[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_227":228,"_229":230},"routes/_app.x.$handle.$name",{"_101":100,"_32":46,"_110":91,"_27":111,"_13":14,"_112":-5,"_11":113,"_114":115,"_116":117,"_118":119,"_120":121,"_20":-5,"_122":-5,"_123":-5,"_124":25,"_125":126,"_127":60,"_128":-5,"_129":-5,"_130":131},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_44":45,"_32":46,"_39":47,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":72,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":84,"_85":86,"_87":88,"_89":25},"version",8,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":38,"_39":40,"_41":14,"_42":43,"_24":25},"previous",{"_30":31,"_32":33,"_34":35,"_36":37},"deleted",false,"deletedHere","path","lib/rules.ts","latestPath","fileId","a59a4c10-ad59-11f1-aab1-1607ee4eb77e","name","rules.ts","fileType","script","content","// Reine Buchungsregeln – keine Datenbank, kein Netzwerk. Wird vom Server\n// benutzt und lässt sich lokal ohne Val Town testen.\n\nimport { daysBetween, isWeekend, slotStartEpoch, type LocalNow } from \"./time.ts\";\n\nexport type Resource = {\n id: string;\n name: string;\n capacity: number; // Plätze pro Stunde (Golf: 4)\n vipReserved: number; // davon bis kurz vor Termin nur für VIPs (Golf: 1)\n reserveReleaseHours: number; // so viele Stunden vor Start wird die VIP-Reserve für alle frei (24)\n leadDaysVip: number; // VIP-Buchungsvorlauf in Tagen (14)\n leadDaysStd: number; // normaler Vorlauf (7)\n weekdayOpen: number; // Mo–Fr: erste buchbare Stunde (9 = 9:00–10:00)\n weekdayClose: number; // Mo–Fr: Schließzeit (22 = letzter Slot 21:00–22:00)\n weekendOpen: number;\n weekendClose: number;\n maxOpenPerMember: number; // offene (zukünftige) Buchungen pro Spieler und Ressource\n active: number;\n};\n\nexport type Member = { id: number; name: string; isVip: boolean; isAdmin: boolean; active: boolean };\n\nexport type Seat = { bookingId: number; memberId: number; name: string; isVip: boolean };\n\nexport type Verdict = {\n ok: boolean;\n code:\n | \"ok\"\n | \"closed\"\n | \"past\"\n | \"lead\"\n | \"full\"\n | \"vip_only\"\n | \"already\"\n | \"limit\";\n reason: string;\n};\n\nexport function openingHours(r: Resource, date: string): { open: number; close: number } {\n return isWeekend(date)\n ? { open: r.weekendOpen, close: r.weekendClose }\n : { open: r.weekdayOpen, close: r.weekdayClose };\n}\n\nexport function slotHours(r: Resource, date: string): number[] {\n const { open, close } = openingHours(r, date);\n const hours: number[] = [];\n for (let h = open; h < close; h++) hours.push(h);\n return hours;\n}\n\n/** Freie Plätze aus Sicht eines bestimmten Spielers. */\nexport function seatsAvailableFor(\n r: Resource,\n member: Member,\n seats: Seat[],\n slotStartMs: number,\n nowMs: number,\n): { free: number; reserveActive: boolean } {\n const total = r.capacity - seats.length;\n const reserveActive = r.vipReserved > 0 && slotStartMs - nowMs > r.reserveReleaseHours * 3600_000;\n if (member.isVip || !reserveActive) return { free: Math.max(0, total), reserveActive };\n // Nicht-VIP: darf nur die nicht reservierten Plätze belegen.\n const nonVipSeats = seats.filter((s) => !s.isVip).length;\n const nonVipCap = r.capacity - r.vipReserved;\n return { free: Math.max(0, Math.min(total, nonVipCap - nonVipSeats)), reserveActive };\n}\n\nexport function evaluateBooking(input: {\n resource: Resource;\n member: Member;\n date: string;\n hour: number;\n seats: Seat[];\n now: LocalNow;\n openBookingsOfMember: number; // zukünftige Buchungen dieses Spielers auf dieser Ressource\n}): Verdict {\n const { resource: r, member, date, hour, seats, now } = input;\n\n const { open, close } = openingHours(r, date);\n if (hour < open || hour >= close) {\n return { ok: false, code: \"closed\", reason: `Außerhalb der Öffnungszeit (${open}–${close} Uhr).` };\n }\n\n const startMs = slotStartEpoch(date, hour);\n if (startMs <= now.epoch) {\n return { ok: false, code: \"past\", reason: \"Dieser Termin liegt in der Vergangenheit.\" };\n }\n\n const lead = member.isVip ? r.leadDaysVip : r.leadDaysStd;\n const daysAhead = daysBetween(now.date, date);\n if (daysAhead > lead) {\n return {\n ok: false,\n code: \"lead\",\n reason: member.isVip\n ? `Buchbar ab ${lead} Tage vor dem Termin.`\n : `Buchbar ab ${lead} Tage vor dem Termin (VIP: ${r.leadDaysVip} Tage).`,\n };\n }\n\n if (seats.some((s) => s.memberId === member.id)) {\n return { ok: false, code: \"already\", reason: \"Du bist in dieser Stunde bereits eingetragen.\" };\n }\n\n if (input.openBookingsOfMember >= r.maxOpenPerMember) {\n return {\n ok: false,\n code: \"limit\",\n reason: `Maximal ${r.maxOpenPerMember} offene Buchungen gleichzeitig.`,\n };\n }\n\n if (seats.length >= r.capacity) {\n return { ok: false, code: \"full\", reason: \"Diese Stunde ist voll.\" };\n }\n\n const { free, reserveActive } = seatsAvailableFor(r, member, seats, startMs, now.epoch);\n if (free <= 0) {\n return {\n ok: false,\n code: reserveActive ? \"vip_only\" : \"full\",\n reason: reserveActive\n ? `Der letzte Platz ist bis ${r.reserveReleaseHours} Std. vor Start für VIPs reserviert.`\n : \"Diese Stunde ist voll.\",\n };\n }\n\n return { ok: true, code: \"ok\", reason: \"\" };\n}\n\nexport function canCancel(input: { date: string; hour: number; now: LocalNow }): boolean {\n return slotStartEpoch(input.date, input.hour) > input.now.epoch;\n}\n\n/** Standardressource: der Golfsimulator. */\nexport const DEFAULT_GOLF: Resource = {\n id: \"golf\",\n name: \"Golfsimulator\",\n capacity: 4,\n vipReserved: 1,\n reserveReleaseHours: 24,\n leadDaysVip: 14,\n leadDaysStd: 7,\n weekdayOpen: 9,\n weekdayClose: 22,\n weekendOpen: 10,\n weekendClose: 21,\n maxOpenPerMember: 3,\n active: 1,\n};\n","// Reine Buchungsregeln – keine Datenbank, kein Netzwerk. Wird vom Server\n// benutzt und lässt sich lokal ohne Val Town testen.\n\nimport { daysBetween, isWeekend, slotStartEpoch, type LocalNow } from \"./time.ts\";\n\nexport type Resource = {\n id: string;\n name: string;\n capacity: number; // Plätze pro Stunde (Golf: 4)\n vipReserved: number; // davon bis kurz vor Termin nur für VIPs (Golf: 1)\n reserveReleaseHours: number; // so viele Stunden vor Start wird die VIP-Reserve für alle frei (24)\n leadDaysVip: number; // VIP-Buchungsvorlauf in Tagen (14)\n leadDaysStd: number; // normaler Vorlauf (7)\n weekdayOpen: number; // Mo–Fr: erste buchbare Stunde (9 = 9:00–10:00)\n weekdayClose: number; // Mo–Fr: Schließzeit (22 = letzter Slot 21:00–22:00)\n weekendOpen: number;\n weekendClose: number;\n maxOpenPerMember: number; // offene (zukünftige) Buchungen pro Spieler und Ressource\n active: number;\n};\n\nexport type Member = { id: number; name: string; alias?: string | null; isVip: boolean; isAdmin: boolean; active: boolean };\n\nexport type Seat = { bookingId: number; memberId: number; name: string; isVip: boolean };\n\nexport type Verdict = {\n ok: boolean;\n code:\n | \"ok\"\n | \"closed\"\n | \"past\"\n | \"lead\"\n | \"full\"\n | \"vip_only\"\n | \"already\"\n | \"limit\";\n reason: string;\n};\n\nexport function openingHours(r: Resource, date: string): { open: number; close: number } {\n return isWeekend(date)\n ? { open: r.weekendOpen, close: r.weekendClose }\n : { open: r.weekdayOpen, close: r.weekdayClose };\n}\n\nexport function slotHours(r: Resource, date: string): number[] {\n const { open, close } = openingHours(r, date);\n const hours: number[] = [];\n for (let h = open; h < close; h++) hours.push(h);\n return hours;\n}\n\n/** Freie Plätze aus Sicht eines bestimmten Spielers. */\nexport function seatsAvailableFor(\n r: Resource,\n member: Member,\n seats: Seat[],\n slotStartMs: number,\n nowMs: number,\n): { free: number; reserveActive: boolean } {\n const total = r.capacity - seats.length;\n const reserveActive = r.vipReserved > 0 && slotStartMs - nowMs > r.reserveReleaseHours * 3600_000;\n if (member.isVip || !reserveActive) return { free: Math.max(0, total), reserveActive };\n // Nicht-VIP: darf nur die nicht reservierten Plätze belegen.\n const nonVipSeats = seats.filter((s) => !s.isVip).length;\n const nonVipCap = r.capacity - r.vipReserved;\n return { free: Math.max(0, Math.min(total, nonVipCap - nonVipSeats)), reserveActive };\n}\n\nexport function evaluateBooking(input: {\n resource: Resource;\n member: Member;\n date: string;\n hour: number;\n seats: Seat[];\n now: LocalNow;\n openBookingsOfMember: number; // zukünftige Buchungen dieses Spielers auf dieser Ressource\n}): Verdict {\n const { resource: r, member, date, hour, seats, now } = input;\n\n const { open, close } = openingHours(r, date);\n if (hour < open || hour >= close) {\n return { ok: false, code: \"closed\", reason: `Außerhalb der Öffnungszeit (${open}–${close} Uhr).` };\n }\n\n const startMs = slotStartEpoch(date, hour);\n if (startMs <= now.epoch) {\n return { ok: false, code: \"past\", reason: \"Dieser Termin liegt in der Vergangenheit.\" };\n }\n\n const lead = member.isVip ? r.leadDaysVip : r.leadDaysStd;\n const daysAhead = daysBetween(now.date, date);\n if (daysAhead > lead) {\n return {\n ok: false,\n code: \"lead\",\n reason: member.isVip\n ? `Buchbar ab ${lead} Tage vor dem Termin.`\n : `Buchbar ab ${lead} Tage vor dem Termin (VIP: ${r.leadDaysVip} Tage).`,\n };\n }\n\n if (seats.some((s) => s.memberId === member.id)) {\n return { ok: false, code: \"already\", reason: \"Du bist in dieser Stunde bereits eingetragen.\" };\n }\n\n if (input.openBookingsOfMember >= r.maxOpenPerMember) {\n return {\n ok: false,\n code: \"limit\",\n reason: `Maximal ${r.maxOpenPerMember} offene Buchungen gleichzeitig.`,\n };\n }\n\n if (seats.length >= r.capacity) {\n return { ok: false, code: \"full\", reason: \"Diese Stunde ist voll.\" };\n }\n\n const { free, reserveActive } = seatsAvailableFor(r, member, seats, startMs, now.epoch);\n if (free <= 0) {\n return {\n ok: false,\n code: reserveActive ? \"vip_only\" : \"full\",\n reason: reserveActive\n ? `Der letzte Platz ist bis ${r.reserveReleaseHours} Std. vor Start für VIPs reserviert.`\n : \"Diese Stunde ist voll.\",\n };\n }\n\n return { ok: true, code: \"ok\", reason: \"\" };\n}\n\nexport function canCancel(input: { date: string; hour: number; now: LocalNow }): boolean {\n return slotStartEpoch(input.date, input.hour) > input.now.epoch;\n}\n\n/** Standardressource: der Golfsimulator. */\nexport const DEFAULT_GOLF: Resource = {\n id: \"golf\",\n name: \"Golfsimulator\",\n capacity: 4,\n vipReserved: 1,\n reserveReleaseHours: 24,\n leadDaysVip: 14,\n leadDaysStd: 7,\n weekdayOpen: 9,\n weekdayClose: 22,\n weekendOpen: 10,\n weekendClose: 21,\n maxOpenPerMember: 3,\n active: 1,\n};\n","createdAt",["D",1789075690497],"branchVersion","branchId","5c695ecc-ad62-4780-8b26-43dbcfbbf94b","id","e5718bb4-559b-409d-a723-e72077efaced","abschlag",["D",1789073537776],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Buchungssystem Golfsimulator (4 Plätze/Std., VIP, PIN-Login)","imageUrl","aa4a2c1b-3d04-409c-88c5-af54cb1d3470","pinnedFileId","828c2900-ad59-11f1-99a3-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a08d16-8467-769a-84f6-caf4cfc8139c","tursoName","e5718bb4559b409da723e72077efaced","tursoHostname","e5718bb4559b409da723e72077efaced-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789512044203],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_101":100,"_109":105},"org",{"_101":100,"_102":103,"_104":105,"_18":56,"_106":107,"_108":25},"branch",{"_13":90,"_32":91,"_44":43,"_92":45,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":46,"_99":100},"isOwned",60,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","Thokolosh","handle","displayName","Kirk Lenke","avatar","https://lh3.googleusercontent.com/a/ACg8ocJoDfrcBCOirw40MHfesVj8rSjuldOifXKqr9767Swx6brFywwEAQ=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_44":45,"_32":46,"_39":222,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":223,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":224,"_85":225,"_87":226,"_89":25},"tree",[170,174,177],"files",[170,171,172,173,174,175,176,177],"counts",{"_160":64,"_161":141,"_162":64,"_163":164,"_165":166},"contents",[132,133,134],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_44":154,"_32":155,"_30":156,"_137":-5,"_42":43,"_41":157,"_139":60,"_39":158,"_13":64,"_34":152,"_36":-5,"_24":25,"_144":-5,"_27":159},{"_44":147,"_32":148,"_30":149,"_137":-5,"_42":43,"_41":150,"_139":60,"_39":151,"_13":64,"_34":152,"_36":-5,"_24":25,"_144":-5,"_27":153},{"_44":135,"_32":136,"_30":58,"_137":-5,"_42":43,"_41":138,"_139":25,"_39":140,"_13":141,"_34":142,"_36":143,"_24":25,"_144":145,"_27":146},"5d5929a2-3506-42b0-95b9-736fb382f407","index.ts","parentId",7,"latest",["D",1789073873967],1,"http","// Abschlag – Buchungssystem für den Golfsimulator (und später weitere Ressourcen).\n// HTTP-Val: Hono + std/sqlite. Diese Datei ist der HTTP-Einstieg.\n\nimport { Hono } from \"npm:hono\";\nimport { getCookie, setCookie, deleteCookie } from \"npm:hono/cookie\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { parseVal, serveFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport {\n canCancel,\n DEFAULT_GOLF,\n evaluateBooking,\n seatsAvailableFor,\n slotHours,\n type Member,\n type Resource,\n type Seat,\n} from \"./lib/rules.ts\";\nimport { addDays, isValidDate, localNow, slotStartEpoch } from \"./lib/time.ts\";\n\n// ───────────────────────── Schema ─────────────────────────\n\nconst ADMIN_NAME = Deno.env.get(\"ADMIN_NAME\") ?? \"Kirk Lenke\";\nconst SESSION_DAYS = 90;\n\nasync function initDb() {\n await sqlite.batch([\n `CREATE TABLE IF NOT EXISTS members (\n id INTEGER PRIMARY KEY,\n name TEXT NOT NULL UNIQUE COLLATE NOCASE,\n pin_hash TEXT,\n pin_salt TEXT,\n invite_code TEXT,\n is_vip INTEGER NOT NULL DEFAULT 0,\n is_admin INTEGER NOT NULL DEFAULT 0,\n active INTEGER NOT NULL DEFAULT 1,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n `CREATE TABLE IF NOT EXISTS resources (\n id TEXT PRIMARY KEY,\n name TEXT NOT NULL,\n capacity INTEGER NOT NULL,\n vip_reserved INTEGER NOT NULL,\n reserve_release_hours INTEGER NOT NULL,\n lead_days_vip INTEGER NOT NULL,\n lead_days_std INTEGER NOT NULL,\n weekday_open INTEGER NOT NULL,\n weekday_close INTEGER NOT NULL,\n weekend_open INTEGER NOT NULL,\n weekend_close INTEGER NOT NULL,\n max_open_per_member INTEGER NOT NULL,\n active INTEGER NOT NULL DEFAULT 1,\n sort INTEGER NOT NULL DEFAULT 0\n )`,\n `CREATE TABLE IF NOT EXISTS bookings (\n id INTEGER PRIMARY KEY,\n resource_id TEXT NOT NULL,\n member_id INTEGER NOT NULL,\n date TEXT NOT NULL,\n hour INTEGER NOT NULL,\n created_at TEXT NOT NULL DEFAULT (datetime('now')),\n UNIQUE(resource_id, date, hour, member_id)\n )`,\n `CREATE INDEX IF NOT EXISTS bookings_slot ON bookings(resource_id, date, hour)`,\n `CREATE TABLE IF NOT EXISTS sessions (\n token TEXT PRIMARY KEY,\n member_id INTEGER NOT NULL,\n expires_at TEXT NOT NULL\n )`,\n ]);\n\n const r = await sqlite.execute(\"SELECT COUNT(*) AS n FROM resources\");\n if (Number(r.rows[0].n) === 0) await upsertResource(DEFAULT_GOLF);\n\n const m = await sqlite.execute(\"SELECT COUNT(*) AS n FROM members\");\n if (Number(m.rows[0].n) === 0) {\n const code = newInviteCode();\n await sqlite.execute({\n sql: \"INSERT INTO members (name, invite_code, is_admin, is_vip) VALUES (?, ?, 1, 1)\",\n args: [ADMIN_NAME, code],\n });\n console.log(`Admin \"${ADMIN_NAME}\" angelegt. Einladungscode: ${code}`);\n }\n}\nconst ready = initDb();\n\n// ───────────────────────── Helfer ─────────────────────────\n\nfunction newInviteCode(): string {\n const alphabet = \"ABCDEFGHJKLMNPQRSTUVWXYZ23456789\"; // ohne 0/O/1/I\n const bytes = crypto.getRandomValues(new Uint8Array(6));\n let s = \"\";\n for (const b of bytes) s += alphabet[b % alphabet.length];\n return s.slice(0, 3) + \"-\" + s.slice(3);\n}\n\nfunction hex(buf: ArrayBuffer | Uint8Array): string {\n return [...new Uint8Array(buf)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function hashPin(pin: string, saltHex: string): Promise {\n const key = await crypto.subtle.importKey(\"raw\", new TextEncoder().encode(pin), \"PBKDF2\", false, [\"deriveBits\"]);\n const salt = Uint8Array.from(saltHex.match(/../g)!.map((h) => parseInt(h, 16)));\n const bits = await crypto.subtle.deriveBits({ name: \"PBKDF2\", hash: \"SHA-256\", salt, iterations: 120_000 }, key, 256);\n return hex(bits);\n}\n\nfunction validPin(pin: unknown): pin is string {\n return typeof pin === \"string\" && /^\\d{4,8}$/.test(pin);\n}\n\nfunction cleanName(name: unknown): string | null {\n if (typeof name !== \"string\") return null;\n const n = name.replace(/\\s+/g, \" \").trim();\n if (n.length < 3 || n.length > 60) return null;\n if (!/^[\\p{L}][\\p{L}\\p{M}' .-]*\\s[\\p{L}][\\p{L}\\p{M}' .-]*$/u.test(n)) return null; // Vor- und Nachname\n return n;\n}\n\nfunction normCode(code: unknown): string {\n return String(code ?? \"\").toUpperCase().replace(/[^A-Z0-9]/g, \"\").replace(/^(.{3})(.{3})$/, \"$1-$2\");\n}\n\nfunction rowToMember(row: Record): Member {\n return {\n id: Number(row.id),\n name: String(row.name),\n isVip: Number(row.is_vip) === 1,\n isAdmin: Number(row.is_admin) === 1,\n active: Number(row.active) === 1,\n };\n}\n\nfunction rowToResource(row: Record): Resource {\n return {\n id: String(row.id),\n name: String(row.name),\n capacity: Number(row.capacity),\n vipReserved: Number(row.vip_reserved),\n reserveReleaseHours: Number(row.reserve_release_hours),\n leadDaysVip: Number(row.lead_days_vip),\n leadDaysStd: Number(row.lead_days_std),\n weekdayOpen: Number(row.weekday_open),\n weekdayClose: Number(row.weekday_close),\n weekendOpen: Number(row.weekend_open),\n weekendClose: Number(row.weekend_close),\n maxOpenPerMember: Number(row.max_open_per_member),\n active: Number(row.active),\n };\n}\n\nasync function upsertResource(r: Resource, sort = 0) {\n await sqlite.execute({\n sql: `INSERT INTO resources (id, name, capacity, vip_reserved, reserve_release_hours, lead_days_vip, lead_days_std,\n weekday_open, weekday_close, weekend_open, weekend_close, max_open_per_member, active, sort)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET name=excluded.name, capacity=excluded.capacity, vip_reserved=excluded.vip_reserved,\n reserve_release_hours=excluded.reserve_release_hours, lead_days_vip=excluded.lead_days_vip,\n lead_days_std=excluded.lead_days_std, weekday_open=excluded.weekday_open, weekday_close=excluded.weekday_close,\n weekend_open=excluded.weekend_open, weekend_close=excluded.weekend_close,\n max_open_per_member=excluded.max_open_per_member, active=excluded.active`,\n args: [\n r.id, r.name, r.capacity, r.vipReserved, r.reserveReleaseHours, r.leadDaysVip, r.leadDaysStd,\n r.weekdayOpen, r.weekdayClose, r.weekendOpen, r.weekendClose, r.maxOpenPerMember, r.active, sort,\n ],\n });\n}\n\nasync function getResource(id: string): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM resources WHERE id = ?\", args: [id] });\n return r.rows[0] ? rowToResource(r.rows[0]) : null;\n}\n\nasync function listResources(onlyActive: boolean): Promise {\n const r = await sqlite.execute(\n onlyActive ? \"SELECT * FROM resources WHERE active = 1 ORDER BY sort, name\" : \"SELECT * FROM resources ORDER BY sort, name\",\n );\n return r.rows.map(rowToResource);\n}\n\nasync function seatsFor(resourceId: string, date: string, hour: number): Promise {\n const r = await sqlite.execute({\n sql: `SELECT b.id AS booking_id, m.id AS member_id, m.name, m.is_vip\n FROM bookings b JOIN members m ON m.id = b.member_id\n WHERE b.resource_id = ? AND b.date = ? AND b.hour = ? ORDER BY b.created_at, b.id`,\n args: [resourceId, date, hour],\n });\n return r.rows.map((row) => ({\n bookingId: Number(row.booking_id),\n memberId: Number(row.member_id),\n name: String(row.name),\n isVip: Number(row.is_vip) === 1,\n }));\n}\n\nasync function openBookingCount(resourceId: string, memberId: number): Promise {\n const now = localNow();\n const r = await sqlite.execute({\n sql: `SELECT date, hour FROM bookings WHERE resource_id = ? AND member_id = ? AND date >= ?`,\n args: [resourceId, memberId, now.date],\n });\n return r.rows.filter((row) => slotStartEpoch(String(row.date), Number(row.hour)) > now.epoch).length;\n}\n\n// ───────────────────────── Auth ─────────────────────────\n\ntype Env = { Variables: { member: Member | null } };\nconst app = new Hono();\n\napp.use(\"*\", async (c, next) => {\n await ready;\n c.set(\"member\", null);\n const token = getCookie(c, \"abschlag_session\");\n if (token) {\n const r = await sqlite.execute({\n sql: `SELECT m.* FROM sessions s JOIN members m ON m.id = s.member_id\n WHERE s.token = ? AND s.expires_at > datetime('now') AND m.active = 1`,\n args: [token],\n });\n if (r.rows[0]) c.set(\"member\", rowToMember(r.rows[0]));\n }\n await next();\n});\n\nfunction requireMember(c: any): Member {\n const m = c.get(\"member\") as Member | null;\n if (!m) throw new HttpError(401, \"Bitte anmelden.\");\n return m;\n}\nfunction requireAdmin(c: any): Member {\n const m = requireMember(c);\n if (!m.isAdmin) throw new HttpError(403, \"Nur für Administratoren.\");\n return m;\n}\nclass HttpError extends Error {\n constructor(public status: number, message: string) {\n super(message);\n }\n}\napp.onError((err, c) => {\n if (err instanceof HttpError) return c.json({ error: err.message }, err.status as any);\n console.error(err);\n return c.json({ error: \"Interner Fehler: \" + err.message }, 500);\n});\n\nasync function createSession(c: any, memberId: number) {\n const token = hex(crypto.getRandomValues(new Uint8Array(32)));\n const expires = new Date(Date.now() + SESSION_DAYS * 86400_000);\n await sqlite.execute({\n sql: \"INSERT INTO sessions (token, member_id, expires_at) VALUES (?, ?, ?)\",\n args: [token, memberId, expires.toISOString().replace(\"T\", \" \").slice(0, 19)],\n });\n setCookie(c, \"abschlag_session\", token, {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n path: \"/\",\n expires,\n });\n}\n\n// ───────────────────────── Seiten & Assets ─────────────────────────\n\napp.get(\"/\", (c) => serveFile(\"/frontend/index.html\", import.meta.url));\napp.get(\"/frontend/*\", (c) => serveFile(c.req.path, import.meta.url));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\n// ───────────────────────── Öffentliche API ─────────────────────────\n\napp.get(\"/api/me\", async (c) => {\n const member = c.get(\"member\");\n const setup = await sqlite.execute(\"SELECT COUNT(*) AS n FROM members WHERE pin_hash IS NOT NULL\");\n const firstRun = Number(setup.rows[0].n) === 0;\n let setupCode: string | null = null;\n if (firstRun) {\n const a = await sqlite.execute(\"SELECT name, invite_code FROM members WHERE is_admin = 1 ORDER BY id LIMIT 1\");\n if (a.rows[0]) setupCode = `${a.rows[0].name} · ${a.rows[0].invite_code}`;\n }\n return c.json({\n member,\n resources: await listResources(true),\n now: localNow(),\n setupCode,\n });\n});\n\napp.post(\"/api/register\", async (c) => {\n const body = await c.req.json().catch(() => ({}));\n const name = cleanName(body.name);\n const code = normCode(body.code);\n if (!name) throw new HttpError(400, \"Bitte Vor- und Nachnamen genau so eingeben, wie sie hinterlegt wurden.\");\n if (!validPin(body.pin)) throw new HttpError(400, \"Die PIN muss aus 4 bis 8 Ziffern bestehen.\");\n const r = await sqlite.execute({ sql: \"SELECT * FROM members WHERE name = ? AND active = 1\", args: [name] });\n const row = r.rows[0];\n if (!row || !row.invite_code || String(row.invite_code) !== code) {\n throw new HttpError(400, \"Name oder Einladungscode stimmen nicht.\");\n }\n const salt = hex(crypto.getRandomValues(new Uint8Array(16)));\n const pinHash = await hashPin(body.pin, salt);\n await sqlite.execute({\n sql: \"UPDATE members SET pin_hash = ?, pin_salt = ?, invite_code = NULL WHERE id = ?\",\n args: [pinHash, salt, Number(row.id)],\n });\n await createSession(c, Number(row.id));\n return c.json({ member: rowToMember({ ...row, pin_hash: pinHash }) });\n});\n\napp.post(\"/api/login\", async (c) => {\n const body = await c.req.json().catch(() => ({}));\n const name = cleanName(body.name);\n if (!name || !validPin(body.pin)) throw new HttpError(400, \"Name oder PIN stimmen nicht.\");\n const r = await sqlite.execute({ sql: \"SELECT * FROM members WHERE name = ? AND active = 1\", args: [name] });\n const row = r.rows[0];\n if (!row) throw new HttpError(400, \"Name oder PIN stimmen nicht.\");\n if (!row.pin_hash) throw new HttpError(400, \"Für diesen Namen wurde noch keine PIN festgelegt – bitte zuerst mit dem Einladungscode registrieren.\");\n const check = await hashPin(body.pin, String(row.pin_salt));\n if (check !== String(row.pin_hash)) throw new HttpError(400, \"Name oder PIN stimmen nicht.\");\n await createSession(c, Number(row.id));\n return c.json({ member: rowToMember(row) });\n});\n\napp.post(\"/api/logout\", async (c) => {\n const token = getCookie(c, \"abschlag_session\");\n if (token) await sqlite.execute({ sql: \"DELETE FROM sessions WHERE token = ?\", args: [token] });\n deleteCookie(c, \"abschlag_session\", { path: \"/\" });\n return c.json({ ok: true });\n});\n\n// ───────────────────────── Slots & Buchungen ─────────────────────────\n\napp.get(\"/api/slots\", async (c) => {\n const member = requireMember(c);\n const resourceId = c.req.query(\"resource\") ?? \"golf\";\n const date = c.req.query(\"date\");\n if (!isValidDate(date)) throw new HttpError(400, \"Ungültiges Datum.\");\n const resource = await getResource(resourceId);\n if (!resource || !resource.active) throw new HttpError(404, \"Unbekannte Ressource.\");\n\n const now = localNow();\n const rows = await sqlite.execute({\n sql: `SELECT b.id AS booking_id, b.hour, m.id AS member_id, m.name, m.is_vip\n FROM bookings b JOIN members m ON m.id = b.member_id\n WHERE b.resource_id = ? AND b.date = ? ORDER BY b.created_at, b.id`,\n args: [resourceId, date],\n });\n const byHour = new Map();\n for (const row of rows.rows) {\n const h = Number(row.hour);\n if (!byHour.has(h)) byHour.set(h, []);\n byHour.get(h)!.push({\n bookingId: Number(row.booking_id),\n memberId: Number(row.member_id),\n name: String(row.name),\n isVip: Number(row.is_vip) === 1,\n });\n }\n const openCount = await openBookingCount(resourceId, member.id);\n\n const slots = slotHours(resource, date).map((hour) => {\n const seats = byHour.get(hour) ?? [];\n const verdict = evaluateBooking({ resource, member, date, hour, seats, now, openBookingsOfMember: openCount });\n const startMs = slotStartEpoch(date, hour);\n const avail = seatsAvailableFor(resource, member, seats, startMs, now.epoch);\n const mine = seats.find((s) => s.memberId === member.id) ?? null;\n return {\n hour,\n seats,\n capacity: resource.capacity,\n freeForYou: avail.free,\n reserveActive: avail.reserveActive,\n past: startMs <= now.epoch,\n canBook: verdict.ok,\n reasonCode: verdict.code,\n reason: verdict.reason,\n myBookingId: mine?.bookingId ?? null,\n canCancel: !!mine && canCancel({ date, hour, now }),\n };\n });\n\n return c.json({ date, resource, slots, openCount, now });\n});\n\napp.post(\"/api/bookings\", async (c) => {\n const member = requireMember(c);\n const body = await c.req.json().catch(() => ({}));\n const resourceId = String(body.resource ?? \"golf\");\n const date = body.date;\n const hour = Number(body.hour);\n if (!isValidDate(date) || !Number.isInteger(hour)) throw new HttpError(400, \"Ungültiger Termin.\");\n const resource = await getResource(resourceId);\n if (!resource || !resource.active) throw new HttpError(404, \"Unbekannte Ressource.\");\n\n const now = localNow();\n const seats = await seatsFor(resourceId, date, hour);\n const openCount = await openBookingCount(resourceId, member.id);\n const verdict = evaluateBooking({ resource, member, date, hour, seats, now, openBookingsOfMember: openCount });\n if (!verdict.ok) throw new HttpError(409, verdict.reason);\n\n const ins = await sqlite.execute({\n sql: \"INSERT OR IGNORE INTO bookings (resource_id, member_id, date, hour) VALUES (?, ?, ?, ?)\",\n args: [resourceId, member.id, date, hour],\n });\n const id = Number(ins.lastInsertRowid);\n\n // Schutz gegen gleichzeitige Buchungen: nach dem Schreiben noch einmal zählen.\n const after = await seatsFor(resourceId, date, hour);\n const mine = after.find((s) => s.memberId === member.id);\n if (after.length > resource.capacity && mine && after.indexOf(mine) >= resource.capacity) {\n await sqlite.execute({ sql: \"DELETE FROM bookings WHERE id = ?\", args: [mine.bookingId] });\n throw new HttpError(409, \"Diese Stunde wurde gerade von jemand anderem gefüllt.\");\n }\n return c.json({ ok: true, id: mine?.bookingId ?? id });\n});\n\napp.delete(\"/api/bookings/:id\", async (c) => {\n const member = requireMember(c);\n const id = Number(c.req.param(\"id\"));\n const r = await sqlite.execute({ sql: \"SELECT * FROM bookings WHERE id = ?\", args: [id] });\n const row = r.rows[0];\n if (!row) throw new HttpError(404, \"Buchung nicht gefunden.\");\n if (Number(row.member_id) !== member.id && !member.isAdmin) throw new HttpError(403, \"Das ist nicht deine Buchung.\");\n if (!canCancel({ date: String(row.date), hour: Number(row.hour), now: localNow() })) {\n throw new HttpError(409, \"Der Termin hat bereits begonnen und kann nicht mehr storniert werden.\");\n }\n await sqlite.execute({ sql: \"DELETE FROM bookings WHERE id = ?\", args: [id] });\n return c.json({ ok: true });\n});\n\napp.get(\"/api/bookings/mine\", async (c) => {\n const member = requireMember(c);\n const now = localNow();\n const r = await sqlite.execute({\n sql: `SELECT b.id, b.resource_id, r.name AS resource_name, b.date, b.hour\n FROM bookings b JOIN resources r ON r.id = b.resource_id\n WHERE b.member_id = ? AND b.date >= ? ORDER BY b.date, b.hour`,\n args: [member.id, addDays(now.date, -1)],\n });\n const bookings = r.rows\n .map((row) => ({\n id: Number(row.id),\n resourceId: String(row.resource_id),\n resourceName: String(row.resource_name),\n date: String(row.date),\n hour: Number(row.hour),\n }))\n .filter((b) => slotStartEpoch(b.date, b.hour) + 3600_000 > now.epoch);\n return c.json({ bookings });\n});\n\n// ───────────────────────── Admin ─────────────────────────\n\napp.get(\"/api/admin/members\", async (c) => {\n requireAdmin(c);\n const r = await sqlite.execute(\"SELECT * FROM members ORDER BY active DESC, name\");\n return c.json({\n members: r.rows.map((row) => ({\n ...rowToMember(row),\n registered: !!row.pin_hash,\n inviteCode: row.invite_code ? String(row.invite_code) : null,\n createdAt: String(row.created_at),\n })),\n });\n});\n\napp.post(\"/api/admin/members\", async (c) => {\n requireAdmin(c);\n const body = await c.req.json().catch(() => ({}));\n const name = cleanName(body.name);\n if (!name) throw new HttpError(400, \"Bitte Vor- und Nachnamen eingeben (z. B. „Anna Müller“).\");\n const dup = await sqlite.execute({ sql: \"SELECT id FROM members WHERE name = ?\", args: [name] });\n if (dup.rows[0]) throw new HttpError(409, \"Diesen Namen gibt es schon.\");\n const code = newInviteCode();\n await sqlite.execute({\n sql: \"INSERT INTO members (name, invite_code, is_vip) VALUES (?, ?, ?)\",\n args: [name, code, body.isVip ? 1 : 0],\n });\n return c.json({ ok: true, inviteCode: code });\n});\n\napp.patch(\"/api/admin/members/:id\", async (c) => {\n const admin = requireAdmin(c);\n const id = Number(c.req.param(\"id\"));\n const body = await c.req.json().catch(() => ({}));\n const sets: string[] = [];\n const args: unknown[] = [];\n if (typeof body.isVip === \"boolean\") { sets.push(\"is_vip = ?\"); args.push(body.isVip ? 1 : 0); }\n if (typeof body.isAdmin === \"boolean\") {\n if (id === admin.id && !body.isAdmin) throw new HttpError(400, \"Du kannst dir nicht selbst die Admin-Rechte entziehen.\");\n sets.push(\"is_admin = ?\"); args.push(body.isAdmin ? 1 : 0);\n }\n if (typeof body.active === \"boolean\") {\n if (id === admin.id && !body.active) throw new HttpError(400, \"Du kannst dich nicht selbst deaktivieren.\");\n sets.push(\"active = ?\"); args.push(body.active ? 1 : 0);\n }\n if (body.name !== undefined) {\n const name = cleanName(body.name);\n if (!name) throw new HttpError(400, \"Ungültiger Name.\");\n sets.push(\"name = ?\"); args.push(name);\n }\n if (!sets.length) throw new HttpError(400, \"Nichts zu ändern.\");\n args.push(id);\n await sqlite.execute({ sql: `UPDATE members SET ${sets.join(\", \")} WHERE id = ?`, args });\n if (body.active === false) {\n await sqlite.batch([\n { sql: \"DELETE FROM sessions WHERE member_id = ?\", args: [id] },\n { sql: \"DELETE FROM bookings WHERE member_id = ? AND date >= date('now')\", args: [id] },\n ]);\n }\n return c.json({ ok: true });\n});\n\napp.post(\"/api/admin/members/:id/reset\", async (c) => {\n requireAdmin(c);\n const id = Number(c.req.param(\"id\"));\n const code = newInviteCode();\n await sqlite.batch([\n { sql: \"UPDATE members SET pin_hash = NULL, pin_salt = NULL, invite_code = ? WHERE id = ?\", args: [code, id] },\n { sql: \"DELETE FROM sessions WHERE member_id = ?\", args: [id] },\n ]);\n return c.json({ ok: true, inviteCode: code });\n});\n\napp.delete(\"/api/admin/members/:id\", async (c) => {\n const admin = requireAdmin(c);\n const id = Number(c.req.param(\"id\"));\n if (id === admin.id) throw new HttpError(400, \"Du kannst dich nicht selbst löschen.\");\n await sqlite.batch([\n { sql: \"DELETE FROM sessions WHERE member_id = ?\", args: [id] },\n { sql: \"DELETE FROM bookings WHERE member_id = ?\", args: [id] },\n { sql: \"DELETE FROM members WHERE id = ?\", args: [id] },\n ]);\n return c.json({ ok: true });\n});\n\napp.get(\"/api/admin/resources\", async (c) => {\n requireAdmin(c);\n return c.json({ resources: await listResources(false) });\n});\n\napp.put(\"/api/admin/resources/:id\", async (c) => {\n requireAdmin(c);\n const id = c.req.param(\"id\");\n const body = await c.req.json().catch(() => ({}));\n const existing = await getResource(id);\n const base: Resource = existing ?? { ...DEFAULT_GOLF, id, name: id };\n const num = (key: keyof Resource, min: number, max: number) => {\n const v = body[key] === undefined ? base[key] : Number(body[key]);\n if (!Number.isInteger(v) || v < min || v > max) throw new HttpError(400, `Ungültiger Wert für ${key}.`);\n return v as number;\n };\n const r: Resource = {\n id,\n name: typeof body.name === \"string\" && body.name.trim() ? body.name.trim().slice(0, 40) : base.name,\n capacity: num(\"capacity\", 1, 50),\n vipReserved: num(\"vipReserved\", 0, 50),\n reserveReleaseHours: num(\"reserveReleaseHours\", 0, 240),\n leadDaysVip: num(\"leadDaysVip\", 0, 90),\n leadDaysStd: num(\"leadDaysStd\", 0, 90),\n weekdayOpen: num(\"weekdayOpen\", 0, 23),\n weekdayClose: num(\"weekdayClose\", 1, 24),\n weekendOpen: num(\"weekendOpen\", 0, 23),\n weekendClose: num(\"weekendClose\", 1, 24),\n maxOpenPerMember: num(\"maxOpenPerMember\", 1, 50),\n active: body.active === undefined ? base.active : (body.active ? 1 : 0),\n };\n if (r.vipReserved > r.capacity) throw new HttpError(400, \"Reservierte Plätze dürfen die Kapazität nicht übersteigen.\");\n if (r.weekdayOpen >= r.weekdayClose || r.weekendOpen >= r.weekendClose) throw new HttpError(400, \"Öffnung muss vor Schließung liegen.\");\n await upsertResource(r, existing ? undefined : 10);\n return c.json({ ok: true, resource: r });\n});\n\napp.get(\"/api/admin/bookings\", async (c) => {\n requireAdmin(c);\n const now = localNow();\n const from = c.req.query(\"from\") ?? now.date;\n const to = c.req.query(\"to\") ?? addDays(now.date, 14);\n if (!isValidDate(from) || !isValidDate(to)) throw new HttpError(400, \"Ungültiges Datum.\");\n const r = await sqlite.execute({\n sql: `SELECT b.id, b.resource_id, b.date, b.hour, b.created_at, m.name, m.is_vip\n FROM bookings b JOIN members m ON m.id = b.member_id\n WHERE b.date BETWEEN ? AND ? ORDER BY b.date, b.hour, b.created_at`,\n args: [from, to],\n });\n return c.json({\n bookings: r.rows.map((row) => ({\n id: Number(row.id),\n resourceId: String(row.resource_id),\n date: String(row.date),\n hour: Number(row.hour),\n createdAt: String(row.created_at),\n name: String(row.name),\n isVip: Number(row.is_vip) === 1,\n })),\n });\n});\n\nexport default app.fetch;\n","label","jk-golfakademie",[136],"7e19e212-95e2-4d25-9bb1-ccec38d87308","lib","d7a76aaf-e82b-46e9-915a-6241250f9ed1",2,["D",1789073571875],"directory",[148],"fe2bec12-2b41-40b5-8547-87442acec0e4","frontend","cf10625b-43cb-4093-a001-6cbdd3410d99",4,["D",1789073648998],[155],"pulls","branches","forks","envVars",{"_167":64,"_169":64},"connections",{"_167":64,"_168":64},"count","unfilledCount","emptyCount",{"_44":154,"_32":155,"_30":156,"_137":-5,"_42":43,"_41":157,"_139":60,"_39":219,"_13":64,"_34":152,"_36":-5,"_24":25,"_144":-5,"_179":220,"_27":221},{"_44":211,"_32":212,"_30":213,"_137":156,"_42":43,"_41":214,"_139":25,"_39":215,"_13":64,"_34":35,"_36":216,"_24":25,"_144":-5,"_179":217,"_27":218},{"_44":204,"_32":205,"_30":206,"_137":156,"_42":43,"_41":157,"_139":25,"_39":207,"_13":64,"_34":20,"_36":208,"_24":25,"_144":-5,"_179":209,"_27":210},{"_44":196,"_32":197,"_30":198,"_137":156,"_42":43,"_41":199,"_139":25,"_39":200,"_13":64,"_34":20,"_36":201,"_24":25,"_144":-5,"_179":202,"_27":203},{"_44":147,"_32":148,"_30":149,"_137":-5,"_42":43,"_41":150,"_139":60,"_39":193,"_13":64,"_34":152,"_36":-5,"_24":25,"_144":-5,"_179":194,"_27":195},{"_44":189,"_32":33,"_30":31,"_137":149,"_42":43,"_41":14,"_139":25,"_39":190,"_13":141,"_34":35,"_36":38,"_24":25,"_144":-5,"_179":191,"_27":192},{"_44":182,"_32":183,"_30":184,"_137":149,"_42":43,"_41":150,"_139":60,"_39":185,"_13":64,"_34":35,"_36":186,"_24":25,"_144":-5,"_179":187,"_27":188},{"_44":135,"_32":136,"_30":58,"_137":-5,"_42":43,"_41":138,"_139":25,"_39":178,"_13":141,"_34":142,"_36":143,"_24":25,"_144":145,"_179":180,"_27":181},["D",1789073873967],"children",[],[136],"17a3e205-bb37-449c-9c3e-d7f75c402f74","time.ts","96cd6e74-ad59-11f1-8452-1607ee4eb77e",["D",1789073571875],"// Zeitfunktionen für Europe/Berlin – Val Town läuft in UTC, die Buchungen\n// sind aber in lokaler Zeit gedacht. Alle Slots werden als (Datum, Stunde)\n// in Berliner Zeit gespeichert.\n\nexport const TZ = \"Europe/Berlin\";\n\nexport type LocalNow = { date: string; hour: number; minute: number; epoch: number };\n\nconst fmt = new Intl.DateTimeFormat(\"en-CA\", {\n timeZone: TZ,\n year: \"numeric\",\n month: \"2-digit\",\n day: \"2-digit\",\n hour: \"2-digit\",\n minute: \"2-digit\",\n hour12: false,\n});\n\n/** Zerlegt einen Zeitpunkt in Berliner Datum/Stunde/Minute. */\nexport function toLocal(epochMs: number): LocalNow {\n const parts: Record = {};\n for (const p of fmt.formatToParts(new Date(epochMs))) parts[p.type] = p.value;\n const hour = Number(parts.hour) % 24; // manche Engines liefern \"24\" für Mitternacht\n return {\n date: `${parts.year}-${parts.month}-${parts.day}`,\n hour,\n minute: Number(parts.minute),\n epoch: epochMs,\n };\n}\n\nexport function localNow(): LocalNow {\n return toLocal(Date.now());\n}\n\n/** Berliner (Datum, Stunde) -> Epoch-Millisekunden, sommerzeitsicher. */\nexport function slotStartEpoch(date: string, hour: number): number {\n const [y, m, d] = date.split(\"-\").map(Number);\n // Erste Annahme: als wäre es UTC, dann Offset zweimal korrigieren.\n let guess = Date.UTC(y, m - 1, d, hour, 0, 0);\n for (let i = 0; i < 2; i++) {\n const loc = toLocal(guess);\n const asUtc = Date.UTC(\n Number(loc.date.slice(0, 4)),\n Number(loc.date.slice(5, 7)) - 1,\n Number(loc.date.slice(8, 10)),\n loc.hour,\n loc.minute,\n );\n guess += Date.UTC(y, m - 1, d, hour) - asUtc;\n }\n return guess;\n}\n\n/** 0 = Sonntag … 6 = Samstag, für ein YYYY-MM-DD in Berliner Zeit. */\nexport function weekday(date: string): number {\n const [y, m, d] = date.split(\"-\").map(Number);\n return new Date(Date.UTC(y, m - 1, d, 12)).getUTCDay();\n}\n\nexport function isWeekend(date: string): boolean {\n const wd = weekday(date);\n return wd === 0 || wd === 6;\n}\n\n/** Kalendertage von `from` bis `to` (positiv, wenn `to` später liegt). */\nexport function daysBetween(from: string, to: string): number {\n return Math.round((dateUtc(to) - dateUtc(from)) / 86400000);\n}\n\nfunction dateUtc(date: string): number {\n const [y, m, d] = date.split(\"-\").map(Number);\n return Date.UTC(y, m - 1, d);\n}\n\nexport function addDays(date: string, n: number): string {\n const [y, m, d] = date.split(\"-\").map(Number);\n const t = new Date(Date.UTC(y, m - 1, d + n, 12));\n return t.toISOString().slice(0, 10);\n}\n\nexport function isValidDate(s: unknown): s is string {\n if (typeof s !== \"string\" || !/^\\d{4}-\\d{2}-\\d{2}$/.test(s)) return false;\n const [y, m, d] = s.split(\"-\").map(Number);\n const t = new Date(Date.UTC(y, m - 1, d));\n return t.getUTCFullYear() === y && t.getUTCMonth() === m - 1 && t.getUTCDate() === d;\n}\n",[],[148,183],"b1f89918-cf3f-48b0-9efa-d9d1ecf7c6c4",["D",1789075690497],[],[148,33],["D",1789073571875],[175,176],[148],"0e9f86a4-ccde-4edb-a280-bf858a30cc8e","style.css","e324ab0c-ad59-11f1-a83b-1607ee4eb77e",5,["D",1789073699951],":root {\n --ground: #f6f7f3;\n --surface: #ffffff;\n --surface-2: #eef1ea;\n --ink: #16211b;\n --ink-2: #4c574f;\n --muted: #7a857d;\n --line: #d8ddd5;\n --green: #1f6b45;\n --green-ink: #ffffff;\n --green-soft: #dff0e5;\n --fairway: #0f3b28;\n --fairway-ink: #e9f2ec;\n --gold: #b9892a;\n --gold-soft: #f6ecd2;\n --danger: #b23a3a;\n --danger-soft: #f7e1e1;\n --shadow: 0 1px 2px rgba(22, 33, 27, .06), 0 8px 24px -12px rgba(22, 33, 27, .18);\n --radius: 10px;\n --font-display: \"Bricolage Grotesque\", \"Avenir Next\", \"Segoe UI\", sans-serif;\n --font-body: \"IBM Plex Sans\", \"Helvetica Neue\", Arial, sans-serif;\n color-scheme: light;\n}\n@media (prefers-color-scheme: dark) {\n :root:not([data-theme=\"light\"]) {\n --ground: #101713; --surface: #172019; --surface-2: #1f2a22; --ink: #e8eee9; --ink-2: #b7c1b9;\n --muted: #7f8b82; --line: #2b3830; --green: #5fbb8b; --green-ink: #0b1a12; --green-soft: #17342a;\n --fairway: #0b2a1c; --fairway-ink: #dbe8df; --gold: #d8ae55; --gold-soft: #3a3016;\n --danger: #e07a7a; --danger-soft: #3b2020; --shadow: 0 1px 2px rgba(0,0,0,.4), 0 8px 24px -12px rgba(0,0,0,.6);\n color-scheme: dark;\n }\n}\n:root[data-theme=\"dark\"] {\n --ground: #101713; --surface: #172019; --surface-2: #1f2a22; --ink: #e8eee9; --ink-2: #b7c1b9;\n --muted: #7f8b82; --line: #2b3830; --green: #5fbb8b; --green-ink: #0b1a12; --green-soft: #17342a;\n --fairway: #0b2a1c; --fairway-ink: #dbe8df; --gold: #d8ae55; --gold-soft: #3a3016;\n --danger: #e07a7a; --danger-soft: #3b2020; --shadow: 0 1px 2px rgba(0,0,0,.4), 0 8px 24px -12px rgba(0,0,0,.6);\n color-scheme: dark;\n}\n\n* { box-sizing: border-box; }\nhtml { -webkit-text-size-adjust: 100%; }\nbody {\n margin: 0; background: var(--ground); color: var(--ink);\n font-family: var(--font-body); font-size: 15px; line-height: 1.5;\n font-variant-numeric: tabular-nums;\n min-height: 100dvh; display: flex; flex-direction: column;\n}\n.wrap { width: 100%; max-width: 1080px; margin-inline: auto; padding-inline: 20px; }\nmain.wrap { flex: 1; padding-block: 28px 48px; }\nh1, h2, h3 { margin: 0; text-wrap: balance; }\n.display { font-family: var(--font-display); font-weight: 700; font-size: clamp(26px, 4vw, 36px); letter-spacing: -.01em; line-height: 1.1; }\nh2 { font-family: var(--font-display); font-weight: 700; font-size: 20px; }\np { margin: 0; }\na { color: var(--green); }\nbutton { font: inherit; cursor: pointer; }\ninput { font: inherit; color: var(--ink); }\n:focus-visible { outline: 2px solid var(--green); outline-offset: 2px; }\n[hidden] { display: none !important; }\n.mono { font-family: ui-monospace, SFMono-Regular, Menlo, monospace; letter-spacing: .06em; text-transform: uppercase; }\n\n/* Kopfzeile */\n.topbar { background: var(--fairway); color: var(--fairway-ink); }\n.topbar-inner { display: flex; align-items: center; gap: 20px; min-height: 60px; flex-wrap: wrap; padding-block: 8px; }\n.brand { display: inline-flex; align-items: center; gap: 10px; color: inherit; text-decoration: none; font-family: var(--font-display); font-weight: 700; font-size: 22px; letter-spacing: -.01em; }\n.brand-mark { width: 26px; height: 26px; }\n.nav { display: flex; gap: 4px; margin-left: 8px; }\n.navbtn { background: transparent; border: 0; color: var(--fairway-ink); opacity: .75; padding: 8px 12px; border-radius: 8px; font-weight: 500; }\n.navbtn:hover { opacity: 1; background: rgba(255,255,255,.08); }\n.navbtn.is-active { opacity: 1; background: rgba(255,255,255,.14); }\n.who { margin-left: auto; display: flex; align-items: center; gap: 12px; font-size: 14px; }\n.who .vip { color: var(--gold); }\n.linkbtn { background: none; border: 0; color: inherit; opacity: .75; text-decoration: underline; padding: 4px; }\n.linkbtn:hover { opacity: 1; }\n\n/* Anmeldung */\n.auth { display: grid; place-items: start center; padding-top: 24px; }\n.auth-card { width: 100%; max-width: 440px; background: var(--surface); border: 1px solid var(--line); border-radius: 14px; padding: 28px; box-shadow: var(--shadow); display: grid; gap: 16px; }\n.lede { color: var(--ink-2); max-width: 40ch; }\n.tabs { display: flex; border-bottom: 1px solid var(--line); gap: 4px; }\n.tab { background: none; border: 0; padding: 8px 12px; color: var(--muted); font-weight: 500; border-bottom: 2px solid transparent; margin-bottom: -1px; }\n.tab.is-active { color: var(--ink); border-bottom-color: var(--green); }\n.form { display: grid; gap: 14px; }\n.form label { display: grid; gap: 6px; font-size: 13px; font-weight: 500; color: var(--ink-2); }\n.form input { padding: 10px 12px; border: 1px solid var(--line); border-radius: 8px; background: var(--ground); font-size: 16px; }\n.hint { color: var(--muted); font-size: 13px; }\n.error { color: var(--danger); font-size: 14px; }\n.notice { background: var(--gold-soft); border: 1px solid var(--gold); border-radius: 8px; padding: 10px 12px; font-size: 14px; }\n.notice code { font-weight: 600; }\n\n/* Buttons */\n.btn { border-radius: 8px; padding: 9px 14px; border: 1px solid transparent; font-weight: 600; font-size: 14px; white-space: nowrap; }\n.btn-primary { background: var(--green); color: var(--green-ink); }\n.btn-primary:hover { filter: brightness(1.08); }\n.btn-ghost { background: transparent; border-color: var(--line); color: var(--ink); }\n.btn-ghost:hover { background: var(--surface-2); }\n.btn-danger { background: transparent; border-color: var(--line); color: var(--danger); }\n.btn-danger:hover { background: var(--danger-soft); }\n.btn:disabled { opacity: .5; cursor: not-allowed; filter: none; }\n.btn-sm { padding: 5px 10px; font-size: 13px; }\n\n/* Buchen */\n.booking-head { display: flex; justify-content: space-between; align-items: flex-end; gap: 16px; flex-wrap: wrap; margin-bottom: 16px; }\n.sub { color: var(--ink-2); margin-top: 4px; }\n.segmented { display: inline-flex; border: 1px solid var(--line); border-radius: 999px; padding: 3px; background: var(--surface); margin-bottom: 10px; }\n.segmented button { border: 0; background: transparent; padding: 5px 12px; border-radius: 999px; color: var(--ink-2); font-weight: 500; font-size: 13px; }\n.segmented button.is-active { background: var(--green); color: var(--green-ink); }\n.legend { display: flex; gap: 14px; font-size: 13px; color: var(--ink-2); }\n.legend span { display: inline-flex; align-items: center; gap: 6px; }\n.dot { width: 10px; height: 10px; border-radius: 50%; display: inline-block; border: 1.5px solid var(--line); background: var(--surface); }\n.dot-vip { border-color: var(--gold); background: var(--gold-soft); }\n.dot-mine { border-color: var(--green); background: var(--green); }\n\n.daystrip { display: flex; gap: 6px; overflow-x: auto; padding-bottom: 8px; margin-bottom: 14px; scrollbar-width: thin; }\n.day { flex: 0 0 auto; min-width: 64px; border: 1px solid var(--line); background: var(--surface); border-radius: 10px; padding: 8px 6px; text-align: center; display: grid; gap: 2px; color: var(--ink-2); }\n.day .wd { font-size: 11px; text-transform: uppercase; letter-spacing: .08em; }\n.day .dn { font-family: var(--font-display); font-weight: 700; font-size: 20px; color: var(--ink); line-height: 1; }\n.day .mo { font-size: 11px; }\n.day.is-weekend { background: var(--surface-2); }\n.day.is-active { border-color: var(--green); background: var(--green); color: var(--green-ink); }\n.day.is-active .dn { color: var(--green-ink); }\n.day.is-locked { opacity: .45; }\n\n.slots { display: grid; gap: 8px; }\n.slot { display: grid; grid-template-columns: 96px 1fr auto; align-items: center; gap: 14px; background: var(--surface); border: 1px solid var(--line); border-radius: var(--radius); padding: 10px 14px; }\n.slot.is-past { opacity: .5; }\n.slot.is-mine { border-color: var(--green); box-shadow: inset 3px 0 0 var(--green); }\n.slot .time { font-family: var(--font-display); font-weight: 700; font-size: 18px; line-height: 1.1; }\n.slot .time small { display: block; font-family: var(--font-body); font-weight: 400; font-size: 12px; color: var(--muted); }\n.seats { display: flex; flex-wrap: wrap; gap: 6px; align-items: center; }\n.seat { display: inline-flex; align-items: center; gap: 6px; border: 1.5px solid var(--line); border-radius: 999px; padding: 3px 10px 3px 8px; font-size: 13px; min-height: 28px; background: var(--surface); }\n.seat.is-free { color: var(--muted); border-style: dashed; }\n.seat.is-vip-reserve { color: var(--gold); border-color: var(--gold); border-style: dashed; background: var(--gold-soft); }\n.seat.is-taken { color: var(--ink); background: var(--surface-2); }\n.seat.is-mine { border-color: var(--green); background: var(--green-soft); color: var(--ink); font-weight: 600; }\n.seat .star { color: var(--gold); font-size: 12px; }\n.slot .reason { font-size: 12px; color: var(--muted); grid-column: 2; margin-top: -4px; }\n.slot .action { display: grid; justify-items: end; gap: 2px; }\n.flash { border-radius: 8px; padding: 10px 12px; margin-bottom: 12px; font-size: 14px; background: var(--green-soft); border: 1px solid var(--green); }\n.flash.is-error { background: var(--danger-soft); border-color: var(--danger); color: var(--danger); }\n.empty { color: var(--muted); padding: 24px; text-align: center; border: 1px dashed var(--line); border-radius: var(--radius); }\n\n/* Meine Termine */\n.mine-list { display: grid; gap: 8px; margin-top: 16px; }\n.mine { display: grid; grid-template-columns: 1fr auto; gap: 12px; align-items: center; background: var(--surface); border: 1px solid var(--line); border-radius: var(--radius); padding: 12px 14px; }\n.mine .when { font-family: var(--font-display); font-weight: 700; font-size: 17px; }\n.mine .what { color: var(--ink-2); font-size: 13px; }\n\n/* Verwaltung */\n.admin-grid { display: grid; grid-template-columns: repeat(auto-fit, minmax(340px, 1fr)); gap: 16px; margin-top: 16px; }\n.panel { background: var(--surface); border: 1px solid var(--line); border-radius: 14px; padding: 18px; display: grid; gap: 12px; align-content: start; }\n.panel-wide { grid-column: 1 / -1; }\n.row-form { display: flex; gap: 8px; flex-wrap: wrap; align-items: center; }\n.row-form input[type=\"text\"] { flex: 1 1 180px; padding: 9px 12px; border: 1px solid var(--line); border-radius: 8px; background: var(--ground); }\n.check { display: inline-flex; align-items: center; gap: 6px; font-size: 14px; }\n.table-wrap { overflow-x: auto; }\n.table { width: 100%; border-collapse: collapse; font-size: 14px; }\n.table th { text-align: left; font-size: 11px; text-transform: uppercase; letter-spacing: .08em; color: var(--muted); font-weight: 600; padding: 6px 8px; border-bottom: 1px solid var(--line); }\n.table td:first-child { white-space: nowrap; }\n.table td { padding: 8px; border-bottom: 1px solid var(--line); vertical-align: middle; }\n.table tr:last-child td { border-bottom: 0; }\n.table .actions { display: flex; gap: 6px; justify-content: flex-end; flex-wrap: wrap; }\n.pill { display: inline-block; border-radius: 999px; padding: 1px 8px; font-size: 12px; font-weight: 600; }\n.pill-ok { background: var(--green-soft); color: var(--green); }\n.pill-wait { background: var(--gold-soft); color: var(--gold); }\n.pill-off { background: var(--surface-2); color: var(--muted); }\n.code { font-family: ui-monospace, SFMono-Regular, Menlo, monospace; font-weight: 600; letter-spacing: .06em; }\n.res-form { border: 1px solid var(--line); border-radius: 10px; padding: 12px; display: grid; gap: 10px; margin-bottom: 10px; }\n.res-form h3 { font-family: var(--font-display); font-size: 16px; }\n.res-grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(140px, 1fr)); gap: 8px; }\n.res-grid label { display: grid; gap: 4px; font-size: 12px; color: var(--ink-2); }\n.res-grid input { padding: 7px 9px; border: 1px solid var(--line); border-radius: 6px; background: var(--ground); font-size: 14px; width: 100%; }\n.res-form .row-form { justify-content: space-between; }\n\n.foot { display: flex; justify-content: space-between; gap: 12px; padding-block: 16px; font-size: 12px; color: var(--muted); border-top: 1px solid var(--line); }\n\n@media (max-width: 640px) {\n .wrap { padding-inline: 16px; }\n .slot { grid-template-columns: 1fr; gap: 8px; }\n .slot .action { justify-items: start; }\n .slot .reason { grid-column: 1; }\n .topbar-inner { gap: 10px; }\n .nav { order: 3; width: 100%; margin-left: 0; }\n .legend { font-size: 12px; }\n}\n@media (prefers-reduced-motion: no-preference) {\n .btn, .day, .navbtn { transition: background-color .15s, border-color .15s, opacity .15s; }\n}\n",[],[155,197],"97be8556-f368-47e9-ae33-333f865353eb","index.html","c4c7ef8e-ad59-11f1-865c-1607ee4eb77e",["D",1789073648998],"\n\n\n\n\nAbschlag\n\n\n\n\n\n\n\n\n

\n \n \n\n \n \n\n \n \n\n \n

Verwaltung

Spieler

Lege jeden Spieler mit Klarnamen an. Der Einladungscode wird einmalig gebraucht, um die eigene PIN festzulegen.

\n \n \n

\n \n \n \n

Name	Status	VIP	Admin	Code

Ressourcen & Regeln

Jede Ressource hat eigene Kapazität, Zeiten und VIP-Regeln. Für Fitness einfach eine zweite Ressource anlegen.

\n \n

Alle Buchungen der nächsten 14 Tage

\n \n \n \n

Datum	Uhrzeit	Ressource	Spieler	Gebucht am

\n\n\n\n\n\n\n",[],[155,205],"8229d8f4-8820-48df-b27a-8173ab385059","app.js","0fc28ee0-ad5a-11f1-b2b7-1607ee4eb77e",6,["D",1789073774806],"// Abschlag – Oberfläche (ohne Framework, ohne Build-Schritt)\n\nconst $ = (id) => document.getElementById(id);\nconst state = {\n member: null,\n resources: [],\n resource: null,\n now: null,\n date: null,\n view: \"book\",\n};\n\nconst WD = [\"So\", \"Mo\", \"Di\", \"Mi\", \"Do\", \"Fr\", \"Sa\"];\nconst WD_LONG = [\"Sonntag\", \"Montag\", \"Dienstag\", \"Mittwoch\", \"Donnerstag\", \"Freitag\", \"Samstag\"];\nconst MO = [\"Jan\", \"Feb\", \"Mär\", \"Apr\", \"Mai\", \"Jun\", \"Jul\", \"Aug\", \"Sep\", \"Okt\", \"Nov\", \"Dez\"];\n\nasync function api(path, opts = {}) {\n const res = await fetch(path, {\n headers: { \"Content-Type\": \"application/json\" },\n credentials: \"same-origin\",\n ...opts,\n body: opts.body ? JSON.stringify(opts.body) : undefined,\n });\n const data = await res.json().catch(() => ({}));\n if (!res.ok) throw new Error(data.error || `Fehler ${res.status}`);\n return data;\n}\n\nfunction esc(s) {\n return String(s).replace(/[&<>\"']/g, (c) => ({ \"&\": \"&\", \"<\": \"<\", \">\": \">\", '\"': \""\", \"'\": \"'\" }[c]));\n}\nfunction weekdayOf(date) {\n const [y, m, d] = date.split(\"-\").map(Number);\n return new Date(Date.UTC(y, m - 1, d, 12)).getUTCDay();\n}\nfunction addDays(date, n) {\n const [y, m, d] = date.split(\"-\").map(Number);\n return new Date(Date.UTC(y, m - 1, d + n, 12)).toISOString().slice(0, 10);\n}\nfunction fmtDate(date, long = false) {\n const [y, m, d] = date.split(\"-\").map(Number);\n return `${long ? WD_LONG[weekdayOf(date)] : WD[weekdayOf(date)]}, ${d}. ${MO[m - 1]}${long ? \" \" + y : \"\"}`;\n}\nfunction fmtStamp(utc) {\n const d = new Date(utc.replace(\" \", \"T\") + \"Z\");\n return d.toLocaleString(\"de-DE\", { timeZone: \"Europe/Berlin\", day: \"2-digit\", month: \"2-digit\", hour: \"2-digit\", minute: \"2-digit\" });\n}\nfunction flash(el, text, isError = false) {\n el.textContent = text;\n el.classList.toggle(\"is-error\", isError);\n el.hidden = !text;\n if (text && !isError) setTimeout(() => { if (el.textContent === text) el.hidden = true; }, 4000);\n}\n\n// ───────────── Ansichten ─────────────\n\nfunction showView(view) {\n state.view = view;\n for (const v of [\"auth\", \"book\", \"mine\", \"admin\"]) $(\"view-\" + v).hidden = v !== view;\n for (const b of document.querySelectorAll(\".navbtn\")) b.classList.toggle(\"is-active\", b.dataset.view === view);\n if (view === \"book\") loadSlots();\n if (view === \"mine\") loadMine();\n if (view === \"admin\") loadAdmin();\n}\n\nasync function boot() {\n const me = await api(\"/api/me\");\n state.member = me.member;\n state.resources = me.resources;\n state.now = me.now;\n if (!state.date) state.date = me.now.date;\n if (!state.resource || !state.resources.some((r) => r.id === state.resource.id)) state.resource = state.resources[0] ?? null;\n\n const banner = $(\"setup-banner\");\n if (me.setupCode && !me.member) {\n banner.innerHTML = `Ersteinrichtung. Noch niemand ist registriert. Admin-Zugang: ${esc(me.setupCode)} – bitte sofort unter „Erste Anmeldung“ mit diesem Namen und Code eine PIN festlegen.`;\n banner.hidden = false;\n } else banner.hidden = true;\n\n const loggedIn = !!me.member;\n $(\"nav\").hidden = !loggedIn;\n $(\"who\").hidden = !loggedIn;\n if (loggedIn) {\n $(\"who-name\").innerHTML = esc(me.member.name) + (me.member.isVip ? ' ★' : \"\");\n $(\"nav-admin\").hidden = !me.member.isAdmin;\n renderResourceTabs();\n showView(state.view === \"auth\" ? \"book\" : state.view);\n } else {\n showView(\"auth\");\n }\n}\n\n// ───────────── Anmeldung ─────────────\n\n$(\"tab-login\").onclick = () => switchAuthTab(\"login\");\n$(\"tab-register\").onclick = () => switchAuthTab(\"register\");\nfunction switchAuthTab(which) {\n $(\"form-login\").hidden = which !== \"login\";\n $(\"form-register\").hidden = which !== \"register\";\n $(\"tab-login\").classList.toggle(\"is-active\", which === \"login\");\n $(\"tab-register\").classList.toggle(\"is-active\", which === \"register\");\n}\n\n$(\"form-login\").onsubmit = async (e) => {\n e.preventDefault();\n $(\"login-error\").hidden = true;\n try {\n await api(\"/api/login\", { method: \"POST\", body: { name: $(\"login-name\").value, pin: $(\"login-pin\").value } });\n $(\"login-pin\").value = \"\";\n state.view = \"book\";\n await boot();\n } catch (err) {\n $(\"login-error\").textContent = err.message;\n $(\"login-error\").hidden = false;\n }\n};\n\n$(\"form-register\").onsubmit = async (e) => {\n e.preventDefault();\n const errEl = $(\"reg-error\");\n errEl.hidden = true;\n if ($(\"reg-pin\").value !== $(\"reg-pin2\").value) {\n errEl.textContent = \"Die beiden PINs stimmen nicht überein.\";\n errEl.hidden = false;\n return;\n }\n try {\n await api(\"/api/register\", {\n method: \"POST\",\n body: { name: $(\"reg-name\").value, code: $(\"reg-code\").value, pin: $(\"reg-pin\").value },\n });\n $(\"reg-pin\").value = $(\"reg-pin2\").value = \"\";\n state.view = \"book\";\n await boot();\n } catch (err) {\n errEl.textContent = err.message;\n errEl.hidden = false;\n }\n};\n\n$(\"logout\").onclick = async () => {\n await api(\"/api/logout\", { method: \"POST\" });\n state.view = \"auth\";\n await boot();\n};\n\nfor (const b of document.querySelectorAll(\".navbtn\")) b.onclick = () => showView(b.dataset.view);\n\n// ───────────── Buchen ─────────────\n\nfunction renderResourceTabs() {\n const el = $(\"resource-tabs\");\n el.hidden = state.resources.length < 2;\n el.innerHTML = state.resources\n .map((r) => ``)\n .join(\"\");\n for (const b of el.querySelectorAll(\"button\")) {\n b.onclick = () => {\n state.resource = state.resources.find((r) => r.id === b.dataset.id);\n renderResourceTabs();\n loadSlots();\n };\n }\n}\n\nfunction renderDaystrip() {\n const r = state.resource;\n const lead = state.member.isVip ? r.leadDaysVip : r.leadDaysStd;\n const days = [];\n const horizon = Math.max(r.leadDaysVip, r.leadDaysStd);\n for (let i = 0; i <= horizon; i++) days.push(addDays(state.now.date, i));\n $(\"daystrip\").innerHTML = days\n .map((d, i) => {\n const [y, m, dd] = d.split(\"-\").map(Number);\n const wd = weekdayOf(d);\n const cls = [\"day\", d === state.date ? \"is-active\" : \"\", wd === 0 || wd === 6 ? \"is-weekend\" : \"\", i > lead ? \"is-locked\" : \"\"].join(\" \");\n const title = i > lead ? `Erst ab ${lead} Tage vorher buchbar` : \"\";\n return ``;\n })\n .join(\"\");\n for (const b of $(\"daystrip\").querySelectorAll(\".day\")) {\n b.onclick = () => { state.date = b.dataset.date; loadSlots(); };\n }\n const active = $(\"daystrip\").querySelector(\".is-active\");\n if (active) active.scrollIntoView({ block: \"nearest\", inline: \"center\", behavior: \"instant\" });\n}\n\nasync function loadSlots() {\n if (!state.resource) {\n $(\"slots\").innerHTML = `

Noch keine Ressource eingerichtet.

`;\n return;\n }\n renderDaystrip();\n const r = state.resource;\n $(\"book-title\").textContent = r.name;\n $(\"book-sub\").textContent = `${fmtDate(state.date, true)} · ${r.capacity} Plätze pro Stunde · `\n + (state.member.isVip ? `als VIP bis ${r.leadDaysVip} Tage im Voraus` : `bis ${r.leadDaysStd} Tage im Voraus`);\n try {\n const data = await api(`/api/slots?resource=${encodeURIComponent(r.id)}&date=${state.date}`);\n state.now = data.now;\n renderSlots(data);\n } catch (err) {\n flash($(\"book-msg\"), err.message, true);\n }\n}\n\nfunction renderSlots(data) {\n const r = data.resource;\n const me = state.member;\n if (!data.slots.length) {\n $(\"slots\").innerHTML = `

An diesem Tag ist ${esc(r.name)} geschlossen.

`;\n return;\n }\n $(\"slots\").innerHTML = data.slots\n .map((s) => {\n const chips = [];\n for (const seat of s.seats) {\n const mine = seat.memberId === me.id;\n chips.push(`${seat.isVip ? '★' : \"\"}${esc(mine ? \"Du\" : seat.name)}`);\n }\n const freeSeats = r.capacity - s.seats.length;\n const nonVipTaken = s.seats.filter((x) => !x.isVip).length;\n // Für alle offen sind höchstens (Kapazität − Reserve) Plätze abzüglich der schon\n // belegten Nicht-VIP-Plätze; der Rest der freien Plätze ist VIP-Reserve.\n let reserved = 0;\n if (s.reserveActive && !s.past) {\n const nonVipCap = r.capacity - r.vipReserved;\n const openForAll = Math.max(0, Math.min(freeSeats, nonVipCap - nonVipTaken));\n reserved = freeSeats - openForAll;\n }\n for (let i = 0; i < freeSeats - reserved; i++) chips.push(`frei`);\n for (let i = 0; i < reserved; i++) chips.push(`★ VIP`);\n\n let action = \"\";\n if (s.myBookingId) {\n action = s.canCancel\n ? ``\n : `läuft`;\n } else if (s.canBook) {\n action = ``;\n } else {\n action = ``;\n }\n const reason = !s.myBookingId && !s.canBook && !s.past && s.reasonCode !== \"full\" ? `

${esc(s.reason)}

` : \"\";\n return `

${s.hour}:00bis ${s.hour + 1}:00

${chips.join(\"\")}

${action}

\n ${reason}\n

`;\n })\n .join(\"\");\n\n for (const b of $(\"slots\").querySelectorAll(\"[data-book]\")) {\n b.onclick = async () => {\n b.disabled = true;\n try {\n await api(\"/api/bookings\", { method: \"POST\", body: { resource: r.id, date: data.date, hour: Number(b.dataset.book) } });\n flash($(\"book-msg\"), `Gebucht: ${fmtDate(data.date)}, ${b.dataset.book}:00 Uhr.`);\n } catch (err) {\n flash($(\"book-msg\"), err.message, true);\n }\n loadSlots();\n };\n }\n for (const b of $(\"slots\").querySelectorAll(\"[data-cancel]\")) {\n b.onclick = async () => {\n b.disabled = true;\n try {\n await api(`/api/bookings/${b.dataset.cancel}`, { method: \"DELETE\" });\n flash($(\"book-msg\"), \"Buchung storniert.\");\n } catch (err) {\n flash($(\"book-msg\"), err.message, true);\n }\n loadSlots();\n };\n }\n}\n\n// ───────────── Meine Termine ─────────────\n\nasync function loadMine() {\n const { bookings } = await api(\"/api/bookings/mine\");\n $(\"mine-sub\").textContent = bookings.length ? `${bookings.length} anstehende${bookings.length === 1 ? \"r Termin\" : \" Termine\"}` : \"\";\n if (!bookings.length) {\n $(\"mine-list\").innerHTML = `

Du hast noch keine Termine. Jetzt buchen

`;\n $(\"go-book\").onclick = (e) => { e.preventDefault(); showView(\"book\"); };\n return;\n }\n $(\"mine-list\").innerHTML = bookings\n .map((b) => `

${fmtDate(b.date, true)} · ${b.hour}:00–${b.hour + 1}:00

${esc(b.resourceName)}

`)\n .join(\"\");\n for (const btn of $(\"mine-list\").querySelectorAll(\"[data-cancel]\")) {\n btn.onclick = async () => {\n btn.disabled = true;\n try { await api(`/api/bookings/${btn.dataset.cancel}`, { method: \"DELETE\" }); } catch (err) { alert(err.message); }\n loadMine();\n };\n }\n}\n\n// ───────────── Verwaltung ─────────────\n\nasync function loadAdmin() {\n await Promise.all([loadMembers(), loadResources(), loadAllBookings()]);\n}\n\nasync function loadMembers() {\n const { members } = await api(\"/api/admin/members\");\n const tb = $(\"members-table\").querySelector(\"tbody\");\n tb.innerHTML = members\n .map((m) => {\n const status = !m.active ? 'deaktiviert'\n : m.registered ? 'registriert' : 'wartet';\n const code = m.inviteCode ? `${esc(m.inviteCode)}` : \"—\";\n return `\n ${esc(m.name)}\n ${status}\n \n \n ${code}\n

\n \n ${m.active\n ? ``\n : `\n `}\n

`;\n })\n .join(\"\");\n const patch = async (id, body) => {\n try { await api(`/api/admin/members/${id}`, { method: \"PATCH\", body }); } catch (err) { flash($(\"admin-msg\"), err.message, true); }\n loadMembers();\n };\n for (const el of tb.querySelectorAll(\"[data-vip]\")) el.onchange = () => patch(el.dataset.vip, { isVip: el.checked });\n for (const el of tb.querySelectorAll(\"[data-admin]\")) el.onchange = () => patch(el.dataset.admin, { isAdmin: el.checked });\n for (const el of tb.querySelectorAll(\"[data-deact]\")) el.onclick = () => patch(el.dataset.deact, { active: false });\n for (const el of tb.querySelectorAll(\"[data-act]\")) el.onclick = () => patch(el.dataset.act, { active: true });\n for (const el of tb.querySelectorAll(\"[data-reset]\")) el.onclick = async () => {\n try {\n const r = await api(`/api/admin/members/${el.dataset.reset}/reset`, { method: \"POST\" });\n flash($(\"admin-msg\"), `Neuer Einladungscode: ${r.inviteCode}`);\n } catch (err) { flash($(\"admin-msg\"), err.message, true); }\n loadMembers();\n };\n for (const el of tb.querySelectorAll(\"[data-del]\")) el.onclick = async () => {\n try { await api(`/api/admin/members/${el.dataset.del}`, { method: \"DELETE\" }); } catch (err) { flash($(\"admin-msg\"), err.message, true); }\n loadMembers();\n };\n}\n\n$(\"form-add-member\").onsubmit = async (e) => {\n e.preventDefault();\n try {\n const r = await api(\"/api/admin/members\", {\n method: \"POST\",\n body: { name: $(\"new-member-name\").value, isVip: $(\"new-member-vip\").checked },\n });\n flash($(\"admin-msg\"), `${$(\"new-member-name\").value.trim()} angelegt. Einladungscode: ${r.inviteCode}`);\n $(\"new-member-name\").value = \"\";\n $(\"new-member-vip\").checked = false;\n loadMembers();\n } catch (err) {\n flash($(\"admin-msg\"), err.message, true);\n }\n};\n\nconst RES_FIELDS = [\n [\"name\", \"Name\", \"text\"],\n [\"capacity\", \"Plätze / Stunde\", \"number\"],\n [\"vipReserved\", \"davon VIP-Reserve\", \"number\"],\n [\"reserveReleaseHours\", \"Reserve frei ab (Std. vor Start)\", \"number\"],\n [\"leadDaysVip\", \"Vorlauf VIP (Tage)\", \"number\"],\n [\"leadDaysStd\", \"Vorlauf normal (Tage)\", \"number\"],\n [\"maxOpenPerMember\", \"Max. offene Buchungen / Spieler\", \"number\"],\n [\"weekdayOpen\", \"Mo–Fr ab (Uhr)\", \"number\"],\n [\"weekdayClose\", \"Mo–Fr bis (Uhr)\", \"number\"],\n [\"weekendOpen\", \"Sa/So ab (Uhr)\", \"number\"],\n [\"weekendClose\", \"Sa/So bis (Uhr)\", \"number\"],\n];\n\nfunction resourceForm(r, isNew = false) {\n const idField = isNew\n ? `Kennung (Kleinbuchstaben, z. B. fitness)`\n : \"\";\n return ``;\n}\n\nasync function loadResources() {\n const { resources } = await api(\"/api/admin/resources\");\n $(\"resource-forms\").innerHTML = resources.map((r) => resourceForm(r)).join(\"\");\n bindResourceForms();\n}\n\nfunction bindResourceForms() {\n for (const form of $(\"resource-forms\").querySelectorAll(\"form.res-form\")) {\n form.onsubmit = async (e) => {\n e.preventDefault();\n const fd = new FormData(form);\n const body = {};\n for (const [k, v] of fd.entries()) body[k] = k === \"name\" || k === \"id\" ? v : Number(v);\n body.active = form.querySelector('[name=\"active\"]').checked;\n const id = form.dataset.new === \"1\" ? String(fd.get(\"id\")) : form.dataset.res;\n try {\n await api(`/api/admin/resources/${encodeURIComponent(id)}`, { method: \"PUT\", body });\n flash($(\"admin-msg\"), `${body.name} gespeichert.`);\n const me = await api(\"/api/me\");\n state.resources = me.resources;\n renderResourceTabs();\n loadResources();\n } catch (err) {\n flash($(\"admin-msg\"), err.message, true);\n }\n };\n }\n}\n\n$(\"btn-new-resource\").onclick = () => {\n if ($(\"resource-forms\").querySelector('[data-new=\"1\"]')) return;\n const tpl = {\n id: \"\", name: \"Fitness\", capacity: 4, vipReserved: 1, reserveReleaseHours: 24, leadDaysVip: 14, leadDaysStd: 7,\n weekdayOpen: 9, weekdayClose: 22, weekendOpen: 10, weekendClose: 21, maxOpenPerMember: 3, active: 1,\n };\n $(\"resource-forms\").insertAdjacentHTML(\"beforeend\", resourceForm(tpl, true));\n bindResourceForms();\n};\n\nasync function loadAllBookings() {\n const { bookings } = await api(\"/api/admin/bookings\");\n const tb = $(\"bookings-table\").querySelector(\"tbody\");\n if (!bookings.length) {\n tb.innerHTML = `Keine Buchungen in den nächsten 14 Tagen.`;\n return;\n }\n const resName = (id) => state.resources.find((r) => r.id === id)?.name ?? id;\n tb.innerHTML = bookings\n .map((b) => `\n ${fmtDate(b.date)}${b.hour}:00–${b.hour + 1}:00${esc(resName(b.resourceId))}\n ${b.isVip ? '★ ' : \"\"}${esc(b.name)}\n ${fmtStamp(b.createdAt)}\n

`)\n .join(\"\");\n for (const btn of tb.querySelectorAll(\"[data-cancel]\")) {\n btn.onclick = async () => {\n try { await api(`/api/bookings/${btn.dataset.cancel}`, { method: \"DELETE\" }); } catch (err) { flash($(\"admin-msg\"), err.message, true); }\n loadAllBookings();\n };\n }\n}\n\nboot().catch((err) => {\n document.body.insertAdjacentHTML(\"afterbegin\", `

${esc(err.message)}

`);\n});\n",[],[155,212],["D",1789073648998],[171,172,173],[155],["D",1789073537776],["D",1789512044203],{"_101":100,"_109":105},{"_101":100,"_102":103,"_104":105,"_18":56,"_106":107,"_108":25},{"_13":90,"_32":91,"_44":43,"_92":45,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":46,"_99":100},"ctx",{"_83":-5,"_129":260,"_261":262,"_263":264,"_265":25,"_266":25,"_267":25,"_268":60,"_269":-5,"_270":-7,"_271":-7,"_272":64,"_273":25,"_274":25,"_275":-5,"_276":25,"_277":25,"_278":25,"_279":-5},"ENV",{"_231":232,"_233":234,"_235":91,"_236":237,"_238":239,"_240":241,"_242":243,"_244":245,"_246":247,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":259},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Golfsimulator buchen

Golfsimulator

Meine Termine

Verwaltung

Spieler

Ressourcen & Regeln

Alle Buchungen der nächsten 14 Tage

${isNew ? \"Neue Ressource\" : esc(r.name)}

Diff · v8