Event Scout — live events concierge (full app)

What you get

A working Next.js 15 / React 19 app, ~60 routes, Prisma + Postgres, deployable to Vercel as-is:

• **Discovery** across multiple ticket sources, deduplicated into single events.
• **Buy-vs-wait pricing** with price history, cross-marketplace comparison, and watchlists that alert on drops.
• **Voice concierge** — a realtime assistant that answers out loud and navigates the app for you.
• **Trip planning** — day trips by driving radius, multi-day itineraries, flight and fare watching, calendar export.
• **My Seats** for season-ticket holders: enter your own cost basis, see which games' resale beats it.
• **Setup wizard** that tells you which integrations are live and exactly which key lights up each one.

Every connector is optional and independently gated. With no keys at all it runs on seeded demo data, so you can evaluate the whole product before signing up for anything.

Configured, not hardcoded

Home market — city, airport, region, coordinates, timezone — resolves from one module behind `HOME_*` environment variables. Set `HOME_CITY` and the assistant's prompts, search defaults, flight origins, and time-of-day math all follow. This matters more than it sounds: the original build hardcoded one city across a dozen files, and half-fixing that is worse than not starting, because nothing tells you which half.

About the privacy work

This app was extracted from a working personal deployment, which means the interesting engineering was removing the person from it.

That took **nine independent adversarial audits**. The first eight each found a category the previous ones missed — deployment identifiers, a live account id in an owner-access allowlist, references to other private systems, a hardcoded home city inside the shipped LLM system prompt. The ninth found nothing and independently verified a clean `next build` across all 60 routes.

What ships is built from an **allowlist** — nothing is included unless named — behind four gates: a known-value scan, a shape scan for identifiers nobody thought to list, a syntax check, and a full typecheck that refuses to emit source which does not compile. Every gate was verified by deliberately breaking the build and confirming it caught it.

Season-ticket data ships **empty** by design, and the code says why: section, row, and seat for a real holder is a schedule of where a named person physically sits all season. No buyer should inherit anyone's seats.

What it is not

Not a SaaS, not hosted, no per-seat fee. You run it, you hold the keys, you pay the providers directly.

Delivery

Private repository invite within 24 hours. Single-product commercial license: use and modify in one shipped product; no redistribution or resale of the source.