Add guest try-without-account flow for MuscleGrowthAI.

Port LaunchPad-style disposable guest sessions so visitors can explore advisors without signup, using EmailStr-safe @guests .musclegrowth.ai addresses.

Co-authored-by: Cursor <cursoragent@cursor.com>

multi_llm_chatbot_backend/app/api/routes/auth.py

@@ -15,6 +15,8 @@ from app.core.auth import (
 )
 from app.core.database import get_database
 import logging
+import secrets
+import uuid
 
 logger = logging.getLogger(__name__)
 
@@ -173,6 +175,55 @@ async def login(user_credentials: UserLogin):
             detail="Login failed"
         )
 
+
+@router.post("/guest", response_model=Token)
+async def guest_login():
+    """Create a disposable guest session so visitors can try the advisors without signing up."""
+    try:
+        db = get_database()
+        guest_id = uuid.uuid4().hex[:12]
+        # Must be a syntactically valid email: EmailStr / email-validator
+        # rejects reserved TLDs like `.local`, which previously made guest
+        # sign-in always 500.
+        email = f"guest-{guest_id}@guests.musclegrowth.ai"
+        user = User(
+            firstName="Guest",
+            lastName="Athlete",
+            email=email,
+            hashed_password=get_password_hash(secrets.token_urlsafe(32)),
+            created_at=datetime.utcnow(),
+            last_login=datetime.utcnow(),
+            is_active=True,
+            is_guest=True,
+        )
+        result = await db.users.insert_one(user.dict(by_alias=True))
+        user.id = result.inserted_id
+        await db.user_profiles.update_one(
+            {"user_id": user.id},
+            {
+                "$set": {
+                    "user_id": user.id,
+                    "updated_at": datetime.utcnow(),
+                }
+            },
+            upsert=True,
+        )
+        access_token = create_access_token(
+            data={"sub": str(user.id), "guest": True},
+            expires_delta=timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES),
+        )
+        return Token(
+            access_token=access_token,
+            token_type="bearer",
+            user=create_user_response(user),
+        )
+    except Exception as e:
+        logger.error(f"Error during guest login: {e}")
+        raise HTTPException(
+            status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
+            detail="Could not start guest session",
+        )
+
 @router.get("/me", response_model=UserResponse)
 async def get_current_user_profile(current_user: User = Depends(get_current_active_user)):
     """

multi_llm_chatbot_backend/app/core/auth.py

@@ -115,5 +115,6 @@ def create_user_response(user: User) -> UserResponse:
         researchArea=user.researchArea,
         avatarId=user.avatarId,
         created_at=user.created_at,
-        last_login=user.last_login
+        last_login=user.last_login,
+        is_guest=bool(getattr(user, "is_guest", False)),
     )

multi_llm_chatbot_backend/app/models/user.py

@@ -51,6 +51,7 @@ class User(BaseModel):
     created_at: datetime = Field(default_factory=datetime.utcnow)
     last_login: Optional[datetime] = None
     is_active: bool = True
+    is_guest: bool = False
 
 class UserUpdate(BaseModel):
     avatarId: Optional[str] = None
@@ -71,6 +72,7 @@ class UserResponse(BaseModel):
     avatarId: Optional[str] = None
     created_at: datetime
     last_login: Optional[datetime] = None
+    is_guest: bool = False
 
 class ChatSession(BaseModel):
     model_config = ConfigDict(

multi_llm_chatbot_backend/app/tests/unit/test_account_management.py

@@ -16,6 +16,7 @@ from app.api.routes.auth import (  # noqa: E402
     UpdateProfileRequest,
     change_password,
     delete_account,
+    guest_login,
     update_profile,
 )
 from app.models.user import User  # noqa: E402
@@ -205,6 +206,48 @@ class TestUpdateProfile(unittest.TestCase):
         self.assertIn("at least one field", str(ctx.exception).lower())
 
 
+
+# ------------------------------------------------------------------
+# POST /auth/guest
+# ------------------------------------------------------------------
+
+
+@patch("app.api.routes.auth.create_access_token", return_value="guest-token")
+@patch("app.api.routes.auth.get_password_hash", return_value="hashed")
+@patch("app.api.routes.auth.get_database")
+class TestGuestLogin(unittest.TestCase):
+
+    def test_creates_guest_user_with_valid_email(self, mock_get_db, _hash, _token):
+        db = _mock_db()
+        db.users.insert_one = AsyncMock(return_value=MagicMock(inserted_id=FAKE_USER_ID))
+        db.user_profiles = MagicMock()
+        db.user_profiles.update_one = AsyncMock()
+        mock_get_db.return_value = db
+
+        result = asyncio.run(guest_login())
+
+        self.assertEqual(result.access_token, "guest-token")
+        self.assertEqual(result.token_type, "bearer")
+        self.assertTrue(result.user.is_guest)
+        self.assertTrue(result.user.email.endswith("@guests.musclegrowth.ai"))
+        self.assertFalse(result.user.email.endswith(".local"))
+        db.users.insert_one.assert_called_once()
+        inserted = db.users.insert_one.call_args.args[0]
+        self.assertTrue(inserted.get("is_guest"))
+        self.assertTrue(str(inserted.get("email", "")).endswith("@guests.musclegrowth.ai"))
+
+    def test_legacy_local_guest_email_is_rejected_by_model(self, *_mocks):
+        """Regression: EmailStr must not accept reserved .local guest addresses."""
+        with self.assertRaises(ValidationError):
+            User(
+                firstName="Guest",
+                lastName="Athlete",
+                email="guest-abc@guest.musclegrowth.local",
+                hashed_password="x",
+                is_guest=True,
+            )
+
+
 # ------------------------------------------------------------------
 # DELETE /auth/me
 # ------------------------------------------------------------------

phd-advisor-frontend/src/App.js

@@ -115,6 +115,26 @@ function App() {
     setCurrentView('chat');
   };
 
+  const handleGuestStart = async () => {
+    if (authBootstrapping) {
+      return;
+    }
+    try {
+      const response = await fetch(`${getApiBaseUrl()}/auth/guest`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+      });
+      const data = await response.json();
+      if (response.ok) {
+        handleAuthSuccess(data.user, data.access_token);
+      } else {
+        setCurrentView('auth');
+      }
+    } catch {
+      setCurrentView('auth');
+    }
+  };
+
   const handleSignOut = () => {
     clearAuthState();
   };
@@ -133,6 +153,7 @@ function App() {
               onNavigateToHome={navigateToHome}
               onNavigateToChat={sessionReady ? navigateToChat : navigateToAuth}
               onNavigateToCanvas={sessionReady ? navigateToCanvas : navigateToAuth}
+              onTryAsGuest={sessionReady ? navigateToChat : handleGuestStart}
               isAuthenticated={sessionReady}
             />
           )}

phd-advisor-frontend/src/components/Login.js

@@ -1,7 +1,7 @@
 import React, { useState } from 'react';
 import { Eye, EyeOff, Mail, Lock, ArrowRight } from 'lucide-react';
 import { useAppConfig } from '../contexts/AppConfigContext';
-import { persistAuth } from '../utils/authStorage';
+import { persistAuth, getApiBaseUrl } from '../utils/authStorage';
 import CopyrightNotice from './CopyrightNotice';
 import '../styles/Login.css';
 
@@ -14,6 +14,7 @@ const Login = ({ onNavigateToSignup, onNavigateToHome }) => {
     password: ''
   });
   const [isLoading, setIsLoading] = useState(false);
+  const [isGuestLoading, setIsGuestLoading] = useState(false);
   const [errors, setErrors] = useState({});
 
   const handleInputChange = (e) => {
@@ -22,7 +23,6 @@ const Login = ({ onNavigateToSignup, onNavigateToHome }) => {
       ...prev,
       [name]: value
     }));
-    // Clear error when user starts typing
     if (errors[name]) {
       setErrors(prev => ({
         ...prev,
@@ -33,32 +33,55 @@ const Login = ({ onNavigateToSignup, onNavigateToHome }) => {
 
   const validateForm = () => {
     const newErrors = {};
-    
+
     if (!formData.email) {
       newErrors.email = 'Email is required';
     } else if (!/\S+@\S+\.\S+/.test(formData.email)) {
       newErrors.email = 'Please enter a valid email address';
     }
-    
+
     if (!formData.password) {
       newErrors.password = 'Password is required';
     } else if (formData.password.length < 6) {
       newErrors.password = 'Password must be at least 6 characters';
     }
-    
+
     setErrors(newErrors);
     return Object.keys(newErrors).length === 0;
   };
 
+  const handleGuestContinue = async () => {
+    setIsGuestLoading(true);
+    setErrors({});
+    try {
+      const response = await fetch(`${getApiBaseUrl()}/auth/guest`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+      });
+      const data = await response.json();
+      if (response.ok) {
+        persistAuth(data.user, data.access_token);
+        onNavigateToHome?.(data.user, data.access_token);
+      } else {
+        setErrors({ submit: data.detail || 'Could not start a guest session.' });
+      }
+    } catch (error) {
+      console.error('Guest login error:', error);
+      setErrors({ submit: 'Could not start a guest session. Please try again.' });
+    } finally {
+      setIsGuestLoading(false);
+    }
+  };
+
   const handleSubmit = async (e) => {
     e.preventDefault();
-    
+
     if (!validateForm()) return;
-    
+
     setIsLoading(true);
-    
+
     try {
-      const response = await fetch(`${process.env.REACT_APP_API_URL}/auth/login`, {
+      const response = await fetch(`${getApiBaseUrl()}/auth/login`, {
         method: 'POST',
         headers: {
           'Content-Type': 'application/json',
@@ -77,7 +100,7 @@ const Login = ({ onNavigateToSignup, onNavigateToHome }) => {
       } else {
         setErrors({ submit: data.detail || 'Login failed. Please try again.' });
       }
-      
+
     } catch (error) {
       console.error('Login error:', error);
       setErrors({ submit: 'Login failed. Please try again.' });
@@ -86,11 +109,12 @@ const Login = ({ onNavigateToSignup, onNavigateToHome }) => {
     }
   };
 
+  const busy = isLoading || isGuestLoading;
+
   return (
     <div className="login-page">
       <div className="login-content">
         <div className="login-container">
-        {/* Header */}
         <div className="login-header">
           <div className="logo-container">
             <LogoIcon className="logo-icon" />
@@ -101,11 +125,23 @@ const Login = ({ onNavigateToSignup, onNavigateToHome }) => {
           </p>
         </div>
 
-        {/* Main Login Form */}
         <div className="login-form-container">
+          <button
+            type="button"
+            className={`guest-continue-btn ${isGuestLoading ? 'loading' : ''}`}
+            onClick={handleGuestContinue}
+            disabled={busy}
+          >
+            {isGuestLoading ? 'Starting guest mode…' : 'Try without an account'}
+          </button>
+          <p className="guest-continue-hint">
+            Explore the advisors first. Create an account later if you want to save your training chats.
+          </p>
+          <div className="login-divider" aria-hidden="true">
+            <span>or sign in</span>
+          </div>
+
           <form onSubmit={handleSubmit} className="login-form">
-            
-            {/* Email Field */}
             <div className="form-group">
               <label htmlFor="email" className="form-label">
                 Email Address
@@ -120,7 +156,7 @@ const Login = ({ onNavigateToSignup, onNavigateToHome }) => {
                   onChange={handleInputChange}
                   className={`form-input ${errors.email ? 'error' : ''}`}
                   placeholder="Enter your email"
-                  disabled={isLoading}
+                  disabled={busy}
                 />
               </div>
               {errors.email && (
@@ -128,7 +164,6 @@ const Login = ({ onNavigateToSignup, onNavigateToHome }) => {
               )}
             </div>
 
-            {/* Password Field */}
             <div className="form-group">
               <label htmlFor="password" className="form-label">
                 Password
@@ -143,13 +178,13 @@ const Login = ({ onNavigateToSignup, onNavigateToHome }) => {
                   onChange={handleInputChange}
                   className={`form-input ${errors.password ? 'error' : ''}`}
                   placeholder="Enter your password"
-                  disabled={isLoading}
+                  disabled={busy}
                 />
                 <button
                   type="button"
                   onClick={() => setShowPassword(!showPassword)}
                   className="password-toggle"
-                  disabled={isLoading}
+                  disabled={busy}
                 >
                   {showPassword ? <EyeOff size={16} /> : <Eye size={16} />}
                 </button>
@@ -159,25 +194,22 @@ const Login = ({ onNavigateToSignup, onNavigateToHome }) => {
               )}
             </div>
 
-            {/* Forgot Password */}
             <div className="form-actions">
               <button type="button" className="forgot-password">
                 Forgot your password?
               </button>
             </div>
 
-            {/* Submit Error */}
             {errors.submit && (
               <div className="submit-error">
                 {errors.submit}
               </div>
             )}
 
-            {/* Submit Button */}
-            <button 
-              type="submit" 
+            <button
+              type="submit"
               className={`submit-btn ${isLoading ? 'loading' : ''}`}
-              disabled={isLoading}
+              disabled={busy}
             >
               {isLoading ? (
                 <>
@@ -194,12 +226,11 @@ const Login = ({ onNavigateToSignup, onNavigateToHome }) => {
           </form>
         </div>
 
-        {/* Footer */}
         <div className="login-footer">
           <p>
             Don't have an account?{' '}
-            <button 
-              type="button" 
+            <button
+              type="button"
               className="link-btn"
               onClick={onNavigateToSignup}
             >

phd-advisor-frontend/src/components/Signup.js

@@ -1,7 +1,7 @@
 import React, { useState } from 'react';
 import { Eye, EyeOff, Mail, Lock, User, ArrowRight, Shield, Globe } from 'lucide-react';
 import { useAppConfig } from '../contexts/AppConfigContext';
-import { persistAuth } from '../utils/authStorage';
+import { persistAuth, getApiBaseUrl } from '../utils/authStorage';
 import '../styles/Signup.css';
 
 const Signup = ({ onNavigateToLogin, onNavigateToHome }) => {
@@ -100,7 +100,7 @@ const Signup = ({ onNavigateToLogin, onNavigateToHome }) => {
     setIsLoading(true);
     
     try {
-      const response = await fetch(`${process.env.REACT_APP_API_URL}/auth/signup`, {
+      const response = await fetch(`${getApiBaseUrl()}/auth/signup`, {
         method: 'POST',
         headers: {
           'Content-Type': 'application/json',
@@ -383,6 +383,28 @@ const Signup = ({ onNavigateToLogin, onNavigateToHome }) => {
             >
               Sign in here
             </button>
+            {' · '}
+            <button
+              type="button"
+              className="link-btn"
+              onClick={async () => {
+                try {
+                  const response = await fetch(`${getApiBaseUrl()}/auth/guest`, {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json' },
+                  });
+                  const data = await response.json();
+                  if (response.ok) {
+                    persistAuth(data.user, data.access_token);
+                    onNavigateToHome?.(data.user, data.access_token);
+                  }
+                } catch (e) {
+                  console.error(e);
+                }
+              }}
+            >
+              Try without an account
+            </button>
           </p>
         </div>
       </div>

phd-advisor-frontend/src/pages/ChatPage.js

@@ -951,6 +951,11 @@ const handleNewChat = async (sessionId = null) => {
               <HelpCircle size={18} />
             </button>
           </AppHeader>
+          {user?.is_guest && (
+            <div className="guest-mode-banner" role="status">
+              You&apos;re exploring as a guest. Sign out from the menu when you&apos;re ready to create an account and keep your training progress.
+            </div>
+          )}
 
           {/* Main Content */}
           <div className="chat-content">

phd-advisor-frontend/src/pages/HomePage.js

@@ -5,7 +5,7 @@ import AppHeader from '../components/AppHeader';
 import CopyrightNotice from '../components/CopyrightNotice';
 import { useAppConfig } from '../contexts/AppConfigContext';
 
-const HomePage = ({ onNavigateToChat, isAuthenticated, onNavigateToHome, onNavigateToCanvas }) => {
+const HomePage = ({ onNavigateToChat, onTryAsGuest, isAuthenticated, onNavigateToHome, onNavigateToCanvas }) => {
   const { config, advisors, resolveIcon } = useAppConfig();
 
   return (
@@ -27,14 +27,25 @@ const HomePage = ({ onNavigateToChat, isAuthenticated, onNavigateToHome, onNavig
           <p className="hero-subtitle">
             {config.homepage.description}
           </p>
-          <button
-            onClick={onNavigateToChat}
-            className="cta-button"
-          >
-            <MessageCircle className="cta-icon" />
-            <span>{isAuthenticated ? 'Continue Conversation' : 'Start Conversation'}</span>
-            <ArrowRight className="cta-arrow" />
-          </button>
+          <div className="cta-group">
+            <button
+              onClick={onNavigateToChat}
+              className="cta-button"
+            >
+              <MessageCircle className="cta-icon" />
+              <span>{isAuthenticated ? 'Continue Conversation' : 'Start Conversation'}</span>
+              <ArrowRight className="cta-arrow" />
+            </button>
+            {!isAuthenticated && (
+              <button
+                type="button"
+                onClick={onTryAsGuest}
+                className="cta-button cta-button-secondary"
+              >
+                <span>Try without an account</span>
+              </button>
+            )}
+          </div>
         </div>
 
         {/* Advisors Grid */}

phd-advisor-frontend/src/styles/ChatPage.css

@@ -13,6 +13,32 @@
   transform: translateZ(0);
 }
 
+.guest-mode-banner {
+  flex-shrink: 0;
+  padding: 8px 16px;
+  background: var(--accent-soft, #F3E8FF);
+  color: var(--text-accent, #5B21B6);
+  font-size: 0.875rem;
+  text-align: center;
+  border-bottom: 1px solid var(--accent-muted, #DDD6FE);
+}
+
+.guest-mode-banner button {
+  background: none;
+  border: none;
+  color: var(--accent-primary, #7C3AED);
+  font-weight: 700;
+  text-decoration: underline;
+  cursor: pointer;
+  padding: 0;
+}
+
+[data-theme="dark"] .guest-mode-banner {
+  background: var(--accent-soft, rgba(124, 58, 237, 0.2));
+  color: var(--text-accent, #E9D5FF);
+  border-bottom-color: var(--border-primary);
+}
+
 /* Floating Header */
 .floating-header {
   position: sticky;

phd-advisor-frontend/src/styles/Login.css

@@ -92,6 +92,60 @@
   line-height: 1.5;
 }
 
+
+/* Guest continue */
+.guest-continue-btn {
+  width: 100%;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  gap: 8px;
+  border: 2px solid var(--accent-primary, #7C3AED);
+  border-radius: 12px;
+  padding: 12px 16px;
+  background: var(--accent-soft, #F3E8FF);
+  color: var(--accent-primary, #7C3AED);
+  font-weight: 700;
+  cursor: pointer;
+  margin-bottom: 8px;
+}
+
+.guest-continue-btn:hover:not(:disabled) {
+  background: var(--accent-muted, #DDD6FE);
+}
+
+.guest-continue-btn:disabled {
+  opacity: 0.6;
+  cursor: not-allowed;
+}
+
+.guest-continue-hint {
+  margin: 0 0 16px;
+  text-align: center;
+  font-size: 0.85rem;
+  color: var(--text-secondary, #6B7280);
+  line-height: 1.4;
+}
+
+.login-divider {
+  display: flex;
+  align-items: center;
+  gap: 12px;
+  margin: 0 0 18px;
+  color: var(--text-tertiary, #9CA3AF);
+  font-size: 0.8rem;
+  text-transform: uppercase;
+  letter-spacing: 0.04em;
+}
+
+.login-divider::before,
+.login-divider::after {
+  content: "";
+  flex: 1;
+  height: 1px;
+  background: var(--border-primary, #E5E7EB);
+}
+
 /* Form Container */
 .login-form-container {
   padding: 32px;

phd-advisor-frontend/src/styles/components.css

@@ -21,6 +21,8 @@
   --accent-primary: #6366F1;
   --accent-secondary: #8B5CF6;
   --accent-gradient: linear-gradient(135deg, #6366F1, #8B5CF6);
+  --accent-soft: #F3E8FF;
+  --accent-muted: #DDD6FE;
   
   /* Shadow Colors */
   --shadow-sm: 0 1px 3px rgba(0, 0, 0, 0.1);
@@ -69,6 +71,8 @@
   
   /* Accent Colors */
   --accent-primary: #818CF8;
+  --accent-soft: rgba(124, 58, 237, 0.25);
+  --accent-muted: rgba(167, 139, 250, 0.35);
   --accent-secondary: #A78BFA;
   --accent-gradient: linear-gradient(135deg, #818CF8, #A78BFA);
   
@@ -245,6 +249,37 @@
   transform: scale(1.05);
 }
 
+.cta-group {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 12px;
+  align-items: center;
+  justify-content: center;
+}
+
+.cta-button-secondary {
+  background: var(--accent-soft, #F3E8FF);
+  color: var(--accent-primary, #7C3AED);
+  border: 2px solid var(--accent-primary, #7C3AED);
+  box-shadow: none;
+}
+
+.cta-button-secondary:hover {
+  background: var(--accent-muted, #DDD6FE);
+}
+
+.auth-bootstrap-overlay {
+  position: fixed;
+  inset: 0;
+  z-index: 9999;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  background: var(--bg-primary, #fff);
+  color: var(--text-secondary, #6B7280);
+  font-size: 1rem;
+}
+
 .cta-icon {
   width: 24px;
   height: 24px;