Add registration backbone for events, payments, and activity

Author: antonisloizou

README.md

@@ -9,12 +9,14 @@ Create a single source of truth for operational data that keeps the team synchro
 - Operations planning for seasons, events, innhopps, manifests, and landing zones.
 - Participant roster and event assignments, including crew roles per manifest.
 - Logistics tracking for transports, vehicles, accommodations, meals, and ad-hoc logistics items.
+- Registration backbone for participant-event lifecycle tracking, payment obligations, and activity history.
 - Safety and compliance fields on events/innhopps (NOTAM, risk assessment, safety precautions).
 - RBAC-backed login sessions (OIDC) with seeded roles for core operational duties.
 
 ## Not yet implemented
-- Payments, waivers, certifications, and health declarations.
-- Automated notifications, check-in flows, or public driver route pages.
+- Public registration pages, automated notifications, and campaign email sending.
+- Payment provider integrations, waivers, certifications, and health declarations.
+- Check-in flows or public driver route pages.
 - Analytics dashboards beyond raw data access.
 
 ## User roles
@@ -34,13 +36,14 @@ RBAC ensures each user only sees the modules and actions needed for their duties
 
 ## Workflows
 1. **Event planning**: Create seasons/events, define innhopps with landing and safety details, and publish manifests.
-2. **Participant coordination**: Maintain the roster, attach participants to events, and assign crew roles per manifest.
+2. **Participant coordination**: Maintain the roster, attach participants to events, assign crew roles per manifest, and track registrations with status, notes, and payment records.
 3. **Logistics tracking**: Capture transports, vehicles, accommodations, meals, and other logistics items per event.
 
 ## What you can do today
 - Build seasons and events, including detailed innhopp plans with landing areas, NOTAM notes, risk mitigation, and hospital/boat coverage metadata.
 - Register airfields, attach them to events, and manage manifests with capacity, staff slots, and participant assignments.
 - Maintain a participant roster (roles, experience, contacts), add people to events/manifests, and track crew roles such as Jump Master/Leader, Ground Crew, Driver, and Packer.
+- Create event registrations for participants, record deposit/balance payment entries, track registration status, and append internal activity notes.
 - Coordinate transports, vehicles, accommodations, meals, and other logistics items per operation.
 - Authenticate via OIDC (authorization code flow), persist sessions in secure cookies, and enforce role-based permissions seeded on startup (Admin, Staff, Jump Master, Jump Leader, Ground Crew, Driver, Packer, Participant). Set `DEV_ALLOW_ALL=true` to bypass auth locally.
 - Use the frontend pages for login, events, manifests, participants, logistics, seasons, innhopp details, and airfield details (see `frontend/src/pages/` and `frontend/src/components/Layout.tsx` for the routes).
@@ -109,5 +112,5 @@ Frontend environment variables:
 | `VITE_GOOGLE_MAPS_API_KEY` | Google Maps API key for route duration features | placeholder value |
 
 ## API and UI references
-- Backend endpoints for seasons, events, innhopps, manifests, airfields, participants, crew assignments, logistics transports, and auth are documented in `backend/README.md`.
+- Backend endpoints for seasons, events, innhopps, manifests, airfields, participants, registrations, crew assignments, logistics transports, and auth are documented in `backend/README.md`.
 - Frontend routes include `/login`, `/events`, `/events/:eventId`, `/events/:eventId/innhopps/:innhoppId`, `/manifests`, `/manifests/:manifestId`, `/participants`, `/participants/:participantId`, `/logistics`, `/airfields/:airfieldId`, plus creation flows for seasons, events, manifests, and participants.

backend/README.md

@@ -5,8 +5,8 @@ This Go service provides the core REST API for the Innhopp Central platform. It
 ## Features
 
 - Modular HTTP routing for authentication, event operations, participant management, crew RBAC, and logistics.
-- Automatic bootstrapping of the core PostgreSQL schema for seasons, events, manifests, participant profiles, crew assignments, and gear assets.
-- JSON APIs for managing seasons/events/manifests, participant records, crew assignments, and gear tracking.
+- Automatic bootstrapping of the core PostgreSQL schema for seasons, events, manifests, participant profiles, registrations, payment records, crew assignments, and gear assets.
+- JSON APIs for managing seasons/events/manifests, participant records, registration lifecycles, payment/activity records, crew assignments, and gear tracking.
 - Health check endpoint for uptime monitoring and Chi middleware for structured logging and request tracing.
 
 ## Requirements
@@ -35,6 +35,9 @@ On startup the server creates these tables if they do not already exist:
 - `event_innhopps` – ordered jump sequences planned within an event.
 - `manifests` – scheduled aircraft loads for an event.
 - `participant_profiles` – canonical roster of all flyers and staff.
+- `event_registrations` – participant-to-event lifecycle records with deadlines, notes, and ownership.
+- `registration_payments` – ledger entries for deposit, balance, refund, and manual adjustments per registration.
+- `registration_activity` – internal timeline entries attached to a registration.
 - `crew_assignments` – role assignments for a participant on a manifest.
 - `gear_assets` – tracked gear inventory with inspection status.
 
@@ -94,6 +97,14 @@ On startup the server creates these tables if they do not already exist:
 | GET | `/api/events/manifests/{id}` | Retrieve a manifest |
 | GET | `/api/participants/profiles` | List participant profiles |
 | POST | `/api/participants/profiles` | Create a participant profile |
+| GET | `/api/registrations/events/{eventID}` | List registrations for an event |
+| POST | `/api/registrations/events/{eventID}` | Create a registration for an event |
+| GET | `/api/registrations/{registrationID}` | Retrieve one registration with payments and activity |
+| PUT | `/api/registrations/{registrationID}` | Update registration metadata |
+| POST | `/api/registrations/{registrationID}/status` | Transition a registration status |
+| POST | `/api/registrations/{registrationID}/payments` | Create a payment ledger row |
+| PUT | `/api/registrations/payments/{paymentID}` | Update a payment ledger row |
+| POST | `/api/registrations/{registrationID}/activity` | Append an internal activity entry |
 | GET | `/api/rbac/crew-assignments` | List crew assignments |
 | POST | `/api/rbac/crew-assignments` | Create a crew assignment |
 | GET | `/api/logistics/gear-assets` | List gear assets |
@@ -104,6 +115,7 @@ On startup the server creates these tables if they do not already exist:
 - All timestamps in request payloads must be RFC3339 strings except for season dates which use `YYYY-MM-DD`.
 - Endpoints respond with JSON and enforce strict payload validation (unknown fields are rejected).
 - Foreign key constraints ensure referenced seasons, events, manifests, and participants must already exist.
+- The registration backbone enforces one active registration per participant per event; cancelled or expired registrations can be recreated.
 
 ## Testing
 

backend/main.go

@@ -19,6 +19,7 @@ import (
 	"github.com/innhopp/central/backend/logistics"
 	"github.com/innhopp/central/backend/participants"
 	"github.com/innhopp/central/backend/rbac"
+	"github.com/innhopp/central/backend/registrations"
 )
 
 func main() {
@@ -120,6 +121,7 @@ func main() {
 	router.Mount("/api/auth", authHandler.Routes())
 	router.Mount("/api/events", events.NewHandler(pool).Routes(enforcer))
 	router.Mount("/api/participants", participants.NewHandler(pool).Routes(enforcer))
+	router.Mount("/api/registrations", registrations.NewHandler(pool).Routes(enforcer))
 	router.Mount("/api/rbac", rbac.NewHandler(pool).Routes(enforcer))
 	router.Mount("/api/logistics", logistics.NewHandler(pool).Routes(enforcer))
 	router.Mount("/api/innhopps", innhopps.NewHandler(pool).Routes(enforcer))
@@ -509,6 +511,84 @@ func ensureSchema(ctx context.Context, pool *pgxpool.Pool) error {
             UNIQUE (account_id, role_name)
         )`,
 		`ALTER TABLE participant_profiles ADD COLUMN IF NOT EXISTS account_id INTEGER UNIQUE REFERENCES accounts(id) ON DELETE SET NULL`,
+		`CREATE TABLE IF NOT EXISTS event_registrations (
+            id SERIAL PRIMARY KEY,
+            event_id INTEGER NOT NULL REFERENCES events(id) ON DELETE CASCADE,
+            participant_id INTEGER NOT NULL REFERENCES participant_profiles(id) ON DELETE CASCADE,
+            status TEXT NOT NULL DEFAULT 'deposit_pending',
+            source TEXT,
+            registered_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            deposit_due_at TIMESTAMPTZ,
+            deposit_paid_at TIMESTAMPTZ,
+            balance_due_at TIMESTAMPTZ,
+            balance_paid_at TIMESTAMPTZ,
+            cancelled_at TIMESTAMPTZ,
+            expired_at TIMESTAMPTZ,
+            waitlist_position INTEGER,
+            staff_owner_account_id INTEGER REFERENCES accounts(id) ON DELETE SET NULL,
+            tags TEXT[] NOT NULL DEFAULT ARRAY[]::TEXT[],
+            internal_notes TEXT,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )`,
+		`ALTER TABLE event_registrations ADD COLUMN IF NOT EXISTS status TEXT NOT NULL DEFAULT 'deposit_pending'`,
+		`ALTER TABLE event_registrations ADD COLUMN IF NOT EXISTS source TEXT`,
+		`ALTER TABLE event_registrations ADD COLUMN IF NOT EXISTS registered_at TIMESTAMPTZ NOT NULL DEFAULT NOW()`,
+		`ALTER TABLE event_registrations ADD COLUMN IF NOT EXISTS deposit_due_at TIMESTAMPTZ`,
+		`ALTER TABLE event_registrations ADD COLUMN IF NOT EXISTS deposit_paid_at TIMESTAMPTZ`,
+		`ALTER TABLE event_registrations ADD COLUMN IF NOT EXISTS balance_due_at TIMESTAMPTZ`,
+		`ALTER TABLE event_registrations ADD COLUMN IF NOT EXISTS balance_paid_at TIMESTAMPTZ`,
+		`ALTER TABLE event_registrations ADD COLUMN IF NOT EXISTS cancelled_at TIMESTAMPTZ`,
+		`ALTER TABLE event_registrations ADD COLUMN IF NOT EXISTS expired_at TIMESTAMPTZ`,
+		`ALTER TABLE event_registrations ADD COLUMN IF NOT EXISTS waitlist_position INTEGER`,
+		`ALTER TABLE event_registrations ADD COLUMN IF NOT EXISTS staff_owner_account_id INTEGER REFERENCES accounts(id) ON DELETE SET NULL`,
+		`ALTER TABLE event_registrations ADD COLUMN IF NOT EXISTS tags TEXT[] NOT NULL DEFAULT ARRAY[]::TEXT[]`,
+		`ALTER TABLE event_registrations ADD COLUMN IF NOT EXISTS internal_notes TEXT`,
+		`ALTER TABLE event_registrations ADD COLUMN IF NOT EXISTS created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()`,
+		`ALTER TABLE event_registrations ADD COLUMN IF NOT EXISTS updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()`,
+		`CREATE UNIQUE INDEX IF NOT EXISTS event_registrations_active_participant_idx
+            ON event_registrations (event_id, participant_id)
+            WHERE cancelled_at IS NULL AND expired_at IS NULL`,
+		`CREATE TABLE IF NOT EXISTS registration_payments (
+            id SERIAL PRIMARY KEY,
+            registration_id INTEGER NOT NULL REFERENCES event_registrations(id) ON DELETE CASCADE,
+            kind TEXT NOT NULL,
+            amount NUMERIC(12,2) NOT NULL DEFAULT 0,
+            currency TEXT NOT NULL DEFAULT 'EUR',
+            status TEXT NOT NULL DEFAULT 'pending',
+            due_at TIMESTAMPTZ,
+            paid_at TIMESTAMPTZ,
+            provider TEXT,
+            provider_ref TEXT,
+            recorded_by_account_id INTEGER REFERENCES accounts(id) ON DELETE SET NULL,
+            notes TEXT,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )`,
+		`ALTER TABLE registration_payments ADD COLUMN IF NOT EXISTS kind TEXT NOT NULL DEFAULT 'deposit'`,
+		`ALTER TABLE registration_payments ADD COLUMN IF NOT EXISTS amount NUMERIC(12,2) NOT NULL DEFAULT 0`,
+		`ALTER TABLE registration_payments ADD COLUMN IF NOT EXISTS currency TEXT NOT NULL DEFAULT 'EUR'`,
+		`ALTER TABLE registration_payments ADD COLUMN IF NOT EXISTS status TEXT NOT NULL DEFAULT 'pending'`,
+		`ALTER TABLE registration_payments ADD COLUMN IF NOT EXISTS due_at TIMESTAMPTZ`,
+		`ALTER TABLE registration_payments ADD COLUMN IF NOT EXISTS paid_at TIMESTAMPTZ`,
+		`ALTER TABLE registration_payments ADD COLUMN IF NOT EXISTS provider TEXT`,
+		`ALTER TABLE registration_payments ADD COLUMN IF NOT EXISTS provider_ref TEXT`,
+		`ALTER TABLE registration_payments ADD COLUMN IF NOT EXISTS recorded_by_account_id INTEGER REFERENCES accounts(id) ON DELETE SET NULL`,
+		`ALTER TABLE registration_payments ADD COLUMN IF NOT EXISTS notes TEXT`,
+		`ALTER TABLE registration_payments ADD COLUMN IF NOT EXISTS created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()`,
+		`CREATE TABLE IF NOT EXISTS registration_activity (
+            id SERIAL PRIMARY KEY,
+            registration_id INTEGER NOT NULL REFERENCES event_registrations(id) ON DELETE CASCADE,
+            type TEXT NOT NULL,
+            summary TEXT NOT NULL,
+            payload JSONB NOT NULL DEFAULT '{}'::jsonb,
+            created_by_account_id INTEGER REFERENCES accounts(id) ON DELETE SET NULL,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )`,
+		`ALTER TABLE registration_activity ADD COLUMN IF NOT EXISTS type TEXT NOT NULL DEFAULT 'note'`,
+		`ALTER TABLE registration_activity ADD COLUMN IF NOT EXISTS summary TEXT NOT NULL DEFAULT ''`,
+		`ALTER TABLE registration_activity ADD COLUMN IF NOT EXISTS payload JSONB NOT NULL DEFAULT '{}'::jsonb`,
+		`ALTER TABLE registration_activity ADD COLUMN IF NOT EXISTS created_by_account_id INTEGER REFERENCES accounts(id) ON DELETE SET NULL`,
+		`ALTER TABLE registration_activity ADD COLUMN IF NOT EXISTS created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()`,
 	}
 
 	for _, stmt := range stmts {

backend/rbac/roles.go

@@ -22,6 +22,8 @@ const (
 	PermissionManageSeasons         Permission = "seasons:manage"
 	PermissionViewEvents            Permission = "events:view"
 	PermissionManageEvents          Permission = "events:manage"
+	PermissionViewRegistrations     Permission = "registrations:view"
+	PermissionManageRegistrations   Permission = "registrations:manage"
 	PermissionViewManifests         Permission = "manifests:view"
 	PermissionManageManifests       Permission = "manifests:manage"
 	PermissionViewParticipants      Permission = "participants:view"
@@ -65,6 +67,14 @@ var RoleMatrix = map[Permission][]Role{
 		RoleAdmin,
 		RoleStaff,
 	},
+	PermissionViewRegistrations: {
+		RoleAdmin,
+		RoleStaff,
+	},
+	PermissionManageRegistrations: {
+		RoleAdmin,
+		RoleStaff,
+	},
 	PermissionViewManifests: {
 		RoleAdmin,
 		RoleStaff,