[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_368":369,"_370":371},"routes/_app.x.$handle.$name",{"_97":96,"_32":46,"_105":87,"_27":106,"_13":14,"_107":-5,"_11":108,"_109":110,"_111":112,"_113":114,"_115":116,"_20":-5,"_117":-5,"_118":-5,"_119":25,"_120":121,"_122":59,"_123":-5,"_124":-5,"_125":126},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_44":45,"_32":46,"_39":47,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":-5,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":59,"_61":-5,"_62":63,"_64":65,"_66":-5,"_67":-5,"_68":-5,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":80,"_81":82,"_83":84,"_85":25},"version",33,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":38,"_39":40,"_41":14,"_42":43,"_24":25},"previous",{"_30":31,"_32":33,"_34":35,"_36":37},"deleted",false,"deletedHere","path","frontend/components/App.tsx","latestPath","fileId","06c9fc59-0d9d-467a-873e-97706322b720","name","App.tsx","fileType","script","content","/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState, useEffect } from \"https://esm.sh/react@18.2.0\";\nimport EventCreation from \"./EventCreation.tsx\";\nimport EventSignIn from \"./EventSignIn.tsx\";\nimport EventManagement from \"./EventManagement.tsx\";\nimport EventLinks from \"./EventLinks.tsx\";\n\n// Simple client-side routing based on URL path\nfunction useRouter() {\n const [path, setPath] = useState(window.location.pathname);\n \n useEffect(() => {\n const handlePopState = () => setPath(window.location.pathname);\n window.addEventListener('popstate', handlePopState);\n return () => window.removeEventListener('popstate', handlePopState);\n }, []);\n \n const navigate = (newPath: string) => {\n window.history.pushState({}, '', newPath);\n setPath(newPath);\n };\n \n return { path, navigate };\n}\n\nexport default function App() {\n const { path, navigate } = useRouter();\n \n // Parse route parameters\n const getEventId = () => {\n const match = path.match(/\\/events\\/(\\d+)/);\n return match ? parseInt(match[1]) : null;\n };\n \n const renderPage = () => {\n if (path === '/' || path === '/events/new') {\n return navigate(`/events/${eventId}`)} />;\n }\n \n if (path.includes('/signin')) {\n const eventId = getEventId();\n if (!eventId) return

Invalid event ID

;\n return ;\n }\n \n if (path.includes('/manage')) {\n const eventId = getEventId();\n if (!eventId) return

Invalid event ID

;\n return ;\n }\n \n if (path.match(/^\\/events\\/\\d+$/)) {\n const eventId = getEventId();\n if (!eventId) return

Invalid event ID

;\n return ;\n }\n \n return

Page not found

;\n };\n\n return (\n <>\n \n \n \n \n \n \n

\n {renderPage()}\n

\n \n );\n}","/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState, useEffect } from \"https://esm.sh/react@18.2.0\";\nimport EventCreation from \"./EventCreation.tsx\";\nimport EventSignIn from \"./EventSignIn.tsx\";\nimport EventManagement from \"./EventManagement.tsx\";\nimport EventLinks from \"./EventLinks.tsx\";\n\n// Simple client-side routing based on URL path\nfunction useRouter() {\n const [path, setPath] = useState(window.location.pathname);\n \n useEffect(() => {\n const handlePopState = () => setPath(window.location.pathname);\n window.addEventListener('popstate', handlePopState);\n return () => window.removeEventListener('popstate', handlePopState);\n }, []);\n \n const navigate = (newPath: string) => {\n window.history.pushState({}, '', newPath);\n setPath(newPath);\n };\n \n return { path, navigate };\n}\n\nexport default function App() {\n const { path, navigate } = useRouter();\n \n // Parse route parameters\n const getEventId = () => {\n const match = path.match(/^\\/(\\d+)/);\n return match ? parseInt(match[1]) : null;\n };\n \n const renderPage = () => {\n if (path === '/' || path === '/new') {\n return navigate(`/${eventId}`)} />;\n }\n \n if (path.includes('/signin')) {\n const eventId = getEventId();\n if (!eventId) return

Invalid event ID

;\n return ;\n }\n \n if (path.includes('/manage')) {\n const eventId = getEventId();\n if (!eventId) return

Invalid event ID

;\n return ;\n }\n \n if (path.match(/^\\/\\d+$/)) {\n const eventId = getEventId();\n if (!eventId) return

Invalid event ID

;\n return ;\n }\n \n return

Page not found

;\n };\n\n return (\n <>\n \n \n \n \n \n \n

\n {renderPage()}\n

\n \n );\n}","createdAt",["D",1752183089774],"branchVersion","branchId","24ee5ca6-5dcc-11f0-990d-0224a6c84d84","id","24ebbe74-5dcc-11f0-990d-0224a6c84d84","rust-nyc-event-signin",["D",1752179182252],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","c821e8f7-4cc4-4c23-96f1-319b8f33d4b7","pinnedFileId","bf0d74d5-88e6-41c6-8cbc-04803a89034b","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","6b193d60-e165-45a9-869c-c3f886455f3e","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_97":96,"_104":100},"org",{"_97":96,"_98":-5,"_99":100,"_18":55,"_101":102,"_103":25},"branch",{"_13":86,"_32":87,"_44":43,"_88":45,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":46,"_95":96},"isOwned",60,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","colel","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvdXBsb2FkZWQvaW1nXzJ6RVZCOExVNXBIT3FrVDh5a0VZQTNRRG5ycCJ9","tier","pro","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_44":45,"_32":46,"_39":364,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":-5,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":59,"_61":-5,"_62":63,"_64":65,"_66":-5,"_67":-5,"_68":-5,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":365,"_81":366,"_83":367,"_85":25},"tree",[213,216,219,228,230,231,232,233,234,235],"files",[213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235],"counts",{"_203":63,"_204":142,"_205":63,"_206":207,"_208":209},"contents",[128,129,130,131,132,133,134,135,136,137],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{"_57":127},"checkin.rustcoasts.com",{"_44":197,"_32":198,"_30":199,"_141":-5,"_42":43,"_41":200,"_143":59,"_39":201,"_13":63,"_34":185,"_36":-5,"_24":25,"_145":-5,"_27":202},{"_44":192,"_32":193,"_30":194,"_141":-5,"_42":43,"_41":142,"_143":59,"_39":195,"_13":63,"_34":185,"_36":-5,"_24":25,"_145":-5,"_27":196},{"_44":187,"_32":188,"_30":189,"_141":-5,"_42":43,"_41":142,"_143":59,"_39":190,"_13":63,"_34":185,"_36":-5,"_24":25,"_145":-5,"_27":191},{"_44":181,"_32":182,"_30":183,"_141":-5,"_42":43,"_41":142,"_143":59,"_39":184,"_13":63,"_34":185,"_36":-5,"_24":25,"_145":-5,"_27":186},{"_44":175,"_32":176,"_30":177,"_141":-5,"_42":43,"_41":142,"_143":59,"_39":178,"_13":63,"_34":20,"_36":179,"_24":25,"_145":-5,"_27":180},{"_44":168,"_32":169,"_30":170,"_141":-5,"_42":43,"_41":171,"_143":25,"_39":172,"_13":142,"_34":20,"_36":173,"_24":25,"_145":-5,"_27":174},{"_44":161,"_32":162,"_30":163,"_141":-5,"_42":43,"_41":164,"_143":59,"_39":165,"_13":142,"_34":20,"_36":166,"_24":25,"_145":-5,"_27":167},{"_44":153,"_32":154,"_30":155,"_141":-5,"_42":43,"_41":156,"_143":25,"_39":157,"_13":158,"_34":20,"_36":159,"_24":25,"_145":-5,"_27":160},{"_44":147,"_32":148,"_30":149,"_141":-5,"_42":43,"_41":142,"_143":59,"_39":150,"_13":63,"_34":20,"_36":151,"_24":25,"_145":-5,"_27":152},{"_44":138,"_32":139,"_30":140,"_141":-5,"_42":43,"_41":142,"_143":59,"_39":144,"_13":63,"_34":35,"_36":106,"_24":25,"_145":-5,"_27":146},"24f4a624-5dcc-11f0-990d-0224a6c84d84","main.tsx","e023ccd1-1f70-4b8e-95a2-f4cee096c24a","parentId",1,"latest",["D",1752179182252],"label",[139],"24f4a390-5dcc-11f0-990d-0224a6c84d84","deno.json","79824279-2b5e-4e34-91ae-01f282ccb99a",["D",1752179182252],"{\n \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/348900b8b79f4a434cab4c74b3bc8d4d2fa8ee74/cli/schemas/config-file.v1.json\",\n \"lock\": false,\n \"compilerOptions\": {\n \"noImplicitAny\": false,\n \"strict\": false,\n \"types\": [\n \"https://www.val.town/types/valtown.d.ts\"\n ],\n \"lib\": [\n \"dom\",\n \"dom.iterable\",\n \"dom.asynciterable\",\n \"deno.ns\",\n \"deno.unstable\"\n ]\n },\n \"lint\": {\n \"files\": {\n \"include\": [\n \"deno:/https/esm.town/**/*\"\n ]\n },\n \"rules\": {\n \"exclude\": [\n \"no-explicit-any\"\n ]\n }\n },\n \"node_modules_dir\": false,\n \"experimental\": {\n \"unstable-node-globals\": true,\n \"unstable-temporal\": true,\n \"unstable-worker-options\": true,\n \"unstable-sloppy-imports\": true\n }\n}",[148],"a94676ae-5dcd-11f0-9a05-0224a6c84d84","README.md","42873017-f980-4b1a-888b-d23c1db6f951",5,["D",1752179833802],4,"# Event Check-in System\n\nA complete event check-in system for managing attendee sign-ins with secure name verification.\n\n## Features\n\n- **Event Management**: Create events with attendee lists and password protection\n- **Secure Check-in**: Fuzzy search-based sign-in with name verification\n- **Analytics Dashboard**: Track check-ins with date-based analytics\n- **CSV Import/Export**: Import attendee lists and export check-in data\n- **Responsive UI**: Clean, modern interface built with React and TailwindCSS\n\n## How It Works\n\n1. **Event Creation**: Organizers create events with attendee lists via CSV upload\n2. **Attendee Sign-in**: Attendees use fuzzy search to find and check in with their names\n3. **Data Tracking**: System tracks all check-ins with timestamps\n4. **Analytics**: Organizers can view check-in analytics and export data\n5. **Security**: No sensitive information exposed, password-protected management\n\n## Project Structure\n\n```\n├── backend/\n│ └── index.ts # Main API server with Hono\n├── frontend/\n│ ├── index.html # Main HTML template\n│ ├── index.tsx # React app entry point\n│ └── components/\n│ ├── App.tsx # Main app component\n│ ├── EventSignIn.tsx # Sign-in component with fuzzy search\n│ ├── EventManagement.tsx # Management dashboard\n│ └── EventCreation.tsx # Event creation form\n├── shared/\n│ └── types.ts # Shared TypeScript types\n└── README.md\n```\n\n## Setup\n\n### Environment Variables\n\nNo external API keys required for basic functionality. Optional Discord integration available for future features.\n\n### Database\n\nThe system uses SQLite with the following schema:\n\n```sql\n-- Events table\nCREATE TABLE events_1 (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n password_hash TEXT NOT NULL,\n location TEXT,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n);\n\n-- Attendees table \nCREATE TABLE attendees_1 (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n event_id INTEGER NOT NULL,\n name TEXT NOT NULL,\n external_id TEXT,\n FOREIGN KEY (event_id) REFERENCES events_1(id)\n);\n\n-- Check-ins table\nCREATE TABLE checkins_1 (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n event_id INTEGER NOT NULL,\n attendee_id INTEGER NOT NULL,\n checked_in_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n FOREIGN KEY (event_id) REFERENCES events_1(id),\n FOREIGN KEY (attendee_id) REFERENCES attendees_1(id)\n);\n```\n\n## API Endpoints\n\n- `POST /api/events` - Create a new event\n- `GET /api/events/:eventId` - Get event details (password protected)\n- `POST /api/events/:eventId/signin` - Sign in to an event\n- `GET /api/events/:eventId/attendees` - Get attendee list for sign-in (names only)\n- `GET /api/events/:eventId/analytics` - Get check-in analytics (password protected)\n- `GET /api/events/:eventId/export` - Export check-in data as CSV (password protected)\n\n## Routes\n\n- `/` - Home page with event creation\n- `/events/new` - Event creation form\n- `/events/:eventId/signin` - Event sign-in page\n- `/events/:eventId/manage` - Event management dashboard (password protected)\n\n## Usage\n\n### Creating an Event\n1. Navigate to the event creation page\n2. Enter event name, password, and location\n3. Upload a CSV file with attendee names\n4. System will parse the CSV and create the event\n\n### Attendee Sign-in\n1. Navigate to the event sign-in page\n2. Use fuzzy search to find your name\n3. Click to sign in\n4. Confirmation displayed\n\n### Event Management\n1. Navigate to the management page\n2. Enter event password\n3. View analytics and export data\n\n## CSV Format\n\nThe system accepts flexible CSV formats with attendee names. Common column headers recognized:\n- `name`, `Name`, `NAME`\n- `full_name`, `Full Name`, `FULL_NAME`\n- `first_name` + `last_name` (will be combined)\n- `given_name` + `family_name` (will be combined)\n\nAdditional columns like `id`, `email`, etc. are preserved but not displayed to attendees.\n\n## Tech Stack\n\n- **Backend**: Hono (API framework)\n- **Frontend**: React 18.2.0 with TypeScript\n- **Database**: SQLite\n- **Styling**: TailwindCSS\n- **Platform**: Val Town (Deno runtime)",[154],"f038ccde-5dd1-11f0-9064-0224a6c84d84","BRAND_STYLE_GUIDE.md","f62e1973-51a2-4b2d-8b12-9f0b8f854b28",18,["D",1752181670818],"# Brand Style Guide\n## Rust NYC Discord Bot - Talk Submission System\n\n### Overview\nA nostalgic minimal, slightly technical theme that evokes the feeling of early computing interfaces while maintaining modern usability and accessibility.\n\n### Typography\n- **Headings**: Instrument Serif (Google Web Fonts) - Elegant, slightly humanistic serif for warmth\n- **Body Text**: System monospace stack for technical authenticity\n- **Code/Data**: Monospace for technical content and data display\n\n### Color Palette\n```\n// Primary - Muted technical grays and warm accents\n--bg-primary: #f8f9fa // Soft off-white background\n--bg-secondary: #e9ecef // Subtle gray for cards\n--bg-tertiary: #dee2e6 // Light gray for inputs\n\n--text-primary: #2d3748 // Dark gray for primary text\n--text-secondary: #4a5568 // Medium gray for secondary text\n--text-muted: #718096 // Light gray for muted text\n\n--accent-primary: #d69e2e // Warm amber for primary actions\n--accent-secondary: #b7791f // Darker amber for hover states\n--accent-subtle: #faf089 // Light amber for subtle highlights\n\n--border-default: #cbd5e0 // Default border color\n--border-focus: #d69e2e // Amber focus borders\n\n// Status colors\n--success: #38a169 // Muted green\n--error: #e53e3e // Muted red\n--warning: #dd6b20 // Muted orange\n--info: #3182ce // Muted blue\n```\n\n### Layout & Spacing\n- **Container**: Max-width 480px for mobile-first, intimate feel\n- **Spacing Scale**: 4px base unit (4, 8, 12, 16, 24, 32, 48, 64)\n- **Border Radius**: 4px for subtle roundness\n- **Borders**: 1px solid borders throughout\n\n### Components\n\n#### Cards\n- Background: `--bg-secondary`\n- Border: 1px solid `--border-default`\n- Padding: 24px\n- Border radius: 4px\n- Subtle drop shadow\n\n#### Forms\n- Input borders: 1px solid `--border-default`\n- Focus state: 2px solid `--accent-primary`\n- Monospace font for consistency\n- Generous padding (12px)\n\n#### Buttons\n- Primary: `--accent-primary` background, `--text-primary` (dark) text\n- Secondary: `--bg-tertiary` background, `--text-primary` (dark) text\n- Padding: 12px 24px\n- Border radius: 4px\n- Monospace font\n- **Critical**: Never use white text on amber backgrounds - poor contrast and accessibility\n\n#### Typography Scale\n- H1: 24px / text-2xl (primary headings)\n- H2: 20px / text-xl (section headings) \n- H3: 18px / text-lg (subsection headings)\n- Body: 14px / text-sm (main content)\n- Small: 12px / text-xs (captions, metadata)\n\n**Important**: All headings using Instrument Serif (.font-heading) must be sized at text-2xl (24px) or larger to ensure proper readability and visual hierarchy. The serif font performs best at larger sizes and maintains the technical aesthetic when prominently displayed.\n\n### Design Principles\n1. **Functional Beauty**: Every element serves a purpose\n2. **Technical Authenticity**: Embrace monospace and structured layouts\n3. **Nostalgic Warmth**: Subtle amber accents and serif headings\n4. **Accessibility First**: High contrast, clear focus states\n5. **Mobile Responsive**: Single-column layouts, touch-friendly sizing\n\n### Implementation Notes\n- Use CSS custom properties for consistency\n- Maintain semantic HTML structure\n- Progressive enhancement approach\n- Dark mode consideration for future iterations\n",[162],"4449abfc-5dcf-11f0-8f09-0224a6c84d84","AGENT.md","5c0f5147-120c-4773-8a71-12c12610be9d",13,["D",1752180523368],"# Agent Configuration for Event Check-In System\n\n## Commands\n- **No explicit test/lint commands** - Val Town platform handles these automatically\n- **Development**: Val Town auto-deploys on changes, no local build needed\n- **Database**: SQLite migrations run automatically on startup in backend/index.ts\n\n## Architecture\n- **Val Town Project**: Deno-based event check-in system with React frontend\n- **Backend**: Hono API server (backend/index.ts) handling event management and check-ins\n- **Frontend**: React 18.2.0 with TypeScript (frontend/index.tsx, components/)\n- **Database**: SQLite with events_1, attendees_1, and checkins_1 tables\n- **Features**: Password-protected event creation, CSV attendee upload, fuzzy search, analytics\n- **Shared**: TypeScript types and utilities (shared/types.ts)\n\n## Core Functionality\n- **Event Management**: Create events with attendee lists via CSV upload\n- **Check-In Process**: Attendees find their name using fuzzy search and check in with one click\n- **Analytics**: Track check-in rates, date-based charts, export data as CSV\n- **Security**: Password protection for event management, multiple check-in tracking\n\n## Code Style (from .cursorrules)\n- **Language**: TypeScript/TSX with React 18.2.0\n- **Imports**: Use `https://esm.sh` for npm packages, pin React to 18.2.0\n- **Types**: Add TypeScript types for all data structures\n- **Secrets**: Always use environment variables, never hardcode secrets\n- **JSX**: Start React files with `/** @jsxImportSource https://esm.sh/react@18.2.0 */`\n- **Styling**: Default to TailwindCSS via CDN script tag\n- **Error Handling**: Let errors bubble up with context, avoid empty catch blocks\n- **Database**: Change table names (e.g., _3, _4) when modifying schemas instead of ALTER TABLE\n- **Platform**: Use Val Town utils for file operations (readFile, serveFile)\n",[169],"24f49468-5dcc-11f0-990d-0224a6c84d84",".vtignore","901592b5-6995-4c7d-9998-1a9a3494fa4f",["D",1752179182252],".git\n.vscode\n.cursorrules\n.DS_Store\nnode_modules\nvendor",[176],"24f4917a-5dcc-11f0-990d-0224a6c84d84","shared","249162fd-4a26-4e4e-9a16-3b2196631f7f",["D",1752179182252],"directory",[182],"24f48d6a-5dcc-11f0-990d-0224a6c84d84","frontend","f7c3a099-146d-441e-9d3b-936fecd56523",["D",1752179182252],[188],"24f47172-5dcc-11f0-990d-0224a6c84d84","backend","ab3f0ddd-bf40-418f-aee1-1e6f03b7f261",["D",1752179182252],[193],"3e59e7ac-5dcf-11f0-a03f-0224a6c84d84",".github","3e59e842-5dcf-11f0-a03f-0224a6c84d84",10,["D",1752180513412],[198],"pulls","branches","forks","envVars",{"_210":63,"_212":63},"connections",{"_210":63,"_211":63},"count","unfilledCount","emptyCount",{"_44":197,"_32":198,"_30":199,"_141":-5,"_42":43,"_41":200,"_143":59,"_39":361,"_13":63,"_34":185,"_36":-5,"_24":25,"_145":-5,"_237":362,"_27":363},{"_44":356,"_32":355,"_30":349,"_141":199,"_42":43,"_41":357,"_143":59,"_39":358,"_13":63,"_34":185,"_36":-5,"_24":25,"_145":-5,"_237":359,"_27":360},{"_44":346,"_32":347,"_30":348,"_141":349,"_42":43,"_41":350,"_143":59,"_39":351,"_13":63,"_34":20,"_36":352,"_24":25,"_145":-5,"_237":353,"_27":354},{"_44":192,"_32":193,"_30":194,"_141":-5,"_42":43,"_41":142,"_143":59,"_39":343,"_13":63,"_34":185,"_36":-5,"_24":25,"_145":-5,"_237":344,"_27":345},{"_44":335,"_32":336,"_30":337,"_141":194,"_42":43,"_41":338,"_143":25,"_39":339,"_13":63,"_34":35,"_36":340,"_24":25,"_145":-5,"_237":341,"_27":342},{"_44":327,"_32":328,"_30":57,"_141":194,"_42":43,"_41":329,"_143":25,"_39":330,"_13":258,"_34":331,"_36":332,"_24":25,"_145":-5,"_237":333,"_27":334},{"_44":187,"_32":188,"_30":189,"_141":-5,"_42":43,"_41":142,"_143":59,"_39":324,"_13":63,"_34":185,"_36":-5,"_24":25,"_145":-5,"_237":325,"_27":326},{"_44":320,"_32":290,"_30":283,"_141":189,"_42":43,"_41":142,"_143":59,"_39":321,"_13":63,"_34":185,"_36":-5,"_24":25,"_145":-5,"_237":322,"_27":323},{"_44":315,"_32":33,"_30":31,"_141":283,"_42":43,"_41":14,"_143":25,"_39":316,"_13":317,"_34":35,"_36":38,"_24":25,"_145":-5,"_237":318,"_27":319},{"_44":307,"_32":308,"_30":309,"_141":283,"_42":43,"_41":310,"_143":25,"_39":311,"_13":142,"_34":35,"_36":312,"_24":25,"_145":-5,"_237":313,"_27":314},{"_44":299,"_32":300,"_30":301,"_141":283,"_42":43,"_41":302,"_143":59,"_39":303,"_13":142,"_34":35,"_36":304,"_24":25,"_145":-5,"_237":305,"_27":306},{"_44":291,"_32":292,"_30":293,"_141":283,"_42":43,"_41":294,"_143":25,"_39":295,"_13":286,"_34":35,"_36":296,"_24":25,"_145":-5,"_237":297,"_27":298},{"_44":280,"_32":281,"_30":282,"_141":283,"_42":43,"_41":284,"_143":25,"_39":285,"_13":286,"_34":35,"_36":287,"_24":25,"_145":-5,"_237":288,"_27":289},{"_44":273,"_32":274,"_30":275,"_141":189,"_42":43,"_41":142,"_143":59,"_39":276,"_13":63,"_34":20,"_36":277,"_24":25,"_145":-5,"_237":278,"_27":279},{"_44":266,"_32":267,"_30":268,"_141":189,"_42":43,"_41":142,"_143":59,"_39":269,"_13":63,"_34":35,"_36":270,"_24":25,"_145":-5,"_237":271,"_27":272},{"_44":181,"_32":182,"_30":183,"_141":-5,"_42":43,"_41":142,"_143":59,"_39":263,"_13":63,"_34":185,"_36":-5,"_24":25,"_145":-5,"_237":264,"_27":265},{"_44":255,"_32":256,"_30":257,"_141":183,"_42":43,"_41":258,"_143":25,"_39":259,"_13":142,"_34":35,"_36":260,"_24":25,"_145":-5,"_237":261,"_27":262},{"_44":175,"_32":176,"_30":177,"_141":-5,"_42":43,"_41":142,"_143":59,"_39":252,"_13":63,"_34":20,"_36":179,"_24":25,"_145":-5,"_237":253,"_27":254},{"_44":168,"_32":169,"_30":170,"_141":-5,"_42":43,"_41":171,"_143":25,"_39":249,"_13":142,"_34":20,"_36":173,"_24":25,"_145":-5,"_237":250,"_27":251},{"_44":161,"_32":162,"_30":163,"_141":-5,"_42":43,"_41":164,"_143":59,"_39":246,"_13":142,"_34":20,"_36":166,"_24":25,"_145":-5,"_237":247,"_27":248},{"_44":153,"_32":154,"_30":155,"_141":-5,"_42":43,"_41":156,"_143":25,"_39":243,"_13":158,"_34":20,"_36":159,"_24":25,"_145":-5,"_237":244,"_27":245},{"_44":147,"_32":148,"_30":149,"_141":-5,"_42":43,"_41":142,"_143":59,"_39":240,"_13":63,"_34":20,"_36":151,"_24":25,"_145":-5,"_237":241,"_27":242},{"_44":138,"_32":139,"_30":140,"_141":-5,"_42":43,"_41":142,"_143":59,"_39":236,"_13":63,"_34":35,"_36":106,"_24":25,"_145":-5,"_237":238,"_27":239},["D",1752179182252],"children",[],[139],["D",1752179182252],[],[148],["D",1752179833802],[],[154],["D",1752181670818],[],[162],["D",1752180523368],[],[169],["D",1752179182252],[],[176],"b4b9f132-5dcd-11f0-89d0-0224a6c84d84","types.ts","41854f24-ad93-4263-a021-d118e1a48743",6,["D",1752179853012],"// Event-related types\nexport interface Event {\n id: number;\n name: string;\n password_hash: string;\n location?: string;\n created_at: string;\n}\n\nexport interface Attendee {\n id: number;\n event_id: number;\n name: string;\n external_id?: string;\n}\n\nexport interface CheckIn {\n id: number;\n event_id: number;\n attendee_id: number;\n checked_in_at: string;\n}\n\n// API request/response types\nexport interface CreateEventRequest {\n name: string;\n password: string;\n location?: string;\n attendees: AttendeeData[];\n}\n\nexport interface AttendeeData {\n name: string;\n external_id?: string;\n}\n\nexport interface CreateEventResponse {\n success: boolean;\n eventId: number;\n}\n\nexport interface SignInRequest {\n attendeeId: number;\n}\n\nexport interface SignInResponse {\n success: boolean;\n attendeeName: string;\n alreadySignedIn?: boolean;\n // TODO: Consider tracking multiple sign-in attempts for security\n // previousSignIns?: CheckIn[];\n}\n\nexport interface EventDetailsResponse {\n event: Event;\n attendeeCount: number;\n checkedInCount: number;\n}\n\nexport interface AttendeeListResponse {\n attendees: Array<{\n id: number;\n name: string;\n checkedIn: boolean;\n }>;\n}\n\nexport interface AnalyticsResponse {\n totalAttendees: number;\n totalCheckedIn: number;\n checkInsByDate: Array<{\n date: string;\n count: number;\n }>;\n recentCheckIns: Array<{\n attendeeName: string;\n checkedInAt: string;\n }>;\n}\n\n// CSV parsing utility types\nexport interface CSVParseResult {\n attendees: AttendeeData[];\n errors: string[];\n totalRows: number;\n validRows: number;\n}",[],[182,256],["D",1752179182252],[229],[182],"24f48bd0-5dcc-11f0-990d-0224a6c84d84","index.tsx","4bc6335a-40c8-456a-9d1d-3d563a8d6076",["D",1752179182252],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React from \"https://esm.sh/react@18.2.0\";\nimport { createRoot } from \"https://esm.sh/react-dom@18.2.0/client\";\nimport App from \"./components/App.tsx\";\n\nconst root = createRoot(document.getElementById(\"root\")!);\nroot.render();",[],[188,267],"24f489e6-5dcc-11f0-990d-0224a6c84d84","index.html","61e9c2f8-0042-4c00-8701-c41167df44b0",["D",1752179182252],"\n\n\n \n \n Talk Submission Form\n \n \n\n\n

\n \n\n",[],[188,274],"3e073bf0-5dd5-11f0-85a4-0224a6c84d84","EventSignIn.tsx","2b067d86-5dd0-11f0-bb26-0224a6c84d84","793e3aa2-3ca0-43b9-b9ef-e70d5ec5db87",32,["D",1752183089773],2,"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState, useEffect } from \"https://esm.sh/react@18.2.0\";\nimport type { AttendeeListResponse, SignInRequest, SignInResponse } from \"../../shared/types.ts\";\n\ninterface EventSignInProps {\n eventId: number;\n}\n\nexport default function EventSignIn({ eventId }: EventSignInProps) {\n const [attendees, setAttendees] = useState([]);\n const [searchTerm, setSearchTerm] = useState('');\n const [loading, setLoading] = useState(true);\n const [error, setError] = useState(null);\n const [signInResult, setSignInResult] = useState(null);\n const [isSigningIn, setIsSigningIn] = useState(false);\n\n useEffect(() => {\n loadAttendees();\n }, [eventId]);\n\n const loadAttendees = async () => {\n try {\n const response = await fetch(`/api/${eventId}/attendees`);\n if (!response.ok) throw new Error('Failed to load attendees');\n const data: AttendeeListResponse = await response.json();\n setAttendees(data.attendees);\n } catch (err) {\n setError(err instanceof Error ? err.message : 'Failed to load attendees');\n } finally {\n setLoading(false);\n }\n };\n\n const handleSignIn = async (attendeeId: number) => {\n setIsSigningIn(true);\n setSignInResult(null);\n \n try {\n const response = await fetch(`/api/${eventId}/signin`, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({ attendeeId } as SignInRequest)\n });\n \n if (!response.ok) throw new Error('Failed to sign in');\n \n const result: SignInResponse = await response.json();\n setSignInResult(result);\n \n // Refresh attendees to show updated status\n await loadAttendees();\n \n // Clear search after successful sign-in\n setSearchTerm('');\n } catch (err) {\n setError(err instanceof Error ? err.message : 'Failed to sign in');\n } finally {\n setIsSigningIn(false);\n }\n };\n\n // Simple fuzzy search\n const filteredAttendees = attendees.filter(attendee =>\n attendee.name.toLowerCase().includes(searchTerm.toLowerCase())\n );\n\n if (loading) {\n return (\n

Loading attendees...

\n );\n }\n\n if (error) {\n return (\n

{error}

\n { setError(null); loadAttendees(); }}\n className=\"px-4 py-2 bg-[var(--accent-primary)] text-[var(--text-primary)] font-mono rounded hover:bg-[var(--accent-secondary)]\"\n >\n Try Again\n \n

\n );\n }\n\n return (\n

\n Event Check-In\n

\n\n {signInResult && (\n

\n {signInResult.success ? (\n <>\n

\n ✓ Welcome, {signInResult.attendeeName}!\n

\n {signInResult.alreadySignedIn && (\n

\n Note: You were already signed in, but we've recorded this check-in too.\n

\n )}\n \n ) : (\n

Failed to sign in. Please try again.

\n )}\n

\n )}\n\n

\n setSearchTerm(e.target.value)}\n className=\"w-full p-3 border border-[var(--border-default)] rounded-lg focus:outline-none focus:border-[var(--border-focus)]\"\n />\n

\n\n

\n {filteredAttendees.length === 0 ? (\n

\n {searchTerm ? 'No attendees found matching your search.' : 'No attendees found.'}\n

\n ) : (\n filteredAttendees.map(attendee => (\n \n

\n {attendee.name}\n

\n {attendee.checkedIn && (\n ✓ Already checked in\n )}\n

\n \n handleSignIn(attendee.id)}\n disabled={isSigningIn}\n className={`px-6 py-2 rounded-lg font-medium transition-colors ${\n attendee.checkedIn\n ? 'bg-[var(--bg-secondary)] text-[var(--text-muted)] hover:bg-[var(--bg-tertiary)]'\n : 'bg-[var(--accent-primary)] text-[var(--text-primary)] hover:bg-[var(--accent-secondary)]'\n } ${isSigningIn ? 'opacity-50 cursor-not-allowed' : ''}`}\n >\n {isSigningIn ? 'Signing In...' : attendee.checkedIn ? 'Check In Again' : 'Check In'}\n \n

\n ))\n )}\n

\n \n );\n}\n",[],[188,290,281],"components","b56b8e86-5dd4-11f0-80ab-0224a6c84d84","EventManagement.tsx","2af5fd3a-5dd0-11f0-b134-0224a6c84d84",29,["D",1752182860623],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState, useEffect } from \"https://esm.sh/react@18.2.0\";\nimport type { EventDetailsResponse, AttendeeListResponse, AnalyticsResponse } from \"../../shared/types.ts\";\n\ninterface EventManagementProps {\n eventId: number;\n}\n\nexport default function EventManagement({ eventId }: EventManagementProps) {\n const [eventDetails, setEventDetails] = useState(null);\n const [attendees, setAttendees] = useState([]);\n const [analytics, setAnalytics] = useState(null);\n const [activeTab, setActiveTab] = useState<'overview' | 'attendees' | 'analytics'>('overview');\n const [loading, setLoading] = useState(true);\n const [error, setError] = useState(null);\n const [password, setPassword] = useState('');\n const [isAuthenticated, setIsAuthenticated] = useState(false);\n\n useEffect(() => {\n // Check if we're already authenticated via session\n checkAuthentication();\n }, [eventId]);\n\n useEffect(() => {\n if (isAuthenticated) {\n loadData();\n }\n }, [eventId, isAuthenticated]);\n\n const checkAuthentication = async () => {\n try {\n const response = await fetch(`/api/events/${eventId}/details`);\n if (response.ok) {\n setIsAuthenticated(true);\n }\n } catch (err) {\n // Not authenticated, stay on login form\n }\n };\n\n const authenticate = async () => {\n try {\n const response = await fetch(`/api/events/${eventId}/auth`, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({ password })\n });\n \n if (response.ok) {\n setIsAuthenticated(true);\n setPassword('');\n } else {\n setError('Invalid password');\n }\n } catch (err) {\n setError('Authentication failed');\n }\n };\n\n const loadData = async () => {\n try {\n setLoading(true);\n const [detailsRes, attendeesRes, analyticsRes] = await Promise.all([\n fetch(`/api/events/${eventId}/details`),\n fetch(`/api/events/${eventId}/attendees`),\n fetch(`/api/events/${eventId}/analytics`)\n ]);\n\n if (!detailsRes.ok || !attendeesRes.ok || !analyticsRes.ok) {\n throw new Error('Failed to load event data');\n }\n\n const [details, attendeesList, analyticsData] = await Promise.all([\n detailsRes.json() as Promise,\n attendeesRes.json() as Promise,\n analyticsRes.json() as Promise\n ]);\n\n setEventDetails(details);\n setAttendees(attendeesList.attendees);\n setAnalytics(analyticsData);\n } catch (err) {\n setError(err instanceof Error ? err.message : 'Failed to load data');\n } finally {\n setLoading(false);\n }\n };\n\n const exportCSV = async () => {\n try {\n const response = await fetch(`/api/events/${eventId}/export`);\n if (!response.ok) throw new Error('Failed to export data');\n \n const blob = await response.blob();\n const url = window.URL.createObjectURL(blob);\n const a = document.createElement('a');\n a.href = url;\n a.download = `event-${eventId}-checkins.csv`;\n document.body.appendChild(a);\n a.click();\n document.body.removeChild(a);\n window.URL.revokeObjectURL(url);\n } catch (err) {\n setError('Failed to export data');\n }\n };\n\n const getSignInUrl = () => {\n return `${window.location.origin}/events/${eventId}/signin`;\n };\n\n const copySignInUrl = () => {\n navigator.clipboard.writeText(getSignInUrl());\n };\n\n const logout = async () => {\n try {\n await fetch(`/api/events/${eventId}/logout`, { method: 'POST' });\n setIsAuthenticated(false);\n } catch (err) {\n // Handle logout error\n }\n };\n\n if (!isAuthenticated) {\n return (\n

\n Event Management\n

\n \n {error && (\n

\n {error}\n

\n )}\n \n

\n \n Enter event password:\n \n setPassword(e.target.value)}\n className=\"w-full p-3 border border-[var(--border-default)] rounded-lg focus:outline-none focus:border-[var(--border-focus)]\"\n onKeyPress={(e) => e.key === 'Enter' && authenticate()}\n />\n

\n \n \n Access Event\n \n

\n );\n }\n\n if (loading) {\n return (\n

Loading event data...

\n );\n }\n\n if (error) {\n return (\n

{error}

\n { setError(null); loadData(); }}\n className=\"px-4 py-2 bg-[var(--accent-primary)] text-[var(--text-primary)] font-mono rounded hover:bg-[var(--accent-secondary)]\"\n >\n Try Again\n \n

\n );\n }\n\n return (\n

\n {eventDetails?.event.name}\n

\n \n Logout\n \n

\n {eventDetails?.event.location && (\n

📍 {eventDetails.event.location}

\n )}\n

\n\n {/* Sign-in URL */}\n

Check-in URL

\n \n {getSignInUrl()}\n \n \n Copy\n \n

\n\n {/* Tabs */}\n

\n {(['overview', 'attendees', 'analytics'] as const).map((tab) => (\n setActiveTab(tab)}\n className={`py-2 px-1 border-b-2 font-medium text-sm capitalize ${\n activeTab === tab\n ? 'border-[var(--accent-primary)] text-[var(--accent-primary)]'\n : 'border-transparent text-[var(--text-muted)] hover:text-[var(--text-secondary)]'\n }`}\n >\n {tab}\n \n ))}\n

\n\n {/* Overview Tab */}\n {activeTab === 'overview' && (\n

Total Attendees

\n {eventDetails?.attendeeCount || 0}\n

\n \n

Checked In

\n {eventDetails?.checkedInCount || 0}\n

\n \n

Check-in Rate

\n {eventDetails?.attendeeCount \n ? Math.round(((eventDetails?.checkedInCount || 0) / eventDetails.attendeeCount) * 100)\n : 0}%\n

\n )}\n\n {/* Attendees Tab */}\n {activeTab === 'attendees' && (\n

Attendees

\n \n Export CSV\n \n

\n \n

\n \n \n \n \n \n \n \n \n {attendees.map((attendee) => (\n \n \n \n \n ))}\n \n

\n Name\n	\n Status\n
\n {attendee.name}\n	\n {attendee.checkedIn ? (\n ✓ Checked In\n ) : (\n Not checked in\n )}\n

\n )}\n\n {/* Analytics Tab */}\n {activeTab === 'analytics' && analytics && (\n

Check-ins by Date

\n {analytics.checkInsByDate.map((entry) => (\n

\n {entry.date}\n {entry.count}\n

\n ))}\n

\n \n

Recent Check-ins

\n {analytics.recentCheckIns.map((entry, index) => (\n

\n {entry.attendeeName}\n \n {new Date(entry.checkedInAt).toLocaleTimeString()}\n \n

\n ))}\n

\n )}\n

\n );\n}\n",[],[188,290,292],"3dff36e4-5dd5-11f0-acbb-0224a6c84d84","EventLinks.tsx","d2096474-5dd3-11f0-9e07-0224a6c84d84",31,["D",1752183089782],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState, useEffect } from \"https://esm.sh/react@18.2.0\";\nimport type { EventDetailsResponse } from \"../../shared/types.ts\";\n\ninterface EventLinksProps {\n eventId: number;\n}\n\nexport default function EventLinks({ eventId }: EventLinksProps) {\n const [eventDetails, setEventDetails] = useState(null);\n const [loading, setLoading] = useState(true);\n const [error, setError] = useState(null);\n\n useEffect(() => {\n loadEventDetails();\n }, [eventId]);\n\n const loadEventDetails = async () => {\n try {\n const response = await fetch(`/api/${eventId}`);\n if (!response.ok) throw new Error('Failed to load event details');\n const data: EventDetailsResponse = await response.json();\n setEventDetails(data);\n } catch (err) {\n setError(err instanceof Error ? err.message : 'Failed to load event');\n } finally {\n setLoading(false);\n }\n };\n\n const getSignInUrl = () => {\n return `${window.location.origin}/${eventId}/signin`;\n };\n\n const getManageUrl = () => {\n return `${window.location.origin}/${eventId}/manage`;\n };\n\n const copyToClipboard = (text: string) => {\n navigator.clipboard.writeText(text);\n };\n\n if (loading) {\n return (\n

Loading event details...

\n );\n }\n\n if (error) {\n return (\n

{error}

\n { setError(null); loadEventDetails(); }}\n className=\"px-4 py-2 bg-[var(--accent-primary)] text-white rounded hover:bg-[var(--accent-secondary)]\"\n >\n Try Again\n \n

\n );\n }\n\n return (\n

\n {eventDetails?.event.name}\n

\n {eventDetails?.event.location && (\n

📍 {eventDetails.event.location}

\n )}\n

\n {eventDetails?.attendeeCount || 0} attendees\n •\n {eventDetails?.checkedInCount || 0} checked in\n

\n\n

\n {/* Attendee Check-in */}\n

\n \n

\n Attendee Check-in\n

\n For attendees to check in to the event\n

\n \n

\n \n {getSignInUrl()}\n \n copyToClipboard(getSignInUrl())}\n className=\"px-3 py-2 bg-[var(--accent-primary)] text-white rounded hover:bg-[var(--accent-secondary)] text-sm\"\n >\n Copy\n \n

\n \n \n Go to Check-in Page\n \n

\n\n {/* Event Management */}\n

\n \n

\n Event Management\n

\n For organizers to manage the event (requires password)\n

\n \n

\n \n {getManageUrl()}\n \n copyToClipboard(getManageUrl())}\n className=\"px-3 py-2 bg-[var(--info)] text-white rounded hover:bg-blue-600 text-sm\"\n >\n Copy\n \n

\n \n \n Go to Management Page\n \n

\n\n {/* Additional Info */}\n

Event Information

\n Event ID:\n {eventId}\n

\n Created:\n \n {eventDetails?.event.created_at ? new Date(eventDetails.event.created_at).toLocaleDateString() : 'Unknown'}\n \n

\n Total Attendees:\n {eventDetails?.attendeeCount || 0}\n

\n Checked In:\n {eventDetails?.checkedInCount || 0}\n

\n );\n}\n",[],[188,290,300],"f03ca818-5dd1-11f0-94cf-0224a6c84d84","EventCreation.tsx","0d97ee1c-5dce-11f0-92a2-0224a6c84d84",19,["D",1752181670830],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState } from \"https://esm.sh/react@18.2.0\";\n\ninterface EventCreationProps {\n onEventCreated: (eventId: number) => void;\n}\n\nexport default function EventCreation({ onEventCreated }: EventCreationProps) {\n const [formData, setFormData] = useState({\n name: '',\n password: '',\n location: '',\n csvContent: ''\n });\n const [isSubmitting, setIsSubmitting] = useState(false);\n const [error, setError] = useState(null);\n const [csvErrors, setCsvErrors] = useState([]);\n\n const handleFileUpload = (event: React.ChangeEvent) => {\n const file = event.target.files?.[0];\n if (file) {\n const reader = new FileReader();\n reader.onload = (e) => {\n const content = e.target?.result as string;\n setFormData(prev => ({ ...prev, csvContent: content }));\n };\n reader.readAsText(file);\n }\n };\n\n const handleSubmit = async (e: React.FormEvent) => {\n e.preventDefault();\n setIsSubmitting(true);\n setError(null);\n setCsvErrors([]);\n\n try {\n const response = await fetch('/api/events', {\n method: 'POST',\n headers: {\n 'Content-Type': 'application/json',\n },\n body: JSON.stringify(formData),\n });\n\n const result = await response.json();\n\n if (!response.ok) {\n if (result.csvErrors) {\n setCsvErrors(result.csvErrors);\n }\n throw new Error(result.error || 'Failed to create event');\n }\n\n // Show success and redirect\n onEventCreated(result.eventId);\n } catch (err) {\n setError(err instanceof Error ? err.message : 'An error occurred');\n } finally {\n setIsSubmitting(false);\n }\n };\n\n return (\n

\n Create New Event\n

\n Set up your event and upload attendee list\n

\n\n

\n \n Event Name *\n \n setFormData(prev => ({ ...prev, name: e.target.value }))}\n className=\"w-full px-3 py-2 border border-[var(--border-default)] rounded-md focus:outline-none focus:ring-2 focus:ring-[var(--accent-primary)] focus:border-transparent\"\n placeholder=\"Enter event name\"\n />\n

\n\n

\n \n Management Password *\n \n setFormData(prev => ({ ...prev, password: e.target.value }))}\n className=\"w-full px-3 py-2 border border-[var(--border-default)] rounded-md focus:outline-none focus:ring-2 focus:ring-[var(--accent-primary)] focus:border-transparent\"\n placeholder=\"Enter password for event management\"\n />\n

\n This password will be required to access analytics and export data\n

\n\n

\n \n Location\n \n setFormData(prev => ({ ...prev, location: e.target.value }))}\n className=\"w-full px-3 py-2 border border-[var(--border-default)] rounded-md focus:outline-none focus:ring-2 focus:ring-[var(--accent-primary)] focus:border-transparent\"\n placeholder=\"Enter event location (optional)\"\n />\n

\n\n

\n \n Attendee List (CSV) *\n \n \n

Upload a CSV file with attendee names. Supported column headers:

name, Name, full_name
first_name + last_name (will be combined)
id (optional, for external reference)

\n\n {formData.csvContent && (\n

\n CSV loaded: {formData.csvContent.split('\\n').length - 1} rows\n

\n )}\n\n {csvErrors.length > 0 && (\n

CSV Parsing Issues:

• {error}

\n )}\n\n {error && (\n

{error}

\n )}\n\n \n {isSubmitting ? 'Creating Event...' : 'Create Event'}\n \n \n

\n\n

What happens next?

1. Your event will be created with the uploaded attendee list

2. You'll be redirected to the management dashboard

3. Share the sign-in link with your attendees

4. Monitor check-ins and export data as needed

\n );\n}",[],[188,290,308],"3e13deb4-5dd5-11f0-b26d-0224a6c84d84",["D",1752183089774],3,[],[188,290,33],"24f4886a-5dcc-11f0-990d-0224a6c84d84",["D",1752179182252],[221,222,223,224,225],[188,290],["D",1752179182252],[220,226,227],[188],"3dfbe4c6-5dd5-11f0-8819-0224a6c84d84","index.ts",30,["D",1752183089772],"http","import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\nimport { sqlite } from \"https://esm.town/v/stevekrouse/sqlite\";\nimport { getCookie, setCookie } from \"https://esm.sh/hono@3.11.7/cookie\";\nimport { \n initSessionsTable, \n createSession, \n setSessionCookie, \n clearSessionCookie,\n authMiddleware,\n verifyEventAccess,\n csrfMiddleware\n} from \"./auth.ts\";\n\nconst app = new Hono();\n\n// Unwrap Hono errors to see original error details\napp.onError((err, c) => {\n throw err;\n});\n\n// Database table names\nconst EVENTS_TABLE = \"events_2\";\nconst ATTENDEES_TABLE = \"attendees_2\"; \nconst CHECKINS_TABLE = \"checkins_2\";\n\n// Initialize database\nasync function initDatabase() {\n console.log(`💾 [DB] Initializing database tables`);\n \n // Events table - using unix timestamp as primary key\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${EVENTS_TABLE} (\n id INTEGER PRIMARY KEY,\n name TEXT NOT NULL,\n password_hash TEXT NOT NULL,\n location TEXT,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n )`);\n \n // Attendees table\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${ATTENDEES_TABLE} (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n event_id INTEGER NOT NULL,\n name TEXT NOT NULL,\n external_id TEXT,\n FOREIGN KEY (event_id) REFERENCES ${EVENTS_TABLE}(id)\n )`);\n \n // Check-ins table\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${CHECKINS_TABLE} (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n event_id INTEGER NOT NULL,\n attendee_id INTEGER NOT NULL,\n checked_in_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n FOREIGN KEY (event_id) REFERENCES ${EVENTS_TABLE}(id),\n FOREIGN KEY (attendee_id) REFERENCES ${ATTENDEES_TABLE}(id)\n )`);\n \n // Initialize sessions table\n await initSessionsTable();\n \n console.log(`✅ [DB] Database initialization complete`);\n}\n\n// Initialize database on startup\nawait initDatabase();\nconsole.log(`🚀 [System] Event check-in system ready!`);\n\n// Serve static files\napp.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\napp.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n\n// Serve main page\napp.get(\"/\", async c => {\n const html = await readFile(\"/frontend/index.html\", import.meta.url);\n return c.html(html);\n});\n\n// Route handlers for different pages\napp.get(\"/new\", async c => {\n const html = await readFile(\"/frontend/index.html\", import.meta.url);\n return c.html(html);\n});\n\napp.get(\"/:eventId/signin\", async c => {\n const html = await readFile(\"/frontend/index.html\", import.meta.url);\n return c.html(html);\n});\n\napp.get(\"/:eventId/manage\", async c => {\n const html = await readFile(\"/frontend/index.html\", import.meta.url);\n return c.html(html);\n});\n\napp.get(\"/:eventId\", async c => {\n const html = await readFile(\"/frontend/index.html\", import.meta.url);\n return c.html(html);\n});\n\n// Utility functions\nfunction hashPassword(password: string): string {\n // Simple hash for demo - in production, use proper bcrypt or similar\n return btoa(password + \"salt\").replace(/[^a-zA-Z0-9]/g, '');\n}\n\nfunction verifyPassword(password: string, hash: string): boolean {\n return hashPassword(password) === hash;\n}\n\n// CSV parsing utility with proper quoted field handling\nfunction parseCSV(csvContent: string): { attendees: Array<{name: string, external_id?: string}>, errors: string[] } {\n const lines = csvContent.trim().split('\\n');\n const errors: string[] = [];\n const attendees: Array<{name: string, external_id?: string}> = [];\n \n if (lines.length === 0) {\n errors.push(\"CSV file is empty\");\n return { attendees, errors };\n }\n \n // Parse CSV row with proper quote handling\n function parseCSVRow(line: string): string[] {\n const result: string[] = [];\n let current = '';\n let inQuotes = false;\n let i = 0;\n \n while (i < line.length) {\n const char = line[i];\n \n if (char === '\"' && !inQuotes) {\n inQuotes = true;\n } else if (char === '\"' && inQuotes) {\n // Check for escaped quote\n if (i + 1 < line.length && line[i + 1] === '\"') {\n current += '\"';\n i++; // Skip the escaped quote\n } else {\n inQuotes = false;\n }\n } else if (char === ',' && !inQuotes) {\n result.push(current.trim());\n current = '';\n } else {\n current += char;\n }\n i++;\n }\n \n result.push(current.trim());\n return result;\n }\n \n // Parse header row\n const headers = parseCSVRow(lines[0]).map(h => h.toLowerCase());\n console.log(`📋 [CSV] Found headers:`, headers);\n \n // Find name columns - flexible matching\n let nameIndex = -1;\n let firstNameIndex = -1;\n let lastNameIndex = -1;\n let idIndex = -1;\n let emailIndex = -1;\n \n headers.forEach((header, index) => {\n const cleanHeader = header.toLowerCase();\n if (cleanHeader === 'name' || (cleanHeader.includes('name') && !cleanHeader.includes('first') && !cleanHeader.includes('last') && !cleanHeader.includes('given') && !cleanHeader.includes('family'))) {\n nameIndex = index;\n } else if (cleanHeader.includes('first') || cleanHeader === 'first name') {\n firstNameIndex = index;\n } else if (cleanHeader.includes('last') || cleanHeader === 'last name' || cleanHeader.includes('family') || cleanHeader.includes('surname')) {\n lastNameIndex = index;\n } else if ((cleanHeader.includes('id') || cleanHeader === 'member id') && !cleanHeader.includes('email')) {\n idIndex = index;\n } else if (cleanHeader.includes('email') || cleanHeader === 'email') {\n emailIndex = index;\n }\n });\n \n console.log(`📋 [CSV] Column mapping - name: ${nameIndex}, firstName: ${firstNameIndex}, lastName: ${lastNameIndex}, id: ${idIndex}, email: ${emailIndex}`);\n \n // Process data rows\n for (let i = 1; i < lines.length; i++) {\n const row = parseCSVRow(lines[i]);\n \n if (row.length !== headers.length) {\n errors.push(`Row ${i + 1}: Column count mismatch (expected ${headers.length}, got ${row.length})`);\n continue;\n }\n \n let name = '';\n \n // Extract name using flexible logic\n if (nameIndex >= 0 && row[nameIndex]) {\n name = row[nameIndex];\n } else if (firstNameIndex >= 0 && lastNameIndex >= 0) {\n const firstName = row[firstNameIndex] || '';\n const lastName = row[lastNameIndex] || '';\n name = `${firstName} ${lastName}`.trim();\n } else if (firstNameIndex >= 0) {\n name = row[firstNameIndex];\n }\n \n if (!name) {\n errors.push(`Row ${i + 1}: No name found`);\n continue;\n }\n \n const attendee: {name: string, external_id?: string} = { name };\n \n if (idIndex >= 0 && row[idIndex]) {\n attendee.external_id = row[idIndex];\n }\n \n attendees.push(attendee);\n }\n \n console.log(`📋 [CSV] Parsed ${attendees.length} attendees with ${errors.length} errors`);\n return { attendees, errors };\n}\n\n// API Routes\n\n// Create new event\napp.post(\"/api/events\", async c => {\n console.log(`🎯 [API] New event creation request`);\n \n try {\n const body = await c.req.json();\n const { name, password, location, csvContent } = body;\n \n console.log(`📋 [API] Event details: \"${name}\", location: \"${location || 'N/A'}\"`);\n \n if (!name || !password || !csvContent) {\n return c.json({ error: \"Missing required fields: name, password, csvContent\" }, 400);\n }\n \n // Parse CSV\n const { attendees, errors } = parseCSV(csvContent);\n \n if (attendees.length === 0) {\n return c.json({ error: \"No valid attendees found in CSV\", csvErrors: errors }, 400);\n }\n \n // Create event with unix timestamp as ID\n const passwordHash = hashPassword(password);\n const eventId = Math.floor(Date.now() / 1000); // Unix timestamp in seconds\n \n await sqlite.execute(\n `INSERT INTO ${EVENTS_TABLE} (id, name, password_hash, location) VALUES (?, ?, ?, ?)`,\n [eventId, name, passwordHash, location || null]\n );\n console.log(`✅ [API] Event created with ID: ${eventId}`);\n \n // Insert attendees\n for (const attendee of attendees) {\n await sqlite.execute(\n `INSERT INTO ${ATTENDEES_TABLE} (event_id, name, external_id) VALUES (?, ?, ?)`,\n [eventId, attendee.name, attendee.external_id || null]\n );\n }\n \n console.log(`✅ [API] Added ${attendees.length} attendees to event`);\n \n return c.json({\n success: true,\n eventId,\n attendeeCount: attendees.length,\n csvErrors: errors\n });\n \n } catch (error) {\n console.error(`💥 [API] Error creating event:`, error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Get basic event info (public, no auth required)\napp.get(\"/api/:eventId\", async c => {\n const eventId = parseInt(c.req.param(\"eventId\"));\n console.log(`📋 [API] Fetching basic event details for event ${eventId}`);\n \n try {\n const event = await sqlite.execute(`\n SELECT id, name, location, created_at FROM ${EVENTS_TABLE} WHERE id = ?\n `, [eventId]);\n \n if (event.length === 0) {\n console.log(`❌ [API] Event ${eventId} not found`);\n return c.json({ error: \"Event not found\" }, 404);\n }\n \n // Get attendee counts\n const attendeeCountResult = await sqlite.execute(`\n SELECT COUNT(*) as count FROM ${ATTENDEES_TABLE} WHERE event_id = ?\n `, [eventId]);\n \n const checkedInCountResult = await sqlite.execute(`\n SELECT COUNT(*) as count FROM ${CHECKINS_TABLE} WHERE attendee_id IN (\n SELECT id FROM ${ATTENDEES_TABLE} WHERE event_id = ?\n )\n `, [eventId]);\n \n const attendeeCount = Number(attendeeCountResult[0]?.count || 0);\n const checkedInCount = Number(checkedInCountResult[0]?.count || 0);\n \n console.log(`📋 [API] Event ${eventId} found: ${attendeeCount} attendees, ${checkedInCount} checked in`);\n \n return c.json({\n event: {\n id: event[0].id,\n name: event[0].name,\n location: event[0].location,\n created_at: event[0].created_at\n },\n attendeeCount,\n checkedInCount\n });\n \n } catch (error) {\n console.error(`💥 [API] Error fetching event details:`, error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Get attendee list for sign-in (names only, no sensitive info)\napp.get(\"/api/:eventId/attendees\", async c => {\n const eventId = parseInt(c.req.param(\"eventId\"));\n console.log(`📋 [API] Fetching attendees for event ${eventId}`);\n \n try {\n // First check if event exists\n const eventCheck = await sqlite.execute(`\n SELECT id FROM ${EVENTS_TABLE} WHERE id = ?\n `, [eventId]);\n \n if (eventCheck.length === 0) {\n console.log(`❌ [API] Event ${eventId} not found`);\n return c.json({ error: \"Event not found\" }, 404);\n }\n \n // Get attendees with check-in status\n const attendees = await sqlite.execute(`\n SELECT a.id, a.name, \n CASE WHEN c.id IS NOT NULL THEN 1 ELSE 0 END as checked_in\n FROM ${ATTENDEES_TABLE} a\n LEFT JOIN ${CHECKINS_TABLE} c ON a.id = c.attendee_id\n WHERE a.event_id = ?\n ORDER BY a.name\n `, [eventId]);\n \n console.log(`📋 [API] Found ${attendees.length} attendees for event ${eventId}`);\n \n return c.json({\n attendees: attendees.map(row => ({\n id: row.id,\n name: row.name,\n checkedIn: Boolean(row.checked_in)\n }))\n });\n \n } catch (error) {\n console.error(`💥 [API] Error fetching attendees:`, error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Sign in to event\napp.post(\"/api/:eventId/signin\", async c => {\n const eventId = parseInt(c.req.param(\"eventId\"));\n \n try {\n const body = await c.req.json();\n const { attendeeId } = body;\n \n if (!attendeeId) {\n return c.json({ error: \"Attendee ID required\" }, 400);\n }\n \n // Verify attendee belongs to this event\n const attendee = await sqlite.execute(\n `SELECT * FROM ${ATTENDEES_TABLE} WHERE id = ? AND event_id = ?`,\n [attendeeId, eventId]\n );\n \n if (attendee.length === 0) {\n return c.json({ error: \"Attendee not found for this event\" }, 404);\n }\n \n // Check if already signed in\n const existingCheckIn = await sqlite.execute(\n `SELECT * FROM ${CHECKINS_TABLE} WHERE event_id = ? AND attendee_id = ?`,\n [eventId, attendeeId]\n );\n \n if (existingCheckIn.length > 0) {\n console.log(`⚠️ [API] Attendee ${attendee[0].name} already signed in`);\n // TODO: Consider security implications of multiple sign-in attempts\n // For now, we'll allow it but flag it\n return c.json({\n success: true,\n attendeeName: attendee[0].name,\n alreadySignedIn: true,\n message: \"You were already signed in, but we've recorded this additional check-in.\"\n });\n }\n \n // Record check-in\n await sqlite.execute(\n `INSERT INTO ${CHECKINS_TABLE} (event_id, attendee_id) VALUES (?, ?)`,\n [eventId, attendeeId]\n );\n \n console.log(`✅ [API] ${attendee[0].name} signed in to event ${eventId}`);\n \n return c.json({\n success: true,\n attendeeName: attendee[0].name,\n alreadySignedIn: false\n });\n \n } catch (error) {\n console.error(`💥 [API] Error during sign-in:`, error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Authentication endpoint - login with password and create session\napp.post(\"/api/:eventId/auth\", async c => {\n const eventId = parseInt(c.req.param(\"eventId\"));\n \n try {\n const body = await c.req.json();\n const { password } = body;\n \n if (!password) {\n return c.json({ error: \"Password required\" }, 401);\n }\n \n // Get event\n const events = await sqlite.execute(\n `SELECT * FROM ${EVENTS_TABLE} WHERE id = ?`,\n [eventId]\n );\n \n if (events.length === 0) {\n return c.json({ error: \"Event not found\" }, 404);\n }\n \n const event = events[0];\n \n // Verify password\n if (!verifyPassword(password, event.password_hash)) {\n return c.json({ error: \"Invalid password\" }, 401);\n }\n \n // Create session\n const session = await createSession(eventId);\n setSessionCookie(c, session.token);\n \n return c.json({ success: true });\n \n } catch (error) {\n console.error(`💥 [API] Error during authentication:`, error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Logout endpoint\napp.post(\"/api/:eventId/logout\", async c => {\n clearSessionCookie(c);\n return c.json({ success: true });\n});\n\n// Get event details (session protected)\napp.get(\"/api/:eventId/details\", authMiddleware, async c => {\n const eventId = parseInt(c.req.param(\"eventId\"));\n \n try {\n // Verify access to this specific event\n if (!await verifyEventAccess(c, eventId)) {\n return c.json({ error: \"Unauthorized for this event\" }, 403);\n }\n \n // Get event\n const events = await sqlite.execute(\n `SELECT * FROM ${EVENTS_TABLE} WHERE id = ?`,\n [eventId]\n );\n \n if (events.length === 0) {\n return c.json({ error: \"Event not found\" }, 404);\n }\n \n const event = events[0];\n \n // Get counts\n const attendeeCount = await sqlite.execute(\n `SELECT COUNT(*) as count FROM ${ATTENDEES_TABLE} WHERE event_id = ?`,\n [eventId]\n );\n \n const checkedInCount = await sqlite.execute(\n `SELECT COUNT(*) as count FROM ${CHECKINS_TABLE} WHERE event_id = ?`,\n [eventId]\n );\n \n return c.json({\n event: {\n id: event.id,\n name: event.name,\n location: event.location,\n created_at: event.created_at\n },\n attendeeCount: attendeeCount[0].count,\n checkedInCount: checkedInCount[0].count\n });\n \n } catch (error) {\n console.error(`💥 [API] Error fetching event details:`, error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Get analytics (session protected)\napp.get(\"/api/:eventId/analytics\", authMiddleware, async c => {\n const eventId = parseInt(c.req.param(\"eventId\"));\n \n try {\n // Verify access to this specific event\n if (!await verifyEventAccess(c, eventId)) {\n return c.json({ error: \"Unauthorized for this event\" }, 403);\n }\n \n // Get total counts\n const totalAttendees = await sqlite.execute(\n `SELECT COUNT(*) as count FROM ${ATTENDEES_TABLE} WHERE event_id = ?`,\n [eventId]\n );\n \n const totalCheckedIn = await sqlite.execute(\n `SELECT COUNT(*) as count FROM ${CHECKINS_TABLE} WHERE event_id = ?`,\n [eventId]\n );\n \n // Get check-ins by date\n const checkInsByDate = await sqlite.execute(`\n SELECT DATE(checked_in_at) as date, COUNT(*) as count\n FROM ${CHECKINS_TABLE}\n WHERE event_id = ?\n GROUP BY DATE(checked_in_at)\n ORDER BY date\n `, [eventId]);\n \n // Get recent check-ins\n const recentCheckIns = await sqlite.execute(`\n SELECT a.name as attendee_name, c.checked_in_at\n FROM ${CHECKINS_TABLE} c\n JOIN ${ATTENDEES_TABLE} a ON c.attendee_id = a.id\n WHERE c.event_id = ?\n ORDER BY c.checked_in_at DESC\n LIMIT 10\n `, [eventId]);\n \n return c.json({\n totalAttendees: totalAttendees[0].count,\n totalCheckedIn: totalCheckedIn[0].count,\n checkInsByDate: checkInsByDate.map(row => ({\n date: row.date,\n count: row.count\n })),\n recentCheckIns: recentCheckIns.map(row => ({\n attendeeName: row.attendee_name,\n checkedInAt: row.checked_in_at\n }))\n });\n \n } catch (error) {\n console.error(`💥 [API] Error fetching analytics:`, error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Export check-in data as CSV (session protected)\napp.get(\"/api/:eventId/export\", authMiddleware, async c => {\n const eventId = parseInt(c.req.param(\"eventId\"));\n \n try {\n // Verify access to this specific event\n if (!await verifyEventAccess(c, eventId)) {\n return c.json({ error: \"Unauthorized for this event\" }, 403);\n }\n \n // Get event name\n const events = await sqlite.execute(\n `SELECT name FROM ${EVENTS_TABLE} WHERE id = ?`,\n [eventId]\n );\n \n if (events.length === 0) {\n return c.json({ error: \"Event not found\" }, 404);\n }\n \n // Get all attendees with check-in data\n const data = await sqlite.execute(`\n SELECT a.name, a.external_id, c.checked_in_at\n FROM ${ATTENDEES_TABLE} a\n LEFT JOIN ${CHECKINS_TABLE} c ON a.id = c.attendee_id\n WHERE a.event_id = ?\n ORDER BY a.name\n `, [eventId]);\n \n // Generate CSV\n const csvRows = [\n 'Name,External ID,Checked In,Check-in Time'\n ];\n \n for (const row of data) {\n const checkedIn = row.checked_in_at ? 'Yes' : 'No';\n const checkInTime = row.checked_in_at || '';\n csvRows.push(`\"${row.name}\",\"${row.external_id || ''}\",\"${checkedIn}\",\"${checkInTime}\"`);\n }\n \n const csvContent = csvRows.join('\\n');\n const filename = `${events[0].name.replace(/[^a-zA-Z0-9]/g, '_')}_checkins.csv`;\n \n return new Response(csvContent, {\n headers: {\n 'Content-Type': 'text/csv',\n 'Content-Disposition': `attachment; filename=\"${filename}\"`\n }\n });\n \n } catch (error) {\n console.error(`💥 [API] Error exporting data:`, error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\nexport default app.fetch;",[],[193,328],"b5630766-5dd4-11f0-a784-0224a6c84d84","auth.ts","b5630810-5dd4-11f0-a784-0224a6c84d84",27,["D",1752182860604],"import { sqlite } from \"https://esm.town/v/stevekrouse/sqlite\";\nimport { getCookie, setCookie, deleteCookie } from \"https://esm.sh/hono@3.11.7/cookie\";\nimport type { Context } from \"https://esm.sh/hono@3.11.7\";\n\n// Database table names\nconst SESSIONS_TABLE = \"sessions_1\";\nconst EVENTS_TABLE = \"events_2\";\n\n// Session configuration\nconst SESSION_EXPIRES_IN_SECONDS = 60 * 60 * 24 * 30; // 30 days\nconst SESSION_COOKIE_NAME = \"session_token\";\n\n// Database interfaces\ninterface Session {\n id: string;\n secretHash: Uint8Array;\n eventId: number;\n createdAt: Date;\n}\n\ninterface SessionWithToken extends Session {\n token: string;\n}\n\n// Initialize sessions table\nexport async function initSessionsTable() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${SESSIONS_TABLE} (\n id TEXT NOT NULL PRIMARY KEY,\n secret_hash BLOB NOT NULL,\n event_id INTEGER NOT NULL,\n created_at INTEGER NOT NULL,\n FOREIGN KEY (event_id) REFERENCES ${EVENTS_TABLE}(id)\n )`);\n}\n\n// Generate secure random string for session IDs and secrets\nfunction generateSecureRandomString(): string {\n const alphabet = \"abcdefghijklmnpqrstuvwxyz23456789\";\n const bytes = new Uint8Array(24);\n crypto.getRandomValues(bytes);\n \n let result = \"\";\n for (let i = 0; i < bytes.length; i++) {\n result += alphabet[bytes[i] >> 3];\n }\n return result;\n}\n\n// Hash secret using SHA-256\nasync function hashSecret(secret: string): Promise {\n const secretBytes = new TextEncoder().encode(secret);\n const secretHashBuffer = await crypto.subtle.digest(\"SHA-256\", secretBytes);\n return new Uint8Array(secretHashBuffer);\n}\n\n// Constant-time comparison for security\nfunction constantTimeEqual(a: Uint8Array, b: Uint8Array): boolean {\n if (a.byteLength !== b.byteLength) {\n return false;\n }\n let c = 0;\n for (let i = 0; i < a.byteLength; i++) {\n c |= a[i] ^ b[i];\n }\n return c === 0;\n}\n\n// Create a new session for event management\nexport async function createSession(eventId: number): Promise {\n const now = new Date();\n const sessionId = generateSecureRandomString();\n const sessionSecret = generateSecureRandomString();\n const secretHash = await hashSecret(sessionSecret);\n \n const token = `${sessionId}.${sessionSecret}`;\n \n const session: SessionWithToken = {\n id: sessionId,\n secretHash,\n eventId,\n createdAt: now,\n token\n };\n \n await sqlite.execute(\n `INSERT INTO ${SESSIONS_TABLE} (id, secret_hash, event_id, created_at) VALUES (?, ?, ?, ?)`,\n [sessionId, secretHash, eventId, Math.floor(now.getTime() / 1000)]\n );\n \n return session;\n}\n\n// Validate session token\nexport async function validateSessionToken(token: string): Promise {\n const tokenParts = token.split(\".\");\n if (tokenParts.length !== 2) {\n return null;\n }\n \n const [sessionId, sessionSecret] = tokenParts;\n \n try {\n const session = await getSession(sessionId);\n if (!session) {\n return null;\n }\n \n const tokenSecretHash = await hashSecret(sessionSecret);\n const validSecret = constantTimeEqual(tokenSecretHash, session.secretHash);\n \n if (!validSecret) {\n return null;\n }\n \n return session;\n } catch (error) {\n console.error(\"Error validating session token:\", error);\n return null;\n }\n}\n\n// Get session by ID\nasync function getSession(sessionId: string): Promise {\n const now = new Date();\n \n const result = await sqlite.execute(\n `SELECT id, secret_hash, event_id, created_at FROM ${SESSIONS_TABLE} WHERE id = ?`,\n [sessionId]\n );\n \n if (result.rows.length !== 1) {\n return null;\n }\n \n const row = result.rows[0];\n const session: Session = {\n id: row[0] as string,\n secretHash: new Uint8Array(row[1] as ArrayBuffer),\n eventId: row[2] as number,\n createdAt: new Date((row[3] as number) * 1000)\n };\n \n // Check expiration\n if (now.getTime() - session.createdAt.getTime() >= SESSION_EXPIRES_IN_SECONDS * 1000) {\n await deleteSession(sessionId);\n return null;\n }\n \n return session;\n}\n\n// Delete session\nexport async function deleteSession(sessionId: string): Promise {\n await sqlite.execute(`DELETE FROM ${SESSIONS_TABLE} WHERE id = ?`, [sessionId]);\n}\n\n// Set session cookie\nexport function setSessionCookie(c: Context, token: string): void {\n setCookie(c, SESSION_COOKIE_NAME, token, {\n maxAge: SESSION_EXPIRES_IN_SECONDS,\n httpOnly: true,\n secure: true,\n sameSite: 'Lax',\n path: '/'\n });\n}\n\n// Clear session cookie\nexport function clearSessionCookie(c: Context): void {\n deleteCookie(c, SESSION_COOKIE_NAME, {\n httpOnly: true,\n secure: true,\n sameSite: 'Lax',\n path: '/'\n });\n}\n\n// Get session from request\nexport async function getSessionFromRequest(c: Context): Promise {\n const token = getCookie(c, SESSION_COOKIE_NAME);\n if (!token) {\n return null;\n }\n \n return await validateSessionToken(token);\n}\n\n// Authentication middleware\nexport async function authMiddleware(c: Context, next: () => Promise) {\n const session = await getSessionFromRequest(c);\n \n if (!session) {\n return c.json({ error: \"Unauthorized\" }, 401);\n }\n \n // Store session in context for use in handlers\n c.set('session', session);\n await next();\n}\n\n// Verify event access (user has session for this specific event)\nexport async function verifyEventAccess(c: Context, eventId: number): Promise {\n const session = c.get('session') as Session;\n if (!session) {\n return false;\n }\n \n return session.eventId === eventId;\n}\n\n// CSRF protection - verify request origin\nexport function verifyRequestOrigin(c: Context): boolean {\n const method = c.req.method;\n if (method === \"GET\" || method === \"HEAD\") {\n return true;\n }\n \n const origin = c.req.header(\"origin\");\n const host = c.req.header(\"host\");\n \n if (!origin || !host) {\n return false;\n }\n \n // Allow same-origin requests\n return origin === `https://${host}` || origin === `http://${host}`;\n}\n\n// CSRF middleware\nexport async function csrfMiddleware(c: Context, next: () => Promise) {\n if (!verifyRequestOrigin(c)) {\n return c.json({ error: \"Forbidden\" }, 403);\n }\n \n await next();\n}\n",[],[193,336],["D",1752179182252],[217,218],[193],"3e777542-5dcf-11f0-b3cc-0224a6c84d84","deploy.yml","3e77781c-5dcf-11f0-b3cc-0224a6c84d84","3e68e0cc-5dcf-11f0-b3cc-0224a6c84d84",12,["D",1752180513606],"name: Deploy to Val Town\n\non:\n push:\n branches: [ main ]\n\njobs:\n deploy:\n runs-on: ubuntu-latest\n environment: Deploy\n \n steps:\n - uses: actions/checkout@v4\n \n - name: Setup Deno\n uses: denoland/setup-deno@v2\n with:\n deno-version: v2.x\n \n - name: Install Val Town CLI\n run: deno install -grAf jsr:@valtown/vt\n \n - name: Deploy to Val Town\n run: vt push\n env:\n VAL_TOWN_API_KEY: ${{ secrets.VAL_TOWN_API_KEY }}\n",[],[198,355,347],"workflows","3e68e00e-5dcf-11f0-b3cc-0224a6c84d84",11,["D",1752180513510],[215],[198,355],["D",1752180513412],[214],[198],["D",1752179182252],{"_97":96,"_104":100},{"_97":96,"_98":-5,"_99":100,"_18":55,"_101":102,"_103":25},{"_13":86,"_32":87,"_44":43,"_88":45,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":46,"_95":96},"ctx",{"_79":-5,"_124":401,"_402":403,"_404":405,"_406":25,"_407":25,"_408":25,"_409":59,"_410":-5,"_411":-7,"_412":-7,"_413":63,"_414":25,"_415":25,"_416":-5,"_417":25,"_418":25,"_419":25,"_420":-5},"ENV",{"_372":373,"_374":375,"_376":87,"_377":378,"_379":380,"_381":382,"_383":384,"_385":386,"_387":388,"_389":390,"_391":392,"_393":394,"_395":396,"_397":398,"_399":400},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v33