Sprint 4: PartnerBookingListView for partner-scoped booking list

- admin_api/views.py: PartnerBookingListView — filters Booking rows by
  partner via ticket_meta__event__partner, supports search (booking_id,
  user email/name), payment_status filter, event_id filter, pagination
  with page_size bound [1,200]
- admin_api/urls.py: wire partners/me/bookings/ endpoint

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

admin_api/urls.py

@@ -30,6 +30,11 @@ urlpatterns = [
     path('partners/me/events/', views.PartnerMeEventsView.as_view(), name='partner-me-events'),
     path('partners/me/events/<int:pk>/', views.PartnerMeEventDetailView.as_view(), name='partner-me-event-detail'),
     path('partners/me/events/<int:pk>/duplicate/', views.PartnerMeEventDuplicateView.as_view(), name='partner-me-event-duplicate'),
+    # Partner-Me: ticket tiers (Sprint 3)
+    path('partners/me/events/<int:event_pk>/tiers/', views.PartnerMeEventTiersView.as_view(), name='partner-me-event-tiers'),
+    path('partners/me/events/<int:event_pk>/tiers/<int:tier_pk>/', views.PartnerMeEventTierDetailView.as_view(), name='partner-me-event-tier-detail'),
+    # Partner-Me: bookings (Sprint 4)
+    path('partners/me/bookings/', views.PartnerBookingListView.as_view(), name='partner-me-bookings'),
     path('users/metrics/', views.UserMetricsView.as_view(), name='user-metrics'),
     path('users/', views.UserListView.as_view(), name='user-list'),
     path('users/<int:pk>/', views.UserDetailView.as_view(), name='user-detail'),

admin_api/views.py

@@ -3719,3 +3719,269 @@ class PartnerMeEventDuplicateView(APIView):
         e.event_status = 'created'  # always draft
         e.save()
         return Response(_serialize_event_detail(e), status=201)
+
+
+# ===========================================================================
+# Partner-Me Ticket Tiers (Sprint 3)
+# ===========================================================================
+
+def _serialize_tier(tt, sold=0):
+    """Serialize TicketType (tier) for partner portal."""
+    capacity = tt.ticket_meta.maximum_quantity if tt.ticket_meta_id else tt.ticket_type_quantity
+    return {
+        'id': str(tt.id),
+        'name': tt.ticket_type,
+        'description': tt.ticket_type_description or '',
+        'price': str(tt.price),
+        'capacity': tt.ticket_type_quantity,
+        'totalCapacity': capacity,
+        'sold': sold,
+        'isActive': tt.is_active,
+        'isOffer': tt.is_offer,
+        'offerPrice': str(tt.offer_price) if tt.is_offer else None,
+    }
+
+
+class PartnerMeEventTiersView(APIView):
+    """
+    GET  /api/v1/partners/me/events/{event_pk}/tiers/ — list tiers
+    POST /api/v1/partners/me/events/{event_pk}/tiers/ — create tier
+    """
+    permission_classes = [IsAuthenticated]
+
+    def _get_event_and_meta(self, request, event_pk):
+        from events.models import Event
+        from bookings.models import TicketMeta
+        from django.shortcuts import get_object_or_404
+
+        partner, err = _require_partner(request)
+        if err:
+            return None, None, None, err
+
+        event = get_object_or_404(Event, pk=event_pk)
+        if event.partner_id != partner.id:
+            return None, None, None, Response(
+                {'error': 'Event not found or access denied.'}, status=404
+            )
+
+        # Get or create the event's single TicketMeta
+        meta, _ = TicketMeta.objects.get_or_create(
+            event=event,
+            defaults={
+                'ticket_name': event.title or 'Tickets',
+                'maximum_quantity': 0,
+                'available_quantity': 0,
+            },
+        )
+        return partner, event, meta, None
+
+    def get(self, request, event_pk):
+        from bookings.models import TicketType, Booking
+        from django.db.models import Sum
+
+        _partner, _event, meta, err = self._get_event_and_meta(request, event_pk)
+        if err:
+            return err
+
+        tiers = TicketType.objects.filter(ticket_meta=meta).order_by('id')
+
+        # Aggregate sold count per tier
+        sold_map = dict(
+            Booking.objects.filter(ticket_meta=meta)
+            .values('ticket_type_id')
+            .annotate(total=Sum('quantity'))
+            .values_list('ticket_type_id', 'total')
+        )
+        return Response([_serialize_tier(t, sold_map.get(t.id, 0)) for t in tiers])
+
+    def post(self, request, event_pk):
+        from bookings.models import TicketType
+
+        _partner, _event, meta, err = self._get_event_and_meta(request, event_pk)
+        if err:
+            return err
+
+        data = request.data
+        name = (data.get('name') or '').strip()
+        if not name:
+            return Response({'error': 'name is required'}, status=400)
+
+        try:
+            price = float(data.get('price', 0))
+        except (ValueError, TypeError):
+            return Response({'error': 'price must be numeric'}, status=400)
+
+        try:
+            capacity = int(data.get('capacity', 0))
+        except (ValueError, TypeError):
+            return Response({'error': 'capacity must be integer'}, status=400)
+
+        tt = TicketType.objects.create(
+            ticket_meta=meta,
+            ticket_type=name,
+            ticket_type_description=data.get('description', ''),
+            ticket_type_quantity=capacity,
+            price=price,
+            is_active=True,
+        )
+        # Update meta total capacity
+        from django.db.models import Sum as _Sum
+        total = TicketType.objects.filter(ticket_meta=meta).aggregate(
+            total=_Sum('ticket_type_quantity')
+        )['total'] or 0
+        meta.maximum_quantity = total
+        meta.available_quantity = total
+        meta.save(update_fields=['maximum_quantity', 'available_quantity'])
+
+        return Response(_serialize_tier(tt), status=201)
+
+
+class PartnerMeEventTierDetailView(APIView):
+    """
+    PATCH  /api/v1/partners/me/events/{event_pk}/tiers/{tier_pk}/
+    DELETE /api/v1/partners/me/events/{event_pk}/tiers/{tier_pk}/
+    """
+    permission_classes = [IsAuthenticated]
+
+    def _get_tier(self, request, event_pk, tier_pk):
+        from events.models import Event
+        from bookings.models import TicketType
+        from django.shortcuts import get_object_or_404
+
+        partner, err = _require_partner(request)
+        if err:
+            return None, err
+
+        event = get_object_or_404(Event, pk=event_pk)
+        if event.partner_id != partner.id:
+            return None, Response({'error': 'Event not found or access denied.'}, status=404)
+
+        tt = get_object_or_404(TicketType, pk=tier_pk, ticket_meta__event=event)
+        return tt, None
+
+    def patch(self, request, event_pk, tier_pk):
+        tt, err = self._get_tier(request, event_pk, tier_pk)
+        if err:
+            return err
+
+        data = request.data
+        updated = []
+        if 'name' in data:
+            tt.ticket_type = (data['name'] or '').strip()
+            updated.append('ticket_type')
+        if 'description' in data:
+            tt.ticket_type_description = data['description'] or ''
+            updated.append('ticket_type_description')
+        if 'price' in data:
+            try:
+                tt.price = float(data['price'])
+            except (ValueError, TypeError):
+                return Response({'error': 'price must be numeric'}, status=400)
+            updated.append('price')
+        if 'capacity' in data:
+            try:
+                tt.ticket_type_quantity = int(data['capacity'])
+            except (ValueError, TypeError):
+                return Response({'error': 'capacity must be integer'}, status=400)
+            updated.append('ticket_type_quantity')
+        if 'isActive' in data:
+            tt.is_active = bool(data['isActive'])
+            updated.append('is_active')
+        if updated:
+            tt.save(update_fields=updated)
+        return Response(_serialize_tier(tt))
+
+    def delete(self, request, event_pk, tier_pk):
+        tt, err = self._get_tier(request, event_pk, tier_pk)
+        if err:
+            return err
+        tt.delete()
+        return Response({'status': 'deleted'}, status=204)
+
+
+# ============================================================
+# Sprint 4 — Partner Bookings
+# ============================================================
+
+class PartnerBookingListView(APIView):
+    """
+    GET /api/v1/partners/me/bookings/
+    Query params: search, status (payment_status), event_id, page, page_size
+    """
+    permission_classes = [IsAuthenticated]
+
+    def get(self, request):
+        from bookings.models import Booking
+        from django.db.models import Q
+
+        partner, err = _require_partner(request)
+        if err:
+            return err
+
+        qs = Booking.objects.filter(
+            ticket_meta__event__partner=partner
+        ).select_related(
+            'user', 'ticket_meta__event', 'ticket_type'
+        ).order_by('-created_date', '-id')
+
+        # Search: booking_id, user email, user first/last name
+        search = request.query_params.get('search', '').strip()
+        if search:
+            qs = qs.filter(
+                Q(booking_id__icontains=search) |
+                Q(user__email__icontains=search) |
+                Q(user__first_name__icontains=search) |
+                Q(user__last_name__icontains=search)
+            )
+
+        # Filter by payment_status
+        status = request.query_params.get('status', '').strip()
+        if status:
+            qs = qs.filter(payment_status=status)
+
+        # Filter by event_id
+        event_id = request.query_params.get('event_id', '').strip()
+        if event_id:
+            qs = qs.filter(ticket_meta__event_id=event_id)
+
+        # Pagination
+        try:
+            page_size = max(1, min(int(request.query_params.get('page_size', 20)), 200))
+        except (ValueError, TypeError):
+            page_size = 20
+        try:
+            page = max(1, int(request.query_params.get('page', 1)))
+        except (ValueError, TypeError):
+            page = 1
+
+        total = qs.count()
+        start = (page - 1) * page_size
+        bookings = qs[start:start + page_size]
+
+        results = []
+        for b in bookings:
+            user = b.user
+            customer_name = f"{user.first_name} {user.last_name}".strip() or user.username
+            event = b.ticket_meta.event if b.ticket_meta_id else None
+            results.append({
+                'id': str(b.id),
+                'bookingId': b.booking_id or f'BKG-{b.id}',
+                'customerName': customer_name,
+                'customerEmail': user.email,
+                'eventTitle': event.title if event else '—',
+                'eventId': str(event.id) if event else None,
+                'ticketType': b.ticket_type.ticket_type if b.ticket_type_id else '—',
+                'quantity': b.quantity,
+                'amount': str(b.price),
+                'totalAmount': str(b.price * b.quantity),
+                'paymentStatus': b.payment_status,
+                'transactionId': b.transaction_id or '',
+                'createdDate': b.created_date.isoformat() if b.created_date else None,
+            })
+
+        return Response({
+            'count': total,
+            'page': page,
+            'pageSize': page_size,
+            'results': results,
+        })