@rackbops/plugin-tracker 0.2.0 → 0.4.0

package/dist/plugin.js

@@ -67,6 +67,11 @@ async function visibleHistory(store, actor, taskId) {
     return null;
   return store.listTaskEvents(taskId);
 }
+async function visibleSeries(store, actor, taskId, filter) {
+  if (!await visibleTask(store, actor, taskId))
+    return null;
+  return store.listSeries(taskId, filter);
+}
 
 // node_modules/@rackbops/docket-core/dist/capabilities.js
 var CAPABILITIES = ["notify", "graph:write", "discord:post", "github:issue"];
@@ -1545,13 +1550,13 @@ var price = defineTaskType({
     ]
   },
   async run(ctx) {
-    const { fetch } = ctx.ports;
-    if (!fetch)
+    const { fetch: fetch2 } = ctx.ports;
+    if (!fetch2)
       throw new Error("the price type needs the Fetch port; the host configured none");
     const state = stateOf(ctx.state);
     let body;
     try {
-      const response = await fetch.get(ctx.config.url);
+      const response = await fetch2.get(ctx.config.url);
       if (response.status !== 200)
         return miss(ctx, state, `HTTP ${response.status}`);
       body = response.body;
@@ -2063,6 +2068,319 @@ function resumedNotice(r) {
   return `I could not DM you ${PAUSE_AFTER} times in a row, so your reminders were paused. ${what} ` + "Check that you accept DMs from members of a server we share, or they will pause again.";
 }
 
+// plugins/tracker/src/fetch.ts
+import { lookup } from "dns/promises";
+import { isIP } from "net";
+
+// plugins/tracker/src/page.ts
+var MAX_BLOCKS = 20;
+var MAX_METAS = 300;
+var MAX_TAG = 1000;
+var escapeLt = (s) => s.replaceAll("<", "\\u003c");
+function jsonBody(body) {
+  const trimmed = body.trim();
+  if (!trimmed.startsWith("{") && !trimmed.startsWith("["))
+    return null;
+  try {
+    return escapeLt(JSON.stringify(JSON.parse(trimmed)));
+  } catch {
+    return null;
+  }
+}
+function pageForExtraction(body) {
+  const json = jsonBody(body);
+  if (json !== null)
+    return json;
+  const lower = body.toLowerCase();
+  const blocks = [];
+  const metas = [];
+  const closes = new Map;
+  const nextClose = (closing, from) => {
+    const known = closes.get(closing);
+    if (known !== undefined && (known < 0 || known >= from))
+      return known;
+    const found = lower.indexOf(closing, from);
+    closes.set(closing, found);
+    return found;
+  };
+  let at = 0;
+  while (at < body.length) {
+    let lt = body.indexOf("<", at);
+    if (lt < 0)
+      break;
+    const gt = body.indexOf(">", lt);
+    if (gt < 0)
+      break;
+    lt = body.lastIndexOf("<", gt);
+    const tag = body.slice(lt, gt + 1);
+    const tagLower = lower.slice(lt, gt + 1);
+    at = gt + 1;
+    if (tagLower.startsWith("<script") || tagLower.startsWith("<style")) {
+      const closing = tagLower.startsWith("<script") ? "</script" : "</style";
+      const end = nextClose(closing, at);
+      if (end < 0)
+        continue;
+      if (closing === "</script" && blocks.length < MAX_BLOCKS && /type\s*=\s*["']?application\/ld\+json/.test(tagLower.slice(0, MAX_TAG))) {
+        blocks.push(`<script type="application/ld+json">${escapeLt(body.slice(at, end))}</script>`);
+      }
+      at = end;
+    } else if (tagLower.startsWith("<meta") && tag.length <= MAX_TAG && metas.length < MAX_METAS) {
+      metas.push(tag);
+    }
+  }
+  return [...blocks, ...metas, body.replaceAll("<", " ")].join(`
+`);
+}
+
+// plugins/tracker/src/fetch.ts
+var TIMEOUT_MS = 15000;
+var MAX_BYTES = 3 * 1024 * 1024;
+var MAX_REDIRECTS = 5;
+var USER_AGENT = "Mozilla/5.0 (compatible; RackbopsClerk/1.0; price tracker)";
+
+class FetchRefusedError extends Error {
+  name = "FetchRefusedError";
+}
+var systemResolve = async (host) => (await lookup(host, { all: true, verbatim: true })).map((a) => a.address);
+function v4Parts(ip) {
+  const parts = ip.split(".").map(Number);
+  return parts.length === 4 && parts.every((p) => Number.isInteger(p) && p >= 0 && p <= 255) ? parts : null;
+}
+function isPublicV4(ip) {
+  const p = v4Parts(ip);
+  if (!p)
+    return false;
+  const [a = 0, b = 0, c = 0] = p;
+  if (a === 0 || a === 10 || a === 127 || a >= 224)
+    return false;
+  if (a === 100 && b >= 64 && b <= 127)
+    return false;
+  if (a === 169 && b === 254)
+    return false;
+  if (a === 172 && b >= 16 && b <= 31)
+    return false;
+  if (a === 192 && b === 168)
+    return false;
+  if (a === 192 && b === 0 && (c === 0 || c === 2))
+    return false;
+  if (a === 198 && (b === 18 || b === 19))
+    return false;
+  if (a === 198 && b === 51 && c === 100)
+    return false;
+  if (a === 203 && b === 0 && c === 113)
+    return false;
+  return true;
+}
+function v6Groups(ip) {
+  let text = ip.toLowerCase();
+  const zone = text.indexOf("%");
+  if (zone >= 0)
+    text = text.slice(0, zone);
+  const lastColon = text.lastIndexOf(":");
+  if (text.slice(lastColon + 1).includes(".")) {
+    const v4 = v4Parts(text.slice(lastColon + 1));
+    if (!v4)
+      return null;
+    const hex = (hi, lo) => (hi << 8 | lo).toString(16);
+    text = `${text.slice(0, lastColon + 1)}${hex(v4[0] ?? 0, v4[1] ?? 0)}:${hex(v4[2] ?? 0, v4[3] ?? 0)}`;
+  }
+  const halves = text.split("::");
+  if (halves.length > 2)
+    return null;
+  const parse = (s) => s === "" ? [] : s.split(":").map((g) => /^[0-9a-f]{1,4}$/.test(g) ? Number.parseInt(g, 16) : Number.NaN);
+  const head = parse(halves[0] ?? "");
+  const rest = halves.length === 2 ? parse(halves[1] ?? "") : [];
+  const known = head.length + rest.length;
+  if (halves.length === 1 && known !== 8)
+    return null;
+  if (known > 8)
+    return null;
+  const groups = [...head, ...new Array(8 - known).fill(0), ...rest];
+  return groups.every((g) => Number.isInteger(g) && g >= 0 && g <= 65535) ? groups : null;
+}
+function isPublicV6(ip) {
+  const g = v6Groups(ip);
+  if (!g)
+    return false;
+  const [g0 = 0, g1 = 0, g2 = 0, g3 = 0, g4 = 0, g5 = 0, g6 = 0, g7 = 0] = g;
+  const embedded = `${g6 >> 8}.${g6 & 255}.${g7 >> 8}.${g7 & 255}`;
+  if (g0 === 0 && g1 === 0 && g2 === 0 && g3 === 0 && g4 === 0) {
+    return g5 === 65535 ? isPublicV4(embedded) : false;
+  }
+  if (g0 === 100 && g1 === 65435 && g2 === 0 && g3 === 0 && g4 === 0 && g5 === 0)
+    return isPublicV4(embedded);
+  if ((g0 & 65024) === 64512)
+    return false;
+  if ((g0 & 65472) === 65152)
+    return false;
+  if ((g0 & 65280) === 65280)
+    return false;
+  if (g0 === 8193 && g1 === 3512)
+    return false;
+  if (g0 === 8193 && g1 < 512)
+    return false;
+  if (g0 === 8194)
+    return false;
+  return (g0 & 57344) === 8192;
+}
+function isPublicAddress(ip) {
+  const version = isIP(ip);
+  if (version === 4)
+    return isPublicV4(ip);
+  if (version === 6)
+    return isPublicV6(ip);
+  return false;
+}
+function urlProblem(raw) {
+  let url;
+  try {
+    url = new URL(raw);
+  } catch {
+    return "That is not a web address.";
+  }
+  if (url.protocol !== "https:" && url.protocol !== "http:")
+    return "Only http and https pages can be tracked.";
+  if (url.username !== "" || url.password !== "")
+    return "A page address with a user name or password in it cannot be tracked.";
+  if (url.port !== "")
+    return "Only pages on the standard web ports can be tracked.";
+  const host = url.hostname.replace(/^\[|\]$/g, "");
+  if (host === "" || host === "localhost" || host.endsWith(".localhost") || host.endsWith(".local") || host.endsWith(".internal")) {
+    return "Only public web pages can be tracked.";
+  }
+  if (isIP(host) !== 0 && !isPublicAddress(host))
+    return "Only public web pages can be tracked.";
+  return null;
+}
+function orAbort(p, signal) {
+  if (signal.aborted)
+    return Promise.reject(signal.reason);
+  return new Promise((resolve, reject) => {
+    const onAbort = () => reject(signal.reason);
+    signal.addEventListener("abort", onAbort, { once: true });
+    p.then((v) => {
+      signal.removeEventListener("abort", onAbort);
+      resolve(v);
+    }, (e) => {
+      signal.removeEventListener("abort", onAbort);
+      reject(e);
+    });
+  });
+}
+async function checkHost(url, resolve, signal) {
+  const problem = urlProblem(url.href);
+  if (problem)
+    throw new FetchRefusedError(problem);
+  const host = url.hostname.replace(/^\[|\]$/g, "");
+  let addresses;
+  if (isIP(host) !== 0)
+    addresses = [host];
+  else {
+    try {
+      addresses = await orAbort(resolve(host), signal);
+    } catch {
+      signal.throwIfAborted();
+      throw new FetchRefusedError(`the name ${host} did not resolve`);
+    }
+  }
+  if (addresses.length === 0)
+    throw new FetchRefusedError(`the name ${host} did not resolve`);
+  if (!addresses.every(isPublicAddress))
+    throw new FetchRefusedError(`${host} is not on the public internet`);
+}
+async function readCapped(response, max) {
+  if (!response.body)
+    return "";
+  const reader = response.body.getReader();
+  const chunks = [];
+  let size = 0;
+  while (size < max) {
+    const { done, value } = await reader.read();
+    if (done)
+      break;
+    const room = max - size;
+    chunks.push(value.byteLength > room ? value.subarray(0, room) : value);
+    size += Math.min(value.byteLength, room);
+  }
+  await reader.cancel().catch(() => {});
+  const all = new Uint8Array(size);
+  let at = 0;
+  for (const c of chunks) {
+    all.set(c, at);
+    at += c.byteLength;
+  }
+  return new TextDecoder().decode(all);
+}
+function createPageFetch(o = {}) {
+  const resolve = o.resolve ?? systemResolve;
+  const fetchImpl = o.fetchImpl ?? fetch;
+  const timeoutMs = o.timeoutMs ?? TIMEOUT_MS;
+  const maxBytes = o.maxBytes ?? MAX_BYTES;
+  return {
+    async get(raw, headers = {}) {
+      const signal = o.signal ? AbortSignal.any([o.signal, AbortSignal.timeout(timeoutMs)]) : AbortSignal.timeout(timeoutMs);
+      let url = new URL(raw);
+      for (let hop = 0;; hop++) {
+        await checkHost(url, resolve, signal);
+        signal.throwIfAborted();
+        const response = await fetchImpl(url.href, {
+          method: "GET",
+          redirect: "manual",
+          signal,
+          headers: { "user-agent": USER_AGENT, accept: "text/html,application/xhtml+xml,application/json;q=0.9,*/*;q=0.8", ...headers }
+        });
+        const location = response.headers.get("location");
+        if (response.status >= 300 && response.status < 400 && location) {
+          await response.body?.cancel().catch(() => {});
+          if (hop >= MAX_REDIRECTS)
+            throw new FetchRefusedError(`more than ${MAX_REDIRECTS} redirects`);
+          url = new URL(location, url);
+          continue;
+        }
+        const out = {};
+        response.headers.forEach((value, key) => {
+          out[key] = value;
+        });
+        return { status: response.status, body: pageForExtraction(await readCapped(response, maxBytes)), headers: out };
+      }
+    }
+  };
+}
+
+// plugins/tracker/src/discord-common.ts
+import { MessageFlags } from "discord.js";
+var STARTING = "The tracker is starting up; try again in a minute.";
+var FAILED = "Something went wrong on my side; try again in a minute.";
+var EPHEMERAL = { flags: MessageFlags.Ephemeral };
+var NO_MENTIONS = { allowedMentions: { parse: [] } };
+var UNKNOWN_MEMBER = 10007;
+var UNKNOWN_USER = 10013;
+async function lookupMembership(interaction, guildId, discordId, log) {
+  if (guildId === null)
+    return "not-checked";
+  if (interaction.guildId === guildId && interaction.user.id === discordId)
+    return "member";
+  try {
+    const guild = await interaction.client.guilds.fetch(guildId);
+    await guild.members.fetch({ user: discordId, force: true });
+    return "member";
+  } catch (err) {
+    const code = err.code;
+    if (code === UNKNOWN_MEMBER || code === UNKNOWN_USER)
+      return "not-member";
+    log.warn(`could not check membership of ${guildId}: ${err instanceof Error ? err.message : String(err)}`);
+    return "unknown";
+  }
+}
+function serial() {
+  let chain = Promise.resolve();
+  return (fn) => {
+    const next = chain.then(fn, fn);
+    chain = next.catch(() => {});
+    return next;
+  };
+}
+
 // plugins/tracker/src/people.ts
 var DEFAULT_TIME_ZONE = "America/New_York";
 var DEFAULT_PREFERRED_HOUR = 9;
@@ -2190,6 +2508,20 @@ async function registerPerson(d, user, input) {
     await rescheduleOwned(d, updated, zoneChanged);
   return registeredText(updated, first);
 }
+async function saveSettings(d, user, input) {
+  let updated;
+  try {
+    updated = await setPreferences(d.store, user.id, { preferredHour: input.hour, timeZone: input.zone });
+  } catch (err) {
+    if (err instanceof PeopleError)
+      return err.message;
+    throw err;
+  }
+  const zoneChanged = updated.timeZone !== user.timeZone;
+  if (zoneChanged || updated.preferredHour !== user.preferredHour)
+    await rescheduleOwned(d, updated, zoneChanged);
+  return null;
+}
 async function setHour(d, user, hour) {
   if (hour === user.preferredHour)
     return `Your preferred hour is already ${String(hour).padStart(2, "0")}:00, ${user.timeZone} time.`;
@@ -2269,19 +2601,25 @@ async function remind(d, user, input) {
   return clip(`Reminder \`${task.id}\` set: ${text}
 Next: ${at}${cadence}.`);
 }
-async function listTasks(d, user) {
-  const now = d.clock.now();
-  const lines = [formatTaskList(await taskList(d.store, { userId: user.id, admin: user.admin }), user, now)];
+async function loadTaskList(d, user) {
+  const entries = await taskList(d.store, { userId: user.id, admin: user.admin });
+  const paused = [];
   for (const task of await d.store.listTasks({ ownerId: user.id, status: "paused" })) {
-    const held = d.health.pausesFor(task.id).filter((u) => u !== user.id);
-    if (held.length === 0) {
+    const held = [];
+    for (const id of d.health.pausesFor(task.id).filter((u) => u !== user.id))
+      held.push((await d.store.getUser(id))?.displayName ?? id);
+    paused.push({ task, held });
+  }
+  return { entries, paused };
+}
+async function listTasks(d, user) {
+  const { entries, paused } = await loadTaskList(d, user);
+  const lines = [formatTaskList(entries, user, d.clock.now())];
+  for (const { task, held } of paused) {
+    if (held.length === 0)
       lines.push(`Paused: \`${task.id}\` ${task.title}`);
-      continue;
-    }
-    const who = [];
-    for (const id of held)
-      who.push((await d.store.getUser(id))?.displayName ?? id);
-    lines.push(`Paused: \`${task.id}\` ${task.title} -- I could not DM ${who.join(", ")}; \`/task resume ${task.id}\` goes on without them.`);
+    else
+      lines.push(`Paused: \`${task.id}\` ${task.title} -- I could not DM ${held.join(", ")}; \`/task resume ${task.id}\` goes on without them.`);
   }
   return clip(lines.join(`
 `));
@@ -2338,102 +2676,6 @@ async function resumeTask(d, user, taskId) {
   return `Resumed \`${task.id}\`${without}.`;
 }
 
-// plugins/tracker/src/discord-common.ts
-import { MessageFlags } from "discord.js";
-var STARTING = "The tracker is starting up; try again in a minute.";
-var FAILED = "Something went wrong on my side; try again in a minute.";
-var EPHEMERAL = { flags: MessageFlags.Ephemeral };
-var NO_MENTIONS = { allowedMentions: { parse: [] } };
-var UNKNOWN_MEMBER = 10007;
-var UNKNOWN_USER = 10013;
-async function lookupMembership(interaction, guildId, discordId, log) {
-  if (guildId === null)
-    return "not-checked";
-  if (interaction.guildId === guildId && interaction.user.id === discordId)
-    return "member";
-  try {
-    const guild = await interaction.client.guilds.fetch(guildId);
-    await guild.members.fetch({ user: discordId });
-    return "member";
-  } catch (err) {
-    const code = err.code;
-    if (code === UNKNOWN_MEMBER || code === UNKNOWN_USER)
-      return "not-member";
-    log.warn(`could not check membership of ${guildId}: ${err instanceof Error ? err.message : String(err)}`);
-    return "unknown";
-  }
-}
-function serial() {
-  let chain = Promise.resolve();
-  return (fn) => {
-    const next = chain.then(fn, fn);
-    chain = next.catch(() => {});
-    return next;
-  };
-}
-
-// plugins/tracker/src/history.ts
-var HISTORY_RUNS = 10;
-var HISTORY_CHANGES = 5;
-function replyText(r) {
-  if (r.kind === "text") {
-    const text = typeof r.payload === "object" && r.payload !== null ? String(r.payload.text ?? "") : "";
-    return `replied "${clip(text, 80)}"`;
-  }
-  if (r.kind === "decision")
-    return `chose ${String(r.payload?.choice ?? "?")}`;
-  return r.kind === "opt_out" ? "opted out" : r.kind;
-}
-function formatRun(o, replies, people, viewer, now) {
-  const late = o.late ? " (late)" : "";
-  const error = o.status === "failed" && o.error ? `: ${clip(o.error, 120)}` : "";
-  const answers = replies.filter((r) => r.occurrenceId === o.id).map((r) => `${people.get(r.userId)?.displayName ?? r.userId} ${replyText(r)}`);
-  const answered = answers.length > 0 ? `; ${answers.join(", ")}` : "";
-  return `- ${formatInstant(o.dueAt, viewer.timeZone, now)} -- ${o.status}${late}${error}${answered}`;
-}
-function formatChange(e, viewer, now) {
-  const detail = e.kind === "paused" || e.kind === "resumed" ? `: ${e.detail}` : "";
-  return `- ${formatInstant(e.at, viewer.timeZone, now)} ${e.kind.replaceAll("_", " ")}${detail}`;
-}
-async function taskHistory(d, user, taskId) {
-  const actor = { userId: user.id, admin: user.admin };
-  const id = taskId.trim();
-  const task = await visibleTask(d.store, actor, id);
-  if (!task)
-    return NO_SUCH_TASK;
-  const now = d.clock.now();
-  const all = await visibleOccurrences(d.store, actor, task.id) ?? [];
-  const upcoming = (o) => o.status === "queued" && Date.parse(o.dueAt) > now.getTime();
-  const runs = all.filter((o) => !upcoming(o));
-  const next = all.find(upcoming);
-  const replies = await visibleReplies(d.store, actor, task.id) ?? [];
-  const changes = await visibleHistory(d.store, actor, task.id) ?? [];
-  const people = new Map;
-  for (const r of replies) {
-    if (!people.has(r.userId)) {
-      const u = await d.store.getUser(r.userId);
-      if (u)
-        people.set(u.id, u);
-    }
-  }
-  const owner = task.ownerId === user.id ? user : await d.store.getUser(task.ownerId);
-  const cadence = task.schedule && owner ? describeSchedule(task.schedule, owner, user.timeZone, now) : "no schedule";
-  const lines = [`\`${task.id}\` ${task.title} -- ${task.type}, ${task.status}, ${cadence}`];
-  lines.push(next ? `Next: ${formatInstant(next.dueAt, user.timeZone, now)}` : "Next: nothing scheduled");
-  lines.push(runs.length === 0 ? "Runs: none yet" : "Runs:");
-  if (runs.length > HISTORY_RUNS)
-    lines.push(`- (${runs.length - HISTORY_RUNS} earlier)`);
-  for (const o of runs.slice(-HISTORY_RUNS))
-    lines.push(formatRun(o, replies, people, user, now));
-  lines.push("Changes:");
-  if (changes.length > HISTORY_CHANGES)
-    lines.push(`- (${changes.length - HISTORY_CHANGES} earlier)`);
-  for (const e of changes.slice(-HISTORY_CHANGES))
-    lines.push(formatChange(e, user, now));
-  return clip(lines.join(`
-`));
-}
-
 // plugins/tracker/src/interactions.ts
 import {
   ActionRowBuilder,
@@ -2815,61 +3057,462 @@ ${body}` : body;
   };
 }
 
-// plugins/tracker/src/discord.ts
-function displayName(user) {
-  return user.globalName ?? user.username;
+// plugins/tracker/src/history.ts
+var HISTORY_RUNS = 10;
+var HISTORY_CHANGES = 5;
+function replyText(r) {
+  if (r.kind === "text") {
+    const text = typeof r.payload === "object" && r.payload !== null ? String(r.payload.text ?? "") : "";
+    return `replied "${clip(text, 80)}"`;
+  }
+  if (r.kind === "decision")
+    return `chose ${String(r.payload?.choice ?? "?")}`;
+  return r.kind === "opt_out" ? "opted out" : r.kind;
 }
-function createSurface(w) {
-  const ctx = {
-    deps: w.deps,
-    queue: serial(),
-    membershipOf: (interaction, discordId) => w.membership ? w.membership(interaction, discordId) : lookupMembership(interaction, w.guildId, discordId, w.log),
-    log: w.log
+function runView(o, replies, people, viewer, now) {
+  return {
+    due: formatInstant(o.dueAt, viewer.timeZone, now),
+    status: o.status,
+    late: o.late,
+    error: o.status === "failed" && o.error ? clip(o.error, 120) : null,
+    answers: replies.filter((r) => r.occurrenceId === o.id).map((r) => `${people.get(r.userId)?.displayName ?? r.userId} ${replyText(r)}`)
   };
-  const membershipOf = (interaction, discordId) => ctx.membershipOf(interaction, discordId);
-  async function run(interaction, need, act, pre = async () => {
-    return;
-  }) {
-    await interaction.deferReply(EPHEMERAL);
-    let content;
-    try {
-      const d = w.deps();
-      if (!d)
-        content = STARTING;
-      else {
-        const membership = await membershipOf(interaction, interaction.user.id);
-        const before = await pre();
-        const first = await ctx.queue(async () => {
-          const entry = await enter(d, interaction.user.id, membership, need);
-          if (!entry.ok)
-            return { notice: null, step: entry.content };
-          return { notice: entry.notice, step: await act(d, entry.user, before) };
-        });
-        let body;
-        if (typeof first.step === "string")
-          body = first.step;
-        else {
-          const { outside, finish } = first.step;
-          const result = await outside();
-          body = await ctx.queue(() => finish(result));
-        }
-        content = clip(first.notice ? `${first.notice}
-
-${body}` : body);
-      }
-    } catch (err) {
-      w.log.error(`/${interaction.commandName} failed`, err);
-      content = FAILED;
-    }
-    await interaction.editReply({ content, ...NO_MENTIONS });
-  }
-  const commands = [
-    {
-      name: "allow",
-      build: (b) => b.setDescription("Admin: let a person use the tracker").addUserOption((o) => o.setName("user").setDescription("Who to let in").setRequired(true)),
-      handle: (interaction) => {
-        const target = interaction.options.getUser("user", true);
-        return run(interaction, "admin", (d, admin, membership) => allowPerson(d, admin, { discordId: target.id, bot: target.bot, membership }), () => membershipOf(interaction, target.id));
+}
+function changeView(e, viewer, now) {
+  return {
+    at: formatInstant(e.at, viewer.timeZone, now),
+    kind: e.kind.replaceAll("_", " "),
+    detail: e.kind === "paused" || e.kind === "resumed" ? e.detail : null
+  };
+}
+function runLine(v) {
+  const late = v.late ? " (late)" : "";
+  const error = v.error ? `: ${v.error}` : "";
+  const answered = v.answers.length > 0 ? `; ${v.answers.join(", ")}` : "";
+  return `- ${v.due} -- ${v.status}${late}${error}${answered}`;
+}
+function changeLine(v) {
+  return `- ${v.at} ${v.kind}${v.detail !== null ? `: ${v.detail}` : ""}`;
+}
+async function loadHistory(d, user, taskId) {
+  const actor = { userId: user.id, admin: user.admin };
+  const task = await visibleTask(d.store, actor, taskId.trim());
+  if (!task)
+    return null;
+  const now = d.clock.now();
+  const all = await visibleOccurrences(d.store, actor, task.id) ?? [];
+  const upcoming = (o) => o.status === "queued" && Date.parse(o.dueAt) > now.getTime();
+  const runs = all.filter((o) => !upcoming(o));
+  const next = all.find(upcoming);
+  const replies = await visibleReplies(d.store, actor, task.id) ?? [];
+  const changes = await visibleHistory(d.store, actor, task.id) ?? [];
+  const people = new Map;
+  for (const r of replies) {
+    if (!people.has(r.userId)) {
+      const u = await d.store.getUser(r.userId);
+      if (u)
+        people.set(u.id, u);
+    }
+  }
+  const owner = task.ownerId === user.id ? user : await d.store.getUser(task.ownerId);
+  return {
+    task,
+    cadence: task.schedule && owner ? describeSchedule(task.schedule, owner, user.timeZone, now) : "no schedule",
+    next: next ? formatInstant(next.dueAt, user.timeZone, now) : null,
+    runs: runs.slice(-HISTORY_RUNS).map((o) => runView(o, replies, people, user, now)),
+    earlierRuns: Math.max(0, runs.length - HISTORY_RUNS),
+    changes: changes.slice(-HISTORY_CHANGES).map((e) => changeView(e, user, now)),
+    earlierChanges: Math.max(0, changes.length - HISTORY_CHANGES)
+  };
+}
+async function taskHistory(d, user, taskId) {
+  const h = await loadHistory(d, user, taskId);
+  if (!h)
+    return NO_SUCH_TASK;
+  const { task } = h;
+  const lines = [`\`${task.id}\` ${task.title} -- ${task.type}, ${task.status}, ${h.cadence}`];
+  lines.push(h.next ? `Next: ${h.next}` : "Next: nothing scheduled");
+  lines.push(h.runs.length === 0 ? "Runs: none yet" : "Runs:");
+  if (h.earlierRuns > 0)
+    lines.push(`- (${h.earlierRuns} earlier)`);
+  for (const v of h.runs)
+    lines.push(runLine(v));
+  lines.push("Changes:");
+  if (h.earlierChanges > 0)
+    lines.push(`- (${h.earlierChanges} earlier)`);
+  for (const c of h.changes)
+    lines.push(changeLine(c));
+  return clip(lines.join(`
+`));
+}
+
+// plugins/tracker/src/series.ts
+var SERIES_SHOWN = 8;
+function pointLine(p, viewer, now) {
+  const note = p.note && p.note !== "observed" ? ` (${p.note})` : "";
+  return `- ${formatInstant(p.at, viewer.timeZone, now)} ${money(p.value, p.unit ?? "")}${note}`;
+}
+async function seriesLines(d, user, taskId) {
+  const actor = { userId: user.id, admin: user.admin };
+  const task = await visibleTask(d.store, actor, taskId.trim());
+  if (!task || task.type !== "renewal" && task.type !== "price")
+    return [];
+  const points = await visibleSeries(d.store, actor, task.id) ?? [];
+  const now = d.clock.now();
+  const lines = [];
+  if (task.type === "renewal") {
+    const paid = points.filter((p) => p.note === "keep" || p.note === "renewed");
+    if (paid.length === 0)
+      return ["Paid: nothing recorded yet"];
+    const unit = paid.at(-1)?.unit ?? "";
+    const total = paid.reduce((sum, p) => sum + p.value, 0);
+    lines.push(`Paid: ${paid.length} period${paid.length === 1 ? "" : "s"}, ${money(total, unit)} in all`);
+    for (const p of paid.slice(-SERIES_SHOWN))
+      lines.push(pointLine(p, user, now));
+    return lines;
+  }
+  const runs = await visibleOccurrences(d.store, actor, task.id) ?? [];
+  const checked = runs.filter((o) => o.status !== "queued" && o.summary).at(-1);
+  if (checked?.summary)
+    lines.push(`Last check: ${clip(checked.summary, 160)}`);
+  if (points.length === 0) {
+    lines.push("Prices: none read yet");
+    return lines;
+  }
+  const unit = points.at(-1)?.unit ?? "";
+  const values = points.map((p) => p.value);
+  lines.push(`Prices: ${points.length} read, low ${money(Math.min(...values), unit)}, high ${money(Math.max(...values), unit)}`);
+  for (const p of points.slice(-SERIES_SHOWN))
+    lines.push(pointLine(p, user, now));
+  return lines;
+}
+async function historyWithSeries(d, user, taskId) {
+  const history = await taskHistory(d, user, taskId);
+  const series = await seriesLines(d, user, taskId);
+  if (series.length === 0)
+    return history;
+  const lines = history.split(`
+`);
+  const block = series.join(`
+`);
+  const rest = lines.slice(2).join(`
+`);
+  const head = lines.slice(0, 2).join(`
+`);
+  return clip(`${head}
+${block}
+${clip(rest, Math.max(3, MAX_ANSWER - head.length - block.length - 2))}`);
+}
+
+// plugins/tracker/src/tracked.ts
+var MAX_TITLE2 = 100;
+var MAX_NOTE = 300;
+var MAX_NEAR = 100;
+var MAX_PRICE_TASKS = 20;
+var DEFAULT_POLL_HOURS = 12;
+var MAX_POLL_HOURS = 168;
+var DEFAULT_LEAD_DAYS = 7;
+var MAX_LEAD_DAYS = 365;
+var MAX_EVERY = 100;
+function plural2(n, word) {
+  return `${n} ${word}${n === 1 ? "" : "s"}`;
+}
+async function addRenewal(d, user, input) {
+  const type = d.types.renewal;
+  if (!type)
+    return "Renewals are not available on this bot.";
+  const name = input.name.trim();
+  if (name.length === 0)
+    return "Say what renews: a subscription, a domain, a warranty.";
+  if (name.length > MAX_TITLE2)
+    return `That name is longer than ${MAX_TITLE2} characters.`;
+  if (!Number.isFinite(input.amount) || input.amount < 0)
+    return "The amount has to be zero or more.";
+  const currency = input.currency.trim().toUpperCase();
+  if (!/^[A-Z]{3}$/.test(currency))
+    return "The currency is a three-letter code, such as USD or EUR.";
+  const note = input.note?.trim() ?? "";
+  if (note.length > MAX_NOTE)
+    return `The note is longer than ${MAX_NOTE} characters.`;
+  const every = input.every ?? 1;
+  if (!Number.isInteger(every) || every < 1 || every > MAX_EVERY)
+    return `\`every\` is a whole number from 1 to ${MAX_EVERY}.`;
+  const lead = input.lead ?? DEFAULT_LEAD_DAYS;
+  if (!Number.isInteger(lead) || lead < 0 || lead > MAX_LEAD_DAYS)
+    return `\`lead\` is a whole number of days from 0 to ${MAX_LEAD_DAYS}.`;
+  const renews = input.renews.trim();
+  const now = d.clock.now();
+  const days = /^\d{4}-\d{2}-\d{2}$/.test(renews) ? daysUntil(renews, now, user.timeZone) : null;
+  if (days === null)
+    return "Give the date as YYYY-MM-DD, for example 2026-12-01.";
+  if (days < 0)
+    return "That date has passed: give the next renewal or expiry date.";
+  const schedule = { kind: "period", every, unit: input.unit ?? "year", anchor: renews, leadDays: lead };
+  const config = { amount: input.amount, currency, ...note ? { note } : {} };
+  const actor = { userId: user.id, admin: user.admin };
+  let created;
+  try {
+    created = await createTask(d.store, actor, user, { type, title: name, config, schedule }, now);
+  } catch (err) {
+    if (err instanceof ScheduleError)
+      return `That schedule does not work: ${err.message}.`;
+    throw err;
+  }
+  const { task } = created;
+  let next = created.next;
+  const first = nextDue(schedule, new Date(0), { zone: user.timeZone, preferredHour: user.preferredHour });
+  if (first && first.getTime() <= now.getTime()) {
+    next = await d.store.createOccurrence({
+      taskId: task.id,
+      lane: task.lane,
+      dueAt: first.toISOString(),
+      dedupeKey: scheduledKey(task.id, first),
+      at: now.toISOString()
+    });
+  }
+  const cadence = describeSchedule(schedule, user, user.timeZone, now);
+  const when = days === 0 ? "today" : `in ${plural2(days, "day")}`;
+  const ask = !next ? "never (that schedule has no next date)" : Date.parse(next.dueAt) <= now.getTime() ? `in the next minute (it renews ${when})` : formatInstant(next.dueAt, user.timeZone, now);
+  return clip([
+    `Renewal \`${task.id}\` set: ${name}, ${money(input.amount, currency)}, ${cadence}.`,
+    `First ask: ${ask}. Each ask has Keep, Cancel and Renewed buttons; paid a different amount? Answer with \`/task decide\` instead of a button.`
+  ].join(`
+`));
+}
+function nearPattern(near) {
+  const literal = near.trim().replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  return `${literal}[^0-9]{0,40}([0-9][0-9.,]{0,15})`;
+}
+async function preview(d, v) {
+  if (!d.fetch)
+    return { ok: false, error: "Price tracking is not available on this bot." };
+  try {
+    const response = await d.fetch.get(v.url);
+    if (response.status !== 200)
+      return { ok: false, error: `That page answered HTTP ${response.status}, so there is no price to track.` };
+    const found = extractPrice(response.body, v.config.pattern);
+    if (!found) {
+      return {
+        ok: false,
+        error: v.config.pattern ? "I found no price after that `near` text on the page. Check the words as the page shows them." : "I found no price on that page. Some shops show it only to a browser; `near` (the words just before the price) can help."
+      };
+    }
+    return { ok: true, text: money(found.value, found.currency ?? "") };
+  } catch (err) {
+    if (err instanceof FetchRefusedError)
+      return { ok: false, error: `I cannot read that page: ${err.message}.` };
+    return { ok: false, error: "I could not read that page just now; try again later." };
+  }
+}
+async function ownedPriceTasks(d, user) {
+  const active = await d.store.listTasks({ ownerId: user.id, status: "active" });
+  const paused = await d.store.listTasks({ ownerId: user.id, status: "paused" });
+  return [...active, ...paused].filter((t) => t.type === "price").length;
+}
+function titleFor(url) {
+  const u = new URL(url);
+  return clip(`${u.hostname}${u.pathname === "/" ? "" : u.pathname}`, MAX_TITLE2);
+}
+async function trackPrice(d, user, input) {
+  if (!d.types.price || !d.fetch)
+    return "Price tracking is not available on this bot.";
+  const url = input.url.trim();
+  const problem = urlProblem(url);
+  if (problem)
+    return problem;
+  const hours = input.hours ?? DEFAULT_POLL_HOURS;
+  if (!Number.isInteger(hours) || hours < 1 || hours > MAX_POLL_HOURS)
+    return `\`hours\` is a whole number from 1 to ${MAX_POLL_HOURS}.`;
+  const drop = input.drop ?? DEFAULT_DROP_PERCENT;
+  if (!Number.isFinite(drop) || drop < 1 || drop > 90)
+    return "`drop` is a percentage from 1 to 90.";
+  const baseline = input.baseline ?? DEFAULT_BASELINE;
+  if (!BASELINE_RULES.includes(baseline))
+    return "`baseline` is first, last or peak.";
+  const near = input.near?.trim() ?? "";
+  if (near.length > MAX_NEAR)
+    return `\`near\` is longer than ${MAX_NEAR} characters.`;
+  const name = input.name?.trim() ?? "";
+  if (name.length > MAX_TITLE2)
+    return `That name is longer than ${MAX_TITLE2} characters.`;
+  if (await ownedPriceTasks(d, user) >= MAX_PRICE_TASKS) {
+    return `You already track ${MAX_PRICE_TASKS} prices, the most one person may. Stop one with \`/task done\` first.`;
+  }
+  const v = {
+    url,
+    title: name || titleFor(url),
+    hours,
+    config: { url, dropPercent: drop, baseline, ...near ? { pattern: nearPattern(near) } : {} }
+  };
+  return {
+    outside: () => preview(d, v),
+    finish: (result) => finishPrice(d, user, v, result)
+  };
+}
+async function finishPrice(d, user, v, seen) {
+  if (!seen.ok)
+    return seen.error;
+  const type = d.types.price;
+  if (!type)
+    return "Price tracking is not available on this bot.";
+  if (await ownedPriceTasks(d, user) >= MAX_PRICE_TASKS) {
+    return `You already track ${MAX_PRICE_TASKS} prices, the most one person may. Stop one with \`/task done\` first.`;
+  }
+  const now = d.clock.now();
+  const schedule = { kind: "poll", every: v.hours, unit: "hour", start: now.toISOString() };
+  const actor = { userId: user.id, admin: user.admin };
+  const { task } = await createTask(d.store, actor, user, { type, title: v.title, config: v.config, schedule }, now);
+  const rule = v.config.baseline ?? DEFAULT_BASELINE;
+  return clip([
+    `Tracking \`${task.id}\`: ${v.title}. I read ${seen.text} just now.`,
+    `I check every ${plural2(v.hours, "hour")} and DM you when it drops ${v.config.dropPercent}% or more from the ${rule} price seen; the first check, within a minute, DMs the starting price. \`/task done ${task.id}\` stops it.`
+  ].join(`
+`));
+}
+async function decideRenewal(d, user, input) {
+  const task = await visibleTask(d.store, { userId: user.id, admin: false }, input.taskId.trim());
+  if (!task || task.ownerId !== user.id)
+    return NO_SUCH_TASK;
+  if (task.type !== "renewal")
+    return `\`/task decide\` answers a renewal; \`${task.id}\` is a ${task.type}.`;
+  if (input.amount !== undefined && (!Number.isFinite(input.amount) || input.amount < 0))
+    return "The amount has to be zero or more.";
+  const fired = (await d.store.listOccurrences({ taskId: task.id })).filter((o) => o.status === "running" || o.status === "done" || o.status === "failed");
+  const latest = fired.at(-1);
+  if (!latest)
+    return "That renewal has no ask waiting for an answer yet.";
+  const payload = input.amount === undefined ? input.choice : { choice: input.choice, amount: input.amount };
+  try {
+    await replyLanes(d).reply({ taskId: task.id, occurrenceId: latest.id, userId: user.id, kind: "decision", payload });
+  } catch (err) {
+    if (err instanceof ReplyRefusedError)
+      return err.message;
+    throw err;
+  }
+  if (input.choice === "cancel")
+    return `Cancelled: \`${task.id}\` ${task.title} will not ask again.`;
+  const currency = task.config.currency ?? "";
+  const paid = input.amount !== undefined ? ` at ${money(input.amount, currency)}` : "";
+  return `Recorded: ${input.choice}${paid}.`;
+}
+
+// plugins/tracker/src/web/secrets.ts
+import { createHash, randomBytes, timingSafeEqual } from "crypto";
+function randomToken() {
+  return randomBytes(32).toString("base64url");
+}
+function sha256(value) {
+  return createHash("sha256").update(value).digest("hex");
+}
+function safeEqual(a, b) {
+  const x = Buffer.from(a);
+  const y = Buffer.from(b);
+  return x.length === y.length && timingSafeEqual(x, y);
+}
+function isTokenShape(value) {
+  return /^[A-Za-z0-9_-]{43}$/.test(value);
+}
+
+// plugins/tracker/src/web/signin-link.ts
+var LINK_TTL_MS = 10 * 60 * 1000;
+
+class LoginLinks {
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  issue(userId, now, memberCheckedAt = null) {
+    const token = randomToken();
+    const at = now.toISOString();
+    this.db.query("DELETE FROM web_login_tokens WHERE expires_at <= ?").run(at);
+    this.db.query("INSERT INTO web_login_tokens (token_hash, user_id, created_at, expires_at, member_checked_at) VALUES (?, ?, ?, ?, ?)").run(sha256(token), userId, at, new Date(now.getTime() + LINK_TTL_MS).toISOString(), memberCheckedAt);
+    return token;
+  }
+  peek(token, now) {
+    if (!isTokenShape(token))
+      return false;
+    const row = this.db.query("SELECT 1 AS ok FROM web_login_tokens WHERE token_hash = ? AND used_at IS NULL AND expires_at > ?").get(sha256(token), now.toISOString());
+    return row !== null;
+  }
+  consume(token, now) {
+    if (!isTokenShape(token))
+      return null;
+    const at = now.toISOString();
+    const row = this.db.query("UPDATE web_login_tokens SET used_at = ? WHERE token_hash = ? AND used_at IS NULL AND expires_at > ? RETURNING user_id, member_checked_at").get(at, sha256(token), at);
+    return row ? { userId: row.user_id, memberCheckedAt: row.member_checked_at } : null;
+  }
+}
+
+// plugins/tracker/src/web/command.ts
+var WEB_NOT_CONFIGURED = "The web area is not set up on this bot.";
+function webLink(d, user, web) {
+  if (!web)
+    return WEB_NOT_CONFIGURED;
+  const now = d.clock.now();
+  const token = d.logins.issue(user.id, now, web.gated ? now.toISOString() : null);
+  const minutes = LINK_TTL_MS / 60000;
+  return [
+    `Your sign-in link for the tracker's web area. It works once, within ${minutes} minutes; do not share it.`,
+    `<${web.origin}/${web.name}/login?t=${token}>`
+  ].join(`
+`);
+}
+
+// plugins/tracker/src/discord.ts
+function displayName(user) {
+  return user.globalName ?? user.username;
+}
+function createSurface(w) {
+  const ctx = {
+    deps: w.deps,
+    queue: w.queue ?? serial(),
+    membershipOf: (interaction, discordId) => w.membership ? w.membership(interaction, discordId) : lookupMembership(interaction, w.guildId, discordId, w.log),
+    log: w.log
+  };
+  const membershipOf = (interaction, discordId) => ctx.membershipOf(interaction, discordId);
+  async function run(interaction, need, act, pre = async () => {
+    return;
+  }) {
+    await interaction.deferReply(EPHEMERAL);
+    let content;
+    try {
+      const d = w.deps();
+      if (!d)
+        content = STARTING;
+      else {
+        const membership = await membershipOf(interaction, interaction.user.id);
+        const before = await pre();
+        const first = await ctx.queue(async () => {
+          const entry = await enter(d, interaction.user.id, membership, need);
+          if (!entry.ok)
+            return { notice: null, step: entry.content };
+          return { notice: entry.notice, step: await act(d, entry.user, before) };
+        });
+        let body;
+        if (typeof first.step === "string")
+          body = first.step;
+        else {
+          const { outside, finish } = first.step;
+          const result = await outside();
+          body = await ctx.queue(() => finish(result));
+        }
+        content = clip(first.notice ? `${first.notice}
+
+${body}` : body);
+      }
+    } catch (err) {
+      w.log.error(`/${interaction.commandName} failed`, err);
+      content = FAILED;
+    }
+    await interaction.editReply({ content, ...NO_MENTIONS });
+  }
+  const commands = [
+    {
+      name: "allow",
+      build: (b) => b.setDescription("Admin: let a person use the tracker").addUserOption((o) => o.setName("user").setDescription("Who to let in").setRequired(true)),
+      handle: (interaction) => {
+        const target = interaction.options.getUser("user", true);
+        return run(interaction, "admin", (d, admin, membership) => allowPerson(d, admin, { discordId: target.id, bot: target.bot, membership }), () => membershipOf(interaction, target.id));
       }
     },
     {
@@ -2897,6 +3540,45 @@ ${body}` : body);
         });
       })
     },
+    {
+      name: "renewal",
+      build: (b) => b.setDescription("Track a subscription, domain or warranty: I ask before each renewal").addStringOption((o) => o.setName("name").setDescription("What renews, e.g. Netflix").setRequired(true).setMaxLength(100)).addNumberOption((o) => o.setName("amount").setDescription("What one period costs").setRequired(true).setMinValue(0)).addStringOption((o) => o.setName("currency").setDescription("Currency code, e.g. USD").setRequired(true).setMinLength(3).setMaxLength(3)).addStringOption((o) => o.setName("renews").setDescription("The next renewal or expiry date, YYYY-MM-DD").setRequired(true).setMaxLength(10)).addStringOption((o) => o.setName("unit").setDescription("How it renews (default: yearly)").addChoices({ name: "yearly", value: "year" }, { name: "monthly", value: "month" }, { name: "weekly", value: "week" }, { name: "daily", value: "day" })).addIntegerOption((o) => o.setName("every").setDescription("Every how many of those, e.g. 2 for every two years (default 1)").setMinValue(1).setMaxValue(MAX_EVERY)).addIntegerOption((o) => o.setName("lead").setDescription(`Days before the date to ask (default ${DEFAULT_LEAD_DAYS})`).setMinValue(0).setMaxValue(MAX_LEAD_DAYS)).addStringOption((o) => o.setName("note").setDescription("Carried on every ask: where to cancel, which account").setMaxLength(MAX_NOTE)),
+      handle: (interaction) => run(interaction, "registered", (d, user) => {
+        const every = interaction.options.getInteger("every");
+        const lead = interaction.options.getInteger("lead");
+        const unit = interaction.options.getString("unit");
+        const note = interaction.options.getString("note");
+        return addRenewal(d, user, {
+          name: interaction.options.getString("name", true),
+          amount: interaction.options.getNumber("amount", true),
+          currency: interaction.options.getString("currency", true),
+          renews: interaction.options.getString("renews", true),
+          ...every !== null ? { every } : {},
+          ...lead !== null ? { lead } : {},
+          ...unit !== null ? { unit } : {},
+          ...note !== null ? { note } : {}
+        });
+      })
+    },
+    {
+      name: "price",
+      build: (b) => b.setDescription("Track a product's price: I DM you when it drops").addStringOption((o) => o.setName("url").setDescription("The product page").setRequired(true).setMaxLength(1000)).addStringOption((o) => o.setName("name").setDescription("What to call it (default: the page address)").setMaxLength(100)).addIntegerOption((o) => o.setName("hours").setDescription(`Hours between checks (default ${DEFAULT_POLL_HOURS})`).setMinValue(1).setMaxValue(MAX_POLL_HOURS)).addNumberOption((o) => o.setName("drop").setDescription("Alert on a drop of at least this percent (default 10)").setMinValue(1).setMaxValue(90)).addStringOption((o) => o.setName("baseline").setDescription("Measure the drop from which price seen (default: the last)").addChoices({ name: "the last", value: "last" }, { name: "the first", value: "first" }, { name: "the highest", value: "peak" })).addStringOption((o) => o.setName("near").setDescription("The words just before the price, if I cannot find it on my own").setMaxLength(MAX_NEAR)),
+      handle: (interaction) => run(interaction, "registered", (d, user) => {
+        const name = interaction.options.getString("name");
+        const hours = interaction.options.getInteger("hours");
+        const drop = interaction.options.getNumber("drop");
+        const baseline = interaction.options.getString("baseline");
+        const near = interaction.options.getString("near");
+        return trackPrice(d, user, {
+          url: interaction.options.getString("url", true),
+          ...name !== null ? { name } : {},
+          ...hours !== null ? { hours } : {},
+          ...drop !== null ? { drop } : {},
+          ...baseline !== null ? { baseline } : {},
+          ...near !== null ? { near } : {}
+        });
+      })
+    },
     {
       name: "tasks",
       build: (b) => b.setDescription("List your tasks and when each is next due"),
@@ -2904,7 +3586,7 @@ ${body}` : body);
     },
     {
       name: "task",
-      build: (b) => b.setDescription("Answer, look back at, or share one of your tasks").addSubcommand((s) => s.setName("done").setDescription("Mark the task's latest reminder done").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(24))).addSubcommand((s) => s.setName("snooze").setDescription("Snooze the task's latest reminder (default: an hour)").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(24)).addStringOption((o) => o.setName("until").setDescription('Until when: "in 2h", "tomorrow 9am"').setMaxLength(100))).addSubcommand((s) => s.setName("history").setDescription("Every run of the task, how it was answered, and its changes").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(24))).addSubcommand((s) => s.setName("resume").setDescription("Resume a task paused because someone could not be DMed, without them").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(24))).addSubcommand((s) => s.setName("share").setDescription("Ask someone to receive this task's messages too").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(24)).addUserOption((o) => o.setName("user").setDescription("Who to invite").setRequired(true))),
+      build: (b) => b.setDescription("Answer, look back at, or share one of your tasks").addSubcommand((s) => s.setName("done").setDescription("Mark the task's latest reminder done").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(24))).addSubcommand((s) => s.setName("snooze").setDescription("Snooze the task's latest reminder (default: an hour)").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(24)).addStringOption((o) => o.setName("until").setDescription('Until when: "in 2h", "tomorrow 9am"').setMaxLength(100))).addSubcommand((s) => s.setName("decide").setDescription("Answer a renewal's latest ask, with what you paid if it changed").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(24)).addStringOption((o) => o.setName("choice").setDescription("Keep it, cancel it, or it has renewed").setRequired(true).addChoices({ name: "keep", value: "keep" }, { name: "cancel", value: "cancel" }, { name: "renewed", value: "renewed" })).addNumberOption((o) => o.setName("amount").setDescription("What you paid this time, if not the usual").setMinValue(0))).addSubcommand((s) => s.setName("history").setDescription("Every run of the task, how it was answered, and its changes").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(24))).addSubcommand((s) => s.setName("resume").setDescription("Resume a task paused because someone could not be DMed, without them").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(24))).addSubcommand((s) => s.setName("share").setDescription("Ask someone to receive this task's messages too").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(24)).addUserOption((o) => o.setName("user").setDescription("Who to invite").setRequired(true))),
       handle: (interaction) => {
         const sub = interaction.options.getSubcommand();
         const taskId = interaction.options.getString("task", true);
@@ -2917,8 +3599,16 @@ ${body}` : body);
               const until = interaction.options.getString("until");
               return answerLatest(d, user, { taskId, kind: "snooze", ...until !== null ? { until } : {} });
             }
+            case "decide": {
+              const amount = interaction.options.getNumber("amount");
+              return decideRenewal(d, user, {
+                taskId,
+                choice: interaction.options.getString("choice", true),
+                ...amount !== null ? { amount } : {}
+              });
+            }
             case "history":
-              return taskHistory(d, user, taskId);
+              return historyWithSeries(d, user, taskId);
             case "resume":
               return resumeTask(d, user, taskId);
             case "share": {
@@ -2937,6 +3627,11 @@ ${body}` : body);
       name: "settings",
       build: (b) => b.setDescription("Your tracker settings").addSubcommand((s) => s.setName("hour").setDescription("The hour (0-23) a reminder without a time reaches you").addIntegerOption((o) => o.setName("hour").setDescription("0-23, in your time zone").setRequired(true).setMinValue(0).setMaxValue(23))),
       handle: (interaction) => run(interaction, "registered", (d, user) => setHour(d, user, interaction.options.getInteger("hour", true)))
+    },
+    {
+      name: "web",
+      build: (b) => b.setDescription("Get a one-time link to sign in to the tracker's web area"),
+      handle: (interaction) => run(interaction, "registered", async (d, user) => webLink(d, user, w.web))
     }
   ];
   return { commands, interactions: createInteractionHandler(ctx) };
@@ -2964,7 +3659,28 @@ function healthResponse(health) {
 }
 
 // plugins/tracker/src/notify-lane.ts
-function laneStore(store) {
+var FETCH_TYPES = new Set(["price"]);
+function takesType(kind, type) {
+  return kind === "poll" ? FETCH_TYPES.has(type) : !FETCH_TYPES.has(type);
+}
+function untilAborted(type, signal) {
+  const run = type.run;
+  if (!run)
+    return type;
+  const stop = () => new ExecutorUnavailableError("the tick was aborted; the run waits for the next one");
+  return {
+    ...type,
+    async run(ctx) {
+      if (signal.aborted)
+        throw stop();
+      const outcome = await run.call(type, ctx);
+      if (signal.aborted)
+        throw stop();
+      return outcome;
+    }
+  };
+}
+function laneStore(store, keep = () => true) {
   const view = Object.create(store);
   view.listOccurrences = async (filter = {}) => {
     const found = await store.listOccurrences(filter);
@@ -2972,7 +3688,8 @@ function laneStore(store) {
       return found;
     const kept = [];
     for (const o of found) {
-      if ((await store.getTask(o.taskId))?.status === "active")
+      const task = await store.getTask(o.taskId);
+      if (task?.status === "active" && keep(task))
         kept.push(o);
     }
     return kept;
@@ -2984,7 +3701,8 @@ async function runNotifyTick(d, signal) {
     return { kind: "no-dm" };
   if (signal?.aborted)
     return { kind: "aborted" };
-  const store = laneStore(d.store);
+  const kind = d.kind ?? "notify";
+  const store = laneStore(d.store, (task) => takesType(kind, task.type));
   const notifier = createDmNotifier({
     store,
     claims: d.claims,
@@ -2994,7 +3712,11 @@ async function runNotifyTick(d, signal) {
     ...signal ? { signal } : {},
     ...d.health ? { health: d.health } : {}
   });
-  const lanes = new Lanes({ store, clock: d.clock, types: d.types, notifier });
+  let types = d.types;
+  if (kind === "poll" && signal) {
+    types = Object.fromEntries(Object.entries(d.types).map(([id, t]) => [id, FETCH_TYPES.has(id) ? untilAborted(t, signal) : t]));
+  }
+  const lanes = new Lanes({ store, clock: d.clock, types, notifier, ...kind === "poll" && d.fetch ? { fetch: d.fetch } : {} });
   const result = await lanes.tickNotify();
   return signal?.aborted ? { kind: "aborted" } : { kind: "ran", result };
 }
@@ -3150,6 +3872,28 @@ var MIGRATIONS = [
     at TEXT NOT NULL,
     PRIMARY KEY (task_id, user_id)
   );
+  `,
+  `
+  CREATE TABLE web_login_tokens (
+    token_hash TEXT PRIMARY KEY,
+    user_id TEXT NOT NULL,
+    created_at TEXT NOT NULL,
+    expires_at TEXT NOT NULL,
+    used_at TEXT,
+    member_checked_at TEXT
+  );
+  CREATE INDEX web_login_tokens_expiry ON web_login_tokens (expires_at);
+
+  CREATE TABLE web_sessions (
+    id_hash TEXT PRIMARY KEY,
+    user_id TEXT NOT NULL,
+    csrf TEXT NOT NULL,
+    created_at TEXT NOT NULL,
+    expires_at TEXT NOT NULL,
+    member_checked_at TEXT
+  );
+  CREATE INDEX web_sessions_user ON web_sessions (user_id);
+  CREATE INDEX web_sessions_expiry ON web_sessions (expires_at);
   `
 ];
 function migrate(db) {
@@ -3493,63 +4237,1799 @@ class SqliteStore {
   }
 }
 
-// plugins/tracker/src/index.ts
-var DB_DIR = "tracker";
-var DB_FILE = "tracker.sqlite";
-var TRACKER_TYPES = Object.freeze({
-  reminder,
-  renewal
-});
-var NO_DM = {
-  async sendDm() {
-    throw new Error("this bot has no host.dm (rackbops-discord-bot#736)");
+// node_modules/@rackbops/styles/rackbops-noir/bundle.css
+var bundle_default = `:where([data-rb-style], [data-rb-style] *), :where([data-rb-style], [data-rb-style] *):before, :where([data-rb-style], [data-rb-style] *):after {
+  box-sizing: border-box;
+}
+
+:where(html[data-rb-style]) body {
+  min-height: 100vh;
+  margin: 0;
+}
+
+:where([data-rb-style="rackbops-noir"]) {
+  color-scheme: dark;
+  --rb-bg: #0d141d;
+  --rb-surface: #141f2a;
+  --rb-surface-2: #19242f;
+  --rb-surface-sunken: #0f1720;
+  --rb-text: #e9eff4;
+  --rb-text-soft: #a4b4c3;
+  --rb-text-faint: #697a8c;
+  --rb-border: #243140;
+  --rb-border-strong: #31404f;
+  --rb-accent: #ff5d3d;
+  --rb-accent-fg: #0d141d;
+  --rb-accent-wash: #ff5d3d21;
+  --rb-accent-grad: linear-gradient(180deg, #ff5d3d, #ff7a5f);
+  --rb-info: #4c9df0;
+  --rb-success: #43c97e;
+  --rb-warning: #f2a93b;
+  --rb-danger: #f0616d;
+  --rb-font-display: system-ui, -apple-system, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
+  --rb-font-body: system-ui, -apple-system, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
+  --rb-font-mono: ui-monospace, "SF Mono", "Cascadia Code", "JetBrains Mono", Menlo, Consolas, monospace;
+  --rb-font-weight: 400;
+  --rb-font-weight-medium: 600;
+  --rb-font-weight-bold: 800;
+  --rb-heading-tracking: -.02em;
+  --rb-label-tracking: .18em;
+  --rb-text-sm: 13.5px;
+  --rb-radius: .6875rem;
+  --rb-radius-lg: .9375rem;
+  --rb-radius-pill: 99px;
+  --rb-shadow-sm: 0 1px 2px #00000059;
+  --rb-shadow-lg: 0 2px 6px #0006, 0 24px 50px -24px #000000b3;
+  --rb-blur: 10px;
+  --rb-transition: .15s;
+  --rb-focus-ring: 2.5px solid var(--rb-accent);
+  --rb-ease: ease;
+  --rb-space-1: .5rem;
+  --rb-space-2: .75rem;
+  --rb-space-3: 1rem;
+  --rb-space-4: 1.5rem;
+  --rb-space-5: 2.25rem;
+}
+
+@media (prefers-reduced-motion: reduce) {
+  :where([data-rb-style="rackbops-noir"]) {
+    --rb-transition: 0s;
   }
-};
-function createPlugin(host, options = {}) {
-  const adminIds = parseAdminIds(host.env.TRACKER_ADMIN_DISCORD_IDS);
-  const guildId = parseGuildId(host.env.TRACKER_GUILD_ID);
-  const clock = options.clock ?? { now: () => new Date };
-  const types = options.types ?? TRACKER_TYPES;
-  const health = { activatedAt: null, lastTickAt: null, blocked: null };
-  let db = null;
-  let store = null;
-  let claims = null;
-  let delivery = null;
-  let deps = null;
-  let warnedNoDm = false;
-  const dm = host.dm?.bind(host);
-  const surface = createSurface({
-    deps: () => deps,
-    guildId,
-    log: host.log,
-    ...options.membership ? { membership: options.membership } : {}
-  });
-  return {
-    commands: surface.commands,
-    interactions: surface.interactions,
-    async activate() {
-      let path = options.dbPath;
-      if (path === undefined) {
-        const dir = join(host.dataDir, DB_DIR);
-        mkdirSync(dir, { recursive: true });
-        path = join(dir, DB_FILE);
-      }
-      const opened = openDatabase(path);
-      const openedStore = new SqliteStore(opened);
-      const openedClaims = new ClaimStore(opened);
-      try {
-        const granted = await seedAdmins(openedStore, adminIds, clock.now());
-        const admissions = new Admissions(opened);
-        for (const id of adminIds) {
-          const admin = await openedStore.findUserByDiscordId(id);
-          if (admin)
-            admissions.record(admin.id, null, clock.now().toISOString());
-        }
-        if (granted.length > 0)
-          host.log.info(`made ${granted.length} admin(s) from TRACKER_ADMIN_DISCORD_IDS`);
-        const requeued = await openedStore.requeueRunning();
-        if (requeued.length > 0)
-          host.log.warn(`requeued ${requeued.length} occurrence(s) left running: ${requeued.join(", ")}`);
+}
+
+:where([data-rb-style="rackbops-noir"]) {
+  background-color: var(--rb-bg);
+  color: var(--rb-text);
+  font-family: var(--rb-font-body);
+  font-weight: var(--rb-font-weight);
+  font-size: 17px;
+  line-height: 1.6;
+}
+
+:where(html[data-rb-style="rackbops-noir"]) body {
+  background-color: var(--rb-bg);
+  color: var(--rb-text);
+  font-family: var(--rb-font-body);
+  font-weight: var(--rb-font-weight);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *):where(h1, h2, h3, h4, h5, h6) {
+  margin: 0 0 var(--rb-space-3);
+  font-family: var(--rb-font-display);
+  font-weight: var(--rb-font-weight-bold);
+  letter-spacing: var(--rb-heading-tracking);
+  text-wrap: balance;
+  line-height: 1.08;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *):where(p) {
+  margin: 0 0 var(--rb-space-3);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *):where(ul, ol) {
+  margin: 0 0 var(--rb-space-3);
+  padding-inline-start: var(--rb-space-4);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *):where(a) {
+  color: var(--rb-accent);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *):where(:focus-visible) {
+  outline: var(--rb-focus-ring);
+  outline-offset: 3px;
+  border-radius: 3px;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *)::selection {
+  background: var(--rb-accent);
+  color: #fff;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn {
+  align-items: center;
+  gap: var(--rb-space-2);
+  border-radius: var(--rb-radius);
+  font-weight: var(--rb-font-weight-medium);
+  cursor: pointer;
+  color: var(--rb-text);
+  transition: transform var(--rb-transition) var(--rb-ease),
+    background var(--rb-transition) var(--rb-ease),
+    border-color var(--rb-transition) var(--rb-ease),
+    color var(--rb-transition) var(--rb-ease);
+  background: none;
+  border: 1px solid #0000;
+  padding: 13px 22px;
+  font-size: 16px;
+  text-decoration: none;
+  display: inline-flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn--sm {
+  font-size: var(--rb-text-sm);
+  padding: 7px 14px;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-icon-btn {
+  padding: var(--rb-space-2);
+  justify-content: center;
+  gap: 0;
+  min-width: 2rem;
+  min-height: 2rem;
+  line-height: 1;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn:active {
+  transform: translateY(1px);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn--primary {
+  background: var(--rb-text);
+  color: var(--rb-bg);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn--primary:not(:disabled):hover, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn--primary:focus-visible, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn--accent {
+  background: var(--rb-accent);
+  color: var(--rb-accent-fg);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn--accent:not(:disabled):hover, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn--accent:focus-visible {
+  background: color-mix(in srgb, var(--rb-accent), var(--rb-text) 15%);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn--ghost {
+  color: var(--rb-text);
+  border-color: var(--rb-border-strong);
+  background: none;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn--ghost:not(:disabled):hover, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn--ghost:focus-visible {
+  border-color: var(--rb-text);
+  background: var(--rb-surface-2);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn--danger {
+  color: var(--rb-danger);
+  border-color: color-mix(in srgb, var(--rb-danger) 45%, var(--rb-border));
+  background: none;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn--danger:not(:disabled):hover, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn--danger:focus-visible {
+  border-color: var(--rb-danger);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn:disabled {
+  opacity: .5;
+  cursor: not-allowed;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn__arrow {
+  transition: transform var(--rb-transition) var(--rb-ease);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-btn:not(:disabled):hover .rb-btn__arrow {
+  transform: translateX(3px);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-card {
+  background: var(--rb-surface);
+  border: 1px solid var(--rb-border);
+  border-radius: var(--rb-radius-lg);
+  box-shadow: var(--rb-shadow-sm);
+  transition: transform var(--rb-transition) var(--rb-ease),
+    border-color var(--rb-transition) var(--rb-ease),
+    box-shadow var(--rb-transition) var(--rb-ease);
+  flex-direction: column;
+  padding: 26px 24px 28px;
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-card:hover, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-card--raised {
+  border-color: var(--rb-border-strong);
+  box-shadow: var(--rb-shadow-lg);
+  transform: translateY(-4px);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-card--raised:hover {
+  transform: translateY(-6px);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-card__tag {
+  font-family: var(--rb-font-mono);
+  letter-spacing: .12em;
+  text-transform: uppercase;
+  color: var(--rb-accent);
+  justify-content: space-between;
+  align-items: center;
+  font-size: 12px;
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-link {
+  align-items: center;
+  gap: var(--rb-space-1);
+  font-family: var(--rb-font-mono);
+  font-size: var(--rb-text-sm);
+  color: var(--rb-text-soft);
+  cursor: pointer;
+  transition: color var(--rb-transition) var(--rb-ease),
+    background var(--rb-transition) var(--rb-ease);
+  border-radius: 8px;
+  padding: 8px 12px;
+  text-decoration: none;
+  display: inline-flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-link:hover {
+  color: var(--rb-text);
+  background: var(--rb-surface-2);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-link.rb-link--active, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-link[aria-current="page"] {
+  color: var(--rb-accent);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-nav-rail {
+  gap: var(--rb-space-1);
+  width: 14rem;
+  padding: var(--rb-space-3);
+  background: var(--rb-surface);
+  border-right: 1px solid var(--rb-border);
+  flex-direction: column;
+  flex-shrink: 0;
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-field {
+  gap: var(--rb-space-1);
+  flex-direction: column;
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-label {
+  font-size: var(--rb-text-sm);
+  font-weight: var(--rb-font-weight-medium);
+  color: var(--rb-text-soft);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-label__required {
+  color: var(--rb-danger);
+  margin-left: var(--rb-space-1);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-field__help {
+  color: var(--rb-text-soft);
+  font-size: var(--rb-text-sm);
+  margin-top: var(--rb-space-1);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-field__error {
+  color: var(--rb-text);
+  font-size: var(--rb-text-sm);
+  padding-left: var(--rb-space-2);
+  border-left: 3px solid var(--rb-danger);
+  margin-top: var(--rb-space-1);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-input, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-textarea, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-select {
+  background: var(--rb-surface);
+  border: 1px solid var(--rb-border-strong);
+  border-radius: var(--rb-radius);
+  width: 100%;
+  color: var(--rb-text);
+  font-family: var(--rb-font-body);
+  transition: border-color var(--rb-transition) var(--rb-ease),
+    box-shadow var(--rb-transition) var(--rb-ease);
+  padding: 12px 14px;
+  font-size: 16px;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-textarea {
+  resize: vertical;
+  min-height: 6rem;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-input:focus-visible, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-textarea:focus-visible, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-select:focus-visible {
+  border-color: var(--rb-accent);
+  box-shadow: 0 0 0 3px var(--rb-accent-wash);
+  outline: none;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-input[aria-invalid="true"], :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-textarea[aria-invalid="true"], :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-select[aria-invalid="true"] {
+  border-color: var(--rb-danger);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-input::placeholder, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-textarea::placeholder {
+  color: var(--rb-text-faint);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-choice {
+  align-items: center;
+  gap: var(--rb-space-1);
+  color: var(--rb-text);
+  cursor: pointer;
+  font-size: 16px;
+  display: inline-flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-checkbox, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-radio {
+  accent-color: var(--rb-accent);
+  cursor: pointer;
+  width: 1.1rem;
+  height: 1.1rem;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-switch {
+  appearance: none;
+  vertical-align: text-bottom;
+  cursor: pointer;
+  background: var(--rb-surface-sunken);
+  border: 1px solid var(--rb-border-strong);
+  border-radius: var(--rb-radius-pill);
+  width: 2.25rem;
+  height: 1.25rem;
+  transition: background var(--rb-transition) var(--rb-ease), border-color var(--rb-transition) var(--rb-ease);
+  margin: 0;
+  position: relative;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-switch:after {
+  content: "";
+  background: var(--rb-text-soft);
+  width: calc(1.25rem - 6px);
+  height: calc(1.25rem - 6px);
+  transition: transform var(--rb-transition) var(--rb-ease), background var(--rb-transition) var(--rb-ease);
+  border-radius: 50%;
+  position: absolute;
+  top: 2px;
+  left: 2px;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-switch:checked {
+  background: var(--rb-accent);
+  border-color: var(--rb-accent);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-switch:checked:after {
+  background: var(--rb-accent-fg);
+  transform: translateX(1rem);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-switch:disabled {
+  cursor: not-allowed;
+  opacity: .5;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-badge {
+  align-items: center;
+  gap: var(--rb-space-1);
+  border: 1px solid var(--rb-border);
+  border-radius: var(--rb-radius-pill);
+  font-family: var(--rb-font-mono);
+  letter-spacing: .02em;
+  color: var(--rb-text-soft);
+  background: var(--rb-surface);
+  padding: 4px 10px;
+  font-size: 11.5px;
+  display: inline-flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-badge--md {
+  font-size: var(--rb-text-sm);
+  padding: var(--rb-space-1) var(--rb-space-3);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-badge--info {
+  background: color-mix(in srgb, var(--rb-info) 14%, var(--rb-surface));
+  border-color: color-mix(in srgb, var(--rb-info) 45%, var(--rb-border));
+  color: var(--rb-text);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-badge--success {
+  background: color-mix(in srgb, var(--rb-success) 14%, var(--rb-surface));
+  border-color: color-mix(in srgb, var(--rb-success) 45%, var(--rb-border));
+  color: var(--rb-text);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-badge--warning {
+  background: color-mix(in srgb, var(--rb-warning) 16%, var(--rb-surface));
+  border-color: color-mix(in srgb, var(--rb-warning) 45%, var(--rb-border));
+  color: var(--rb-text);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-badge--danger {
+  background: color-mix(in srgb, var(--rb-danger) 14%, var(--rb-surface));
+  border-color: color-mix(in srgb, var(--rb-danger) 45%, var(--rb-border));
+  color: var(--rb-text);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-alert {
+  gap: var(--rb-space-1);
+  padding: var(--rb-space-3) var(--rb-space-4);
+  background: var(--rb-surface);
+  border: 1px solid var(--rb-border);
+  border-left: 4px solid var(--rb-accent);
+  border-radius: var(--rb-radius);
+  box-shadow: var(--rb-shadow-sm);
+  color: var(--rb-text);
+  flex-direction: column;
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-alert__title {
+  font-weight: var(--rb-font-weight-medium);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-alert--info {
+  border-left-color: var(--rb-info);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-alert--success {
+  border-left-color: var(--rb-success);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-alert--warning {
+  border-left-color: var(--rb-warning);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-alert--danger {
+  border-left-color: var(--rb-danger);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-toast-region {
+  top: var(--rb-space-4);
+  right: var(--rb-space-4);
+  z-index: 1000;
+  gap: var(--rb-space-2);
+  width: fit-content;
+  max-width: min(28rem, calc(100vw - 2 * var(--rb-space-4)));
+  pointer-events: none;
+  flex-direction: column;
+  display: flex;
+  position: fixed;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-toast {
+  pointer-events: auto;
+  align-items: flex-start;
+  gap: var(--rb-space-3);
+  padding: var(--rb-space-3) var(--rb-space-4);
+  background: var(--rb-surface);
+  border: 1px solid var(--rb-border);
+  border-left: 4px solid var(--rb-accent);
+  border-radius: var(--rb-radius);
+  box-shadow: var(--rb-shadow-lg);
+  color: var(--rb-text);
+  transition: opacity var(--rb-transition) var(--rb-ease),
+    transform var(--rb-transition) var(--rb-ease);
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-toast[data-rb-enter] {
+  opacity: 0;
+  transform: translateY(calc(-1 * var(--rb-space-2)));
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-toast--info {
+  border-left-color: var(--rb-info);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-toast--success {
+  border-left-color: var(--rb-success);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-toast--warning {
+  border-left-color: var(--rb-warning);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-toast--danger {
+  border-left-color: var(--rb-danger);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-toast__close {
+  border-radius: var(--rb-radius);
+  width: 1.25rem;
+  height: 1.25rem;
+  color: var(--rb-text-soft);
+  cursor: pointer;
+  transition: color var(--rb-transition) var(--rb-ease);
+  background: none;
+  border: none;
+  flex: none;
+  justify-content: center;
+  align-items: center;
+  margin-inline-start: auto;
+  padding: 0;
+  font-size: 1.125rem;
+  line-height: 1;
+  display: inline-flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-toast__close:hover {
+  color: var(--rb-text);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-toast__close:focus-visible {
+  outline: var(--rb-focus-ring);
+  outline-offset: 2px;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-dialog {
+  border: 1px solid var(--rb-border);
+  border-radius: var(--rb-radius-lg);
+  background: var(--rb-surface);
+  color: var(--rb-text);
+  box-shadow: var(--rb-shadow-lg);
+  max-width: min(92vw, 34rem);
+  padding: 0;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-dialog::backdrop {
+  -webkit-backdrop-filter: blur(var(--rb-blur));
+  background: #131e2966;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-dialog__body {
+  padding: var(--rb-space-5);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-dialog__title {
+  margin: 0 0 var(--rb-space-3);
+  font-family: var(--rb-font-display);
+  font-weight: var(--rb-font-weight-bold);
+  letter-spacing: var(--rb-heading-tracking);
+  font-size: 1.4rem;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-dialog__actions {
+  justify-content: flex-end;
+  gap: var(--rb-space-2);
+  padding: var(--rb-space-3) var(--rb-space-5);
+  border-top: 1px solid var(--rb-border);
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tabs {
+  gap: var(--rb-space-4);
+  border-bottom: 1px solid var(--rb-border);
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tab {
+  padding: var(--rb-space-2) 0;
+  color: var(--rb-text-soft);
+  font-family: var(--rb-font-body);
+  font-weight: var(--rb-font-weight-medium);
+  cursor: pointer;
+  transition: color var(--rb-transition) var(--rb-ease);
+  background: none;
+  border: 0;
+  font-size: 15px;
+  position: relative;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tab:not(:disabled):hover {
+  color: var(--rb-text);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tab:disabled {
+  opacity: .5;
+  cursor: not-allowed;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tab.rb-tab--active, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tab[aria-selected="true"] {
+  color: var(--rb-text);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tab.rb-tab--active:after, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tab[aria-selected="true"]:after {
+  content: "";
+  background: var(--rb-accent);
+  border-radius: 2px 2px 0 0;
+  height: 2px;
+  position: absolute;
+  bottom: -1px;
+  left: 0;
+  right: 0;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tabpanel {
+  padding: var(--rb-space-4) 0;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tabstrip {
+  gap: var(--rb-space-2);
+  padding: var(--rb-space-2) 0;
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tabstrip__tab {
+  padding: var(--rb-space-2) var(--rb-space-4);
+  background: var(--rb-surface-2);
+  border: 1px solid var(--rb-border);
+  border-radius: var(--rb-radius);
+  color: var(--rb-text);
+  font-size: var(--rb-text-sm);
+  font-weight: var(--rb-font-weight-medium);
+  cursor: pointer;
+  transition: border-color var(--rb-transition) var(--rb-ease);
+  position: relative;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tabstrip__tab:not(:disabled):hover {
+  border-color: var(--rb-accent);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tabstrip__tab:disabled {
+  opacity: .5;
+  cursor: not-allowed;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tabstrip__tab.rb-tabstrip__tab--active {
+  color: var(--rb-accent);
+  border-color: color-mix(in srgb, var(--rb-accent) 40%, var(--rb-border));
+  background: var(--rb-accent-wash);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tabstrip__badge {
+  color: var(--rb-text-faint);
+  font-size: var(--rb-text-sm);
+  font-variant-numeric: tabular-nums;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-wordmark {
+  width: fit-content;
+  font-family: var(--rb-font-display);
+  font-weight: var(--rb-font-weight-medium);
+  letter-spacing: var(--rb-heading-tracking);
+  color: var(--rb-text);
+  align-items: baseline;
+  gap: .4em;
+  margin: 0;
+  font-size: 1rem;
+  display: inline-flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-wordmark__spark {
+  color: var(--rb-accent);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table {
+  border-collapse: collapse;
+  width: 100%;
+  font-size: 15px;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table th {
+  text-align: left;
+  padding: var(--rb-space-2) var(--rb-space-3);
+  border-bottom: 2px solid var(--rb-border-strong);
+  color: var(--rb-text-soft);
+  font-family: var(--rb-font-mono);
+  letter-spacing: .06em;
+  text-transform: uppercase;
+  font-size: 12px;
+  font-weight: var(--rb-font-weight-medium);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table td {
+  padding: var(--rb-space-2) var(--rb-space-3);
+  border-bottom: 1px solid var(--rb-border);
+  color: var(--rb-text);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table tbody tr:hover td {
+  background: var(--rb-surface-2);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table .rb-num {
+  text-align: right;
+  font-variant-numeric: tabular-nums;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table__group-row td {
+  padding-top: var(--rb-space-3);
+  padding-bottom: var(--rb-space-1);
+  color: var(--rb-text-faint);
+  font-size: var(--rb-text-sm);
+  font-weight: var(--rb-font-weight-medium);
+  text-transform: uppercase;
+  letter-spacing: .04em;
+  border-bottom: none;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table__sort {
+  align-items: center;
+  gap: var(--rb-space-1);
+  font: inherit;
+  color: inherit;
+  cursor: pointer;
+  background: none;
+  border: none;
+  margin: 0;
+  padding: 0;
+  display: inline-flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table__sort:hover {
+  color: var(--rb-text);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table__sort-icon {
+  color: var(--rb-text-faint);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table__sort:hover .rb-table__sort-icon {
+  color: var(--rb-text);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table-scroll {
+  max-height: 70vh;
+  overflow: auto;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table-scroll thead th {
+  background: var(--rb-surface);
+  z-index: 1;
+  position: sticky;
+  top: 0;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table--interactive tbody tr {
+  cursor: pointer;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table--interactive tbody tr:focus-visible, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table--interactive tbody tr:has(:focus-visible) {
+  outline: var(--rb-focus-ring);
+  outline-offset: -3px;
+  border-radius: 0;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table--interactive tbody tr:focus-visible td, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-table--interactive tbody tr:has(:focus-visible) td {
+  background: var(--rb-surface-2);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-progress {
+  appearance: none;
+  border-radius: var(--rb-radius-pill);
+  background: var(--rb-surface-sunken);
+  border: 0;
+  width: 100%;
+  height: 8px;
+  overflow: hidden;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-progress::-webkit-progress-bar {
+  background: var(--rb-surface-sunken);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-progress::-webkit-progress-value {
+  background: var(--rb-accent);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-progress::-moz-progress-bar {
+  background: var(--rb-accent);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-progress:indeterminate::-webkit-progress-bar {
+  background-color: var(--rb-surface-sunken);
+  background-image: linear-gradient(90deg, transparent 0%, var(--rb-accent) 50%, transparent 100%);
+  background-repeat: no-repeat;
+  background-size: 50% 100%;
+  animation: 1.4s ease-in-out infinite rb-noir-indeterminate;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-progress:indeterminate::-moz-progress-bar {
+  background-color: var(--rb-surface-sunken);
+  background-image: linear-gradient(90deg, transparent 0%, var(--rb-accent) 50%, transparent 100%);
+  background-repeat: no-repeat;
+  background-size: 50% 100%;
+  animation: 1.4s ease-in-out infinite rb-noir-indeterminate;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-spinner {
+  border: 2px solid var(--rb-border-strong);
+  border-top-color: var(--rb-accent);
+  border-radius: 50%;
+  width: 1.25rem;
+  height: 1.25rem;
+  animation: .7s linear infinite rb-noir-spin;
+  display: inline-block;
+}
+
+@keyframes rb-noir-spin {
+  to {
+    transform: rotate(360deg);
+  }
+}
+
+@keyframes rb-noir-indeterminate {
+  0% {
+    background-position: -50% 0;
+  }
+
+  100% {
+    background-position: 150% 0;
+  }
+}
+
+@media (prefers-reduced-motion: reduce) {
+  :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-progress:indeterminate::-webkit-progress-bar {
+    animation-duration: 2s;
+  }
+
+  :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-progress:indeterminate::-moz-progress-bar {
+    animation-duration: 2s;
+  }
+
+  :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-spinner {
+    animation-duration: 2s;
+  }
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-stepper {
+  isolation: isolate;
+  margin: 0;
+  padding: 0;
+  list-style: none;
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-stepper__step {
+  align-items: center;
+  gap: var(--rb-space-2);
+  text-align: center;
+  flex-direction: column;
+  flex: 1;
+  min-width: 0;
+  display: flex;
+  position: relative;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-stepper__step:not(:first-child):before {
+  content: "";
+  background: var(--rb-surface-sunken);
+  z-index: -1;
+  width: 100%;
+  height: 2px;
+  transition: background-color var(--rb-transition) var(--rb-ease);
+  position: absolute;
+  top: 1rem;
+  right: 50%;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-stepper__step:not(:first-child).rb-stepper--complete:before, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-stepper__step:not(:first-child).rb-stepper--current:before, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-stepper__step[aria-current="step"]:before {
+  background: var(--rb-accent);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-stepper__node {
+  border-radius: var(--rb-radius-pill);
+  background: var(--rb-surface-2);
+  width: 2rem;
+  height: 2rem;
+  color: var(--rb-text-faint);
+  font-size: var(--rb-text-sm);
+  font-weight: var(--rb-font-weight-medium);
+  border: 2px solid #0000;
+  justify-content: center;
+  align-items: center;
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-stepper__label {
+  font-size: var(--rb-text-sm);
+  color: var(--rb-text-faint);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-stepper--complete .rb-stepper__node {
+  background: var(--rb-accent);
+  color: var(--rb-accent-fg);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-stepper--complete .rb-stepper__label {
+  color: var(--rb-text);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-stepper--current .rb-stepper__node, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-stepper__step[aria-current="step"] .rb-stepper__node {
+  background: var(--rb-surface);
+  border-color: var(--rb-accent);
+  color: var(--rb-accent);
+  box-shadow: var(--rb-shadow-lg);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-stepper--current .rb-stepper__label, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-stepper__step[aria-current="step"] .rb-stepper__label {
+  color: var(--rb-accent);
+  font-weight: var(--rb-font-weight-medium);
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-muted {
+  color: var(--rb-text-faint);
+  font-style: italic;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-pre {
+  padding: var(--rb-space-3) var(--rb-space-4);
+  background: var(--rb-surface-sunken);
+  border: 1px solid var(--rb-border);
+  border-radius: var(--rb-radius);
+  font-family: var(--rb-font-mono);
+  font-size: var(--rb-text-sm);
+  margin: 0;
+  overflow-x: auto;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-log {
+  white-space: pre-wrap;
+  overflow-wrap: anywhere;
+  max-height: 16rem;
+  line-height: 1.5;
+  overflow-y: auto;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-pre.rb-log {
+  overflow-x: hidden;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-eyebrow {
+  font-family: var(--rb-font-mono);
+  font-size: 12.5px;
+  font-weight: var(--rb-font-weight-medium);
+  letter-spacing: var(--rb-label-tracking);
+  text-transform: uppercase;
+  color: var(--rb-accent);
+  align-items: center;
+  gap: 10px;
+  display: inline-flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-eyebrow:before {
+  content: "";
+  background: var(--rb-accent);
+  width: 22px;
+  height: 1.5px;
+  display: inline-block;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack {
+  --rb-rack-panel: #0a121a;
+  --rb-rack-ink: #e7eef4;
+  --rb-rack-faint: #7d90a2;
+  --rb-rack-line: #1e2b37;
+  background: var(--rb-rack-panel);
+  border: 1px solid var(--rb-rack-line);
+  box-shadow: var(--rb-shadow-lg);
+  color: var(--rb-rack-ink);
+  border-radius: 16px;
+  padding: 24px;
+  overflow: hidden;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__top {
+  font-family: var(--rb-font-mono);
+  letter-spacing: .14em;
+  text-transform: uppercase;
+  color: var(--rb-rack-faint);
+  justify-content: space-between;
+  align-items: center;
+  font-size: 11.5px;
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__live {
+  color: var(--rb-rack-ink);
+  align-items: center;
+  gap: 7px;
+  display: inline-flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__live:before {
+  content: "";
+  background: var(--rb-accent);
+  border-radius: 50%;
+  width: 7px;
+  height: 7px;
+  animation: 1.8s ease-in-out infinite rb-noir-pulse;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__bars {
+  align-items: flex-end;
+  gap: 7px;
+  height: 132px;
+  margin: 22px 2px 16px;
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__bars > i {
+  background: var(--rb-accent-grad);
+  transform-origin: bottom;
+  opacity: .92;
+  border-radius: 4px 4px 2px 2px;
+  flex: 1;
+  animation: 1.4s ease-in-out infinite rb-noir-bop;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__bars > i:first-child {
+  height: 52%;
+  animation-delay: -.2s;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__bars > i:nth-child(2) {
+  height: 88%;
+  animation-delay: -1.1s;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__bars > i:nth-child(3) {
+  height: 34%;
+  animation-delay: -.6s;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__bars > i:nth-child(4) {
+  height: 70%;
+  animation-delay: -.9s;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__bars > i:nth-child(5) {
+  height: 100%;
+  animation-delay: -.35s;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__bars > i:nth-child(6) {
+  height: 46%;
+  animation-delay: -1.3s;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__foot {
+  border-top: 1px solid var(--rb-rack-line);
+  font-family: var(--rb-font-mono);
+  color: var(--rb-rack-faint);
+  letter-spacing: .04em;
+  justify-content: space-between;
+  gap: 12px;
+  padding-top: 14px;
+  font-size: 11.5px;
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__foot b {
+  color: var(--rb-rack-ink);
+  font-weight: var(--rb-font-weight-medium);
+}
+
+@keyframes rb-noir-bop {
+  0%, 100% {
+    transform: scaleY(.5);
+  }
+
+  50% {
+    transform: scaleY(1);
+  }
+}
+
+@keyframes rb-noir-pulse {
+  0%, 100% {
+    opacity: 1;
+  }
+
+  50% {
+    opacity: .35;
+  }
+}
+
+@media (prefers-reduced-motion: reduce) {
+  :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__bars > i, :where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-rack__live:before {
+    animation: none;
+  }
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-principles {
+  flex-direction: column;
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-principle {
+  border-top: 1px solid var(--rb-border);
+  grid-template-columns: 56px 1fr;
+  gap: 18px;
+  padding: 22px 0;
+  display: grid;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-principles > .rb-principle:first-child {
+  border-top: 0;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-principle__n {
+  font-family: var(--rb-font-mono);
+  font-size: 13px;
+  font-weight: var(--rb-font-weight-medium);
+  color: var(--rb-accent);
+  padding-top: 3px;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-principle__body h3 {
+  margin: 0;
+  font-size: 1.16rem;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-principle__body p {
+  color: var(--rb-text-soft);
+  margin: 7px 0 0;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tags {
+  flex-wrap: wrap;
+  gap: 8px;
+  margin: 0;
+  padding: 0;
+  list-style: none;
+  display: flex;
+}
+
+:where([data-rb-style="rackbops-noir"], [data-rb-style="rackbops-noir"] *).rb-tag {
+  font-family: var(--rb-font-mono);
+  color: var(--rb-text-soft);
+  border: 1px solid var(--rb-border);
+  border-radius: var(--rb-radius-pill);
+  letter-spacing: .02em;
+  padding: 4px 10px;
+  font-size: 11.5px;
+}
+`;
+
+// plugins/tracker/src/web/theme.ts
+var THEME_CSS = bundle_default;
+var LAYOUT_CSS = `
+/* tracker web area layout (not part of the theme) */
+.tr-top { display: flex; flex-wrap: wrap; align-items: center; gap: var(--rb-space-3); padding: var(--rb-space-3) var(--rb-space-4); border-bottom: 1px solid var(--rb-border); }
+.tr-top nav { display: flex; flex-wrap: wrap; align-items: center; gap: var(--rb-space-2); margin-left: auto; }
+.tr-top form { margin: 0; }
+.tr-main { max-width: 60rem; margin: 0 auto; padding: var(--rb-space-4); }
+.tr-main > section { margin-bottom: var(--rb-space-5); }
+.tr-stack { display: grid; gap: var(--rb-space-3); max-width: 28rem; }
+.tr-foot { margin-top: var(--rb-space-5); }
+`;
+var STYLESHEET = `${THEME_CSS}
+${LAYOUT_CSS}`;
+var STYLESHEET_PATH = `/assets/theme.${sha256(STYLESHEET).slice(0, 16)}.css`;
+
+// plugins/tracker/src/web/html.ts
+function esc(value) {
+  return String(value).replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;").replaceAll("'", "&#39;");
+}
+
+class Html {
+  value;
+  constructor(value) {
+    this.value = value;
+  }
+  toString() {
+    return this.value;
+  }
+}
+function render(part) {
+  if (part === null || part === undefined || part === false)
+    return "";
+  if (part instanceof Html)
+    return part.value;
+  if (Array.isArray(part))
+    return part.map(render).join("");
+  return esc(part);
+}
+function html(strings, ...values) {
+  let out = strings[0] ?? "";
+  values.forEach((v, i) => {
+    out += render(v) + (strings[i + 1] ?? "");
+  });
+  return new Html(out);
+}
+var CSP = "default-src 'none'; style-src 'self'; img-src 'none'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'";
+var REFERRER_POLICY = "same-origin";
+function pageHeaders(extra = {}) {
+  const h = new Headers({
+    "Content-Type": "text/html; charset=utf-8",
+    "Content-Security-Policy": CSP,
+    "X-Content-Type-Options": "nosniff",
+    "X-Frame-Options": "DENY",
+    "Referrer-Policy": REFERRER_POLICY,
+    "Cache-Control": "no-store"
+  });
+  for (const [k, v] of Object.entries(extra))
+    h.set(k, v);
+  return h;
+}
+function page(f) {
+  const nav = f.signedIn ? html`<nav aria-label="Tracker">
+<span class="rb-muted">${f.signedIn.name}</span>
+<a class="rb-link" href="${f.base}/">My tasks</a>
+<a class="rb-link" href="${f.base}/settings">Settings</a>
+<form method="post" action="${f.base}/logout"><input type="hidden" name="csrf" value="${f.signedIn.csrf}"><button class="rb-btn rb-btn--ghost rb-btn--sm" type="submit">Sign out</button></form>
+</nav>` : null;
+  return html`<!doctype html>
+<html lang="en" data-rb-style="rackbops-noir">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<meta name="referrer" content="${REFERRER_POLICY}">
+<title>${f.title} -- Tracker</title>
+<link rel="stylesheet" href="${f.base}${STYLESHEET_PATH}">
+</head>
+<body>
+<header class="tr-top"><span class="rb-wordmark">Tracker<span class="rb-wordmark__spark">.</span></span>${nav}</header>
+<main class="tr-main">
+${f.body}
+</main>
+</body>
+</html>
+`.value;
+}
+function htmlResponse(body, status = 200, extra = {}) {
+  return new Response(body, { status, headers: pageHeaders(extra) });
+}
+function redirect(location, cookies = []) {
+  const h = new Headers({ Location: location, "Cache-Control": "no-store", "Referrer-Policy": REFERRER_POLICY });
+  for (const c of cookies)
+    h.append("Set-Cookie", c);
+  return new Response(null, { status: 303, headers: h });
+}
+function readCookie(request, name) {
+  const header = request.headers.get("cookie");
+  if (!header)
+    return null;
+  for (const part of header.split(";")) {
+    const eq = part.indexOf("=");
+    if (eq < 0)
+      continue;
+    if (part.slice(0, eq).trim() === name)
+      return part.slice(eq + 1).trim();
+  }
+  return null;
+}
+function cookie(name, value, o) {
+  return `${name}=${value}; Path=${o.base}/; Max-Age=${o.maxAgeSeconds}; HttpOnly; Secure; SameSite=${o.sameSite}`;
+}
+
+// plugins/tracker/src/web/pages.ts
+function name3(u) {
+  return u.displayName ?? "you";
+}
+function framed(v, title, body) {
+  return page({ base: v.base, title, signedIn: { name: name3(v.user), csrf: v.csrf }, body });
+}
+function signInHelpPage(base, note) {
+  return page({
+    base,
+    title: "Sign in",
+    body: html`<section class="rb-card">
+<h1>Sign in</h1>
+${note ? html`<p class="rb-muted">${note}</p>` : null}
+<p>Run <code>/web</code> in Discord: the bot answers you alone with a sign-in link, good for ten minutes and one use.</p>
+</section>`
+  });
+}
+function loginPage(base, input) {
+  if (!input.valid)
+    return signInHelpPage(base, "That sign-in link has expired or was already used.");
+  return page({
+    base,
+    title: "Sign in",
+    body: html`<section class="rb-card">
+<h1>Sign in to the tracker</h1>
+<p>This link works once. Press the button to sign in on this browser.</p>
+<form method="post" action="${base}/login">
+<input type="hidden" name="t" value="${input.token}">
+<input type="hidden" name="csrf" value="${input.loginCsrf}">
+<button class="rb-btn rb-btn--primary" type="submit">Sign in</button>
+</form>
+</section>`
+  });
+}
+function when2(entry, viewer, now) {
+  return entry.next ? formatInstant(entry.next.dueAt, viewer.timeZone, now) : "nothing due";
+}
+function cadence(entry, viewer, now) {
+  const s = entry.task.schedule;
+  if (!s || s.kind === "once")
+    return "once";
+  return describeSchedule(s, entry.from ?? viewer, viewer.timeZone, now);
+}
+function tasksPage(v, data, now) {
+  const rows = data.entries.map((e) => html`<tr>
+<td><a class="rb-link" href="${v.base}/tasks/${e.task.id}">${e.task.title}</a></td>
+<td>${e.from ? name3(e.from) : "you"}</td>
+<td>${when2(e, v.user, now)}</td>
+<td>${cadence(e, v.user, now)}</td>
+</tr>`);
+  const active = data.entries.length === 0 ? html`<p class="rb-muted">You have no active tasks. <code>/remind</code> in Discord sets one.</p>` : html`<div class="rb-table-scroll"><table class="rb-table">
+<thead><tr><th scope="col">Task</th><th scope="col">From</th><th scope="col">Next</th><th scope="col">Repeats</th></tr></thead>
+<tbody>${rows}</tbody>
+</table></div>`;
+  const paused = data.paused.length === 0 ? null : html`<section>
+<h2>Paused</h2>
+<ul>${data.paused.map((p) => html`<li><a class="rb-link" href="${v.base}/tasks/${p.task.id}">${p.task.title}</a>${p.held.length > 0 ? html` -- I could not DM ${p.held.join(", ")}; <code>/task resume ${p.task.id}</code> goes on without them.` : null}</li>`)}</ul>
+</section>`;
+  return framed(v, "My tasks", html`<section>
+<h1>My tasks</h1>
+<p class="rb-muted">Times are in ${v.user.timeZone}.</p>
+${active}
+</section>
+${paused}
+<p class="rb-muted tr-foot">${ADMIN_DISCLOSURE}</p>`);
+}
+function historyPage(v, h) {
+  const runs = h.runs.length === 0 ? html`<p class="rb-muted">No runs yet.</p>` : html`<div class="rb-table-scroll"><table class="rb-table">
+<thead><tr><th scope="col">Due</th><th scope="col">Status</th><th scope="col">Answers</th></tr></thead>
+<tbody>${h.runs.map((r) => html`<tr>
+<td>${r.due}</td>
+<td>${r.status}${r.late ? " (late)" : ""}${r.error ? html`<br><span class="rb-muted">${r.error}</span>` : null}</td>
+<td>${r.answers.join("; ")}</td>
+</tr>`)}</tbody>
+</table></div>`;
+  return framed(v, h.task.title, html`<section>
+<p><a class="rb-link" href="${v.base}/">My tasks</a></p>
+<h1>${h.task.title}</h1>
+<p>${h.task.type}, ${h.task.status}, ${h.cadence}. Next: ${h.next ?? "nothing scheduled"}.</p>
+</section>
+<section>
+<h2>Runs</h2>
+${h.earlierRuns > 0 ? html`<p class="rb-muted">${h.earlierRuns} earlier run(s) not shown.</p>` : null}
+${runs}
+</section>
+<section>
+<h2>Changes</h2>
+${h.earlierChanges > 0 ? html`<p class="rb-muted">${h.earlierChanges} earlier change(s) not shown.</p>` : null}
+<ul>${h.changes.map((c) => html`<li>${c.at} ${c.kind}${c.detail !== null ? `: ${c.detail}` : ""}</li>`)}</ul>
+</section>`);
+}
+function settingsPage(v, form) {
+  const hours = Array.from({ length: 24 }, (_, h) => h);
+  return framed(v, "Settings", html`<section>
+<h1>Settings</h1>
+${form.saved ? html`<div class="rb-alert rb-alert--success" role="status"><p class="rb-alert__title">Saved.</p></div>` : null}
+${form.error ? html`<div class="rb-alert rb-alert--danger" role="alert"><p class="rb-alert__title">Not saved</p><p>${form.error}</p></div>` : null}
+<form method="post" action="${v.base}/settings" class="tr-stack">
+<input type="hidden" name="csrf" value="${v.csrf}">
+<div class="rb-field">
+<label class="rb-label" for="hour">Preferred hour</label>
+<select class="rb-select" id="hour" name="hour">${hours.map((h) => html`<option value="${h}"${String(h) === form.hour ? html` selected` : null}>${String(h).padStart(2, "0")}:00</option>`)}</select>
+<p class="rb-field__help">A reminder without a time of day arrives at this hour.</p>
+</div>
+<div class="rb-field">
+<label class="rb-label" for="zone">Time zone</label>
+<input class="rb-input" id="zone" name="zone" value="${form.zone}" maxlength="64" required${form.error ? html` aria-invalid="true"` : null}>
+<p class="rb-field__help">An IANA name, such as America/New_York or Europe/London.</p>
+</div>
+<div><button class="rb-btn rb-btn--primary" type="submit">Save</button></div>
+</form>
+</section>`);
+}
+function notFoundPage(base, v) {
+  const body = html`<section><h1>Not found</h1><p>There is nothing here, or nothing you can see.</p><p><a class="rb-link" href="${base}/">My tasks</a></p></section>`;
+  return v ? framed(v, "Not found", body) : page({ base, title: "Not found", body });
+}
+function errorPage(base, title, message) {
+  return page({ base, title, body: html`<section class="rb-card"><h1>${title}</h1><p>${message}</p></section>` });
+}
+
+// plugins/tracker/src/web/sessions.ts
+var SESSION_TTL_MS = 7 * 24 * 60 * 60 * 1000;
+
+class Sessions {
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  create(userId, now, memberCheckedAt = null) {
+    const id = randomToken();
+    const at = now.toISOString();
+    const session = { userId, csrf: randomToken(), expiresAt: new Date(now.getTime() + SESSION_TTL_MS).toISOString(), memberCheckedAt };
+    this.db.query("DELETE FROM web_sessions WHERE expires_at <= ?").run(at);
+    this.db.query("INSERT INTO web_sessions (id_hash, user_id, csrf, created_at, expires_at, member_checked_at) VALUES (?, ?, ?, ?, ?, ?)").run(sha256(id), userId, session.csrf, at, session.expiresAt, memberCheckedAt);
+    return { id, session };
+  }
+  find(id, now) {
+    if (!isTokenShape(id))
+      return null;
+    const row = this.db.query("SELECT user_id, csrf, expires_at, member_checked_at FROM web_sessions WHERE id_hash = ? AND expires_at > ?").get(sha256(id), now.toISOString());
+    return row ? { userId: row.user_id, csrf: row.csrf, expiresAt: row.expires_at, memberCheckedAt: row.member_checked_at } : null;
+  }
+  delete(id) {
+    if (isTokenShape(id))
+      this.db.query("DELETE FROM web_sessions WHERE id_hash = ?").run(sha256(id));
+  }
+  confirmMember(userId, at) {
+    this.db.query("UPDATE web_sessions SET member_checked_at = ? WHERE user_id = ?").run(at, userId);
+  }
+  deleteForUser(userId) {
+    this.db.query("DELETE FROM web_sessions WHERE user_id = ?").run(userId);
+  }
+}
+
+// plugins/tracker/src/web/app.ts
+var MEMBER_RECHECK_MS = 15 * 60 * 1000;
+var MEMBER_GRACE_MS = 24 * 60 * 60 * 1000;
+var MEMBER_CHECK_TIMEOUT_MS = 3000;
+var MEMBER_RETRY_MS = 60 * 1000;
+var LEFT_SERVER = `You are signed out. ${NOT_MEMBER}`;
+var RECHECK_FAILED = "You are signed out: I could not check that you are still a member of this tracker's server.";
+var MAX_FORM_BYTES = 8 * 1024;
+var TASK_PATH = /^\/tasks\/([^/]+)$/;
+function plain(status, text, extra = {}) {
+  return new Response(text, {
+    status,
+    headers: { "Content-Type": "text/plain; charset=utf-8", "Cache-Control": "no-store", "X-Content-Type-Options": "nosniff", ...extra }
+  });
+}
+async function lookupWithin(lookup, ms) {
+  let timer;
+  const late = new Promise((resolve) => {
+    timer = setTimeout(() => resolve("unknown"), ms);
+  });
+  try {
+    return await Promise.race([lookup().catch(() => "unknown"), late]);
+  } finally {
+    clearTimeout(timer);
+  }
+}
+function createWebHandler(w) {
+  const base = `/${w.name}`;
+  const SESSION_COOKIE = `__Secure-${w.name}-session`;
+  const LOGIN_COOKIE = `__Secure-${w.name}-login`;
+  const clear = (name) => cookie(name, "", { base, maxAgeSeconds: 0, sameSite: "Lax" });
+  const inFlight = new Map;
+  const failedAt = new Map;
+  async function authenticate(d, request) {
+    const id = readCookie(request, SESSION_COOKIE);
+    if (!id)
+      return { kind: "none" };
+    const session = d.sessions.find(id, d.clock.now());
+    if (!session)
+      return { kind: "stale" };
+    const user = await d.store.getUser(session.userId);
+    if (!user || !d.admissions.isRegistered(user.id)) {
+      d.sessions.deleteForUser(session.userId);
+      return { kind: "stale" };
+    }
+    const refused = await recheckMembership(d, session, user);
+    if (refused)
+      return refused;
+    const current = d.sessions.find(id, d.clock.now());
+    if (!current)
+      return { kind: "stale" };
+    return { kind: "ok", id, session: current, user };
+  }
+  function lookupShared(userId, discordId) {
+    let pending = inFlight.get(userId);
+    if (!pending) {
+      const started = w.membership(discordId).catch(() => "unknown");
+      pending = started;
+      inFlight.set(userId, started);
+      started.finally(() => {
+        if (inFlight.get(userId) === started)
+          inFlight.delete(userId);
+      });
+    }
+    const shared = pending;
+    return lookupWithin(() => shared, MEMBER_CHECK_TIMEOUT_MS);
+  }
+  async function recheckMembership(d, session, user) {
+    if (w.guildId === null)
+      return null;
+    const now = d.clock.now().getTime();
+    const age = session.memberCheckedAt ? now - Date.parse(session.memberCheckedAt) : Number.POSITIVE_INFINITY;
+    const fresh = (limit) => age >= 0 && age < limit;
+    if (fresh(MEMBER_RECHECK_MS))
+      return null;
+    const lastFailed = failedAt.get(user.id);
+    const backingOff = lastFailed !== undefined && now - lastFailed >= 0 && now - lastFailed < MEMBER_RETRY_MS;
+    let found = "unknown";
+    if (!backingOff && user.discordId) {
+      found = await lookupShared(user.id, user.discordId);
+      if (found === "member" || found === "not-member")
+        failedAt.delete(user.id);
+      else
+        failedAt.set(user.id, d.clock.now().getTime());
+    }
+    if (found === "not-member") {
+      d.sessions.deleteForUser(user.id);
+      return { kind: "signed-out", note: LEFT_SERVER };
+    }
+    if (found === "member") {
+      d.sessions.confirmMember(user.id, d.clock.now().toISOString());
+      return null;
+    }
+    if (fresh(MEMBER_GRACE_MS))
+      return null;
+    d.sessions.deleteForUser(user.id);
+    return { kind: "signed-out", note: RECHECK_FAILED };
+  }
+  async function readForm(request) {
+    const type = request.headers.get("content-type") ?? "";
+    if (!type.toLowerCase().startsWith("application/x-www-form-urlencoded"))
+      return null;
+    const body = await request.text();
+    if (Buffer.byteLength(body) > MAX_FORM_BYTES)
+      return null;
+    return new URLSearchParams(body);
+  }
+  function forbidden() {
+    return htmlResponse(errorPage(base, "Refused", "That form was stale or came from somewhere else. Go back, reload the page and try again."), 403);
+  }
+  async function loginGet(d, url) {
+    const token = url.searchParams.get("t") ?? "";
+    const valid = d.logins.peek(token, d.clock.now());
+    if (!valid)
+      return htmlResponse(loginPage(base, { token: "", loginCsrf: "", valid: false }));
+    const loginCsrf = randomToken();
+    return htmlResponse(loginPage(base, { token, loginCsrf, valid: true }), 200, {
+      "Set-Cookie": cookie(LOGIN_COOKIE, loginCsrf, { base, maxAgeSeconds: LINK_TTL_MS / 1000, sameSite: "Strict" })
+    });
+  }
+  async function loginPost(d, request) {
+    const form = await readForm(request);
+    if (!form)
+      return plain(400, "Bad request");
+    const expected = readCookie(request, LOGIN_COOKIE);
+    const sent = form.get("csrf") ?? "";
+    if (!expected || !safeEqual(expected, sent))
+      return forbidden();
+    const now = d.clock.now();
+    const link = d.logins.consume(form.get("t") ?? "", now);
+    const user = link ? await d.store.getUser(link.userId) : null;
+    if (!user || !d.admissions.isRegistered(user.id)) {
+      return htmlResponse(signInHelpPage(base, "That sign-in link has expired or was already used."), 400, { "Set-Cookie": clear(LOGIN_COOKIE) });
+    }
+    const { id } = d.sessions.create(user.id, now, link?.memberCheckedAt ?? null);
+    return redirect(`${base}/`, [cookie(SESSION_COOKIE, id, { base, maxAgeSeconds: SESSION_TTL_MS / 1000, sameSite: "Lax" }), clear(LOGIN_COOKIE)]);
+  }
+  async function settingsPost(d, v, form) {
+    const hour = (form.get("hour") ?? "").trim();
+    const zone = (form.get("zone") ?? "").trim();
+    let error = null;
+    if (!/^([0-9]|1[0-9]|2[0-3])$/.test(hour))
+      error = "The preferred hour must be a whole hour from 0 to 23.";
+    else if (zone === "" || zone.length > 64)
+      error = "Give a time zone, such as America/New_York.";
+    else {
+      error = await w.queue(async () => {
+        const fresh = await d.store.getUser(v.user.id);
+        return fresh ? saveSettings(d, fresh, { hour: Number(hour), zone }) : "You are no longer on this tracker's list.";
+      });
+    }
+    if (error !== null)
+      return htmlResponse(settingsPage(v, { hour, zone, error }), 400);
+    return redirect(`${base}/settings?saved=1`);
+  }
+  return async (request, info) => {
+    const method = request.method;
+    if (method !== "GET" && method !== "POST")
+      return plain(405, "Method not allowed", { Allow: "GET, POST" });
+    if (w.origin === null)
+      return plain(404, "Not found");
+    const d = w.deps();
+    if (!d)
+      return plain(503, "The tracker is starting up; try again in a minute.");
+    if (method === "POST") {
+      const origin = request.headers.get("origin");
+      if (origin !== null && origin !== w.origin)
+        return forbidden();
+    }
+    const path = info.path;
+    const url = new URL(request.url);
+    const only = (allowed) => method === allowed ? null : plain(405, "Method not allowed", { Allow: allowed });
+    if (path === STYLESHEET_PATH) {
+      return only("GET") ?? new Response(STYLESHEET, {
+        headers: { "Content-Type": "text/css; charset=utf-8", "Cache-Control": "public, max-age=31536000, immutable", "X-Content-Type-Options": "nosniff" }
+      });
+    }
+    if (path === "/signin")
+      return only("GET") ?? htmlResponse(signInHelpPage(base, url.searchParams.get("out") === "1" ? "You are signed out." : undefined));
+    if (path === "/login")
+      return method === "GET" ? loginGet(d, url) : loginPost(d, request);
+    const task = TASK_PATH.exec(path);
+    const route = path === "/" ? "tasks" : path === "/settings" ? "settings" : path === "/logout" ? "logout" : task ? "history" : null;
+    if (route === null)
+      return htmlResponse(notFoundPage(base), 404);
+    const wrong = route === "logout" ? only("POST") : route === "settings" ? null : only("GET");
+    if (wrong)
+      return wrong;
+    const auth = await authenticate(d, request);
+    if (auth.kind === "signed-out")
+      return htmlResponse(signInHelpPage(base, auth.note), 403, { "Set-Cookie": clear(SESSION_COOKIE) });
+    if (auth.kind !== "ok")
+      return redirect(`${base}/signin`, auth.kind === "stale" ? [clear(SESSION_COOKIE)] : []);
+    const v = { base, user: auth.user, csrf: auth.session.csrf };
+    if (method === "POST") {
+      const form = await readForm(request);
+      if (!form)
+        return plain(400, "Bad request");
+      if (!safeEqual(auth.session.csrf, form.get("csrf") ?? ""))
+        return forbidden();
+      if (route === "logout") {
+        d.sessions.delete(auth.id);
+        return redirect(`${base}/signin?out=1`, [clear(SESSION_COOKIE)]);
+      }
+      return settingsPost(d, v, form);
+    }
+    const now = d.clock.now();
+    switch (route) {
+      case "tasks":
+        return htmlResponse(tasksPage(v, await loadTaskList(d, auth.user), now));
+      case "history": {
+        let id;
+        try {
+          id = decodeURIComponent(task?.[1] ?? "");
+        } catch {
+          return htmlResponse(notFoundPage(base, v), 404);
+        }
+        const view = await loadHistory(d, auth.user, id);
+        return view ? htmlResponse(historyPage(v, view)) : htmlResponse(notFoundPage(base, v), 404);
+      }
+      default:
+        return htmlResponse(settingsPage(v, { hour: String(auth.user.preferredHour), zone: auth.user.timeZone, saved: url.searchParams.get("saved") === "1" }));
+    }
+  };
+}
+
+// plugins/tracker/src/web/config.ts
+var WEB_URL_FORMAT = "^https://[A-Za-z0-9.-]+(:[0-9]{1,5})?/?$";
+function parseWebUrl(raw) {
+  if (raw === undefined || raw.trim() === "")
+    return null;
+  const value = raw.trim();
+  if (!new RegExp(WEB_URL_FORMAT).test(value)) {
+    throw new Error(`TRACKER_WEB_URL: "${value}" is not an https origin such as https://clerk.example.com (no path, query or credentials)`);
+  }
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    throw new Error(`TRACKER_WEB_URL: "${value}" is not a URL`);
+  }
+  if (url.protocol !== "https:" || url.username !== "" || url.password !== "" || url.pathname !== "/" || url.search !== "" || url.hash !== "") {
+    throw new Error(`TRACKER_WEB_URL: "${value}" must be a bare https origin`);
+  }
+  return url.origin;
+}
+
+// plugins/tracker/src/index.ts
+var DB_DIR = "tracker";
+var DB_FILE = "tracker.sqlite";
+var TRACKER_TYPES = Object.freeze({
+  reminder,
+  renewal,
+  price
+});
+var NO_DM = {
+  async sendDm() {
+    throw new Error("this bot has no host.dm (rackbops-discord-bot#736)");
+  }
+};
+function createPlugin(host, options = {}) {
+  const adminIds = parseAdminIds(host.env.TRACKER_ADMIN_DISCORD_IDS);
+  const guildId = parseGuildId(host.env.TRACKER_GUILD_ID);
+  const webOrigin = parseWebUrl(host.env.TRACKER_WEB_URL);
+  const clock = options.clock ?? { now: () => new Date };
+  const types = options.types ?? TRACKER_TYPES;
+  const pageFetch = options.fetch ?? ((signal) => createPageFetch(signal ? { signal } : {}));
+  const health = { activatedAt: null, lastTickAt: null, blocked: null };
+  let db = null;
+  let store = null;
+  let claims = null;
+  let delivery = null;
+  let deps = null;
+  let warnedNoDm = false;
+  const dm = host.dm?.bind(host);
+  const queue = serial();
+  const surface = createSurface({
+    deps: () => deps,
+    guildId,
+    log: host.log,
+    queue,
+    web: webOrigin ? { origin: webOrigin, name: host.name, gated: guildId !== null } : null,
+    ...options.membership ? { membership: options.membership } : {}
+  });
+  async function tick(kind, signal) {
+    if (!store || !claims)
+      return;
+    const outcome = await runNotifyTick({
+      store,
+      claims,
+      clock,
+      types,
+      dm,
+      log: host.log,
+      kind,
+      ...kind === "poll" ? { fetch: pageFetch(signal) } : {},
+      ...delivery ? { health: delivery } : {}
+    }, signal);
+    if (outcome.kind === "no-dm") {
+      if (!warnedNoDm)
+        host.log.warn("notify lane is off: this bot has no host.dm (rackbops-discord-bot#736)");
+      warnedNoDm = true;
+      return;
+    }
+    if (outcome.kind === "aborted")
+      return;
+    if (kind === "notify")
+      health.lastTickAt = clock.now();
+    const { ran, failed } = outcome.result;
+    if (failed > 0)
+      host.log.warn(`${kind === "poll" ? "poll" : "notify"} lane: ${ran} ran, ${failed} failed`);
+  }
+  let discordClient = null;
+  const capture = (interaction) => {
+    const client = interaction.client;
+    if (client)
+      discordClient = client;
+  };
+  const clientMembership = async (discordId) => {
+    if (!discordClient)
+      return null;
+    return lookupMembership({ guildId: null, user: { id: discordId }, client: discordClient }, guildId, discordId, host.log);
+  };
+  const web = createWebHandler({
+    name: host.name,
+    origin: webOrigin,
+    deps: () => deps,
+    queue,
+    guildId,
+    membership: options.webMembership ?? clientMembership
+  });
+  const interactions = surface.interactions;
+  return {
+    commands: surface.commands.map((c) => ({
+      ...c,
+      handle: (interaction) => {
+        capture(interaction);
+        return c.handle(interaction);
+      }
+    })),
+    interactions: (interaction) => {
+      capture(interaction);
+      return interactions(interaction);
+    },
+    async activate() {
+      let path = options.dbPath;
+      if (path === undefined) {
+        const dir = join(host.dataDir, DB_DIR);
+        mkdirSync(dir, { recursive: true });
+        path = join(dir, DB_FILE);
+      }
+      const opened = openDatabase(path);
+      const openedStore = new SqliteStore(opened);
+      const openedClaims = new ClaimStore(opened);
+      try {
+        const granted = await seedAdmins(openedStore, adminIds, clock.now());
+        const admissions = new Admissions(opened);
+        for (const id of adminIds) {
+          const admin = await openedStore.findUserByDiscordId(id);
+          if (admin)
+            admissions.record(admin.id, null, clock.now().toISOString());
+        }
+        if (granted.length > 0)
+          host.log.info(`made ${granted.length} admin(s) from TRACKER_ADMIN_DISCORD_IDS`);
+        const requeued = await openedStore.requeueRunning();
+        if (requeued.length > 0)
+          host.log.warn(`requeued ${requeued.length} occurrence(s) left running: ${requeued.join(", ")}`);
         for (const c of openedClaims.listUnsettled())
           reportUnconfirmed(openedClaims, host.log, c, clock.now().toISOString());
       } catch (err) {
@@ -3574,9 +6054,12 @@ function createPlugin(host, options = {}) {
         health: delivery,
         clock,
         types,
+        fetch: pageFetch(),
         dm,
         log: host.log,
-        notifier: dm ? createDmNotifier({ store: openedStore, claims: openedClaims, dm, clock, log: host.log, health: delivery }) : NO_DM
+        notifier: dm ? createDmNotifier({ store: openedStore, claims: openedClaims, dm, clock, log: host.log, health: delivery }) : NO_DM,
+        logins: new LoginLinks(opened),
+        sessions: new Sessions(opened)
       };
       if (guildId === null)
         host.log.warn("TRACKER_GUILD_ID is unset: no membership gate, only the admission list");
@@ -3596,30 +6079,18 @@ function createPlugin(host, options = {}) {
     ticks: [
       {
         name: "notify",
-        async run(signal) {
-          if (!store || !claims)
-            return;
-          const outcome = await runNotifyTick({ store, claims, clock, types, dm, log: host.log, ...delivery ? { health: delivery } : {} }, signal);
-          if (outcome.kind === "no-dm") {
-            if (!warnedNoDm)
-              host.log.warn("notify lane is off: this bot has no host.dm (rackbops-discord-bot#736)");
-            warnedNoDm = true;
-            return;
-          }
-          if (outcome.kind === "aborted")
-            return;
-          health.lastTickAt = clock.now();
-          const { ran, failed } = outcome.result;
-          if (failed > 0)
-            host.log.warn(`notify lane: ${ran} ran, ${failed} failed`);
-        }
+        run: (signal) => tick("notify", signal)
+      },
+      {
+        name: "poll",
+        run: (signal) => tick("poll", signal)
       }
     ],
     async http(request, info) {
       if (info.path === "/healthz" && (request.method === "GET" || request.method === "HEAD")) {
         return healthResponse(decideHealth(health, clock.now()));
       }
-      return new Response("Not found", { status: 404 });
+      return web(request, info);
     }
   };
 }