@rackbops/plugin-tracker 0.4.0 → 0.6.0

package/dist/plugin.js

@@ -191,6 +191,14 @@ async function optOut(store, task, recipientId, now, occurrenceId = null) {
     at
   });
 }
+async function liftBlock(store, actor, blockId, now) {
+  if (!actor.admin)
+    throw new ConsentError("only an admin lifts a block");
+  const block = await store.getBlock(blockId);
+  if (!block)
+    throw new ConsentError(`no block ${blockId}`);
+  return store.liftBlock(blockId, actor.userId, now.toISOString());
+}
 
 // node_modules/@rackbops/docket-core/dist/lanes.js
 var LANES = ["notify", "execute"];
@@ -1916,6 +1924,10 @@ class ClaimStore {
 // plugins/tracker/src/delivery-health.ts
 var PAUSE_AFTER = 3;
 var PAUSE_DETAIL = `delivery paused: ${PAUSE_AFTER} DMs in a row could not be delivered (DMs closed, or the bot is blocked)`;
+function recipientPauseDetail(userId) {
+  return `delivery to {${userId}} paused: ${PAUSE_AFTER} DMs in a row could not be delivered`;
+}
+var PERSON_REF = /\{(u[1-9][0-9]*)\}/g;
 function decidePause(failures, alreadyPaused) {
   return !alreadyPaused && failures >= PAUSE_AFTER;
 }
@@ -1941,6 +1953,9 @@ class DeliveryHealth {
     this.chain = next.catch(() => {});
     return next;
   }
+  exclusive(fn) {
+    return this.locked(fn);
+  }
   get(userId) {
     const r = this.db.query("SELECT * FROM delivery_health WHERE user_id = ?").get(userId);
     if (!r)
@@ -1959,6 +1974,8 @@ class DeliveryHealth {
   async recordFailure(userId, error, at) {
     const notices = [];
     const result = await this.locked(async () => {
+      if (!await this.store.getUser(userId))
+        return { failures: 0, paused: false };
       this.db.query(`INSERT INTO delivery_health (user_id, failures, last_error, last_failed_at) VALUES (?, 1, ?, ?)
            ON CONFLICT (user_id) DO UPDATE SET failures = delivery_health.failures + 1,
              last_error = excluded.last_error, last_failed_at = excluded.last_failed_at`).run(userId, error, at);
@@ -1995,7 +2012,7 @@ class DeliveryHealth {
       if (changes === 0 || task.status !== "active")
         continue;
       await this.store.updateTask(task.id, { status: "paused", at });
-      const detail = asRecipient ? `delivery to ${name2(recipient, userId)} paused: ${PAUSE_AFTER} DMs in a row could not be delivered` : PAUSE_DETAIL;
+      const detail = asRecipient ? recipientPauseDetail(userId) : PAUSE_DETAIL;
       await this.store.addTaskEvent({ taskId: task.id, actorId: null, kind: "paused", detail, at });
       if (asRecipient) {
         const owner = await this.store.getUser(task.ownerId);
@@ -2381,6 +2398,19 @@ function serial() {
   };
 }
 
+// plugins/tracker/src/limits.ts
+var MAX_TITLE = 100;
+var MAX_REMINDER_TEXT = 1500;
+var MAX_WHEN = 100;
+var MAX_NOTE = 300;
+var MAX_URL = 1000;
+var MAX_NEAR = 100;
+var CURRENCY_LENGTH = 3;
+var DATE_LENGTH = 10;
+var MAX_ZONE = 64;
+var MAX_TASK_ID = 24;
+var MAX_LIVE_TASKS = 200;
+
 // plugins/tracker/src/people.ts
 var DEFAULT_TIME_ZONE = "America/New_York";
 var DEFAULT_PREFERRED_HOUR = 9;
@@ -2447,10 +2477,49 @@ async function setPreferences(store, userId, prefs) {
   });
 }
 
+// plugins/tracker/src/retime.ts
+var DAY_MS2 = 24 * 60 * 60 * 1000;
+function localDay(at, zone) {
+  const w = wallClock(at, zone);
+  return `${w.year}-${String(w.month).padStart(2, "0")}-${String(w.day).padStart(2, "0")}`;
+}
+function occurrenceDay(s, due, zone) {
+  return s.kind === "period" ? periodDate(s, due, zone) : localDay(due, zone);
+}
+function retimed(s, day, owner) {
+  const ctx = { zone: owner.timeZone, preferredHour: owner.preferredHour };
+  const lead = s.kind === "period" ? s.leadDays ?? 0 : 0;
+  let after = new Date(Date.parse(`${day}T00:00:00Z`) - (lead + 2) * DAY_MS2);
+  for (let i = 0;i < 1000; i++) {
+    const due = nextDue(s, after, ctx);
+    if (!due)
+      return null;
+    const on = occurrenceDay(s, due, owner.timeZone);
+    if (on === day)
+      return due;
+    if (on > day)
+      return null;
+    after = due;
+  }
+  return null;
+}
+async function heldRuns(store, task) {
+  return (await store.listOccurrences({ taskId: task.id, status: "queued" })).filter((o) => !o.dedupeKey.startsWith(SNOOZE_PREFIX));
+}
+async function restoreHeldRun(store, task, held, before, after, now) {
+  const s = task.schedule;
+  const first = held[0];
+  if (!s || !first)
+    return null;
+  const due = retimed(s, occurrenceDay(s, new Date(first.dueAt), before.timeZone), after);
+  if (!due)
+    return null;
+  return store.createOccurrence({ taskId: task.id, lane: task.lane, dueAt: due.toISOString(), dedupeKey: scheduledKey(task.id, due), at: now.toISOString() });
+}
+
 // plugins/tracker/src/actions.ts
 var MAX_ANSWER = 2000;
-var MAX_REMINDER_TEXT = 1500;
-var MAX_TITLE = 100;
+var NO_LONGER_LISTED = "You are no longer on this tracker's list.";
 var NO_SUCH_TASK = "You have no task with that id. `/tasks` lists yours.";
 function clip(text, max = MAX_ANSWER) {
   return text.length <= max ? text : `${text.slice(0, max - 3)}...`;
@@ -2505,7 +2574,7 @@ async function registerPerson(d, user, input) {
   d.admissions.markRegistered(user.id, d.clock.now().toISOString());
   const zoneChanged = updated.timeZone !== user.timeZone;
   if (zoneChanged || updated.preferredHour !== user.preferredHour)
-    await rescheduleOwned(d, updated, zoneChanged);
+    await rescheduleOwned(d, updated, zoneChanged, user);
   return registeredText(updated, first);
 }
 async function saveSettings(d, user, input) {
@@ -2519,7 +2588,7 @@ async function saveSettings(d, user, input) {
   }
   const zoneChanged = updated.timeZone !== user.timeZone;
   if (zoneChanged || updated.preferredHour !== user.preferredHour)
-    await rescheduleOwned(d, updated, zoneChanged);
+    await rescheduleOwned(d, updated, zoneChanged, user);
   return null;
 }
 async function setHour(d, user, hour) {
@@ -2533,73 +2602,46 @@ async function setHour(d, user, hour) {
       return err.message;
     throw err;
   }
-  const moved = await rescheduleOwned(d, updated, false);
+  const moved = await rescheduleOwned(d, updated, false, user);
   const note = moved > 0 ? ` ${moved} recurring reminder(s) moved to it.` : "";
   return `Your preferred hour is now ${String(hour).padStart(2, "0")}:00, ${updated.timeZone} time.${note}`;
 }
-async function rescheduleOwned(d, owner, zoneChanged) {
+async function rescheduleOwned(d, owner, zoneChanged, before) {
   let moved = 0;
-  for (const task of await d.store.listTasks({ ownerId: owner.id, status: "active" })) {
+  const live = [...await d.store.listTasks({ ownerId: owner.id, status: "active" }), ...await d.store.listTasks({ ownerId: owner.id, status: "paused" })];
+  for (const task of live) {
     const s = task.schedule;
     if (!s || s.kind !== "calendar" && s.kind !== "period")
       continue;
     if (!zoneChanged && s.hour !== undefined)
       continue;
-    const snoozes = (await d.store.listOccurrences({ taskId: task.id, status: "queued" })).filter((o) => o.dedupeKey.startsWith(SNOOZE_PREFIX));
-    const now = d.clock.now();
-    await reschedule(d.store, task, owner, s, owner.id, now);
-    for (const o of snoozes) {
-      await d.store.createOccurrence({ taskId: o.taskId, lane: o.lane, dueAt: o.dueAt, dedupeKey: o.dedupeKey, at: now.toISOString() });
-    }
+    const held = task.status === "paused" ? await heldRuns(d.store, task) : [];
+    const updated = await rescheduleKeepingSnoozes(d, task, owner, s, owner.id);
+    if (held.length > 0)
+      await restoreHeldRun(d.store, updated, held, before, owner, d.clock.now());
     moved++;
   }
   return moved;
 }
-function reminderSchedule(when, repeat, zone, now) {
-  if (repeat === "none") {
-    if (!when)
-      return 'Say when: for example "in 20 minutes", "tomorrow 9am" or "friday at 17:30".';
-    return { kind: "once", at: when.toISOString() };
-  }
-  const w = wallClock(when ?? now, zone);
-  const start = `${w.year}-${String(w.month).padStart(2, "0")}-${String(w.day).padStart(2, "0")}`;
-  const base = { kind: "calendar", every: 1, unit: repeat, start };
-  if (!when)
-    return base;
-  return {
-    ...base,
-    hour: w.hour,
-    minute: w.minute,
-    ...repeat === "week" ? { weekdays: [w.weekday] } : {},
-    ...repeat === "month" ? { dayOfMonth: w.day } : {}
-  };
-}
-async function remind(d, user, input) {
-  const type = d.types.reminder;
-  if (!type)
-    return "Reminders are not available on this bot.";
-  const text = input.text.trim();
-  if (text.length === 0)
-    return "Say what to remind you of.";
-  if (text.length > MAX_REMINDER_TEXT)
-    return `That reminder is longer than ${MAX_REMINDER_TEXT} characters.`;
+async function rescheduleKeepingSnoozes(d, task, owner, schedule, actorId) {
+  const snoozes = (await d.store.listOccurrences({ taskId: task.id, status: "queued" })).filter((o) => o.dedupeKey.startsWith(SNOOZE_PREFIX));
   const now = d.clock.now();
-  let when = null;
-  if (input.when !== undefined && input.when.trim() !== "") {
-    const parsed = parseWhen(input.when, now, { zone: user.timeZone, defaultHour: user.preferredHour });
-    if (!parsed.ok)
-      return parsed.error;
-    when = parsed.at;
+  const { task: updated } = await reschedule(d.store, task, owner, schedule, actorId, now);
+  for (const o of snoozes) {
+    await d.store.createOccurrence({ taskId: o.taskId, lane: o.lane, dueAt: o.dueAt, dedupeKey: o.dedupeKey, at: now.toISOString() });
   }
-  const schedule = reminderSchedule(when, input.repeat, user.timeZone, now);
-  if (typeof schedule === "string")
-    return schedule;
-  const actor = { userId: user.id, admin: user.admin };
-  const { task, next } = await createTask(d.store, actor, user, { type, title: clip(text, MAX_TITLE), config: { text }, schedule }, now);
-  const at = next ? formatInstant(next.dueAt, user.timeZone, now) : "never (that time has no next run)";
-  const cadence = schedule.kind === "once" ? "" : `, ${describeSchedule(schedule, user, user.timeZone, now)}`;
-  return clip(`Reminder \`${task.id}\` set: ${text}
-Next: ${at}${cadence}.`);
+  return updated;
+}
+async function liveTaskCap(d, owner) {
+  const active = await d.store.listTasks({ ownerId: owner.id, status: "active" });
+  const paused = await d.store.listTasks({ ownerId: owner.id, status: "paused" });
+  if (active.length + paused.length < MAX_LIVE_TASKS)
+    return null;
+  const where = d.webEditor ? " or delete one on the web" : "";
+  return `You already have ${MAX_LIVE_TASKS} active or paused tasks, the most one person may. Finish one${where} first.`;
+}
+function said(r) {
+  return r.ok ? r.text : r.error;
 }
 async function loadTaskList(d, user) {
   const entries = await taskList(d.store, { userId: user.id, admin: user.admin });
@@ -2632,6 +2674,8 @@ async function ownTask(d, user, taskId) {
   return task && task.ownerId === user.id ? task : null;
 }
 async function answerLatest(d, user, input) {
+  if (input.until !== undefined && input.until.trim().length > MAX_WHEN)
+    return `\`until\` is longer than ${MAX_WHEN} characters.`;
   const task = await ownTask(d, user, input.taskId);
   if (!task)
     return NO_SUCH_TASK;
@@ -2662,18 +2706,136 @@ function answeredText(kind, snoozeUntil, user, now) {
     return "Marked done.";
   return "Recorded.";
 }
-async function resumeTask(d, user, taskId) {
+
+// plugins/tracker/src/manage.ts
+async function ownLiveTask(d, user, taskId) {
   const task = await ownTask(d, user, taskId);
+  return task && task.status !== "archived" ? task : null;
+}
+function editable(task) {
+  return task.status === "active" || task.status === "paused";
+}
+var FINISHED = "That task has finished, so it cannot be changed. Set a new one instead.";
+async function pauseTask(d, user, taskId) {
+  const task = await ownLiveTask(d, user, taskId);
   if (!task)
-    return NO_SUCH_TASK;
-  const removed = await d.health.resumeTask(task, user.id, d.clock.now());
-  if (removed === null)
-    return task.status === "paused" ? "That task was not paused by failed DMs." : `That task is ${task.status}, not paused.`;
+    return { ok: false, error: NO_SUCH_TASK };
+  if (task.status !== "active")
+    return { ok: false, error: `That task is ${task.status}, not active.` };
+  const at = d.clock.now().toISOString();
+  await d.store.updateTask(task.id, { status: "paused", at });
+  await d.store.addTaskEvent({ taskId: task.id, actorId: user.id, kind: "paused", detail: "paused by the owner", at });
+  return { ok: true, text: `Paused \`${task.id}\`: nothing is sent until you resume it.` };
+}
+async function resumeTask(d, user, taskId) {
+  const task = await ownLiveTask(d, user, taskId);
+  if (!task)
+    return { ok: false, error: NO_SUCH_TASK };
+  if (task.status !== "paused")
+    return { ok: false, error: `That task is ${task.status}, not paused.` };
+  const now = d.clock.now();
+  if (d.health.isPaused(user.id))
+    await d.health.resume(user.id, now);
+  const removed = await d.health.resumeTask(task, user.id, now);
+  if (removed === null) {
+    const current = await d.store.getTask(task.id);
+    if (current?.status === "paused") {
+      const at = now.toISOString();
+      const active = await d.store.updateTask(task.id, { status: "active", at });
+      await d.store.addTaskEvent({ taskId: task.id, actorId: user.id, kind: "resumed", detail: "resumed by the owner", at });
+      await materialize(d.store, active, user, now);
+    }
+    return { ok: true, text: `Resumed \`${task.id}\`.` };
+  }
   const names = [];
   for (const id of removed)
     names.push((await d.store.getUser(id))?.displayName ?? id);
   const without = names.length > 0 ? `, without ${names.join(", ")}` : "";
-  return `Resumed \`${task.id}\`${without}.`;
+  return { ok: true, text: `Resumed \`${task.id}\`${without}.` };
+}
+async function deleteTask(d, user, taskId) {
+  const task = await ownLiveTask(d, user, taskId);
+  if (!task)
+    return { ok: false, error: NO_SUCH_TASK };
+  const at = d.clock.now().toISOString();
+  await d.store.deleteQueuedOccurrences(task.id);
+  await d.store.updateTask(task.id, { status: "archived", at });
+  await d.store.addTaskEvent({ taskId: task.id, actorId: user.id, kind: "archived", detail: "deleted by the owner", at });
+  return { ok: true, text: `Deleted \`${task.id}\` ${task.title}.` };
+}
+
+// plugins/tracker/src/reminders.ts
+var REPEATS = ["none", "day", "week", "month"];
+function reminderSchedule(when, repeat, zone, now) {
+  if (repeat === "none") {
+    if (!when)
+      return 'Say when: for example "in 20 minutes", "tomorrow 9am" or "friday at 17:30".';
+    return { kind: "once", at: when.toISOString() };
+  }
+  const w = wallClock(when ?? now, zone);
+  const start = `${w.year}-${String(w.month).padStart(2, "0")}-${String(w.day).padStart(2, "0")}`;
+  const base = { kind: "calendar", every: 1, unit: repeat, start };
+  if (!when)
+    return base;
+  return {
+    ...base,
+    hour: w.hour,
+    minute: w.minute,
+    ...repeat === "week" ? { weekdays: [w.weekday] } : {},
+    ...repeat === "month" ? { dayOfMonth: w.day } : {}
+  };
+}
+function repeatOf(schedule) {
+  if (schedule?.kind !== "calendar")
+    return "none";
+  return schedule.unit;
+}
+function reminderPlan(d, user, input, keep) {
+  const text = input.text.trim();
+  if (text.length === 0)
+    return { ok: false, error: "Say what to remind you of." };
+  if (text.length > MAX_REMINDER_TEXT)
+    return { ok: false, error: `That reminder is longer than ${MAX_REMINDER_TEXT} characters.` };
+  if (!REPEATS.includes(input.repeat))
+    return { ok: false, error: "`repeat` is once, daily, weekly or monthly." };
+  const now = d.clock.now();
+  let when = null;
+  if (input.when !== undefined && input.when.trim().length > MAX_WHEN)
+    return { ok: false, error: `\`when\` is longer than ${MAX_WHEN} characters.` };
+  if (input.when !== undefined && input.when.trim() !== "") {
+    const parsed = parseWhen(input.when, now, { zone: user.timeZone, defaultHour: user.preferredHour });
+    if (!parsed.ok)
+      return { ok: false, error: parsed.error };
+    when = parsed.at;
+  }
+  if (when === null && keep && repeatOf(keep) === input.repeat)
+    return { ok: true, text, schedule: keep };
+  const schedule = reminderSchedule(when, input.repeat, user.timeZone, now);
+  if (typeof schedule === "string")
+    return { ok: false, error: schedule };
+  return { ok: true, text, schedule };
+}
+async function createReminder(d, user, input) {
+  const type = d.types.reminder;
+  if (!type)
+    return { ok: false, error: "Reminders are not available on this bot." };
+  const plan = reminderPlan(d, user, input);
+  if (!plan.ok)
+    return plan;
+  const capped = await liveTaskCap(d, user);
+  if (capped)
+    return { ok: false, error: capped };
+  const { text, schedule } = plan;
+  const now = d.clock.now();
+  const actor = { userId: user.id, admin: user.admin };
+  const { task, next } = await createTask(d.store, actor, user, { type, title: clip(text, MAX_TITLE), config: { text }, schedule }, now);
+  const at = next ? formatInstant(next.dueAt, user.timeZone, now) : "never (that time has no next run)";
+  const cadence = schedule.kind === "once" ? "" : `, ${describeSchedule(schedule, user, user.timeZone, now)}`;
+  return { ok: true, task, text: clip(`Reminder \`${task.id}\` set: ${text}
+Next: ${at}${cadence}.`) };
+}
+async function remind(d, user, input) {
+  return said(await createReminder(d, user, input));
 }
 
 // plugins/tracker/src/interactions.ts
@@ -2887,6 +3049,8 @@ async function sendShare(d, p) {
 async function finishShare(d, p, err) {
   if (err === null)
     return `Invited <@${p.targetDiscordId}> to \`${p.taskId}\`. They get a DM to accept or decline.`;
+  if (!await d.store.getUser(p.targetId) || !await d.store.getTask(p.taskId))
+    return `<@${p.targetDiscordId}> ${CANNOT_SHARE}`;
   await d.store.removeRecipient(p.taskId, p.targetId);
   await d.store.addTaskEvent({
     taskId: p.taskId,
@@ -3078,12 +3242,9 @@ function runView(o, replies, people, viewer, now) {
     answers: replies.filter((r) => r.occurrenceId === o.id).map((r) => `${people.get(r.userId)?.displayName ?? r.userId} ${replyText(r)}`)
   };
 }
-function changeView(e, viewer, now) {
-  return {
-    at: formatInstant(e.at, viewer.timeZone, now),
-    kind: e.kind.replaceAll("_", " "),
-    detail: e.kind === "paused" || e.kind === "resumed" ? e.detail : null
-  };
+function changeView(e, viewer, now, names = new Map) {
+  const detail = e.kind === "paused" || e.kind === "resumed" ? e.detail.replace(PERSON_REF, (_, id) => names.get(id) ?? "someone no longer on the tracker") : null;
+  return { at: formatInstant(e.at, viewer.timeZone, now), kind: e.kind.replaceAll("_", " "), detail };
 }
 function runLine(v) {
   const late = v.late ? " (late)" : "";
@@ -3114,6 +3275,16 @@ async function loadHistory(d, user, taskId) {
         people.set(u.id, u);
     }
   }
+  const names = new Map;
+  for (const e of changes) {
+    for (const [, id] of e.detail.matchAll(PERSON_REF)) {
+      if (id === undefined || names.has(id))
+        continue;
+      const u = await d.store.getUser(id);
+      if (u)
+        names.set(id, u.displayName ?? id);
+    }
+  }
   const owner = task.ownerId === user.id ? user : await d.store.getUser(task.ownerId);
   return {
     task,
@@ -3121,7 +3292,7 @@ async function loadHistory(d, user, taskId) {
     next: next ? formatInstant(next.dueAt, user.timeZone, now) : null,
     runs: runs.slice(-HISTORY_RUNS).map((o) => runView(o, replies, people, user, now)),
     earlierRuns: Math.max(0, runs.length - HISTORY_RUNS),
-    changes: changes.slice(-HISTORY_CHANGES).map((e) => changeView(e, user, now)),
+    changes: changes.slice(-HISTORY_CHANGES).map((e) => changeView(e, user, now, names)),
     earlierChanges: Math.max(0, changes.length - HISTORY_CHANGES)
   };
 }
@@ -3204,86 +3375,33 @@ ${block}
 ${clip(rest, Math.max(3, MAX_ANSWER - head.length - block.length - 2))}`);
 }
 
-// plugins/tracker/src/tracked.ts
-var MAX_TITLE2 = 100;
-var MAX_NOTE = 300;
-var MAX_NEAR = 100;
+// plugins/tracker/src/price.ts
 var MAX_PRICE_TASKS = 20;
 var DEFAULT_POLL_HOURS = 12;
 var MAX_POLL_HOURS = 168;
-var DEFAULT_LEAD_DAYS = 7;
-var MAX_LEAD_DAYS = 365;
-var MAX_EVERY = 100;
 function plural2(n, word) {
   return `${n} ${word}${n === 1 ? "" : "s"}`;
 }
-async function addRenewal(d, user, input) {
-  const type = d.types.renewal;
-  if (!type)
-    return "Renewals are not available on this bot.";
-  const name = input.name.trim();
-  if (name.length === 0)
-    return "Say what renews: a subscription, a domain, a warranty.";
-  if (name.length > MAX_TITLE2)
-    return `That name is longer than ${MAX_TITLE2} characters.`;
-  if (!Number.isFinite(input.amount) || input.amount < 0)
-    return "The amount has to be zero or more.";
-  const currency = input.currency.trim().toUpperCase();
-  if (!/^[A-Z]{3}$/.test(currency))
-    return "The currency is a three-letter code, such as USD or EUR.";
-  const note = input.note?.trim() ?? "";
-  if (note.length > MAX_NOTE)
-    return `The note is longer than ${MAX_NOTE} characters.`;
-  const every = input.every ?? 1;
-  if (!Number.isInteger(every) || every < 1 || every > MAX_EVERY)
-    return `\`every\` is a whole number from 1 to ${MAX_EVERY}.`;
-  const lead = input.lead ?? DEFAULT_LEAD_DAYS;
-  if (!Number.isInteger(lead) || lead < 0 || lead > MAX_LEAD_DAYS)
-    return `\`lead\` is a whole number of days from 0 to ${MAX_LEAD_DAYS}.`;
-  const renews = input.renews.trim();
-  const now = d.clock.now();
-  const days = /^\d{4}-\d{2}-\d{2}$/.test(renews) ? daysUntil(renews, now, user.timeZone) : null;
-  if (days === null)
-    return "Give the date as YYYY-MM-DD, for example 2026-12-01.";
-  if (days < 0)
-    return "That date has passed: give the next renewal or expiry date.";
-  const schedule = { kind: "period", every, unit: input.unit ?? "year", anchor: renews, leadDays: lead };
-  const config = { amount: input.amount, currency, ...note ? { note } : {} };
-  const actor = { userId: user.id, admin: user.admin };
-  let created;
-  try {
-    created = await createTask(d.store, actor, user, { type, title: name, config, schedule }, now);
-  } catch (err) {
-    if (err instanceof ScheduleError)
-      return `That schedule does not work: ${err.message}.`;
-    throw err;
-  }
-  const { task } = created;
-  let next = created.next;
-  const first = nextDue(schedule, new Date(0), { zone: user.timeZone, preferredHour: user.preferredHour });
-  if (first && first.getTime() <= now.getTime()) {
-    next = await d.store.createOccurrence({
-      taskId: task.id,
-      lane: task.lane,
-      dueAt: first.toISOString(),
-      dedupeKey: scheduledKey(task.id, first),
-      at: now.toISOString()
-    });
-  }
-  const cadence = describeSchedule(schedule, user, user.timeZone, now);
-  const when = days === 0 ? "today" : `in ${plural2(days, "day")}`;
-  const ask = !next ? "never (that schedule has no next date)" : Date.parse(next.dueAt) <= now.getTime() ? `in the next minute (it renews ${when})` : formatInstant(next.dueAt, user.timeZone, now);
-  return clip([
-    `Renewal \`${task.id}\` set: ${name}, ${money(input.amount, currency)}, ${cadence}.`,
-    `First ask: ${ask}. Each ask has Keep, Cancel and Renewed buttons; paid a different amount? Answer with \`/task decide\` instead of a button.`
-  ].join(`
-`));
-}
 function nearPattern(near) {
   const literal = near.trim().replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
   return `${literal}[^0-9]{0,40}([0-9][0-9.,]{0,15})`;
 }
-async function preview(d, v) {
+function priceSettingsPlan(input) {
+  const hours = input.hours ?? DEFAULT_POLL_HOURS;
+  if (!Number.isInteger(hours) || hours < 1 || hours > MAX_POLL_HOURS)
+    return { ok: false, error: `\`hours\` is a whole number from 1 to ${MAX_POLL_HOURS}.` };
+  const drop = input.drop ?? DEFAULT_DROP_PERCENT;
+  if (!Number.isFinite(drop) || drop < 1 || drop > 90)
+    return { ok: false, error: "`drop` is a percentage from 1 to 90." };
+  const baseline = input.baseline ?? DEFAULT_BASELINE;
+  if (!BASELINE_RULES.includes(baseline))
+    return { ok: false, error: "`baseline` is first, last or peak." };
+  const name = input.name?.trim() ?? "";
+  if (name.length > MAX_TITLE)
+    return { ok: false, error: `That name is longer than ${MAX_TITLE} characters.` };
+  return { ok: true, name, hours, drop, baseline };
+}
+async function previewPrice(d, v) {
   if (!d.fetch)
     return { ok: false, error: "Price tracking is not available on this bot." };
   try {
@@ -3309,65 +3427,168 @@ async function ownedPriceTasks(d, user) {
   const paused = await d.store.listTasks({ ownerId: user.id, status: "paused" });
   return [...active, ...paused].filter((t) => t.type === "price").length;
 }
+function atCap(d) {
+  const where = d.webEditor ? ", or delete one on the web," : "";
+  return `You already track ${MAX_PRICE_TASKS} prices, the most one person may. Stop one with \`/task done\`${where} first.`;
+}
 function titleFor(url) {
   const u = new URL(url);
-  return clip(`${u.hostname}${u.pathname === "/" ? "" : u.pathname}`, MAX_TITLE2);
+  return clip(`${u.hostname}${u.pathname === "/" ? "" : u.pathname}`, MAX_TITLE);
 }
-async function trackPrice(d, user, input) {
+async function startPrice(d, user, input) {
   if (!d.types.price || !d.fetch)
-    return "Price tracking is not available on this bot.";
+    return { ok: false, error: "Price tracking is not available on this bot." };
   const url = input.url.trim();
+  if (url.length > MAX_URL)
+    return { ok: false, error: `That address is longer than ${MAX_URL} characters.` };
   const problem = urlProblem(url);
   if (problem)
-    return problem;
-  const hours = input.hours ?? DEFAULT_POLL_HOURS;
-  if (!Number.isInteger(hours) || hours < 1 || hours > MAX_POLL_HOURS)
-    return `\`hours\` is a whole number from 1 to ${MAX_POLL_HOURS}.`;
-  const drop = input.drop ?? DEFAULT_DROP_PERCENT;
-  if (!Number.isFinite(drop) || drop < 1 || drop > 90)
-    return "`drop` is a percentage from 1 to 90.";
-  const baseline = input.baseline ?? DEFAULT_BASELINE;
-  if (!BASELINE_RULES.includes(baseline))
-    return "`baseline` is first, last or peak.";
+    return { ok: false, error: problem };
+  const settings = priceSettingsPlan(input);
+  if (!settings.ok)
+    return settings;
   const near = input.near?.trim() ?? "";
   if (near.length > MAX_NEAR)
-    return `\`near\` is longer than ${MAX_NEAR} characters.`;
-  const name = input.name?.trim() ?? "";
-  if (name.length > MAX_TITLE2)
-    return `That name is longer than ${MAX_TITLE2} characters.`;
-  if (await ownedPriceTasks(d, user) >= MAX_PRICE_TASKS) {
-    return `You already track ${MAX_PRICE_TASKS} prices, the most one person may. Stop one with \`/task done\` first.`;
-  }
-  const v = {
-    url,
-    title: name || titleFor(url),
-    hours,
-    config: { url, dropPercent: drop, baseline, ...near ? { pattern: nearPattern(near) } : {} }
-  };
+    return { ok: false, error: `\`near\` is longer than ${MAX_NEAR} characters.` };
+  if (await ownedPriceTasks(d, user) >= MAX_PRICE_TASKS)
+    return { ok: false, error: atCap(d) };
+  const capped = await liveTaskCap(d, user);
+  if (capped)
+    return { ok: false, error: capped };
+  const { name, hours, drop, baseline } = settings;
+  const config = { url, dropPercent: drop, baseline, ...near ? { pattern: nearPattern(near) } : {} };
+  return { ok: true, pending: { url, title: name || titleFor(url), hours, config } };
+}
+async function trackPrice(d, user, input) {
+  const started = await startPrice(d, user, input);
+  if (!started.ok)
+    return started.error;
+  const { pending } = started;
   return {
-    outside: () => preview(d, v),
-    finish: (result) => finishPrice(d, user, v, result)
+    outside: () => previewPrice(d, pending),
+    finish: async (result) => said(await finishPrice(d, user, pending, result))
   };
 }
-async function finishPrice(d, user, v, seen) {
+async function finishPrice(d, asked, v, seen) {
+  const user = await d.store.getUser(asked.id);
+  if (!user || !d.admissions.isRegistered(user.id))
+    return { ok: false, error: NO_LONGER_LISTED };
   if (!seen.ok)
-    return seen.error;
+    return seen;
   const type = d.types.price;
   if (!type)
-    return "Price tracking is not available on this bot.";
-  if (await ownedPriceTasks(d, user) >= MAX_PRICE_TASKS) {
-    return `You already track ${MAX_PRICE_TASKS} prices, the most one person may. Stop one with \`/task done\` first.`;
-  }
+    return { ok: false, error: "Price tracking is not available on this bot." };
+  if (await ownedPriceTasks(d, user) >= MAX_PRICE_TASKS)
+    return { ok: false, error: atCap(d) };
+  const capped = await liveTaskCap(d, user);
+  if (capped)
+    return { ok: false, error: capped };
   const now = d.clock.now();
   const schedule = { kind: "poll", every: v.hours, unit: "hour", start: now.toISOString() };
   const actor = { userId: user.id, admin: user.admin };
   const { task } = await createTask(d.store, actor, user, { type, title: v.title, config: v.config, schedule }, now);
   const rule = v.config.baseline ?? DEFAULT_BASELINE;
-  return clip([
-    `Tracking \`${task.id}\`: ${v.title}. I read ${seen.text} just now.`,
-    `I check every ${plural2(v.hours, "hour")} and DM you when it drops ${v.config.dropPercent}% or more from the ${rule} price seen; the first check, within a minute, DMs the starting price. \`/task done ${task.id}\` stops it.`
-  ].join(`
-`));
+  return {
+    ok: true,
+    task,
+    text: clip([
+      `Tracking \`${task.id}\`: ${v.title}. I read ${seen.text} just now.`,
+      `I check every ${plural2(v.hours, "hour")} and DM you when it drops ${v.config.dropPercent}% or more from the ${rule} price seen; the first check, within a minute, DMs the starting price. \`/task done ${task.id}\` stops it.`
+    ].join(`
+`))
+  };
+}
+
+// plugins/tracker/src/tracked.ts
+var DEFAULT_LEAD_DAYS = 7;
+var MAX_LEAD_DAYS = 365;
+var MAX_EVERY = 100;
+function plural3(n, word) {
+  return `${n} ${word}${n === 1 ? "" : "s"}`;
+}
+var PERIOD_UNITS = ["year", "month", "week", "day"];
+function renewalPlan(d, user, input) {
+  const bad = (error) => ({ ok: false, error });
+  const name = input.name.trim();
+  if (name.length === 0)
+    return bad("Say what renews: a subscription, a domain, a warranty.");
+  if (name.length > MAX_TITLE)
+    return bad(`That name is longer than ${MAX_TITLE} characters.`);
+  if (!Number.isFinite(input.amount) || input.amount < 0)
+    return bad("The amount has to be zero or more.");
+  const currency = input.currency.trim().toUpperCase();
+  if (!new RegExp(`^[A-Z]{${CURRENCY_LENGTH}}$`).test(currency))
+    return bad("The currency is a three-letter code, such as USD or EUR.");
+  const note = input.note?.trim() ?? "";
+  if (note.length > MAX_NOTE)
+    return bad(`The note is longer than ${MAX_NOTE} characters.`);
+  const unit = input.unit ?? "year";
+  if (!PERIOD_UNITS.includes(unit))
+    return bad("`unit` is yearly, monthly, weekly or daily.");
+  const every = input.every ?? 1;
+  if (!Number.isInteger(every) || every < 1 || every > MAX_EVERY)
+    return bad(`\`every\` is a whole number from 1 to ${MAX_EVERY}.`);
+  const lead = input.lead ?? DEFAULT_LEAD_DAYS;
+  if (!Number.isInteger(lead) || lead < 0 || lead > MAX_LEAD_DAYS)
+    return bad(`\`lead\` is a whole number of days from 0 to ${MAX_LEAD_DAYS}.`);
+  const renews = input.renews.trim();
+  const days = renews.length === DATE_LENGTH && /^\d{4}-\d{2}-\d{2}$/.test(renews) ? daysUntil(renews, d.clock.now(), user.timeZone) : null;
+  if (days === null)
+    return bad("Give the date as YYYY-MM-DD, for example 2026-12-01.");
+  if (days < 0)
+    return bad("That date has passed: give the next renewal or expiry date.");
+  return { ok: true, name, amount: input.amount, currency, note, days, schedule: { kind: "period", every, unit, anchor: renews, leadDays: lead } };
+}
+async function firstAskIfDue(d, task, owner, schedule) {
+  const now = d.clock.now();
+  const first = nextDue(schedule, new Date(0), { zone: owner.timeZone, preferredHour: owner.preferredHour });
+  if (!first || first.getTime() > now.getTime())
+    return null;
+  return d.store.createOccurrence({ taskId: task.id, lane: task.lane, dueAt: first.toISOString(), dedupeKey: scheduledKey(task.id, first), at: now.toISOString() });
+}
+function askText(next, days, user, now) {
+  const when = days === 0 ? "today" : `in ${plural3(days, "day")}`;
+  if (!next)
+    return "never (that schedule has no next date)";
+  return Date.parse(next.dueAt) <= now.getTime() ? `in the next minute (it renews ${when})` : formatInstant(next.dueAt, user.timeZone, now);
+}
+async function createRenewal(d, user, input) {
+  const type = d.types.renewal;
+  if (!type)
+    return { ok: false, error: "Renewals are not available on this bot." };
+  const plan = renewalPlan(d, user, input);
+  if (!plan.ok)
+    return plan;
+  const capped = await liveTaskCap(d, user);
+  if (capped)
+    return { ok: false, error: capped };
+  const { name, currency, note, schedule } = plan;
+  const now = d.clock.now();
+  const config = { amount: plan.amount, currency, ...note ? { note } : {} };
+  const actor = { userId: user.id, admin: user.admin };
+  let created;
+  try {
+    created = await createTask(d.store, actor, user, { type, title: name, config, schedule }, now);
+  } catch (err) {
+    if (err instanceof ScheduleError)
+      return { ok: false, error: `That schedule does not work: ${err.message}.` };
+    throw err;
+  }
+  const { task } = created;
+  const next = await firstAskIfDue(d, task, user, schedule) ?? created.next;
+  const cadence = describeSchedule(schedule, user, user.timeZone, now);
+  return {
+    ok: true,
+    task,
+    text: clip([
+      `Renewal \`${task.id}\` set: ${name}, ${money(plan.amount, currency)}, ${cadence}.`,
+      `First ask: ${askText(next, plan.days, user, now)}. Each ask has Keep, Cancel and Renewed buttons; paid a different amount? Answer with \`/task decide\` instead of a button.`
+    ].join(`
+`))
+  };
+}
+async function addRenewal(d, user, input) {
+  return said(await createRenewal(d, user, input));
 }
 async function decideRenewal(d, user, input) {
   const task = await visibleTask(d.store, { userId: user.id, admin: false }, input.taskId.trim());
@@ -3517,7 +3738,7 @@ ${body}` : body);
     },
     {
       name: "register",
-      build: (b) => b.setDescription("Sign up for reminders, or change your hour and time zone").addIntegerOption((o) => o.setName("hour").setDescription("Hour (0-23) a reminder without a time arrives; default 9").setMinValue(0).setMaxValue(23)).addStringOption((o) => o.setName("zone").setDescription("Your time zone, e.g. America/New_York (the default)").setMaxLength(64)),
+      build: (b) => b.setDescription("Sign up for reminders, or change your hour and time zone").addIntegerOption((o) => o.setName("hour").setDescription("Hour (0-23) a reminder without a time arrives; default 9").setMinValue(0).setMaxValue(23)).addStringOption((o) => o.setName("zone").setDescription("Your time zone, e.g. America/New_York (the default)").setMaxLength(MAX_ZONE)),
       handle: (interaction) => run(interaction, "admitted", (d, user) => {
         const hour = interaction.options.getInteger("hour");
         const zone = interaction.options.getString("zone");
@@ -3530,7 +3751,7 @@ ${body}` : body);
     },
     {
       name: "remind",
-      build: (b) => b.setDescription("Set a reminder, sent to you by DM").addStringOption((o) => o.setName("text").setDescription("What to remind you of").setRequired(true).setMaxLength(MAX_REMINDER_TEXT)).addStringOption((o) => o.setName("when").setDescription('When: "in 20 minutes", "tomorrow 9am", "fri at 17:30"').setMaxLength(100)).addStringOption((o) => o.setName("repeat").setDescription("Repeat it (default: once)").addChoices({ name: "once", value: "none" }, { name: "daily", value: "day" }, { name: "weekly", value: "week" }, { name: "monthly", value: "month" })),
+      build: (b) => b.setDescription("Set a reminder, sent to you by DM").addStringOption((o) => o.setName("text").setDescription("What to remind you of").setRequired(true).setMaxLength(MAX_REMINDER_TEXT)).addStringOption((o) => o.setName("when").setDescription('When: "in 20 minutes", "tomorrow 9am", "fri at 17:30"').setMaxLength(MAX_WHEN)).addStringOption((o) => o.setName("repeat").setDescription("Repeat it (default: once)").addChoices({ name: "once", value: "none" }, { name: "daily", value: "day" }, { name: "weekly", value: "week" }, { name: "monthly", value: "month" })),
       handle: (interaction) => run(interaction, "registered", (d, user) => {
         const when = interaction.options.getString("when");
         return remind(d, user, {
@@ -3542,7 +3763,7 @@ ${body}` : body);
     },
     {
       name: "renewal",
-      build: (b) => b.setDescription("Track a subscription, domain or warranty: I ask before each renewal").addStringOption((o) => o.setName("name").setDescription("What renews, e.g. Netflix").setRequired(true).setMaxLength(100)).addNumberOption((o) => o.setName("amount").setDescription("What one period costs").setRequired(true).setMinValue(0)).addStringOption((o) => o.setName("currency").setDescription("Currency code, e.g. USD").setRequired(true).setMinLength(3).setMaxLength(3)).addStringOption((o) => o.setName("renews").setDescription("The next renewal or expiry date, YYYY-MM-DD").setRequired(true).setMaxLength(10)).addStringOption((o) => o.setName("unit").setDescription("How it renews (default: yearly)").addChoices({ name: "yearly", value: "year" }, { name: "monthly", value: "month" }, { name: "weekly", value: "week" }, { name: "daily", value: "day" })).addIntegerOption((o) => o.setName("every").setDescription("Every how many of those, e.g. 2 for every two years (default 1)").setMinValue(1).setMaxValue(MAX_EVERY)).addIntegerOption((o) => o.setName("lead").setDescription(`Days before the date to ask (default ${DEFAULT_LEAD_DAYS})`).setMinValue(0).setMaxValue(MAX_LEAD_DAYS)).addStringOption((o) => o.setName("note").setDescription("Carried on every ask: where to cancel, which account").setMaxLength(MAX_NOTE)),
+      build: (b) => b.setDescription("Track a subscription, domain or warranty: I ask before each renewal").addStringOption((o) => o.setName("name").setDescription("What renews, e.g. Netflix").setRequired(true).setMaxLength(MAX_TITLE)).addNumberOption((o) => o.setName("amount").setDescription("What one period costs").setRequired(true).setMinValue(0)).addStringOption((o) => o.setName("currency").setDescription("Currency code, e.g. USD").setRequired(true).setMinLength(CURRENCY_LENGTH).setMaxLength(CURRENCY_LENGTH)).addStringOption((o) => o.setName("renews").setDescription("The next renewal or expiry date, YYYY-MM-DD").setRequired(true).setMaxLength(DATE_LENGTH)).addStringOption((o) => o.setName("unit").setDescription("How it renews (default: yearly)").addChoices({ name: "yearly", value: "year" }, { name: "monthly", value: "month" }, { name: "weekly", value: "week" }, { name: "daily", value: "day" })).addIntegerOption((o) => o.setName("every").setDescription("Every how many of those, e.g. 2 for every two years (default 1)").setMinValue(1).setMaxValue(MAX_EVERY)).addIntegerOption((o) => o.setName("lead").setDescription(`Days before the date to ask (default ${DEFAULT_LEAD_DAYS})`).setMinValue(0).setMaxValue(MAX_LEAD_DAYS)).addStringOption((o) => o.setName("note").setDescription("Carried on every ask: where to cancel, which account").setMaxLength(MAX_NOTE)),
       handle: (interaction) => run(interaction, "registered", (d, user) => {
         const every = interaction.options.getInteger("every");
         const lead = interaction.options.getInteger("lead");
@@ -3562,7 +3783,7 @@ ${body}` : body);
     },
     {
       name: "price",
-      build: (b) => b.setDescription("Track a product's price: I DM you when it drops").addStringOption((o) => o.setName("url").setDescription("The product page").setRequired(true).setMaxLength(1000)).addStringOption((o) => o.setName("name").setDescription("What to call it (default: the page address)").setMaxLength(100)).addIntegerOption((o) => o.setName("hours").setDescription(`Hours between checks (default ${DEFAULT_POLL_HOURS})`).setMinValue(1).setMaxValue(MAX_POLL_HOURS)).addNumberOption((o) => o.setName("drop").setDescription("Alert on a drop of at least this percent (default 10)").setMinValue(1).setMaxValue(90)).addStringOption((o) => o.setName("baseline").setDescription("Measure the drop from which price seen (default: the last)").addChoices({ name: "the last", value: "last" }, { name: "the first", value: "first" }, { name: "the highest", value: "peak" })).addStringOption((o) => o.setName("near").setDescription("The words just before the price, if I cannot find it on my own").setMaxLength(MAX_NEAR)),
+      build: (b) => b.setDescription("Track a product's price: I DM you when it drops").addStringOption((o) => o.setName("url").setDescription("The product page").setRequired(true).setMaxLength(MAX_URL)).addStringOption((o) => o.setName("name").setDescription("What to call it (default: the page address)").setMaxLength(MAX_TITLE)).addIntegerOption((o) => o.setName("hours").setDescription(`Hours between checks (default ${DEFAULT_POLL_HOURS})`).setMinValue(1).setMaxValue(MAX_POLL_HOURS)).addNumberOption((o) => o.setName("drop").setDescription("Alert on a drop of at least this percent (default 10)").setMinValue(1).setMaxValue(90)).addStringOption((o) => o.setName("baseline").setDescription("Measure the drop from which price seen (default: the last)").addChoices({ name: "the last", value: "last" }, { name: "the first", value: "first" }, { name: "the highest", value: "peak" })).addStringOption((o) => o.setName("near").setDescription("The words just before the price, if I cannot find it on my own").setMaxLength(MAX_NEAR)),
       handle: (interaction) => run(interaction, "registered", (d, user) => {
         const name = interaction.options.getString("name");
         const hours = interaction.options.getInteger("hours");
@@ -3586,7 +3807,7 @@ ${body}` : body);
     },
     {
       name: "task",
-      build: (b) => b.setDescription("Answer, look back at, or share one of your tasks").addSubcommand((s) => s.setName("done").setDescription("Mark the task's latest reminder done").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(24))).addSubcommand((s) => s.setName("snooze").setDescription("Snooze the task's latest reminder (default: an hour)").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(24)).addStringOption((o) => o.setName("until").setDescription('Until when: "in 2h", "tomorrow 9am"').setMaxLength(100))).addSubcommand((s) => s.setName("decide").setDescription("Answer a renewal's latest ask, with what you paid if it changed").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(24)).addStringOption((o) => o.setName("choice").setDescription("Keep it, cancel it, or it has renewed").setRequired(true).addChoices({ name: "keep", value: "keep" }, { name: "cancel", value: "cancel" }, { name: "renewed", value: "renewed" })).addNumberOption((o) => o.setName("amount").setDescription("What you paid this time, if not the usual").setMinValue(0))).addSubcommand((s) => s.setName("history").setDescription("Every run of the task, how it was answered, and its changes").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(24))).addSubcommand((s) => s.setName("resume").setDescription("Resume a task paused because someone could not be DMed, without them").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(24))).addSubcommand((s) => s.setName("share").setDescription("Ask someone to receive this task's messages too").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(24)).addUserOption((o) => o.setName("user").setDescription("Who to invite").setRequired(true))),
+      build: (b) => b.setDescription("Answer, look back at, or share one of your tasks").addSubcommand((s) => s.setName("done").setDescription("Mark the task's latest reminder done").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(MAX_TASK_ID))).addSubcommand((s) => s.setName("snooze").setDescription("Snooze the task's latest reminder (default: an hour)").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(MAX_TASK_ID)).addStringOption((o) => o.setName("until").setDescription('Until when: "in 2h", "tomorrow 9am"').setMaxLength(MAX_WHEN))).addSubcommand((s) => s.setName("decide").setDescription("Answer a renewal's latest ask, with what you paid if it changed").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(MAX_TASK_ID)).addStringOption((o) => o.setName("choice").setDescription("Keep it, cancel it, or it has renewed").setRequired(true).addChoices({ name: "keep", value: "keep" }, { name: "cancel", value: "cancel" }, { name: "renewed", value: "renewed" })).addNumberOption((o) => o.setName("amount").setDescription("What you paid this time, if not the usual").setMinValue(0))).addSubcommand((s) => s.setName("history").setDescription("Every run of the task, how it was answered, and its changes").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(MAX_TASK_ID))).addSubcommand((s) => s.setName("resume").setDescription("Resume a paused task; one paused for failed DMs goes on without them").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(MAX_TASK_ID))).addSubcommand((s) => s.setName("share").setDescription("Ask someone to receive this task's messages too").addStringOption((o) => o.setName("task").setDescription("The task id from /tasks, e.g. t3").setRequired(true).setMaxLength(MAX_TASK_ID)).addUserOption((o) => o.setName("user").setDescription("Who to invite").setRequired(true))),
       handle: (interaction) => {
         const sub = interaction.options.getSubcommand();
         const taskId = interaction.options.getString("task", true);
@@ -3610,7 +3831,7 @@ ${body}` : body);
             case "history":
               return historyWithSeries(d, user, taskId);
             case "resume":
-              return resumeTask(d, user, taskId);
+              return said(await resumeTask(d, user, taskId));
             case "share": {
               const pending = await prepareShare(d, user, taskId, { discordId: shareWith?.id ?? "", membership: membership ?? "unknown" });
               if (typeof pending === "string")
@@ -3896,6 +4117,7 @@ var MIGRATIONS = [
   CREATE INDEX web_sessions_expiry ON web_sessions (expires_at);
   `
 ];
+var BUSY_TIMEOUT_MS = 5000;
 function migrate(db) {
   const current = db.query("PRAGMA user_version").get().user_version;
   if (current > MIGRATIONS.length) {
@@ -3907,14 +4129,223 @@ function migrate(db) {
       db.exec(`PRAGMA user_version = ${version + 1}`);
     })();
   }
+  return current;
 }
 function openDatabase(path) {
   const db = new Database(path, { create: true });
-  if (path !== ":memory:")
-    db.exec("PRAGMA journal_mode = WAL");
-  db.exec("PRAGMA busy_timeout = 5000");
-  migrate(db);
-  return db;
+  try {
+    if (path !== ":memory:")
+      db.exec("PRAGMA journal_mode = WAL");
+    db.exec(`PRAGMA busy_timeout = ${BUSY_TIMEOUT_MS}`);
+    db.exec("PRAGMA secure_delete = ON");
+    migrate(db);
+    return db;
+  } catch (err) {
+    db.close();
+    throw err;
+  }
+}
+var META_TABLE = "tracker_meta";
+var VACUUMED = "vacuumed_for_secure_delete";
+function vacuumOnce(db, path) {
+  if (path === ":memory:")
+    return { ran: false };
+  try {
+    db.exec(`CREATE TABLE IF NOT EXISTS ${META_TABLE} (key TEXT PRIMARY KEY, value TEXT NOT NULL)`);
+    if (db.query(`SELECT 1 FROM ${META_TABLE} WHERE key = ?`).get(VACUUMED) !== null)
+      return { ran: false };
+    db.exec("PRAGMA busy_timeout = 0");
+    try {
+      db.exec("VACUUM");
+      const r = db.query("PRAGMA wal_checkpoint(TRUNCATE)").get();
+      if (r && Number(r.busy) !== 0)
+        throw new Error("the write-ahead log is busy");
+    } finally {
+      db.exec(`PRAGMA busy_timeout = ${BUSY_TIMEOUT_MS}`);
+    }
+    db.query(`INSERT INTO ${META_TABLE} (key, value) VALUES (?, ?)`).run(VACUUMED, new Date().toISOString());
+    return { ran: true };
+  } catch (err) {
+    return { ran: false, error: err instanceof Error ? err.message : String(err) };
+  }
+}
+
+// plugins/tracker/src/roster.ts
+var FORGOTTEN = "forgotten";
+function historyNames(kind, detail, id) {
+  switch (kind) {
+    case "recipient_invited":
+    case "recipient_accepted":
+    case "recipient_declined":
+    case "recipient_opted_out":
+      return detail === id;
+    case "blocked":
+      return detail === `${id} 24h` || detail === `${id} permanent`;
+    case "recipient_removed":
+      return detail.startsWith(`${id}: `);
+    case "paused":
+      return detail.startsWith(`delivery to {${id}} paused:`);
+    default:
+      return false;
+  }
+}
+function eventNames(type, text, id) {
+  return type === "delivered" && text.startsWith(`${id} `);
+}
+function errorForms(id) {
+  return new RegExp(`(recipient |user |delivery to )${id}(?![0-9A-Za-z_])`, "g");
+}
+function errorNames(text, id) {
+  return text !== null && errorForms(id).test(text);
+}
+function redactError(text, id) {
+  return text.replace(errorForms(id), `$1(${FORGOTTEN})`);
+}
+
+class Roster {
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  people() {
+    const rows = this.db.query(`SELECT u.seq, u.discord_id, u.display_name, u.time_zone, u.preferred_hour, u.admin, u.created_at,
+                a.admitted_by, a.registered_at, h.paused_at, h.failures
+         FROM users u
+         LEFT JOIN admissions a ON a.user_id = 'u' || u.seq
+         LEFT JOIN delivery_health h ON h.user_id = 'u' || u.seq
+         ORDER BY u.seq`).all();
+    const owned = this.db.query("SELECT owner_id, status, COUNT(*) AS n FROM tasks GROUP BY owner_id, status").all();
+    const receiving = this.db.query(`SELECT r.user_id, COUNT(*) AS n FROM task_recipients r JOIN tasks t ON r.task_id = 't' || t.seq
+         WHERE r.state = 'accepted' AND t.status IN ('active', 'paused') GROUP BY r.user_id`).all();
+    return rows.map((r) => {
+      const id = `u${Number(r.seq)}`;
+      const counts = { active: 0, paused: 0, done: 0, archived: 0 };
+      for (const o of owned)
+        if (o.owner_id === id && o.status in counts)
+          counts[o.status] = Number(o.n);
+      const str = (v) => v === null || v === undefined ? null : String(v);
+      return {
+        id,
+        discordId: str(r.discord_id),
+        displayName: str(r.display_name),
+        timeZone: String(r.time_zone),
+        preferredHour: Number(r.preferred_hour),
+        admin: Number(r.admin) === 1,
+        createdAt: String(r.created_at),
+        admittedBy: str(r.admitted_by),
+        registeredAt: str(r.registered_at),
+        deliveryPausedAt: str(r.paused_at),
+        failures: Number(r.failures ?? 0),
+        owned: counts,
+        receiving: Number(receiving.find((x) => x.user_id === id)?.n ?? 0)
+      };
+    });
+  }
+  checkpoint() {
+    this.db.exec("PRAGMA busy_timeout = 0");
+    try {
+      const r = this.db.query("PRAGMA wal_checkpoint(TRUNCATE)").get();
+      return !r || Number(r.busy) === 0;
+    } finally {
+      this.db.exec(`PRAGMA busy_timeout = ${BUSY_TIMEOUT_MS}`);
+    }
+  }
+  othersNamed(taskId, userId, name) {
+    const ids = new Set;
+    for (const r of this.db.query("SELECT user_id FROM task_recipients WHERE task_id = ?").all(taskId))
+      ids.add(r.user_id);
+    for (const r of this.db.query("SELECT detail FROM task_events WHERE task_id = ? AND kind LIKE 'recipient_%'").all(taskId)) {
+      const id = /^(u[1-9][0-9]*)(:|$)/.exec(r.detail)?.[1];
+      if (id)
+        ids.add(id);
+    }
+    ids.delete(userId);
+    const named = this.db.query("SELECT 1 FROM users WHERE seq = ? AND display_name = ?");
+    return [...ids].some((id) => named.get(Number(id.slice(1)), name) !== null);
+  }
+  admins() {
+    return this.db.query("SELECT COUNT(*) AS n FROM users WHERE admin = 1").get().n;
+  }
+  activeBlocks(now) {
+    const rows = this.db.query(`SELECT seq, owner_id, recipient_id, expires_at, created_at FROM invite_blocks
+         WHERE lifted_at IS NULL AND (expires_at IS NULL OR expires_at > ?) ORDER BY seq DESC`).all(now.toISOString());
+    return rows.map((r) => ({
+      id: `b${Number(r.seq)}`,
+      ownerId: String(r.owner_id),
+      recipientId: String(r.recipient_id),
+      expiresAt: r.expires_at === null ? null : String(r.expires_at),
+      createdAt: String(r.created_at)
+    }));
+  }
+  erase(userId) {
+    const seq = /^u([1-9][0-9]*)$/.exec(userId)?.[1];
+    if (seq === undefined)
+      throw new Error(`no user ${userId}`);
+    return this.db.transaction(() => {
+      const person = this.db.query("SELECT display_name FROM users WHERE seq = ?").get(Number(seq));
+      if (!person)
+        throw new Error(`no user ${userId}`);
+      const rows = {};
+      const del = (table, where, ...params) => {
+        rows[table] = (rows[table] ?? 0) + this.db.query(`DELETE FROM ${table} WHERE ${where}`).run(...params).changes;
+      };
+      const THEIR_TASKS = "SELECT 't' || seq FROM tasks WHERE owner_id = ?";
+      const THEIR_RUNS = `SELECT 'o' || seq FROM occurrences WHERE task_id IN (${THEIR_TASKS})`;
+      const pausedFor = this.db.query(`SELECT task_id FROM delivery_pauses WHERE user_id = ? AND task_id NOT IN (${THEIR_TASKS})`).all(userId, userId).map((r) => r.task_id);
+      const taskIds = (sql) => this.db.query(sql).all(userId).map((r) => r.t);
+      const recipientOf = new Set([
+        ...pausedFor,
+        ...taskIds("SELECT task_id AS t FROM task_recipients WHERE user_id = ?"),
+        ...this.db.query("SELECT task_id AS t, kind, detail FROM task_events WHERE instr(detail, ?) > 0").all(userId).filter((r) => historyNames(r.kind, r.detail, userId)).map((r) => r.t)
+      ]);
+      del("events", `occurrence_id IN (${THEIR_RUNS})`, userId);
+      del("delivery_claims", `occurrence_id IN (${THEIR_RUNS}) OR user_id = ?`, userId, userId);
+      del("replies", `task_id IN (${THEIR_TASKS}) OR user_id = ?`, userId, userId);
+      del("task_events", `task_id IN (${THEIR_TASKS}) OR actor_id = ?`, userId, userId);
+      del("series", `task_id IN (${THEIR_TASKS})`, userId);
+      del("task_recipients", `task_id IN (${THEIR_TASKS}) OR user_id = ?`, userId, userId);
+      del("delivery_pauses", `task_id IN (${THEIR_TASKS}) OR user_id = ?`, userId, userId);
+      del("occurrences", `task_id IN (${THEIR_TASKS})`, userId);
+      del("tasks", "owner_id = ?", userId);
+      const containing = (table, columns, column) => this.db.query(`SELECT seq, ${columns} FROM ${table} WHERE instr(${column}, ?) > 0`).all(userId);
+      for (const r of containing("task_events", "kind, detail", "detail")) {
+        if (historyNames(String(r.kind), String(r.detail), userId))
+          del("task_events", "seq = ?", Number(r.seq));
+      }
+      for (const r of containing("events", "type, text", "text")) {
+        if (eventNames(String(r.type), String(r.text), userId))
+          del("events", "seq = ?", Number(r.seq));
+        else if (errorNames(String(r.text), userId))
+          this.db.query("UPDATE events SET text = ? WHERE seq = ?").run(redactError(String(r.text), userId), r.seq);
+      }
+      for (const r of containing("occurrences", "error", "error")) {
+        if (errorNames(String(r.error), userId))
+          this.db.query("UPDATE occurrences SET error = ? WHERE seq = ?").run(redactError(String(r.error), userId), r.seq);
+      }
+      if (person.display_name !== null) {
+        const legacy = `delivery to ${person.display_name} paused:`;
+        const rowsNaming = this.db.query("SELECT seq, task_id, detail FROM task_events WHERE kind = 'paused' AND actor_id IS NULL").all();
+        for (const r of rowsNaming) {
+          if (!recipientOf.has(r.task_id) || !r.detail.startsWith(legacy))
+            continue;
+          if (this.othersNamed(r.task_id, userId, person.display_name))
+            continue;
+          del("task_events", "seq = ?", r.seq);
+        }
+      }
+      del("invite_blocks", "owner_id = ? OR recipient_id = ?", userId, userId);
+      this.db.query("UPDATE invite_blocks SET lifted_by = ? WHERE lifted_by = ?").run(FORGOTTEN, userId);
+      del("admissions", "user_id = ?", userId);
+      this.db.query("UPDATE admissions SET admitted_by = ? WHERE admitted_by = ?").run(FORGOTTEN, userId);
+      del("delivery_health", "user_id = ?", userId);
+      del("web_sessions", "user_id = ?", userId);
+      del("web_login_tokens", "user_id = ?", userId);
+      del("users", "seq = ?", Number(seq));
+      const held = this.db.query("SELECT 1 FROM delivery_pauses WHERE task_id = ? LIMIT 1");
+      const freed = [...new Set(pausedFor)].filter((t) => held.get(t) === null);
+      return { rows, freed };
+    })();
+  }
 }
 
 // plugins/tracker/src/store.ts
@@ -4237,6 +4668,99 @@ class SqliteStore {
   }
 }
 
+// plugins/tracker/src/admin.ts
+var NO_SUCH_PERSON = "There is no such person on this tracker's list.";
+var NO_SUCH_BLOCK = "There is no such block in force.";
+var LAST_ADMIN = "That is the tracker's only admin: make someone else an admin first.";
+var BUSY = "The tracker is busy sending reminders; nothing was deleted. Try again in a minute.";
+var TICK_WAIT_MS = 20000;
+var CONFIGURED_ADMIN = "That admin is named in TRACKER_ADMIN_DISCORD_IDS, which makes them an admin again at every start: remove them from the configuration first.";
+var CONFIGURED_SELF = "You are named in TRACKER_ADMIN_DISCORD_IDS: this erases you now, but the next start makes you an admin again, as a new person, unless you are removed from the configuration first.";
+function isConfiguredAdmin(d, u) {
+  return u.discordId !== null && d.configuredAdmins.has(u.discordId);
+}
+function ticksSettled(d) {
+  return d.lanes.idle(TICK_WAIT_MS);
+}
+function isPersonId(id) {
+  return /^u[1-9][0-9]{0,15}$/.test(id);
+}
+async function person(d, id) {
+  return isPersonId(id) ? d.store.getUser(id) : null;
+}
+function who(u) {
+  return u.displayName ?? u.discordId ?? u.id;
+}
+async function setAdminFlag(d, admin, targetId, flag) {
+  if (!admin.admin)
+    return { ok: false, error: NOT_ADMIN };
+  const target = await person(d, targetId);
+  if (!target)
+    return { ok: false, error: NO_SUCH_PERSON };
+  if (target.admin === flag)
+    return { ok: true, text: `${who(target)} ${flag ? "is already" : "is not"} an admin.` };
+  if (!flag && d.roster.admins() <= 1)
+    return { ok: false, error: LAST_ADMIN };
+  if (!flag && isConfiguredAdmin(d, target))
+    return { ok: false, error: CONFIGURED_ADMIN };
+  await d.store.updateUser(target.id, { admin: flag });
+  d.log.info(`${admin.id} ${flag ? "made" : "revoked"} ${target.id} ${flag ? "an admin" : "as admin"}`);
+  return { ok: true, text: flag ? `${who(target)} is now an admin.` : `${who(target)} is no longer an admin.` };
+}
+async function resumeDelivery(d, admin, targetId) {
+  if (!admin.admin)
+    return { ok: false, error: NOT_ADMIN };
+  const target = await person(d, targetId);
+  if (!target)
+    return { ok: false, error: NO_SUCH_PERSON };
+  const resumed = await d.health.resume(target.id, d.clock.now());
+  if (!resumed)
+    return { ok: false, error: `Delivery to ${who(target)} is not paused.` };
+  return { ok: true, text: `Delivery to ${who(target)} resumed; ${resumed.tasks.length} task(s) back on.` };
+}
+async function liftDeclineBlock(d, admin, blockId) {
+  if (!admin.admin)
+    return { ok: false, error: NOT_ADMIN };
+  const block = /^b[1-9][0-9]{0,15}$/.test(blockId) ? await d.store.getBlock(blockId) : null;
+  const now = d.clock.now();
+  if (!block || (await activeBlock(d.store, block.ownerId, block.recipientId, now))?.id !== block.id)
+    return { ok: false, error: NO_SUCH_BLOCK };
+  await liftBlock(d.store, { userId: admin.id, admin: true }, block.id, now);
+  const owner = await d.store.getUser(block.ownerId);
+  const recipient = await d.store.getUser(block.recipientId);
+  return {
+    ok: true,
+    text: `Lifted: ${owner ? who(owner) : block.ownerId} may invite ${recipient ? who(recipient) : block.recipientId} again.`
+  };
+}
+async function forgetPerson(d, actor, targetId) {
+  if (actor.id !== targetId && !actor.admin)
+    return { ok: false, error: NOT_ADMIN };
+  const target = await person(d, targetId);
+  if (!target)
+    return { ok: false, error: NO_SUCH_PERSON };
+  if (target.admin && d.roster.admins() <= 1)
+    return { ok: false, error: LAST_ADMIN };
+  if (actor.id !== target.id && isConfiguredAdmin(d, target))
+    return { ok: false, error: CONFIGURED_ADMIN };
+  const now = d.clock.now();
+  const erased = await d.health.exclusive(async () => {
+    if (d.lanes.busy())
+      return null;
+    const e = d.roster.erase(target.id);
+    for (const taskId of e.freed)
+      await d.health.release(taskId, null, "resumed: a recipient left the tracker", now);
+    return e;
+  });
+  if (erased === null)
+    return { ok: false, error: BUSY };
+  if (!d.roster.checkpoint())
+    d.log.warn(`after forgetting ${target.id}: the write-ahead log is busy, so SQLite's next checkpoint copies it back`);
+  const total = Object.values(erased.rows).reduce((a, b) => a + b, 0);
+  d.log.info(`forgot ${target.id} (${actor.id === target.id ? "at their own request" : `removed by ${actor.id}`}): ${total} row(s) deleted`);
+  return { ok: true, text: actor.id === target.id ? "Everything the tracker held about you is deleted." : `${who(target)} is removed from the tracker.` };
+}
+
 // node_modules/@rackbops/styles/rackbops-noir/bundle.css
 var bundle_default = `:where([data-rb-style], [data-rb-style] *), :where([data-rb-style], [data-rb-style] *):before, :where([data-rb-style], [data-rb-style] *):after {
   box-sizing: border-box;
@@ -5405,6 +5929,8 @@ var LAYOUT_CSS = `
 .tr-main { max-width: 60rem; margin: 0 auto; padding: var(--rb-space-4); }
 .tr-main > section { margin-bottom: var(--rb-space-5); }
 .tr-stack { display: grid; gap: var(--rb-space-3); max-width: 28rem; }
+.tr-row { display: flex; flex-wrap: wrap; align-items: center; gap: var(--rb-space-2); }
+.tr-row form { margin: 0; }
 .tr-foot { margin-top: var(--rb-space-5); }
 `;
 var STYLESHEET = `${THEME_CSS}
@@ -5461,6 +5987,7 @@ function page(f) {
 <span class="rb-muted">${f.signedIn.name}</span>
 <a class="rb-link" href="${f.base}/">My tasks</a>
 <a class="rb-link" href="${f.base}/settings">Settings</a>
+${f.signedIn.admin ? html`<a class="rb-link" href="${f.base}/admin">Admin</a>` : null}
 <form method="post" action="${f.base}/logout"><input type="hidden" name="csrf" value="${f.signedIn.csrf}"><button class="rb-btn rb-btn--ghost rb-btn--sm" type="submit">Sign out</button></form>
 </nav>` : null;
   return html`<!doctype html>
@@ -5506,13 +6033,35 @@ function readCookie(request, name) {
 function cookie(name, value, o) {
   return `${name}=${value}; Path=${o.base}/; Max-Age=${o.maxAgeSeconds}; HttpOnly; Secure; SameSite=${o.sameSite}`;
 }
+async function readBody(request, max) {
+  const declared = request.headers.get("content-length");
+  if (declared !== null && !(/^[0-9]{1,12}$/.test(declared) && Number(declared) <= max))
+    return null;
+  if (!request.body)
+    return "";
+  const reader = request.body.getReader();
+  const chunks = [];
+  let size = 0;
+  for (;; ) {
+    const { done, value } = await reader.read();
+    if (done)
+      break;
+    size += value.byteLength;
+    if (size > max) {
+      await reader.cancel().catch(() => {});
+      return null;
+    }
+    chunks.push(value);
+  }
+  return Buffer.concat(chunks).toString("utf8");
+}
 
 // plugins/tracker/src/web/pages.ts
 function name3(u) {
   return u.displayName ?? "you";
 }
 function framed(v, title, body) {
-  return page({ base: v.base, title, signedIn: { name: name3(v.user), csrf: v.csrf }, body });
+  return page({ base: v.base, title, signedIn: { name: name3(v.user), csrf: v.csrf, admin: v.user.admin }, body });
 }
 function signInHelpPage(base, note) {
   return page({
@@ -5551,30 +6100,39 @@ function cadence(entry, viewer, now) {
     return "once";
   return describeSchedule(s, entry.from ?? viewer, viewer.timeZone, now);
 }
-function tasksPage(v, data, now) {
+function newLinks(v) {
+  return html`<p class="tr-row">
+<a class="rb-btn rb-btn--primary rb-btn--sm" href="${v.base}/new/reminder">New reminder</a>
+<a class="rb-btn rb-btn--ghost rb-btn--sm" href="${v.base}/new/renewal">New renewal</a>
+<a class="rb-btn rb-btn--ghost rb-btn--sm" href="${v.base}/new/price">New price tracker</a>
+</p>`;
+}
+function tasksPage(v, data, now, flash = null) {
   const rows = data.entries.map((e) => html`<tr>
 <td><a class="rb-link" href="${v.base}/tasks/${e.task.id}">${e.task.title}</a></td>
 <td>${e.from ? name3(e.from) : "you"}</td>
 <td>${when2(e, v.user, now)}</td>
 <td>${cadence(e, v.user, now)}</td>
 </tr>`);
-  const active = data.entries.length === 0 ? html`<p class="rb-muted">You have no active tasks. <code>/remind</code> in Discord sets one.</p>` : html`<div class="rb-table-scroll"><table class="rb-table">
+  const active = data.entries.length === 0 ? html`<p class="rb-muted">You have no active tasks.</p>` : html`<div class="rb-table-scroll"><table class="rb-table">
 <thead><tr><th scope="col">Task</th><th scope="col">From</th><th scope="col">Next</th><th scope="col">Repeats</th></tr></thead>
 <tbody>${rows}</tbody>
 </table></div>`;
   const paused = data.paused.length === 0 ? null : html`<section>
 <h2>Paused</h2>
-<ul>${data.paused.map((p) => html`<li><a class="rb-link" href="${v.base}/tasks/${p.task.id}">${p.task.title}</a>${p.held.length > 0 ? html` -- I could not DM ${p.held.join(", ")}; <code>/task resume ${p.task.id}</code> goes on without them.` : null}</li>`)}</ul>
+<ul>${data.paused.map((p) => html`<li><a class="rb-link" href="${v.base}/tasks/${p.task.id}">${p.task.title}</a>${p.held.length > 0 ? html` -- I could not DM ${p.held.join(", ")}; Resume on its page goes on without them.` : null}</li>`)}</ul>
 </section>`;
   return framed(v, "My tasks", html`<section>
 <h1>My tasks</h1>
+${flash}
 <p class="rb-muted">Times are in ${v.user.timeZone}.</p>
+${newLinks(v)}
 ${active}
 </section>
 ${paused}
 <p class="rb-muted tr-foot">${ADMIN_DISCLOSURE}</p>`);
 }
-function historyPage(v, h) {
+function historyPage(v, h, extra = {}) {
   const runs = h.runs.length === 0 ? html`<p class="rb-muted">No runs yet.</p>` : html`<div class="rb-table-scroll"><table class="rb-table">
 <thead><tr><th scope="col">Due</th><th scope="col">Status</th><th scope="col">Answers</th></tr></thead>
 <tbody>${h.runs.map((r) => html`<tr>
@@ -5586,7 +6144,10 @@ function historyPage(v, h) {
   return framed(v, h.task.title, html`<section>
 <p><a class="rb-link" href="${v.base}/">My tasks</a></p>
 <h1>${h.task.title}</h1>
-<p>${h.task.type}, ${h.task.status}, ${h.cadence}. Next: ${h.next ?? "nothing scheduled"}.</p>
+${extra.flash ?? null}
+${extra.owner ? html`<p class="rb-muted">Owned by ${extra.owner}; you can see it, not change it.</p>` : null}
+<p>${h.task.type}, ${h.task.status === "archived" ? "deleted" : h.task.status}, ${h.cadence}. Next: ${h.task.status === "active" ? h.next ?? "nothing scheduled" : "nothing, while it is not active"}.</p>
+${extra.controls ?? null}
 </section>
 <section>
 <h2>Runs</h2>
@@ -5614,11 +6175,15 @@ ${form.error ? html`<div class="rb-alert rb-alert--danger" role="alert"><p class
 </div>
 <div class="rb-field">
 <label class="rb-label" for="zone">Time zone</label>
-<input class="rb-input" id="zone" name="zone" value="${form.zone}" maxlength="64" required${form.error ? html` aria-invalid="true"` : null}>
+<input class="rb-input" id="zone" name="zone" value="${form.zone}" maxlength="${MAX_ZONE}" required${form.error ? html` aria-invalid="true"` : null}>
 <p class="rb-field__help">An IANA name, such as America/New_York or Europe/London.</p>
 </div>
 <div><button class="rb-btn rb-btn--primary" type="submit">Save</button></div>
 </form>
+</section>
+<section>
+<h2>Forget me</h2>
+<p>Delete everything the tracker holds about you, for good. <a class="rb-link" href="${v.base}/forget">Forget me</a></p>
 </section>`);
 }
 function notFoundPage(base, v) {
@@ -5629,6 +6194,849 @@ function errorPage(base, title, message) {
   return page({ base, title, body: html`<section class="rb-card"><h1>${title}</h1><p>${message}</p></section>` });
 }
 
+// plugins/tracker/src/web/editor-pages.ts
+var EDITOR_TYPES = ["reminder", "renewal", "price"];
+var REPEAT_OPTIONS = [["none", "once"], ["day", "daily"], ["week", "weekly"], ["month", "monthly"]];
+var UNIT_OPTIONS = [["year", "yearly"], ["month", "monthly"], ["week", "weekly"], ["day", "daily"]];
+var BASELINE_OPTIONS = [["last", "the last price seen"], ["first", "the first price seen"], ["peak", "the highest price seen"]];
+var PRICE_SETTINGS = [
+  { name: "name", label: "Name", kind: "text", maxlength: MAX_TITLE, help: "Leave it empty to use the page's address." },
+  { name: "hours", label: "Hours between checks", kind: "number", min: 1, max: MAX_POLL_HOURS, help: `1 to ${MAX_POLL_HOURS}; 12 when empty.` },
+  { name: "drop", label: "Alert on a drop of at least (percent)", kind: "text", decimal: true, help: "1 to 90; 10 when empty." },
+  { name: "baseline", label: "Measure the drop from", kind: "select", options: BASELINE_OPTIONS }
+];
+function fieldsFor(type, mode) {
+  switch (type) {
+    case "reminder":
+      return [
+        { name: "text", label: "Remind me to", kind: "text", required: true, maxlength: MAX_REMINDER_TEXT },
+        {
+          name: "when",
+          label: "When",
+          kind: "text",
+          maxlength: MAX_WHEN,
+          help: mode === "new" ? 'For example "in 20 minutes", "tomorrow 9am", "fri at 17:30". A repeating one with none starts today at your preferred hour.' : "Leave it empty to keep the time it has, unless you change how it repeats."
+        },
+        { name: "repeat", label: "Repeat", kind: "select", options: REPEAT_OPTIONS }
+      ];
+    case "renewal":
+      return [
+        { name: "name", label: "What renews", kind: "text", required: true, maxlength: MAX_TITLE, help: "A subscription, a domain, a warranty." },
+        { name: "amount", label: "What one period costs", kind: "text", required: true, decimal: true },
+        { name: "currency", label: "Currency", kind: "text", required: true, maxlength: CURRENCY_LENGTH, help: "A three-letter code, such as USD or EUR." },
+        { name: "renews", label: "Next renewal or expiry date", kind: "date", required: true },
+        { name: "unit", label: "Renews", kind: "select", options: UNIT_OPTIONS },
+        { name: "every", label: "Every how many of those", kind: "number", min: 1, max: MAX_EVERY, help: "1 when empty." },
+        { name: "lead", label: "Days before the date to ask", kind: "number", min: 0, max: MAX_LEAD_DAYS, help: "7 when empty." },
+        { name: "note", label: "Note", kind: "text", maxlength: MAX_NOTE, help: "Carried on every ask: where to cancel, which account." }
+      ];
+    case "price":
+      return mode === "edit" ? PRICE_SETTINGS : [
+        { name: "url", label: "Product page", kind: "url", required: true, maxlength: MAX_URL },
+        ...PRICE_SETTINGS,
+        { name: "near", label: "Words just before the price", kind: "text", maxlength: MAX_NEAR, help: "Only if I cannot find the price on my own." }
+      ];
+  }
+}
+function prose(text) {
+  return html`${text.split("`").map((part, i) => i % 2 === 1 ? html`<code>${part}</code>` : part)}`;
+}
+function field(f, values) {
+  const value = values[f.name] ?? "";
+  const help = f.help ? html`<p class="rb-field__help">${f.help}</p>` : null;
+  if (f.kind === "select") {
+    return html`<div class="rb-field">
+<label class="rb-label" for="${f.name}">${f.label}</label>
+<select class="rb-select" id="${f.name}" name="${f.name}">${(f.options ?? []).map(([v, label]) => html`<option value="${v}"${v === value ? html` selected` : null}>${label}</option>`)}</select>
+${help}
+</div>`;
+  }
+  const type = f.kind === "number" ? "number" : f.kind === "date" ? "date" : f.kind === "url" ? "url" : "text";
+  return html`<div class="rb-field">
+<label class="rb-label" for="${f.name}">${f.label}</label>
+<input class="rb-input" id="${f.name}" name="${f.name}" type="${type}" value="${value}"${f.maxlength ? html` maxlength="${f.maxlength}"` : null}${f.min !== undefined ? html` min="${f.min}"` : null}${f.max !== undefined ? html` max="${f.max}"` : null}${f.decimal ? html` inputmode="decimal"` : null}${f.required ? html` required` : null}>
+${help}
+</div>`;
+}
+function alert(error) {
+  return error ? html`<div class="rb-alert rb-alert--danger" role="alert"><p class="rb-alert__title">Not saved</p><p>${prose(error)}</p></div>` : null;
+}
+function taskHref(v, id, action = "") {
+  return `${v.base}/tasks/${encodeURIComponent(id)}${action ? `/${action}` : ""}`;
+}
+var NOUN = { reminder: "reminder", renewal: "renewal", price: "price tracker" };
+function newTaskPage(v, type, values, error) {
+  const intro = type === "price" ? html`<p class="rb-muted">I read the page once now; nothing is made unless I find a price in it.</p>` : null;
+  return framed(v, `New ${NOUN[type]}`, html`<section>
+<p><a class="rb-link" href="${v.base}/">My tasks</a></p>
+<h1>New ${NOUN[type]}</h1>
+${intro}
+${alert(error)}
+<form method="post" action="${v.base}/new/${type}" class="tr-stack">
+<input type="hidden" name="csrf" value="${v.csrf}">
+${fieldsFor(type, "new").map((f) => field(f, values))}
+<div><button class="rb-btn rb-btn--primary" type="submit">Create</button></div>
+</form>
+</section>`);
+}
+function editTaskPage(v, task, values, o) {
+  const type = task.type;
+  return framed(v, `Edit ${task.title}`, html`<section>
+<p><a class="rb-link" href="${taskHref(v, task.id)}">Back to the task</a></p>
+<h1>Edit ${task.title}</h1>
+<p class="rb-muted">Now: ${o.now}.${task.status === "paused" ? " Paused." : ""}</p>
+${o.page ? html`<p class="rb-muted">Page: ${o.page}. To track another page, make a new price tracker.</p>` : null}
+${alert(o.error)}
+<form method="post" action="${taskHref(v, task.id, "edit")}" class="tr-stack">
+<input type="hidden" name="csrf" value="${v.csrf}">
+${fieldsFor(type, "edit").map((f) => field(f, values))}
+<div><button class="rb-btn rb-btn--primary" type="submit">Save</button></div>
+</form>
+</section>`);
+}
+function confirmDeletePage(v, task) {
+  return framed(v, `Delete ${task.title}`, html`<section class="rb-card">
+<h1>Delete ${task.title}?</h1>
+<p>It stops at once and leaves your lists; nothing more is sent about it. Its history is kept, and an admin of this tracker can still see it.</p>
+<form method="post" action="${taskHref(v, task.id, "delete")}" class="tr-row">
+<input type="hidden" name="csrf" value="${v.csrf}">
+<input type="hidden" name="confirm" value="yes">
+<button class="rb-btn rb-btn--danger" type="submit">Delete</button>
+<a class="rb-btn rb-btn--ghost" href="${taskHref(v, task.id)}">Keep it</a>
+</form>
+</section>`);
+}
+function post(v, task, action, label, style) {
+  return html`<form method="post" action="${taskHref(v, task.id, action)}"><input type="hidden" name="csrf" value="${v.csrf}"><button class="rb-btn ${style} rb-btn--sm" type="submit">${label}</button></form>`;
+}
+function ownerControls(v, task) {
+  if (task.status === "archived")
+    return null;
+  const live = task.status === "active" || task.status === "paused";
+  const editor = EDITOR_TYPES.includes(task.type);
+  return html`<div class="tr-row">
+${live && editor ? html`<a class="rb-btn rb-btn--primary rb-btn--sm" href="${taskHref(v, task.id, "edit")}">Edit</a>` : null}
+${task.status === "active" ? post(v, task, "pause", "Pause", "rb-btn--ghost") : null}
+${task.status === "paused" ? post(v, task, "resume", "Resume", "rb-btn--accent") : null}
+${post(v, task, "delete", "Delete", "rb-btn--danger")}
+</div>`;
+}
+var NOTICES = {
+  created: "Created.",
+  saved: "Saved.",
+  paused: "Paused: nothing is sent until you resume it.",
+  resumed: "Resumed.",
+  deleted: "Deleted. Its history is kept."
+};
+function notice(key, error) {
+  if (error)
+    return html`<div class="rb-alert rb-alert--danger" role="alert"><p>${prose(error)}</p></div>`;
+  const text = key !== null && Object.hasOwn(NOTICES, key) ? NOTICES[key] : undefined;
+  return text ? html`<div class="rb-alert rb-alert--success" role="status"><p class="rb-alert__title">${text}</p></div>` : null;
+}
+
+// plugins/tracker/src/web/admin-pages.ts
+var CONFIGURED_NOTE = "Named in TRACKER_ADMIN_DISCORD_IDS: made an admin again at every start, so they cannot be revoked or removed here. Remove them from the configuration first.";
+var CONFIRM_WORD = "forget";
+function nameOf(p, fallback = "someone") {
+  if (!p)
+    return fallback;
+  return p.displayName ?? p.id;
+}
+function unmention(text) {
+  return text.replace(/<@([0-9]{17,20})>/g, "$1");
+}
+function flash(result) {
+  if (!result)
+    return null;
+  const text = prose(unmention(result.text));
+  return result.ok ? html`<div class="rb-alert rb-alert--success" role="status"><p>${text}</p></div>` : html`<div class="rb-alert rb-alert--danger" role="alert"><p>${text}</p></div>`;
+}
+function hidden(v) {
+  return html`<input type="hidden" name="csrf" value="${v.csrf}">`;
+}
+function adminNav(v) {
+  return html`<p class="tr-row"><a class="rb-link" href="${v.base}/admin">People</a> <a class="rb-link" href="${v.base}/admin/tasks">All tasks</a></p>`;
+}
+function personHref(v, id, action = "") {
+  return `${v.base}/admin/people/${encodeURIComponent(id)}${action ? `/${action}` : ""}`;
+}
+function admittedBy(p, names) {
+  if (p.admittedBy === null)
+    return "the configuration";
+  if (p.admittedBy === FORGOTTEN)
+    return "an admin since forgotten";
+  return names.get(p.admittedBy) ?? p.admittedBy;
+}
+function delivery(p, viewer, now) {
+  if (p.deliveryPausedAt)
+    return `paused since ${formatInstant(p.deliveryPausedAt, viewer.timeZone, now)}`;
+  return p.failures > 0 ? `on (${p.failures} failed in a row)` : "on";
+}
+function counts(p) {
+  const o = p.owned;
+  return `${o.active} active, ${o.paused} paused, ${o.done} done, ${o.archived} deleted; receives ${p.receiving}`;
+}
+function adminPage(v, data, o = {}) {
+  const names = new Map(data.people.map((p) => [p.id, nameOf(p)]));
+  const rows = data.people.map((p) => html`<tr>
+<td><a class="rb-link" href="${personHref(v, p.id)}">${nameOf(p)}</a>${p.admin ? html` <span class="rb-badge">admin</span>` : null}</td>
+<td>${p.registeredAt ? "registered" : "admitted, not registered"}</td>
+<td>${p.timeZone}, ${String(p.preferredHour).padStart(2, "0")}:00</td>
+<td>${delivery(p, v.user, data.now)}</td>
+<td>${counts(p)}</td>
+</tr>`);
+  const blocks = data.blocks.length === 0 ? html`<p class="rb-muted">No decline blocks are in force.</p>` : html`<ul>${data.blocks.map((b) => html`<li class="tr-row">${names.get(b.ownerId) ?? b.ownerId} may not invite ${names.get(b.recipientId) ?? b.recipientId} ${b.expiresAt ? `until ${formatInstant(b.expiresAt, v.user.timeZone, data.now)}` : "until an admin lifts it"}
+<form method="post" action="${v.base}/admin/blocks/${encodeURIComponent(b.id)}/lift">${hidden(v)}<button class="rb-btn rb-btn--ghost rb-btn--sm" type="submit">Lift</button></form></li>`)}</ul>`;
+  return framed(v, "Admin", html`<section>
+<h1>People</h1>
+${adminNav(v)}
+${flash(o.result ?? null)}
+<div class="rb-table-scroll"><table class="rb-table">
+<thead><tr><th scope="col">Person</th><th scope="col">Status</th><th scope="col">Zone, hour</th><th scope="col">Delivery</th><th scope="col">Tasks</th></tr></thead>
+<tbody>${rows}</tbody>
+</table></div>
+<p class="rb-muted">Admitted by: ${data.people.map((p) => `${nameOf(p)} -- ${admittedBy(p, names)}`).join("; ")}.</p>
+</section>
+<section>
+<h2>Allow a person</h2>
+<form method="post" action="${v.base}/admin/allow" class="tr-stack">
+${hidden(v)}
+<div class="rb-field">
+<label class="rb-label" for="discord_id">Discord user id</label>
+<input class="rb-input" id="discord_id" name="discord_id" value="${o.allow ?? ""}" maxlength="20" inputmode="numeric" required>
+<p class="rb-field__help">What <code>/allow</code> does: they can then <code>/register</code>.</p>
+</div>
+<div><button class="rb-btn rb-btn--primary" type="submit">Allow</button></div>
+</form>
+</section>
+<section>
+<h2>Decline blocks</h2>
+${blocks}
+</section>`);
+}
+function adminTasksPage(v, tasks) {
+  const rows = tasks.map(({ task, owner, receiving }) => html`<tr>
+<td><a class="rb-link" href="${taskHref(v, task.id)}">${task.title}</a></td>
+<td>${task.type}</td>
+<td>${owner}</td>
+<td>${task.status === "archived" ? "deleted" : task.status}</td>
+<td>${receiving}</td>
+</tr>`);
+  return framed(v, "All tasks", html`<section>
+<h1>All tasks</h1>
+${adminNav(v)}
+${tasks.length === 0 ? html`<p class="rb-muted">There are no tasks.</p>` : html`<div class="rb-table-scroll"><table class="rb-table">
+<thead><tr><th scope="col">Task</th><th scope="col">Type</th><th scope="col">Owner</th><th scope="col">Status</th><th scope="col">Recipients</th></tr></thead>
+<tbody>${rows}</tbody>
+</table></div>`}
+</section>`);
+}
+function post2(v, p, action, label, style) {
+  return html`<form method="post" action="${personHref(v, p.id, action)}">${hidden(v)}<button class="rb-btn ${style} rb-btn--sm" type="submit">${label}</button></form>`;
+}
+function personPage(v, p, tasks, now, result = null, configured = false) {
+  return framed(v, nameOf(p), html`<section>
+${adminNav(v)}
+<h1>${nameOf(p)}${p.admin ? html` <span class="rb-badge">admin</span>` : null}</h1>
+${flash(result)}
+<ul>
+<li>Discord id: ${p.discordId ?? "none"}</li>
+<li>${p.registeredAt ? `Registered ${formatInstant(p.registeredAt, v.user.timeZone, now)}` : "Admitted, not registered yet"}</li>
+<li>Zone and hour: ${p.timeZone}, ${String(p.preferredHour).padStart(2, "0")}:00</li>
+<li>Delivery: ${delivery(p, v.user, now)}</li>
+<li>Tasks: ${counts(p)}</li>
+</ul>
+${configured ? html`<p class="rb-muted">${CONFIGURED_NOTE}</p>` : null}
+<div class="tr-row">
+${p.admin ? configured ? null : post2(v, p, "revoke", "Revoke admin", "rb-btn--ghost") : post2(v, p, "grant", "Make admin", "rb-btn--ghost")}
+${p.deliveryPausedAt ? post2(v, p, "resume-delivery", "Resume delivery", "rb-btn--accent") : null}
+${configured && p.id !== v.user.id ? null : post2(v, p, "forget", "Remove from the tracker", "rb-btn--danger")}
+</div>
+</section>
+<section>
+<h2>Their tasks</h2>
+${tasks.length === 0 ? html`<p class="rb-muted">None.</p>` : html`<ul>${tasks.map((t) => html`<li><a class="rb-link" href="${taskHref(v, t.id)}">${t.title}</a> -- ${t.type}, ${t.status === "archived" ? "deleted" : t.status}</li>`)}</ul>`}
+</section>`);
+}
+var WHAT_GOES = "every task (deleted ones too) with its runs, replies and history; your replies, answers and history on other people's tasks, " + "and your place on the tasks shared with you; decline blocks either way; delivery pauses; your settings and sign-in sessions; and your place on the list.";
+function forgetPage(v, note) {
+  return framed(v, "Forget me", html`<section class="rb-card">
+<h1>Forget me</h1>
+<p>This deletes everything the tracker holds about you, at once and for good: ${WHAT_GOES}</p>
+<p>Nothing is kept or archived. Messages the bot already sent you stay in your Discord DMs, where only you can delete them. To use the tracker again later, an admin has to <code>/allow</code> you again, and you start from nothing.</p>
+${note ? html`<div class="rb-alert rb-alert--warning" role="note"><p>${note}</p></div>` : null}
+<form method="post" action="${v.base}/forget">${hidden(v)}<button class="rb-btn rb-btn--danger" type="submit">Continue</button></form>
+</section>`);
+}
+function confirmForgetPage(v, o) {
+  const title = o.self ? "Delete everything about you?" : `Remove ${o.name} from the tracker?`;
+  const what = o.self ? html`<p>Everything the tracker holds about you is deleted: ${WHAT_GOES} You are signed out.</p>` : html`<p>Everything the tracker holds about ${o.name} is deleted, as forget-me deletes it: their tasks, their replies and history, blocks, pauses, settings and sessions. They are signed out and must be allowed again to come back.</p>`;
+  return framed(v, o.self ? "Forget me" : `Remove ${o.name}`, html`<section class="rb-card">
+<h1>${title}</h1>
+${what}
+${o.note ? html`<div class="rb-alert rb-alert--warning" role="note"><p>${o.note}</p></div>` : null}
+${o.error ? html`<div class="rb-alert rb-alert--danger" role="alert"><p>${o.error}</p></div>` : null}
+<form method="post" action="${o.action}" class="tr-stack">
+${hidden(v)}
+<input type="hidden" name="confirm" value="yes">
+<div class="rb-field">
+<label class="rb-label" for="word">Type ${CONFIRM_WORD} to confirm</label>
+<input class="rb-input" id="word" name="word" maxlength="20" autocomplete="off" required>
+</div>
+<div class="tr-row"><button class="rb-btn rb-btn--danger" type="submit">${o.self ? "Delete everything" : "Remove"}</button>
+<a class="rb-btn rb-btn--ghost" href="${o.self ? `${v.base}/settings` : `${v.base}/admin`}">Keep</a></div>
+</form>
+</section>`);
+}
+
+// plugins/tracker/src/web/admin.ts
+function unknownPage(base) {
+  return htmlResponse(notFoundPage(base), 404);
+}
+function fresh(a, admin, fn) {
+  return a.queue(async () => {
+    const me = await a.d.store.getUser(a.v.user.id);
+    if (!me || admin && !me.admin)
+      return null;
+    return fn(me);
+  });
+}
+function said2(done) {
+  return done.ok ? { ok: true, text: done.text } : { ok: false, text: done.error };
+}
+function confirmed(form) {
+  if (form.get("confirm") !== "yes")
+    return "ask";
+  return (form.get("word") ?? "").trim().toLowerCase() === CONFIRM_WORD ? "yes" : "wrong";
+}
+var WRONG_WORD = `Type ${CONFIRM_WORD} to confirm. Nothing was deleted.`;
+async function peoplePage(a, result, status, allow) {
+  const data = { people: a.d.roster.people(), blocks: a.d.roster.activeBlocks(a.d.clock.now()), now: a.d.clock.now() };
+  return htmlResponse(adminPage(a.v, data, { result, ...allow !== undefined ? { allow } : {} }), status);
+}
+async function onePerson(a, id, result = null) {
+  const p = a.d.roster.people().find((x) => x.id === id);
+  if (!p)
+    return htmlResponse(notFoundPage(a.v.base, a.v), 404);
+  const tasks = await a.d.store.listTasks({ ownerId: p.id });
+  return htmlResponse(personPage(a.v, p, tasks, a.d.clock.now(), result, isConfiguredAdmin(a.d, p)), result && !result.ok ? 400 : 200);
+}
+async function adminGet(a, r) {
+  if (r.kind === "admin")
+    return peoplePage(a, null, 200);
+  if (r.kind === "admin-person")
+    return onePerson(a, r.id);
+  const people = new Map(a.d.roster.people().map((p) => [p.id, nameOf(p)]));
+  const rows = [];
+  for (const task of await a.d.store.listTasks()) {
+    const receiving = (await a.d.store.listRecipients(task.id)).filter((x) => x.state === "accepted").length;
+    rows.push({ task, owner: people.get(task.ownerId) ?? task.ownerId, receiving });
+  }
+  return htmlResponse(adminTasksPage(a.v, rows));
+}
+async function adminPost(a, r, form) {
+  const base = a.v.base;
+  if (r.kind === "admin-allow") {
+    const raw = (form.get("discord_id") ?? "").trim();
+    if (!/^[0-9]{17,20}$/.test(raw))
+      return peoplePage(a, { ok: false, text: "That is not a Discord user id (17 to 20 digits)." }, 400, raw.slice(0, 20));
+    const membership = await a.memberOf(raw);
+    const text = await fresh(a, true, (me) => allowPerson(a.d, me, { discordId: raw, bot: false, membership }));
+    if (text === null)
+      return unknownPage(base);
+    const ok = text.startsWith("Allowed") || text.includes("already on the list");
+    return peoplePage(a, { ok, text }, ok ? 200 : 400);
+  }
+  if (r.kind === "admin-lift") {
+    const done = await fresh(a, true, (me) => liftDeclineBlock(a.d, me, r.id));
+    if (done === null)
+      return unknownPage(base);
+    return peoplePage(a, said2(done), done.ok ? 200 : 400);
+  }
+  if (r.kind !== "admin-act")
+    return unknownPage(base);
+  if (r.action === "forget") {
+    const target = a.d.roster.people().find((x) => x.id === r.id);
+    if (!target)
+      return htmlResponse(notFoundPage(base, a.v), 404);
+    const step = confirmed(form);
+    const self = target.id === a.v.user.id;
+    const note = self && isConfiguredAdmin(a.d, target) ? { note: CONFIGURED_SELF } : {};
+    const page = (error) => confirmForgetPage(a.v, { action: personHref(a.v, target.id, "forget"), self, name: nameOf(target), ...note, ...error ? { error } : {} });
+    if (step === "ask")
+      return htmlResponse(page());
+    if (step === "wrong")
+      return htmlResponse(page(WRONG_WORD), 400);
+    if (!await ticksSettled(a.d))
+      return htmlResponse(page(BUSY), 503);
+    const done = await fresh(a, true, (me) => forgetPerson(a.d, me, target.id));
+    if (done === null)
+      return unknownPage(base);
+    if (!done.ok)
+      return htmlResponse(page(done.error), done.error === NO_SUCH_PERSON ? 404 : done.error === BUSY ? 503 : 400);
+    if (self)
+      return redirect(`${base}/signin?forgotten=1`, [a.signOutCookie]);
+    return peoplePage(a, said2(done), 200);
+  }
+  const act = r.action === "grant" ? (me) => setAdminFlag(a.d, me, r.id, true) : r.action === "revoke" ? (me) => setAdminFlag(a.d, me, r.id, false) : (me) => resumeDelivery(a.d, me, r.id);
+  const done = await fresh(a, true, act);
+  if (done === null)
+    return unknownPage(base);
+  if (!done.ok && done.error === NO_SUCH_PERSON)
+    return htmlResponse(notFoundPage(base, a.v), 404);
+  const me = await a.d.store.getUser(a.v.user.id);
+  if (!me?.admin)
+    return redirect(`${base}/`);
+  return onePerson(a, r.id, said2(done));
+}
+async function forgetRoute(a, method, form) {
+  const base = a.v.base;
+  const note = isConfiguredAdmin(a.d, a.v.user) ? CONFIGURED_SELF : undefined;
+  if (method === "GET" || !form)
+    return htmlResponse(forgetPage(a.v, note));
+  const page = (error) => confirmForgetPage(a.v, { action: `${base}/forget`, self: true, name: nameOf(a.v.user), ...note ? { note } : {}, ...error ? { error } : {} });
+  const step = confirmed(form);
+  if (step === "ask")
+    return htmlResponse(page());
+  if (step === "wrong")
+    return htmlResponse(page(WRONG_WORD), 400);
+  if (!await ticksSettled(a.d))
+    return htmlResponse(page(BUSY), 503);
+  const done = await fresh(a, false, (me) => forgetPerson(a.d, me, me.id));
+  if (done === null)
+    return redirect(`${base}/signin`, [a.signOutCookie]);
+  if (!done.ok)
+    return htmlResponse(page(done.error), done.error === BUSY ? 503 : 400);
+  return redirect(`${base}/signin?forgotten=1`, [a.signOutCookie]);
+}
+
+// plugins/tracker/src/edit.ts
+async function owned(d, user, taskId, type) {
+  const task = await ownLiveTask(d, user, taskId);
+  if (!task || task.type !== type)
+    return NO_SUCH_TASK;
+  if (!editable(task))
+    return FINISHED;
+  return task;
+}
+function same(a, b) {
+  return JSON.stringify(a) === JSON.stringify(b);
+}
+async function applyEdit(d, task, user, patch) {
+  const fields = Object.keys(patch);
+  if (fields.length === 0)
+    return task;
+  const at = d.clock.now().toISOString();
+  const updated = await d.store.updateTask(task.id, { ...patch, at });
+  await d.store.addTaskEvent({ taskId: task.id, actorId: user.id, kind: "edited", detail: fields.join(", "), at });
+  return updated;
+}
+async function nextRun(d, task) {
+  const queued = await d.store.listOccurrences({ taskId: task.id, status: "queued" });
+  return queued[0] ?? null;
+}
+function savedText(task, user, next, now, what) {
+  const cadence = task.schedule ? describeSchedule(task.schedule, user, user.timeZone, now) : "no schedule";
+  const when = task.status === "paused" ? "paused" : next ? formatInstant(next.dueAt, user.timeZone, now) : "nothing scheduled";
+  return clip(`Saved \`${task.id}\` ${what}: ${cadence}. Next: ${when}.`);
+}
+var blank = (v) => v === undefined || v.trim() === "";
+async function editReminder(d, user, taskId, input) {
+  const task = await owned(d, user, taskId, "reminder");
+  if (typeof task === "string")
+    return { ok: false, error: task };
+  const config = task.config ?? {};
+  const text = blank(input.text) ? String(config.text ?? "") : input.text;
+  const repeat = input.repeat ?? repeatOf(task.schedule);
+  const plan = reminderPlan(d, user, { text, repeat, ...input.when !== undefined ? { when: input.when } : {} }, task.schedule);
+  if (!plan.ok)
+    return plan;
+  let updated = config.text === plan.text ? task : await applyEdit(d, task, user, { title: clip(plan.text, MAX_TITLE), config: { ...config, text: plan.text } });
+  if (!same(plan.schedule, task.schedule))
+    updated = await rescheduleKeepingSnoozes(d, updated, user, plan.schedule, user.id);
+  return { ok: true, task: updated, text: savedText(updated, user, await nextRun(d, updated), d.clock.now(), "(reminder)") };
+}
+var DAY_MS3 = 24 * 60 * 60 * 1000;
+function periodDateFrom(s, date, owner) {
+  const ctx = { zone: owner.timeZone, preferredHour: owner.preferredHour };
+  let after = new Date(Date.parse(`${date}T00:00:00Z`) - ((s.leadDays ?? 0) + 2) * DAY_MS3);
+  for (let i = 0;i < 1000; i++) {
+    const due = nextDue(s, after, ctx);
+    if (!due)
+      return null;
+    const on = periodDate(s, due, owner.timeZone);
+    if (on >= date)
+      return on;
+    after = due;
+  }
+  return null;
+}
+function renewalDate(task, owner, now) {
+  const s = task.schedule;
+  if (s?.kind !== "period")
+    return "";
+  const w = wallClock(now, owner.timeZone);
+  const today = `${w.year}-${String(w.month).padStart(2, "0")}-${String(w.day).padStart(2, "0")}`;
+  if (s.anchor >= today)
+    return s.anchor;
+  return periodDateFrom(s, today, owner) ?? s.anchor;
+}
+async function askedAbout(d, task, owner, date) {
+  const old = task.schedule;
+  if (old?.kind !== "period")
+    return false;
+  const fired = (await d.store.listOccurrences({ taskId: task.id })).filter((o) => o.status !== "queued" && !o.dedupeKey.startsWith(SNOOZE_PREFIX));
+  return fired.some((o) => periodDate(old, new Date(o.dueAt), owner.timeZone) === date);
+}
+async function editRenewal(d, user, taskId, input) {
+  const task = await owned(d, user, taskId, "renewal");
+  if (typeof task === "string")
+    return { ok: false, error: task };
+  if (task.schedule?.kind !== "period")
+    return { ok: false, error: FINISHED };
+  const old = task.schedule;
+  const now = d.clock.now();
+  const config = task.config;
+  const state = task.state;
+  const carried = state && typeof state.amount === "number" ? state.amount : null;
+  const note = input.note ?? config.note;
+  const plan = renewalPlan(d, user, {
+    name: blank(input.name) ? task.title : input.name,
+    amount: input.amount ?? carried ?? config.amount,
+    currency: blank(input.currency) ? config.currency : input.currency,
+    renews: blank(input.renews) ? renewalDate(task, user, now) : input.renews,
+    every: input.every ?? old.every,
+    unit: input.unit ?? old.unit,
+    lead: input.lead ?? old.leadDays ?? 0,
+    ...note !== undefined ? { note } : {}
+  });
+  if (!plan.ok)
+    return plan;
+  const sameShape = plan.schedule.every === old.every && plan.schedule.unit === old.unit && plan.schedule.leadDays === (old.leadDays ?? 0);
+  const schedule = sameShape && periodDateFrom(old, plan.schedule.anchor, user) === plan.schedule.anchor ? old : plan.schedule;
+  const problems = scheduleProblems(schedule);
+  if (problems.length > 0)
+    return { ok: false, error: `That schedule does not work: ${problems.join("; ")}.` };
+  const patch = {};
+  if (plan.name !== task.title)
+    patch.title = plan.name;
+  const newAmount = plan.amount !== (carried ?? config.amount);
+  const nextConfig = { amount: newAmount ? plan.amount : config.amount, currency: plan.currency, ...plan.note ? { note: plan.note } : {} };
+  if (!same(nextConfig, config))
+    patch.config = nextConfig;
+  if (newAmount && carried !== null)
+    patch.state = { ...state, amount: plan.amount };
+  let updated = await applyEdit(d, task, user, patch);
+  let next = await nextRun(d, updated);
+  if (!same(schedule, old)) {
+    const asked = await askedAbout(d, task, user, schedule.anchor);
+    updated = await rescheduleKeepingSnoozes(d, updated, user, schedule, user.id);
+    next = (asked ? null : await firstAskIfDue(d, updated, user, schedule)) ?? await nextRun(d, updated);
+  }
+  const ask = updated.status === "paused" ? "paused" : askText(next, plan.days, user, now);
+  const cadence = describeSchedule(schedule, user, user.timeZone, now);
+  return { ok: true, task: updated, text: clip(`Saved \`${updated.id}\` (renewal): ${cadence}. Next ask: ${ask}.`) };
+}
+async function editPrice(d, user, taskId, input) {
+  const task = await owned(d, user, taskId, "price");
+  if (typeof task === "string")
+    return { ok: false, error: task };
+  const config = task.config;
+  const schedule = task.schedule;
+  const plan = priceSettingsPlan({
+    name: input.name ?? task.title,
+    hours: input.hours ?? (schedule?.kind === "poll" ? schedule.every : undefined),
+    drop: input.drop ?? config.dropPercent ?? DEFAULT_DROP_PERCENT,
+    baseline: input.baseline ?? config.baseline ?? DEFAULT_BASELINE
+  });
+  if (!plan.ok)
+    return plan;
+  const patch = {};
+  const title = plan.name || titleFor(config.url);
+  if (title !== task.title)
+    patch.title = title;
+  const nextConfig = { ...config, dropPercent: plan.drop, baseline: plan.baseline };
+  if (!same(nextConfig, config))
+    patch.config = nextConfig;
+  let updated = await applyEdit(d, task, user, patch);
+  if (schedule?.kind === "poll" && (schedule.every !== plan.hours || schedule.unit !== "hour")) {
+    const next = { ...schedule, every: plan.hours, unit: "hour" };
+    updated = await rescheduleKeepingSnoozes(d, updated, user, next, user.id);
+  }
+  return { ok: true, task: updated, text: savedText(updated, user, await nextRun(d, updated), d.clock.now(), "(price)") };
+}
+
+// plugins/tracker/src/web/editor.ts
+var READING = "I am still reading the page of your last new price tracker; try again when it is done.";
+var GONE = NO_LONGER_LISTED;
+function asViewer(e, fn) {
+  return e.queue(async () => {
+    const user = await e.d.store.getUser(e.v.user.id);
+    return user ? fn(user) : { ok: false, error: GONE };
+  });
+}
+var str2 = (form, name) => form.get(name) ?? "";
+var opt = (form, name) => str2(form, name).trim() === "" ? undefined : str2(form, name);
+function int(form, name) {
+  const raw = str2(form, name).trim();
+  if (raw === "")
+    return;
+  return /^[0-9]{1,9}$/.test(raw) ? Number(raw) : Number.NaN;
+}
+function decimal(form, name) {
+  const raw = str2(form, name).trim();
+  if (raw === "")
+    return;
+  return /^[0-9]{1,12}(\.[0-9]{1,6})?$/.test(raw) ? Number(raw) : Number.NaN;
+}
+function typed(type, mode, form) {
+  return Object.fromEntries(fieldsFor(type, mode).map((f) => [f.name, str2(form, f.name)]));
+}
+function reminderInput(form) {
+  const when = opt(form, "when");
+  return { text: str2(form, "text"), ...when !== undefined ? { when } : {}, repeat: str2(form, "repeat") || "none" };
+}
+function renewalInput(form) {
+  const every = int(form, "every");
+  const lead = int(form, "lead");
+  const unit = opt(form, "unit");
+  const note = opt(form, "note");
+  return {
+    name: str2(form, "name"),
+    amount: decimal(form, "amount") ?? Number.NaN,
+    currency: str2(form, "currency"),
+    renews: str2(form, "renews"),
+    ...every !== undefined ? { every } : {},
+    ...lead !== undefined ? { lead } : {},
+    ...unit !== undefined ? { unit } : {},
+    ...note !== undefined ? { note } : {}
+  };
+}
+function priceSettings(form) {
+  const name = opt(form, "name");
+  const hours = int(form, "hours");
+  const drop = decimal(form, "drop");
+  const baseline = opt(form, "baseline");
+  return {
+    ...name !== undefined ? { name } : {},
+    ...hours !== undefined ? { hours } : {},
+    ...drop !== undefined ? { drop } : {},
+    ...baseline !== undefined ? { baseline } : {}
+  };
+}
+function reminderEdit(form) {
+  const text = opt(form, "text");
+  const when = opt(form, "when");
+  const repeat = opt(form, "repeat");
+  return { ...text !== undefined ? { text } : {}, ...when !== undefined ? { when } : {}, ...repeat !== undefined ? { repeat } : {} };
+}
+function renewalEdit(form) {
+  const name = opt(form, "name");
+  const amount = decimal(form, "amount");
+  const currency = opt(form, "currency");
+  const renews = opt(form, "renews");
+  const every = int(form, "every");
+  const lead = int(form, "lead");
+  const unit = opt(form, "unit");
+  return {
+    ...name !== undefined ? { name } : {},
+    ...amount !== undefined ? { amount } : {},
+    ...currency !== undefined ? { currency } : {},
+    ...renews !== undefined ? { renews } : {},
+    ...every !== undefined ? { every } : {},
+    ...lead !== undefined ? { lead } : {},
+    ...unit !== undefined ? { unit } : {},
+    ...form.has("note") ? { note: str2(form, "note") } : {}
+  };
+}
+function priceEdit(form) {
+  const { name: _name, ...rest } = priceSettings(form);
+  return { ...rest, ...form.has("name") ? { name: str2(form, "name") } : {} };
+}
+var DEFAULTS = {
+  reminder: { repeat: "none" },
+  renewal: { unit: "year", every: "1", lead: "7" },
+  price: { hours: "12", drop: "10", baseline: "last" }
+};
+function newGet(e, type) {
+  return htmlResponse(newTaskPage(e.v, type, type === "renewal" ? { ...DEFAULTS.renewal, currency: "USD" } : DEFAULTS[type]));
+}
+async function newPost(e, type, form) {
+  let made;
+  if (type === "reminder")
+    made = await asViewer(e, (u) => createReminder(e.d, u, reminderInput(form)));
+  else if (type === "renewal")
+    made = await asViewer(e, (u) => createRenewal(e.d, u, renewalInput(form)));
+  else {
+    const near = opt(form, "near");
+    const input = { url: str2(form, "url"), ...priceSettings(form), ...near !== undefined ? { near } : {} };
+    const who = e.v.user.id;
+    if (e.reading.has(who))
+      made = { ok: false, error: READING };
+    else {
+      e.reading.add(who);
+      try {
+        const started = await asViewer(e, (u) => startPrice(e.d, u, input));
+        if (!started.ok)
+          made = started;
+        else {
+          const { pending } = started;
+          const seen = await previewPrice(e.d, pending);
+          made = await asViewer(e, (u) => finishPrice(e.d, u, pending, seen));
+        }
+      } finally {
+        e.reading.delete(who);
+      }
+    }
+  }
+  if (!made.ok)
+    return htmlResponse(newTaskPage(e.v, type, typed(type, "new", form), made.error), 400);
+  return redirect(`${taskHref(e.v, made.task.id)}?done=created`);
+}
+async function taskPage(e, id, done, error) {
+  const view = await loadHistory(e.d, e.v.user, id);
+  if (!view)
+    return htmlResponse(notFoundPage(e.v.base, e.v), 404);
+  const own = view.task.ownerId === e.v.user.id;
+  const controls = own ? ownerControls(e.v, view.task) : null;
+  const owner = own ? null : (await e.d.store.getUser(view.task.ownerId))?.displayName ?? view.task.ownerId;
+  return htmlResponse(historyPage(e.v, view, { controls, flash: notice(done, error), owner }), error ? 400 : 200);
+}
+function current(d, user, task) {
+  const now = d.clock.now();
+  if (task.type === "reminder")
+    return { text: String(task.config?.text ?? ""), when: "", repeat: repeatOf(task.schedule) };
+  if (task.type === "renewal" && task.schedule?.kind === "period") {
+    const s = task.schedule;
+    const c = task.config;
+    const carried = task.state?.amount;
+    const renews = renewalDate(task, user, now);
+    return {
+      name: task.title,
+      amount: String(typeof carried === "number" ? carried : c.amount),
+      currency: c.currency,
+      renews,
+      unit: s.unit,
+      every: String(s.every),
+      lead: String(s.leadDays ?? 0),
+      note: c.note ?? ""
+    };
+  }
+  if (task.type !== "price")
+    return {};
+  const c = task.config;
+  const every = task.schedule?.kind === "poll" ? task.schedule.every : 12;
+  return { name: task.title, hours: String(every), drop: String(c.dropPercent ?? 10), baseline: c.baseline ?? "last" };
+}
+function editPage(e, task, values, error) {
+  const now = task.schedule ? describeSchedule(task.schedule, e.v.user, e.v.user.timeZone, e.d.clock.now()) : "no schedule";
+  const page = task.type === "price" ? String(task.config.url) : undefined;
+  return editTaskPage(e.v, task, values, { now, ...page !== undefined ? { page } : {}, ...error !== undefined ? { error } : {} });
+}
+async function editableTask(e, id) {
+  const task = await ownLiveTask(e.d, e.v.user, id);
+  return task && (task.type === "reminder" || task.type === "renewal" || task.type === "price") ? task : null;
+}
+async function editGet(e, id) {
+  const task = await editableTask(e, id);
+  if (!task)
+    return htmlResponse(notFoundPage(e.v.base, e.v), 404);
+  if (task.status !== "active" && task.status !== "paused")
+    return redirect(taskHref(e.v, task.id));
+  return htmlResponse(editPage(e, task, current(e.d, e.v.user, task)));
+}
+async function editPost(e, id, form) {
+  const task = await editableTask(e, id);
+  if (!task)
+    return htmlResponse(notFoundPage(e.v.base, e.v), 404);
+  const saved = task.type === "reminder" ? await asViewer(e, (u) => editReminder(e.d, u, task.id, reminderEdit(form))) : task.type === "renewal" ? await asViewer(e, (u) => editRenewal(e.d, u, task.id, renewalEdit(form))) : await asViewer(e, (u) => editPrice(e.d, u, task.id, priceEdit(form)));
+  if (saved.ok)
+    return redirect(`${taskHref(e.v, task.id)}?done=saved`);
+  if (saved.error === NO_SUCH_TASK)
+    return htmlResponse(notFoundPage(e.v.base, e.v), 404);
+  return htmlResponse(editPage(e, task, typed(task.type, "edit", form), saved.error), 400);
+}
+async function actionPost(e, id, action, form) {
+  const task = await ownLiveTask(e.d, e.v.user, id);
+  if (!task)
+    return htmlResponse(notFoundPage(e.v.base, e.v), 404);
+  if (action === "delete" && str2(form, "confirm") !== "yes")
+    return htmlResponse(confirmDeletePage(e.v, task));
+  const act = action === "pause" ? pauseTask : action === "resume" ? resumeTask : deleteTask;
+  const done = await asViewer(e, (u) => act(e.d, u, task.id));
+  if (!done.ok)
+    return done.error === NO_SUCH_TASK ? htmlResponse(notFoundPage(e.v.base, e.v), 404) : taskPage(e, task.id, null, done.error);
+  if (action === "delete")
+    return redirect(`${e.v.base}/?done=deleted`);
+  return redirect(`${taskHref(e.v, task.id)}?done=${action === "pause" ? "paused" : "resumed"}`);
+}
+
+// plugins/tracker/src/web/routes.ts
+var TASK_PATH = /^\/tasks\/([^/]+)$/;
+var TASK_ACTION = /^\/tasks\/([^/]+)\/(edit|pause|resume|delete)$/;
+var NEW_PATH = /^\/new\/([a-z]+)$/;
+var PERSON_PATH = /^\/admin\/people\/([^/]+)$/;
+var PERSON_ACTION = /^\/admin\/people\/([^/]+)\/(grant|revoke|resume-delivery|forget)$/;
+var BLOCK_LIFT = /^\/admin\/blocks\/([^/]+)\/lift$/;
+function isAdminRoute(r) {
+  return r.kind.startsWith("admin");
+}
+function segment(raw) {
+  try {
+    return decodeURIComponent(raw ?? "");
+  } catch {
+    return "";
+  }
+}
+function route(path) {
+  if (path === "/")
+    return { kind: "tasks" };
+  if (path === "/settings")
+    return { kind: "settings" };
+  if (path === "/logout")
+    return { kind: "logout" };
+  if (path === "/forget")
+    return { kind: "forget" };
+  if (path === "/admin")
+    return { kind: "admin" };
+  if (path === "/admin/tasks")
+    return { kind: "admin-tasks" };
+  if (path === "/admin/allow")
+    return { kind: "admin-allow" };
+  const personAct = PERSON_ACTION.exec(path);
+  if (personAct)
+    return { kind: "admin-act", id: segment(personAct[1]), action: personAct[2] };
+  const onePerson = PERSON_PATH.exec(path);
+  if (onePerson)
+    return { kind: "admin-person", id: segment(onePerson[1]) };
+  const lift = BLOCK_LIFT.exec(path);
+  if (lift)
+    return { kind: "admin-lift", id: segment(lift[1]) };
+  const created = NEW_PATH.exec(path);
+  if (created) {
+    const type = created[1];
+    return EDITOR_TYPES.includes(type) ? { kind: "new", type } : null;
+  }
+  const one = TASK_PATH.exec(path) ?? TASK_ACTION.exec(path);
+  if (!one)
+    return null;
+  const id = segment(one[1]);
+  const action = one[2];
+  if (action === undefined)
+    return { kind: "task", id };
+  if (action === "edit")
+    return { kind: "edit", id };
+  return { kind: "act", id, action };
+}
+function methodsOf(r) {
+  if (r.kind === "logout" || r.kind === "act" || r.kind === "admin-allow" || r.kind === "admin-act" || r.kind === "admin-lift")
+    return "POST";
+  if (r.kind === "settings" || r.kind === "edit" || r.kind === "new" || r.kind === "forget")
+    return "GET, POST";
+  return "GET";
+}
+
 // plugins/tracker/src/web/sessions.ts
 var SESSION_TTL_MS = 7 * 24 * 60 * 60 * 1000;
 
@@ -5670,14 +7078,18 @@ var MEMBER_CHECK_TIMEOUT_MS = 3000;
 var MEMBER_RETRY_MS = 60 * 1000;
 var LEFT_SERVER = `You are signed out. ${NOT_MEMBER}`;
 var RECHECK_FAILED = "You are signed out: I could not check that you are still a member of this tracker's server.";
-var MAX_FORM_BYTES = 8 * 1024;
-var TASK_PATH = /^\/tasks\/([^/]+)$/;
+var MAX_FORM_BYTES = 32 * 1024;
 function plain(status, text, extra = {}) {
   return new Response(text, {
     status,
     headers: { "Content-Type": "text/plain; charset=utf-8", "Cache-Control": "no-store", "X-Content-Type-Options": "nosniff", ...extra }
   });
 }
+function signInNote(q) {
+  if (q.get("forgotten") === "1")
+    return "Everything the tracker held about you is deleted, and you are signed out.";
+  return q.get("out") === "1" ? "You are signed out." : undefined;
+}
 async function lookupWithin(lookup, ms) {
   let timer;
   const late = new Promise((resolve) => {
@@ -5696,6 +7108,7 @@ function createWebHandler(w) {
   const clear = (name) => cookie(name, "", { base, maxAgeSeconds: 0, sameSite: "Lax" });
   const inFlight = new Map;
   const failedAt = new Map;
+  const reading = new Set;
   async function authenticate(d, request) {
     const id = readCookie(request, SESSION_COOKIE);
     if (!id)
@@ -5761,14 +7174,17 @@ function createWebHandler(w) {
     d.sessions.deleteForUser(user.id);
     return { kind: "signed-out", note: RECHECK_FAILED };
   }
+  async function memberOf(discordId) {
+    if (w.guildId === null)
+      return "not-checked";
+    return await lookupWithin(() => w.membership(discordId), MEMBER_CHECK_TIMEOUT_MS) ?? "unknown";
+  }
   async function readForm(request) {
     const type = request.headers.get("content-type") ?? "";
     if (!type.toLowerCase().startsWith("application/x-www-form-urlencoded"))
       return null;
-    const body = await request.text();
-    if (Buffer.byteLength(body) > MAX_FORM_BYTES)
-      return null;
-    return new URLSearchParams(body);
+    const body = await readBody(request, MAX_FORM_BYTES);
+    return body === null ? null : new URLSearchParams(body);
   }
   function forbidden() {
     return htmlResponse(errorPage(base, "Refused", "That form was stale or came from somewhere else. Go back, reload the page and try again."), 403);
@@ -5806,7 +7222,7 @@ function createWebHandler(w) {
     let error = null;
     if (!/^([0-9]|1[0-9]|2[0-3])$/.test(hour))
       error = "The preferred hour must be a whole hour from 0 to 23.";
-    else if (zone === "" || zone.length > 64)
+    else if (zone === "" || zone.length > MAX_ZONE)
       error = "Give a time zone, such as America/New_York.";
     else {
       error = await w.queue(async () => {
@@ -5841,48 +7257,73 @@ function createWebHandler(w) {
       });
     }
     if (path === "/signin")
-      return only("GET") ?? htmlResponse(signInHelpPage(base, url.searchParams.get("out") === "1" ? "You are signed out." : undefined));
+      return only("GET") ?? htmlResponse(signInHelpPage(base, signInNote(url.searchParams)));
     if (path === "/login")
       return method === "GET" ? loginGet(d, url) : loginPost(d, request);
-    const task = TASK_PATH.exec(path);
-    const route = path === "/" ? "tasks" : path === "/settings" ? "settings" : path === "/logout" ? "logout" : task ? "history" : null;
-    if (route === null)
+    const r = route(path);
+    if (r === null)
       return htmlResponse(notFoundPage(base), 404);
-    const wrong = route === "logout" ? only("POST") : route === "settings" ? null : only("GET");
-    if (wrong)
-      return wrong;
+    const allowed = methodsOf(r);
+    const admin = isAdminRoute(r);
+    if (!admin && !allowed.split(", ").includes(method))
+      return plain(405, "Method not allowed", { Allow: allowed });
     const auth = await authenticate(d, request);
     if (auth.kind === "signed-out")
       return htmlResponse(signInHelpPage(base, auth.note), 403, { "Set-Cookie": clear(SESSION_COOKIE) });
     if (auth.kind !== "ok")
       return redirect(`${base}/signin`, auth.kind === "stale" ? [clear(SESSION_COOKIE)] : []);
+    if (admin && !auth.user.admin)
+      return unknownPage(base);
+    if (admin && !allowed.split(", ").includes(method))
+      return plain(405, "Method not allowed", { Allow: allowed });
     const v = { base, user: auth.user, csrf: auth.session.csrf };
+    const e = { d, v, queue: w.queue, reading };
+    const a = { d, v, queue: w.queue, memberOf: (id) => memberOf(id), signOutCookie: clear(SESSION_COOKIE) };
     if (method === "POST") {
       const form = await readForm(request);
       if (!form)
         return plain(400, "Bad request");
       if (!safeEqual(auth.session.csrf, form.get("csrf") ?? ""))
         return forbidden();
-      if (route === "logout") {
-        d.sessions.delete(auth.id);
-        return redirect(`${base}/signin?out=1`, [clear(SESSION_COOKIE)]);
+      switch (r.kind) {
+        case "logout":
+          d.sessions.delete(auth.id);
+          return redirect(`${base}/signin?out=1`, [clear(SESSION_COOKIE)]);
+        case "settings":
+          return settingsPost(d, v, form);
+        case "new":
+          return newPost(e, r.type, form);
+        case "edit":
+          return editPost(e, r.id, form);
+        case "act":
+          return actionPost(e, r.id, r.action, form);
+        case "forget":
+          return forgetRoute(a, method, form);
+        case "admin-allow":
+        case "admin-act":
+        case "admin-lift":
+          return adminPost(a, r, form);
+        default:
+          return plain(405, "Method not allowed", { Allow: allowed });
       }
-      return settingsPost(d, v, form);
     }
     const now = d.clock.now();
-    switch (route) {
+    const done = url.searchParams.get("done");
+    switch (r.kind) {
       case "tasks":
-        return htmlResponse(tasksPage(v, await loadTaskList(d, auth.user), now));
-      case "history": {
-        let id;
-        try {
-          id = decodeURIComponent(task?.[1] ?? "");
-        } catch {
-          return htmlResponse(notFoundPage(base, v), 404);
-        }
-        const view = await loadHistory(d, auth.user, id);
-        return view ? htmlResponse(historyPage(v, view)) : htmlResponse(notFoundPage(base, v), 404);
-      }
+        return htmlResponse(tasksPage(v, await loadTaskList(d, auth.user), now, notice(done)));
+      case "task":
+        return taskPage(e, r.id, done);
+      case "edit":
+        return editGet(e, r.id);
+      case "new":
+        return newGet(e, r.type);
+      case "forget":
+        return forgetRoute(a, method, null);
+      case "admin":
+      case "admin-tasks":
+      case "admin-person":
+        return adminGet(a, r);
       default:
         return htmlResponse(settingsPage(v, { hour: String(auth.user.preferredHour), zone: auth.user.timeZone, saved: url.searchParams.get("saved") === "1" }));
     }
@@ -5975,6 +7416,28 @@ function createPlugin(host, options = {}) {
     if (failed > 0)
       host.log.warn(`${kind === "poll" ? "poll" : "notify"} lane: ${ran} ran, ${failed} failed`);
   }
+  const running = new Set;
+  const tracked = (p) => {
+    running.add(p);
+    const done = () => void running.delete(p);
+    p.then(done, done);
+    return p;
+  };
+  const lanes = {
+    busy: () => running.size > 0,
+    async idle(ms) {
+      const until = Date.now() + ms;
+      while (running.size > 0) {
+        const left = until - Date.now();
+        if (left <= 0)
+          return false;
+        let timer;
+        await Promise.race([Promise.allSettled([...running]), new Promise((r) => timer = setTimeout(r, left))]);
+        clearTimeout(timer);
+      }
+      return true;
+    }
+  };
   let discordClient = null;
   const capture = (interaction) => {
     const client = interaction.client;
@@ -6018,6 +7481,9 @@ function createPlugin(host, options = {}) {
       const openedStore = new SqliteStore(opened);
       const openedClaims = new ClaimStore(opened);
       try {
+        const vacuum = vacuumOnce(opened, path);
+        if ("error" in vacuum)
+          host.log.warn(`could not vacuum the tracker's database (${vacuum.error}); trying again at the next start`);
         const granted = await seedAdmins(openedStore, adminIds, clock.now());
         const admissions = new Admissions(opened);
         for (const id of adminIds) {
@@ -6059,7 +7525,11 @@ function createPlugin(host, options = {}) {
         log: host.log,
         notifier: dm ? createDmNotifier({ store: openedStore, claims: openedClaims, dm, clock, log: host.log, health: delivery }) : NO_DM,
         logins: new LoginLinks(opened),
-        sessions: new Sessions(opened)
+        sessions: new Sessions(opened),
+        roster: new Roster(opened),
+        configuredAdmins: new Set(adminIds),
+        lanes,
+        webEditor: webOrigin !== null
       };
       if (guildId === null)
         host.log.warn("TRACKER_GUILD_ID is unset: no membership gate, only the admission list");
@@ -6079,11 +7549,11 @@ function createPlugin(host, options = {}) {
     ticks: [
       {
         name: "notify",
-        run: (signal) => tick("notify", signal)
+        run: (signal) => tracked(tick("notify", signal))
       },
       {
         name: "poll",
-        run: (signal) => tick("poll", signal)
+        run: (signal) => tracked(tick("poll", signal))
       }
     ],
     async http(request, info) {