Release 0.6.0

src/lib/server/auth.ts

@@ -110,11 +110,11 @@ export async function verifyPassword(passwordHash: string, password: string): Pr
 
 const dummyPasswordHash = hashPassword(randomBytes(32).toString('hex'));
 
-function createToken(): string {
+export function createToken(): string {
 	return randomBytes(32).toString('base64url');
 }
 
-function hashToken(token: string): string {
+export function hashToken(token: string): string {
 	return createHash('sha256').update(token).digest('hex');
 }
 

src/lib/server/completion.spec.ts

@@ -0,0 +1,204 @@
+import { execFileSync } from 'node:child_process';
+import { mkdtempSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import path from 'node:path';
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import type { AuthUser } from './auth.js';
+import { finalizeShow, getCompletionSummary } from './completion.js';
+import { closeDatabase, getDatabase } from './database.js';
+import {
+	addPieceUsage,
+	addShowSection,
+	createShow,
+	duplicateCompletedShow,
+	getPieceUsageContexts,
+	getShow
+} from './shows.js';
+
+let directory: string;
+const actor: AuthUser = {
+	id: 'completion-actor',
+	email: 'completion@example.test',
+	displayName: 'Abschluss Test',
+	role: 'barkeeper',
+	lockedAtUtc: null
+};
+
+beforeEach(() => {
+	directory = mkdtempSync(path.join(tmpdir(), 'sendewerk-completion-test-'));
+	process.env.SENDEWERK_DB_PATH = path.join(directory, 'test.sqlite');
+	process.env.SENDEWERK_UPLOAD_DIR = path.join(directory, 'uploads');
+	execFileSync(process.execPath, ['scripts/migrate.mjs'], { cwd: process.cwd(), env: process.env });
+	execFileSync(process.execPath, ['scripts/seed.mjs'], { cwd: process.cwd(), env: process.env });
+	getDatabase()
+		.prepare(
+			`INSERT INTO users (id, email, email_normalized, display_name, password_hash, role,
+			 password_changed_at_utc, created_at_utc, updated_at_utc)
+			 VALUES (?, ?, ?, ?, 'unused', 'barkeeper', ?, ?, ?)`
+		)
+		.run(
+			actor.id,
+			actor.email,
+			actor.email,
+			actor.displayName,
+			...Array(3).fill(new Date().toISOString())
+		);
+});
+
+afterEach(() => {
+	closeDatabase();
+	delete process.env.SENDEWERK_DB_PATH;
+	delete process.env.SENDEWERK_UPLOAD_DIR;
+	rmSync(directory, { recursive: true, force: true });
+});
+
+function endedShow() {
+	const created = createShow({ title: 'Finale Sendung', startsAtUtc: null, templateId: null });
+	const section = addShowSection(created.id, created.revision, {
+		name: 'Gesendeter Block',
+		categoryId: 'cat-jc',
+		explicitDurationSeconds: null
+	});
+	const done = addPieceUsage(created.id, section.revision, {
+		pieceId: 'piece-console',
+		sectionId: section.id
+	});
+	const skipped = addPieceUsage(created.id, done.revision, {
+		pieceId: 'piece-console',
+		sectionId: section.id
+	});
+	const database = getDatabase();
+	database.prepare("UPDATE piece_usages SET status = 'done' WHERE id = ?").run(done.id);
+	database.prepare("UPDATE piece_usages SET status = 'skipped' WHERE id = ?").run(skipped.id);
+	database
+		.prepare(
+			`INSERT INTO show_live_states
+			 (show_id, revision, started_at_utc, ended_at_utc, presentation_revision, updated_at_utc)
+			 VALUES (?, 0, ?, ?, 0, ?)`
+		)
+		.run(
+			created.id,
+			'2026-10-25T18:00:00.000Z',
+			'2026-10-25T19:00:00.000Z',
+			'2026-10-25T19:00:00.000Z'
+		);
+	return { showId: created.id, doneUsageId: done.id, revision: skipped.revision };
+}
+
+describe('show completion', () => {
+	it('finalizes once, records only sent usages and archives only the explicit selection', () => {
+		const prepared = endedShow();
+		expect(getCompletionSummary(prepared.showId)).toMatchObject({
+			doneCount: 1,
+			skippedCount: 1,
+			candidates: [{ pieceId: 'piece-console', usageCount: 1 }]
+		});
+		const first = finalizeShow({
+			showId: prepared.showId,
+			commandId: 'complete-once',
+			expectedShowRevision: prepared.revision,
+			expectedLiveRevision: 0,
+			archivePieceIds: ['piece-console'],
+			actor,
+			now: new Date('2026-10-25T19:05:00.000Z')
+		});
+		expect(first.duplicate).toBe(false);
+		expect(
+			finalizeShow({
+				showId: prepared.showId,
+				commandId: 'complete-once',
+				expectedShowRevision: prepared.revision,
+				expectedLiveRevision: 0,
+				archivePieceIds: ['piece-console'],
+				actor
+			}).duplicate
+		).toBe(true);
+		expect(() =>
+			finalizeShow({
+				showId: prepared.showId,
+				commandId: 'different-command',
+				expectedShowRevision: prepared.revision,
+				expectedLiveRevision: 0,
+				archivePieceIds: [],
+				actor
+			})
+		).toThrow('SHOW_COMPLETED');
+		const database = getDatabase();
+		expect(
+			(
+				database
+					.prepare('SELECT count(*) AS count FROM piece_usage_history WHERE show_id = ?')
+					.get(prepared.showId) as { count: number }
+			).count
+		).toBe(1);
+		expect(database.prepare('SELECT status FROM pieces WHERE id = ?').get('piece-console')).toEqual(
+			{ status: 'archived' }
+		);
+		expect(getPieceUsageContexts(['piece-console'])['piece-console'].sentHistory).toHaveLength(1);
+	});
+
+	it('keeps historical snapshots stable and duplicates them into an editable clean run', () => {
+		const prepared = endedShow();
+		finalizeShow({
+			showId: prepared.showId,
+			commandId: 'freeze',
+			expectedShowRevision: prepared.revision,
+			expectedLiveRevision: 0,
+			archivePieceIds: [],
+			actor
+		});
+		const historical = getShow(prepared.showId)!;
+		getDatabase()
+			.prepare("UPDATE section_categories SET name = 'Später geändert' WHERE id = 'cat-jc'")
+			.run();
+		getDatabase()
+			.prepare("UPDATE pieces SET title = 'Später geändert' WHERE id = 'piece-console'")
+			.run();
+		const unchanged = getShow(prepared.showId)!;
+		expect(unchanged.sections[0].category).toBe(historical.sections[0].category);
+		expect(unchanged.sections[0].usages[0].title).toBe(historical.sections[0].usages[0].title);
+
+		const copy = duplicateCompletedShow(prepared.showId, 'copy-once');
+		expect(duplicateCompletedShow(prepared.showId, 'copy-once').id).toBe(copy.id);
+		expect(getShow(copy.id)).toMatchObject({
+			status: 'draft',
+			startsAtUtc: null,
+			sections: [
+				{
+					category: historical.sections[0].category,
+					usages: [{ status: 'open' }, { status: 'open' }]
+				}
+			]
+		});
+		expect(
+			getDatabase().prepare('SELECT 1 FROM show_finalizations WHERE show_id = ?').get(copy.id)
+		).toBeUndefined();
+		getDatabase()
+			.prepare(
+				`UPDATE piece_usages SET status = 'done'
+				 WHERE show_section_id IN (SELECT id FROM show_sections WHERE show_id = ?)`
+			)
+			.run(copy.id);
+		getDatabase()
+			.prepare(
+				`INSERT INTO show_live_states
+				 (show_id, revision, started_at_utc, ended_at_utc, presentation_revision, updated_at_utc)
+				 VALUES (?, 0, ?, ?, 0, ?)`
+			)
+			.run(
+				copy.id,
+				'2026-10-26T18:00:00.000Z',
+				'2026-10-26T19:00:00.000Z',
+				'2026-10-26T19:00:00.000Z'
+			);
+		finalizeShow({
+			showId: copy.id,
+			commandId: 'finalize-copy',
+			expectedShowRevision: 1,
+			expectedLiveRevision: 0,
+			archivePieceIds: [],
+			actor
+		});
+		expect(getShow(copy.id)?.sections[0].category).toBe(historical.sections[0].category);
+	});
+});

src/lib/server/completion.ts

@@ -0,0 +1,210 @@
+import type { AuthUser } from './auth.js';
+import { getDatabase } from './database.js';
+
+export type CompletionCandidate = {
+	pieceId: string;
+	title: string;
+	usageCount: number;
+};
+
+export type CompletionSummary = {
+	doneCount: number;
+	skippedCount: number;
+	openCount: number;
+	candidates: CompletionCandidate[];
+};
+
+export function isShowFinalized(showId: string): boolean {
+	return Boolean(
+		getDatabase().prepare('SELECT 1 FROM show_finalizations WHERE show_id = ?').get(showId)
+	);
+}
+
+export function getCompletionSummary(showId: string): CompletionSummary {
+	const database = getDatabase();
+	if (!database.prepare('SELECT 1 FROM shows WHERE id = ?').get(showId))
+		throw new Error('NOT_FOUND');
+	const counts = database
+		.prepare(
+			`SELECT
+			 sum(CASE WHEN u.status = 'done' THEN 1 ELSE 0 END) AS done_count,
+			 sum(CASE WHEN u.status = 'skipped' THEN 1 ELSE 0 END) AS skipped_count,
+			 sum(CASE WHEN u.status IN ('open', 'current') THEN 1 ELSE 0 END) AS open_count
+			 FROM piece_usages u JOIN show_sections s ON s.id = u.show_section_id
+			 WHERE s.show_id = ? AND s.is_reserve_bank = 0`
+		)
+		.get(showId) as {
+		done_count: number | null;
+		skipped_count: number | null;
+		open_count: number | null;
+	};
+	const candidates = database
+		.prepare(
+			`SELECT u.original_piece_id AS piece_id, p.title, count(*) AS usage_count
+			 FROM piece_usages u
+			 JOIN show_sections s ON s.id = u.show_section_id
+			 JOIN pieces p ON p.id = u.original_piece_id
+			 WHERE s.show_id = ? AND s.is_reserve_bank = 0 AND u.status = 'done'
+			 AND p.status != 'archived' AND p.deleted_at_utc IS NULL
+			 GROUP BY u.original_piece_id, p.title ORDER BY p.title COLLATE NOCASE`
+		)
+		.all(showId) as { piece_id: string; title: string; usage_count: number }[];
+	return {
+		doneCount: counts.done_count ?? 0,
+		skippedCount: counts.skipped_count ?? 0,
+		openCount: counts.open_count ?? 0,
+		candidates: candidates.map((candidate) => ({
+			pieceId: candidate.piece_id,
+			title: candidate.title,
+			usageCount: candidate.usage_count
+		}))
+	};
+}
+
+export function getHistoricalActualDurations(showId: string): Record<string, number> {
+	return Object.fromEntries(
+		(
+			getDatabase()
+				.prepare(
+					`SELECT usage_id, actual_duration_seconds FROM piece_usage_history WHERE show_id = ?`
+				)
+				.all(showId) as { usage_id: string; actual_duration_seconds: number }[]
+		).map((row) => [row.usage_id, row.actual_duration_seconds])
+	);
+}
+
+export function finalizeShow(input: {
+	showId: string;
+	commandId: string;
+	expectedShowRevision: number;
+	expectedLiveRevision: number;
+	archivePieceIds: string[];
+	actor: AuthUser;
+	now?: Date;
+}) {
+	if (!input.commandId || input.commandId.length > 200) throw new Error('INVALID_COMMAND');
+	if (!Number.isInteger(input.expectedShowRevision) || input.expectedShowRevision < 1) {
+		throw new Error('INVALID_REVISION');
+	}
+	if (!Number.isInteger(input.expectedLiveRevision) || input.expectedLiveRevision < 0) {
+		throw new Error('INVALID_REVISION');
+	}
+	const archivePieceIds = [...new Set(input.archivePieceIds.filter(Boolean))];
+	const database = getDatabase();
+	return database.transaction(() => {
+		const existing = database
+			.prepare('SELECT command_id FROM show_finalizations WHERE show_id = ?')
+			.get(input.showId) as { command_id: string } | undefined;
+		if (existing) {
+			if (existing.command_id !== input.commandId) throw new Error('SHOW_COMPLETED');
+			return { duplicate: true };
+		}
+		const state = database
+			.prepare(
+				`SELECT sh.revision AS show_revision, ls.revision AS live_revision, ls.ended_at_utc
+				 FROM shows sh JOIN show_live_states ls ON ls.show_id = sh.id WHERE sh.id = ?`
+			)
+			.get(input.showId) as
+			{ show_revision: number; live_revision: number; ended_at_utc: string | null } | undefined;
+		if (!state) throw new Error('NOT_FOUND');
+		if (!state.ended_at_utc) throw new Error('NOT_ENDED');
+		if (
+			state.show_revision !== input.expectedShowRevision ||
+			state.live_revision !== input.expectedLiveRevision
+		) {
+			throw new Error('CONFLICT');
+		}
+
+		const candidates = getCompletionSummary(input.showId).candidates.map(
+			(candidate) => candidate.pieceId
+		);
+		if (archivePieceIds.some((pieceId) => !candidates.includes(pieceId))) {
+			throw new Error('INVALID_ARCHIVE_SELECTION');
+		}
+		const now = (input.now ?? new Date()).toISOString();
+		database
+			.prepare(
+				`UPDATE live_usage_runs SET ended_at_utc = ? WHERE show_id = ? AND ended_at_utc IS NULL`
+			)
+			.run(now, input.showId);
+		database
+			.prepare(
+				`UPDATE live_show_timer_runs SET ended_at_utc = ? WHERE show_id = ? AND ended_at_utc IS NULL`
+			)
+			.run(now, input.showId);
+		database
+			.prepare(
+				`UPDATE live_section_timer_runs SET ended_at_utc = ?
+				 WHERE ended_at_utc IS NULL AND timer_id IN (
+					SELECT id FROM live_section_timers WHERE show_id = ?
+				 )`
+			)
+			.run(now, input.showId);
+		database
+			.prepare(
+				`UPDATE live_section_timers SET ended_at_utc = ? WHERE show_id = ? AND ended_at_utc IS NULL`
+			)
+			.run(now, input.showId);
+		database
+			.prepare(
+				`UPDATE show_sections SET
+				 category_name_snapshot = COALESCE(category_name_snapshot,
+					(SELECT name FROM section_categories WHERE id = show_sections.category_id)),
+				 category_color_snapshot = COALESCE(category_color_snapshot,
+					(SELECT color FROM section_categories WHERE id = show_sections.category_id))
+				 WHERE show_id = ?`
+			)
+			.run(input.showId);
+
+		database
+			.prepare(
+				`INSERT INTO piece_usage_history (
+				 usage_id, show_id, original_piece_id, show_title_snapshot, usage_title_snapshot,
+				 used_at_utc, actual_duration_seconds
+				 )
+				 SELECT u.id, sh.id, u.original_piece_id, sh.title, u.title_snapshot,
+				 COALESCE(sh.starts_at_utc, ?),
+				 COALESCE((
+					SELECT sum(max(0, CAST((julianday(COALESCE(r.ended_at_utc, ?)) -
+						julianday(r.started_at_utc)) * 86400 AS INTEGER)))
+					FROM live_usage_runs r WHERE r.usage_id = u.id
+				 ), 0)
+				 FROM piece_usages u
+				 JOIN show_sections s ON s.id = u.show_section_id
+				 JOIN shows sh ON sh.id = s.show_id
+				 WHERE sh.id = ? AND s.is_reserve_bank = 0 AND u.status = 'done'
+				 AND u.original_piece_id IS NOT NULL`
+			)
+			.run(now, now, input.showId);
+
+		const archivePiece = database.prepare(
+			`UPDATE pieces SET archived_from_status = status, status = 'archived', revision = revision + 1,
+			 updated_at_utc = ? WHERE id = ? AND status != 'archived' AND deleted_at_utc IS NULL`
+		);
+		for (const pieceId of archivePieceIds) {
+			archivePiece.run(now, pieceId);
+		}
+
+		const updated = database
+			.prepare(
+				`UPDATE shows SET status = 'completed', completed_at_utc = ?, revision = revision + 1,
+				 updated_at_utc = ? WHERE id = ? AND revision = ? AND status != 'completed'`
+			)
+			.run(now, now, input.showId, input.expectedShowRevision);
+		if (updated.changes !== 1) throw new Error('CONFLICT');
+		database
+			.prepare(
+				`INSERT INTO show_finalizations
+				 (show_id, command_id, source_revision, finalized_by_user_id, finalized_at_utc)
+				 VALUES (?, ?, ?, ?, ?)`
+			)
+			.run(input.showId, input.commandId, input.expectedShowRevision, input.actor.id, now);
+		const recordArchivedPiece = database.prepare(
+			'INSERT INTO show_finalization_archived_pieces (show_id, piece_id) VALUES (?, ?)'
+		);
+		for (const pieceId of archivePieceIds) {
+			recordArchivedPiece.run(input.showId, pieceId);
+		}
+		return { duplicate: false };
+	})();
+}

src/lib/server/content.ts

@@ -926,7 +926,7 @@ export async function duplicatePiece(sourceId: string): Promise<string> {
 					 presentation_metadata_fetched_at_utc, created_at_utc, updated_at_utc, revision)
 					 VALUES (
 					 ?, ?, ?, ?, ?, 'preparing', ?, ?, ?, ?, ?, ?, ?,
-					 ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 1
+					 ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 1
 					 )`
 				)
 				.run(

src/lib/server/database.spec.ts

@@ -1,6 +1,6 @@
 import Database from 'better-sqlite3';
 import { execFileSync } from 'node:child_process';
-import { mkdtempSync, rmSync } from 'node:fs';
+import { mkdtempSync, readdirSync, readFileSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import path from 'node:path';
 import { afterEach, describe, expect, it, vi } from 'vitest';
@@ -62,7 +62,7 @@ describe('database setup', () => {
 		database.close();
 
 		expect(counts).toEqual({
-			migrations: 12,
+			migrations: 16,
 			pieces: 6,
 			shows: 2,
 			usages: 5,
@@ -90,4 +90,97 @@ describe('database setup', () => {
 		expect(show.totalDurationSeconds).toBe(5100);
 		expect(show.sections[1].usages.find((usage) => usage.isReserve)?.durationSeconds).toBe(540);
 	});
+
+	it('upgrades existing completed shows into stable finalizations exactly once', () => {
+		const directory = mkdtempSync(path.join(tmpdir(), 'sendewerk-upgrade-test-'));
+		temporaryDirectories.push(directory);
+		const databasePath = path.join(directory, 'test.sqlite');
+		const environment = {
+			...process.env,
+			SENDEWERK_DB_PATH: databasePath,
+			SENDEWERK_UPLOAD_DIR: path.join(directory, 'uploads')
+		};
+		const database = new Database(databasePath);
+		database.pragma('foreign_keys = ON');
+		database.exec(
+			'CREATE TABLE schema_migrations (name TEXT PRIMARY KEY, applied_at_utc TEXT NOT NULL)'
+		);
+		const migrationDirectory = path.resolve('migrations');
+		const oldMigrations = readdirSync(migrationDirectory)
+			.filter(
+				(name) =>
+					/^\d+.+\.sql$/.test(name) && !name.startsWith('0015_') && !name.startsWith('0016_')
+			)
+			.sort();
+		for (const name of oldMigrations) {
+			database.exec(readFileSync(path.join(migrationDirectory, name), 'utf8'));
+			database
+				.prepare('INSERT INTO schema_migrations (name, applied_at_utc) VALUES (?, ?)')
+				.run(name, new Date().toISOString());
+		}
+		database.close();
+		execFileSync(process.execPath, ['scripts/seed.mjs'], { cwd: process.cwd(), env: environment });
+
+		const legacy = new Database(databasePath);
+		legacy.pragma('foreign_keys = ON');
+		const usage = legacy
+			.prepare(
+				`SELECT u.id FROM piece_usages u JOIN show_sections s ON s.id = u.show_section_id
+				 WHERE s.show_id = 'show-october' AND s.is_reserve_bank = 0 LIMIT 1`
+			)
+			.get() as { id: string };
+		legacy.prepare("UPDATE piece_usages SET status = 'done' WHERE id = ?").run(usage.id);
+		legacy.prepare("UPDATE shows SET status = 'completed' WHERE id = 'show-october'").run();
+		const completionMigration = '0015_completion_archive_and_shares.sql';
+		legacy.exec(readFileSync(path.join(migrationDirectory, completionMigration), 'utf8'));
+		legacy
+			.prepare('INSERT INTO schema_migrations (name, applied_at_utc) VALUES (?, ?)')
+			.run(completionMigration, new Date().toISOString());
+		const now = new Date().toISOString();
+		legacy
+			.prepare(
+				`INSERT INTO users (id, email, email_normalized, display_name, password_hash, role,
+				 password_changed_at_utc, created_at_utc, updated_at_utc)
+				 VALUES ('upgrade-barkeeper', 'upgrade@example.test', 'upgrade@example.test',
+				 'Upgrade', 'unused', 'barkeeper', ?, ?, ?)`
+			)
+			.run(now, now, now);
+		legacy
+			.prepare(
+				`INSERT INTO show_shares
+				 (id, show_id, token_hash, scope, password_hash, expires_at_utc, revoked_at_utc,
+				 created_by_user_id, created_at_utc)
+				 VALUES ('upgrade-share', 'show-october', 'upgrade-token-hash', 'rundown', NULL,
+				 NULL, NULL, 'upgrade-barkeeper', ?)`
+			)
+			.run(now);
+		legacy
+			.prepare(
+				`INSERT INTO show_share_sessions (token_hash, share_id, created_at_utc, expires_at_utc)
+				 VALUES ('upgrade-session-hash', 'upgrade-share', ?, ?)`
+			)
+			.run(now, new Date(Date.now() + 60_000).toISOString());
+		legacy.close();
+
+		for (let run = 0; run < 2; run += 1) {
+			execFileSync(process.execPath, ['scripts/migrate.mjs'], {
+				cwd: process.cwd(),
+				env: environment
+			});
+		}
+		const upgraded = new Database(databasePath, { readonly: true });
+		expect(
+			upgraded
+				.prepare(
+					`SELECT
+					 (SELECT count(*) FROM show_finalizations WHERE show_id = 'show-october') AS finalizations,
+					 (SELECT count(*) FROM piece_usage_history WHERE show_id = 'show-october') AS history,
+					 (SELECT count(*) FROM show_shares WHERE id = 'upgrade-share') AS shares,
+					 (SELECT count(*) FROM show_share_sessions WHERE token_hash = 'upgrade-session-hash') AS sessions`
+				)
+				.get()
+		).toEqual({ finalizations: 1, history: 1, shares: 1, sessions: 1 });
+		expect(upgraded.pragma('foreign_key_check')).toEqual([]);
+		upgraded.close();
+	});
 });

src/lib/server/live.ts

@@ -197,10 +197,7 @@ function showTimerRunning(database: Database.Database, showId: string) {
 	);
 }
 
-function elapsedRuns(
-	runs: { started_at_utc: string; ended_at_utc: string | null }[],
-	now: string
-) {
+function elapsedRuns(runs: { started_at_utc: string; ended_at_utc: string | null }[], now: string) {
 	return runs.reduce(
 		(total, run) =>
 			total +
@@ -236,9 +233,7 @@ function resumeSectionTimerRun(database: Database.Database, showId: string, now:
 		.get(showId) as { id: string } | undefined;
 	if (!timer) return;
 	const running = database
-		.prepare(
-			'SELECT 1 FROM live_section_timer_runs WHERE timer_id = ? AND ended_at_utc IS NULL'
-		)
+		.prepare('SELECT 1 FROM live_section_timer_runs WHERE timer_id = ? AND ended_at_utc IS NULL')
 		.get(timer.id);
 	if (!running) {
 		database
@@ -335,6 +330,9 @@ function executeCommand(
 		const show = database.prepare('SELECT status FROM shows WHERE id = ?').get(showId) as {
 			status: string;
 		};
+		if (database.prepare('SELECT 1 FROM show_finalizations WHERE show_id = ?').get(showId)) {
+			throw new Error('SHOW_COMPLETED');
+		}
 		if (show.status === 'completed' && !allowCompleted) throw new Error('SHOW_COMPLETED');
 		if (state.revision !== expectedRevision) throw new Error('CONFLICT');
 		operation(database, state, now);
@@ -643,9 +641,7 @@ export function resetSectionTimer(
 					`SELECT section_id, planned_duration_seconds
 					 FROM live_section_timers WHERE show_id = ? AND ended_at_utc IS NULL`
 				)
-				.get(showId) as
-				| { section_id: string; planned_duration_seconds: number }
-				| undefined;
+				.get(showId) as { section_id: string; planned_duration_seconds: number } | undefined;
 			if (!timer) throw new Error('NO_SECTION_TIMER');
 			const running = showTimerRunning(database, showId);
 			closeSectionTimer(database, showId, now);
@@ -741,12 +737,10 @@ export function endLive(
 				)
 				.run(now, showId);
 			database
-				.prepare(
-					`UPDATE show_live_states SET ended_at_utc = ? WHERE show_id = ?`
-				)
+				.prepare(`UPDATE show_live_states SET ended_at_utc = ? WHERE show_id = ?`)
 				.run(now, showId);
 			database
-				.prepare(`UPDATE shows SET status = 'completed', revision = revision + 1, updated_at_utc = ? WHERE id = ?`)
+				.prepare(`UPDATE shows SET revision = revision + 1, updated_at_utc = ? WHERE id = ?`)
 				.run(now, showId);
 		},
 		nowValue
@@ -766,7 +760,11 @@ export function resumeEndedLive(
 		'resume-ended',
 		(database, state, now) => {
 			if (!state.ended_at_utc) throw new Error('NOT_ENDED');
-			database.prepare(`UPDATE shows SET status = 'live', revision = revision + 1, updated_at_utc = ? WHERE id = ?`).run(now, showId);
+			database
+				.prepare(
+					`UPDATE shows SET status = 'live', revision = revision + 1, updated_at_utc = ? WHERE id = ?`
+				)
+				.run(now, showId);
 			database
 				.prepare('UPDATE show_live_states SET ended_at_utc = NULL WHERE show_id = ?')
 				.run(showId);
@@ -815,7 +813,11 @@ export function startNewLiveRun(
 					 WHERE show_id = ?`
 				)
 				.run(now, showId);
-			database.prepare(`UPDATE shows SET status = 'live', revision = revision + 1, updated_at_utc = ? WHERE id = ?`).run(now, showId);
+			database
+				.prepare(
+					`UPDATE shows SET status = 'live', revision = revision + 1, updated_at_utc = ? WHERE id = ?`
+				)
+				.run(now, showId);
 			openShowTimerRun(database, showId, now);
 			const target = orderedUsages(database, showId).find((usage) => usage.status === 'open');
 			if (target) activateUsage(database, showId, target.id, now);

src/lib/server/shares.spec.ts

@@ -0,0 +1,266 @@
+import { execFileSync } from 'node:child_process';
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import path from 'node:path';
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import type { AuthUser } from './auth.js';
+import { finalizeShow } from './completion.js';
+import { closeDatabase, getDatabase } from './database.js';
+import {
+	authenticateShare,
+	createShare,
+	deleteShare,
+	getSharedMedia,
+	getSharedShow,
+	revokeShare,
+	updateShare
+} from './shares.js';
+import { addPieceUsage, addShowSection, createShow } from './shows.js';
+
+let directory: string;
+const actor: AuthUser = {
+	id: 'share-actor',
+	email: 'share@example.test',
+	displayName: 'Freigabe Test',
+	role: 'barkeeper',
+	lockedAtUtc: null
+};
+
+beforeEach(() => {
+	directory = mkdtempSync(path.join(tmpdir(), 'sendewerk-shares-test-'));
+	process.env.SENDEWERK_DB_PATH = path.join(directory, 'test.sqlite');
+	process.env.SENDEWERK_UPLOAD_DIR = path.join(directory, 'uploads');
+	execFileSync(process.execPath, ['scripts/migrate.mjs'], { cwd: process.cwd(), env: process.env });
+	execFileSync(process.execPath, ['scripts/seed.mjs'], { cwd: process.cwd(), env: process.env });
+	const now = new Date().toISOString();
+	getDatabase()
+		.prepare(
+			`INSERT INTO users (id, email, email_normalized, display_name, password_hash, role,
+			 password_changed_at_utc, created_at_utc, updated_at_utc)
+			 VALUES (?, ?, ?, ?, 'unused', 'barkeeper', ?, ?, ?)`
+		)
+		.run(actor.id, actor.email, actor.email, actor.displayName, now, now, now);
+});
+
+afterEach(() => {
+	closeDatabase();
+	delete process.env.SENDEWERK_DB_PATH;
+	delete process.env.SENDEWERK_UPLOAD_DIR;
+	rmSync(directory, { recursive: true, force: true });
+});
+
+function finalizedShow() {
+	const created = createShow({
+		title: 'Freigegebene Sendung',
+		startsAtUtc: null,
+		templateId: null
+	});
+	const section = addShowSection(created.id, created.revision, {
+		name: 'Freigabeblock',
+		categoryId: null,
+		explicitDurationSeconds: null
+	});
+	const usage = addPieceUsage(created.id, section.revision, {
+		pieceId: 'piece-console',
+		sectionId: section.id
+	});
+	const reserveUsage = addPieceUsage(created.id, usage.revision, {
+		pieceId: 'piece-console',
+		sectionId: null
+	});
+	const database = getDatabase();
+	database.prepare("UPDATE piece_usages SET status = 'done' WHERE id = ?").run(usage.id);
+	database
+		.prepare(
+			`INSERT INTO show_live_states
+			 (show_id, revision, started_at_utc, ended_at_utc, presentation_revision, updated_at_utc)
+			 VALUES (?, 0, ?, ?, 0, ?)`
+		)
+		.run(
+			created.id,
+			'2026-10-25T18:00:00.000Z',
+			'2026-10-25T19:00:00.000Z',
+			'2026-10-25T19:00:00.000Z'
+		);
+	finalizeShow({
+		showId: created.id,
+		commandId: `finalize-${created.id}`,
+		expectedShowRevision: reserveUsage.revision,
+		expectedLiveRevision: 0,
+		archivePieceIds: [],
+		actor
+	});
+	return { showId: created.id, usageId: usage.id, reserveUsageId: reserveUsage.id };
+}
+
+describe('show shares', () => {
+	it('shares an unfinished show and keeps its current plan visible', async () => {
+		const created = createShow({
+			title: 'Offene Freigabe',
+			startsAtUtc: null,
+			templateId: null
+		});
+		const shared = await createShare(actor, {
+			showId: created.id,
+			scope: 'rundown',
+			password: '',
+			expiresAtUtc: null
+		});
+		const initiallyEmpty = getSharedShow(shared.token);
+		expect(initiallyEmpty.status).toBe('authorized');
+		if (initiallyEmpty.status !== 'authorized') throw new Error('share unavailable');
+		expect(initiallyEmpty.share.isCompleted).toBe(false);
+		expect(initiallyEmpty.share.sections).toEqual([]);
+
+		const section = addShowSection(created.id, created.revision, {
+			name: 'Nachträglich geplant',
+			categoryId: null,
+			explicitDurationSeconds: null
+		});
+		addPieceUsage(created.id, section.revision, {
+			pieceId: 'piece-console',
+			sectionId: section.id
+		});
+		const updatedPlan = getSharedShow(shared.token);
+		expect(updatedPlan.status).toBe('authorized');
+		if (updatedPlan.status !== 'authorized') throw new Error('share unavailable');
+		expect(updatedPlan.share.sections[0]).toMatchObject({
+			name: 'Nachträglich geplant',
+			usages: [{ title: 'Die kleine Konsole mit dem großen Dreh' }]
+		});
+
+		await updateShare(actor, shared.id, {
+			scope: 'moderation',
+			passwordMode: 'replace',
+			password: 'neues-freigabe-passwort',
+			expiresAtUtc: null
+		});
+		expect(getSharedShow(shared.token).status).toBe('password');
+		const session = await authenticateShare(shared.token, 'neues-freigabe-passwort', '192.0.2.20');
+		expect(getSharedShow(shared.token, session.token).status).toBe('authorized');
+		deleteShare(actor, shared.id, created.id);
+		expect(getSharedShow(shared.token, session.token).status).toBe('unavailable');
+	});
+
+	it('projects exactly the selected information scope', async () => {
+		const prepared = finalizedShow();
+		const rundown = await createShare(actor, {
+			showId: prepared.showId,
+			scope: 'rundown',
+			password: '',
+			expiresAtUtc: null
+		});
+		const basic = getSharedShow(rundown.token);
+		expect(basic.status).toBe('authorized');
+		if (basic.status !== 'authorized') throw new Error('share unavailable');
+		const basicUsage = basic.share.sections[0].usages[0];
+		expect(basicUsage).not.toHaveProperty('moderationHtml');
+		expect(basicUsage).not.toHaveProperty('researchHtml');
+		expect(JSON.stringify(basic)).not.toContain('originalPieceId');
+		expect(JSON.stringify(basic)).not.toContain(prepared.showId);
+		getDatabase()
+			.prepare(
+				`INSERT INTO usage_tool_snapshots
+				 (id, usage_id, original_tool_id, name, start_url, work_url, note, position)
+				 VALUES ('private-share-tool', ?, NULL, 'Schnittwerkzeug',
+				 'https://private.example/start', 'https://private.example/work?secret=1',
+				 'Freigegebene Werkzeugnotiz', 0)`
+			)
+			.run(prepared.usageId);
+
+		const research = await createShare(actor, {
+			showId: prepared.showId,
+			scope: 'research',
+			password: '',
+			expiresAtUtc: null
+		});
+		const full = getSharedShow(research.token);
+		expect(full.status).toBe('authorized');
+		if (full.status !== 'authorized') throw new Error('share unavailable');
+		expect(full.share.sections[0].usages[0]).toHaveProperty('moderationHtml');
+		expect(full.share.sections[0].usages[0]).toHaveProperty('researchHtml');
+		expect(full.share.sections[0].usages[0]).not.toHaveProperty('ownNotesHtml');
+		expect(JSON.stringify(full)).not.toContain('private.example');
+		expect(JSON.stringify(full)).toContain('Freigegebene Werkzeugnotiz');
+	});
+
+	it('enforces password, expiry and revocation for page and direct media access', async () => {
+		const prepared = finalizedShow();
+		const database = getDatabase();
+		mkdirSync(process.env.SENDEWERK_UPLOAD_DIR!, { recursive: true });
+		writeFileSync(path.join(process.env.SENDEWERK_UPLOAD_DIR!, 'shared.png'), Buffer.from('image'));
+		database
+			.prepare(
+				`INSERT INTO piece_media
+				 (id, piece_id, storage_name, original_name, mime_type, byte_size, alt_text, position, created_at_utc)
+				 VALUES ('share-media', 'piece-console', 'shared.png', 'shared.png', 'image/png', 5, 'Freigegeben', 99, ?)`
+			)
+			.run(new Date().toISOString());
+		database
+			.prepare(
+				`INSERT INTO usage_media_snapshots
+				 (id, usage_id, original_media_id, alt_text, position, is_presentation)
+				 VALUES ('share-snapshot', ?, 'share-media', 'Freigegeben', 99, 1)`
+			)
+			.run(prepared.usageId);
+		database
+			.prepare(
+				`INSERT INTO usage_media_snapshots
+				 (id, usage_id, original_media_id, alt_text, position, is_presentation)
+				 VALUES ('reserve-share-snapshot', ?, 'share-media', 'Private Reserve', 99, 1)`
+			)
+			.run(prepared.reserveUsageId);
+		const created = await createShare(actor, {
+			showId: prepared.showId,
+			scope: 'research',
+			password: 'ein-sicheres-passwort',
+			expiresAtUtc: new Date(Date.now() + 60_000).toISOString()
+		});
+		expect(getSharedShow(created.token).status).toBe('password');
+		expect(getSharedShow(created.token)).not.toHaveProperty('share');
+		expect(await getSharedMedia(created.token, undefined, 'share-snapshot')).toBeNull();
+		await expect(authenticateShare(created.token, 'falsch', '127.0.0.1')).rejects.toThrow(
+			'INVALID_PASSWORD'
+		);
+		const session = await authenticateShare(created.token, 'ein-sicheres-passwort', '127.0.0.1');
+		expect(getSharedShow(created.token, session.token).status).toBe('authorized');
+		expect((await getSharedMedia(created.token, session.token, 'share-snapshot'))?.byteSize).toBe(
+			5
+		);
+		expect(await getSharedMedia(created.token, session.token, 'foreign-media')).toBeNull();
+		expect(await getSharedMedia(created.token, session.token, 'reserve-share-snapshot')).toBeNull();
+		revokeShare(actor, created.id);
+		expect(getSharedShow(created.token, session.token).status).toBe('unavailable');
+		expect(await getSharedMedia(created.token, session.token, 'share-snapshot')).toBeNull();
+
+		const expired = await createShare(actor, {
+			showId: prepared.showId,
+			scope: 'rundown',
+			password: '',
+			expiresAtUtc: new Date(Date.now() + 60_000).toISOString()
+		});
+		database
+			.prepare('UPDATE show_shares SET expires_at_utc = ? WHERE id = ?')
+			.run('2000-01-01T00:00:00.000Z', expired.id);
+		expect(getSharedShow(expired.token).status).toBe('unavailable');
+		expect(await getSharedMedia(expired.token, undefined, 'share-snapshot')).toBeNull();
+	});
+
+	it('limits repeated password attempts per share', async () => {
+		const prepared = finalizedShow();
+		const created = await createShare(actor, {
+			showId: prepared.showId,
+			scope: 'rundown',
+			password: 'noch-ein-sicheres-passwort',
+			expiresAtUtc: null
+		});
+		for (let attempt = 0; attempt < 5; attempt += 1) {
+			await expect(authenticateShare(created.token, 'falsch', '192.0.2.10')).rejects.toThrow(
+				'INVALID_PASSWORD'
+			);
+		}
+		await expect(
+			authenticateShare(created.token, 'noch-ein-sicheres-passwort', '192.0.2.10')
+		).rejects.toThrow('RATE_LIMITED');
+	});
+});

src/lib/server/shares.ts

@@ -0,0 +1,430 @@
+import { readFile } from 'node:fs/promises';
+import path from 'node:path';
+import { randomUUID } from 'node:crypto';
+import {
+	createToken,
+	hashPassword,
+	hashToken,
+	validPassword,
+	verifyPassword,
+	type AuthUser
+} from './auth.js';
+import { getServerPaths } from './config.js';
+import { getDatabase } from './database.js';
+import { renderMarkdown } from './markdown.js';
+import type { ShowStatus } from './shows.js';
+
+export const SHARE_SESSION_COOKIE = 'sendewerk_share_session';
+export const SHARE_SCOPES = ['rundown', 'moderation', 'research'] as const;
+export type ShareScope = (typeof SHARE_SCOPES)[number];
+const PASSWORD_ATTEMPT_WINDOW_MS = 15 * 60 * 1000;
+const SHARE_PASSWORD_ATTEMPT_LIMIT = 5;
+const ADDRESS_PASSWORD_ATTEMPT_LIMIT = 20;
+
+type ShareRow = {
+	id: string;
+	show_id: string;
+	token_hash: string;
+	scope: ShareScope;
+	password_hash: string | null;
+	expires_at_utc: string | null;
+	revoked_at_utc: string | null;
+	created_at_utc: string;
+};
+
+export type ShareListItem = {
+	id: string;
+	showId: string;
+	showTitle: string;
+	showStatus: ShowStatus;
+	showStartsAtUtc: string | null;
+	scope: ShareScope;
+	isPasswordProtected: boolean;
+	expiresAtUtc: string | null;
+	revokedAtUtc: string | null;
+	createdAtUtc: string;
+};
+
+function requireBarkeeperActor(actor: AuthUser): void {
+	if (actor.role !== 'barkeeper') throw new Error('FORBIDDEN');
+}
+
+function validExpiry(value: string | null): string | null {
+	if (!value) return null;
+	const expiry = new Date(value);
+	if (Number.isNaN(expiry.valueOf()) || expiry.valueOf() <= Date.now()) {
+		throw new Error('INVALID_EXPIRY');
+	}
+	return expiry.toISOString();
+}
+
+function activeShare(rawToken: string): ShareRow | null {
+	if (!rawToken) return null;
+	const now = new Date().toISOString();
+	return (
+		(getDatabase()
+			.prepare(
+				`SELECT id, show_id, token_hash, scope, password_hash, expires_at_utc,
+				 revoked_at_utc, created_at_utc FROM show_shares
+				 WHERE token_hash = ? AND revoked_at_utc IS NULL
+				 AND (expires_at_utc IS NULL OR expires_at_utc > ?)`
+			)
+			.get(hashToken(rawToken), now) as ShareRow | undefined) ?? null
+	);
+}
+
+export function listShares(actor: AuthUser, showId?: string): ShareListItem[] {
+	requireBarkeeperActor(actor);
+	const where = showId ? 'WHERE ss.show_id = ?' : '';
+	return (
+		getDatabase()
+			.prepare(
+				`SELECT ss.id, ss.show_id, sh.title AS show_title, sh.status AS show_status,
+				 sh.starts_at_utc AS show_starts_at_utc, ss.scope, ss.password_hash,
+				 ss.expires_at_utc, ss.revoked_at_utc, ss.created_at_utc
+				 FROM show_shares ss JOIN shows sh ON sh.id = ss.show_id
+				 ${where}
+				 ORDER BY ss.created_at_utc DESC`
+			)
+			.all(...(showId ? [showId] : [])) as {
+			id: string;
+			show_id: string;
+			show_title: string;
+			show_status: ShowStatus;
+			show_starts_at_utc: string | null;
+			scope: ShareScope;
+			password_hash: string | null;
+			expires_at_utc: string | null;
+			revoked_at_utc: string | null;
+			created_at_utc: string;
+		}[]
+	).map((share) => ({
+		id: share.id,
+		showId: share.show_id,
+		showTitle: share.show_title,
+		showStatus: share.show_status,
+		showStartsAtUtc: share.show_starts_at_utc,
+		scope: share.scope,
+		isPasswordProtected: Boolean(share.password_hash),
+		expiresAtUtc: share.expires_at_utc,
+		revokedAtUtc: share.revoked_at_utc,
+		createdAtUtc: share.created_at_utc
+	}));
+}
+
+export async function createShare(
+	actor: AuthUser,
+	input: { showId: string; scope: string; password: string; expiresAtUtc: string | null }
+) {
+	requireBarkeeperActor(actor);
+	if (!SHARE_SCOPES.includes(input.scope as ShareScope)) throw new Error('INVALID_SCOPE');
+	if (input.password && !validPassword(input.password)) throw new Error('INVALID_PASSWORD');
+	const expiresAtUtc = validExpiry(input.expiresAtUtc);
+	const database = getDatabase();
+	if (!database.prepare('SELECT 1 FROM shows WHERE id = ?').get(input.showId)) {
+		throw new Error('NOT_FOUND');
+	}
+	const token = createToken();
+	const id = randomUUID();
+	const now = new Date().toISOString();
+	const passwordHash = input.password ? await hashPassword(input.password) : null;
+	database
+		.prepare(
+			`INSERT INTO show_shares
+			 (id, show_id, token_hash, scope, password_hash, expires_at_utc,
+			 created_by_user_id, created_at_utc) VALUES (?, ?, ?, ?, ?, ?, ?, ?)`
+		)
+		.run(
+			id,
+			input.showId,
+			hashToken(token),
+			input.scope,
+			passwordHash,
+			expiresAtUtc,
+			actor.id,
+			now
+		);
+	return { id, token };
+}
+
+export async function updateShare(
+	actor: AuthUser,
+	shareId: string,
+	input: {
+		scope: string;
+		passwordMode: string;
+		password: string;
+		expiresAtUtc: string | null;
+	},
+	expectedShowId?: string
+): Promise<void> {
+	requireBarkeeperActor(actor);
+	if (!SHARE_SCOPES.includes(input.scope as ShareScope)) throw new Error('INVALID_SCOPE');
+	if (!['keep', 'remove', 'replace'].includes(input.passwordMode)) {
+		throw new Error('INVALID_PASSWORD_MODE');
+	}
+	if (input.passwordMode === 'replace' && !validPassword(input.password)) {
+		throw new Error('INVALID_PASSWORD');
+	}
+	const expiresAtUtc = validExpiry(input.expiresAtUtc);
+	const existing = getDatabase()
+		.prepare(
+			'SELECT show_id, password_hash FROM show_shares WHERE id = ? AND revoked_at_utc IS NULL'
+		)
+		.get(shareId) as { show_id: string; password_hash: string | null } | undefined;
+	if (!existing || (expectedShowId && existing.show_id !== expectedShowId))
+		throw new Error('NOT_FOUND');
+	const passwordHash =
+		input.passwordMode === 'keep'
+			? existing.password_hash
+			: input.passwordMode === 'replace'
+				? await hashPassword(input.password)
+				: null;
+	const database = getDatabase();
+	database.transaction(() => {
+		const result = database
+			.prepare(
+				`UPDATE show_shares SET scope = ?, password_hash = ?, expires_at_utc = ?
+				 WHERE id = ? AND revoked_at_utc IS NULL`
+			)
+			.run(input.scope, passwordHash, expiresAtUtc, shareId);
+		if (result.changes !== 1) throw new Error('NOT_FOUND');
+		database.prepare('DELETE FROM show_share_sessions WHERE share_id = ?').run(shareId);
+	})();
+}
+
+export function deleteShare(actor: AuthUser, shareId: string, expectedShowId?: string): void {
+	requireBarkeeperActor(actor);
+	const result = getDatabase()
+		.prepare(`DELETE FROM show_shares WHERE id = ?${expectedShowId ? ' AND show_id = ?' : ''}`)
+		.run(...(expectedShowId ? [shareId, expectedShowId] : [shareId]));
+	if (result.changes !== 1) throw new Error('NOT_FOUND');
+}
+
+export function revokeShare(actor: AuthUser, shareId: string): void {
+	requireBarkeeperActor(actor);
+	const database = getDatabase();
+	database.transaction(() => {
+		const result = database
+			.prepare('UPDATE show_shares SET revoked_at_utc = ? WHERE id = ? AND revoked_at_utc IS NULL')
+			.run(new Date().toISOString(), shareId);
+		if (result.changes !== 1) throw new Error('NOT_FOUND');
+		database.prepare('DELETE FROM show_share_sessions WHERE share_id = ?').run(shareId);
+	})();
+}
+
+export function shareAccessState(rawToken: string, sessionToken?: string) {
+	const share = activeShare(rawToken);
+	if (!share) return { status: 'unavailable' as const };
+	if (!share.password_hash) return { status: 'authorized' as const, share };
+	if (!sessionToken) return { status: 'password' as const };
+	const session = getDatabase()
+		.prepare(
+			`SELECT 1 FROM show_share_sessions WHERE token_hash = ? AND share_id = ?
+			 AND expires_at_utc > ?`
+		)
+		.get(hashToken(sessionToken), share.id, new Date().toISOString());
+	return session ? { status: 'authorized' as const, share } : { status: 'password' as const };
+}
+
+export async function authenticateShare(rawToken: string, password: string, address: string) {
+	const share = activeShare(rawToken);
+	if (!share?.password_hash) throw new Error('SHARE_UNAVAILABLE');
+	const database = getDatabase();
+	const now = new Date();
+	const since = new Date(now.getTime() - PASSWORD_ATTEMPT_WINDOW_MS).toISOString();
+	const shareKey = hashToken(rawToken);
+	const addressKey = hashToken(address || 'unknown');
+	database.prepare('DELETE FROM share_password_attempts WHERE attempted_at_utc < ?').run(since);
+	const shareAttempts = database
+		.prepare(
+			`SELECT count(*) AS count FROM share_password_attempts
+			 WHERE share_key = ? AND attempted_at_utc >= ?`
+		)
+		.get(shareKey, since) as { count: number };
+	const addressAttempts = database
+		.prepare(
+			`SELECT count(*) AS count FROM share_password_attempts
+			 WHERE address_key = ? AND attempted_at_utc >= ?`
+		)
+		.get(addressKey, since) as { count: number };
+	if (
+		shareAttempts.count >= SHARE_PASSWORD_ATTEMPT_LIMIT ||
+		addressAttempts.count >= ADDRESS_PASSWORD_ATTEMPT_LIMIT
+	) {
+		throw new Error('RATE_LIMITED');
+	}
+	database
+		.prepare(
+			`INSERT INTO share_password_attempts
+			 (id, share_key, address_key, attempted_at_utc) VALUES (?, ?, ?, ?)`
+		)
+		.run(randomUUID(), shareKey, addressKey, now.toISOString());
+	if (!(await verifyPassword(share.password_hash, password))) throw new Error('INVALID_PASSWORD');
+	const token = createToken();
+	const defaultExpiry = now.getTime() + 12 * 60 * 60 * 1000;
+	const shareExpiry = share.expires_at_utc
+		? new Date(share.expires_at_utc).getTime()
+		: defaultExpiry;
+	const expires = new Date(Math.min(defaultExpiry, shareExpiry));
+	database.prepare('DELETE FROM share_password_attempts WHERE share_key = ?').run(shareKey);
+	database
+		.prepare('DELETE FROM show_share_sessions WHERE expires_at_utc <= ?')
+		.run(now.toISOString());
+	database
+		.prepare(
+			`INSERT INTO show_share_sessions (token_hash, share_id, created_at_utc, expires_at_utc)
+			 VALUES (?, ?, ?, ?)`
+		)
+		.run(hashToken(token), share.id, now.toISOString(), expires.toISOString());
+	return { token, expires };
+}
+
+export function getSharedShow(rawToken: string, sessionToken?: string) {
+	const access = shareAccessState(rawToken, sessionToken);
+	if (access.status !== 'authorized' || !access.share) return access;
+	const share = access.share;
+	const database = getDatabase();
+	const show = database
+		.prepare('SELECT title, starts_at_utc, status, completed_at_utc FROM shows WHERE id = ?')
+		.get(share.show_id) as {
+		title: string;
+		starts_at_utc: string | null;
+		status: ShowStatus;
+		completed_at_utc: string | null;
+	};
+	const sections = database
+		.prepare(
+			`SELECT s.id, s.name, s.category_name_snapshot, s.category_color_snapshot,
+			 c.name AS category_name, c.color AS category_color,
+			 s.explicit_duration_seconds, s.position FROM show_sections s
+			 LEFT JOIN section_categories c ON c.id = s.category_id
+			 WHERE s.show_id = ? AND s.is_reserve_bank = 0 ORDER BY s.position`
+		)
+		.all(share.show_id) as {
+		id: string;
+		name: string;
+		category_name_snapshot: string | null;
+		category_color_snapshot: string | null;
+		category_name: string | null;
+		category_color: string | null;
+		explicit_duration_seconds: number | null;
+		position: number;
+	}[];
+	const usageStatement = database.prepare(
+		`SELECT u.id, u.title_snapshot, u.output_title_snapshot, u.status, u.duration_seconds,
+		 u.intro_snapshot, u.research_snapshot, u.moderation_snapshot, u.interaction_snapshot,
+		 u.transition_snapshot, u.own_notes,
+		 COALESCE((SELECT actual_duration_seconds FROM piece_usage_history WHERE usage_id = u.id), 0)
+		 AS actual_duration_seconds
+		 FROM piece_usages u WHERE u.show_section_id = ? ORDER BY u.position`
+	);
+	const sourceStatement = database.prepare(
+		'SELECT label, url, timecode_seconds FROM usage_source_snapshots WHERE usage_id = ? ORDER BY position'
+	);
+	const toolStatement = database.prepare(
+		`SELECT name, start_url, work_url, note FROM usage_tool_snapshots
+		 WHERE usage_id = ? ORDER BY position`
+	);
+	const mediaStatement = database.prepare(
+		`SELECT id, alt_text FROM usage_media_snapshots
+		 WHERE usage_id = ? AND is_presentation = 1`
+	);
+	const includesModeration = share.scope === 'moderation' || share.scope === 'research';
+	const includesResearch = share.scope === 'research';
+	return {
+		status: 'authorized' as const,
+		share: {
+			scope: share.scope,
+			title: show.title,
+			startsAtUtc: show.starts_at_utc,
+			completedAtUtc: show.completed_at_utc,
+			isCompleted: show.status === 'completed',
+			sections: sections.map((section) => {
+				const usages = usageStatement.all(section.id) as {
+					id: string;
+					title_snapshot: string;
+					output_title_snapshot: string;
+					status: string;
+					duration_seconds: number;
+					actual_duration_seconds: number;
+					intro_snapshot: string;
+					research_snapshot: string;
+					moderation_snapshot: string;
+					interaction_snapshot: string;
+					transition_snapshot: string;
+					own_notes: string;
+				}[];
+				return {
+					name: section.name,
+					category:
+						show.status === 'completed' ? section.category_name_snapshot : section.category_name,
+					categoryColor:
+						show.status === 'completed' ? section.category_color_snapshot : section.category_color,
+					explicitDurationSeconds: section.explicit_duration_seconds,
+					usages: usages.map((usage) => ({
+						title: usage.title_snapshot,
+						outputTitle: usage.output_title_snapshot,
+						status: usage.status,
+						durationSeconds: usage.duration_seconds,
+						actualDurationSeconds: usage.actual_duration_seconds,
+						media: mediaStatement.get(usage.id) as { id: string; alt_text: string } | undefined,
+						...(includesModeration
+							? {
+									introHtml: renderMarkdown(usage.intro_snapshot),
+									moderationHtml: renderMarkdown(usage.moderation_snapshot),
+									interactionHtml: renderMarkdown(usage.interaction_snapshot),
+									transitionHtml: renderMarkdown(usage.transition_snapshot)
+								}
+							: {}),
+						...(includesResearch
+							? {
+									researchHtml: renderMarkdown(usage.research_snapshot),
+									sources: sourceStatement.all(usage.id) as {
+										label: string;
+										url: string;
+										timecode_seconds: number | null;
+									}[],
+									tools: (
+										toolStatement.all(usage.id) as {
+											name: string;
+											start_url: string;
+											work_url: string;
+											note: string;
+										}[]
+									).map((tool) => ({ name: tool.name, note: tool.note }))
+								}
+							: {})
+					}))
+				};
+			})
+		}
+	};
+}
+
+export async function getSharedMedia(
+	rawToken: string,
+	sessionToken: string | undefined,
+	snapshotMediaId: string
+) {
+	const access = shareAccessState(rawToken, sessionToken);
+	if (access.status !== 'authorized' || !access.share) return null;
+	const row = getDatabase()
+		.prepare(
+			`SELECT pm.storage_name, pm.mime_type, pm.byte_size
+			 FROM usage_media_snapshots ums
+			 JOIN piece_usages u ON u.id = ums.usage_id
+			 JOIN show_sections s ON s.id = u.show_section_id
+			 JOIN piece_media pm ON pm.id = ums.original_media_id
+			 WHERE ums.id = ? AND ums.is_presentation = 1 AND s.show_id = ?
+			 AND s.is_reserve_bank = 0`
+		)
+		.get(snapshotMediaId, access.share.show_id) as
+		{ storage_name: string; mime_type: string; byte_size: number } | undefined;
+	if (!row) return null;
+	return {
+		data: await readFile(path.join(getServerPaths().uploads, row.storage_name)),
+		mimeType: row.mime_type,
+		byteSize: row.byte_size
+	};
+}

src/lib/server/shows.spec.ts

@@ -253,7 +253,29 @@ describe('show builder data layer', () => {
 		getDatabase()
 			.prepare("UPDATE piece_usages SET status = 'skipped' WHERE id = ?")
 			.run(skipped.id);
-		getDatabase().prepare("UPDATE shows SET status = 'completed' WHERE id = ?").run(completed.id);
+		getDatabase()
+			.prepare(
+				"UPDATE shows SET status = 'completed', completed_at_utc = starts_at_utc WHERE id = ?"
+			)
+			.run(completed.id);
+		getDatabase()
+			.prepare(
+				`INSERT INTO show_finalizations
+				 (show_id, command_id, source_revision, finalized_at_utc)
+				 SELECT id, 'test-finalization', revision, starts_at_utc FROM shows WHERE id = ?`
+			)
+			.run(completed.id);
+		getDatabase()
+			.prepare(
+				`INSERT INTO piece_usage_history
+				 (usage_id, show_id, original_piece_id, show_title_snapshot, usage_title_snapshot,
+				 used_at_utc, actual_duration_seconds)
+				 SELECT u.id, sh.id, u.original_piece_id, sh.title, u.title_snapshot,
+				 sh.starts_at_utc, 0 FROM piece_usages u
+				 JOIN show_sections s ON s.id = u.show_section_id
+				 JOIN shows sh ON sh.id = s.show_id WHERE u.id = ?`
+			)
+			.run(done.id);
 
 		const active = createShow({ title: 'Aktuelle Planung', startsAtUtc: null, templateId: null });
 		const activeSection = addShowSection(active.id, active.revision, {

src/lib/server/shows.ts

@@ -120,6 +120,7 @@ export type Show = {
 	revision: number;
 	createdAtUtc: string;
 	updatedAtUtc: string;
+	completedAtUtc: string | null;
 	sections: ShowSection[];
 	reserve: PieceUsage[];
 	totalDurationSeconds: number;
@@ -193,6 +194,7 @@ type ShowRow = {
 	revision: number;
 	created_at_utc: string;
 	updated_at_utc: string;
+	completed_at_utc: string | null;
 };
 
 type SectionRow = {
@@ -201,6 +203,8 @@ type SectionRow = {
 	category_id: string | null;
 	category: string | null;
 	category_color: string | null;
+	category_name_snapshot: string | null;
+	category_color_snapshot: string | null;
 	position: number;
 	explicit_duration_seconds: number | null;
 	is_reserve_bank: number;
@@ -713,7 +717,11 @@ function copyUsageRelations(database: Database.Database, sourceUsageId: string,
 		.run(usageId, sourceUsageId);
 }
 
-export function listShows(): ShowListItem[] {
+export function listShows(statuses?: ShowStatus[]): ShowListItem[] {
+	const requestedStatuses = statuses?.filter((status) => SHOW_STATUSES.includes(status));
+	const where = requestedStatuses?.length
+		? `WHERE sh.status IN (${requestedStatuses.map(() => '?').join(', ')})`
+		: '';
 	return (
 		getDatabase()
 			.prepare(
@@ -724,10 +732,11 @@ export function listShows(): ShowListItem[] {
 						(SELECT sum(u.duration_seconds) FROM piece_usages u WHERE u.show_section_id = s.id))
 				 ELSE 0 END), 0) AS total_duration_seconds
 				 FROM shows sh LEFT JOIN show_sections s ON s.show_id = sh.id
+				 ${where}
 				 GROUP BY sh.id
 				 ORDER BY sh.starts_at_utc IS NULL, sh.starts_at_utc DESC, sh.created_at_utc DESC`
 			)
-			.all() as {
+			.all(...(requestedStatuses ?? [])) as {
 			id: string;
 			title: string;
 			starts_at_utc: string | null;
@@ -781,13 +790,14 @@ export function getShow(id: string): Show | null {
 	const show = database
 		.prepare(
 			`SELECT id, title, starts_at_utc, twitch_title, announcement_text, status, revision,
-			 created_at_utc, updated_at_utc FROM shows WHERE id = ?`
+			 created_at_utc, updated_at_utc, completed_at_utc FROM shows WHERE id = ?`
 		)
 		.get(id) as ShowRow | undefined;
 	if (!show) return null;
 	const sectionRows = database
 		.prepare(
 			`SELECT s.id, s.name, s.category_id, c.name AS category, c.color AS category_color,
+			 s.category_name_snapshot, s.category_color_snapshot,
 			 s.position, s.explicit_duration_seconds, s.is_reserve_bank
 			 FROM show_sections s LEFT JOIN section_categories c ON c.id = s.category_id
 			 WHERE s.show_id = ? ORDER BY s.position`
@@ -821,8 +831,14 @@ export function getShow(id: string): Show | null {
 				id: row.id,
 				name: row.name,
 				categoryId: row.category_id,
-				category: row.category,
-				categoryColor: row.category_color,
+				category:
+					show.status === 'completed'
+						? row.category_name_snapshot
+						: (row.category_name_snapshot ?? row.category),
+				categoryColor:
+					show.status === 'completed'
+						? row.category_color_snapshot
+						: (row.category_color_snapshot ?? row.category_color),
 				position: row.position,
 				explicitDurationSeconds: row.explicit_duration_seconds,
 				durationSeconds:
@@ -842,6 +858,7 @@ export function getShow(id: string): Show | null {
 		revision: show.revision,
 		createdAtUtc: show.created_at_utc,
 		updatedAtUtc: show.updated_at_utc,
+		completedAtUtc: show.completed_at_utc,
 		sections,
 		reserve: reserveRow ? (usagesBySection.get(reserveRow.id) ?? []) : [],
 		totalDurationSeconds: sections.reduce((total, section) => total + section.durationSeconds, 0)
@@ -868,14 +885,9 @@ export function getPieceUsageContexts(
 	const database = getDatabase();
 	const history = database
 		.prepare(
-			`SELECT u.id AS usage_id, u.original_piece_id, sh.id AS show_id,
-			 sh.title AS show_title, COALESCE(sh.starts_at_utc, sh.updated_at_utc) AS used_at_utc
-			 FROM piece_usages u
-			 JOIN show_sections s ON s.id = u.show_section_id
-			 JOIN shows sh ON sh.id = s.show_id
-			 WHERE u.original_piece_id IS NOT NULL AND u.status = 'done'
-			 AND sh.status = 'completed' AND s.is_reserve_bank = 0
-			 ORDER BY used_at_utc DESC, u.id DESC`
+			`SELECT usage_id, original_piece_id, show_id,
+			 show_title_snapshot AS show_title, used_at_utc
+			 FROM piece_usage_history ORDER BY used_at_utc DESC, usage_id DESC`
 		)
 		.all() as {
 		usage_id: string;
@@ -976,6 +988,138 @@ export function createShow(input: CreateShowInput): CreatedMutationResult {
 	return { id, revision: 1, updatedAtUtc: now };
 }
 
+export function duplicateCompletedShow(
+	sourceShowId: string,
+	commandId: string
+): CreatedMutationResult {
+	if (!commandId || commandId.length > 200) throw new Error('INVALID_COMMAND');
+	const database = getDatabase();
+	return database.transaction(() => {
+		const duplicate = database
+			.prepare(
+				`SELECT created_show_id FROM show_duplication_commands
+				 WHERE source_show_id = ? AND command_id = ?`
+			)
+			.get(sourceShowId, commandId) as { created_show_id: string } | undefined;
+		if (duplicate) {
+			const show = database
+				.prepare('SELECT revision, updated_at_utc FROM shows WHERE id = ?')
+				.get(duplicate.created_show_id) as { revision: number; updated_at_utc: string };
+			return {
+				id: duplicate.created_show_id,
+				revision: show.revision,
+				updatedAtUtc: show.updated_at_utc
+			};
+		}
+		const source = database
+			.prepare(
+				`SELECT sh.title, sh.twitch_title, sh.announcement_text
+				 FROM shows sh JOIN show_finalizations f ON f.show_id = sh.id WHERE sh.id = ?`
+			)
+			.get(sourceShowId) as
+			{ title: string; twitch_title: string; announcement_text: string } | undefined;
+		if (!source) throw new Error('NOT_FOUND');
+		const id = randomUUID();
+		const now = new Date().toISOString();
+		const title = `${source.title} (Kopie)`.slice(0, 200);
+		database
+			.prepare(
+				`INSERT INTO shows (id, title, starts_at_utc, twitch_title, announcement_text,
+				 status, revision, created_at_utc, updated_at_utc)
+				 VALUES (?, ?, NULL, ?, ?, 'draft', 1, ?, ?)`
+			)
+			.run(id, title, source.twitch_title, source.announcement_text, now, now);
+
+		const sections = database
+			.prepare(
+				`SELECT id, name, category_id, category_name_snapshot, category_color_snapshot,
+				 position, explicit_duration_seconds, is_reserve_bank
+				 FROM show_sections WHERE show_id = ? ORDER BY position`
+			)
+			.all(sourceShowId) as {
+			id: string;
+			name: string;
+			category_id: string | null;
+			category_name_snapshot: string | null;
+			category_color_snapshot: string | null;
+			position: number;
+			explicit_duration_seconds: number | null;
+			is_reserve_bank: number;
+		}[];
+		const insertSection = database.prepare(
+			`INSERT INTO show_sections (id, show_id, name, category_id, category_name_snapshot,
+			 category_color_snapshot, position, explicit_duration_seconds, is_reserve_bank)
+			 VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`
+		);
+		const usages = database.prepare(
+			'SELECT * FROM piece_usages WHERE show_section_id = ? ORDER BY position'
+		);
+		const insertUsage = database.prepare(
+			`INSERT INTO piece_usages (id, show_section_id, original_piece_id, position, status,
+			 duration_seconds, title_snapshot, output_title_snapshot, intro_snapshot, research_snapshot,
+			 moderation_snapshot, interaction_snapshot, transition_snapshot, presentation_snapshot,
+			 presentation_mode_snapshot, presentation_source_label_snapshot,
+			 presentation_source_url_snapshot, presentation_source_timecode_snapshot,
+			 presentation_title_meta_snapshot, presentation_description_snapshot,
+			 presentation_image_url_snapshot, presentation_site_name_snapshot,
+			 presentation_provider_snapshot, presentation_provider_id_snapshot, own_notes, is_reserve)
+			 VALUES (?, ?, ?, ?, 'open', ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`
+		);
+		for (const section of sections) {
+			const sectionId = randomUUID();
+			insertSection.run(
+				sectionId,
+				id,
+				section.name,
+				section.category_id,
+				section.category_name_snapshot,
+				section.category_color_snapshot,
+				section.position,
+				section.explicit_duration_seconds,
+				section.is_reserve_bank
+			);
+			for (const usage of usages.all(section.id) as (UsageRow & { is_reserve: number })[]) {
+				const usageId = randomUUID();
+				insertUsage.run(
+					usageId,
+					sectionId,
+					usage.original_piece_id,
+					usage.position,
+					usage.duration_seconds,
+					usage.title_snapshot,
+					usage.output_title_snapshot,
+					usage.intro_snapshot,
+					usage.research_snapshot,
+					usage.moderation_snapshot,
+					usage.interaction_snapshot,
+					usage.transition_snapshot,
+					usage.presentation_snapshot,
+					usage.presentation_mode_snapshot,
+					usage.presentation_source_label_snapshot,
+					usage.presentation_source_url_snapshot,
+					usage.presentation_source_timecode_snapshot,
+					usage.presentation_title_meta_snapshot,
+					usage.presentation_description_snapshot,
+					usage.presentation_image_url_snapshot,
+					usage.presentation_site_name_snapshot,
+					usage.presentation_provider_snapshot,
+					usage.presentation_provider_id_snapshot,
+					usage.own_notes,
+					usage.is_reserve
+				);
+				copyUsageRelations(database, usage.id, usageId);
+			}
+		}
+		database
+			.prepare(
+				`INSERT INTO show_duplication_commands
+				 (source_show_id, command_id, created_show_id, created_at_utc) VALUES (?, ?, ?, ?)`
+			)
+			.run(sourceShowId, commandId, id, now);
+		return { id, revision: 1, updatedAtUtc: now };
+	})();
+}
+
 export function saveShowMetadata(
 	showId: string,
 	expectedRevision: number,
@@ -1055,7 +1199,8 @@ export function updateShowSection(
 		sectionBelongsToShow(database, showId, sectionId);
 		database
 			.prepare(
-				`UPDATE show_sections SET name = ?, category_id = ?, explicit_duration_seconds = ?
+				`UPDATE show_sections SET name = ?, category_id = ?, explicit_duration_seconds = ?,
+				 category_name_snapshot = NULL, category_color_snapshot = NULL
 				 WHERE id = ?`
 			)
 			.run(name, input.categoryId, duration, sectionId);

src/lib/server/time.spec.ts

@@ -0,0 +1,12 @@
+import { describe, expect, it } from 'vitest';
+import { berlinLocalToUtc } from './time.js';
+
+describe('Berlin local time conversion', () => {
+	it('converts valid civil time and rejects normalized or nonexistent values', () => {
+		expect(berlinLocalToUtc('2026-10-25T20:00')).toBe('2026-10-25T19:00:00.000Z');
+		expect(berlinLocalToUtc('')).toBeNull();
+		expect(() => berlinLocalToUtc('2026-02-31T12:00')).toThrow('INVALID_TIMESTAMP');
+		expect(() => berlinLocalToUtc('2026-03-29T02:30', 'INVALID_EXPIRY')).toThrow('INVALID_EXPIRY');
+		expect(() => berlinLocalToUtc('2026-10-25T02:30', 'INVALID_EXPIRY')).toThrow('INVALID_EXPIRY');
+	});
+});

src/lib/server/time.ts

@@ -0,0 +1,44 @@
+export function berlinLocalToUtc(value: string, errorCode = 'INVALID_TIMESTAMP'): string | null {
+	if (!value) return null;
+	const match = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2})$/.exec(value);
+	if (!match) throw new Error(errorCode);
+	const parts = match.slice(1).map(Number);
+	const localMilliseconds = Date.UTC(parts[0], parts[1] - 1, parts[2], parts[3], parts[4]);
+	let candidate = localMilliseconds;
+	const formatter = new Intl.DateTimeFormat('en-CA', {
+		timeZone: 'Europe/Berlin',
+		year: 'numeric',
+		month: '2-digit',
+		day: '2-digit',
+		hour: '2-digit',
+		minute: '2-digit',
+		hourCycle: 'h23'
+	});
+	const localParts = (date: Date) => {
+		const formatted = formatter.formatToParts(date);
+		const read = (type: Intl.DateTimeFormatPartTypes) =>
+			formatted.find((part) => part.type === type)?.value ?? '';
+		return {
+			key: `${read('year')}-${read('month')}-${read('day')}T${read('hour')}:${read('minute')}`,
+			milliseconds: Date.UTC(
+				Number(read('year')),
+				Number(read('month')) - 1,
+				Number(read('day')),
+				Number(read('hour')),
+				Number(read('minute'))
+			)
+		};
+	};
+	for (let attempt = 0; attempt < 2; attempt += 1) {
+		candidate += localMilliseconds - localParts(new Date(candidate)).milliseconds;
+	}
+	const result = new Date(candidate);
+	if (localParts(result).key !== value) throw new Error(errorCode);
+	if (
+		localParts(new Date(candidate - 60 * 60 * 1000)).key === value ||
+		localParts(new Date(candidate + 60 * 60 * 1000)).key === value
+	) {
+		throw new Error(errorCode);
+	}
+	return result.toISOString();
+}