@rackbops/plugin-tracker 0.3.0 → 0.4.0

package/README.md

@@ -4,8 +4,10 @@ The task tracker for Rackbops Clerk: the host of [`Rackbops/docket`](https://git
 on a rackbops-discord-bot instance. Plan of record: Rackbops/Tooling
 `research/city-hall-task-tracker.md` (sections 0, 5.1-5.3, 5.5, 5.8, 5.10). This version is the core
 (rackbops-bot-plugins#78), the Discord surface of the first slice (#79) -- reminders by slash
-command, delivered by DM, answered by button, with history -- and the first slice of the web area
-(#80): sign-in by one-time link, my tasks, a task's history, and settings.
+command, delivered by DM, answered by button, with history -- the first slice of the web area
+(#80): sign-in by one-time link, my tasks, a task's history, and settings -- and renewals and
+the price tracker (#81, plan E6): two more types on the notify side, no model, nothing sent to
+city-hall.
 
 ## Commands
 
@@ -17,9 +19,12 @@ as in a server (plan 5.5, item 39).
 | `/allow user` | a tracker admin | Admits a person: they can now `/register`. |
 | `/register [hour] [zone]` | an admitted person | Signs up, or changes the preferred hour (0-23, default 9) and time zone (default `America/New_York`). The reply says an admin can see every task. |
 | `/remind text [when] [repeat]` | a registered person | A reminder by DM. `when` is docket's `parseWhen` grammar (`in 20 minutes`, `tomorrow 9am`, `fri at 17:30`); `repeat` is once (the default), daily, weekly or monthly. A repeating one with no `when` starts today at the preferred hour. |
+| `/renewal name amount currency renews [unit] [every] [lead] [note]` | registered | A subscription, domain, warranty or membership (docket's `renewal`, a `period` schedule). `renews` is the next renewal or expiry date, `YYYY-MM-DD`, today or later; `unit` yearly (the default), monthly, weekly or daily, `every` how many of those; the ask comes `lead` days before (default 7) at the preferred hour, with Keep, Cancel, Renewed and Snooze. If that ask is already past but the date is not, the first ask comes within a minute (a zone or hour change before it fires drops it for the next period's). Keep and Renewed record what was paid; Cancel ends it. |
+| `/price url [name] [hours] [drop] [baseline] [near]` | registered | A price (docket's `price`, a `poll` schedule every `hours`, default 12, at most 168). The page is read once at once, and nothing is created unless a price is found in it; then the first check, within a minute, DMs the starting price, and a drop of `drop` percent or more (default 10) from the `baseline` -- the last (default), first or highest price seen -- DMs the owner once per crossing. `near` is the words just before the price, for a page with no structured price. At most 20 per person. |
 | `/tasks` | registered | Your active tasks and the ones you receive, each with its next run; then your paused ones. |
 | `/task done task` / `/task snooze task [until]` | the task's owner | Answers the task's latest reminder (snooze: an hour, or until `until`). |
-| `/task history task` | the owner, an accepted recipient, or an admin | Every run -- due, status, how it was answered, text replies -- and the task's changes. |
+| `/task decide task choice [amount]` | the renewal's owner | Answers the renewal's latest ask -- keep, cancel or renewed -- with the amount actually paid when it changed (a button cannot carry one). Use it instead of the button, not after it: a run is answered once. |
+| `/task history task` | the owner, an accepted recipient, or an admin | Every run -- due, status, how it was answered, text replies -- and the task's changes; for a renewal, what each period cost and the total; for a price, the last check and the readings with the low and the high. |
 | `/task share task user` | the task's owner | Invites an admitted, registered member who can be DMed: they get one consent DM with accept and decline. |
 | `/task resume task` | the task's owner | Resumes a task paused because a recipient could not be DMed, taking that recipient off it. |
 | `/settings hour hour` | registered | The preferred hour; recurring reminders with no time of their own move to it. |
@@ -107,7 +112,9 @@ The `__Host-` prefix, which would stop that, requires `Path=/` and so cannot be
 | Piece | File | Notes |
 |---|---|---|
 | Store | `src/store.ts`, `src/schema.ts` | docket's `Store` port on `bun:sqlite`, in `<dataDir>/tracker/tracker.sqlite` (WAL). A Discord id belongs to at most one user. Schema versioned by `PRAGMA user_version`; a shipped migration is never edited. `store.test.ts` runs docket's `STORE_CONTRACT` against it. |
-| Notify lane | `src/notify-lane.ts` | docket's `Lanes.tickNotify` on the host tick `notify` (every 60 s), through a view of the store that skips a paused task's due runs. Registers only `reminder` and `renewal`. The execute lane is not ticked. |
+| Notify lane | `src/notify-lane.ts` | docket's `Lanes.tickNotify` on two host ticks, every 60 s, through a view of the store that skips a paused task's due runs: `notify` runs every type but the page readers, `poll` runs only them (`price`) with the Fetch port, so a slow page never holds up a reminder. Registers `reminder`, `renewal` and `price`. The execute lane is not ticked. |
+| Page reads | `src/fetch.ts` | docket's `Fetch` port for `price`: http or https on the default port, no credentials, every resolved address public (no loopback, private, link-local, CGNAT, multicast or reserved range, IPv4 or IPv6), redirects followed by hand and re-checked (at most 5), 15 s including the name lookup, at most 3 MB kept. The body is then rebuilt in linear time (`src/page.ts`) to just what extraction reads -- JSON-LD, meta tags, and the page with every `<` blanked, so `near` still reads text, attributes and script data -- because docket's extraction patterns take quadratic time on a page of unclosed tags. A read the tick's abort cuts short requeues its run instead of counting a miss. A DNS answer that changes between the check and the read is not caught here. |
+| Renewals, prices | `src/tracked.ts`, `src/series.ts`, `src/page.ts` | `/renewal`, `/price` and `/task decide`; the series lines of `/task history`. The series (docket's `series` table, schema 1) holds a renewal's paid amounts and a price's readings. |
 | Delivery | `src/notifier.ts`, `src/claims.ts`, `src/buttons.ts` | docket's `Notifier` over `host.dm`, with the buttons. Each (occurrence, person) is claimed in `delivery_claims` before the DM is sent and settled after; a claim never settled is not resent -- it is logged once, as unconfirmed. |
 | Pause | `src/delivery-health.ts` | The per-person failure count, the pause and the resume. |
 | People | `src/people.ts`, `src/admissions.ts` | Discord id, time zone, preferred hour, admin flag -- in the tracker's store, never usr; who admitted each person and when they registered. `TRACKER_ADMIN_DISCORD_IDS` only ever grants admin. |
@@ -130,7 +137,8 @@ The `__Host-` prefix, which would stop that, requires `Path=/` and so cannot be
 - The rest of the web area (E5): editing tasks, the admin view, lifting a decline block, forget-me,
   and the JSON task API. Until forget-me and the admin view exist, nobody can be taken off the
   tracker, so a web session ends only by sign-out, expiry, or the membership re-check. Discord OAuth2 as a second sign-in method, if chosen (plan item 41).
-- The `Fetch` port (then `price` is registered) and the city-hall Executor adapter (the execute lane).
+- The city-hall Executor adapter (the execute lane).
+- Editing a renewal or a price tracker after it is made (for now: `/task done`, or cancel, and make it again); a free-form pattern for `price` (`near` is the safe subset: a user's regular expression run on a large page could hang the bot).
 - An optional Discord-role gate (plan 5.5), and showing unconfirmed deliveries to admins anywhere but the log.
 
 docket-core, docket-types and `@rackbops/styles` are `devDependencies`: `bun build` bundles them

package/dist/plugin.js

@@ -67,6 +67,11 @@ async function visibleHistory(store, actor, taskId) {
     return null;
   return store.listTaskEvents(taskId);
 }
+async function visibleSeries(store, actor, taskId, filter) {
+  if (!await visibleTask(store, actor, taskId))
+    return null;
+  return store.listSeries(taskId, filter);
+}
 
 // node_modules/@rackbops/docket-core/dist/capabilities.js
 var CAPABILITIES = ["notify", "graph:write", "discord:post", "github:issue"];
@@ -1545,13 +1550,13 @@ var price = defineTaskType({
     ]
   },
   async run(ctx) {
-    const { fetch } = ctx.ports;
-    if (!fetch)
+    const { fetch: fetch2 } = ctx.ports;
+    if (!fetch2)
       throw new Error("the price type needs the Fetch port; the host configured none");
     const state = stateOf(ctx.state);
     let body;
     try {
-      const response = await fetch.get(ctx.config.url);
+      const response = await fetch2.get(ctx.config.url);
       if (response.status !== 200)
         return miss(ctx, state, `HTTP ${response.status}`);
       body = response.body;
@@ -2063,6 +2068,285 @@ function resumedNotice(r) {
   return `I could not DM you ${PAUSE_AFTER} times in a row, so your reminders were paused. ${what} ` + "Check that you accept DMs from members of a server we share, or they will pause again.";
 }
 
+// plugins/tracker/src/fetch.ts
+import { lookup } from "dns/promises";
+import { isIP } from "net";
+
+// plugins/tracker/src/page.ts
+var MAX_BLOCKS = 20;
+var MAX_METAS = 300;
+var MAX_TAG = 1000;
+var escapeLt = (s) => s.replaceAll("<", "\\u003c");
+function jsonBody(body) {
+  const trimmed = body.trim();
+  if (!trimmed.startsWith("{") && !trimmed.startsWith("["))
+    return null;
+  try {
+    return escapeLt(JSON.stringify(JSON.parse(trimmed)));
+  } catch {
+    return null;
+  }
+}
+function pageForExtraction(body) {
+  const json = jsonBody(body);
+  if (json !== null)
+    return json;
+  const lower = body.toLowerCase();
+  const blocks = [];
+  const metas = [];
+  const closes = new Map;
+  const nextClose = (closing, from) => {
+    const known = closes.get(closing);
+    if (known !== undefined && (known < 0 || known >= from))
+      return known;
+    const found = lower.indexOf(closing, from);
+    closes.set(closing, found);
+    return found;
+  };
+  let at = 0;
+  while (at < body.length) {
+    let lt = body.indexOf("<", at);
+    if (lt < 0)
+      break;
+    const gt = body.indexOf(">", lt);
+    if (gt < 0)
+      break;
+    lt = body.lastIndexOf("<", gt);
+    const tag = body.slice(lt, gt + 1);
+    const tagLower = lower.slice(lt, gt + 1);
+    at = gt + 1;
+    if (tagLower.startsWith("<script") || tagLower.startsWith("<style")) {
+      const closing = tagLower.startsWith("<script") ? "</script" : "</style";
+      const end = nextClose(closing, at);
+      if (end < 0)
+        continue;
+      if (closing === "</script" && blocks.length < MAX_BLOCKS && /type\s*=\s*["']?application\/ld\+json/.test(tagLower.slice(0, MAX_TAG))) {
+        blocks.push(`<script type="application/ld+json">${escapeLt(body.slice(at, end))}</script>`);
+      }
+      at = end;
+    } else if (tagLower.startsWith("<meta") && tag.length <= MAX_TAG && metas.length < MAX_METAS) {
+      metas.push(tag);
+    }
+  }
+  return [...blocks, ...metas, body.replaceAll("<", " ")].join(`
+`);
+}
+
+// plugins/tracker/src/fetch.ts
+var TIMEOUT_MS = 15000;
+var MAX_BYTES = 3 * 1024 * 1024;
+var MAX_REDIRECTS = 5;
+var USER_AGENT = "Mozilla/5.0 (compatible; RackbopsClerk/1.0; price tracker)";
+
+class FetchRefusedError extends Error {
+  name = "FetchRefusedError";
+}
+var systemResolve = async (host) => (await lookup(host, { all: true, verbatim: true })).map((a) => a.address);
+function v4Parts(ip) {
+  const parts = ip.split(".").map(Number);
+  return parts.length === 4 && parts.every((p) => Number.isInteger(p) && p >= 0 && p <= 255) ? parts : null;
+}
+function isPublicV4(ip) {
+  const p = v4Parts(ip);
+  if (!p)
+    return false;
+  const [a = 0, b = 0, c = 0] = p;
+  if (a === 0 || a === 10 || a === 127 || a >= 224)
+    return false;
+  if (a === 100 && b >= 64 && b <= 127)
+    return false;
+  if (a === 169 && b === 254)
+    return false;
+  if (a === 172 && b >= 16 && b <= 31)
+    return false;
+  if (a === 192 && b === 168)
+    return false;
+  if (a === 192 && b === 0 && (c === 0 || c === 2))
+    return false;
+  if (a === 198 && (b === 18 || b === 19))
+    return false;
+  if (a === 198 && b === 51 && c === 100)
+    return false;
+  if (a === 203 && b === 0 && c === 113)
+    return false;
+  return true;
+}
+function v6Groups(ip) {
+  let text = ip.toLowerCase();
+  const zone = text.indexOf("%");
+  if (zone >= 0)
+    text = text.slice(0, zone);
+  const lastColon = text.lastIndexOf(":");
+  if (text.slice(lastColon + 1).includes(".")) {
+    const v4 = v4Parts(text.slice(lastColon + 1));
+    if (!v4)
+      return null;
+    const hex = (hi, lo) => (hi << 8 | lo).toString(16);
+    text = `${text.slice(0, lastColon + 1)}${hex(v4[0] ?? 0, v4[1] ?? 0)}:${hex(v4[2] ?? 0, v4[3] ?? 0)}`;
+  }
+  const halves = text.split("::");
+  if (halves.length > 2)
+    return null;
+  const parse = (s) => s === "" ? [] : s.split(":").map((g) => /^[0-9a-f]{1,4}$/.test(g) ? Number.parseInt(g, 16) : Number.NaN);
+  const head = parse(halves[0] ?? "");
+  const rest = halves.length === 2 ? parse(halves[1] ?? "") : [];
+  const known = head.length + rest.length;
+  if (halves.length === 1 && known !== 8)
+    return null;
+  if (known > 8)
+    return null;
+  const groups = [...head, ...new Array(8 - known).fill(0), ...rest];
+  return groups.every((g) => Number.isInteger(g) && g >= 0 && g <= 65535) ? groups : null;
+}
+function isPublicV6(ip) {
+  const g = v6Groups(ip);
+  if (!g)
+    return false;
+  const [g0 = 0, g1 = 0, g2 = 0, g3 = 0, g4 = 0, g5 = 0, g6 = 0, g7 = 0] = g;
+  const embedded = `${g6 >> 8}.${g6 & 255}.${g7 >> 8}.${g7 & 255}`;
+  if (g0 === 0 && g1 === 0 && g2 === 0 && g3 === 0 && g4 === 0) {
+    return g5 === 65535 ? isPublicV4(embedded) : false;
+  }
+  if (g0 === 100 && g1 === 65435 && g2 === 0 && g3 === 0 && g4 === 0 && g5 === 0)
+    return isPublicV4(embedded);
+  if ((g0 & 65024) === 64512)
+    return false;
+  if ((g0 & 65472) === 65152)
+    return false;
+  if ((g0 & 65280) === 65280)
+    return false;
+  if (g0 === 8193 && g1 === 3512)
+    return false;
+  if (g0 === 8193 && g1 < 512)
+    return false;
+  if (g0 === 8194)
+    return false;
+  return (g0 & 57344) === 8192;
+}
+function isPublicAddress(ip) {
+  const version = isIP(ip);
+  if (version === 4)
+    return isPublicV4(ip);
+  if (version === 6)
+    return isPublicV6(ip);
+  return false;
+}
+function urlProblem(raw) {
+  let url;
+  try {
+    url = new URL(raw);
+  } catch {
+    return "That is not a web address.";
+  }
+  if (url.protocol !== "https:" && url.protocol !== "http:")
+    return "Only http and https pages can be tracked.";
+  if (url.username !== "" || url.password !== "")
+    return "A page address with a user name or password in it cannot be tracked.";
+  if (url.port !== "")
+    return "Only pages on the standard web ports can be tracked.";
+  const host = url.hostname.replace(/^\[|\]$/g, "");
+  if (host === "" || host === "localhost" || host.endsWith(".localhost") || host.endsWith(".local") || host.endsWith(".internal")) {
+    return "Only public web pages can be tracked.";
+  }
+  if (isIP(host) !== 0 && !isPublicAddress(host))
+    return "Only public web pages can be tracked.";
+  return null;
+}
+function orAbort(p, signal) {
+  if (signal.aborted)
+    return Promise.reject(signal.reason);
+  return new Promise((resolve, reject) => {
+    const onAbort = () => reject(signal.reason);
+    signal.addEventListener("abort", onAbort, { once: true });
+    p.then((v) => {
+      signal.removeEventListener("abort", onAbort);
+      resolve(v);
+    }, (e) => {
+      signal.removeEventListener("abort", onAbort);
+      reject(e);
+    });
+  });
+}
+async function checkHost(url, resolve, signal) {
+  const problem = urlProblem(url.href);
+  if (problem)
+    throw new FetchRefusedError(problem);
+  const host = url.hostname.replace(/^\[|\]$/g, "");
+  let addresses;
+  if (isIP(host) !== 0)
+    addresses = [host];
+  else {
+    try {
+      addresses = await orAbort(resolve(host), signal);
+    } catch {
+      signal.throwIfAborted();
+      throw new FetchRefusedError(`the name ${host} did not resolve`);
+    }
+  }
+  if (addresses.length === 0)
+    throw new FetchRefusedError(`the name ${host} did not resolve`);
+  if (!addresses.every(isPublicAddress))
+    throw new FetchRefusedError(`${host} is not on the public internet`);
+}
+async function readCapped(response, max) {
+  if (!response.body)
+    return "";
+  const reader = response.body.getReader();
+  const chunks = [];
+  let size = 0;
+  while (size < max) {
+    const { done, value } = await reader.read();
+    if (done)
+      break;
+    const room = max - size;
+    chunks.push(value.byteLength > room ? value.subarray(0, room) : value);
+    size += Math.min(value.byteLength, room);
+  }
+  await reader.cancel().catch(() => {});
+  const all = new Uint8Array(size);
+  let at = 0;
+  for (const c of chunks) {
+    all.set(c, at);
+    at += c.byteLength;
+  }
+  return new TextDecoder().decode(all);
+}
+function createPageFetch(o = {}) {
+  const resolve = o.resolve ?? systemResolve;
+  const fetchImpl = o.fetchImpl ?? fetch;
+  const timeoutMs = o.timeoutMs ?? TIMEOUT_MS;
+  const maxBytes = o.maxBytes ?? MAX_BYTES;
+  return {
+    async get(raw, headers = {}) {
+      const signal = o.signal ? AbortSignal.any([o.signal, AbortSignal.timeout(timeoutMs)]) : AbortSignal.timeout(timeoutMs);
+      let url = new URL(raw);
+      for (let hop = 0;; hop++) {
+        await checkHost(url, resolve, signal);
+        signal.throwIfAborted();
+        const response = await fetchImpl(url.href, {
+          method: "GET",
+          redirect: "manual",
+          signal,
+          headers: { "user-agent": USER_AGENT, accept: "text/html,application/xhtml+xml,application/json;q=0.9,*/*;q=0.8", ...headers }
+        });
+        const location = response.headers.get("location");
+        if (response.status >= 300 && response.status < 400 && location) {
+          await response.body?.cancel().catch(() => {});
+          if (hop >= MAX_REDIRECTS)
+            throw new FetchRefusedError(`more than ${MAX_REDIRECTS} redirects`);
+          url = new URL(location, url);
+          continue;
+        }
+        const out = {};
+        response.headers.forEach((value, key) => {
+          out[key] = value;
+        });
+        return { status: response.status, body: pageForExtraction(await readCapped(response, maxBytes)), headers: out };
+      }
+    }
+  };
+}
+
 // plugins/tracker/src/discord-common.ts
 import { MessageFlags } from "discord.js";
 var STARTING = "The tracker is starting up; try again in a minute.";
@@ -2392,95 +2676,6 @@ async function resumeTask(d, user, taskId) {
   return `Resumed \`${task.id}\`${without}.`;
 }
 
-// plugins/tracker/src/history.ts
-var HISTORY_RUNS = 10;
-var HISTORY_CHANGES = 5;
-function replyText(r) {
-  if (r.kind === "text") {
-    const text = typeof r.payload === "object" && r.payload !== null ? String(r.payload.text ?? "") : "";
-    return `replied "${clip(text, 80)}"`;
-  }
-  if (r.kind === "decision")
-    return `chose ${String(r.payload?.choice ?? "?")}`;
-  return r.kind === "opt_out" ? "opted out" : r.kind;
-}
-function runView(o, replies, people, viewer, now) {
-  return {
-    due: formatInstant(o.dueAt, viewer.timeZone, now),
-    status: o.status,
-    late: o.late,
-    error: o.status === "failed" && o.error ? clip(o.error, 120) : null,
-    answers: replies.filter((r) => r.occurrenceId === o.id).map((r) => `${people.get(r.userId)?.displayName ?? r.userId} ${replyText(r)}`)
-  };
-}
-function changeView(e, viewer, now) {
-  return {
-    at: formatInstant(e.at, viewer.timeZone, now),
-    kind: e.kind.replaceAll("_", " "),
-    detail: e.kind === "paused" || e.kind === "resumed" ? e.detail : null
-  };
-}
-function runLine(v) {
-  const late = v.late ? " (late)" : "";
-  const error = v.error ? `: ${v.error}` : "";
-  const answered = v.answers.length > 0 ? `; ${v.answers.join(", ")}` : "";
-  return `- ${v.due} -- ${v.status}${late}${error}${answered}`;
-}
-function changeLine(v) {
-  return `- ${v.at} ${v.kind}${v.detail !== null ? `: ${v.detail}` : ""}`;
-}
-async function loadHistory(d, user, taskId) {
-  const actor = { userId: user.id, admin: user.admin };
-  const task = await visibleTask(d.store, actor, taskId.trim());
-  if (!task)
-    return null;
-  const now = d.clock.now();
-  const all = await visibleOccurrences(d.store, actor, task.id) ?? [];
-  const upcoming = (o) => o.status === "queued" && Date.parse(o.dueAt) > now.getTime();
-  const runs = all.filter((o) => !upcoming(o));
-  const next = all.find(upcoming);
-  const replies = await visibleReplies(d.store, actor, task.id) ?? [];
-  const changes = await visibleHistory(d.store, actor, task.id) ?? [];
-  const people = new Map;
-  for (const r of replies) {
-    if (!people.has(r.userId)) {
-      const u = await d.store.getUser(r.userId);
-      if (u)
-        people.set(u.id, u);
-    }
-  }
-  const owner = task.ownerId === user.id ? user : await d.store.getUser(task.ownerId);
-  return {
-    task,
-    cadence: task.schedule && owner ? describeSchedule(task.schedule, owner, user.timeZone, now) : "no schedule",
-    next: next ? formatInstant(next.dueAt, user.timeZone, now) : null,
-    runs: runs.slice(-HISTORY_RUNS).map((o) => runView(o, replies, people, user, now)),
-    earlierRuns: Math.max(0, runs.length - HISTORY_RUNS),
-    changes: changes.slice(-HISTORY_CHANGES).map((e) => changeView(e, user, now)),
-    earlierChanges: Math.max(0, changes.length - HISTORY_CHANGES)
-  };
-}
-async function taskHistory(d, user, taskId) {
-  const h = await loadHistory(d, user, taskId);
-  if (!h)
-    return NO_SUCH_TASK;
-  const { task } = h;
-  const lines = [`\`${task.id}\` ${task.title} -- ${task.type}, ${task.status}, ${h.cadence}`];
-  lines.push(h.next ? `Next: ${h.next}` : "Next: nothing scheduled");
-  lines.push(h.runs.length === 0 ? "Runs: none yet" : "Runs:");
-  if (h.earlierRuns > 0)
-    lines.push(`- (${h.earlierRuns} earlier)`);
-  for (const v of h.runs)
-    lines.push(runLine(v));
-  lines.push("Changes:");
-  if (h.earlierChanges > 0)
-    lines.push(`- (${h.earlierChanges} earlier)`);
-  for (const c of h.changes)
-    lines.push(changeLine(c));
-  return clip(lines.join(`
-`));
-}
-
 // plugins/tracker/src/interactions.ts
 import {
   ActionRowBuilder,
@@ -2862,6 +3057,345 @@ ${body}` : body;
   };
 }
 
+// plugins/tracker/src/history.ts
+var HISTORY_RUNS = 10;
+var HISTORY_CHANGES = 5;
+function replyText(r) {
+  if (r.kind === "text") {
+    const text = typeof r.payload === "object" && r.payload !== null ? String(r.payload.text ?? "") : "";
+    return `replied "${clip(text, 80)}"`;
+  }
+  if (r.kind === "decision")
+    return `chose ${String(r.payload?.choice ?? "?")}`;
+  return r.kind === "opt_out" ? "opted out" : r.kind;
+}
+function runView(o, replies, people, viewer, now) {
+  return {
+    due: formatInstant(o.dueAt, viewer.timeZone, now),
+    status: o.status,
+    late: o.late,
+    error: o.status === "failed" && o.error ? clip(o.error, 120) : null,
+    answers: replies.filter((r) => r.occurrenceId === o.id).map((r) => `${people.get(r.userId)?.displayName ?? r.userId} ${replyText(r)}`)
+  };
+}
+function changeView(e, viewer, now) {
+  return {
+    at: formatInstant(e.at, viewer.timeZone, now),
+    kind: e.kind.replaceAll("_", " "),
+    detail: e.kind === "paused" || e.kind === "resumed" ? e.detail : null
+  };
+}
+function runLine(v) {
+  const late = v.late ? " (late)" : "";
+  const error = v.error ? `: ${v.error}` : "";
+  const answered = v.answers.length > 0 ? `; ${v.answers.join(", ")}` : "";
+  return `- ${v.due} -- ${v.status}${late}${error}${answered}`;
+}
+function changeLine(v) {
+  return `- ${v.at} ${v.kind}${v.detail !== null ? `: ${v.detail}` : ""}`;
+}
+async function loadHistory(d, user, taskId) {
+  const actor = { userId: user.id, admin: user.admin };
+  const task = await visibleTask(d.store, actor, taskId.trim());
+  if (!task)
+    return null;
+  const now = d.clock.now();
+  const all = await visibleOccurrences(d.store, actor, task.id) ?? [];
+  const upcoming = (o) => o.status === "queued" && Date.parse(o.dueAt) > now.getTime();
+  const runs = all.filter((o) => !upcoming(o));
+  const next = all.find(upcoming);
+  const replies = await visibleReplies(d.store, actor, task.id) ?? [];
+  const changes = await visibleHistory(d.store, actor, task.id) ?? [];
+  const people = new Map;
+  for (const r of replies) {
+    if (!people.has(r.userId)) {
+      const u = await d.store.getUser(r.userId);
+      if (u)
+        people.set(u.id, u);
+    }
+  }
+  const owner = task.ownerId === user.id ? user : await d.store.getUser(task.ownerId);
+  return {
+    task,
+    cadence: task.schedule && owner ? describeSchedule(task.schedule, owner, user.timeZone, now) : "no schedule",
+    next: next ? formatInstant(next.dueAt, user.timeZone, now) : null,
+    runs: runs.slice(-HISTORY_RUNS).map((o) => runView(o, replies, people, user, now)),
+    earlierRuns: Math.max(0, runs.length - HISTORY_RUNS),
+    changes: changes.slice(-HISTORY_CHANGES).map((e) => changeView(e, user, now)),
+    earlierChanges: Math.max(0, changes.length - HISTORY_CHANGES)
+  };
+}
+async function taskHistory(d, user, taskId) {
+  const h = await loadHistory(d, user, taskId);
+  if (!h)
+    return NO_SUCH_TASK;
+  const { task } = h;
+  const lines = [`\`${task.id}\` ${task.title} -- ${task.type}, ${task.status}, ${h.cadence}`];
+  lines.push(h.next ? `Next: ${h.next}` : "Next: nothing scheduled");
+  lines.push(h.runs.length === 0 ? "Runs: none yet" : "Runs:");
+  if (h.earlierRuns > 0)
+    lines.push(`- (${h.earlierRuns} earlier)`);
+  for (const v of h.runs)
+    lines.push(runLine(v));
+  lines.push("Changes:");
+  if (h.earlierChanges > 0)
+    lines.push(`- (${h.earlierChanges} earlier)`);
+  for (const c of h.changes)
+    lines.push(changeLine(c));
+  return clip(lines.join(`
+`));
+}
+
+// plugins/tracker/src/series.ts
+var SERIES_SHOWN = 8;
+function pointLine(p, viewer, now) {
+  const note = p.note && p.note !== "observed" ? ` (${p.note})` : "";
+  return `- ${formatInstant(p.at, viewer.timeZone, now)} ${money(p.value, p.unit ?? "")}${note}`;
+}
+async function seriesLines(d, user, taskId) {
+  const actor = { userId: user.id, admin: user.admin };
+  const task = await visibleTask(d.store, actor, taskId.trim());
+  if (!task || task.type !== "renewal" && task.type !== "price")
+    return [];
+  const points = await visibleSeries(d.store, actor, task.id) ?? [];
+  const now = d.clock.now();
+  const lines = [];
+  if (task.type === "renewal") {
+    const paid = points.filter((p) => p.note === "keep" || p.note === "renewed");
+    if (paid.length === 0)
+      return ["Paid: nothing recorded yet"];
+    const unit = paid.at(-1)?.unit ?? "";
+    const total = paid.reduce((sum, p) => sum + p.value, 0);
+    lines.push(`Paid: ${paid.length} period${paid.length === 1 ? "" : "s"}, ${money(total, unit)} in all`);
+    for (const p of paid.slice(-SERIES_SHOWN))
+      lines.push(pointLine(p, user, now));
+    return lines;
+  }
+  const runs = await visibleOccurrences(d.store, actor, task.id) ?? [];
+  const checked = runs.filter((o) => o.status !== "queued" && o.summary).at(-1);
+  if (checked?.summary)
+    lines.push(`Last check: ${clip(checked.summary, 160)}`);
+  if (points.length === 0) {
+    lines.push("Prices: none read yet");
+    return lines;
+  }
+  const unit = points.at(-1)?.unit ?? "";
+  const values = points.map((p) => p.value);
+  lines.push(`Prices: ${points.length} read, low ${money(Math.min(...values), unit)}, high ${money(Math.max(...values), unit)}`);
+  for (const p of points.slice(-SERIES_SHOWN))
+    lines.push(pointLine(p, user, now));
+  return lines;
+}
+async function historyWithSeries(d, user, taskId) {
+  const history = await taskHistory(d, user, taskId);
+  const series = await seriesLines(d, user, taskId);
+  if (series.length === 0)
+    return history;
+  const lines = history.split(`
+`);
+  const block = series.join(`
+`);
+  const rest = lines.slice(2).join(`
+`);
+  const head = lines.slice(0, 2).join(`
+`);
+  return clip(`${head}
+${block}
+${clip(rest, Math.max(3, MAX_ANSWER - head.length - block.length - 2))}`);
+}
+
+// plugins/tracker/src/tracked.ts
+var MAX_TITLE2 = 100;
+var MAX_NOTE = 300;
+var MAX_NEAR = 100;
+var MAX_PRICE_TASKS = 20;
+var DEFAULT_POLL_HOURS = 12;
+var MAX_POLL_HOURS = 168;
+var DEFAULT_LEAD_DAYS = 7;
+var MAX_LEAD_DAYS = 365;
+var MAX_EVERY = 100;
+function plural2(n, word) {
+  return `${n} ${word}${n === 1 ? "" : "s"}`;
+}
+async function addRenewal(d, user, input) {
+  const type = d.types.renewal;
+  if (!type)
+    return "Renewals are not available on this bot.";
+  const name = input.name.trim();
+  if (name.length === 0)
+    return "Say what renews: a subscription, a domain, a warranty.";
+  if (name.length > MAX_TITLE2)
+    return `That name is longer than ${MAX_TITLE2} characters.`;
+  if (!Number.isFinite(input.amount) || input.amount < 0)
+    return "The amount has to be zero or more.";
+  const currency = input.currency.trim().toUpperCase();
+  if (!/^[A-Z]{3}$/.test(currency))
+    return "The currency is a three-letter code, such as USD or EUR.";
+  const note = input.note?.trim() ?? "";
+  if (note.length > MAX_NOTE)
+    return `The note is longer than ${MAX_NOTE} characters.`;
+  const every = input.every ?? 1;
+  if (!Number.isInteger(every) || every < 1 || every > MAX_EVERY)
+    return `\`every\` is a whole number from 1 to ${MAX_EVERY}.`;
+  const lead = input.lead ?? DEFAULT_LEAD_DAYS;
+  if (!Number.isInteger(lead) || lead < 0 || lead > MAX_LEAD_DAYS)
+    return `\`lead\` is a whole number of days from 0 to ${MAX_LEAD_DAYS}.`;
+  const renews = input.renews.trim();
+  const now = d.clock.now();
+  const days = /^\d{4}-\d{2}-\d{2}$/.test(renews) ? daysUntil(renews, now, user.timeZone) : null;
+  if (days === null)
+    return "Give the date as YYYY-MM-DD, for example 2026-12-01.";
+  if (days < 0)
+    return "That date has passed: give the next renewal or expiry date.";
+  const schedule = { kind: "period", every, unit: input.unit ?? "year", anchor: renews, leadDays: lead };
+  const config = { amount: input.amount, currency, ...note ? { note } : {} };
+  const actor = { userId: user.id, admin: user.admin };
+  let created;
+  try {
+    created = await createTask(d.store, actor, user, { type, title: name, config, schedule }, now);
+  } catch (err) {
+    if (err instanceof ScheduleError)
+      return `That schedule does not work: ${err.message}.`;
+    throw err;
+  }
+  const { task } = created;
+  let next = created.next;
+  const first = nextDue(schedule, new Date(0), { zone: user.timeZone, preferredHour: user.preferredHour });
+  if (first && first.getTime() <= now.getTime()) {
+    next = await d.store.createOccurrence({
+      taskId: task.id,
+      lane: task.lane,
+      dueAt: first.toISOString(),
+      dedupeKey: scheduledKey(task.id, first),
+      at: now.toISOString()
+    });
+  }
+  const cadence = describeSchedule(schedule, user, user.timeZone, now);
+  const when = days === 0 ? "today" : `in ${plural2(days, "day")}`;
+  const ask = !next ? "never (that schedule has no next date)" : Date.parse(next.dueAt) <= now.getTime() ? `in the next minute (it renews ${when})` : formatInstant(next.dueAt, user.timeZone, now);
+  return clip([
+    `Renewal \`${task.id}\` set: ${name}, ${money(input.amount, currency)}, ${cadence}.`,
+    `First ask: ${ask}. Each ask has Keep, Cancel and Renewed buttons; paid a different amount? Answer with \`/task decide\` instead of a button.`
+  ].join(`
+`));
+}
+function nearPattern(near) {
+  const literal = near.trim().replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  return `${literal}[^0-9]{0,40}([0-9][0-9.,]{0,15})`;
+}
+async function preview(d, v) {
+  if (!d.fetch)
+    return { ok: false, error: "Price tracking is not available on this bot." };
+  try {
+    const response = await d.fetch.get(v.url);
+    if (response.status !== 200)
+      return { ok: false, error: `That page answered HTTP ${response.status}, so there is no price to track.` };
+    const found = extractPrice(response.body, v.config.pattern);
+    if (!found) {
+      return {
+        ok: false,
+        error: v.config.pattern ? "I found no price after that `near` text on the page. Check the words as the page shows them." : "I found no price on that page. Some shops show it only to a browser; `near` (the words just before the price) can help."
+      };
+    }
+    return { ok: true, text: money(found.value, found.currency ?? "") };
+  } catch (err) {
+    if (err instanceof FetchRefusedError)
+      return { ok: false, error: `I cannot read that page: ${err.message}.` };
+    return { ok: false, error: "I could not read that page just now; try again later." };
+  }
+}
+async function ownedPriceTasks(d, user) {
+  const active = await d.store.listTasks({ ownerId: user.id, status: "active" });
+  const paused = await d.store.listTasks({ ownerId: user.id, status: "paused" });
+  return [...active, ...paused].filter((t) => t.type === "price").length;
+}
+function titleFor(url) {
+  const u = new URL(url);
+  return clip(`${u.hostname}${u.pathname === "/" ? "" : u.pathname}`, MAX_TITLE2);
+}
+async function trackPrice(d, user, input) {
+  if (!d.types.price || !d.fetch)
+    return "Price tracking is not available on this bot.";
+  const url = input.url.trim();
+  const problem = urlProblem(url);
+  if (problem)
+    return problem;
+  const hours = input.hours ?? DEFAULT_POLL_HOURS;
+  if (!Number.isInteger(hours) || hours < 1 || hours > MAX_POLL_HOURS)
+    return `\`hours\` is a whole number from 1 to ${MAX_POLL_HOURS}.`;
+  const drop = input.drop ?? DEFAULT_DROP_PERCENT;
+  if (!Number.isFinite(drop) || drop < 1 || drop > 90)
+    return "`drop` is a percentage from 1 to 90.";
+  const baseline = input.baseline ?? DEFAULT_BASELINE;
+  if (!BASELINE_RULES.includes(baseline))
+    return "`baseline` is first, last or peak.";
+  const near = input.near?.trim() ?? "";
+  if (near.length > MAX_NEAR)
+    return `\`near\` is longer than ${MAX_NEAR} characters.`;
+  const name = input.name?.trim() ?? "";
+  if (name.length > MAX_TITLE2)
+    return `That name is longer than ${MAX_TITLE2} characters.`;
+  if (await ownedPriceTasks(d, user) >= MAX_PRICE_TASKS) {
+    return `You already track ${MAX_PRICE_TASKS} prices, the most one person may. Stop one with \`/task done\` first.`;
+  }
+  const v = {
+    url,
+    title: name || titleFor(url),
+    hours,
+    config: { url, dropPercent: drop, baseline, ...near ? { pattern: nearPattern(near) } : {} }
+  };
+  return {
+    outside: () => preview(d, v),
+    finish: (result) => finishPrice(d, user, v, result)
+  };
+}
+async function finishPrice(d, user, v, seen) {
+  if (!seen.ok)
+    return seen.error;
+  const type = d.types.price;
+  if (!type)
+    return "Price tracking is not available on this bot.";
+  if (await ownedPriceTasks(d, user) >= MAX_PRICE_TASKS) {
+    return `You already track ${MAX_PRICE_TASKS} prices, the most one person may. Stop one with \`/task done\` first.`;
+  }
+  const now = d.clock.now();
+  const schedule = { kind: "poll", every: v.hours, unit: "hour", start: now.toISOString() };
+  const actor = { userId: user.id, admin: user.admin };
+  const { task } = await createTask(d.store, actor, user, { type, title: v.title, config: v.config, schedule }, now);
+  const rule = v.config.baseline ?? DEFAULT_BASELINE;
+  return clip([
+    `Tracking \`${task.id}\`: ${v.title}. I read ${seen.text} just now.`,
+    `I check every ${plural2(v.hours, "hour")} and DM you when it drops ${v.config.dropPercent}% or more from the ${rule} price seen; the first check, within a minute, DMs the starting price. \`/task done ${task.id}\` stops it.`
+  ].join(`
+`));
+}
+async function decideRenewal(d, user, input) {
+  const task = await visibleTask(d.store, { userId: user.id, admin: false }, input.taskId.trim());
+  if (!task || task.ownerId !== user.id)
+    return NO_SUCH_TASK;
+  if (task.type !== "renewal")
+    return `\`/task decide\` answers a renewal; \`${task.id}\` is a ${task.type}.`;
+  if (input.amount !== undefined && (!Number.isFinite(input.amount) || input.amount < 0))
+    return "The amount has to be zero or more.";
+  const fired = (await d.store.listOccurrences({ taskId: task.id })).filter((o) => o.status === "running" || o.status === "done" || o.status === "failed");
+  const latest = fired.at(-1);
+  if (!latest)
+    return "That renewal has no ask waiting for an answer yet.";
+  const payload = input.amount === undefined ? input.choice : { choice: input.choice, amount: input.amount };
+  try {
+    await replyLanes(d).reply({ taskId: task.id, occurrenceId: latest.id, userId: user.id, kind: "decision", payload });
+  } catch (err) {
+    if (err instanceof ReplyRefusedError)
+      return err.message;
+    throw err;
+  }
+  if (input.choice === "cancel")
+    return `Cancelled: \`${task.id}\` ${task.title} will not ask again.`;
+  const currency = task.config.currency ?? "";
+  const paid = input.amount !== undefined ? ` at ${money(input.amount, currency)}` : "";
+  return `Recorded: ${input.choice}${paid}.`;
+}
+
 // plugins/tracker/src/web/secrets.ts
 import { createHash, randomBytes, timingSafeEqual } from "crypto";
 function randomToken() {
@@ -3006,6 +3540,45 @@ ${body}` : body);
         });
       })
     },
+    {
+      name: "renewal",
+      build: (b) => b.setDescription("Track a subscription, domain or warranty: I ask before each renewal").addStringOption((o) => o.setName("name").setDescription("What renews, e.g. Netflix").setRequired(true).setMaxLength(100)).addNumberOption((o) => o.setName("amount").setDescription("What one period costs").setRequired(true).setMinValue(0)).addStringOption((o) => o.setName("currency").setDescription("Currency code, e.g. USD").setRequired(true).setMinLength(3).setMaxLength(3)).addStringOption((o) => o.setName("renews").setDescription("The next renewal or expiry date, YYYY-MM-DD").setRequired(true).setMaxLength(10)).addStringOption((o) => o.setName("unit").setDescription("How it renews (default: yearly)").addChoices({ name: "yearly", value: "year" }, { name: "monthly", value: "month" }, { name: "weekly", value: "week" }, { name: "daily", value: "day" })).addIntegerOption((o) => o.setName("every").setDescription("Every how many of those, e.g. 2 for every two years (default 1)").setMinValue(1).setMaxValue(MAX_EVERY)).addIntegerOption((o) => o.setName("lead").setDescription(`Days before the date to ask (default ${DEFAULT_LEAD_DAYS})`).setMinValue(0).setMaxValue(MAX_LEAD_DAYS)).addStringOption((o) => o.setName("note").setDescription("Carried on every ask: where to cancel, which account").setMaxLength(MAX_NOTE)),
+      handle: (interaction) => run(interaction, "registered", (d, user) => {
+        const every = interaction.options.getInteger("every");
+        const lead = interaction.options.getInteger("lead");
+        const unit = interaction.options.getString("unit");
+        const note = interaction.options.getString("note");
+        return addRenewal(d, user, {
+          name: interaction.options.getString("name", true),
+          amount: interaction.options.getNumber("amount", true),
+          currency: interaction.options.getString("currency", true),
+          renews: interaction.options.getString("renews", true),
+          ...every !== null ? { every } : {},
+          ...lead !== null ? { lead } : {},
+          ...unit !== null ? { unit } : {},
+          ...note !== null ? { note } : {}
+        });
+      })
+    },
+    {
+      name: "price",
+      build: (b) => b.setDescription("Track a product's price: I DM you when it drops").addStringOption((o) => o.setName("url").setDescription("The product page").setRequired(true).setMaxLength(1000)).addStringOption((o) => o.setName("name").setDescription("What to call it (default: the page address)").setMaxLength(100)).addIntegerOption((o) => o.setName("hours").setDescription(`Hours between checks (default ${DEFAULT_POLL_HOURS})`).setMinValue(1).setMaxValue(MAX_POLL_HOURS)).addNumberOption((o) => o.setName("drop").setDescription("Alert on a drop of at least this percent (default 10)").setMinValue(1).setMaxValue(90)).addStringOption((o) => o.setName("baseline").setDescription("Measure the drop from which price seen (default: the last)").addChoices({ name: "the last", value: "last" }, { name: "the first", value: "first" }, { name: "the highest", value: "peak" })).addStringOption((o) => o.setName("near").setDescription("The words just before the price, if I cannot find it on my own").setMaxLength(MAX_NEAR)),
+      handle: (interaction) => run(interaction, "registered", (d, user) => {
+        const name = interaction.options.getString("name");
+        const hours = interaction.options.getInteger("hours");
+        const drop = interaction.options.getNumber("drop");
+        const baseline = interaction.options.getString("baseline");
+        const near = interaction.options.getString("near");
+        return trackPrice(d, user, {
+          url: interaction.options.getString("url", true),
+          ...name !== null ? { name } : {},
+          ...hours !== null ? { hours } : {},
+          ...drop !== null ? { drop } : {},
+          ...baseline !== null ? { baseline } : {},
+          ...near !== null ? { near } : {}
+        });
+      })
+    },
     {
       name: "tasks",
       build: (b) => b.setDescription("List your tasks and when each is next due"),
@@ -3013,7 +3586,7 @@ ${body}` : body);
     },
     {
       name: "task",
-      build: (b) => b.setDescription("Answer, look back at, or share one of your tasks").addSubcommand((s) => s.setName("done").setDescription("Mark the task's latest reminder done").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(24))).addSubcommand((s) => s.setName("snooze").setDescription("Snooze the task's latest reminder (default: an hour)").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(24)).addStringOption((o) => o.setName("until").setDescription('Until when: "in 2h", "tomorrow 9am"').setMaxLength(100))).addSubcommand((s) => s.setName("history").setDescription("Every run of the task, how it was answered, and its changes").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(24))).addSubcommand((s) => s.setName("resume").setDescription("Resume a task paused because someone could not be DMed, without them").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(24))).addSubcommand((s) => s.setName("share").setDescription("Ask someone to receive this task's messages too").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(24)).addUserOption((o) => o.setName("user").setDescription("Who to invite").setRequired(true))),
+      build: (b) => b.setDescription("Answer, look back at, or share one of your tasks").addSubcommand((s) => s.setName("done").setDescription("Mark the task's latest reminder done").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(24))).addSubcommand((s) => s.setName("snooze").setDescription("Snooze the task's latest reminder (default: an hour)").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(24)).addStringOption((o) => o.setName("until").setDescription('Until when: "in 2h", "tomorrow 9am"').setMaxLength(100))).addSubcommand((s) => s.setName("decide").setDescription("Answer a renewal's latest ask, with what you paid if it changed").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(24)).addStringOption((o) => o.setName("choice").setDescription("Keep it, cancel it, or it has renewed").setRequired(true).addChoices({ name: "keep", value: "keep" }, { name: "cancel", value: "cancel" }, { name: "renewed", value: "renewed" })).addNumberOption((o) => o.setName("amount").setDescription("What you paid this time, if not the usual").setMinValue(0))).addSubcommand((s) => s.setName("history").setDescription("Every run of the task, how it was answered, and its changes").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(24))).addSubcommand((s) => s.setName("resume").setDescription("Resume a task paused because someone could not be DMed, without them").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(24))).addSubcommand((s) => s.setName("share").setDescription("Ask someone to receive this task's messages too").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(24)).addUserOption((o) => o.setName("user").setDescription("Who to invite").setRequired(true))),
       handle: (interaction) => {
         const sub = interaction.options.getSubcommand();
         const taskId = interaction.options.getString("task", true);
@@ -3026,8 +3599,16 @@ ${body}` : body);
               const until = interaction.options.getString("until");
               return answerLatest(d, user, { taskId, kind: "snooze", ...until !== null ? { until } : {} });
             }
+            case "decide": {
+              const amount = interaction.options.getNumber("amount");
+              return decideRenewal(d, user, {
+                taskId,
+                choice: interaction.options.getString("choice", true),
+                ...amount !== null ? { amount } : {}
+              });
+            }
             case "history":
-              return taskHistory(d, user, taskId);
+              return historyWithSeries(d, user, taskId);
             case "resume":
               return resumeTask(d, user, taskId);
             case "share": {
@@ -3078,7 +3659,28 @@ function healthResponse(health) {
 }
 
 // plugins/tracker/src/notify-lane.ts
-function laneStore(store) {
+var FETCH_TYPES = new Set(["price"]);
+function takesType(kind, type) {
+  return kind === "poll" ? FETCH_TYPES.has(type) : !FETCH_TYPES.has(type);
+}
+function untilAborted(type, signal) {
+  const run = type.run;
+  if (!run)
+    return type;
+  const stop = () => new ExecutorUnavailableError("the tick was aborted; the run waits for the next one");
+  return {
+    ...type,
+    async run(ctx) {
+      if (signal.aborted)
+        throw stop();
+      const outcome = await run.call(type, ctx);
+      if (signal.aborted)
+        throw stop();
+      return outcome;
+    }
+  };
+}
+function laneStore(store, keep = () => true) {
   const view = Object.create(store);
   view.listOccurrences = async (filter = {}) => {
     const found = await store.listOccurrences(filter);
@@ -3086,7 +3688,8 @@ function laneStore(store) {
       return found;
     const kept = [];
     for (const o of found) {
-      if ((await store.getTask(o.taskId))?.status === "active")
+      const task = await store.getTask(o.taskId);
+      if (task?.status === "active" && keep(task))
         kept.push(o);
     }
     return kept;
@@ -3098,7 +3701,8 @@ async function runNotifyTick(d, signal) {
     return { kind: "no-dm" };
   if (signal?.aborted)
     return { kind: "aborted" };
-  const store = laneStore(d.store);
+  const kind = d.kind ?? "notify";
+  const store = laneStore(d.store, (task) => takesType(kind, task.type));
   const notifier = createDmNotifier({
     store,
     claims: d.claims,
@@ -3108,7 +3712,11 @@ async function runNotifyTick(d, signal) {
     ...signal ? { signal } : {},
     ...d.health ? { health: d.health } : {}
   });
-  const lanes = new Lanes({ store, clock: d.clock, types: d.types, notifier });
+  let types = d.types;
+  if (kind === "poll" && signal) {
+    types = Object.fromEntries(Object.entries(d.types).map(([id, t]) => [id, FETCH_TYPES.has(id) ? untilAborted(t, signal) : t]));
+  }
+  const lanes = new Lanes({ store, clock: d.clock, types, notifier, ...kind === "poll" && d.fetch ? { fetch: d.fetch } : {} });
   const result = await lanes.tickNotify();
   return signal?.aborted ? { kind: "aborted" } : { kind: "ran", result };
 }
@@ -5307,7 +5915,8 @@ var DB_DIR = "tracker";
 var DB_FILE = "tracker.sqlite";
 var TRACKER_TYPES = Object.freeze({
   reminder,
-  renewal
+  renewal,
+  price
 });
 var NO_DM = {
   async sendDm() {
@@ -5320,6 +5929,7 @@ function createPlugin(host, options = {}) {
   const webOrigin = parseWebUrl(host.env.TRACKER_WEB_URL);
   const clock = options.clock ?? { now: () => new Date };
   const types = options.types ?? TRACKER_TYPES;
+  const pageFetch = options.fetch ?? ((signal) => createPageFetch(signal ? { signal } : {}));
   const health = { activatedAt: null, lastTickAt: null, blocked: null };
   let db = null;
   let store = null;
@@ -5337,6 +5947,34 @@ function createPlugin(host, options = {}) {
     web: webOrigin ? { origin: webOrigin, name: host.name, gated: guildId !== null } : null,
     ...options.membership ? { membership: options.membership } : {}
   });
+  async function tick(kind, signal) {
+    if (!store || !claims)
+      return;
+    const outcome = await runNotifyTick({
+      store,
+      claims,
+      clock,
+      types,
+      dm,
+      log: host.log,
+      kind,
+      ...kind === "poll" ? { fetch: pageFetch(signal) } : {},
+      ...delivery ? { health: delivery } : {}
+    }, signal);
+    if (outcome.kind === "no-dm") {
+      if (!warnedNoDm)
+        host.log.warn("notify lane is off: this bot has no host.dm (rackbops-discord-bot#736)");
+      warnedNoDm = true;
+      return;
+    }
+    if (outcome.kind === "aborted")
+      return;
+    if (kind === "notify")
+      health.lastTickAt = clock.now();
+    const { ran, failed } = outcome.result;
+    if (failed > 0)
+      host.log.warn(`${kind === "poll" ? "poll" : "notify"} lane: ${ran} ran, ${failed} failed`);
+  }
   let discordClient = null;
   const capture = (interaction) => {
     const client = interaction.client;
@@ -5416,6 +6054,7 @@ function createPlugin(host, options = {}) {
         health: delivery,
         clock,
         types,
+        fetch: pageFetch(),
         dm,
         log: host.log,
         notifier: dm ? createDmNotifier({ store: openedStore, claims: openedClaims, dm, clock, log: host.log, health: delivery }) : NO_DM,
@@ -5440,23 +6079,11 @@ function createPlugin(host, options = {}) {
     ticks: [
       {
         name: "notify",
-        async run(signal) {
-          if (!store || !claims)
-            return;
-          const outcome = await runNotifyTick({ store, claims, clock, types, dm, log: host.log, ...delivery ? { health: delivery } : {} }, signal);
-          if (outcome.kind === "no-dm") {
-            if (!warnedNoDm)
-              host.log.warn("notify lane is off: this bot has no host.dm (rackbops-discord-bot#736)");
-            warnedNoDm = true;
-            return;
-          }
-          if (outcome.kind === "aborted")
-            return;
-          health.lastTickAt = clock.now();
-          const { ran, failed } = outcome.result;
-          if (failed > 0)
-            host.log.warn(`notify lane: ${ran} ran, ${failed} failed`);
-        }
+        run: (signal) => tick("notify", signal)
+      },
+      {
+        name: "poll",
+        run: (signal) => tick("poll", signal)
       }
     ],
     async http(request, info) {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@rackbops/plugin-tracker",
-  "version": "0.3.0",
-  "description": "The task tracker for Rackbops Clerk: reminders by slash command, delivered by DM with done, snooze and reply buttons, on docket's SQLite store (/allow, /register, /remind, /tasks, /task, /settings, /web), with a web area for your tasks, history and settings",
+  "version": "0.4.0",
+  "description": "The task tracker for Rackbops Clerk: reminders, renewals and price drops by slash command, delivered by DM with buttons, on docket's SQLite store (/allow, /register, /remind, /renewal, /price, /tasks, /task, /settings, /web), with a web area for your tasks, history and settings",
   "type": "module",
   "main": "dist/plugin.js",
   "files": ["dist"],
@@ -21,7 +21,7 @@
   "botPlugin": {
     "hostApiVersion": 1,
     "intents": [],
-    "commands": ["allow", "register", "remind", "tasks", "task", "settings", "web"],
+    "commands": ["allow", "register", "remind", "renewal", "price", "tasks", "task", "settings", "web"],
     "env": [
       {
         "key": "TRACKER_ADMIN_DISCORD_IDS",