+j2 <%SrSSKrSSKrSSKrSSKrSSKJr SSKJr SSK J r SSK J r SSK JrJrJrJrJr SSKJr SS KJr SS KJrJr \R4"S 5rS r\Vs1sHoR;5iM snr\R>"S 5r S#S\ \!S\ \!S\"4Sjjr#S\S\$\ \!\ \!44Sjr%S$S\S\"S\&S\$\"\'44Sjjr(S\S\!S\&4Sjr)S\"4Sjr*S\"4Sjr+Sq,/r-\.\$\!\"4\/S'S%Sjr0S\"4Sjr1S\"4S jr2S\"4S!jr3S%S"jr4gs snf)&u_ cleanup_service.py — mantenimiento periódico. 1. Suppression automatique des photos (RGPD mineurs) : images plus vieilles que la rétention DE L'ÉCOLE de la famille (réglage « rgpd_days », modifiable dans l'admin ; défaut PHOTO_RETENTION_DAYS) dans PHOTOS_DIR (layout `photos/{école}/{photographe}/{CODE}/` et l'ancien `photos/{CODE}/`), la corbeille et INCOMING_DIR. Chaque suppression est tracée (audit « critical ») ; au-delà de RGPD_ALERT_THRESHOLD fichiers, une alerte e-mail part. 2. Aperçus (filigrane / visages floutés) et cache `.protect/` orphelins : on ne garde jamais une copie d'une photo qui n'existe plus. 3. Corbeille : purgée après TRASH_RETENTION_DAYS, sans jamais dépasser la rétention RGPD de l'école. 4. Commandes jamais payées : annulées après UNPAID_ORDER_TTL_HOURS (le PaymentIntent Stripe est annulé) — sauf si Stripe indique qu'il est payé : la commande est alors enregistrée comme payée (voir expire_unpaid_orders). 5. Purge des compteurs de rate limiting périmés. Tourne une fois au démarrage puis toutes les 24 h (sur le worker leader). N) timedelta)Path)Optional)config) PHOTOS_DIR INCOMING_DIR THUMBS_DIRPHOTO_RETENTION_DAYSIMAGE_EXTENSIONS)get_db)utcnow) audit_service alert_servicezmeeconic.cleanupQz5^(?P.+?)\.(?:wm|h[0-9a-f]{10})(?:\.\d+)?\.webp$ family_code school_idreturncSSKJn U(a[URU5S5$U(aUR U5$[$![ a&n[ RSXU5 SnA[$SnAff=f)uaRétention de l'école (directe, ou celle de la famille) ; à défaut, la valeur globale du .env.r)school_service rgpd_daysz+Per-school retention unreadable (%s/%s): %sN) servicesrint get_settingsretention_days_for_family Exceptionlogwarningr )rrres [D:\Ingenieria\TRABAJOS ONLINE\Projects\11- Photo School\backend\services\cleanup_service.py_retention_daysr 'sy^+ ~229=kJK K !;;KH H   ^ A9[\]] ^s)A A A;A66A;relcURnU(dgUSS:Xa1[U5S:a USUS4$[U5S:aUSOSS4$[U5S:a USUS4$SUS4$) u (école, code famille) d'après le chemin relatif à PHOTOS_DIR. école/photographe/CODE/… → nouveau layout .trash/école/lot/photographe/CODE/… → corbeille CODE/… → ancien layout (l'école se déduit de la base) NNrz.trashN)partslen)r!r(s r_locater*4s IIE  Qx8'*5zQa%(#hUVWU1X]acg directory default_days by_familyclUR5(dS04$[R"5nSn0n0nURS5HnUR5(a"URR 5[ ;dM<SnU(a3[URU55nX;aUup[XS9Xh'Xhn OUn UR5RX;S-- :aCUR5 US- nU(a%US(aURUS5S-XX'MMMM [#URS5SS 9H+n U R%5(dMU R'5 M- XE4$![a"n [R!SX|5 Sn A GMWSn A ff=f![a Mnf=f) uSupprime les images trop vieilles. Si `by_family`, la rétention est celle de l'école de chaque famille. Retourne (total supprimé, {(école, famille): n}).r*Nrrrr%zSuppression impossible %s: %sTreverse)existstimerglobis_filesuffixlower _IMG_EXTSr* relative_tor statst_mtimeunlinkgetOSErrorrrsortedis_dirrmdir)r,r-r.nowdeleted per_familycachefkeyschoolfamilydaysrds r _delete_oldrNEs~     "u ))+CGJE __S !  0I =  !-- 23C!$,R :DD ?vvx  3#55 1 3q6&0nnS!& > ?   s+A E6F%6 F"FF"% F32F3 photos_dirstemcl^[U4SjUR555$![a gf=f)Nc3n># UH*oR5(dMURT:Hv M, g7fN)r7rP).0rHrPs r #_original_exists..ms#O+?a99;>166T>+?s55F)anyiterdirr@)rOrPs `r_original_existsrYks4O:+=+=+?OOO s "& 33cSn[R"5(Ga[R"S5HnUR5(dM[R UR 5nU(aURS5O URn[URR[5- n[XC5(aMUR5 US- nM [![R"S5SS9H+nUR#5(dMUR%5 M- [R"5(a[R"S5HnUR#5(dMUR'5HTnUR R)S5Sn[URU5(aM>UR5 US- nMV UR%5 M U$![a GMf=f![a GMf=f![a GM*f=f![a Mf=f![a Mf=f) ucSupprime aperçus et cache `.protect/` dont l'original n'existe plus. Retourne le nombre supprimé.rr0rPr%Tr2z.protect_heads_)r r4r6r7 _PREVIEW_REmatchnamegrouprPrparentr; ValueErrorrYr>r@rArBrCrXsplit)removedrHmrP originalsrMprotects rprune_orphan_derivativesrgrsG!!#&A99;;!!!&&)A&'1776?QVVD &)=)=j)II $I44HHJqLG' ((-t>##__&vv||I.q1'== 1  '  4 N=    #  sZ&G: H H H0$I: H H  HH H-,H-0 H>=H> IIcSSKJnJn SnUR5H>n[ [ R [USS95nX RUSU5- nM@ U$![a!n[RSU5 SnAU$SnAff=f)Nr) photo_servicerid)rzTrash purge failed: %s) rrir list_schoolsminrTRASH_RETENTION_DAYSr purge_trashrrr)rirpurgedsrLrs r purge_trashesrqs6 F1,,.Av22OaPTg4VWD //$> >F/ M 1 ,a00 M1sAA B *BB _paid_at_stripecUqgrS)_payment_reconciler)fns rset_payment_reconcilerrvsr+c R[5[[RS9- R 5n[ 5nUR SU45R5nSSS5 Sn[R(aSSK n[RUl /nWHnUSnU(aUbURRU5nUSS:XaW[RU[UR!S5=(d US 545 ["R%S US U5 MUSS :waURR'U5 URUS 5 M U(a^[ 5nUHn UR SU 45 M UR+5 SSS5 ["R-S[/U55 [/U5$!,(df  GN}=f![(a&n["R%S US Xh5 SnAGMwSnAff=f!,(df  N}=f)aCancels orders never paid after the TTL. Returns how many were cancelled. Incident behind the Stripe check: two orders were charged at Stripe (`succeeded`) but the webhook never reached us (STRIPE_WEBHOOK_SECRET empty), so this job marked them `expired`/`cancelled` and the family paid for photos that were then refused. An order is now expired only when Stripe says the PaymentIntent is NOT paid; when Stripe cannot be asked, the order is left for the next cycle rather than guessed.)hourszSELECT id, stripe_payment_intent_id FROM orders WHERE payment_status IN ('unpaid','failed') AND status='pending' AND created_at < ?Nrstripe_payment_intent_idstatus succeededamount_receivedamountuTOrder %s is paid at Stripe (%s) but was never confirmed — booking it, not expiringrjcanceledzAOrder %s left for the next cycle, Stripe could not confirm %s: %szIUPDATE orders SET status='cancelled', payment_status='expired' WHERE id=?z%d unpaid order(s) expired)r rrUNPAID_ORDER_TTL_HOURS isoformatr executefetchallSTRIPE_SECRET_KEYstripeapi_key PaymentIntentretrieverrappendrr?rrcancelrcommitinfor)) cutoffconnrowsr to_expirerpi_idpirorder_ids rexpire_unpaid_ordersrsh)F)FGG R R TF T|| bdjclnnvnvnx   F 11I ,- V' ))2259h<;.#**E3rvv>O7P7`TVW_T`3a+bcKK vxyz~xBGHh<:-((//6 4!  X% hksjuv& KKM -s9~> y>C ,  _abcgahjos  Xs6"G,A9G%'$G%4-H G"% H/HH H&cx# Sn[(az[R5up[R"SU3SSUS35 [c[ R SU5 M_[ X5IShvN US- n[(aMzU$N![an[ R S XS S 9 SnAN5SnAff=f7f) zZRuns the webhook's booking for every order found paid at Stripe by `expire_unpaid_orders`.rzstripe-unconfirmed:z-Stripe payment was never confirmed by webhookzpayment_intent=z succeeded at Stripe but the order was still unpaid. Check that the webhook endpoint is configured and STRIPE_WEBHOOK_SECRET is set.NuRNo payment reconciler registered — %s stays unpaid until the webhook is replayedr%zBooking %s failed: %sTexc_info)rrpoprnotifyrtrerrorr)bookedrr}rs rbook_orders_paid_at_stripers F /'++- !% )+ZeW%G H I  & IIjlq r  H%e4 4 4 aKF / M 5 H II-u$I G HsHA"B:%B3B 4 B= B: B: B B7B2-B:2B77B:c [[[SS9up[[[ 55up#X-nU(a[ R SU5 UR5HCuupVnSSKJ n U=(d U"U5n [R"SSUU[ XiS9S .S U S 9 ME U(a#[R"SS S U[ 5S .S S 9 U[R:a=[R "SSUS3SUS[RS[#U5S35 S[$4S[&4S[(44H upU "5 M SSKJn U "5 U$![a Un Nf=f![a!n [ R+SX5 Sn A MYSn A ff=f![a!n [ R1SU 5 Sn A U$Sn A ff=f)NT)r.z0GDPR: %d photo(s) deleted (per-school retention)r)school_id_for_familyzphoto.rgpd_deleterKr1) files_deletedretention_dayscritical) resource_type resource_iddetailsseverityrincoming)rrrrzrgpd-mass-deletezSuppression RGPD massive : z photosu%Le nettoyage automatique a supprimé z photos (seuil d'alerte u). Familles touchées : uH. Vérifiez le journal d'audit et la rétention (rgpd_days) des écoles.uaperçus orphelins corbeilleucommandes impayéeszCleanup '%s' failed: %s) purge_oldzRate-limit purge failed: %s)rNrr rr rritemsservices.school_servicerrr log_eventrRGPD_ALERT_THRESHOLDrrr)rgrqrrcore.rate_limitrr)photos_deletedrFincoming_deleted_rErJrKnrsidr^rurrs rrun_oncers!,Z9MY]!^N%lO4EF/G CWM *//1!  D808C  xV&'?W];mn3 2 zz&6/J[\gq s,,, "=gYg N3G9rsr" dd 1 *+ 0 1 01WWY 0 1 jjQR   #  (3-  [^  % x} <="#4#s#t#PUVY[_V_P`#LST)#)X s )+eCHo&+ )c)X#()#)X /} 2s&D