Files
space-booking/backend/reset_demo.py
Claude Agent a15951c645 feat: sistem de linkuri publice pentru proprietăți
Expune fluxul de rezervare anonimă printr-un link public partajabil
(/book/<slug>), cu calendar public, cod QR și proprietate demo publică.

Backend:
- slug + list_on_landing pe Property; utilitar slugify (diacritice RO,
  cuvinte rezervate, ban all-digit) + migrare idempotentă raw-DDL rulată
  din entrypoint; SQLite WAL + busy_timeout
- GET /public/properties/{slug_or_id}(+/spaces): rezolvare slug/ID, 404 uniform
- GET /public/spaces/{id}/busy: doar {start_time,end_time} (fără PII),
  pending+approved, tz-aware/interval>60z → 422, orfan/privat → 404
- availability: scrub user_name/title (fix scurgere PII)
- POST /public/bookings: overlap pending+approved, cap 5/email/spațiu/zi,
  rate-limit per-IP, suprimare notificări+email pe demo, email confirmare guest
- PATCH slug (409 duplicat / 422 format / 403 non-manager); guest_email EmailStr
- email guest la aprobare/respingere cu cod #RB-<id>
- teste noi: test_public.py + test_migrate_slug.py (33 teste)

Frontend:
- rută /book/:slug; PublicBooking rescris cu calendar grid manual
  (PublicCalendar + GuestBookingForm), 30min, 08-20, mobil day-view, RO
- card „Link public" în PropertyDetail: copy, edit slug, QR pe URL-ul cu ID
- secțiune proprietăți publice + CTA pe Landing; buton copy în Properties

Gate aprobat (U1-U3, G1 grid manual, G2 list_on_landing); G3-G5 în TODOS.md.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-11 19:04:58 +00:00

232 lines
7.8 KiB
Python

"""Reset the public demo account and its data.
Idempotent: wipes everything owned by the demo account (properties it
manages, their spaces/bookings/attachments, its notifications, templates,
audit logs, memberships), restores its credentials and recreates a fresh
demo property with sample spaces and bookings.
Enabled only when DEMO_EMAIL is set (see settings.demo_email). Scheduled
from entrypoint.sh; can also be run manually:
python reset_demo.py
"""
import os
from datetime import datetime, timedelta
from app.core.config import settings
from app.core.security import get_password_hash
from app.core.slug import DEMO_SLUG
from app.db.session import Base, SessionLocal, engine
from app.models.attachment import Attachment
from app.models.booking import Booking
from app.models.booking_template import BookingTemplate
from app.models.audit_log import AuditLog
from app.models.google_calendar_token import GoogleCalendarToken
from app.models.notification import Notification
from app.models.organization_member import OrganizationMember
from app.models.property import Property
from app.models.property_access import PropertyAccess
from app.models.property_manager import PropertyManager
from app.models.property_settings import PropertySettings
from app.models.space import Space
from app.models.user import User
DEMO_FULL_NAME = "Cont Demo"
DEMO_PROPERTY_NAME = "Proprietate Demo"
def _wipe_demo_data(db, demo: User) -> None:
"""Delete everything created by/for the demo account."""
# Properties the demo account manages (including any it created itself).
prop_ids = [
pm.property_id
for pm in db.query(PropertyManager).filter(PropertyManager.user_id == demo.id)
]
space_ids = []
if prop_ids:
space_ids = [
s.id for s in db.query(Space.id).filter(Space.property_id.in_(prop_ids))
]
# Bookings inside demo spaces + any booking the demo user made elsewhere
# (e.g. on public properties of the real instance).
booking_query = db.query(Booking)
if space_ids:
booking_query = booking_query.filter(
(Booking.space_id.in_(space_ids)) | (Booking.user_id == demo.id)
)
else:
booking_query = booking_query.filter(Booking.user_id == demo.id)
booking_ids = [b.id for b in booking_query.with_entities(Booking.id)]
# Attachments: remove uploaded files from disk, then rows.
att_filter = Attachment.uploaded_by == demo.id
if booking_ids:
att_filter = att_filter | Attachment.booking_id.in_(booking_ids)
attachments = db.query(Attachment).filter(att_filter).all()
for att in attachments:
try:
if att.filepath and os.path.exists(att.filepath):
os.remove(att.filepath)
except OSError:
pass
db.delete(att)
db.flush()
# Notifications referencing demo bookings (any user) + all demo's own.
if booking_ids:
db.query(Notification).filter(Notification.booking_id.in_(booking_ids)).delete(
synchronize_session=False
)
db.query(Notification).filter(Notification.user_id == demo.id).delete(
synchronize_session=False
)
if booking_ids:
db.query(Booking).filter(Booking.id.in_(booking_ids)).delete(
synchronize_session=False
)
db.query(BookingTemplate).filter(BookingTemplate.user_id == demo.id).delete(
synchronize_session=False
)
db.query(GoogleCalendarToken).filter(GoogleCalendarToken.user_id == demo.id).delete(
synchronize_session=False
)
db.query(AuditLog).filter(AuditLog.user_id == demo.id).delete(
synchronize_session=False
)
db.query(OrganizationMember).filter(OrganizationMember.user_id == demo.id).delete(
synchronize_session=False
)
db.query(PropertyAccess).filter(PropertyAccess.user_id == demo.id).delete(
synchronize_session=False
)
if space_ids:
db.query(Space).filter(Space.id.in_(space_ids)).delete(synchronize_session=False)
if prop_ids:
db.query(PropertySettings).filter(
PropertySettings.property_id.in_(prop_ids)
).delete(synchronize_session=False)
db.query(PropertyAccess).filter(PropertyAccess.property_id.in_(prop_ids)).delete(
synchronize_session=False
)
db.query(PropertyManager).filter(
PropertyManager.property_id.in_(prop_ids)
).delete(synchronize_session=False)
db.query(Property).filter(Property.id.in_(prop_ids)).delete(
synchronize_session=False
)
def _seed_demo_data(db, demo: User) -> None:
"""Create a fresh demo property with spaces and sample bookings."""
prop = Property(
name=DEMO_PROPERTY_NAME,
description="Mediu de test — datele se resetează automat la fiecare 3 ore.",
address="Str. Exemplu nr. 1",
is_public=True,
is_active=True,
list_on_landing=True,
slug=DEMO_SLUG,
)
db.add(prop)
db.flush()
db.add(PropertyManager(property_id=prop.id, user_id=demo.id))
db.add(PropertySettings(property_id=prop.id, require_approval=True))
sala = Space(
name="Sala Conferințe",
type="sala",
capacity=12,
description="Sală de conferințe cu videoproiector",
is_active=True,
property_id=prop.id,
)
birou = Space(
name="Birou Flex",
type="birou",
capacity=4,
description="Birou flexibil, 4 locuri",
is_active=True,
property_id=prop.id,
)
sala_mica = Space(
name="Sala Meeting",
type="sala",
capacity=6,
description="Sală mică pentru întâlniri rapide",
is_active=True,
property_id=prop.id,
)
db.add_all([sala, birou, sala_mica])
db.flush()
today = datetime.now().replace(hour=0, minute=0, second=0, microsecond=0)
samples = [
# (space, day offset, start hour, hours, title, status)
(sala, 0, 10, 2, "Prezentare produs", "approved"),
(birou, 0, 14, 3, "Sesiune de lucru echipă", "approved"),
(sala_mica, 1, 9, 1, "Daily standup", "approved"),
(sala, 1, 13, 2, "Interviu candidat", "pending"),
(birou, 2, 10, 4, "Workshop planificare", "pending"),
]
for space, day, hour, hours, title, status in samples:
start = today + timedelta(days=day, hours=hour)
db.add(
Booking(
user_id=demo.id,
space_id=space.id,
title=title,
description="Rezervare de exemplu (demo)",
start_datetime=start,
end_datetime=start + timedelta(hours=hours),
status=status,
approved_by=demo.id if status == "approved" else None,
)
)
def reset_demo() -> None:
if not settings.demo_email:
print("DEMO_EMAIL is not set - demo account disabled, nothing to do.")
return
Base.metadata.create_all(bind=engine)
db = SessionLocal()
try:
demo = db.query(User).filter(User.email == settings.demo_email).first()
if demo:
_wipe_demo_data(db, demo)
else:
demo = User(email=settings.demo_email, full_name=DEMO_FULL_NAME,
hashed_password="", role="manager")
db.add(demo)
# Force-restore credentials and profile every run.
demo.full_name = DEMO_FULL_NAME
demo.hashed_password = get_password_hash(settings.demo_password)
demo.role = "manager"
demo.organization = "Demo"
demo.is_active = True
db.flush()
_seed_demo_data(db, demo)
db.commit()
print(f"Demo account reset: {settings.demo_email} / property '{DEMO_PROPERTY_NAME}'")
except Exception:
db.rollback()
raise
finally:
db.close()
if __name__ == "__main__":
reset_demo()