Added opaque join-token support across backend and frontend: new migration/model/service/endpoints, guest controllers now resolve tokens, and the demo seeder seeds a token. Tenant event details list/manage tokens with copy/revoke actions, and the guest PWA uses tokens end-to-end (routing, storage, uploads, achievements, etc.). Docs TODO updated to reflect completed steps.

resources/js/guest/polling/usePollGalleryDelta.ts

@@ -13,6 +13,11 @@ export function usePollGalleryDelta(slug: string) {
   );
 
   async function fetchDelta() {
+    if (!slug) {
+      setLoading(false);
+      return;
+    }
+
     try {
       const qs = latestAt.current ? `?since=${encodeURIComponent(latestAt.current)}` : '';
       const res = await fetch(`/api/v1/events/${encodeURIComponent(slug)}/photos${qs}`, {
@@ -85,6 +90,12 @@ export function usePollGalleryDelta(slug: string) {
   }, []);
 
   useEffect(() => {
+    if (!slug) {
+      setPhotos([]);
+      setLoading(false);
+      return;
+    }
+
     setLoading(true);
     latestAt.current = null;
     setPhotos([]);