app.vue

@@ -11,10 +11,7 @@
 import "~/assets/global.css";
 const event = useRequestEvent();
 const sessionStore = useSessionStore();
-const eventsStore = useEventsStore();
+await callOnce("fetch-session", async () => {
-const nuxtApp = useNuxtApp();
-await callOnce("fetch-globals", async () => {
 	await sessionStore.fetch(event);
-	await nuxtApp.runWithContext(eventsStore.fetchLastEventId);
 })
 </script>

assets/global.css

@@ -76,7 +76,7 @@ label>* {
 	margin-inline-start: 0.5rem;
 }
 
-:is(p, form, fieldset, pre, ul, .flow) + :is(p, form, fieldset, pre, ul, .flow) {
+:is(p, form, fieldset, pre, ul) + :is(p, form, fieldset, pre, ul) {
 	margin-block-start: 0.5rem;
 }
 

components/CardEvent.vue

@@ -3,10 +3,7 @@
 	SPDX-License-Identifier: AGPL-3.0-or-later
 -->
 <template>
-	<section
+	<section class="event">
-		class="event"
-		:class="{ cancelled: event.cancelled }"
-	>
 		<h3>{{ event.name }}</h3>
 		<p v-if=event.host>
 			Host: {{ event.host }}
@@ -19,11 +16,7 @@
 				{{ event.notice }}
 			</p>
 		</div>
-		<div
+		<p class="preWrap">{{ event.description ?? "No description provided" }}</p>
-			v-if="descriptionHtml"
-			class="flow"
-			v-html="descriptionHtml"
-		/>
 		<p v-if="event.interested">
 			{{ event.interested }} interested
 		</p>
@@ -39,12 +32,7 @@
 
 		<h4>Timeslots</h4>
 		<ul>
-			<li
+			<li v-for="slot in event.slots.values()" :key="slot.id">
-				v-for="slot in event.slots.values()"
-				:key="slot.id"
-				class="slot"
-				:class="{ cancelled: slot.cancelled }"
-			>
 				{{ formatTime(slot.start) }} - {{ formatTime(slot.end) }}
 				<button
 					v-if="accountStore.valid && event.slots.size > 1"
@@ -68,19 +56,12 @@
 </template>
 
 <script lang="ts" setup>
-import { micromark } from 'micromark';
 import { DateTime } from '~/shared/utils/luxon';
 
-const props = defineProps<{
+defineProps<{
 	event: ClientScheduleEvent
 }>()
 
-const descriptionHtml = computed(() => {
-	if (props.event.description) {
-		return micromark(props.event.description);
-	}
-});
-
 const accountStore = useAccountStore();
 const usersStore = useUsersStore();
 
@@ -99,10 +80,6 @@ async function toggle(type: "event" | "slot", id: number, slotIds?: number[]) {
 	padding: 0.5rem;
 	border-radius: 0.5rem;
 }
-.event.cancelled>*, .slot.cancelled {
-	text-decoration: line-through;
-	color: grey;
-}
 .event h3 {
 	margin: 0;
 }
@@ -110,9 +87,7 @@ async function toggle(type: "event" | "slot", id: number, slotIds?: number[]) {
 	margin-block-start: 0.5rem;
 }
 
-.event .notice {
+.notice {
-	text-decoration: none;
-	color: CanvasText;
 	display: flex;
 	width: fit-content;
 	gap: 0.5rem;

components/CardEventSlot.vue

@@ -3,10 +3,7 @@
 	SPDX-License-Identifier: AGPL-3.0-or-later
 -->
 <template>
-	<section
+	<section class="eventSlot">
-		class="eventSlot"
-		:class="{ cancelled: slot.cancelled || event?.cancelled }"
-	>
 		<hgroup>
 			<h3>{{ event?.name }}</h3>
 			<p>
@@ -24,11 +21,7 @@
 				{{ event.notice }}
 			</p>
 		</div>
-		<div
+		<p class="preWrap">{{ event?.description ?? "No description provided" }}</p>
-			v-if="descriptionHtml !== undefined"
-			class="flow"
-			v-html="descriptionHtml"
-		/>
 		<p v-if="locations.length">
 			At {{ locations.map(location => location?.name ?? "unknown").join(" + ") }}
 		</p>
@@ -47,20 +40,12 @@
 </template>
 
 <script lang="ts" setup>
-import { micromark } from 'micromark';
 import { DateTime } from '~/shared/utils/luxon';
 
 const props = defineProps<{
 	event?: ClientScheduleEvent,
 	slot: ClientScheduleEventSlot,
 }>()
-
-const descriptionHtml = computed(() => {
-	if (props.event?.description)
-		return micromark(props.event.description);
-	return undefined;
-});
-
 const scheduleStore = useSchedulesStore();
 const schedule = scheduleStore.activeSchedule;
 
@@ -78,10 +63,6 @@ function formatTime(time: DateTime) {
 	padding: 0.5rem;
 	border-radius: 0.5rem;
 }
-.eventSlot.cancelled>* {
-	text-decoration: line-through;
-	color: grey;
-}
 .eventSlot h3 {
 	margin: 0;
 }
@@ -89,9 +70,7 @@ function formatTime(time: DateTime) {
 	margin-block-start: 0.5rem;
 }
 
-.eventSlot .notice {
+.notice {
-	text-decoration: none;
-	color: CanvasText;
 	display: flex;
 	width: fit-content;
 	gap: 0.5rem;

components/CardShift.vue

@@ -5,11 +5,7 @@
 <template>
 	<section class="shift">
 		<h3>{{ shift.name }}</h3>
-		<div
+		<p class="preWrap">{{ shift.description ?? "No description provided" }}</p>
-			v-if="descriptionHtml"
-			class="flow"
-			v-html="descriptionHtml"
-		/>
 
 		<h4>Timeslots</h4>
 		<ul>
@@ -25,19 +21,12 @@
 </template>
 
 <script lang="ts" setup>
-import { micromark } from 'micromark';
 import { DateTime } from '~/shared/utils/luxon';
 
-const props = defineProps<{
+defineProps<{
 	shift: ClientScheduleShift
 }>()
 
-const descriptionHtml = computed(() => {
-	if (props.shift.description) {
-		return micromark(props.shift.description);
-	}
-});
-
 const usersStore = useUsersStore();
 
 function formatTime(time: DateTime) {

components/DiffSchedule.vue

@@ -61,7 +61,7 @@ const shifts = computed(() => {
 });
 </script>
 
-<style scoped>
+<style>
 h2 {
 	margin-block-start: 0.2rem;
 }

components/DiffScheduleEvent.vue

@@ -29,18 +29,6 @@
 			:after='event.crew ? "No" : "Yes"'
 			:state
 		/>
-		<DiffFieldString
-			title="Cancelled"
-			:before='event.serverCancelled ? "Yes" : "No"'
-			:after='event.cancelled ? "Yes" : "No"'
-			:state
-		/>
-		<DiffFieldString
-			title="Notice"
-			:before="event.serverNotice"
-			:after="event.notice"
-			:state
-		/>
 		<DiffFieldString
 			title="Description"
 			:before="event.serverDescription"

components/DiffScheduleEventSlot.vue

@@ -24,12 +24,6 @@
 			:entities="schedule.locations"
 			:state
 		/>
-		<DiffFieldString
-			title="Cancelled"
-			:before='slot.serverCancelled ? "Yes" : "No"'
-			:after='slot.cancelled ? "Yes" : "No"'
-			:state
-		/>
 		<DiffFieldSetEntityId
 			title="Assigned"
 			:before="slot.serverAssigned"

components/LogInDemo.vue

@@ -35,3 +35,7 @@ async function logIn() {
 	}
 }
 </script>
+
+<style>
+
+</style>

components/TableScheduleEventSlots.vue

@@ -12,7 +12,6 @@
 					<th>duration</th>
 					<th>event</th>
 					<th>location</th>
-					<th title="cancelled">c</th>
 					<th>assigned</th>
 					<th v-if="edit"></th>
 				</tr>
@@ -51,7 +50,6 @@
 								/>
 							</td>
 							<td></td>
-							<td></td>
 							<td>
 								Add at
 								<button
@@ -99,11 +97,6 @@
 									v-model="es.slot.locationIds"
 								/>
 							</td>
-							<td>
-								<input
-									type="checkbox"
-									v-model="es.slot.cancelled">
-							</td>
 							<td>
 								<SelectMultiEntity
 									:entities="usersStore.users"
@@ -156,7 +149,6 @@
 							/>
 						</td>
 						<td></td>
-						<td></td>
 						<td colspan="2">
 							<button
 								type="button"
@@ -185,7 +177,6 @@
 							<td>{{ es.end.diff(es.start).toFormat('hh:mm') }}</td>
 							<td>{{ es.event?.name }}</td>
 							<td></td>
-							<td>{{ es.slot.cancelled ? "x" : undefined }}</td>
 							<td><AssignedCrew :modelValue="es.slot.assigned" :edit="false" /></td>
 						</template>
 					</tr>

components/TableScheduleEvents.vue

@@ -14,7 +14,6 @@
 					<th>notice</th>
 					<th>description</th>
 					<th>p</th>
-					<th title="cancelled">c</th>
 					<th>s</th>
 					<th v-if="edit"></th>
 				</tr>
@@ -70,13 +69,6 @@
 								@change="event.crew = !event.crew"
 							>
 						</td>
-						<td>
-							<input
-								type="checkbox"
-								:disabled="!canEdit(event)"
-								v-model="event.cancelled"
-							>
-						</td>
 						<td>{{ event.slots.size ? event.slots.size : "" }}</td>
 						<td>
 							<button
@@ -131,7 +123,6 @@
 							>
 						</td>
 						<td></td>
-						<td></td>
 						<td>
 							<button
 								v-if="eventExists(newEventName)"

components/TableUsers.vue

@@ -61,3 +61,7 @@
 useEventSource();
 const usersStore = useUsersStore();
 </script>
+
+<style>
+
+</style>

components/Tabs.vue

@@ -55,6 +55,7 @@ nav {
 }
 .tab {
 	display: flex;
+	flex-wrap: wrap;
 }
 .tab.active {
 	padding-block-start: 1px;
@@ -64,7 +65,6 @@ nav {
 }
 .tab .spacer {
 	flex: 1 0 0.75rem;
-	width: 0.75rem;
 }
 .tab .flap,
 .tab .spacer {

components/Timetable.vue

@@ -102,11 +102,7 @@
 							v-for="cell, index in row"
 							:key="index"
 							:colSpan="cell.span"
-							:class="{
+							:class='{"event": cell.slot, "crew": cell.event?.crew }'
-								event: cell.slot,
-								crew: cell.event?.crew,
-								cancelled: cell.event?.cancelled || cell.slot?.cancelled,
-							}"
 							:title="cell.event?.name"
 						>
 							{{ cell.event?.notice ? "⚠️" : undefined }}
@@ -795,9 +791,4 @@ tr.hours>th + th.dayShift div {
 .event.crew {
 	background-color: color-mix(in oklab, var(--background), rgb(127, 127, 127) 60%);
 }
-
-.event.cancelled {
-	color: color-mix(in oklab, CanvasText, rgb(127, 127, 127) 80%);
-	text-decoration: line-through;
-}
 </style>

composables/event-source.ts

@@ -2,12 +2,12 @@
 	SPDX-FileCopyrightText: © 2025 Hornwitser <code@hornwitser.no>
 	SPDX-License-Identifier: AGPL-3.0-or-later
 */
-import type { ApiEvent, ApiEventStreamMessage } from "~/shared/types/api";
+import type { ApiEvent } from "~/shared/types/api";
 
 interface AppEventMap {
 	"open": Event,
-	"message": MessageEvent<ApiEventStreamMessage>,
+	"message": MessageEvent<string>,
-	"event": MessageEvent<ApiEvent>,
+	"update": MessageEvent<ApiEvent>,
 	"error": Event,
 	"close": Event,
 }
@@ -18,11 +18,12 @@ class AppEventSource extends EventTarget {
 
 	#forwardEvent(type: string) {
 		this.#source!.addEventListener(type, event => {
-			console.log("AppEventSource", event.type, event.data);
+			if (type === "open" || type === "message" || type === "error") {
-			if (type === "open" || type === "error") {
+				console.log("AppEventSource", event.type, event.data);
 				this.dispatchEvent(new Event(event.type));
-			} else if (type === "message") {
+			} else {
-				const data = event.data ? JSON.parse(event.data) as ApiEventStreamMessage : undefined;
+				const data = event.data ? JSON.parse(event.data) as ApiEvent : undefined;
+				console.log("AppEventSource", event.type, data);
 				if (data?.type === "connected") {
 					this.#sourceSessionId = data.session?.id;
 				}
@@ -33,27 +34,17 @@ class AppEventSource extends EventTarget {
 					source: event.source,
 					ports: [...event.ports],
 				}));
-			} else {
-				const data = event.data ? JSON.parse(event.data) as ApiEvent : undefined;
-				this.dispatchEvent(new MessageEvent(event.type, {
-					data,
-					origin: event.origin,
-					lastEventId: event.lastEventId,
-					source: event.source,
-					ports: [...event.ports],
-				}));
 			}
 		});
 	}
 
-	open(sessionId: number | undefined, lastEventId: number) {
+	open(sessionId: number | undefined) {
 		console.log("Opening event source sid:", sessionId);
 		this.#sourceSessionId = sessionId;
-		const query = new URLSearchParams({ lastEventId: String(lastEventId) });
+		this.#source = new EventSource("/api/events");
-		this.#source = new EventSource(`/api/events?${query}`);
 		this.#forwardEvent("open");
 		this.#forwardEvent("message");
-		this.#forwardEvent("event");
+		this.#forwardEvent("update");
 		this.#forwardEvent("error");
 	}
 
@@ -67,20 +58,20 @@ class AppEventSource extends EventTarget {
 	}
 
 	#connectRefs = 0;
-	connect(sessionId: number | undefined, lastEventId: number) {
+	connect(sessionId: number | undefined) {
 		this.#connectRefs += 1;
 		if (this.#source && this.#sourceSessionId !== sessionId) {
 			this.close();
 		}
 		if (!this.#source) {
-			this.open(sessionId, lastEventId);
+			this.open(sessionId);
 		}
 	}
 
-	reconnect(sessionId: number | undefined, lastEventId: number) {
+	reconnect(sessionId: number | undefined) {
 		if (this.#source && this.#sourceSessionId !== sessionId) {
 			this.close();
-			this.open(sessionId, lastEventId);
+			this.open(sessionId);
 		}
 	}
 
@@ -122,15 +113,14 @@ export const appEventSource = import.meta.client ? new AppEventSource() : null;
 
 export function useEventSource() {
 	const sessionStore = useSessionStore();
-	const eventsStore = useEventsStore();
 	onMounted(() => {
 		console.log("useEventSource onMounted", sessionStore.id);
-		appEventSource!.connect(sessionStore.id, eventsStore.lastEventId);
+		appEventSource!.connect(sessionStore.id);
 	})
 
 	watch(() => sessionStore.id, () => {
 		console.log("useEventSource sessionStore.id change", sessionStore.id);
-		appEventSource!.reconnect(sessionStore.id, eventsStore.lastEventId);
+		appEventSource!.reconnect(sessionStore.id);
 	})
 
 	onUnmounted(() => {

docs/dev/server-sent-events.md

@@ -11,9 +11,3 @@ To update in real time this application sends a `text/event-source` stream using
 Upon connecting a `"connect"` event is emitted with the session the connection was made under. This is the primary mechanism a user agent discovers its own session having been rotated into a new one, which also happens when the access level of the account associated with the session changes.
 
 After the `"connect"` event the user agent will start to receive updates to resources it has access to that has changed. There is no filtering for what resoucres the user agent receives updates for at the moment as there's not enough events to justify the complexity of server-side subscriptions and filtering.
-
-## Id and order
-
-Events are guaranteed to be delivered in order, and to maintain consistency the server provides the following guarantee: Any entities fetched after receiving a response from `/api/last-event-id` will include updates from all events up to and including the `id` received from the response.
-
-This means that a client can fetch an up to date and live representation of any API entity by first fetching the last event from `/api/last-event-id`, and then in parallel fetch any entities as well as opening the `/api/events` stream with the `lastEventId` query param set to the value received from the `/api/last-event-id` endpoint.

package.json

@@ -13,7 +13,6 @@
 	"dependencies": {
 		"@pinia/nuxt": "^0.11.1",
 		"luxon": "^3.6.1",
-		"micromark": "^4.0.2",
 		"nuxt": "^3.17.6",
 		"pinia": "^3.0.3",
 		"vue": "^3.5.17",

pages/admin/index.vue

@@ -109,3 +109,7 @@ const tabs = [
 	{ id: "database", title: "Database" },
 ];
 </script>
+
+<style>
+
+</style>

pages/admin/users/[id].vue

@@ -84,7 +84,7 @@ const { pending, data, error } = await useFetch(() => `/api/users/${id.value}/de
 const userDetails = data as Ref<ApiUserDetails | ApiTombstone>;
 </script>
 
-<style scoped>
+<style>
 dl {
 	display: grid;
 	grid-template-columns: auto 1fr;

pages/schedule.vue

@@ -68,19 +68,13 @@
 		<ul>
 			<li v-for="location in schedule.locations.values()" :key="location.id">
 				<h3>{{ location.name }}</h3>
-				<div
+				{{ location.description ?? "No description provided" }}
-					v-if="location.description"
-					class="flow"
-					v-html="micromark(location.description)"
-				/>
 			</li>
 		</ul>
 	</main>
 </template>
 
 <script setup lang="ts">
-import { micromark } from 'micromark';
-
 useHead({
 	title: "Schedule",
 });

pnpm-lock.yaml

@@ -14,9 +14,6 @@ importers:
       luxon:
         specifier: ^3.6.1
         version: 3.6.1
-      micromark:
-        specifier: ^4.0.2
-        version: 4.0.2
       nuxt:
         specifier: ^3.17.6
         version: 3.17.6(@parcel/watcher@2.5.1)(@types/node@24.0.10)(@vue/compiler-sfc@3.5.17)(db0@0.3.2)(ioredis@5.6.1)(magicast@0.3.5)(rollup@4.44.2)(terser@5.43.1)(typescript@5.8.3)(vite@6.3.5(@types/node@24.0.10)(jiti@2.4.2)(terser@5.43.1)(yaml@2.8.0))(vue-tsc@3.0.1(typescript@5.8.3))(yaml@2.8.0)
@@ -38,7 +35,7 @@ importers:
     devDependencies:
       '@nuxt/test-utils':
         specifier: ^3.19.2
-        version: 3.19.2(happy-dom@17.6.3)(magicast@0.3.5)(typescript@5.8.3)(vitest@3.2.4(@types/debug@4.1.12)(@types/node@24.0.10)(happy-dom@17.6.3)(jiti@2.4.2)(terser@5.43.1)(yaml@2.8.0))
+        version: 3.19.2(happy-dom@17.6.3)(magicast@0.3.5)(typescript@5.8.3)(vitest@3.2.4(@types/node@24.0.10)(happy-dom@17.6.3)(jiti@2.4.2)(terser@5.43.1)(yaml@2.8.0))
       '@types/luxon':
         specifier: ^3.6.2
         version: 3.6.2
@@ -50,7 +47,7 @@ importers:
         version: 17.6.3
       vitest:
         specifier: ^3.2.4
-        version: 3.2.4(@types/debug@4.1.12)(@types/node@24.0.10)(happy-dom@17.6.3)(jiti@2.4.2)(terser@5.43.1)(yaml@2.8.0)
+        version: 3.2.4(@types/node@24.0.10)(happy-dom@17.6.3)(jiti@2.4.2)(terser@5.43.1)(yaml@2.8.0)
       vue-tsc:
         specifier: ^3.0.1
         version: 3.0.1(typescript@5.8.3)
@@ -1083,9 +1080,6 @@ packages:
   '@types/chai@5.2.2':
     resolution: {integrity: sha512-8kB30R7Hwqf40JPiKhVzodJs2Qc1ZJ5zuT3uzw5Hq/dhNCl3G3l83jfpdI1e20BP348+fV7VIL/+FxaXkqBmWg==}
 
-  '@types/debug@4.1.12':
-    resolution: {integrity: sha512-vIChWdVG3LG1SMxEvI/AK+FWJthlrqlTu7fbrlywTkkaONwk/UAGaULXRlf8vkzFBLVm0zkMdCquhL5aOjhXPQ==}
-
   '@types/deep-eql@4.0.2':
     resolution: {integrity: sha512-c9h9dVVMigMPc4bwTvC5dxqtqJZwQPePsWjPlpSOnojbor6pGqdk541lfA7AqFQr5pB1BRdq0juY9db81BwyFw==}
 
@@ -1095,9 +1089,6 @@ packages:
   '@types/luxon@3.6.2':
     resolution: {integrity: sha512-R/BdP7OxEMc44l2Ex5lSXHoIXTB2JLNa3y2QISIbr58U/YcsffyQrYW//hZSdrfxrjRZj3GcUoxMPGdO8gSYuw==}
 
-  '@types/ms@2.1.0':
-    resolution: {integrity: sha512-GsCCIZDE/p3i96vtEqx+7dBUGXrc7zeSK3wwPHIaRThS+9OhWIXRqzs4d6k1SVU8g91DrNRWxWUGhp5KXQb2VA==}
-
   '@types/node@24.0.10':
     resolution: {integrity: sha512-ENHwaH+JIRTDIEEbDK6QSQntAYGtbvdDXnMXnZaZ6k13Du1dPMmprkEHIL7ok2Wl2aZevetwTAb5S+7yIF+enA==}
 
@@ -1492,9 +1483,6 @@ packages:
     resolution: {integrity: sha512-mCuXncKXk5iCLhfhwTc0izo0gtEmpz5CtG2y8GiOINBlMVS6v8TMRc5TaLWKS6692m9+dVVfzgeVxR5UxWHTYw==}
     engines: {node: '>=12'}
 
-  character-entities@2.0.2:
-    resolution: {integrity: sha512-shx7oQ0Awen/BRIdkjkvz54PnEEI/EjwXDSIZp86/KKdbafHh1Df/RYGBhn4hbe2+uKC9FnT5UCEdyPz3ai9hQ==}
-
   check-error@2.1.1:
     resolution: {integrity: sha512-OAlb+T7V4Op9OwdkjmguYRqncdlx5JiofwOAUkmTF+jNdHwzTaTs4sRAGpzLF3oOz5xAyDGrPgeIDFQmDOTiJw==}
     engines: {node: '>= 16'}
@@ -1726,9 +1714,6 @@ packages:
   decache@4.6.2:
     resolution: {integrity: sha512-2LPqkLeu8XWHU8qNCS3kcF6sCcb5zIzvWaAHYSvPfwhdd7mHuah29NssMzrTYyHN4F5oFy2ko9OBYxegtU0FEw==}
 
-  decode-named-character-reference@1.2.0:
-    resolution: {integrity: sha512-c6fcElNV6ShtZXmsgNgFFV5tVX2PaV4g+MOAkb8eXHvn6sryJBrZa9r0zV6+dtTyoCKxtDy5tyQ5ZwQuidtd+Q==}
-
   deep-eql@5.0.2:
     resolution: {integrity: sha512-h5k/5U50IJJFpzfL6nO9jaaumfjO/f2NjK/oYB2Djzm4p9L+3T9qWpZqZ2hAbLPuuYq9wrU08WQyBTL5GbPk5Q==}
     engines: {node: '>=6'}
@@ -1764,10 +1749,6 @@ packages:
     resolution: {integrity: sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==}
     engines: {node: '>= 0.8'}
 
-  dequal@2.0.3:
-    resolution: {integrity: sha512-0je+qPKHEMohvfRTCEo3CrPG6cAzAYgmzKyxRiYSSDkS6eGJdyVJm7WaYA5ECaAD9wLB2T4EEeymA5aFVcYXCA==}
-    engines: {node: '>=6'}
-
   destr@2.0.5:
     resolution: {integrity: sha512-ugFTXCtDZunbzasqBxrK93Ik/DRYsO6S/fedkWEMKqt04xZ4csmnmwGDBAb07QWNaGMAmnTIemsYZCksjATwsA==}
 
@@ -1826,9 +1807,6 @@ packages:
   devalue@5.1.1:
     resolution: {integrity: sha512-maua5KUiapvEwiEAe+XnlZ3Rh0GD+qI1J/nb9vrJc3muPXvcF/8gXYTWF76+5DAqHyDUtOIImEuo0YKE9mshVw==}
 
-  devlop@1.1.0:
-    resolution: {integrity: sha512-RWmIqhcFf1lRYBvNmr7qTNuyCt/7/ns2jbpp1+PalgE/rDQcBT0fioSMUpJ93irlUhC5hrg4cYqe6U+0ImW0rA==}
-
   diff@8.0.2:
     resolution: {integrity: sha512-sSuxWU5j5SR9QQji/o2qMvqRNYRDOcBTgsJ/DeCf4iSN4gW+gNMXM7wFIP+fdXZxoNiAnHUTGjCr+TSWXdRDKg==}
     engines: {node: '>=0.3.1'}
@@ -2506,66 +2484,6 @@ packages:
   micro-api-client@3.3.0:
     resolution: {integrity: sha512-y0y6CUB9RLVsy3kfgayU28746QrNMpSm9O/AYGNsBgOkJr/X/Jk0VLGoO8Ude7Bpa8adywzF+MzXNZRFRsNPhg==}
 
-  micromark-core-commonmark@2.0.3:
-    resolution: {integrity: sha512-RDBrHEMSxVFLg6xvnXmb1Ayr2WzLAWjeSATAoxwKYJV94TeNavgoIdA0a9ytzDSVzBy2YKFK+emCPOEibLeCrg==}
-
-  micromark-factory-destination@2.0.1:
-    resolution: {integrity: sha512-Xe6rDdJlkmbFRExpTOmRj9N3MaWmbAgdpSrBQvCFqhezUn4AHqJHbaEnfbVYYiexVSs//tqOdY/DxhjdCiJnIA==}
-
-  micromark-factory-label@2.0.1:
-    resolution: {integrity: sha512-VFMekyQExqIW7xIChcXn4ok29YE3rnuyveW3wZQWWqF4Nv9Wk5rgJ99KzPvHjkmPXF93FXIbBp6YdW3t71/7Vg==}
-
-  micromark-factory-space@2.0.1:
-    resolution: {integrity: sha512-zRkxjtBxxLd2Sc0d+fbnEunsTj46SWXgXciZmHq0kDYGnck/ZSGj9/wULTV95uoeYiK5hRXP2mJ98Uo4cq/LQg==}
-
-  micromark-factory-title@2.0.1:
-    resolution: {integrity: sha512-5bZ+3CjhAd9eChYTHsjy6TGxpOFSKgKKJPJxr293jTbfry2KDoWkhBb6TcPVB4NmzaPhMs1Frm9AZH7OD4Cjzw==}
-
-  micromark-factory-whitespace@2.0.1:
-    resolution: {integrity: sha512-Ob0nuZ3PKt/n0hORHyvoD9uZhr+Za8sFoP+OnMcnWK5lngSzALgQYKMr9RJVOWLqQYuyn6ulqGWSXdwf6F80lQ==}
-
-  micromark-util-character@2.1.1:
-    resolution: {integrity: sha512-wv8tdUTJ3thSFFFJKtpYKOYiGP2+v96Hvk4Tu8KpCAsTMs6yi+nVmGh1syvSCsaxz45J6Jbw+9DD6g97+NV67Q==}
-
-  micromark-util-chunked@2.0.1:
-    resolution: {integrity: sha512-QUNFEOPELfmvv+4xiNg2sRYeS/P84pTW0TCgP5zc9FpXetHY0ab7SxKyAQCNCc1eK0459uoLI1y5oO5Vc1dbhA==}
-
-  micromark-util-classify-character@2.0.1:
-    resolution: {integrity: sha512-K0kHzM6afW/MbeWYWLjoHQv1sgg2Q9EccHEDzSkxiP/EaagNzCm7T/WMKZ3rjMbvIpvBiZgwR3dKMygtA4mG1Q==}
-
-  micromark-util-combine-extensions@2.0.1:
-    resolution: {integrity: sha512-OnAnH8Ujmy59JcyZw8JSbK9cGpdVY44NKgSM7E9Eh7DiLS2E9RNQf0dONaGDzEG9yjEl5hcqeIsj4hfRkLH/Bg==}
-
-  micromark-util-decode-numeric-character-reference@2.0.2:
-    resolution: {integrity: sha512-ccUbYk6CwVdkmCQMyr64dXz42EfHGkPQlBj5p7YVGzq8I7CtjXZJrubAYezf7Rp+bjPseiROqe7G6foFd+lEuw==}
-
-  micromark-util-encode@2.0.1:
-    resolution: {integrity: sha512-c3cVx2y4KqUnwopcO9b/SCdo2O67LwJJ/UyqGfbigahfegL9myoEFoDYZgkT7f36T0bLrM9hZTAaAyH+PCAXjw==}
-
-  micromark-util-html-tag-name@2.0.1:
-    resolution: {integrity: sha512-2cNEiYDhCWKI+Gs9T0Tiysk136SnR13hhO8yW6BGNyhOC4qYFnwF1nKfD3HFAIXA5c45RrIG1ub11GiXeYd1xA==}
-
-  micromark-util-normalize-identifier@2.0.1:
-    resolution: {integrity: sha512-sxPqmo70LyARJs0w2UclACPUUEqltCkJ6PhKdMIDuJ3gSf/Q+/GIe3WKl0Ijb/GyH9lOpUkRAO2wp0GVkLvS9Q==}
-
-  micromark-util-resolve-all@2.0.1:
-    resolution: {integrity: sha512-VdQyxFWFT2/FGJgwQnJYbe1jjQoNTS4RjglmSjTUlpUMa95Htx9NHeYW4rGDJzbjvCsl9eLjMQwGeElsqmzcHg==}
-
-  micromark-util-sanitize-uri@2.0.1:
-    resolution: {integrity: sha512-9N9IomZ/YuGGZZmQec1MbgxtlgougxTodVwDzzEouPKo3qFWvymFHWcnDi2vzV1ff6kas9ucW+o3yzJK9YB1AQ==}
-
-  micromark-util-subtokenize@2.1.0:
-    resolution: {integrity: sha512-XQLu552iSctvnEcgXw6+Sx75GflAPNED1qx7eBJ+wydBb2KCbRZe+NwvIEEMM83uml1+2WSXpBAcp9IUCgCYWA==}
-
-  micromark-util-symbol@2.0.1:
-    resolution: {integrity: sha512-vs5t8Apaud9N28kgCrRUdEed4UJ+wWNvicHLPxCa9ENlYuAY31M0ETy5y1vA33YoNPDFTghEbnh6efaE8h4x0Q==}
-
-  micromark-util-types@2.0.2:
-    resolution: {integrity: sha512-Yw0ECSpJoViF1qTU4DC6NwtC4aWGt1EkzaQB8KPPyCRR8z9TWeV0HbEFGTO+ZY1wB22zmxnJqhPyTpOVCpeHTA==}
-
-  micromark@4.0.2:
-    resolution: {integrity: sha512-zpe98Q6kvavpCr1NPVSCMebCKfD7CA2NqZ+rykeNhONIJBpc1tFKt9hucLGwha3jNTNI8lHpctWJWoimVF4PfA==}
-
   micromatch@4.0.8:
     resolution: {integrity: sha512-PXwfBhYu0hBCPw8Dn0E+WDYb7af3dSLVWKi3HGv84IdF4TyFoC0ysxFd0Goxw7nSv4T/PzEJQxsYsEiFCKo2BA==}
     engines: {node: '>=8.6'}
@@ -4704,7 +4622,7 @@ snapshots:
     transitivePeerDependencies:
       - magicast
 
-  '@nuxt/test-utils@3.19.2(happy-dom@17.6.3)(magicast@0.3.5)(typescript@5.8.3)(vitest@3.2.4(@types/debug@4.1.12)(@types/node@24.0.10)(happy-dom@17.6.3)(jiti@2.4.2)(terser@5.43.1)(yaml@2.8.0))':
+  '@nuxt/test-utils@3.19.2(happy-dom@17.6.3)(magicast@0.3.5)(typescript@5.8.3)(vitest@3.2.4(@types/node@24.0.10)(happy-dom@17.6.3)(jiti@2.4.2)(terser@5.43.1)(yaml@2.8.0))':
     dependencies:
       '@nuxt/kit': 3.17.6(magicast@0.3.5)
       c12: 3.0.4(magicast@0.3.5)
@@ -4728,11 +4646,11 @@ snapshots:
       tinyexec: 1.0.1
       ufo: 1.6.1
       unplugin: 2.3.5
-      vitest-environment-nuxt: 1.0.1(happy-dom@17.6.3)(magicast@0.3.5)(typescript@5.8.3)(vitest@3.2.4(@types/debug@4.1.12)(@types/node@24.0.10)(happy-dom@17.6.3)(jiti@2.4.2)(terser@5.43.1)(yaml@2.8.0))
+      vitest-environment-nuxt: 1.0.1(happy-dom@17.6.3)(magicast@0.3.5)(typescript@5.8.3)(vitest@3.2.4(@types/node@24.0.10)(happy-dom@17.6.3)(jiti@2.4.2)(terser@5.43.1)(yaml@2.8.0))
       vue: 3.5.17(typescript@5.8.3)
     optionalDependencies:
       happy-dom: 17.6.3
-      vitest: 3.2.4(@types/debug@4.1.12)(@types/node@24.0.10)(happy-dom@17.6.3)(jiti@2.4.2)(terser@5.43.1)(yaml@2.8.0)
+      vitest: 3.2.4(@types/node@24.0.10)(happy-dom@17.6.3)(jiti@2.4.2)(terser@5.43.1)(yaml@2.8.0)
     transitivePeerDependencies:
       - magicast
       - typescript
@@ -5077,18 +4995,12 @@ snapshots:
     dependencies:
       '@types/deep-eql': 4.0.2
 
-  '@types/debug@4.1.12':
-    dependencies:
-      '@types/ms': 2.1.0
-
   '@types/deep-eql@4.0.2': {}
 
   '@types/estree@1.0.8': {}
 
   '@types/luxon@3.6.2': {}
 
-  '@types/ms@2.1.0': {}
-
   '@types/node@24.0.10':
     dependencies:
       undici-types: 7.8.0
@@ -5603,8 +5515,6 @@ snapshots:
       loupe: 3.1.4
       pathval: 2.0.1
 
-  character-entities@2.0.2: {}
-
   check-error@2.1.1: {}
 
   chokidar@4.0.3:
@@ -5820,10 +5730,6 @@ snapshots:
     dependencies:
       callsite: 1.0.0
 
-  decode-named-character-reference@1.2.0:
-    dependencies:
-      character-entities: 2.0.2
-
   deep-eql@5.0.2: {}
 
   deepmerge@4.3.1: {}
@@ -5845,8 +5751,6 @@ snapshots:
 
   depd@2.0.0: {}
 
-  dequal@2.0.3: {}
-
   destr@2.0.5: {}
 
   detect-libc@1.0.3: {}
@@ -5911,10 +5815,6 @@ snapshots:
 
   devalue@5.1.1: {}
 
-  devlop@1.1.0:
-    dependencies:
-      dequal: 2.0.3
-
   diff@8.0.2: {}
 
   dom-serializer@2.0.0:
@@ -6601,132 +6501,6 @@ snapshots:
 
   micro-api-client@3.3.0: {}
 
-  micromark-core-commonmark@2.0.3:
-    dependencies:
-      decode-named-character-reference: 1.2.0
-      devlop: 1.1.0
-      micromark-factory-destination: 2.0.1
-      micromark-factory-label: 2.0.1
-      micromark-factory-space: 2.0.1
-      micromark-factory-title: 2.0.1
-      micromark-factory-whitespace: 2.0.1
-      micromark-util-character: 2.1.1
-      micromark-util-chunked: 2.0.1
-      micromark-util-classify-character: 2.0.1
-      micromark-util-html-tag-name: 2.0.1
-      micromark-util-normalize-identifier: 2.0.1
-      micromark-util-resolve-all: 2.0.1
-      micromark-util-subtokenize: 2.1.0
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-
-  micromark-factory-destination@2.0.1:
-    dependencies:
-      micromark-util-character: 2.1.1
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-
-  micromark-factory-label@2.0.1:
-    dependencies:
-      devlop: 1.1.0
-      micromark-util-character: 2.1.1
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-
-  micromark-factory-space@2.0.1:
-    dependencies:
-      micromark-util-character: 2.1.1
-      micromark-util-types: 2.0.2
-
-  micromark-factory-title@2.0.1:
-    dependencies:
-      micromark-factory-space: 2.0.1
-      micromark-util-character: 2.1.1
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-
-  micromark-factory-whitespace@2.0.1:
-    dependencies:
-      micromark-factory-space: 2.0.1
-      micromark-util-character: 2.1.1
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-
-  micromark-util-character@2.1.1:
-    dependencies:
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-
-  micromark-util-chunked@2.0.1:
-    dependencies:
-      micromark-util-symbol: 2.0.1
-
-  micromark-util-classify-character@2.0.1:
-    dependencies:
-      micromark-util-character: 2.1.1
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-
-  micromark-util-combine-extensions@2.0.1:
-    dependencies:
-      micromark-util-chunked: 2.0.1
-      micromark-util-types: 2.0.2
-
-  micromark-util-decode-numeric-character-reference@2.0.2:
-    dependencies:
-      micromark-util-symbol: 2.0.1
-
-  micromark-util-encode@2.0.1: {}
-
-  micromark-util-html-tag-name@2.0.1: {}
-
-  micromark-util-normalize-identifier@2.0.1:
-    dependencies:
-      micromark-util-symbol: 2.0.1
-
-  micromark-util-resolve-all@2.0.1:
-    dependencies:
-      micromark-util-types: 2.0.2
-
-  micromark-util-sanitize-uri@2.0.1:
-    dependencies:
-      micromark-util-character: 2.1.1
-      micromark-util-encode: 2.0.1
-      micromark-util-symbol: 2.0.1
-
-  micromark-util-subtokenize@2.1.0:
-    dependencies:
-      devlop: 1.1.0
-      micromark-util-chunked: 2.0.1
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-
-  micromark-util-symbol@2.0.1: {}
-
-  micromark-util-types@2.0.2: {}
-
-  micromark@4.0.2:
-    dependencies:
-      '@types/debug': 4.1.12
-      debug: 4.4.1
-      decode-named-character-reference: 1.2.0
-      devlop: 1.1.0
-      micromark-core-commonmark: 2.0.3
-      micromark-factory-space: 2.0.1
-      micromark-util-character: 2.1.1
-      micromark-util-chunked: 2.0.1
-      micromark-util-combine-extensions: 2.0.1
-      micromark-util-decode-numeric-character-reference: 2.0.2
-      micromark-util-encode: 2.0.1
-      micromark-util-normalize-identifier: 2.0.1
-      micromark-util-resolve-all: 2.0.1
-      micromark-util-sanitize-uri: 2.0.1
-      micromark-util-subtokenize: 2.1.0
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-    transitivePeerDependencies:
-      - supports-color
-
   micromatch@4.0.8:
     dependencies:
       braces: 3.0.3
@@ -8145,9 +7919,9 @@ snapshots:
       terser: 5.43.1
       yaml: 2.8.0
 
-  vitest-environment-nuxt@1.0.1(happy-dom@17.6.3)(magicast@0.3.5)(typescript@5.8.3)(vitest@3.2.4(@types/debug@4.1.12)(@types/node@24.0.10)(happy-dom@17.6.3)(jiti@2.4.2)(terser@5.43.1)(yaml@2.8.0)):
+  vitest-environment-nuxt@1.0.1(happy-dom@17.6.3)(magicast@0.3.5)(typescript@5.8.3)(vitest@3.2.4(@types/node@24.0.10)(happy-dom@17.6.3)(jiti@2.4.2)(terser@5.43.1)(yaml@2.8.0)):
     dependencies:
-      '@nuxt/test-utils': 3.19.2(happy-dom@17.6.3)(magicast@0.3.5)(typescript@5.8.3)(vitest@3.2.4(@types/debug@4.1.12)(@types/node@24.0.10)(happy-dom@17.6.3)(jiti@2.4.2)(terser@5.43.1)(yaml@2.8.0))
+      '@nuxt/test-utils': 3.19.2(happy-dom@17.6.3)(magicast@0.3.5)(typescript@5.8.3)(vitest@3.2.4(@types/node@24.0.10)(happy-dom@17.6.3)(jiti@2.4.2)(terser@5.43.1)(yaml@2.8.0))
     transitivePeerDependencies:
       - '@cucumber/cucumber'
       - '@jest/globals'
@@ -8162,7 +7936,7 @@ snapshots:
       - typescript
       - vitest
 
-  vitest@3.2.4(@types/debug@4.1.12)(@types/node@24.0.10)(happy-dom@17.6.3)(jiti@2.4.2)(terser@5.43.1)(yaml@2.8.0):
+  vitest@3.2.4(@types/node@24.0.10)(happy-dom@17.6.3)(jiti@2.4.2)(terser@5.43.1)(yaml@2.8.0):
     dependencies:
       '@types/chai': 5.2.2
       '@vitest/expect': 3.2.4
@@ -8188,7 +7962,6 @@ snapshots:
       vite-node: 3.2.4(@types/node@24.0.10)(jiti@2.4.2)(terser@5.43.1)(yaml@2.8.0)
       why-is-node-running: 2.3.0
     optionalDependencies:
-      '@types/debug': 4.1.12
       '@types/node': 24.0.10
       happy-dom: 17.6.3
     transitivePeerDependencies:

server/api/admin/database-export.post.ts

@@ -9,11 +9,11 @@ export default defineEventHandler(async (event) => {
 	setHeader(event, "Content-Disposition", 'attachment; filename="database-dump.json"');
 	setHeader(event, "Content-Type", "application/json; charset=utf-8");
 	return {
-		nextUserId: readNextUserId(),
+		nextUserId: await readNextUserId(),
-		users: readUsers(),
+		users: await readUsers(),
-		nextSessionId: readNextSessionId(),
+		nextSessionId: await readNextSessionId(),
-		sessions: readSessions(),
+		sessions: await readSessions(),
-		subscriptions: readSubscriptions(),
+		subscriptions: await readSubscriptions(),
-		schedule: readSchedule(),
+		schedule: await readSchedule(),
 	};
 })

server/api/admin/database-import-demo.post.ts

@@ -7,14 +7,14 @@ import { generateDemoSchedule, generateDemoAccounts } from "~/server/generate-de
 export default defineEventHandler(async (event) => {
 	await requireServerSessionWithAdmin(event);
 	const accounts = generateDemoAccounts();
-	writeUsers(accounts);
+	await writeUsers(accounts);
-	writeSchedule(generateDemoSchedule());
+	await writeSchedule(generateDemoSchedule());
-	writeAuthenticationMethods(accounts.map((user, index) => ({
+	await writeAuthenticationMethods(accounts.map((user, index) => ({
 		id: index,
 		userId: user.id,
 		provider: "demo",
 		slug: user.name!,
 		name: user.name!,
 	})));
-	writeNextAuthenticationMethodId(Math.max(nextAuthenticationMethodId(), accounts.length));
+	await writeNextAuthenticationMethodId(Math.max(await nextAuthenticationMethodId(), accounts.length));
 })

server/api/admin/database-import.post.ts

@@ -29,20 +29,20 @@ export default defineEventHandler(async (event) => {
 		});
 	}
 
-	const currentNextUserId = readNextUserId();
+	const currentNextUserId = await readNextUserId();
-	writeNextUserId(Math.max(currentNextUserId, snapshot.nextUserId));
+	await writeNextUserId(Math.max(currentNextUserId, snapshot.nextUserId));
-	writeUsers(snapshot.users);
+	await writeUsers(snapshot.users);
-	const currentNextSessionId = readNextSessionId();
+	const currentNextSessionId = await readNextSessionId();
-	writeNextSessionId(Math.max(currentNextSessionId, snapshot.nextSessionId));
+	await writeNextSessionId(Math.max(currentNextSessionId, snapshot.nextSessionId));
-	const currentSessions = new Map((readSessions()).map(session => [session.id, session]));
+	const currentSessions = new Map((await readSessions()).map(session => [session.id, session]));
-	writeSessions(snapshot.sessions.filter(session => {
+	await writeSessions(snapshot.sessions.filter(session => {
 		const current = currentSessions.get(session.id);
 		// Only keep sessions that match the account id in both sets to avoid
 		// resurrecting deleted sessions. This will still cause session cross
 		// pollution if a snapshot from another instance is loaded here.
 		return current?.accountId !== undefined && current.accountId === session.accountId;
 	}));
-	writeSubscriptions(snapshot.subscriptions);
+	await writeSubscriptions(snapshot.subscriptions);
-	writeSchedule(snapshot.schedule);
+	await writeSchedule(snapshot.schedule);
 	await sendRedirect(event, "/");
 })

server/api/admin/delete-database.post.ts

@@ -6,5 +6,5 @@ import { deleteDatabase } from "~/server/database";
 
 export default defineEventHandler(async (event) => {
 	await requireServerSessionWithAdmin(event);
-	deleteDatabase();
+	await deleteDatabase();
 })

server/api/admin/user.patch.ts

@@ -2,7 +2,7 @@
 	SPDX-FileCopyrightText: © 2025 Hornwitser <code@hornwitser.no>
 	SPDX-License-Identifier: AGPL-3.0-or-later
 */
-import { nextEventId, readSessions, readUsers, writeSessions, writeUsers } from "~/server/database";
+import { readSessions, readUsers, writeSessions, writeUsers } from "~/server/database";
 import { apiUserPatchSchema } from "~/shared/types/api";
 import { z } from "zod/v4-mini";
 import { broadcastEvent } from "~/server/streams";
@@ -18,7 +18,7 @@ export default defineEventHandler(async (event) => {
 		});
 	}
 
-	const users = readUsers();
+	const users = await readUsers();
 	const user = users.find(user => user.id === patch.id);
 	if (!user || user.deleted) {
 		throw createError({
@@ -52,28 +52,26 @@ export default defineEventHandler(async (event) => {
 		user.name = patch.name;
 	}
 	user.updatedAt = new Date().toISOString();
-	writeUsers(users);
+	await writeUsers(users);
 	broadcastEvent({
-		id: nextEventId(),
 		type: "user-update",
 		data: serverUserToApi(user),
 	});
 
 	// Rotate sessions with the user in it if the access changed
 	if (accessChanged) {
-		const sessions = readSessions();
+		const sessions = await readSessions();
 		const nowMs = Date.now();
 		for (const session of sessions) {
 			if (session.accountId === user.id) {
 				session.rotatesAtMs = nowMs;
 				broadcastEvent({
-					id: nextEventId(),
 					type: "session-expired",
 					sessionId: session.id,
 				});
 			}
 		}
-		writeSessions(sessions);
+		await writeSessions(sessions);
 	}
 
 	// Update Schedule counts.

server/api/auth/account.delete.ts

@@ -5,17 +5,16 @@
 import {
 	readUsers, readSessions, readSubscriptions,
 	writeUsers, writeSessions, writeSubscriptions,
-	nextEventId,
 } from "~/server/database";
 import { broadcastEvent, cancelAccountStreams } from "~/server/streams";
 
 export default defineEventHandler(async (event) => {
 	const serverSession = await requireServerSessionWithUser(event);
-	let users = readUsers();
+	let users = await readUsers();
 
 	// Expire sessions for this user
 	const expiredSessionIds = new Set<number>();
-	let sessions = readSessions();
+	let sessions = await readSessions();
 	const nowMs = Date.now();
 	for (const session of sessions) {
 		if (
@@ -25,7 +24,6 @@ export default defineEventHandler(async (event) => {
 		) {
 			session.expiresAtMs = nowMs;
 			broadcastEvent({
-				id: nextEventId(),
 				type: "session-expired",
 				sessionId: session.id,
 			});
@@ -33,24 +31,23 @@ export default defineEventHandler(async (event) => {
 		}
 	}
 	cancelAccountStreams(serverSession.accountId);
-	writeSessions(sessions);
+	await writeSessions(sessions);
 	await deleteCookie(event, "session");
 
 	// Remove subscriptions for this user
-	let subscriptions = readSubscriptions();
+	let subscriptions = await readSubscriptions();
 	subscriptions = subscriptions.filter(
 		subscription => !expiredSessionIds.has(subscription.sessionId)
 	);
-	writeSubscriptions(subscriptions);
+	await writeSubscriptions(subscriptions);
 
 	// Remove the user
 	const account = users.find(user => user.id === serverSession.accountId)!;
 	const now = new Date(nowMs).toISOString();
 	account.deleted = true;
 	account.updatedAt = now;
-	writeUsers(users);
+	await writeUsers(users);
 	await broadcastEvent({
-		id: nextEventId(),
 		type: "user-update",
 		data: {
 			id: account.id,

server/api/auth/account.patch.ts

@@ -38,7 +38,7 @@ export default defineEventHandler(async (event) => {
 		}
 	}
 
-	const users = readUsers();
+	const users = await readUsers();
 	const account = users.find(user => user.id === session.accountId);
 	if (!account) {
 		throw Error("Account does not exist");
@@ -70,7 +70,7 @@ export default defineEventHandler(async (event) => {
 		else
 			delete account.locale;
 	}
-	writeUsers(users);
+	await writeUsers(users);
 
 	// Update Schedule counts.
 	await updateScheduleInterestedCounts(users);

server/api/auth/account.post.ts

@@ -2,7 +2,7 @@
 	SPDX-FileCopyrightText: © 2025 Hornwitser <code@hornwitser.no>
 	SPDX-License-Identifier: AGPL-3.0-or-later
 */
-import { readUsers, writeUsers, nextUserId, type ServerUser, readAuthenticationMethods, nextAuthenticationMethodId, writeAuthenticationMethods, nextEventId } from "~/server/database";
+import { readUsers, writeUsers, nextUserId, type ServerUser, readAuthenticationMethods, nextAuthenticationMethodId, writeAuthenticationMethods } from "~/server/database";
 import { broadcastEvent } from "~/server/streams";
 import type { ApiSession } from "~/shared/types/api";
 
@@ -18,7 +18,7 @@ export default defineEventHandler(async (event): Promise<ApiSession> => {
 	const body = await readBody(event);
 	const name = body?.name;
 
-	const users = readUsers();
+	const users = await readUsers();
 	let user: ServerUser;
 	if (typeof name === "string") {
 		if (name === "") {
@@ -36,7 +36,7 @@ export default defineEventHandler(async (event): Promise<ApiSession> => {
 
 		const firstUser = users.every(user => user.type === "anonymous");
 		user = {
-			id: nextUserId(),
+			id: await nextUserId(),
 			updatedAt: new Date().toISOString(),
 			type: firstUser ? "admin" : "regular",
 			name,
@@ -44,7 +44,7 @@ export default defineEventHandler(async (event): Promise<ApiSession> => {
 
 	} else if (name === undefined) {
 		user = {
-			id: nextUserId(),
+			id: await nextUserId(),
 			updatedAt: new Date().toISOString(),
 			type: "anonymous",
 		};
@@ -76,19 +76,18 @@ export default defineEventHandler(async (event): Promise<ApiSession> => {
 			});
 		}
 		authMethods.push({
-			id: nextAuthenticationMethodId(),
+			id: await nextAuthenticationMethodId(),
 			userId: user.id,
 			provider: session.authenticationProvider,
 			slug: session.authenticationSlug!,
 			name: session.authenticationName!,
 		})
-		writeAuthenticationMethods(authMethods);
+		await writeAuthenticationMethods(authMethods);
 	}
 
 	users.push(user);
-	writeUsers(users);
+	await writeUsers(users);
 	await broadcastEvent({
-		id: nextEventId(),
 		type: "user-update",
 		data: user,
 	});

server/api/auth/ap/demo-login.post.ts

@@ -24,11 +24,11 @@ export default defineEventHandler(async (event) => {
 		});
 	}
 
-	const authMethods = readAuthenticationMethods();
+	const authMethods = await readAuthenticationMethods();
 	const method = authMethods.find(method => method.provider === "demo" && method.slug === slug);
 	let session;
 	if (method) {
-		const users = readUsers();
+		const users = await readUsers();
 		const account = users.find(user => !user.deleted && user.id === method.userId);
 		session = await setServerSession(event, account);
 	} else {

server/api/auth/ap/telegram-login.post.ts

@@ -84,11 +84,11 @@ export default defineEventHandler(async (event): Promise<ApiSession> => {
 	}
 
 	const slug = String(data.authData.id);
-	const authMethods = readAuthenticationMethods();
+	const authMethods = await readAuthenticationMethods();
 	const method = authMethods.find(method => method.provider === "telegram" && method.slug === slug);
 	let session;
 	if (method) {
-		const users = readUsers();
+		const users = await readUsers();
 		const account = users.find(user => !user.deleted && user.id === method.userId);
 		session = await setServerSession(event, account);
 	} else {

server/api/auth/session.delete.ts

@@ -8,7 +8,7 @@ import { cancelSessionStreams } from "~/server/streams";
 export default defineEventHandler(async (event) => {
 	const session = await getServerSession(event, true);
 	if (session) {
-		const users = readUsers();
+		const users = await readUsers();
 		const account = users.find(user => user.id === session.accountId);
 		if (account?.type === "anonymous") {
 			throw createError({

server/api/events.ts

@@ -3,47 +3,33 @@
 	SPDX-License-Identifier: AGPL-3.0-or-later
 */
 import { pipeline } from "node:stream";
-import { createEventStream } from "~/server/streams";
+import { addStream, deleteStream } from "~/server/streams";
 
 export default defineEventHandler(async (event) => {
 	const session = await getServerSession(event, false);
 
-	let lastEventId: number | undefined;
+	const encoder = new TextEncoder();
-	const lastEventIdHeader = event.headers.get("Last-Event-ID");
+	const source = event.headers.get("x-forwarded-for");
-	const lastEventIdQuery = getQuery(event)["lastEventId"];
+	console.log(`starting event stream for ${source}`)
-	if (lastEventIdHeader) {
+	const stream = new TransformStream<string, Uint8Array>({
-		if (!/^[0-9]{1,15}$/.test(lastEventIdHeader)) {
+		transform(chunk, controller) {
-			throw createError({
+			controller.enqueue(encoder.encode(chunk));
-				statusCode: 400,
+		},
-				statusMessage: "Bad Request",
+		flush(controller) {
-				message: "Malformed Last-Event-ID header",
+			console.log(`finished event stream for ${source}`);
-			});
+			deleteStream(stream.writable);
+		},
+		// @ts-expect-error experimental API
+		cancel(reason) {
+			console.log(`cancelled event stream for ${source}`);
+			deleteStream(stream.writable);
 		}
-		lastEventId = Number.parseInt(lastEventIdHeader, 10);
+	});
-	} else if (lastEventIdQuery) {
+	addStream(event, stream.writable, session);
-		if (typeof lastEventIdQuery !== "string" || !/^[0-9]{1,15}$/.test(lastEventIdQuery)) {
-			throw createError({
-				statusCode: 400,
-				statusMessage: "Bad Request",
-				message: "Malformed lastEventId",
-			});
-		}
-		lastEventId = Number.parseInt(lastEventIdQuery, 10);
-	} else {
-		throw createError({
-			statusCode: 400,
-			statusMessage: "Bad Request",
-			message: "lastEventId is required",
-		});
-	}
-
-	const source = event.headers.get("x-forwarded-for") ?? "";
-	const stream = await createEventStream(event, source, lastEventId, session);
 
 	// Workaround to properly handle stream errors. See https://github.com/unjs/h3/issues/986
 	setHeader(event, "Access-Control-Allow-Origin", "*");
 	setHeader(event, "Content-Type", "text/event-stream");
-	setHeader(event, "Cache-Control", "no-store");
+	pipeline(stream.readable as unknown as NodeJS.ReadableStream, event.node.res, (err) => { /* ignore */ });
-	pipeline(stream as unknown as NodeJS.ReadableStream, event.node.res, (err) => { /* ignore */ });
 	event._handled = true;
 });

server/api/last-event-id.ts

@@ -1,11 +0,0 @@
-/*
-	SPDX-FileCopyrightText: © 2025 Hornwitser <code@hornwitser.no>
-	SPDX-License-Identifier: AGPL-3.0-or-later
-*/
-
-import { readEvents } from "../database";
-
-export default defineEventHandler(async (event) => {
-	const events = readEvents();
-	return events[events.length - 1]?. id ?? 0;
-});

server/api/schedule.patch.ts

@@ -3,7 +3,7 @@
 	SPDX-License-Identifier: AGPL-3.0-or-later
 */
 import { z } from "zod/v4-mini";
-import { nextEventId, readSchedule, writeSchedule } from "~/server/database";
+import { readSchedule, writeSchedule } from "~/server/database";
 import { broadcastEvent } from "~/server/streams";
 import { apiScheduleSchema } from "~/shared/types/api";
 import { applyUpdatesToArray } from "~/shared/utils/update";
@@ -35,7 +35,7 @@ export default defineEventHandler(async (event) => {
 		});
 	}
 
-	const schedule = readSchedule();
+	const schedule = await readSchedule();
 
 	if (schedule.deleted) {
 		throw createError({
@@ -85,9 +85,8 @@ export default defineEventHandler(async (event) => {
 		applyUpdatesToArray(update.shifts, schedule.shifts = schedule.shifts ?? []);
 	}
 
-	writeSchedule(schedule);
+	await writeSchedule(schedule);
 	await broadcastEvent({
-		id: nextEventId(),
 		type: "schedule-update",
 		updatedFrom,
 		data: update,

server/api/schedule.ts

@@ -6,6 +6,6 @@ import { readSchedule } from "~/server/database";
 
 export default defineEventHandler(async (event) => {
 	const session = await getServerSession(event, false);
-	const schedule = readSchedule();
+	const schedule = await readSchedule();
 	return canSeeCrew(session?.access) ? schedule : filterSchedule(schedule);
 });

server/api/subscribe.post.ts

@@ -20,7 +20,7 @@ export default defineEventHandler(async (event) => {
 			message: z.prettifyError(error),
 		});
 	}
-	const subscriptions = readSubscriptions();
+	const subscriptions = await readSubscriptions();
 	const existingIndex = subscriptions.findIndex(
 		sub => sub.type === "push" && sub.sessionId === session.id
 	);
@@ -34,7 +34,7 @@ export default defineEventHandler(async (event) => {
 	} else {
 		subscriptions.push(subscription);
 	}
-	writeSubscriptions(subscriptions);
+	await writeSubscriptions(subscriptions);
 	if (existingIndex !== -1) {
 		return { message: "Existing subscription refreshed."};
 	}

server/api/unsubscribe.post.ts

@@ -6,7 +6,7 @@ import { readSubscriptions, writeSubscriptions } from "~/server/database";
 
 export default defineEventHandler(async (event) => {
 	const session = await requireServerSessionWithUser(event);
-	const subscriptions = readSubscriptions();
+	const subscriptions = await readSubscriptions();
 	const existingIndex = subscriptions.findIndex(
 		sub => sub.type === "push" && sub.sessionId === session.id
 	);
@@ -15,6 +15,6 @@ export default defineEventHandler(async (event) => {
 	} else {
 		return { message: "No subscription registered."};
 	}
-	writeSubscriptions(subscriptions);
+	await writeSubscriptions(subscriptions);
 	return { message: "Existing subscription removed."};
 });

server/api/users/[id]/details.get.ts

@@ -13,7 +13,7 @@ const detailsSchema = z.object({
 
 export default defineEventHandler(async (event) => {
 	await requireServerSessionWithAdmin(event);
-	const users = readUsers();
+	const users = await readUsers();
 	const { success, error, data: params } = detailsSchema.safeParse(getRouterParams(event));
 	if (!success) {
 		throw createError({

server/api/users/index.get.ts

@@ -6,7 +6,7 @@ import { readUsers } from "~/server/database"
 
 export default defineEventHandler(async (event) => {
 	const session = await requireServerSessionWithUser(event);
-	const users = readUsers();
+	const users = await readUsers();
 
 	if (session.access === "admin") {
 		return users.map(serverUserToApi);

server/database.ts

@@ -2,8 +2,8 @@
 	SPDX-FileCopyrightText: © 2025 Hornwitser <code@hornwitser.no>
 	SPDX-License-Identifier: AGPL-3.0-or-later
 */
-import { readFileSync, writeFileSync, unlinkSync } from "node:fs";
+import { readFile, unlink, writeFile } from "node:fs/promises";
-import type { ApiAuthenticationProvider, ApiEvent, ApiSchedule, ApiSubscription, ApiUserType } from "~/shared/types/api";
+import type { ApiAuthenticationProvider, ApiSchedule, ApiSubscription, ApiUserType } from "~/shared/types/api";
 import type { Id } from "~/shared/types/common";
 
 export interface ServerSession {
@@ -50,12 +50,10 @@ const sessionsPath = "data/sessions.json";
 const nextSessionIdPath = "data/next-session-id.json";
 const authMethodPath = "data/auth-method.json";
 const nextAuthenticationMethodIdPath = "data/auth-method-id.json"
-const nextEventIdPath = "data/next-event-id.json";
-const eventsPath = "data/events.json";
 
-function remove(path: string) {
+async function remove(path: string) {
 	try {
-		unlinkSync(path);
+		await unlink(path);
 	} catch (err: any) {
 		if (err.code !== "ENOENT") {
 			throw err;
@@ -63,17 +61,17 @@ function remove(path: string) {
 	}
 }
 
-export function deleteDatabase() {
+export async function deleteDatabase() {
-	remove(schedulePath);
+	await remove(schedulePath);
-	remove(subscriptionsPath);
+	await remove(subscriptionsPath);
-	remove(usersPath);
+	await remove(usersPath);
-	remove(sessionsPath);
+	await remove(sessionsPath);
 }
 
-function readJson<T>(filePath: string, fallback: T) {
+async function readJson<T>(filePath: string, fallback: T) {
 	let data: T extends () => infer R ? R : T;
 	try {
-		data = JSON.parse(readFileSync(filePath, "utf-8"));
+		data = JSON.parse(await readFile(filePath, "utf-8"));
 	} catch (err: any) {
 		if (err.code !== "ENOENT")
 			throw err;
@@ -82,19 +80,19 @@ function readJson<T>(filePath: string, fallback: T) {
 	return data;
 }
 
-export function readSchedule() {
+export async function readSchedule() {
 	return readJson(schedulePath, (): ApiSchedule => ({
 		id: 111,
 		updatedAt: new Date().toISOString(),
 	}));
 }
 
-export function writeSchedule(schedule: ApiSchedule) {
+export async function writeSchedule(schedule: ApiSchedule) {
-	writeFileSync(schedulePath, JSON.stringify(schedule, undefined, "\t") + "\n", "utf-8");
+	await writeFile(schedulePath, JSON.stringify(schedule, undefined, "\t") + "\n", "utf-8");
 }
 
-export function readSubscriptions() {
+export async function readSubscriptions() {
-	let subscriptions = readJson<ApiSubscription[]>(subscriptionsPath, []);
+	let subscriptions = await readJson<ApiSubscription[]>(subscriptionsPath, []);
 	if (subscriptions.length && "keys" in subscriptions[0]) {
 		// Discard old format
 		subscriptions = [];
@@ -102,89 +100,71 @@ export function readSubscriptions() {
 	return subscriptions;
 }
 
-export function writeSubscriptions(subscriptions: ApiSubscription[]) {
+export async function writeSubscriptions(subscriptions: ApiSubscription[]) {
-	writeFileSync(subscriptionsPath, JSON.stringify(subscriptions, undefined, "\t") + "\n", "utf-8");
+	await writeFile(subscriptionsPath, JSON.stringify(subscriptions, undefined, "\t") + "\n", "utf-8");
 }
 
-export function readNextUserId() {
+export async function readNextUserId() {
-	return readJson(nextUserIdPath, 0);
+	return await readJson(nextUserIdPath, 0);
 }
 
-export function writeNextUserId(nextId: number) {
+export async function writeNextUserId(nextId: number) {
-	writeFileSync(nextUserIdPath, String(nextId), "utf-8");
+	await writeFile(nextUserIdPath, String(nextId), "utf-8");
 }
 
-export function nextUserId() {
+export async function nextUserId() {
-	let nextId = readJson(nextUserIdPath, 0);
+	let nextId = await readJson(nextUserIdPath, 0);
 	if (nextId === 0) {
-		nextId = Math.max(...(readUsers()).map(user => user.id), -1) + 1;
+		nextId = Math.max(...(await readUsers()).map(user => user.id), -1) + 1;
 	}
-	writeFileSync(nextUserIdPath, String(nextId + 1), "utf-8");
+	await writeFile(nextUserIdPath, String(nextId + 1), "utf-8");
 	return nextId;
 }
 
-export function readUsers() {
+export async function readUsers() {
-	return readJson(usersPath, (): ServerUser[] => []);
+	return await readJson(usersPath, (): ServerUser[] => []);
 }
 
-export function writeUsers(users: ServerUser[]) {
+export async function writeUsers(users: ServerUser[]) {
-	writeFileSync(usersPath, JSON.stringify(users, undefined, "\t") + "\n", "utf-8");
+	await writeFile(usersPath, JSON.stringify(users, undefined, "\t") + "\n", "utf-8");
 }
 
-export function readNextSessionId() {
+export async function readNextSessionId() {
-	return readJson(nextSessionIdPath, 0);
+	return await readJson(nextSessionIdPath, 0);
 }
 
-export function writeNextSessionId(nextId: number) {
+export async function writeNextSessionId(nextId: number) {
-	writeFileSync(nextSessionIdPath, String(nextId), "utf-8");
+	await writeFile(nextSessionIdPath, String(nextId), "utf-8");
 }
 
-export function nextSessionId() {
+export async function nextSessionId() {
-	const nextId = readJson(nextSessionIdPath, 0);
+	const nextId = await readJson(nextSessionIdPath, 0);
-	writeFileSync(nextSessionIdPath, String(nextId + 1), "utf-8");
+	await writeFile(nextSessionIdPath, String(nextId + 1), "utf-8");
 	return nextId;
 }
 
-export function readSessions() {
+export async function readSessions() {
 	return readJson<ServerSession[]>(sessionsPath, [])
 }
 
-export function writeSessions(sessions: ServerSession[]) {
+export async function writeSessions(sessions: ServerSession[]) {
-	writeFileSync(sessionsPath, JSON.stringify(sessions, undefined, "\t") + "\n", "utf-8");
+	await writeFile(sessionsPath, JSON.stringify(sessions, undefined, "\t") + "\n", "utf-8");
 }
 
-export function nextAuthenticationMethodId() {
+export async function nextAuthenticationMethodId() {
-	const nextId = readJson(nextAuthenticationMethodIdPath, 0);
+	const nextId = await readJson(nextAuthenticationMethodIdPath, 0);
-	writeFileSync(nextAuthenticationMethodIdPath, String(nextId + 1), "utf-8");
+	await writeFile(nextAuthenticationMethodIdPath, String(nextId + 1), "utf-8");
 	return nextId;
 }
 
-export function writeNextAuthenticationMethodId(nextId: number) {
+export async function writeNextAuthenticationMethodId(nextId: number) {
-	writeFileSync(nextAuthenticationMethodIdPath, String(nextId), "utf-8");
+	await writeFile(nextAuthenticationMethodIdPath, String(nextId), "utf-8");
 }
 
-export function readAuthenticationMethods() {
+export async function readAuthenticationMethods() {
 	return readJson<ServerAuthenticationMethod[]>(authMethodPath, [])
 }
 
-export function writeAuthenticationMethods(authMethods: ServerAuthenticationMethod[]) {
+export async function writeAuthenticationMethods(authMethods: ServerAuthenticationMethod[]) {
-	writeFileSync(authMethodPath, JSON.stringify(authMethods, undefined, "\t") + "\n", "utf-8");
+	await writeFile(authMethodPath, JSON.stringify(authMethods, undefined, "\t") + "\n", "utf-8");
-}
-
-export function nextEventId() {
-	const nextId = readJson(nextEventIdPath, 0);
-	writeFileSync(nextEventIdPath, String(nextId + 1), "utf-8");
-	return nextId;
-}
-
-export function writeNextEventId(nextId: number) {
-	writeFileSync(nextEventIdPath, String(nextId), "utf-8");
-}
-
-export function readEvents() {
-	return readJson<ApiEvent[]>(eventsPath, [])
-}
-
-export function writeEvents(events: ApiEvent[]) {
-	writeFileSync(eventsPath, JSON.stringify(events, undefined, "\t") + "\n", "utf-8");
 }

server/streams.ts

@@ -2,134 +2,82 @@
 	SPDX-FileCopyrightText: © 2025 Hornwitser <code@hornwitser.no>
 	SPDX-License-Identifier: AGPL-3.0-or-later
 */
-import { readEvents, writeEvents, readUsers, type ServerSession } from "~/server/database";
+import { readUsers, type ServerSession } from "~/server/database";
-import type { ApiAccount, ApiDisconnected, ApiEvent, ApiEventStreamMessage, ApiUserType } from "~/shared/types/api";
+import type { ApiAccount, ApiEvent } from "~/shared/types/api";
 import { serverSessionToApi } from "./utils/session";
 import { H3Event } from "h3";
 
-const keepaliveTimeoutMs = 45e3;
+function sendMessage(
-const eventUpdateTimeMs = 1e3;
+	stream: WritableStream<string>,
-
+	message: string,
-class EventStream {
+) {
-	write!: (data: string) => void;
+	const writer = stream.getWriter();
-	close!: (reason?: string) => void;
+	writer.ready
-
+		.then(() => writer.write(message))
-	constructor(
+		.catch(console.error)
-		public sessionId: number | undefined,
+		.finally(() => writer.releaseLock())
-		public accountId: number | undefined,
+	;
-		public userType: ApiUserType | undefined,
-		public rotatesAtMs: number ,
-		public lastKeepAliveMs: number,
-		public lastEventId: number,
-	) {
-	}
 }
 
-export async function createEventStream(
+function sendMessageAndClose(
+	stream: WritableStream<string>,
+	message: string,
+) {
+	const writer = stream.getWriter();
+	writer.ready
+		.then(() => {
+			writer.write(message);
+			writer.close();
+		}).catch(console.error)
+		.finally(() => writer.releaseLock())
+	;
+}
+
+const streams = new Map<WritableStream<string>, { sessionId?: number, accountId?: number, rotatesAtMs: number }>();
+
+let keepaliveInterval: ReturnType<typeof setInterval> | null = null
+export async function addStream(
 	event: H3Event,
-	source: string,
+	stream: WritableStream<string>,
-	lastEventId: number,
 	session?: ServerSession,
 ) {
-	const runtimeConfig = useRuntimeConfig(event);
+	if (streams.size === 0) {
-	const now = Date.now();
+		console.log("Starting keepalive")
-	const events = (readEvents()).filter(e => e.id > lastEventId);
+		keepaliveInterval = setInterval(sendKeepalive, 4000)
-	const users = readUsers();
-	const apiSession = session ? await serverSessionToApi(event, session) : undefined;
-	let userType: ApiAccount["type"] | undefined;
-	if (session?.accountId !== undefined) {
-		userType = users.find(a => !a.deleted && a.id === session.accountId)?.type
 	}
-	const stream = new EventStream(
+	const runtimeConfig = useRuntimeConfig(event);
-		session?.id,
+	streams.set(stream, {
-		session?.accountId,
+		sessionId: session?.id,
-		userType,
+		accountId: session?.accountId,
-		session?.rotatesAtMs ?? now + runtimeConfig.sessionRotatesTimeout * 1000,
+		rotatesAtMs: session?.rotatesAtMs ?? Date.now() + runtimeConfig.sessionRotatesTimeout * 1000,
-		now,
-		events[events.length - 1]?.id ?? lastEventId,
-	);
-
-	const readableStream = new ReadableStream<Uint8Array>({
-		start(controller) {
-			const encoder = new TextEncoder();
-			stream.write = (data: string) => {
-				controller.enqueue(encoder.encode(data));
-			}
-			stream.close = (reason?: string) => {
-				const data: ApiDisconnected = {
-					type: "disconnect",
-					reason,
-				};
-				stream.write(`data: ${JSON.stringify(data)}\n\n`);
-				controller.close();
-				deleteStream(stream);
-			},
-			console.log(`Starting event stream for ${source}`)
-			addStream(stream);
-		},
-		cancel(reason) {
-			console.log(`Cancelled event stream for ${source}:`, reason);
-			deleteStream(stream);
-		}
 	});
 	// Produce a response immediately to avoid the reply waiting for content.
-	const update: ApiEventStreamMessage = {
+	const update: ApiEvent = {
 		type: "connected",
-		session: apiSession,
+		session: session ? await serverSessionToApi(event, session) : undefined,
 	};
-	stream.write(`data: ${JSON.stringify(update)}\n\n`);
+	sendMessage(stream, `event: update\ndata: ${JSON.stringify(update)}\n\n`);
-
-	/*
-		Send events since the provided lastEventId
-
-		Warning: This have to happen either before addStream(stream) is
-		called, or as done here synchronously after it. Otherwise there's a
-		possibility of events being delivered out of order, which will break
-		the assumption made by the schedule updating logic.
-	*/
-	if (events.length)
-		console.log(`Sending ${events.length} event(s) to ${source}`);
-	for (const event of events) {
-		if (!sendEventToStream(stream, event)) {
-			break;
-		}
-	}
-
-	return readableStream;
 }
-
+export function deleteStream(stream: WritableStream<string>) {
-let updateInterval: ReturnType<typeof setInterval> | null = null
-const streams = new Set<EventStream>();
-function addStream(
-	stream: EventStream,
-) {
-	if (streams.size === 0) {
-		console.log("Starting event updates")
-		updateInterval = setInterval(sendEventUpdates, eventUpdateTimeMs)
-	}
-	streams.add(stream);
-}
-function deleteStream(stream: EventStream) {
 	streams.delete(stream);
 	if (streams.size === 0) {
-		console.log("Ending event updates")
+		console.log("Ending keepalive")
-		clearInterval(updateInterval!);
+		clearInterval(keepaliveInterval!);
-		updateInterval = null;
 	}
 }
 
 export function cancelAccountStreams(accountId: number) {
-	for (const stream of streams.values()) {
+	for (const [stream, data] of streams) {
-		if (stream.accountId === accountId) {
+		if (data.accountId === accountId) {
-			stream.close("cancelled");
+			sendMessageAndClose(stream, `data: cancelled\n\n`);
 		}
 	}
 }
 
 export function cancelSessionStreams(sessionId: number) {
-	for (const stream of streams.values()) {
+	for (const [stream, data] of streams) {
-		if (stream.sessionId === sessionId) {
+		if (data.sessionId === sessionId) {
-			stream.close("cancelled");
+			sendMessageAndClose(stream, `data: cancelled\n\n`);
 		}
 	}
 }
@@ -146,7 +94,6 @@ function encodeEvent(event: ApiEvent, userType: ApiAccount["type"] | undefined)
 	if (event.type === "schedule-update") {
 		if (!canSeeCrew(userType)) {
 			event = {
-				id: event.id,
 				type: event.type,
 				updatedFrom: event.updatedFrom,
 				data: filterSchedule(event.data),
@@ -159,7 +106,6 @@ function encodeEvent(event: ApiEvent, userType: ApiAccount["type"] | undefined)
 			|| !event.data.deleted && event.data.type === "anonymous" && !canSeeAnonymous(userType)
 		) {
 			event = {
-				id: event.id,
 				type: event.type,
 				data: {
 					id: event.data.id,
@@ -182,68 +128,44 @@ function encodeEvent(event: ApiEvent, userType: ApiAccount["type"] | undefined)
 }
 
 export async function broadcastEvent(event: ApiEvent) {
-	const events = readEvents();
+	const id = Date.now();
-	events.push(event);
+	console.log(`broadcasting update to ${streams.size} clients`);
-	writeEvents(events);
+	if (!streams.size) {
-}
+		return;
+	}
 
-function sendEventToStream(stream: EventStream, event: ApiEvent) {
 	// Session expiry events cause the streams belonging to that session to be terminated
 	if (event.type === "session-expired") {
-		if (stream.sessionId === event.sessionId) {
+		cancelSessionStreams(event.sessionId);
-			stream.close("session expired");
+		return;
-			return false;
-		}
-		return true;
 	}
 
-	// Account events are specially handled and only sent to the user they belong to.
+	const users = await readUsers();
-	if (event.type === "account-update") {
+	for (const [stream, streamData] of streams) {
-		if (stream.accountId === event.data.id) {
+		// Account events are specially handled and only sent to the user they belong to.
-			stream.write(`id: ${event.id}\nevent: event\ndata: ${JSON.stringify(event)}\n\n`);
+		if (event.type === "account-update") {
-		}
+			if (streamData.accountId === event.data.id) {
-		return true;
+				sendMessage(stream, `id: ${id}\nevent: update\ndata: ${JSON.stringify(event)}\n\n`);
-	}
-
-	// All other events are encoded according to the user access level seeing it.
-	const data = encodeEvent(event, stream.userType)
-	stream.write(`id: ${event.id}\nevent: event\ndata: ${data}\n\n`);
-	return true;
-}
-
-async function sendEventUpdates() {
-	// Cancel streams that need to be rotated.
-	const now = Date.now();
-	for (const stream of streams.values()) {
-		if (stream.rotatesAtMs < now) {
-			stream.close("session rotation");
-			continue;
-		}
-	}
-
-	// Send events.
-	const skipEventId = Math.min(...[...streams.values()].map(s => s.lastEventId));
-	const events = (readEvents()).filter(e => e.id > skipEventId);
-	if (events.length)
-		console.log(`broadcasting ${events.length} event(s) to ${streams.size} client(s)`);
-	for (const stream of streams.values()) {
-		for (const event of events) {
-			if (event.id > stream.lastEventId) {
-				stream.lastEventId = event.id;
-				stream.lastKeepAliveMs = now;
-
-				if (!sendEventToStream(stream, event)) {
-					break;
-				}
 			}
-		}
-	}
 
-	// Send Keepalives to streams with no activity.
+		} else {
-	for (const stream of streams.values()) {
+			let userType: ApiAccount["type"] | undefined;
-		if (stream.lastKeepAliveMs + keepaliveTimeoutMs < now) {
+			if (streamData.accountId !== undefined) {
-			stream.write(": keepalive\n");
+				userType = users.find(a => !a.deleted && a.id === streamData.accountId)?.type
-			stream.lastKeepAliveMs = now;
+			}
+			const data = encodeEvent(event, userType)
+			sendMessage(stream, `id: ${id}\nevent: update\ndata: ${data}\n\n`);
+		}
+	}
+}
+
+function sendKeepalive() {
+	const now = Date.now();
+	for (const [stream, streamData] of streams) {
+		if (streamData.rotatesAtMs > now) {
+			sendMessage(stream, ": keepalive\n");
+		} else {
+			sendMessageAndClose(stream, `data: cancelled\n\n`);
 		}
 	}
 }

server/utils/schedule.ts

@@ -2,7 +2,7 @@
 	SPDX-FileCopyrightText: © 2025 Hornwitser <code@hornwitser.no>
 	SPDX-License-Identifier: AGPL-3.0-or-later
 */
-import { nextEventId, readSchedule, type ServerUser, writeSchedule } from '~/server/database';
+import { readSchedule, type ServerUser, writeSchedule } from '~/server/database';
 import { broadcastEvent } from '~/server/streams';
 import type { ApiSchedule, ApiTombstone } from '~/shared/types/api';
 
@@ -20,7 +20,7 @@ export async function updateScheduleInterestedCounts(users: ServerUser[]) {
 				eventSlotCounts.set(id, (eventSlotCounts.get(id) ?? 0) + 1);
 	}
 
-	const schedule = readSchedule();
+	const schedule = await readSchedule();
 	if (schedule.deleted) {
 		throw new Error("Deleted schedule not implemented");
 	}
@@ -58,7 +58,6 @@ export async function updateScheduleInterestedCounts(users: ServerUser[]) {
 	schedule.updatedAt = updatedFrom;
 	await writeSchedule(schedule);
 	await broadcastEvent({
-		id: nextEventId(),
 		type: "schedule-update",
 		updatedFrom,
 		data: update,

server/utils/session.ts

@@ -4,7 +4,6 @@
 */
 import type { H3Event } from "h3";
 import {
-	nextEventId,
 	nextSessionId,
 	readSessions,
 	readSubscriptions,
@@ -19,11 +18,11 @@ import type { ApiAuthenticationProvider, ApiSession } from "~/shared/types/api";
 import { serverUserToApiAccount } from "./user";
 
 async function removeSessionSubscription(sessionId: number) {
-	const subscriptions = readSubscriptions();
+	const subscriptions = await readSubscriptions();
 	const index = subscriptions.findIndex(subscription => subscription.sessionId === sessionId);
 	if (index !== -1) {
 		subscriptions.splice(index, 1);
-		writeSubscriptions(subscriptions);
+		await writeSubscriptions(subscriptions);
 	}
 }
 
@@ -35,7 +34,6 @@ async function clearServerSessionInternal(event: H3Event, sessions: ServerSessio
 		if (session) {
 			session.expiresAtMs = Date.now();
 			broadcastEvent({
-				id: nextEventId(),
 				type: "session-expired",
 				sessionId,
 			});
@@ -47,9 +45,9 @@ async function clearServerSessionInternal(event: H3Event, sessions: ServerSessio
 }
 
 export async function clearServerSession(event: H3Event) {
-	const sessions = readSessions();
+	const sessions = await readSessions();
 	if (await clearServerSessionInternal(event, sessions)) {
-		writeSessions(sessions);
+		await writeSessions(sessions);
 	}
 	deleteCookie(event, "session");
 }
@@ -61,7 +59,7 @@ export async function setServerSession(
 	authenticationSlug?: string,
 	authenticationName?: string,
 ) {
-	const sessions = readSessions();
+	const sessions = await readSessions();
 	const runtimeConfig = useRuntimeConfig(event);
 	await clearServerSessionInternal(event, sessions);
 
@@ -78,14 +76,14 @@ export async function setServerSession(
 	};
 
 	sessions.push(newSession);
-	writeSessions(sessions);
+	await writeSessions(sessions);
 	await setSignedCookie(event, "session", String(newSession.id), runtimeConfig.sessionDiscardTimeout)
 	return newSession;
 }
 
 async function rotateSession(event: H3Event, sessions: ServerSession[], session: ServerSession) {
 	const runtimeConfig = useRuntimeConfig(event);
-	const users = readUsers();
+	const users = await readUsers();
 	const account = users.find(user => !user.deleted && user.id === session.accountId);
 	const now = Date.now();
 	const newSession: ServerSession = {
@@ -94,12 +92,12 @@ async function rotateSession(event: H3Event, sessions: ServerSession[], session:
 		// Authentication provider is removed to avoid possibility of an infinite delay before using it.
 		rotatesAtMs: now + runtimeConfig.sessionRotatesTimeout * 1000,
 		discardAtMs: now + runtimeConfig.sessionDiscardTimeout * 1000,
-		id: nextSessionId(),
+		id: await nextSessionId(),
 	};
 	session.successor = newSession.id;
 	session.expiresAtMs = Date.now() + 10 * 1000;
 	sessions.push(newSession);
-	writeSessions(sessions);
+	await writeSessions(sessions);
 	await setSignedCookie(event, "session", String(newSession.id), runtimeConfig.sessionDiscardTimeout)
 	return newSession;
 }
@@ -108,7 +106,7 @@ export async function getServerSession(event: H3Event, ignoreTaken: boolean) {
 	const sessionCookie = await getSignedCookie(event, "session");
 	if (sessionCookie) {
 		const sessionId = parseInt(sessionCookie, 10);
-		const sessions = readSessions();
+		const sessions = await readSessions();
 		const session = sessions.find(session => session.id === sessionId);
 		if (session) {
 			const nowMs = Date.now();
@@ -148,7 +146,7 @@ export async function requireServerSession(event: H3Event, message: string) {
 export async function requireServerSessionWithUser(event: H3Event) {
 	const message = "User session required";
 	const session = await requireServerSession(event, message);
-	const users = readUsers();
+	const users = await readUsers();
 	const account = users.find(user => user.id === session.accountId);
 	if (session.accountId === undefined || !account || account.deleted)
 		throw createError({
@@ -163,7 +161,7 @@ export async function requireServerSessionWithUser(event: H3Event) {
 export async function requireServerSessionWithAdmin(event: H3Event) {
 	const message = "Admin session required";
 	const session = await requireServerSession(event, message);
-	const users = readUsers();
+	const users = await readUsers();
 	const account = users.find(user => user.id === session.accountId);
 	if (session.access !== "admin" || account?.type !== "admin") {
 		throw createError({
@@ -176,9 +174,9 @@ export async function requireServerSessionWithAdmin(event: H3Event) {
 }
 
 export async function serverSessionToApi(event: H3Event, session: ServerSession): Promise<ApiSession> {
-	const users = readUsers();
+	const users = await readUsers();
 	const account = users.find(user => !user.deleted && user.id === session.accountId);
-	const subscriptions = readSubscriptions();
+	const subscriptions = await readSubscriptions();
 	const push = Boolean(
 		subscriptions.find(sub => sub.type === "push" && sub.sessionId === session.id)
 	);

server/web-push.ts

@@ -33,7 +33,7 @@ async function useVapidDetails(event: H3Event) {
 export async function sendPush(event: H3Event, title: string, body: string) {
 	const vapidDetails = await useVapidDetails(event);
 	const payload = JSON.stringify({ title, body });
-	const subscriptions = readSubscriptions();
+	const subscriptions = await readSubscriptions();
 	console.log(`Sending "${payload}" to ${subscriptions.length} subscribers`);
 	const removeIndexes = [];
 	for (let index = 0; index < subscriptions.length; index += 1) {
@@ -65,7 +65,7 @@ export async function sendPush(event: H3Event, title: string, body: string) {
 		for (const index of removeIndexes) {
 			subscriptions.splice(index, 1);
 		}
-		writeSubscriptions(subscriptions);
+		await writeSubscriptions(subscriptions);
 	}
 	console.log("Push notices sent");
 }

shared/types/api.ts

@@ -155,26 +155,27 @@ export interface ApiUserDetails {
 }
 
 export interface ApiAccountUpdate {
-	id: Id,
 	type: "account-update",
 	data: ApiAccount,
 }
 
+export interface ApiConnected {
+	type: "connected",
+	session?: ApiSession,
+}
+
 export interface ApiScheduleUpdate {
-	id: Id,
 	type: "schedule-update",
 	updatedFrom?: string,
 	data: ApiSchedule | ApiTombstone,
 }
 
 export interface ApiSessionExpired {
-	id: Id,
 	type: "session-expired",
 	sessionId: Id,
 }
 
 export interface ApiUserUpdate {
-	id: Id,
 	type: "user-update",
 	updatedFrom?: string,
 	data: ApiUser | ApiTombstone,
@@ -182,22 +183,8 @@ export interface ApiUserUpdate {
 
 export type ApiEvent =
 	| ApiAccountUpdate
+	| ApiConnected
 	| ApiScheduleUpdate
 	| ApiSessionExpired
 	| ApiUserUpdate
 ;
-
-export interface ApiConnected {
-	type: "connected",
-	session?: ApiSession,
-}
-
-export interface ApiDisconnected {
-	type: "disconnect",
-	reason?: string,
-}
-
-export type ApiEventStreamMessage =
-	| ApiConnected
-	| ApiDisconnected
-;

stores/events.ts

@@ -1,31 +0,0 @@
-/*
-	SPDX-FileCopyrightText: © 2025 Hornwitser <code@hornwitser.no>
-	SPDX-License-Identifier: AGPL-3.0-or-later
-*/
-
-export const useEventsStore = defineStore("events", () => {
-	const state = {
-		lastEventId: ref(0),
-	};
-	const getters = {
-	}
-	const actions = {
-		async fetchLastEventId() {
-			const requestFetch = useRequestFetch();
-			state.lastEventId.value = await requestFetch("/api/last-event-id");
-		}
-	}
-
-	appEventSource?.addEventListener("event", (event) => {
-		if (event.data.id !== undefined) {
-			state.lastEventId.value = event.data.id
-			return;
-		}
-	});
-
-	return {
-		...state,
-		...getters,
-		...actions,
-	};
-});

stores/schedules.ts

@@ -96,7 +96,7 @@ export const useSchedulesStore = defineStore("schedules", () => {
 		}
 	})
 
-	appEventSource?.addEventListener("event", (event) => {
+	appEventSource?.addEventListener("update", (event) => {
 		if (event.data.type !== "schedule-update") {
 			return;
 		}

stores/session.ts

@@ -57,7 +57,7 @@ export const useSessionStore = defineStore("session", () => {
 		},
 	};
 
-	appEventSource?.addEventListener("message", (event) => {
+	appEventSource?.addEventListener("update", (event) => {
 		if (event.data.type !== "connected") {
 			return;
 		}

stores/users.ts

@@ -75,7 +75,7 @@ export const useUsersStore = defineStore("users", () => {
 		},
 	}
 
-	appEventSource?.addEventListener("event", (event) => {
+	appEventSource?.addEventListener("update", (event) => {
 		if (event.data.type !== "user-update") {
 			return;
 		}