@rackbops/plugin-tracker 0.35.0 → 0.37.0

package/dist/plugin.js

@@ -192,15 +192,15 @@ function reads(instant, zone, d, h, min) {
 }
 function zonedInstant(year, month, day, hour, minute, zone) {
   const wanted = Date.UTC(year, month - 1, day, hour, minute);
-  const offset1 = zoneOffsetMinutes(new Date(wanted), zone);
-  const candidate1 = wanted - offset1 * 60000;
-  if (reads(candidate1, zone, day, hour, minute))
-    return new Date(candidate1);
-  const offset2 = zoneOffsetMinutes(new Date(candidate1), zone);
-  const candidate2 = wanted - offset2 * 60000;
-  if (reads(candidate2, zone, day, hour, minute))
-    return new Date(candidate2);
-  return new Date(Math.max(candidate1, candidate2));
+  const offsets = new Set;
+  for (const at of [wanted - 86400000, wanted, wanted + 86400000]) {
+    offsets.add(zoneOffsetMinutes(new Date(at), zone));
+  }
+  const candidates = [...offsets].map((offset) => wanted - offset * 60000);
+  const matching = candidates.filter((c) => reads(c, zone, day, hour, minute));
+  if (matching.length > 0)
+    return new Date(Math.min(...matching));
+  return new Date(Math.max(...candidates));
 }
 
 // node_modules/@rackbops/docket-core/dist/budget.js
@@ -223,16 +223,20 @@ function budgetDay(now) {
     end: end.toISOString()
   };
 }
+function costOf(usd) {
+  return typeof usd === "number" && Number.isFinite(usd) && usd > 0 ? usd : 0;
+}
 function spent(rows) {
-  return rows.reduce((s, r) => ({ usd: s.usd + r.costUsd, calls: s.calls + r.calls }), {
+  return rows.reduce((s, r) => ({ usd: s.usd + costOf(r.costUsd), calls: s.calls + r.calls }), {
     usd: 0,
     calls: 0
   });
 }
+var USD_EPSILON = 0.000000001;
 function reached(used, limits) {
   if (limits.calls !== null && used.calls >= limits.calls)
     return "calls";
-  if (limits.usd !== null && used.usd >= limits.usd)
+  if (limits.usd !== null && used.usd >= limits.usd - USD_EPSILON)
     return "usd";
   return null;
 }
@@ -261,7 +265,7 @@ async function charge(store, c) {
     source: c.source,
     key: c.key ?? null,
     calls: c.calls,
-    costUsd: c.costUsd ?? 0,
+    costUsd: costOf(c.costUsd),
     at: c.at.toISOString()
   });
 }
@@ -426,6 +430,10 @@ async function respondToInvite(store, task, recipientId, answer, now, occurrence
   return { recipient, reply, block };
 }
 async function optOut(store, task, recipientId, now, occurrenceId = null) {
+  const existing = (await store.listRecipients(task.id)).find((r) => r.userId === recipientId);
+  if (existing?.state !== "accepted") {
+    throw new ConsentError(`${recipientId} is not an accepted recipient of task ${task.id}`);
+  }
   const at = now.toISOString();
   await store.setRecipient(task.id, recipientId, "opted_out", at);
   await store.addTaskEvent({
@@ -459,6 +467,22 @@ function isLane(value) {
   return LANES.includes(value);
 }
 
+// node_modules/@rackbops/docket-core/dist/local-date.js
+var DAY_MS = 86400000;
+function daysInMonth(year, month) {
+  return new Date(Date.UTC(year, month, 0)).getUTCDate();
+}
+function dayNumber(d) {
+  return Math.floor(Date.UTC(d.year, d.month - 1, d.day) / DAY_MS);
+}
+function fromDayNumber(n) {
+  const dt = new Date(n * DAY_MS);
+  return { year: dt.getUTCFullYear(), month: dt.getUTCMonth() + 1, day: dt.getUTCDate() };
+}
+function addDays(d, days) {
+  return fromDayNumber(dayNumber(d) + days);
+}
+
 // node_modules/@rackbops/docket-core/dist/schedule.js
 var SCHEDULE_KINDS = ["once", "calendar", "poll", "period"];
 function isScheduleKind(value) {
@@ -466,8 +490,12 @@ function isScheduleKind(value) {
 }
 var MIN_POLL_MINUTES = 5;
 var MINUTE_MS = 60000;
-var DAY_MS = 86400000;
 var HORIZON_DAYS = 366 * 3;
+var MAX_CALENDAR_EVERY = {
+  day: HORIZON_DAYS - 1,
+  week: Math.floor((HORIZON_DAYS - 1) / 7),
+  month: 36
+};
 var HORIZON_PERIODS = 1e5;
 function parseLocalDate(value) {
   const m = /^(\d{4})-(\d{2})-(\d{2})$/.exec(value);
@@ -485,16 +513,6 @@ function formatLocalDate(d) {
   const dd = String(d.day).padStart(2, "0");
   return `${d.year}-${mm}-${dd}`;
 }
-function daysInMonth(year, month) {
-  return new Date(Date.UTC(year, month, 0)).getUTCDate();
-}
-function dayNumber(d) {
-  return Math.floor(Date.UTC(d.year, d.month - 1, d.day) / DAY_MS);
-}
-function fromDayNumber(n) {
-  const dt = new Date(n * DAY_MS);
-  return { year: dt.getUTCFullYear(), month: dt.getUTCMonth() + 1, day: dt.getUTCDate() };
-}
 function weekdayOf(d) {
   return new Date(Date.UTC(d.year, d.month - 1, d.day)).getUTCDay();
 }
@@ -536,8 +554,14 @@ function calendarProblems(schedule) {
   if (!Number.isInteger(schedule.every) || schedule.every < 1) {
     problems.push("calendar.every must be a whole number >= 1");
   }
-  if (!["day", "week", "month"].includes(schedule.unit))
+  if (!["day", "week", "month"].includes(schedule.unit)) {
     problems.push("calendar.unit is unknown");
+  } else if (Number.isInteger(schedule.every) && schedule.every >= 1) {
+    const max = MAX_CALENDAR_EVERY[schedule.unit];
+    if (schedule.every > max) {
+      problems.push(`calendar.every must be at most ${max} for unit ${schedule.unit}`);
+    }
+  }
   if (!parseLocalDate(schedule.start))
     problems.push("calendar.start must be a YYYY-MM-DD date");
   if (schedule.weekdays !== undefined) {
@@ -659,11 +683,23 @@ function nextPollDue(schedule, after) {
     return null;
   return new Date(due);
 }
+var LONGEST_PERIOD_DAYS = { day: 1, week: 7, month: 31, year: 366 };
+function firstPeriod(schedule, after, zone) {
+  const anchor = parseLocalDate(schedule.anchor);
+  if (!anchor)
+    return 0;
+  const local = wallClock(after, zone);
+  const elapsed = dayNumber({ year: local.year, month: local.month, day: local.day }) - dayNumber(anchor);
+  const longest = LONGEST_PERIOD_DAYS[schedule.unit] * schedule.every;
+  if (!(longest >= 1) || (schedule.leadDays ?? 0) < 0)
+    return 0;
+  return Math.max(0, Math.floor(elapsed / longest) - 1);
+}
 function nextPeriodDue(schedule, after, ctx) {
   const hour = schedule.hour ?? ctx.preferredHour;
   const minute = schedule.minute ?? 0;
   const lead = schedule.leadDays ?? 0;
-  for (let n = 0;n < HORIZON_PERIODS; n++) {
+  for (let n = firstPeriod(schedule, after, ctx.zone);n < HORIZON_PERIODS; n++) {
     const date = periodDateAt(schedule, n);
     if (!date)
       return null;
@@ -741,8 +777,15 @@ function followUpKey(occurrenceId) {
   return `${FOLLOW_UP_PREFIX}${occurrenceId}`;
 }
 var FOLLOW_UP_PREFIX = "followup:";
+function runNowKey(taskId, requestId) {
+  if (!REQUEST_ID.test(requestId))
+    throw new Error("runNowKey: requestId must be 1 to 64 of A-Z a-z 0-9 - _");
+  return `${RUN_NOW_PREFIX}${taskId}:${requestId}`;
+}
+var REQUEST_ID = /^[A-Za-z0-9_-]{1,64}$/;
+var RUN_NOW_PREFIX = "now:";
 function isOffSchedule(dedupeKey) {
-  return dedupeKey.startsWith(SNOOZE_PREFIX) || dedupeKey.startsWith(FOLLOW_UP_PREFIX);
+  return dedupeKey.startsWith(SNOOZE_PREFIX) || dedupeKey.startsWith(FOLLOW_UP_PREFIX) || dedupeKey.startsWith(RUN_NOW_PREFIX);
 }
 
 // node_modules/@rackbops/docket-core/dist/ports.js
@@ -805,8 +848,8 @@ async function deliver(store, notifier, occurrence, ownerId, targets, message, o
     }
     const target = targets.get(row.userId);
     if (!target) {
-      await finalFail(store, row, "no longer a recipient", now());
-      report.failed.push(row.userId);
+      const ended = await finalFail(store, row, "no longer a recipient", now());
+      (ended ? report.failed : report.untried).push(row.userId);
       continue;
     }
     const claim = await store.claimDelivery(occurrence.id, row.userId, now().toISOString());
@@ -861,18 +904,20 @@ async function sendOne(store, notifier, occurrence, claim, target, ownerId, mess
   report.sent.push(claim.userId);
 }
 async function finalFail(store, row, error, at) {
-  await store.settleDelivery(row.occurrenceId, row.userId, {
+  const after = await store.settleDelivery(row.occurrenceId, row.userId, {
     status: "failed",
     error,
     attempts: row.attempts,
     deferrals: row.deferrals,
     retryAt: null,
     at: at.toISOString()
-  });
+  }, row.status);
+  return after.status === "failed" && after.settledAt === at.toISOString();
 }
 async function dropOwed(store, rows, error, at) {
   for (const row of rows)
-    await finalFail(store, row, error, at);
+    if (row.retryAt !== null)
+      await finalFail(store, row, error, at);
 }
 async function settleStaleClaims(store, now, all = false) {
   const cutoff = new Date(now.getTime() - STALE_CLAIM_MS).toISOString();
@@ -880,15 +925,16 @@ async function settleStaleClaims(store, now, all = false) {
   for (const row of await store.listDeliveries({ status: "claimed" })) {
     if (!all && (row.claimedAt ?? "") > cutoff)
       continue;
-    await store.settleDelivery(row.occurrenceId, row.userId, {
+    const after = await store.settleDelivery(row.occurrenceId, row.userId, {
       status: "unconfirmed",
       error: "claimed, never settled",
       attempts: row.attempts,
       deferrals: row.deferrals,
       retryAt: null,
       at: now.toISOString()
-    });
-    settled += 1;
+    }, "claimed");
+    if (after.status === "unconfirmed" && after.settledAt === now.toISOString())
+      settled += 1;
   }
   return settled;
 }
@@ -904,7 +950,7 @@ async function freshRoundForPause(store, rows) {
       deferrals: 0,
       retryAt: row.retryAt,
       at: row.settledAt ?? row.createdAt
-    });
+    }, row.status);
   }
 }
 
@@ -1002,6 +1048,14 @@ var LATE_AFTER_MS = 5 * 60000;
 class ScheduleError extends Error {
   name = "ScheduleError";
 }
+function checkSchedule(schedule, type) {
+  if (type && !type.schedule.includes(schedule.kind)) {
+    throw new ScheduleError(`${type.id} does not accept a ${schedule.kind} schedule`);
+  }
+  const problems = scheduleProblems(schedule);
+  if (problems.length > 0)
+    throw new ScheduleError(problems.join("; "));
+}
 function isLate(occurrence, now) {
   return now.getTime() - Date.parse(occurrence.dueAt) > LATE_AFTER_MS;
 }
@@ -1037,13 +1091,19 @@ function firstDueAfter(schedule, fresh, now) {
 async function cancelScheduledRuns(store, taskId) {
   let removed = 0;
   for (const o of await store.listOccurrences({ taskId, status: "queued" })) {
-    if (isOffSchedule(o.dedupeKey) || hasFired(o) || await hasJobOut(store, o))
+    if (isOffSchedule(o.dedupeKey))
       continue;
-    if (await store.deleteOccurrence(o.id))
+    if (await deleteIdleRun(store, o))
       removed += 1;
   }
   return removed;
 }
+async function deleteIdleRun(store, o) {
+  const lastEventId = (await store.listEvents(o.id)).at(-1)?.id ?? null;
+  if (hasFired(o) || await hasJobOut(store, o))
+    return false;
+  return store.deleteOccurrence(o.id, { lastEventId });
+}
 async function anyJobOut(store, taskId) {
   for (const o of await store.listOccurrences({ taskId, status: "queued" })) {
     if (!hasFired(o) && await hasJobOut(store, o))
@@ -1051,12 +1111,9 @@ async function anyJobOut(store, taskId) {
   }
   return false;
 }
-async function reschedule(store, task, owner, schedule, actorId, now) {
-  if (schedule) {
-    const problems = scheduleProblems(schedule);
-    if (problems.length > 0)
-      throw new ScheduleError(problems.join("; "));
-  }
+async function reschedule(store, task, owner, schedule, actorId, now, type) {
+  if (schedule)
+    checkSchedule(schedule, type);
   const jobOut = await anyJobOut(store, task.id);
   if (jobOut && (schedule?.kind === "once" || task.schedule?.kind === "once")) {
     throw new ScheduleError("its run is with the runner now; change when it runs once that run is back");
@@ -1094,7 +1151,11 @@ function clean(text, max, oneLine = false) {
   if (oneLine)
     out = out.replace(/\s+/g, " ");
   out = out.trim();
-  return out.length > max ? `${out.slice(0, max - 3).trimEnd()}...` : out;
+  if (out.length <= max)
+    return out;
+  if (max < 4)
+    return out.slice(0, Math.max(0, max));
+  return `${out.slice(0, max - 3).trimEnd()}...`;
 }
 
 // node_modules/@rackbops/docket-core/dist/dispatch.js
@@ -1223,10 +1284,14 @@ class Lanes {
     if ("error" in loaded || !loaded.type.onReply)
       return null;
     const occurrence = input.occurrenceId ? await store.getOccurrence(input.occurrenceId) : null;
-    if (!occurrence)
+    if (!occurrence || occurrence.taskId !== task.id)
       return null;
     const ctx = await this.context(loaded, occurrence, now);
-    const outcome = await loaded.type.onReply({ ...ctx, reply });
+    const outcome = { ...await loaded.type.onReply({ ...ctx, reply }) };
+    if (input.userId !== task.ownerId) {
+      delete outcome.complete;
+      delete outcome.snoozeUntil;
+    }
     await this.apply(task, outcome, now, null, `reply:${reply.id}`);
     if (outcome.complete)
       await this.complete(task, input.userId, now);
@@ -1375,8 +1440,7 @@ class Lanes {
     const { store } = this.d;
     const at = now.toISOString();
     for (const o of await store.listOccurrences({ taskId: task.id, status: "queued" })) {
-      if (!hasFired(o) && !await hasJobOut(store, o))
-        await store.deleteOccurrence(o.id);
+      await deleteIdleRun(store, o);
     }
     await store.updateTask(task.id, { status: "done", at });
     await store.addTaskEvent({ taskId: task.id, actorId, kind: "completed", detail: "", at });
@@ -1996,14 +2060,8 @@ async function createTask(store, actor, owner, input, now) {
   if (!actor.admin && actor.userId !== owner.id) {
     throw new TaskError("only the owner or an admin creates a task for a person");
   }
-  if (input.schedule) {
-    if (!input.type.schedule.includes(input.schedule.kind)) {
-      throw new ScheduleError(`${input.type.id} does not accept a ${input.schedule.kind} schedule`);
-    }
-    const problems = scheduleProblems(input.schedule);
-    if (problems.length > 0)
-      throw new ScheduleError(problems.join("; "));
-  }
+  if (input.schedule)
+    checkSchedule(input.schedule, input.type);
   const at = now.toISOString();
   const task = await store.createTask({
     ownerId: owner.id,
@@ -2053,27 +2111,12 @@ var DAY_TIME_RE = new RegExp(`^(?:on )?(${DAY})(?: (?:at )?(${TIME}))?$`);
 var TIME_DAY_RE = new RegExp(`^(?:at )?(${TIME})(?: (?:on )?(${DAY}))?$`);
 var MAX_AHEAD_YEARS = 5;
 var MAX_AHEAD_MS = MAX_AHEAD_YEARS * 365.25 * 86400000;
-function knownZone(zone) {
-  try {
-    new Intl.DateTimeFormat("en-US", { timeZone: zone });
-    return true;
-  } catch {
-    return false;
-  }
-}
 var HINT = `Try "in 2 hours", "9am", "tomorrow 9am", "friday 17:30" or "2026-10-01 9:00".`;
 function fail(text, why) {
   return { ok: false, error: `${why ?? `I couldn't read "${text}" as a time.`} ${HINT}` };
 }
-function daysIn(year, month) {
-  return new Date(Date.UTC(year, month, 0)).getUTCDate();
-}
-function addDays(date, days) {
-  const d = new Date(Date.UTC(date.year, date.month - 1, date.day + days));
-  return { year: d.getUTCFullYear(), month: d.getUTCMonth() + 1, day: d.getUTCDate() };
-}
 function validDate(date) {
-  return date.month >= 1 && date.month <= 12 && date.day >= 1 && date.day <= daysIn(date.year, date.month);
+  return date.month >= 1 && date.month <= 12 && date.day >= 1 && date.day <= daysInMonth(date.year, date.month);
 }
 function parseTime(word) {
   if (word === "noon")
@@ -2132,7 +2175,7 @@ function resolve(text, now, options) {
       return fail(text, `${text} is more than ${MAX_AHEAD_YEARS} years away.`);
     return { ok: true, at: new Date(now.getTime() + n * unit) };
   }
-  if (!knownZone(options.zone))
+  if (!isTimeZone(options.zone))
     return fail(text, `I don't know the time zone ${options.zone}.`);
   let dayWord;
   let timeWord;
@@ -2283,7 +2326,7 @@ function priceFromJson(value, depth = 0) {
   }
   return null;
 }
-var JSON_LD = /<script[^>]*type\s*=\s*["']application\/ld\+json["'][^>]*>([\s\S]*?)<\/script>/gi;
+var JSON_LD = /<script[^>]*type\s*=\s*(?:["']application\/ld\+json["']|application\/ld\+json(?=[\s>]))[^>]*>([\s\S]*?)<\/script>/gi;
 function jsonLdBlocks(html) {
   const blocks = [];
   for (const m of html.matchAll(JSON_LD)) {
@@ -2318,14 +2361,85 @@ function priceFromMeta(html) {
   }
   return null;
 }
-function priceFromPattern(body, pattern) {
-  let re;
+var MAX_PATTERN_CHARS = 300;
+var MAX_PATTERN_BODY_CHARS = 500000;
+function patternProblem(pattern) {
+  if (pattern.length > MAX_PATTERN_CHARS) {
+    return `the pattern is longer than ${MAX_PATTERN_CHARS} characters`;
+  }
   try {
-    re = new RegExp(pattern, "i");
+    new RegExp(pattern, "i");
   } catch {
-    return null;
+    return "the pattern is not a valid regular expression";
+  }
+  return repeatsAnAmbiguousGroup(pattern) ? "the pattern repeats a group that itself repeats or has a |, like (a+)+ or (a|b)*, " + "which can stall the tracker; use a character class, like [\\d,]+" : null;
+}
+function unboundedAt(p, i) {
+  const c = p[i];
+  return c === "*" || c === "+" || /^\{\d+,\}/.test(p.slice(i));
+}
+function repeatsAt(p, i) {
+  if (unboundedAt(p, i))
+    return true;
+  const m = /^\{(\d+)(?:,(\d+))?\}/.exec(p.slice(i));
+  return m !== null && Number(m[2] ?? m[1]) > 1;
+}
+function repeatsAnAmbiguousGroup(p) {
+  const open = [];
+  const top = () => open[open.length - 1];
+  let inside = false;
+  for (let i = 0;i < p.length; i++) {
+    const c = p[i];
+    if (c === "\\") {
+      i++;
+      continue;
+    }
+    if (inside) {
+      if (c === "]")
+        inside = false;
+      continue;
+    }
+    if (c === "[") {
+      inside = true;
+      if (p[i + 1] === "]")
+        i++;
+      continue;
+    }
+    if (c === "(") {
+      open.push({ repeats: false, alt: false });
+      continue;
+    }
+    if (c === "|") {
+      const g = top();
+      if (g)
+        g.alt = true;
+      continue;
+    }
+    if (c === ")") {
+      const g = open.pop() ?? { repeats: false, alt: false };
+      const repeated = repeatsAt(p, i + 1);
+      if (repeated && (g.repeats || g.alt))
+        return true;
+      const parent = top();
+      if (parent) {
+        if (g.repeats || unboundedAt(p, i + 1))
+          parent.repeats = true;
+        if (g.alt && !repeated)
+          parent.alt = true;
+      }
+      continue;
+    }
+    const g = top();
+    if (g && unboundedAt(p, i))
+      g.repeats = true;
   }
-  const m = re.exec(body);
+  return false;
+}
+function priceFromPattern(body, pattern) {
+  if (patternProblem(pattern) !== null)
+    return null;
+  const re = new RegExp(pattern, "i");
+  const m = re.exec(body.slice(0, MAX_PATTERN_BODY_CHARS));
   const captured = m?.[1] ?? m?.[0];
   if (captured === undefined)
     return null;
@@ -2355,8 +2469,19 @@ function extractPrice(body, pattern) {
 }
 
 // node_modules/@rackbops/docket-types/dist/money.js
+var ZERO_DECIMAL = new Set("BIF CLP DJF GNF ISK JPY KMF KRW PYG RWF UGX UYI VND VUV XAF XOF XPF".split(" "));
+var THREE_DECIMAL = new Set("BHD IQD JOD KWD LYD OMR TND".split(" "));
+function currencyCode(raw) {
+  const c = (raw ?? "").trim().toUpperCase();
+  return /^[A-Z]{3}$/.test(c) ? c : undefined;
+}
+function minorUnits(currency) {
+  const c = currency.trim().toUpperCase();
+  return ZERO_DECIMAL.has(c) ? 1 : THREE_DECIMAL.has(c) ? 1000 : 100;
+}
 function money(amount, currency) {
-  return `${amount.toFixed(2)} ${currency}`.trim();
+  const digits = Math.round(Math.log10(minorUnits(currency)));
+  return `${amount.toFixed(digits)} ${currency}`.trim();
 }
 
 // node_modules/@rackbops/docket-types/dist/price.js
@@ -2382,7 +2507,8 @@ function stateOf(value) {
     peak: s.peak ?? null,
     below: s.below ?? false,
     misses: s.misses,
-    alerts: s.alerts ?? 0
+    alerts: s.alerts ?? 0,
+    ...typeof s.currency === "string" && s.currency !== "" ? { currency: s.currency } : {}
   };
 }
 function dropPercent(config) {
@@ -2441,6 +2567,9 @@ var price = defineTaskType({
     if (!fetch2)
       throw new Error("the price type needs the Fetch port; the host configured none");
     const state = stateOf(ctx.state);
+    const refused = ctx.config.pattern ? patternProblem(ctx.config.pattern) : null;
+    if (refused)
+      return miss(ctx, state, `pattern refused: ${refused}`);
     let body;
     try {
       const response = await fetch2.get(ctx.config.url);
@@ -2458,12 +2587,14 @@ var price = defineTaskType({
     const seen = found.value;
     const currency = found.currency ?? ctx.config.currency ?? "";
     const point = currency ? { value: seen, unit: currency, note: "observed" } : { value: seen, note: "observed" };
+    const code = currencyCode(currency) ?? "";
+    const kept = code === "" ? {} : { currency: code };
     const rule = baselineRule(ctx.config);
     const drop = dropPercent(ctx.config);
     const ref = reference(state, rule);
     if (ref === null) {
       return {
-        state: { first: seen, last: seen, peak: seen, below: false, misses: 0, alerts: 0 },
+        state: { first: seen, last: seen, peak: seen, below: false, misses: 0, alerts: 0, ...kept },
         series: [point],
         notify: {
           text: `Now tracking ${ctx.task.title} at ${money(seen, currency)}. I will say when it ` + `drops ${drop}% or more from the ${rule} price seen. ${ctx.config.url}`,
@@ -2472,6 +2603,11 @@ var price = defineTaskType({
         summary: `baseline ${money(seen, currency)}`
       };
     }
+    const declared = currencyCode(found.currency) ?? "";
+    const known = state.currency ?? currencyCode(ctx.config.currency) ?? "";
+    if (known !== "" && declared !== "" && declared !== known) {
+      return miss(ctx, state, `the page now prices in ${declared}, not ${known}`);
+    }
     const line = ref * (1 - drop / 100);
     const below = seen <= line + 0.000000001;
     const crossing = below && !state.below;
@@ -2481,7 +2617,8 @@ var price = defineTaskType({
       peak: Math.max(state.peak ?? seen, seen),
       below,
       misses: 0,
-      alerts: state.alerts + (crossing ? 1 : 0)
+      alerts: state.alerts + (crossing ? 1 : 0),
+      ...state.currency ? { currency: state.currency } : kept
     };
     if (!crossing) {
       return {
@@ -2513,8 +2650,9 @@ var DEFAULT_SNOOZE_MS = 60 * 60000;
 function snoozeUntil(payload, now) {
   if (typeof payload === "object" && payload !== null) {
     const p = payload;
-    if (typeof p.until === "string" && !Number.isNaN(Date.parse(p.until)))
-      return new Date(p.until);
+    const until = typeof p.until === "string" ? Date.parse(p.until) : Number.NaN;
+    if (!Number.isNaN(until) && until > now.getTime())
+      return new Date(until);
     if (typeof p.minutes === "number" && Number.isFinite(p.minutes) && p.minutes > 0) {
       return new Date(now.getTime() + p.minutes * 60000);
     }
@@ -2761,7 +2899,10 @@ function safeUrl(value) {
   if (url.username || url.password)
     return null;
   const text = url.toString();
-  if (/@(everyone|here)\b|<[@#]/i.test(decodeURIComponentSafe(text)))
+  const decoded = decodeURIComponentSafe(text);
+  if (/@(everyone|here)\b|<[@#]/i.test(decoded))
+    return null;
+  if (decoded.includes("]("))
     return null;
   return text;
 }
@@ -2783,7 +2924,7 @@ function parseAnswer(value) {
   if (summary.length === 0)
     return null;
   const findings = [];
-  const uncertain = [];
+  const unsourced = [];
   for (const f of value.findings) {
     if (!isObj2(f) || typeof f.claim !== "string")
       continue;
@@ -2793,10 +2934,11 @@ function parseAnswer(value) {
     const raw = Array.isArray(f.sources) ? f.sources : [];
     const sources = [...new Set(raw.map(safeUrl).filter((u) => u !== null))];
     if (sources.length === 0)
-      uncertain.push(`${claim} (no source given)`);
+      unsourced.push(`${claim} (no source given)`);
     else
       findings.push({ claim, sources: sources.slice(0, MAX_SOURCES_PER_FINDING) });
   }
+  const uncertain = [];
   const said = Array.isArray(value.uncertain) ? value.uncertain : [];
   for (const u of said) {
     if (typeof u !== "string")
@@ -2805,6 +2947,7 @@ function parseAnswer(value) {
     if (line.length > 0)
       uncertain.push(line);
   }
+  uncertain.push(...unsourced);
   const blocked = parseBlocked(value.blocked);
   return {
     summary,
@@ -2923,106 +3066,327 @@ function renderUpdate(title, update, review) {
 ${note}`;
 }
 
-// node_modules/@rackbops/docket-types/dist/research-sources.js
-var MAX_GATHERED_PAGES = 10;
-var MAX_PAGE_TITLE_CHARS = 200;
-var MAX_PAGE_CHARS = 12000;
-var MAX_GATHERED_CHARS = 1e5;
-var BARRED_SITES = [
-  {
-    site: "boardgamegeek.com",
-    domains: ["boardgamegeek.com", "geekdo.com"],
-    host: /(^|\.)(boardgamegeek|geekdo)\.com$/i,
-    names: "board\\s?game\\s?geek|bgg|geekdo",
-    everywhere: false
-  },
-  {
-    site: "ebay.com",
-    domains: ["ebay.*", "ebay.co.*", "ebay.com.*"],
-    host: /(^|\.)ebay(\.[a-z]{2,3}){1,2}$/i,
-    names: "ebay",
-    everywhere: true
-  }
-];
-function namedIn(b) {
-  return new RegExp(`\\b(?:${b.names})\\b`, "i");
+// node_modules/@rackbops/docket-types/dist/want-sources.js
+import { createHash } from "crypto";
+class SourceMiss extends Error {
+  name = "SourceMiss";
 }
-var GAP = "(?:[\\w'-]+[,):]?\\s+){0,3}";
-var READ_VERB = "(?:(?:check|open|read|access|reach|load|consult|get|visit|fetch|look(?:\\s+at)?)" + "(?:ed|ing|s)?|verif(?:y|ies|ied|ying)|retriev(?:e|es|ed|ing))";
-var NEG_BEFORE = "(?:(?:did|could|can|would|should|have|has|had|do|does) ?n[o']?t|cannot|(?:was|were) ?n[o']?t able to|" + "unable to|never|not|without)\\s+(?:be(?:en)?\\s+able\\s+to\\s+)?";
-var FAILED_AFTER = "(?:refused|blocked|(?:was|were) blocked|returned (?:a |an )?(?:403|error)|403|forbidden|" + "showed a captcha|captcha|required (?:a )?sign-?in|inaccessible|unavailable|unreachable|" + "failed to (?:load|open)|timed out|(?:access )?(?:was )?denied|" + "(?:could|can|did|would|was|were|is|are|has|have|had) ?n[o']?t (?:be(?:en)? )?" + "(?:checked|opened|read|accessed|reached|loaded|load|open|consulted|used|available|reachable|accessible|" + "looked at)|not (?:been )?(?:checked|opened|read|accessed|reached|loaded|consulted|" + "available|reachable|accessible|looked at))\\b";
-function unreadShapes(b) {
-  const site = `(?:${b.names})(?:'s)?[,):]?`;
-  return [
-    new RegExp(`\\b${NEG_BEFORE}${READ_VERB}\\s+${GAP}${site}`, "i"),
-    new RegExp(`\\b${site}\\s+${GAP}${FAILED_AFTER}`, "i"),
-    new RegExp(`\\bno (?:${b.names})(?:'s)? (?:data|ratings?|rankings?|ranks?|scores?|results?)\\b`, "i")
-  ];
+
+class SourceUnavailableError extends SourceMiss {
+  name = "SourceUnavailableError";
 }
-function sentences(text) {
-  return text.replace(/[\u2018\u2019]/g, "'").replace(/\b(e)\.(g)\.|\b(i)\.(e)\./gi, (_m, a, b, c, d) => `${a ?? c}${b ?? d}`).split(/(?<=[.!?;])\s+|\n/);
+var MAX_LISTINGS = 100;
+var TITLE_CHARS = 150;
+var CONDITION_CHARS = 40;
+var SELLER_CHARS = 80;
+function checkSearchStatus(status, who, refused, unavailable = {}) {
+  const said = unavailable[status] ?? (status === 401 || status === 403 ? refused : undefined);
+  if (said !== undefined)
+    throw new SourceUnavailableError(said);
+  if (status === 429 || status >= 500)
+    throw new SourceMiss(`${who} is busy (HTTP ${status})`);
+  if (status !== 200)
+    throw new SourceMiss(`${who} answered HTTP ${status}`);
 }
-function saysUnread(b, lines) {
-  const shapes = unreadShapes(b);
-  return lines.flatMap(sentences).some((line) => shapes.some((r) => r.test(line)));
+var MAX_DEPTH = 8;
+function listingKey(id) {
+  return createHash("sha256").update(id).digest("hex").slice(0, 32);
 }
-function barredDomains(everywhereOnly = false) {
-  return BARRED_SITES.filter((b) => !everywhereOnly || b.everywhere).flatMap((b) => b.domains.flatMap((d) => [d, `*.${d}`]));
+var NEVER_EBAY = "x-tracker-never-ebay";
+var EBAY_HOST = /(^|\.)ebay\.[a-z]{2,3}(\.[a-z]{2})?$/i;
+function isEbayHost(host) {
+  return EBAY_HOST.test(host.replace(/\.$/, ""));
 }
-var SENT_DISALLOWED_TOOLS = barredDomains().map((host) => `WebFetch(domain:${host})`);
-var GATHERED_ALLOWED_TOOLS = ["WebSearch"];
-var GATHERED_DENIED_TOOLS = ["WebFetch"];
-var WEB_DISALLOWED_TOOLS = barredDomains(true).map((host) => `WebFetch(domain:${host})`);
-function hostOf(url) {
-  try {
-    return new URL(url).hostname;
-  } catch {
-    return "";
-  }
+var isObj3 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+function typesOf(node) {
+  const t = node["@type"];
+  const all = Array.isArray(t) ? t : [t];
+  return all.filter((x) => typeof x === "string").map((x) => x.replace(/^https?:\/\/schema\.org\//, ""));
 }
-function siteOf(text) {
-  const t = text.trim().toLowerCase().replace(/^www\./, "");
-  for (const b of BARRED_SITES)
-    if (b.host.test(t) || namedIn(b).test(t))
-      return b.site;
-  return t;
+var PRODUCT_TYPES = new Set([
+  "Product",
+  "IndividualProduct",
+  "ProductModel",
+  "ProductGroup",
+  "Book",
+  "Game",
+  "VideoGame",
+  "Vehicle"
+]);
+function text(v, max) {
+  if (typeof v === "string")
+    return clean(v, max, true);
+  if (isObj3(v) && typeof v.name === "string")
+    return clean(v.name, max, true);
+  return "";
 }
-function pageOf(url) {
+function conditionOf(v) {
+  const raw = text(v, 200);
+  const m = /(New|Used|Refurbished|Damaged)Condition$/i.exec(raw);
+  return m ? (m[1] ?? "").toLowerCase() : clean(raw, CONDITION_CHARS, true);
+}
+function firstOffer(offers) {
+  if (Array.isArray(offers))
+    return offers.find(isObj3) ?? null;
+  return isObj3(offers) ? offers : null;
+}
+var PER_VIEW = /^(utm_[a-z]+|_pos|_sid|_ss|_psq|srsltid|gclid|gbraid|wbraid|fbclid|msclkid|mc_cid|mc_eid|pf_rd_[a-z]+|pd_rd_[a-z]+)$/i;
+function withoutPerView(u) {
+  u.hash = "";
+  for (const key of [...u.searchParams.keys()])
+    if (PER_VIEW.test(key))
+      u.searchParams.delete(key);
+  return u;
+}
+function absolute(raw, base) {
+  if (typeof raw !== "string" || raw.trim() === "")
+    return null;
   try {
-    const u = new URL(url);
-    return `${siteOf(u.hostname)}${u.pathname.replace(/\/+$/, "")}`;
+    return safeUrl(withoutPerView(new URL(raw.trim(), base)).toString());
   } catch {
-    return "";
+    return null;
   }
 }
-function blockedKey(entry) {
-  return entry.url ? pageOf(entry.url) : siteOf(entry.site);
-}
-function sitesOf(entry) {
-  const out = new Set([siteOf(entry.site)]);
-  if (entry.url)
-    out.add(siteOf(hostOf(entry.url)));
-  return out;
+function listingOf(node, base, fallbackUrl) {
+  const title = text(node.name, TITLE_CHARS);
+  const offer = firstOffer(node.offers);
+  const url = absolute(node.url, base) ?? absolute(fallbackUrl, base) ?? absolute(offer?.url, base);
+  if (!title || !url)
+    return null;
+  const price = priceFromJson(node.offers ?? null);
+  const condition = conditionOf(offer?.itemCondition ?? node.itemCondition);
+  const seller = text(offer?.seller, SELLER_CHARS);
+  return {
+    id: url,
+    title,
+    url,
+    ...price ? { price: price.value } : {},
+    ...price?.currency ? { currency: price.currency } : {},
+    ...condition ? { condition } : {},
+    ...seller ? { seller } : {}
+  };
 }
-function uniqueBlocked(entries) {
+function readListings(html, pageUrl) {
+  let lists = 0;
   const out = [];
-  for (const e of entries) {
-    const key = blockedKey(e);
-    if (out.some((o) => o.url && blockedKey(o) === key))
-      continue;
-    if (!e.url) {
-      const site = siteOf(e.site);
-      if (out.some((o) => sitesOf(o).has(site)))
-        continue;
-    } else {
-      const sites = sitesOf(e);
-      const bare = out.findIndex((o) => !o.url && sites.has(siteOf(o.site)));
-      if (bare >= 0) {
-        out[bare] = e;
-        continue;
-      }
-    }
-    if (out.length >= MAX_BLOCKED)
+  const seen = new Set;
+  const add = (l) => {
+    if (!l || seen.has(l.id) || out.length >= MAX_LISTINGS)
+      return;
+    seen.add(l.id);
+    out.push(l);
+  };
+  const walk = (node, depth) => {
+    if (depth > MAX_DEPTH || out.length >= MAX_LISTINGS)
+      return;
+    if (Array.isArray(node)) {
+      for (const n of node)
+        walk(n, depth + 1);
+      return;
+    }
+    if (!isObj3(node))
+      return;
+    const types = typesOf(node);
+    if (types.includes("ItemList")) {
+      lists++;
+      const elements = Array.isArray(node.itemListElement) ? node.itemListElement : [node.itemListElement];
+      for (const el of elements) {
+        if (!isObj3(el))
+          continue;
+        const item = isObj3(el.item) ? el.item : el;
+        if (typesOf(item).includes("ItemList"))
+          walk(item, depth + 1);
+        else
+          add(listingOf(item, pageUrl, el.url ?? (typeof el.item === "string" ? el.item : undefined)));
+      }
+    } else if (types.some((t) => PRODUCT_TYPES.has(t))) {
+      add(listingOf(node, pageUrl, pageUrl));
+    }
+    if (node["@graph"] !== undefined)
+      walk(node["@graph"], depth + 1);
+    if (isObj3(node.mainEntity))
+      walk(node.mainEntity, depth + 1);
+  };
+  for (const block of jsonLdBlocks(html))
+    walk(block, 0);
+  return { listings: out, lists };
+}
+var pageSource = {
+  id: "page",
+  async search(target, fetch2) {
+    if (!fetch2)
+      throw new SourceMiss("this bot reads no pages");
+    let body;
+    try {
+      const response = await fetch2.get(target, { [NEVER_EBAY]: "1" });
+      if (response.status !== 200)
+        throw new SourceMiss(`HTTP ${response.status}`);
+      body = response.body;
+    } catch (err) {
+      if (err instanceof SourceMiss)
+        throw err;
+      throw new SourceMiss(`the read failed: ${err instanceof Error ? err.message : String(err)}`, {
+        cause: err
+      });
+    }
+    const { listings, lists } = readListings(body, target);
+    if (listings.length === 0 && lists === 0)
+      throw new SourceMiss("no listings in the page's structured data");
+    return listings;
+  }
+};
+var nonNegative = (n) => n !== null && Number.isFinite(n) && n >= 0 ? n : undefined;
+function ebayItem(url) {
+  if (url === null)
+    return null;
+  const u = new URL(url);
+  const item = /^\/itm\/(?:[^/]+\/)?(\d{6,20})\/?$/.exec(u.pathname);
+  return isEbayHost(u.hostname) && item ? `https://${u.hostname}/itm/${item[1]}` : url;
+}
+function submittedListing(raw) {
+  const title = typeof raw.title === "string" ? clean(raw.title, TITLE_CHARS, true) : "";
+  if (typeof raw.url !== "string" || !/^https?:\/\/[^/\\]/i.test(raw.url.trim()))
+    return null;
+  const url = ebayItem(absolute(raw.url, "https://invalid.example/"));
+  if (!title || !url || url.startsWith("https://invalid.example/"))
+    return null;
+  const price = typeof raw.price === "number" && Number.isFinite(raw.price) && raw.price >= 0 ? raw.price : typeof raw.price === "string" ? nonNegative(parsePrice(raw.price)) : undefined;
+  const currency = typeof raw.currency === "string" && /^[A-Za-z]{3}$/.test(raw.currency.trim()) ? raw.currency.trim().toUpperCase() : undefined;
+  const condition = typeof raw.condition === "string" ? clean(raw.condition, CONDITION_CHARS, true) : "";
+  const seller = typeof raw.seller === "string" ? clean(raw.seller, SELLER_CHARS, true) : "";
+  return {
+    id: url,
+    title,
+    url,
+    ...price !== undefined ? { price } : {},
+    ...currency ? { currency } : {},
+    ...condition ? { condition } : {},
+    ...seller ? { seller } : {}
+  };
+}
+function inboxSource(read) {
+  return {
+    id: "inbox",
+    async search(target) {
+      let items;
+      try {
+        items = await read(target);
+      } catch (err) {
+        throw new SourceMiss("the inbox could not be read", { cause: err });
+      }
+      const byId = new Map;
+      for (const raw of items) {
+        const l = submittedListing(raw);
+        if (!l)
+          continue;
+        byId.delete(l.id);
+        byId.set(l.id, l);
+      }
+      return [...byId.values()].slice(-MAX_LISTINGS);
+    }
+  };
+}
+
+// node_modules/@rackbops/docket-types/dist/research-sources.js
+var MAX_GATHERED_PAGES = 10;
+var MAX_PAGE_TITLE_CHARS = 200;
+var MAX_PAGE_CHARS = 12000;
+var MAX_GATHERED_CHARS = 1e5;
+var BARRED_SITES = [
+  {
+    site: "boardgamegeek.com",
+    domains: ["boardgamegeek.com", "geekdo.com"],
+    host: /(^|\.)(boardgamegeek|geekdo)\.com$/i,
+    names: "board\\s?game\\s?geek|bgg|geekdo",
+    everywhere: false
+  },
+  {
+    site: "ebay.com",
+    domains: ["ebay.*", "ebay.co.*", "ebay.com.*"],
+    host: EBAY_HOST,
+    names: "ebay",
+    everywhere: true
+  }
+];
+function namedIn(b) {
+  return new RegExp(`\\b(?:${b.names})\\b`, "i");
+}
+var GAP = "(?:[\\w'-]+[,):]?\\s+){0,3}";
+var READ_VERB = "(?:(?:check|open|read|access|reach|load|consult|get|visit|fetch|look(?:\\s+at)?)" + "(?:ed|ing|s)?|verif(?:y|ies|ied|ying)|retriev(?:e|es|ed|ing))";
+var NEG_BEFORE = "(?:(?:did|could|can|would|should|have|has|had|do|does) ?n[o']?t|cannot|(?:was|were) ?n[o']?t able to|" + "unable to|never|not|without)\\s+(?:be(?:en)?\\s+able\\s+to\\s+)?";
+var FAILED_AFTER = "(?:refused|blocked|(?:was|were) blocked|returned (?:a |an )?(?:403|error)|403|forbidden|" + "showed a captcha|captcha|required (?:a )?sign-?in|inaccessible|unavailable|unreachable|" + "failed to (?:load|open)|timed out|(?:access )?(?:was )?denied|" + "(?:could|can|did|would|was|were|is|are|has|have|had) ?n[o']?t (?:be(?:en)? )?" + "(?:checked|opened|read|accessed|reached|loaded|load|open|consulted|used|available|reachable|accessible|" + "looked at)|not (?:been )?(?:checked|opened|read|accessed|reached|loaded|consulted|" + "available|reachable|accessible|looked at))\\b";
+function unreadShapes(b) {
+  const site = `(?:${b.names})(?:'s)?[,):]?`;
+  return [
+    new RegExp(`\\b${NEG_BEFORE}${READ_VERB}\\s+${GAP}${site}`, "i"),
+    new RegExp(`\\b${site}\\s+${GAP}${FAILED_AFTER}`, "i"),
+    new RegExp(`\\bno (?:${b.names})(?:'s)? (?:data|ratings?|rankings?|ranks?|scores?|results?)\\b`, "i")
+  ];
+}
+function sentences(text) {
+  return text.replace(/[\u2018\u2019]/g, "'").replace(/\b(e)\.(g)\.|\b(i)\.(e)\./gi, (_m, a, b, c, d) => `${a ?? c}${b ?? d}`).split(/(?<=[.!?;])\s+|\n/);
+}
+function saysUnread(b, lines) {
+  const shapes = unreadShapes(b);
+  return lines.flatMap(sentences).some((line) => shapes.some((r) => r.test(line)));
+}
+function barredDomains(everywhereOnly = false) {
+  return BARRED_SITES.filter((b) => !everywhereOnly || b.everywhere).flatMap((b) => b.domains.flatMap((d) => [d, `*.${d}`]));
+}
+var SENT_DISALLOWED_TOOLS = barredDomains().map((host) => `WebFetch(domain:${host})`);
+var GATHERED_ALLOWED_TOOLS = ["WebSearch"];
+var GATHERED_DENIED_TOOLS = ["WebFetch"];
+var WEB_DISALLOWED_TOOLS = barredDomains(true).map((host) => `WebFetch(domain:${host})`);
+function hostOf(url) {
+  try {
+    return new URL(url).hostname.replace(/\.$/, "");
+  } catch {
+    return "";
+  }
+}
+function siteOf(text) {
+  const t = text.trim().toLowerCase().replace(/^www\./, "").replace(/\.$/, "");
+  for (const b of BARRED_SITES)
+    if (b.host.test(t) || namedIn(b).test(t))
+      return b.site;
+  return t;
+}
+function pageOf(url) {
+  try {
+    const u = new URL(url);
+    return `${siteOf(u.hostname)}${u.pathname.replace(/\/+$/, "")}`;
+  } catch {
+    return "";
+  }
+}
+function blockedKey(entry) {
+  return entry.url ? pageOf(entry.url) : siteOf(entry.site);
+}
+function sitesOf(entry) {
+  const out = new Set([siteOf(entry.site)]);
+  if (entry.url)
+    out.add(siteOf(hostOf(entry.url)));
+  return out;
+}
+function uniqueBlocked(entries) {
+  const out = [];
+  for (const e of entries) {
+    const key = blockedKey(e);
+    if (out.some((o) => o.url && blockedKey(o) === key))
+      continue;
+    if (!e.url) {
+      const site = siteOf(e.site);
+      if (out.some((o) => sitesOf(o).has(site)))
+        continue;
+    } else {
+      const sites = sitesOf(e);
+      const bare = out.findIndex((o) => !o.url && sites.has(siteOf(o.site)));
+      if (bare >= 0) {
+        out[bare] = e;
+        continue;
+      }
+    }
+    if (out.length >= MAX_BLOCKED)
       break;
     out.push(e);
   }
@@ -3154,27 +3518,36 @@ function categoryChecks() {
   ];
 }
 
+// node_modules/@rackbops/docket-types/dist/retry.js
+var MAX_TRIES = 2;
+var AUTH_RETRY_MS = 3600000;
+var RETRIED = new Set([
+  "schema_miss",
+  "malformed",
+  "timeout",
+  "error",
+  "auth_failed"
+]);
+function retryOutcome(kind, failures, now) {
+  if (!RETRIED.has(kind) || failures >= MAX_TRIES)
+    return null;
+  const wait = kind === "auth_failed" ? AUTH_RETRY_MS : 0;
+  const at = new Date(now.getTime() + wait).toISOString();
+  return { at, followUp: wait > 0 ? { at } : {} };
+}
+
 // node_modules/@rackbops/docket-types/dist/research.js
 function usesSentSources(config) {
   return typeof config.sources === "string" && config.sources.trim().toLowerCase() === "sent";
 }
 var MAX_QUESTION_CHARS = 1000;
 var MAX_CONTEXT_CHARS = 2000;
-var MAX_TRIES = 2;
-var AUTH_RETRY_MS = 3600000;
 var RESEARCH_MAX_TURNS = 15;
 var RESEARCH_MAX_BUDGET_USD = 1;
 var RESEARCH_TIMEOUT_MS = 600000;
 var REVIEW_MAX_TURNS = 8;
 var REVIEW_MAX_BUDGET_USD = 0.5;
 var REVIEW_TIMEOUT_MS = 300000;
-var RETRIED = new Set([
-  "schema_miss",
-  "malformed",
-  "timeout",
-  "error",
-  "auth_failed"
-]);
 var FRESH2 = { phase: "research", failures: 0, draft: null };
 function passFields(s) {
   const blocked = parseBlocked(s.blocked);
@@ -3392,14 +3765,9 @@ function failed(ctx, state, kind, detail) {
   const phase = state.phase === "review" || state.phase === "awaiting-pages" ? state.phase : "research";
   const failures = state.failures + 1;
   const summary = clean(`${phase} ${kind} (try ${failures}): ${detail}`, 300, true);
-  if (RETRIED.has(kind) && failures < MAX_TRIES) {
-    const wait = kind === "auth_failed" ? AUTH_RETRY_MS : 0;
-    return {
-      state: { ...state, phase, failures },
-      followUp: wait > 0 ? { at: new Date(ctx.now.getTime() + wait).toISOString() } : {},
-      summary
-    };
-  }
+  const retry = retryOutcome(kind, failures, ctx.now);
+  if (retry)
+    return { state: { ...state, phase, failures }, followUp: retry.followUp, summary };
   const said = SAID[kind] ?? "something went wrong";
   if (secondPass(state)) {
     return stands(ctx, state, `the fuller pass could not finish (${said})`, summary);
@@ -3685,7 +4053,7 @@ function researchType(options = {}) {
 var research = researchType();
 
 // node_modules/@rackbops/docket-types/dist/scout.js
-import { createHash } from "crypto";
+import { createHash as createHash2 } from "crypto";
 var LENSES = ["general", "birthday", "anniversary", "christmas"];
 var LENS_TEXT = {
   general: "no occasion in particular -- anything they would genuinely enjoy hearing about or owning",
@@ -3734,18 +4102,17 @@ var SCOUT_SCHEMA = {
   },
   required: ["items"]
 };
-function isObj3(v) {
+function isObj4(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
 function itemKey(url) {
-  const u = new URL(url);
-  u.hash = "";
-  return createHash("sha256").update(u.toString()).digest("hex").slice(0, 32);
+  const u = withoutPerView(new URL(url));
+  return createHash2("sha256").update(u.toString()).digest("hex").slice(0, 32);
 }
 function scoutState(value) {
-  if (!isObj3(value))
+  if (!isObj4(value))
     return { shown: [], failures: 0 };
-  const shown = (Array.isArray(value.shown) ? value.shown : []).filter((s) => isObj3(s) && typeof s.k === "string" && typeof s.t === "string").slice(-MAX_SHOWN);
+  const shown = (Array.isArray(value.shown) ? value.shown : []).filter((s) => isObj4(s) && typeof s.k === "string" && typeof s.t === "string").slice(-MAX_SHOWN);
   const failures = typeof value.failures === "number" && value.failures >= 0 ? value.failures : 0;
   return { shown, failures };
 }
@@ -3785,11 +4152,11 @@ function scoutJob(config, state) {
   };
 }
 function parseScout(value) {
-  if (!isObj3(value) || !Array.isArray(value.items))
+  if (!isObj4(value) || !Array.isArray(value.items))
     return null;
   const items = [];
   for (const raw of value.items) {
-    if (!isObj3(raw) || typeof raw.title !== "string")
+    if (!isObj4(raw) || typeof raw.title !== "string")
       continue;
     const url = safeUrl(raw.url);
     const title = clean(raw.title, ITEM_TITLE_CHARS, true);
@@ -3825,13 +4192,6 @@ function renderScout(title, items, shortfall, repeats) {
     lines.push("", `Fewer than ${MIN_ITEMS}: ${shortfall}`);
   return fitMessage(lines);
 }
-var RETRIED2 = new Set([
-  "schema_miss",
-  "malformed",
-  "timeout",
-  "error",
-  "auth_failed"
-]);
 var SAID2 = {
   auth_failed: "the runner could not sign in",
   turn_cap: "it needed more steps than one run is allowed",
@@ -3844,14 +4204,9 @@ var SAID2 = {
 function failed2(ctx, state, kind, detail) {
   const failures = state.failures + 1;
   const summary = clean(`scout ${kind} (try ${failures}): ${detail}`, 300, true);
-  if (RETRIED2.has(kind) && failures < MAX_TRIES) {
-    const wait = kind === "auth_failed" ? AUTH_RETRY_MS : 0;
-    return {
-      state: { ...state, failures },
-      followUp: wait > 0 ? { at: new Date(ctx.now.getTime() + wait).toISOString() } : {},
-      summary
-    };
-  }
+  const retry = retryOutcome(kind, failures, ctx.now);
+  if (retry)
+    return { state: { ...state, failures }, followUp: retry.followUp, summary };
   const narrower = kind === "turn_cap" || kind === "budget_cap" ? " Fewer or narrower interests may help." : "";
   return {
     state: { ...state, failures: 0 },
@@ -3901,252 +4256,43 @@ function afterRun(ctx, state, output) {
 var scout = defineTaskType({
   id: "scout",
   lane: "execute",
-  capabilities: ["notify"],
-  schedule: ["calendar"],
-  intake: {
-    options: [
-      {
-        name: "interests",
-        description: "What they are into, separated by commas",
-        required: true,
-        kind: "string"
-      },
-      {
-        name: "lens",
-        description: "The gift lens: general, birthday, anniversary or christmas",
-        required: false,
-        kind: "string"
-      },
-      {
-        name: "for",
-        description: "Who the ideas are for, if not you",
-        required: false,
-        kind: "string"
-      },
-      { name: "notes", description: "Anything else to weigh", required: false, kind: "string" },
-      { name: "every", description: "Days between runs", required: false, kind: "integer" }
-    ]
-  },
-  async prepare(ctx) {
-    return scoutJob(ctx.config, scoutState(ctx.state));
-  },
-  async finish(ctx, result) {
-    const stored = scoutState(ctx.state);
-    const state = ctx.occurrence.dedupeKey.startsWith("followup:") ? stored : { ...stored, failures: 0 };
-    if (result.kind !== "success")
-      return failed2(ctx, state, result.kind, result.detail);
-    return afterRun(ctx, state, result.structuredOutput);
-  }
-});
-
-// node_modules/@rackbops/docket-types/dist/want-sources.js
-import { createHash as createHash2 } from "crypto";
-class SourceMiss extends Error {
-  name = "SourceMiss";
-}
-
-class SourceUnavailableError extends SourceMiss {
-  name = "SourceUnavailableError";
-}
-var MAX_LISTINGS = 100;
-var TITLE_CHARS = 150;
-var CONDITION_CHARS = 40;
-var SELLER_CHARS = 80;
-var MAX_DEPTH = 8;
-function listingKey(id) {
-  return createHash2("sha256").update(id).digest("hex").slice(0, 32);
-}
-var NEVER_EBAY = "x-tracker-never-ebay";
-function isEbayHost(host) {
-  return /(^|\.)ebay\.[a-z]{2,3}(\.[a-z]{2})?$/i.test(host.replace(/\.$/, ""));
-}
-var isObj4 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
-function typesOf(node) {
-  const t = node["@type"];
-  const all = Array.isArray(t) ? t : [t];
-  return all.filter((x) => typeof x === "string").map((x) => x.replace(/^https?:\/\/schema\.org\//, ""));
-}
-var PRODUCT_TYPES = new Set([
-  "Product",
-  "IndividualProduct",
-  "ProductModel",
-  "ProductGroup",
-  "Book",
-  "Game",
-  "VideoGame",
-  "Vehicle"
-]);
-function text(v, max) {
-  if (typeof v === "string")
-    return clean(v, max, true);
-  if (isObj4(v) && typeof v.name === "string")
-    return clean(v.name, max, true);
-  return "";
-}
-function conditionOf(v) {
-  const raw = text(v, 200);
-  const m = /(New|Used|Refurbished|Damaged)Condition$/i.exec(raw);
-  return m ? (m[1] ?? "").toLowerCase() : clean(raw, CONDITION_CHARS, true);
-}
-function firstOffer(offers) {
-  if (Array.isArray(offers))
-    return offers.find(isObj4) ?? null;
-  return isObj4(offers) ? offers : null;
-}
-var PER_VIEW = /^(utm_[a-z]+|_pos|_sid|_ss|_psq|srsltid|gclid|gbraid|wbraid|fbclid|msclkid|mc_cid|mc_eid|pf_rd_[a-z]+|pd_rd_[a-z]+)$/i;
-function absolute(raw, base) {
-  if (typeof raw !== "string" || raw.trim() === "")
-    return null;
-  try {
-    const u = new URL(raw.trim(), base);
-    u.hash = "";
-    for (const key of [...u.searchParams.keys()])
-      if (PER_VIEW.test(key))
-        u.searchParams.delete(key);
-    return safeUrl(u.toString());
-  } catch {
-    return null;
-  }
-}
-function listingOf(node, base, fallbackUrl) {
-  const title = text(node.name, TITLE_CHARS);
-  const offer = firstOffer(node.offers);
-  const url = absolute(node.url, base) ?? absolute(fallbackUrl, base) ?? absolute(offer?.url, base);
-  if (!title || !url)
-    return null;
-  const price = priceFromJson(node.offers ?? null);
-  const condition = conditionOf(offer?.itemCondition ?? node.itemCondition);
-  const seller = text(offer?.seller, SELLER_CHARS);
-  return {
-    id: url,
-    title,
-    url,
-    ...price ? { price: price.value } : {},
-    ...price?.currency ? { currency: price.currency } : {},
-    ...condition ? { condition } : {},
-    ...seller ? { seller } : {}
-  };
-}
-function readListings(html, pageUrl) {
-  let lists = 0;
-  const out = [];
-  const seen = new Set;
-  const add = (l) => {
-    if (!l || seen.has(l.id) || out.length >= MAX_LISTINGS)
-      return;
-    seen.add(l.id);
-    out.push(l);
-  };
-  const walk = (node, depth) => {
-    if (depth > MAX_DEPTH || out.length >= MAX_LISTINGS)
-      return;
-    if (Array.isArray(node)) {
-      for (const n of node)
-        walk(n, depth + 1);
-      return;
-    }
-    if (!isObj4(node))
-      return;
-    const types = typesOf(node);
-    if (types.includes("ItemList")) {
-      lists++;
-      const elements = Array.isArray(node.itemListElement) ? node.itemListElement : [node.itemListElement];
-      for (const el of elements) {
-        if (!isObj4(el))
-          continue;
-        const item = isObj4(el.item) ? el.item : el;
-        if (typesOf(item).includes("ItemList"))
-          walk(item, depth + 1);
-        else
-          add(listingOf(item, pageUrl, el.url ?? (typeof el.item === "string" ? el.item : undefined)));
-      }
-    } else if (types.some((t) => PRODUCT_TYPES.has(t))) {
-      add(listingOf(node, pageUrl, pageUrl));
-    }
-    if (node["@graph"] !== undefined)
-      walk(node["@graph"], depth + 1);
-    if (isObj4(node.mainEntity))
-      walk(node.mainEntity, depth + 1);
-  };
-  for (const block of jsonLdBlocks(html))
-    walk(block, 0);
-  return { listings: out, lists };
-}
-var pageSource = {
-  id: "page",
-  async search(target, fetch2) {
-    if (!fetch2)
-      throw new SourceMiss("this bot reads no pages");
-    let body;
-    try {
-      const response = await fetch2.get(target, { [NEVER_EBAY]: "1" });
-      if (response.status !== 200)
-        throw new SourceMiss(`HTTP ${response.status}`);
-      body = response.body;
-    } catch (err) {
-      if (err instanceof SourceMiss)
-        throw err;
-      throw new SourceMiss(`the read failed: ${err instanceof Error ? err.message : String(err)}`, {
-        cause: err
-      });
-    }
-    const { listings, lists } = readListings(body, target);
-    if (listings.length === 0 && lists === 0)
-      throw new SourceMiss("no listings in the page's structured data");
-    return listings;
-  }
-};
-var nonNegative = (n) => n !== null && Number.isFinite(n) && n >= 0 ? n : undefined;
-function ebayItem(url) {
-  if (url === null)
-    return null;
-  const u = new URL(url);
-  const item = /^\/itm\/(?:[^/]+\/)?(\d{6,20})\/?$/.exec(u.pathname);
-  return isEbayHost(u.hostname) && item ? `https://${u.hostname}/itm/${item[1]}` : url;
-}
-function submittedListing(raw) {
-  const title = typeof raw.title === "string" ? clean(raw.title, TITLE_CHARS, true) : "";
-  if (typeof raw.url !== "string" || !/^https?:\/\/[^/\\]/i.test(raw.url.trim()))
-    return null;
-  const url = ebayItem(absolute(raw.url, "https://invalid.example/"));
-  if (!title || !url || url.startsWith("https://invalid.example/"))
-    return null;
-  const price = typeof raw.price === "number" && Number.isFinite(raw.price) && raw.price >= 0 ? raw.price : typeof raw.price === "string" ? nonNegative(parsePrice(raw.price)) : undefined;
-  const currency = typeof raw.currency === "string" && /^[A-Za-z]{3}$/.test(raw.currency.trim()) ? raw.currency.trim().toUpperCase() : undefined;
-  const condition = typeof raw.condition === "string" ? clean(raw.condition, CONDITION_CHARS, true) : "";
-  const seller = typeof raw.seller === "string" ? clean(raw.seller, SELLER_CHARS, true) : "";
-  return {
-    id: url,
-    title,
-    url,
-    ...price !== undefined ? { price } : {},
-    ...currency ? { currency } : {},
-    ...condition ? { condition } : {},
-    ...seller ? { seller } : {}
-  };
-}
-function inboxSource(read) {
-  return {
-    id: "inbox",
-    async search(target) {
-      let items;
-      try {
-        items = await read(target);
-      } catch (err) {
-        throw new SourceMiss("the inbox could not be read", { cause: err });
-      }
-      const byId = new Map;
-      for (const raw of items) {
-        const l = submittedListing(raw);
-        if (!l)
-          continue;
-        byId.delete(l.id);
-        byId.set(l.id, l);
-      }
-      return [...byId.values()].slice(-MAX_LISTINGS);
-    }
-  };
-}
+  capabilities: ["notify"],
+  schedule: ["calendar"],
+  intake: {
+    options: [
+      {
+        name: "interests",
+        description: "What they are into, separated by commas",
+        required: true,
+        kind: "string"
+      },
+      {
+        name: "lens",
+        description: "The gift lens: general, birthday, anniversary or christmas",
+        required: false,
+        kind: "string"
+      },
+      {
+        name: "for",
+        description: "Who the ideas are for, if not you",
+        required: false,
+        kind: "string"
+      },
+      { name: "notes", description: "Anything else to weigh", required: false, kind: "string" },
+      { name: "every", description: "Days between runs", required: false, kind: "integer" }
+    ]
+  },
+  async prepare(ctx) {
+    return scoutJob(ctx.config, scoutState(ctx.state));
+  },
+  async finish(ctx, result) {
+    const stored = scoutState(ctx.state);
+    const state = ctx.occurrence.dedupeKey.startsWith(FOLLOW_UP_PREFIX) ? stored : { ...stored, failures: 0 };
+    if (result.kind !== "success")
+      return failed2(ctx, state, result.kind, result.detail);
+    return afterRun(ctx, state, result.structuredOutput);
+  }
+});
 
 // node_modules/@rackbops/docket-types/dist/want-bgg.js
 var BGG_HOST = "boardgamegeek.com";
@@ -4307,11 +4453,8 @@ var SHOPIFY_COUNTRY = "US";
 var SHOPIFY_CURRENCY = "USD";
 var SHOPIFY_ATTRIBUTION = "via Shopify";
 var MAX_VARIANTS = 20;
-var TITLE_CHARS2 = 150;
-var SELLER_CHARS2 = 80;
 function shopifyRequest(s) {
-  const asked = (s.currency ?? "").trim().toUpperCase();
-  const currency = /^[A-Z]{3}$/.test(asked) ? asked : SHOPIFY_CURRENCY;
+  const currency = currencyCode(s.currency) ?? SHOPIFY_CURRENCY;
   const filters = { available: true };
   if (s.maxPrice !== undefined && Number.isFinite(s.maxPrice) && s.maxPrice >= 0)
     filters.price = { max: Math.floor(s.maxPrice * minorUnits(currency) + 0.000001) };
@@ -4327,7 +4470,6 @@ function shopifyRequest(s) {
     }
   };
 }
-var isObj5 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var QUERY_CHARS = 200;
 function shopifyQuery(query) {
   const line = clean(query, 1e4, true);
@@ -4364,14 +4506,8 @@ function listingUrl(raw) {
       u.searchParams.delete(key);
   return safeUrl(u.toString());
 }
-var ZERO_DECIMAL = new Set("BIF CLP DJF GNF ISK JPY KMF KRW PYG RWF UGX UYI VND VUV XAF XOF XPF".split(" "));
-var THREE_DECIMAL = new Set("BHD IQD JOD KWD LYD OMR TND".split(" "));
-function minorUnits(currency) {
-  const c = currency.toUpperCase();
-  return ZERO_DECIMAL.has(c) ? 1 : THREE_DECIMAL.has(c) ? 1000 : 100;
-}
 function priceOf(v) {
-  if (!isObj5(v))
+  if (!isObj3(v))
     return null;
   const amount = v.amount;
   const currency = typeof v.currency === "string" ? v.currency.trim().toUpperCase() : "";
@@ -4389,17 +4525,17 @@ function isNew(variant) {
   return all.every((x) => typeof x === "string" && x.trim().toLowerCase() === "new");
 }
 function parseShopifyAnswer(body, query) {
-  const result = isObj5(body) && isObj5(body.data) ? body.data.alexandria : undefined;
+  const result = isObj3(body) && isObj3(body.data) ? body.data.alexandria : undefined;
   const first = Array.isArray(result) ? result[0] : undefined;
-  if (!isObj5(first))
+  if (!isObj3(first))
     throw new SourceMiss("Firecrawl's answer had no search result");
   if (first.error !== undefined && first.error !== null) {
     const e = first.error;
-    const why = isObj5(e) && typeof e.code === "string" ? clean(e.code, 60, true) : "an error";
+    const why = isObj3(e) && typeof e.code === "string" ? clean(e.code, 60, true) : "an error";
     throw new SourceMiss(`Shopify's search failed (${why})`);
   }
   const data = first.data;
-  if (!isObj5(data) || !Array.isArray(data.products))
+  if (!isObj3(data) || !Array.isArray(data.products))
     throw new SourceMiss("Shopify's search answer had no products");
   const words = searchWords(query);
   const out = [];
@@ -4407,32 +4543,32 @@ function parseShopifyAnswer(body, query) {
   for (const product of data.products.slice(0, SHOPIFY_LIMIT)) {
     if (out.length >= MAX_LISTINGS)
       break;
-    if (!isObj5(product) || typeof product.title !== "string")
+    if (!isObj3(product) || typeof product.title !== "string")
       continue;
     if (!matchesWords(product.title.slice(0, 2000), words))
       continue;
-    const title = clean(product.title, TITLE_CHARS2, true);
+    const title = clean(product.title, TITLE_CHARS, true);
     if (!title)
       continue;
     const variants = Array.isArray(product.variants) ? product.variants.slice(0, MAX_VARIANTS) : [];
     for (const v of variants) {
       if (out.length >= MAX_LISTINGS)
         break;
-      if (!isObj5(v) || typeof v.id !== "string" || v.id.length > 300 || !isNew(v))
+      if (!isObj3(v) || typeof v.id !== "string" || v.id.length > 300 || !isNew(v))
         continue;
-      if (!isObj5(v.availability) || v.availability.available !== true)
+      if (!isObj3(v.availability) || v.availability.available !== true)
         continue;
       const url = listingUrl(v.url);
       const id = `shopify:${v.id}`;
       if (!url || seen.has(id))
         continue;
       seen.add(id);
-      const own = typeof v.title === "string" ? clean(v.title, TITLE_CHARS2, true) : "";
+      const own = typeof v.title === "string" ? clean(v.title, TITLE_CHARS, true) : "";
       const named = own !== "" && own.toLowerCase() !== "default title" && !title.toLowerCase().includes(own.toLowerCase());
-      const name = named ? clean(`${title} (${own})`, TITLE_CHARS2, true) : title;
+      const name = named ? clean(`${title} (${own})`, TITLE_CHARS, true) : title;
       const price = priceOf(v.price);
-      const seller = isObj5(v.seller) && typeof v.seller.name === "string" ? v.seller.name : "";
-      const sold = clean(seller, SELLER_CHARS2, true);
+      const seller = isObj3(v.seller) && typeof v.seller.name === "string" ? v.seller.name : "";
+      const sold = clean(seller, SELLER_CHARS, true);
       out.push({
         id,
         title: name,
@@ -4458,12 +4594,9 @@ function shopifySource(scrape) {
       } catch (err) {
         throw new SourceMiss(`Shopify could not be searched: ${clean(err instanceof Error ? err.message : String(err), 200, true)}`, { cause: err });
       }
-      if (status === 401 || status === 402 || status === 403)
-        throw new SourceUnavailableError(status === 402 ? "the Firecrawl account is out of credits" : "Firecrawl refused the key");
-      if (status === 429 || status >= 500)
-        throw new SourceMiss(`Firecrawl is busy (HTTP ${status})`);
-      if (status !== 200)
-        throw new SourceMiss(`Firecrawl answered HTTP ${status}`);
+      checkSearchStatus(status, "Firecrawl", "Firecrawl refused the key", {
+        402: "the Firecrawl account is out of credits"
+      });
       return parseShopifyAnswer(body, target);
     }
   };
@@ -4475,12 +4608,8 @@ var EBAY_MARKETPLACE = "EBAY_US";
 var EBAY_CURRENCY = "USD";
 var EBAY_LIMIT = 50;
 var EBAY_ATTRIBUTION = "via eBay";
-var TITLE_CHARS3 = 150;
-var CONDITION_CHARS2 = 40;
-var SELLER_CHARS3 = 80;
 function ebayRequest(s) {
-  const asked = (s.currency ?? "").trim().toUpperCase();
-  const currency = asked === "" ? EBAY_CURRENCY : asked;
+  const currency = currencyCode(s.currency) ?? EBAY_CURRENCY;
   const params = {
     q: shopifyQuery(s.query),
     limit: String(EBAY_LIMIT),
@@ -4492,9 +4621,8 @@ function ebayRequest(s) {
   }
   return { path: EBAY_SEARCH_PATH, params, marketplace: EBAY_MARKETPLACE };
 }
-var isObj6 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 function amountOf(v) {
-  if (!isObj6(v))
+  if (!isObj3(v))
     return null;
   const raw = typeof v.value === "string" || typeof v.value === "number" ? String(v.value) : "";
   const currency = typeof v.currency === "string" ? v.currency.trim().toUpperCase() : "";
@@ -4517,7 +4645,7 @@ function itemUrl(raw) {
   return item ? safeUrl(`https://${u.hostname.toLowerCase()}/itm/${item[1]}`) : null;
 }
 function sellerOf(v) {
-  if (!isObj6(v) || typeof v.username !== "string")
+  if (!isObj3(v) || typeof v.username !== "string")
     return "";
   const name = clean(v.username, 40, true);
   if (!name)
@@ -4528,10 +4656,10 @@ function sellerOf(v) {
     parts.push(`${pct}% positive`);
   if (typeof v.feedbackScore === "number" && Number.isInteger(v.feedbackScore))
     parts.push(`${v.feedbackScore} feedback`);
-  return clean(parts.join(", "), SELLER_CHARS3, true);
+  return clean(parts.join(", "), SELLER_CHARS, true);
 }
 function parseEbayAnswer(body, query) {
-  if (!isObj6(body) || body.itemSummaries === undefined && typeof body.total !== "number")
+  if (!isObj3(body) || body.itemSummaries === undefined && typeof body.total !== "number")
     throw new SourceMiss("eBay's answer was not a search result");
   const items = Array.isArray(body.itemSummaries) ? body.itemSummaries : [];
   const words = searchWords(query);
@@ -4540,11 +4668,11 @@ function parseEbayAnswer(body, query) {
   for (const item of items.slice(0, EBAY_LIMIT * 4)) {
     if (out.length >= MAX_LISTINGS)
       break;
-    if (!isObj6(item) || typeof item.title !== "string" || typeof item.itemId !== "string")
+    if (!isObj3(item) || typeof item.title !== "string" || typeof item.itemId !== "string")
       continue;
     if (!matchesWords(item.title.slice(0, 2000), words))
       continue;
-    const title = clean(item.title, TITLE_CHARS3, true);
+    const title = clean(item.title, TITLE_CHARS, true);
     const url = itemUrl(item.itemWebUrl);
     if (!title || !url || item.itemId.length > 120)
       continue;
@@ -4558,7 +4686,7 @@ function parseEbayAnswer(body, query) {
     const price = amountOf(auction && !buyNow ? item.currentBidPrice ?? item.price : item.price);
     const state = typeof item.condition === "string" ? clean(item.condition, 30, true) : "";
     const kind = auction ? [buyNow ? "auction, Buy It Now" : "auction"] : [];
-    const condition = clean([state, ...kind].filter(Boolean).join(", "), CONDITION_CHARS2, true);
+    const condition = clean([state, ...kind].filter(Boolean).join(", "), CONDITION_CHARS, true);
     const seller = sellerOf(item.seller);
     out.push({
       id: `ebay:${number}`,
@@ -4584,17 +4712,49 @@ function ebaySource(browse) {
       } catch (err) {
         throw new SourceMiss(`eBay could not be searched: ${clean(err instanceof Error ? err.message : String(err), 200, true)}`, { cause: err });
       }
-      if (status === 401 || status === 403)
-        throw new SourceUnavailableError("eBay refused the app's keys");
-      if (status === 429 || status >= 500)
-        throw new SourceMiss(`eBay is busy (HTTP ${status})`);
-      if (status !== 200)
-        throw new SourceMiss(`eBay answered HTTP ${status}`);
+      checkSearchStatus(status, "eBay", "eBay refused the app's keys");
       return parseEbayAnswer(body, target);
     }
   };
 }
 
+// node_modules/@rackbops/docket-types/dist/want-text.js
+var SOURCE_TEXT = {
+  page: {
+    attribution: null,
+    where: null,
+    missing: "such source",
+    judgeWhere: "a shop page they gave"
+  },
+  bgg: {
+    attribution: BGG_ATTRIBUTION,
+    where: "BoardGameGeek",
+    missing: "BoardGameGeek access",
+    judgeWhere: "BoardGameGeek's marketplace"
+  },
+  inbox: {
+    attribution: null,
+    where: "what was sent in",
+    missing: "such source",
+    judgeWhere: "alert emails and searches sent in for them (from eBay, BoardGameGeek or a shop)"
+  },
+  shopify: {
+    attribution: SHOPIFY_ATTRIBUTION,
+    where: "Shopify's store search",
+    missing: "Shopify search (no Firecrawl key)",
+    judgeWhere: "a search of Shopify stores' catalogs (new copies in stock)"
+  },
+  ebay: {
+    attribution: EBAY_ATTRIBUTION,
+    where: "eBay's search",
+    missing: "eBay search (no eBay keys)",
+    judgeWhere: "a search of eBay's listings, through eBay's own API"
+  }
+};
+function sourceText(source) {
+  return Object.hasOwn(SOURCE_TEXT, source) ? SOURCE_TEXT[source] : SOURCE_TEXT.page;
+}
+
 // node_modules/@rackbops/docket-types/dist/wantlist.js
 var MAX_REPORTED = 500;
 var SHOWN_IN_DM = 5;
@@ -4624,13 +4784,53 @@ function wantState(value) {
   };
 }
 function withinLimits(l, config) {
-  const want = config.currency?.trim().toUpperCase();
-  if (want && l.currency && l.currency.toUpperCase() !== want)
+  if (l.price !== undefined && !(l.price >= 0))
+    return false;
+  const want = currencyCode(config.currency);
+  if (want && l.currency && currencyCode(l.currency) !== want)
     return false;
   if (config.maxPrice === undefined)
     return true;
   return l.price !== undefined && l.price <= config.maxPrice + 0.000000001;
 }
+var MAX_EXCLUDE = 20;
+var EXCLUDE_CHARS = 80;
+function parseExclude(text) {
+  const out = [];
+  const seen = new Set;
+  for (const raw of text.split(/[,\n]/)) {
+    const entry = raw.trim().slice(0, EXCLUDE_CHARS).trim();
+    const key = wordsOf(entry).join(" ");
+    if (!key || seen.has(key))
+      continue;
+    seen.add(key);
+    out.push(entry);
+    if (out.length === MAX_EXCLUDE)
+      break;
+  }
+  return out;
+}
+function isExcluded(title, value) {
+  const exclude = typeof value === "string" ? parseExclude(value) : value;
+  if (!Array.isArray(exclude) || exclude.length === 0)
+    return false;
+  const have = wordsOf(title);
+  return exclude.slice(0, MAX_EXCLUDE).some((entry) => {
+    if (typeof entry !== "string")
+      return false;
+    const want = wordsOf(entry.slice(0, EXCLUDE_CHARS));
+    if (want.length === 0)
+      return false;
+    for (let i = 0;i + want.length <= have.length; i++) {
+      if (want.every((w, j) => have[i + j] === w))
+        return true;
+    }
+    return false;
+  });
+}
+function wanted(l, config) {
+  return withinLimits(l, config) && !isExcluded(l.title, config.exclude);
+}
 function priceText(l, config) {
   return l.price === undefined ? "price not shown" : money(l.price, l.currency ?? config.currency ?? "");
 }
@@ -4641,7 +4841,8 @@ function listingLine(l, config) {
     ...l.condition ? [inert(l.condition)] : [],
     ...l.seller ? [`sold by ${inert(l.seller)}`] : []
   ];
-  const via = config.source === "bgg" ? ` (${BGG_ATTRIBUTION})` : config.source === "shopify" ? ` (${SHOPIFY_ATTRIBUTION})` : config.source === "ebay" ? ` (${EBAY_ATTRIBUTION})` : "";
+  const attribution = sourceText(config.source).attribution;
+  const via = attribution ? ` (${attribution})` : "";
   return `- ${parts.join(" -- ")} <${l.url}>${via}`;
 }
 function renderWant(title, taskId, fresh, config) {
@@ -4665,7 +4866,7 @@ function miss2(ctx, state, err) {
     summary: `nothing read: ${reason}`
   };
   if (tell) {
-    const where = ctx.config.source === "bgg" ? "BoardGameGeek" : ctx.config.source === "shopify" ? "Shopify's store search" : ctx.config.source === "ebay" ? "eBay's search" : ctx.config.source === "inbox" ? "what was sent in" : ctx.config.target;
+    const where = sourceText(ctx.config.source).where ?? ctx.config.target;
     outcome.notify = {
       text: clip(`${ctx.task.title}: I could read no listings from ${where} ${misses === 1 ? "just now" : `${misses} times in a row`} (${reason}). ` + "I keep looking; press Done to stop."),
       actions: ["done"]
@@ -4687,7 +4888,14 @@ async function pollWant(ctx, sources, stored) {
   if (!source) {
     return {
       kind: "done",
-      outcome: miss2(ctx, state, new SourceUnavailableError(`this bot has no ${ctx.config.source === "bgg" ? "BoardGameGeek access" : ctx.config.source === "shopify" ? "Shopify search (no Firecrawl key)" : ctx.config.source === "ebay" ? "eBay search (no eBay keys)" : "such source"}`))
+      outcome: miss2(ctx, state, new SourceUnavailableError(`this bot has no ${sourceText(ctx.config.source).missing}`))
+    };
+  }
+  const currency = currencyCode(ctx.config.currency);
+  if (ctx.config.source === "ebay" && currency && currency !== EBAY_CURRENCY) {
+    return {
+      kind: "done",
+      outcome: miss2(ctx, state, new SourceUnavailableError(`eBay US lists prices in ${EBAY_CURRENCY} only, so a watch in ${currency} never matches; ` + `set the currency to ${EBAY_CURRENCY} or leave it out`))
     };
   }
   let listings;
@@ -4702,9 +4910,11 @@ async function pollWant(ctx, sources, stored) {
     throw err;
   }
   const told = new Set(state.reported);
-  const within = listings.filter((l) => withinLimits(l, ctx.config));
+  const limited = listings.filter((l) => withinLimits(l, ctx.config));
+  const within = limited.filter((l) => !isExcluded(l.title, ctx.config.exclude));
   const fresh = within.filter((l) => !told.has(listingKey(l.id))).slice(0, MAX_NEW_PER_RUN);
-  const summary = `${listings.length} listed, ${within.length} within limits, ${fresh.length} new`;
+  const dropped = limited.length - within.length;
+  const summary = `${listings.length} listed, ${limited.length} within limits, ` + `${dropped > 0 ? `${dropped} excluded, ` : ""}${fresh.length} new`;
   const read = { ...state, misses: 0, warned: false };
   if (fresh.length === 0)
     return { kind: "done", outcome: { state: read, summary } };
@@ -4741,6 +4951,12 @@ function wantlistType(sources) {
           description: "Only listings in this currency",
           required: false,
           kind: "string"
+        },
+        {
+          name: "exclude",
+          description: "Leave out listings whose title has any of these words or phrases, separated by commas",
+          required: false,
+          kind: "string"
         }
       ]
     },
@@ -4778,7 +4994,7 @@ var JUDGE_MAX_BUDGET_USD = 0.5;
 var JUDGE_TIMEOUT_MS = 300000;
 var RETRY_GRACE_MS = 30 * 60000;
 var WHY_CHARS = 200;
-var SELLER_CHARS4 = 200;
+var SELLER_CHARS2 = 200;
 var PENDING_TITLE = 150;
 var PENDING_TEXT = 80;
 var JUDGE_SCHEMA = {
@@ -4801,10 +5017,9 @@ var JUDGE_SCHEMA = {
   },
   required: ["verdicts"]
 };
-var isObj7 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var str = (v, max) => typeof v === "string" ? clean(v, max, true) : "";
 function pendingListing(v) {
-  if (!isObj7(v) || typeof v.id !== "string")
+  if (!isObj3(v) || typeof v.id !== "string")
     return null;
   const url = safeUrl(v.url);
   const title = str(v.title, PENDING_TITLE);
@@ -4825,7 +5040,7 @@ function pendingListing(v) {
 }
 function judgeState(value) {
   const base = wantState(value);
-  const s = isObj7(value) ? value : {};
+  const s = isObj3(value) ? value : {};
   const pending = (Array.isArray(s.pending) ? s.pending : []).map(pendingListing).filter((l) => l !== null).slice(0, MAX_NEW_PER_RUN);
   const failures = typeof s.failures === "number" && s.failures >= 0 ? s.failures : 0;
   const retryAt = typeof s.retryAt === "string" && Number.isFinite(Date.parse(s.retryAt)) ? s.retryAt : undefined;
@@ -4874,13 +5089,14 @@ function closedSource(config) {
   return config.source === "inbox" || config.source === "shopify" || config.source === "ebay";
 }
 function limitsText(config) {
+  const currency = currencyCode(config.currency) ?? "";
   if (config.maxPrice !== undefined)
-    return `at or under ${money(config.maxPrice, config.currency ?? "")}`;
-  return config.currency ? `any price, in ${config.currency}` : "any price";
+    return `at or under ${money(config.maxPrice, currency)}`;
+  return currency ? `any price, in ${currency}` : "any price";
 }
 function judgeJob(title, config, pending) {
   const closed = closedSource(config);
-  const where = config.source === "bgg" ? "BoardGameGeek's marketplace" : config.source === "ebay" ? "a search of eBay's listings, through eBay's own API" : config.source === "shopify" ? "a search of Shopify stores' catalogs (new copies in stock)" : config.source === "inbox" ? "alert emails and searches sent in for them (from eBay, BoardGameGeek or a shop)" : "a shop page they gave";
+  const where = sourceText(config.source).judgeWhere;
   const lines = pending.map((l, i) => {
     const parts = [
       inert(l.title),
@@ -4926,18 +5142,18 @@ function judgeJob(title, config, pending) {
   };
 }
 function parseVerdicts(value, count) {
-  if (!isObj7(value) || !Array.isArray(value.verdicts))
+  if (!isObj3(value) || !Array.isArray(value.verdicts))
     return null;
   const out = new Map;
   for (const v of value.verdicts) {
-    if (!isObj7(v) || typeof v.n !== "number" || !Number.isInteger(v.n) || v.n < 1 || v.n > count || out.has(v.n))
+    if (!isObj3(v) || typeof v.n !== "number" || !Number.isInteger(v.n) || v.n < 1 || v.n > count || out.has(v.n))
       continue;
     if (typeof v.fit !== "string" || !FITS.includes(v.fit))
       continue;
     out.set(v.n, {
       fit: v.fit,
       why: inert(str(v.why, WHY_CHARS)),
-      seller: inert(str(v.seller, SELLER_CHARS4))
+      seller: inert(str(v.seller, SELLER_CHARS2))
     });
   }
   return out;
@@ -4984,13 +5200,6 @@ function settled(state, told) {
     failures: 0
   };
 }
-var RETRIED3 = new Set([
-  "schema_miss",
-  "malformed",
-  "timeout",
-  "error",
-  "auth_failed"
-]);
 var SAID3 = {
   auth_failed: "the model runner could not sign in",
   turn_cap: "the check needed more steps than it is allowed",
@@ -5003,13 +5212,12 @@ var SAID3 = {
 function judgeFailed(ctx, state, kind, detail) {
   const failures = state.failures + 1;
   const summary = clean(`judge ${kind} (try ${failures}): ${detail}`, 300, true);
-  if (RETRIED3.has(kind) && failures < MAX_TRIES) {
-    const wait = kind === "auth_failed" ? AUTH_RETRY_MS : 0;
-    const at = new Date(ctx.now.getTime() + wait).toISOString();
-    return { state: { ...state, failures, retryAt: at }, followUp: wait > 0 ? { at } : {}, summary };
+  const retry = retryOutcome(kind, failures, ctx.now);
+  if (retry) {
+    return { state: { ...state, failures, retryAt: retry.at }, followUp: retry.followUp, summary };
   }
   const reason = SAID3[kind] ?? "the check failed";
-  const within = state.pending.filter((l) => withinLimits(l, ctx.config));
+  const within = state.pending.filter((l) => wanted(l, ctx.config));
   const kept = { ...state, pending: within };
   return {
     state: settled(kept, within.length),
@@ -5026,7 +5234,7 @@ function judgeFailed(ctx, state, kind, detail) {
   };
 }
 function judged(ctx, stored, verdicts) {
-  const all = stored.pending.map((l, i) => ({ l, v: verdicts.get(i + 1) ?? { fit: "maybe", why: "", seller: "" } })).filter(({ l }) => withinLimits(l, ctx.config));
+  const all = stored.pending.map((l, i) => ({ l, v: verdicts.get(i + 1) ?? { fit: "maybe", why: "", seller: "" } })).filter(({ l }) => wanted(l, ctx.config));
   const state = { ...stored, pending: all.map((x) => x.l) };
   const rank = { match: 0, maybe: 1, no: 2 };
   const shown = all.filter((x) => x.v.fit !== "no").sort((a, b) => rank[a.v.fit] - rank[b.v.fit]);
@@ -5087,12 +5295,18 @@ function wantjudgeType(sources, o = {}) {
           description: "Only listings in this currency",
           required: false,
           kind: "string"
+        },
+        {
+          name: "exclude",
+          description: "Leave out listings whose title has any of these words or phrases, separated by commas",
+          required: false,
+          kind: "string"
         }
       ]
     },
     async prepare(ctx) {
       const state = judgeState(ctx.state);
-      const followUp = ctx.occurrence.dedupeKey.startsWith("followup:");
+      const followUp = ctx.occurrence.dedupeKey.startsWith(FOLLOW_UP_PREFIX);
       if (state.pending.length > 0) {
         const overdue = state.retryAt !== undefined && ctx.now.getTime() > Date.parse(state.retryAt) + RETRY_GRACE_MS;
         if (state.failures > 0 && !followUp && !overdue)
@@ -5244,7 +5458,7 @@ function intakeJob(ctx) {
     timeoutMs: INTAKE_TIMEOUT_MS
   };
 }
-function isObj8(v) {
+function isObj5(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
 function checkDraft(draft, types, tasks = []) {
@@ -5301,7 +5515,7 @@ function checkDraft(draft, types, tasks = []) {
   return null;
 }
 function readDraft(value) {
-  if (!isObj8(value) || !isObj8(value.fields) || typeof value.type !== "string")
+  if (!isObj5(value) || !isObj5(value.fields) || typeof value.type !== "string")
     return null;
   if (value.action !== "create" && value.action !== "edit")
     return null;
@@ -5326,7 +5540,7 @@ function readIntake(result, types, tasks = []) {
   if (result.kind !== "success")
     return { ok: false, retry: false, problem: result.kind };
   const v = result.structuredOutput;
-  if (!isObj8(v) || typeof v.reply !== "string" || !INTAKE_STATES.includes(v.state)) {
+  if (!isObj5(v) || typeof v.reply !== "string" || !INTAKE_STATES.includes(v.state)) {
     return {
       ok: false,
       retry: true,
@@ -6214,11 +6428,21 @@ class SqliteStore {
       params.push(expected);
     return this.run(`UPDATE occurrences SET ${sets.join(", ")} WHERE seq = ?${guard}`, ...params).changes > 0;
   }
-  async deleteOccurrence(id) {
+  async deleteOccurrence(id, guard) {
     const seq = seqOf("o", id);
     if (seq === null)
       return false;
-    return this.run("DELETE FROM occurrences WHERE seq = ? AND status = 'queued'", seq).changes > 0;
+    if (guard === undefined)
+      return this.run("DELETE FROM occurrences WHERE seq = ? AND status = 'queued'", seq).changes > 0;
+    const last = guard.lastEventId === null ? null : seqOf("e", guard.lastEventId);
+    if (guard.lastEventId !== null && last === null)
+      return false;
+    if (last === null) {
+      return this.run("DELETE FROM occurrences WHERE seq = ? AND status = 'queued' AND record IS NULL AND NOT EXISTS (SELECT 1 FROM events WHERE occurrence_id = ?)", seq, id).changes > 0;
+    }
+    return this.run(`DELETE FROM occurrences WHERE seq = ? AND status = 'queued' AND record IS NULL
+         AND EXISTS (SELECT 1 FROM events WHERE seq = ? AND occurrence_id = ?)
+         AND NOT EXISTS (SELECT 1 FROM events WHERE occurrence_id = ? AND seq > ?)`, seq, last, id, id, last).changes > 0;
   }
   async requeueRunning(lane) {
     const rows = lane === undefined ? this.all("SELECT seq FROM occurrences WHERE status = 'running' ORDER BY seq") : this.all("SELECT seq FROM occurrences WHERE status = 'running' AND lane = ? ORDER BY seq", lane);
@@ -6258,6 +6482,10 @@ class SqliteStore {
     const next = this.one("SELECT * FROM occurrences WHERE task_id = ? AND status = 'queued' AND due_at > ? ORDER BY due_at, created_at, seq LIMIT 1", taskId, now);
     return { rows: rows.reverse().map(toOccurrence), total, next: next ? toOccurrence(next) : null };
   }
+  async runsNowSince(ownerId, since) {
+    const row = this.one("SELECT COUNT(*) AS n FROM occurrences o JOIN tasks t ON o.task_id = 't' || t.seq WHERE t.owner_id = ? AND o.dedupe_key LIKE 'now:%' AND o.created_at >= ?", ownerId, since);
+    return Number(row?.n ?? 0);
+  }
   async repliesTo(taskId, occurrenceIds, userId) {
     if (occurrenceIds.length === 0)
       return [];
@@ -6291,7 +6519,7 @@ class SqliteStore {
   }
   async listSeries(taskId, filter = {}) {
     const points = filter.since === undefined ? this.all("SELECT * FROM series WHERE task_id = ? ORDER BY at, seq", taskId) : this.all("SELECT * FROM series WHERE task_id = ? AND at >= ? ORDER BY at, seq", taskId, filter.since);
-    const kept = filter.limit === undefined ? points : points.slice(-filter.limit);
+    const kept = filter.limit === undefined ? points : !(filter.limit >= 1) ? [] : points.slice(-filter.limit);
     return kept.map(toPoint);
   }
   async addFinding(f) {
@@ -6366,10 +6594,10 @@ class SqliteStore {
        WHERE occurrence_id = ? AND user_id = ? AND retry_at IS NOT NULL`, at, occurrenceId, userId);
     return changes === 1 ? this.delivery(occurrenceId, userId) : null;
   }
-  async settleDelivery(occurrenceId, userId, settle) {
+  async settleDelivery(occurrenceId, userId, settle, expected) {
     const { changes } = this.run(`UPDATE deliveries SET status = ?, message_id = ?, error = ?, attempts = ?, deferrals = ?, retry_at = ?, settled_at = ?
-       WHERE occurrence_id = ? AND user_id = ?`, settle.status, settle.messageId ?? null, settle.error ?? null, settle.attempts, settle.deferrals, settle.retryAt, settle.at, occurrenceId, userId);
-    if (changes === 0)
+       WHERE occurrence_id = ? AND user_id = ?${expected === undefined ? "" : " AND status = ?"}`, settle.status, settle.messageId ?? null, settle.error ?? null, settle.attempts, settle.deferrals, settle.retryAt, settle.at, occurrenceId, userId, ...expected === undefined ? [] : [expected]);
+    if (changes === 0 && !this.delivery(occurrenceId, userId))
       throw new Error(`no delivery ${occurrenceId}:${userId}`);
     return this.delivery(occurrenceId, userId);
   }
@@ -6743,7 +6971,7 @@ function retimed(s, day, owner) {
   return null;
 }
 async function heldRuns(store, task) {
-  return (await store.listOccurrences({ taskId: task.id, status: "queued" })).filter((o) => !o.dedupeKey.startsWith(SNOOZE_PREFIX) && !hasFired(o));
+  return (await store.listOccurrences({ taskId: task.id, status: "queued" })).filter((o) => !isOffSchedule(o.dedupeKey) && !hasFired(o));
 }
 async function restoreHeldRun(store, task, held, before, after, now) {
   const s = task.schedule;
@@ -7233,7 +7461,7 @@ async function rescheduleOwned(d, owner, zoneChanged, before) {
   return moved;
 }
 async function rescheduleKeepingSnoozes(d, task, owner, schedule, actorId) {
-  const { task: updated, jobOut } = await reschedule(d.store, task, owner, schedule, actorId, d.clock.now());
+  const { task: updated, jobOut } = await reschedule(d.store, task, owner, schedule, actorId, d.clock.now(), d.types[task.type]);
   return { task: updated, jobOut };
 }
 var JOB_OUT_NOTE = "A run of this task is already with the model runner: it still counts, and the new schedule follows it.";
@@ -7397,6 +7625,10 @@ async function pauseLocked(d, user, taskId) {
   const at = d.clock.now().toISOString();
   await d.store.updateTask(task.id, { status: "paused", at });
   await d.store.addTaskEvent({ taskId: task.id, actorId: user.id, kind: "paused", detail: "paused by the owner", at });
+  for (const o of await d.store.listOccurrences({ taskId: task.id, status: "queued" })) {
+    if (o.dedupeKey.startsWith(RUN_NOW_PREFIX))
+      await deleteIdleRun(d.store, o);
+  }
   return { ok: true, text: `Paused \`${task.id}\`: nothing is sent until you resume it.` };
 }
 function resumeTask(d, user, taskId) {
@@ -7437,8 +7669,7 @@ async function deleteLocked(d, user, taskId) {
     return { ok: false, error: NO_SUCH_TASK };
   const at = d.clock.now().toISOString();
   for (const o of await d.store.listOccurrences({ taskId: task.id, status: "queued" })) {
-    if (!hasFired(o))
-      await d.store.deleteOccurrence(o.id);
+    await deleteIdleRun(d.store, o);
   }
   await d.store.updateTask(task.id, { status: "archived", at });
   await d.store.addTaskEvent({ taskId: task.id, actorId: user.id, kind: "archived", detail: "deleted by the owner", at });
@@ -7530,6 +7761,10 @@ function nearPattern(near) {
   const literal = near.trim().replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
   return `${literal}[^0-9]{0,40}([0-9](?:[0-9.,]{0,14}[0-9])?)`;
 }
+function patternRefusal(pattern) {
+  const problem = pattern === undefined ? null : patternProblem(pattern);
+  return problem ? `That \`near\` text cannot be used: ${problem}` : null;
+}
 function priceSettingsPlan(input) {
   const hours = input.hours ?? DEFAULT_POLL_HOURS;
   if (!Number.isInteger(hours) || hours < 1 || hours > MAX_POLL_HOURS)
@@ -7600,7 +7835,11 @@ async function startPrice(d, user, input) {
   if (capped)
     return { ok: false, error: capped };
   const { name, hours, drop, baseline } = settings;
-  const config = { url, dropPercent: drop, baseline, ...near ? { pattern: nearPattern(near) } : {} };
+  const pattern = near ? nearPattern(near) : undefined;
+  const refused = patternRefusal(pattern);
+  if (refused)
+    return { ok: false, error: refused };
+  const config = { url, dropPercent: drop, baseline, ...pattern !== undefined ? { pattern } : {} };
   return { ok: true, pending: { url, title: name || titleFor(url), hours, config } };
 }
 async function trackPrice(d, user, input) {
@@ -9293,6 +9532,19 @@ var MIGRATIONS = [
     ended_at TEXT
   );
   CREATE UNIQUE INDEX intake_conversations_open ON intake_conversations (user_id) WHERE status = 'open';
+  `,
+  `
+  CREATE TABLE api_idempotency (
+    user_id TEXT NOT NULL,
+    key TEXT NOT NULL,
+    request_hash TEXT NOT NULL,
+    claim TEXT NOT NULL,
+    status INTEGER,
+    answer TEXT,
+    created_at TEXT NOT NULL,
+    PRIMARY KEY (user_id, key)
+  );
+  CREATE INDEX api_idempotency_created ON api_idempotency (created_at);
   `
 ];
 var BUSY_TIMEOUT_MS = 5000;
@@ -9930,6 +10182,7 @@ function scoutSchedule(every, zone, now) {
   const start = `${w.year}-${String(w.month).padStart(2, "0")}-${String(w.day).padStart(2, "0")}`;
   return { kind: "calendar", every, unit: "day", start };
 }
+var SCOUT_CAP = `You already have ${MAX_LIVE_SCOUTS} scouts, the most one person may. Delete or change one instead.`;
 async function liveScouts(d, user) {
   const active = await d.store.listTasks({ ownerId: user.id, status: "active", type: "scout" });
   const paused = await d.store.listTasks({ ownerId: user.id, status: "paused", type: "scout" });
@@ -9946,7 +10199,7 @@ async function createScout(d, user, input) {
   if (capped)
     return { ok: false, error: capped };
   if (await liveScouts(d, user) >= MAX_LIVE_SCOUTS) {
-    return { ok: false, error: `You already have ${MAX_LIVE_SCOUTS} scouts, the most one person may. Delete or change one instead.` };
+    return { ok: false, error: SCOUT_CAP };
   }
   const now = d.clock.now();
   const actor = { userId: user.id, admin: user.admin };
@@ -10104,6 +10357,8 @@ async function pressLocked(d, user, ref) {
   } catch (err) {
     if (err instanceof ReplyRefusedError)
       return { ok: false, error: err.message };
+    if (err instanceof ConsentError)
+      return { ok: false, error: "That is not yours to answer." };
     throw err;
   }
 }
@@ -10560,6 +10815,7 @@ class Roster {
       del("web_sessions", "user_id = ?", userId);
       del("web_login_tokens", "user_id = ?", userId);
       del("api_tokens", "user_id = ?", userId);
+      del("api_idempotency", "user_id = ?", userId);
       del("notices", "key LIKE 'budget:person:' || ? || ':%'", userId);
       del("notices", "key LIKE 'digest:' || ? || ':%'", userId);
       del("ceiling_changes", "user_id = ?", userId);
@@ -10586,6 +10842,24 @@ function replyText(r) {
     return `chose ${String(r.payload?.choice ?? "?")}`;
   return r.kind === "opt_out" ? "opted out" : r.kind;
 }
+function owed(r) {
+  return r.retryAt !== null || r.status === "claimed" || r.status === "pending";
+}
+function deliveryView(o, rows, people, viewer, seesEveryone) {
+  const shown = seesEveryone ? rows : rows.filter((r) => r.userId === viewer.id);
+  const sends = shown.map((r) => ({ to: people.get(r.userId)?.displayName ?? r.userId, status: r.status, error: r.error ? clip2(r.error, 120) : null }));
+  if (shown.length === 0) {
+    const finished = o.status !== "queued" && o.status !== "running";
+    return { state: finished ? "nothing_to_send" : "not_run", reason: null, sends };
+  }
+  const lost = shown.find((r) => r.status === "failed" && !owed(r));
+  if (lost)
+    return { state: "failed", reason: lost.error ? clip2(lost.error, 120) : null, sends };
+  const unsure = shown.find((r) => r.status === "unconfirmed");
+  if (unsure)
+    return { state: "unconfirmed", reason: unsure.error ? clip2(unsure.error, 120) : null, sends };
+  return { state: shown.some(owed) ? "sending" : "delivered", reason: null, sends };
+}
 var OTHER_RECIPIENT_ERROR = "a recipient cannot be messaged";
 function runView(o, replies, people, viewer, now, seesEveryone) {
   const error = o.status === "failed" && o.error ? seesEveryone || !errorNamesOther(o.error, viewer.id) ? clip2(o.error, 120) : OTHER_RECIPIENT_ERROR : null;
@@ -10660,8 +10934,11 @@ async function loadHistory(d, user, taskId) {
   const tail = await d.store.changesTail(task.id, seesEveryone ? null : user.id, HISTORY_CHANGES);
   const lead = tail.before?.kind === "paused" ? [tail.before] : [];
   const changes = seesEveryone ? tail.rows : changesForRecipient([...lead, ...tail.rows], user.id).slice(lead.length);
+  const deliveries = new Map;
+  for (const o of runs.rows)
+    deliveries.set(o.id, await d.store.listDeliveries({ occurrenceId: o.id }));
   const people = new Map;
-  for (const r of replies) {
+  for (const r of [...replies, ...[...deliveries.values()].flat()]) {
     if (!people.has(r.userId)) {
       const u = await d.store.getUser(r.userId);
       if (u)
@@ -10684,7 +10961,7 @@ async function loadHistory(d, user, taskId) {
     task,
     cadence: task.schedule && owner ? describeSchedule(task.schedule, owner, user.timeZone, now) : "no schedule",
     next: next ? formatInstant(next.dueAt, user.timeZone, now) : null,
-    runs: runs.rows.map((o) => runView(o, replies, people, user, now, seesEveryone)),
+    runs: runs.rows.map((o) => ({ ...runView(o, replies, people, user, now, seesEveryone), delivery: deliveryView(o, deliveries.get(o.id) ?? [], people, user, seesEveryone) })),
     earlierRuns: Math.max(0, runs.total - HISTORY_RUNS),
     changes: changes.map((e) => changeView(e, user, now, names)),
     earlierChanges: Math.max(0, tail.total - HISTORY_CHANGES),
@@ -11221,6 +11498,52 @@ async function loadUsage(store, now, days = USAGE_DAYS) {
   return usageReport(rows, now, days);
 }
 
+// plugins/tracker/src/run-now.ts
+var RUNNABLE = new Set(["reminder", "price", "wantlist", "wantjudge", "scout"]);
+var RUN_NOW_PER_DAY = 10;
+var DAY_MS4 = 24 * 3600000;
+var NOT_NOW = "That task cannot run now:";
+function runNow(d, user, taskId) {
+  return d.locks.turn(taskId.trim(), () => runNowLocked(d, user, taskId), () => ({ ok: false, error: TASK_BUSY }));
+}
+async function runNowLocked(d, user, taskId) {
+  const task = await ownLiveTask(d, user, taskId);
+  if (!task)
+    return { ok: false, error: NO_SUCH_TASK };
+  if (task.status !== "active")
+    return { ok: false, error: `That task is ${task.status}, not active.` };
+  if (task.type === "renewal")
+    return { ok: false, error: `${NOT_NOW} a renewal asks about its own date, at its own time.` };
+  if (task.type === "research")
+    return { ok: false, error: `${NOT_NOW} a research request runs once.` };
+  if (!RUNNABLE.has(task.type))
+    return { ok: false, error: `${NOT_NOW} a ${task.type} runs only on its own schedule.` };
+  if (!task.schedule || task.schedule.kind === "once") {
+    return { ok: false, error: `${NOT_NOW} a one-off runs once, at its own time; change its time instead.` };
+  }
+  const now = d.clock.now();
+  const queued = await d.store.listOccurrences({ taskId: task.id, status: "queued" });
+  if (queued.some((o) => !hasFired(o) && Date.parse(o.dueAt) <= now.getTime())) {
+    return { ok: false, error: `${NOT_NOW} it already has a run due, which is on its way.` };
+  }
+  if (queued.some((o) => !hasFired(o) && o.dedupeKey.startsWith(FOLLOW_UP_PREFIX))) {
+    return { ok: false, error: `${NOT_NOW} it is waiting to try its last look again.` };
+  }
+  const since = new Date(now.getTime() - DAY_MS4).toISOString();
+  if (await d.store.runsNowSince(user.id, since) >= RUN_NOW_PER_DAY) {
+    return { ok: false, error: `You already ran ${RUN_NOW_PER_DAY} tasks now in the last 24 hours; each runs on its own schedule meanwhile.` };
+  }
+  const at = now.toISOString();
+  const made = await d.store.createOccurrence({ taskId: task.id, lane: task.lane, dueAt: at, dedupeKey: runNowKey(task.id, crypto.randomUUID()), at });
+  if (!made)
+    return { ok: false, error: TASK_BUSY };
+  d.log.info(`run now: ${task.id} for ${user.id} (${made.id})`);
+  return { ok: true, text: `Running \`${task.id}\` now: ${when2(task)}, and its schedule stays as it was.` };
+}
+function when2(task) {
+  return task.lane === "execute" ? "it goes to the model runner on its next turn (a daily ceiling met holds it until midnight Eastern)" : "it goes within a minute";
+}
+
 // node_modules/@rackbops/styles/rackbops-noir/bundle.css
 var bundle_default = `:where([data-rb-style], [data-rb-style] *), :where([data-rb-style], [data-rb-style] *):before, :where([data-rb-style], [data-rb-style] *):after {
   box-sizing: border-box;
@@ -12565,7 +12888,7 @@ function loginPage(base, input) {
 </section>`
   });
 }
-function when2(entry, viewer, now) {
+function when3(entry, viewer, now) {
   return entry.next ? formatInstant(entry.next.dueAt, viewer.timeZone, now) : "nothing due";
 }
 function cadence(entry, viewer, now) {
@@ -12588,7 +12911,7 @@ function tasksPage(v, data, now, flash = null, research = false) {
   const rows = data.entries.map((e) => html`<tr>
 <td><a class="rb-link" href="${v.base}/tasks/${e.task.id}">${e.task.title}</a></td>
 <td>${e.from ? name3(e.from) : "you"}</td>
-<td>${when2(e, v.user, now)}</td>
+<td>${when3(e, v.user, now)}</td>
 <td>${cadence(e, v.user, now)}</td>
 </tr>`);
   const active = data.entries.length === 0 ? html`<p class="rb-muted">You have no active tasks.</p>` : html`<div class="rb-table-scroll"><table class="rb-table">
@@ -13117,6 +13440,31 @@ function editValues(d, user, task) {
   return { name: task.title, hours: String(every), drop: String(c.dropPercent ?? 10), baseline: c.baseline ?? "last" };
 }
 
+// plugins/tracker/src/web/task-version.ts
+function taskVersion(task) {
+  const owned = { title: task.title, config: task.config, schedule: task.schedule, status: task.status, capabilities: task.capabilities };
+  return sha256(canonicalJson(owned)).slice(0, 16);
+}
+function canonicalJson(value) {
+  if (Array.isArray(value))
+    return `[${value.map(canonicalJson).join(",")}]`;
+  if (value !== null && typeof value === "object") {
+    const o = value;
+    return `{${Object.keys(o).sort().map((k) => `${JSON.stringify(k)}:${canonicalJson(o[k])}`).join(",")}}`;
+  }
+  return JSON.stringify(value);
+}
+function etag(version) {
+  return `"${version}"`;
+}
+function ifMatchVersion(header) {
+  if (header === null)
+    return null;
+  const m = /^\s*"([0-9a-f]{16})"\s*$/.exec(header);
+  return m?.[1] ?? null;
+}
+var VERSION_MISMATCH = "That task has changed since you read it. Read it again (GET the task) and send its new version in If-Match.";
+
 // plugins/tracker/src/web/editor.ts
 var READING = "I am still reading a page for your last new price tracker or want-list watch; try again when it is done.";
 var GONE = NO_LONGER_LISTED;
@@ -13124,7 +13472,14 @@ var writer = (e) => ({ d: e.d, queue: e.queue, reading: e.reading, userId: e.v.u
 function asUser(w, fn) {
   return w.queue(async () => {
     const user = await w.d.store.getUser(w.userId);
-    return user ? fn(user) : { ok: false, error: GONE };
+    if (!user)
+      return { ok: false, error: GONE };
+    if (w.ifMatch) {
+      const task = await w.d.store.getTask(w.ifMatch.taskId);
+      if (!task || taskVersion(task) !== w.ifMatch.version)
+        return { ok: false, error: VERSION_MISMATCH };
+    }
+    return fn(user);
   });
 }
 var WEB_READ_MS = 8000;
@@ -13217,6 +13572,9 @@ function saveEdit(w, task, form) {
     return asUser(w, (u) => editWant(w.d, u, task.id, wantEdit(form)));
   return asUser(w, (u) => editPrice(w.d, u, task.id, priceEdit(form)));
 }
+function runOn(w, taskId) {
+  return asUser(w, (u) => runNow(w.d, u, taskId));
+}
 function actOn(w, taskId, action) {
   const act = action === "pause" ? pauseTask : action === "resume" ? resumeTask : deleteTask;
   return asUser(w, (u) => act(w.d, u, taskId));
@@ -13381,12 +13739,16 @@ function refusal(error) {
     return problem(503, "slow_page", error, { "Retry-After": "10" });
   if (error === NOT_EDITABLE)
     return problem(409, "conflict", error);
+  if (error === VERSION_MISMATCH)
+    return problem(412, "version_mismatch", error);
   if (error === RESEARCH_OFF || error === SCOUT_OFF)
     return problem(503, "unavailable", error);
   if (error === FINISHED || /^That task is [a-z]+, not [a-z]+\.$/.test(error))
     return problem(409, "conflict", error);
-  if (/^You already (have|track|watch for) [0-9]+ /.test(error))
+  if (/^You already (have|track|watch for|ran) [0-9]+ /.test(error))
     return problem(409, "limit_reached", error);
+  if (error.startsWith(NOT_NOW))
+    return problem(409, "cannot_run_now", error);
   if (error === INBOX_OFF || error === JUDGE_OFF)
     return problem(503, "unavailable", error);
   if (/ (is|are) not available on this bot\.$/.test(error))
@@ -13429,6 +13791,7 @@ async function taskJson(d, user, task) {
     type: task.type,
     title: task.title,
     status: task.status === "archived" ? "deleted" : task.status,
+    version: taskVersion(task),
     cadence: task.schedule ? describeSchedule(task.schedule, user, user.timeZone, d.clock.now()) : "no schedule",
     nextAt: await nextAt(d, task),
     createdAt: task.createdAt,
@@ -13447,12 +13810,74 @@ function watchJson(c) {
     ...site ? { site, ...c.search !== undefined ? { search: c.search } : {}, ...c.game !== undefined ? { game: c.game } : {} } : {}
   };
 }
-async function listAnswer(d, user) {
-  const tasks = (await d.store.listTasks({ ownerId: user.id })).filter((t) => t.status !== "archived");
+var MAX_PAGE = 200;
+var cursorOf = (taskId) => Buffer.from(taskId).toString("base64url");
+var CURSOR = /^[A-Za-z0-9_-]{1,64}$/;
+async function listAnswer(d, user, query = new URLSearchParams) {
+  const rawLimit = query.get("limit");
+  const rawCursor = query.get("cursor");
+  for (const key of ["limit", "cursor"]) {
+    if (query.getAll(key).length > 1)
+      return problem(400, "invalid", `\`${key}\` is given more than once.`);
+  }
+  let limit = null;
+  if (rawLimit !== null) {
+    limit = /^[0-9]{1,4}$/.test(rawLimit) ? Number(rawLimit) : 0;
+    if (limit < 1 || limit > MAX_PAGE)
+      return problem(400, "invalid", `\`limit\` is a whole number from 1 to ${MAX_PAGE}.`);
+  }
+  if (rawCursor !== null && limit === null)
+    return problem(400, "invalid", "`cursor` goes with `limit`.");
+  const all = await d.store.listTasks({ ownerId: user.id });
+  let start = 0;
+  if (rawCursor !== null) {
+    const at = CURSOR.test(rawCursor) ? all.findIndex((t) => cursorOf(t.id) === rawCursor) : -1;
+    if (at < 0)
+      return problem(400, "invalid_cursor", "That cursor is not one this API gave you: start again without it.");
+    start = at + 1;
+  }
   const out = [];
-  for (const t of tasks)
+  let last = null;
+  let more = false;
+  for (let i = start;i < all.length; i++) {
+    const t = all[i];
+    if (t.status === "archived")
+      continue;
+    if (limit !== null && out.length === limit) {
+      more = true;
+      break;
+    }
     out.push(await taskJson(d, user, t));
-  return { status: 200, body: { tasks: out } };
+    last = t;
+  }
+  return { status: 200, body: { tasks: out, ...limit !== null ? { nextCursor: more && last ? cursorOf(last.id) : null } : {} } };
+}
+function capabilitiesAnswer(d, user, rate) {
+  return {
+    status: 200,
+    body: {
+      types: intakeTypes(d),
+      owner: { timeZone: user.timeZone, preferredHour: user.preferredHour },
+      limits: {
+        liveTasks: MAX_LIVE_TASKS,
+        priceTrackers: MAX_PRICE_TASKS,
+        researchWaiting: MAX_LIVE_RESEARCH,
+        scouts: MAX_LIVE_SCOUTS,
+        wantWatches: MAX_WANT_TASKS,
+        pageSize: MAX_PAGE,
+        requestsBurst: rate.burst,
+        requestsPerSecond: rate.perSecond
+      },
+      sources: {
+        runner: d.research === true,
+        bgg: d.bgg === true,
+        ebay: d.ebay === true,
+        shopify: d.shopify === true,
+        mail: d.mail != null,
+        webArea: d.webEditor
+      }
+    }
+  };
 }
 async function getAnswer(d, user, id) {
   const task = await ownTask(d, user, id);
@@ -13463,6 +13888,7 @@ async function getAnswer(d, user, id) {
     return notFound();
   return {
     status: 200,
+    headers: { ETag: etag(taskVersion(view.task)) },
     body: {
       task: await taskJson(d, user, view.task),
       history: { next: view.next, runs: view.runs, earlierRuns: view.earlierRuns, changes: view.changes, earlierChanges: view.earlierChanges },
@@ -13474,10 +13900,11 @@ async function written(w, user, result, status, base) {
   if (!result.ok)
     return refusal(result.error);
   const task = await w.d.store.getTask(result.task.id) ?? result.task;
+  const tag = { ETag: etag(taskVersion(task)) };
   return {
     status,
     body: { task: await taskJson(w.d, user, task), message: result.text },
-    ...status === 201 ? { headers: { Location: `${base}/tasks/${encodeURIComponent(task.id)}` } } : {}
+    headers: status === 201 ? { ...tag, Location: `${base}/tasks/${encodeURIComponent(task.id)}` } : tag
   };
 }
 async function createAnswer(w, user, body, base) {
@@ -13494,6 +13921,9 @@ async function createAnswer(w, user, body, base) {
     return form;
   return written(w, user, await makeTask(w, type, form), 201, base);
 }
+function bound(w, task) {
+  return w.ifMatch ? { ...w, ifMatch: { taskId: task.id, version: w.ifMatch.version } } : w;
+}
 async function editAnswer(w, user, id, body, base) {
   const task = await editableTask(w.d, user, id);
   if (!task)
@@ -13501,17 +13931,27 @@ async function editAnswer(w, user, id, body, base) {
   const form = asFields(body, task.type, "edit");
   if (!(form instanceof URLSearchParams))
     return form;
-  return written(w, user, await saveEdit(w, task, form), 200, base);
+  return written(w, user, await saveEdit(bound(w, task), task, form), 200, base);
+}
+async function runNowAnswer(w, user, id) {
+  const task = await ownTask(w.d, user, id);
+  if (!task || task.status === "archived")
+    return notFound();
+  const done = await runOn(w, task.id);
+  if (!done.ok)
+    return refusal(done.error);
+  const after = await w.d.store.getTask(task.id) ?? task;
+  return { status: 202, headers: { ETag: etag(taskVersion(after)) }, body: { task: await taskJson(w.d, user, after), message: done.text } };
 }
 async function actAnswer(w, user, id, action) {
   const task = await ownTask(w.d, user, id);
   if (!task || task.status === "archived")
     return notFound();
-  const done = await actOn(w, task.id, action);
+  const done = await actOn(bound(w, task), task.id, action);
   if (!done.ok)
     return refusal(done.error);
   const after = await w.d.store.getTask(task.id) ?? task;
-  return { status: 200, body: { task: await taskJson(w.d, user, after), message: done.text } };
+  return { status: 200, headers: { ETag: etag(taskVersion(after)) }, body: { task: await taskJson(w.d, user, after), message: done.text } };
 }
 
 // plugins/tracker/src/intake.ts
@@ -13996,7 +14436,7 @@ var MAX_TOKENS_PER_PERSON = 10;
 var MAX_TOKEN_NAME = 50;
 var TOKEN_EXPIRY_DAYS = [30, 90, 365];
 var DEFAULT_EXPIRY_DAYS = 90;
-var DAY_MS4 = 24 * 60 * 60 * 1000;
+var DAY_MS5 = 24 * 60 * 60 * 1000;
 var TOUCH_EVERY_MS = 60 * 1000;
 function isApiTokenShape(value) {
   return /^trk_[A-Za-z0-9_-]{43}$/.test(value);
@@ -14048,7 +14488,7 @@ class ApiTokens {
         return { ok: false, error: `You already have ${MAX_TOKENS_PER_PERSON} API tokens, the most one person may. Revoke one first.` };
       }
       const token = `${TOKEN_PREFIX}${randomToken()}`;
-      const expiresAt = new Date(now.getTime() + input.days * DAY_MS4).toISOString();
+      const expiresAt = new Date(now.getTime() + input.days * DAY_MS5).toISOString();
       const r = this.db.query(`INSERT INTO api_tokens (token_hash, user_id, name, created_at, expires_at, last_used_at, member_checked_at)
            VALUES (?, ?, ?, ?, ?, NULL, ?) RETURNING ${COLUMNS}`).get(sha256(token), userId, name, at, expiresAt, memberCheckedAt);
       return { ok: true, token, row: toToken(r) };
@@ -14624,7 +15064,7 @@ function startUsrRun(a, usr, me, kind) {
   const current = usrLinkRuns.get(usr);
   if (current?.running)
     return { ok: false, text: `Already ${RUN_WORDS[current.kind].doing}: ${current.done} of ${current.total} done.` };
-  const waiting = a.d.roster.people().filter((p) => p.discordId !== null && wanted(kind, usr.links.subjectOf(p.id)));
+  const waiting = a.d.roster.people().filter((p) => p.discordId !== null && wanted2(kind, usr.links.subjectOf(p.id)));
   if (waiting.length === 0)
     return { ok: true, text: RUN_WORDS[kind].none };
   const run = { kind, running: true, done: 0, total: waiting.length, result: null };
@@ -14642,7 +15082,7 @@ function startUsrRun(a, usr, me, kind) {
 function personsOwn400(err) {
   return err.status === 400 && /^(discord_user_id|display_name)\b/.test(err.reason);
 }
-function wanted(kind, subject) {
+function wanted2(kind, subject) {
   return kind === "link" ? subject === null : subject !== null;
 }
 async function usrRun(a, usr, invoker, by, guildId, ids, run) {
@@ -14667,7 +15107,7 @@ async function usrRun(a, usr, invoker, by, guildId, ids, run) {
   const notAdmin = () => end(false, `${words.stopped}: ${by}, who started it, is no longer an admin here. ${soFar()}.`);
   const stillWaiting = (id) => fresh(a, true, async () => {
     const p = await a.d.store.getUser(id);
-    return p && p.discordId !== null && wanted(run.kind, usr.links.subjectOf(id)) ? p : "skip";
+    return p && p.discordId !== null && wanted2(run.kind, usr.links.subjectOf(id)) ? p : "skip";
   });
   for (const id of ids) {
     const first = await stillWaiting(id);
@@ -14755,6 +15195,46 @@ async function forgetRoute(a, method, form) {
   return redirect(`${base}/signin?forgotten=1`, [a.signOutCookie]);
 }
 
+// plugins/tracker/src/web/api-delegation.ts
+var DELEGATES_ENV = "TRACKER_API_DELEGATES";
+var DELEGATES_FORMAT = "^[0-9]+(,[0-9]+)*$";
+function parseDelegates(env, usrOn) {
+  const raw = env[DELEGATES_ENV]?.trim();
+  if (raw === undefined || raw === "")
+    return new Set;
+  if (!usrOn)
+    throw new Error(`${DELEGATES_ENV} needs TRACKER_USR_URL: delegation tokens come from usr`);
+  if (!new RegExp(DELEGATES_FORMAT).test(raw))
+    throw new Error(`${DELEGATES_ENV} is usr API key ids separated by commas, such as 12,31`);
+  return new Set(raw.split(",").map((id) => `key:${Number(id)}`));
+}
+function operationOf(r, method) {
+  switch (r.kind) {
+    case "me":
+      return method === "GET" ? "whoami" : null;
+    case "types":
+      return method === "GET" ? "list_task_types" : null;
+    case "capabilities":
+      return method === "GET" ? "get_capabilities" : null;
+    case "validate":
+      return method === "POST" ? "validate_task" : null;
+    case "tasks":
+      return method === "GET" ? "list_tasks" : method === "POST" ? "create_task" : null;
+    case "task":
+      return method === "GET" ? "get_task" : method === "PATCH" ? "update_task" : method === "DELETE" ? "delete_task" : null;
+    case "act":
+      return method === "POST" ? r.action === "pause" ? "pause_task" : "resume_task" : null;
+    case "run":
+      return method === "POST" ? "run_task" : null;
+    case "listings":
+      return method === "POST" ? "send_listings" : null;
+    case "sources":
+      return method === "POST" ? "send_sources" : null;
+    case "ready":
+      return method === "POST" ? "sources_ready" : null;
+  }
+}
+
 // plugins/tracker/src/web/api-listings.ts
 var EBAY_DOMAINS = [
   "ebay.com",
@@ -14930,7 +15410,7 @@ async function sourcesReadyAnswer(w, user, id) {
     if (followUp)
       return fullerPass(w, user, task, owner, followUp, held, now);
     try {
-      await reschedule(w.d.store, task, owner, { kind: "once", at: now.toISOString() }, user.id, now);
+      await reschedule(w.d.store, task, owner, { kind: "once", at: now.toISOString() }, user.id, now, w.d.types[task.type]);
     } catch (err) {
       if (err instanceof ScheduleError)
         return problem(409, "conflict", "That research request has started.");
@@ -14946,7 +15426,7 @@ async function fullerPass(w, user, task, owner, followUp, held, now) {
   const store = w.d.store;
   let next;
   try {
-    next = (await reschedule(store, task, owner, { kind: "once", at: now.toISOString() }, user.id, now)).next;
+    next = (await reschedule(store, task, owner, { kind: "once", at: now.toISOString() }, user.id, now, w.d.types[task.type])).next;
   } catch (err) {
     if (err instanceof ScheduleError)
       return problem(409, "conflict", "That research request has started.");
@@ -14954,7 +15434,7 @@ async function fullerPass(w, user, task, owner, followUp, held, now) {
   }
   if (!next)
     return problem(409, "conflict", "That research request could not be started just now; try again later.");
-  if (!await store.deleteOccurrence(followUp.id)) {
+  if (!await deleteIdleRun(store, followUp)) {
     await store.deleteOccurrence(next.id);
     return problem(409, "conflict", "That research request has started.");
   }
@@ -14964,6 +15444,148 @@ async function fullerPass(w, user, task, owner, followUp, held, now) {
   };
 }
 
+// plugins/tracker/src/web/api-idempotency.ts
+import { randomBytes as randomBytes3 } from "crypto";
+var KEEP_MS = 24 * 60 * 60 * 1000;
+var PENDING_MS = 2 * 60 * 1000;
+function isIdempotencyKey(value) {
+  return /^[A-Za-z0-9_.:-]{8,128}$/.test(value);
+}
+var OUTCOME_UNKNOWN = "That request failed partway and may have made its change. Read your tasks before you send it again, under a new Idempotency-Key.";
+
+class ApiIdempotency {
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  begin(userId, key, requestHash, now) {
+    const at = now.toISOString();
+    return this.db.transaction(() => {
+      this.db.query("DELETE FROM api_idempotency WHERE created_at <= ?").run(new Date(now.getTime() - KEEP_MS).toISOString());
+      const row = this.db.query("SELECT request_hash, status, answer, created_at FROM api_idempotency WHERE user_id = ? AND key = ?").get(userId, key);
+      if (row !== null) {
+        const stale = row.status === null && Date.parse(row.created_at) <= now.getTime() - PENDING_MS;
+        if (!stale) {
+          if (row.request_hash !== requestHash)
+            return { kind: "conflict" };
+          if (row.status === null || row.answer === null)
+            return { kind: "in_progress" };
+          const kept = JSON.parse(row.answer);
+          return { kind: "replay", answer: { status: row.status, body: kept.body, headers: kept.headers } };
+        }
+        this.db.query("DELETE FROM api_idempotency WHERE user_id = ? AND key = ?").run(userId, key);
+      }
+      const claim = randomBytes3(16).toString("hex");
+      this.db.query("INSERT INTO api_idempotency (user_id, key, request_hash, claim, status, answer, created_at) VALUES (?, ?, ?, ?, NULL, NULL, ?)").run(userId, key, requestHash, claim, at);
+      return { kind: "new", claim };
+    })();
+  }
+  finish(userId, key, claim, answer) {
+    if (answer.status >= 200 && answer.status < 300)
+      this.keep(userId, key, claim, answer);
+    else
+      this.abandon(userId, key, claim);
+  }
+  fail(userId, key, claim) {
+    this.keep(userId, key, claim, { status: 500, body: { error: { code: "outcome_unknown", message: OUTCOME_UNKNOWN } }, headers: {} });
+  }
+  abandon(userId, key, claim) {
+    this.db.query("DELETE FROM api_idempotency WHERE user_id = ? AND key = ? AND claim = ? AND status IS NULL").run(userId, key, claim);
+  }
+  keep(userId, key, claim, answer) {
+    this.db.query("UPDATE api_idempotency SET status = ?, answer = ? WHERE user_id = ? AND key = ? AND claim = ? AND status IS NULL").run(answer.status, JSON.stringify({ body: answer.body, headers: answer.headers }), userId, key, claim);
+  }
+}
+
+// plugins/tracker/src/web/api-validate.ts
+function firstDueAfter2(schedule, now) {
+  if (schedule.kind === "once")
+    return new Date(0);
+  if (schedule.kind === "poll")
+    return new Date(Date.parse(schedule.start) - 1);
+  return now;
+}
+function runs(schedule, user, now, renewal) {
+  const ctx = { zone: user.timeZone, preferredHour: user.preferredHour };
+  if (renewal) {
+    const ask = nextDue(schedule, new Date(0), ctx);
+    if (ask && ask.getTime() <= now.getTime())
+      return { first: ask, second: nextDue(schedule, now, ctx) };
+  }
+  const first = nextDue(schedule, firstDueAfter2(schedule, now), ctx);
+  return { first, second: first && schedule.kind !== "once" ? nextDue(schedule, first, ctx) : null };
+}
+async function validateAnswer(d, user, body) {
+  const type = body.type;
+  if (typeof type !== "string" || !NEW_TYPES.includes(type)) {
+    return problem(400, "invalid", `\`type\` is one of ${offeredTypes(d).join(", ")}.`);
+  }
+  if (type === "research" && !d.research)
+    return refusal(RESEARCH_OFF);
+  if (type === "scout" && (!d.types.scout || !d.research))
+    return refusal(SCOUT_OFF);
+  if (type === "reminder" && !d.types.reminder)
+    return refusal("Reminders are not available on this bot.");
+  if (type === "renewal" && !d.types.renewal)
+    return refusal("Renewals are not available on this bot.");
+  const form = asFields(body, type, "new");
+  if (!(form instanceof URLSearchParams))
+    return form;
+  const now = d.clock.now();
+  let schedule = null;
+  if (type === "reminder") {
+    const plan = reminderPlan(d, user, reminderInput(form));
+    if (!plan.ok)
+      return refusal(plan.error);
+    schedule = plan.schedule;
+  } else if (type === "renewal") {
+    const plan = renewalPlan(d, user, renewalInput(form));
+    if (!plan.ok)
+      return refusal(plan.error);
+    schedule = plan.schedule;
+  } else if (type === "scout") {
+    const plan = scoutPlan(scoutInput(form));
+    if (!plan.ok)
+      return refusal(plan.error);
+    schedule = scoutSchedule(plan.every, user.timeZone, now);
+  }
+  const capped = await liveTaskCap(d, user);
+  if (capped)
+    return refusal(capped);
+  if (type === "scout" && await liveScouts(d, user) >= MAX_LIVE_SCOUTS) {
+    return refusal(SCOUT_CAP);
+  }
+  if (schedule === null) {
+    return {
+      status: 200,
+      body: {
+        valid: true,
+        type,
+        checked: "fields",
+        message: `The fields of that ${type} are right, and you are under the live-task cap. The rest is checked when it is made: ${type === "research" ? "the model runner takes it then" : "its page or source is read then"}. Nothing was made.`
+      }
+    };
+  }
+  const problems = scheduleProblems(schedule);
+  if (problems.length > 0)
+    return refusal(`That schedule does not work: ${problems.join("; ")}.`);
+  const { first, second: then } = runs(schedule, user, now, type === "renewal");
+  const cadence = describeSchedule(schedule, user, user.timeZone, now);
+  return {
+    status: 200,
+    body: {
+      valid: true,
+      type,
+      checked: "full",
+      timeZone: user.timeZone,
+      cadence,
+      firstAt: first?.toISOString() ?? null,
+      thenAt: then?.toISOString() ?? null,
+      message: first ? `That ${type} would first run ${first.getTime() <= now.getTime() ? "at once" : formatInstant(first.toISOString(), user.timeZone, now)}${then ? `, then ${formatInstant(then.toISOString(), user.timeZone, now)}` : ""} (${cadence}). Nothing was made.` : `That ${type} would never run: its time has no next run. Nothing was made.`
+    }
+  };
+}
+
 // plugins/tracker/src/web/api.ts
 var API_PREFIX = "/api/v1";
 var MAX_API_BYTES = 16 * 1024;
@@ -15019,6 +15641,7 @@ function bearer(header) {
   return m?.[1] ?? null;
 }
 var ACT = /^\/tasks\/([^/]+)\/(pause|resume)$/;
+var RUN = /^\/tasks\/([^/]+)\/run$/;
 var LISTINGS = /^\/tasks\/([^/]+)\/listings$/;
 var SOURCES = /^\/tasks\/([^/]+)\/sources(\/ready)?$/;
 var ONE = /^\/tasks\/([^/]+)$/;
@@ -15034,11 +15657,18 @@ function route(rest) {
     return { kind: "me" };
   if (rest === "/types")
     return { kind: "types" };
+  if (rest === "/capabilities")
+    return { kind: "capabilities" };
   if (rest === "/tasks")
     return { kind: "tasks" };
+  if (rest === "/tasks/validate")
+    return { kind: "validate" };
   const act = ACT.exec(rest);
   if (act)
     return { kind: "act", id: segment(act[1]), action: act[2] };
+  const run = RUN.exec(rest);
+  if (run)
+    return { kind: "run", id: segment(run[1]) };
   const listings = LISTINGS.exec(rest);
   if (listings)
     return { kind: "listings", id: segment(listings[1]) };
@@ -15053,7 +15683,7 @@ function allowedMethods(r) {
     return "GET, POST";
   if (r.kind === "task")
     return "GET, PATCH, DELETE";
-  if (r.kind === "act" || r.kind === "listings" || r.kind === "sources" || r.kind === "ready")
+  if (r.kind === "validate" || r.kind === "act" || r.kind === "run" || r.kind === "listings" || r.kind === "sources" || r.kind === "ready")
     return "POST";
   return "GET";
 }
@@ -15084,6 +15714,10 @@ async function authenticate(w, request) {
   const invalid = problem(401, "invalid_token", "That token is unknown, revoked or expired.", { "WWW-Authenticate": `${CHALLENGE}, error="invalid_token"` });
   const sent = bearer(header);
   const now = d.clock.now();
+  const delegates = d.usr?.delegates;
+  if (sent !== null && !sent.startsWith(TOKEN_PREFIX) && d.usr && delegates && delegates.size > 0) {
+    return authenticateDelegation(w, d.usr, delegates, sent, invalid);
+  }
   const token = sent === null ? null : d.apiTokens.find(sent, now);
   if (!token) {
     const waitFailed = w.failed.take(FAILED_KEY, now.getTime());
@@ -15108,7 +15742,61 @@ async function authenticate(w, request) {
   if (!current)
     return no(invalid);
   d.apiTokens.touch(current, d.clock.now());
-  return { ok: true, token: current, user };
+  return { ok: true, via: { kind: "token", token: current }, user };
+}
+async function authenticateDelegation(w, usr, delegates, sent, invalid) {
+  const { d } = w;
+  const no = (answer) => ({ ok: false, answer });
+  const failed = () => {
+    const wait = w.failed.take(FAILED_KEY, d.clock.now().getTime());
+    return no(wait > 0 ? problem(429, "rate_limited", `Too many requests with bad tokens; try again in ${wait} s.`, { "Retry-After": String(wait) }) : invalid);
+  };
+  const checked = await usr.verifier.verifyDelegation(sent, usr.app);
+  if (checked === "unavailable")
+    return no(problem(503, "usr_unavailable", "I could not fetch usr's signing keys to check that token; try again in a minute.", { "Retry-After": "60" }));
+  if (checked === "invalid" || !delegates.has(checked.actor))
+    return failed();
+  const wait = w.limiter.take(`dlg:${checked.sub}`, d.clock.now().getTime());
+  if (wait > 0)
+    return no(problem(429, "rate_limited", `Too many requests for this person; try again in ${wait} s.`, { "Retry-After": String(wait) }));
+  const userId = usr.links.userOfSubject(checked.sub);
+  const user = userId ? await d.store.getUser(userId) : null;
+  if (!user || !d.admissions.isRegistered(user.id))
+    return failed();
+  const found = await w.recheck(user, w.confirmedAt(user.id));
+  if (found === "not-member")
+    return no(problem(403, "not_member", "That person is no longer a member of this tracker's server, or lost the role it asks for."));
+  if (found === "unknown")
+    return no(problem(503, "membership_unknown", MEMBERSHIP_UNKNOWN2, { "Retry-After": "60" }));
+  return { ok: true, via: { kind: "delegation", delegation: checked }, user };
+}
+async function write(writer, user, r, method, body, base) {
+  if (method === "DELETE")
+    return actAnswer(writer, user, r.id, "delete");
+  if (r.kind === "tasks")
+    return createAnswer(writer, user, body, base);
+  if (r.kind === "task")
+    return editAnswer(writer, user, r.id, body, base);
+  if (r.kind === "act") {
+    if (Object.keys(body).length > 0)
+      return problem(400, "unknown_field", `\`${r.action}\` takes no fields: send {}.`);
+    return actAnswer(writer, user, r.id, r.action);
+  }
+  if (r.kind === "run") {
+    if (Object.keys(body).length > 0)
+      return problem(400, "unknown_field", "`run` takes no fields: send {}.");
+    return runNowAnswer(writer, user, r.id);
+  }
+  if (r.kind === "listings")
+    return listingsAnswer(writer, user, r.id, body);
+  if (r.kind === "sources")
+    return sourcesAnswer(writer, user, r.id, body);
+  if (r.kind === "ready") {
+    if (Object.keys(body).length > 0)
+      return problem(400, "unknown_field", "`ready` takes no fields: send {}.");
+    return sourcesReadyAnswer(writer, user, r.id);
+  }
+  return problem(405, "method_not_allowed", "Not a write.");
 }
 async function handleApi(w, request, path) {
   if (request.headers.get("origin") !== null)
@@ -15124,45 +15812,83 @@ async function handleApi(w, request, path) {
   const method = request.method;
   if (!allowed.split(", ").includes(method))
     return json2(problem(405, "method_not_allowed", `Use ${allowed}.`, { Allow: allowed }));
+  if (auth.via.kind === "delegation") {
+    const operation = operationOf(r, method);
+    if (operation === null)
+      return json2(problem(403, "insufficient_scope", "No delegation token can do this."));
+    const needed = `${w.d.usr?.app}:${operation}`;
+    if (!auth.via.delegation.scopes.has(needed)) {
+      return json2(problem(403, "insufficient_scope", `That token does not allow this: it needs ${needed}.`, { "WWW-Authenticate": `${CHALLENGE}, error="insufficient_scope", scope="${needed}"` }));
+    }
+    if (method !== "GET")
+      w.d.log.info(`api: ${operation} for ${user.id} by usr ${auth.via.delegation.actor} (token ${auth.via.delegation.jti})`);
+  }
   const writer = { d: w.d, queue: w.queue, reading: w.reading, userId: user.id, arrived: w.arrived };
   const base = `${w.base}${API_PREFIX}`;
-  if (method === "POST" || method === "PATCH") {
-    const read = await readJson(request, r.kind === "listings" ? MAX_LISTINGS_BYTES : r.kind === "sources" ? MAX_SOURCES_BYTES : MAX_API_BYTES);
+  if (r.kind === "validate") {
+    if (request.headers.get("if-match") !== null)
+      return json2(problem(400, "if_match_unsupported", "If-Match goes only with PATCH or DELETE of a task, or its pause or resume."));
+    const read = await readJson(request);
     if (!read.ok)
       return json2(read.answer);
-    const { body } = read;
-    if (r.kind === "tasks")
-      return json2(await createAnswer(writer, user, body, base));
-    if (r.kind === "task")
-      return json2(await editAnswer(writer, user, r.id, body, base));
-    if (r.kind === "act") {
-      if (Object.keys(body).length > 0)
-        return json2(problem(400, "unknown_field", `\`${r.action}\` takes no fields: send {}.`));
-      return json2(await actAnswer(writer, user, r.id, r.action));
+    return json2(await validateAnswer(w.d, user, read.body));
+  }
+  if (method === "POST" || method === "PATCH" || method === "DELETE") {
+    const ifMatchRaw = request.headers.get("if-match");
+    if (ifMatchRaw !== null) {
+      const onOneTask = r.kind === "task" && method !== "POST" || r.kind === "act";
+      if (!onOneTask)
+        return json2(problem(400, "if_match_unsupported", "If-Match goes only with PATCH or DELETE of a task, or its pause or resume."));
+      const version = ifMatchVersion(ifMatchRaw);
+      if (version === null)
+        return json2(problem(400, "invalid_if_match", 'If-Match is one task version in quotes, as its ETag gives it: "0123456789abcdef".'));
+      writer.ifMatch = { taskId: r.id.trim(), version };
+    }
+    const key = request.headers.get("idempotency-key");
+    if (key !== null && !isIdempotencyKey(key))
+      return json2(problem(400, "invalid_idempotency_key", "Idempotency-Key is 8 to 128 letters, digits, '-', '_', '.' or ':'; a UUID will do."));
+    let body = {};
+    if (method !== "DELETE") {
+      const read = await readJson(request, r.kind === "listings" ? MAX_LISTINGS_BYTES : r.kind === "sources" ? MAX_SOURCES_BYTES : MAX_API_BYTES);
+      if (!read.ok)
+        return json2(read.answer);
+      body = read.body;
     }
-    if (r.kind === "listings")
-      return json2(await listingsAnswer(writer, user, r.id, body));
-    if (r.kind === "sources")
-      return json2(await sourcesAnswer(writer, user, r.id, body));
-    if (r.kind === "ready") {
-      if (Object.keys(body).length > 0)
-        return json2(problem(400, "unknown_field", "`ready` takes no fields: send {}."));
-      return json2(await sourcesReadyAnswer(writer, user, r.id));
+    if (key === null)
+      return json2(await write(writer, user, r, method, body, base));
+    const hash = sha256(`${method} ${path}
+${writer.ifMatch?.version ?? ""}
+${canonicalJson(body)}`);
+    const begun = w.d.apiIdempotency.begin(user.id, key, hash, w.d.clock.now());
+    if (begun.kind === "conflict")
+      return json2(problem(409, "idempotency_conflict", "That Idempotency-Key was used for a different request; use a new key for a new request."));
+    if (begun.kind === "in_progress")
+      return json2(problem(409, "idempotency_in_progress", "A request with that Idempotency-Key is still running; try again in a moment.", { "Retry-After": "1" }));
+    if (begun.kind === "replay")
+      return json2({ status: begun.answer.status, body: begun.answer.body, headers: { ...begun.answer.headers, "Idempotency-Replayed": "true" } });
+    let answer;
+    try {
+      answer = await write(writer, user, r, method, body, base);
+    } catch (err) {
+      w.d.apiIdempotency.fail(user.id, key, begun.claim);
+      throw err;
     }
+    w.d.apiIdempotency.finish(user.id, key, begun.claim, { status: answer.status, body: answer.body, headers: answer.headers ?? {} });
+    return json2(answer);
   }
-  if (method === "DELETE" && r.kind === "task")
-    return json2(await actAnswer(writer, user, r.id, "delete"));
   if (r.kind === "types")
     return json2(typesAnswer(w.d));
   if (r.kind === "tasks")
-    return json2(await listAnswer(w.d, user));
+    return json2(await listAnswer(w.d, user, new URL(request.url).searchParams));
+  if (r.kind === "capabilities")
+    return json2(capabilitiesAnswer(w.d, user, { burst: RATE_BURST, perSecond: RATE_PER_SECOND }));
   if (r.kind === "task")
     return json2(await getAnswer(w.d, user, r.id));
   return json2({
     status: 200,
     body: {
       user: { id: user.id, name: user.displayName, timeZone: user.timeZone, preferredHour: user.preferredHour },
-      token: { id: auth.token.id, name: auth.token.name, createdAt: auth.token.createdAt, expiresAt: auth.token.expiresAt }
+      ...auth.via.kind === "token" ? { token: { id: auth.via.token.id, name: auth.via.token.name, createdAt: auth.via.token.createdAt, expiresAt: auth.via.token.expiresAt } } : { delegation: { actor: auth.via.delegation.actor, scopes: [...auth.via.delegation.scopes].sort(), expiresAt: new Date(auth.via.delegation.expiresAt).toISOString() } }
     }
   });
 }
@@ -15370,6 +16096,9 @@ var JWKS_RETRY_MS = 30 * 1000;
 var JWKS_TIMEOUT_MS = 5000;
 var MAX_TOKEN = 8192;
 var MAX_JWKS = 64 * 1024;
+var MAX_DELEGATION_MS = 30 * 60 * 1000;
+var DELEGATION_SKEW_MS = 60 * 1000;
+var JTI = /^[A-Za-z0-9_-]{1,64}$/;
 function decode(part) {
   try {
     return JSON.parse(Buffer.from(part, "base64url").toString("utf8"));
@@ -15382,38 +16111,70 @@ class UsrVerifier {
   o;
   keys = [];
   fetchedAt = Number.NEGATIVE_INFINITY;
+  loadFailed = false;
   pending = null;
   constructor(o) {
     this.o = o;
   }
   async verify(token) {
-    if (!token || token.length > MAX_TOKEN)
+    const signed = await this.signed(token);
+    if (typeof signed === "string" || signed.header.typ === "dlg+jwt")
+      return null;
+    const claims = signed.claims;
+    if (claims.iss !== "usr" || claims.act !== undefined)
+      return null;
+    if (typeof claims.exp !== "number" || claims.exp * 1000 <= this.o.now())
+      return null;
+    if (typeof claims.sub !== "string" || claims.sub === "")
       return null;
+    const roles = Array.isArray(claims.roles) ? claims.roles.filter((r) => typeof r === "string") : [];
+    return { sub: claims.sub, roles };
+  }
+  async verifyDelegation(token, audience) {
+    const signed = await this.signed(token);
+    if (typeof signed === "string")
+      return signed;
+    if (signed.header.typ !== "dlg+jwt")
+      return "invalid";
+    const c = signed.claims;
+    if (c.iss !== "usr" || c.aud !== audience)
+      return "invalid";
+    if (typeof c.sub !== "string" || c.sub === "" || typeof c.scope !== "string" || typeof c.jti !== "string" || !JTI.test(c.jti))
+      return "invalid";
+    const actor = c.act?.sub;
+    if (typeof actor !== "string" || !/^key:[0-9]+$/.test(actor))
+      return "invalid";
+    if (typeof c.exp !== "number")
+      return "invalid";
+    const expiresAt = c.exp * 1000;
+    const now = this.o.now();
+    if (expiresAt <= now || expiresAt - now > MAX_DELEGATION_MS + DELEGATION_SKEW_MS)
+      return "invalid";
+    return { sub: c.sub, actor, scopes: new Set(c.scope.split(" ").filter((x) => x !== "")), jti: c.jti, expiresAt };
+  }
+  async signed(token) {
+    if (!token || token.length > MAX_TOKEN)
+      return "invalid";
     const parts = token.split(".");
     if (parts.length !== 3)
-      return null;
+      return "invalid";
     const [h, p, s] = parts;
     const header = decode(h);
-    if (!header || header.alg !== "ES256" || header.typ === "dlg+jwt" || typeof header.kid !== "string")
-      return null;
+    if (!header || header.alg !== "ES256" || typeof header.kid !== "string")
+      return "invalid";
     const key = await this.keyFor(header.kid, false) ?? await this.keyFor(header.kid, true);
     if (!key)
-      return null;
+      return this.loadFailed ? "unavailable" : "invalid";
     const signature = Buffer.from(s, "base64url");
     if (signature.length !== 64)
-      return null;
+      return "invalid";
     const ok = await crypto.subtle.verify({ name: "ECDSA", hash: "SHA-256" }, key, signature, new TextEncoder().encode(`${h}.${p}`));
     if (!ok)
-      return null;
+      return "invalid";
     const claims = decode(p);
-    if (!claims || claims.iss !== "usr" || claims.act !== undefined)
-      return null;
-    if (typeof claims.exp !== "number" || claims.exp * 1000 <= this.o.now())
-      return null;
-    if (typeof claims.sub !== "string" || claims.sub === "")
-      return null;
-    const roles = Array.isArray(claims.roles) ? claims.roles.filter((r) => typeof r === "string") : [];
-    return { sub: claims.sub, roles };
+    if (claims === null || typeof claims !== "object")
+      return "invalid";
+    return { header, claims };
   }
   async keyFor(kid, force) {
     const fresh = () => {
@@ -15440,6 +16201,7 @@ class UsrVerifier {
   }
   async load() {
     this.fetchedAt = this.o.now();
+    this.loadFailed = true;
     try {
       const res = await (this.o.fetchImpl ?? fetch)(`${this.o.url}/.well-known/jwks.json`, {
         headers: { Accept: "application/json" },
@@ -15464,6 +16226,7 @@ class UsrVerifier {
         } catch {}
       }
       this.keys = keys;
+      this.loadFailed = false;
     } catch {}
   }
 }
@@ -15557,6 +16320,7 @@ function createWebHandler(w) {
     const shared = pending;
     return lookupWithin(() => shared, MEMBER_CHECK_TIMEOUT_MS);
   }
+  const memberConfirmed = new Map;
   async function recheck(d, user, checkedAt) {
     if (w.guildIds === null)
       return "ok";
@@ -15576,12 +16340,14 @@ function createWebHandler(w) {
         failedAt.set(user.id, d.clock.now().getTime());
     }
     if (found === "not-member") {
+      memberConfirmed.delete(user.id);
       d.sessions.deleteForUser(user.id);
       d.apiTokens.deleteForUser(user.id);
       return "not-member";
     }
     if (found === "member") {
       const at = d.clock.now().toISOString();
+      memberConfirmed.set(user.id, at);
       d.sessions.confirmMember(user.id, at);
       d.apiTokens.confirmMember(user.id, at);
       return "ok";
@@ -15731,7 +16497,7 @@ function createWebHandler(w) {
       const d = w.deps();
       if (!d)
         return json2(problem(503, "starting", "The tracker is starting up; try again in a minute.", { "Retry-After": "60" }));
-      return handleApi({ d, queue: w.queue, reading, base, limiter, failed, arrived, recheck: (user, at) => recheck(d, user, at) }, request, info.path);
+      return handleApi({ d, queue: w.queue, reading, base, limiter, failed, arrived, recheck: (user, at) => recheck(d, user, at), confirmedAt: (userId) => memberConfirmed.get(userId) ?? null }, request, info.path);
     }
     const method = request.method;
     if (method !== "GET" && method !== "POST")
@@ -15878,7 +16644,7 @@ function createWebHandler(w) {
 }
 
 // plugins/tracker/src/mail.ts
-import { randomBytes as randomBytes3 } from "crypto";
+import { randomBytes as randomBytes4 } from "crypto";
 
 // plugins/tracker/src/ebay-alert.ts
 var MAX_ALERT_LISTINGS = MAX_LISTINGS_PER_POST;
@@ -16059,7 +16825,7 @@ class MailAddresses {
     const row = this.db.query("SELECT local FROM mail_addresses WHERE user_id = ?").get(userId);
     if (row)
       return `${row.local}@${this.domain}`;
-    const local = `m-${randomBytes3(12).toString("hex")}`;
+    const local = `m-${randomBytes4(12).toString("hex")}`;
     this.db.query("INSERT INTO mail_addresses (user_id, local, created_at) VALUES (?, ?, ?)").run(userId, local, now.toISOString());
     return `${local}@${this.domain}`;
   }
@@ -16507,6 +17273,7 @@ function createPlugin(host, options = {}) {
   const webOrigin = parseWebUrl(host.env.TRACKER_WEB_URL);
   const cityHall = parseCityHallConfig(host.env);
   const usrConfig = parseUsrConfig(host.env);
+  const delegates = parseDelegates(host.env, usrConfig !== null);
   const mailConfig = parseMailConfig(host.env);
   const usrClient = usrConfig ? createUsrClient({ config: usrConfig, ...options.usrFetch ? { fetchImpl: options.usrFetch } : {} }) : null;
   const budgetUnlimited = parseBudgetUnlimited(host.env[BUDGET_UNLIMITED_KEY]);
@@ -16788,6 +17555,8 @@ function createPlugin(host, options = {}) {
           host.log.warn(`execute lane is off, so /research is unavailable: ${cityHall.missing.join(", ")} not set`);
         if (usrConfig)
           host.log.info(`usr link on: ${usrConfig.url}, app ${usrConfig.app}`);
+        if (delegates.size > 0)
+          host.log.info(`task API takes usr delegation tokens from ${[...delegates].join(", ")}`);
         const openedDeps = {
           store: openedStore,
           admissions: new Admissions(opened),
@@ -16802,6 +17571,7 @@ function createPlugin(host, options = {}) {
           logins: new LoginLinks(opened),
           sessions: new Sessions(opened),
           apiTokens: new ApiTokens(opened),
+          apiIdempotency: new ApiIdempotency(opened),
           roster: new Roster(opened),
           ceilings,
           budgetUnlimited,
@@ -16821,7 +17591,8 @@ function createPlugin(host, options = {}) {
             url: usrConfig.url,
             verifier: new UsrVerifier({ url: usrConfig.url, now: () => clock.now().getTime(), ...options.usrFetch ? { fetchImpl: options.usrFetch } : {} }),
             app: usrConfig.app,
-            links: new UsrLinks(opened)
+            links: new UsrLinks(opened),
+            delegates
           } : null
         };
         if (guildIds === null)