\n \n\n",[18,87],"24f4886a-5dcc-11f0-990d-0224a6c84d84",["D",1752179182252],[18,75],"pulls","branches","forks","envVars",{"_88":26,"_194":26},"connections",{"_88":26,"_193":26},"unfilledCount","emptyCount",{"_33":400,"_13":392,"_73":395,"_43":-5,"_35":36,"_166":401,"_167":24,"_37":402,"_39":26,"_76":77,"_169":-5,"_78":30,"_170":-5,"_226":403,"_17":404},{"_33":394,"_13":393,"_73":386,"_43":395,"_35":36,"_166":396,"_167":24,"_37":397,"_39":26,"_76":77,"_169":-5,"_78":30,"_170":-5,"_226":398,"_17":399},{"_33":383,"_13":384,"_73":385,"_43":386,"_35":36,"_166":387,"_167":24,"_37":388,"_39":26,"_76":21,"_169":389,"_78":30,"_170":-5,"_226":390,"_17":391},{"_33":379,"_13":362,"_73":354,"_43":-5,"_35":36,"_166":40,"_167":24,"_37":380,"_39":26,"_76":77,"_169":-5,"_78":30,"_170":-5,"_226":381,"_17":382},{"_33":371,"_13":372,"_73":373,"_43":354,"_35":36,"_166":374,"_167":24,"_37":375,"_39":40,"_76":93,"_169":376,"_78":30,"_170":-5,"_226":377,"_17":378},{"_33":363,"_13":364,"_73":365,"_43":354,"_35":36,"_166":366,"_167":24,"_37":367,"_39":26,"_76":93,"_169":368,"_78":30,"_170":-5,"_226":369,"_17":370},{"_33":352,"_13":353,"_73":105,"_43":354,"_35":36,"_166":355,"_167":24,"_37":356,"_39":357,"_76":358,"_169":359,"_78":30,"_170":-5,"_226":360,"_17":361},{"_33":165,"_13":18,"_73":94,"_43":-5,"_35":36,"_166":40,"_167":24,"_37":349,"_39":26,"_76":77,"_169":-5,"_78":30,"_170":-5,"_226":350,"_17":351},{"_33":183,"_13":75,"_73":74,"_43":94,"_35":36,"_166":40,"_167":24,"_37":346,"_39":26,"_76":77,"_169":-5,"_78":30,"_170":-5,"_226":347,"_17":348},{"_33":338,"_13":339,"_73":340,"_43":74,"_35":36,"_166":341,"_167":24,"_37":342,"_39":26,"_76":93,"_169":343,"_78":30,"_170":-5,"_226":344,"_17":345},{"_33":331,"_13":332,"_73":333,"_43":74,"_35":36,"_166":129,"_167":24,"_37":334,"_39":267,"_76":93,"_169":335,"_78":30,"_170":-5,"_226":336,"_17":337},{"_33":323,"_13":324,"_73":325,"_43":74,"_35":36,"_166":326,"_167":24,"_37":327,"_39":250,"_76":93,"_169":328,"_78":30,"_170":-5,"_226":329,"_17":330},{"_33":315,"_13":316,"_73":317,"_43":74,"_35":36,"_166":318,"_167":24,"_37":319,"_39":40,"_76":93,"_169":320,"_78":30,"_170":-5,"_226":321,"_17":322},{"_33":307,"_13":308,"_73":309,"_43":74,"_35":36,"_166":310,"_167":24,"_37":311,"_39":303,"_76":93,"_169":312,"_78":30,"_170":-5,"_226":313,"_17":314},{"_33":298,"_13":299,"_73":300,"_43":74,"_35":36,"_166":301,"_167":24,"_37":302,"_39":303,"_76":93,"_169":304,"_78":30,"_170":-5,"_226":305,"_17":306},{"_33":179,"_13":87,"_73":86,"_43":94,"_35":36,"_166":40,"_167":24,"_37":295,"_39":26,"_76":21,"_169":181,"_78":30,"_170":-5,"_226":296,"_17":297},{"_33":175,"_13":92,"_73":91,"_43":94,"_35":36,"_166":40,"_167":24,"_37":292,"_39":26,"_76":93,"_169":177,"_78":30,"_170":-5,"_226":293,"_17":294},{"_33":288,"_13":287,"_73":281,"_43":-5,"_35":36,"_166":40,"_167":24,"_37":289,"_39":26,"_76":77,"_169":-5,"_78":30,"_170":-5,"_226":290,"_17":291},{"_33":278,"_13":279,"_73":280,"_43":281,"_35":36,"_166":282,"_167":24,"_37":283,"_39":250,"_76":93,"_169":284,"_78":30,"_170":-5,"_226":285,"_17":286},{"_33":271,"_13":272,"_73":273,"_43":-5,"_35":36,"_166":40,"_167":24,"_37":274,"_39":26,"_76":21,"_169":275,"_78":30,"_170":-5,"_226":276,"_17":277},{"_33":262,"_13":263,"_73":264,"_43":-5,"_35":36,"_166":265,"_167":24,"_37":266,"_39":267,"_76":21,"_169":268,"_78":30,"_170":-5,"_226":269,"_17":270},{"_33":254,"_13":255,"_73":256,"_43":-5,"_35":36,"_166":257,"_167":24,"_37":258,"_39":40,"_76":21,"_169":259,"_78":30,"_170":-5,"_226":260,"_17":261},{"_33":245,"_13":246,"_73":247,"_43":-5,"_35":36,"_166":248,"_167":24,"_37":249,"_39":250,"_76":21,"_169":251,"_78":30,"_170":-5,"_226":252,"_17":253},{"_33":236,"_13":237,"_73":238,"_43":-5,"_35":36,"_166":239,"_167":24,"_37":240,"_39":241,"_76":21,"_169":242,"_78":30,"_170":-5,"_226":243,"_17":244},{"_33":229,"_13":230,"_73":231,"_43":-5,"_35":36,"_166":40,"_167":24,"_37":232,"_39":26,"_76":21,"_169":233,"_78":30,"_170":-5,"_226":234,"_17":235},{"_33":221,"_13":222,"_73":223,"_43":-5,"_35":36,"_166":40,"_167":24,"_37":224,"_39":26,"_76":93,"_169":225,"_78":30,"_170":-5,"_226":227,"_17":228},"24f4a624-5dcc-11f0-990d-0224a6c84d84","main.tsx","e023ccd1-1f70-4b8e-95a2-f4cee096c24a",["D",1752179182252],"","children",[],[222],"24f4a390-5dcc-11f0-990d-0224a6c84d84","deno.json","79824279-2b5e-4e34-91ae-01f282ccb99a",["D",1752179182252],"{\n \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/348900b8b79f4a434cab4c74b3bc8d4d2fa8ee74/cli/schemas/config-file.v1.json\",\n \"lock\": false,\n \"compilerOptions\": {\n \"noImplicitAny\": false,\n \"strict\": false,\n \"types\": [\n \"https://www.val.town/types/valtown.d.ts\"\n ],\n \"lib\": [\n \"dom\",\n \"dom.iterable\",\n \"dom.asynciterable\",\n \"deno.ns\",\n \"deno.unstable\"\n ]\n },\n \"lint\": {\n \"files\": {\n \"include\": [\n \"deno:/https/esm.town/**/*\"\n ]\n },\n \"rules\": {\n \"exclude\": [\n \"no-explicit-any\"\n ]\n }\n },\n \"node_modules_dir\": false,\n \"experimental\": {\n \"unstable-node-globals\": true,\n \"unstable-temporal\": true,\n \"unstable-worker-options\": true,\n \"unstable-sloppy-imports\": true\n }\n}",[],[230],"56281e92-5ddb-11f0-bd48-0224a6c84d84","README.md","42873017-f980-4b1a-888b-d23c1db6f951",51,["D",1752185706986],6,"# Event Check-in System\n\nA complete event check-in system for managing attendee sign-ins with secure name verification.\n\n## Features\n\n- **Event Management**: Create events with attendee lists and password protection\n- **Secure Check-in**: Fuzzy search-based sign-in with name verification\n- **Analytics Dashboard**: Track check-ins with date-based analytics\n- **CSV Import/Export**: Import attendee lists and export check-in data\n- **Responsive UI**: Clean, modern interface built with React and TailwindCSS\n\n## How It Works\n\n1. **Event Creation**: Organizers create events with attendee lists via CSV upload\n2. **Attendee Sign-in**: Attendees use fuzzy search to find and check in with their names\n3. **Data Tracking**: System tracks all check-ins with timestamps\n4. **Analytics**: Organizers can view check-in analytics and export data\n5. **Security**: No sensitive information exposed, password-protected management\n\n## Project Structure\n\n```\n├── backend/\n│ └── index.ts # Main API server with Hono\n├── frontend/\n│ ├── index.html # Main HTML template\n│ ├── index.tsx # React app entry point\n│ └── components/\n│ ├── App.tsx # Main app component\n│ ├── EventSignIn.tsx # Sign-in component with fuzzy search\n│ ├── EventManagement.tsx # Management dashboard\n│ └── EventCreation.tsx # Event creation form\n├── shared/\n│ └── types.ts # Shared TypeScript types\n└── README.md\n```\n\n## Setup\n\n### Environment Variables\n\nNo external API keys required for basic functionality. Optional Discord integration available for future features.\n\n### Database\n\nThe system uses SQLite with the following schema:\n\n```sql\n-- Events table\nCREATE TABLE events_N (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n password_hash TEXT NOT NULL,\n location TEXT,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n);\n\n-- Attendees table \nCREATE TABLE attendees_N (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n event_id INTEGER NOT NULL,\n name TEXT NOT NULL,\n external_id TEXT,\n FOREIGN KEY (event_id) REFERENCES events_2(id)\n);\n\n-- Check-ins table\nCREATE TABLE checkins_N (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n event_id INTEGER NOT NULL,\n attendee_id INTEGER NOT NULL,\n checked_in_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n FOREIGN KEY (event_id) REFERENCES events_2(id),\n FOREIGN KEY (attendee_id) REFERENCES attendees_1(id)\n);\n```\n\n## API Endpoints\n\n- `POST /api/events` - Create a new event\n- `GET /api/:eventId` - Get event details (password protected)\n- `POST /api/:eventId/signin` - Sign in to an event\n- `GET /api/:eventId/attendees` - Get attendee list for sign-in (names only)\n- `GET /api/:eventId/analytics` - Get check-in analytics (password protected)\n- `GET /api/:eventId/export` - Export check-in data as CSV (password protected)\n\n## Routes\n\n- `/` - Home page with event creation\n- `/new` - Event creation form\n- `/:eventId/signin` - Event sign-in page\n- `/:eventId/manage` - Event management dashboard (password protected)\n\n## Usage\n\n### Creating an Event\n1. Navigate to the event creation page\n2. Enter event name, password, and location\n3. Upload a CSV file with attendee names\n4. System will parse the CSV and create the event\n\n### Attendee Sign-in\n1. Navigate to the event sign-in page\n2. Use fuzzy search to find your name\n3. Click to sign in\n4. Confirmation displayed\n\n### Event Management\n1. Navigate to the management page\n2. Enter event password\n3. View analytics and export data\n\n## CSV Format\n\nThe system accepts flexible CSV formats with attendee names. Common column headers recognized:\n- `name`, `Name`, `NAME`\n- `full_name`, `Full Name`, `FULL_NAME`\n- `first_name` + `last_name` (will be combined)\n- `given_name` + `family_name` (will be combined)\n\nAdditional columns like `id`, `email`, etc. are preserved but not displayed to attendees.\n\n## Tech Stack\n\n- **Backend**: Hono (API framework)\n- **Frontend**: React 18.2.0 with TypeScript\n- **Database**: SQLite\n- **Styling**: TailwindCSS\n- **Platform**: Val Town (Deno runtime)",[],[237],"565b5050-5ddb-11f0-8e47-0224a6c84d84","ON_SITE_REGISTRATION_FEATURE.md","400d16a6-5dd8-11f0-90bc-0224a6c84d84",52,["D",1752185706987],2,"# On-Site Registration Feature\n\n## Overview\nAllow event creators to enable on-site registration where attendees can register themselves at the event venue.\n\n## Acceptance Criteria\n\n### Event Configuration\n- [ ] Add checkbox \"Enable on-site registration\" to EventCreation form\n- [ ] Store `allow_onsite_registration` boolean field in Event table (consider migrations correctly)\n- [ ] Default to `false` for new events\n\n### API Changes\n- [ ] Update `CreateEventRequest` type to include `allowOnsiteRegistration?: boolean`\n- [ ] Modify POST `/api/events` endpoint to accept and store new field\n- [ ] Update Event interface to include `allow_onsite_registration: boolean`\n\n### Registration Form\n- [ ] Add GET `/api/:eventId/signup` endpoint returning event name and registration status\n- [ ] Add POST `/api/:eventId/signup` endpoint accepting `{ name: string }`\n- [ ] Only show registration form if `allow_onsite_registration` is true\n- [ ] Create new attendee record with `external_id` set to \"onsite-{timestamp}\"\n\n### Frontend Changes\n- [ ] Create OnSiteRegistration component with name input and submit button\n- [ ] Display registration form on event page when enabled\n- [ ] Show success message after registration\n- [ ] Add validation for duplicate names (case-insensitive)\n\n### Database Schema\n- [ ] Add `allow_onsite_registration` column to events table (default false) (consider migrations carefully)\n- [ ] No changes to attendees or checkins tables required\n\n## Technical Notes\n- Use existing attendee flow for check-in after registration\n- Leverage existing fuzzy search for finding registered attendees\n- Maintain password protection for event management features\n",[],[246],"f038ccde-5dd1-11f0-9064-0224a6c84d84","BRAND_STYLE_GUIDE.md","f62e1973-51a2-4b2d-8b12-9f0b8f854b28",18,["D",1752181670818],"# Brand Style Guide\n## Rust NYC Discord Bot - Talk Submission System\n\n### Overview\nA nostalgic minimal, slightly technical theme that evokes the feeling of early computing interfaces while maintaining modern usability and accessibility.\n\n### Typography\n- **Headings**: Instrument Serif (Google Web Fonts) - Elegant, slightly humanistic serif for warmth\n- **Body Text**: System monospace stack for technical authenticity\n- **Code/Data**: Monospace for technical content and data display\n\n### Color Palette\n```\n// Primary - Muted technical grays and warm accents\n--bg-primary: #f8f9fa // Soft off-white background\n--bg-secondary: #e9ecef // Subtle gray for cards\n--bg-tertiary: #dee2e6 // Light gray for inputs\n\n--text-primary: #2d3748 // Dark gray for primary text\n--text-secondary: #4a5568 // Medium gray for secondary text\n--text-muted: #718096 // Light gray for muted text\n\n--accent-primary: #d69e2e // Warm amber for primary actions\n--accent-secondary: #b7791f // Darker amber for hover states\n--accent-subtle: #faf089 // Light amber for subtle highlights\n\n--border-default: #cbd5e0 // Default border color\n--border-focus: #d69e2e // Amber focus borders\n\n// Status colors\n--success: #38a169 // Muted green\n--error: #e53e3e // Muted red\n--warning: #dd6b20 // Muted orange\n--info: #3182ce // Muted blue\n```\n\n### Layout & Spacing\n- **Container**: Max-width 480px for mobile-first, intimate feel\n- **Spacing Scale**: 4px base unit (4, 8, 12, 16, 24, 32, 48, 64)\n- **Border Radius**: 4px for subtle roundness\n- **Borders**: 1px solid borders throughout\n\n### Components\n\n#### Cards\n- Background: `--bg-secondary`\n- Border: 1px solid `--border-default`\n- Padding: 24px\n- Border radius: 4px\n- Subtle drop shadow\n\n#### Forms\n- Input borders: 1px solid `--border-default`\n- Focus state: 2px solid `--accent-primary`\n- Monospace font for consistency\n- Generous padding (12px)\n\n#### Buttons\n- Primary: `--accent-primary` background, `--text-primary` (dark) text\n- Secondary: `--bg-tertiary` background, `--text-primary` (dark) text\n- Padding: 12px 24px\n- Border radius: 4px\n- Monospace font\n- **Critical**: Never use white text on amber backgrounds - poor contrast and accessibility\n\n#### Typography Scale\n- H1: 24px / text-2xl (primary headings)\n- H2: 20px / text-xl (section headings) \n- H3: 18px / text-lg (subsection headings)\n- Body: 14px / text-sm (main content)\n- Small: 12px / text-xs (captions, metadata)\n\n**Important**: All headings using Instrument Serif (.font-heading) must be sized at text-2xl (24px) or larger to ensure proper readability and visual hierarchy. The serif font performs best at larger sizes and maintains the technical aesthetic when prominently displayed.\n\n### Design Principles\n1. **Functional Beauty**: Every element serves a purpose\n2. **Technical Authenticity**: Embrace monospace and structured layouts\n3. **Nostalgic Warmth**: Subtle amber accents and serif headings\n4. **Accessibility First**: High contrast, clear focus states\n5. **Mobile Responsive**: Single-column layouts, touch-friendly sizing\n\n### Implementation Notes\n- Use CSS custom properties for consistency\n- Maintain semantic HTML structure\n- Progressive enhancement approach\n- Dark mode consideration for future iterations\n",[],[255],"c835a950-5ddb-11f0-93b2-0224a6c84d84","AGENT.md","5c0f5147-120c-4773-8a71-12c12610be9d",55,["D",1752185898619],4,"# Agent Configuration for Event Check-In System\n\n## Commands\n- **No explicit test/lint commands** - Val Town platform handles these automatically\n- **Development**: Val Town auto-deploys on changes, no local build needed\n- **Database**: SQLite migrations run automatically on startup in backend/index.ts\n\n## Architecture\n- **Val Town Project**: Deno-based event check-in system with React frontend\n- **Backend**: Hono API server (backend/index.ts) handling event management and check-ins\n- **Frontend**: React 18.2.0 with TypeScript (frontend/index.tsx, components/)\n- **Database**: SQLite with events_4, attendees_4, checkins_4, and sessions_2 tables\n- **Features**: Password-protected event creation, CSV attendee upload, fuzzy search, analytics\n- **Shared**: TypeScript types and utilities (shared/types.ts)\n\n## Core Functionality\n- **Event Management**: Create events with attendee lists via CSV upload\n- **Check-In Process**: Attendees find their name using fuzzy search and check in with one click\n- **Analytics**: Track check-in rates, date-based charts, export data as CSV\n- **Security**: Password protection for event management, multiple check-in tracking\n\n## Code Style (from .cursorrules)\n- **Language**: TypeScript/TSX with React 18.2.0\n- **Imports**: Use `https://esm.sh` for npm packages, pin React to 18.2.0\n- **Types**: Add TypeScript types for all data structures\n- **Secrets**: Always use environment variables, never hardcode secrets\n- **JSX**: Start React files with `/** @jsxImportSource https://esm.sh/react@18.2.0 */`\n- **Styling**: Default to TailwindCSS via CDN script tag\n- **Error Handling**: Let errors bubble up with context, avoid empty catch blocks\n- **Database**: Change table names (e.g., _3, _4) when modifying schemas instead of ALTER TABLE\n- **Platform**: Use Val Town utils for file operations (readFile, serveFile)\n- **SQLite**: ALWAYS handle query results properly - use `result.rows || result` pattern to access data\n - WRONG: `const result = await sqlite.execute(query); result[0].column`\n - CORRECT: `const rawResult = await sqlite.execute(query); const result = rawResult.rows || rawResult; result[0].column`\n",[],[263],"24f49468-5dcc-11f0-990d-0224a6c84d84",".vtignore","901592b5-6995-4c7d-9998-1a9a3494fa4f",["D",1752179182252],".git\n.vscode\n.cursorrules\n.DS_Store\nnode_modules\nvendor",[],[272],"537a834a-603f-11f0-8345-0224a6c84d84","types.ts","41854f24-ad93-4263-a021-d118e1a48743","249162fd-4a26-4e4e-9a16-3b2196631f7f",58,["D",1752448554780],"// Event-related types\nexport interface Event {\n id: number;\n name: string;\n password_hash: string;\n location?: string;\n created_at: string;\n}\n\nexport interface Attendee {\n id: number;\n event_id: number;\n name: string;\n external_id?: string;\n}\n\nexport interface CheckIn {\n id: number;\n event_id: number;\n attendee_id: number;\n checked_in_at: string;\n}\n\n// API request/response types\nexport interface CreateEventRequest {\n name: string;\n password: string;\n location?: string;\n attendees: AttendeeData[];\n}\n\nexport interface AttendeeData {\n name: string;\n external_id?: string;\n}\n\nexport interface CreateEventResponse {\n success: boolean;\n eventId: number;\n}\n\nexport interface SignInRequest {\n attendeeId: number;\n}\n\nexport interface SignInResponse {\n success: boolean;\n attendeeName: string;\n alreadySignedIn?: boolean;\n // TODO: Consider tracking multiple sign-in attempts for security\n // previousSignIns?: CheckIn[];\n}\n\nexport interface EventDetailsResponse {\n event: Event;\n attendeeCount: number;\n checkedInCount: number;\n}\n\nexport interface AttendeeListResponse {\n attendees: Array<{\n id: number;\n name: string;\n checkedIn: boolean;\n }>;\n}\n\nexport interface AnalyticsResponse {\n totalAttendees: number;\n totalCheckedIn: number;\n checkInsByDate: Array<{\n date: string;\n count: number;\n }>;\n recentCheckIns: Array<{\n attendeeName: string;\n checkedInAt: string;\n }>;\n}\n\n// CSV parsing utility types\nexport interface CSVParseResult {\n attendees: AttendeeData[];\n errors: string[];\n totalRows: number;\n validRows: number;\n}\n\n// Add attendee request/response types\nexport interface AddAttendeeRequest {\n password: [REDACTED:password];\n name: string;\n external_id?: string;\n}\n\nexport interface AddAttendeeResponse {\n success: boolean;\n attendee: {\n id: number;\n name: string;\n external_id?: string;\n event_id: number;\n };\n}",[],[287,279],"shared","24f4917a-5dcc-11f0-990d-0224a6c84d84",["D",1752179182252],[213],[287],["D",1752179182252],[],[18,92],["D",1752179182252],[],[18,87],"5601c378-5ddb-11f0-92a1-0224a6c84d84","EventSignIn.tsx","2b067d86-5dd0-11f0-bb26-0224a6c84d84",48,["D",1752185707057],5,"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState, useEffect } from \"https://esm.sh/react@18.2.0\";\nimport type { AttendeeListResponse, SignInRequest, SignInResponse } from \"../../shared/types.ts\";\n\ninterface EventSignInProps {\n eventId: number;\n}\n\nexport default function EventSignIn({ eventId }: EventSignInProps) {\n const [attendees, setAttendees] = useState([]);\n const [searchTerm, setSearchTerm] = useState('');\n const [loading, setLoading] = useState(true);\n const [error, setError] = useState(null);\n const [signInResult, setSignInResult] = useState(null);\n const [isSigningIn, setIsSigningIn] = useState(false);\n const [showAll, setShowAll] = useState(false);\n\n useEffect(() => {\n loadAttendees();\n }, [eventId]);\n\n // Auto-dismiss success message after 3 seconds\n useEffect(() => {\n if (signInResult?.success) {\n const timer = setTimeout(() => {\n setSignInResult(null);\n }, 3000);\n return () => clearTimeout(timer);\n }\n }, [signInResult]);\n\n const loadAttendees = async () => {\n try {\n const response = await fetch(`/api/${eventId}/attendees`);\n if (!response.ok) throw new Error('Failed to load attendees');\n const data: AttendeeListResponse = await response.json();\n setAttendees(data.attendees);\n } catch (err) {\n setError(err instanceof Error ? err.message : 'Failed to load attendees');\n } finally {\n setLoading(false);\n }\n };\n\n const handleSignIn = async (attendeeId: number) => {\n setIsSigningIn(true);\n setSignInResult(null);\n \n try {\n const response = await fetch(`/api/${eventId}/signin`, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({ attendeeId } as SignInRequest)\n });\n \n if (!response.ok) throw new Error('Failed to sign in');\n \n const result: SignInResponse = await response.json();\n setSignInResult(result);\n \n // Refresh attendees to show updated status\n await loadAttendees();\n \n // Clear search after successful sign-in\n setSearchTerm('');\n } catch (err) {\n setError(err instanceof Error ? err.message : 'Failed to sign in');\n } finally {\n setIsSigningIn(false);\n }\n };\n\n // Simple fuzzy search with optional filtering of checked-in attendees\n const filteredAttendees = attendees.filter(attendee => {\n const matchesSearch = attendee.name.toLowerCase().includes(searchTerm.toLowerCase());\n const shouldShow = showAll || !attendee.checkedIn;\n return matchesSearch && shouldShow;\n });\n\n if (loading) {\n return (\n

Loading attendees...

\n );\n }\n\n if (error) {\n return (\n

{error}

\n { setError(null); loadAttendees(); }}\n className=\"px-4 py-2 bg-[var(--accent-primary)] text-[#2d3748] font-mono rounded hover:bg-[var(--accent-secondary)]\"\n >\n Try Again\n \n

\n );\n }\n\n return (\n

\n Event Check-In\n

\n\n\n\n

\n setSearchTerm(e.target.value)}\n className=\"w-full p-3 border border-[var(--border-default)] rounded-lg focus:outline-none focus:border-[var(--border-focus)]\"\n />\n \n

\n setShowAll(!showAll)}\n className=\"px-4 py-2 bg-[var(--bg-secondary)] text-[var(--text-primary)] rounded-lg hover:bg-[var(--bg-tertiary)] transition-colors\"\n >\n {showAll ? 'Hide Checked-In' : 'Show All'}\n \n \n {filteredAttendees.length} attendee{filteredAttendees.length !== 1 ? 's' : ''} shown\n \n

\n\n

\n {filteredAttendees.length === 0 ? (\n

\n {searchTerm ? 'No attendees found matching your search.' : 'No attendees found.'}\n

\n ) : (\n filteredAttendees.map(attendee => (\n \n

\n {attendee.name}\n

\n {attendee.checkedIn && (\n ✓ Already checked in\n )}\n

\n \n handleSignIn(attendee.id)}\n disabled={isSigningIn}\n className={`px-6 py-2 rounded-lg font-medium transition-colors ${\n attendee.checkedIn\n ? 'bg-[var(--bg-secondary)] text-[var(--text-muted)] hover:bg-[var(--bg-tertiary)]'\n : 'bg-[var(--accent-primary)] text-[#2d3748] hover:bg-[var(--accent-secondary)]'\n } ${isSigningIn ? 'opacity-50 cursor-not-allowed' : ''}`}\n >\n {isSigningIn ? 'Signing In...' : attendee.checkedIn ? 'Check In Again' : 'Check In'}\n \n

\n ))\n )}\n

\n \n {/* Fixed bottom flash message */}\n {signInResult && (\n

\n {signInResult.success ? (\n <>\n

\n ✓ Welcome, {signInResult.attendeeName}!\n

\n setSignInResult(null)}\n className=\"text-green-600 hover:text-green-800 text-lg\"\n >\n ×\n \n

\n {signInResult.alreadySignedIn && (\n

\n Note: You were already signed in, but we've recorded this check-in too.\n

\n )}\n \n ) : (\n

Failed to sign in. Please try again.

\n setSignInResult(null)}\n className=\"text-red-600 hover:text-red-800 text-lg\"\n >\n ×\n \n

\n )}\n

\n )}\n \n );\n}\n",[],[18,75,299],"53781c0e-603f-11f0-bbf7-0224a6c84d84","EventManagement.tsx","2af5fd3a-5dd0-11f0-b134-0224a6c84d84",57,["D",1752448554799],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState, useEffect } from \"https://esm.sh/react@18.2.0\";\nimport AddAttendee from \"./AddAttendee.tsx\";\nimport type { EventDetailsResponse, AttendeeListResponse, AnalyticsResponse } from \"../../shared/types.ts\";\n\ninterface EventManagementProps {\n eventId: number;\n}\n\nexport default function EventManagement({ eventId }: EventManagementProps) {\n const [eventDetails, setEventDetails] = useState(null);\n const [attendees, setAttendees] = useState([]);\n const [analytics, setAnalytics] = useState(null);\n const [activeTab, setActiveTab] = useState<'overview' | 'attendees' | 'analytics'>('overview');\n const [loading, setLoading] = useState(true);\n const [error, setError] = useState(null);\n const [password, setPassword] = useState('');\n const [isAuthenticated, setIsAuthenticated] = useState(false);\n\n useEffect(() => {\n // Check if we're already authenticated via session\n checkAuthentication();\n }, [eventId]);\n\n useEffect(() => {\n if (isAuthenticated) {\n loadData();\n }\n }, [eventId, isAuthenticated]);\n\n const checkAuthentication = async () => {\n try {\n const response = await fetch(`/api/${eventId}/details`);\n if (response.ok) {\n setIsAuthenticated(true);\n }\n } catch (err) {\n // Not authenticated, stay on login form\n }\n };\n\n const authenticate = async () => {\n try {\n const response = await fetch(`/api/${eventId}/auth`, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({ password })\n });\n \n if (response.ok) {\n setIsAuthenticated(true);\n setPassword('');\n } else {\n setError('Invalid password');\n }\n } catch (err) {\n setError('Authentication failed');\n }\n };\n\n const loadData = async () => {\n try {\n setLoading(true);\n const [detailsRes, attendeesRes, analyticsRes] = await Promise.all([\n fetch(`/api/${eventId}/details`),\n fetch(`/api/${eventId}/attendees`),\n fetch(`/api/${eventId}/analytics`)\n ]);\n\n if (!detailsRes.ok || !attendeesRes.ok || !analyticsRes.ok) {\n throw new Error('Failed to load event data');\n }\n\n const [details, attendeesList, analyticsData] = await Promise.all([\n detailsRes.json() as Promise,\n attendeesRes.json() as Promise,\n analyticsRes.json() as Promise\n ]);\n\n setEventDetails(details);\n setAttendees(attendeesList.attendees);\n setAnalytics(analyticsData);\n } catch (err) {\n setError(err instanceof Error ? err.message : 'Failed to load data');\n } finally {\n setLoading(false);\n }\n };\n\n const exportCSV = async () => {\n try {\n const response = await fetch(`/api/${eventId}/export`);\n if (!response.ok) throw new Error('Failed to export data');\n \n const blob = await response.blob();\n const url = window.URL.createObjectURL(blob);\n const a = document.createElement('a');\n a.href = url;\n a.download = `event-${eventId}-checkins.csv`;\n document.body.appendChild(a);\n a.click();\n document.body.removeChild(a);\n window.URL.revokeObjectURL(url);\n } catch (err) {\n setError('Failed to export data');\n }\n };\n\n const getSignInUrl = () => {\n return `${window.location.origin}/${eventId}/signin`;\n };\n\n const copySignInUrl = () => {\n navigator.clipboard.writeText(getSignInUrl());\n };\n\n const logout = async () => {\n try {\n await fetch(`/api/${eventId}/logout`, { method: 'POST' });\n setIsAuthenticated(false);\n } catch (err) {\n // Handle logout error\n }\n };\n\n if (!isAuthenticated) {\n return (\n

\n Event Management\n

\n \n {error && (\n

\n {error}\n

\n )}\n \n

\n \n Enter event password:\n \n setPassword(e.target.value)}\n className=\"w-full p-3 border border-[var(--border-default)] rounded-lg focus:outline-none focus:border-[var(--border-focus)]\"\n onKeyPress={(e) => e.key === 'Enter' && authenticate()}\n />\n

\n \n \n Access Event\n \n

\n );\n }\n\n if (loading) {\n return (\n

Loading event data...

\n );\n }\n\n if (error) {\n return (\n

{error}

\n { setError(null); loadData(); }}\n className=\"px-4 py-2 bg-[var(--accent-primary)] text-[#2d3748] font-mono rounded hover:bg-[var(--accent-secondary)]\"\n >\n Try Again\n \n

\n );\n }\n\n return (\n

\n {eventDetails?.event.name}\n

\n \n Logout\n \n

\n {eventDetails?.event.location && (\n

📍 {eventDetails.event.location}

\n )}\n

\n\n {/* Sign-in URL */}\n

Check-in URL

\n \n {getSignInUrl()}\n \n \n Copy\n \n

\n\n {/* Tabs */}\n

\n {(['overview', 'attendees', 'analytics'] as const).map((tab) => (\n setActiveTab(tab)}\n className={`py-2 px-1 border-b-2 font-medium text-sm capitalize ${\n activeTab === tab\n ? 'border-[var(--accent-primary)] text-[var(--accent-primary)]'\n : 'border-transparent text-[var(--text-muted)] hover:text-[var(--text-secondary)]'\n }`}\n >\n {tab}\n \n ))}\n

\n\n {/* Overview Tab */}\n {activeTab === 'overview' && (\n

Total Attendees

\n {eventDetails?.attendeeCount || 0}\n

\n \n

Checked In

\n {eventDetails?.checkedInCount || 0}\n

\n \n

Check-in Rate

\n {eventDetails?.attendeeCount \n ? Math.round(((eventDetails?.checkedInCount || 0) / eventDetails.attendeeCount) * 100)\n : 0}%\n

\n )}\n\n {/* Attendees Tab */}\n {activeTab === 'attendees' && (\n

Attendees

\n \n Export CSV\n \n

\n \n

\n \n \n \n \n \n \n \n \n {attendees.map((attendee) => (\n \n \n \n \n ))}\n \n

\n Name\n	\n Status\n
\n {attendee.name}\n	\n {attendee.checkedIn ? (\n ✓ Checked In\n ) : (\n Not checked in\n )}\n

\n )}\n\n {/* Analytics Tab */}\n {activeTab === 'analytics' && analytics && (\n

Check-ins by Date

\n {analytics.checkInsByDate.map((entry) => (\n

\n {entry.date}\n {entry.count}\n

\n ))}\n

\n \n

Recent Check-ins

\n {analytics.recentCheckIns.map((entry, index) => (\n

\n {entry.attendeeName}\n \n {new Date(entry.checkedInAt).toLocaleTimeString()}\n \n

\n ))}\n

\n )}\n

\n );\n}\n",[],[18,75,308],"3dff36e4-5dd5-11f0-acbb-0224a6c84d84","EventLinks.tsx","d2096474-5dd3-11f0-9e07-0224a6c84d84",31,["D",1752183089782],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState, useEffect } from \"https://esm.sh/react@18.2.0\";\nimport type { EventDetailsResponse } from \"../../shared/types.ts\";\n\ninterface EventLinksProps {\n eventId: number;\n}\n\nexport default function EventLinks({ eventId }: EventLinksProps) {\n const [eventDetails, setEventDetails] = useState(null);\n const [loading, setLoading] = useState(true);\n const [error, setError] = useState(null);\n\n useEffect(() => {\n loadEventDetails();\n }, [eventId]);\n\n const loadEventDetails = async () => {\n try {\n const response = await fetch(`/api/${eventId}`);\n if (!response.ok) throw new Error('Failed to load event details');\n const data: EventDetailsResponse = await response.json();\n setEventDetails(data);\n } catch (err) {\n setError(err instanceof Error ? err.message : 'Failed to load event');\n } finally {\n setLoading(false);\n }\n };\n\n const getSignInUrl = () => {\n return `${window.location.origin}/${eventId}/signin`;\n };\n\n const getManageUrl = () => {\n return `${window.location.origin}/${eventId}/manage`;\n };\n\n const copyToClipboard = (text: string) => {\n navigator.clipboard.writeText(text);\n };\n\n if (loading) {\n return (\n

Loading event details...

\n );\n }\n\n if (error) {\n return (\n

{error}

\n { setError(null); loadEventDetails(); }}\n className=\"px-4 py-2 bg-[var(--accent-primary)] text-white rounded hover:bg-[var(--accent-secondary)]\"\n >\n Try Again\n \n

\n );\n }\n\n return (\n

\n {eventDetails?.event.name}\n

\n {eventDetails?.event.location && (\n

📍 {eventDetails.event.location}

\n )}\n

\n {eventDetails?.attendeeCount || 0} attendees\n •\n {eventDetails?.checkedInCount || 0} checked in\n

\n\n

\n {/* Attendee Check-in */}\n

\n \n

\n Attendee Check-in\n

\n For attendees to check in to the event\n

\n \n

\n \n {getSignInUrl()}\n \n copyToClipboard(getSignInUrl())}\n className=\"px-3 py-2 bg-[var(--accent-primary)] text-white rounded hover:bg-[var(--accent-secondary)] text-sm\"\n >\n Copy\n \n

\n \n \n Go to Check-in Page\n \n

\n\n {/* Event Management */}\n

\n \n

\n Event Management\n

\n For organizers to manage the event (requires password)\n

\n \n

\n \n {getManageUrl()}\n \n copyToClipboard(getManageUrl())}\n className=\"px-3 py-2 bg-[var(--info)] text-white rounded hover:bg-blue-600 text-sm\"\n >\n Copy\n \n

\n \n \n Go to Management Page\n \n

\n\n {/* Additional Info */}\n

Event Information

\n Event ID:\n {eventId}\n

\n Created:\n \n {eventDetails?.event.created_at ? new Date(eventDetails.event.created_at).toLocaleDateString() : 'Unknown'}\n \n

\n Total Attendees:\n {eventDetails?.attendeeCount || 0}\n

\n Checked In:\n {eventDetails?.checkedInCount || 0}\n

\n );\n}\n",[],[18,75,316],"560f5fc4-5ddb-11f0-8cbb-0224a6c84d84","EventCreation.tsx","0d97ee1c-5dce-11f0-92a2-0224a6c84d84",50,["D",1752185706988],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState } from \"https://esm.sh/react@18.2.0\";\n\ninterface EventCreationProps {\n onEventCreated: (eventId: number) => void;\n}\n\nexport default function EventCreation({ onEventCreated }: EventCreationProps) {\n const [formData, setFormData] = useState({\n name: '',\n password: '',\n location: '',\n csvContent: ''\n });\n const [isSubmitting, setIsSubmitting] = useState(false);\n const [error, setError] = useState(null);\n const [csvErrors, setCsvErrors] = useState([]);\n\n const handleFileUpload = (event: React.ChangeEvent) => {\n const file = event.target.files?.[0];\n if (file) {\n const reader = new FileReader();\n reader.onload = (e) => {\n const content = e.target?.result as string;\n setFormData(prev => ({ ...prev, csvContent: content }));\n };\n reader.readAsText(file);\n }\n };\n\n const handleSubmit = async (e: React.FormEvent) => {\n e.preventDefault();\n setIsSubmitting(true);\n setError(null);\n setCsvErrors([]);\n\n try {\n const response = await fetch('/api/events', {\n method: 'POST',\n headers: {\n 'Content-Type': 'application/json',\n },\n body: JSON.stringify(formData),\n });\n\n const result = await response.json();\n\n if (!response.ok) {\n if (result.csvErrors) {\n setCsvErrors(result.csvErrors);\n }\n throw new Error(result.error || 'Failed to create event');\n }\n\n // Show success and redirect\n onEventCreated(result.eventId);\n } catch (err) {\n setError(err instanceof Error ? err.message : 'An error occurred');\n } finally {\n setIsSubmitting(false);\n }\n };\n\n return (\n

\n Create New Event\n

\n Set up your event and upload attendee list\n

\n\n

\n \n Event Name *\n \n setFormData(prev => ({ ...prev, name: e.target.value }))}\n className=\"w-full px-3 py-2 border border-[var(--border-default)] rounded-md focus:outline-none focus:ring-2 focus:ring-[var(--accent-primary)] focus:border-transparent\"\n placeholder=\"Enter event name\"\n />\n

\n\n

\n \n Management Password *\n \n setFormData(prev => ({ ...prev, password: e.target.value }))}\n className=\"w-full px-3 py-2 border border-[var(--border-default)] rounded-md focus:outline-none focus:ring-2 focus:ring-[var(--accent-primary)] focus:border-transparent\"\n placeholder=\"Enter password for event management\"\n />\n

\n This password will be required to access analytics and export data\n

\n\n

\n \n Location\n \n setFormData(prev => ({ ...prev, location: e.target.value }))}\n className=\"w-full px-3 py-2 border border-[var(--border-default)] rounded-md focus:outline-none focus:ring-2 focus:ring-[var(--accent-primary)] focus:border-transparent\"\n placeholder=\"Enter event location (optional)\"\n />\n

\n\n

\n \n Attendee List (CSV) *\n \n \n

Upload a CSV file with attendee names. Supported column headers:

name, Name, full_name
first_name + last_name (will be combined)
id (optional, for external reference)

\n\n {formData.csvContent && (\n

\n CSV loaded: {formData.csvContent.split('\\n').length - 1} rows\n

\n )}\n\n {csvErrors.length > 0 && (\n

CSV Parsing Issues:

• {error}

\n )}\n\n {error && (\n

{error}

\n )}\n\n \n {isSubmitting ? 'Creating Event...' : 'Create Event'}\n \n \n

\n\n

What happens next?

1. Your event will be created with the uploaded attendee list

2. You'll be redirected to the management dashboard

3. Share the sign-in link with your attendees

4. Monitor check-ins and export data as needed

\n );\n}",[],[18,75,324],"538f8ff6-603f-11f0-a5cd-0224a6c84d84","App.tsx","06c9fc59-0d9d-467a-873e-97706322b720",["D",1752448554794],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState, useEffect } from \"https://esm.sh/react@18.2.0\";\nimport EventCreation from \"./EventCreation.tsx\";\nimport EventSignIn from \"./EventSignIn.tsx\";\nimport EventManagement from \"./EventManagement.tsx\";\nimport EventLinks from \"./EventLinks.tsx\";\nimport AddAttendee from \"./AddAttendee.tsx\";\n\n// Simple client-side routing based on URL path\nfunction useRouter() {\n const [path, setPath] = useState(window.location.pathname);\n \n useEffect(() => {\n const handlePopState = () => setPath(window.location.pathname);\n window.addEventListener('popstate', handlePopState);\n return () => window.removeEventListener('popstate', handlePopState);\n }, []);\n \n const navigate = (newPath: string) => {\n window.history.pushState({}, '', newPath);\n setPath(newPath);\n };\n \n return { path, navigate };\n}\n\nexport default function App() {\n const { path, navigate } = useRouter();\n \n // Parse route parameters\n const getEventId = () => {\n const match = path.match(/^\\/(\\d+)/);\n return match ? parseInt(match[1]) : null;\n };\n \n const renderPage = () => {\n if (path === '/' || path === '/new') {\n return navigate(`/${eventId}`)} />;\n }\n \n if (path.includes('/signin')) {\n const eventId = getEventId();\n if (!eventId) return

Invalid event ID

;\n return ;\n }\n \n if (path.includes('/manage')) {\n const eventId = getEventId();\n if (!eventId) return

Invalid event ID

;\n return ;\n }\n \n if (path.match(/^\\/\\d+$/)) {\n const eventId = getEventId();\n if (!eventId) return

Invalid event ID

;\n return ;\n }\n \n if (path.includes('/add-attendee')) {\n const eventId = getEventId();\n if (!eventId) return

Invalid event ID

;\n return (\n

\n Add Attendee\n

\n Add a new attendee to the event\n

\n \n

\n );\n }\n \n return

Page not found

;\n };\n\n return (\n <>\n \n \n \n \n \n \n

\n {renderPage()}\n

\n \n );\n}",[],[18,75,332],"5374c856-603f-11f0-8a5b-0224a6c84d84","AddAttendee.tsx","5374c914-603f-11f0-8a5b-0224a6c84d84",56,["D",1752448554780],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState } from \"https://esm.sh/react@18.2.0\";\n\ninterface AddAttendeeProps {\n eventId: number;\n onAttendeeAdded?: () => void;\n onCancel?: () => void;\n}\n\nexport default function AddAttendee({ eventId, onAttendeeAdded, onCancel }: AddAttendeeProps) {\n const [formData, setFormData] = useState({\n password: '',\n name: '',\n external_id: ''\n });\n const [isSubmitting, setIsSubmitting] = useState(false);\n const [error, setError] = useState(null);\n const [success, setSuccess] = useState(null);\n\n const handleSubmit = async (e: React.FormEvent) => {\n e.preventDefault();\n setIsSubmitting(true);\n setError(null);\n setSuccess(null);\n\n try {\n const response = await fetch(`/api/events/${eventId}/attendees`, {\n method: 'POST',\n headers: {\n 'Content-Type': 'application/json',\n },\n body: JSON.stringify({\n password: formData.password,\n name: formData.name,\n external_id: formData.external_id || undefined\n }),\n });\n\n const result = await response.json();\n\n if (!response.ok) {\n throw new Error(result.error || 'Failed to add attendee');\n }\n\n setSuccess(`Successfully added ${result.attendee.name} to the event!`);\n setFormData(prev => ({ ...prev, name: '', external_id: '' })); // Keep password for convenience\n \n if (onAttendeeAdded) {\n onAttendeeAdded();\n }\n } catch (err) {\n setError(err instanceof Error ? err.message : 'An error occurred');\n } finally {\n setIsSubmitting(false);\n }\n };\n\n return (\n

Add New Attendee

\n {onCancel && (\n \n ×\n \n )}\n

\n\n

\n \n Event Password *\n \n setFormData(prev => ({ ...prev, password: e.target.value }))}\n className=\"w-full px-3 py-2 border border-[var(--border-default)] rounded-md focus:outline-none focus:ring-2 focus:ring-[var(--accent-primary)] focus:border-transparent\"\n placeholder=\"Enter event management password\"\n />\n

\n Required to verify you have permission to add attendees\n

\n\n

\n \n Attendee Name *\n \n setFormData(prev => ({ ...prev, name: e.target.value }))}\n className=\"w-full px-3 py-2 border border-[var(--border-default)] rounded-md focus:outline-none focus:ring-2 focus:ring-[var(--accent-primary)] focus:border-transparent\"\n placeholder=\"Enter attendee's full name\"\n />\n

\n\n

\n \n External ID (Optional)\n \n setFormData(prev => ({ ...prev, external_id: e.target.value }))}\n className=\"w-full px-3 py-2 border border-[var(--border-default)] rounded-md focus:outline-none focus:ring-2 focus:ring-[var(--accent-primary)] focus:border-transparent\"\n placeholder=\"Employee ID, badge number, etc. (optional)\"\n />\n

\n\n {success && (\n

{success}

\n )}\n\n {error && (\n

{error}

\n )}\n\n

\n \n {isSubmitting ? 'Adding Attendee...' : 'Add Attendee'}\n \n \n {onCancel && (\n \n Cancel\n \n )}\n

\n\n

How it works:

• Enter the event management password to authenticate

• Add the attendee's name (must be unique for this event)

• External ID is optional but helpful for tracking

• The attendee will immediately appear in the sign-in list

\n );\n}\n",[],[18,75,339],["D",1752179182252],[204,205,206,207,208,209],[18,75],["D",1752179182252],[203,210,211],[18],"5382930a-603f-11f0-a838-0224a6c84d84","index.ts","ab3f0ddd-bf40-418f-aee1-1e6f03b7f261",59,["D",1752448554790],13,"http","import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\nimport { sqlite } from \"https://esm.town/v/stevekrouse/sqlite\";\nimport { getCookie, setCookie } from \"https://esm.sh/hono@3.11.7/cookie\";\nimport { \n createSession, \n setSessionCookie, \n clearSessionCookie,\n authMiddleware,\n verifyEventAccess,\n csrfMiddleware\n} from \"./auth.ts\";\nimport { initDatabase, TABLES } from \"./database.ts\";\n\nconst app = new Hono();\n\n// Unwrap Hono errors to see original error details\napp.onError((err, c) => {\n throw err;\n});\n\n// Database table names imported from centralized schema\n\n// Initialize database on startup\nawait initDatabase();\nconsole.log(`🚀 [System] Event check-in system ready!`);\n\n// Serve static files\napp.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\napp.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n\n// Serve main page\napp.get(\"/\", async c => {\n const html = await readFile(\"/frontend/index.html\", import.meta.url);\n return c.html(html);\n});\n\n// Route handlers for different pages\napp.get(\"/new\", async c => {\n const html = await readFile(\"/frontend/index.html\", import.meta.url);\n return c.html(html);\n});\n\napp.get(\"/:eventId/signin\", async c => {\n const html = await readFile(\"/frontend/index.html\", import.meta.url);\n return c.html(html);\n});\n\napp.get(\"/:eventId/manage\", async c => {\n const html = await readFile(\"/frontend/index.html\", import.meta.url);\n return c.html(html);\n});\n\napp.get(\"/:eventId\", async c => {\n const html = await readFile(\"/frontend/index.html\", import.meta.url);\n return c.html(html);\n});\n\napp.get(\"/events/:eventId/add-attendee\", async c => {\n const html = await readFile(\"/frontend/index.html\", import.meta.url);\n return c.html(html);\n});\n\n// Utility functions\nfunction hashPassword(password: string): string {\n // Simple hash for demo - in production, use proper bcrypt or similar\n return btoa(password + \"salt\").replace(/[^a-zA-Z0-9]/g, '');\n}\n\nfunction verifyPassword(password: string, hash: string): boolean {\n return hashPassword(password) === hash;\n}\n\n// CSV parsing utility with proper quoted field handling\nfunction parseCSV(csvContent: string): { attendees: Array<{name: string, external_id?: string}>, errors: string[] } {\n const lines = csvContent.trim().split('\\n');\n const errors: string[] = [];\n const attendees: Array<{name: string, external_id?: string}> = [];\n \n if (lines.length === 0) {\n errors.push(\"CSV file is empty\");\n return { attendees, errors };\n }\n \n // Parse CSV row with proper quote handling\n function parseCSVRow(line: string): string[] {\n const result: string[] = [];\n let current = '';\n let inQuotes = false;\n let i = 0;\n \n while (i < line.length) {\n const char = line[i];\n \n if (char === '\"' && !inQuotes) {\n inQuotes = true;\n } else if (char === '\"' && inQuotes) {\n // Check for escaped quote\n if (i + 1 < line.length && line[i + 1] === '\"') {\n current += '\"';\n i++; // Skip the escaped quote\n } else {\n inQuotes = false;\n }\n } else if (char === ',' && !inQuotes) {\n result.push(current.trim());\n current = '';\n } else {\n current += char;\n }\n i++;\n }\n \n result.push(current.trim());\n return result;\n }\n \n // Parse header row\n const headers = parseCSVRow(lines[0]).map(h => h.toLowerCase());\n console.log(`📋 [CSV] Found headers:`, headers);\n \n // Find name columns - flexible matching\n let nameIndex = -1;\n let firstNameIndex = -1;\n let lastNameIndex = -1;\n let idIndex = -1;\n let emailIndex = -1;\n \n headers.forEach((header, index) => {\n const cleanHeader = header.toLowerCase();\n if (cleanHeader === 'name' || (cleanHeader.includes('name') && !cleanHeader.includes('first') && !cleanHeader.includes('last') && !cleanHeader.includes('given') && !cleanHeader.includes('family'))) {\n nameIndex = index;\n } else if (cleanHeader.includes('first') || cleanHeader === 'first name') {\n firstNameIndex = index;\n } else if (cleanHeader.includes('last') || cleanHeader === 'last name' || cleanHeader.includes('family') || cleanHeader.includes('surname')) {\n lastNameIndex = index;\n } else if ((cleanHeader.includes('id') || cleanHeader === 'member id') && !cleanHeader.includes('email')) {\n idIndex = index;\n } else if (cleanHeader.includes('email') || cleanHeader === 'email') {\n emailIndex = index;\n }\n });\n \n console.log(`📋 [CSV] Column mapping - name: ${nameIndex}, firstName: ${firstNameIndex}, lastName: ${lastNameIndex}, id: ${idIndex}, email: ${emailIndex}`);\n \n // Process data rows\n for (let i = 1; i < lines.length; i++) {\n const row = parseCSVRow(lines[i]);\n \n if (row.length !== headers.length) {\n errors.push(`Row ${i + 1}: Column count mismatch (expected ${headers.length}, got ${row.length})`);\n continue;\n }\n \n let name = '';\n \n // Extract name using flexible logic\n if (nameIndex >= 0 && row[nameIndex]) {\n name = row[nameIndex];\n } else if (firstNameIndex >= 0 && lastNameIndex >= 0) {\n const firstName = row[firstNameIndex] || '';\n const lastName = row[lastNameIndex] || '';\n name = `${firstName} ${lastName}`.trim();\n } else if (firstNameIndex >= 0) {\n name = row[firstNameIndex];\n }\n \n if (!name) {\n errors.push(`Row ${i + 1}: No name found`);\n continue;\n }\n \n const attendee: {name: string, external_id?: string} = { name };\n \n if (idIndex >= 0 && row[idIndex]) {\n attendee.external_id = row[idIndex];\n }\n \n attendees.push(attendee);\n }\n \n console.log(`📋 [CSV] Parsed ${attendees.length} attendees with ${errors.length} errors`);\n return { attendees, errors };\n}\n\n// API Routes\n\n// Create new event\napp.post(\"/api/events\", async c => {\n console.log(`🎯 [API] New event creation request`);\n \n try {\n const body = await c.req.json();\n const { name, password, location, csvContent } = body;\n \n console.log(`📋 [API] Event details: \"${name}\", location: \"${location || 'N/A'}\"`);\n \n if (!name || !password || !csvContent) {\n return c.json({ error: \"Missing required fields: name, password, csvContent\" }, 400);\n }\n \n // Parse CSV\n const { attendees, errors } = parseCSV(csvContent);\n \n if (attendees.length === 0) {\n return c.json({ error: \"No valid attendees found in CSV\", csvErrors: errors }, 400);\n }\n \n // Create event with unix timestamp as ID\n const passwordHash = hashPassword(password);\n const eventId = Math.floor(Date.now() / 1000); // Unix timestamp in seconds\n console.log(`📋 [API] Creating event with ID: ${eventId}, name: \"${name}\", location: \"${location || 'N/A'}\"`);\n\n try {\n await sqlite.execute(\n `INSERT INTO ${TABLES.EVENTS} (id, name, password_hash, location) VALUES (?, ?, ?, ?)`,\n [eventId, name, passwordHash, location || null]\n );\n console.log(`✅ [API] Event successfully inserted into database with ID: ${eventId}`);\n } catch (error) {\n console.error(`💥 [API] Failed to insert event:`, error);\n throw error;\n }\n\n // Verify event was created\n const verifyEventResult = await sqlite.execute(`SELECT id, name FROM ${TABLES.EVENTS} WHERE id = ?`, [eventId]);\n const verifyEvent = verifyEventResult.rows || verifyEventResult;\n console.log(`🔍 [API] Event verification: found ${verifyEvent.length} events with ID ${eventId}`);\n if (verifyEvent.length > 0) {\n console.log(`🔍 [API] Event details: ${JSON.stringify(verifyEvent[0])}`);\n }\n\n // Insert attendees\n console.log(`📋 [API] Starting to insert ${attendees.length} attendees...`);\n let insertedCount = 0;\n for (const attendee of attendees) {\n try {\n await sqlite.execute(\n `INSERT INTO ${TABLES.ATTENDEES} (event_id, name, external_id) VALUES (?, ?, ?)`,\n [eventId, attendee.name, attendee.external_id || null]\n );\n insertedCount++;\n console.log(`👤 [API] Inserted attendee ${insertedCount}/${attendees.length}: \"${attendee.name}\" (external_id: ${attendee.external_id || 'N/A'})`);\n } catch (error) {\n console.error(`💥 [API] Failed to insert attendee \"${attendee.name}\":`, error);\n throw error;\n }\n }\n\n // Verify attendees were inserted\n const verifyAttendeesResult = await sqlite.execute(`SELECT COUNT(*) as count FROM ${TABLES.ATTENDEES} WHERE event_id = ?`, [eventId]);\n const verifyAttendees = verifyAttendeesResult.rows || verifyAttendeesResult;\n const actualAttendeeCount = Number(verifyAttendees[0]?.count || 0);\n console.log(`🔍 [API] Attendee verification: expected ${attendees.length}, found ${actualAttendeeCount} in database`);\n\n console.log(`✅ [API] Successfully added ${insertedCount} attendees to event ${eventId}`);\n \n return c.json({\n success: true,\n eventId,\n attendeeCount: attendees.length,\n csvErrors: errors\n });\n \n } catch (error) {\n console.error(`💥 [API] Error creating event:`, error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Get basic event info (public, no auth required)\napp.get(\"/api/:eventId\", async c => {\n const eventId = parseInt(c.req.param(\"eventId\"));\n console.log(`📋 [API] Fetching basic event details for event ${eventId}`);\n \n try {\n const eventResult = await sqlite.execute(`\n SELECT id, name, location, created_at FROM ${TABLES.EVENTS} WHERE id = ?\n `, [eventId]);\n \n const event = eventResult.rows || eventResult;\n \n if (event.length === 0) {\n console.log(`❌ [API] Event ${eventId} not found`);\n return c.json({ error: \"Event not found\" }, 404);\n }\n \n // Get attendee counts\n const attendeeCountResult = await sqlite.execute(`\n SELECT COUNT(*) as count FROM ${TABLES.ATTENDEES} WHERE event_id = ?\n `, [eventId]);\n \n const checkedInCountResult = await sqlite.execute(`\n SELECT COUNT(*) as count FROM ${TABLES.CHECKINS} WHERE attendee_id IN (\n SELECT id FROM ${TABLES.ATTENDEES} WHERE event_id = ?\n )\n `, [eventId]);\n \n const attendeeCountRows = attendeeCountResult.rows || attendeeCountResult;\n const checkedInCountRows = checkedInCountResult.rows || checkedInCountResult;\n const attendeeCount = Number(attendeeCountRows[0]?.count || 0);\n const checkedInCount = Number(checkedInCountRows[0]?.count || 0);\n \n console.log(`📋 [API] Event ${eventId} found: ${attendeeCount} attendees, ${checkedInCount} checked in`);\n \n return c.json({\n event: {\n id: event[0].id,\n name: event[0].name,\n location: event[0].location,\n created_at: event[0].created_at\n },\n attendeeCount,\n checkedInCount\n });\n \n } catch (error) {\n console.error(`💥 [API] Error fetching event details:`, error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Get attendee list for sign-in (names only, no sensitive info)\napp.get(\"/api/:eventId/attendees\", async c => {\n const eventId = parseInt(c.req.param(\"eventId\"));\n console.log(`📋 [API] Fetching attendees for event ${eventId}`);\n \n try {\n // First check if event exists\n console.log(`🔍 [API] Checking if event ${eventId} exists in table ${TABLES.EVENTS}`);\n const eventCheckResult = await sqlite.execute(`\n SELECT id FROM ${TABLES.EVENTS} WHERE id = ?\n `, [eventId]);\n \n const eventCheck = eventCheckResult.rows || eventCheckResult;\n console.log(`🔍 [API] Event check result: found ${eventCheck.length} events with ID ${eventId}`);\n if (eventCheck.length === 0) {\n console.log(`❌ [API] Event ${eventId} not found`);\n return c.json({ error: \"Event not found\" }, 404);\n }\n \n // Get attendees with check-in status\n console.log(`🔍 [API] Querying attendees from table ${TABLES.ATTENDEES} for event ${eventId}`);\n const attendeesResult = await sqlite.execute(`\n SELECT a.id, a.name, \n CASE WHEN c.id IS NOT NULL THEN 1 ELSE 0 END as checked_in\n FROM ${TABLES.ATTENDEES} a\n LEFT JOIN ${TABLES.CHECKINS} c ON a.id = c.attendee_id\n WHERE a.event_id = ?\n ORDER BY a.name\n `, [eventId]);\n \n const attendees = attendeesResult.rows || attendeesResult;\n console.log(`📋 [API] Found ${attendees.length} attendees for event ${eventId}`);\n \n // Log first few attendees for debugging\n if (attendees.length > 0) {\n console.log(`🔍 [API] First few attendees:`, attendees.slice(0, 3).map(a => ({ id: a.id, name: a.name, checked_in: a.checked_in })));\n }\n \n const result = {\n attendees: attendees.map(row => ({\n id: row.id,\n name: row.name,\n checkedIn: Boolean(row.checked_in)\n }))\n };\n \n console.log(`📋 [API] Returning ${result.attendees.length} attendees to client`);\n return c.json(result);\n \n } catch (error) {\n console.error(`💥 [API] Error fetching attendees for event ${eventId}:`, error);\n console.error(`💥 [API] Error stack:`, error.stack);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Sign in to event\napp.post(\"/api/:eventId/signin\", async c => {\n const eventId = parseInt(c.req.param(\"eventId\"));\n \n try {\n const body = await c.req.json();\n const { attendeeId } = body;\n \n if (!attendeeId) {\n return c.json({ error: \"Attendee ID required\" }, 400);\n }\n \n // Verify attendee belongs to this event\n const attendeeResult = await sqlite.execute(\n `SELECT * FROM ${TABLES.ATTENDEES} WHERE id = ? AND event_id = ?`,\n [attendeeId, eventId]\n );\n \n const attendee = attendeeResult.rows || attendeeResult;\n if (attendee.length === 0) {\n return c.json({ error: \"Attendee not found for this event\" }, 404);\n }\n \n // Check if already signed in\n const existingCheckInResult = await sqlite.execute(\n `SELECT * FROM ${TABLES.CHECKINS} WHERE event_id = ? AND attendee_id = ?`,\n [eventId, attendeeId]\n );\n \n const existingCheckIn = existingCheckInResult.rows || existingCheckInResult;\n if (existingCheckIn.length > 0) {\n console.log(`⚠️ [API] Attendee ${attendee[0].name} already signed in`);\n // TODO: Consider security implications of multiple sign-in attempts\n // For now, we'll allow it but flag it\n return c.json({\n success: true,\n attendeeName: attendee[0].name,\n alreadySignedIn: true,\n message: \"You were already signed in, but we've recorded this additional check-in.\"\n });\n }\n \n // Record check-in\n await sqlite.execute(\n `INSERT INTO ${TABLES.CHECKINS} (event_id, attendee_id) VALUES (?, ?)`,\n [eventId, attendeeId]\n );\n \n console.log(`✅ [API] ${attendee[0].name} signed in to event ${eventId}`);\n \n return c.json({\n success: true,\n attendeeName: attendee[0].name,\n alreadySignedIn: false\n });\n \n } catch (error) {\n console.error(`💥 [API] Error during sign-in:`, error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Authentication endpoint - login with password and create session\napp.post(\"/api/:eventId/auth\", async c => {\n const eventId = parseInt(c.req.param(\"eventId\"));\n \n try {\n const body = await c.req.json();\n const { password } = body;\n \n if (!password) {\n return c.json({ error: \"Password required\" }, 401);\n }\n \n // Get event\n const eventsResult = await sqlite.execute(\n `SELECT * FROM ${TABLES.EVENTS} WHERE id = ?`,\n [eventId]\n );\n \n const events = eventsResult.rows || eventsResult;\n if (events.length === 0) {\n return c.json({ error: \"Event not found\" }, 404);\n }\n \n const event = events[0];\n \n // Verify password\n if (!verifyPassword(password, event.password_hash)) {\n return c.json({ error: \"Invalid password\" }, 401);\n }\n \n // Create session\n const session = await createSession(eventId);\n setSessionCookie(c, session.token);\n \n return c.json({ success: true });\n \n } catch (error) {\n console.error(`💥 [API] Error during authentication:`, error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Logout endpoint\napp.post(\"/api/:eventId/logout\", async c => {\n clearSessionCookie(c);\n return c.json({ success: true });\n});\n\n// Get event details (session protected)\napp.get(\"/api/:eventId/details\", authMiddleware, async c => {\n const eventId = parseInt(c.req.param(\"eventId\"));\n \n try {\n // Verify access to this specific event\n if (!await verifyEventAccess(c, eventId)) {\n return c.json({ error: \"Unauthorized for this event\" }, 403);\n }\n \n // Get event\n const eventsResult = await sqlite.execute(\n `SELECT * FROM ${TABLES.EVENTS} WHERE id = ?`,\n [eventId]\n );\n \n const events = eventsResult.rows || eventsResult;\n if (events.length === 0) {\n return c.json({ error: \"Event not found\" }, 404);\n }\n \n const event = events[0];\n \n // Get counts\n const attendeeCountResult = await sqlite.execute(\n `SELECT COUNT(*) as count FROM ${TABLES.ATTENDEES} WHERE event_id = ?`,\n [eventId]\n );\n \n const checkedInCountResult = await sqlite.execute(\n `SELECT COUNT(*) as count FROM ${TABLES.CHECKINS} WHERE event_id = ?`,\n [eventId]\n );\n \n const attendeeCountRows = attendeeCountResult.rows || attendeeCountResult;\n const checkedInCountRows = checkedInCountResult.rows || checkedInCountResult;\n \n return c.json({\n event: {\n id: event.id,\n name: event.name,\n location: event.location,\n created_at: event.created_at\n },\n attendeeCount: attendeeCountRows[0].count,\n checkedInCount: checkedInCountRows[0].count\n });\n \n } catch (error) {\n console.error(`💥 [API] Error fetching event details:`, error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Get analytics (session protected)\napp.get(\"/api/:eventId/analytics\", authMiddleware, async c => {\n const eventId = parseInt(c.req.param(\"eventId\"));\n \n try {\n // Verify access to this specific event\n if (!await verifyEventAccess(c, eventId)) {\n return c.json({ error: \"Unauthorized for this event\" }, 403);\n }\n \n // Get total counts\n const totalAttendees = await sqlite.execute(\n `SELECT COUNT(*) as count FROM ${TABLES.ATTENDEES} WHERE event_id = ?`,\n [eventId]\n );\n \n const totalCheckedIn = await sqlite.execute(\n `SELECT COUNT(*) as count FROM ${TABLES.CHECKINS} WHERE event_id = ?`,\n [eventId]\n );\n \n // Get check-ins by date\n const checkInsByDate = await sqlite.execute(`\n SELECT DATE(checked_in_at) as date, COUNT(*) as count\n FROM ${TABLES.CHECKINS}\n WHERE event_id = ?\n GROUP BY DATE(checked_in_at)\n ORDER BY date\n `, [eventId]);\n \n // Get recent check-ins\n const recentCheckIns = await sqlite.execute(`\n SELECT a.name as attendee_name, c.checked_in_at\n FROM ${TABLES.CHECKINS} c\n JOIN ${TABLES.ATTENDEES} a ON c.attendee_id = a.id\n WHERE c.event_id = ?\n ORDER BY c.checked_in_at DESC\n LIMIT 10\n `, [eventId]);\n \n return c.json({\n totalAttendees: totalAttendees[0].count,\n totalCheckedIn: totalCheckedIn[0].count,\n checkInsByDate: checkInsByDate.map(row => ({\n date: row.date,\n count: row.count\n })),\n recentCheckIns: recentCheckIns.map(row => ({\n attendeeName: row.attendee_name,\n checkedInAt: row.checked_in_at\n }))\n });\n \n } catch (error) {\n console.error(`💥 [API] Error fetching analytics:`, error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Export check-in data as CSV (session protected)\napp.get(\"/api/:eventId/export\", authMiddleware, async c => {\n const eventId = parseInt(c.req.param(\"eventId\"));\n \n try {\n // Verify access to this specific event\n if (!await verifyEventAccess(c, eventId)) {\n return c.json({ error: \"Unauthorized for this event\" }, 403);\n }\n \n // Get event name\n const eventsResult = await sqlite.execute(\n `SELECT name FROM ${TABLES.EVENTS} WHERE id = ?`,\n [eventId]\n );\n \n const events = eventsResult.rows || eventsResult;\n if (events.length === 0) {\n return c.json({ error: \"Event not found\" }, 404);\n }\n \n // Get all attendees with check-in data\n const dataResult = await sqlite.execute(`\n SELECT a.name, a.external_id, c.checked_in_at\n FROM ${TABLES.ATTENDEES} a\n LEFT JOIN ${TABLES.CHECKINS} c ON a.id = c.attendee_id\n WHERE a.event_id = ?\n ORDER BY a.name\n `, [eventId]);\n \n const data = dataResult.rows || dataResult;\n \n // Generate CSV\n const csvRows = [\n 'Name,External ID,Checked In,Check-in Time'\n ];\n \n for (const row of data) {\n const checkedIn = row.checked_in_at ? 'Yes' : 'No';\n const checkInTime = row.checked_in_at || '';\n csvRows.push(`\"${row.name}\",\"${row.external_id || ''}\",\"${checkedIn}\",\"${checkInTime}\"`);\n }\n \n const csvContent = csvRows.join('\\n');\n const filename = `${events[0].name.replace(/[^a-zA-Z0-9]/g, '_')}_checkins.csv`;\n \n return new Response(csvContent, {\n headers: {\n 'Content-Type': 'text/csv',\n 'Content-Disposition': `attachment; filename=\"${filename}\"`\n }\n });\n \n } catch (error) {\n console.error(`💥 [API] Error exporting data:`, error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Add individual attendee to event (password protected)\napp.post(\"/api/events/:eventId/attendees\", async c => {\n const eventId = parseInt(c.req.param(\"eventId\"));\n \n try {\n const body = await c.req.json();\n const { password, name, external_id } = body;\n \n console.log(`🎯 [API] Add attendee request for event ${eventId}: ${name}`);\n \n if (!password) {\n return c.json({ error: \"Password required\" }, 401);\n }\n \n if (!name || !name.trim()) {\n return c.json({ error: \"Attendee name required\" }, 400);\n }\n \n // Verify event and password\n const events = await sqlite.execute(\n `SELECT password_hash FROM ${EVENTS_TABLE} WHERE id = ?`,\n [eventId]\n );\n \n if (events.length === 0) {\n return c.json({ error: \"Event not found\" }, 404);\n }\n \n if (!verifyPassword(password, events[0].password_hash)) {\n return c.json({ error: \"Invalid password\" }, 401);\n }\n \n // Check if attendee with same name already exists\n const existingAttendee = await sqlite.execute(\n `SELECT id FROM ${ATTENDEES_TABLE} WHERE event_id = ? AND LOWER(name) = LOWER(?)`,\n [eventId, name.trim()]\n );\n \n if (existingAttendee.length > 0) {\n return c.json({ error: \"An attendee with this name already exists\" }, 409);\n }\n \n // Add attendee\n const result = await sqlite.execute(\n `INSERT INTO ${ATTENDEES_TABLE} (event_id, name, external_id) VALUES (?, ?, ?)`,\n [eventId, name.trim(), external_id?.trim() || null]\n );\n \n const attendeeId = Number(result.lastInsertRowid);\n console.log(`✅ [API] Added attendee ${name} with ID: ${attendeeId}`);\n \n return c.json({\n success: true,\n attendee: {\n id: attendeeId,\n name: name.trim(),\n external_id: external_id?.trim() || null,\n event_id: eventId\n }\n });\n \n } catch (error) {\n console.error(`💥 [API] Error adding attendee:`, error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\nexport default app.fetch;",[],[362,353],"backend","55f4c0e2-5ddb-11f0-92bf-0224a6c84d84","database.ts","55f4c196-5ddb-11f0-92bf-0224a6c84d84",46,["D",1752185706974],"import { sqlite } from \"https://esm.town/v/stevekrouse/sqlite\";\n\n// Database table names - centralized source of truth\nexport const TABLES = {\n EVENTS: \"events_4\",\n ATTENDEES: \"attendees_4\", \n CHECKINS: \"checkins_4\",\n SESSIONS: \"sessions_2\"\n} as const;\n\n/**\n * Initialize all database tables with proper schema and migrations\n */\nexport async function initDatabase() {\n console.log(`💾 [DB] Initializing database tables`);\n \n // Events table - using unix timestamp as primary key\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${TABLES.EVENTS} (\n id INTEGER PRIMARY KEY,\n name TEXT NOT NULL,\n password_hash TEXT NOT NULL,\n location TEXT,\n allow_onsite_registration BOOLEAN DEFAULT 0,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n )`);\n \n // Attendees table\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${TABLES.ATTENDEES} (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n event_id INTEGER NOT NULL,\n name TEXT NOT NULL,\n external_id TEXT,\n FOREIGN KEY (event_id) REFERENCES ${TABLES.EVENTS}(id)\n )`);\n \n // Check-ins table\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${TABLES.CHECKINS} (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n event_id INTEGER NOT NULL,\n attendee_id INTEGER NOT NULL,\n checked_in_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n FOREIGN KEY (event_id) REFERENCES ${TABLES.EVENTS}(id),\n FOREIGN KEY (attendee_id) REFERENCES ${TABLES.ATTENDEES}(id)\n )`);\n \n // Sessions table for authentication\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${TABLES.SESSIONS} (\n id TEXT PRIMARY KEY,\n secret_hash TEXT NOT NULL,\n event_id INTEGER NOT NULL,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n FOREIGN KEY (event_id) REFERENCES ${TABLES.EVENTS}(id)\n )`);\n \n console.log(`✅ [DB] Database initialization complete`);\n}\n\n/**\n * Utility function to get table name with type safety\n */\nexport function getTableName(table: keyof typeof TABLES): string {\n return TABLES[table];\n}\n",[],[362,364],"c8255eb0-5ddb-11f0-8796-0224a6c84d84","auth.ts","b5630810-5dd4-11f0-a784-0224a6c84d84",53,["D",1752185898552],"import { sqlite } from \"https://esm.town/v/stevekrouse/sqlite\";\nimport { getCookie, setCookie, deleteCookie } from \"https://esm.sh/hono@3.11.7/cookie\";\nimport type { Context } from \"https://esm.sh/hono@3.11.7\";\nimport { TABLES } from \"./database.ts\";\n\n// Session configuration\nconst SESSION_EXPIRES_IN_SECONDS = 60 * 60 * 24 * 30; // 30 days\nconst SESSION_COOKIE_NAME = \"session_token\";\n\n// Database interfaces\ninterface Session {\n id: string;\n secretHash: Uint8Array;\n eventId: number;\n createdAt: Date;\n}\n\ninterface SessionWithToken extends Session {\n token: string;\n}\n\n// Note: Sessions table initialization moved to database.ts\n\n// Generate secure random string for session IDs and secrets\nfunction generateSecureRandomString(): string {\n const alphabet = \"abcdefghijklmnpqrstuvwxyz23456789\";\n const bytes = new Uint8Array(24);\n crypto.getRandomValues(bytes);\n \n let result = \"\";\n for (let i = 0; i < bytes.length; i++) {\n result += alphabet[bytes[i] >> 3];\n }\n return result;\n}\n\n// Hash secret using SHA-256\nasync function hashSecret(secret: string): Promise {\n const secretBytes = new TextEncoder().encode(secret);\n const secretHashBuffer = await crypto.subtle.digest(\"SHA-256\", secretBytes);\n return new Uint8Array(secretHashBuffer);\n}\n\n// Constant-time comparison for security\nfunction constantTimeEqual(a: Uint8Array, b: Uint8Array): boolean {\n if (a.byteLength !== b.byteLength) {\n return false;\n }\n let c = 0;\n for (let i = 0; i < a.byteLength; i++) {\n c |= a[i] ^ b[i];\n }\n return c === 0;\n}\n\n// Create a new session for event management\nexport async function createSession(eventId: number): Promise {\n const now = new Date();\n const sessionId = generateSecureRandomString();\n const sessionSecret = generateSecureRandomString();\n const secretHash = await hashSecret(sessionSecret);\n \n const token = `${sessionId}.${sessionSecret}`;\n \n const session: SessionWithToken = {\n id: sessionId,\n secretHash,\n eventId,\n createdAt: now,\n token\n };\n \n await sqlite.execute(\n `INSERT INTO ${TABLES.SESSIONS} (id, secret_hash, event_id, created_at) VALUES (?, ?, ?, ?)`,\n [sessionId, secretHash, eventId, Math.floor(now.getTime() / 1000)]\n );\n \n return session;\n}\n\n// Validate session token\nexport async function validateSessionToken(token: string): Promise {\n const tokenParts = token.split(\".\");\n if (tokenParts.length !== 2) {\n return null;\n }\n \n const [sessionId, sessionSecret] = tokenParts;\n \n try {\n const session = await getSession(sessionId);\n if (!session) {\n return null;\n }\n \n const tokenSecretHash = await hashSecret(sessionSecret);\n const validSecret = constantTimeEqual(tokenSecretHash, session.secretHash);\n \n if (!validSecret) {\n return null;\n }\n \n return session;\n } catch (error) {\n console.error(\"Error validating session token:\", error);\n return null;\n }\n}\n\n// Get session by ID\nasync function getSession(sessionId: string): Promise {\n const now = new Date();\n \n const result = await sqlite.execute(\n `SELECT id, secret_hash, event_id, created_at FROM ${TABLES.SESSIONS} WHERE id = ?`,\n [sessionId]\n );\n \n if (result.rows.length !== 1) {\n return null;\n }\n \n const row = result.rows[0];\n const session: Session = {\n id: row[0] as string,\n secretHash: new Uint8Array(row[1] as ArrayBuffer),\n eventId: row[2] as number,\n createdAt: new Date((row[3] as number) * 1000)\n };\n \n // Check expiration\n if (now.getTime() - session.createdAt.getTime() >= SESSION_EXPIRES_IN_SECONDS * 1000) {\n await deleteSession(sessionId);\n return null;\n }\n \n return session;\n}\n\n// Delete session\nexport async function deleteSession(sessionId: string): Promise {\n await sqlite.execute(`DELETE FROM ${TABLES.SESSIONS} WHERE id = ?`, [sessionId]);\n}\n\n// Set session cookie\nexport function setSessionCookie(c: Context, token: string): void {\n setCookie(c, SESSION_COOKIE_NAME, token, {\n maxAge: SESSION_EXPIRES_IN_SECONDS,\n httpOnly: true,\n secure: true,\n sameSite: 'Lax',\n path: '/'\n });\n}\n\n// Clear session cookie\nexport function clearSessionCookie(c: Context): void {\n deleteCookie(c, SESSION_COOKIE_NAME, {\n httpOnly: true,\n secure: true,\n sameSite: 'Lax',\n path: '/'\n });\n}\n\n// Get session from request\nexport async function getSessionFromRequest(c: Context): Promise {\n const token = getCookie(c, SESSION_COOKIE_NAME);\n if (!token) {\n return null;\n }\n \n return await validateSessionToken(token);\n}\n\n// Authentication middleware\nexport async function authMiddleware(c: Context, next: () => Promise) {\n const session = await getSessionFromRequest(c);\n \n if (!session) {\n return c.json({ error: \"Unauthorized\" }, 401);\n }\n \n // Store session in context for use in handlers\n c.set('session', session);\n await next();\n}\n\n// Verify event access (user has session for this specific event)\nexport async function verifyEventAccess(c: Context, eventId: number): Promise {\n const session = c.get('session') as Session;\n if (!session) {\n return false;\n }\n \n return session.eventId === eventId;\n}\n\n// CSRF protection - verify request origin\nexport function verifyRequestOrigin(c: Context): boolean {\n const method = c.req.method;\n if (method === \"GET\" || method === \"HEAD\") {\n return true;\n }\n \n const origin = c.req.header(\"origin\");\n const host = c.req.header(\"host\");\n \n if (!origin || !host) {\n return false;\n }\n \n // Allow same-origin requests\n return origin === `https://${host}` || origin === `http://${host}`;\n}\n\n// CSRF middleware\nexport async function csrfMiddleware(c: Context, next: () => Promise) {\n if (!verifyRequestOrigin(c)) {\n return c.json({ error: \"Forbidden\" }, 403);\n }\n \n await next();\n}\n",[],[362,372],"24f47172-5dcc-11f0-990d-0224a6c84d84",["D",1752179182252],[199,200,201],[362],"3e777542-5dcf-11f0-b3cc-0224a6c84d84","deploy.yml","3e77781c-5dcf-11f0-b3cc-0224a6c84d84","3e68e0cc-5dcf-11f0-b3cc-0224a6c84d84",12,["D",1752180513606],"name: Deploy to Val Town\n\non:\n push:\n branches: [ main ]\n\njobs:\n deploy:\n runs-on: ubuntu-latest\n environment: Deploy\n \n steps:\n - uses: actions/checkout@v4\n \n - name: Setup Deno\n uses: denoland/setup-deno@v2\n with:\n deno-version: v2.x\n \n - name: Install Val Town CLI\n run: deno install -grAf jsr:@valtown/vt\n \n - name: Deploy to Val Town\n run: vt push\n env:\n VAL_TOWN_API_KEY: ${{ secrets.VAL_TOWN_API_KEY }}\n",[],[392,393,384],".github","workflows","3e68e00e-5dcf-11f0-b3cc-0224a6c84d84","3e59e842-5dcf-11f0-a03f-0224a6c84d84",11,["D",1752180513510],[197],[392,393],"3e59e7ac-5dcf-11f0-a03f-0224a6c84d84",10,["D",1752180513412],[196],[392],["D",1752179182252],{"_11":12,"_142":81},{"_11":12,"_138":-5,"_80":81,"_31":79,"_139":140,"_141":30},{"_39":129,"_13":16,"_33":36,"_130":96,"_131":-5,"_132":-5,"_133":-5,"_134":-5,"_135":-5,"_136":14,"_137":12},"ctx",{"_52":-5,"_161":442,"_443":444,"_445":446,"_447":30,"_448":30,"_449":30,"_450":24,"_451":-5,"_452":-7,"_453":-7,"_454":26,"_455":30,"_456":30,"_457":-5,"_458":30,"_459":30,"_460":30,"_461":-5},"ENV",{"_413":414,"_415":416,"_417":16,"_418":419,"_420":421,"_422":423,"_424":425,"_426":427,"_428":429,"_430":431,"_432":433,"_434":435,"_436":437,"_438":439,"_440":441},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","5015b8df46402d8bba4f485ecc37aec202b0e06b","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · frontend