@robbeverhelst/do 1.332.0 → 1.334.0

package/dist/do.js

@@ -983,6 +983,10 @@ function parseArgs(argv, booleanFlags = GLOBAL_BOOLEAN_FLAGS) {
   const positionals = [];
   const flags = {};
   let positionalOnly = false;
+  const setValue = (name, value) => {
+    const was = flags[name];
+    flags[name] = typeof was === "string" ? [was, value] : Array.isArray(was) ? [...was, value] : value;
+  };
   for (let i = 0;i < argv.length; i++) {
     const token = argv[i];
     if (token === undefined)
@@ -999,7 +1003,7 @@ function parseArgs(argv, booleanFlags = GLOBAL_BOOLEAN_FLAGS) {
       const body = token.slice(2);
       const eq = body.indexOf("=");
       if (eq !== -1) {
-        flags[body.slice(0, eq)] = body.slice(eq + 1);
+        setValue(body.slice(0, eq), body.slice(eq + 1));
         continue;
       }
       if (booleans.has(body)) {
@@ -1008,7 +1012,7 @@ function parseArgs(argv, booleanFlags = GLOBAL_BOOLEAN_FLAGS) {
       }
       const next = argv[i + 1];
       if (next !== undefined && (next === "-" || !next.startsWith("-"))) {
-        flags[body] = next;
+        setValue(body, next);
         i++;
       } else {
         flags[body] = true;
@@ -1030,7 +1034,11 @@ function parseArgs(argv, booleanFlags = GLOBAL_BOOLEAN_FLAGS) {
 }
 function flagString(flags, name) {
   const v = flags[name];
-  return typeof v === "string" ? v : undefined;
+  return typeof v === "string" ? v : Array.isArray(v) ? v.at(-1) : undefined;
+}
+function flagStrings(flags, name) {
+  const v = flags[name];
+  return typeof v === "string" ? [v] : Array.isArray(v) ? v : [];
 }
 function flagBool(flags, name) {
   return flags[name] === true;
@@ -14410,7 +14418,7 @@ var configError = (message) => new CliError("config", message, EXIT.CONFIG);
 
 // src/meta.ts
 var CLI_NAME = "do";
-var VERSION = "1.332.0";
+var VERSION = "1.334.0";
 var API_PREFIX = "/api/v1";
 var DEFAULT_API_URL = "http://localhost:3001";
 
@@ -17867,6 +17875,7 @@ var automationRuns = pgTable("automation_runs", {
   automationId: text("automation_id").notNull().references(() => automations.id),
   eventType: text("event_type").notNull(),
   eventEntityId: text("event_entity_id").notNull(),
+  eventValue: jsonb("event_value"),
   status: automationRunStatus("status").notNull(),
   detail: text("detail"),
   createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow()
@@ -18355,6 +18364,7 @@ var userSettings = pgTable("user_settings", {
   foodDiaryMode: boolean4("food_diary_mode").notNull().default(false),
   calendarZoom: integer2("calendar_zoom"),
   lifeBlockSharing: jsonb("life_block_sharing").$type(),
+  recentSearches: jsonb("recent_searches").$type().notNull().default([]),
   createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
   updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow()
 }, (t) => [unique("user_settings_tenant_user_uniq").on(t.tenantId, t.userId)]);
@@ -19955,9 +19965,29 @@ var animalLostCards = pgTable("animal_lost_cards", {
   phone: text("phone"),
   showChipped: boolean4("show_chipped").notNull().default(false),
   note: text("note"),
+  description: text("description"),
+  answersTo: text("answers_to"),
+  missingSince: timestamp("missing_since", { withTimezone: true }),
+  missingWhere: text("missing_where"),
   createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
   updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow()
 }, (t) => [index("animal_lost_cards_tenant_idx").on(t.tenantId)]);
+var animalLostReportFrom = pgEnum("animal_lost_report_from", ["owner", "finder"]);
+var animalLostReports = pgTable("animal_lost_reports", {
+  id: text("id").primaryKey(),
+  tenantId: text("tenant_id").notNull().references(() => tenants.id),
+  animalId: text("animal_id").notNull().references(() => animals.id, { onDelete: "cascade" }),
+  from: animalLostReportFrom("from").notNull(),
+  at: timestamp("at", { withTimezone: true }).notNull(),
+  title: text("title"),
+  note: text("note"),
+  place: text("place"),
+  lat: doublePrecision("lat"),
+  lng: doublePrecision("lng"),
+  phone: text("phone"),
+  photoFileId: text("photo_file_id"),
+  createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow()
+}, (t) => [index("animal_lost_reports_animal_idx").on(t.tenantId, t.animalId, t.at)]);
 var animalHandoverLinks = pgTable("animal_handover_links", {
   id: text("id").primaryKey(),
   tenantId: text("tenant_id").notNull().references(() => tenants.id),
@@ -20403,7 +20433,8 @@ var animalDayCountSchema = object({ day: string2(), count: number2().int() });
 var animalWeightPointSchema = object({
   day: string2(),
   grams: number2(),
-  at: exports_coerce.date()
+  at: exports_coerce.date(),
+  note: string2().nullish()
 });
 var animalFileSchema = object({
   id: ulidSchema,
@@ -20524,6 +20555,7 @@ var animalLogInputSchema = discriminatedUnion("kind", [
     kind: literal("weight"),
     value: number2().positive().max(200000),
     unit: _enum2(["g", "kg"]).default("g"),
+    note: string2().trim().min(1).max(120).optional(),
     occurredAt: occurredAtSchema
   }).strict(),
   object({
@@ -20769,22 +20801,72 @@ var animalSitterNoteInputSchema = object({
   body: string2().trim().max(1000).default("")
 }).strict();
 var animalSitterPhoneSchema = object({ phone: string2() });
+var lostCardPhoneSchema = string2().trim().regex(/^\+?[0-9][0-9 ()./-]{4,30}$/, "A phone number: digits, spaces, + ( ) . / -");
 var animalLostCardInputSchema = object({
   photoFileId: ulidSchema.nullish(),
-  phone: string2().trim().regex(/^\+?[0-9][0-9 ()./-]{4,30}$/, "A phone number: digits, spaces, + ( ) . / -").nullish(),
+  phone: lostCardPhoneSchema.nullish(),
   showChipped: boolean2().optional(),
-  note: string2().trim().min(1).max(200).nullish()
+  note: string2().trim().min(1).max(200).nullish(),
+  description: string2().trim().min(1).max(400).nullish(),
+  answersTo: string2().trim().min(1).max(120).nullish(),
+  missingSince: exports_coerce.date().nullish(),
+  missingWhere: string2().trim().min(1).max(200).nullish()
 }).strict();
 var animalLostCardPhotoSchema = object({ id: ulidSchema, name: string2() });
+var animalLostUpdateSchema = object({
+  id: ulidSchema,
+  at: exports_coerce.date(),
+  title: string2(),
+  note: string2().nullable(),
+  place: string2().nullable()
+});
 var animalLostCardPublicSchema = object({
   name: string2(),
   speciesKey: string2().nullable(),
   kind: string2().nullable(),
   missing: boolean2(),
   hasPhoto: boolean2(),
-  phone: string2().nullable(),
+  phoneMasked: string2().nullable(),
   chipped: boolean2(),
-  note: string2().nullable()
+  note: string2().nullable(),
+  description: string2().nullable(),
+  answersTo: string2().nullable(),
+  missingSince: exports_coerce.date().nullable(),
+  missingWhere: string2().nullable(),
+  pronoun: _enum2(["he", "she", "they"]),
+  sharedBy: string2().nullable(),
+  owners: array(string2()),
+  vet: string2().nullable(),
+  updates: array(animalLostUpdateSchema)
+});
+var animalLostCardCallSchema = object({ phone: string2() });
+var blankless = (v) => typeof v === "string" && v.trim() === "" ? undefined : v;
+var animalLostFoundInputSchema = object({
+  where: string2().trim().min(1).max(300),
+  lat: preprocess(blankless, exports_coerce.number().min(-90).max(90).optional()),
+  lng: preprocess(blankless, exports_coerce.number().min(-180).max(180).optional()),
+  phone: preprocess(blankless, lostCardPhoneSchema.optional())
+}).strict().refine((v) => v.lat === undefined === (v.lng === undefined), {
+  message: "Send both lat and lng, or neither."
+});
+var animalLostFoundSentSchema = object({ to: array(string2()) });
+var animalLostUpdateInputSchema = object({
+  at: exports_coerce.date(),
+  title: string2().trim().min(1).max(120),
+  note: string2().trim().min(1).max(200).nullish(),
+  place: string2().trim().min(1).max(200).nullish()
+}).strict();
+var animalLostReportSchema = object({
+  id: ulidSchema,
+  from: _enum2(["owner", "finder"]),
+  at: exports_coerce.date(),
+  title: string2().nullable(),
+  note: string2().nullable(),
+  place: string2().nullable(),
+  lat: number2().nullable(),
+  lng: number2().nullable(),
+  phone: string2().nullable(),
+  photoFileId: ulidSchema.nullable()
 });
 var animalLostCardStateSchema = object({
   card: object({
@@ -20793,7 +20875,12 @@ var animalLostCardStateSchema = object({
     phone: string2().nullable(),
     showChipped: boolean2(),
     note: string2().nullable(),
+    description: string2().nullable(),
+    answersTo: string2().nullable(),
+    missingSince: exports_coerce.date().nullable(),
+    missingWhere: string2().nullable(),
     since: exports_coerce.date(),
+    reports: array(animalLostReportSchema),
     preview: animalLostCardPublicSchema
   }).nullable(),
   photos: array(animalLostCardPhotoSchema),
@@ -21044,7 +21131,7 @@ var animalOperations = defineOperations({
     scopes: READ,
     tag: "Animals",
     summary: "An animal's lost-pet card",
-    description: "`card` is null while it's off; else its `path` (`/lost/<token>`, the page its QR code opens, no account), what it shows (`photoFileId`, `phone`, `showChipped`, `note`) and `preview`, the finder's page. `photos` are the pictures on the animal it may show; `chipOnFile` whether it can say chipped.",
+    description: "`card` is null while it's off; else its `path` (`/lost/<token>`, the page its QR code opens, no account), what it shows (`photoFileId`, `phone`, `showChipped`, `note`, `description`, `answersTo`, `missingSince`, `missingWhere`), `reports` (the household's updates and finders' reports, with a finder's number) and `preview`, the finder's page (its number masked). `photos` are the pictures on the animal it may show; `chipOnFile` whether it can say chipped.",
     status: 200,
     response: { description: "The card's state." },
     errors: { 404: true }
@@ -21736,6 +21823,8 @@ var taskOwnerSchema = actorRefSchema.extend({ desk: string2().nullable() });
 var taskFilingSuggestionSchema = object({
   areaId: ulidSchema.nullable(),
   area: string2().nullable(),
+  projectId: ulidSchema.nullable().default(null),
+  project: string2().nullable().default(null),
   owner: taskOwnerSchema.nullable(),
   scheduledAt: exports_coerce.date().nullable(),
   by: actorRefSchema
@@ -21952,13 +22041,25 @@ var occurrenceSchema = createSelectSchema(occurrences, {
   completedAt: exports_coerce.date().nullable()
 });
 var byDayCodeSchema = _enum2(["MO", "TU", "WE", "TH", "FR", "SA", "SU"]);
+var byDayOrdinalSchema = _enum2(["1", "2", "3", "4", "-1"]);
+var byDaySchema = union([
+  byDayCodeSchema,
+  templateLiteral([byDayOrdinalSchema, byDayCodeSchema])
+]);
+var BY_DAY_RE = /^(-1|[1-4])?(MO|TU|WE|TH|FR|SA|SU)$/;
+function parseByDay(code) {
+  const m = BY_DAY_RE.exec(code);
+  if (!m)
+    return null;
+  return { ordinal: m[1] ? Number(m[1]) : null, weekday: m[2] };
+}
 var recurrenceRuleParams = {
   timezone: string2().min(1).default("UTC"),
   interval: number2().int().positive().default(1),
   mode: recurrenceModeSchema,
   timeOfDay: string2().regex(/^([01]\d|2[0-3]):[0-5]\d$/, "time-of-day must be HH:MM (24h)").nullish(),
   freq: recurrenceFreqSchema.optional(),
-  byDay: array(byDayCodeSchema).optional(),
+  byDay: array(byDaySchema).optional(),
   until: exports_coerce.date().optional(),
   count: number2().int().positive().optional(),
   unit: recurrenceUnitSchema.optional(),
@@ -21968,6 +22069,14 @@ function refineRecurrenceRule(v, ctx) {
   if (v.mode === "rigid" && !v.freq) {
     ctx.addIssue({ code: "custom", path: ["freq"], message: "rigid rules require a freq" });
   }
+  const ordinal = v.byDay?.findIndex((code) => parseByDay(code)?.ordinal != null) ?? -1;
+  if (ordinal >= 0 && v.freq !== "monthly" && v.freq !== "yearly") {
+    ctx.addIssue({
+      code: "custom",
+      path: ["byDay", ordinal],
+      message: "an ordinal weekday (1SU, -1FR) needs a monthly or yearly freq"
+    });
+  }
   if (v.mode === "flexible") {
     if (!v.unit) {
       ctx.addIssue({ code: "custom", path: ["unit"], message: "flexible rules require a unit" });
@@ -22359,6 +22468,8 @@ var collectionEntries = pgTable("collection_entries", {
   fileIds: text("file_ids").array().notNull().default([]),
   minutes: integer2("minutes"),
   ops: jsonb("ops").$type().notNull().default([]),
+  chapter: text("chapter"),
+  linkedNoteId: text("linked_note_id").references(() => nodes.id, { onDelete: "set null" }),
   createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow()
 }, (t) => [
   index("collection_entries_item_occurred_idx").on(t.itemId, t.occurredOn),
@@ -22470,8 +22581,11 @@ var collectionEntrySchema = createSelectSchema(collectionEntries, {
   taskId: string2().nullable().default(null),
   fileIds: array(string2()).default([]),
   minutes: number2().int().nullable().default(null),
-  ops: array(unknown()).default([])
+  ops: array(unknown()).default([]),
+  chapter: string2().nullable().default(null),
+  linkedNoteId: string2().nullable().default(null)
 });
+var entryChapterSchema = string2().trim().min(1).max(60);
 var entryCostSchema = number2().min(0).max(1e7).multipleOf(0.01);
 var entryFileIdsSchema = array(ulidSchema).max(20);
 var createCollectionEntryInputSchema = createInsertSchema(collectionEntries, {
@@ -22483,7 +22597,9 @@ var createCollectionEntryInputSchema = createInsertSchema(collectionEntries, {
   cost: entryCostSchema.nullish(),
   contactId: ulidSchema.nullish(),
   taskId: ulidSchema.nullish(),
-  fileIds: entryFileIdsSchema.optional()
+  fileIds: entryFileIdsSchema.optional(),
+  chapter: entryChapterSchema.nullish(),
+  linkedNoteId: ulidSchema.nullish()
 }).omit({ tenantId: true, itemId: true, createdAt: true, minutes: true, ops: true });
 var updateCollectionEntryInputSchema = object({
   occurredOn: string2().regex(/^\d{4}-\d{2}-\d{2}$/, "must be an ISO date (YYYY-MM-DD)").optional(),
@@ -22492,7 +22608,9 @@ var updateCollectionEntryInputSchema = object({
   kind: collectionEntryKindSchema.optional(),
   cost: entryCostSchema.nullish(),
   contactId: ulidSchema.nullish(),
-  fileIds: entryFileIdsSchema.optional()
+  fileIds: entryFileIdsSchema.optional(),
+  chapter: entryChapterSchema.nullish(),
+  linkedNoteId: ulidSchema.nullish()
 }).strict();
 var collectionItemViewSchema = collectionItemSchema.extend({
   title: string2(),
@@ -22565,6 +22683,7 @@ var collectionLogInputSchema = object({
   status: string2().trim().min(1).max(40).optional(),
   rating: collectionRatingSchema.nullish(),
   note: string2().max(2000).nullish(),
+  chapter: entryChapterSchema.nullish(),
   said: string2().trim().min(1).max(500).optional(),
   occurredOn: string2().regex(/^\d{4}-\d{2}-\d{2}$/, "must be an ISO date (YYYY-MM-DD)").optional()
 }).strict();
@@ -23146,6 +23265,8 @@ var moneyBankPendingSchema = object({
   pendingId: ulidSchema,
   bank: string2(),
   consentValidUntil: exports_coerce.date(),
+  createdAt: exports_coerce.date(),
+  expiresAt: exports_coerce.date(),
   accounts: array(object({
     index: number2().int().min(0),
     name: string2().nullable(),
@@ -23181,6 +23302,33 @@ var moneyBankSyncResultSchema = object({
     error: true
   }).extend({ accountTitle: string2() }))
 });
+var moneyDedupeInputSchema = object({ accountId: ulidSchema, commit: boolean2().optional() }).strict();
+var moneyDedupePairSchema = object({
+  keepId: string2(),
+  twinId: string2(),
+  bookedOn: string2(),
+  twinBookedOn: string2(),
+  amount: string2(),
+  description: string2().nullable(),
+  counterpartyName: string2().nullable(),
+  ambiguous: boolean2()
+});
+var moneyDedupeChangesSchema = object({
+  merged: number2().int(),
+  links: number2().int(),
+  splits: number2().int(),
+  settlements: number2().int(),
+  transfers: number2().int(),
+  rules: number2().int(),
+  notes: number2().int()
+});
+var moneyDedupeResultSchema = object({
+  accountId: string2(),
+  committed: boolean2(),
+  pairs: array(moneyDedupePairSchema),
+  counts: object({ pairs: number2().int(), ambiguous: number2().int() }),
+  changed: moneyDedupeChangesSchema
+});
 
 // ../../packages/schema/src/operations/bank-link.ts
 var CONNECT = ["connections:write"];
@@ -23263,6 +23411,18 @@ var bankLinkOperations = defineOperations({
     response: { description: "The bank accounts to map." },
     errors: { 400: true, 403: true, 409: true }
   },
+  pendings: {
+    method: "get",
+    path: "/money/bank-link/pending",
+    scopes: CONNECT,
+    afterScopes: AFTER,
+    tag: "Money",
+    summary: "List the bank links waiting to be mapped",
+    description: "Every authorisation the key's member brought back from a bank and hasn't mapped yet, newest first, while it lasts (a day): each as the pending answers it, with `createdAt` and `expiresAt`. For when the page that finished it is gone; map one with link.",
+    status: 200,
+    response: { description: "The bank links waiting to be mapped." },
+    errors: { 403: true }
+  },
   pending: {
     method: "get",
     path: "/money/bank-link/pending/{id}",
@@ -25085,7 +25245,8 @@ var moneyAccountSchema = createSelectSchema(moneyAccounts, {
 });
 var moneyAccountViewSchema = moneyAccountSchema.omit({ ibanHash: true }).extend({
   title: string2(),
-  visibility: _enum2(NODE_VISIBILITY_VALUES)
+  visibility: _enum2(NODE_VISIBILITY_VALUES),
+  balanceKnown: boolean2()
 });
 var moneyCategorySchema = createSelectSchema(moneyCategories, {
   archivedAt: exports_coerce.date().nullable(),
@@ -25145,7 +25306,14 @@ var createMoneyAccountInputSchema = object({
   includeInNetWorth: boolean2().optional(),
   visibility: _enum2(NODE_VISIBILITY_VALUES).optional()
 }).strict();
-var updateMoneyAccountInputSchema = createMoneyAccountInputSchema.omit({ id: true, currency: true }).partial().strict();
+var moneyBalanceAtSchema = union([keyDateDaySchema, exports_iso.datetime({ offset: true })]);
+var updateMoneyAccountInputSchema = createMoneyAccountInputSchema.omit({ id: true, currency: true }).partial().extend({
+  balance: moneyAmountSchema.optional(),
+  balanceAt: moneyBalanceAtSchema.optional()
+}).strict().refine((u) => u.balance === undefined === (u.balanceAt === undefined), {
+  message: "a balance and the day it's from go together",
+  path: ["balanceAt"]
+});
 var createMoneyCategoryInputSchema = object({
   id: ulidSchema,
   name: string2().trim().min(1).max(60),
@@ -25240,8 +25408,13 @@ var moneyTransactionPageSchema = object({
 var MONEY_IMPORT_MAX_BYTES = 5 * 1024 * 1024;
 var moneyImportFieldsSchema = object({
   accountId: ulidSchema,
-  since: keyDateDaySchema.optional()
-}).strict();
+  since: keyDateDaySchema.optional(),
+  balance: moneyAmountSchema.optional(),
+  balanceAt: moneyBalanceAtSchema.optional()
+}).strict().refine((f) => f.balance === undefined === (f.balanceAt === undefined), {
+  message: "a balance and the day it's from go together",
+  path: ["balanceAt"]
+});
 var moneyImportOutcomeSchema = _enum2([
   "new",
   "duplicate",
@@ -25434,13 +25607,19 @@ var moneyGoalLineSchema = createSelectSchema(moneyGoalLines, {
   createdAt: exports_coerce.date(),
   updatedAt: exports_coerce.date()
 });
+var MONEY_GOAL_SAVED_FROM = ["account", "account_share", "contributions"];
+var moneyGoalSavedFromSchema = _enum2(MONEY_GOAL_SAVED_FROM);
 var moneyGoalViewSchema = moneyGoalSchema.extend({
   title: string2(),
   visibility: _enum2(NODE_VISIBILITY_VALUES),
   accountTitle: string2().nullable(),
   accountBalance: amount.nullable(),
+  accountBalanceKnown: boolean2().nullable(),
   projectTitle: string2().nullable(),
   saved: amount,
+  savedFrom: moneyGoalSavedFromSchema,
+  remaining: amount,
+  monthlyNeed: amount.nullable(),
   linesPlanned: amount,
   linesPaid: amount
 });
@@ -26945,6 +27124,8 @@ var healthShares = pgTable("health_shares", {
   episodeId: text("episode_id"),
   sections: text("sections").array().notNull().default(sql`'{}'::text[]`),
   snapshot: jsonb("snapshot").notNull(),
+  note: text("note"),
+  attachments: jsonb("attachments").notNull().default(sql`'[]'::jsonb`),
   tokenHash: text("token_hash").notNull().unique(),
   expiresAt: timestamp("expires_at", { withTimezone: true }).notNull(),
   revokedAt: timestamp("revoked_at", { withTimezone: true }),
@@ -31134,6 +31315,140 @@ var journalExportSchema = object({
   nextSince: exports_coerce.date()
 });
 
+// ../../packages/schema/src/contracts/journal-private.ts
+var JOURNAL_PRIVATE_TERMS = {
+  alcohol: [
+    "alcohol*",
+    "drunk*",
+    "drink*",
+    "beer*",
+    "wine*",
+    "whisky",
+    "whiskey",
+    "vodka*",
+    "gin",
+    "rum",
+    "tequila*",
+    "cocktail*",
+    "hangover*",
+    "hungover",
+    "tipsy",
+    "booze*",
+    "sober*",
+    "sobriety",
+    "bier*",
+    "wijn*",
+    "drank*",
+    "dronken*",
+    "borrel*",
+    "pint",
+    "pints",
+    "pintje*",
+    "kater*",
+    "zuipen",
+    "gezopen"
+  ],
+  smoking: [
+    "smok*",
+    "cigar*",
+    "tobacco",
+    "nicotine",
+    "vape*",
+    "vaping",
+    "roken",
+    "rook",
+    "rookte*",
+    "gerookt",
+    "roker*",
+    "sigaar*",
+    "sigaret*",
+    "tabak*",
+    "peuk*",
+    "vapen"
+  ],
+  cannabis: [
+    "cannabis",
+    "weed",
+    "hash",
+    "hashish",
+    "marijuana",
+    "joint",
+    "joints",
+    "jointje*",
+    "stoned",
+    "thc",
+    "cbd",
+    "edibles",
+    "wiet*",
+    "hasj*",
+    "blowen",
+    "blowt",
+    "geblowd"
+  ],
+  drugs: [
+    "drug*",
+    "cocaine",
+    "coca\xEFne",
+    "coke",
+    "mdma",
+    "ecstasy",
+    "xtc",
+    "ketamine",
+    "lsd",
+    "shrooms",
+    "paddo*",
+    "amphetamine*",
+    "heroin*",
+    "hero\xEFne",
+    "opioid*"
+  ],
+  relapse: [
+    "relaps*",
+    "craving*",
+    "rehab",
+    "aa meeting*",
+    "terugval*",
+    "hervallen",
+    "afkick*",
+    "ontwenning*"
+  ],
+  fertility: [
+    "fertil*",
+    "ivf",
+    "iui",
+    "ovulat*",
+    "conceiv*",
+    "conception",
+    "pregnan*",
+    "sperm*",
+    "embryo*",
+    "miscarr*",
+    "ttc",
+    "vruchtbaar*",
+    "ovulatie",
+    "eisprong",
+    "zwanger*",
+    "sperma*",
+    "miskraam",
+    "kinderwens"
+  ]
+};
+var LETTER = "[\\p{L}\\p{N}_]";
+var PRIVATE = new RegExp(`(?<!${LETTER})(?:${Object.values(JOURNAL_PRIVATE_TERMS).flat().map((term) => {
+  const stem = term.replace(/\*$/, "").replace(/\s+/g, "\\s+");
+  return term.endsWith("*") ? `${stem}${LETTER}*` : stem;
+}).join("|")})(?!${LETTER})`, "iu");
+function isPrivateLine(line) {
+  return PRIVATE.test(line);
+}
+function withoutPrivateLines(text) {
+  const kept = text.split(/\r?\n/).filter((line) => !isPrivateLine(line)).join(`
+`).replace(/\n{3,}/g, `
+
+`).trim();
+  return kept || null;
+}
+
 // ../../packages/schema/src/contracts/journal-import.ts
 var journalImportBatchSchema = string2().regex(/^\d{4}-(0[1-9]|1[0-2])$/, "a batch is a month (YYYY-MM)");
 var journalImportEntrySchema = _enum2(["summary", "retro", "log"]);
@@ -31144,6 +31459,7 @@ var journalImportFoundSchema = object({
   documents: number2().int().nonnegative().optional(),
   habits: number2().int().nonnegative().optional()
 }).strict();
+var keptLine = (max) => string2().trim().min(1).max(max).transform((v) => isPrivateLine(v) ? null : v).nullish();
 var JOURNAL_IMPORT_MAX_ITEMS = 400;
 var journalImportItemInputSchema = object({
   day: journalDateSchema,
@@ -31151,12 +31467,12 @@ var journalImportItemInputSchema = object({
   sourceHash: string2().trim().min(1).max(128),
   entry: journalImportEntrySchema.default("log"),
   hasCheck: boolean2().default(false),
-  title: string2().trim().min(1).max(200).nullish(),
-  body: string2().trim().min(1).max(20000).nullish(),
+  title: keptLine(200),
+  body: string2().trim().min(1).max(20000).transform(withoutPrivateLines).nullish(),
   rating: number2().min(1).max(10).nullish(),
-  ratingQuestion: string2().trim().min(1).max(80).nullish(),
+  ratingQuestion: keptLine(80),
   sleep: number2().min(0).max(24).nullish(),
-  highlight: string2().trim().min(1).max(200).nullish(),
+  highlight: keptLine(200),
   milestoneCandidate: boolean2().default(false),
   health: boolean2().default(false),
   found: journalImportFoundSchema.default({})
@@ -31222,8 +31538,25 @@ var journalImportAnswerInputSchema = object({
   rating: number2().min(1).max(10).nullable().optional(),
   skip: boolean2().optional()
 }).strict().refine((v) => Object.keys(v).length > 0, { message: "nothing to answer" });
+var journalImportRatingAnswerSchema = object({ day: journalDateSchema, rating: number2().min(1).max(10) }).strict();
+var journalImportApproveInputSchema = object({
+  batch: journalImportBatchSchema.optional(),
+  all: literal(true).optional(),
+  ratings: array(journalImportRatingAnswerSchema).max(JOURNAL_IMPORT_MAX_ITEMS).default([])
+}).strict().refine((v) => v.batch !== undefined !== (v.all === true), {
+  message: "approve one batch or all: send batch or all, not both"
+}).refine((v) => new Set(v.ratings.map((r) => r.day)).size === v.ratings.length, {
+  message: "one rating per day",
+  path: ["ratings"]
+});
+var journalImportOpenDaySchema = object({
+  day: journalDateSchema,
+  ratingQuestion: string2()
+});
 var journalImportApproveSchema = object({
   imported: number2().int(),
+  batches: array(journalImportBatchSchema).default([]),
+  open: array(journalImportOpenDaySchema).default([]),
   overview: journalImportOverviewSchema
 });
 
@@ -31611,12 +31944,25 @@ var journalOperations = defineOperations({
     scopes: ["journal:write"],
     tag: "Journal",
     summary: "Stage daily notes for the backfill",
-    description: "Stage parsed daily notes (`do journal import push <dir>`): one item per day (at most 400 a request) with its source file and hash, what becomes its entry (`summary`, `retro` or `log`), a one-liner, the summary's text (health lines left out), a clear `rating` or a `ratingQuestion` (\"~5/10\"), a highlight, whether it may be a milestone or had health lines, and the links counted. Nothing is written into the Journal: the member reviews and approves each month in the app, and a key can't approve. A day still waiting is replaced; one already imported is left alone (`alreadyImported`). Staged days stand behind the Journal's wall.",
+    description: "Stage parsed daily notes (`do journal import push <dir>`): one item per day (at most 400 a request) with its source file and hash, what becomes its entry (`summary`, `retro` or `log`), a one-liner, the summary's text (health lines left out), a clear `rating` or a `ratingQuestion` (\"~5/10\"), a highlight, whether it may be a milestone or had health lines, and the links counted. A line about drinking, smoking, cannabis or other drugs, relapse or fertility is stripped from the title, text, highlight and rating question here, whatever parsed the day. Nothing is written into the Journal until a batch is approved (`journal_import_approve`, or the member's Approve in the app). A day still waiting is replaced; one already imported is left alone (`alreadyImported`). Staged days stand behind the Journal's wall.",
     body: journalImportUploadInputSchema,
     status: 200,
     response: { description: "How the upload went.", view: "JournalImportUpload" },
     errors: { 400: true }
   },
+  approveImport: {
+    method: "post",
+    path: "/journal/imports/approve",
+    scopes: ["journal:write"],
+    tag: "Journal",
+    summary: "Approve staged days into the Journal",
+    description: 'Write staged days into the Journal (`do journal import approve <YYYY-MM|--all>`): one batch (`batch`, a month `YYYY-MM`) or every staged batch (`all: true`), never both. `ratings` answers the rating questions inline, one per day (`[{"day":"2026-10-03","rating":7}]`, 1 to 10). A day whose question has no answer stays staged and comes back in `open` with its question; the rest are written as imports (one-liner, summary, highlight, the `rating` and `sleep` Metrics), and a day the Journal already has keeps what\'s there and only gains a missing rating or sleep. An agent\'s approve goes through the same writes as `journal_write_day`: it shows in the member\'s change list with Undo, and past the bulk limit it waits for the member\'s confirmation (428). Lines about drinking, smoking, drugs, relapse or fertility are never written. 400 when a rating names a day that isn\'t waiting in the batch, or nothing is ready and nothing is open.',
+    body: journalImportApproveInputSchema,
+    status: 200,
+    response: { description: "How the approve went.", view: "JournalImportApprove" },
+    errors: { 400: true },
+    operationId: "journal_import_approve"
+  },
   importOverview: {
     method: "get",
     path: "/journal/imports",
@@ -32057,6 +32403,98 @@ var keyOperations = defineOperations({
   }
 });
 
+// ../../packages/schema/src/contracts/money-kraken.ts
+var KRAKEN_SECRET = /^[A-Za-z0-9+/]+={0,2}$/;
+var moneyKrakenKeyInputSchema = object({
+  apiKey: string2().trim().min(16).max(200).regex(/^\S+$/, "The API key has no spaces."),
+  apiSecret: string2().trim().min(40).max(200).regex(KRAKEN_SECRET, { message: "Paste the private key as Kraken shows it (base64)." }),
+  accountId: ulidSchema.optional()
+}).strict();
+var moneyHoldingSchema = object({
+  asset: string2(),
+  amount: string2(),
+  priceEur: string2().nullable(),
+  valueEur: string2().nullable(),
+  share: number2().nullable()
+});
+var moneyHoldingsSchema = object({
+  accountId: ulidSchema,
+  at: exports_coerce.date(),
+  totalEur: string2(),
+  dustEur: string2(),
+  holdings: array(moneyHoldingSchema)
+});
+var moneyAccountHoldingsSchema = object({ holdings: moneyHoldingsSchema.nullable() });
+var moneyKrakenLinkStatusSchema = object({
+  configured: boolean2(),
+  link: object({
+    id: ulidSchema,
+    accountId: ulidSchema,
+    accountTitle: string2(),
+    status: _enum2(moneyConnectionStatus.enumValues),
+    lastSyncAt: exports_coerce.date().nullable(),
+    lastError: string2().nullable()
+  }).nullable(),
+  holdings: moneyHoldingsSchema.nullable()
+});
+
+// ../../packages/schema/src/operations/kraken-link.ts
+var CONNECT2 = ["connections:write"];
+var AFTER2 = "`*` and `private:*` never grant `connections:write`: a key holds it by name, and a guest's key never does.";
+var krakenLinkOperations = defineOperations({
+  status: {
+    method: "get",
+    path: "/money/kraken-link",
+    scopes: CONNECT2,
+    afterScopes: AFTER2,
+    tag: "Money",
+    summary: "Get the Kraken link",
+    description: "Whether the key's member has a Kraken key set (`configured`), the investment account it feeds with how its last sync went (`link`: `status` `active` or `failing`, `lastSyncAt`, `lastError`), and the `holdings` that sync saw: per asset its `amount`, EUR `priceEur` and `valueEur` and `share`, with `totalEur` and `at`; holdings worth under \u20AC0.50 are left out of the list (`dustEur` sums them), never out of the total. The key is never returned.",
+    status: 200,
+    response: { description: "The Kraken link." },
+    errors: { 403: true }
+  },
+  set: {
+    method: "put",
+    path: "/money/kraken-link",
+    scopes: CONNECT2,
+    afterScopes: AFTER2,
+    tag: "Money",
+    summary: "Set the Kraken key",
+    description: "Keep the key's member's Kraken `apiKey` and `apiSecret` (the private key), sealed, then sync. Make the key at Kraken with only Query Funds ticked. The key is checked, never echoed: it must read the balance and must not see open orders (a key that can may do more than read, and is refused); the answer is the link, without it. `accountId` picks the investment account it feeds; left out, the link keeps its account, or a first set makes one named Kraken. 400 for a key Kraken refuses, a key that isn't read-only, or an account that isn't an EUR investment account.",
+    body: moneyKrakenKeyInputSchema,
+    status: 200,
+    response: { description: "The Kraken link, without the key." },
+    errors: { 400: true, 403: true, 404: true, 503: true },
+    throttle: "strict",
+    mcp: false
+  },
+  sync: {
+    method: "post",
+    path: "/money/kraken-link/sync",
+    scopes: CONNECT2,
+    afterScopes: AFTER2,
+    tag: "Money",
+    summary: "Sync Kraken now",
+    description: "Read the holdings from Kraken now, value them in EUR and set the account's balance, as the daily sync does. A failure keeps the last holdings and marks the link `failing` with its reason. Answers the link. 400 before a key is set.",
+    status: 200,
+    response: { description: "The Kraken link after the sync." },
+    errors: { 400: true, 403: true }
+  },
+  remove: {
+    method: "delete",
+    path: "/money/kraken-link",
+    scopes: CONNECT2,
+    afterScopes: AFTER2,
+    tag: "Money",
+    summary: "Remove the Kraken link",
+    description: "Forget the key's member's Kraken key and stop syncing. The account stays, with its last balance and holdings.",
+    status: 200,
+    response: { description: "The Kraken link, not configured." },
+    errors: { 403: true }
+  }
+});
+
 // ../../packages/schema/src/db/mail.ts
 var mailCampaignStatus = pgEnum("mail_campaign_status", [
   "draft",
@@ -32602,6 +33040,13 @@ var moneyNetWorthAccountSchema = object({
   source: moneySnapshotSourceSchema,
   month: moneyMonthSchema
 });
+var moneyNetWorthUnknownSchema = moneyNetWorthAccountSchema.pick({
+  accountId: true,
+  title: true,
+  kind: true,
+  visibility: true,
+  currency: true
+});
 var moneyNetWorthSchema = object({
   scope: moneyBudgetScopeSchema,
   month: moneyMonthSchema,
@@ -32609,7 +33054,9 @@ var moneyNetWorthSchema = object({
   have: amount5,
   owe: amount5,
   points: array(moneyNetWorthPointSchema),
-  accounts: array(moneyNetWorthAccountSchema)
+  accounts: array(moneyNetWorthAccountSchema),
+  complete: boolean2(),
+  unknown: array(moneyNetWorthUnknownSchema)
 });
 var setMoneyNetWorthValueInputSchema = object({
   accountId: ulidSchema,
@@ -32791,7 +33238,7 @@ var moneyOperations = defineOperations({
     scopes: ["finance:write"],
     tag: "Money",
     summary: "Import a statement",
-    description: "Book a statement's new lines as unreviewed transactions (the same upload as the preview). Re-importing a file, or an overlapping one, books nothing twice. An account without an IBAN takes the file's; the newest line's balance becomes the account's.",
+    description: "Book a statement's new lines as unreviewed transactions (the same upload as the preview). Re-importing a file, or an overlapping one, books nothing twice. An account without an IBAN takes the file's; the newest line's balance becomes the account's. For a bank whose export has no running balance, `balance` + `balanceAt` (a day, read as its end, or a moment; together, never a day ahead) state what the account holds and anchor it there, as an account update does; a preview ignores them.",
     body: moneyImportFieldsSchema,
     multipart: STATEMENT,
     status: 201,
@@ -32838,7 +33285,7 @@ var moneyOperations = defineOperations({
     scopes: ["finance:write"],
     tag: "Money",
     summary: "Sync bank connections now",
-    description: "Sync every live bank link the key may see, or with `accountId` the one feeding that account, the way the daily run does: booked transactions go through the CSV import's pipeline (the bank's entry id, else the CSV row of the same day, amount and counterparty or reference, is matched instead of booked twice), the rules and transfer matching run, and the balance is updated. Per link: outcome (ok \xB7 failed), fetched, imported, matched, duplicates and the error in plain words. An account is the household's (`visibility: space`) or \"Only me\" (`owner`, the default for a new one); another member never sees an Only me account or anything on it.",
+    description: "Sync every live bank link the key may see, or with `accountId` the one feeding that account, the way the daily run does: booked transactions go through the CSV import's pipeline (the bank's entry id, else the CSV row of the same amount booked within a day \u2014 the most alike when several fit \u2014 is matched: it adopts the bank's entry id instead of the row being booked twice), the rules and transfer matching run, and the balance is updated. Per link: outcome (ok \xB7 failed), fetched, imported, matched, duplicates and the error in plain words. An account is the household's (`visibility: space`) or \"Only me\" (`owner`, the default for a new one); another member never sees an Only me account or anything on it.",
     body: moneyBankSyncInputSchema,
     status: 200,
     response: { description: "What each sync did." },
@@ -32860,6 +33307,18 @@ var moneyOperations = defineOperations({
     response: { description: "The sync log." },
     errors: { 404: `No such account or transaction, or it is another member's "Only me" one.` }
   },
+  dedupe: {
+    method: "post",
+    path: "/money/dedupe",
+    scopes: ["finance:write"],
+    tag: "Money",
+    summary: "Fold a bank link's twins into the statement's rows",
+    description: "Find, on one `accountId`, the movements booked twice: a statement import's row (no bank entry id) and a bank link's row (with one), paired by the bank sync's own rule \u2014 the same amount, booked a day apart at most, the most alike when several fit (counterparty IBAN, structured reference, name, then the words), never one row twice. A preview by default: the pairs (`keepId` the statement's row, `twinId` the bank's, their days, amount, description) and their counts, writing nothing. With `commit: true` each pair is folded: the statement's row keeps its category, review status, notes, links, splits and transfer, takes the bank's entry id and the details it lacked; whatever pointed at the twin (links, splits, settlements, its transfer peer, a rule made from it, its note) moves to the kept row, and the twin is deleted. `changed` counts what moved. A pair marked `ambiguous` (another row fit just as well) is listed but never committed. Running it again changes nothing.",
+    body: moneyDedupeInputSchema,
+    status: 200,
+    response: { description: "The pairs, their counts and what changed." },
+    errors: { 400: true, 404: NO_ACCOUNT }
+  },
   getAccount: {
     method: "get",
     path: "/money/accounts/{id}",
@@ -32879,7 +33338,7 @@ var moneyOperations = defineOperations({
     scopes: ["finance:write"],
     tag: "Money",
     summary: "Update a money account",
-    description: "Rename it, change its kind, IBAN, opening balance, what it counts towards, or who sees it.",
+    description: "Rename it, change its kind, IBAN, opening balance, what it counts towards, or who sees it. `balance` with `balanceAt` (a day, read as its end, or a moment) states what it held then: the anchor net worth counts from, back and forward through the ledger, for a bank whose export has no running balance. The two go together; a day ahead, or an account a bank link keeps, is a 400.",
     pathParams: { id: "The account's ULID." },
     pathParamSchemas: { id: ulidSchema },
     body: updateMoneyAccountInputSchema,
@@ -33399,7 +33858,7 @@ var moneyOperations = defineOperations({
     scopes: ["finance:read"],
     tag: "Money",
     summary: "Get net worth and its monthly line",
-    description: "Net worth for the accounts that count in it (`includeInNetWorth`): `total`, `have` and `owe` this month, `points` (one per month, oldest first, the current month last; `total` null before any account had a value) and `accounts` (biggest first, each with its `value`, `source` \u2014 balance, ledger or manual \u2014 and the `month` that value is from). A loan or a credit card always counts as owed. This month follows each account's balance; the months before an account was first read are worked back from its ledger; a value set by hand carries on until the next one. `scope`: `all` (default), `space` or `owner`; `months` 2\u201360 (12 by default).",
+    description: "Net worth for the accounts that count in it (`includeInNetWorth`): `total`, `have` and `owe` this month, `points` (one per month, oldest first, the current month last; `total` null before any account had a value) and `accounts` (biggest first, each with its `value`, `source` \u2014 balance, ledger or manual \u2014 and the `month` that value is from). A loan or a credit card always counts as owed. This month follows each account's balance, carried forward by what was booked after `balanceAt`; the months before an account was first read are worked back from its ledger; a value set by hand carries on until the next one. An account whose ledger came from a bank but has no balance yet (an export with no running balance) is never counted as 0: it is listed under `unknown` and left out of the total, and `complete` is false. `scope`: `all` (default), `space` or `owner`; `months` 2\u201360 (12 by default).",
     query: [
       { name: "scope", description: "all, space or owner." },
       { name: "months", description: "How many months the line covers (2\u201360, default 12)." }
@@ -33427,7 +33886,7 @@ var moneyOperations = defineOperations({
     scopes: ["finance:read"],
     tag: "Money",
     summary: "List money goals",
-    description: "The goals this key may see (the household's, and its member's Only me ones), soonest target first: `targetAmount`, `targetOn`, `monthlyPlan`, the pot's account and Project by name, `saved` (`savedBefore` plus the transactions counted toward it) and the lines' `linesPlanned`/`linesPaid`.",
+    description: "The goals this key may see (the household's, and its member's Only me ones), soonest target first: `targetAmount`, `targetOn`, `monthlyPlan`, the pot's account and Project by name, `saved` and where it comes from (`savedFrom`: `account`, the balance of the account it's alone in; `account_share`, its own capped by what a shared account has left, soonest target first; `contributions`, `savedBefore` plus the transactions counted toward it, also when the account's balance is unknown, `accountBalanceKnown: false`), `remaining`, `monthlyNeed` (to `targetOn`) and the lines' `linesPlanned`/`linesPaid`.",
     status: 200,
     response: { description: "The goals." }
   },
@@ -34567,7 +35026,8 @@ var planUnplaceInputSchema = object({ taskId: ulidSchema }).strict();
 var planListQuerySchema = object({
   kind: planKindSchema.optional(),
   status: planStatusSchema.optional(),
-  startsOn: civilDaySchema.optional()
+  startsOn: civilDaySchema.optional(),
+  taskId: ulidSchema.optional()
 });
 var planTaskSchema = object({
   id: ulidSchema,
@@ -34787,6 +35247,7 @@ var automationListItemSchema = automationViewSchema.extend({
   madeBy: object({ userId: string2(), name: string2(), you: boolean2() }).nullable(),
   lastRun: automationRunSummarySchema.nullable()
 });
+var automationRunNowSchema = object({ queued: literal(true) });
 
 // ../../packages/schema/src/db/shopping.ts
 var shoppingLists = pgTable("shopping_lists", {
@@ -38540,6 +39001,18 @@ var WEEKDAY_ALT = "monday|tuesday|wednesday|thursday|friday|saturday|sunday|mon|
 var EVERY_N_RE = /\bevery\s+(\d+)\s+(day|days|week|weeks|month|months|year|years)\b/i;
 var EVERY_WEEKDAYS_RE = /\bevery\s+(?:weekday|weekdays|work\s?day|work\s?days)\b/i;
 var EVERY_WEEKDAY_RE = new RegExp(`\\bevery\\s+(${WEEKDAY_ALT})\\b`, "i");
+var EVERY_NTH_WEEKDAY_RE = new RegExp(`\\bevery\\s+(first|1st|second|2nd|third|3rd|fourth|4th|last)\\s+(${WEEKDAY_ALT}|sun)(?:\\s+of\\s+(?:the|each|every)\\s+month)?\\b`, "i");
+var NTH = {
+  first: "1",
+  "1st": "1",
+  second: "2",
+  "2nd": "2",
+  third: "3",
+  "3rd": "3",
+  fourth: "4",
+  "4th": "4",
+  last: "-1"
+};
 var EVERY_UNIT_RE = /\bevery\s+(day|week|month|year)\b/i;
 var ADVERB_RE = /\b(daily|weekly|monthly|yearly|annually)\b/i;
 var RELATIVE_RE = /\b(today|tonight|tomorrow|tmrw|tmr|yesterday)\b/i;
@@ -38671,6 +39144,12 @@ function takeEstimate(scan, take) {
   return;
 }
 function takeRecurrence(scan, take) {
+  const nth = scan.match(EVERY_NTH_WEEKDAY_RE);
+  if (nth && take(nth, "recurrence")) {
+    const ordinal = NTH[(nth[1] ?? "").toLowerCase()] ?? "1";
+    const byDay = `${ordinal}${weekdayByName(nth[2]).code}`;
+    return { mode: "rigid", freq: "monthly", interval: 1, byDay: [byDay] };
+  }
   const everyN = scan.match(EVERY_N_RE);
   if (everyN && take(everyN, "recurrence")) {
     const [, nStr = "1", unitRaw = "day"] = everyN;
@@ -38806,8 +39285,28 @@ function firstOccurrence(rule, now) {
     });
     return addDays(today, Math.min(...deltas));
   }
+  const nth = rule.freq === "monthly" ? rule.byDay?.map(parseByDay) : undefined;
+  if (nth?.length) {
+    const days = [0, 1].flatMap((ahead) => nth.flatMap((p) => {
+      if (!p)
+        return [];
+      const dow = WEEKDAYS.find((w) => w.code === p.weekday)?.dow ?? 0;
+      const day = nthWeekdayOfMonth(today.getFullYear(), today.getMonth() + ahead, dow, p.ordinal ?? 1);
+      return day >= today ? [day] : [];
+    }));
+    if (days.length > 0)
+      return new Date(Math.min(...days.map((d) => d.getTime())));
+  }
   return today;
 }
+function nthWeekdayOfMonth(year, month, dow, ordinal) {
+  if (ordinal < 0) {
+    const last = new Date(year, month + 1, 0);
+    return addDays(last, -((last.getDay() - dow + 7) % 7));
+  }
+  const first = new Date(year, month, 1);
+  return addDays(first, (dow - first.getDay() + 7) % 7 + (ordinal - 1) * 7);
+}
 function addMonths(d, months) {
   const next = new Date(d);
   next.setMonth(next.getMonth() + months);
@@ -38878,6 +39377,7 @@ var bookFacetSchema = object({
   coverSources: coverSourcesSchema.nullish(),
   pageCount: number2().int().min(1).max(1e5).nullish(),
   currentPage: number2().int().min(0).max(1e5).nullish(),
+  chapter: string2().trim().min(1).max(60).nullish(),
   isbn: string2().regex(/^[0-9Xx][0-9Xx\s-]{8,20}$/, "must be an ISBN").nullish()
 }).strict();
 var filmFacetSchema = object({
@@ -39215,7 +39715,7 @@ var STATUS_MARK = {
 };
 function suggestionText(s) {
   const parts = [
-    s.area,
+    [s.area, s.project].filter(Boolean).join(" \u203A ") || null,
     s.owner ? `owner ${ownerText(s.owner)}` : null,
     s.scheduledAt ? shortDate(s.scheduledAt) : null
   ].filter(Boolean);
@@ -40095,7 +40595,17 @@ function renderJournalImportScan(data, mode) {
   }
   out.push(`  milestone candidates ${count((i) => Boolean(i.milestoneCandidate))}`);
   out.push(`  health lines (left for Health) ${count((i) => Boolean(i.health))}`);
-  out.push("", d.dryRun ? paint(mode, "dim", "Dry run: nothing uploaded.") : `Staged ${d.staged ?? 0}${d.alreadyImported ? ` (${d.alreadyImported} already in the Journal, left as they are)` : ""}. Approve each month in the app: Journal \u203A Import.`);
+  out.push("", d.dryRun ? paint(mode, "dim", "Dry run: nothing uploaded.") : `Staged ${d.staged ?? 0}${d.alreadyImported ? ` (${d.alreadyImported} already in the Journal, left as they are)` : ""}. Approve each month with do journal import approve <YYYY-MM>, or in the app: Journal \u203A Import.`);
+  return out.join(`
+`);
+}
+function renderJournalImportApprove(data, mode) {
+  const d = data;
+  const batches = d.batches?.length ? paint(mode, "dim", `  (${d.batches.join(", ")})`) : "";
+  const out = [`Imported ${d.imported ?? 0} days into the Journal${batches}`];
+  if (d.open?.length) {
+    out.push("", "Still asking for a rating, left staged (answer with --rating YYYY-MM-DD=N):", ...d.open.map((o) => `  ${o.day}  \u201C${o.ratingQuestion}\u201D`));
+  }
   return out.join(`
 `);
 }
@@ -41224,11 +41734,16 @@ var commands2 = [
       ],
       flags: [
         { name: "unit", type: "string", description: "For a weight: g (default) or kg." },
+        {
+          name: "note",
+          type: "string",
+          description: 'For a weight: a short note drawn under its date ("vet check done").'
+        },
         { name: "at", type: "string", description: "When (ISO 8601); default now." }
       ],
       scopes: [...animalOperations.log.scopes],
       returns: "AnimalTimelineEntry",
-      notes: `${routeOf(animalOperations.log)} (\`animal_log\`). \`do animals log <hens> eggs 2\`, \`do animals log <dog> weight 37.8 --unit kg\`, \`do animals log <hen> note "eating again"\`. Eggs are the day's count: logging again that day replaces it.`
+      notes: `${routeOf(animalOperations.log)} (\`animal_log\`). \`do animals log <hens> eggs 2\`, \`do animals log <dog> weight 37.8 --unit kg\`, \`do animals log <tortoise> weight 1409 --note "vet check done"\`, \`do animals log <hen> note "eating again"\`. Eggs are the day's count: logging again that day replaces it.`
     },
     run: async ({ args, flags, requireClient }) => {
       const id = requireArg(args, 0, "animal id");
@@ -41238,8 +41753,11 @@ var commands2 = [
         throw usageError("animals log needs a value (a number, or the note's text)");
       const at = flagString(flags, "at");
       const unit = flagString(flags, "unit");
+      const note = flagString(flags, "note");
+      if (note && kind !== "weight")
+        throw usageError("--note goes with a weight");
       const n = Number(raw);
-      const fact = kind === "note" ? { kind, text: raw } : kind === "eggs" ? { kind, count: n } : kind === "weight" ? { kind, value: n, ...unit ? { unit } : {} } : { kind, value: n };
+      const fact = kind === "note" ? { kind, text: raw } : kind === "eggs" ? { kind, count: n } : kind === "weight" ? { kind, value: n, ...unit ? { unit } : {}, ...note ? { note } : {} } : { kind, value: n };
       if (kind !== "note" && Number.isNaN(n))
         throw usageError("the value must be a number");
       const body = parseInput(animalLogInputSchema, { ...fact, ...at ? { occurredAt: at } : {} });
@@ -42167,6 +42685,20 @@ var commands7 = [
 ];
 
 // src/commands/collection.ts
+var CHAPTER_FLAG = {
+  name: "chapter",
+  type: "string",
+  description: 'Where in the work: "9" (a chapter), "chapter 9", "book 9 and on".'
+};
+var LINKED_NOTE_FLAG = {
+  name: "linked-note",
+  type: "string",
+  description: "Note ULID this Entry is tied to."
+};
+var whereFlags = (flags) => ({
+  ...flagString(flags, "chapter") ? { chapter: flagString(flags, "chapter") } : {},
+  ...flagString(flags, "linked-note") ? { linkedNoteId: flagString(flags, "linked-note") } : {}
+});
 var commands8 = [
   {
     spec: {
@@ -42290,6 +42822,53 @@ var commands8 = [
       };
     }
   },
+  {
+    spec: {
+      path: ["collection", "reading"],
+      summary: "Say where you are in a book: its chapter and/or page.",
+      args: [{ name: "id", required: true, description: "Item ULID (a book)." }],
+      flags: [
+        {
+          name: "chapter",
+          type: "string",
+          description: 'Where you are: "9" (a chapter), "chapter 9", "book 9".'
+        },
+        { name: "page", type: "string", description: "The page you're on." },
+        { name: "clear-chapter", type: "boolean", description: "Forget the chapter." }
+      ],
+      scopes: [...collectionOperations.update.scopes],
+      returns: "CollectionItemView",
+      notes: `Reads the book's facet and patches it back with the new place (${routeOf(collectionOperations.update)}). A first page moves a book you want to doing (Progress); a chapter alone moves nothing.`
+    },
+    run: async ({ args, flags, requireClient }) => {
+      const id = requireArg(args, 0, "item id");
+      const chapter = flagString(flags, "chapter");
+      const clear = flagBool(flags, "clear-chapter");
+      const page = flagString(flags, "page");
+      if (page !== undefined && !/^\d+$/.test(page)) {
+        throw usageError("--page must be a whole number, e.g. 142");
+      }
+      if (chapter === undefined && page === undefined && !clear) {
+        throw usageError('collection reading needs --chapter or --page, e.g. --chapter "9"');
+      }
+      const client = requireClient();
+      const item = await client.get(pathOf(collectionOperations.get, { id }));
+      const { chapter: kept, ...rest } = item.facet ?? {};
+      const facet = {
+        ...rest,
+        ...clear || kept === undefined ? {} : { chapter: kept }
+      };
+      if (chapter !== undefined)
+        facet.chapter = chapter;
+      if (page !== undefined)
+        facet.currentPage = Number(page);
+      const body = parseInput(updateCollectionItemInputSchema, { facet });
+      return {
+        data: await client.patch(pathOf(collectionOperations.update, { id }), body),
+        render: renderRecord
+      };
+    }
+  },
   {
     spec: {
       path: ["collection", "add-entry"],
@@ -42309,7 +42888,9 @@ var commands8 = [
           description: "What happened: use (default) \xB7 service \xB7 repair \xB7 fault \xB7 lent \xB7 returned \xB7 valued \xB7 moved."
         },
         { name: "cost", type: "string", description: "What it cost (a sweep, a repair)." },
-        { name: "contact", type: "string", description: "Contact ULID of who did it." }
+        { name: "contact", type: "string", description: "Contact ULID of who did it." },
+        CHAPTER_FLAG,
+        LINKED_NOTE_FLAG
       ],
       scopes: [...collectionOperations.addEntry.scopes],
       returns: "CollectionItemDetail"
@@ -42331,7 +42912,8 @@ var commands8 = [
         ...flagString(flags, "note") ? { note: flagString(flags, "note") } : {},
         ...flagString(flags, "kind") ? { kind: flagString(flags, "kind") } : {},
         ...cost !== undefined ? { cost: Number(cost) } : {},
-        ...flagString(flags, "contact") ? { contactId: flagString(flags, "contact") } : {}
+        ...flagString(flags, "contact") ? { contactId: flagString(flags, "contact") } : {},
+        ...whereFlags(flags)
       });
       return {
         data: await requireClient().post(pathOf(collectionOperations.addEntry, { id }), body),
@@ -42420,7 +43002,8 @@ var commands8 = [
           name: "on",
           type: "string",
           description: "Day it occurred (YYYY-MM-DD); defaults to today."
-        }
+        },
+        CHAPTER_FLAG
       ],
       scopes: [...collectionOperations.log.scopes],
       returns: "CollectionLogResult",
@@ -42441,7 +43024,8 @@ var commands8 = [
         ...flagString(flags, "status") ? { status: flagString(flags, "status") } : {},
         ...rating !== undefined ? { rating: Number(rating) } : {},
         ...flagString(flags, "note") ? { note: flagString(flags, "note") } : {},
-        ...flagString(flags, "on") ? { occurredOn: flagString(flags, "on") } : {}
+        ...flagString(flags, "on") ? { occurredOn: flagString(flags, "on") } : {},
+        ...flagString(flags, "chapter") ? { chapter: flagString(flags, "chapter") } : {}
       });
       return {
         data: await requireClient().post(pathOf(collectionOperations.log), body),
@@ -42452,7 +43036,7 @@ var commands8 = [
   {
     spec: {
       path: ["collection", "edit-entry"],
-      summary: "Fix an Entry's day, rating or note.",
+      summary: "Fix an Entry's day, rating, note, chapter or linked note.",
       args: [
         { name: "id", required: true, description: "Item ULID." },
         { name: "entryId", required: true, description: "Entry ULID." }
@@ -42460,7 +43044,9 @@ var commands8 = [
       flags: [
         { name: "rating", type: "string", description: "New rating 0.5\u20135." },
         { name: "note", type: "string", description: "New note." },
-        { name: "on", type: "string", description: "New day (YYYY-MM-DD)." }
+        { name: "on", type: "string", description: "New day (YYYY-MM-DD)." },
+        CHAPTER_FLAG,
+        LINKED_NOTE_FLAG
       ],
       scopes: [...collectionOperations.editEntry.scopes],
       returns: "CollectionItemDetail"
@@ -42475,7 +43061,8 @@ var commands8 = [
       const body = parseInput(updateCollectionEntryInputSchema, {
         ...rating !== undefined ? { rating: Number(rating) } : {},
         ...flagString(flags, "note") ? { note: flagString(flags, "note") } : {},
-        ...flagString(flags, "on") ? { occurredOn: flagString(flags, "on") } : {}
+        ...flagString(flags, "on") ? { occurredOn: flagString(flags, "on") } : {},
+        ...whereFlags(flags)
       });
       return {
         data: await requireClient().patch(pathOf(collectionOperations.editEntry, { id, entryId }), body),
@@ -42682,12 +43269,18 @@ var CONNECTION_COMMAND_SPECS = [
   },
   {
     path: ["money", "bank-link", "pending"],
-    summary: "A bank authorisation waiting to be mapped: its bank accounts and the suggestions.",
-    args: [{ name: "id", required: true, description: "The pendingId from `complete`." }],
+    summary: "The bank authorisations waiting to be mapped, or one by its id: bank accounts and suggestions.",
+    args: [
+      {
+        name: "id",
+        required: false,
+        description: "The pendingId from `complete`; without it, every one still waiting."
+      }
+    ],
     flags: [],
     scopes: scopesOf(bankLinkOperations.pending),
-    returns: "MoneyBankPending",
-    notes: `${routeOf(bankLinkOperations.pending)}.`
+    returns: "MoneyBankPending (one) or MoneyBankPending[] (all)",
+    notes: `${routeOf(bankLinkOperations.pending)}; without an id ${routeOf(bankLinkOperations.pendings)}, newest first, each with createdAt and expiresAt (a day after). Finds an authorisation whose browser tab is gone, before it runs out.`
   },
   {
     path: ["money", "bank-link", "link"],
@@ -42705,6 +43298,53 @@ var CONNECTION_COMMAND_SPECS = [
     returns: "MoneyConnectionView[]",
     notes: `${routeOf(bankLinkOperations.link)}. Each do account is fed by one bank account.`
   },
+  {
+    path: ["money", "kraken-link", "status"],
+    summary: "Your Kraken link: the account it feeds, how its last sync went, and the holdings it saw.",
+    args: [],
+    flags: [],
+    scopes: scopesOf(krakenLinkOperations.status),
+    returns: "MoneyKrakenLinkStatus",
+    notes: `${routeOf(krakenLinkOperations.status)}. The key is never returned.`
+  },
+  {
+    path: ["money", "kraken-link", "set"],
+    summary: "Give do your read-only Kraken API key, read from a file, and sync.",
+    args: [],
+    flags: [
+      {
+        name: "key-file",
+        type: "string",
+        description: "Path to a file holding the API key and its private key (two lines, or JSON with apiKey and apiSecret), or - to read it from stdin."
+      },
+      {
+        name: "account",
+        type: "string",
+        description: "The EUR investment account it feeds. Left out: the link's account, or a new one named Kraken."
+      }
+    ],
+    scopes: scopesOf(krakenLinkOperations.set),
+    returns: "MoneyKrakenLinkStatus",
+    notes: `${routeOf(krakenLinkOperations.set)}. Make the key at Kraken with only Query Funds ticked: a key that can see open orders is refused. The key and secret are read from the file and sealed; they are never a flag, never printed and never read back. A new Kraken account is "Only me", so making it needs finance:write on the key too (or pass --account). Replaces a key set before.`
+  },
+  {
+    path: ["money", "kraken-link", "sync"],
+    summary: "Read your Kraken holdings now and update the account's balance.",
+    args: [],
+    flags: [],
+    scopes: scopesOf(krakenLinkOperations.sync),
+    returns: "MoneyKrakenLinkStatus",
+    notes: `${routeOf(krakenLinkOperations.sync)}. A failure keeps the last holdings and shows on the link as failing, with its reason.`
+  },
+  {
+    path: ["money", "kraken-link", "remove"],
+    summary: "Forget your Kraken key. The account keeps its last balance and holdings.",
+    args: [],
+    flags: [DESTRUCTIVE],
+    scopes: scopesOf(krakenLinkOperations.remove),
+    returns: "MoneyKrakenLinkStatus",
+    notes: `${routeOf(krakenLinkOperations.remove)}. Gated behind --allow-destructive.`
+  },
   {
     path: ["doccle", "connect"],
     summary: "Give do your Doccle login so the nightly import can run. do checks it with Doccle first and keeps it sealed.",
@@ -42811,8 +43451,14 @@ var CONNECTION_HANDLERS = {
   },
   "money bank-link pending": async ({ args, requireClient }) => {
     const id = args[0];
-    if (!id)
-      throw usageError("money bank-link pending needs the pendingId");
+    if (!id) {
+      return {
+        data: await guarded([], () => requireClient().get(pathOf(bankLinkOperations.pendings))),
+        render: (data, mode) => Array.isArray(data) ? data.length === 0 ? "No bank links waiting to be mapped." : data.map((p) => renderPending(p, mode)).join(`
+
+`) : renderRecord(data, mode)
+      };
+    }
     return {
       data: await guarded([], () => requireClient().get(pathOf(bankLinkOperations.pending, { id }))),
       render: renderPending
@@ -42827,6 +43473,32 @@ var CONNECTION_HANDLERS = {
 `) || "Linked."
     };
   },
+  "money kraken-link status": async ({ requireClient }) => ({
+    data: await guarded([], () => requireClient().get(pathOf(krakenLinkOperations.status))),
+    render: renderKraken
+  }),
+  "money kraken-link set": async ({ io, flags, requireClient }) => {
+    refuseSecretFlags(flags, ["key", "api-key", "secret", "api-secret", "private-key"], "--key-file <path>");
+    const text = await readSecret(io, flags, "key-file", "the Kraken key", "all");
+    const { apiKey, apiSecret } = parseKrakenKey(text);
+    const account = flagString(flags, "account")?.trim();
+    const body = { apiKey, apiSecret, ...account ? { accountId: account } : {} };
+    return {
+      data: await guarded([apiKey, apiSecret], () => requireClient().put(pathOf(krakenLinkOperations.set), body)),
+      render: renderKraken
+    };
+  },
+  "money kraken-link sync": async ({ requireClient }) => ({
+    data: await guarded([], () => requireClient().post(pathOf(krakenLinkOperations.sync), {})),
+    render: renderKraken
+  }),
+  "money kraken-link remove": async ({ flags, requireClient }) => {
+    assertDestructive(flags, "forget the Kraken key");
+    return {
+      data: await guarded([], () => requireClient().delete(pathOf(krakenLinkOperations.remove))),
+      render: renderKraken
+    };
+  },
   "doccle connect": (ctx) => connectDoccle(ctx),
   "steam link": async ({ io, flags, requireClient }) => {
     refuseSecretFlags(flags, ["key", "steam-key", "web-api-key"], "--key-file <path>");
@@ -43003,7 +43675,8 @@ function renderPending(data, mode) {
   const p = data;
   if (!Array.isArray(p?.accounts))
     return renderRecord(data, mode);
-  const lines = [`${p.bank ?? "Bank"} \xB7 pending ${p.pendingId}`];
+  const until = p.expiresAt ? ` \xB7 map before ${p.expiresAt}` : "";
+  const lines = [`${p.bank ?? "Bank"} \xB7 pending ${p.pendingId}${until}`];
   for (const a of p.accounts) {
     const label = [a.name, a.ibanMasked].filter(Boolean).join(" ") || "account";
     const hint = a.suggestedAccountId ? ` \u2192 ${a.suggestedAccountId}` : "";
@@ -43012,6 +43685,48 @@ function renderPending(data, mode) {
   return lines.join(`
 `);
 }
+function parseKrakenKey(text) {
+  const hint = "the key file should hold the API key and its private key: two lines, or JSON with apiKey and apiSecret";
+  if (text.startsWith("{")) {
+    let parsed;
+    try {
+      parsed = JSON.parse(text);
+    } catch {
+      throw usageError(hint);
+    }
+    const o = parsed ?? {};
+    const apiKey = o.apiKey ?? o.key;
+    const apiSecret = o.apiSecret ?? o.secret ?? o.privateKey;
+    if (typeof apiKey !== "string" || typeof apiSecret !== "string")
+      throw usageError(hint);
+    return { apiKey: apiKey.trim(), apiSecret: apiSecret.trim() };
+  }
+  const lines = text.split(/\r?\n/).map((l) => l.trim()).filter((l) => l.length > 0);
+  if (lines.length !== 2)
+    throw usageError(hint);
+  return { apiKey: lines[0], apiSecret: lines[1] };
+}
+function renderKraken(data, mode) {
+  const k = data;
+  if (typeof k?.configured !== "boolean")
+    return renderRecord(data, mode);
+  if (!k.link)
+    return k.configured ? "Kraken key set, not linked yet." : "No Kraken key set.";
+  const synced = k.link.lastSyncAt ? ` \xB7 synced ${k.link.lastSyncAt}` : " \xB7 not synced yet";
+  const lines = [`Kraken \u2192 ${k.link.accountTitle} \xB7 ${k.link.status}${synced}`];
+  if (k.link.lastError)
+    lines.push(`  ${k.link.lastError}`);
+  if (k.holdings) {
+    lines.push(`Holdings at ${k.holdings.at} \xB7 \u20AC ${k.holdings.totalEur}`);
+    for (const h of k.holdings.holdings) {
+      const value = h.valueEur === null ? "no EUR price" : `\u20AC ${h.valueEur}`;
+      const share = h.share === null ? "" : ` \xB7 ${(h.share * 100).toFixed(1)}%`;
+      lines.push(`  ${h.asset.padEnd(6)} ${h.amount}  ${value}${share}`);
+    }
+  }
+  return lines.join(`
+`);
+}
 var commands10 = pairCommands(CONNECTION_COMMAND_SPECS, CONNECTION_HANDLERS);
 
 // src/commands/contacts.ts
@@ -46416,7 +47131,8 @@ import { createHash } from "crypto";
 import { readdirSync, readFileSync as readFileSync7 } from "fs";
 import { join as join2 } from "path";
 var DAY_FILE = /^(\d{4}-\d{2}-\d{2})\.md$/;
-var RATING = /(?:[A-Za-z]+\s*\()?(~)?\s*(\d{1,2}(?:\.\d)?)(?:\s*[-\u2013]\s*(\d{1,2}))?\s*\/\s*10\)?/;
+var SCORE = "(?:10|[1-9])";
+var RATING = new RegExp(`(?:\\p{L}+\\s*\\()?(?<![\\p{L}\\p{N}_./~-])(~)?\\s*(${SCORE}(?:\\.\\d)?)(?:\\s*[-\u2013]\\s*(${SCORE}))?\\s*/\\s*10(?![\\p{L}\\p{N}_/-]|[.,]\\d)\\)?`, "u");
 var HEALTH = /\b(symptoms?|stomach|nausea|headaches?|migraine|doctor|GP|medication|meds|pills?|blood|fever|pain|clinic|hospital)\b/i;
 var NOISE = /\b(PR monitor|GitHub daily|deploy(?:ment)? watch\w*|cron|heartbeat|sales prospects?)\b/i;
 var MILESTONE = /\b(first|went live|is live|win:|moved in|arrived|wedding|engaged)\b/i;
@@ -46485,8 +47201,8 @@ function parseDailyNote(path, day, text) {
   const ratingLine = all.find((l) => /rating/i.test(l) && RATING.test(l)) ?? all.find((l) => RATING.test(l));
   const match = ratingLine ? RATING.exec(ratingLine) : null;
   if (match) {
-    const [whole, approx, low, high] = match;
-    if (approx || high)
+    const [whole, approx, low = "", high] = match;
+    if (approx || high || low.includes("."))
       ratingQuestion = whole.trim();
     else
       rating = Number(low);
@@ -46508,7 +47224,7 @@ function parseDailyNote(path, day, text) {
       inCheck = false;
       if (line === ratingLine || /how was (the|your) day/i.test(line))
         continue;
-      if (HEALTH.test(line) || NOISE.test(line))
+      if (HEALTH.test(line) || NOISE.test(line) || isPrivateLine(line))
         continue;
       kept.push(line);
     }
@@ -46518,8 +47234,13 @@ function parseDailyNote(path, day, text) {
 `).trim() || null;
     const firstProse = (body ?? "").split(/\n\s*\n/).map((p) => plain(p)).find((p) => p.length > 0);
     title = firstProse ? firstSentence(firstProse.replace(/^The day\s*/i, "")) : null;
+  } else {
+    body = all.filter((l) => !/^#\s/.test(l) && l !== ratingLine && !/how was (the|your) day/i.test(l) && !HEALTH.test(l) && !NOISE.test(l) && !isPrivateLine(l)).join(`
+`).replace(/\n{3,}/g, `
+
+`).trim() || null;
   }
-  const milestoneLine = all.find((l) => MILESTONE.test(l) && !HEALTH.test(l) && !NOISE.test(l) && plain(l).length > 0);
+  const milestoneLine = all.find((l) => MILESTONE.test(l) && !HEALTH.test(l) && !NOISE.test(l) && !isPrivateLine(l) && plain(l).length > 0);
   const highlight = milestoneLine ? firstSentence(plain(milestoneLine), 80) : null;
   const sleep = sleepOf(all);
   const prs = (text.match(PR_REF) ?? []).length;
@@ -46900,7 +47621,7 @@ var commands24 = [
         description: "How the days name their folder (default memory/daily)."
       }
     ],
-    notes: ", 400 days a request. The day's '## Day summary' becomes its entry; a clear 'n/10' rating is kept, '~5/10' or '3-4/10' becomes a question; health and automation lines never reach the text. Nothing is written into the Journal until the member approves the month (the app only; a key can't approve). Re-running replaces what's still waiting.",
+    notes: ", 400 days a request. The day's '## Day summary' becomes its entry; a clear 'n/10' rating (n 1 to 10, standing on its own) is kept, '~5/10' or '3-4/10' becomes a question; health and automation lines never reach the text, and lines about drinking, smoking, drugs, relapse or fertility never reach the title, text or highlight (the API strips them too). A day without a summary gets its kept lines as its text. Nothing is written into the Journal until a month is approved (`do journal import approve`, or the member in the app). Re-running replaces what's still waiting.",
     run: async ({ args, flags, requireClient }) => {
       const dir = requireArg(args, 0, "dir");
       const items = scanDailyNotes(dir, flagString(flags, "label") ?? "memory/daily");
@@ -46925,6 +47646,42 @@ var commands24 = [
       };
     }
   }),
+  defineCommand({
+    operation: journalOperations.approveImport,
+    path: ["journal", "import", "approve"],
+    summary: "Approve staged days into the Journal: one month's batch, or --all; --rating answers a fuzzy rating.",
+    args: [{ name: "batch", required: false, description: "The month to approve, YYYY-MM." }],
+    flags: [
+      { name: "all", type: "boolean", description: "Approve every staged batch." },
+      {
+        name: "rating",
+        type: "string",
+        description: "Answer a day's rating question, YYYY-MM-DD=N (1 to 10); repeat per day."
+      }
+    ],
+    notes: ". A day whose rating question has no --rating stays staged and is listed as open; the rest are written as imports. An agent's approve shows in the member's change list with Undo. Lines about drinking, smoking, drugs, relapse or fertility are never written.",
+    run: async ({ args, flags, requireClient }) => {
+      const batch = args[0];
+      const all = flagBool(flags, "all");
+      if (batch === undefined === !all) {
+        throw usageError("approve one month (YYYY-MM) or --all");
+      }
+      const ratings = flagStrings(flags, "rating").map((answer) => {
+        const m = /^(\d{4}-\d{2}-\d{2})=(\d+(?:\.\d+)?)$/.exec(answer.trim());
+        if (!m)
+          throw usageError(`--rating takes YYYY-MM-DD=N, got "${answer}"`);
+        return { day: m[1], rating: Number(m[2]) };
+      });
+      const input = parseInput(journalImportApproveInputSchema, {
+        ...all ? { all: true } : { batch },
+        ratings
+      });
+      return {
+        data: await requireClient().post(pathOf(journalOperations.approveImport), input),
+        render: renderJournalImportApprove
+      };
+    }
+  }),
   defineCommand({
     operation: journalOperations.importOverview,
     path: ["journal", "import", "status"],
@@ -47811,6 +48568,87 @@ var commands30 = [
 // src/commands/money.ts
 import { readFileSync as readFileSync8 } from "fs";
 import { basename as basename5 } from "path";
+
+// ../../packages/domain/src/money.ts
+var toNumber = (cents) => Number(cents) / 100;
+function formatMoney(amount, {
+  currency = "EUR",
+  signed = false,
+  whole = false,
+  cents: always = false,
+  locale
+} = {}) {
+  const exact = typeof amount === "bigint" ? amount : amountToCents(amount);
+  const cents = whole ? roundToEuro(exact) : exact;
+  const abs = cents < 0n ? -cents : cents;
+  const text = new Intl.NumberFormat(locale ?? "en-IE", {
+    style: "currency",
+    currency,
+    minimumFractionDigits: always || abs % 100n !== 0n ? 2 : 0,
+    maximumFractionDigits: 2
+  }).format(toNumber(abs));
+  if (cents < 0n)
+    return `\u2212${text}`;
+  return signed && cents > 0n ? `+${text}` : text;
+}
+function roundToEuro(cents) {
+  const abs = cents < 0n ? -cents : cents;
+  const rounded = (abs + 50n) / 100n * 100n;
+  return cents < 0n ? -rounded : rounded;
+}
+function goalSavedSource(goal) {
+  const account = goal.accountTitle ?? "the account";
+  if (goal.savedFrom === "account")
+    return `all of ${account}`;
+  if (goal.savedFrom === "account_share")
+    return `its share of ${account}`;
+  if (goal.accountTitle && goal.accountBalanceKnown === false) {
+    return `counted toward it; the balance of ${goal.accountTitle} is unknown`;
+  }
+  return "counted toward it";
+}
+
+// src/commands/money.ts
+function renderDedupe(data) {
+  const r = data;
+  const lines = r.pairs.map((p) => `${p.bookedOn}  ${p.amount.padStart(10)}  ${p.description ?? p.counterpartyName ?? ""}  keep ${p.keepId}  twin ${p.twinId} (${p.twinBookedOn})${p.ambiguous ? "  ambiguous: sort by hand" : ""}`);
+  const c = r.changed;
+  lines.push(`${r.counts.pairs} pairs, ${r.counts.ambiguous} ambiguous`, r.committed ? `merged ${c.merged} \xB7 links ${c.links} \xB7 splits ${c.splits} \xB7 settlements ${c.settlements} \xB7 transfers ${c.transfers} \xB7 rules ${c.rules} \xB7 notes ${c.notes}` : "preview: nothing changed (--commit folds the unambiguous pairs)");
+  return lines.join(`
+`);
+}
+function renderGoals(data) {
+  const goals = Array.isArray(data) ? data : [];
+  if (goals.length === 0)
+    return "(no goals yet)";
+  return goals.map((g) => {
+    const whole = (a) => formatMoney(a, { whole: true });
+    const parts = [
+      `${whole(g.saved)} of ${whole(g.targetAmount)} (${goalSavedSource(g)})`,
+      Number(g.remaining) > 0 ? `${whole(g.remaining)} to go` : "reached",
+      g.monthlyNeed && g.targetOn ? `${formatMoney(g.monthlyNeed)} a month by ${g.targetOn}` : null
+    ];
+    return `${g.title}  ${parts.filter(Boolean).join(" \xB7 ")}  ${g.id}`;
+  }).join(`
+`);
+}
+function syncLine(r) {
+  const when = r.startedAt ? `${String(r.startedAt).slice(0, 16).replace("T", " ")}  ` : "";
+  const what = r.accountTitle ? `${r.accountTitle}  ` : "";
+  const counts = `fetched ${r.fetched ?? 0} \xB7 imported ${r.imported ?? 0} \xB7 matched ${r.matched ?? 0} \xB7 duplicates ${r.duplicates ?? 0}`;
+  return `${when}${what}${r.outcome ?? "?"}  ${counts}${r.error ? `
+  ${r.error}` : ""}`;
+}
+function renderSyncLog(data) {
+  const rows = Array.isArray(data) ? data : data.data ?? [];
+  return rows.length === 0 ? "(no syncs yet)" : rows.map(syncLine).join(`
+`);
+}
+function renderSyncResults(data) {
+  const { results } = data;
+  return results.length === 0 ? "(no live bank links)" : results.map(syncLine).join(`
+`);
+}
 function partyFlag(flags) {
   const userId = flagString(flags, "with-user");
   const contactId = flagString(flags, "with-contact");
@@ -47871,13 +48709,34 @@ var commands31 = [
   defineCommand({
     operation: moneyOperations.updateAccount,
     path: ["money", "account-update"],
-    summary: "Edit a money account.",
+    summary: "Edit a money account, or state its balance (for an export with no balance column).",
     args: [{ name: "id", required: true, description: "Account ULID." }],
-    flags: [{ name: "data", type: "string", description: "UpdateMoneyAccountInput JSON." }],
+    flags: [
+      { name: "data", type: "string", description: "UpdateMoneyAccountInput JSON." },
+      {
+        name: "balance",
+        type: "string",
+        description: "What the account holds, e.g. 1234.56 (sets balance)."
+      },
+      {
+        name: "balance-at",
+        type: "string",
+        description: "The day (YYYY-MM-DD, its end) or moment that balance is from (default today)."
+      }
+    ],
     returns: "MoneyAccountView",
-    run: async ({ args, flags, requireClient }) => {
+    notes: ". `--balance 1234.56 --balance-at 2026-10-27` anchors an account whose bank export has no running balance (ING's): net worth counts from it, back and forward through the ledger. A negative one rides as `--balance=-20`. A day ahead is refused, and so is an account a bank link keeps. `--data` takes the rest (title, kind, iban, includeInNetWorth, \u2026).",
+    run: async ({ args, flags, io, requireClient }) => {
       const id = requireArg(args, 0, "account id");
-      const body = parseInput(updateMoneyAccountInputSchema, readDataFlag(flags));
+      const balance = flagString(flags, "balance");
+      const balanceAt = flagString(flags, "balance-at");
+      if (balanceAt !== undefined && balance === undefined) {
+        throw usageError("--balance-at goes with --balance");
+      }
+      const body = parseInput(updateMoneyAccountInputSchema, {
+        ...readDataFlag(flags),
+        ...balance !== undefined ? { balance, balanceAt: balanceAt ?? isoDay(io.now()) } : {}
+      });
       return {
         data: await requireClient().patch(pathOf(moneyOperations.updateAccount, { id }), body),
         render: renderRecord
@@ -47926,7 +48785,33 @@ var commands31 = [
       });
       return {
         data: await requireClient().post(pathOf(moneyOperations.syncConnections), body),
-        render: renderRecord
+        render: renderSyncResults
+      };
+    }
+  }),
+  defineCommand({
+    operation: moneyOperations.dedupe,
+    path: ["money", "dedupe"],
+    summary: "Find movements booked twice on an account (a statement's row and a bank link's twin); --commit folds them.",
+    args: [],
+    flags: [
+      { name: "account", type: "string", description: "The account ULID (required)." },
+      {
+        name: "commit",
+        type: "boolean",
+        description: "Fold the pairs; without it, a preview that writes nothing."
+      }
+    ],
+    returns: "MoneyDedupeResult",
+    notes: ". Pairs by the bank sync's rule: same amount, booked a day apart at most, the most alike when several fit. A commit keeps the statement's row (category, review status, notes, links, splits, transfer), gives it the bank's entry id, moves what pointed at the twin onto it and deletes the twin. An `ambiguous` pair is never committed. Running it twice changes nothing the second time.",
+    run: async ({ flags, requireClient }) => {
+      const body = parseInput(moneyDedupeInputSchema, {
+        accountId: requireFlag(flags, "account", "say which account: --account <id>"),
+        ...flagBool(flags, "commit") ? { commit: true } : {}
+      });
+      return {
+        data: await requireClient().post(pathOf(moneyOperations.dedupe), body),
+        render: renderDedupe
       };
     }
   }),
@@ -47937,7 +48822,7 @@ var commands31 = [
     args: [{ name: "id", required: true, description: "Bank link (connection) ULID." }],
     flags: [],
     returns: "MoneyConnectionSync[]",
-    run: readOperation(moneyOperations.listConnectionSyncs, renderList, { id: "id" })
+    run: readOperation(moneyOperations.listConnectionSyncs, renderSyncLog, { id: "id" })
   }),
   defineCommand({
     operation: moneyOperations.listCategories,
@@ -47990,9 +48875,9 @@ var commands31 = [
       { name: "cursor", type: "string", description: "The previous page's nextCursor." }
     ],
     returns: "{ data: MoneyTransactionView[], nextCursor }",
-    notes: ". Amounts are signed decimal strings. `--business` keeps rows with a business share; `--business-status` and `--tax-tag` narrow further.",
+    notes: ". Amounts are signed decimal strings. `--business` keeps rows with a business share; `--business-status` and `--tax-tag` narrow further. A page is 100 rows at most: while `nextCursor` isn't null, pass it back as `--cursor` for the next.",
     run: async ({ flags, requireClient }) => ({
-      data: await requireClient().get(pathOf(moneyOperations.listTransactions), {
+      data: await requireClient().getPage(pathOf(moneyOperations.listTransactions), {
         query: {
           accountId: flagString(flags, "account"),
           status: flagString(flags, "status"),
@@ -48456,12 +49341,22 @@ var commands31 = [
     flags: [
       { name: "account", type: "string", description: "The account's ULID." },
       { name: "since", type: "string", description: "First day to take (default 2025-01-01)." },
-      { name: "commit", type: "boolean", description: "Book the new lines (else a preview)." }
+      { name: "commit", type: "boolean", description: "Book the new lines (else a preview)." },
+      {
+        name: "balance",
+        type: "string",
+        description: "What the account holds, for an export with no balance column (anchors it with --commit)."
+      },
+      {
+        name: "balance-at",
+        type: "string",
+        description: "The day (YYYY-MM-DD, its end) or moment --balance is from (default today)."
+      }
     ],
     scopes: [...moneyOperations.previewImport.scopes, ...moneyOperations.commitImport.scopes],
     returns: "MoneyImportPreview | MoneyImportResult",
-    notes: `${routeOf(moneyOperations.previewImport)}, or ${routeOf(moneyOperations.commitImport)} with --commit (\`money_import_file\`). A KBC Touch export reads as is (\`;\`, comma decimals, UTF-8 or Windows-1252), and so does a CODA file. Each line is new, duplicate, before_window, other_account or other_currency; a line at exactly 0,00 (nothing moved, e.g. ING's empty SEPA lines) is left out and listed under \`skipped\`, counted as \`counts.nothing_moved\`, never a problem; re-importing books nothing twice. On a credit_card account the file is the card's statement: its CSV export (KBC's credit card CSV reads as is; a transaction cost is its own row) or the statement PDF's text (\`cardStatement\` says which, the total and the debit day); paying it off is a transfer, never spending twice.`,
-    run: async ({ args, flags, requireClient }) => {
+    notes: `${routeOf(moneyOperations.previewImport)}, or ${routeOf(moneyOperations.commitImport)} with --commit (\`money_import_file\`). A KBC Touch export reads as is (\`;\`, comma decimals, UTF-8 or Windows-1252), and so does a CODA file. Each line is new, duplicate, before_window, other_account or other_currency; a line at exactly 0,00 (nothing moved, e.g. ING's empty SEPA lines) is left out and listed under \`skipped\`, counted as \`counts.nothing_moved\`, never a problem; re-importing books nothing twice. On a credit_card account the file is the card's statement: its CSV export (KBC's credit card CSV reads as is; a transaction cost is its own row) or the statement PDF's text (\`cardStatement\` says which, the total and the debit day); paying it off is a transfer, never spending twice. A bank whose export has no running balance (ING's) leaves the account's balance unknown: \`--balance 1234.56 [--balance-at YYYY-MM-DD]\` with --commit states it, as \`do money account-update --balance\` does (a preview ignores it).`,
+    run: async ({ args, flags, io, requireClient }) => {
       const path = requireArg(args, 0, "path to the statement CSV");
       const account = requireFlag(flags, "account", "money import needs --account <account id>");
       let bytes;
@@ -48475,6 +49370,19 @@ var commands31 = [
       const since = flagString(flags, "since");
       if (since !== undefined)
         form.append("since", since);
+      const balance = flagString(flags, "balance");
+      const balanceAt = flagString(flags, "balance-at");
+      if (balanceAt !== undefined && balance === undefined) {
+        throw usageError("--balance-at goes with --balance");
+      }
+      if (balance !== undefined) {
+        const anchor = parseInput(updateMoneyAccountInputSchema, {
+          balance,
+          balanceAt: balanceAt ?? isoDay(io.now())
+        });
+        form.append("balance", anchor.balance);
+        form.append("balanceAt", anchor.balanceAt);
+      }
       const name = basename5(path);
       form.append("file", new File([Uint8Array.from(bytes)], name, { type: "text/csv" }), name);
       const op = flagBool(flags, "commit") ? moneyOperations.commitImport : moneyOperations.previewImport;
@@ -48623,7 +49531,7 @@ var commands31 = [
       }
     ],
     returns: "MoneyNetWorth",
-    notes: ". total, have and owe this month; points per month (oldest first, total null before any value); accounts biggest first with value, source (balance \xB7 ledger \xB7 manual) and the month it's from. A loan or a card always counts as owed.",
+    notes: ". total, have and owe this month; points per month (oldest first, total null before any value); accounts biggest first with value, source (balance \xB7 ledger \xB7 manual) and the month it's from. A loan or a card always counts as owed. `complete: false` when an account counts but its balance isn't known (a bank export with no running balance): it's listed under `unknown`, left out of the total, never counted as 0; `do money account-update <id> --balance \u2026 --balance-at \u2026` states it.",
     run: async ({ flags, requireClient }) => ({
       data: await requireClient().get(pathOf(moneyOperations.netWorthRead), {
         query: { scope: flagString(flags, "scope"), months: flagString(flags, "months") }
@@ -48662,7 +49570,8 @@ var commands31 = [
     args: [],
     flags: [],
     returns: "MoneyGoalView[]",
-    run: readOperation(moneyOperations.listGoals, renderList)
+    notes: ". `saved` reads `savedFrom`: `account` (the only goal in its account: the balance), `account_share` (several share one: each its own, capped by what's left, soonest target first) or `contributions` (savedBefore plus what's counted toward it; also when the account's balance is unknown, `accountBalanceKnown: false`). `remaining` is the target less saved; `monthlyNeed` spreads it over the months to `targetOn`.",
+    run: readOperation(moneyOperations.listGoals, renderGoals)
   }),
   defineCommand({
     operation: moneyOperations.getGoal,
@@ -51694,7 +52603,7 @@ var commands49 = [
         "#tag": "Adds a tag. Repeatable: '#home #urgent'.",
         "!": "Stars the task \u2014 the 1\u20132 things that matter (aliases: !star/!s/!flag/!f). Drives Today's focus and the starred filter.",
         "~area": "Files it into an existing Area by its title, case-insensitive: '~garden' for 'Garden'. One word (letters, digits, - and _), so an Area named with spaces can't be named here \u2014 file it after with `do tasks update <id> --data '{\"areaId\":\"<id>\"}'`. An unknown name files nothing (never creates an Area); the first ~area wins. Valid names: `do areas list --json` (their `title`).",
-        when: "The planned day and time: 'today', 'tomorrow 3pm', 'fri', 'next monday', 'in 3 days', 'at 16:00', 'tonight' (18:00); the past for back-filling: 'yesterday', 'last friday'. A time makes it a timed task (allDay false). 'every monday' / 'every 2 weeks' / 'daily' attaches a recurrence.",
+        when: "The planned day and time: 'today', 'tomorrow 3pm', 'fri', 'next monday', 'in 3 days', 'at 16:00', 'tonight' (18:00); the past for back-filling: 'yesterday', 'last friday'. A time makes it a timed task (allDay false). 'every monday' / 'every 2 weeks' / 'daily' / 'every first sunday' / 'every last friday' attaches a recurrence.",
         "by / due": "The Deadline, never the plan: 'by friday', 'due fri', 'due tomorrow 5pm', 'by 17:00' (today). 'by' with no date after it ('pay by card') stays in the title.",
         estimate: "How long it takes (durationMinutes): '30m', '45 min', '1h', '1.5h', '1h30', '2 hours', 'for 20 mins'. Not 'in 2 hours'."
       }