@rackbops/plugin-tracker 0.5.0 → 0.7.0

package/dist/plugin.js

@@ -191,6 +191,14 @@ async function optOut(store, task, recipientId, now, occurrenceId = null) {
     at
   });
 }
+async function liftBlock(store, actor, blockId, now) {
+  if (!actor.admin)
+    throw new ConsentError("only an admin lifts a block");
+  const block = await store.getBlock(blockId);
+  if (!block)
+    throw new ConsentError(`no block ${blockId}`);
+  return store.liftBlock(blockId, actor.userId, now.toISOString());
+}
 
 // node_modules/@rackbops/docket-core/dist/lanes.js
 var LANES = ["notify", "execute"];
@@ -1916,6 +1924,10 @@ class ClaimStore {
 // plugins/tracker/src/delivery-health.ts
 var PAUSE_AFTER = 3;
 var PAUSE_DETAIL = `delivery paused: ${PAUSE_AFTER} DMs in a row could not be delivered (DMs closed, or the bot is blocked)`;
+function recipientPauseDetail(userId) {
+  return `delivery to {${userId}} paused: ${PAUSE_AFTER} DMs in a row could not be delivered`;
+}
+var PERSON_REF = /\{(u[1-9][0-9]*)\}/g;
 function decidePause(failures, alreadyPaused) {
   return !alreadyPaused && failures >= PAUSE_AFTER;
 }
@@ -1941,6 +1953,9 @@ class DeliveryHealth {
     this.chain = next.catch(() => {});
     return next;
   }
+  exclusive(fn) {
+    return this.locked(fn);
+  }
   get(userId) {
     const r = this.db.query("SELECT * FROM delivery_health WHERE user_id = ?").get(userId);
     if (!r)
@@ -1959,6 +1974,8 @@ class DeliveryHealth {
   async recordFailure(userId, error, at) {
     const notices = [];
     const result = await this.locked(async () => {
+      if (!await this.store.getUser(userId))
+        return { failures: 0, paused: false };
       this.db.query(`INSERT INTO delivery_health (user_id, failures, last_error, last_failed_at) VALUES (?, 1, ?, ?)
            ON CONFLICT (user_id) DO UPDATE SET failures = delivery_health.failures + 1,
              last_error = excluded.last_error, last_failed_at = excluded.last_failed_at`).run(userId, error, at);
@@ -1995,7 +2012,7 @@ class DeliveryHealth {
       if (changes === 0 || task.status !== "active")
         continue;
       await this.store.updateTask(task.id, { status: "paused", at });
-      const detail = asRecipient ? `delivery to ${name2(recipient, userId)} paused: ${PAUSE_AFTER} DMs in a row could not be delivered` : PAUSE_DETAIL;
+      const detail = asRecipient ? recipientPauseDetail(userId) : PAUSE_DETAIL;
       await this.store.addTaskEvent({ taskId: task.id, actorId: null, kind: "paused", detail, at });
       if (asRecipient) {
         const owner = await this.store.getUser(task.ownerId);
@@ -2502,6 +2519,7 @@ async function restoreHeldRun(store, task, held, before, after, now) {
 
 // plugins/tracker/src/actions.ts
 var MAX_ANSWER = 2000;
+var NO_LONGER_LISTED = "You are no longer on this tracker's list.";
 var NO_SUCH_TASK = "You have no task with that id. `/tasks` lists yours.";
 function clip(text, max = MAX_ANSWER) {
   return text.length <= max ? text : `${text.slice(0, max - 3)}...`;
@@ -3031,6 +3049,8 @@ async function sendShare(d, p) {
 async function finishShare(d, p, err) {
   if (err === null)
     return `Invited <@${p.targetDiscordId}> to \`${p.taskId}\`. They get a DM to accept or decline.`;
+  if (!await d.store.getUser(p.targetId) || !await d.store.getTask(p.taskId))
+    return `<@${p.targetDiscordId}> ${CANNOT_SHARE}`;
   await d.store.removeRecipient(p.taskId, p.targetId);
   await d.store.addTaskEvent({
     taskId: p.taskId,
@@ -3222,12 +3242,9 @@ function runView(o, replies, people, viewer, now) {
     answers: replies.filter((r) => r.occurrenceId === o.id).map((r) => `${people.get(r.userId)?.displayName ?? r.userId} ${replyText(r)}`)
   };
 }
-function changeView(e, viewer, now) {
-  return {
-    at: formatInstant(e.at, viewer.timeZone, now),
-    kind: e.kind.replaceAll("_", " "),
-    detail: e.kind === "paused" || e.kind === "resumed" ? e.detail : null
-  };
+function changeView(e, viewer, now, names = new Map) {
+  const detail = e.kind === "paused" || e.kind === "resumed" ? e.detail.replace(PERSON_REF, (_, id) => names.get(id) ?? "someone no longer on the tracker") : null;
+  return { at: formatInstant(e.at, viewer.timeZone, now), kind: e.kind.replaceAll("_", " "), detail };
 }
 function runLine(v) {
   const late = v.late ? " (late)" : "";
@@ -3258,6 +3275,16 @@ async function loadHistory(d, user, taskId) {
         people.set(u.id, u);
     }
   }
+  const names = new Map;
+  for (const e of changes) {
+    for (const [, id] of e.detail.matchAll(PERSON_REF)) {
+      if (id === undefined || names.has(id))
+        continue;
+      const u = await d.store.getUser(id);
+      if (u)
+        names.set(id, u.displayName ?? id);
+    }
+  }
   const owner = task.ownerId === user.id ? user : await d.store.getUser(task.ownerId);
   return {
     task,
@@ -3265,7 +3292,7 @@ async function loadHistory(d, user, taskId) {
     next: next ? formatInstant(next.dueAt, user.timeZone, now) : null,
     runs: runs.slice(-HISTORY_RUNS).map((o) => runView(o, replies, people, user, now)),
     earlierRuns: Math.max(0, runs.length - HISTORY_RUNS),
-    changes: changes.slice(-HISTORY_CHANGES).map((e) => changeView(e, user, now)),
+    changes: changes.slice(-HISTORY_CHANGES).map((e) => changeView(e, user, now, names)),
     earlierChanges: Math.max(0, changes.length - HISTORY_CHANGES)
   };
 }
@@ -3442,7 +3469,10 @@ async function trackPrice(d, user, input) {
     finish: async (result) => said(await finishPrice(d, user, pending, result))
   };
 }
-async function finishPrice(d, user, v, seen) {
+async function finishPrice(d, asked, v, seen) {
+  const user = await d.store.getUser(asked.id);
+  if (!user || !d.admissions.isRegistered(user.id))
+    return { ok: false, error: NO_LONGER_LISTED };
   if (!seen.ok)
     return seen;
   const type = d.types.price;
@@ -4085,8 +4115,22 @@ var MIGRATIONS = [
   );
   CREATE INDEX web_sessions_user ON web_sessions (user_id);
   CREATE INDEX web_sessions_expiry ON web_sessions (expires_at);
+  `,
+  `
+  CREATE TABLE api_tokens (
+    seq INTEGER PRIMARY KEY AUTOINCREMENT,
+    token_hash TEXT NOT NULL UNIQUE,
+    user_id TEXT NOT NULL,
+    name TEXT NOT NULL,
+    created_at TEXT NOT NULL,
+    expires_at TEXT,
+    last_used_at TEXT,
+    member_checked_at TEXT
+  );
+  CREATE INDEX api_tokens_user ON api_tokens (user_id);
   `
 ];
+var BUSY_TIMEOUT_MS = 5000;
 function migrate(db) {
   const current = db.query("PRAGMA user_version").get().user_version;
   if (current > MIGRATIONS.length) {
@@ -4098,14 +4142,224 @@ function migrate(db) {
       db.exec(`PRAGMA user_version = ${version + 1}`);
     })();
   }
+  return current;
 }
 function openDatabase(path) {
   const db = new Database(path, { create: true });
-  if (path !== ":memory:")
-    db.exec("PRAGMA journal_mode = WAL");
-  db.exec("PRAGMA busy_timeout = 5000");
-  migrate(db);
-  return db;
+  try {
+    if (path !== ":memory:")
+      db.exec("PRAGMA journal_mode = WAL");
+    db.exec(`PRAGMA busy_timeout = ${BUSY_TIMEOUT_MS}`);
+    db.exec("PRAGMA secure_delete = ON");
+    migrate(db);
+    return db;
+  } catch (err) {
+    db.close();
+    throw err;
+  }
+}
+var META_TABLE = "tracker_meta";
+var VACUUMED = "vacuumed_for_secure_delete";
+function vacuumOnce(db, path) {
+  if (path === ":memory:")
+    return { ran: false };
+  try {
+    db.exec(`CREATE TABLE IF NOT EXISTS ${META_TABLE} (key TEXT PRIMARY KEY, value TEXT NOT NULL)`);
+    if (db.query(`SELECT 1 FROM ${META_TABLE} WHERE key = ?`).get(VACUUMED) !== null)
+      return { ran: false };
+    db.exec("PRAGMA busy_timeout = 0");
+    try {
+      db.exec("VACUUM");
+      const r = db.query("PRAGMA wal_checkpoint(TRUNCATE)").get();
+      if (r && Number(r.busy) !== 0)
+        throw new Error("the write-ahead log is busy");
+    } finally {
+      db.exec(`PRAGMA busy_timeout = ${BUSY_TIMEOUT_MS}`);
+    }
+    db.query(`INSERT INTO ${META_TABLE} (key, value) VALUES (?, ?)`).run(VACUUMED, new Date().toISOString());
+    return { ran: true };
+  } catch (err) {
+    return { ran: false, error: err instanceof Error ? err.message : String(err) };
+  }
+}
+
+// plugins/tracker/src/roster.ts
+var FORGOTTEN = "forgotten";
+function historyNames(kind, detail, id) {
+  switch (kind) {
+    case "recipient_invited":
+    case "recipient_accepted":
+    case "recipient_declined":
+    case "recipient_opted_out":
+      return detail === id;
+    case "blocked":
+      return detail === `${id} 24h` || detail === `${id} permanent`;
+    case "recipient_removed":
+      return detail.startsWith(`${id}: `);
+    case "paused":
+      return detail.startsWith(`delivery to {${id}} paused:`);
+    default:
+      return false;
+  }
+}
+function eventNames(type, text, id) {
+  return type === "delivered" && text.startsWith(`${id} `);
+}
+function errorForms(id) {
+  return new RegExp(`(recipient |user |delivery to )${id}(?![0-9A-Za-z_])`, "g");
+}
+function errorNames(text, id) {
+  return text !== null && errorForms(id).test(text);
+}
+function redactError(text, id) {
+  return text.replace(errorForms(id), `$1(${FORGOTTEN})`);
+}
+
+class Roster {
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  people() {
+    const rows = this.db.query(`SELECT u.seq, u.discord_id, u.display_name, u.time_zone, u.preferred_hour, u.admin, u.created_at,
+                a.admitted_by, a.registered_at, h.paused_at, h.failures
+         FROM users u
+         LEFT JOIN admissions a ON a.user_id = 'u' || u.seq
+         LEFT JOIN delivery_health h ON h.user_id = 'u' || u.seq
+         ORDER BY u.seq`).all();
+    const owned = this.db.query("SELECT owner_id, status, COUNT(*) AS n FROM tasks GROUP BY owner_id, status").all();
+    const receiving = this.db.query(`SELECT r.user_id, COUNT(*) AS n FROM task_recipients r JOIN tasks t ON r.task_id = 't' || t.seq
+         WHERE r.state = 'accepted' AND t.status IN ('active', 'paused') GROUP BY r.user_id`).all();
+    return rows.map((r) => {
+      const id = `u${Number(r.seq)}`;
+      const counts = { active: 0, paused: 0, done: 0, archived: 0 };
+      for (const o of owned)
+        if (o.owner_id === id && o.status in counts)
+          counts[o.status] = Number(o.n);
+      const str = (v) => v === null || v === undefined ? null : String(v);
+      return {
+        id,
+        discordId: str(r.discord_id),
+        displayName: str(r.display_name),
+        timeZone: String(r.time_zone),
+        preferredHour: Number(r.preferred_hour),
+        admin: Number(r.admin) === 1,
+        createdAt: String(r.created_at),
+        admittedBy: str(r.admitted_by),
+        registeredAt: str(r.registered_at),
+        deliveryPausedAt: str(r.paused_at),
+        failures: Number(r.failures ?? 0),
+        owned: counts,
+        receiving: Number(receiving.find((x) => x.user_id === id)?.n ?? 0)
+      };
+    });
+  }
+  checkpoint() {
+    this.db.exec("PRAGMA busy_timeout = 0");
+    try {
+      const r = this.db.query("PRAGMA wal_checkpoint(TRUNCATE)").get();
+      return !r || Number(r.busy) === 0;
+    } finally {
+      this.db.exec(`PRAGMA busy_timeout = ${BUSY_TIMEOUT_MS}`);
+    }
+  }
+  othersNamed(taskId, userId, name) {
+    const ids = new Set;
+    for (const r of this.db.query("SELECT user_id FROM task_recipients WHERE task_id = ?").all(taskId))
+      ids.add(r.user_id);
+    for (const r of this.db.query("SELECT detail FROM task_events WHERE task_id = ? AND kind LIKE 'recipient_%'").all(taskId)) {
+      const id = /^(u[1-9][0-9]*)(:|$)/.exec(r.detail)?.[1];
+      if (id)
+        ids.add(id);
+    }
+    ids.delete(userId);
+    const named = this.db.query("SELECT 1 FROM users WHERE seq = ? AND display_name = ?");
+    return [...ids].some((id) => named.get(Number(id.slice(1)), name) !== null);
+  }
+  admins() {
+    return this.db.query("SELECT COUNT(*) AS n FROM users WHERE admin = 1").get().n;
+  }
+  activeBlocks(now) {
+    const rows = this.db.query(`SELECT seq, owner_id, recipient_id, expires_at, created_at FROM invite_blocks
+         WHERE lifted_at IS NULL AND (expires_at IS NULL OR expires_at > ?) ORDER BY seq DESC`).all(now.toISOString());
+    return rows.map((r) => ({
+      id: `b${Number(r.seq)}`,
+      ownerId: String(r.owner_id),
+      recipientId: String(r.recipient_id),
+      expiresAt: r.expires_at === null ? null : String(r.expires_at),
+      createdAt: String(r.created_at)
+    }));
+  }
+  erase(userId) {
+    const seq = /^u([1-9][0-9]*)$/.exec(userId)?.[1];
+    if (seq === undefined)
+      throw new Error(`no user ${userId}`);
+    return this.db.transaction(() => {
+      const person = this.db.query("SELECT display_name FROM users WHERE seq = ?").get(Number(seq));
+      if (!person)
+        throw new Error(`no user ${userId}`);
+      const rows = {};
+      const del = (table, where, ...params) => {
+        rows[table] = (rows[table] ?? 0) + this.db.query(`DELETE FROM ${table} WHERE ${where}`).run(...params).changes;
+      };
+      const THEIR_TASKS = "SELECT 't' || seq FROM tasks WHERE owner_id = ?";
+      const THEIR_RUNS = `SELECT 'o' || seq FROM occurrences WHERE task_id IN (${THEIR_TASKS})`;
+      const pausedFor = this.db.query(`SELECT task_id FROM delivery_pauses WHERE user_id = ? AND task_id NOT IN (${THEIR_TASKS})`).all(userId, userId).map((r) => r.task_id);
+      const taskIds = (sql) => this.db.query(sql).all(userId).map((r) => r.t);
+      const recipientOf = new Set([
+        ...pausedFor,
+        ...taskIds("SELECT task_id AS t FROM task_recipients WHERE user_id = ?"),
+        ...this.db.query("SELECT task_id AS t, kind, detail FROM task_events WHERE instr(detail, ?) > 0").all(userId).filter((r) => historyNames(r.kind, r.detail, userId)).map((r) => r.t)
+      ]);
+      del("events", `occurrence_id IN (${THEIR_RUNS})`, userId);
+      del("delivery_claims", `occurrence_id IN (${THEIR_RUNS}) OR user_id = ?`, userId, userId);
+      del("replies", `task_id IN (${THEIR_TASKS}) OR user_id = ?`, userId, userId);
+      del("task_events", `task_id IN (${THEIR_TASKS}) OR actor_id = ?`, userId, userId);
+      del("series", `task_id IN (${THEIR_TASKS})`, userId);
+      del("task_recipients", `task_id IN (${THEIR_TASKS}) OR user_id = ?`, userId, userId);
+      del("delivery_pauses", `task_id IN (${THEIR_TASKS}) OR user_id = ?`, userId, userId);
+      del("occurrences", `task_id IN (${THEIR_TASKS})`, userId);
+      del("tasks", "owner_id = ?", userId);
+      const containing = (table, columns, column) => this.db.query(`SELECT seq, ${columns} FROM ${table} WHERE instr(${column}, ?) > 0`).all(userId);
+      for (const r of containing("task_events", "kind, detail", "detail")) {
+        if (historyNames(String(r.kind), String(r.detail), userId))
+          del("task_events", "seq = ?", Number(r.seq));
+      }
+      for (const r of containing("events", "type, text", "text")) {
+        if (eventNames(String(r.type), String(r.text), userId))
+          del("events", "seq = ?", Number(r.seq));
+        else if (errorNames(String(r.text), userId))
+          this.db.query("UPDATE events SET text = ? WHERE seq = ?").run(redactError(String(r.text), userId), r.seq);
+      }
+      for (const r of containing("occurrences", "error", "error")) {
+        if (errorNames(String(r.error), userId))
+          this.db.query("UPDATE occurrences SET error = ? WHERE seq = ?").run(redactError(String(r.error), userId), r.seq);
+      }
+      if (person.display_name !== null) {
+        const legacy = `delivery to ${person.display_name} paused:`;
+        const rowsNaming = this.db.query("SELECT seq, task_id, detail FROM task_events WHERE kind = 'paused' AND actor_id IS NULL").all();
+        for (const r of rowsNaming) {
+          if (!recipientOf.has(r.task_id) || !r.detail.startsWith(legacy))
+            continue;
+          if (this.othersNamed(r.task_id, userId, person.display_name))
+            continue;
+          del("task_events", "seq = ?", r.seq);
+        }
+      }
+      del("invite_blocks", "owner_id = ? OR recipient_id = ?", userId, userId);
+      this.db.query("UPDATE invite_blocks SET lifted_by = ? WHERE lifted_by = ?").run(FORGOTTEN, userId);
+      del("admissions", "user_id = ?", userId);
+      this.db.query("UPDATE admissions SET admitted_by = ? WHERE admitted_by = ?").run(FORGOTTEN, userId);
+      del("delivery_health", "user_id = ?", userId);
+      del("web_sessions", "user_id = ?", userId);
+      del("web_login_tokens", "user_id = ?", userId);
+      del("api_tokens", "user_id = ?", userId);
+      del("users", "seq = ?", Number(seq));
+      const held = this.db.query("SELECT 1 FROM delivery_pauses WHERE task_id = ? LIMIT 1");
+      const freed = [...new Set(pausedFor)].filter((t) => held.get(t) === null);
+      return { rows, freed };
+    })();
+  }
 }
 
 // plugins/tracker/src/store.ts
@@ -4428,160 +4682,97 @@ class SqliteStore {
   }
 }
 
-// plugins/tracker/src/edit.ts
-async function owned(d, user, taskId, type) {
-  const task = await ownLiveTask(d, user, taskId);
-  if (!task || task.type !== type)
-    return NO_SUCH_TASK;
-  if (!editable(task))
-    return FINISHED;
-  return task;
-}
-function same(a, b) {
-  return JSON.stringify(a) === JSON.stringify(b);
-}
-async function applyEdit(d, task, user, patch) {
-  const fields = Object.keys(patch);
-  if (fields.length === 0)
-    return task;
-  const at = d.clock.now().toISOString();
-  const updated = await d.store.updateTask(task.id, { ...patch, at });
-  await d.store.addTaskEvent({ taskId: task.id, actorId: user.id, kind: "edited", detail: fields.join(", "), at });
-  return updated;
-}
-async function nextRun(d, task) {
-  const queued = await d.store.listOccurrences({ taskId: task.id, status: "queued" });
-  return queued[0] ?? null;
-}
-function savedText(task, user, next, now, what) {
-  const cadence = task.schedule ? describeSchedule(task.schedule, user, user.timeZone, now) : "no schedule";
-  const when = task.status === "paused" ? "paused" : next ? formatInstant(next.dueAt, user.timeZone, now) : "nothing scheduled";
-  return clip(`Saved \`${task.id}\` ${what}: ${cadence}. Next: ${when}.`);
+// plugins/tracker/src/admin.ts
+var NO_SUCH_PERSON = "There is no such person on this tracker's list.";
+var NO_SUCH_BLOCK = "There is no such block in force.";
+var LAST_ADMIN = "That is the tracker's only admin: make someone else an admin first.";
+var BUSY = "The tracker is busy sending reminders; nothing was deleted. Try again in a minute.";
+var TICK_WAIT_MS = 20000;
+var CONFIGURED_ADMIN = "That admin is named in TRACKER_ADMIN_DISCORD_IDS, which makes them an admin again at every start: remove them from the configuration first.";
+var CONFIGURED_SELF = "You are named in TRACKER_ADMIN_DISCORD_IDS: this erases you now, but the next start makes you an admin again, as a new person, unless you are removed from the configuration first.";
+function isConfiguredAdmin(d, u) {
+  return u.discordId !== null && d.configuredAdmins.has(u.discordId);
 }
-var blank = (v) => v === undefined || v.trim() === "";
-async function editReminder(d, user, taskId, input) {
-  const task = await owned(d, user, taskId, "reminder");
-  if (typeof task === "string")
-    return { ok: false, error: task };
-  const config = task.config ?? {};
-  const text = blank(input.text) ? String(config.text ?? "") : input.text;
-  const repeat = input.repeat ?? repeatOf(task.schedule);
-  const plan = reminderPlan(d, user, { text, repeat, ...input.when !== undefined ? { when: input.when } : {} }, task.schedule);
-  if (!plan.ok)
-    return plan;
-  let updated = config.text === plan.text ? task : await applyEdit(d, task, user, { title: clip(plan.text, MAX_TITLE), config: { ...config, text: plan.text } });
-  if (!same(plan.schedule, task.schedule))
-    updated = await rescheduleKeepingSnoozes(d, updated, user, plan.schedule, user.id);
-  return { ok: true, task: updated, text: savedText(updated, user, await nextRun(d, updated), d.clock.now(), "(reminder)") };
+function ticksSettled(d) {
+  return d.lanes.idle(TICK_WAIT_MS);
 }
-var DAY_MS3 = 24 * 60 * 60 * 1000;
-function periodDateFrom(s, date, owner) {
-  const ctx = { zone: owner.timeZone, preferredHour: owner.preferredHour };
-  let after = new Date(Date.parse(`${date}T00:00:00Z`) - ((s.leadDays ?? 0) + 2) * DAY_MS3);
-  for (let i = 0;i < 1000; i++) {
-    const due = nextDue(s, after, ctx);
-    if (!due)
-      return null;
-    const on = periodDate(s, due, owner.timeZone);
-    if (on >= date)
-      return on;
-    after = due;
-  }
-  return null;
+function isPersonId(id) {
+  return /^u[1-9][0-9]{0,15}$/.test(id);
 }
-function renewalDate(task, owner, now) {
-  const s = task.schedule;
-  if (s?.kind !== "period")
-    return "";
-  const w = wallClock(now, owner.timeZone);
-  const today = `${w.year}-${String(w.month).padStart(2, "0")}-${String(w.day).padStart(2, "0")}`;
-  if (s.anchor >= today)
-    return s.anchor;
-  return periodDateFrom(s, today, owner) ?? s.anchor;
+async function person(d, id) {
+  return isPersonId(id) ? d.store.getUser(id) : null;
 }
-async function askedAbout(d, task, owner, date) {
-  const old = task.schedule;
-  if (old?.kind !== "period")
-    return false;
-  const fired = (await d.store.listOccurrences({ taskId: task.id })).filter((o) => o.status !== "queued" && !o.dedupeKey.startsWith(SNOOZE_PREFIX));
-  return fired.some((o) => periodDate(old, new Date(o.dueAt), owner.timeZone) === date);
+function who(u) {
+  return u.displayName ?? u.discordId ?? u.id;
 }
-async function editRenewal(d, user, taskId, input) {
-  const task = await owned(d, user, taskId, "renewal");
-  if (typeof task === "string")
-    return { ok: false, error: task };
-  if (task.schedule?.kind !== "period")
-    return { ok: false, error: FINISHED };
-  const old = task.schedule;
+async function setAdminFlag(d, admin, targetId, flag) {
+  if (!admin.admin)
+    return { ok: false, error: NOT_ADMIN };
+  const target = await person(d, targetId);
+  if (!target)
+    return { ok: false, error: NO_SUCH_PERSON };
+  if (target.admin === flag)
+    return { ok: true, text: `${who(target)} ${flag ? "is already" : "is not"} an admin.` };
+  if (!flag && d.roster.admins() <= 1)
+    return { ok: false, error: LAST_ADMIN };
+  if (!flag && isConfiguredAdmin(d, target))
+    return { ok: false, error: CONFIGURED_ADMIN };
+  await d.store.updateUser(target.id, { admin: flag });
+  d.log.info(`${admin.id} ${flag ? "made" : "revoked"} ${target.id} ${flag ? "an admin" : "as admin"}`);
+  return { ok: true, text: flag ? `${who(target)} is now an admin.` : `${who(target)} is no longer an admin.` };
+}
+async function resumeDelivery(d, admin, targetId) {
+  if (!admin.admin)
+    return { ok: false, error: NOT_ADMIN };
+  const target = await person(d, targetId);
+  if (!target)
+    return { ok: false, error: NO_SUCH_PERSON };
+  const resumed = await d.health.resume(target.id, d.clock.now());
+  if (!resumed)
+    return { ok: false, error: `Delivery to ${who(target)} is not paused.` };
+  return { ok: true, text: `Delivery to ${who(target)} resumed; ${resumed.tasks.length} task(s) back on.` };
+}
+async function liftDeclineBlock(d, admin, blockId) {
+  if (!admin.admin)
+    return { ok: false, error: NOT_ADMIN };
+  const block = /^b[1-9][0-9]{0,15}$/.test(blockId) ? await d.store.getBlock(blockId) : null;
   const now = d.clock.now();
-  const config = task.config;
-  const state = task.state;
-  const carried = state && typeof state.amount === "number" ? state.amount : null;
-  const note = input.note ?? config.note;
-  const plan = renewalPlan(d, user, {
-    name: blank(input.name) ? task.title : input.name,
-    amount: input.amount ?? carried ?? config.amount,
-    currency: blank(input.currency) ? config.currency : input.currency,
-    renews: blank(input.renews) ? renewalDate(task, user, now) : input.renews,
-    every: input.every ?? old.every,
-    unit: input.unit ?? old.unit,
-    lead: input.lead ?? old.leadDays ?? 0,
-    ...note !== undefined ? { note } : {}
-  });
-  if (!plan.ok)
-    return plan;
-  const sameShape = plan.schedule.every === old.every && plan.schedule.unit === old.unit && plan.schedule.leadDays === (old.leadDays ?? 0);
-  const schedule = sameShape && periodDateFrom(old, plan.schedule.anchor, user) === plan.schedule.anchor ? old : plan.schedule;
-  const problems = scheduleProblems(schedule);
-  if (problems.length > 0)
-    return { ok: false, error: `That schedule does not work: ${problems.join("; ")}.` };
-  const patch = {};
-  if (plan.name !== task.title)
-    patch.title = plan.name;
-  const newAmount = plan.amount !== (carried ?? config.amount);
-  const nextConfig = { amount: newAmount ? plan.amount : config.amount, currency: plan.currency, ...plan.note ? { note: plan.note } : {} };
-  if (!same(nextConfig, config))
-    patch.config = nextConfig;
-  if (newAmount && carried !== null)
-    patch.state = { ...state, amount: plan.amount };
-  let updated = await applyEdit(d, task, user, patch);
-  let next = await nextRun(d, updated);
-  if (!same(schedule, old)) {
-    const asked = await askedAbout(d, task, user, schedule.anchor);
-    updated = await rescheduleKeepingSnoozes(d, updated, user, schedule, user.id);
-    next = (asked ? null : await firstAskIfDue(d, updated, user, schedule)) ?? await nextRun(d, updated);
-  }
-  const ask = updated.status === "paused" ? "paused" : askText(next, plan.days, user, now);
-  const cadence = describeSchedule(schedule, user, user.timeZone, now);
-  return { ok: true, task: updated, text: clip(`Saved \`${updated.id}\` (renewal): ${cadence}. Next ask: ${ask}.`) };
+  if (!block || (await activeBlock(d.store, block.ownerId, block.recipientId, now))?.id !== block.id)
+    return { ok: false, error: NO_SUCH_BLOCK };
+  await liftBlock(d.store, { userId: admin.id, admin: true }, block.id, now);
+  const owner = await d.store.getUser(block.ownerId);
+  const recipient = await d.store.getUser(block.recipientId);
+  return {
+    ok: true,
+    text: `Lifted: ${owner ? who(owner) : block.ownerId} may invite ${recipient ? who(recipient) : block.recipientId} again.`
+  };
 }
-async function editPrice(d, user, taskId, input) {
-  const task = await owned(d, user, taskId, "price");
-  if (typeof task === "string")
-    return { ok: false, error: task };
-  const config = task.config;
-  const schedule = task.schedule;
-  const plan = priceSettingsPlan({
-    name: input.name ?? task.title,
-    hours: input.hours ?? (schedule?.kind === "poll" ? schedule.every : undefined),
-    drop: input.drop ?? config.dropPercent ?? DEFAULT_DROP_PERCENT,
-    baseline: input.baseline ?? config.baseline ?? DEFAULT_BASELINE
+async function forgetPerson(d, actor, targetId) {
+  if (actor.id !== targetId && !actor.admin)
+    return { ok: false, error: NOT_ADMIN };
+  const target = await person(d, targetId);
+  if (!target)
+    return { ok: false, error: NO_SUCH_PERSON };
+  if (target.admin && d.roster.admins() <= 1)
+    return { ok: false, error: LAST_ADMIN };
+  if (actor.id !== target.id && isConfiguredAdmin(d, target))
+    return { ok: false, error: CONFIGURED_ADMIN };
+  const now = d.clock.now();
+  const erased = await d.health.exclusive(async () => {
+    if (d.lanes.busy())
+      return null;
+    const e = d.roster.erase(target.id);
+    for (const taskId of e.freed)
+      await d.health.release(taskId, null, "resumed: a recipient left the tracker", now);
+    return e;
   });
-  if (!plan.ok)
-    return plan;
-  const patch = {};
-  const title = plan.name || titleFor(config.url);
-  if (title !== task.title)
-    patch.title = title;
-  const nextConfig = { ...config, dropPercent: plan.drop, baseline: plan.baseline };
-  if (!same(nextConfig, config))
-    patch.config = nextConfig;
-  let updated = await applyEdit(d, task, user, patch);
-  if (schedule?.kind === "poll" && (schedule.every !== plan.hours || schedule.unit !== "hour")) {
-    const next = { ...schedule, every: plan.hours, unit: "hour" };
-    updated = await rescheduleKeepingSnoozes(d, updated, user, next, user.id);
-  }
-  return { ok: true, task: updated, text: savedText(updated, user, await nextRun(d, updated), d.clock.now(), "(price)") };
+  if (erased === null)
+    return { ok: false, error: BUSY };
+  if (!d.roster.checkpoint())
+    d.log.warn(`after forgetting ${target.id}: the write-ahead log is busy, so SQLite's next checkpoint copies it back`);
+  const total = Object.values(erased.rows).reduce((a, b) => a + b, 0);
+  d.log.info(`forgot ${target.id} (${actor.id === target.id ? "at their own request" : `removed by ${actor.id}`}): ${total} row(s) deleted`);
+  return { ok: true, text: actor.id === target.id ? "Everything the tracker held about you is deleted." : `${who(target)} is removed from the tracker.` };
 }
 
 // node_modules/@rackbops/styles/rackbops-noir/bundle.css
@@ -5810,6 +6001,7 @@ function page(f) {
 <span class="rb-muted">${f.signedIn.name}</span>
 <a class="rb-link" href="${f.base}/">My tasks</a>
 <a class="rb-link" href="${f.base}/settings">Settings</a>
+${f.signedIn.admin ? html`<a class="rb-link" href="${f.base}/admin">Admin</a>` : null}
 <form method="post" action="${f.base}/logout"><input type="hidden" name="csrf" value="${f.signedIn.csrf}"><button class="rb-btn rb-btn--ghost rb-btn--sm" type="submit">Sign out</button></form>
 </nav>` : null;
   return html`<!doctype html>
@@ -5883,7 +6075,7 @@ function name3(u) {
   return u.displayName ?? "you";
 }
 function framed(v, title, body) {
-  return page({ base: v.base, title, signedIn: { name: name3(v.user), csrf: v.csrf }, body });
+  return page({ base: v.base, title, signedIn: { name: name3(v.user), csrf: v.csrf, admin: v.user.admin }, body });
 }
 function signInHelpPage(base, note) {
   return page({
@@ -5967,6 +6159,7 @@ function historyPage(v, h, extra = {}) {
 <p><a class="rb-link" href="${v.base}/">My tasks</a></p>
 <h1>${h.task.title}</h1>
 ${extra.flash ?? null}
+${extra.owner ? html`<p class="rb-muted">Owned by ${extra.owner}; you can see it, not change it.</p>` : null}
 <p>${h.task.type}, ${h.task.status === "archived" ? "deleted" : h.task.status}, ${h.cadence}. Next: ${h.task.status === "active" ? h.next ?? "nothing scheduled" : "nothing, while it is not active"}.</p>
 ${extra.controls ?? null}
 </section>
@@ -6001,6 +6194,14 @@ ${form.error ? html`<div class="rb-alert rb-alert--danger" role="alert"><p class
 </div>
 <div><button class="rb-btn rb-btn--primary" type="submit">Save</button></div>
 </form>
+</section>
+<section>
+<h2>API tokens</h2>
+<p>For a program that uses the tracker's task API as you. <a class="rb-link" href="${v.base}/tokens">API tokens</a></p>
+</section>
+<section>
+<h2>Forget me</h2>
+<p>Delete everything the tracker holds about you, for good. <a class="rb-link" href="${v.base}/forget">Forget me</a></p>
 </section>`);
 }
 function notFoundPage(base, v) {
@@ -6152,64 +6353,671 @@ function notice(key, error) {
   return text ? html`<div class="rb-alert rb-alert--success" role="status"><p class="rb-alert__title">${text}</p></div>` : null;
 }
 
-// plugins/tracker/src/web/editor.ts
-var READING = "I am still reading the page of your last new price tracker; try again when it is done.";
-var GONE = "You are no longer on this tracker's list.";
-function asViewer(e, fn) {
-  return e.queue(async () => {
-    const user = await e.d.store.getUser(e.v.user.id);
-    return user ? fn(user) : { ok: false, error: GONE };
-  });
-}
-var str2 = (form, name) => form.get(name) ?? "";
-var opt = (form, name) => str2(form, name).trim() === "" ? undefined : str2(form, name);
-function int(form, name) {
-  const raw = str2(form, name).trim();
-  if (raw === "")
-    return;
-  return /^[0-9]{1,9}$/.test(raw) ? Number(raw) : Number.NaN;
-}
-function decimal(form, name) {
-  const raw = str2(form, name).trim();
-  if (raw === "")
-    return;
-  return /^[0-9]{1,12}(\.[0-9]{1,6})?$/.test(raw) ? Number(raw) : Number.NaN;
+// plugins/tracker/src/web/api-tokens.ts
+var TOKEN_PREFIX = "trk_";
+var MAX_TOKENS_PER_PERSON = 10;
+var MAX_TOKEN_NAME = 50;
+var TOKEN_EXPIRY_DAYS = [30, 90, 365];
+var DEFAULT_EXPIRY_DAYS = 90;
+var DAY_MS3 = 24 * 60 * 60 * 1000;
+var TOUCH_EVERY_MS = 60 * 1000;
+function isApiTokenShape(value) {
+  return /^trk_[A-Za-z0-9_-]{43}$/.test(value);
 }
-function typed(type, mode, form) {
-  return Object.fromEntries(fieldsFor(type, mode).map((f) => [f.name, str2(form, f.name)]));
+function isTokenId(id) {
+  return /^k[1-9][0-9]{0,15}$/.test(id);
 }
-function reminderInput(form) {
-  const when = opt(form, "when");
-  return { text: str2(form, "text"), ...when !== undefined ? { when } : {}, repeat: str2(form, "repeat") || "none" };
+function expiryChoice(raw) {
+  const days = Number(raw);
+  return TOKEN_EXPIRY_DAYS.includes(days) ? days : undefined;
 }
-function renewalInput(form) {
-  const every = int(form, "every");
-  const lead = int(form, "lead");
-  const unit = opt(form, "unit");
-  const note = opt(form, "note");
+var COLUMNS = "seq, user_id, name, created_at, expires_at, last_used_at, member_checked_at";
+function toToken(r) {
   return {
-    name: str2(form, "name"),
-    amount: decimal(form, "amount") ?? Number.NaN,
-    currency: str2(form, "currency"),
-    renews: str2(form, "renews"),
-    ...every !== undefined ? { every } : {},
-    ...lead !== undefined ? { lead } : {},
-    ...unit !== undefined ? { unit } : {},
-    ...note !== undefined ? { note } : {}
+    id: `k${Number(r.seq)}`,
+    userId: r.user_id,
+    name: r.name,
+    createdAt: r.created_at,
+    expiresAt: r.expires_at,
+    lastUsedAt: r.last_used_at,
+    memberCheckedAt: r.member_checked_at
   };
 }
-function priceSettings(form) {
-  const name = opt(form, "name");
-  const hours = int(form, "hours");
-  const drop = decimal(form, "drop");
-  const baseline = opt(form, "baseline");
-  return {
-    ...name !== undefined ? { name } : {},
-    ...hours !== undefined ? { hours } : {},
+
+class ApiTokens {
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  create(userId, input, now, memberCheckedAt) {
+    const name = input.name.trim();
+    if (name.length === 0)
+      return { ok: false, error: "Give the token a name, such as the program that will use it." };
+    if (name.length > MAX_TOKEN_NAME)
+      return { ok: false, error: `That name is longer than ${MAX_TOKEN_NAME} characters.` };
+    if (/[\u0000-\u001f\u007f]/.test(name))
+      return { ok: false, error: "That name has a control character in it." };
+    if (!TOKEN_EXPIRY_DAYS.includes(input.days))
+      return { ok: false, error: "Choose when the token expires." };
+    const at = now.toISOString();
+    return this.db.transaction(() => {
+      const seq = /^u([1-9][0-9]*)$/.exec(userId)?.[1];
+      if (seq === undefined || this.db.query("SELECT 1 FROM users WHERE seq = ?").get(Number(seq)) === null) {
+        return { ok: false, error: "You are no longer on this tracker's list." };
+      }
+      this.db.query("DELETE FROM api_tokens WHERE expires_at IS NOT NULL AND expires_at <= ?").run(at);
+      const live = this.db.query("SELECT COUNT(*) AS n FROM api_tokens WHERE user_id = ?").get(userId).n;
+      if (live >= MAX_TOKENS_PER_PERSON) {
+        return { ok: false, error: `You already have ${MAX_TOKENS_PER_PERSON} API tokens, the most one person may. Revoke one first.` };
+      }
+      const token = `${TOKEN_PREFIX}${randomToken()}`;
+      const expiresAt = new Date(now.getTime() + input.days * DAY_MS3).toISOString();
+      const r = this.db.query(`INSERT INTO api_tokens (token_hash, user_id, name, created_at, expires_at, last_used_at, member_checked_at)
+           VALUES (?, ?, ?, ?, ?, NULL, ?) RETURNING ${COLUMNS}`).get(sha256(token), userId, name, at, expiresAt, memberCheckedAt);
+      return { ok: true, token, row: toToken(r) };
+    })();
+  }
+  find(token, now) {
+    if (!isApiTokenShape(token))
+      return null;
+    const r = this.db.query(`SELECT ${COLUMNS} FROM api_tokens WHERE token_hash = ? AND (expires_at IS NULL OR expires_at > ?)`).get(sha256(token), now.toISOString());
+    return r ? toToken(r) : null;
+  }
+  get(id) {
+    if (!isTokenId(id))
+      return null;
+    const r = this.db.query(`SELECT ${COLUMNS} FROM api_tokens WHERE seq = ?`).get(Number(id.slice(1)));
+    return r ? toToken(r) : null;
+  }
+  listFor(userId, now) {
+    const rows = this.db.query(`SELECT ${COLUMNS} FROM api_tokens WHERE user_id = ? AND (expires_at IS NULL OR expires_at > ?) ORDER BY seq`).all(userId, now.toISOString());
+    return rows.map(toToken);
+  }
+  touch(token, now) {
+    if (!isTokenId(token.id))
+      return false;
+    if (token.lastUsedAt !== null && now.getTime() - Date.parse(token.lastUsedAt) < TOUCH_EVERY_MS && Date.parse(token.lastUsedAt) <= now.getTime())
+      return false;
+    const cutoff = new Date(now.getTime() - TOUCH_EVERY_MS).toISOString();
+    return this.db.query("UPDATE api_tokens SET last_used_at = ? WHERE seq = ? AND (last_used_at IS NULL OR last_used_at <= ? OR last_used_at > ?)").run(now.toISOString(), Number(token.id.slice(1)), cutoff, now.toISOString()).changes > 0;
+  }
+  revokeOwn(userId, id) {
+    if (!isTokenId(id))
+      return false;
+    return this.db.query("DELETE FROM api_tokens WHERE seq = ? AND user_id = ?").run(Number(id.slice(1)), userId).changes > 0;
+  }
+  revokeAny(id) {
+    if (!isTokenId(id))
+      return null;
+    const r = this.db.query("DELETE FROM api_tokens WHERE seq = ? RETURNING user_id").get(Number(id.slice(1)));
+    return r ? r.user_id : null;
+  }
+  deleteForUser(userId) {
+    this.db.query("DELETE FROM api_tokens WHERE user_id = ?").run(userId);
+  }
+  confirmMember(userId, at) {
+    this.db.query("UPDATE api_tokens SET member_checked_at = ? WHERE user_id = ?").run(at, userId);
+  }
+}
+
+// plugins/tracker/src/web/token-pages.ts
+function tokenHref(v, id) {
+  return `${v.base}/tokens/${encodeURIComponent(id)}/revoke`;
+}
+function adminTokenHref(v, id) {
+  return `${v.base}/admin/tokens/${encodeURIComponent(id)}/revoke`;
+}
+function at(iso, viewer, now, none) {
+  return iso ? formatInstant(iso, viewer.timeZone, now) : none;
+}
+function tokenTable(v, tokens, now, href) {
+  if (tokens.length === 0)
+    return html`<p class="rb-muted">None.</p>`;
+  return html`<div class="rb-table-scroll"><table class="rb-table">
+<thead><tr><th>Name</th><th>Made</th><th>Last used</th><th>Expires</th><th></th></tr></thead>
+<tbody>${tokens.map((t) => html`<tr>
+<td>${t.name}</td>
+<td>${at(t.createdAt, v.user, now, "")}</td>
+<td>${at(t.lastUsedAt, v.user, now, "never")}</td>
+<td>${at(t.expiresAt, v.user, now, "never")}</td>
+<td><form method="post" action="${href(t.id)}"><input type="hidden" name="csrf" value="${v.csrf}"><button class="rb-btn rb-btn--danger rb-btn--sm" type="submit">Revoke</button></form></td>
+</tr>`)}</tbody>
+</table></div>`;
+}
+function tokensPage(v, tokens, now, f = {}) {
+  const expiry = f.expiry ?? String(DEFAULT_EXPIRY_DAYS);
+  const choices = TOKEN_EXPIRY_DAYS.map((d) => [String(d), `in ${d} days`]);
+  return framed(v, "API tokens", html`<section>
+<p><a class="rb-link" href="${v.base}/settings">Settings</a></p>
+<h1>API tokens</h1>
+<p>A token lets a program use the tracker's task API as you: list, read, make, edit, pause, resume and delete your own tasks, nothing more. Send it as <code>Authorization: Bearer &lt;token&gt;</code> to <code>${v.base}/api/v1/</code>. Anyone holding it can act as you, so keep it secret, and revoke it when the program no longer needs it. A new token is sent to you by Discord DM, once, and never shown here. At most ${MAX_TOKENS_PER_PERSON}, each for a year at most.</p>
+${f.result ? html`<div class="rb-alert rb-alert--success" role="status"><p>${f.result}</p></div>` : null}
+${f.error ? html`<div class="rb-alert rb-alert--danger" role="alert"><p class="rb-alert__title">Not made</p><p>${f.error}</p></div>` : null}
+${tokenTable(v, tokens, now, (id) => tokenHref(v, id))}
+</section>
+<section>
+<h2>Make a token</h2>
+<form method="post" action="${v.base}/tokens" class="tr-stack">
+<input type="hidden" name="csrf" value="${v.csrf}">
+<div class="rb-field">
+<label class="rb-label" for="name">Name</label>
+<input class="rb-input" id="name" name="name" value="${f.name ?? ""}" maxlength="${MAX_TOKEN_NAME}" required>
+<p class="rb-field__help">What will use it, so you know which to revoke.</p>
+</div>
+<div class="rb-field">
+<label class="rb-label" for="expiry">Expires</label>
+<select class="rb-select" id="expiry" name="expiry">${choices.map(([value, label]) => html`<option value="${value}"${value === expiry ? html` selected` : null}>${label}</option>`)}</select>
+</div>
+<div><button class="rb-btn rb-btn--primary" type="submit">Make token</button></div>
+</form>
+</section>`);
+}
+
+// plugins/tracker/src/web/admin-pages.ts
+var CONFIGURED_NOTE = "Named in TRACKER_ADMIN_DISCORD_IDS: made an admin again at every start, so they cannot be revoked or removed here. Remove them from the configuration first.";
+var CONFIRM_WORD = "forget";
+function nameOf(p, fallback = "someone") {
+  if (!p)
+    return fallback;
+  return p.displayName ?? p.id;
+}
+function unmention(text) {
+  return text.replace(/<@([0-9]{17,20})>/g, "$1");
+}
+function flash(result) {
+  if (!result)
+    return null;
+  const text = prose(unmention(result.text));
+  return result.ok ? html`<div class="rb-alert rb-alert--success" role="status"><p>${text}</p></div>` : html`<div class="rb-alert rb-alert--danger" role="alert"><p>${text}</p></div>`;
+}
+function hidden(v) {
+  return html`<input type="hidden" name="csrf" value="${v.csrf}">`;
+}
+function adminNav(v) {
+  return html`<p class="tr-row"><a class="rb-link" href="${v.base}/admin">People</a> <a class="rb-link" href="${v.base}/admin/tasks">All tasks</a></p>`;
+}
+function personHref(v, id, action = "") {
+  return `${v.base}/admin/people/${encodeURIComponent(id)}${action ? `/${action}` : ""}`;
+}
+function admittedBy(p, names) {
+  if (p.admittedBy === null)
+    return "the configuration";
+  if (p.admittedBy === FORGOTTEN)
+    return "an admin since forgotten";
+  return names.get(p.admittedBy) ?? p.admittedBy;
+}
+function delivery(p, viewer, now) {
+  if (p.deliveryPausedAt)
+    return `paused since ${formatInstant(p.deliveryPausedAt, viewer.timeZone, now)}`;
+  return p.failures > 0 ? `on (${p.failures} failed in a row)` : "on";
+}
+function counts(p) {
+  const o = p.owned;
+  return `${o.active} active, ${o.paused} paused, ${o.done} done, ${o.archived} deleted; receives ${p.receiving}`;
+}
+function adminPage(v, data, o = {}) {
+  const names = new Map(data.people.map((p) => [p.id, nameOf(p)]));
+  const rows = data.people.map((p) => html`<tr>
+<td><a class="rb-link" href="${personHref(v, p.id)}">${nameOf(p)}</a>${p.admin ? html` <span class="rb-badge">admin</span>` : null}</td>
+<td>${p.registeredAt ? "registered" : "admitted, not registered"}</td>
+<td>${p.timeZone}, ${String(p.preferredHour).padStart(2, "0")}:00</td>
+<td>${delivery(p, v.user, data.now)}</td>
+<td>${counts(p)}</td>
+</tr>`);
+  const blocks = data.blocks.length === 0 ? html`<p class="rb-muted">No decline blocks are in force.</p>` : html`<ul>${data.blocks.map((b) => html`<li class="tr-row">${names.get(b.ownerId) ?? b.ownerId} may not invite ${names.get(b.recipientId) ?? b.recipientId} ${b.expiresAt ? `until ${formatInstant(b.expiresAt, v.user.timeZone, data.now)}` : "until an admin lifts it"}
+<form method="post" action="${v.base}/admin/blocks/${encodeURIComponent(b.id)}/lift">${hidden(v)}<button class="rb-btn rb-btn--ghost rb-btn--sm" type="submit">Lift</button></form></li>`)}</ul>`;
+  return framed(v, "Admin", html`<section>
+<h1>People</h1>
+${adminNav(v)}
+${flash(o.result ?? null)}
+<div class="rb-table-scroll"><table class="rb-table">
+<thead><tr><th scope="col">Person</th><th scope="col">Status</th><th scope="col">Zone, hour</th><th scope="col">Delivery</th><th scope="col">Tasks</th></tr></thead>
+<tbody>${rows}</tbody>
+</table></div>
+<p class="rb-muted">Admitted by: ${data.people.map((p) => `${nameOf(p)} -- ${admittedBy(p, names)}`).join("; ")}.</p>
+</section>
+<section>
+<h2>Allow a person</h2>
+<form method="post" action="${v.base}/admin/allow" class="tr-stack">
+${hidden(v)}
+<div class="rb-field">
+<label class="rb-label" for="discord_id">Discord user id</label>
+<input class="rb-input" id="discord_id" name="discord_id" value="${o.allow ?? ""}" maxlength="20" inputmode="numeric" required>
+<p class="rb-field__help">What <code>/allow</code> does: they can then <code>/register</code>.</p>
+</div>
+<div><button class="rb-btn rb-btn--primary" type="submit">Allow</button></div>
+</form>
+</section>
+<section>
+<h2>Decline blocks</h2>
+${blocks}
+</section>`);
+}
+function adminTasksPage(v, tasks) {
+  const rows = tasks.map(({ task, owner, receiving }) => html`<tr>
+<td><a class="rb-link" href="${taskHref(v, task.id)}">${task.title}</a></td>
+<td>${task.type}</td>
+<td>${owner}</td>
+<td>${task.status === "archived" ? "deleted" : task.status}</td>
+<td>${receiving}</td>
+</tr>`);
+  return framed(v, "All tasks", html`<section>
+<h1>All tasks</h1>
+${adminNav(v)}
+${tasks.length === 0 ? html`<p class="rb-muted">There are no tasks.</p>` : html`<div class="rb-table-scroll"><table class="rb-table">
+<thead><tr><th scope="col">Task</th><th scope="col">Type</th><th scope="col">Owner</th><th scope="col">Status</th><th scope="col">Recipients</th></tr></thead>
+<tbody>${rows}</tbody>
+</table></div>`}
+</section>`);
+}
+function post2(v, p, action, label, style) {
+  return html`<form method="post" action="${personHref(v, p.id, action)}">${hidden(v)}<button class="rb-btn ${style} rb-btn--sm" type="submit">${label}</button></form>`;
+}
+function personPage(v, p, tasks, now, result = null, configured = false, tokens = []) {
+  return framed(v, nameOf(p), html`<section>
+${adminNav(v)}
+<h1>${nameOf(p)}${p.admin ? html` <span class="rb-badge">admin</span>` : null}</h1>
+${flash(result)}
+<ul>
+<li>Discord id: ${p.discordId ?? "none"}</li>
+<li>${p.registeredAt ? `Registered ${formatInstant(p.registeredAt, v.user.timeZone, now)}` : "Admitted, not registered yet"}</li>
+<li>Zone and hour: ${p.timeZone}, ${String(p.preferredHour).padStart(2, "0")}:00</li>
+<li>Delivery: ${delivery(p, v.user, now)}</li>
+<li>Tasks: ${counts(p)}</li>
+</ul>
+${configured ? html`<p class="rb-muted">${CONFIGURED_NOTE}</p>` : null}
+<div class="tr-row">
+${p.admin ? configured ? null : post2(v, p, "revoke", "Revoke admin", "rb-btn--ghost") : post2(v, p, "grant", "Make admin", "rb-btn--ghost")}
+${p.deliveryPausedAt ? post2(v, p, "resume-delivery", "Resume delivery", "rb-btn--accent") : null}
+${configured && p.id !== v.user.id ? null : post2(v, p, "forget", "Remove from the tracker", "rb-btn--danger")}
+</div>
+</section>
+<section>
+<h2>Their tasks</h2>
+${tasks.length === 0 ? html`<p class="rb-muted">None.</p>` : html`<ul>${tasks.map((t) => html`<li><a class="rb-link" href="${taskHref(v, t.id)}">${t.title}</a> -- ${t.type}, ${t.status === "archived" ? "deleted" : t.status}</li>`)}</ul>`}
+</section>
+<section>
+<h2>Their API tokens</h2>
+<p class="rb-muted">Each acts as them on their own tasks. Revoking one stops it at once; they are not told.</p>
+${tokenTable(v, tokens, now, (id) => adminTokenHref(v, id))}
+</section>`);
+}
+var WHAT_GOES = "every task (deleted ones too) with its runs, replies and history; your replies, answers and history on other people's tasks, " + "and your place on the tasks shared with you; decline blocks either way; delivery pauses; your settings, sign-in sessions and API tokens; and your place on the list.";
+function forgetPage(v, note) {
+  return framed(v, "Forget me", html`<section class="rb-card">
+<h1>Forget me</h1>
+<p>This deletes everything the tracker holds about you, at once and for good: ${WHAT_GOES}</p>
+<p>Nothing is kept or archived. Messages the bot already sent you stay in your Discord DMs, where only you can delete them. To use the tracker again later, an admin has to <code>/allow</code> you again, and you start from nothing.</p>
+${note ? html`<div class="rb-alert rb-alert--warning" role="note"><p>${note}</p></div>` : null}
+<form method="post" action="${v.base}/forget">${hidden(v)}<button class="rb-btn rb-btn--danger" type="submit">Continue</button></form>
+</section>`);
+}
+function confirmForgetPage(v, o) {
+  const title = o.self ? "Delete everything about you?" : `Remove ${o.name} from the tracker?`;
+  const what = o.self ? html`<p>Everything the tracker holds about you is deleted: ${WHAT_GOES} You are signed out.</p>` : html`<p>Everything the tracker holds about ${o.name} is deleted, as forget-me deletes it: their tasks, their replies and history, blocks, pauses, settings and sessions. They are signed out and must be allowed again to come back.</p>`;
+  return framed(v, o.self ? "Forget me" : `Remove ${o.name}`, html`<section class="rb-card">
+<h1>${title}</h1>
+${what}
+${o.note ? html`<div class="rb-alert rb-alert--warning" role="note"><p>${o.note}</p></div>` : null}
+${o.error ? html`<div class="rb-alert rb-alert--danger" role="alert"><p>${o.error}</p></div>` : null}
+<form method="post" action="${o.action}" class="tr-stack">
+${hidden(v)}
+<input type="hidden" name="confirm" value="yes">
+<div class="rb-field">
+<label class="rb-label" for="word">Type ${CONFIRM_WORD} to confirm</label>
+<input class="rb-input" id="word" name="word" maxlength="20" autocomplete="off" required>
+</div>
+<div class="tr-row"><button class="rb-btn rb-btn--danger" type="submit">${o.self ? "Delete everything" : "Remove"}</button>
+<a class="rb-btn rb-btn--ghost" href="${o.self ? `${v.base}/settings` : `${v.base}/admin`}">Keep</a></div>
+</form>
+</section>`);
+}
+
+// plugins/tracker/src/web/admin.ts
+function unknownPage(base) {
+  return htmlResponse(notFoundPage(base), 404);
+}
+function fresh(a, admin, fn) {
+  return a.queue(async () => {
+    const me = await a.d.store.getUser(a.v.user.id);
+    if (!me || admin && !me.admin)
+      return null;
+    return fn(me);
+  });
+}
+function said2(done) {
+  return done.ok ? { ok: true, text: done.text } : { ok: false, text: done.error };
+}
+function confirmed(form) {
+  if (form.get("confirm") !== "yes")
+    return "ask";
+  return (form.get("word") ?? "").trim().toLowerCase() === CONFIRM_WORD ? "yes" : "wrong";
+}
+var WRONG_WORD = `Type ${CONFIRM_WORD} to confirm. Nothing was deleted.`;
+async function peoplePage(a, result, status, allow) {
+  const data = { people: a.d.roster.people(), blocks: a.d.roster.activeBlocks(a.d.clock.now()), now: a.d.clock.now() };
+  return htmlResponse(adminPage(a.v, data, { result, ...allow !== undefined ? { allow } : {} }), status);
+}
+async function onePerson(a, id, result = null) {
+  const p = a.d.roster.people().find((x) => x.id === id);
+  if (!p)
+    return htmlResponse(notFoundPage(a.v.base, a.v), 404);
+  const tasks = await a.d.store.listTasks({ ownerId: p.id });
+  const tokens = a.d.apiTokens.listFor(p.id, a.d.clock.now());
+  return htmlResponse(personPage(a.v, p, tasks, a.d.clock.now(), result, isConfiguredAdmin(a.d, p), tokens), result && !result.ok ? 400 : 200);
+}
+async function adminGet(a, r) {
+  if (r.kind === "admin")
+    return peoplePage(a, null, 200);
+  if (r.kind === "admin-person")
+    return onePerson(a, r.id);
+  const people = new Map(a.d.roster.people().map((p) => [p.id, nameOf(p)]));
+  const rows = [];
+  for (const task of await a.d.store.listTasks()) {
+    const receiving = (await a.d.store.listRecipients(task.id)).filter((x) => x.state === "accepted").length;
+    rows.push({ task, owner: people.get(task.ownerId) ?? task.ownerId, receiving });
+  }
+  return htmlResponse(adminTasksPage(a.v, rows));
+}
+async function adminPost(a, r, form) {
+  const base = a.v.base;
+  if (r.kind === "admin-allow") {
+    const raw = (form.get("discord_id") ?? "").trim();
+    if (!/^[0-9]{17,20}$/.test(raw))
+      return peoplePage(a, { ok: false, text: "That is not a Discord user id (17 to 20 digits)." }, 400, raw.slice(0, 20));
+    const membership = await a.memberOf(raw);
+    const text = await fresh(a, true, (me) => allowPerson(a.d, me, { discordId: raw, bot: false, membership }));
+    if (text === null)
+      return unknownPage(base);
+    const ok = text.startsWith("Allowed") || text.includes("already on the list");
+    return peoplePage(a, { ok, text }, ok ? 200 : 400);
+  }
+  if (r.kind === "admin-lift") {
+    const done = await fresh(a, true, (me) => liftDeclineBlock(a.d, me, r.id));
+    if (done === null)
+      return unknownPage(base);
+    return peoplePage(a, said2(done), done.ok ? 200 : 400);
+  }
+  if (r.kind === "admin-token-revoke") {
+    const owner = await fresh(a, true, async (me) => {
+      const whose = a.d.apiTokens.revokeAny(r.id);
+      if (whose !== null)
+        a.d.log.info(`${me.id} revoked API token ${r.id} of ${whose}`);
+      return { whose };
+    });
+    if (owner === null)
+      return unknownPage(base);
+    if (owner.whose === null)
+      return htmlResponse(notFoundPage(base, a.v), 404);
+    return onePerson(a, owner.whose, { ok: true, text: "Revoked: that token no longer works." });
+  }
+  if (r.kind !== "admin-act")
+    return unknownPage(base);
+  if (r.action === "forget") {
+    const target = a.d.roster.people().find((x) => x.id === r.id);
+    if (!target)
+      return htmlResponse(notFoundPage(base, a.v), 404);
+    const step = confirmed(form);
+    const self = target.id === a.v.user.id;
+    const note = self && isConfiguredAdmin(a.d, target) ? { note: CONFIGURED_SELF } : {};
+    const page = (error) => confirmForgetPage(a.v, { action: personHref(a.v, target.id, "forget"), self, name: nameOf(target), ...note, ...error ? { error } : {} });
+    if (step === "ask")
+      return htmlResponse(page());
+    if (step === "wrong")
+      return htmlResponse(page(WRONG_WORD), 400);
+    if (!await ticksSettled(a.d))
+      return htmlResponse(page(BUSY), 503);
+    const done = await fresh(a, true, (me) => forgetPerson(a.d, me, target.id));
+    if (done === null)
+      return unknownPage(base);
+    if (!done.ok)
+      return htmlResponse(page(done.error), done.error === NO_SUCH_PERSON ? 404 : done.error === BUSY ? 503 : 400);
+    if (self)
+      return redirect(`${base}/signin?forgotten=1`, [a.signOutCookie]);
+    return peoplePage(a, said2(done), 200);
+  }
+  const act = r.action === "grant" ? (me) => setAdminFlag(a.d, me, r.id, true) : r.action === "revoke" ? (me) => setAdminFlag(a.d, me, r.id, false) : (me) => resumeDelivery(a.d, me, r.id);
+  const done = await fresh(a, true, act);
+  if (done === null)
+    return unknownPage(base);
+  if (!done.ok && done.error === NO_SUCH_PERSON)
+    return htmlResponse(notFoundPage(base, a.v), 404);
+  const me = await a.d.store.getUser(a.v.user.id);
+  if (!me?.admin)
+    return redirect(`${base}/`);
+  return onePerson(a, r.id, said2(done));
+}
+async function forgetRoute(a, method, form) {
+  const base = a.v.base;
+  const note = isConfiguredAdmin(a.d, a.v.user) ? CONFIGURED_SELF : undefined;
+  if (method === "GET" || !form)
+    return htmlResponse(forgetPage(a.v, note));
+  const page = (error) => confirmForgetPage(a.v, { action: `${base}/forget`, self: true, name: nameOf(a.v.user), ...note ? { note } : {}, ...error ? { error } : {} });
+  const step = confirmed(form);
+  if (step === "ask")
+    return htmlResponse(page());
+  if (step === "wrong")
+    return htmlResponse(page(WRONG_WORD), 400);
+  if (!await ticksSettled(a.d))
+    return htmlResponse(page(BUSY), 503);
+  const done = await fresh(a, false, (me) => forgetPerson(a.d, me, me.id));
+  if (done === null)
+    return redirect(`${base}/signin`, [a.signOutCookie]);
+  if (!done.ok)
+    return htmlResponse(page(done.error), done.error === BUSY ? 503 : 400);
+  return redirect(`${base}/signin?forgotten=1`, [a.signOutCookie]);
+}
+
+// plugins/tracker/src/edit.ts
+async function owned(d, user, taskId, type) {
+  const task = await ownLiveTask(d, user, taskId);
+  if (!task || task.type !== type)
+    return NO_SUCH_TASK;
+  if (!editable(task))
+    return FINISHED;
+  return task;
+}
+function same(a, b) {
+  return JSON.stringify(a) === JSON.stringify(b);
+}
+async function applyEdit(d, task, user, patch) {
+  const fields = Object.keys(patch);
+  if (fields.length === 0)
+    return task;
+  const at = d.clock.now().toISOString();
+  const updated = await d.store.updateTask(task.id, { ...patch, at });
+  await d.store.addTaskEvent({ taskId: task.id, actorId: user.id, kind: "edited", detail: fields.join(", "), at });
+  return updated;
+}
+async function nextRun(d, task) {
+  const queued = await d.store.listOccurrences({ taskId: task.id, status: "queued" });
+  return queued[0] ?? null;
+}
+function savedText(task, user, next, now, what) {
+  const cadence = task.schedule ? describeSchedule(task.schedule, user, user.timeZone, now) : "no schedule";
+  const when = task.status === "paused" ? "paused" : next ? formatInstant(next.dueAt, user.timeZone, now) : "nothing scheduled";
+  return clip(`Saved \`${task.id}\` ${what}: ${cadence}. Next: ${when}.`);
+}
+var blank = (v) => v === undefined || v.trim() === "";
+async function editReminder(d, user, taskId, input) {
+  const task = await owned(d, user, taskId, "reminder");
+  if (typeof task === "string")
+    return { ok: false, error: task };
+  const config = task.config ?? {};
+  const text = blank(input.text) ? String(config.text ?? "") : input.text;
+  const repeat = input.repeat ?? repeatOf(task.schedule);
+  const plan = reminderPlan(d, user, { text, repeat, ...input.when !== undefined ? { when: input.when } : {} }, task.schedule);
+  if (!plan.ok)
+    return plan;
+  let updated = config.text === plan.text ? task : await applyEdit(d, task, user, { title: clip(plan.text, MAX_TITLE), config: { ...config, text: plan.text } });
+  if (!same(plan.schedule, task.schedule))
+    updated = await rescheduleKeepingSnoozes(d, updated, user, plan.schedule, user.id);
+  return { ok: true, task: updated, text: savedText(updated, user, await nextRun(d, updated), d.clock.now(), "(reminder)") };
+}
+var DAY_MS4 = 24 * 60 * 60 * 1000;
+function periodDateFrom(s, date, owner) {
+  const ctx = { zone: owner.timeZone, preferredHour: owner.preferredHour };
+  let after = new Date(Date.parse(`${date}T00:00:00Z`) - ((s.leadDays ?? 0) + 2) * DAY_MS4);
+  for (let i = 0;i < 1000; i++) {
+    const due = nextDue(s, after, ctx);
+    if (!due)
+      return null;
+    const on = periodDate(s, due, owner.timeZone);
+    if (on >= date)
+      return on;
+    after = due;
+  }
+  return null;
+}
+function renewalDate(task, owner, now) {
+  const s = task.schedule;
+  if (s?.kind !== "period")
+    return "";
+  const w = wallClock(now, owner.timeZone);
+  const today = `${w.year}-${String(w.month).padStart(2, "0")}-${String(w.day).padStart(2, "0")}`;
+  if (s.anchor >= today)
+    return s.anchor;
+  return periodDateFrom(s, today, owner) ?? s.anchor;
+}
+async function askedAbout(d, task, owner, date) {
+  const old = task.schedule;
+  if (old?.kind !== "period")
+    return false;
+  const fired = (await d.store.listOccurrences({ taskId: task.id })).filter((o) => o.status !== "queued" && !o.dedupeKey.startsWith(SNOOZE_PREFIX));
+  return fired.some((o) => periodDate(old, new Date(o.dueAt), owner.timeZone) === date);
+}
+async function editRenewal(d, user, taskId, input) {
+  const task = await owned(d, user, taskId, "renewal");
+  if (typeof task === "string")
+    return { ok: false, error: task };
+  if (task.schedule?.kind !== "period")
+    return { ok: false, error: FINISHED };
+  const old = task.schedule;
+  const now = d.clock.now();
+  const config = task.config;
+  const state = task.state;
+  const carried = state && typeof state.amount === "number" ? state.amount : null;
+  const note = input.note ?? config.note;
+  const plan = renewalPlan(d, user, {
+    name: blank(input.name) ? task.title : input.name,
+    amount: input.amount ?? carried ?? config.amount,
+    currency: blank(input.currency) ? config.currency : input.currency,
+    renews: blank(input.renews) ? renewalDate(task, user, now) : input.renews,
+    every: input.every ?? old.every,
+    unit: input.unit ?? old.unit,
+    lead: input.lead ?? old.leadDays ?? 0,
+    ...note !== undefined ? { note } : {}
+  });
+  if (!plan.ok)
+    return plan;
+  const sameShape = plan.schedule.every === old.every && plan.schedule.unit === old.unit && plan.schedule.leadDays === (old.leadDays ?? 0);
+  const schedule = sameShape && periodDateFrom(old, plan.schedule.anchor, user) === plan.schedule.anchor ? old : plan.schedule;
+  const problems = scheduleProblems(schedule);
+  if (problems.length > 0)
+    return { ok: false, error: `That schedule does not work: ${problems.join("; ")}.` };
+  const patch = {};
+  if (plan.name !== task.title)
+    patch.title = plan.name;
+  const newAmount = plan.amount !== (carried ?? config.amount);
+  const nextConfig = { amount: newAmount ? plan.amount : config.amount, currency: plan.currency, ...plan.note ? { note: plan.note } : {} };
+  if (!same(nextConfig, config))
+    patch.config = nextConfig;
+  if (newAmount && carried !== null)
+    patch.state = { ...state, amount: plan.amount };
+  let updated = await applyEdit(d, task, user, patch);
+  let next = await nextRun(d, updated);
+  if (!same(schedule, old)) {
+    const asked = await askedAbout(d, task, user, schedule.anchor);
+    updated = await rescheduleKeepingSnoozes(d, updated, user, schedule, user.id);
+    next = (asked ? null : await firstAskIfDue(d, updated, user, schedule)) ?? await nextRun(d, updated);
+  }
+  const ask = updated.status === "paused" ? "paused" : askText(next, plan.days, user, now);
+  const cadence = describeSchedule(schedule, user, user.timeZone, now);
+  return { ok: true, task: updated, text: clip(`Saved \`${updated.id}\` (renewal): ${cadence}. Next ask: ${ask}.`) };
+}
+async function editPrice(d, user, taskId, input) {
+  const task = await owned(d, user, taskId, "price");
+  if (typeof task === "string")
+    return { ok: false, error: task };
+  const config = task.config;
+  const schedule = task.schedule;
+  const plan = priceSettingsPlan({
+    name: input.name ?? task.title,
+    hours: input.hours ?? (schedule?.kind === "poll" ? schedule.every : undefined),
+    drop: input.drop ?? config.dropPercent ?? DEFAULT_DROP_PERCENT,
+    baseline: input.baseline ?? config.baseline ?? DEFAULT_BASELINE
+  });
+  if (!plan.ok)
+    return plan;
+  const patch = {};
+  const title = plan.name || titleFor(config.url);
+  if (title !== task.title)
+    patch.title = title;
+  const nextConfig = { ...config, dropPercent: plan.drop, baseline: plan.baseline };
+  if (!same(nextConfig, config))
+    patch.config = nextConfig;
+  let updated = await applyEdit(d, task, user, patch);
+  if (schedule?.kind === "poll" && (schedule.every !== plan.hours || schedule.unit !== "hour")) {
+    const next = { ...schedule, every: plan.hours, unit: "hour" };
+    updated = await rescheduleKeepingSnoozes(d, updated, user, next, user.id);
+  }
+  return { ok: true, task: updated, text: savedText(updated, user, await nextRun(d, updated), d.clock.now(), "(price)") };
+}
+
+// plugins/tracker/src/web/form-input.ts
+var str2 = (form, name) => form.get(name) ?? "";
+var opt = (form, name) => str2(form, name).trim() === "" ? undefined : str2(form, name);
+function int(form, name) {
+  const raw = str2(form, name).trim();
+  if (raw === "")
+    return;
+  return /^[0-9]{1,9}$/.test(raw) ? Number(raw) : Number.NaN;
+}
+function decimal(form, name) {
+  const raw = str2(form, name).trim();
+  if (raw === "")
+    return;
+  return /^[0-9]{1,12}(\.[0-9]{1,6})?$/.test(raw) ? Number(raw) : Number.NaN;
+}
+function typed(type, mode, form) {
+  return Object.fromEntries(fieldsFor(type, mode).map((f) => [f.name, str2(form, f.name)]));
+}
+function reminderInput(form) {
+  const when = opt(form, "when");
+  return { text: str2(form, "text"), ...when !== undefined ? { when } : {}, repeat: str2(form, "repeat") || "none" };
+}
+function renewalInput(form) {
+  const every = int(form, "every");
+  const lead = int(form, "lead");
+  const unit = opt(form, "unit");
+  const note = opt(form, "note");
+  return {
+    name: str2(form, "name"),
+    amount: decimal(form, "amount") ?? Number.NaN,
+    currency: str2(form, "currency"),
+    renews: str2(form, "renews"),
+    ...every !== undefined ? { every } : {},
+    ...lead !== undefined ? { lead } : {},
+    ...unit !== undefined ? { unit } : {},
+    ...note !== undefined ? { note } : {}
+  };
+}
+function priceSettings(form) {
+  const name = opt(form, "name");
+  const hours = int(form, "hours");
+  const drop = decimal(form, "drop");
+  const baseline = opt(form, "baseline");
+  return {
+    ...name !== undefined ? { name } : {},
+    ...hours !== undefined ? { hours } : {},
     ...drop !== undefined ? { drop } : {},
     ...baseline !== undefined ? { baseline } : {}
   };
 }
+function priceInput(form) {
+  const near = opt(form, "near");
+  return { url: str2(form, "url"), ...priceSettings(form), ...near !== undefined ? { near } : {} };
+}
 function reminderEdit(form) {
   const text = opt(form, "text");
   const when = opt(form, "when");
@@ -6239,54 +7047,7 @@ function priceEdit(form) {
   const { name: _name, ...rest } = priceSettings(form);
   return { ...rest, ...form.has("name") ? { name: str2(form, "name") } : {} };
 }
-var DEFAULTS = {
-  reminder: { repeat: "none" },
-  renewal: { unit: "year", every: "1", lead: "7" },
-  price: { hours: "12", drop: "10", baseline: "last" }
-};
-function newGet(e, type) {
-  return htmlResponse(newTaskPage(e.v, type, type === "renewal" ? { ...DEFAULTS.renewal, currency: "USD" } : DEFAULTS[type]));
-}
-async function newPost(e, type, form) {
-  let made;
-  if (type === "reminder")
-    made = await asViewer(e, (u) => createReminder(e.d, u, reminderInput(form)));
-  else if (type === "renewal")
-    made = await asViewer(e, (u) => createRenewal(e.d, u, renewalInput(form)));
-  else {
-    const near = opt(form, "near");
-    const input = { url: str2(form, "url"), ...priceSettings(form), ...near !== undefined ? { near } : {} };
-    const who = e.v.user.id;
-    if (e.reading.has(who))
-      made = { ok: false, error: READING };
-    else {
-      e.reading.add(who);
-      try {
-        const started = await asViewer(e, (u) => startPrice(e.d, u, input));
-        if (!started.ok)
-          made = started;
-        else {
-          const { pending } = started;
-          const seen = await previewPrice(e.d, pending);
-          made = await asViewer(e, (u) => finishPrice(e.d, u, pending, seen));
-        }
-      } finally {
-        e.reading.delete(who);
-      }
-    }
-  }
-  if (!made.ok)
-    return htmlResponse(newTaskPage(e.v, type, typed(type, "new", form), made.error), 400);
-  return redirect(`${taskHref(e.v, made.task.id)}?done=created`);
-}
-async function taskPage(e, id, done, error) {
-  const view = await loadHistory(e.d, e.v.user, id);
-  if (!view)
-    return htmlResponse(notFoundPage(e.v.base, e.v), 404);
-  const controls = view.task.ownerId === e.v.user.id ? ownerControls(e.v, view.task) : null;
-  return htmlResponse(historyPage(e.v, view, { controls, flash: notice(done, error) }), error ? 400 : 200);
-}
-function current(d, user, task) {
+function editValues(d, user, task) {
   const now = d.clock.now();
   if (task.type === "reminder")
     return { text: String(task.config?.text ?? ""), when: "", repeat: repeatOf(task.schedule) };
@@ -6312,28 +7073,93 @@ function current(d, user, task) {
   const every = task.schedule?.kind === "poll" ? task.schedule.every : 12;
   return { name: task.title, hours: String(every), drop: String(c.dropPercent ?? 10), baseline: c.baseline ?? "last" };
 }
+
+// plugins/tracker/src/web/editor.ts
+var READING = "I am still reading the page of your last new price tracker; try again when it is done.";
+var GONE = NO_LONGER_LISTED;
+var writer = (e) => ({ d: e.d, queue: e.queue, reading: e.reading, userId: e.v.user.id });
+function asUser(w, fn) {
+  return w.queue(async () => {
+    const user = await w.d.store.getUser(w.userId);
+    return user ? fn(user) : { ok: false, error: GONE };
+  });
+}
+async function makeTask(w, type, form) {
+  if (type === "reminder")
+    return asUser(w, (u) => createReminder(w.d, u, reminderInput(form)));
+  if (type === "renewal")
+    return asUser(w, (u) => createRenewal(w.d, u, renewalInput(form)));
+  const input = priceInput(form);
+  if (w.reading.has(w.userId))
+    return { ok: false, error: READING };
+  w.reading.add(w.userId);
+  try {
+    const started = await asUser(w, (u) => startPrice(w.d, u, input));
+    if (!started.ok)
+      return started;
+    const { pending } = started;
+    const seen = await previewPrice(w.d, pending);
+    return await asUser(w, (u) => finishPrice(w.d, u, pending, seen));
+  } finally {
+    w.reading.delete(w.userId);
+  }
+}
+async function editableTask(d, user, id) {
+  const task = await ownLiveTask(d, user, id);
+  return task && (task.type === "reminder" || task.type === "renewal" || task.type === "price") ? task : null;
+}
+function saveEdit(w, task, form) {
+  if (task.type === "reminder")
+    return asUser(w, (u) => editReminder(w.d, u, task.id, reminderEdit(form)));
+  if (task.type === "renewal")
+    return asUser(w, (u) => editRenewal(w.d, u, task.id, renewalEdit(form)));
+  return asUser(w, (u) => editPrice(w.d, u, task.id, priceEdit(form)));
+}
+function actOn(w, taskId, action) {
+  const act = action === "pause" ? pauseTask : action === "resume" ? resumeTask : deleteTask;
+  return asUser(w, (u) => act(w.d, u, taskId));
+}
+var DEFAULTS = {
+  reminder: { repeat: "none" },
+  renewal: { unit: "year", every: "1", lead: "7" },
+  price: { hours: "12", drop: "10", baseline: "last" }
+};
+function newGet(e, type) {
+  return htmlResponse(newTaskPage(e.v, type, type === "renewal" ? { ...DEFAULTS.renewal, currency: "USD" } : DEFAULTS[type]));
+}
+async function newPost(e, type, form) {
+  const made = await makeTask(writer(e), type, form);
+  if (!made.ok)
+    return htmlResponse(newTaskPage(e.v, type, typed(type, "new", form), made.error), 400);
+  return redirect(`${taskHref(e.v, made.task.id)}?done=created`);
+}
+async function taskPage(e, id, done, error) {
+  const view = await loadHistory(e.d, e.v.user, id);
+  if (!view)
+    return htmlResponse(notFoundPage(e.v.base, e.v), 404);
+  const own = view.task.ownerId === e.v.user.id;
+  const controls = own ? ownerControls(e.v, view.task) : null;
+  const owner = own ? null : (await e.d.store.getUser(view.task.ownerId))?.displayName ?? view.task.ownerId;
+  return htmlResponse(historyPage(e.v, view, { controls, flash: notice(done, error), owner }), error ? 400 : 200);
+}
 function editPage(e, task, values, error) {
   const now = task.schedule ? describeSchedule(task.schedule, e.v.user, e.v.user.timeZone, e.d.clock.now()) : "no schedule";
   const page = task.type === "price" ? String(task.config.url) : undefined;
   return editTaskPage(e.v, task, values, { now, ...page !== undefined ? { page } : {}, ...error !== undefined ? { error } : {} });
 }
-async function editableTask(e, id) {
-  const task = await ownLiveTask(e.d, e.v.user, id);
-  return task && (task.type === "reminder" || task.type === "renewal" || task.type === "price") ? task : null;
-}
 async function editGet(e, id) {
-  const task = await editableTask(e, id);
+  const task = await editableTask(e.d, e.v.user, id);
   if (!task)
     return htmlResponse(notFoundPage(e.v.base, e.v), 404);
   if (task.status !== "active" && task.status !== "paused")
     return redirect(taskHref(e.v, task.id));
-  return htmlResponse(editPage(e, task, current(e.d, e.v.user, task)));
+  return htmlResponse(editPage(e, task, editValues(e.d, e.v.user, task)));
 }
 async function editPost(e, id, form) {
-  const task = await editableTask(e, id);
+  const task = await editableTask(e.d, e.v.user, id);
   if (!task)
     return htmlResponse(notFoundPage(e.v.base, e.v), 404);
-  const saved = task.type === "reminder" ? await asViewer(e, (u) => editReminder(e.d, u, task.id, reminderEdit(form))) : task.type === "renewal" ? await asViewer(e, (u) => editRenewal(e.d, u, task.id, renewalEdit(form))) : await asViewer(e, (u) => editPrice(e.d, u, task.id, priceEdit(form)));
+  const saved = await saveEdit(writer(e), task, form);
   if (saved.ok)
     return redirect(`${taskHref(e.v, task.id)}?done=saved`);
   if (saved.error === NO_SUCH_TASK)
@@ -6344,10 +7170,9 @@ async function actionPost(e, id, action, form) {
   const task = await ownLiveTask(e.d, e.v.user, id);
   if (!task)
     return htmlResponse(notFoundPage(e.v.base, e.v), 404);
-  if (action === "delete" && str2(form, "confirm") !== "yes")
+  if (action === "delete" && form.get("confirm") !== "yes")
     return htmlResponse(confirmDeletePage(e.v, task));
-  const act = action === "pause" ? pauseTask : action === "resume" ? resumeTask : deleteTask;
-  const done = await asViewer(e, (u) => act(e.d, u, task.id));
+  const done = await actOn(writer(e), task.id, action);
   if (!done.ok)
     return done.error === NO_SUCH_TASK ? htmlResponse(notFoundPage(e.v.base, e.v), 404) : taskPage(e, task.id, null, done.error);
   if (action === "delete")
@@ -6355,17 +7180,469 @@ async function actionPost(e, id, action, form) {
   return redirect(`${taskHref(e.v, task.id)}?done=${action === "pause" ? "paused" : "resumed"}`);
 }
 
+// plugins/tracker/src/web/api-tasks.ts
+function problem(status, code, message, headers) {
+  return { status, body: { error: { code, message } }, ...headers ? { headers } : {} };
+}
+var NOT_FOUND_MESSAGE = "No such task.";
+var notFound = () => problem(404, "not_found", NOT_FOUND_MESSAGE);
+function jsonKind(f) {
+  if (f.kind === "number")
+    return "integer";
+  return f.decimal ? "number" : "string";
+}
+function typesAnswer() {
+  const describe = (fields, mode) => fields.map((f) => ({
+    name: f.name,
+    type: jsonKind(f),
+    required: mode === "new" && f.required === true,
+    description: f.help ? `${f.label}. ${f.help}` : f.label,
+    ...f.maxlength !== undefined ? { maxLength: f.maxlength } : {},
+    ...f.min !== undefined ? { minimum: f.min } : {},
+    ...f.max !== undefined ? { maximum: f.max } : {},
+    ...f.options ? { enum: f.options.map(([value]) => value) } : {}
+  }));
+  return {
+    status: 200,
+    body: { types: EDITOR_TYPES.map((type) => ({ type, create: describe(fieldsFor(type, "new"), "new"), edit: describe(fieldsFor(type, "edit"), "edit") })) }
+  };
+}
+function asFields(body, type, mode) {
+  const fields = new Map(fieldsFor(type, mode).map((f) => [f.name, f]));
+  const form = new URLSearchParams;
+  for (const [key, value] of Object.entries(body)) {
+    if (mode === "new" && key === "type")
+      continue;
+    const f = fields.get(key);
+    if (!f)
+      return problem(400, "unknown_field", `\`${key.slice(0, 40)}\` is not a field of a ${type}${mode === "edit" ? " edit" : ""}. GET types lists them.`);
+    const kind = jsonKind(f);
+    if (kind === "string") {
+      if (typeof value !== "string")
+        return problem(400, "invalid", `\`${key}\` must be a string.`);
+      form.set(key, value);
+    } else {
+      if (typeof value !== "number" || !Number.isFinite(value))
+        return problem(400, "invalid", `\`${key}\` must be a number.`);
+      form.set(key, String(value));
+    }
+  }
+  return form;
+}
+function refusal(error) {
+  if (error === NO_SUCH_TASK)
+    return notFound();
+  if (error === NO_LONGER_LISTED)
+    return problem(401, "invalid_token", "The token's owner is no longer on this tracker's list.");
+  if (error === READING)
+    return problem(409, "busy", error);
+  if (error === FINISHED || /^That task is [a-z]+, not [a-z]+\.$/.test(error))
+    return problem(409, "conflict", error);
+  if (/^You already (have|track) [0-9]+ /.test(error))
+    return problem(409, "limit_reached", error);
+  if (/ (is|are) not available on this bot\.$/.test(error))
+    return problem(503, "unavailable", error);
+  return problem(400, "invalid", error);
+}
+async function nextAt(d, task) {
+  if (task.status !== "active")
+    return null;
+  const queued = await d.store.listOccurrences({ taskId: task.id, status: "queued" });
+  return queued[0]?.dueAt ?? null;
+}
+async function taskJson(d, user, task) {
+  const type = EDITOR_TYPES.includes(task.type) ? task.type : null;
+  const values = editValues(d, user, task);
+  const settings = {};
+  if (type) {
+    for (const f of fieldsFor(type, "edit")) {
+      if (f.name === "when")
+        continue;
+      const raw = values[f.name];
+      if (raw === undefined)
+        continue;
+      settings[f.name] = jsonKind(f) === "string" ? raw : Number(raw);
+    }
+  }
+  return {
+    id: task.id,
+    type: task.type,
+    title: task.title,
+    status: task.status === "archived" ? "deleted" : task.status,
+    cadence: task.schedule ? describeSchedule(task.schedule, user, user.timeZone, d.clock.now()) : "no schedule",
+    nextAt: await nextAt(d, task),
+    createdAt: task.createdAt,
+    updatedAt: task.updatedAt,
+    settings,
+    ...task.type === "price" ? { url: String(task.config.url) } : {}
+  };
+}
+async function listAnswer(d, user) {
+  const tasks = (await d.store.listTasks({ ownerId: user.id })).filter((t) => t.status !== "archived");
+  const out = [];
+  for (const t of tasks)
+    out.push(await taskJson(d, user, t));
+  return { status: 200, body: { tasks: out } };
+}
+async function getAnswer(d, user, id) {
+  const task = await ownTask(d, user, id);
+  if (!task)
+    return notFound();
+  const view = await loadHistory(d, user, task.id);
+  if (!view)
+    return notFound();
+  return {
+    status: 200,
+    body: {
+      task: await taskJson(d, user, view.task),
+      history: { next: view.next, runs: view.runs, earlierRuns: view.earlierRuns, changes: view.changes, earlierChanges: view.earlierChanges }
+    }
+  };
+}
+async function written(w, user, result, status, base) {
+  if (!result.ok)
+    return refusal(result.error);
+  const task = await w.d.store.getTask(result.task.id) ?? result.task;
+  return {
+    status,
+    body: { task: await taskJson(w.d, user, task), message: result.text },
+    ...status === 201 ? { headers: { Location: `${base}/tasks/${encodeURIComponent(task.id)}` } } : {}
+  };
+}
+async function createAnswer(w, user, body, base) {
+  const type = body.type;
+  if (typeof type !== "string" || !EDITOR_TYPES.includes(type)) {
+    return problem(400, "invalid", `\`type\` is one of ${EDITOR_TYPES.join(", ")}.`);
+  }
+  const form = asFields(body, type, "new");
+  if (!(form instanceof URLSearchParams))
+    return form;
+  return written(w, user, await makeTask(w, type, form), 201, base);
+}
+async function editAnswer(w, user, id, body, base) {
+  const task = await editableTask(w.d, user, id);
+  if (!task)
+    return notFound();
+  const form = asFields(body, task.type, "edit");
+  if (!(form instanceof URLSearchParams))
+    return form;
+  return written(w, user, await saveEdit(w, task, form), 200, base);
+}
+async function actAnswer(w, user, id, action) {
+  const task = await ownTask(w.d, user, id);
+  if (!task || task.status === "archived")
+    return notFound();
+  const done = await actOn(w, task.id, action);
+  if (!done.ok)
+    return refusal(done.error);
+  const after = await w.d.store.getTask(task.id) ?? task;
+  return { status: 200, body: { task: await taskJson(w.d, user, after), message: done.text } };
+}
+
+// plugins/tracker/src/web/api.ts
+var API_PREFIX = "/api/v1";
+var MAX_API_BYTES = 16 * 1024;
+var RATE_BURST = 60;
+var RATE_PER_SECOND = 1;
+var FAILED_BURST = 30;
+var FAILED_PER_SECOND = 0.5;
+var FAILED_KEY = "failed";
+
+class RateLimiter {
+  burst;
+  perSecond;
+  buckets = new Map;
+  constructor(burst, perSecond) {
+    this.burst = burst;
+    this.perSecond = perSecond;
+  }
+  take(key, nowMs) {
+    const b = this.buckets.get(key);
+    const elapsed = b ? Math.max(0, nowMs - b.at) / 1000 : 0;
+    const tokens = b ? Math.min(this.burst, b.tokens + elapsed * this.perSecond) : this.burst;
+    if (tokens < 1) {
+      this.buckets.set(key, { tokens, at: nowMs });
+      return Math.max(1, Math.ceil((1 - tokens) / this.perSecond));
+    }
+    this.buckets.set(key, { tokens: tokens - 1, at: nowMs });
+    if (this.buckets.size > 1e4) {
+      for (const [k, v] of this.buckets)
+        if (v.tokens + (nowMs - v.at) / 1000 * this.perSecond >= this.burst)
+          this.buckets.delete(k);
+    }
+    return 0;
+  }
+}
+var HEADERS = {
+  "Content-Type": "application/json; charset=utf-8",
+  "Cache-Control": "no-store",
+  "X-Content-Type-Options": "nosniff",
+  "Content-Security-Policy": "default-src 'none'; frame-ancestors 'none'",
+  "Referrer-Policy": "no-referrer"
+};
+function json2(a) {
+  return new Response(JSON.stringify(a.body), { status: a.status, headers: { ...HEADERS, ...a.headers ?? {} } });
+}
+var CHALLENGE = 'Bearer realm="tracker"';
+function bearer(header) {
+  if (header === null)
+    return null;
+  const m = /^Bearer +([^\s]+) *$/i.exec(header);
+  return m?.[1] ?? null;
+}
+var ACT = /^\/tasks\/([^/]+)\/(pause|resume)$/;
+var ONE = /^\/tasks\/([^/]+)$/;
+function segment(raw) {
+  try {
+    return decodeURIComponent(raw ?? "");
+  } catch {
+    return "";
+  }
+}
+function route(rest) {
+  if (rest === "/me")
+    return { kind: "me" };
+  if (rest === "/types")
+    return { kind: "types" };
+  if (rest === "/tasks")
+    return { kind: "tasks" };
+  const act = ACT.exec(rest);
+  if (act)
+    return { kind: "act", id: segment(act[1]), action: act[2] };
+  const one = ONE.exec(rest);
+  return one ? { kind: "task", id: segment(one[1]) } : null;
+}
+function allowedMethods(r) {
+  if (r.kind === "tasks")
+    return "GET, POST";
+  if (r.kind === "task")
+    return "GET, PATCH, DELETE";
+  if (r.kind === "act")
+    return "POST";
+  return "GET";
+}
+async function readJson(request) {
+  const type = (request.headers.get("content-type") ?? "").trim();
+  const no = (answer) => ({ ok: false, answer });
+  if (!/^application\/json *(;.*)?$/i.test(type))
+    return no(problem(415, "unsupported_media_type", "Send the body as Content-Type: application/json."));
+  const text = await readBody(request, MAX_API_BYTES);
+  if (text === null)
+    return no(problem(413, "too_large", `The body is over ${MAX_API_BYTES} bytes.`));
+  let value;
+  try {
+    value = JSON.parse(text);
+  } catch {
+    return no(problem(400, "invalid_json", "The body is not JSON."));
+  }
+  if (typeof value !== "object" || value === null || Array.isArray(value))
+    return no(problem(400, "invalid_json", "The body must be a JSON object."));
+  return { ok: true, body: value };
+}
+async function authenticate(w, request) {
+  const { d } = w;
+  const no = (answer) => ({ ok: false, answer });
+  const header = request.headers.get("authorization");
+  if (header === null)
+    return no(problem(401, "unauthorized", "Send Authorization: Bearer <token>. Make a token on the web area's API tokens page.", { "WWW-Authenticate": CHALLENGE }));
+  const invalid = problem(401, "invalid_token", "That token is unknown, revoked or expired.", { "WWW-Authenticate": `${CHALLENGE}, error="invalid_token"` });
+  const sent = bearer(header);
+  const now = d.clock.now();
+  const token = sent === null ? null : d.apiTokens.find(sent, now);
+  if (!token) {
+    const waitFailed = w.failed.take(FAILED_KEY, now.getTime());
+    if (waitFailed > 0)
+      return no(problem(429, "rate_limited", `Too many requests with bad tokens; try again in ${waitFailed} s.`, { "Retry-After": String(waitFailed) }));
+    return no(invalid);
+  }
+  const wait = w.limiter.take(token.id, now.getTime());
+  if (wait > 0)
+    return no(problem(429, "rate_limited", `Too many requests with this token; try again in ${wait} s.`, { "Retry-After": String(wait) }));
+  const user = await d.store.getUser(token.userId);
+  if (!user || !d.admissions.isRegistered(user.id)) {
+    d.apiTokens.deleteForUser(token.userId);
+    return no(invalid);
+  }
+  const found = await w.recheck(user, token.memberCheckedAt);
+  if (found === "not-member")
+    return no(problem(403, "not_member", "The token's owner is no longer a member of this tracker's server; their tokens are revoked."));
+  if (found === "unknown")
+    return no(problem(503, "membership_unknown", "I could not check that the token's owner is still a member of this tracker's server; try again later.", { "Retry-After": "60" }));
+  const current = d.apiTokens.find(sent, d.clock.now());
+  if (!current)
+    return no(invalid);
+  d.apiTokens.touch(current, d.clock.now());
+  return { ok: true, token: current, user };
+}
+async function handleApi(w, request, path) {
+  if (request.headers.get("origin") !== null)
+    return json2(problem(403, "origin_refused", "The task API is not for browsers: send no Origin header."));
+  const auth = await authenticate(w, request);
+  if (!auth.ok)
+    return json2(auth.answer);
+  const { user } = auth;
+  const r = path.startsWith(`${API_PREFIX}/`) ? route(path.slice(API_PREFIX.length)) : null;
+  if (r === null)
+    return json2(problem(404, "not_found", "No such endpoint."));
+  const allowed = allowedMethods(r);
+  const method = request.method;
+  if (!allowed.split(", ").includes(method))
+    return json2(problem(405, "method_not_allowed", `Use ${allowed}.`, { Allow: allowed }));
+  const writer = { d: w.d, queue: w.queue, reading: w.reading, userId: user.id };
+  const base = `${w.base}${API_PREFIX}`;
+  if (method === "POST" || method === "PATCH") {
+    const read = await readJson(request);
+    if (!read.ok)
+      return json2(read.answer);
+    const { body } = read;
+    if (r.kind === "tasks")
+      return json2(await createAnswer(writer, user, body, base));
+    if (r.kind === "task")
+      return json2(await editAnswer(writer, user, r.id, body, base));
+    if (r.kind === "act") {
+      if (Object.keys(body).length > 0)
+        return json2(problem(400, "unknown_field", `\`${r.action}\` takes no fields: send {}.`));
+      return json2(await actAnswer(writer, user, r.id, r.action));
+    }
+  }
+  if (method === "DELETE" && r.kind === "task")
+    return json2(await actAnswer(writer, user, r.id, "delete"));
+  if (r.kind === "types")
+    return json2(typesAnswer());
+  if (r.kind === "tasks")
+    return json2(await listAnswer(w.d, user));
+  if (r.kind === "task")
+    return json2(await getAnswer(w.d, user, r.id));
+  return json2({
+    status: 200,
+    body: {
+      user: { id: user.id, name: user.displayName, timeZone: user.timeZone, preferredHour: user.preferredHour },
+      token: { id: auth.token.id, name: auth.token.name, createdAt: auth.token.createdAt, expiresAt: auth.token.expiresAt }
+    }
+  });
+}
+
+// plugins/tracker/src/web/tokens.ts
+var MAX_CREATIONS_PER_HOUR = 10;
+var HOUR_MS = 60 * 60 * 1000;
+var TOO_MANY_CREATED = `You have made ${MAX_CREATIONS_PER_HOUR} tokens in the last hour, the most one person may. Try again later.`;
+
+class CreationLog {
+  made = new Map;
+  recent(userId, nowMs) {
+    const times = (this.made.get(userId) ?? []).filter((t) => t > nowMs - HOUR_MS && t <= nowMs);
+    if (times.length === 0)
+      this.made.delete(userId);
+    else
+      this.made.set(userId, times);
+    return times;
+  }
+  full(userId, nowMs) {
+    return this.recent(userId, nowMs).length >= MAX_CREATIONS_PER_HOUR;
+  }
+  record(userId, nowMs) {
+    this.made.set(userId, [...this.recent(userId, nowMs), nowMs]);
+  }
+}
+var TOKEN_SENT = "Your new token is in your Discord DMs from this bot. It is not shown here, and the tracker keeps only a hash of it.";
+var TOKEN_NOT_SENT = "I could not DM you the token, so none was made. Open your DMs from this server's members and try again.";
+function tokenMessage(name, token, expiresAt) {
+  return [
+    `Your tracker API token "${name}"${expiresAt ? `, expiring ${expiresAt.slice(0, 10)}` : ""}:`,
+    `\`${token}\``,
+    "Anyone holding it can use the tracker's task API as you: keep it secret, and revoke it on the web area's API tokens page when you no longer need it. If you did not make it, revoke it now."
+  ].join(`
+`);
+}
+function tokensGet(d, v) {
+  return htmlResponse(tokensPage(v, d.apiTokens.listFor(v.user.id, d.clock.now()), d.clock.now()));
+}
+async function tokensPost(d, v, session, form, log) {
+  const now = d.clock.now();
+  const name = (form.get("name") ?? "").slice(0, 200);
+  const expiry = form.get("expiry") ?? String(DEFAULT_EXPIRY_DAYS);
+  const days = expiryChoice(expiry);
+  const refuse = (error) => htmlResponse(tokensPage(v, d.apiTokens.listFor(v.user.id, d.clock.now()), d.clock.now(), { error, name, expiry: days === undefined ? String(DEFAULT_EXPIRY_DAYS) : expiry }), 400);
+  if (days === undefined)
+    return refuse("Choose when the token expires.");
+  const discordId = v.user.discordId;
+  if (!d.dm || !discordId)
+    return refuse(TOKEN_NOT_SENT);
+  if (log.full(v.user.id, now.getTime()))
+    return refuse(TOO_MANY_CREATED);
+  const made = d.apiTokens.create(v.user.id, { name, days }, now, session.memberCheckedAt);
+  if (!made.ok)
+    return refuse(made.error);
+  log.record(v.user.id, now.getTime());
+  try {
+    await d.dm(discordId, { content: tokenMessage(made.row.name, made.token, made.row.expiresAt) });
+  } catch (err) {
+    d.apiTokens.revokeOwn(v.user.id, made.row.id);
+    d.log.warn(`${v.user.id}'s API token ${made.row.id} deleted: the DM carrying it failed (${err instanceof Error ? err.message : String(err)})`);
+    return refuse(TOKEN_NOT_SENT);
+  }
+  d.log.info(`${v.user.id} made API token ${made.row.id}`);
+  return htmlResponse(tokensPage(v, d.apiTokens.listFor(v.user.id, d.clock.now()), d.clock.now(), { result: `"${made.row.name}": ${TOKEN_SENT}` }));
+}
+function tokenRevokePost(d, v, id) {
+  if (!d.apiTokens.revokeOwn(v.user.id, id))
+    return htmlResponse(notFoundPage(v.base, v), 404);
+  d.log.info(`${v.user.id} revoked their API token ${id}`);
+  const now = d.clock.now();
+  return htmlResponse(tokensPage(v, d.apiTokens.listFor(v.user.id, now), now, { result: "Revoked: that token no longer works." }));
+}
+
 // plugins/tracker/src/web/routes.ts
 var TASK_PATH = /^\/tasks\/([^/]+)$/;
 var TASK_ACTION = /^\/tasks\/([^/]+)\/(edit|pause|resume|delete)$/;
 var NEW_PATH = /^\/new\/([a-z]+)$/;
-function route(path) {
+var PERSON_PATH = /^\/admin\/people\/([^/]+)$/;
+var PERSON_ACTION = /^\/admin\/people\/([^/]+)\/(grant|revoke|resume-delivery|forget)$/;
+var BLOCK_LIFT = /^\/admin\/blocks\/([^/]+)\/lift$/;
+var TOKEN_REVOKE = /^\/tokens\/([^/]+)\/revoke$/;
+var ADMIN_TOKEN_REVOKE = /^\/admin\/tokens\/([^/]+)\/revoke$/;
+function isAdminRoute(r) {
+  return r.kind.startsWith("admin");
+}
+function segment2(raw) {
+  try {
+    return decodeURIComponent(raw ?? "");
+  } catch {
+    return "";
+  }
+}
+function route2(path) {
   if (path === "/")
     return { kind: "tasks" };
   if (path === "/settings")
     return { kind: "settings" };
   if (path === "/logout")
     return { kind: "logout" };
+  if (path === "/forget")
+    return { kind: "forget" };
+  if (path === "/tokens")
+    return { kind: "tokens" };
+  const revoke = TOKEN_REVOKE.exec(path);
+  if (revoke)
+    return { kind: "token-revoke", id: segment2(revoke[1]) };
+  const adminRevoke = ADMIN_TOKEN_REVOKE.exec(path);
+  if (adminRevoke)
+    return { kind: "admin-token-revoke", id: segment2(adminRevoke[1]) };
+  if (path === "/admin")
+    return { kind: "admin" };
+  if (path === "/admin/tasks")
+    return { kind: "admin-tasks" };
+  if (path === "/admin/allow")
+    return { kind: "admin-allow" };
+  const personAct = PERSON_ACTION.exec(path);
+  if (personAct)
+    return { kind: "admin-act", id: segment2(personAct[1]), action: personAct[2] };
+  const onePerson = PERSON_PATH.exec(path);
+  if (onePerson)
+    return { kind: "admin-person", id: segment2(onePerson[1]) };
+  const lift = BLOCK_LIFT.exec(path);
+  if (lift)
+    return { kind: "admin-lift", id: segment2(lift[1]) };
   const created = NEW_PATH.exec(path);
   if (created) {
     const type = created[1];
@@ -6374,12 +7651,7 @@ function route(path) {
   const one = TASK_PATH.exec(path) ?? TASK_ACTION.exec(path);
   if (!one)
     return null;
-  let id;
-  try {
-    id = decodeURIComponent(one[1] ?? "");
-  } catch {
-    id = "";
-  }
+  const id = segment2(one[1]);
   const action = one[2];
   if (action === undefined)
     return { kind: "task", id };
@@ -6388,9 +7660,10 @@ function route(path) {
   return { kind: "act", id, action };
 }
 function methodsOf(r) {
-  if (r.kind === "logout" || r.kind === "act")
+  if (r.kind === "logout" || r.kind === "act" || r.kind === "admin-allow" || r.kind === "admin-act" || r.kind === "admin-lift" || r.kind === "token-revoke" || r.kind === "admin-token-revoke") {
     return "POST";
-  if (r.kind === "settings" || r.kind === "edit" || r.kind === "new")
+  }
+  if (r.kind === "settings" || r.kind === "edit" || r.kind === "new" || r.kind === "forget" || r.kind === "tokens")
     return "GET, POST";
   return "GET";
 }
@@ -6443,6 +7716,11 @@ function plain(status, text, extra = {}) {
     headers: { "Content-Type": "text/plain; charset=utf-8", "Cache-Control": "no-store", "X-Content-Type-Options": "nosniff", ...extra }
   });
 }
+function signInNote(q) {
+  if (q.get("forgotten") === "1")
+    return "Everything the tracker held about you is deleted, and you are signed out.";
+  return q.get("out") === "1" ? "You are signed out." : undefined;
+}
 async function lookupWithin(lookup, ms) {
   let timer;
   const late = new Promise((resolve) => {
@@ -6462,6 +7740,9 @@ function createWebHandler(w) {
   const inFlight = new Map;
   const failedAt = new Map;
   const reading = new Set;
+  const limiter = new RateLimiter(RATE_BURST, RATE_PER_SECOND);
+  const failed = new RateLimiter(FAILED_BURST, FAILED_PER_SECOND);
+  const created = new CreationLog;
   async function authenticate(d, request) {
     const id = readCookie(request, SESSION_COOKIE);
     if (!id)
@@ -6496,14 +7777,14 @@ function createWebHandler(w) {
     const shared = pending;
     return lookupWithin(() => shared, MEMBER_CHECK_TIMEOUT_MS);
   }
-  async function recheckMembership(d, session, user) {
+  async function recheck(d, user, checkedAt) {
     if (w.guildId === null)
-      return null;
+      return "ok";
     const now = d.clock.now().getTime();
-    const age = session.memberCheckedAt ? now - Date.parse(session.memberCheckedAt) : Number.POSITIVE_INFINITY;
+    const age = checkedAt ? now - Date.parse(checkedAt) : Number.POSITIVE_INFINITY;
     const fresh = (limit) => age >= 0 && age < limit;
     if (fresh(MEMBER_RECHECK_MS))
-      return null;
+      return "ok";
     const lastFailed = failedAt.get(user.id);
     const backingOff = lastFailed !== undefined && now - lastFailed >= 0 && now - lastFailed < MEMBER_RETRY_MS;
     let found = "unknown";
@@ -6516,17 +7797,31 @@ function createWebHandler(w) {
     }
     if (found === "not-member") {
       d.sessions.deleteForUser(user.id);
-      return { kind: "signed-out", note: LEFT_SERVER };
+      d.apiTokens.deleteForUser(user.id);
+      return "not-member";
     }
     if (found === "member") {
-      d.sessions.confirmMember(user.id, d.clock.now().toISOString());
-      return null;
+      const at = d.clock.now().toISOString();
+      d.sessions.confirmMember(user.id, at);
+      d.apiTokens.confirmMember(user.id, at);
+      return "ok";
     }
-    if (fresh(MEMBER_GRACE_MS))
+    return fresh(MEMBER_GRACE_MS) ? "ok" : "unknown";
+  }
+  async function recheckMembership(d, session, user) {
+    const found = await recheck(d, user, session.memberCheckedAt);
+    if (found === "ok")
       return null;
+    if (found === "not-member")
+      return { kind: "signed-out", note: LEFT_SERVER };
     d.sessions.deleteForUser(user.id);
     return { kind: "signed-out", note: RECHECK_FAILED };
   }
+  async function memberOf(discordId) {
+    if (w.guildId === null)
+      return "not-checked";
+    return await lookupWithin(() => w.membership(discordId), MEMBER_CHECK_TIMEOUT_MS) ?? "unknown";
+  }
   async function readForm(request) {
     const type = request.headers.get("content-type") ?? "";
     if (!type.toLowerCase().startsWith("application/x-www-form-urlencoded"))
@@ -6583,6 +7878,14 @@ function createWebHandler(w) {
     return redirect(`${base}/settings?saved=1`);
   }
   return async (request, info) => {
+    if (info.path === "/api" || info.path.startsWith("/api/")) {
+      if (w.origin === null)
+        return plain(404, "Not found");
+      const d = w.deps();
+      if (!d)
+        return json2(problem(503, "starting", "The tracker is starting up; try again in a minute.", { "Retry-After": "60" }));
+      return handleApi({ d, queue: w.queue, reading, base, limiter, failed, recheck: (user, at) => recheck(d, user, at) }, request, info.path);
+    }
     const method = request.method;
     if (method !== "GET" && method !== "POST")
       return plain(405, "Method not allowed", { Allow: "GET, POST" });
@@ -6605,22 +7908,28 @@ function createWebHandler(w) {
       });
     }
     if (path === "/signin")
-      return only("GET") ?? htmlResponse(signInHelpPage(base, url.searchParams.get("out") === "1" ? "You are signed out." : undefined));
+      return only("GET") ?? htmlResponse(signInHelpPage(base, signInNote(url.searchParams)));
     if (path === "/login")
       return method === "GET" ? loginGet(d, url) : loginPost(d, request);
-    const r = route(path);
+    const r = route2(path);
     if (r === null)
       return htmlResponse(notFoundPage(base), 404);
     const allowed = methodsOf(r);
-    if (!allowed.split(", ").includes(method))
+    const admin = isAdminRoute(r);
+    if (!admin && !allowed.split(", ").includes(method))
       return plain(405, "Method not allowed", { Allow: allowed });
     const auth = await authenticate(d, request);
     if (auth.kind === "signed-out")
       return htmlResponse(signInHelpPage(base, auth.note), 403, { "Set-Cookie": clear(SESSION_COOKIE) });
     if (auth.kind !== "ok")
       return redirect(`${base}/signin`, auth.kind === "stale" ? [clear(SESSION_COOKIE)] : []);
+    if (admin && !auth.user.admin)
+      return unknownPage(base);
+    if (admin && !allowed.split(", ").includes(method))
+      return plain(405, "Method not allowed", { Allow: allowed });
     const v = { base, user: auth.user, csrf: auth.session.csrf };
     const e = { d, v, queue: w.queue, reading };
+    const a = { d, v, queue: w.queue, memberOf: (id) => memberOf(id), signOutCookie: clear(SESSION_COOKIE) };
     if (method === "POST") {
       const form = await readForm(request);
       if (!form)
@@ -6639,6 +7948,17 @@ function createWebHandler(w) {
           return editPost(e, r.id, form);
         case "act":
           return actionPost(e, r.id, r.action, form);
+        case "forget":
+          return forgetRoute(a, method, form);
+        case "tokens":
+          return tokensPost(d, v, auth.session, form, created);
+        case "token-revoke":
+          return tokenRevokePost(d, v, r.id);
+        case "admin-allow":
+        case "admin-act":
+        case "admin-lift":
+        case "admin-token-revoke":
+          return adminPost(a, r, form);
         default:
           return plain(405, "Method not allowed", { Allow: allowed });
       }
@@ -6654,6 +7974,14 @@ function createWebHandler(w) {
         return editGet(e, r.id);
       case "new":
         return newGet(e, r.type);
+      case "forget":
+        return forgetRoute(a, method, null);
+      case "tokens":
+        return tokensGet(d, v);
+      case "admin":
+      case "admin-tasks":
+      case "admin-person":
+        return adminGet(a, r);
       default:
         return htmlResponse(settingsPage(v, { hour: String(auth.user.preferredHour), zone: auth.user.timeZone, saved: url.searchParams.get("saved") === "1" }));
     }
@@ -6746,6 +8074,28 @@ function createPlugin(host, options = {}) {
     if (failed > 0)
       host.log.warn(`${kind === "poll" ? "poll" : "notify"} lane: ${ran} ran, ${failed} failed`);
   }
+  const running = new Set;
+  const tracked = (p) => {
+    running.add(p);
+    const done = () => void running.delete(p);
+    p.then(done, done);
+    return p;
+  };
+  const lanes = {
+    busy: () => running.size > 0,
+    async idle(ms) {
+      const until = Date.now() + ms;
+      while (running.size > 0) {
+        const left = until - Date.now();
+        if (left <= 0)
+          return false;
+        let timer;
+        await Promise.race([Promise.allSettled([...running]), new Promise((r) => timer = setTimeout(r, left))]);
+        clearTimeout(timer);
+      }
+      return true;
+    }
+  };
   let discordClient = null;
   const capture = (interaction) => {
     const client = interaction.client;
@@ -6789,6 +8139,9 @@ function createPlugin(host, options = {}) {
       const openedStore = new SqliteStore(opened);
       const openedClaims = new ClaimStore(opened);
       try {
+        const vacuum = vacuumOnce(opened, path);
+        if ("error" in vacuum)
+          host.log.warn(`could not vacuum the tracker's database (${vacuum.error}); trying again at the next start`);
         const granted = await seedAdmins(openedStore, adminIds, clock.now());
         const admissions = new Admissions(opened);
         for (const id of adminIds) {
@@ -6831,6 +8184,10 @@ function createPlugin(host, options = {}) {
         notifier: dm ? createDmNotifier({ store: openedStore, claims: openedClaims, dm, clock, log: host.log, health: delivery }) : NO_DM,
         logins: new LoginLinks(opened),
         sessions: new Sessions(opened),
+        apiTokens: new ApiTokens(opened),
+        roster: new Roster(opened),
+        configuredAdmins: new Set(adminIds),
+        lanes,
         webEditor: webOrigin !== null
       };
       if (guildId === null)
@@ -6851,11 +8208,11 @@ function createPlugin(host, options = {}) {
     ticks: [
       {
         name: "notify",
-        run: (signal) => tick("notify", signal)
+        run: (signal) => tracked(tick("notify", signal))
       },
       {
         name: "poll",
-        run: (signal) => tick("poll", signal)
+        run: (signal) => tracked(tick("poll", signal))
       }
     ],
     async http(request, info) {