Added opaque join-token support across backend and frontend: new migration/model/service/endpoints, guest controllers now resolve tokens, and the demo seeder seeds a token. Tenant event details list/manage tokens with copy/revoke actions, and the guest PWA uses tokens end-to-end (routing, storage, uploads, achievements, etc.). Docs TODO updated to reflect completed steps.

app/Http/Resources/Tenant/EventJoinTokenResource.php

@@ -0,0 +1,29 @@
+<?php
+
+namespace App\Http\Resources\Tenant;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+class EventJoinTokenResource extends JsonResource
+{
+    /**
+     * @param  Request  $request
+     */
+    public function toArray($request): array
+    {
+        return [
+            'id' => $this->id,
+            'label' => $this->label,
+            'token' => $this->token,
+            'url' => url('/e/'.$this->token),
+            'usage_limit' => $this->usage_limit,
+            'usage_count' => $this->usage_count,
+            'expires_at' => optional($this->expires_at)->toIso8601String(),
+            'revoked_at' => optional($this->revoked_at)->toIso8601String(),
+            'is_active' => $this->isActive(),
+            'created_at' => optional($this->created_at)->toIso8601String(),
+            'metadata' => $this->metadata ?? new \stdClass(),
+        ];
+    }
+}