copilot suggestions and public decals

Author: Saksham-Sirohi

app/eventyay/agenda/apps.py

@@ -1,7 +1,10 @@
+import logging
 from contextlib import suppress
 
 from django.apps import AppConfig
 
+LOGGER = logging.getLogger(__name__)
+
 
 class AgendaConfig(AppConfig):
     name = 'eventyay.agenda'
@@ -10,7 +13,6 @@ def ready(self):
         from .phrases import AgendaPhrases  # noqa
         from eventyay.schedule.signals import schedule_release
 
-        @schedule_release.connect
         def on_schedule_release(sender, schedule, **kwargs):
             from django.core.cache import cache
 
@@ -31,7 +33,9 @@ def on_schedule_release(sender, schedule, **kwargs):
                 from eventyay.agenda.tasks import warm_schedule_caches
                 warm_schedule_caches.apply_async(kwargs={'schedule_pk': schedule.pk}, countdown=3)
             except Exception:
-                pass
+                LOGGER.exception('Failed to enqueue warm_schedule_caches for schedule pk=%s', schedule.pk)
+
+        schedule_release.connect(on_schedule_release, dispatch_uid='agenda.on_schedule_release')
 
 
 with suppress(ImportError):

app/eventyay/agenda/tasks.py

@@ -1,6 +1,7 @@
 import json
 import logging
 
+from django.core.cache import cache
 from django_scopes import scope, scopes_disabled
 from i18nfield.utils import I18nJSONEncoder
 
@@ -9,6 +10,8 @@
 
 LOGGER = logging.getLogger(__name__)
 
+_CACHE_TTL = 600
+
 
 @app.task(name='pretalx.agenda.export_schedule_html')
 def export_schedule_html(*, event_id: int, make_zip=True):
@@ -33,15 +36,20 @@ def export_schedule_html(*, event_id: int, make_zip=True):
 
 @app.task(name='eventyay.agenda.warm_schedule_caches')
 def warm_schedule_caches(*, schedule_pk: int):
-    """Pre-build and cache non-enriched schedule JSON for the newly released schedule.
+    """Pre-build and cache schedule JSON payloads for the newly released schedule.
 
-    Called shortly after schedule_release so the first real user request hits
-    a warm cache instead of paying the full build_data cost.
-    """
-    from django.core.cache import cache
+    Warms non-enriched, enriched, and exporters caches so the first real user
+    request after a schedule publish hits a warm cache instead of paying the
+    full build_data cost.
 
+    Note: Schedule and agenda.views.utils are imported locally to break the
+    circular import chain: base.models.schedule → agenda.tasks → base.models.
+    """
+    # Local imports required to break circular dependency:
+    # base.models.schedule imports export_schedule_html from this module,
+    # so module-level imports of Schedule or agenda.views.utils create a cycle.
+    from eventyay.agenda.views.utils import build_public_schedule_exporters, escape_json_for_script
     from eventyay.base.models import Schedule
-    from eventyay.agenda.views.utils import escape_json_for_script
 
     with scopes_disabled():
         schedule = (
@@ -55,14 +63,26 @@ def warm_schedule_caches(*, schedule_pk: int):
     with scope(event=schedule.event):
         for featured in (True, False):
             try:
-                data = schedule.build_data(
-                    all_talks=False,
-                    enrich=False,
-                    include_featured_speaker_metadata=featured,
-                )
-                result = escape_json_for_script(json.dumps(data, cls=I18nJSONEncoder))
-                cache.set(f'eagenda:schedule:{schedule.pk}:{int(featured)}', result, 300)
+                non_enriched = escape_json_for_script(json.dumps(
+                    schedule.build_data(all_talks=False, enrich=False, include_featured_speaker_metadata=featured),
+                    cls=I18nJSONEncoder,
+                ))
+                cache.set(f'eagenda:schedule:{schedule.pk}:{int(featured)}', non_enriched, _CACHE_TTL)
             except Exception:
-                LOGGER.exception('Failed to warm non-enriched cache for schedule %s', schedule.pk)
+                LOGGER.exception('Failed to warm non-enriched cache for schedule %s (featured=%s)', schedule.pk, featured)
+
+            try:
+                enriched = escape_json_for_script(json.dumps(
+                    schedule.build_data(all_talks=False, enrich=True, include_featured_speaker_metadata=featured),
+                    cls=I18nJSONEncoder,
+                ))
+                cache.set(f'eagenda:enriched:{schedule.pk}:{int(featured)}', enriched, _CACHE_TTL)
+            except Exception:
+                LOGGER.exception('Failed to warm enriched cache for schedule %s (featured=%s)', schedule.pk, featured)
+
+        try:
+            build_public_schedule_exporters(schedule.event, version=schedule.version)
+        except Exception:
+            LOGGER.exception('Failed to warm exporters cache for schedule %s', schedule.pk)
 
     LOGGER.info('Pre-warmed schedule caches for schedule pk=%s version=%s', schedule.pk, schedule.version)

app/eventyay/agenda/views/schedule.py

@@ -352,7 +352,7 @@ def get_context_data(self, **kwargs):
         meta_json = escape_json_for_script(json.dumps(meta))
         ctx['schedule_meta_json'] = meta_json
         if version:
-            cache.set(meta_cache_key, meta_json, 300)
+            cache.set(meta_cache_key, meta_json, 600)
         return ctx
 
 

app/eventyay/agenda/views/utils.py

@@ -61,7 +61,7 @@ def build_enriched_schedule_json(request: HttpRequest) -> str:
     result = escape_json_for_script(json.dumps(data, cls=I18nJSONEncoder))
 
     if schedule.version:
-        cache.set(cache_key, result, 300)
+        cache.set(cache_key, result, 600)
     return result
 
 
@@ -92,7 +92,7 @@ def build_schedule_json(request: HttpRequest, schedule=None) -> str:
     result = escape_json_for_script(json.dumps(data, cls=I18nJSONEncoder))
 
     if schedule.version:
-        cache.set(cache_key, result, 300)
+        cache.set(cache_key, result, 600)
     return result
 
 
@@ -122,7 +122,7 @@ def build_talk_schedule_json(request: HttpRequest, submission_code: str) -> str:
     result = escape_json_for_script(json.dumps(data, cls=I18nJSONEncoder))
 
     if schedule.version:
-        cache.set(cache_key, result, 300)
+        cache.set(cache_key, result, 600)
     return result
 
 
@@ -186,7 +186,7 @@ def build_speaker_schedule_json(request: HttpRequest, speaker_code: str) -> str:
     result = escape_json_for_script(json.dumps(data, cls=I18nJSONEncoder))
 
     if schedule.version:
-        cache.set(cache_key, result, 300)
+        cache.set(cache_key, result, 600)
     return result
 
 
@@ -361,7 +361,7 @@ def build_public_schedule_exporters(event, version=None):
                 'qrcode_svg': str(exporter.get_qrcode()) if getattr(exporter, 'show_qrcode', False) else '',
             }
         )
-    cache.set(cache_key, result, 300)
+    cache.set(cache_key, result, 600)
     return result
 
 

app/eventyay/api/auth/permission.py

@@ -53,16 +53,16 @@ def _set_eventpermset(request, perm_holder):
             )
 
     def _has_event_permission(
-        self, request, perm_holder, required_permission, event_slug, organizer_slug=None
+        self, request, perm_holder, required_permission, event_slug, organizer_slug=None, *, allow_public_read=False
     ):
         request.event = self._resolve_event(event_slug, organizer_slug=organizer_slug)
         if not request.event:
             return False
 
         request.organizer = request.event.organizer
 
-        # Allow public access for safe methods if no specific permission is required
-        if request.method in SAFE_METHODS and not required_permission:
+        # Allow public read-only access only for endpoints that explicitly opt in.
+        if allow_public_read and request.method in SAFE_METHODS and not required_permission:
             request.eventpermset = set()
             return True
 
@@ -76,9 +76,10 @@ def _has_event_permission(
 
     def has_permission(self, request, view):
         required_permission = self._get_required_permission(request, view)
+        allow_public_read = getattr(view, 'allow_public_read', False)
 
         if not request.user.is_authenticated and not isinstance(request.auth, (Device, TeamAPIToken)):
-            if request.method not in SAFE_METHODS or required_permission:
+            if request.method not in SAFE_METHODS or required_permission or not allow_public_read:
                 return False
 
         if request.user.is_authenticated:
@@ -99,9 +100,12 @@ def has_permission(self, request, view):
                 required_permission,
                 event_slug=kwargs['event'],
                 organizer_slug=kwargs.get('organizer'),
+                allow_public_read=allow_public_read,
             ):
                 return False
         elif 'organizer' in kwargs:
+            if not request.user.is_authenticated and not isinstance(request.auth, (Device, TeamAPIToken)):
+                return False
             if not request.organizer or not perm_holder.has_organizer_permission(request.organizer, request=request):
                 return False
             if isinstance(perm_holder, User) and perm_holder.has_active_staff_session(request.session.session_key):

app/eventyay/api/views/speaker.py

@@ -125,6 +125,7 @@ class SpeakerViewSet(
     lookup_field = 'user__code__iexact'
     search_fields = ('user__fullname', 'user__email')
     endpoint = 'speakers'
+    allow_public_read = True
     filter_backends = (SpeakerSearchFilter, DjangoFilterBackend)
 
     def get_legacy_serializer_class(self):  # pragma: no cover

app/eventyay/api/views/submission.py

@@ -259,6 +259,7 @@ class SubmissionViewSet(PretalxViewSetMixin, viewsets.ModelViewSet):
     lookup_field = 'code__iexact'
     search_fields = ('title', 'speakers__fullname')
     filterset_class = SubmissionFilter
+    allow_public_read = True
     permission_map = {
         'make_submitted': 'submission.state_change_submission',
         'add_speaker': 'submission.update_submission',

app/eventyay/webapp/schedule-editor/vite.config.js

@@ -41,7 +41,7 @@ export default {
 		emptyOutDir: true,
 		manifest: 'schedule-editor-manifest.json',
 		assetsDir: '',
-		sourcemap: true,
+		sourcemap: false,
 		rollupOptions: {
 			input: 'src/main.ts',
 			output: {

app/eventyay/webapp/schedule/src/components/SessionModal.vue

@@ -43,9 +43,19 @@ dialog.pretalx-modal#session-modal(ref="modal", @click.stop="close()")
 											img(v-if="answer.question.icon && remoteApiUrl", :src="`${remoteApiUrl}questions/${answer.question.id}/icon/`", :alt="getLocalizedString(answer.question.question)", width="16", height="16")
 											span(v-else) {{ getLocalizedString(answer.question.question) }}
 								.inline-answer(v-for="answer in shortAnswers", :key="answer.id")
-									span.question
-										strong {{ getLocalizedString(answer.question.question) }}:
-									span.answer(v-if="answer.question.variant === 'file'")
+									template(v-if="answer.question.variant === 'url' && answer.answer")
+										strong.question
+											a(:href="answer.answer", target="_blank", rel="noopener noreferrer") {{ getLocalizedString(answer.question.question) }}
+									template(v-else)
+										span.question
+											strong {{ getLocalizedString(answer.question.question) }}:
+										span.answer(v-if="answer.question.variant === 'file'")
+											i.fa.fa-file-o
+											a(v-if="answer.answer_file", :href="answer.answer_file.url") {{ answer.answer_file }}
+											span(v-else) {{ t.no_file_provided }}
+										span.answer(v-else-if="answer.question.variant === 'boolean'") {{ answer.answer ? t.yes : t.no }}
+										span.answer(v-else-if="answer.answer", v-html="renderRichText(answer.answer)")
+										span.answer(v-else) {{ t.no_response }}
 						.downloads(v-if="displayResources.length > 0")
 							hr
 							h4 {{ t.downloads }}

app/eventyay/webapp/schedule/src/components/TalkDetail.vue

@@ -274,7 +274,7 @@ export default {
 			if (this.remoteApiUrl) return this.remoteApiUrl
 			if (!this.baseUrl) return null
 			try {
-				const url = new URL(this.baseUrl)
+				const url = new URL(this.baseUrl, window.location.origin)
 				const segments = url.pathname.split('/').filter(s => s.length > 0)
 				const slug = segments[segments.length - 1] || ''
 				return `${url.origin}/api/v1/events/${slug}/`