["permissions"][player_name] = True
+    game["permissions"][player_name]["steal"] = True
+    game["permissions"][player_name]["gain"] = True
     return {"success": True, "message": "Player joined successfully!"}
 
 @app.put("/api/startGame")