wip: guest account registration (self-service and booking create flow)

tests/Service/PasswordResetManagerTest.php

@@ -173,6 +173,35 @@ class PasswordResetManagerTest extends TestCase
         self::assertMatchesRegularExpression('/^[a-f0-9]{64}$/', (string) $user->getPasswordResetNonce());
     }
 
+    public function testResetPasswordClearsPendingWelcomeInvite(): void
+    {
+        $user = new User('[email protected]');
+        $user->setPasswordResetNonce('current-nonce');
+        $user->markWelcomeActivationPending('welcome-nonce', new \DateTimeImmutable('-30 minutes'));
+
+        $userRepository = $this->createMock(UserRepository::class);
+        $entityManager = $this->createMock(EntityManagerInterface::class);
+        $passwordHasher = $this->createMock(UserPasswordHasherInterface::class);
+        $urlGenerator = $this->createMock(UrlGeneratorInterface::class);
+        $mailer = $this->createMock(Mailer::class);
+
+        $passwordHasher
+            ->expects(self::once())
+            ->method('hashPassword')
+            ->with($user, 'new-password')
+            ->willReturn('hashed-password');
+        $entityManager->expects(self::once())->method('flush');
+
+        $manager = $this->createManager($userRepository, $entityManager, $passwordHasher, $urlGenerator, $mailer);
+
+        $manager->resetPassword($user, 'new-password');
+
+        self::assertSame('hashed-password', $user->getPassword());
+        self::assertNull($user->getWelcomeActivationNonce());
+        self::assertNull($user->getWelcomeActivationExpiresAt());
+        self::assertNotNull($user->getWelcomeActivatedAt());
+    }
+
     public function testNewPasswordResetRequestInvalidatesPreviousLink(): void
     {
         $user = new User('[email protected]');