@rackbops/plugin-tracker 0.5.0 → 0.6.0

package/dist/plugin.js

@@ -191,6 +191,14 @@ async function optOut(store, task, recipientId, now, occurrenceId = null) {
     at
   });
 }
+async function liftBlock(store, actor, blockId, now) {
+  if (!actor.admin)
+    throw new ConsentError("only an admin lifts a block");
+  const block = await store.getBlock(blockId);
+  if (!block)
+    throw new ConsentError(`no block ${blockId}`);
+  return store.liftBlock(blockId, actor.userId, now.toISOString());
+}
 
 // node_modules/@rackbops/docket-core/dist/lanes.js
 var LANES = ["notify", "execute"];
@@ -1916,6 +1924,10 @@ class ClaimStore {
 // plugins/tracker/src/delivery-health.ts
 var PAUSE_AFTER = 3;
 var PAUSE_DETAIL = `delivery paused: ${PAUSE_AFTER} DMs in a row could not be delivered (DMs closed, or the bot is blocked)`;
+function recipientPauseDetail(userId) {
+  return `delivery to {${userId}} paused: ${PAUSE_AFTER} DMs in a row could not be delivered`;
+}
+var PERSON_REF = /\{(u[1-9][0-9]*)\}/g;
 function decidePause(failures, alreadyPaused) {
   return !alreadyPaused && failures >= PAUSE_AFTER;
 }
@@ -1941,6 +1953,9 @@ class DeliveryHealth {
     this.chain = next.catch(() => {});
     return next;
   }
+  exclusive(fn) {
+    return this.locked(fn);
+  }
   get(userId) {
     const r = this.db.query("SELECT * FROM delivery_health WHERE user_id = ?").get(userId);
     if (!r)
@@ -1959,6 +1974,8 @@ class DeliveryHealth {
   async recordFailure(userId, error, at) {
     const notices = [];
     const result = await this.locked(async () => {
+      if (!await this.store.getUser(userId))
+        return { failures: 0, paused: false };
       this.db.query(`INSERT INTO delivery_health (user_id, failures, last_error, last_failed_at) VALUES (?, 1, ?, ?)
            ON CONFLICT (user_id) DO UPDATE SET failures = delivery_health.failures + 1,
              last_error = excluded.last_error, last_failed_at = excluded.last_failed_at`).run(userId, error, at);
@@ -1995,7 +2012,7 @@ class DeliveryHealth {
       if (changes === 0 || task.status !== "active")
         continue;
       await this.store.updateTask(task.id, { status: "paused", at });
-      const detail = asRecipient ? `delivery to ${name2(recipient, userId)} paused: ${PAUSE_AFTER} DMs in a row could not be delivered` : PAUSE_DETAIL;
+      const detail = asRecipient ? recipientPauseDetail(userId) : PAUSE_DETAIL;
       await this.store.addTaskEvent({ taskId: task.id, actorId: null, kind: "paused", detail, at });
       if (asRecipient) {
         const owner = await this.store.getUser(task.ownerId);
@@ -2502,6 +2519,7 @@ async function restoreHeldRun(store, task, held, before, after, now) {
 
 // plugins/tracker/src/actions.ts
 var MAX_ANSWER = 2000;
+var NO_LONGER_LISTED = "You are no longer on this tracker's list.";
 var NO_SUCH_TASK = "You have no task with that id. `/tasks` lists yours.";
 function clip(text, max = MAX_ANSWER) {
   return text.length <= max ? text : `${text.slice(0, max - 3)}...`;
@@ -3031,6 +3049,8 @@ async function sendShare(d, p) {
 async function finishShare(d, p, err) {
   if (err === null)
     return `Invited <@${p.targetDiscordId}> to \`${p.taskId}\`. They get a DM to accept or decline.`;
+  if (!await d.store.getUser(p.targetId) || !await d.store.getTask(p.taskId))
+    return `<@${p.targetDiscordId}> ${CANNOT_SHARE}`;
   await d.store.removeRecipient(p.taskId, p.targetId);
   await d.store.addTaskEvent({
     taskId: p.taskId,
@@ -3222,12 +3242,9 @@ function runView(o, replies, people, viewer, now) {
     answers: replies.filter((r) => r.occurrenceId === o.id).map((r) => `${people.get(r.userId)?.displayName ?? r.userId} ${replyText(r)}`)
   };
 }
-function changeView(e, viewer, now) {
-  return {
-    at: formatInstant(e.at, viewer.timeZone, now),
-    kind: e.kind.replaceAll("_", " "),
-    detail: e.kind === "paused" || e.kind === "resumed" ? e.detail : null
-  };
+function changeView(e, viewer, now, names = new Map) {
+  const detail = e.kind === "paused" || e.kind === "resumed" ? e.detail.replace(PERSON_REF, (_, id) => names.get(id) ?? "someone no longer on the tracker") : null;
+  return { at: formatInstant(e.at, viewer.timeZone, now), kind: e.kind.replaceAll("_", " "), detail };
 }
 function runLine(v) {
   const late = v.late ? " (late)" : "";
@@ -3258,6 +3275,16 @@ async function loadHistory(d, user, taskId) {
         people.set(u.id, u);
     }
   }
+  const names = new Map;
+  for (const e of changes) {
+    for (const [, id] of e.detail.matchAll(PERSON_REF)) {
+      if (id === undefined || names.has(id))
+        continue;
+      const u = await d.store.getUser(id);
+      if (u)
+        names.set(id, u.displayName ?? id);
+    }
+  }
   const owner = task.ownerId === user.id ? user : await d.store.getUser(task.ownerId);
   return {
     task,
@@ -3265,7 +3292,7 @@ async function loadHistory(d, user, taskId) {
     next: next ? formatInstant(next.dueAt, user.timeZone, now) : null,
     runs: runs.slice(-HISTORY_RUNS).map((o) => runView(o, replies, people, user, now)),
     earlierRuns: Math.max(0, runs.length - HISTORY_RUNS),
-    changes: changes.slice(-HISTORY_CHANGES).map((e) => changeView(e, user, now)),
+    changes: changes.slice(-HISTORY_CHANGES).map((e) => changeView(e, user, now, names)),
     earlierChanges: Math.max(0, changes.length - HISTORY_CHANGES)
   };
 }
@@ -3442,7 +3469,10 @@ async function trackPrice(d, user, input) {
     finish: async (result) => said(await finishPrice(d, user, pending, result))
   };
 }
-async function finishPrice(d, user, v, seen) {
+async function finishPrice(d, asked, v, seen) {
+  const user = await d.store.getUser(asked.id);
+  if (!user || !d.admissions.isRegistered(user.id))
+    return { ok: false, error: NO_LONGER_LISTED };
   if (!seen.ok)
     return seen;
   const type = d.types.price;
@@ -4087,6 +4117,7 @@ var MIGRATIONS = [
   CREATE INDEX web_sessions_expiry ON web_sessions (expires_at);
   `
 ];
+var BUSY_TIMEOUT_MS = 5000;
 function migrate(db) {
   const current = db.query("PRAGMA user_version").get().user_version;
   if (current > MIGRATIONS.length) {
@@ -4098,14 +4129,223 @@ function migrate(db) {
       db.exec(`PRAGMA user_version = ${version + 1}`);
     })();
   }
+  return current;
 }
 function openDatabase(path) {
   const db = new Database(path, { create: true });
-  if (path !== ":memory:")
-    db.exec("PRAGMA journal_mode = WAL");
-  db.exec("PRAGMA busy_timeout = 5000");
-  migrate(db);
-  return db;
+  try {
+    if (path !== ":memory:")
+      db.exec("PRAGMA journal_mode = WAL");
+    db.exec(`PRAGMA busy_timeout = ${BUSY_TIMEOUT_MS}`);
+    db.exec("PRAGMA secure_delete = ON");
+    migrate(db);
+    return db;
+  } catch (err) {
+    db.close();
+    throw err;
+  }
+}
+var META_TABLE = "tracker_meta";
+var VACUUMED = "vacuumed_for_secure_delete";
+function vacuumOnce(db, path) {
+  if (path === ":memory:")
+    return { ran: false };
+  try {
+    db.exec(`CREATE TABLE IF NOT EXISTS ${META_TABLE} (key TEXT PRIMARY KEY, value TEXT NOT NULL)`);
+    if (db.query(`SELECT 1 FROM ${META_TABLE} WHERE key = ?`).get(VACUUMED) !== null)
+      return { ran: false };
+    db.exec("PRAGMA busy_timeout = 0");
+    try {
+      db.exec("VACUUM");
+      const r = db.query("PRAGMA wal_checkpoint(TRUNCATE)").get();
+      if (r && Number(r.busy) !== 0)
+        throw new Error("the write-ahead log is busy");
+    } finally {
+      db.exec(`PRAGMA busy_timeout = ${BUSY_TIMEOUT_MS}`);
+    }
+    db.query(`INSERT INTO ${META_TABLE} (key, value) VALUES (?, ?)`).run(VACUUMED, new Date().toISOString());
+    return { ran: true };
+  } catch (err) {
+    return { ran: false, error: err instanceof Error ? err.message : String(err) };
+  }
+}
+
+// plugins/tracker/src/roster.ts
+var FORGOTTEN = "forgotten";
+function historyNames(kind, detail, id) {
+  switch (kind) {
+    case "recipient_invited":
+    case "recipient_accepted":
+    case "recipient_declined":
+    case "recipient_opted_out":
+      return detail === id;
+    case "blocked":
+      return detail === `${id} 24h` || detail === `${id} permanent`;
+    case "recipient_removed":
+      return detail.startsWith(`${id}: `);
+    case "paused":
+      return detail.startsWith(`delivery to {${id}} paused:`);
+    default:
+      return false;
+  }
+}
+function eventNames(type, text, id) {
+  return type === "delivered" && text.startsWith(`${id} `);
+}
+function errorForms(id) {
+  return new RegExp(`(recipient |user |delivery to )${id}(?![0-9A-Za-z_])`, "g");
+}
+function errorNames(text, id) {
+  return text !== null && errorForms(id).test(text);
+}
+function redactError(text, id) {
+  return text.replace(errorForms(id), `$1(${FORGOTTEN})`);
+}
+
+class Roster {
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  people() {
+    const rows = this.db.query(`SELECT u.seq, u.discord_id, u.display_name, u.time_zone, u.preferred_hour, u.admin, u.created_at,
+                a.admitted_by, a.registered_at, h.paused_at, h.failures
+         FROM users u
+         LEFT JOIN admissions a ON a.user_id = 'u' || u.seq
+         LEFT JOIN delivery_health h ON h.user_id = 'u' || u.seq
+         ORDER BY u.seq`).all();
+    const owned = this.db.query("SELECT owner_id, status, COUNT(*) AS n FROM tasks GROUP BY owner_id, status").all();
+    const receiving = this.db.query(`SELECT r.user_id, COUNT(*) AS n FROM task_recipients r JOIN tasks t ON r.task_id = 't' || t.seq
+         WHERE r.state = 'accepted' AND t.status IN ('active', 'paused') GROUP BY r.user_id`).all();
+    return rows.map((r) => {
+      const id = `u${Number(r.seq)}`;
+      const counts = { active: 0, paused: 0, done: 0, archived: 0 };
+      for (const o of owned)
+        if (o.owner_id === id && o.status in counts)
+          counts[o.status] = Number(o.n);
+      const str = (v) => v === null || v === undefined ? null : String(v);
+      return {
+        id,
+        discordId: str(r.discord_id),
+        displayName: str(r.display_name),
+        timeZone: String(r.time_zone),
+        preferredHour: Number(r.preferred_hour),
+        admin: Number(r.admin) === 1,
+        createdAt: String(r.created_at),
+        admittedBy: str(r.admitted_by),
+        registeredAt: str(r.registered_at),
+        deliveryPausedAt: str(r.paused_at),
+        failures: Number(r.failures ?? 0),
+        owned: counts,
+        receiving: Number(receiving.find((x) => x.user_id === id)?.n ?? 0)
+      };
+    });
+  }
+  checkpoint() {
+    this.db.exec("PRAGMA busy_timeout = 0");
+    try {
+      const r = this.db.query("PRAGMA wal_checkpoint(TRUNCATE)").get();
+      return !r || Number(r.busy) === 0;
+    } finally {
+      this.db.exec(`PRAGMA busy_timeout = ${BUSY_TIMEOUT_MS}`);
+    }
+  }
+  othersNamed(taskId, userId, name) {
+    const ids = new Set;
+    for (const r of this.db.query("SELECT user_id FROM task_recipients WHERE task_id = ?").all(taskId))
+      ids.add(r.user_id);
+    for (const r of this.db.query("SELECT detail FROM task_events WHERE task_id = ? AND kind LIKE 'recipient_%'").all(taskId)) {
+      const id = /^(u[1-9][0-9]*)(:|$)/.exec(r.detail)?.[1];
+      if (id)
+        ids.add(id);
+    }
+    ids.delete(userId);
+    const named = this.db.query("SELECT 1 FROM users WHERE seq = ? AND display_name = ?");
+    return [...ids].some((id) => named.get(Number(id.slice(1)), name) !== null);
+  }
+  admins() {
+    return this.db.query("SELECT COUNT(*) AS n FROM users WHERE admin = 1").get().n;
+  }
+  activeBlocks(now) {
+    const rows = this.db.query(`SELECT seq, owner_id, recipient_id, expires_at, created_at FROM invite_blocks
+         WHERE lifted_at IS NULL AND (expires_at IS NULL OR expires_at > ?) ORDER BY seq DESC`).all(now.toISOString());
+    return rows.map((r) => ({
+      id: `b${Number(r.seq)}`,
+      ownerId: String(r.owner_id),
+      recipientId: String(r.recipient_id),
+      expiresAt: r.expires_at === null ? null : String(r.expires_at),
+      createdAt: String(r.created_at)
+    }));
+  }
+  erase(userId) {
+    const seq = /^u([1-9][0-9]*)$/.exec(userId)?.[1];
+    if (seq === undefined)
+      throw new Error(`no user ${userId}`);
+    return this.db.transaction(() => {
+      const person = this.db.query("SELECT display_name FROM users WHERE seq = ?").get(Number(seq));
+      if (!person)
+        throw new Error(`no user ${userId}`);
+      const rows = {};
+      const del = (table, where, ...params) => {
+        rows[table] = (rows[table] ?? 0) + this.db.query(`DELETE FROM ${table} WHERE ${where}`).run(...params).changes;
+      };
+      const THEIR_TASKS = "SELECT 't' || seq FROM tasks WHERE owner_id = ?";
+      const THEIR_RUNS = `SELECT 'o' || seq FROM occurrences WHERE task_id IN (${THEIR_TASKS})`;
+      const pausedFor = this.db.query(`SELECT task_id FROM delivery_pauses WHERE user_id = ? AND task_id NOT IN (${THEIR_TASKS})`).all(userId, userId).map((r) => r.task_id);
+      const taskIds = (sql) => this.db.query(sql).all(userId).map((r) => r.t);
+      const recipientOf = new Set([
+        ...pausedFor,
+        ...taskIds("SELECT task_id AS t FROM task_recipients WHERE user_id = ?"),
+        ...this.db.query("SELECT task_id AS t, kind, detail FROM task_events WHERE instr(detail, ?) > 0").all(userId).filter((r) => historyNames(r.kind, r.detail, userId)).map((r) => r.t)
+      ]);
+      del("events", `occurrence_id IN (${THEIR_RUNS})`, userId);
+      del("delivery_claims", `occurrence_id IN (${THEIR_RUNS}) OR user_id = ?`, userId, userId);
+      del("replies", `task_id IN (${THEIR_TASKS}) OR user_id = ?`, userId, userId);
+      del("task_events", `task_id IN (${THEIR_TASKS}) OR actor_id = ?`, userId, userId);
+      del("series", `task_id IN (${THEIR_TASKS})`, userId);
+      del("task_recipients", `task_id IN (${THEIR_TASKS}) OR user_id = ?`, userId, userId);
+      del("delivery_pauses", `task_id IN (${THEIR_TASKS}) OR user_id = ?`, userId, userId);
+      del("occurrences", `task_id IN (${THEIR_TASKS})`, userId);
+      del("tasks", "owner_id = ?", userId);
+      const containing = (table, columns, column) => this.db.query(`SELECT seq, ${columns} FROM ${table} WHERE instr(${column}, ?) > 0`).all(userId);
+      for (const r of containing("task_events", "kind, detail", "detail")) {
+        if (historyNames(String(r.kind), String(r.detail), userId))
+          del("task_events", "seq = ?", Number(r.seq));
+      }
+      for (const r of containing("events", "type, text", "text")) {
+        if (eventNames(String(r.type), String(r.text), userId))
+          del("events", "seq = ?", Number(r.seq));
+        else if (errorNames(String(r.text), userId))
+          this.db.query("UPDATE events SET text = ? WHERE seq = ?").run(redactError(String(r.text), userId), r.seq);
+      }
+      for (const r of containing("occurrences", "error", "error")) {
+        if (errorNames(String(r.error), userId))
+          this.db.query("UPDATE occurrences SET error = ? WHERE seq = ?").run(redactError(String(r.error), userId), r.seq);
+      }
+      if (person.display_name !== null) {
+        const legacy = `delivery to ${person.display_name} paused:`;
+        const rowsNaming = this.db.query("SELECT seq, task_id, detail FROM task_events WHERE kind = 'paused' AND actor_id IS NULL").all();
+        for (const r of rowsNaming) {
+          if (!recipientOf.has(r.task_id) || !r.detail.startsWith(legacy))
+            continue;
+          if (this.othersNamed(r.task_id, userId, person.display_name))
+            continue;
+          del("task_events", "seq = ?", r.seq);
+        }
+      }
+      del("invite_blocks", "owner_id = ? OR recipient_id = ?", userId, userId);
+      this.db.query("UPDATE invite_blocks SET lifted_by = ? WHERE lifted_by = ?").run(FORGOTTEN, userId);
+      del("admissions", "user_id = ?", userId);
+      this.db.query("UPDATE admissions SET admitted_by = ? WHERE admitted_by = ?").run(FORGOTTEN, userId);
+      del("delivery_health", "user_id = ?", userId);
+      del("web_sessions", "user_id = ?", userId);
+      del("web_login_tokens", "user_id = ?", userId);
+      del("users", "seq = ?", Number(seq));
+      const held = this.db.query("SELECT 1 FROM delivery_pauses WHERE task_id = ? LIMIT 1");
+      const freed = [...new Set(pausedFor)].filter((t) => held.get(t) === null);
+      return { rows, freed };
+    })();
+  }
 }
 
 // plugins/tracker/src/store.ts
@@ -4428,160 +4668,97 @@ class SqliteStore {
   }
 }
 
-// plugins/tracker/src/edit.ts
-async function owned(d, user, taskId, type) {
-  const task = await ownLiveTask(d, user, taskId);
-  if (!task || task.type !== type)
-    return NO_SUCH_TASK;
-  if (!editable(task))
-    return FINISHED;
-  return task;
-}
-function same(a, b) {
-  return JSON.stringify(a) === JSON.stringify(b);
-}
-async function applyEdit(d, task, user, patch) {
-  const fields = Object.keys(patch);
-  if (fields.length === 0)
-    return task;
-  const at = d.clock.now().toISOString();
-  const updated = await d.store.updateTask(task.id, { ...patch, at });
-  await d.store.addTaskEvent({ taskId: task.id, actorId: user.id, kind: "edited", detail: fields.join(", "), at });
-  return updated;
+// plugins/tracker/src/admin.ts
+var NO_SUCH_PERSON = "There is no such person on this tracker's list.";
+var NO_SUCH_BLOCK = "There is no such block in force.";
+var LAST_ADMIN = "That is the tracker's only admin: make someone else an admin first.";
+var BUSY = "The tracker is busy sending reminders; nothing was deleted. Try again in a minute.";
+var TICK_WAIT_MS = 20000;
+var CONFIGURED_ADMIN = "That admin is named in TRACKER_ADMIN_DISCORD_IDS, which makes them an admin again at every start: remove them from the configuration first.";
+var CONFIGURED_SELF = "You are named in TRACKER_ADMIN_DISCORD_IDS: this erases you now, but the next start makes you an admin again, as a new person, unless you are removed from the configuration first.";
+function isConfiguredAdmin(d, u) {
+  return u.discordId !== null && d.configuredAdmins.has(u.discordId);
 }
-async function nextRun(d, task) {
-  const queued = await d.store.listOccurrences({ taskId: task.id, status: "queued" });
-  return queued[0] ?? null;
-}
-function savedText(task, user, next, now, what) {
-  const cadence = task.schedule ? describeSchedule(task.schedule, user, user.timeZone, now) : "no schedule";
-  const when = task.status === "paused" ? "paused" : next ? formatInstant(next.dueAt, user.timeZone, now) : "nothing scheduled";
-  return clip(`Saved \`${task.id}\` ${what}: ${cadence}. Next: ${when}.`);
-}
-var blank = (v) => v === undefined || v.trim() === "";
-async function editReminder(d, user, taskId, input) {
-  const task = await owned(d, user, taskId, "reminder");
-  if (typeof task === "string")
-    return { ok: false, error: task };
-  const config = task.config ?? {};
-  const text = blank(input.text) ? String(config.text ?? "") : input.text;
-  const repeat = input.repeat ?? repeatOf(task.schedule);
-  const plan = reminderPlan(d, user, { text, repeat, ...input.when !== undefined ? { when: input.when } : {} }, task.schedule);
-  if (!plan.ok)
-    return plan;
-  let updated = config.text === plan.text ? task : await applyEdit(d, task, user, { title: clip(plan.text, MAX_TITLE), config: { ...config, text: plan.text } });
-  if (!same(plan.schedule, task.schedule))
-    updated = await rescheduleKeepingSnoozes(d, updated, user, plan.schedule, user.id);
-  return { ok: true, task: updated, text: savedText(updated, user, await nextRun(d, updated), d.clock.now(), "(reminder)") };
+function ticksSettled(d) {
+  return d.lanes.idle(TICK_WAIT_MS);
 }
-var DAY_MS3 = 24 * 60 * 60 * 1000;
-function periodDateFrom(s, date, owner) {
-  const ctx = { zone: owner.timeZone, preferredHour: owner.preferredHour };
-  let after = new Date(Date.parse(`${date}T00:00:00Z`) - ((s.leadDays ?? 0) + 2) * DAY_MS3);
-  for (let i = 0;i < 1000; i++) {
-    const due = nextDue(s, after, ctx);
-    if (!due)
-      return null;
-    const on = periodDate(s, due, owner.timeZone);
-    if (on >= date)
-      return on;
-    after = due;
-  }
-  return null;
+function isPersonId(id) {
+  return /^u[1-9][0-9]{0,15}$/.test(id);
 }
-function renewalDate(task, owner, now) {
-  const s = task.schedule;
-  if (s?.kind !== "period")
-    return "";
-  const w = wallClock(now, owner.timeZone);
-  const today = `${w.year}-${String(w.month).padStart(2, "0")}-${String(w.day).padStart(2, "0")}`;
-  if (s.anchor >= today)
-    return s.anchor;
-  return periodDateFrom(s, today, owner) ?? s.anchor;
+async function person(d, id) {
+  return isPersonId(id) ? d.store.getUser(id) : null;
 }
-async function askedAbout(d, task, owner, date) {
-  const old = task.schedule;
-  if (old?.kind !== "period")
-    return false;
-  const fired = (await d.store.listOccurrences({ taskId: task.id })).filter((o) => o.status !== "queued" && !o.dedupeKey.startsWith(SNOOZE_PREFIX));
-  return fired.some((o) => periodDate(old, new Date(o.dueAt), owner.timeZone) === date);
+function who(u) {
+  return u.displayName ?? u.discordId ?? u.id;
 }
-async function editRenewal(d, user, taskId, input) {
-  const task = await owned(d, user, taskId, "renewal");
-  if (typeof task === "string")
-    return { ok: false, error: task };
-  if (task.schedule?.kind !== "period")
-    return { ok: false, error: FINISHED };
-  const old = task.schedule;
+async function setAdminFlag(d, admin, targetId, flag) {
+  if (!admin.admin)
+    return { ok: false, error: NOT_ADMIN };
+  const target = await person(d, targetId);
+  if (!target)
+    return { ok: false, error: NO_SUCH_PERSON };
+  if (target.admin === flag)
+    return { ok: true, text: `${who(target)} ${flag ? "is already" : "is not"} an admin.` };
+  if (!flag && d.roster.admins() <= 1)
+    return { ok: false, error: LAST_ADMIN };
+  if (!flag && isConfiguredAdmin(d, target))
+    return { ok: false, error: CONFIGURED_ADMIN };
+  await d.store.updateUser(target.id, { admin: flag });
+  d.log.info(`${admin.id} ${flag ? "made" : "revoked"} ${target.id} ${flag ? "an admin" : "as admin"}`);
+  return { ok: true, text: flag ? `${who(target)} is now an admin.` : `${who(target)} is no longer an admin.` };
+}
+async function resumeDelivery(d, admin, targetId) {
+  if (!admin.admin)
+    return { ok: false, error: NOT_ADMIN };
+  const target = await person(d, targetId);
+  if (!target)
+    return { ok: false, error: NO_SUCH_PERSON };
+  const resumed = await d.health.resume(target.id, d.clock.now());
+  if (!resumed)
+    return { ok: false, error: `Delivery to ${who(target)} is not paused.` };
+  return { ok: true, text: `Delivery to ${who(target)} resumed; ${resumed.tasks.length} task(s) back on.` };
+}
+async function liftDeclineBlock(d, admin, blockId) {
+  if (!admin.admin)
+    return { ok: false, error: NOT_ADMIN };
+  const block = /^b[1-9][0-9]{0,15}$/.test(blockId) ? await d.store.getBlock(blockId) : null;
   const now = d.clock.now();
-  const config = task.config;
-  const state = task.state;
-  const carried = state && typeof state.amount === "number" ? state.amount : null;
-  const note = input.note ?? config.note;
-  const plan = renewalPlan(d, user, {
-    name: blank(input.name) ? task.title : input.name,
-    amount: input.amount ?? carried ?? config.amount,
-    currency: blank(input.currency) ? config.currency : input.currency,
-    renews: blank(input.renews) ? renewalDate(task, user, now) : input.renews,
-    every: input.every ?? old.every,
-    unit: input.unit ?? old.unit,
-    lead: input.lead ?? old.leadDays ?? 0,
-    ...note !== undefined ? { note } : {}
-  });
-  if (!plan.ok)
-    return plan;
-  const sameShape = plan.schedule.every === old.every && plan.schedule.unit === old.unit && plan.schedule.leadDays === (old.leadDays ?? 0);
-  const schedule = sameShape && periodDateFrom(old, plan.schedule.anchor, user) === plan.schedule.anchor ? old : plan.schedule;
-  const problems = scheduleProblems(schedule);
-  if (problems.length > 0)
-    return { ok: false, error: `That schedule does not work: ${problems.join("; ")}.` };
-  const patch = {};
-  if (plan.name !== task.title)
-    patch.title = plan.name;
-  const newAmount = plan.amount !== (carried ?? config.amount);
-  const nextConfig = { amount: newAmount ? plan.amount : config.amount, currency: plan.currency, ...plan.note ? { note: plan.note } : {} };
-  if (!same(nextConfig, config))
-    patch.config = nextConfig;
-  if (newAmount && carried !== null)
-    patch.state = { ...state, amount: plan.amount };
-  let updated = await applyEdit(d, task, user, patch);
-  let next = await nextRun(d, updated);
-  if (!same(schedule, old)) {
-    const asked = await askedAbout(d, task, user, schedule.anchor);
-    updated = await rescheduleKeepingSnoozes(d, updated, user, schedule, user.id);
-    next = (asked ? null : await firstAskIfDue(d, updated, user, schedule)) ?? await nextRun(d, updated);
-  }
-  const ask = updated.status === "paused" ? "paused" : askText(next, plan.days, user, now);
-  const cadence = describeSchedule(schedule, user, user.timeZone, now);
-  return { ok: true, task: updated, text: clip(`Saved \`${updated.id}\` (renewal): ${cadence}. Next ask: ${ask}.`) };
+  if (!block || (await activeBlock(d.store, block.ownerId, block.recipientId, now))?.id !== block.id)
+    return { ok: false, error: NO_SUCH_BLOCK };
+  await liftBlock(d.store, { userId: admin.id, admin: true }, block.id, now);
+  const owner = await d.store.getUser(block.ownerId);
+  const recipient = await d.store.getUser(block.recipientId);
+  return {
+    ok: true,
+    text: `Lifted: ${owner ? who(owner) : block.ownerId} may invite ${recipient ? who(recipient) : block.recipientId} again.`
+  };
 }
-async function editPrice(d, user, taskId, input) {
-  const task = await owned(d, user, taskId, "price");
-  if (typeof task === "string")
-    return { ok: false, error: task };
-  const config = task.config;
-  const schedule = task.schedule;
-  const plan = priceSettingsPlan({
-    name: input.name ?? task.title,
-    hours: input.hours ?? (schedule?.kind === "poll" ? schedule.every : undefined),
-    drop: input.drop ?? config.dropPercent ?? DEFAULT_DROP_PERCENT,
-    baseline: input.baseline ?? config.baseline ?? DEFAULT_BASELINE
+async function forgetPerson(d, actor, targetId) {
+  if (actor.id !== targetId && !actor.admin)
+    return { ok: false, error: NOT_ADMIN };
+  const target = await person(d, targetId);
+  if (!target)
+    return { ok: false, error: NO_SUCH_PERSON };
+  if (target.admin && d.roster.admins() <= 1)
+    return { ok: false, error: LAST_ADMIN };
+  if (actor.id !== target.id && isConfiguredAdmin(d, target))
+    return { ok: false, error: CONFIGURED_ADMIN };
+  const now = d.clock.now();
+  const erased = await d.health.exclusive(async () => {
+    if (d.lanes.busy())
+      return null;
+    const e = d.roster.erase(target.id);
+    for (const taskId of e.freed)
+      await d.health.release(taskId, null, "resumed: a recipient left the tracker", now);
+    return e;
   });
-  if (!plan.ok)
-    return plan;
-  const patch = {};
-  const title = plan.name || titleFor(config.url);
-  if (title !== task.title)
-    patch.title = title;
-  const nextConfig = { ...config, dropPercent: plan.drop, baseline: plan.baseline };
-  if (!same(nextConfig, config))
-    patch.config = nextConfig;
-  let updated = await applyEdit(d, task, user, patch);
-  if (schedule?.kind === "poll" && (schedule.every !== plan.hours || schedule.unit !== "hour")) {
-    const next = { ...schedule, every: plan.hours, unit: "hour" };
-    updated = await rescheduleKeepingSnoozes(d, updated, user, next, user.id);
-  }
-  return { ok: true, task: updated, text: savedText(updated, user, await nextRun(d, updated), d.clock.now(), "(price)") };
+  if (erased === null)
+    return { ok: false, error: BUSY };
+  if (!d.roster.checkpoint())
+    d.log.warn(`after forgetting ${target.id}: the write-ahead log is busy, so SQLite's next checkpoint copies it back`);
+  const total = Object.values(erased.rows).reduce((a, b) => a + b, 0);
+  d.log.info(`forgot ${target.id} (${actor.id === target.id ? "at their own request" : `removed by ${actor.id}`}): ${total} row(s) deleted`);
+  return { ok: true, text: actor.id === target.id ? "Everything the tracker held about you is deleted." : `${who(target)} is removed from the tracker.` };
 }
 
 // node_modules/@rackbops/styles/rackbops-noir/bundle.css
@@ -5810,6 +5987,7 @@ function page(f) {
 <span class="rb-muted">${f.signedIn.name}</span>
 <a class="rb-link" href="${f.base}/">My tasks</a>
 <a class="rb-link" href="${f.base}/settings">Settings</a>
+${f.signedIn.admin ? html`<a class="rb-link" href="${f.base}/admin">Admin</a>` : null}
 <form method="post" action="${f.base}/logout"><input type="hidden" name="csrf" value="${f.signedIn.csrf}"><button class="rb-btn rb-btn--ghost rb-btn--sm" type="submit">Sign out</button></form>
 </nav>` : null;
   return html`<!doctype html>
@@ -5883,7 +6061,7 @@ function name3(u) {
   return u.displayName ?? "you";
 }
 function framed(v, title, body) {
-  return page({ base: v.base, title, signedIn: { name: name3(v.user), csrf: v.csrf }, body });
+  return page({ base: v.base, title, signedIn: { name: name3(v.user), csrf: v.csrf, admin: v.user.admin }, body });
 }
 function signInHelpPage(base, note) {
   return page({
@@ -5967,6 +6145,7 @@ function historyPage(v, h, extra = {}) {
 <p><a class="rb-link" href="${v.base}/">My tasks</a></p>
 <h1>${h.task.title}</h1>
 ${extra.flash ?? null}
+${extra.owner ? html`<p class="rb-muted">Owned by ${extra.owner}; you can see it, not change it.</p>` : null}
 <p>${h.task.type}, ${h.task.status === "archived" ? "deleted" : h.task.status}, ${h.cadence}. Next: ${h.task.status === "active" ? h.next ?? "nothing scheduled" : "nothing, while it is not active"}.</p>
 ${extra.controls ?? null}
 </section>
@@ -6001,6 +6180,10 @@ ${form.error ? html`<div class="rb-alert rb-alert--danger" role="alert"><p class
 </div>
 <div><button class="rb-btn rb-btn--primary" type="submit">Save</button></div>
 </form>
+</section>
+<section>
+<h2>Forget me</h2>
+<p>Delete everything the tracker holds about you, for good. <a class="rb-link" href="${v.base}/forget">Forget me</a></p>
 </section>`);
 }
 function notFoundPage(base, v) {
@@ -6152,9 +6335,441 @@ function notice(key, error) {
   return text ? html`<div class="rb-alert rb-alert--success" role="status"><p class="rb-alert__title">${text}</p></div>` : null;
 }
 
+// plugins/tracker/src/web/admin-pages.ts
+var CONFIGURED_NOTE = "Named in TRACKER_ADMIN_DISCORD_IDS: made an admin again at every start, so they cannot be revoked or removed here. Remove them from the configuration first.";
+var CONFIRM_WORD = "forget";
+function nameOf(p, fallback = "someone") {
+  if (!p)
+    return fallback;
+  return p.displayName ?? p.id;
+}
+function unmention(text) {
+  return text.replace(/<@([0-9]{17,20})>/g, "$1");
+}
+function flash(result) {
+  if (!result)
+    return null;
+  const text = prose(unmention(result.text));
+  return result.ok ? html`<div class="rb-alert rb-alert--success" role="status"><p>${text}</p></div>` : html`<div class="rb-alert rb-alert--danger" role="alert"><p>${text}</p></div>`;
+}
+function hidden(v) {
+  return html`<input type="hidden" name="csrf" value="${v.csrf}">`;
+}
+function adminNav(v) {
+  return html`<p class="tr-row"><a class="rb-link" href="${v.base}/admin">People</a> <a class="rb-link" href="${v.base}/admin/tasks">All tasks</a></p>`;
+}
+function personHref(v, id, action = "") {
+  return `${v.base}/admin/people/${encodeURIComponent(id)}${action ? `/${action}` : ""}`;
+}
+function admittedBy(p, names) {
+  if (p.admittedBy === null)
+    return "the configuration";
+  if (p.admittedBy === FORGOTTEN)
+    return "an admin since forgotten";
+  return names.get(p.admittedBy) ?? p.admittedBy;
+}
+function delivery(p, viewer, now) {
+  if (p.deliveryPausedAt)
+    return `paused since ${formatInstant(p.deliveryPausedAt, viewer.timeZone, now)}`;
+  return p.failures > 0 ? `on (${p.failures} failed in a row)` : "on";
+}
+function counts(p) {
+  const o = p.owned;
+  return `${o.active} active, ${o.paused} paused, ${o.done} done, ${o.archived} deleted; receives ${p.receiving}`;
+}
+function adminPage(v, data, o = {}) {
+  const names = new Map(data.people.map((p) => [p.id, nameOf(p)]));
+  const rows = data.people.map((p) => html`<tr>
+<td><a class="rb-link" href="${personHref(v, p.id)}">${nameOf(p)}</a>${p.admin ? html` <span class="rb-badge">admin</span>` : null}</td>
+<td>${p.registeredAt ? "registered" : "admitted, not registered"}</td>
+<td>${p.timeZone}, ${String(p.preferredHour).padStart(2, "0")}:00</td>
+<td>${delivery(p, v.user, data.now)}</td>
+<td>${counts(p)}</td>
+</tr>`);
+  const blocks = data.blocks.length === 0 ? html`<p class="rb-muted">No decline blocks are in force.</p>` : html`<ul>${data.blocks.map((b) => html`<li class="tr-row">${names.get(b.ownerId) ?? b.ownerId} may not invite ${names.get(b.recipientId) ?? b.recipientId} ${b.expiresAt ? `until ${formatInstant(b.expiresAt, v.user.timeZone, data.now)}` : "until an admin lifts it"}
+<form method="post" action="${v.base}/admin/blocks/${encodeURIComponent(b.id)}/lift">${hidden(v)}<button class="rb-btn rb-btn--ghost rb-btn--sm" type="submit">Lift</button></form></li>`)}</ul>`;
+  return framed(v, "Admin", html`<section>
+<h1>People</h1>
+${adminNav(v)}
+${flash(o.result ?? null)}
+<div class="rb-table-scroll"><table class="rb-table">
+<thead><tr><th scope="col">Person</th><th scope="col">Status</th><th scope="col">Zone, hour</th><th scope="col">Delivery</th><th scope="col">Tasks</th></tr></thead>
+<tbody>${rows}</tbody>
+</table></div>
+<p class="rb-muted">Admitted by: ${data.people.map((p) => `${nameOf(p)} -- ${admittedBy(p, names)}`).join("; ")}.</p>
+</section>
+<section>
+<h2>Allow a person</h2>
+<form method="post" action="${v.base}/admin/allow" class="tr-stack">
+${hidden(v)}
+<div class="rb-field">
+<label class="rb-label" for="discord_id">Discord user id</label>
+<input class="rb-input" id="discord_id" name="discord_id" value="${o.allow ?? ""}" maxlength="20" inputmode="numeric" required>
+<p class="rb-field__help">What <code>/allow</code> does: they can then <code>/register</code>.</p>
+</div>
+<div><button class="rb-btn rb-btn--primary" type="submit">Allow</button></div>
+</form>
+</section>
+<section>
+<h2>Decline blocks</h2>
+${blocks}
+</section>`);
+}
+function adminTasksPage(v, tasks) {
+  const rows = tasks.map(({ task, owner, receiving }) => html`<tr>
+<td><a class="rb-link" href="${taskHref(v, task.id)}">${task.title}</a></td>
+<td>${task.type}</td>
+<td>${owner}</td>
+<td>${task.status === "archived" ? "deleted" : task.status}</td>
+<td>${receiving}</td>
+</tr>`);
+  return framed(v, "All tasks", html`<section>
+<h1>All tasks</h1>
+${adminNav(v)}
+${tasks.length === 0 ? html`<p class="rb-muted">There are no tasks.</p>` : html`<div class="rb-table-scroll"><table class="rb-table">
+<thead><tr><th scope="col">Task</th><th scope="col">Type</th><th scope="col">Owner</th><th scope="col">Status</th><th scope="col">Recipients</th></tr></thead>
+<tbody>${rows}</tbody>
+</table></div>`}
+</section>`);
+}
+function post2(v, p, action, label, style) {
+  return html`<form method="post" action="${personHref(v, p.id, action)}">${hidden(v)}<button class="rb-btn ${style} rb-btn--sm" type="submit">${label}</button></form>`;
+}
+function personPage(v, p, tasks, now, result = null, configured = false) {
+  return framed(v, nameOf(p), html`<section>
+${adminNav(v)}
+<h1>${nameOf(p)}${p.admin ? html` <span class="rb-badge">admin</span>` : null}</h1>
+${flash(result)}
+<ul>
+<li>Discord id: ${p.discordId ?? "none"}</li>
+<li>${p.registeredAt ? `Registered ${formatInstant(p.registeredAt, v.user.timeZone, now)}` : "Admitted, not registered yet"}</li>
+<li>Zone and hour: ${p.timeZone}, ${String(p.preferredHour).padStart(2, "0")}:00</li>
+<li>Delivery: ${delivery(p, v.user, now)}</li>
+<li>Tasks: ${counts(p)}</li>
+</ul>
+${configured ? html`<p class="rb-muted">${CONFIGURED_NOTE}</p>` : null}
+<div class="tr-row">
+${p.admin ? configured ? null : post2(v, p, "revoke", "Revoke admin", "rb-btn--ghost") : post2(v, p, "grant", "Make admin", "rb-btn--ghost")}
+${p.deliveryPausedAt ? post2(v, p, "resume-delivery", "Resume delivery", "rb-btn--accent") : null}
+${configured && p.id !== v.user.id ? null : post2(v, p, "forget", "Remove from the tracker", "rb-btn--danger")}
+</div>
+</section>
+<section>
+<h2>Their tasks</h2>
+${tasks.length === 0 ? html`<p class="rb-muted">None.</p>` : html`<ul>${tasks.map((t) => html`<li><a class="rb-link" href="${taskHref(v, t.id)}">${t.title}</a> -- ${t.type}, ${t.status === "archived" ? "deleted" : t.status}</li>`)}</ul>`}
+</section>`);
+}
+var WHAT_GOES = "every task (deleted ones too) with its runs, replies and history; your replies, answers and history on other people's tasks, " + "and your place on the tasks shared with you; decline blocks either way; delivery pauses; your settings and sign-in sessions; and your place on the list.";
+function forgetPage(v, note) {
+  return framed(v, "Forget me", html`<section class="rb-card">
+<h1>Forget me</h1>
+<p>This deletes everything the tracker holds about you, at once and for good: ${WHAT_GOES}</p>
+<p>Nothing is kept or archived. Messages the bot already sent you stay in your Discord DMs, where only you can delete them. To use the tracker again later, an admin has to <code>/allow</code> you again, and you start from nothing.</p>
+${note ? html`<div class="rb-alert rb-alert--warning" role="note"><p>${note}</p></div>` : null}
+<form method="post" action="${v.base}/forget">${hidden(v)}<button class="rb-btn rb-btn--danger" type="submit">Continue</button></form>
+</section>`);
+}
+function confirmForgetPage(v, o) {
+  const title = o.self ? "Delete everything about you?" : `Remove ${o.name} from the tracker?`;
+  const what = o.self ? html`<p>Everything the tracker holds about you is deleted: ${WHAT_GOES} You are signed out.</p>` : html`<p>Everything the tracker holds about ${o.name} is deleted, as forget-me deletes it: their tasks, their replies and history, blocks, pauses, settings and sessions. They are signed out and must be allowed again to come back.</p>`;
+  return framed(v, o.self ? "Forget me" : `Remove ${o.name}`, html`<section class="rb-card">
+<h1>${title}</h1>
+${what}
+${o.note ? html`<div class="rb-alert rb-alert--warning" role="note"><p>${o.note}</p></div>` : null}
+${o.error ? html`<div class="rb-alert rb-alert--danger" role="alert"><p>${o.error}</p></div>` : null}
+<form method="post" action="${o.action}" class="tr-stack">
+${hidden(v)}
+<input type="hidden" name="confirm" value="yes">
+<div class="rb-field">
+<label class="rb-label" for="word">Type ${CONFIRM_WORD} to confirm</label>
+<input class="rb-input" id="word" name="word" maxlength="20" autocomplete="off" required>
+</div>
+<div class="tr-row"><button class="rb-btn rb-btn--danger" type="submit">${o.self ? "Delete everything" : "Remove"}</button>
+<a class="rb-btn rb-btn--ghost" href="${o.self ? `${v.base}/settings` : `${v.base}/admin`}">Keep</a></div>
+</form>
+</section>`);
+}
+
+// plugins/tracker/src/web/admin.ts
+function unknownPage(base) {
+  return htmlResponse(notFoundPage(base), 404);
+}
+function fresh(a, admin, fn) {
+  return a.queue(async () => {
+    const me = await a.d.store.getUser(a.v.user.id);
+    if (!me || admin && !me.admin)
+      return null;
+    return fn(me);
+  });
+}
+function said2(done) {
+  return done.ok ? { ok: true, text: done.text } : { ok: false, text: done.error };
+}
+function confirmed(form) {
+  if (form.get("confirm") !== "yes")
+    return "ask";
+  return (form.get("word") ?? "").trim().toLowerCase() === CONFIRM_WORD ? "yes" : "wrong";
+}
+var WRONG_WORD = `Type ${CONFIRM_WORD} to confirm. Nothing was deleted.`;
+async function peoplePage(a, result, status, allow) {
+  const data = { people: a.d.roster.people(), blocks: a.d.roster.activeBlocks(a.d.clock.now()), now: a.d.clock.now() };
+  return htmlResponse(adminPage(a.v, data, { result, ...allow !== undefined ? { allow } : {} }), status);
+}
+async function onePerson(a, id, result = null) {
+  const p = a.d.roster.people().find((x) => x.id === id);
+  if (!p)
+    return htmlResponse(notFoundPage(a.v.base, a.v), 404);
+  const tasks = await a.d.store.listTasks({ ownerId: p.id });
+  return htmlResponse(personPage(a.v, p, tasks, a.d.clock.now(), result, isConfiguredAdmin(a.d, p)), result && !result.ok ? 400 : 200);
+}
+async function adminGet(a, r) {
+  if (r.kind === "admin")
+    return peoplePage(a, null, 200);
+  if (r.kind === "admin-person")
+    return onePerson(a, r.id);
+  const people = new Map(a.d.roster.people().map((p) => [p.id, nameOf(p)]));
+  const rows = [];
+  for (const task of await a.d.store.listTasks()) {
+    const receiving = (await a.d.store.listRecipients(task.id)).filter((x) => x.state === "accepted").length;
+    rows.push({ task, owner: people.get(task.ownerId) ?? task.ownerId, receiving });
+  }
+  return htmlResponse(adminTasksPage(a.v, rows));
+}
+async function adminPost(a, r, form) {
+  const base = a.v.base;
+  if (r.kind === "admin-allow") {
+    const raw = (form.get("discord_id") ?? "").trim();
+    if (!/^[0-9]{17,20}$/.test(raw))
+      return peoplePage(a, { ok: false, text: "That is not a Discord user id (17 to 20 digits)." }, 400, raw.slice(0, 20));
+    const membership = await a.memberOf(raw);
+    const text = await fresh(a, true, (me) => allowPerson(a.d, me, { discordId: raw, bot: false, membership }));
+    if (text === null)
+      return unknownPage(base);
+    const ok = text.startsWith("Allowed") || text.includes("already on the list");
+    return peoplePage(a, { ok, text }, ok ? 200 : 400);
+  }
+  if (r.kind === "admin-lift") {
+    const done = await fresh(a, true, (me) => liftDeclineBlock(a.d, me, r.id));
+    if (done === null)
+      return unknownPage(base);
+    return peoplePage(a, said2(done), done.ok ? 200 : 400);
+  }
+  if (r.kind !== "admin-act")
+    return unknownPage(base);
+  if (r.action === "forget") {
+    const target = a.d.roster.people().find((x) => x.id === r.id);
+    if (!target)
+      return htmlResponse(notFoundPage(base, a.v), 404);
+    const step = confirmed(form);
+    const self = target.id === a.v.user.id;
+    const note = self && isConfiguredAdmin(a.d, target) ? { note: CONFIGURED_SELF } : {};
+    const page = (error) => confirmForgetPage(a.v, { action: personHref(a.v, target.id, "forget"), self, name: nameOf(target), ...note, ...error ? { error } : {} });
+    if (step === "ask")
+      return htmlResponse(page());
+    if (step === "wrong")
+      return htmlResponse(page(WRONG_WORD), 400);
+    if (!await ticksSettled(a.d))
+      return htmlResponse(page(BUSY), 503);
+    const done = await fresh(a, true, (me) => forgetPerson(a.d, me, target.id));
+    if (done === null)
+      return unknownPage(base);
+    if (!done.ok)
+      return htmlResponse(page(done.error), done.error === NO_SUCH_PERSON ? 404 : done.error === BUSY ? 503 : 400);
+    if (self)
+      return redirect(`${base}/signin?forgotten=1`, [a.signOutCookie]);
+    return peoplePage(a, said2(done), 200);
+  }
+  const act = r.action === "grant" ? (me) => setAdminFlag(a.d, me, r.id, true) : r.action === "revoke" ? (me) => setAdminFlag(a.d, me, r.id, false) : (me) => resumeDelivery(a.d, me, r.id);
+  const done = await fresh(a, true, act);
+  if (done === null)
+    return unknownPage(base);
+  if (!done.ok && done.error === NO_SUCH_PERSON)
+    return htmlResponse(notFoundPage(base, a.v), 404);
+  const me = await a.d.store.getUser(a.v.user.id);
+  if (!me?.admin)
+    return redirect(`${base}/`);
+  return onePerson(a, r.id, said2(done));
+}
+async function forgetRoute(a, method, form) {
+  const base = a.v.base;
+  const note = isConfiguredAdmin(a.d, a.v.user) ? CONFIGURED_SELF : undefined;
+  if (method === "GET" || !form)
+    return htmlResponse(forgetPage(a.v, note));
+  const page = (error) => confirmForgetPage(a.v, { action: `${base}/forget`, self: true, name: nameOf(a.v.user), ...note ? { note } : {}, ...error ? { error } : {} });
+  const step = confirmed(form);
+  if (step === "ask")
+    return htmlResponse(page());
+  if (step === "wrong")
+    return htmlResponse(page(WRONG_WORD), 400);
+  if (!await ticksSettled(a.d))
+    return htmlResponse(page(BUSY), 503);
+  const done = await fresh(a, false, (me) => forgetPerson(a.d, me, me.id));
+  if (done === null)
+    return redirect(`${base}/signin`, [a.signOutCookie]);
+  if (!done.ok)
+    return htmlResponse(page(done.error), done.error === BUSY ? 503 : 400);
+  return redirect(`${base}/signin?forgotten=1`, [a.signOutCookie]);
+}
+
+// plugins/tracker/src/edit.ts
+async function owned(d, user, taskId, type) {
+  const task = await ownLiveTask(d, user, taskId);
+  if (!task || task.type !== type)
+    return NO_SUCH_TASK;
+  if (!editable(task))
+    return FINISHED;
+  return task;
+}
+function same(a, b) {
+  return JSON.stringify(a) === JSON.stringify(b);
+}
+async function applyEdit(d, task, user, patch) {
+  const fields = Object.keys(patch);
+  if (fields.length === 0)
+    return task;
+  const at = d.clock.now().toISOString();
+  const updated = await d.store.updateTask(task.id, { ...patch, at });
+  await d.store.addTaskEvent({ taskId: task.id, actorId: user.id, kind: "edited", detail: fields.join(", "), at });
+  return updated;
+}
+async function nextRun(d, task) {
+  const queued = await d.store.listOccurrences({ taskId: task.id, status: "queued" });
+  return queued[0] ?? null;
+}
+function savedText(task, user, next, now, what) {
+  const cadence = task.schedule ? describeSchedule(task.schedule, user, user.timeZone, now) : "no schedule";
+  const when = task.status === "paused" ? "paused" : next ? formatInstant(next.dueAt, user.timeZone, now) : "nothing scheduled";
+  return clip(`Saved \`${task.id}\` ${what}: ${cadence}. Next: ${when}.`);
+}
+var blank = (v) => v === undefined || v.trim() === "";
+async function editReminder(d, user, taskId, input) {
+  const task = await owned(d, user, taskId, "reminder");
+  if (typeof task === "string")
+    return { ok: false, error: task };
+  const config = task.config ?? {};
+  const text = blank(input.text) ? String(config.text ?? "") : input.text;
+  const repeat = input.repeat ?? repeatOf(task.schedule);
+  const plan = reminderPlan(d, user, { text, repeat, ...input.when !== undefined ? { when: input.when } : {} }, task.schedule);
+  if (!plan.ok)
+    return plan;
+  let updated = config.text === plan.text ? task : await applyEdit(d, task, user, { title: clip(plan.text, MAX_TITLE), config: { ...config, text: plan.text } });
+  if (!same(plan.schedule, task.schedule))
+    updated = await rescheduleKeepingSnoozes(d, updated, user, plan.schedule, user.id);
+  return { ok: true, task: updated, text: savedText(updated, user, await nextRun(d, updated), d.clock.now(), "(reminder)") };
+}
+var DAY_MS3 = 24 * 60 * 60 * 1000;
+function periodDateFrom(s, date, owner) {
+  const ctx = { zone: owner.timeZone, preferredHour: owner.preferredHour };
+  let after = new Date(Date.parse(`${date}T00:00:00Z`) - ((s.leadDays ?? 0) + 2) * DAY_MS3);
+  for (let i = 0;i < 1000; i++) {
+    const due = nextDue(s, after, ctx);
+    if (!due)
+      return null;
+    const on = periodDate(s, due, owner.timeZone);
+    if (on >= date)
+      return on;
+    after = due;
+  }
+  return null;
+}
+function renewalDate(task, owner, now) {
+  const s = task.schedule;
+  if (s?.kind !== "period")
+    return "";
+  const w = wallClock(now, owner.timeZone);
+  const today = `${w.year}-${String(w.month).padStart(2, "0")}-${String(w.day).padStart(2, "0")}`;
+  if (s.anchor >= today)
+    return s.anchor;
+  return periodDateFrom(s, today, owner) ?? s.anchor;
+}
+async function askedAbout(d, task, owner, date) {
+  const old = task.schedule;
+  if (old?.kind !== "period")
+    return false;
+  const fired = (await d.store.listOccurrences({ taskId: task.id })).filter((o) => o.status !== "queued" && !o.dedupeKey.startsWith(SNOOZE_PREFIX));
+  return fired.some((o) => periodDate(old, new Date(o.dueAt), owner.timeZone) === date);
+}
+async function editRenewal(d, user, taskId, input) {
+  const task = await owned(d, user, taskId, "renewal");
+  if (typeof task === "string")
+    return { ok: false, error: task };
+  if (task.schedule?.kind !== "period")
+    return { ok: false, error: FINISHED };
+  const old = task.schedule;
+  const now = d.clock.now();
+  const config = task.config;
+  const state = task.state;
+  const carried = state && typeof state.amount === "number" ? state.amount : null;
+  const note = input.note ?? config.note;
+  const plan = renewalPlan(d, user, {
+    name: blank(input.name) ? task.title : input.name,
+    amount: input.amount ?? carried ?? config.amount,
+    currency: blank(input.currency) ? config.currency : input.currency,
+    renews: blank(input.renews) ? renewalDate(task, user, now) : input.renews,
+    every: input.every ?? old.every,
+    unit: input.unit ?? old.unit,
+    lead: input.lead ?? old.leadDays ?? 0,
+    ...note !== undefined ? { note } : {}
+  });
+  if (!plan.ok)
+    return plan;
+  const sameShape = plan.schedule.every === old.every && plan.schedule.unit === old.unit && plan.schedule.leadDays === (old.leadDays ?? 0);
+  const schedule = sameShape && periodDateFrom(old, plan.schedule.anchor, user) === plan.schedule.anchor ? old : plan.schedule;
+  const problems = scheduleProblems(schedule);
+  if (problems.length > 0)
+    return { ok: false, error: `That schedule does not work: ${problems.join("; ")}.` };
+  const patch = {};
+  if (plan.name !== task.title)
+    patch.title = plan.name;
+  const newAmount = plan.amount !== (carried ?? config.amount);
+  const nextConfig = { amount: newAmount ? plan.amount : config.amount, currency: plan.currency, ...plan.note ? { note: plan.note } : {} };
+  if (!same(nextConfig, config))
+    patch.config = nextConfig;
+  if (newAmount && carried !== null)
+    patch.state = { ...state, amount: plan.amount };
+  let updated = await applyEdit(d, task, user, patch);
+  let next = await nextRun(d, updated);
+  if (!same(schedule, old)) {
+    const asked = await askedAbout(d, task, user, schedule.anchor);
+    updated = await rescheduleKeepingSnoozes(d, updated, user, schedule, user.id);
+    next = (asked ? null : await firstAskIfDue(d, updated, user, schedule)) ?? await nextRun(d, updated);
+  }
+  const ask = updated.status === "paused" ? "paused" : askText(next, plan.days, user, now);
+  const cadence = describeSchedule(schedule, user, user.timeZone, now);
+  return { ok: true, task: updated, text: clip(`Saved \`${updated.id}\` (renewal): ${cadence}. Next ask: ${ask}.`) };
+}
+async function editPrice(d, user, taskId, input) {
+  const task = await owned(d, user, taskId, "price");
+  if (typeof task === "string")
+    return { ok: false, error: task };
+  const config = task.config;
+  const schedule = task.schedule;
+  const plan = priceSettingsPlan({
+    name: input.name ?? task.title,
+    hours: input.hours ?? (schedule?.kind === "poll" ? schedule.every : undefined),
+    drop: input.drop ?? config.dropPercent ?? DEFAULT_DROP_PERCENT,
+    baseline: input.baseline ?? config.baseline ?? DEFAULT_BASELINE
+  });
+  if (!plan.ok)
+    return plan;
+  const patch = {};
+  const title = plan.name || titleFor(config.url);
+  if (title !== task.title)
+    patch.title = title;
+  const nextConfig = { ...config, dropPercent: plan.drop, baseline: plan.baseline };
+  if (!same(nextConfig, config))
+    patch.config = nextConfig;
+  let updated = await applyEdit(d, task, user, patch);
+  if (schedule?.kind === "poll" && (schedule.every !== plan.hours || schedule.unit !== "hour")) {
+    const next = { ...schedule, every: plan.hours, unit: "hour" };
+    updated = await rescheduleKeepingSnoozes(d, updated, user, next, user.id);
+  }
+  return { ok: true, task: updated, text: savedText(updated, user, await nextRun(d, updated), d.clock.now(), "(price)") };
+}
+
 // plugins/tracker/src/web/editor.ts
 var READING = "I am still reading the page of your last new price tracker; try again when it is done.";
-var GONE = "You are no longer on this tracker's list.";
+var GONE = NO_LONGER_LISTED;
 function asViewer(e, fn) {
   return e.queue(async () => {
     const user = await e.d.store.getUser(e.v.user.id);
@@ -6283,8 +6898,10 @@ async function taskPage(e, id, done, error) {
   const view = await loadHistory(e.d, e.v.user, id);
   if (!view)
     return htmlResponse(notFoundPage(e.v.base, e.v), 404);
-  const controls = view.task.ownerId === e.v.user.id ? ownerControls(e.v, view.task) : null;
-  return htmlResponse(historyPage(e.v, view, { controls, flash: notice(done, error) }), error ? 400 : 200);
+  const own = view.task.ownerId === e.v.user.id;
+  const controls = own ? ownerControls(e.v, view.task) : null;
+  const owner = own ? null : (await e.d.store.getUser(view.task.ownerId))?.displayName ?? view.task.ownerId;
+  return htmlResponse(historyPage(e.v, view, { controls, flash: notice(done, error), owner }), error ? 400 : 200);
 }
 function current(d, user, task) {
   const now = d.clock.now();
@@ -6359,6 +6976,19 @@ async function actionPost(e, id, action, form) {
 var TASK_PATH = /^\/tasks\/([^/]+)$/;
 var TASK_ACTION = /^\/tasks\/([^/]+)\/(edit|pause|resume|delete)$/;
 var NEW_PATH = /^\/new\/([a-z]+)$/;
+var PERSON_PATH = /^\/admin\/people\/([^/]+)$/;
+var PERSON_ACTION = /^\/admin\/people\/([^/]+)\/(grant|revoke|resume-delivery|forget)$/;
+var BLOCK_LIFT = /^\/admin\/blocks\/([^/]+)\/lift$/;
+function isAdminRoute(r) {
+  return r.kind.startsWith("admin");
+}
+function segment(raw) {
+  try {
+    return decodeURIComponent(raw ?? "");
+  } catch {
+    return "";
+  }
+}
 function route(path) {
   if (path === "/")
     return { kind: "tasks" };
@@ -6366,6 +6996,23 @@ function route(path) {
     return { kind: "settings" };
   if (path === "/logout")
     return { kind: "logout" };
+  if (path === "/forget")
+    return { kind: "forget" };
+  if (path === "/admin")
+    return { kind: "admin" };
+  if (path === "/admin/tasks")
+    return { kind: "admin-tasks" };
+  if (path === "/admin/allow")
+    return { kind: "admin-allow" };
+  const personAct = PERSON_ACTION.exec(path);
+  if (personAct)
+    return { kind: "admin-act", id: segment(personAct[1]), action: personAct[2] };
+  const onePerson = PERSON_PATH.exec(path);
+  if (onePerson)
+    return { kind: "admin-person", id: segment(onePerson[1]) };
+  const lift = BLOCK_LIFT.exec(path);
+  if (lift)
+    return { kind: "admin-lift", id: segment(lift[1]) };
   const created = NEW_PATH.exec(path);
   if (created) {
     const type = created[1];
@@ -6374,12 +7021,7 @@ function route(path) {
   const one = TASK_PATH.exec(path) ?? TASK_ACTION.exec(path);
   if (!one)
     return null;
-  let id;
-  try {
-    id = decodeURIComponent(one[1] ?? "");
-  } catch {
-    id = "";
-  }
+  const id = segment(one[1]);
   const action = one[2];
   if (action === undefined)
     return { kind: "task", id };
@@ -6388,9 +7030,9 @@ function route(path) {
   return { kind: "act", id, action };
 }
 function methodsOf(r) {
-  if (r.kind === "logout" || r.kind === "act")
+  if (r.kind === "logout" || r.kind === "act" || r.kind === "admin-allow" || r.kind === "admin-act" || r.kind === "admin-lift")
     return "POST";
-  if (r.kind === "settings" || r.kind === "edit" || r.kind === "new")
+  if (r.kind === "settings" || r.kind === "edit" || r.kind === "new" || r.kind === "forget")
     return "GET, POST";
   return "GET";
 }
@@ -6443,6 +7085,11 @@ function plain(status, text, extra = {}) {
     headers: { "Content-Type": "text/plain; charset=utf-8", "Cache-Control": "no-store", "X-Content-Type-Options": "nosniff", ...extra }
   });
 }
+function signInNote(q) {
+  if (q.get("forgotten") === "1")
+    return "Everything the tracker held about you is deleted, and you are signed out.";
+  return q.get("out") === "1" ? "You are signed out." : undefined;
+}
 async function lookupWithin(lookup, ms) {
   let timer;
   const late = new Promise((resolve) => {
@@ -6527,6 +7174,11 @@ function createWebHandler(w) {
     d.sessions.deleteForUser(user.id);
     return { kind: "signed-out", note: RECHECK_FAILED };
   }
+  async function memberOf(discordId) {
+    if (w.guildId === null)
+      return "not-checked";
+    return await lookupWithin(() => w.membership(discordId), MEMBER_CHECK_TIMEOUT_MS) ?? "unknown";
+  }
   async function readForm(request) {
     const type = request.headers.get("content-type") ?? "";
     if (!type.toLowerCase().startsWith("application/x-www-form-urlencoded"))
@@ -6605,22 +7257,28 @@ function createWebHandler(w) {
       });
     }
     if (path === "/signin")
-      return only("GET") ?? htmlResponse(signInHelpPage(base, url.searchParams.get("out") === "1" ? "You are signed out." : undefined));
+      return only("GET") ?? htmlResponse(signInHelpPage(base, signInNote(url.searchParams)));
     if (path === "/login")
       return method === "GET" ? loginGet(d, url) : loginPost(d, request);
     const r = route(path);
     if (r === null)
       return htmlResponse(notFoundPage(base), 404);
     const allowed = methodsOf(r);
-    if (!allowed.split(", ").includes(method))
+    const admin = isAdminRoute(r);
+    if (!admin && !allowed.split(", ").includes(method))
       return plain(405, "Method not allowed", { Allow: allowed });
     const auth = await authenticate(d, request);
     if (auth.kind === "signed-out")
       return htmlResponse(signInHelpPage(base, auth.note), 403, { "Set-Cookie": clear(SESSION_COOKIE) });
     if (auth.kind !== "ok")
       return redirect(`${base}/signin`, auth.kind === "stale" ? [clear(SESSION_COOKIE)] : []);
+    if (admin && !auth.user.admin)
+      return unknownPage(base);
+    if (admin && !allowed.split(", ").includes(method))
+      return plain(405, "Method not allowed", { Allow: allowed });
     const v = { base, user: auth.user, csrf: auth.session.csrf };
     const e = { d, v, queue: w.queue, reading };
+    const a = { d, v, queue: w.queue, memberOf: (id) => memberOf(id), signOutCookie: clear(SESSION_COOKIE) };
     if (method === "POST") {
       const form = await readForm(request);
       if (!form)
@@ -6639,6 +7297,12 @@ function createWebHandler(w) {
           return editPost(e, r.id, form);
         case "act":
           return actionPost(e, r.id, r.action, form);
+        case "forget":
+          return forgetRoute(a, method, form);
+        case "admin-allow":
+        case "admin-act":
+        case "admin-lift":
+          return adminPost(a, r, form);
         default:
           return plain(405, "Method not allowed", { Allow: allowed });
       }
@@ -6654,6 +7318,12 @@ function createWebHandler(w) {
         return editGet(e, r.id);
       case "new":
         return newGet(e, r.type);
+      case "forget":
+        return forgetRoute(a, method, null);
+      case "admin":
+      case "admin-tasks":
+      case "admin-person":
+        return adminGet(a, r);
       default:
         return htmlResponse(settingsPage(v, { hour: String(auth.user.preferredHour), zone: auth.user.timeZone, saved: url.searchParams.get("saved") === "1" }));
     }
@@ -6746,6 +7416,28 @@ function createPlugin(host, options = {}) {
     if (failed > 0)
       host.log.warn(`${kind === "poll" ? "poll" : "notify"} lane: ${ran} ran, ${failed} failed`);
   }
+  const running = new Set;
+  const tracked = (p) => {
+    running.add(p);
+    const done = () => void running.delete(p);
+    p.then(done, done);
+    return p;
+  };
+  const lanes = {
+    busy: () => running.size > 0,
+    async idle(ms) {
+      const until = Date.now() + ms;
+      while (running.size > 0) {
+        const left = until - Date.now();
+        if (left <= 0)
+          return false;
+        let timer;
+        await Promise.race([Promise.allSettled([...running]), new Promise((r) => timer = setTimeout(r, left))]);
+        clearTimeout(timer);
+      }
+      return true;
+    }
+  };
   let discordClient = null;
   const capture = (interaction) => {
     const client = interaction.client;
@@ -6789,6 +7481,9 @@ function createPlugin(host, options = {}) {
       const openedStore = new SqliteStore(opened);
       const openedClaims = new ClaimStore(opened);
       try {
+        const vacuum = vacuumOnce(opened, path);
+        if ("error" in vacuum)
+          host.log.warn(`could not vacuum the tracker's database (${vacuum.error}); trying again at the next start`);
         const granted = await seedAdmins(openedStore, adminIds, clock.now());
         const admissions = new Admissions(opened);
         for (const id of adminIds) {
@@ -6831,6 +7526,9 @@ function createPlugin(host, options = {}) {
         notifier: dm ? createDmNotifier({ store: openedStore, claims: openedClaims, dm, clock, log: host.log, health: delivery }) : NO_DM,
         logins: new LoginLinks(opened),
         sessions: new Sessions(opened),
+        roster: new Roster(opened),
+        configuredAdmins: new Set(adminIds),
+        lanes,
         webEditor: webOrigin !== null
       };
       if (guildId === null)
@@ -6851,11 +7549,11 @@ function createPlugin(host, options = {}) {
     ticks: [
       {
         name: "notify",
-        run: (signal) => tick("notify", signal)
+        run: (signal) => tracked(tick("notify", signal))
       },
       {
         name: "poll",
-        run: (signal) => tick("poll", signal)
+        run: (signal) => tracked(tick("poll", signal))
       }
     ],
     async http(request, info) {