@rackbops/plugin-tracker 0.2.0 → 0.3.0

package/dist/plugin.js

@@ -2063,6 +2063,40 @@ function resumedNotice(r) {
   return `I could not DM you ${PAUSE_AFTER} times in a row, so your reminders were paused. ${what} ` + "Check that you accept DMs from members of a server we share, or they will pause again.";
 }
 
+// plugins/tracker/src/discord-common.ts
+import { MessageFlags } from "discord.js";
+var STARTING = "The tracker is starting up; try again in a minute.";
+var FAILED = "Something went wrong on my side; try again in a minute.";
+var EPHEMERAL = { flags: MessageFlags.Ephemeral };
+var NO_MENTIONS = { allowedMentions: { parse: [] } };
+var UNKNOWN_MEMBER = 10007;
+var UNKNOWN_USER = 10013;
+async function lookupMembership(interaction, guildId, discordId, log) {
+  if (guildId === null)
+    return "not-checked";
+  if (interaction.guildId === guildId && interaction.user.id === discordId)
+    return "member";
+  try {
+    const guild = await interaction.client.guilds.fetch(guildId);
+    await guild.members.fetch({ user: discordId, force: true });
+    return "member";
+  } catch (err) {
+    const code = err.code;
+    if (code === UNKNOWN_MEMBER || code === UNKNOWN_USER)
+      return "not-member";
+    log.warn(`could not check membership of ${guildId}: ${err instanceof Error ? err.message : String(err)}`);
+    return "unknown";
+  }
+}
+function serial() {
+  let chain = Promise.resolve();
+  return (fn) => {
+    const next = chain.then(fn, fn);
+    chain = next.catch(() => {});
+    return next;
+  };
+}
+
 // plugins/tracker/src/people.ts
 var DEFAULT_TIME_ZONE = "America/New_York";
 var DEFAULT_PREFERRED_HOUR = 9;
@@ -2190,6 +2224,20 @@ async function registerPerson(d, user, input) {
     await rescheduleOwned(d, updated, zoneChanged);
   return registeredText(updated, first);
 }
+async function saveSettings(d, user, input) {
+  let updated;
+  try {
+    updated = await setPreferences(d.store, user.id, { preferredHour: input.hour, timeZone: input.zone });
+  } catch (err) {
+    if (err instanceof PeopleError)
+      return err.message;
+    throw err;
+  }
+  const zoneChanged = updated.timeZone !== user.timeZone;
+  if (zoneChanged || updated.preferredHour !== user.preferredHour)
+    await rescheduleOwned(d, updated, zoneChanged);
+  return null;
+}
 async function setHour(d, user, hour) {
   if (hour === user.preferredHour)
     return `Your preferred hour is already ${String(hour).padStart(2, "0")}:00, ${user.timeZone} time.`;
@@ -2269,19 +2317,25 @@ async function remind(d, user, input) {
   return clip(`Reminder \`${task.id}\` set: ${text}
 Next: ${at}${cadence}.`);
 }
-async function listTasks(d, user) {
-  const now = d.clock.now();
-  const lines = [formatTaskList(await taskList(d.store, { userId: user.id, admin: user.admin }), user, now)];
+async function loadTaskList(d, user) {
+  const entries = await taskList(d.store, { userId: user.id, admin: user.admin });
+  const paused = [];
   for (const task of await d.store.listTasks({ ownerId: user.id, status: "paused" })) {
-    const held = d.health.pausesFor(task.id).filter((u) => u !== user.id);
-    if (held.length === 0) {
+    const held = [];
+    for (const id of d.health.pausesFor(task.id).filter((u) => u !== user.id))
+      held.push((await d.store.getUser(id))?.displayName ?? id);
+    paused.push({ task, held });
+  }
+  return { entries, paused };
+}
+async function listTasks(d, user) {
+  const { entries, paused } = await loadTaskList(d, user);
+  const lines = [formatTaskList(entries, user, d.clock.now())];
+  for (const { task, held } of paused) {
+    if (held.length === 0)
       lines.push(`Paused: \`${task.id}\` ${task.title}`);
-      continue;
-    }
-    const who = [];
-    for (const id of held)
-      who.push((await d.store.getUser(id))?.displayName ?? id);
-    lines.push(`Paused: \`${task.id}\` ${task.title} -- I could not DM ${who.join(", ")}; \`/task resume ${task.id}\` goes on without them.`);
+    else
+      lines.push(`Paused: \`${task.id}\` ${task.title} -- I could not DM ${held.join(", ")}; \`/task resume ${task.id}\` goes on without them.`);
   }
   return clip(lines.join(`
 `));
@@ -2338,40 +2392,6 @@ async function resumeTask(d, user, taskId) {
   return `Resumed \`${task.id}\`${without}.`;
 }
 
-// plugins/tracker/src/discord-common.ts
-import { MessageFlags } from "discord.js";
-var STARTING = "The tracker is starting up; try again in a minute.";
-var FAILED = "Something went wrong on my side; try again in a minute.";
-var EPHEMERAL = { flags: MessageFlags.Ephemeral };
-var NO_MENTIONS = { allowedMentions: { parse: [] } };
-var UNKNOWN_MEMBER = 10007;
-var UNKNOWN_USER = 10013;
-async function lookupMembership(interaction, guildId, discordId, log) {
-  if (guildId === null)
-    return "not-checked";
-  if (interaction.guildId === guildId && interaction.user.id === discordId)
-    return "member";
-  try {
-    const guild = await interaction.client.guilds.fetch(guildId);
-    await guild.members.fetch({ user: discordId });
-    return "member";
-  } catch (err) {
-    const code = err.code;
-    if (code === UNKNOWN_MEMBER || code === UNKNOWN_USER)
-      return "not-member";
-    log.warn(`could not check membership of ${guildId}: ${err instanceof Error ? err.message : String(err)}`);
-    return "unknown";
-  }
-}
-function serial() {
-  let chain = Promise.resolve();
-  return (fn) => {
-    const next = chain.then(fn, fn);
-    chain = next.catch(() => {});
-    return next;
-  };
-}
-
 // plugins/tracker/src/history.ts
 var HISTORY_RUNS = 10;
 var HISTORY_CHANGES = 5;
@@ -2384,23 +2404,36 @@ function replyText(r) {
     return `chose ${String(r.payload?.choice ?? "?")}`;
   return r.kind === "opt_out" ? "opted out" : r.kind;
 }
-function formatRun(o, replies, people, viewer, now) {
-  const late = o.late ? " (late)" : "";
-  const error = o.status === "failed" && o.error ? `: ${clip(o.error, 120)}` : "";
-  const answers = replies.filter((r) => r.occurrenceId === o.id).map((r) => `${people.get(r.userId)?.displayName ?? r.userId} ${replyText(r)}`);
-  const answered = answers.length > 0 ? `; ${answers.join(", ")}` : "";
-  return `- ${formatInstant(o.dueAt, viewer.timeZone, now)} -- ${o.status}${late}${error}${answered}`;
+function runView(o, replies, people, viewer, now) {
+  return {
+    due: formatInstant(o.dueAt, viewer.timeZone, now),
+    status: o.status,
+    late: o.late,
+    error: o.status === "failed" && o.error ? clip(o.error, 120) : null,
+    answers: replies.filter((r) => r.occurrenceId === o.id).map((r) => `${people.get(r.userId)?.displayName ?? r.userId} ${replyText(r)}`)
+  };
+}
+function changeView(e, viewer, now) {
+  return {
+    at: formatInstant(e.at, viewer.timeZone, now),
+    kind: e.kind.replaceAll("_", " "),
+    detail: e.kind === "paused" || e.kind === "resumed" ? e.detail : null
+  };
 }
-function formatChange(e, viewer, now) {
-  const detail = e.kind === "paused" || e.kind === "resumed" ? `: ${e.detail}` : "";
-  return `- ${formatInstant(e.at, viewer.timeZone, now)} ${e.kind.replaceAll("_", " ")}${detail}`;
+function runLine(v) {
+  const late = v.late ? " (late)" : "";
+  const error = v.error ? `: ${v.error}` : "";
+  const answered = v.answers.length > 0 ? `; ${v.answers.join(", ")}` : "";
+  return `- ${v.due} -- ${v.status}${late}${error}${answered}`;
 }
-async function taskHistory(d, user, taskId) {
+function changeLine(v) {
+  return `- ${v.at} ${v.kind}${v.detail !== null ? `: ${v.detail}` : ""}`;
+}
+async function loadHistory(d, user, taskId) {
   const actor = { userId: user.id, admin: user.admin };
-  const id = taskId.trim();
-  const task = await visibleTask(d.store, actor, id);
+  const task = await visibleTask(d.store, actor, taskId.trim());
   if (!task)
-    return NO_SUCH_TASK;
+    return null;
   const now = d.clock.now();
   const all = await visibleOccurrences(d.store, actor, task.id) ?? [];
   const upcoming = (o) => o.status === "queued" && Date.parse(o.dueAt) > now.getTime();
@@ -2417,19 +2450,33 @@ async function taskHistory(d, user, taskId) {
     }
   }
   const owner = task.ownerId === user.id ? user : await d.store.getUser(task.ownerId);
-  const cadence = task.schedule && owner ? describeSchedule(task.schedule, owner, user.timeZone, now) : "no schedule";
-  const lines = [`\`${task.id}\` ${task.title} -- ${task.type}, ${task.status}, ${cadence}`];
-  lines.push(next ? `Next: ${formatInstant(next.dueAt, user.timeZone, now)}` : "Next: nothing scheduled");
-  lines.push(runs.length === 0 ? "Runs: none yet" : "Runs:");
-  if (runs.length > HISTORY_RUNS)
-    lines.push(`- (${runs.length - HISTORY_RUNS} earlier)`);
-  for (const o of runs.slice(-HISTORY_RUNS))
-    lines.push(formatRun(o, replies, people, user, now));
+  return {
+    task,
+    cadence: task.schedule && owner ? describeSchedule(task.schedule, owner, user.timeZone, now) : "no schedule",
+    next: next ? formatInstant(next.dueAt, user.timeZone, now) : null,
+    runs: runs.slice(-HISTORY_RUNS).map((o) => runView(o, replies, people, user, now)),
+    earlierRuns: Math.max(0, runs.length - HISTORY_RUNS),
+    changes: changes.slice(-HISTORY_CHANGES).map((e) => changeView(e, user, now)),
+    earlierChanges: Math.max(0, changes.length - HISTORY_CHANGES)
+  };
+}
+async function taskHistory(d, user, taskId) {
+  const h = await loadHistory(d, user, taskId);
+  if (!h)
+    return NO_SUCH_TASK;
+  const { task } = h;
+  const lines = [`\`${task.id}\` ${task.title} -- ${task.type}, ${task.status}, ${h.cadence}`];
+  lines.push(h.next ? `Next: ${h.next}` : "Next: nothing scheduled");
+  lines.push(h.runs.length === 0 ? "Runs: none yet" : "Runs:");
+  if (h.earlierRuns > 0)
+    lines.push(`- (${h.earlierRuns} earlier)`);
+  for (const v of h.runs)
+    lines.push(runLine(v));
   lines.push("Changes:");
-  if (changes.length > HISTORY_CHANGES)
-    lines.push(`- (${changes.length - HISTORY_CHANGES} earlier)`);
-  for (const e of changes.slice(-HISTORY_CHANGES))
-    lines.push(formatChange(e, user, now));
+  if (h.earlierChanges > 0)
+    lines.push(`- (${h.earlierChanges} earlier)`);
+  for (const c of h.changes)
+    lines.push(changeLine(c));
   return clip(lines.join(`
 `));
 }
@@ -2815,6 +2862,68 @@ ${body}` : body;
   };
 }
 
+// plugins/tracker/src/web/secrets.ts
+import { createHash, randomBytes, timingSafeEqual } from "crypto";
+function randomToken() {
+  return randomBytes(32).toString("base64url");
+}
+function sha256(value) {
+  return createHash("sha256").update(value).digest("hex");
+}
+function safeEqual(a, b) {
+  const x = Buffer.from(a);
+  const y = Buffer.from(b);
+  return x.length === y.length && timingSafeEqual(x, y);
+}
+function isTokenShape(value) {
+  return /^[A-Za-z0-9_-]{43}$/.test(value);
+}
+
+// plugins/tracker/src/web/signin-link.ts
+var LINK_TTL_MS = 10 * 60 * 1000;
+
+class LoginLinks {
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  issue(userId, now, memberCheckedAt = null) {
+    const token = randomToken();
+    const at = now.toISOString();
+    this.db.query("DELETE FROM web_login_tokens WHERE expires_at <= ?").run(at);
+    this.db.query("INSERT INTO web_login_tokens (token_hash, user_id, created_at, expires_at, member_checked_at) VALUES (?, ?, ?, ?, ?)").run(sha256(token), userId, at, new Date(now.getTime() + LINK_TTL_MS).toISOString(), memberCheckedAt);
+    return token;
+  }
+  peek(token, now) {
+    if (!isTokenShape(token))
+      return false;
+    const row = this.db.query("SELECT 1 AS ok FROM web_login_tokens WHERE token_hash = ? AND used_at IS NULL AND expires_at > ?").get(sha256(token), now.toISOString());
+    return row !== null;
+  }
+  consume(token, now) {
+    if (!isTokenShape(token))
+      return null;
+    const at = now.toISOString();
+    const row = this.db.query("UPDATE web_login_tokens SET used_at = ? WHERE token_hash = ? AND used_at IS NULL AND expires_at > ? RETURNING user_id, member_checked_at").get(at, sha256(token), at);
+    return row ? { userId: row.user_id, memberCheckedAt: row.member_checked_at } : null;
+  }
+}
+
+// plugins/tracker/src/web/command.ts
+var WEB_NOT_CONFIGURED = "The web area is not set up on this bot.";
+function webLink(d, user, web) {
+  if (!web)
+    return WEB_NOT_CONFIGURED;
+  const now = d.clock.now();
+  const token = d.logins.issue(user.id, now, web.gated ? now.toISOString() : null);
+  const minutes = LINK_TTL_MS / 60000;
+  return [
+    `Your sign-in link for the tracker's web area. It works once, within ${minutes} minutes; do not share it.`,
+    `<${web.origin}/${web.name}/login?t=${token}>`
+  ].join(`
+`);
+}
+
 // plugins/tracker/src/discord.ts
 function displayName(user) {
   return user.globalName ?? user.username;
@@ -2822,7 +2931,7 @@ function displayName(user) {
 function createSurface(w) {
   const ctx = {
     deps: w.deps,
-    queue: serial(),
+    queue: w.queue ?? serial(),
     membershipOf: (interaction, discordId) => w.membership ? w.membership(interaction, discordId) : lookupMembership(interaction, w.guildId, discordId, w.log),
     log: w.log
   };
@@ -2937,6 +3046,11 @@ ${body}` : body);
       name: "settings",
       build: (b) => b.setDescription("Your tracker settings").addSubcommand((s) => s.setName("hour").setDescription("The hour (0-23) a reminder without a time reaches you").addIntegerOption((o) => o.setName("hour").setDescription("0-23, in your time zone").setRequired(true).setMinValue(0).setMaxValue(23))),
       handle: (interaction) => run(interaction, "registered", (d, user) => setHour(d, user, interaction.options.getInteger("hour", true)))
+    },
+    {
+      name: "web",
+      build: (b) => b.setDescription("Get a one-time link to sign in to the tracker's web area"),
+      handle: (interaction) => run(interaction, "registered", async (d, user) => webLink(d, user, w.web))
     }
   ];
   return { commands, interactions: createInteractionHandler(ctx) };
@@ -3150,6 +3264,28 @@ var MIGRATIONS = [
     at TEXT NOT NULL,
     PRIMARY KEY (task_id, user_id)
   );
+  `,
+  `
+  CREATE TABLE web_login_tokens (
+    token_hash TEXT PRIMARY KEY,
+    user_id TEXT NOT NULL,
+    created_at TEXT NOT NULL,
+    expires_at TEXT NOT NULL,
+    used_at TEXT,
+    member_checked_at TEXT
+  );
+  CREATE INDEX web_login_tokens_expiry ON web_login_tokens (expires_at);
+
+  CREATE TABLE web_sessions (
+    id_hash TEXT PRIMARY KEY,
+    user_id TEXT NOT NULL,
+    csrf TEXT NOT NULL,
+    created_at TEXT NOT NULL,
+    expires_at TEXT NOT NULL,
+    member_checked_at TEXT
+  );
+  CREATE INDEX web_sessions_user ON web_sessions (user_id);
+  CREATE INDEX web_sessions_expiry ON web_sessions (expires_at);
   `
 ];
 function migrate(db) {
@@ -3493,40 +3629,1746 @@ class SqliteStore {
   }
 }
 
-// plugins/tracker/src/index.ts
-var DB_DIR = "tracker";
-var DB_FILE = "tracker.sqlite";
-var TRACKER_TYPES = Object.freeze({
-  reminder,
-  renewal
-});
-var NO_DM = {
-  async sendDm() {
-    throw new Error("this bot has no host.dm (rackbops-discord-bot#736)");
+// node_modules/@rackbops/styles/rackbops-noir/bundle.css
+var bundle_default = `:where([data-rb-style], [data-rb-style] *), :where([data-rb-style], [data-rb-style] *):before, :where([data-rb-style], [data-rb-style] *):after {
+  box-sizing: border-box;
+}
+
+:where(html[data-rb-style]) body {
+  min-height: 100vh;
+  margin: 0;
+}
+
+:where([data-rb-style="rackbops-noir"]) {
+  color-scheme: dark;
+  --rb-bg: #0d141d;
+  --rb-surface: #141f2a;
+  --rb-surface-2: #19242f;
+  --rb-surface-sunken: #0f1720;
+  --rb-text: #e9eff4;
+  --rb-text-soft: #a4b4c3;
+  --rb-text-faint: #697a8c;
+  --rb-border: #243140;
+  --rb-border-strong: #31404f;
+  --rb-accent: #ff5d3d;
+  --rb-accent-fg: #0d141d;
+  --rb-accent-wash: #ff5d3d21;
+  --rb-accent-grad: linear-gradient(180deg, #ff5d3d, #ff7a5f);
+  --rb-info: #4c9df0;
+  --rb-success: #43c97e;
+  --rb-warning: #f2a93b;
+  --rb-danger: #f0616d;
+  --rb-font-display: system-ui, -apple-system, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
+  --rb-font-body: system-ui, -apple-system, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
+  --rb-font-mono: ui-monospace, "SF Mono", "Cascadia Code", "JetBrains Mono", Menlo, Consolas, monospace;
+  --rb-font-weight: 400;
+  --rb-font-weight-medium: 600;
+  --rb-font-weight-bold: 800;
+  --rb-heading-tracking: -.02em;
+  --rb-label-tracking: .18em;
+  --rb-text-sm: 13.5px;
+  --rb-radius: .6875rem;
+  --rb-radius-lg: .9375rem;
+  --rb-radius-pill: 99px;
+  --rb-shadow-sm: 0 1px 2px #00000059;
+  --rb-shadow-lg: 0 2px 6px #0006, 0 24px 50px -24px #000000b3;
+  --rb-blur: 10px;
+  --rb-transition: .15s;
+  --rb-focus-ring: 2.5px solid var(--rb-accent);
+  --rb-ease: ease;
+  --rb-space-1: .5rem;
+  --rb-space-2: .75rem;
+  --rb-space-3: 1rem;
+  --rb-space-4: 1.5rem;
+  --rb-space-5: 2.25rem;
+}
+
+@media (prefers-reduced-motion: reduce) {
+  :where([data-rb-style="rackbops-noir"]) {
+    --rb-transition: 0s;
   }
-};
-function createPlugin(host, options = {}) {
-  const adminIds = parseAdminIds(host.env.TRACKER_ADMIN_DISCORD_IDS);
-  const guildId = parseGuildId(host.env.TRACKER_GUILD_ID);
-  const clock = options.clock ?? { now: () => new Date };
-  const types = options.types ?? TRACKER_TYPES;
-  const health = { activatedAt: null, lastTickAt: null, blocked: null };
-  let db = null;
-  let store = null;
-  let claims = null;
-  let delivery = null;
-  let deps = null;
-  let warnedNoDm = false;
-  const dm = host.dm?.bind(host);
-  const surface = createSurface({
-    deps: () => deps,
-    guildId,
-    log: host.log,
-    ...options.membership ? { membership: options.membership } : {}
-  });
-  return {
-    commands: surface.commands,
-    interactions: surface.interactions,
+}
+
+:where([data-rb-style="rackbops-noir"]) {
+  background-color: var(--rb-bg);
+  color: var(--rb-text);
+  font-family: var(--rb-font-body);
+  font-weight: var(--rb-font-weight);
+  font-size: 17px;
+  line-height: 1.6;
+}
+
+:where(html[data-rb-style="rackbops-noir"]) body {
+  background-color: var(--rb-bg);
+  color: var(--rb-text);
+  font-family: var(--rb-font-body);
+  font-weight: var(--rb-font-weight);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *):where(h1, h2, h3, h4, h5, h6) {
+  margin: 0 0 var(--rb-space-3);
+  font-family: var(--rb-font-display);
+  font-weight: var(--rb-font-weight-bold);
+  letter-spacing: var(--rb-heading-tracking);
+  text-wrap: balance;
+  line-height: 1.08;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *):where(p) {
+  margin: 0 0 var(--rb-space-3);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *):where(ul, ol) {
+  margin: 0 0 var(--rb-space-3);
+  padding-inline-start: var(--rb-space-4);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *):where(a) {
+  color: var(--rb-accent);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *):where(:focus-visible) {
+  outline: var(--rb-focus-ring);
+  outline-offset: 3px;
+  border-radius: 3px;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *)::selection {
+  background: var(--rb-accent);
+  color: #fff;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn {
+  align-items: center;
+  gap: var(--rb-space-2);
+  border-radius: var(--rb-radius);
+  font-weight: var(--rb-font-weight-medium);
+  cursor: pointer;
+  color: var(--rb-text);
+  transition: transform var(--rb-transition) var(--rb-ease),
+    background var(--rb-transition) var(--rb-ease),
+    border-color var(--rb-transition) var(--rb-ease),
+    color var(--rb-transition) var(--rb-ease);
+  background: none;
+  border: 1px solid #0000;
+  padding: 13px 22px;
+  font-size: 16px;
+  text-decoration: none;
+  display: inline-flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn--sm {
+  font-size: var(--rb-text-sm);
+  padding: 7px 14px;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-icon-btn {
+  padding: var(--rb-space-2);
+  justify-content: center;
+  gap: 0;
+  min-width: 2rem;
+  min-height: 2rem;
+  line-height: 1;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn:active {
+  transform: translateY(1px);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn--primary {
+  background: var(--rb-text);
+  color: var(--rb-bg);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn--primary:not(:disabled):hover, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn--primary:focus-visible, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn--accent {
+  background: var(--rb-accent);
+  color: var(--rb-accent-fg);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn--accent:not(:disabled):hover, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn--accent:focus-visible {
+  background: color-mix(in srgb, var(--rb-accent), var(--rb-text) 15%);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn--ghost {
+  color: var(--rb-text);
+  border-color: var(--rb-border-strong);
+  background: none;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn--ghost:not(:disabled):hover, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn--ghost:focus-visible {
+  border-color: var(--rb-text);
+  background: var(--rb-surface-2);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn--danger {
+  color: var(--rb-danger);
+  border-color: color-mix(in srgb, var(--rb-danger) 45%, var(--rb-border));
+  background: none;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn--danger:not(:disabled):hover, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn--danger:focus-visible {
+  border-color: var(--rb-danger);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn:disabled {
+  opacity: .5;
+  cursor: not-allowed;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn__arrow {
+  transition: transform var(--rb-transition) var(--rb-ease);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn:not(:disabled):hover .rb-btn__arrow {
+  transform: translateX(3px);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-card {
+  background: var(--rb-surface);
+  border: 1px solid var(--rb-border);
+  border-radius: var(--rb-radius-lg);
+  box-shadow: var(--rb-shadow-sm);
+  transition: transform var(--rb-transition) var(--rb-ease),
+    border-color var(--rb-transition) var(--rb-ease),
+    box-shadow var(--rb-transition) var(--rb-ease);
+  flex-direction: column;
+  padding: 26px 24px 28px;
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-card:hover, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-card--raised {
+  border-color: var(--rb-border-strong);
+  box-shadow: var(--rb-shadow-lg);
+  transform: translateY(-4px);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-card--raised:hover {
+  transform: translateY(-6px);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-card__tag {
+  font-family: var(--rb-font-mono);
+  letter-spacing: .12em;
+  text-transform: uppercase;
+  color: var(--rb-accent);
+  justify-content: space-between;
+  align-items: center;
+  font-size: 12px;
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-link {
+  align-items: center;
+  gap: var(--rb-space-1);
+  font-family: var(--rb-font-mono);
+  font-size: var(--rb-text-sm);
+  color: var(--rb-text-soft);
+  cursor: pointer;
+  transition: color var(--rb-transition) var(--rb-ease),
+    background var(--rb-transition) var(--rb-ease);
+  border-radius: 8px;
+  padding: 8px 12px;
+  text-decoration: none;
+  display: inline-flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-link:hover {
+  color: var(--rb-text);
+  background: var(--rb-surface-2);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-link.rb-link--active, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-link[aria-current="page"] {
+  color: var(--rb-accent);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-nav-rail {
+  gap: var(--rb-space-1);
+  width: 14rem;
+  padding: var(--rb-space-3);
+  background: var(--rb-surface);
+  border-right: 1px solid var(--rb-border);
+  flex-direction: column;
+  flex-shrink: 0;
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-field {
+  gap: var(--rb-space-1);
+  flex-direction: column;
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-label {
+  font-size: var(--rb-text-sm);
+  font-weight: var(--rb-font-weight-medium);
+  color: var(--rb-text-soft);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-label__required {
+  color: var(--rb-danger);
+  margin-left: var(--rb-space-1);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-field__help {
+  color: var(--rb-text-soft);
+  font-size: var(--rb-text-sm);
+  margin-top: var(--rb-space-1);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-field__error {
+  color: var(--rb-text);
+  font-size: var(--rb-text-sm);
+  padding-left: var(--rb-space-2);
+  border-left: 3px solid var(--rb-danger);
+  margin-top: var(--rb-space-1);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-input, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-textarea, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-select {
+  background: var(--rb-surface);
+  border: 1px solid var(--rb-border-strong);
+  border-radius: var(--rb-radius);
+  width: 100%;
+  color: var(--rb-text);
+  font-family: var(--rb-font-body);
+  transition: border-color var(--rb-transition) var(--rb-ease),
+    box-shadow var(--rb-transition) var(--rb-ease);
+  padding: 12px 14px;
+  font-size: 16px;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-textarea {
+  resize: vertical;
+  min-height: 6rem;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-input:focus-visible, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-textarea:focus-visible, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-select:focus-visible {
+  border-color: var(--rb-accent);
+  box-shadow: 0 0 0 3px var(--rb-accent-wash);
+  outline: none;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-input[aria-invalid="true"], :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-textarea[aria-invalid="true"], :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-select[aria-invalid="true"] {
+  border-color: var(--rb-danger);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-input::placeholder, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-textarea::placeholder {
+  color: var(--rb-text-faint);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-choice {
+  align-items: center;
+  gap: var(--rb-space-1);
+  color: var(--rb-text);
+  cursor: pointer;
+  font-size: 16px;
+  display: inline-flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-checkbox, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-radio {
+  accent-color: var(--rb-accent);
+  cursor: pointer;
+  width: 1.1rem;
+  height: 1.1rem;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-switch {
+  appearance: none;
+  vertical-align: text-bottom;
+  cursor: pointer;
+  background: var(--rb-surface-sunken);
+  border: 1px solid var(--rb-border-strong);
+  border-radius: var(--rb-radius-pill);
+  width: 2.25rem;
+  height: 1.25rem;
+  transition: background var(--rb-transition) var(--rb-ease), border-color var(--rb-transition) var(--rb-ease);
+  margin: 0;
+  position: relative;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-switch:after {
+  content: "";
+  background: var(--rb-text-soft);
+  width: calc(1.25rem - 6px);
+  height: calc(1.25rem - 6px);
+  transition: transform var(--rb-transition) var(--rb-ease), background var(--rb-transition) var(--rb-ease);
+  border-radius: 50%;
+  position: absolute;
+  top: 2px;
+  left: 2px;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-switch:checked {
+  background: var(--rb-accent);
+  border-color: var(--rb-accent);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-switch:checked:after {
+  background: var(--rb-accent-fg);
+  transform: translateX(1rem);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-switch:disabled {
+  cursor: not-allowed;
+  opacity: .5;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-badge {
+  align-items: center;
+  gap: var(--rb-space-1);
+  border: 1px solid var(--rb-border);
+  border-radius: var(--rb-radius-pill);
+  font-family: var(--rb-font-mono);
+  letter-spacing: .02em;
+  color: var(--rb-text-soft);
+  background: var(--rb-surface);
+  padding: 4px 10px;
+  font-size: 11.5px;
+  display: inline-flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-badge--md {
+  font-size: var(--rb-text-sm);
+  padding: var(--rb-space-1) var(--rb-space-3);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-badge--info {
+  background: color-mix(in srgb, var(--rb-info) 14%, var(--rb-surface));
+  border-color: color-mix(in srgb, var(--rb-info) 45%, var(--rb-border));
+  color: var(--rb-text);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-badge--success {
+  background: color-mix(in srgb, var(--rb-success) 14%, var(--rb-surface));
+  border-color: color-mix(in srgb, var(--rb-success) 45%, var(--rb-border));
+  color: var(--rb-text);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-badge--warning {
+  background: color-mix(in srgb, var(--rb-warning) 16%, var(--rb-surface));
+  border-color: color-mix(in srgb, var(--rb-warning) 45%, var(--rb-border));
+  color: var(--rb-text);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-badge--danger {
+  background: color-mix(in srgb, var(--rb-danger) 14%, var(--rb-surface));
+  border-color: color-mix(in srgb, var(--rb-danger) 45%, var(--rb-border));
+  color: var(--rb-text);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-alert {
+  gap: var(--rb-space-1);
+  padding: var(--rb-space-3) var(--rb-space-4);
+  background: var(--rb-surface);
+  border: 1px solid var(--rb-border);
+  border-left: 4px solid var(--rb-accent);
+  border-radius: var(--rb-radius);
+  box-shadow: var(--rb-shadow-sm);
+  color: var(--rb-text);
+  flex-direction: column;
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-alert__title {
+  font-weight: var(--rb-font-weight-medium);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-alert--info {
+  border-left-color: var(--rb-info);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-alert--success {
+  border-left-color: var(--rb-success);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-alert--warning {
+  border-left-color: var(--rb-warning);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-alert--danger {
+  border-left-color: var(--rb-danger);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-toast-region {
+  top: var(--rb-space-4);
+  right: var(--rb-space-4);
+  z-index: 1000;
+  gap: var(--rb-space-2);
+  width: fit-content;
+  max-width: min(28rem, calc(100vw - 2 * var(--rb-space-4)));
+  pointer-events: none;
+  flex-direction: column;
+  display: flex;
+  position: fixed;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-toast {
+  pointer-events: auto;
+  align-items: flex-start;
+  gap: var(--rb-space-3);
+  padding: var(--rb-space-3) var(--rb-space-4);
+  background: var(--rb-surface);
+  border: 1px solid var(--rb-border);
+  border-left: 4px solid var(--rb-accent);
+  border-radius: var(--rb-radius);
+  box-shadow: var(--rb-shadow-lg);
+  color: var(--rb-text);
+  transition: opacity var(--rb-transition) var(--rb-ease),
+    transform var(--rb-transition) var(--rb-ease);
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-toast[data-rb-enter] {
+  opacity: 0;
+  transform: translateY(calc(-1 * var(--rb-space-2)));
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-toast--info {
+  border-left-color: var(--rb-info);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-toast--success {
+  border-left-color: var(--rb-success);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-toast--warning {
+  border-left-color: var(--rb-warning);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-toast--danger {
+  border-left-color: var(--rb-danger);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-toast__close {
+  border-radius: var(--rb-radius);
+  width: 1.25rem;
+  height: 1.25rem;
+  color: var(--rb-text-soft);
+  cursor: pointer;
+  transition: color var(--rb-transition) var(--rb-ease);
+  background: none;
+  border: none;
+  flex: none;
+  justify-content: center;
+  align-items: center;
+  margin-inline-start: auto;
+  padding: 0;
+  font-size: 1.125rem;
+  line-height: 1;
+  display: inline-flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-toast__close:hover {
+  color: var(--rb-text);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-toast__close:focus-visible {
+  outline: var(--rb-focus-ring);
+  outline-offset: 2px;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-dialog {
+  border: 1px solid var(--rb-border);
+  border-radius: var(--rb-radius-lg);
+  background: var(--rb-surface);
+  color: var(--rb-text);
+  box-shadow: var(--rb-shadow-lg);
+  max-width: min(92vw, 34rem);
+  padding: 0;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-dialog::backdrop {
+  -webkit-backdrop-filter: blur(var(--rb-blur));
+  background: #131e2966;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-dialog__body {
+  padding: var(--rb-space-5);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-dialog__title {
+  margin: 0 0 var(--rb-space-3);
+  font-family: var(--rb-font-display);
+  font-weight: var(--rb-font-weight-bold);
+  letter-spacing: var(--rb-heading-tracking);
+  font-size: 1.4rem;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-dialog__actions {
+  justify-content: flex-end;
+  gap: var(--rb-space-2);
+  padding: var(--rb-space-3) var(--rb-space-5);
+  border-top: 1px solid var(--rb-border);
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tabs {
+  gap: var(--rb-space-4);
+  border-bottom: 1px solid var(--rb-border);
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tab {
+  padding: var(--rb-space-2) 0;
+  color: var(--rb-text-soft);
+  font-family: var(--rb-font-body);
+  font-weight: var(--rb-font-weight-medium);
+  cursor: pointer;
+  transition: color var(--rb-transition) var(--rb-ease);
+  background: none;
+  border: 0;
+  font-size: 15px;
+  position: relative;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tab:not(:disabled):hover {
+  color: var(--rb-text);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tab:disabled {
+  opacity: .5;
+  cursor: not-allowed;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tab.rb-tab--active, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tab[aria-selected="true"] {
+  color: var(--rb-text);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tab.rb-tab--active:after, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tab[aria-selected="true"]:after {
+  content: "";
+  background: var(--rb-accent);
+  border-radius: 2px 2px 0 0;
+  height: 2px;
+  position: absolute;
+  bottom: -1px;
+  left: 0;
+  right: 0;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tabpanel {
+  padding: var(--rb-space-4) 0;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tabstrip {
+  gap: var(--rb-space-2);
+  padding: var(--rb-space-2) 0;
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tabstrip__tab {
+  padding: var(--rb-space-2) var(--rb-space-4);
+  background: var(--rb-surface-2);
+  border: 1px solid var(--rb-border);
+  border-radius: var(--rb-radius);
+  color: var(--rb-text);
+  font-size: var(--rb-text-sm);
+  font-weight: var(--rb-font-weight-medium);
+  cursor: pointer;
+  transition: border-color var(--rb-transition) var(--rb-ease);
+  position: relative;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tabstrip__tab:not(:disabled):hover {
+  border-color: var(--rb-accent);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tabstrip__tab:disabled {
+  opacity: .5;
+  cursor: not-allowed;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tabstrip__tab.rb-tabstrip__tab--active {
+  color: var(--rb-accent);
+  border-color: color-mix(in srgb, var(--rb-accent) 40%, var(--rb-border));
+  background: var(--rb-accent-wash);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tabstrip__badge {
+  color: var(--rb-text-faint);
+  font-size: var(--rb-text-sm);
+  font-variant-numeric: tabular-nums;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-wordmark {
+  width: fit-content;
+  font-family: var(--rb-font-display);
+  font-weight: var(--rb-font-weight-medium);
+  letter-spacing: var(--rb-heading-tracking);
+  color: var(--rb-text);
+  align-items: baseline;
+  gap: .4em;
+  margin: 0;
+  font-size: 1rem;
+  display: inline-flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-wordmark__spark {
+  color: var(--rb-accent);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table {
+  border-collapse: collapse;
+  width: 100%;
+  font-size: 15px;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table th {
+  text-align: left;
+  padding: var(--rb-space-2) var(--rb-space-3);
+  border-bottom: 2px solid var(--rb-border-strong);
+  color: var(--rb-text-soft);
+  font-family: var(--rb-font-mono);
+  letter-spacing: .06em;
+  text-transform: uppercase;
+  font-size: 12px;
+  font-weight: var(--rb-font-weight-medium);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table td {
+  padding: var(--rb-space-2) var(--rb-space-3);
+  border-bottom: 1px solid var(--rb-border);
+  color: var(--rb-text);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table tbody tr:hover td {
+  background: var(--rb-surface-2);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table .rb-num {
+  text-align: right;
+  font-variant-numeric: tabular-nums;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table__group-row td {
+  padding-top: var(--rb-space-3);
+  padding-bottom: var(--rb-space-1);
+  color: var(--rb-text-faint);
+  font-size: var(--rb-text-sm);
+  font-weight: var(--rb-font-weight-medium);
+  text-transform: uppercase;
+  letter-spacing: .04em;
+  border-bottom: none;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table__sort {
+  align-items: center;
+  gap: var(--rb-space-1);
+  font: inherit;
+  color: inherit;
+  cursor: pointer;
+  background: none;
+  border: none;
+  margin: 0;
+  padding: 0;
+  display: inline-flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table__sort:hover {
+  color: var(--rb-text);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table__sort-icon {
+  color: var(--rb-text-faint);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table__sort:hover .rb-table__sort-icon {
+  color: var(--rb-text);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table-scroll {
+  max-height: 70vh;
+  overflow: auto;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table-scroll thead th {
+  background: var(--rb-surface);
+  z-index: 1;
+  position: sticky;
+  top: 0;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table--interactive tbody tr {
+  cursor: pointer;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table--interactive tbody tr:focus-visible, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table--interactive tbody tr:has(:focus-visible) {
+  outline: var(--rb-focus-ring);
+  outline-offset: -3px;
+  border-radius: 0;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table--interactive tbody tr:focus-visible td, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table--interactive tbody tr:has(:focus-visible) td {
+  background: var(--rb-surface-2);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-progress {
+  appearance: none;
+  border-radius: var(--rb-radius-pill);
+  background: var(--rb-surface-sunken);
+  border: 0;
+  width: 100%;
+  height: 8px;
+  overflow: hidden;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-progress::-webkit-progress-bar {
+  background: var(--rb-surface-sunken);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-progress::-webkit-progress-value {
+  background: var(--rb-accent);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-progress::-moz-progress-bar {
+  background: var(--rb-accent);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-progress:indeterminate::-webkit-progress-bar {
+  background-color: var(--rb-surface-sunken);
+  background-image: linear-gradient(90deg, transparent 0%, var(--rb-accent) 50%, transparent 100%);
+  background-repeat: no-repeat;
+  background-size: 50% 100%;
+  animation: 1.4s ease-in-out infinite rb-noir-indeterminate;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-progress:indeterminate::-moz-progress-bar {
+  background-color: var(--rb-surface-sunken);
+  background-image: linear-gradient(90deg, transparent 0%, var(--rb-accent) 50%, transparent 100%);
+  background-repeat: no-repeat;
+  background-size: 50% 100%;
+  animation: 1.4s ease-in-out infinite rb-noir-indeterminate;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-spinner {
+  border: 2px solid var(--rb-border-strong);
+  border-top-color: var(--rb-accent);
+  border-radius: 50%;
+  width: 1.25rem;
+  height: 1.25rem;
+  animation: .7s linear infinite rb-noir-spin;
+  display: inline-block;
+}
+
+@keyframes rb-noir-spin {
+  to {
+    transform: rotate(360deg);
+  }
+}
+
+@keyframes rb-noir-indeterminate {
+  0% {
+    background-position: -50% 0;
+  }
+
+  100% {
+    background-position: 150% 0;
+  }
+}
+
+@media (prefers-reduced-motion: reduce) {
+  :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-progress:indeterminate::-webkit-progress-bar {
+    animation-duration: 2s;
+  }
+
+  :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-progress:indeterminate::-moz-progress-bar {
+    animation-duration: 2s;
+  }
+
+  :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-spinner {
+    animation-duration: 2s;
+  }
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-stepper {
+  isolation: isolate;
+  margin: 0;
+  padding: 0;
+  list-style: none;
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-stepper__step {
+  align-items: center;
+  gap: var(--rb-space-2);
+  text-align: center;
+  flex-direction: column;
+  flex: 1;
+  min-width: 0;
+  display: flex;
+  position: relative;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-stepper__step:not(:first-child):before {
+  content: "";
+  background: var(--rb-surface-sunken);
+  z-index: -1;
+  width: 100%;
+  height: 2px;
+  transition: background-color var(--rb-transition) var(--rb-ease);
+  position: absolute;
+  top: 1rem;
+  right: 50%;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-stepper__step:not(:first-child).rb-stepper--complete:before, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-stepper__step:not(:first-child).rb-stepper--current:before, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-stepper__step[aria-current="step"]:before {
+  background: var(--rb-accent);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-stepper__node {
+  border-radius: var(--rb-radius-pill);
+  background: var(--rb-surface-2);
+  width: 2rem;
+  height: 2rem;
+  color: var(--rb-text-faint);
+  font-size: var(--rb-text-sm);
+  font-weight: var(--rb-font-weight-medium);
+  border: 2px solid #0000;
+  justify-content: center;
+  align-items: center;
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-stepper__label {
+  font-size: var(--rb-text-sm);
+  color: var(--rb-text-faint);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-stepper--complete .rb-stepper__node {
+  background: var(--rb-accent);
+  color: var(--rb-accent-fg);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-stepper--complete .rb-stepper__label {
+  color: var(--rb-text);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-stepper--current .rb-stepper__node, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-stepper__step[aria-current="step"] .rb-stepper__node {
+  background: var(--rb-surface);
+  border-color: var(--rb-accent);
+  color: var(--rb-accent);
+  box-shadow: var(--rb-shadow-lg);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-stepper--current .rb-stepper__label, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-stepper__step[aria-current="step"] .rb-stepper__label {
+  color: var(--rb-accent);
+  font-weight: var(--rb-font-weight-medium);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-muted {
+  color: var(--rb-text-faint);
+  font-style: italic;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-pre {
+  padding: var(--rb-space-3) var(--rb-space-4);
+  background: var(--rb-surface-sunken);
+  border: 1px solid var(--rb-border);
+  border-radius: var(--rb-radius);
+  font-family: var(--rb-font-mono);
+  font-size: var(--rb-text-sm);
+  margin: 0;
+  overflow-x: auto;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-log {
+  white-space: pre-wrap;
+  overflow-wrap: anywhere;
+  max-height: 16rem;
+  line-height: 1.5;
+  overflow-y: auto;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-pre.rb-log {
+  overflow-x: hidden;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-eyebrow {
+  font-family: var(--rb-font-mono);
+  font-size: 12.5px;
+  font-weight: var(--rb-font-weight-medium);
+  letter-spacing: var(--rb-label-tracking);
+  text-transform: uppercase;
+  color: var(--rb-accent);
+  align-items: center;
+  gap: 10px;
+  display: inline-flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-eyebrow:before {
+  content: "";
+  background: var(--rb-accent);
+  width: 22px;
+  height: 1.5px;
+  display: inline-block;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack {
+  --rb-rack-panel: #0a121a;
+  --rb-rack-ink: #e7eef4;
+  --rb-rack-faint: #7d90a2;
+  --rb-rack-line: #1e2b37;
+  background: var(--rb-rack-panel);
+  border: 1px solid var(--rb-rack-line);
+  box-shadow: var(--rb-shadow-lg);
+  color: var(--rb-rack-ink);
+  border-radius: 16px;
+  padding: 24px;
+  overflow: hidden;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__top {
+  font-family: var(--rb-font-mono);
+  letter-spacing: .14em;
+  text-transform: uppercase;
+  color: var(--rb-rack-faint);
+  justify-content: space-between;
+  align-items: center;
+  font-size: 11.5px;
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__live {
+  color: var(--rb-rack-ink);
+  align-items: center;
+  gap: 7px;
+  display: inline-flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__live:before {
+  content: "";
+  background: var(--rb-accent);
+  border-radius: 50%;
+  width: 7px;
+  height: 7px;
+  animation: 1.8s ease-in-out infinite rb-noir-pulse;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__bars {
+  align-items: flex-end;
+  gap: 7px;
+  height: 132px;
+  margin: 22px 2px 16px;
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__bars > i {
+  background: var(--rb-accent-grad);
+  transform-origin: bottom;
+  opacity: .92;
+  border-radius: 4px 4px 2px 2px;
+  flex: 1;
+  animation: 1.4s ease-in-out infinite rb-noir-bop;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__bars > i:first-child {
+  height: 52%;
+  animation-delay: -.2s;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__bars > i:nth-child(2) {
+  height: 88%;
+  animation-delay: -1.1s;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__bars > i:nth-child(3) {
+  height: 34%;
+  animation-delay: -.6s;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__bars > i:nth-child(4) {
+  height: 70%;
+  animation-delay: -.9s;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__bars > i:nth-child(5) {
+  height: 100%;
+  animation-delay: -.35s;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__bars > i:nth-child(6) {
+  height: 46%;
+  animation-delay: -1.3s;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__foot {
+  border-top: 1px solid var(--rb-rack-line);
+  font-family: var(--rb-font-mono);
+  color: var(--rb-rack-faint);
+  letter-spacing: .04em;
+  justify-content: space-between;
+  gap: 12px;
+  padding-top: 14px;
+  font-size: 11.5px;
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__foot b {
+  color: var(--rb-rack-ink);
+  font-weight: var(--rb-font-weight-medium);
+}
+
+@keyframes rb-noir-bop {
+  0%, 100% {
+    transform: scaleY(.5);
+  }
+
+  50% {
+    transform: scaleY(1);
+  }
+}
+
+@keyframes rb-noir-pulse {
+  0%, 100% {
+    opacity: 1;
+  }
+
+  50% {
+    opacity: .35;
+  }
+}
+
+@media (prefers-reduced-motion: reduce) {
+  :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__bars > i, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__live:before {
+    animation: none;
+  }
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-principles {
+  flex-direction: column;
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-principle {
+  border-top: 1px solid var(--rb-border);
+  grid-template-columns: 56px 1fr;
+  gap: 18px;
+  padding: 22px 0;
+  display: grid;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-principles > .rb-principle:first-child {
+  border-top: 0;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-principle__n {
+  font-family: var(--rb-font-mono);
+  font-size: 13px;
+  font-weight: var(--rb-font-weight-medium);
+  color: var(--rb-accent);
+  padding-top: 3px;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-principle__body h3 {
+  margin: 0;
+  font-size: 1.16rem;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-principle__body p {
+  color: var(--rb-text-soft);
+  margin: 7px 0 0;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tags {
+  flex-wrap: wrap;
+  gap: 8px;
+  margin: 0;
+  padding: 0;
+  list-style: none;
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tag {
+  font-family: var(--rb-font-mono);
+  color: var(--rb-text-soft);
+  border: 1px solid var(--rb-border);
+  border-radius: var(--rb-radius-pill);
+  letter-spacing: .02em;
+  padding: 4px 10px;
+  font-size: 11.5px;
+}
+`;
+
+// plugins/tracker/src/web/theme.ts
+var THEME_CSS = bundle_default;
+var LAYOUT_CSS = `
+/* tracker web area layout (not part of the theme) */
+.tr-top { display: flex; flex-wrap: wrap; align-items: center; gap: var(--rb-space-3); padding: var(--rb-space-3) var(--rb-space-4); border-bottom: 1px solid var(--rb-border); }
+.tr-top nav { display: flex; flex-wrap: wrap; align-items: center; gap: var(--rb-space-2); margin-left: auto; }
+.tr-top form { margin: 0; }
+.tr-main { max-width: 60rem; margin: 0 auto; padding: var(--rb-space-4); }
+.tr-main > section { margin-bottom: var(--rb-space-5); }
+.tr-stack { display: grid; gap: var(--rb-space-3); max-width: 28rem; }
+.tr-foot { margin-top: var(--rb-space-5); }
+`;
+var STYLESHEET = `${THEME_CSS}
+${LAYOUT_CSS}`;
+var STYLESHEET_PATH = `/assets/theme.${sha256(STYLESHEET).slice(0, 16)}.css`;
+
+// plugins/tracker/src/web/html.ts
+function esc(value) {
+  return String(value).replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;").replaceAll("'", "&#39;");
+}
+
+class Html {
+  value;
+  constructor(value) {
+    this.value = value;
+  }
+  toString() {
+    return this.value;
+  }
+}
+function render(part) {
+  if (part === null || part === undefined || part === false)
+    return "";
+  if (part instanceof Html)
+    return part.value;
+  if (Array.isArray(part))
+    return part.map(render).join("");
+  return esc(part);
+}
+function html(strings, ...values) {
+  let out = strings[0] ?? "";
+  values.forEach((v, i) => {
+    out += render(v) + (strings[i + 1] ?? "");
+  });
+  return new Html(out);
+}
+var CSP = "default-src 'none'; style-src 'self'; img-src 'none'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'";
+var REFERRER_POLICY = "same-origin";
+function pageHeaders(extra = {}) {
+  const h = new Headers({
+    "Content-Type": "text/html; charset=utf-8",
+    "Content-Security-Policy": CSP,
+    "X-Content-Type-Options": "nosniff",
+    "X-Frame-Options": "DENY",
+    "Referrer-Policy": REFERRER_POLICY,
+    "Cache-Control": "no-store"
+  });
+  for (const [k, v] of Object.entries(extra))
+    h.set(k, v);
+  return h;
+}
+function page(f) {
+  const nav = f.signedIn ? html`<nav aria-label="Tracker">
+<span class="rb-muted">${f.signedIn.name}</span>
+<a class="rb-link" href="${f.base}/">My tasks</a>
+<a class="rb-link" href="${f.base}/settings">Settings</a>
+<form method="post" action="${f.base}/logout"><input type="hidden" name="csrf" value="${f.signedIn.csrf}"><button class="rb-btn rb-btn--ghost rb-btn--sm" type="submit">Sign out</button></form>
+</nav>` : null;
+  return html`<!doctype html>
+<html lang="en" data-rb-style="rackbops-noir">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<meta name="referrer" content="${REFERRER_POLICY}">
+<title>${f.title} -- Tracker</title>
+<link rel="stylesheet" href="${f.base}${STYLESHEET_PATH}">
+</head>
+<body>
+<header class="tr-top"><span class="rb-wordmark">Tracker<span class="rb-wordmark__spark">.</span></span>${nav}</header>
+<main class="tr-main">
+${f.body}
+</main>
+</body>
+</html>
+`.value;
+}
+function htmlResponse(body, status = 200, extra = {}) {
+  return new Response(body, { status, headers: pageHeaders(extra) });
+}
+function redirect(location, cookies = []) {
+  const h = new Headers({ Location: location, "Cache-Control": "no-store", "Referrer-Policy": REFERRER_POLICY });
+  for (const c of cookies)
+    h.append("Set-Cookie", c);
+  return new Response(null, { status: 303, headers: h });
+}
+function readCookie(request, name) {
+  const header = request.headers.get("cookie");
+  if (!header)
+    return null;
+  for (const part of header.split(";")) {
+    const eq = part.indexOf("=");
+    if (eq < 0)
+      continue;
+    if (part.slice(0, eq).trim() === name)
+      return part.slice(eq + 1).trim();
+  }
+  return null;
+}
+function cookie(name, value, o) {
+  return `${name}=${value}; Path=${o.base}/; Max-Age=${o.maxAgeSeconds}; HttpOnly; Secure; SameSite=${o.sameSite}`;
+}
+
+// plugins/tracker/src/web/pages.ts
+function name3(u) {
+  return u.displayName ?? "you";
+}
+function framed(v, title, body) {
+  return page({ base: v.base, title, signedIn: { name: name3(v.user), csrf: v.csrf }, body });
+}
+function signInHelpPage(base, note) {
+  return page({
+    base,
+    title: "Sign in",
+    body: html`<section class="rb-card">
+<h1>Sign in</h1>
+${note ? html`<p class="rb-muted">${note}</p>` : null}
+<p>Run <code>/web</code> in Discord: the bot answers you alone with a sign-in link, good for ten minutes and one use.</p>
+</section>`
+  });
+}
+function loginPage(base, input) {
+  if (!input.valid)
+    return signInHelpPage(base, "That sign-in link has expired or was already used.");
+  return page({
+    base,
+    title: "Sign in",
+    body: html`<section class="rb-card">
+<h1>Sign in to the tracker</h1>
+<p>This link works once. Press the button to sign in on this browser.</p>
+<form method="post" action="${base}/login">
+<input type="hidden" name="t" value="${input.token}">
+<input type="hidden" name="csrf" value="${input.loginCsrf}">
+<button class="rb-btn rb-btn--primary" type="submit">Sign in</button>
+</form>
+</section>`
+  });
+}
+function when2(entry, viewer, now) {
+  return entry.next ? formatInstant(entry.next.dueAt, viewer.timeZone, now) : "nothing due";
+}
+function cadence(entry, viewer, now) {
+  const s = entry.task.schedule;
+  if (!s || s.kind === "once")
+    return "once";
+  return describeSchedule(s, entry.from ?? viewer, viewer.timeZone, now);
+}
+function tasksPage(v, data, now) {
+  const rows = data.entries.map((e) => html`<tr>
+<td><a class="rb-link" href="${v.base}/tasks/${e.task.id}">${e.task.title}</a></td>
+<td>${e.from ? name3(e.from) : "you"}</td>
+<td>${when2(e, v.user, now)}</td>
+<td>${cadence(e, v.user, now)}</td>
+</tr>`);
+  const active = data.entries.length === 0 ? html`<p class="rb-muted">You have no active tasks. <code>/remind</code> in Discord sets one.</p>` : html`<div class="rb-table-scroll"><table class="rb-table">
+<thead><tr><th scope="col">Task</th><th scope="col">From</th><th scope="col">Next</th><th scope="col">Repeats</th></tr></thead>
+<tbody>${rows}</tbody>
+</table></div>`;
+  const paused = data.paused.length === 0 ? null : html`<section>
+<h2>Paused</h2>
+<ul>${data.paused.map((p) => html`<li><a class="rb-link" href="${v.base}/tasks/${p.task.id}">${p.task.title}</a>${p.held.length > 0 ? html` -- I could not DM ${p.held.join(", ")}; <code>/task resume ${p.task.id}</code> goes on without them.` : null}</li>`)}</ul>
+</section>`;
+  return framed(v, "My tasks", html`<section>
+<h1>My tasks</h1>
+<p class="rb-muted">Times are in ${v.user.timeZone}.</p>
+${active}
+</section>
+${paused}
+<p class="rb-muted tr-foot">${ADMIN_DISCLOSURE}</p>`);
+}
+function historyPage(v, h) {
+  const runs = h.runs.length === 0 ? html`<p class="rb-muted">No runs yet.</p>` : html`<div class="rb-table-scroll"><table class="rb-table">
+<thead><tr><th scope="col">Due</th><th scope="col">Status</th><th scope="col">Answers</th></tr></thead>
+<tbody>${h.runs.map((r) => html`<tr>
+<td>${r.due}</td>
+<td>${r.status}${r.late ? " (late)" : ""}${r.error ? html`<br><span class="rb-muted">${r.error}</span>` : null}</td>
+<td>${r.answers.join("; ")}</td>
+</tr>`)}</tbody>
+</table></div>`;
+  return framed(v, h.task.title, html`<section>
+<p><a class="rb-link" href="${v.base}/">My tasks</a></p>
+<h1>${h.task.title}</h1>
+<p>${h.task.type}, ${h.task.status}, ${h.cadence}. Next: ${h.next ?? "nothing scheduled"}.</p>
+</section>
+<section>
+<h2>Runs</h2>
+${h.earlierRuns > 0 ? html`<p class="rb-muted">${h.earlierRuns} earlier run(s) not shown.</p>` : null}
+${runs}
+</section>
+<section>
+<h2>Changes</h2>
+${h.earlierChanges > 0 ? html`<p class="rb-muted">${h.earlierChanges} earlier change(s) not shown.</p>` : null}
+<ul>${h.changes.map((c) => html`<li>${c.at} ${c.kind}${c.detail !== null ? `: ${c.detail}` : ""}</li>`)}</ul>
+</section>`);
+}
+function settingsPage(v, form) {
+  const hours = Array.from({ length: 24 }, (_, h) => h);
+  return framed(v, "Settings", html`<section>
+<h1>Settings</h1>
+${form.saved ? html`<div class="rb-alert rb-alert--success" role="status"><p class="rb-alert__title">Saved.</p></div>` : null}
+${form.error ? html`<div class="rb-alert rb-alert--danger" role="alert"><p class="rb-alert__title">Not saved</p><p>${form.error}</p></div>` : null}
+<form method="post" action="${v.base}/settings" class="tr-stack">
+<input type="hidden" name="csrf" value="${v.csrf}">
+<div class="rb-field">
+<label class="rb-label" for="hour">Preferred hour</label>
+<select class="rb-select" id="hour" name="hour">${hours.map((h) => html`<option value="${h}"${String(h) === form.hour ? html` selected` : null}>${String(h).padStart(2, "0")}:00</option>`)}</select>
+<p class="rb-field__help">A reminder without a time of day arrives at this hour.</p>
+</div>
+<div class="rb-field">
+<label class="rb-label" for="zone">Time zone</label>
+<input class="rb-input" id="zone" name="zone" value="${form.zone}" maxlength="64" required${form.error ? html` aria-invalid="true"` : null}>
+<p class="rb-field__help">An IANA name, such as America/New_York or Europe/London.</p>
+</div>
+<div><button class="rb-btn rb-btn--primary" type="submit">Save</button></div>
+</form>
+</section>`);
+}
+function notFoundPage(base, v) {
+  const body = html`<section><h1>Not found</h1><p>There is nothing here, or nothing you can see.</p><p><a class="rb-link" href="${base}/">My tasks</a></p></section>`;
+  return v ? framed(v, "Not found", body) : page({ base, title: "Not found", body });
+}
+function errorPage(base, title, message) {
+  return page({ base, title, body: html`<section class="rb-card"><h1>${title}</h1><p>${message}</p></section>` });
+}
+
+// plugins/tracker/src/web/sessions.ts
+var SESSION_TTL_MS = 7 * 24 * 60 * 60 * 1000;
+
+class Sessions {
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  create(userId, now, memberCheckedAt = null) {
+    const id = randomToken();
+    const at = now.toISOString();
+    const session = { userId, csrf: randomToken(), expiresAt: new Date(now.getTime() + SESSION_TTL_MS).toISOString(), memberCheckedAt };
+    this.db.query("DELETE FROM web_sessions WHERE expires_at <= ?").run(at);
+    this.db.query("INSERT INTO web_sessions (id_hash, user_id, csrf, created_at, expires_at, member_checked_at) VALUES (?, ?, ?, ?, ?, ?)").run(sha256(id), userId, session.csrf, at, session.expiresAt, memberCheckedAt);
+    return { id, session };
+  }
+  find(id, now) {
+    if (!isTokenShape(id))
+      return null;
+    const row = this.db.query("SELECT user_id, csrf, expires_at, member_checked_at FROM web_sessions WHERE id_hash = ? AND expires_at > ?").get(sha256(id), now.toISOString());
+    return row ? { userId: row.user_id, csrf: row.csrf, expiresAt: row.expires_at, memberCheckedAt: row.member_checked_at } : null;
+  }
+  delete(id) {
+    if (isTokenShape(id))
+      this.db.query("DELETE FROM web_sessions WHERE id_hash = ?").run(sha256(id));
+  }
+  confirmMember(userId, at) {
+    this.db.query("UPDATE web_sessions SET member_checked_at = ? WHERE user_id = ?").run(at, userId);
+  }
+  deleteForUser(userId) {
+    this.db.query("DELETE FROM web_sessions WHERE user_id = ?").run(userId);
+  }
+}
+
+// plugins/tracker/src/web/app.ts
+var MEMBER_RECHECK_MS = 15 * 60 * 1000;
+var MEMBER_GRACE_MS = 24 * 60 * 60 * 1000;
+var MEMBER_CHECK_TIMEOUT_MS = 3000;
+var MEMBER_RETRY_MS = 60 * 1000;
+var LEFT_SERVER = `You are signed out. ${NOT_MEMBER}`;
+var RECHECK_FAILED = "You are signed out: I could not check that you are still a member of this tracker's server.";
+var MAX_FORM_BYTES = 8 * 1024;
+var TASK_PATH = /^\/tasks\/([^/]+)$/;
+function plain(status, text, extra = {}) {
+  return new Response(text, {
+    status,
+    headers: { "Content-Type": "text/plain; charset=utf-8", "Cache-Control": "no-store", "X-Content-Type-Options": "nosniff", ...extra }
+  });
+}
+async function lookupWithin(lookup, ms) {
+  let timer;
+  const late = new Promise((resolve) => {
+    timer = setTimeout(() => resolve("unknown"), ms);
+  });
+  try {
+    return await Promise.race([lookup().catch(() => "unknown"), late]);
+  } finally {
+    clearTimeout(timer);
+  }
+}
+function createWebHandler(w) {
+  const base = `/${w.name}`;
+  const SESSION_COOKIE = `__Secure-${w.name}-session`;
+  const LOGIN_COOKIE = `__Secure-${w.name}-login`;
+  const clear = (name) => cookie(name, "", { base, maxAgeSeconds: 0, sameSite: "Lax" });
+  const inFlight = new Map;
+  const failedAt = new Map;
+  async function authenticate(d, request) {
+    const id = readCookie(request, SESSION_COOKIE);
+    if (!id)
+      return { kind: "none" };
+    const session = d.sessions.find(id, d.clock.now());
+    if (!session)
+      return { kind: "stale" };
+    const user = await d.store.getUser(session.userId);
+    if (!user || !d.admissions.isRegistered(user.id)) {
+      d.sessions.deleteForUser(session.userId);
+      return { kind: "stale" };
+    }
+    const refused = await recheckMembership(d, session, user);
+    if (refused)
+      return refused;
+    const current = d.sessions.find(id, d.clock.now());
+    if (!current)
+      return { kind: "stale" };
+    return { kind: "ok", id, session: current, user };
+  }
+  function lookupShared(userId, discordId) {
+    let pending = inFlight.get(userId);
+    if (!pending) {
+      const started = w.membership(discordId).catch(() => "unknown");
+      pending = started;
+      inFlight.set(userId, started);
+      started.finally(() => {
+        if (inFlight.get(userId) === started)
+          inFlight.delete(userId);
+      });
+    }
+    const shared = pending;
+    return lookupWithin(() => shared, MEMBER_CHECK_TIMEOUT_MS);
+  }
+  async function recheckMembership(d, session, user) {
+    if (w.guildId === null)
+      return null;
+    const now = d.clock.now().getTime();
+    const age = session.memberCheckedAt ? now - Date.parse(session.memberCheckedAt) : Number.POSITIVE_INFINITY;
+    const fresh = (limit) => age >= 0 && age < limit;
+    if (fresh(MEMBER_RECHECK_MS))
+      return null;
+    const lastFailed = failedAt.get(user.id);
+    const backingOff = lastFailed !== undefined && now - lastFailed >= 0 && now - lastFailed < MEMBER_RETRY_MS;
+    let found = "unknown";
+    if (!backingOff && user.discordId) {
+      found = await lookupShared(user.id, user.discordId);
+      if (found === "member" || found === "not-member")
+        failedAt.delete(user.id);
+      else
+        failedAt.set(user.id, d.clock.now().getTime());
+    }
+    if (found === "not-member") {
+      d.sessions.deleteForUser(user.id);
+      return { kind: "signed-out", note: LEFT_SERVER };
+    }
+    if (found === "member") {
+      d.sessions.confirmMember(user.id, d.clock.now().toISOString());
+      return null;
+    }
+    if (fresh(MEMBER_GRACE_MS))
+      return null;
+    d.sessions.deleteForUser(user.id);
+    return { kind: "signed-out", note: RECHECK_FAILED };
+  }
+  async function readForm(request) {
+    const type = request.headers.get("content-type") ?? "";
+    if (!type.toLowerCase().startsWith("application/x-www-form-urlencoded"))
+      return null;
+    const body = await request.text();
+    if (Buffer.byteLength(body) > MAX_FORM_BYTES)
+      return null;
+    return new URLSearchParams(body);
+  }
+  function forbidden() {
+    return htmlResponse(errorPage(base, "Refused", "That form was stale or came from somewhere else. Go back, reload the page and try again."), 403);
+  }
+  async function loginGet(d, url) {
+    const token = url.searchParams.get("t") ?? "";
+    const valid = d.logins.peek(token, d.clock.now());
+    if (!valid)
+      return htmlResponse(loginPage(base, { token: "", loginCsrf: "", valid: false }));
+    const loginCsrf = randomToken();
+    return htmlResponse(loginPage(base, { token, loginCsrf, valid: true }), 200, {
+      "Set-Cookie": cookie(LOGIN_COOKIE, loginCsrf, { base, maxAgeSeconds: LINK_TTL_MS / 1000, sameSite: "Strict" })
+    });
+  }
+  async function loginPost(d, request) {
+    const form = await readForm(request);
+    if (!form)
+      return plain(400, "Bad request");
+    const expected = readCookie(request, LOGIN_COOKIE);
+    const sent = form.get("csrf") ?? "";
+    if (!expected || !safeEqual(expected, sent))
+      return forbidden();
+    const now = d.clock.now();
+    const link = d.logins.consume(form.get("t") ?? "", now);
+    const user = link ? await d.store.getUser(link.userId) : null;
+    if (!user || !d.admissions.isRegistered(user.id)) {
+      return htmlResponse(signInHelpPage(base, "That sign-in link has expired or was already used."), 400, { "Set-Cookie": clear(LOGIN_COOKIE) });
+    }
+    const { id } = d.sessions.create(user.id, now, link?.memberCheckedAt ?? null);
+    return redirect(`${base}/`, [cookie(SESSION_COOKIE, id, { base, maxAgeSeconds: SESSION_TTL_MS / 1000, sameSite: "Lax" }), clear(LOGIN_COOKIE)]);
+  }
+  async function settingsPost(d, v, form) {
+    const hour = (form.get("hour") ?? "").trim();
+    const zone = (form.get("zone") ?? "").trim();
+    let error = null;
+    if (!/^([0-9]|1[0-9]|2[0-3])$/.test(hour))
+      error = "The preferred hour must be a whole hour from 0 to 23.";
+    else if (zone === "" || zone.length > 64)
+      error = "Give a time zone, such as America/New_York.";
+    else {
+      error = await w.queue(async () => {
+        const fresh = await d.store.getUser(v.user.id);
+        return fresh ? saveSettings(d, fresh, { hour: Number(hour), zone }) : "You are no longer on this tracker's list.";
+      });
+    }
+    if (error !== null)
+      return htmlResponse(settingsPage(v, { hour, zone, error }), 400);
+    return redirect(`${base}/settings?saved=1`);
+  }
+  return async (request, info) => {
+    const method = request.method;
+    if (method !== "GET" && method !== "POST")
+      return plain(405, "Method not allowed", { Allow: "GET, POST" });
+    if (w.origin === null)
+      return plain(404, "Not found");
+    const d = w.deps();
+    if (!d)
+      return plain(503, "The tracker is starting up; try again in a minute.");
+    if (method === "POST") {
+      const origin = request.headers.get("origin");
+      if (origin !== null && origin !== w.origin)
+        return forbidden();
+    }
+    const path = info.path;
+    const url = new URL(request.url);
+    const only = (allowed) => method === allowed ? null : plain(405, "Method not allowed", { Allow: allowed });
+    if (path === STYLESHEET_PATH) {
+      return only("GET") ?? new Response(STYLESHEET, {
+        headers: { "Content-Type": "text/css; charset=utf-8", "Cache-Control": "public, max-age=31536000, immutable", "X-Content-Type-Options": "nosniff" }
+      });
+    }
+    if (path === "/signin")
+      return only("GET") ?? htmlResponse(signInHelpPage(base, url.searchParams.get("out") === "1" ? "You are signed out." : undefined));
+    if (path === "/login")
+      return method === "GET" ? loginGet(d, url) : loginPost(d, request);
+    const task = TASK_PATH.exec(path);
+    const route = path === "/" ? "tasks" : path === "/settings" ? "settings" : path === "/logout" ? "logout" : task ? "history" : null;
+    if (route === null)
+      return htmlResponse(notFoundPage(base), 404);
+    const wrong = route === "logout" ? only("POST") : route === "settings" ? null : only("GET");
+    if (wrong)
+      return wrong;
+    const auth = await authenticate(d, request);
+    if (auth.kind === "signed-out")
+      return htmlResponse(signInHelpPage(base, auth.note), 403, { "Set-Cookie": clear(SESSION_COOKIE) });
+    if (auth.kind !== "ok")
+      return redirect(`${base}/signin`, auth.kind === "stale" ? [clear(SESSION_COOKIE)] : []);
+    const v = { base, user: auth.user, csrf: auth.session.csrf };
+    if (method === "POST") {
+      const form = await readForm(request);
+      if (!form)
+        return plain(400, "Bad request");
+      if (!safeEqual(auth.session.csrf, form.get("csrf") ?? ""))
+        return forbidden();
+      if (route === "logout") {
+        d.sessions.delete(auth.id);
+        return redirect(`${base}/signin?out=1`, [clear(SESSION_COOKIE)]);
+      }
+      return settingsPost(d, v, form);
+    }
+    const now = d.clock.now();
+    switch (route) {
+      case "tasks":
+        return htmlResponse(tasksPage(v, await loadTaskList(d, auth.user), now));
+      case "history": {
+        let id;
+        try {
+          id = decodeURIComponent(task?.[1] ?? "");
+        } catch {
+          return htmlResponse(notFoundPage(base, v), 404);
+        }
+        const view = await loadHistory(d, auth.user, id);
+        return view ? htmlResponse(historyPage(v, view)) : htmlResponse(notFoundPage(base, v), 404);
+      }
+      default:
+        return htmlResponse(settingsPage(v, { hour: String(auth.user.preferredHour), zone: auth.user.timeZone, saved: url.searchParams.get("saved") === "1" }));
+    }
+  };
+}
+
+// plugins/tracker/src/web/config.ts
+var WEB_URL_FORMAT = "^https://[A-Za-z0-9.-]+(:[0-9]{1,5})?/?$";
+function parseWebUrl(raw) {
+  if (raw === undefined || raw.trim() === "")
+    return null;
+  const value = raw.trim();
+  if (!new RegExp(WEB_URL_FORMAT).test(value)) {
+    throw new Error(`TRACKER_WEB_URL: "${value}" is not an https origin such as https://clerk.example.com (no path, query or credentials)`);
+  }
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    throw new Error(`TRACKER_WEB_URL: "${value}" is not a URL`);
+  }
+  if (url.protocol !== "https:" || url.username !== "" || url.password !== "" || url.pathname !== "/" || url.search !== "" || url.hash !== "") {
+    throw new Error(`TRACKER_WEB_URL: "${value}" must be a bare https origin`);
+  }
+  return url.origin;
+}
+
+// plugins/tracker/src/index.ts
+var DB_DIR = "tracker";
+var DB_FILE = "tracker.sqlite";
+var TRACKER_TYPES = Object.freeze({
+  reminder,
+  renewal
+});
+var NO_DM = {
+  async sendDm() {
+    throw new Error("this bot has no host.dm (rackbops-discord-bot#736)");
+  }
+};
+function createPlugin(host, options = {}) {
+  const adminIds = parseAdminIds(host.env.TRACKER_ADMIN_DISCORD_IDS);
+  const guildId = parseGuildId(host.env.TRACKER_GUILD_ID);
+  const webOrigin = parseWebUrl(host.env.TRACKER_WEB_URL);
+  const clock = options.clock ?? { now: () => new Date };
+  const types = options.types ?? TRACKER_TYPES;
+  const health = { activatedAt: null, lastTickAt: null, blocked: null };
+  let db = null;
+  let store = null;
+  let claims = null;
+  let delivery = null;
+  let deps = null;
+  let warnedNoDm = false;
+  const dm = host.dm?.bind(host);
+  const queue = serial();
+  const surface = createSurface({
+    deps: () => deps,
+    guildId,
+    log: host.log,
+    queue,
+    web: webOrigin ? { origin: webOrigin, name: host.name, gated: guildId !== null } : null,
+    ...options.membership ? { membership: options.membership } : {}
+  });
+  let discordClient = null;
+  const capture = (interaction) => {
+    const client = interaction.client;
+    if (client)
+      discordClient = client;
+  };
+  const clientMembership = async (discordId) => {
+    if (!discordClient)
+      return null;
+    return lookupMembership({ guildId: null, user: { id: discordId }, client: discordClient }, guildId, discordId, host.log);
+  };
+  const web = createWebHandler({
+    name: host.name,
+    origin: webOrigin,
+    deps: () => deps,
+    queue,
+    guildId,
+    membership: options.webMembership ?? clientMembership
+  });
+  const interactions = surface.interactions;
+  return {
+    commands: surface.commands.map((c) => ({
+      ...c,
+      handle: (interaction) => {
+        capture(interaction);
+        return c.handle(interaction);
+      }
+    })),
+    interactions: (interaction) => {
+      capture(interaction);
+      return interactions(interaction);
+    },
     async activate() {
       let path = options.dbPath;
       if (path === undefined) {
@@ -3576,7 +5418,9 @@ function createPlugin(host, options = {}) {
         types,
         dm,
         log: host.log,
-        notifier: dm ? createDmNotifier({ store: openedStore, claims: openedClaims, dm, clock, log: host.log, health: delivery }) : NO_DM
+        notifier: dm ? createDmNotifier({ store: openedStore, claims: openedClaims, dm, clock, log: host.log, health: delivery }) : NO_DM,
+        logins: new LoginLinks(opened),
+        sessions: new Sessions(opened)
       };
       if (guildId === null)
         host.log.warn("TRACKER_GUILD_ID is unset: no membership gate, only the admission list");
@@ -3619,7 +5463,7 @@ function createPlugin(host, options = {}) {
       if (info.path === "/healthz" && (request.method === "GET" || request.method === "HEAD")) {
         return healthResponse(decideHealth(health, clock.now()));
       }
-      return new Response("Not found", { status: 404 });
+      return web(request, info);
     }
   };
 }