Attendee journey — buy, check in, rate

BASE="http://localhost:5001/api"
TOKEN="eyJhbGciOi..."        # attendee JWT
EXP_ID="104821"              # a PUBLISHED experience
# The host publishes it, then reads the check-in code:
#   QR=$(curl -s "$BASE/experiences/mine" -H "Authorization: Bearer $HOST_TOKEN" | jq -r --arg id "$EXP_ID" '.data[] | select(.id==$id) | .qrToken')
QR="a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4"   # experience.qrToken (host displays it at the door)

# 0) See what's on sale (public)
curl -s "$BASE/experiences/$EXP_ID" | jq '.data.ticketTiers[] | {id,name,price,remaining,status}'

# 1) BUY — pick a tier id from step 0
TIER_ID=$(curl -s "$BASE/experiences/$EXP_ID" | jq -r '.data.ticketTiers[0].id')
curl -s -X POST "$BASE/experiences/$EXP_ID/purchase" \
  -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" \
  -d "{ \"tierId\": $TIER_ID }" | jq '.data | {id,status,price,ticketToken}'

# 3) CHECK IN — scan the venue QR (send its token; the server finds the experience from it)
curl -s -X POST "$BASE/experiences/check-in" \
  -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" \
  -d "{ \"qrToken\": \"$QR\" }" | jq '.data'

# 5) REVIEW — after it starts
curl -s -X POST "$BASE/experiences/$EXP_ID/review" \
  -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" \
  -d '{ "rating": 5, "comment": "Loved it — great host" }' | jq '.data'

curl -s "$BASE/experiences/104821" | jq '{title, host, priceFrom, tiers: .data.ticketTiers}'

curl -X POST "$BASE/experiences/104821/purchase" \
  -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" \
  -d '{ "tierId": 9001 }'

{
  "success": true,
  "message": "Ticket purchased",
  "data": {
    "id": "50001", "experienceId": "104821", "tierId": "9001", "tierName": "Early Bird",
    "userId": "5", "priceCents": 1200, "price": 12, "currency": "USD",
    "ticketToken": "f0e1d2c3b4a5f0e1d2c3b4a5f0e1d2c3",
    "status": "VALID", "purchasedAt": "2026-07-06T18:30:00.000Z", "usedAt": null
  }
}

curl -X POST "$BASE/experiences/check-in" \
  -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" \
  -d '{ "qrToken": "a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4" }'

{
  "success": true,
  "message": "You're in — welcome!",
  "data": {
    "experienceId": "104821",
    "attendance": { "status": "CHECKED_IN", "checkedInAt": "2026-07-06T20:04:00.000Z" },
    "ticket": { "id": "50001", "status": "USED" },
    "currentGuests": 7
  }
}

curl -X POST "$BASE/experiences/104821/review" \
  -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" \
  -d '{ "rating": 5, "comment": "Loved it — great host" }'

{
  "success": true,
  "message": "Thanks for the review!",
  "data": {
    "review": { "id": "700", "experienceId": "104821", "userId": "5", "rating": 5, "comment": "Loved it — great host", "createdAt": "2026-07-07T00:10:00.000Z" },
    "hostRating": { "average": 4.9, "count": 37 }
  }
}

curl "$BASE/experiences/mine" -H "Authorization: Bearer $HOST_TOKEN" \
  | jq '.data[] | {id, title, status, qrToken}'

{
  "success": true,
  "message": "Experiences fetched",
  "data": [
    { "id": "104821", "title": "Natural Wine & Strangers", "status": "PUBLISHED",
      "coverImage": null, "startTime": "2026-07-06T20:00:00.000Z",
      "locationName": "The Aviary, LES", "currentGuests": 7, "capacity": 10,
      "qrToken": "a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4" }
  ],
  "meta": { "page": 1, "limit": 20, "total": 1, "totalPages": 1 }
}

curl -X POST "$BASE/experiences/104821/qr/rotate" -H "Authorization: Bearer $HOST_TOKEN"

curl "$BASE/experiences/104821/ticket-holders?page=1&limit=50" -H "Authorization: Bearer $HOST_TOKEN"

{
  "success": true,
  "message": "Ticket holders fetched",
  "data": [
    {
      "ticketId": "50001", "tierId": "9001", "tierName": "Early Bird",
      "priceCents": 1200, "price": 12, "currency": "USD",
      "status": "USED", "checkedIn": true,
      "purchasedAt": "2026-07-06T18:30:00.000Z", "usedAt": "2026-07-06T20:04:00.000Z",
      "user": { "id": "9", "name": "Leo C.", "avatarUrl": null }
    }
  ],
  "meta": { "page": 1, "limit": 50, "total": 6, "totalPages": 1, "soldTotal": 6, "revenueCents": 7200 }
}

curl "$BASE/experiences/104821/attendees" -H "Authorization: Bearer $HOST_TOKEN"

{
  "success": true,
  "message": "Attendees fetched",
  "data": [
    { "userId": "9", "checkedInAt": "2026-07-06T20:04:00.000Z", "ticketId": "50001", "user": { "id": "9", "name": "Leo C.", "avatarUrl": null } }
  ],
  "meta": { "page": 1, "limit": 20, "total": 7, "totalPages": 1, "currentGuests": 7, "capacity": 10 }
}