Scanning guests in at the door

The Flow Scanner turns any phone into a door scanner. Open it from the Flow page ("Open Scanner") or go to /flow/scan.

How staff use it:
1. Pick your access point once — the scanner remembers it (you're stationed at one gate).
2. Scan a guest's credential QR with the phone camera. Each QR opens /flow/scan with the code pre-filled, so no scanner app is needed. A manual code field is the fallback.
3. The verdict screen shows a big green ADMIT or red DENY, the guest's name and tier, and the staff instruction you set on that access point.

Every scan is checked server-side, so capacity and time windows can't be bypassed. A guest is denied if their pass doesn't cover that point, the point is outside its time window, the point is at capacity, or the credential was revoked.

Every scan is written to an append-only audit — see the Scans tab for the full log, filterable by admitted/denied.