Verwaltung

Spieler, Regeln und alle Buchungen.

Spieler

Lege jeden Spieler mit Klarnamen an. Der Einladungscode wird einmalig gebraucht, um die eigene PIN festzulegen. Bei „PIN-Reset angefragt“ erzeugst du mit „PIN zurücksetzen“ einen neuen Code.

\n \n \n

\n \n \n \n

Name	Status	VIP	Admin	Code

Ressourcen & Regeln

Jede Ressource hat eigene Kapazität, Zeiten und VIP-Regeln. Für Fitness einfach eine zweite Ressource anlegen.

\n \n

Alle Buchungen der nächsten 14 Tage

\n \n \n \n

Datum	Uhrzeit	Ressource	Spieler	Gebucht am

\n\n\n\n\n\n\n",[19,69],"275c34f9-d891-4236-8116-21b35b9ca76a","app.js","0fc28ee0-ad5a-11f1-b2b7-1607ee4eb77e",49,["D",1789077911300],15,"script","// Abschlag – Oberfläche (ohne Framework, ohne Build-Schritt)\n\nconst $ = (id) => document.getElementById(id);\nconst state = {\n member: null,\n resources: [],\n resource: null,\n now: null,\n date: null,\n view: \"book\",\n};\n\nconst WD = [\"So\", \"Mo\", \"Di\", \"Mi\", \"Do\", \"Fr\", \"Sa\"];\nconst WD_LONG = [\"Sonntag\", \"Montag\", \"Dienstag\", \"Mittwoch\", \"Donnerstag\", \"Freitag\", \"Samstag\"];\nconst MO = [\"Jan\", \"Feb\", \"Mär\", \"Apr\", \"Mai\", \"Jun\", \"Jul\", \"Aug\", \"Sep\", \"Okt\", \"Nov\", \"Dez\"];\n\nasync function api(path, opts = {}) {\n const res = await fetch(path, {\n headers: { \"Content-Type\": \"application/json\" },\n credentials: \"same-origin\",\n ...opts,\n body: opts.body ? JSON.stringify(opts.body) : undefined,\n });\n const data = await res.json().catch(() => ({}));\n if (!res.ok) throw new Error(data.error || `Fehler ${res.status}`);\n return data;\n}\n\nfunction esc(s) {\n return String(s).replace(/[&<>\"']/g, (c) => ({ \"&\": \"&\", \"<\": \"<\", \">\": \">\", '\"': \""\", \"'\": \"'\" }[c]));\n}\nfunction weekdayOf(date) {\n const [y, m, d] = date.split(\"-\").map(Number);\n return new Date(Date.UTC(y, m - 1, d, 12)).getUTCDay();\n}\nfunction addDays(date, n) {\n const [y, m, d] = date.split(\"-\").map(Number);\n return new Date(Date.UTC(y, m - 1, d + n, 12)).toISOString().slice(0, 10);\n}\nfunction fmtDate(date, long = false) {\n const [y, m, d] = date.split(\"-\").map(Number);\n return `${long ? WD_LONG[weekdayOf(date)] : WD[weekdayOf(date)]}, ${d}. ${MO[m - 1]}${long ? \" \" + y : \"\"}`;\n}\nfunction fmtStamp(utc) {\n const d = new Date(utc.replace(\" \", \"T\") + \"Z\");\n return d.toLocaleString(\"de-DE\", { timeZone: \"Europe/Berlin\", day: \"2-digit\", month: \"2-digit\", hour: \"2-digit\", minute: \"2-digit\" });\n}\nfunction flash(el, text, isError = false) {\n el.textContent = text;\n el.classList.toggle(\"is-error\", isError);\n el.hidden = !text;\n if (text && !isError) setTimeout(() => { if (el.textContent === text) el.hidden = true; }, 4000);\n}\n\nfunction initials(name) {\n return name.split(/\\s+/).filter(Boolean).slice(0, 2).map((p) => p[0].toUpperCase()).join(\"\");\n}\n\n// ───────────── Farbschema ─────────────\n\nconst mq = matchMedia(\"(prefers-color-scheme: dark)\");\nfunction effectiveTheme() {\n const pinned = document.documentElement.dataset.theme;\n return pinned === \"light\" || pinned === \"dark\" ? pinned : (mq.matches ? \"dark\" : \"light\");\n}\nfunction applyTheme(t) {\n const meta = document.querySelector('meta[name=\"color-scheme\"]');\n if (t) {\n document.documentElement.dataset.theme = t;\n meta.content = t;\n try { localStorage.setItem(\"color-scheme\", t); } catch (_) {}\n } else {\n delete document.documentElement.dataset.theme;\n meta.content = \"light dark\";\n try { localStorage.removeItem(\"color-scheme\"); } catch (_) {}\n }\n}\n$(\"theme-toggle\").onclick = () => applyTheme(effectiveTheme() === \"dark\" ? \"light\" : \"dark\");\n$(\"theme-system\").onclick = () => { applyTheme(null); flash($(\"pin-msg\"), \"Farbschema folgt jetzt der Systemeinstellung.\"); };\n\n// ───────────── Ansichten ─────────────\n\nfunction showView(view) {\n state.view = view;\n for (const v of [\"auth\", \"book\", \"mine\", \"profile\", \"admin\"]) $(\"view-\" + v).hidden = v !== view;\n for (const b of document.querySelectorAll(\".navbtn\")) b.classList.toggle(\"is-active\", b.dataset.view === view);\n if (view === \"book\") loadSlots();\n if (view === \"mine\") loadMine();\n if (view === \"profile\") loadProfile();\n if (view === \"admin\") loadAdmin();\n window.scrollTo({ top: 0 });\n}\n\nasync function boot() {\n const me = await api(\"/api/me\");\n state.member = me.member;\n state.resources = me.resources;\n state.now = me.now;\n if (!state.date) state.date = me.now.date;\n if (!state.resource || !state.resources.some((r) => r.id === state.resource.id)) state.resource = state.resources[0] ?? null;\n\n const banner = $(\"setup-banner\");\n if (me.setupCode && !me.member) {\n banner.innerHTML = `Ersteinrichtung. Noch niemand ist registriert. Admin-Zugang: ${esc(me.setupCode)} – bitte sofort unter „Registrieren“ mit diesem Namen und Code eine PIN festlegen.`;\n banner.hidden = false;\n } else banner.hidden = true;\n\n const loggedIn = !!me.member;\n $(\"nav\").hidden = !loggedIn;\n $(\"who\").hidden = !loggedIn;\n if (loggedIn) {\n $(\"who-name\").innerHTML = esc(me.member.alias || me.member.name) + (me.member.isVip ? ' ★' : \"\");\n $(\"nav-admin\").hidden = !me.member.isAdmin;\n const badge = $(\"admin-badge\");\n badge.hidden = !(me.member.isAdmin && me.pendingResets > 0);\n badge.textContent = me.pendingResets || \"\";\n renderResourceTabs();\n showView(state.view === \"auth\" ? \"book\" : state.view);\n } else {\n showView(\"auth\");\n }\n}\n\n// ───────────── Anmeldung ─────────────\n\n$(\"tab-login\").onclick = () => switchAuthTab(\"login\");\n$(\"tab-register\").onclick = () => switchAuthTab(\"register\");\nfunction switchAuthTab(which) {\n $(\"form-login\").hidden = which !== \"login\";\n $(\"form-register\").hidden = which !== \"register\";\n $(\"form-forgot\").hidden = which !== \"forgot\";\n $(\"tab-login\").classList.toggle(\"is-active\", which === \"login\");\n $(\"tab-register\").classList.toggle(\"is-active\", which === \"register\");\n}\n$(\"link-forgot\").onclick = () => switchAuthTab(\"forgot\");\n$(\"link-back-login\").onclick = () => switchAuthTab(\"login\");\n$(\"form-forgot\").onsubmit = async (e) => {\n e.preventDefault();\n try {\n await api(\"/api/reset-request\", { method: \"POST\", body: { name: $(\"forgot-name\").value } });\n const el = $(\"forgot-msg\");\n el.textContent = \"Anfrage gesendet. Wenn ein Konto mit dieser Angabe existiert, ist der Einladungscode unterwegs – per E-Mail oder über den Verwalter.\";\n el.classList.remove(\"is-error\"); el.hidden = false;\n $(\"forgot-name\").value = \"\";\n } catch (err) {\n flash($(\"forgot-msg\"), err.message, true);\n }\n};\n\n$(\"form-login\").onsubmit = async (e) => {\n e.preventDefault();\n $(\"login-error\").hidden = true;\n try {\n await api(\"/api/login\", { method: \"POST\", body: { name: $(\"login-name\").value, pin: $(\"login-pin\").value } });\n $(\"login-pin\").value = \"\";\n state.view = \"book\";\n await boot();\n } catch (err) {\n $(\"login-error\").textContent = err.message;\n $(\"login-error\").hidden = false;\n }\n};\n\n$(\"form-register\").onsubmit = async (e) => {\n e.preventDefault();\n const errEl = $(\"reg-error\");\n errEl.hidden = true;\n if ($(\"reg-pin\").value !== $(\"reg-pin2\").value) {\n errEl.textContent = \"Die beiden PINs stimmen nicht überein.\";\n errEl.hidden = false;\n return;\n }\n try {\n await api(\"/api/register\", {\n method: \"POST\",\n body: { name: $(\"reg-name\").value, code: $(\"reg-code\").value, email: $(\"reg-email\").value, pin: $(\"reg-pin\").value },\n });\n $(\"reg-pin\").value = $(\"reg-pin2\").value = \"\";\n state.view = \"book\";\n await boot();\n } catch (err) {\n errEl.textContent = err.message;\n errEl.hidden = false;\n }\n};\n\n$(\"logout\").onclick = async () => {\n await api(\"/api/logout\", { method: \"POST\" });\n state.view = \"auth\";\n await boot();\n};\n\nfor (const b of document.querySelectorAll(\".navbtn\")) b.onclick = () => showView(b.dataset.view);\n\n// ───────────── Buchen ─────────────\n\nfunction renderResourceTabs() {\n const el = $(\"resource-tabs\");\n el.hidden = state.resources.length < 2;\n el.innerHTML = state.resources\n .map((r) => ``)\n .join(\"\");\n for (const b of el.querySelectorAll(\"button\")) {\n b.onclick = () => {\n state.resource = state.resources.find((r) => r.id === b.dataset.id);\n renderResourceTabs();\n loadSlots();\n };\n }\n}\n\nfunction renderDaystrip() {\n const r = state.resource;\n const lead = state.member.isVip ? r.leadDaysVip : r.leadDaysStd;\n const days = [];\n const horizon = Math.max(r.leadDaysVip, r.leadDaysStd);\n for (let i = 0; i <= horizon; i++) days.push(addDays(state.now.date, i));\n $(\"daystrip\").innerHTML = days\n .map((d, i) => {\n const [y, m, dd] = d.split(\"-\").map(Number);\n const wd = weekdayOf(d);\n const cls = [\"day\", d === state.date ? \"is-active\" : \"\", wd === 0 || wd === 6 ? \"is-weekend\" : \"\", i > lead ? \"is-locked\" : \"\"].join(\" \");\n const title = i > lead ? `Erst ab ${lead} Tage vorher buchbar` : \"\";\n return ``;\n })\n .join(\"\");\n for (const b of $(\"daystrip\").querySelectorAll(\".day\")) {\n b.onclick = () => { state.date = b.dataset.date; loadSlots(); };\n }\n const active = $(\"daystrip\").querySelector(\".is-active\");\n if (active) active.scrollIntoView({ block: \"nearest\", inline: \"center\", behavior: \"instant\" });\n}\n\nasync function loadSlots() {\n if (!state.resource) {\n $(\"slots\").innerHTML = `

Noch keine Ressource eingerichtet.

`;\n return;\n }\n renderDaystrip();\n const r = state.resource;\n $(\"book-eyebrow\").textContent = r.name;\n $(\"book-title\").textContent = state.date === state.now.date ? \"Heute\" : fmtDate(state.date, true);\n $(\"book-sub\").textContent = (state.date === state.now.date ? fmtDate(state.date, true) + \" · \" : \"\")\n + `${r.capacity} Plätze pro Stunde · `\n + (state.member.isVip ? `als VIP bis ${r.leadDaysVip} Tage im Voraus buchbar` : `bis ${r.leadDaysStd} Tage im Voraus buchbar`);\n try {\n const data = await api(`/api/slots?resource=${encodeURIComponent(r.id)}&date=${state.date}`);\n state.now = data.now;\n renderSlots(data);\n } catch (err) {\n flash($(\"book-msg\"), err.message, true);\n }\n}\n\nfunction renderSlots(data) {\n const r = data.resource;\n const me = state.member;\n if (!data.slots.length) {\n $(\"slots\").innerHTML = `

An diesem Tag ist ${esc(r.name)} geschlossen.

`;\n return;\n }\n $(\"slots\").innerHTML = data.slots\n .map((s) => {\n const chips = [];\n for (const seat of s.seats) {\n const mine = seat.memberId === me.id;\n chips.push(`${esc(initials(seat.name))}${esc(mine ? \"Du\" : seat.name)}`);\n }\n const freeSeats = r.capacity - s.seats.length;\n const nonVipTaken = s.seats.filter((x) => !x.isVip).length;\n // Für alle offen sind höchstens (Kapazität − Reserve) Plätze abzüglich der schon\n // belegten Nicht-VIP-Plätze; der Rest der freien Plätze ist VIP-Reserve.\n let reserved = 0;\n if (s.reserveActive && !s.past) {\n const nonVipCap = r.capacity - r.vipReserved;\n const openForAll = Math.max(0, Math.min(freeSeats, nonVipCap - nonVipTaken));\n reserved = freeSeats - openForAll;\n }\n for (let i = 0; i < freeSeats - reserved; i++) chips.push(`frei`);\n for (let i = 0; i < reserved; i++) chips.push(`★ VIP`);\n\n let action = \"\";\n if (s.myBookingId) {\n action = s.canCancel\n ? ``\n : `läuft`;\n } else if (s.canBook) {\n action = ``;\n } else {\n action = ``;\n }\n const reason = !s.myBookingId && !s.canBook && !s.past && s.reasonCode !== \"full\" ? `

${esc(s.reason)}

` : \"\";\n return `

${s.hour}:00bis ${s.hour + 1}:00

${chips.join(\"\")}

${action}

\n ${reason}\n

`;\n })\n .join(\"\");\n\n for (const b of $(\"slots\").querySelectorAll(\"[data-book]\")) {\n b.onclick = async () => {\n b.disabled = true;\n try {\n await api(\"/api/bookings\", { method: \"POST\", body: { resource: r.id, date: data.date, hour: Number(b.dataset.book) } });\n flash($(\"book-msg\"), `Gebucht: ${fmtDate(data.date)}, ${b.dataset.book}:00 Uhr.`);\n } catch (err) {\n flash($(\"book-msg\"), err.message, true);\n }\n loadSlots();\n };\n }\n for (const b of $(\"slots\").querySelectorAll(\"[data-cancel]\")) {\n b.onclick = async () => {\n b.disabled = true;\n try {\n await api(`/api/bookings/${b.dataset.cancel}`, { method: \"DELETE\" });\n flash($(\"book-msg\"), \"Buchung storniert.\");\n } catch (err) {\n flash($(\"book-msg\"), err.message, true);\n }\n loadSlots();\n };\n }\n}\n\n// ───────────── Meine Termine ─────────────\n\nasync function loadMine() {\n const { bookings } = await api(\"/api/bookings/mine\");\n $(\"mine-sub\").textContent = bookings.length ? `${bookings.length} anstehende${bookings.length === 1 ? \"r Termin\" : \" Termine\"}` : \"\";\n if (!bookings.length) {\n $(\"mine-list\").innerHTML = `

Du hast noch keine Termine. Jetzt buchen

`;\n $(\"go-book\").onclick = (e) => { e.preventDefault(); showView(\"book\"); };\n return;\n }\n $(\"mine-list\").innerHTML = bookings\n .map((b) => `

${fmtDate(b.date, true)}${b.hour}:00–${b.hour + 1}:00

${esc(b.resourceName)}

`)\n .join(\"\");\n for (const btn of $(\"mine-list\").querySelectorAll(\"[data-cancel]\")) {\n btn.onclick = async () => {\n btn.disabled = true;\n try { await api(`/api/bookings/${btn.dataset.cancel}`, { method: \"DELETE\" }); } catch (err) { alert(err.message); }\n loadMine();\n };\n }\n}\n\n// ───────────── Profil ─────────────\n\nfunction loadProfile() {\n const m = state.member;\n $(\"profile-title\").textContent = m.name;\n $(\"profile-sub\").textContent = (m.isVip ? \"VIP-Mitglied\" : \"Mitglied\") + (m.alias ? ` · Alias: ${m.alias}` : \" · noch kein Alias\");\n $(\"alias-input\").value = m.alias || \"\";\n $(\"email-input\").value = m.email || \"\";\n}\n\n$(\"form-email\").onsubmit = async (e) => {\n e.preventDefault();\n try {\n const r = await api(\"/api/profile/email\", { method: \"POST\", body: { email: $(\"email-input\").value } });\n state.member.email = r.email;\n flash($(\"email-msg\"), \"E-Mail-Adresse gespeichert.\");\n } catch (err) {\n flash($(\"email-msg\"), err.message, true);\n }\n};\n\n$(\"form-alias\").onsubmit = async (e) => {\n e.preventDefault();\n try {\n const r = await api(\"/api/profile/alias\", { method: \"POST\", body: { alias: $(\"alias-input\").value.trim() } });\n state.member.alias = r.alias;\n flash($(\"alias-msg\"), r.alias ? `Alias „${r.alias}“ gespeichert. Du kannst dich jetzt auch damit anmelden.` : \"Alias entfernt.\");\n loadProfile();\n $(\"who-name\").innerHTML = esc(state.member.alias || state.member.name) + (state.member.isVip ? ' ★' : \"\");\n } catch (err) {\n flash($(\"alias-msg\"), err.message, true);\n }\n};\n$(\"alias-clear\").onclick = async () => {\n $(\"alias-input\").value = \"\";\n $(\"form-alias\").requestSubmit();\n};\n\n$(\"form-pin\").onsubmit = async (e) => {\n e.preventDefault();\n if ($(\"pin-next\").value !== $(\"pin-next2\").value) {\n flash($(\"pin-msg\"), \"Die beiden neuen PINs stimmen nicht überein.\", true);\n return;\n }\n try {\n await api(\"/api/profile/pin\", { method: \"POST\", body: { current: $(\"pin-current\").value, next: $(\"pin-next\").value } });\n $(\"pin-current\").value = $(\"pin-next\").value = $(\"pin-next2\").value = \"\";\n flash($(\"pin-msg\"), \"PIN geändert. Andere Geräte wurden abgemeldet.\");\n } catch (err) {\n flash($(\"pin-msg\"), err.message, true);\n }\n};\n\n// ───────────── Verwaltung ─────────────\n\nasync function loadAdmin() {\n await Promise.all([loadMembers(), loadResources(), loadAllBookings()]);\n}\n\nasync function loadMembers() {\n const { members } = await api(\"/api/admin/members\");\n const tb = $(\"members-table\").querySelector(\"tbody\");\n tb.innerHTML = members\n .map((m) => {\n const status = !m.active ? 'deaktiviert'\n : m.resetRequestedAt ? 'PIN-Reset angefragt'\n : m.registered ? 'registriert' : 'wartet';\n const code = m.inviteCode ? `${esc(m.inviteCode)}` : \"—\";\n return `\n ${esc(m.name)}${m.alias ? `Alias: ${esc(m.alias)}` : \"\"}${m.email ? `${esc(m.email)}` : \"\"}\n ${status}\n \n \n ${code}\n

\n \n ${m.active\n ? ``\n : `\n `}\n

`;\n })\n .join(\"\");\n const patch = async (id, body) => {\n try { await api(`/api/admin/members/${id}`, { method: \"PATCH\", body }); } catch (err) { flash($(\"admin-msg\"), err.message, true); }\n loadMembers();\n };\n for (const el of tb.querySelectorAll(\"[data-vip]\")) el.onchange = () => patch(el.dataset.vip, { isVip: el.checked });\n for (const el of tb.querySelectorAll(\"[data-admin]\")) el.onchange = () => patch(el.dataset.admin, { isAdmin: el.checked });\n for (const el of tb.querySelectorAll(\"[data-deact]\")) el.onclick = () => patch(el.dataset.deact, { active: false });\n for (const el of tb.querySelectorAll(\"[data-act]\")) el.onclick = () => patch(el.dataset.act, { active: true });\n for (const el of tb.querySelectorAll(\"[data-reset]\")) el.onclick = async () => {\n try {\n const r = await api(`/api/admin/members/${el.dataset.reset}/reset`, { method: \"POST\" });\n flash($(\"admin-msg\"), `Neuer Einladungscode: ${r.inviteCode} – bitte an die Person weitergeben.`);\n const me = await api(\"/api/me\");\n $(\"admin-badge\").hidden = !(me.pendingResets > 0);\n $(\"admin-badge\").textContent = me.pendingResets || \"\";\n } catch (err) { flash($(\"admin-msg\"), err.message, true); }\n loadMembers();\n };\n for (const el of tb.querySelectorAll(\"[data-del]\")) el.onclick = async () => {\n try { await api(`/api/admin/members/${el.dataset.del}`, { method: \"DELETE\" }); } catch (err) { flash($(\"admin-msg\"), err.message, true); }\n loadMembers();\n };\n}\n\n$(\"form-add-member\").onsubmit = async (e) => {\n e.preventDefault();\n try {\n const r = await api(\"/api/admin/members\", {\n method: \"POST\",\n body: { name: $(\"new-member-name\").value, isVip: $(\"new-member-vip\").checked },\n });\n flash($(\"admin-msg\"), `${$(\"new-member-name\").value.trim()} angelegt. Einladungscode: ${r.inviteCode}`);\n $(\"new-member-name\").value = \"\";\n $(\"new-member-vip\").checked = false;\n loadMembers();\n } catch (err) {\n flash($(\"admin-msg\"), err.message, true);\n }\n};\n\nconst RES_FIELDS = [\n [\"name\", \"Name\", \"text\"],\n [\"capacity\", \"Plätze / Stunde\", \"number\"],\n [\"vipReserved\", \"davon VIP-Reserve\", \"number\"],\n [\"reserveReleaseHours\", \"Reserve frei ab (Std. vor Start)\", \"number\"],\n [\"leadDaysVip\", \"Vorlauf VIP (Tage)\", \"number\"],\n [\"leadDaysStd\", \"Vorlauf normal (Tage)\", \"number\"],\n [\"maxOpenPerMember\", \"Max. offene Buchungen / Spieler\", \"number\"],\n [\"weekdayOpen\", \"Mo–Fr ab (Uhr)\", \"number\"],\n [\"weekdayClose\", \"Mo–Fr bis (Uhr)\", \"number\"],\n [\"weekendOpen\", \"Sa/So ab (Uhr)\", \"number\"],\n [\"weekendClose\", \"Sa/So bis (Uhr)\", \"number\"],\n];\n\nfunction resourceForm(r, isNew = false) {\n const idField = isNew\n ? `Kennung (Kleinbuchstaben, z. B. fitness)`\n : \"\";\n return ``;\n}\n\nasync function loadResources() {\n const { resources } = await api(\"/api/admin/resources\");\n $(\"resource-forms\").innerHTML = resources.map((r) => resourceForm(r)).join(\"\");\n bindResourceForms();\n}\n\nfunction bindResourceForms() {\n for (const form of $(\"resource-forms\").querySelectorAll(\"form.res-form\")) {\n form.onsubmit = async (e) => {\n e.preventDefault();\n const fd = new FormData(form);\n const body = {};\n for (const [k, v] of fd.entries()) body[k] = k === \"name\" || k === \"id\" ? v : Number(v);\n body.active = form.querySelector('[name=\"active\"]').checked;\n const id = form.dataset.new === \"1\" ? String(fd.get(\"id\")) : form.dataset.res;\n try {\n await api(`/api/admin/resources/${encodeURIComponent(id)}`, { method: \"PUT\", body });\n flash($(\"admin-msg\"), `${body.name} gespeichert.`);\n const me = await api(\"/api/me\");\n state.resources = me.resources;\n renderResourceTabs();\n loadResources();\n } catch (err) {\n flash($(\"admin-msg\"), err.message, true);\n }\n };\n }\n}\n\n$(\"btn-new-resource\").onclick = () => {\n if ($(\"resource-forms\").querySelector('[data-new=\"1\"]')) return;\n const tpl = {\n id: \"\", name: \"Fitness\", capacity: 4, vipReserved: 1, reserveReleaseHours: 24, leadDaysVip: 14, leadDaysStd: 7,\n weekdayOpen: 9, weekdayClose: 22, weekendOpen: 10, weekendClose: 21, maxOpenPerMember: 3, active: 1,\n };\n $(\"resource-forms\").insertAdjacentHTML(\"beforeend\", resourceForm(tpl, true));\n bindResourceForms();\n};\n\nasync function loadAllBookings() {\n const { bookings } = await api(\"/api/admin/bookings\");\n const tb = $(\"bookings-table\").querySelector(\"tbody\");\n if (!bookings.length) {\n tb.innerHTML = `Keine Buchungen in den nächsten 14 Tagen.`;\n return;\n }\n const resName = (id) => state.resources.find((r) => r.id === id)?.name ?? id;\n tb.innerHTML = bookings\n .map((b) => `\n ${fmtDate(b.date)}${b.hour}:00–${b.hour + 1}:00${esc(resName(b.resourceId))}\n ${b.isVip ? '★ ' : \"\"}${esc(b.name)}\n ${fmtStamp(b.createdAt)}\n

`)\n .join(\"\");\n for (const btn of tb.querySelectorAll(\"[data-cancel]\")) {\n btn.onclick = async () => {\n try { await api(`/api/bookings/${btn.dataset.cancel}`, { method: \"DELETE\" }); } catch (err) { flash($(\"admin-msg\"), err.message, true); }\n loadAllBookings();\n };\n }\n}\n\nboot().catch((err) => {\n document.body.insertAdjacentHTML(\"afterbegin\", `

${esc(err.message)}

`);\n});\n",[19,77],"fe2bec12-2b41-40b5-8547-87442acec0e4",4,["D",1789073648998],"directory",[19],{"_37":85,"_13":19,"_40":43,"_42":-5,"_44":45,"_46":86,"_48":49,"_50":137,"_17":65,"_53":88,"_54":-5,"_56":57,"_58":-5,"_103":138,"_18":139},{"_37":113,"_13":114,"_40":115,"_42":-5,"_44":45,"_46":116,"_48":49,"_50":117,"_17":65,"_53":88,"_54":-5,"_56":57,"_58":-5,"_103":118,"_18":119},{"_37":106,"_13":107,"_40":108,"_42":-5,"_44":45,"_46":109,"_48":49,"_50":110,"_17":65,"_53":88,"_54":-5,"_56":57,"_58":-5,"_103":111,"_18":112},{"_37":94,"_13":95,"_40":96,"_42":-5,"_44":45,"_46":97,"_48":49,"_50":98,"_17":99,"_53":100,"_54":101,"_56":57,"_58":102,"_103":104,"_18":105},"bccd6142-9f2d-4004-b15c-67eb3dcb9c80","index.ts","828c2900-ad59-11f1-99a3-1607ee4eb77e",52,["D",1789078487659],22,"http","// Abschlag – Buchungssystem für den Golfsimulator (und später weitere Ressourcen).\n// HTTP-Val: Hono + std/sqlite. Diese Datei ist der HTTP-Einstieg.\n\nimport { Hono } from \"npm:hono\";\nimport { getCookie, setCookie, deleteCookie } from \"npm:hono/cookie\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { parseVal, readFile, serveFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { email as sendEmail } from \"https://esm.town/v/std/email\";\nimport {\n canCancel,\n DEFAULT_GOLF,\n evaluateBooking,\n seatsAvailableFor,\n slotHours,\n type Member,\n type Resource,\n type Seat,\n} from \"./lib/rules.ts\";\nimport { addDays, isValidDate, localNow, slotStartEpoch } from \"./lib/time.ts\";\n\n// ───────────────────────── Schema ─────────────────────────\n\nconst ADMIN_NAME = Deno.env.get(\"ADMIN_NAME\") ?? \"Kirk Lenke\";\nconst SESSION_DAYS = 90;\n\nasync function initDb() {\n await sqlite.batch([\n `CREATE TABLE IF NOT EXISTS members (\n id INTEGER PRIMARY KEY,\n name TEXT NOT NULL UNIQUE COLLATE NOCASE,\n pin_hash TEXT,\n pin_salt TEXT,\n invite_code TEXT,\n is_vip INTEGER NOT NULL DEFAULT 0,\n is_admin INTEGER NOT NULL DEFAULT 0,\n active INTEGER NOT NULL DEFAULT 1,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n `CREATE TABLE IF NOT EXISTS resources (\n id TEXT PRIMARY KEY,\n name TEXT NOT NULL,\n capacity INTEGER NOT NULL,\n vip_reserved INTEGER NOT NULL,\n reserve_release_hours INTEGER NOT NULL,\n lead_days_vip INTEGER NOT NULL,\n lead_days_std INTEGER NOT NULL,\n weekday_open INTEGER NOT NULL,\n weekday_close INTEGER NOT NULL,\n weekend_open INTEGER NOT NULL,\n weekend_close INTEGER NOT NULL,\n max_open_per_member INTEGER NOT NULL,\n active INTEGER NOT NULL DEFAULT 1,\n sort INTEGER NOT NULL DEFAULT 0\n )`,\n `CREATE TABLE IF NOT EXISTS bookings (\n id INTEGER PRIMARY KEY,\n resource_id TEXT NOT NULL,\n member_id INTEGER NOT NULL,\n date TEXT NOT NULL,\n hour INTEGER NOT NULL,\n created_at TEXT NOT NULL DEFAULT (datetime('now')),\n UNIQUE(resource_id, date, hour, member_id)\n )`,\n `CREATE INDEX IF NOT EXISTS bookings_slot ON bookings(resource_id, date, hour)`,\n `CREATE TABLE IF NOT EXISTS sessions (\n token TEXT PRIMARY KEY,\n member_id INTEGER NOT NULL,\n expires_at TEXT NOT NULL\n )`,\n ]);\n\n // Migrationen für bestehende Datenbanken\n for (const sql of [\n \"ALTER TABLE members ADD COLUMN alias TEXT\",\n \"ALTER TABLE members ADD COLUMN reset_requested_at TEXT\",\n \"ALTER TABLE members ADD COLUMN email TEXT\",\n ]) {\n try { await sqlite.execute(sql); } catch (_) { /* Spalte existiert schon */ }\n }\n await sqlite.execute(\"CREATE UNIQUE INDEX IF NOT EXISTS members_alias ON members(alias COLLATE NOCASE)\");\n await sqlite.execute(\"CREATE UNIQUE INDEX IF NOT EXISTS members_email ON members(email COLLATE NOCASE)\");\n\n const r = await sqlite.execute(\"SELECT COUNT(*) AS n FROM resources\");\n if (Number(r.rows[0].n) === 0) await upsertResource(DEFAULT_GOLF);\n\n const m = await sqlite.execute(\"SELECT COUNT(*) AS n FROM members\");\n if (Number(m.rows[0].n) === 0) {\n const code = newInviteCode();\n await sqlite.execute({\n sql: \"INSERT INTO members (name, invite_code, is_admin, is_vip) VALUES (?, ?, 1, 1)\",\n args: [ADMIN_NAME, code],\n });\n console.log(`Admin \"${ADMIN_NAME}\" angelegt. Einladungscode: ${code}`);\n }\n}\nconst ready = initDb();\n\n// ───────────────────────── Helfer ─────────────────────────\n\nfunction newInviteCode(): string {\n const alphabet = \"ABCDEFGHJKLMNPQRSTUVWXYZ23456789\"; // ohne 0/O/1/I\n const bytes = crypto.getRandomValues(new Uint8Array(6));\n let s = \"\";\n for (const b of bytes) s += alphabet[b % alphabet.length];\n return s.slice(0, 3) + \"-\" + s.slice(3);\n}\n\nfunction hex(buf: ArrayBuffer | Uint8Array): string {\n return [...new Uint8Array(buf)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function hashPin(pin: string, saltHex: string): Promise {\n const key = await crypto.subtle.importKey(\"raw\", new TextEncoder().encode(pin), \"PBKDF2\", false, [\"deriveBits\"]);\n const salt = Uint8Array.from(saltHex.match(/../g)!.map((h) => parseInt(h, 16)));\n const bits = await crypto.subtle.deriveBits({ name: \"PBKDF2\", hash: \"SHA-256\", salt, iterations: 120_000 }, key, 256);\n return hex(bits);\n}\n\nfunction validPin(pin: unknown): pin is string {\n return typeof pin === \"string\" && /^\\d{4,8}$/.test(pin);\n}\n\nfunction cleanName(name: unknown): string | null {\n if (typeof name !== \"string\") return null;\n const n = name.replace(/\\s+/g, \" \").trim();\n if (n.length < 3 || n.length > 60) return null;\n if (!/^[\\p{L}][\\p{L}\\p{M}' .-]*\\s[\\p{L}][\\p{L}\\p{M}' .-]*$/u.test(n)) return null; // Vor- und Nachname\n return n;\n}\n\nfunction cleanEmail(v: unknown): string | null {\n if (typeof v !== \"string\") return null;\n const e = v.trim().toLowerCase();\n return e.length <= 120 && /^[^\\s@]+@[^\\s@]+\\.[^\\s@]{2,}$/.test(e) ? e : null;\n}\n\nconst ALIAS_RE = /^[\\p{L}\\p{N}][\\p{L}\\p{N}._-]{2,19}$/u;\nfunction cleanAlias(alias: unknown): string | null {\n if (typeof alias !== \"string\") return null;\n const a = alias.trim();\n return ALIAS_RE.test(a) ? a : null;\n}\n\n/** Findet ein aktives Mitglied über Klarnamen oder Alias. */\nasync function findByLogin(input: unknown): Promise | null> {\n if (typeof input !== \"string\") return null;\n const raw = input.replace(/\\s+/g, \" \").trim();\n if (!raw) return null;\n const name = cleanName(raw);\n const r = await sqlite.execute({\n sql: \"SELECT * FROM members WHERE active = 1 AND (name = ? OR alias = ? COLLATE NOCASE OR email = ? COLLATE NOCASE) LIMIT 1\",\n args: [name ?? raw, raw, raw.toLowerCase()],\n });\n return r.rows[0] ?? null;\n}\n\nfunction normCode(code: unknown): string {\n return String(code ?? \"\").toUpperCase().replace(/[^A-Z0-9]/g, \"\").replace(/^(.{3})(.{3})$/, \"$1-$2\");\n}\n\nfunction rowToMember(row: Record): Member {\n return {\n id: Number(row.id),\n name: String(row.name),\n alias: row.alias ? String(row.alias) : null,\n email: row.email ? String(row.email) : null,\n isVip: Number(row.is_vip) === 1,\n isAdmin: Number(row.is_admin) === 1,\n active: Number(row.active) === 1,\n };\n}\n\nfunction rowToResource(row: Record): Resource {\n return {\n id: String(row.id),\n name: String(row.name),\n capacity: Number(row.capacity),\n vipReserved: Number(row.vip_reserved),\n reserveReleaseHours: Number(row.reserve_release_hours),\n leadDaysVip: Number(row.lead_days_vip),\n leadDaysStd: Number(row.lead_days_std),\n weekdayOpen: Number(row.weekday_open),\n weekdayClose: Number(row.weekday_close),\n weekendOpen: Number(row.weekend_open),\n weekendClose: Number(row.weekend_close),\n maxOpenPerMember: Number(row.max_open_per_member),\n active: Number(row.active),\n };\n}\n\nasync function upsertResource(r: Resource, sort = 0) {\n await sqlite.execute({\n sql: `INSERT INTO resources (id, name, capacity, vip_reserved, reserve_release_hours, lead_days_vip, lead_days_std,\n weekday_open, weekday_close, weekend_open, weekend_close, max_open_per_member, active, sort)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET name=excluded.name, capacity=excluded.capacity, vip_reserved=excluded.vip_reserved,\n reserve_release_hours=excluded.reserve_release_hours, lead_days_vip=excluded.lead_days_vip,\n lead_days_std=excluded.lead_days_std, weekday_open=excluded.weekday_open, weekday_close=excluded.weekday_close,\n weekend_open=excluded.weekend_open, weekend_close=excluded.weekend_close,\n max_open_per_member=excluded.max_open_per_member, active=excluded.active`,\n args: [\n r.id, r.name, r.capacity, r.vipReserved, r.reserveReleaseHours, r.leadDaysVip, r.leadDaysStd,\n r.weekdayOpen, r.weekdayClose, r.weekendOpen, r.weekendClose, r.maxOpenPerMember, r.active, sort,\n ],\n });\n}\n\nasync function getResource(id: string): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM resources WHERE id = ?\", args: [id] });\n return r.rows[0] ? rowToResource(r.rows[0]) : null;\n}\n\nasync function listResources(onlyActive: boolean): Promise {\n const r = await sqlite.execute(\n onlyActive ? \"SELECT * FROM resources WHERE active = 1 ORDER BY sort, name\" : \"SELECT * FROM resources ORDER BY sort, name\",\n );\n return r.rows.map(rowToResource);\n}\n\nasync function seatsFor(resourceId: string, date: string, hour: number): Promise {\n const r = await sqlite.execute({\n sql: `SELECT b.id AS booking_id, m.id AS member_id, m.name, m.is_vip\n FROM bookings b JOIN members m ON m.id = b.member_id\n WHERE b.resource_id = ? AND b.date = ? AND b.hour = ? ORDER BY b.created_at, b.id`,\n args: [resourceId, date, hour],\n });\n return r.rows.map((row) => ({\n bookingId: Number(row.booking_id),\n memberId: Number(row.member_id),\n name: String(row.name),\n isVip: Number(row.is_vip) === 1,\n }));\n}\n\nasync function openBookingCount(resourceId: string, memberId: number): Promise {\n const now = localNow();\n const r = await sqlite.execute({\n sql: `SELECT date, hour FROM bookings WHERE resource_id = ? AND member_id = ? AND date >= ?`,\n args: [resourceId, memberId, now.date],\n });\n return r.rows.filter((row) => slotStartEpoch(String(row.date), Number(row.hour)) > now.epoch).length;\n}\n\n// ───────────────────────── Auth ─────────────────────────\n\ntype Env = { Variables: { member: Member | null } };\nconst app = new Hono();\n\napp.use(\"*\", async (c, next) => {\n await ready;\n c.set(\"member\", null);\n const token = getCookie(c, \"abschlag_session\");\n if (token) {\n const r = await sqlite.execute({\n sql: `SELECT m.* FROM sessions s JOIN members m ON m.id = s.member_id\n WHERE s.token = ? AND s.expires_at > datetime('now') AND m.active = 1`,\n args: [token],\n });\n if (r.rows[0]) c.set(\"member\", rowToMember(r.rows[0]));\n }\n await next();\n});\n\nfunction requireMember(c: any): Member {\n const m = c.get(\"member\") as Member | null;\n if (!m) throw new HttpError(401, \"Bitte anmelden.\");\n return m;\n}\nfunction requireAdmin(c: any): Member {\n const m = requireMember(c);\n if (!m.isAdmin) throw new HttpError(403, \"Nur für Administratoren.\");\n return m;\n}\nclass HttpError extends Error {\n constructor(public status: number, message: string) {\n super(message);\n }\n}\napp.onError((err, c) => {\n if (err instanceof HttpError) return c.json({ error: err.message }, err.status as any);\n console.error(err);\n return c.json({ error: \"Interner Fehler: \" + err.message }, 500);\n});\n\nasync function createSession(c: any, memberId: number) {\n const token = hex(crypto.getRandomValues(new Uint8Array(32)));\n const expires = new Date(Date.now() + SESSION_DAYS * 86400_000);\n await sqlite.execute({\n sql: \"INSERT INTO sessions (token, member_id, expires_at) VALUES (?, ?, ?)\",\n args: [token, memberId, expires.toISOString().replace(\"T\", \" \").slice(0, 19)],\n });\n setCookie(c, \"abschlag_session\", token, {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n path: \"/\",\n expires,\n });\n}\n\n// ───────────────────────── Seiten & Assets ─────────────────────────\n\napp.get(\"/\", (c) => serveFile(\"/frontend/index.html\", import.meta.url));\n// Logo liegt als Base64-Text im Val (Binärdateien lassen sich nicht direkt anlegen) und wird hier dekodiert.\nlet logoBytes: Uint8Array | null = null;\napp.get(\"/frontend/logo.png\", async (c) => {\n if (!logoBytes) {\n const b64 = (await readFile(\"/frontend/logo.b64\", import.meta.url)).replace(/\\s+/g, \"\");\n logoBytes = Uint8Array.from(atob(b64), (ch) => ch.charCodeAt(0));\n }\n return new Response(logoBytes, { headers: { \"content-type\": \"image/png\", \"cache-control\": \"public, max-age=86400\" } });\n});\napp.get(\"/frontend/*\", (c) => serveFile(c.req.path, import.meta.url));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\n// ───────────────────────── Öffentliche API ─────────────────────────\n\napp.get(\"/api/me\", async (c) => {\n const member = c.get(\"member\");\n const setup = await sqlite.execute(\"SELECT COUNT(*) AS n FROM members WHERE pin_hash IS NOT NULL\");\n const firstRun = Number(setup.rows[0].n) === 0;\n let setupCode: string | null = null;\n if (firstRun) {\n const a = await sqlite.execute(\"SELECT name, invite_code FROM members WHERE is_admin = 1 ORDER BY id LIMIT 1\");\n if (a.rows[0]) setupCode = `${a.rows[0].name} · ${a.rows[0].invite_code}`;\n }\n let pendingResets = 0;\n if (member?.isAdmin) {\n const p = await sqlite.execute(\"SELECT COUNT(*) AS n FROM members WHERE reset_requested_at IS NOT NULL AND active = 1\");\n pendingResets = Number(p.rows[0].n);\n }\n return c.json({\n member,\n resources: await listResources(true),\n now: localNow(),\n setupCode,\n pendingResets,\n });\n});\n\napp.post(\"/api/register\", async (c) => {\n const body = await c.req.json().catch(() => ({}));\n const code = normCode(body.code);\n if (!validPin(body.pin)) throw new HttpError(400, \"Die PIN muss aus 4 bis 8 Ziffern bestehen.\");\n const row = await findByLogin(body.name);\n if (!row || !row.invite_code || String(row.invite_code) !== code) {\n throw new HttpError(400, \"Name oder Einladungscode stimmen nicht.\");\n }\n const mail = cleanEmail(body.email) ?? (row.email ? String(row.email) : null);\n if (!mail) throw new HttpError(400, \"Bitte eine gültige E-Mail-Adresse angeben – sie wird für das Zurücksetzen der PIN gebraucht.\");\n const taken = await sqlite.execute({ sql: \"SELECT id FROM members WHERE email = ? COLLATE NOCASE AND id != ?\", args: [mail, Number(row.id)] });\n if (taken.rows[0]) throw new HttpError(409, \"Diese E-Mail-Adresse ist schon einem anderen Spieler zugeordnet.\");\n const salt = hex(crypto.getRandomValues(new Uint8Array(16)));\n const pinHash = await hashPin(body.pin, salt);\n await sqlite.execute({\n sql: \"UPDATE members SET pin_hash = ?, pin_salt = ?, email = ?, invite_code = NULL, reset_requested_at = NULL WHERE id = ?\",\n args: [pinHash, salt, mail, Number(row.id)],\n });\n await createSession(c, Number(row.id));\n return c.json({ member: rowToMember({ ...row, pin_hash: pinHash, email: mail }) });\n});\n\napp.post(\"/api/login\", async (c) => {\n const body = await c.req.json().catch(() => ({}));\n if (!validPin(body.pin)) throw new HttpError(400, \"Name oder PIN stimmen nicht.\");\n const row = await findByLogin(body.name);\n if (!row) throw new HttpError(400, \"Name oder PIN stimmen nicht.\");\n if (!row.pin_hash) throw new HttpError(400, \"Für diesen Namen wurde noch keine PIN festgelegt – bitte zuerst mit dem Einladungscode registrieren.\");\n const check = await hashPin(body.pin, String(row.pin_salt));\n if (check !== String(row.pin_hash)) throw new HttpError(400, \"Name oder PIN stimmen nicht.\");\n await createSession(c, Number(row.id));\n return c.json({ member: rowToMember(row) });\n});\n\napp.post(\"/api/logout\", async (c) => {\n const token = getCookie(c, \"abschlag_session\");\n if (token) await sqlite.execute({ sql: \"DELETE FROM sessions WHERE token = ?\", args: [token] });\n deleteCookie(c, \"abschlag_session\", { path: \"/\" });\n return c.json({ ok: true });\n});\n\n// „PIN vergessen“: hinterlegt eine Anfrage, die der Verwalter in der Verwaltung sieht.\n// Antwortet immer gleich, damit niemand Namen ausprobieren kann.\napp.post(\"/api/reset-request\", async (c) => {\n const body = await c.req.json().catch(() => ({}));\n const row = await findByLogin(body.name);\n if (row && row.pin_hash) {\n // Neuer Einladungscode; die alte PIN bleibt gültig, bis mit dem Code eine neue gesetzt wird.\n const code = newInviteCode();\n await sqlite.execute({\n sql: \"UPDATE members SET invite_code = ?, reset_requested_at = datetime('now') WHERE id = ?\",\n args: [code, Number(row.id)],\n });\n const name = String(row.name);\n const to = row.email ? String(row.email) : null;\n const origin = new URL(c.req.url).origin;\n const text = `Hallo ${name},\\n\\nfür dein Konto bei der JK Golfakademie wurde ein PIN-Reset angefordert.\\n\\n` +\n `Dein Einladungscode: ${code}\\n\\nÖffne ${origin}, wähle „Registrieren“, gib deinen Namen, diesen Code und eine neue PIN ein.\\n` +\n `Falls du das nicht warst, kannst du diese E-Mail ignorieren – deine bisherige PIN bleibt gültig.`;\n let delivered = false;\n if (to) {\n try {\n await sendEmail({ to, subject: \"JK Golfakademie – PIN zurücksetzen\", text });\n delivered = true;\n } catch (err) {\n console.error(\"E-Mail an Spieler fehlgeschlagen:\", (err as Error).message);\n }\n }\n if (!delivered) {\n // Fallback: der Verwalter (Val-Owner) bekommt die Anfrage und gibt den Code weiter.\n try {\n await sendEmail({\n subject: `PIN-Reset angefragt: ${name}`,\n text: `${name}${to ? ` (${to})` : \"\"} hat einen PIN-Reset angefragt.\\nNeuer Einladungscode: ${code}\\n` +\n `Bitte an die Person weitergeben (auch sichtbar in der Verwaltung).`,\n });\n } catch (err) {\n console.error(\"E-Mail an Verwalter fehlgeschlagen:\", (err as Error).message);\n }\n }\n }\n return c.json({ ok: true });\n});\n\napp.post(\"/api/profile/email\", async (c) => {\n const member = requireMember(c);\n const body = await c.req.json().catch(() => ({}));\n const mail = cleanEmail(body.email);\n if (!mail) throw new HttpError(400, \"Bitte eine gültige E-Mail-Adresse angeben.\");\n const taken = await sqlite.execute({ sql: \"SELECT id FROM members WHERE email = ? COLLATE NOCASE AND id != ?\", args: [mail, member.id] });\n if (taken.rows[0]) throw new HttpError(409, \"Diese E-Mail-Adresse ist schon einem anderen Spieler zugeordnet.\");\n await sqlite.execute({ sql: \"UPDATE members SET email = ? WHERE id = ?\", args: [mail, member.id] });\n return c.json({ ok: true, email: mail });\n});\n\n// ───────────────────────── Profil ─────────────────────────\n\napp.post(\"/api/profile/alias\", async (c) => {\n const member = requireMember(c);\n const body = await c.req.json().catch(() => ({}));\n if (body.alias === \"\" || body.alias === null) {\n await sqlite.execute({ sql: \"UPDATE members SET alias = NULL WHERE id = ?\", args: [member.id] });\n return c.json({ ok: true, alias: null });\n }\n const alias = cleanAlias(body.alias);\n if (!alias) throw new HttpError(400, \"Alias: 3–20 Zeichen, Buchstaben, Ziffern, Punkt, Bindestrich oder Unterstrich.\");\n if (alias.includes(\" \")) throw new HttpError(400, \"Ein Alias darf keine Leerzeichen enthalten.\");\n const clash = await sqlite.execute({\n sql: \"SELECT id FROM members WHERE (alias = ? COLLATE NOCASE OR name = ?) AND id != ?\",\n args: [alias, alias, member.id],\n });\n if (clash.rows[0]) throw new HttpError(409, \"Dieser Alias ist schon vergeben.\");\n await sqlite.execute({ sql: \"UPDATE members SET alias = ? WHERE id = ?\", args: [alias, member.id] });\n return c.json({ ok: true, alias });\n});\n\napp.post(\"/api/profile/pin\", async (c) => {\n const member = requireMember(c);\n const body = await c.req.json().catch(() => ({}));\n if (!validPin(body.current) || !validPin(body.next)) throw new HttpError(400, \"Die PIN muss aus 4 bis 8 Ziffern bestehen.\");\n const r = await sqlite.execute({ sql: \"SELECT pin_hash, pin_salt FROM members WHERE id = ?\", args: [member.id] });\n const row = r.rows[0];\n const check = await hashPin(body.current, String(row.pin_salt));\n if (check !== String(row.pin_hash)) throw new HttpError(400, \"Die aktuelle PIN stimmt nicht.\");\n const salt = hex(crypto.getRandomValues(new Uint8Array(16)));\n const pinHash = await hashPin(body.next, salt);\n const token = getCookie(c, \"abschlag_session\");\n await sqlite.batch([\n { sql: \"UPDATE members SET pin_hash = ?, pin_salt = ? WHERE id = ?\", args: [pinHash, salt, member.id] },\n { sql: \"DELETE FROM sessions WHERE member_id = ? AND token != ?\", args: [member.id, token ?? \"\"] },\n ]);\n return c.json({ ok: true });\n});\n\n// ───────────────────────── Slots & Buchungen ─────────────────────────\n\napp.get(\"/api/slots\", async (c) => {\n const member = requireMember(c);\n const resourceId = c.req.query(\"resource\") ?? \"golf\";\n const date = c.req.query(\"date\");\n if (!isValidDate(date)) throw new HttpError(400, \"Ungültiges Datum.\");\n const resource = await getResource(resourceId);\n if (!resource || !resource.active) throw new HttpError(404, \"Unbekannte Ressource.\");\n\n const now = localNow();\n const rows = await sqlite.execute({\n sql: `SELECT b.id AS booking_id, b.hour, m.id AS member_id, m.name, m.is_vip\n FROM bookings b JOIN members m ON m.id = b.member_id\n WHERE b.resource_id = ? AND b.date = ? ORDER BY b.created_at, b.id`,\n args: [resourceId, date],\n });\n const byHour = new Map();\n for (const row of rows.rows) {\n const h = Number(row.hour);\n if (!byHour.has(h)) byHour.set(h, []);\n byHour.get(h)!.push({\n bookingId: Number(row.booking_id),\n memberId: Number(row.member_id),\n name: String(row.name),\n isVip: Number(row.is_vip) === 1,\n });\n }\n const openCount = await openBookingCount(resourceId, member.id);\n\n const slots = slotHours(resource, date).map((hour) => {\n const seats = byHour.get(hour) ?? [];\n const verdict = evaluateBooking({ resource, member, date, hour, seats, now, openBookingsOfMember: openCount });\n const startMs = slotStartEpoch(date, hour);\n const avail = seatsAvailableFor(resource, member, seats, startMs, now.epoch);\n const mine = seats.find((s) => s.memberId === member.id) ?? null;\n return {\n hour,\n seats,\n capacity: resource.capacity,\n freeForYou: avail.free,\n reserveActive: avail.reserveActive,\n past: startMs <= now.epoch,\n canBook: verdict.ok,\n reasonCode: verdict.code,\n reason: verdict.reason,\n myBookingId: mine?.bookingId ?? null,\n canCancel: !!mine && canCancel({ date, hour, now }),\n };\n });\n\n return c.json({ date, resource, slots, openCount, now });\n});\n\napp.post(\"/api/bookings\", async (c) => {\n const member = requireMember(c);\n const body = await c.req.json().catch(() => ({}));\n const resourceId = String(body.resource ?? \"golf\");\n const date = body.date;\n const hour = Number(body.hour);\n if (!isValidDate(date) || !Number.isInteger(hour)) throw new HttpError(400, \"Ungültiger Termin.\");\n const resource = await getResource(resourceId);\n if (!resource || !resource.active) throw new HttpError(404, \"Unbekannte Ressource.\");\n\n const now = localNow();\n const seats = await seatsFor(resourceId, date, hour);\n const openCount = await openBookingCount(resourceId, member.id);\n const verdict = evaluateBooking({ resource, member, date, hour, seats, now, openBookingsOfMember: openCount });\n if (!verdict.ok) throw new HttpError(409, verdict.reason);\n\n const ins = await sqlite.execute({\n sql: \"INSERT OR IGNORE INTO bookings (resource_id, member_id, date, hour) VALUES (?, ?, ?, ?)\",\n args: [resourceId, member.id, date, hour],\n });\n const id = Number(ins.lastInsertRowid);\n\n // Schutz gegen gleichzeitige Buchungen: nach dem Schreiben noch einmal zählen.\n const after = await seatsFor(resourceId, date, hour);\n const mine = after.find((s) => s.memberId === member.id);\n if (after.length > resource.capacity && mine && after.indexOf(mine) >= resource.capacity) {\n await sqlite.execute({ sql: \"DELETE FROM bookings WHERE id = ?\", args: [mine.bookingId] });\n throw new HttpError(409, \"Diese Stunde wurde gerade von jemand anderem gefüllt.\");\n }\n return c.json({ ok: true, id: mine?.bookingId ?? id });\n});\n\napp.delete(\"/api/bookings/:id\", async (c) => {\n const member = requireMember(c);\n const id = Number(c.req.param(\"id\"));\n const r = await sqlite.execute({ sql: \"SELECT * FROM bookings WHERE id = ?\", args: [id] });\n const row = r.rows[0];\n if (!row) throw new HttpError(404, \"Buchung nicht gefunden.\");\n if (Number(row.member_id) !== member.id && !member.isAdmin) throw new HttpError(403, \"Das ist nicht deine Buchung.\");\n if (!canCancel({ date: String(row.date), hour: Number(row.hour), now: localNow() })) {\n throw new HttpError(409, \"Der Termin hat bereits begonnen und kann nicht mehr storniert werden.\");\n }\n await sqlite.execute({ sql: \"DELETE FROM bookings WHERE id = ?\", args: [id] });\n return c.json({ ok: true });\n});\n\napp.get(\"/api/bookings/mine\", async (c) => {\n const member = requireMember(c);\n const now = localNow();\n const r = await sqlite.execute({\n sql: `SELECT b.id, b.resource_id, r.name AS resource_name, b.date, b.hour\n FROM bookings b JOIN resources r ON r.id = b.resource_id\n WHERE b.member_id = ? AND b.date >= ? ORDER BY b.date, b.hour`,\n args: [member.id, addDays(now.date, -1)],\n });\n const bookings = r.rows\n .map((row) => ({\n id: Number(row.id),\n resourceId: String(row.resource_id),\n resourceName: String(row.resource_name),\n date: String(row.date),\n hour: Number(row.hour),\n }))\n .filter((b) => slotStartEpoch(b.date, b.hour) + 3600_000 > now.epoch);\n return c.json({ bookings });\n});\n\n// ───────────────────────── Admin ─────────────────────────\n\napp.get(\"/api/admin/members\", async (c) => {\n requireAdmin(c);\n const r = await sqlite.execute(\"SELECT * FROM members ORDER BY active DESC, name\");\n return c.json({\n members: r.rows.map((row) => ({\n ...rowToMember(row),\n registered: !!row.pin_hash,\n inviteCode: row.invite_code ? String(row.invite_code) : null,\n resetRequestedAt: row.reset_requested_at ? String(row.reset_requested_at) : null,\n email: row.email ? String(row.email) : null,\n createdAt: String(row.created_at),\n })),\n });\n});\n\napp.post(\"/api/admin/members\", async (c) => {\n requireAdmin(c);\n const body = await c.req.json().catch(() => ({}));\n const name = cleanName(body.name);\n if (!name) throw new HttpError(400, \"Bitte Vor- und Nachnamen eingeben (z. B. „Anna Müller“).\");\n const dup = await sqlite.execute({ sql: \"SELECT id FROM members WHERE name = ? OR alias = ? COLLATE NOCASE\", args: [name, name] });\n if (dup.rows[0]) throw new HttpError(409, \"Diesen Namen gibt es schon.\");\n const code = newInviteCode();\n await sqlite.execute({\n sql: \"INSERT INTO members (name, invite_code, is_vip) VALUES (?, ?, ?)\",\n args: [name, code, body.isVip ? 1 : 0],\n });\n return c.json({ ok: true, inviteCode: code });\n});\n\napp.patch(\"/api/admin/members/:id\", async (c) => {\n const admin = requireAdmin(c);\n const id = Number(c.req.param(\"id\"));\n const body = await c.req.json().catch(() => ({}));\n const sets: string[] = [];\n const args: unknown[] = [];\n if (typeof body.isVip === \"boolean\") { sets.push(\"is_vip = ?\"); args.push(body.isVip ? 1 : 0); }\n if (typeof body.isAdmin === \"boolean\") {\n if (id === admin.id && !body.isAdmin) throw new HttpError(400, \"Du kannst dir nicht selbst die Admin-Rechte entziehen.\");\n sets.push(\"is_admin = ?\"); args.push(body.isAdmin ? 1 : 0);\n }\n if (typeof body.active === \"boolean\") {\n if (id === admin.id && !body.active) throw new HttpError(400, \"Du kannst dich nicht selbst deaktivieren.\");\n sets.push(\"active = ?\"); args.push(body.active ? 1 : 0);\n }\n if (body.name !== undefined) {\n const name = cleanName(body.name);\n if (!name) throw new HttpError(400, \"Ungültiger Name.\");\n sets.push(\"name = ?\"); args.push(name);\n }\n if (!sets.length) throw new HttpError(400, \"Nichts zu ändern.\");\n args.push(id);\n await sqlite.execute({ sql: `UPDATE members SET ${sets.join(\", \")} WHERE id = ?`, args });\n if (body.active === false) {\n await sqlite.batch([\n { sql: \"DELETE FROM sessions WHERE member_id = ?\", args: [id] },\n { sql: \"DELETE FROM bookings WHERE member_id = ? AND date >= date('now')\", args: [id] },\n ]);\n }\n return c.json({ ok: true });\n});\n\napp.post(\"/api/admin/members/:id/reset\", async (c) => {\n requireAdmin(c);\n const id = Number(c.req.param(\"id\"));\n const code = newInviteCode();\n await sqlite.batch([\n { sql: \"UPDATE members SET pin_hash = NULL, pin_salt = NULL, invite_code = ?, reset_requested_at = NULL WHERE id = ?\", args: [code, id] },\n { sql: \"DELETE FROM sessions WHERE member_id = ?\", args: [id] },\n ]);\n return c.json({ ok: true, inviteCode: code });\n});\n\napp.delete(\"/api/admin/members/:id\", async (c) => {\n const admin = requireAdmin(c);\n const id = Number(c.req.param(\"id\"));\n if (id === admin.id) throw new HttpError(400, \"Du kannst dich nicht selbst löschen.\");\n await sqlite.batch([\n { sql: \"DELETE FROM sessions WHERE member_id = ?\", args: [id] },\n { sql: \"DELETE FROM bookings WHERE member_id = ?\", args: [id] },\n { sql: \"DELETE FROM members WHERE id = ?\", args: [id] },\n ]);\n return c.json({ ok: true });\n});\n\napp.get(\"/api/admin/resources\", async (c) => {\n requireAdmin(c);\n return c.json({ resources: await listResources(false) });\n});\n\napp.put(\"/api/admin/resources/:id\", async (c) => {\n requireAdmin(c);\n const id = c.req.param(\"id\");\n const body = await c.req.json().catch(() => ({}));\n const existing = await getResource(id);\n const base: Resource = existing ?? { ...DEFAULT_GOLF, id, name: id };\n const num = (key: keyof Resource, min: number, max: number) => {\n const v = body[key] === undefined ? base[key] : Number(body[key]);\n if (!Number.isInteger(v) || v < min || v > max) throw new HttpError(400, `Ungültiger Wert für ${key}.`);\n return v as number;\n };\n const r: Resource = {\n id,\n name: typeof body.name === \"string\" && body.name.trim() ? body.name.trim().slice(0, 40) : base.name,\n capacity: num(\"capacity\", 1, 50),\n vipReserved: num(\"vipReserved\", 0, 50),\n reserveReleaseHours: num(\"reserveReleaseHours\", 0, 240),\n leadDaysVip: num(\"leadDaysVip\", 0, 90),\n leadDaysStd: num(\"leadDaysStd\", 0, 90),\n weekdayOpen: num(\"weekdayOpen\", 0, 23),\n weekdayClose: num(\"weekdayClose\", 1, 24),\n weekendOpen: num(\"weekendOpen\", 0, 23),\n weekendClose: num(\"weekendClose\", 1, 24),\n maxOpenPerMember: num(\"maxOpenPerMember\", 1, 50),\n active: body.active === undefined ? base.active : (body.active ? 1 : 0),\n };\n if (r.vipReserved > r.capacity) throw new HttpError(400, \"Reservierte Plätze dürfen die Kapazität nicht übersteigen.\");\n if (r.weekdayOpen >= r.weekdayClose || r.weekendOpen >= r.weekendClose) throw new HttpError(400, \"Öffnung muss vor Schließung liegen.\");\n await upsertResource(r, existing ? undefined : 10);\n return c.json({ ok: true, resource: r });\n});\n\napp.get(\"/api/admin/bookings\", async (c) => {\n requireAdmin(c);\n const now = localNow();\n const from = c.req.query(\"from\") ?? now.date;\n const to = c.req.query(\"to\") ?? addDays(now.date, 14);\n if (!isValidDate(from) || !isValidDate(to)) throw new HttpError(400, \"Ungültiges Datum.\");\n const r = await sqlite.execute({\n sql: `SELECT b.id, b.resource_id, b.date, b.hour, b.created_at, m.name, m.is_vip\n FROM bookings b JOIN members m ON m.id = b.member_id\n WHERE b.date BETWEEN ? AND ? ORDER BY b.date, b.hour, b.created_at`,\n args: [from, to],\n });\n return c.json({\n bookings: r.rows.map((row) => ({\n id: Number(row.id),\n resourceId: String(row.resource_id),\n date: String(row.date),\n hour: Number(row.hour),\n createdAt: String(row.created_at),\n name: String(row.name),\n isVip: Number(row.is_vip) === 1,\n })),\n });\n});\n\nexport default app.fetch;\n","jk-golfakademie","children",[],[95],"47ee9864-79a9-4456-ab6a-67dc1c47918e","scripts","fae00817-115f-468d-a43b-0bf42ede5f83",53,["D",1789078499464],[],[107],"7e19e212-95e2-4d25-9bb1-ccec38d87308","lib","d7a76aaf-e82b-46e9-915a-6241250f9ed1",2,["D",1789073571875],[120,121],[114],{"_37":129,"_13":130,"_40":131,"_42":115,"_44":45,"_46":132,"_48":49,"_50":133,"_17":116,"_53":82,"_54":134,"_56":57,"_58":-5,"_103":135,"_18":136},{"_37":122,"_13":123,"_40":124,"_42":115,"_44":45,"_46":116,"_48":49,"_50":125,"_17":65,"_53":82,"_54":126,"_56":57,"_58":-5,"_103":127,"_18":128},"17a3e205-bb37-449c-9c3e-d7f75c402f74","time.ts","96cd6e74-ad59-11f1-8452-1607ee4eb77e",["D",1789073571875],"// Zeitfunktionen für Europe/Berlin – Val Town läuft in UTC, die Buchungen\n// sind aber in lokaler Zeit gedacht. Alle Slots werden als (Datum, Stunde)\n// in Berliner Zeit gespeichert.\n\nexport const TZ = \"Europe/Berlin\";\n\nexport type LocalNow = { date: string; hour: number; minute: number; epoch: number };\n\nconst fmt = new Intl.DateTimeFormat(\"en-CA\", {\n timeZone: TZ,\n year: \"numeric\",\n month: \"2-digit\",\n day: \"2-digit\",\n hour: \"2-digit\",\n minute: \"2-digit\",\n hour12: false,\n});\n\n/** Zerlegt einen Zeitpunkt in Berliner Datum/Stunde/Minute. */\nexport function toLocal(epochMs: number): LocalNow {\n const parts: Record = {};\n for (const p of fmt.formatToParts(new Date(epochMs))) parts[p.type] = p.value;\n const hour = Number(parts.hour) % 24; // manche Engines liefern \"24\" für Mitternacht\n return {\n date: `${parts.year}-${parts.month}-${parts.day}`,\n hour,\n minute: Number(parts.minute),\n epoch: epochMs,\n };\n}\n\nexport function localNow(): LocalNow {\n return toLocal(Date.now());\n}\n\n/** Berliner (Datum, Stunde) -> Epoch-Millisekunden, sommerzeitsicher. */\nexport function slotStartEpoch(date: string, hour: number): number {\n const [y, m, d] = date.split(\"-\").map(Number);\n // Erste Annahme: als wäre es UTC, dann Offset zweimal korrigieren.\n let guess = Date.UTC(y, m - 1, d, hour, 0, 0);\n for (let i = 0; i < 2; i++) {\n const loc = toLocal(guess);\n const asUtc = Date.UTC(\n Number(loc.date.slice(0, 4)),\n Number(loc.date.slice(5, 7)) - 1,\n Number(loc.date.slice(8, 10)),\n loc.hour,\n loc.minute,\n );\n guess += Date.UTC(y, m - 1, d, hour) - asUtc;\n }\n return guess;\n}\n\n/** 0 = Sonntag … 6 = Samstag, für ein YYYY-MM-DD in Berliner Zeit. */\nexport function weekday(date: string): number {\n const [y, m, d] = date.split(\"-\").map(Number);\n return new Date(Date.UTC(y, m - 1, d, 12)).getUTCDay();\n}\n\nexport function isWeekend(date: string): boolean {\n const wd = weekday(date);\n return wd === 0 || wd === 6;\n}\n\n/** Kalendertage von `from` bis `to` (positiv, wenn `to` später liegt). */\nexport function daysBetween(from: string, to: string): number {\n return Math.round((dateUtc(to) - dateUtc(from)) / 86400000);\n}\n\nfunction dateUtc(date: string): number {\n const [y, m, d] = date.split(\"-\").map(Number);\n return Date.UTC(y, m - 1, d);\n}\n\nexport function addDays(date: string, n: number): string {\n const [y, m, d] = date.split(\"-\").map(Number);\n const t = new Date(Date.UTC(y, m - 1, d + n, 12));\n return t.toISOString().slice(0, 10);\n}\n\nexport function isValidDate(s: unknown): s is string {\n if (typeof s !== \"string\" || !/^\\d{4}-\\d{2}-\\d{2}$/.test(s)) return false;\n const [y, m, d] = s.split(\"-\").map(Number);\n const t = new Date(Date.UTC(y, m - 1, d));\n return t.getUTCFullYear() === y && t.getUTCMonth() === m - 1 && t.getUTCDate() === d;\n}\n",[],[114,123],"e6d6676a-7cb8-4008-9a46-3f038fc70b93","rules.ts","a59a4c10-ad59-11f1-aab1-1607ee4eb77e",41,["D",1789077889611],"// Reine Buchungsregeln – keine Datenbank, kein Netzwerk. Wird vom Server\n// benutzt und lässt sich lokal ohne Val Town testen.\n\nimport { daysBetween, isWeekend, slotStartEpoch, type LocalNow } from \"./time.ts\";\n\nexport type Resource = {\n id: string;\n name: string;\n capacity: number; // Plätze pro Stunde (Golf: 4)\n vipReserved: number; // davon bis kurz vor Termin nur für VIPs (Golf: 1)\n reserveReleaseHours: number; // so viele Stunden vor Start wird die VIP-Reserve für alle frei (24)\n leadDaysVip: number; // VIP-Buchungsvorlauf in Tagen (14)\n leadDaysStd: number; // normaler Vorlauf (7)\n weekdayOpen: number; // Mo–Fr: erste buchbare Stunde (9 = 9:00–10:00)\n weekdayClose: number; // Mo–Fr: Schließzeit (22 = letzter Slot 21:00–22:00)\n weekendOpen: number;\n weekendClose: number;\n maxOpenPerMember: number; // offene (zukünftige) Buchungen pro Spieler und Ressource\n active: number;\n};\n\nexport type Member = { id: number; name: string; alias?: string | null; email?: string | null; isVip: boolean; isAdmin: boolean; active: boolean };\n\nexport type Seat = { bookingId: number; memberId: number; name: string; isVip: boolean };\n\nexport type Verdict = {\n ok: boolean;\n code:\n | \"ok\"\n | \"closed\"\n | \"past\"\n | \"lead\"\n | \"full\"\n | \"vip_only\"\n | \"already\"\n | \"limit\";\n reason: string;\n};\n\nexport function openingHours(r: Resource, date: string): { open: number; close: number } {\n return isWeekend(date)\n ? { open: r.weekendOpen, close: r.weekendClose }\n : { open: r.weekdayOpen, close: r.weekdayClose };\n}\n\nexport function slotHours(r: Resource, date: string): number[] {\n const { open, close } = openingHours(r, date);\n const hours: number[] = [];\n for (let h = open; h < close; h++) hours.push(h);\n return hours;\n}\n\n/** Freie Plätze aus Sicht eines bestimmten Spielers. */\nexport function seatsAvailableFor(\n r: Resource,\n member: Member,\n seats: Seat[],\n slotStartMs: number,\n nowMs: number,\n): { free: number; reserveActive: boolean } {\n const total = r.capacity - seats.length;\n const reserveActive = r.vipReserved > 0 && slotStartMs - nowMs > r.reserveReleaseHours * 3600_000;\n if (member.isVip || !reserveActive) return { free: Math.max(0, total), reserveActive };\n // Nicht-VIP: darf nur die nicht reservierten Plätze belegen.\n const nonVipSeats = seats.filter((s) => !s.isVip).length;\n const nonVipCap = r.capacity - r.vipReserved;\n return { free: Math.max(0, Math.min(total, nonVipCap - nonVipSeats)), reserveActive };\n}\n\nexport function evaluateBooking(input: {\n resource: Resource;\n member: Member;\n date: string;\n hour: number;\n seats: Seat[];\n now: LocalNow;\n openBookingsOfMember: number; // zukünftige Buchungen dieses Spielers auf dieser Ressource\n}): Verdict {\n const { resource: r, member, date, hour, seats, now } = input;\n\n const { open, close } = openingHours(r, date);\n if (hour < open || hour >= close) {\n return { ok: false, code: \"closed\", reason: `Außerhalb der Öffnungszeit (${open}–${close} Uhr).` };\n }\n\n const startMs = slotStartEpoch(date, hour);\n if (startMs <= now.epoch) {\n return { ok: false, code: \"past\", reason: \"Dieser Termin liegt in der Vergangenheit.\" };\n }\n\n const lead = member.isVip ? r.leadDaysVip : r.leadDaysStd;\n const daysAhead = daysBetween(now.date, date);\n if (daysAhead > lead) {\n return {\n ok: false,\n code: \"lead\",\n reason: member.isVip\n ? `Buchbar ab ${lead} Tage vor dem Termin.`\n : `Buchbar ab ${lead} Tage vor dem Termin (VIP: ${r.leadDaysVip} Tage).`,\n };\n }\n\n if (seats.some((s) => s.memberId === member.id)) {\n return { ok: false, code: \"already\", reason: \"Du bist in dieser Stunde bereits eingetragen.\" };\n }\n\n if (input.openBookingsOfMember >= r.maxOpenPerMember) {\n return {\n ok: false,\n code: \"limit\",\n reason: `Maximal ${r.maxOpenPerMember} offene Buchungen gleichzeitig.`,\n };\n }\n\n if (seats.length >= r.capacity) {\n return { ok: false, code: \"full\", reason: \"Diese Stunde ist voll.\" };\n }\n\n const { free, reserveActive } = seatsAvailableFor(r, member, seats, startMs, now.epoch);\n if (free <= 0) {\n return {\n ok: false,\n code: reserveActive ? \"vip_only\" : \"full\",\n reason: reserveActive\n ? `Der letzte Platz ist bis ${r.reserveReleaseHours} Std. vor Start für VIPs reserviert.`\n : \"Diese Stunde ist voll.\",\n };\n }\n\n return { ok: true, code: \"ok\", reason: \"\" };\n}\n\nexport function canCancel(input: { date: string; hour: number; now: LocalNow }): boolean {\n return slotStartEpoch(input.date, input.hour) > input.now.epoch;\n}\n\n/** Standardressource: der Golfsimulator. */\nexport const DEFAULT_GOLF: Resource = {\n id: \"golf\",\n name: \"Golfsimulator\",\n capacity: 4,\n vipReserved: 1,\n reserveReleaseHours: 24,\n leadDaysVip: 14,\n leadDaysStd: 7,\n weekdayOpen: 9,\n weekdayClose: 22,\n weekendOpen: 10,\n weekendClose: 21,\n maxOpenPerMember: 3,\n active: 1,\n};\n",[],[114,130],["D",1789073648998],[140,141,142,143],[19],{"_37":76,"_13":77,"_40":78,"_42":43,"_44":45,"_46":79,"_48":49,"_50":153,"_17":81,"_53":82,"_54":83,"_56":57,"_58":-5,"_103":154,"_18":155},{"_37":68,"_13":69,"_40":70,"_42":43,"_44":45,"_46":71,"_48":49,"_50":150,"_17":73,"_53":24,"_54":74,"_56":57,"_58":-5,"_103":151,"_18":152},{"_37":60,"_13":61,"_40":62,"_42":43,"_44":45,"_46":63,"_48":49,"_50":147,"_17":65,"_53":24,"_54":66,"_56":57,"_58":-5,"_103":148,"_18":149},{"_37":38,"_13":39,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":144,"_17":52,"_53":24,"_54":55,"_56":57,"_58":-5,"_103":145,"_18":146},["D",1789077902772],[],[19,39],["D",1789078470818],[],[19,61],["D",1789079814117],[],[19,69],["D",1789077911300],[],[19,77],"e5718bb4-559b-409d-a723-e72077efaced",["D",1789073537776],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Buchungssystem Golfsimulator (4 Plätze/Std., VIP, PIN-Login)","imageUrl","userId","aa4a2c1b-3d04-409c-88c5-af54cb1d3470","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","01a08d16-8467-769a-84f6-caf4cfc8139c","tursoName","e5718bb4559b409da723e72077efaced","tursoHostname","e5718bb4559b409da723e72077efaced-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789512044203],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_213":209},"org",{"_11":12,"_206":207,"_208":209,"_166":167,"_210":211,"_212":57},"branch",{"_17":71,"_13":16,"_37":45,"_198":156,"_199":-5,"_200":-5,"_201":-5,"_202":-5,"_203":-5,"_204":14,"_205":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Kirk Lenke","avatar","https://lh3.googleusercontent.com/a/ACg8ocJoDfrcBCOirw40MHfesVj8rSjuldOifXKqr9767Swx6brFywwEAQ=s96-c","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_37":156,"_13":14,"_50":283,"_158":-5,"_159":57,"_160":161,"_162":161,"_163":164,"_165":-5,"_166":167,"_168":96,"_169":49,"_170":-5,"_171":-5,"_172":65,"_173":174,"_175":176,"_177":178,"_179":284,"_181":-5,"_182":183,"_184":183,"_185":186,"_187":186,"_188":186,"_189":183,"_190":183,"_191":285,"_193":286,"_195":287,"_197":57},[253,258,261,262],"files",[253,254,255,256,257,258,259,260,261,262],"counts",{"_243":65,"_244":245,"_246":65,"_32":247,"_248":249},[235,236,237,238],{"_37":85,"_44":45,"_40":43,"_13":19,"_54":-5,"_53":88,"_17":65,"_42":-5,"_50":233,"_46":86,"_58":-5,"_18":234},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1789073648998],[19],{"_37":76,"_13":77,"_40":78,"_42":43,"_44":45,"_46":79,"_48":49,"_50":80,"_17":81,"_53":82,"_54":83,"_56":57,"_58":-5,"_18":242},{"_37":68,"_13":69,"_40":70,"_42":43,"_44":45,"_46":71,"_48":49,"_50":72,"_17":73,"_53":24,"_54":74,"_56":57,"_58":-5,"_18":241},{"_37":60,"_13":61,"_40":62,"_42":43,"_44":45,"_46":63,"_48":49,"_50":64,"_17":65,"_53":24,"_54":66,"_56":57,"_58":-5,"_18":240},{"_37":38,"_13":39,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_17":52,"_53":24,"_54":55,"_56":57,"_58":-5,"_18":239},[19,39],[19,61],[19,69],[19,77],"pulls","branches",1,"forks",{"_250":65,"_252":65},"connections",{"_250":65,"_251":65},"count","unfilledCount","emptyCount",{"_37":85,"_13":19,"_40":43,"_42":-5,"_44":45,"_46":86,"_48":49,"_50":137,"_17":65,"_53":88,"_54":-5,"_56":57,"_58":-5,"_103":281,"_18":282},{"_37":76,"_13":77,"_40":78,"_42":43,"_44":45,"_46":79,"_48":49,"_50":153,"_17":81,"_53":82,"_54":83,"_56":57,"_58":-5,"_103":279,"_18":280},{"_37":68,"_13":69,"_40":70,"_42":43,"_44":45,"_46":71,"_48":49,"_50":150,"_17":73,"_53":24,"_54":74,"_56":57,"_58":-5,"_103":277,"_18":278},{"_37":60,"_13":61,"_40":62,"_42":43,"_44":45,"_46":63,"_48":49,"_50":147,"_17":65,"_53":24,"_54":66,"_56":57,"_58":-5,"_103":275,"_18":276},{"_37":38,"_13":39,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":144,"_17":52,"_53":24,"_54":55,"_56":57,"_58":-5,"_103":273,"_18":274},{"_37":113,"_13":114,"_40":115,"_42":-5,"_44":45,"_46":116,"_48":49,"_50":117,"_17":65,"_53":88,"_54":-5,"_56":57,"_58":-5,"_103":271,"_18":272},{"_37":129,"_13":130,"_40":131,"_42":115,"_44":45,"_46":132,"_48":49,"_50":133,"_17":116,"_53":82,"_54":134,"_56":57,"_58":-5,"_103":269,"_18":270},{"_37":122,"_13":123,"_40":124,"_42":115,"_44":45,"_46":116,"_48":49,"_50":125,"_17":65,"_53":82,"_54":126,"_56":57,"_58":-5,"_103":267,"_18":268},{"_37":106,"_13":107,"_40":108,"_42":-5,"_44":45,"_46":109,"_48":49,"_50":110,"_17":65,"_53":88,"_54":-5,"_56":57,"_58":-5,"_103":265,"_18":266},{"_37":94,"_13":95,"_40":96,"_42":-5,"_44":45,"_46":97,"_48":49,"_50":98,"_17":99,"_53":100,"_54":101,"_56":57,"_58":102,"_103":263,"_18":264},[],[95],[],[107],[],[114,123],[],[114,130],[259,260],[114],[],[19,39],[],[19,61],[],[19,69],[],[19,77],[254,255,256,257],[19],["D",1789073537776],["D",1789512044203],{"_11":12,"_213":209},{"_11":12,"_206":207,"_208":209,"_166":167,"_210":211,"_212":57},{"_17":71,"_13":16,"_37":45,"_198":156,"_199":-5,"_200":-5,"_201":-5,"_202":-5,"_203":-5,"_204":14,"_205":12},"ctx",{"_191":-5,"_230":321,"_322":323,"_324":325,"_326":57,"_327":57,"_328":57,"_329":49,"_330":-5,"_331":-7,"_332":-7,"_333":65,"_334":57,"_335":57,"_336":-5,"_337":57,"_338":57,"_339":57,"_340":-5},"ENV",{"_292":293,"_294":295,"_296":16,"_297":298,"_299":300,"_301":302,"_303":304,"_305":306,"_307":308,"_309":310,"_311":312,"_313":314,"_315":316,"_317":318,"_319":320},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Deine Stunde am Simulator.

PIN zurücksetzen

Heute

Meine Termine

Profil

Alias

E-Mail-Adresse

PIN ändern

Darstellung

Verwaltung

Spieler

Ressourcen & Regeln

Alle Buchungen der nächsten 14 Tage

${isNew ? \"Neue Ressource\" : esc(r.name)}