\n \n\n",[],[264,266],"5601c378-5ddb-11f0-92a1-0224a6c84d84","EventSignIn.tsx","2b067d86-5dd0-11f0-bb26-0224a6c84d84","793e3aa2-3ca0-43b9-b9ef-e70d5ec5db87",48,["D",1752185707057],5,"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState, useEffect } from \"https://esm.sh/react@18.2.0\";\nimport type { AttendeeListResponse, SignInRequest, SignInResponse } from \"../../shared/types.ts\";\n\ninterface EventSignInProps {\n eventId: number;\n}\n\nexport default function EventSignIn({ eventId }: EventSignInProps) {\n const [attendees, setAttendees] = useState([]);\n const [searchTerm, setSearchTerm] = useState('');\n const [loading, setLoading] = useState(true);\n const [error, setError] = useState(null);\n const [signInResult, setSignInResult] = useState(null);\n const [isSigningIn, setIsSigningIn] = useState(false);\n const [showAll, setShowAll] = useState(false);\n\n useEffect(() => {\n loadAttendees();\n }, [eventId]);\n\n // Auto-dismiss success message after 3 seconds\n useEffect(() => {\n if (signInResult?.success) {\n const timer = setTimeout(() => {\n setSignInResult(null);\n }, 3000);\n return () => clearTimeout(timer);\n }\n }, [signInResult]);\n\n const loadAttendees = async () => {\n try {\n const response = await fetch(`/api/${eventId}/attendees`);\n if (!response.ok) throw new Error('Failed to load attendees');\n const data: AttendeeListResponse = await response.json();\n setAttendees(data.attendees);\n } catch (err) {\n setError(err instanceof Error ? err.message : 'Failed to load attendees');\n } finally {\n setLoading(false);\n }\n };\n\n const handleSignIn = async (attendeeId: number) => {\n setIsSigningIn(true);\n setSignInResult(null);\n \n try {\n const response = await fetch(`/api/${eventId}/signin`, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({ attendeeId } as SignInRequest)\n });\n \n if (!response.ok) throw new Error('Failed to sign in');\n \n const result: SignInResponse = await response.json();\n setSignInResult(result);\n \n // Refresh attendees to show updated status\n await loadAttendees();\n \n // Clear search after successful sign-in\n setSearchTerm('');\n } catch (err) {\n setError(err instanceof Error ? err.message : 'Failed to sign in');\n } finally {\n setIsSigningIn(false);\n }\n };\n\n // Simple fuzzy search with optional filtering of checked-in attendees\n const filteredAttendees = attendees.filter(attendee => {\n const matchesSearch = attendee.name.toLowerCase().includes(searchTerm.toLowerCase());\n const shouldShow = showAll || !attendee.checkedIn;\n return matchesSearch && shouldShow;\n });\n\n if (loading) {\n return (\n

Loading attendees...

\n );\n }\n\n if (error) {\n return (\n

{error}

\n { setError(null); loadAttendees(); }}\n className=\"px-4 py-2 bg-[var(--accent-primary)] text-[#2d3748] font-mono rounded hover:bg-[var(--accent-secondary)]\"\n >\n Try Again\n \n

\n );\n }\n\n return (\n

\n Event Check-In\n

\n\n\n\n

\n setSearchTerm(e.target.value)}\n className=\"w-full p-3 border border-[var(--border-default)] rounded-lg focus:outline-none focus:border-[var(--border-focus)]\"\n />\n \n

\n setShowAll(!showAll)}\n className=\"px-4 py-2 bg-[var(--bg-secondary)] text-[var(--text-primary)] rounded-lg hover:bg-[var(--bg-tertiary)] transition-colors\"\n >\n {showAll ? 'Hide Checked-In' : 'Show All'}\n \n \n {filteredAttendees.length} attendee{filteredAttendees.length !== 1 ? 's' : ''} shown\n \n

\n\n

\n {filteredAttendees.length === 0 ? (\n

\n {searchTerm ? 'No attendees found matching your search.' : 'No attendees found.'}\n

\n ) : (\n filteredAttendees.map(attendee => (\n \n

\n {attendee.name}\n

\n {attendee.checkedIn && (\n ✓ Already checked in\n )}\n

\n \n handleSignIn(attendee.id)}\n disabled={isSigningIn}\n className={`px-6 py-2 rounded-lg font-medium transition-colors ${\n attendee.checkedIn\n ? 'bg-[var(--bg-secondary)] text-[var(--text-muted)] hover:bg-[var(--bg-tertiary)]'\n : 'bg-[var(--accent-primary)] text-[#2d3748] hover:bg-[var(--accent-secondary)]'\n } ${isSigningIn ? 'opacity-50 cursor-not-allowed' : ''}`}\n >\n {isSigningIn ? 'Signing In...' : attendee.checkedIn ? 'Check In Again' : 'Check In'}\n \n

\n ))\n )}\n

\n \n {/* Fixed bottom flash message */}\n {signInResult && (\n

\n {signInResult.success ? (\n <>\n

\n ✓ Welcome, {signInResult.attendeeName}!\n

\n setSignInResult(null)}\n className=\"text-green-600 hover:text-green-800 text-lg\"\n >\n ×\n \n

\n {signInResult.alreadySignedIn && (\n

\n Note: You were already signed in, but we've recorded this check-in too.\n

\n )}\n \n ) : (\n

Failed to sign in. Please try again.

\n setSignInResult(null)}\n className=\"text-red-600 hover:text-red-800 text-lg\"\n >\n ×\n \n

\n )}\n

\n )}\n \n );\n}\n",[],[264,282,273],"components","53781c0e-603f-11f0-bbf7-0224a6c84d84","EventManagement.tsx","2af5fd3a-5dd0-11f0-b134-0224a6c84d84",57,["D",1752448554799],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState, useEffect } from \"https://esm.sh/react@18.2.0\";\nimport AddAttendee from \"./AddAttendee.tsx\";\nimport type { EventDetailsResponse, AttendeeListResponse, AnalyticsResponse } from \"../../shared/types.ts\";\n\ninterface EventManagementProps {\n eventId: number;\n}\n\nexport default function EventManagement({ eventId }: EventManagementProps) {\n const [eventDetails, setEventDetails] = useState(null);\n const [attendees, setAttendees] = useState([]);\n const [analytics, setAnalytics] = useState(null);\n const [activeTab, setActiveTab] = useState<'overview' | 'attendees' | 'analytics'>('overview');\n const [loading, setLoading] = useState(true);\n const [error, setError] = useState(null);\n const [password, setPassword] = useState('');\n const [isAuthenticated, setIsAuthenticated] = useState(false);\n\n useEffect(() => {\n // Check if we're already authenticated via session\n checkAuthentication();\n }, [eventId]);\n\n useEffect(() => {\n if (isAuthenticated) {\n loadData();\n }\n }, [eventId, isAuthenticated]);\n\n const checkAuthentication = async () => {\n try {\n const response = await fetch(`/api/${eventId}/details`);\n if (response.ok) {\n setIsAuthenticated(true);\n }\n } catch (err) {\n // Not authenticated, stay on login form\n }\n };\n\n const authenticate = async () => {\n try {\n const response = await fetch(`/api/${eventId}/auth`, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({ password })\n });\n \n if (response.ok) {\n setIsAuthenticated(true);\n setPassword('');\n } else {\n setError('Invalid password');\n }\n } catch (err) {\n setError('Authentication failed');\n }\n };\n\n const loadData = async () => {\n try {\n setLoading(true);\n const [detailsRes, attendeesRes, analyticsRes] = await Promise.all([\n fetch(`/api/${eventId}/details`),\n fetch(`/api/${eventId}/attendees`),\n fetch(`/api/${eventId}/analytics`)\n ]);\n\n if (!detailsRes.ok || !attendeesRes.ok || !analyticsRes.ok) {\n throw new Error('Failed to load event data');\n }\n\n const [details, attendeesList, analyticsData] = await Promise.all([\n detailsRes.json() as Promise,\n attendeesRes.json() as Promise,\n analyticsRes.json() as Promise\n ]);\n\n setEventDetails(details);\n setAttendees(attendeesList.attendees);\n setAnalytics(analyticsData);\n } catch (err) {\n setError(err instanceof Error ? err.message : 'Failed to load data');\n } finally {\n setLoading(false);\n }\n };\n\n const exportCSV = async () => {\n try {\n const response = await fetch(`/api/${eventId}/export`);\n if (!response.ok) throw new Error('Failed to export data');\n \n const blob = await response.blob();\n const url = window.URL.createObjectURL(blob);\n const a = document.createElement('a');\n a.href = url;\n a.download = `event-${eventId}-checkins.csv`;\n document.body.appendChild(a);\n a.click();\n document.body.removeChild(a);\n window.URL.revokeObjectURL(url);\n } catch (err) {\n setError('Failed to export data');\n }\n };\n\n const getSignInUrl = () => {\n return `${window.location.origin}/${eventId}/signin`;\n };\n\n const copySignInUrl = () => {\n navigator.clipboard.writeText(getSignInUrl());\n };\n\n const logout = async () => {\n try {\n await fetch(`/api/${eventId}/logout`, { method: 'POST' });\n setIsAuthenticated(false);\n } catch (err) {\n // Handle logout error\n }\n };\n\n if (!isAuthenticated) {\n return (\n

\n Event Management\n

\n \n {error && (\n

\n {error}\n

\n )}\n \n

\n \n Enter event password:\n \n setPassword(e.target.value)}\n className=\"w-full p-3 border border-[var(--border-default)] rounded-lg focus:outline-none focus:border-[var(--border-focus)]\"\n onKeyPress={(e) => e.key === 'Enter' && authenticate()}\n />\n

\n \n \n Access Event\n \n

\n );\n }\n\n if (loading) {\n return (\n

Loading event data...

\n );\n }\n\n if (error) {\n return (\n

{error}

\n { setError(null); loadData(); }}\n className=\"px-4 py-2 bg-[var(--accent-primary)] text-[#2d3748] font-mono rounded hover:bg-[var(--accent-secondary)]\"\n >\n Try Again\n \n

\n );\n }\n\n return (\n

\n {eventDetails?.event.name}\n

\n \n Logout\n \n

\n {eventDetails?.event.location && (\n

📍 {eventDetails.event.location}

\n )}\n

\n\n {/* Sign-in URL */}\n

Check-in URL

\n \n {getSignInUrl()}\n \n \n Copy\n \n

\n\n {/* Tabs */}\n

\n {(['overview', 'attendees', 'analytics'] as const).map((tab) => (\n setActiveTab(tab)}\n className={`py-2 px-1 border-b-2 font-medium text-sm capitalize ${\n activeTab === tab\n ? 'border-[var(--accent-primary)] text-[var(--accent-primary)]'\n : 'border-transparent text-[var(--text-muted)] hover:text-[var(--text-secondary)]'\n }`}\n >\n {tab}\n \n ))}\n

\n\n {/* Overview Tab */}\n {activeTab === 'overview' && (\n

Total Attendees

\n {eventDetails?.attendeeCount || 0}\n

\n \n

Checked In

\n {eventDetails?.checkedInCount || 0}\n

\n \n

Check-in Rate

\n {eventDetails?.attendeeCount \n ? Math.round(((eventDetails?.checkedInCount || 0) / eventDetails.attendeeCount) * 100)\n : 0}%\n

\n )}\n\n {/* Attendees Tab */}\n {activeTab === 'attendees' && (\n

Attendees

\n \n Export CSV\n \n

\n \n

\n \n \n \n \n \n \n \n \n {attendees.map((attendee) => (\n \n \n \n \n ))}\n \n

\n Name\n	\n Status\n
\n {attendee.name}\n	\n {attendee.checkedIn ? (\n ✓ Checked In\n ) : (\n Not checked in\n )}\n

\n )}\n\n {/* Analytics Tab */}\n {activeTab === 'analytics' && analytics && (\n

Check-ins by Date

\n {analytics.checkInsByDate.map((entry) => (\n

\n {entry.date}\n {entry.count}\n

\n ))}\n

\n \n

Recent Check-ins

\n {analytics.recentCheckIns.map((entry, index) => (\n

\n {entry.attendeeName}\n \n {new Date(entry.checkedInAt).toLocaleTimeString()}\n \n

\n ))}\n

\n )}\n

\n );\n}\n",[],[264,282,284],"3dff36e4-5dd5-11f0-acbb-0224a6c84d84","EventLinks.tsx","d2096474-5dd3-11f0-9e07-0224a6c84d84",31,["D",1752183089782],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState, useEffect } from \"https://esm.sh/react@18.2.0\";\nimport type { EventDetailsResponse } from \"../../shared/types.ts\";\n\ninterface EventLinksProps {\n eventId: number;\n}\n\nexport default function EventLinks({ eventId }: EventLinksProps) {\n const [eventDetails, setEventDetails] = useState(null);\n const [loading, setLoading] = useState(true);\n const [error, setError] = useState(null);\n\n useEffect(() => {\n loadEventDetails();\n }, [eventId]);\n\n const loadEventDetails = async () => {\n try {\n const response = await fetch(`/api/${eventId}`);\n if (!response.ok) throw new Error('Failed to load event details');\n const data: EventDetailsResponse = await response.json();\n setEventDetails(data);\n } catch (err) {\n setError(err instanceof Error ? err.message : 'Failed to load event');\n } finally {\n setLoading(false);\n }\n };\n\n const getSignInUrl = () => {\n return `${window.location.origin}/${eventId}/signin`;\n };\n\n const getManageUrl = () => {\n return `${window.location.origin}/${eventId}/manage`;\n };\n\n const copyToClipboard = (text: string) => {\n navigator.clipboard.writeText(text);\n };\n\n if (loading) {\n return (\n

Loading event details...

\n );\n }\n\n if (error) {\n return (\n

{error}

\n { setError(null); loadEventDetails(); }}\n className=\"px-4 py-2 bg-[var(--accent-primary)] text-white rounded hover:bg-[var(--accent-secondary)]\"\n >\n Try Again\n \n

\n );\n }\n\n return (\n

\n {eventDetails?.event.name}\n

\n {eventDetails?.event.location && (\n

📍 {eventDetails.event.location}

\n )}\n

\n {eventDetails?.attendeeCount || 0} attendees\n •\n {eventDetails?.checkedInCount || 0} checked in\n

\n\n

\n {/* Attendee Check-in */}\n

\n \n

\n Attendee Check-in\n

\n For attendees to check in to the event\n

\n \n

\n \n {getSignInUrl()}\n \n copyToClipboard(getSignInUrl())}\n className=\"px-3 py-2 bg-[var(--accent-primary)] text-white rounded hover:bg-[var(--accent-secondary)] text-sm\"\n >\n Copy\n \n

\n \n \n Go to Check-in Page\n \n

\n\n {/* Event Management */}\n

\n \n

\n Event Management\n

\n For organizers to manage the event (requires password)\n

\n \n

\n \n {getManageUrl()}\n \n copyToClipboard(getManageUrl())}\n className=\"px-3 py-2 bg-[var(--info)] text-white rounded hover:bg-blue-600 text-sm\"\n >\n Copy\n \n

\n \n \n Go to Management Page\n \n

\n\n {/* Additional Info */}\n

Event Information

\n Event ID:\n {eventId}\n

\n Created:\n \n {eventDetails?.event.created_at ? new Date(eventDetails.event.created_at).toLocaleDateString() : 'Unknown'}\n \n

\n Total Attendees:\n {eventDetails?.attendeeCount || 0}\n

\n Checked In:\n {eventDetails?.checkedInCount || 0}\n

\n );\n}\n",[],[264,282,292],"560f5fc4-5ddb-11f0-8cbb-0224a6c84d84","EventCreation.tsx","0d97ee1c-5dce-11f0-92a2-0224a6c84d84",50,["D",1752185706988],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState } from \"https://esm.sh/react@18.2.0\";\n\ninterface EventCreationProps {\n onEventCreated: (eventId: number) => void;\n}\n\nexport default function EventCreation({ onEventCreated }: EventCreationProps) {\n const [formData, setFormData] = useState({\n name: '',\n password: '',\n location: '',\n csvContent: ''\n });\n const [isSubmitting, setIsSubmitting] = useState(false);\n const [error, setError] = useState(null);\n const [csvErrors, setCsvErrors] = useState([]);\n\n const handleFileUpload = (event: React.ChangeEvent) => {\n const file = event.target.files?.[0];\n if (file) {\n const reader = new FileReader();\n reader.onload = (e) => {\n const content = e.target?.result as string;\n setFormData(prev => ({ ...prev, csvContent: content }));\n };\n reader.readAsText(file);\n }\n };\n\n const handleSubmit = async (e: React.FormEvent) => {\n e.preventDefault();\n setIsSubmitting(true);\n setError(null);\n setCsvErrors([]);\n\n try {\n const response = await fetch('/api/events', {\n method: 'POST',\n headers: {\n 'Content-Type': 'application/json',\n },\n body: JSON.stringify(formData),\n });\n\n const result = await response.json();\n\n if (!response.ok) {\n if (result.csvErrors) {\n setCsvErrors(result.csvErrors);\n }\n throw new Error(result.error || 'Failed to create event');\n }\n\n // Show success and redirect\n onEventCreated(result.eventId);\n } catch (err) {\n setError(err instanceof Error ? err.message : 'An error occurred');\n } finally {\n setIsSubmitting(false);\n }\n };\n\n return (\n

\n Create New Event\n

\n Set up your event and upload attendee list\n

\n\n

\n \n Event Name *\n \n setFormData(prev => ({ ...prev, name: e.target.value }))}\n className=\"w-full px-3 py-2 border border-[var(--border-default)] rounded-md focus:outline-none focus:ring-2 focus:ring-[var(--accent-primary)] focus:border-transparent\"\n placeholder=\"Enter event name\"\n />\n

\n\n

\n \n Management Password *\n \n setFormData(prev => ({ ...prev, password: e.target.value }))}\n className=\"w-full px-3 py-2 border border-[var(--border-default)] rounded-md focus:outline-none focus:ring-2 focus:ring-[var(--accent-primary)] focus:border-transparent\"\n placeholder=\"Enter password for event management\"\n />\n

\n This password will be required to access analytics and export data\n

\n\n

\n \n Location\n \n setFormData(prev => ({ ...prev, location: e.target.value }))}\n className=\"w-full px-3 py-2 border border-[var(--border-default)] rounded-md focus:outline-none focus:ring-2 focus:ring-[var(--accent-primary)] focus:border-transparent\"\n placeholder=\"Enter event location (optional)\"\n />\n

\n\n

\n \n Attendee List (CSV) *\n \n \n

Upload a CSV file with attendee names. Supported column headers:

name, Name, full_name
first_name + last_name (will be combined)
id (optional, for external reference)

\n\n {formData.csvContent && (\n

\n CSV loaded: {formData.csvContent.split('\\n').length - 1} rows\n

\n )}\n\n {csvErrors.length > 0 && (\n

CSV Parsing Issues:

• {error}

\n )}\n\n {error && (\n

{error}

\n )}\n\n \n {isSubmitting ? 'Creating Event...' : 'Create Event'}\n \n \n

\n\n

What happens next?

1. Your event will be created with the uploaded attendee list

2. You'll be redirected to the management dashboard

3. Share the sign-in link with your attendees

4. Monitor check-ins and export data as needed

\n );\n}",[],[264,282,300],"538f8ff6-603f-11f0-a5cd-0224a6c84d84","App.tsx","06c9fc59-0d9d-467a-873e-97706322b720",["D",1752448554794],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState, useEffect } from \"https://esm.sh/react@18.2.0\";\nimport EventCreation from \"./EventCreation.tsx\";\nimport EventSignIn from \"./EventSignIn.tsx\";\nimport EventManagement from \"./EventManagement.tsx\";\nimport EventLinks from \"./EventLinks.tsx\";\nimport AddAttendee from \"./AddAttendee.tsx\";\n\n// Simple client-side routing based on URL path\nfunction useRouter() {\n const [path, setPath] = useState(window.location.pathname);\n \n useEffect(() => {\n const handlePopState = () => setPath(window.location.pathname);\n window.addEventListener('popstate', handlePopState);\n return () => window.removeEventListener('popstate', handlePopState);\n }, []);\n \n const navigate = (newPath: string) => {\n window.history.pushState({}, '', newPath);\n setPath(newPath);\n };\n \n return { path, navigate };\n}\n\nexport default function App() {\n const { path, navigate } = useRouter();\n \n // Parse route parameters\n const getEventId = () => {\n const match = path.match(/^\\/(\\d+)/);\n return match ? parseInt(match[1]) : null;\n };\n \n const renderPage = () => {\n if (path === '/' || path === '/new') {\n return navigate(`/${eventId}`)} />;\n }\n \n if (path.includes('/signin')) {\n const eventId = getEventId();\n if (!eventId) return

Invalid event ID

;\n return ;\n }\n \n if (path.includes('/manage')) {\n const eventId = getEventId();\n if (!eventId) return

Invalid event ID

;\n return ;\n }\n \n if (path.match(/^\\/\\d+$/)) {\n const eventId = getEventId();\n if (!eventId) return

Invalid event ID

;\n return ;\n }\n \n if (path.includes('/add-attendee')) {\n const eventId = getEventId();\n if (!eventId) return

Invalid event ID

;\n return (\n

\n Add Attendee\n

\n Add a new attendee to the event\n

\n \n

\n );\n }\n \n return

Page not found

;\n };\n\n return (\n <>\n \n \n \n \n \n \n

\n {renderPage()}\n

\n \n );\n}",[],[264,282,308],"5374c856-603f-11f0-8a5b-0224a6c84d84","AddAttendee.tsx","5374c914-603f-11f0-8a5b-0224a6c84d84",56,["D",1752448554780],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState } from \"https://esm.sh/react@18.2.0\";\n\ninterface AddAttendeeProps {\n eventId: number;\n onAttendeeAdded?: () => void;\n onCancel?: () => void;\n}\n\nexport default function AddAttendee({ eventId, onAttendeeAdded, onCancel }: AddAttendeeProps) {\n const [formData, setFormData] = useState({\n password: '',\n name: '',\n external_id: ''\n });\n const [isSubmitting, setIsSubmitting] = useState(false);\n const [error, setError] = useState(null);\n const [success, setSuccess] = useState(null);\n\n const handleSubmit = async (e: React.FormEvent) => {\n e.preventDefault();\n setIsSubmitting(true);\n setError(null);\n setSuccess(null);\n\n try {\n const response = await fetch(`/api/events/${eventId}/attendees`, {\n method: 'POST',\n headers: {\n 'Content-Type': 'application/json',\n },\n body: JSON.stringify({\n password: formData.password,\n name: formData.name,\n external_id: formData.external_id || undefined\n }),\n });\n\n const result = await response.json();\n\n if (!response.ok) {\n throw new Error(result.error || 'Failed to add attendee');\n }\n\n setSuccess(`Successfully added ${result.attendee.name} to the event!`);\n setFormData(prev => ({ ...prev, name: '', external_id: '' })); // Keep password for convenience\n \n if (onAttendeeAdded) {\n onAttendeeAdded();\n }\n } catch (err) {\n setError(err instanceof Error ? err.message : 'An error occurred');\n } finally {\n setIsSubmitting(false);\n }\n };\n\n return (\n

Add New Attendee

\n {onCancel && (\n \n ×\n \n )}\n

\n\n

\n \n Event Password *\n \n setFormData(prev => ({ ...prev, password: e.target.value }))}\n className=\"w-full px-3 py-2 border border-[var(--border-default)] rounded-md focus:outline-none focus:ring-2 focus:ring-[var(--accent-primary)] focus:border-transparent\"\n placeholder=\"Enter event management password\"\n />\n

\n Required to verify you have permission to add attendees\n

\n\n

\n \n Attendee Name *\n \n setFormData(prev => ({ ...prev, name: e.target.value }))}\n className=\"w-full px-3 py-2 border border-[var(--border-default)] rounded-md focus:outline-none focus:ring-2 focus:ring-[var(--accent-primary)] focus:border-transparent\"\n placeholder=\"Enter attendee's full name\"\n />\n

\n\n

\n \n External ID (Optional)\n \n setFormData(prev => ({ ...prev, external_id: e.target.value }))}\n className=\"w-full px-3 py-2 border border-[var(--border-default)] rounded-md focus:outline-none focus:ring-2 focus:ring-[var(--accent-primary)] focus:border-transparent\"\n placeholder=\"Employee ID, badge number, etc. (optional)\"\n />\n

\n\n {success && (\n

{success}

\n )}\n\n {error && (\n

{error}

\n )}\n\n

\n \n {isSubmitting ? 'Adding Attendee...' : 'Add Attendee'}\n \n \n {onCancel && (\n \n Cancel\n \n )}\n

\n\n

How it works:

• Enter the event management password to authenticate

• Add the attendee's name (must be unique for this event)

• External ID is optional but helpful for tracking

• The attendee will immediately appear in the sign-in list

\n );\n}\n",[],[264,282,315],"24f4886a-5dcc-11f0-990d-0224a6c84d84",["D",1752179182252],[170,171,172,173,174,175],[264,282],"24f48d6a-5dcc-11f0-990d-0224a6c84d84",["D",1752179182252],[169,176,177],[264],"5382930a-603f-11f0-a838-0224a6c84d84","index.ts","ab3f0ddd-bf40-418f-aee1-1e6f03b7f261",59,["D",1752448554790],13,"http","import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\nimport { sqlite } from \"https://esm.town/v/stevekrouse/sqlite\";\nimport { getCookie, setCookie } from \"https://esm.sh/hono@3.11.7/cookie\";\nimport { \n createSession, \n setSessionCookie, \n clearSessionCookie,\n authMiddleware,\n verifyEventAccess,\n csrfMiddleware\n} from \"./auth.ts\";\nimport { initDatabase, TABLES } from \"./database.ts\";\n\nconst app = new Hono();\n\n// Unwrap Hono errors to see original error details\napp.onError((err, c) => {\n throw err;\n});\n\n// Database table names imported from centralized schema\n\n// Initialize database on startup\nawait initDatabase();\nconsole.log(`🚀 [System] Event check-in system ready!`);\n\n// Serve static files\napp.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\napp.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n\n// Serve main page\napp.get(\"/\", async c => {\n const html = await readFile(\"/frontend/index.html\", import.meta.url);\n return c.html(html);\n});\n\n// Route handlers for different pages\napp.get(\"/new\", async c => {\n const html = await readFile(\"/frontend/index.html\", import.meta.url);\n return c.html(html);\n});\n\napp.get(\"/:eventId/signin\", async c => {\n const html = await readFile(\"/frontend/index.html\", import.meta.url);\n return c.html(html);\n});\n\napp.get(\"/:eventId/manage\", async c => {\n const html = await readFile(\"/frontend/index.html\", import.meta.url);\n return c.html(html);\n});\n\napp.get(\"/:eventId\", async c => {\n const html = await readFile(\"/frontend/index.html\", import.meta.url);\n return c.html(html);\n});\n\napp.get(\"/events/:eventId/add-attendee\", async c => {\n const html = await readFile(\"/frontend/index.html\", import.meta.url);\n return c.html(html);\n});\n\n// Utility functions\nfunction hashPassword(password: string): string {\n // Simple hash for demo - in production, use proper bcrypt or similar\n return btoa(password + \"salt\").replace(/[^a-zA-Z0-9]/g, '');\n}\n\nfunction verifyPassword(password: string, hash: string): boolean {\n return hashPassword(password) === hash;\n}\n\n// CSV parsing utility with proper quoted field handling\nfunction parseCSV(csvContent: string): { attendees: Array<{name: string, external_id?: string}>, errors: string[] } {\n const lines = csvContent.trim().split('\\n');\n const errors: string[] = [];\n const attendees: Array<{name: string, external_id?: string}> = [];\n \n if (lines.length === 0) {\n errors.push(\"CSV file is empty\");\n return { attendees, errors };\n }\n \n // Parse CSV row with proper quote handling\n function parseCSVRow(line: string): string[] {\n const result: string[] = [];\n let current = '';\n let inQuotes = false;\n let i = 0;\n \n while (i < line.length) {\n const char = line[i];\n \n if (char === '\"' && !inQuotes) {\n inQuotes = true;\n } else if (char === '\"' && inQuotes) {\n // Check for escaped quote\n if (i + 1 < line.length && line[i + 1] === '\"') {\n current += '\"';\n i++; // Skip the escaped quote\n } else {\n inQuotes = false;\n }\n } else if (char === ',' && !inQuotes) {\n result.push(current.trim());\n current = '';\n } else {\n current += char;\n }\n i++;\n }\n \n result.push(current.trim());\n return result;\n }\n \n // Parse header row\n const headers = parseCSVRow(lines[0]).map(h => h.toLowerCase());\n console.log(`📋 [CSV] Found headers:`, headers);\n \n // Find name columns - flexible matching\n let nameIndex = -1;\n let firstNameIndex = -1;\n let lastNameIndex = -1;\n let idIndex = -1;\n let emailIndex = -1;\n \n headers.forEach((header, index) => {\n const cleanHeader = header.toLowerCase();\n if (cleanHeader === 'name' || (cleanHeader.includes('name') && !cleanHeader.includes('first') && !cleanHeader.includes('last') && !cleanHeader.includes('given') && !cleanHeader.includes('family'))) {\n nameIndex = index;\n } else if (cleanHeader.includes('first') || cleanHeader === 'first name') {\n firstNameIndex = index;\n } else if (cleanHeader.includes('last') || cleanHeader === 'last name' || cleanHeader.includes('family') || cleanHeader.includes('surname')) {\n lastNameIndex = index;\n } else if ((cleanHeader.includes('id') || cleanHeader === 'member id') && !cleanHeader.includes('email')) {\n idIndex = index;\n } else if (cleanHeader.includes('email') || cleanHeader === 'email') {\n emailIndex = index;\n }\n });\n \n console.log(`📋 [CSV] Column mapping - name: ${nameIndex}, firstName: ${firstNameIndex}, lastName: ${lastNameIndex}, id: ${idIndex}, email: ${emailIndex}`);\n \n // Process data rows\n for (let i = 1; i < lines.length; i++) {\n const row = parseCSVRow(lines[i]);\n \n if (row.length !== headers.length) {\n errors.push(`Row ${i + 1}: Column count mismatch (expected ${headers.length}, got ${row.length})`);\n continue;\n }\n \n let name = '';\n \n // Extract name using flexible logic\n if (nameIndex >= 0 && row[nameIndex]) {\n name = row[nameIndex];\n } else if (firstNameIndex >= 0 && lastNameIndex >= 0) {\n const firstName = row[firstNameIndex] || '';\n const lastName = row[lastNameIndex] || '';\n name = `${firstName} ${lastName}`.trim();\n } else if (firstNameIndex >= 0) {\n name = row[firstNameIndex];\n }\n \n if (!name) {\n errors.push(`Row ${i + 1}: No name found`);\n continue;\n }\n \n const attendee: {name: string, external_id?: string} = { name };\n \n if (idIndex >= 0 && row[idIndex]) {\n attendee.external_id = row[idIndex];\n }\n \n attendees.push(attendee);\n }\n \n console.log(`📋 [CSV] Parsed ${attendees.length} attendees with ${errors.length} errors`);\n return { attendees, errors };\n}\n\n// API Routes\n\n// Create new event\napp.post(\"/api/events\", async c => {\n console.log(`🎯 [API] New event creation request`);\n \n try {\n const body = await c.req.json();\n const { name, password, location, csvContent } = body;\n \n console.log(`📋 [API] Event details: \"${name}\", location: \"${location || 'N/A'}\"`);\n \n if (!name || !password || !csvContent) {\n return c.json({ error: \"Missing required fields: name, password, csvContent\" }, 400);\n }\n \n // Parse CSV\n const { attendees, errors } = parseCSV(csvContent);\n \n if (attendees.length === 0) {\n return c.json({ error: \"No valid attendees found in CSV\", csvErrors: errors }, 400);\n }\n \n // Create event with unix timestamp as ID\n const passwordHash = hashPassword(password);\n const eventId = Math.floor(Date.now() / 1000); // Unix timestamp in seconds\n console.log(`📋 [API] Creating event with ID: ${eventId}, name: \"${name}\", location: \"${location || 'N/A'}\"`);\n\n try {\n await sqlite.execute(\n `INSERT INTO ${TABLES.EVENTS} (id, name, password_hash, location) VALUES (?, ?, ?, ?)`,\n [eventId, name, passwordHash, location || null]\n );\n console.log(`✅ [API] Event successfully inserted into database with ID: ${eventId}`);\n } catch (error) {\n console.error(`💥 [API] Failed to insert event:`, error);\n throw error;\n }\n\n // Verify event was created\n const verifyEventResult = await sqlite.execute(`SELECT id, name FROM ${TABLES.EVENTS} WHERE id = ?`, [eventId]);\n const verifyEvent = verifyEventResult.rows || verifyEventResult;\n console.log(`🔍 [API] Event verification: found ${verifyEvent.length} events with ID ${eventId}`);\n if (verifyEvent.length > 0) {\n console.log(`🔍 [API] Event details: ${JSON.stringify(verifyEvent[0])}`);\n }\n\n // Insert attendees\n console.log(`📋 [API] Starting to insert ${attendees.length} attendees...`);\n let insertedCount = 0;\n for (const attendee of attendees) {\n try {\n await sqlite.execute(\n `INSERT INTO ${TABLES.ATTENDEES} (event_id, name, external_id) VALUES (?, ?, ?)`,\n [eventId, attendee.name, attendee.external_id || null]\n );\n insertedCount++;\n console.log(`👤 [API] Inserted attendee ${insertedCount}/${attendees.length}: \"${attendee.name}\" (external_id: ${attendee.external_id || 'N/A'})`);\n } catch (error) {\n console.error(`💥 [API] Failed to insert attendee \"${attendee.name}\":`, error);\n throw error;\n }\n }\n\n // Verify attendees were inserted\n const verifyAttendeesResult = await sqlite.execute(`SELECT COUNT(*) as count FROM ${TABLES.ATTENDEES} WHERE event_id = ?`, [eventId]);\n const verifyAttendees = verifyAttendeesResult.rows || verifyAttendeesResult;\n const actualAttendeeCount = Number(verifyAttendees[0]?.count || 0);\n console.log(`🔍 [API] Attendee verification: expected ${attendees.length}, found ${actualAttendeeCount} in database`);\n\n console.log(`✅ [API] Successfully added ${insertedCount} attendees to event ${eventId}`);\n \n return c.json({\n success: true,\n eventId,\n attendeeCount: attendees.length,\n csvErrors: errors\n });\n \n } catch (error) {\n console.error(`💥 [API] Error creating event:`, error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Get basic event info (public, no auth required)\napp.get(\"/api/:eventId\", async c => {\n const eventId = parseInt(c.req.param(\"eventId\"));\n console.log(`📋 [API] Fetching basic event details for event ${eventId}`);\n \n try {\n const eventResult = await sqlite.execute(`\n SELECT id, name, location, created_at FROM ${TABLES.EVENTS} WHERE id = ?\n `, [eventId]);\n \n const event = eventResult.rows || eventResult;\n \n if (event.length === 0) {\n console.log(`❌ [API] Event ${eventId} not found`);\n return c.json({ error: \"Event not found\" }, 404);\n }\n \n // Get attendee counts\n const attendeeCountResult = await sqlite.execute(`\n SELECT COUNT(*) as count FROM ${TABLES.ATTENDEES} WHERE event_id = ?\n `, [eventId]);\n \n const checkedInCountResult = await sqlite.execute(`\n SELECT COUNT(*) as count FROM ${TABLES.CHECKINS} WHERE attendee_id IN (\n SELECT id FROM ${TABLES.ATTENDEES} WHERE event_id = ?\n )\n `, [eventId]);\n \n const attendeeCountRows = attendeeCountResult.rows || attendeeCountResult;\n const checkedInCountRows = checkedInCountResult.rows || checkedInCountResult;\n const attendeeCount = Number(attendeeCountRows[0]?.count || 0);\n const checkedInCount = Number(checkedInCountRows[0]?.count || 0);\n \n console.log(`📋 [API] Event ${eventId} found: ${attendeeCount} attendees, ${checkedInCount} checked in`);\n \n return c.json({\n event: {\n id: event[0].id,\n name: event[0].name,\n location: event[0].location,\n created_at: event[0].created_at\n },\n attendeeCount,\n checkedInCount\n });\n \n } catch (error) {\n console.error(`💥 [API] Error fetching event details:`, error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Get attendee list for sign-in (names only, no sensitive info)\napp.get(\"/api/:eventId/attendees\", async c => {\n const eventId = parseInt(c.req.param(\"eventId\"));\n console.log(`📋 [API] Fetching attendees for event ${eventId}`);\n \n try {\n // First check if event exists\n console.log(`🔍 [API] Checking if event ${eventId} exists in table ${TABLES.EVENTS}`);\n const eventCheckResult = await sqlite.execute(`\n SELECT id FROM ${TABLES.EVENTS} WHERE id = ?\n `, [eventId]);\n \n const eventCheck = eventCheckResult.rows || eventCheckResult;\n console.log(`🔍 [API] Event check result: found ${eventCheck.length} events with ID ${eventId}`);\n if (eventCheck.length === 0) {\n console.log(`❌ [API] Event ${eventId} not found`);\n return c.json({ error: \"Event not found\" }, 404);\n }\n \n // Get attendees with check-in status\n console.log(`🔍 [API] Querying attendees from table ${TABLES.ATTENDEES} for event ${eventId}`);\n const attendeesResult = await sqlite.execute(`\n SELECT a.id, a.name, \n CASE WHEN c.id IS NOT NULL THEN 1 ELSE 0 END as checked_in\n FROM ${TABLES.ATTENDEES} a\n LEFT JOIN ${TABLES.CHECKINS} c ON a.id = c.attendee_id\n WHERE a.event_id = ?\n ORDER BY a.name\n `, [eventId]);\n \n const attendees = attendeesResult.rows || attendeesResult;\n console.log(`📋 [API] Found ${attendees.length} attendees for event ${eventId}`);\n \n // Log first few attendees for debugging\n if (attendees.length > 0) {\n console.log(`🔍 [API] First few attendees:`, attendees.slice(0, 3).map(a => ({ id: a.id, name: a.name, checked_in: a.checked_in })));\n }\n \n const result = {\n attendees: attendees.map(row => ({\n id: row.id,\n name: row.name,\n checkedIn: Boolean(row.checked_in)\n }))\n };\n \n console.log(`📋 [API] Returning ${result.attendees.length} attendees to client`);\n return c.json(result);\n \n } catch (error) {\n console.error(`💥 [API] Error fetching attendees for event ${eventId}:`, error);\n console.error(`💥 [API] Error stack:`, error.stack);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Sign in to event\napp.post(\"/api/:eventId/signin\", async c => {\n const eventId = parseInt(c.req.param(\"eventId\"));\n \n try {\n const body = await c.req.json();\n const { attendeeId } = body;\n \n if (!attendeeId) {\n return c.json({ error: \"Attendee ID required\" }, 400);\n }\n \n // Verify attendee belongs to this event\n const attendeeResult = await sqlite.execute(\n `SELECT * FROM ${TABLES.ATTENDEES} WHERE id = ? AND event_id = ?`,\n [attendeeId, eventId]\n );\n \n const attendee = attendeeResult.rows || attendeeResult;\n if (attendee.length === 0) {\n return c.json({ error: \"Attendee not found for this event\" }, 404);\n }\n \n // Check if already signed in\n const existingCheckInResult = await sqlite.execute(\n `SELECT * FROM ${TABLES.CHECKINS} WHERE event_id = ? AND attendee_id = ?`,\n [eventId, attendeeId]\n );\n \n const existingCheckIn = existingCheckInResult.rows || existingCheckInResult;\n if (existingCheckIn.length > 0) {\n console.log(`⚠️ [API] Attendee ${attendee[0].name} already signed in`);\n // TODO: Consider security implications of multiple sign-in attempts\n // For now, we'll allow it but flag it\n return c.json({\n success: true,\n attendeeName: attendee[0].name,\n alreadySignedIn: true,\n message: \"You were already signed in, but we've recorded this additional check-in.\"\n });\n }\n \n // Record check-in\n await sqlite.execute(\n `INSERT INTO ${TABLES.CHECKINS} (event_id, attendee_id) VALUES (?, ?)`,\n [eventId, attendeeId]\n );\n \n console.log(`✅ [API] ${attendee[0].name} signed in to event ${eventId}`);\n \n return c.json({\n success: true,\n attendeeName: attendee[0].name,\n alreadySignedIn: false\n });\n \n } catch (error) {\n console.error(`💥 [API] Error during sign-in:`, error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Authentication endpoint - login with password and create session\napp.post(\"/api/:eventId/auth\", async c => {\n const eventId = parseInt(c.req.param(\"eventId\"));\n \n try {\n const body = await c.req.json();\n const { password } = body;\n \n if (!password) {\n return c.json({ error: \"Password required\" }, 401);\n }\n \n // Get event\n const eventsResult = await sqlite.execute(\n `SELECT * FROM ${TABLES.EVENTS} WHERE id = ?`,\n [eventId]\n );\n \n const events = eventsResult.rows || eventsResult;\n if (events.length === 0) {\n return c.json({ error: \"Event not found\" }, 404);\n }\n \n const event = events[0];\n \n // Verify password\n if (!verifyPassword(password, event.password_hash)) {\n return c.json({ error: \"Invalid password\" }, 401);\n }\n \n // Create session\n const session = await createSession(eventId);\n setSessionCookie(c, session.token);\n \n return c.json({ success: true });\n \n } catch (error) {\n console.error(`💥 [API] Error during authentication:`, error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Logout endpoint\napp.post(\"/api/:eventId/logout\", async c => {\n clearSessionCookie(c);\n return c.json({ success: true });\n});\n\n// Get event details (session protected)\napp.get(\"/api/:eventId/details\", authMiddleware, async c => {\n const eventId = parseInt(c.req.param(\"eventId\"));\n \n try {\n // Verify access to this specific event\n if (!await verifyEventAccess(c, eventId)) {\n return c.json({ error: \"Unauthorized for this event\" }, 403);\n }\n \n // Get event\n const eventsResult = await sqlite.execute(\n `SELECT * FROM ${TABLES.EVENTS} WHERE id = ?`,\n [eventId]\n );\n \n const events = eventsResult.rows || eventsResult;\n if (events.length === 0) {\n return c.json({ error: \"Event not found\" }, 404);\n }\n \n const event = events[0];\n \n // Get counts\n const attendeeCountResult = await sqlite.execute(\n `SELECT COUNT(*) as count FROM ${TABLES.ATTENDEES} WHERE event_id = ?`,\n [eventId]\n );\n \n const checkedInCountResult = await sqlite.execute(\n `SELECT COUNT(*) as count FROM ${TABLES.CHECKINS} WHERE event_id = ?`,\n [eventId]\n );\n \n const attendeeCountRows = attendeeCountResult.rows || attendeeCountResult;\n const checkedInCountRows = checkedInCountResult.rows || checkedInCountResult;\n \n return c.json({\n event: {\n id: event.id,\n name: event.name,\n location: event.location,\n created_at: event.created_at\n },\n attendeeCount: attendeeCountRows[0].count,\n checkedInCount: checkedInCountRows[0].count\n });\n \n } catch (error) {\n console.error(`💥 [API] Error fetching event details:`, error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Get analytics (session protected)\napp.get(\"/api/:eventId/analytics\", authMiddleware, async c => {\n const eventId = parseInt(c.req.param(\"eventId\"));\n \n try {\n // Verify access to this specific event\n if (!await verifyEventAccess(c, eventId)) {\n return c.json({ error: \"Unauthorized for this event\" }, 403);\n }\n \n // Get total counts\n const totalAttendees = await sqlite.execute(\n `SELECT COUNT(*) as count FROM ${TABLES.ATTENDEES} WHERE event_id = ?`,\n [eventId]\n );\n \n const totalCheckedIn = await sqlite.execute(\n `SELECT COUNT(*) as count FROM ${TABLES.CHECKINS} WHERE event_id = ?`,\n [eventId]\n );\n \n // Get check-ins by date\n const checkInsByDate = await sqlite.execute(`\n SELECT DATE(checked_in_at) as date, COUNT(*) as count\n FROM ${TABLES.CHECKINS}\n WHERE event_id = ?\n GROUP BY DATE(checked_in_at)\n ORDER BY date\n `, [eventId]);\n \n // Get recent check-ins\n const recentCheckIns = await sqlite.execute(`\n SELECT a.name as attendee_name, c.checked_in_at\n FROM ${TABLES.CHECKINS} c\n JOIN ${TABLES.ATTENDEES} a ON c.attendee_id = a.id\n WHERE c.event_id = ?\n ORDER BY c.checked_in_at DESC\n LIMIT 10\n `, [eventId]);\n \n return c.json({\n totalAttendees: totalAttendees[0].count,\n totalCheckedIn: totalCheckedIn[0].count,\n checkInsByDate: checkInsByDate.map(row => ({\n date: row.date,\n count: row.count\n })),\n recentCheckIns: recentCheckIns.map(row => ({\n attendeeName: row.attendee_name,\n checkedInAt: row.checked_in_at\n }))\n });\n \n } catch (error) {\n console.error(`💥 [API] Error fetching analytics:`, error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Export check-in data as CSV (session protected)\napp.get(\"/api/:eventId/export\", authMiddleware, async c => {\n const eventId = parseInt(c.req.param(\"eventId\"));\n \n try {\n // Verify access to this specific event\n if (!await verifyEventAccess(c, eventId)) {\n return c.json({ error: \"Unauthorized for this event\" }, 403);\n }\n \n // Get event name\n const eventsResult = await sqlite.execute(\n `SELECT name FROM ${TABLES.EVENTS} WHERE id = ?`,\n [eventId]\n );\n \n const events = eventsResult.rows || eventsResult;\n if (events.length === 0) {\n return c.json({ error: \"Event not found\" }, 404);\n }\n \n // Get all attendees with check-in data\n const dataResult = await sqlite.execute(`\n SELECT a.name, a.external_id, c.checked_in_at\n FROM ${TABLES.ATTENDEES} a\n LEFT JOIN ${TABLES.CHECKINS} c ON a.id = c.attendee_id\n WHERE a.event_id = ?\n ORDER BY a.name\n `, [eventId]);\n \n const data = dataResult.rows || dataResult;\n \n // Generate CSV\n const csvRows = [\n 'Name,External ID,Checked In,Check-in Time'\n ];\n \n for (const row of data) {\n const checkedIn = row.checked_in_at ? 'Yes' : 'No';\n const checkInTime = row.checked_in_at || '';\n csvRows.push(`\"${row.name}\",\"${row.external_id || ''}\",\"${checkedIn}\",\"${checkInTime}\"`);\n }\n \n const csvContent = csvRows.join('\\n');\n const filename = `${events[0].name.replace(/[^a-zA-Z0-9]/g, '_')}_checkins.csv`;\n \n return new Response(csvContent, {\n headers: {\n 'Content-Type': 'text/csv',\n 'Content-Disposition': `attachment; filename=\"${filename}\"`\n }\n });\n \n } catch (error) {\n console.error(`💥 [API] Error exporting data:`, error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Add individual attendee to event (password protected)\napp.post(\"/api/events/:eventId/attendees\", async c => {\n const eventId = parseInt(c.req.param(\"eventId\"));\n \n try {\n const body = await c.req.json();\n const { password, name, external_id } = body;\n \n console.log(`🎯 [API] Add attendee request for event ${eventId}: ${name}`);\n \n if (!password) {\n return c.json({ error: \"Password required\" }, 401);\n }\n \n if (!name || !name.trim()) {\n return c.json({ error: \"Attendee name required\" }, 400);\n }\n \n // Verify event and password\n const events = await sqlite.execute(\n `SELECT password_hash FROM ${EVENTS_TABLE} WHERE id = ?`,\n [eventId]\n );\n \n if (events.length === 0) {\n return c.json({ error: \"Event not found\" }, 404);\n }\n \n if (!verifyPassword(password, events[0].password_hash)) {\n return c.json({ error: \"Invalid password\" }, 401);\n }\n \n // Check if attendee with same name already exists\n const existingAttendee = await sqlite.execute(\n `SELECT id FROM ${ATTENDEES_TABLE} WHERE event_id = ? AND LOWER(name) = LOWER(?)`,\n [eventId, name.trim()]\n );\n \n if (existingAttendee.length > 0) {\n return c.json({ error: \"An attendee with this name already exists\" }, 409);\n }\n \n // Add attendee\n const result = await sqlite.execute(\n `INSERT INTO ${ATTENDEES_TABLE} (event_id, name, external_id) VALUES (?, ?, ?)`,\n [eventId, name.trim(), external_id?.trim() || null]\n );\n \n const attendeeId = Number(result.lastInsertRowid);\n console.log(`✅ [API] Added attendee ${name} with ID: ${attendeeId}`);\n \n return c.json({\n success: true,\n attendee: {\n id: attendeeId,\n name: name.trim(),\n external_id: external_id?.trim() || null,\n event_id: eventId\n }\n });\n \n } catch (error) {\n console.error(`💥 [API] Error adding attendee:`, error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\nexport default app.fetch;",[],[340,331],"backend","55f4c0e2-5ddb-11f0-92bf-0224a6c84d84","database.ts","55f4c196-5ddb-11f0-92bf-0224a6c84d84",46,["D",1752185706974],"import { sqlite } from \"https://esm.town/v/stevekrouse/sqlite\";\n\n// Database table names - centralized source of truth\nexport const TABLES = {\n EVENTS: \"events_4\",\n ATTENDEES: \"attendees_4\", \n CHECKINS: \"checkins_4\",\n SESSIONS: \"sessions_2\"\n} as const;\n\n/**\n * Initialize all database tables with proper schema and migrations\n */\nexport async function initDatabase() {\n console.log(`💾 [DB] Initializing database tables`);\n \n // Events table - using unix timestamp as primary key\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${TABLES.EVENTS} (\n id INTEGER PRIMARY KEY,\n name TEXT NOT NULL,\n password_hash TEXT NOT NULL,\n location TEXT,\n allow_onsite_registration BOOLEAN DEFAULT 0,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n )`);\n \n // Attendees table\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${TABLES.ATTENDEES} (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n event_id INTEGER NOT NULL,\n name TEXT NOT NULL,\n external_id TEXT,\n FOREIGN KEY (event_id) REFERENCES ${TABLES.EVENTS}(id)\n )`);\n \n // Check-ins table\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${TABLES.CHECKINS} (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n event_id INTEGER NOT NULL,\n attendee_id INTEGER NOT NULL,\n checked_in_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n FOREIGN KEY (event_id) REFERENCES ${TABLES.EVENTS}(id),\n FOREIGN KEY (attendee_id) REFERENCES ${TABLES.ATTENDEES}(id)\n )`);\n \n // Sessions table for authentication\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${TABLES.SESSIONS} (\n id TEXT PRIMARY KEY,\n secret_hash TEXT NOT NULL,\n event_id INTEGER NOT NULL,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n FOREIGN KEY (event_id) REFERENCES ${TABLES.EVENTS}(id)\n )`);\n \n console.log(`✅ [DB] Database initialization complete`);\n}\n\n/**\n * Utility function to get table name with type safety\n */\nexport function getTableName(table: keyof typeof TABLES): string {\n return TABLES[table];\n}\n",[],[340,342],"c8255eb0-5ddb-11f0-8796-0224a6c84d84","auth.ts","b5630810-5dd4-11f0-a784-0224a6c84d84",53,["D",1752185898552],"import { sqlite } from \"https://esm.town/v/stevekrouse/sqlite\";\nimport { getCookie, setCookie, deleteCookie } from \"https://esm.sh/hono@3.11.7/cookie\";\nimport type { Context } from \"https://esm.sh/hono@3.11.7\";\nimport { TABLES } from \"./database.ts\";\n\n// Session configuration\nconst SESSION_EXPIRES_IN_SECONDS = 60 * 60 * 24 * 30; // 30 days\nconst SESSION_COOKIE_NAME = \"session_token\";\n\n// Database interfaces\ninterface Session {\n id: string;\n secretHash: Uint8Array;\n eventId: number;\n createdAt: Date;\n}\n\ninterface SessionWithToken extends Session {\n token: string;\n}\n\n// Note: Sessions table initialization moved to database.ts\n\n// Generate secure random string for session IDs and secrets\nfunction generateSecureRandomString(): string {\n const alphabet = \"abcdefghijklmnpqrstuvwxyz23456789\";\n const bytes = new Uint8Array(24);\n crypto.getRandomValues(bytes);\n \n let result = \"\";\n for (let i = 0; i < bytes.length; i++) {\n result += alphabet[bytes[i] >> 3];\n }\n return result;\n}\n\n// Hash secret using SHA-256\nasync function hashSecret(secret: string): Promise {\n const secretBytes = new TextEncoder().encode(secret);\n const secretHashBuffer = await crypto.subtle.digest(\"SHA-256\", secretBytes);\n return new Uint8Array(secretHashBuffer);\n}\n\n// Constant-time comparison for security\nfunction constantTimeEqual(a: Uint8Array, b: Uint8Array): boolean {\n if (a.byteLength !== b.byteLength) {\n return false;\n }\n let c = 0;\n for (let i = 0; i < a.byteLength; i++) {\n c |= a[i] ^ b[i];\n }\n return c === 0;\n}\n\n// Create a new session for event management\nexport async function createSession(eventId: number): Promise {\n const now = new Date();\n const sessionId = generateSecureRandomString();\n const sessionSecret = generateSecureRandomString();\n const secretHash = await hashSecret(sessionSecret);\n \n const token = `${sessionId}.${sessionSecret}`;\n \n const session: SessionWithToken = {\n id: sessionId,\n secretHash,\n eventId,\n createdAt: now,\n token\n };\n \n await sqlite.execute(\n `INSERT INTO ${TABLES.SESSIONS} (id, secret_hash, event_id, created_at) VALUES (?, ?, ?, ?)`,\n [sessionId, secretHash, eventId, Math.floor(now.getTime() / 1000)]\n );\n \n return session;\n}\n\n// Validate session token\nexport async function validateSessionToken(token: string): Promise {\n const tokenParts = token.split(\".\");\n if (tokenParts.length !== 2) {\n return null;\n }\n \n const [sessionId, sessionSecret] = tokenParts;\n \n try {\n const session = await getSession(sessionId);\n if (!session) {\n return null;\n }\n \n const tokenSecretHash = await hashSecret(sessionSecret);\n const validSecret = constantTimeEqual(tokenSecretHash, session.secretHash);\n \n if (!validSecret) {\n return null;\n }\n \n return session;\n } catch (error) {\n console.error(\"Error validating session token:\", error);\n return null;\n }\n}\n\n// Get session by ID\nasync function getSession(sessionId: string): Promise {\n const now = new Date();\n \n const result = await sqlite.execute(\n `SELECT id, secret_hash, event_id, created_at FROM ${TABLES.SESSIONS} WHERE id = ?`,\n [sessionId]\n );\n \n if (result.rows.length !== 1) {\n return null;\n }\n \n const row = result.rows[0];\n const session: Session = {\n id: row[0] as string,\n secretHash: new Uint8Array(row[1] as ArrayBuffer),\n eventId: row[2] as number,\n createdAt: new Date((row[3] as number) * 1000)\n };\n \n // Check expiration\n if (now.getTime() - session.createdAt.getTime() >= SESSION_EXPIRES_IN_SECONDS * 1000) {\n await deleteSession(sessionId);\n return null;\n }\n \n return session;\n}\n\n// Delete session\nexport async function deleteSession(sessionId: string): Promise {\n await sqlite.execute(`DELETE FROM ${TABLES.SESSIONS} WHERE id = ?`, [sessionId]);\n}\n\n// Set session cookie\nexport function setSessionCookie(c: Context, token: string): void {\n setCookie(c, SESSION_COOKIE_NAME, token, {\n maxAge: SESSION_EXPIRES_IN_SECONDS,\n httpOnly: true,\n secure: true,\n sameSite: 'Lax',\n path: '/'\n });\n}\n\n// Clear session cookie\nexport function clearSessionCookie(c: Context): void {\n deleteCookie(c, SESSION_COOKIE_NAME, {\n httpOnly: true,\n secure: true,\n sameSite: 'Lax',\n path: '/'\n });\n}\n\n// Get session from request\nexport async function getSessionFromRequest(c: Context): Promise {\n const token = getCookie(c, SESSION_COOKIE_NAME);\n if (!token) {\n return null;\n }\n \n return await validateSessionToken(token);\n}\n\n// Authentication middleware\nexport async function authMiddleware(c: Context, next: () => Promise) {\n const session = await getSessionFromRequest(c);\n \n if (!session) {\n return c.json({ error: \"Unauthorized\" }, 401);\n }\n \n // Store session in context for use in handlers\n c.set('session', session);\n await next();\n}\n\n// Verify event access (user has session for this specific event)\nexport async function verifyEventAccess(c: Context, eventId: number): Promise {\n const session = c.get('session') as Session;\n if (!session) {\n return false;\n }\n \n return session.eventId === eventId;\n}\n\n// CSRF protection - verify request origin\nexport function verifyRequestOrigin(c: Context): boolean {\n const method = c.req.method;\n if (method === \"GET\" || method === \"HEAD\") {\n return true;\n }\n \n const origin = c.req.header(\"origin\");\n const host = c.req.header(\"host\");\n \n if (!origin || !host) {\n return false;\n }\n \n // Allow same-origin requests\n return origin === `https://${host}` || origin === `http://${host}`;\n}\n\n// CSRF middleware\nexport async function csrfMiddleware(c: Context, next: () => Promise) {\n if (!verifyRequestOrigin(c)) {\n return c.json({ error: \"Forbidden\" }, 403);\n }\n \n await next();\n}\n",[],[340,350],"24f47172-5dcc-11f0-990d-0224a6c84d84",["D",1752179182252],[165,166,167],[340],"3e777542-5dcf-11f0-b3cc-0224a6c84d84","deploy.yml","3e77781c-5dcf-11f0-b3cc-0224a6c84d84","3e68e0cc-5dcf-11f0-b3cc-0224a6c84d84",12,["D",1752180513606],"name: Deploy to Val Town\n\non:\n push:\n branches: [ main ]\n\njobs:\n deploy:\n runs-on: ubuntu-latest\n environment: Deploy\n \n steps:\n - uses: actions/checkout@v4\n \n - name: Setup Deno\n uses: denoland/setup-deno@v2\n with:\n deno-version: v2.x\n \n - name: Install Val Town CLI\n run: deno install -grAf jsr:@valtown/vt\n \n - name: Deploy to Val Town\n run: vt push\n env:\n VAL_TOWN_API_KEY: ${{ secrets.VAL_TOWN_API_KEY }}\n",[],[370,371,362],".github","workflows","3e68e00e-5dcf-11f0-b3cc-0224a6c84d84","3e59e842-5dcf-11f0-a03f-0224a6c84d84",11,["D",1752180513510],[163],[370,371],"3e59e7ac-5dcf-11f0-a03f-0224a6c84d84",10,["D",1752180513412],[162],[370],["D",1752179182252],{"_11":12,"_120":71},{"_11":12,"_116":-5,"_70":71,"_30":69,"_117":118,"_119":24},{"_38":107,"_13":16,"_32":35,"_108":73,"_109":-5,"_110":-5,"_111":-5,"_112":-5,"_113":-5,"_114":14,"_115":12},"ctx",{"_51":-5,"_139":420,"_421":422,"_423":424,"_425":24,"_426":24,"_427":24,"_428":84,"_429":-5,"_430":-7,"_431":-7,"_432":26,"_433":24,"_434":24,"_435":-5,"_436":24,"_437":24,"_438":24,"_439":-5},"ENV",{"_391":392,"_393":394,"_395":16,"_396":397,"_398":399,"_400":401,"_402":403,"_404":405,"_406":407,"_408":409,"_410":411,"_412":413,"_414":415,"_416":417,"_418":419},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · .vtignore