fix: parse kiosk qr pass urls

frontend/src/pages/KioskPage.tsx

@@ -5,6 +5,27 @@ import { formatVisitRange } from '../status';
 import { useQrScanner } from '../useQrScanner';
 import { playChime } from '../chime';
 
+function extractQrToken(raw: string): string {
+  const text = raw.trim();
+  if (!text) return '';
+
+  try {
+    const url = new URL(text);
+    const passMatch = url.pathname.match(/\/pass\/([^/?#]+)/);
+    if (passMatch?.[1]) return decodeURIComponent(passMatch[1]);
+
+    const apiMatch = url.pathname.match(/\/public\/passes\/([^/?#]+)/);
+    if (apiMatch?.[1]) return decodeURIComponent(apiMatch[1]);
+  } catch {
+    // Not a URL; fall through to path/token parsing.
+  }
+
+  const pathMatch = text.match(/\/pass\/([^/?#]+)/) ?? text.match(/\/public\/passes\/([^/?#]+)/);
+  if (pathMatch?.[1]) return decodeURIComponent(pathMatch[1]);
+
+  return text;
+}
+
 /**
  * Public entrance kiosk (no login). The visitor scans their phone QR, the
  * approved pass is shown, and they tap 입장/퇴장 to self check-in/out.
@@ -19,7 +40,7 @@ export const KioskPage: React.FC = () => {
   const [manual, setManual] = useState('');
 
   const resolveToken = async (raw: string) => {
-    const t = raw.trim();
+    const t = extractQrToken(raw);
     if (!t || busy || token) return;
     setError(null);
     scanner.stop();