friend-assistant 0.1.25 → 0.1.26

package/dist/friend.mjs

@@ -1,169 +1,37 @@
 #!/usr/bin/env node
 import { createRequire as __friendCreateRequire } from 'node:module'; const require = __friendCreateRequire(import.meta.url);
 
-// ../server/src/brokers/types.ts
-var BrokerError = class extends Error {
-  constructor(message, kind) {
-    super(message);
-    this.kind = kind;
-    this.name = "BrokerError";
-  }
-  kind;
-};
-
-// ../server/src/brokers/portfolio.ts
-var MOVERS = 3;
-var TOP = 5;
-var r2 = (n) => Number.isFinite(n) ? Math.round((n + Number.EPSILON) * 100) / 100 : 0;
-function summarize(holdings) {
-  let value = 0;
-  let invested = 0;
-  let yesterday = 0;
-  for (const h of holdings) {
-    value += h.quantity * h.lastPrice;
-    invested += h.quantity * h.avgPrice;
-    yesterday += h.quantity * h.closePrice;
-  }
-  const dayChange = value - yesterday;
-  const pnl = value - invested;
-  const move = (h) => h.quantity * (h.lastPrice - h.closePrice);
-  const worth = (h) => h.quantity * h.lastPrice;
-  const top = [...holdings].sort((a, b) => worth(b) - worth(a)).slice(0, TOP).map((h) => ({ symbol: h.symbol, pct: value > 0 ? r2(worth(h) / value * 100) : 0 }));
-  return {
-    value: r2(value),
-    invested: r2(invested),
-    pnl: r2(pnl),
-    pnlPct: invested > 0 ? r2(pnl / invested * 100) : 0,
-    dayChange: r2(dayChange),
-    dayChangePct: yesterday > 0 ? r2(dayChange / yesterday * 100) : 0,
-    gainers: holdings.filter((h) => move(h) > 0).sort((a, b) => move(b) - move(a)).slice(0, MOVERS),
-    losers: holdings.filter((h) => move(h) < 0).sort((a, b) => move(a) - move(b)).slice(0, MOVERS),
-    topHoldingPct: top[0]?.pct ?? 0,
-    top
-  };
-}
-var Portfolio = class {
-  constructor(provider, clock = Date.now, ttlMs = 3e4) {
-    this.provider = provider;
-    this.clock = clock;
-    this.ttlMs = ttlMs;
-  }
-  provider;
-  clock;
-  ttlMs;
-  cached = null;
-  inflight = null;
-  invalidate() {
-    this.cached = null;
-  }
-  snapshot() {
-    if (this.cached && this.clock() - this.cached.at < this.ttlMs) return Promise.resolve(this.cached);
-    this.inflight ??= this.read().finally(() => {
-      this.inflight = null;
-    });
-    return this.inflight;
-  }
-  async read() {
-    const at = this.clock();
-    const caps = this.provider.capabilities;
-    const [holdings, positions, funds, orders] = await Promise.all([
-      section(caps.holdings, () => this.provider.holdings()),
-      section(caps.positions, () => this.provider.positions()),
-      section(caps.funds, () => this.provider.funds()),
-      section(caps.orders, () => this.provider.orders())
-    ]);
-    this.cached = { at, holdings, positions, funds, orders };
-    return this.cached;
-  }
-};
-async function section(supported, read) {
-  if (!supported) return { ok: false, error: "Not available from this broker.", kind: "other" };
-  try {
-    return { ok: true, data: await read() };
-  } catch (e) {
-    return e instanceof BrokerError ? { ok: false, error: e.message, kind: e.kind } : { ok: false, error: "Could not read this.", kind: "other" };
+// ../server/src/brokers/money.ts
+var DEFAULT_MONEY = { symbol: "\u20B9", locale: "en-IN" };
+var formats = /* @__PURE__ */ new Map();
+function formatterFor(locale2) {
+  let f = formats.get(locale2);
+  if (!f) {
+    try {
+      f = new Intl.NumberFormat(locale2, { minimumFractionDigits: 2, maximumFractionDigits: 2, useGrouping: true });
+    } catch {
+      f = formatterFor(DEFAULT_MONEY.locale);
+    }
+    formats.set(locale2, f);
   }
+  return f;
 }
-
-// ../server/src/brokers/report.ts
-function formatInr(n) {
+function formatMoney(n, o = DEFAULT_MONEY) {
   const value = Number.isFinite(n) ? n : 0;
   const fixed = Math.abs(value).toFixed(2);
-  const [whole, cents] = fixed.split(".");
-  const grouped = whole.length <= 3 ? whole : `${whole.slice(0, -3).replace(/\B(?=(\d{2})+(?!\d))/g, ",")},${whole.slice(-3)}`;
   const negative = value < 0 && fixed !== "0.00";
-  return `${negative ? "-" : ""}\u20B9${grouped}.${cents}`;
-}
-var signedInr = (n) => n > 4e-3 ? `+${formatInr(n)}` : formatInr(n);
-var signedPct = (p) => {
-  const x = Number.isFinite(p) ? p : 0;
-  const text2 = Math.abs(x).toFixed(2);
-  return text2 === "0.00" ? "0.00%" : `${x > 0 ? "+" : "-"}${text2}%`;
-};
-var pct1 = (p) => Math.abs(p).toFixed(1);
-var TITLE = { morning: "Morning report", close: "Market close report", custom: "Portfolio report" };
-var WHY = { rate: "rate limit", session: "login expired", network: "network problem", auth: "login problem" };
-var missing = (label2, s) => `${label2}: not available (${WHY[s.kind] ?? s.error.slice(0, 60)})`;
-var CONCENTRATED = 30;
-var BIG_DROP = 5;
-function title(kind, broker, now, zone) {
-  const parts = Object.fromEntries(
-    new Intl.DateTimeFormat("en-GB", { timeZone: zone, weekday: "short", day: "numeric", month: "short", hour: "2-digit", minute: "2-digit", hourCycle: "h23" }).formatToParts(now).map((p) => [p.type, p.value])
-  );
-  return `${TITLE[kind]} - ${broker} - ${parts.weekday} ${parts.day} ${parts.month}, ${parts.hour}:${parts.minute}`;
-}
-var dayMovePct = (h) => h.closePrice > 0 ? (h.lastPrice - h.closePrice) / h.closePrice * 100 : 0;
-function buildReport(input) {
-  const { snapshot: snap, caps } = input;
-  const out = [title(input.kind, input.broker, input.now, input.zone ?? "Asia/Kolkata"), ""];
-  if (caps.holdings) {
-    if (!snap.holdings.ok) out.push(missing("Holdings", snap.holdings));
-    else if (snap.holdings.data.length === 0) out.push("No holdings.");
-    else {
-      const holdings = snap.holdings.data;
-      const s = summarize(holdings);
-      out.push(`Portfolio: ${formatInr(s.value)} (invested ${formatInr(s.invested)})`);
-      out.push(`Profit/loss: ${signedInr(s.pnl)} (${signedPct(s.pnlPct)})`);
-      out.push(`Today: ${signedInr(s.dayChange)} (${signedPct(s.dayChangePct)})`);
-      const mover = (h) => `- ${h.symbol} ${signedInr(h.quantity * (h.lastPrice - h.closePrice))} (${signedPct(dayMovePct(h))})`;
-      if (s.gainers.length) out.push("", "Up today:", ...s.gainers.map(mover));
-      if (s.losers.length) out.push("", "Down today:", ...s.losers.map(mover));
-      const flags = [];
-      const top = s.top[0];
-      if (top && s.topHoldingPct > CONCENTRATED) flags.push(`- ${top.symbol} is ${pct1(s.topHoldingPct)}% of the portfolio.`);
-      for (const h of holdings) if (dayMovePct(h) < -BIG_DROP) flags.push(`- ${h.symbol} is down ${pct1(dayMovePct(h))}% today.`);
-      if (flags.length) out.push("", "Worth a look:", ...flags);
-    }
-  }
-  if (caps.positions) {
-    out.push("");
-    if (!snap.positions.ok) out.push(missing("Positions", snap.positions));
-    else {
-      const open = snap.positions.data.filter((p) => p.quantity !== 0);
-      if (open.length === 0) out.push("No open positions.");
-      else {
-        out.push("Open positions:");
-        for (const p of open) out.push(`- ${p.symbol} ${p.product} ${p.quantity}${p.quantity < 0 ? " (short)" : ""} @ ${formatInr(p.avgPrice)}, P&L ${signedInr(p.pnl)}`);
-      }
-    }
-  }
-  if (caps.funds) {
-    out.push("");
-    if (!snap.funds.ok) out.push(missing("Funds", snap.funds));
-    else out.push(`Funds: ${formatInr(snap.funds.data.available)} available, ${formatInr(snap.funds.data.used)} used`);
-  }
-  if (caps.orders && snap.orders.ok && snap.orders.data.length > 0) out.push(`Orders today: ${snap.orders.data.length}`);
-  return out.join("\n").replace(/\n{3,}/g, "\n\n").trim();
+  return `${negative ? "-" : ""}${o.symbol}${formatterFor(o.locale).format(Number(fixed))}`;
 }
 
 // ../server/src/brokers/tooltext.ts
 var MAX_ROWS = 40;
-var WHY2 = { rate: "Zerodha's rate limit was hit, try again in a minute", session: "the login has ended", network: "Zerodha could not be reached", auth: "there is a login problem" };
+var WHY = { rate: "Zerodha's rate limit was hit, try again in a minute", session: "the login has ended", network: "Zerodha could not be reached", auth: "there is a login problem" };
 var asOf = (at, zone) => new Intl.DateTimeFormat("en-GB", { timeZone: zone, hour: "2-digit", minute: "2-digit", hourCycle: "h23" }).format(new Date(at));
 var rows = (items, line) => [...items.slice(0, MAX_ROWS).map(line), ...items.length > MAX_ROWS ? [`...and ${items.length - MAX_ROWS} more`] : []];
-function partText(part, snap, zone) {
+function partText(part, snap, zone, money = DEFAULT_MONEY) {
+  const formatInr = (n) => formatMoney(n, money);
   const section2 = snap[part];
-  if (!section2.ok) return `Could not read the ${part}: ${WHY2[section2.kind] ?? section2.error.slice(0, 100)}.`;
+  if (!section2.ok) return `Could not read the ${part}: ${WHY[section2.kind] ?? section2.error.slice(0, 100)}.`;
   const head = `Zerodha ${part} as of ${asOf(snap.at, zone)}:`;
   switch (part) {
     case "holdings": {
@@ -563,6 +431,19 @@ function matcherMatches(m, args) {
   return true;
 }
 
+// ../server/src/alexa/constants.ts
+var ALEXA_LOCALES = ["en-IN", "hi-IN"];
+var ALEXA_LIMITS = {
+  answerSeconds: { min: 2, max: 7.5, def: 6.5 },
+  holdMinutes: { min: 1, max: 60, def: 10 },
+  permissionSeconds: { min: 30, max: 600, def: 120 },
+  requestsPerMinute: { min: 10, max: 600, def: 60 },
+  maxDevices: { min: 1, max: 50, def: 10 }
+};
+var TOOL_NAME = /^[a-z][a-z0-9._-]{1,60}$/;
+var NOT_BY_VOICE = ["shell.", "fs.", "code.", "settings.", "connectors.", "plugins.", "plugin.", "integrations.", "camera.", "screen.", "mcp."];
+var isNeverByVoice = (tool) => NOT_BY_VOICE.some((p) => tool.startsWith(p));
+
 // ../server/src/policy/engine.ts
 var ASK_EVERY_TIME = /* @__PURE__ */ new Set(["camera.snap"]);
 var MEMBER_TOOLS = /* @__PURE__ */ new Set(["weather.get", "stage.scene", "stage.show", "stage.update", "stage.hide", "stage.presence", "stage.mood"]);
@@ -586,7 +467,6 @@ var VOICE_TOOLS = /* @__PURE__ */ new Set([
   "stage.mood",
   "stage.presence"
 ]);
-var NOT_BY_VOICE = ["shell.", "fs.", "code.", "settings.", "connectors.", "plugins.", "plugin.", "integrations.", "camera.", "screen.", "mcp."];
 var EDIT_TOOLS = /* @__PURE__ */ new Set(["fs.list", "fs.read", "fs.write", "code.run"]);
 var isAdminTool = (tool) => tool.startsWith("connectors.") || tool.startsWith("plugins.") || tool.startsWith("integrations.");
 var PolicyEngine = class {
@@ -607,7 +487,9 @@ var PolicyEngine = class {
     if (input.trust === "member") return MEMBER_TOOLS.has(input.tool) ? "allow" : "deny";
     if (input.trust === "voice-device") {
       if (VOICE_TOOLS.has(input.tool)) return "allow";
-      if (input.baseTier === "T3" || input.baseTier === "T0" || input.baseTier === "T1" || NOT_BY_VOICE.some((p) => input.tool.startsWith(p))) return "deny";
+      if (input.baseTier === "T3" || isNeverByVoice(input.tool)) return "deny";
+      if (this.config.alexa.extraVoiceTools.includes(input.tool)) return "allow";
+      if (input.baseTier === "T0" || input.baseTier === "T1") return "deny";
       return "ask";
     }
     let tier = input.baseTier;
@@ -2501,7 +2383,7 @@ var Agent = class {
       case "portfolio.orders": {
         const got = await b.snapshot("zerodha");
         if (!got.ok) return { ok: false, text: got.sessionExpired ? ended : got.error };
-        return { ok: true, text: partText(name.slice("portfolio.".length), got.snapshot, zone) };
+        return { ok: true, text: partText(name.slice("portfolio.".length), got.snapshot, zone, { symbol: this.deps.config.brokers.currencySymbol, locale: this.deps.config.brokers.numberLocale }) };
       }
       case "reports.list": {
         const all = b.schedules.list();
@@ -2807,15 +2689,35 @@ function sanitizeAlexa(raw) {
     const label2 = typeof x.name === "string" ? x.name.replace(/[\u0000-\u001f\u007f]/g, " ").trim().slice(0, 40) : "";
     return [{ id: x.id, name: label2 || "Echo", addedAt: typeof x.addedAt === "number" && Number.isFinite(x.addedAt) ? x.addedAt : 0 }];
   });
+  const num3 = (v, o, whole = true) => typeof v === "number" && Number.isFinite(v) ? Math.min(o.max, Math.max(o.min, whole ? Math.round(v) : Math.round(v * 10) / 10)) : o.def;
+  const locales = [...new Set((Array.isArray(r.locales) ? r.locales : []).filter((l) => ALEXA_LOCALES.includes(l)))];
+  const tools = [...new Set((Array.isArray(r.extraVoiceTools) ? r.extraVoiceTools : []).filter((t) => typeof t === "string" && TOOL_NAME.test(t) && !isNeverByVoice(t)))].slice(0, 20);
+  const maxDevices = num3(r.maxDevices, ALEXA_LIMITS.maxDevices);
   return {
     installed: r.installed === true || r.installed === void 0 && (r.enabled === true || skillId !== ""),
     enabled: r.enabled === true,
     skillId,
     invocationName: name,
-    allowedUsers: users.slice(0, 10)
+    skillName: (typeof r.skillName === "string" ? r.skillName.replace(/[\u0000-\u001f\u007f]/g, " ").trim().slice(0, 50) : "") || "Friend Assistant",
+    locales: locales.length ? locales : [...ALEXA_LOCALES],
+    answerSeconds: num3(r.answerSeconds, ALEXA_LIMITS.answerSeconds, false),
+    holdMinutes: num3(r.holdMinutes, ALEXA_LIMITS.holdMinutes),
+    permissionSeconds: num3(r.permissionSeconds, ALEXA_LIMITS.permissionSeconds),
+    requestsPerMinute: num3(r.requestsPerMinute, ALEXA_LIMITS.requestsPerMinute),
+    maxDevices,
+    extraVoiceTools: tools,
+    allowedUsers: users.slice(0, maxDevices)
   };
 }
 var DEFAULT_TIMEZONE = "Asia/Kolkata";
+var validNumberLocale = (l) => {
+  if (typeof l !== "string" || !l || l.length > 35) return false;
+  try {
+    return Intl.NumberFormat.supportedLocalesOf([l]).length === 1;
+  } catch {
+    return false;
+  }
+};
 var isValidTimeZone = (z12) => {
   if (typeof z12 !== "string" || !z12) return false;
   try {
@@ -2835,7 +2737,16 @@ function sanitizeBrokers(raw) {
   const z12 = r.zerodha && typeof r.zerodha === "object" ? r.zerodha : {};
   const str2 = (v, max) => typeof v === "string" ? v.trim().slice(0, max) : "";
   const reminder = typeof r.loginReminderMinutes === "number" && Number.isFinite(r.loginReminderMinutes) ? Math.min(120, Math.max(0, Math.round(r.loginReminderMinutes))) : 15;
+  const num3 = (v, min, max, def) => typeof v === "number" && Number.isFinite(v) ? Math.min(max, Math.max(min, Math.round(v))) : def;
   return {
+    currencySymbol: str2(r.currencySymbol, 4) || "\u20B9",
+    currencyName: str2(r.currencyName, 20) || "rupees",
+    numberLocale: validNumberLocale(r.numberLocale) ? r.numberLocale : "en-IN",
+    concentrationPct: num3(r.concentrationPct, 5, 90, 30),
+    bigDropPct: num3(r.bigDropPct, 1, 50, 5),
+    cacheSeconds: num3(r.cacheSeconds, 5, 300, 30),
+    maxSchedules: num3(r.maxSchedules, 1, 50, 20),
+    maxTriesPerDay: num3(r.maxTriesPerDay, 1, 10, 3),
     zerodha: {
       installed: z12.installed === true || z12.installed === void 0 && (z12.enabled === true || !!str2(z12.apiKey, 64)),
       enabled: z12.enabled === true,
@@ -3736,8 +3647,8 @@ async function stopLive(l) {
   if (pid) killTree(pid);
 }
 var messageOf = (e) => (e instanceof Error ? e.message : String(e)).slice(0, 400);
-var sleepReject = (ms, what) => new Promise((_, rej) => {
-  const t = setTimeout(() => rej(new Error(what)), ms);
+var sleepReject = (ms2, what) => new Promise((_, rej) => {
+  const t = setTimeout(() => rej(new Error(what)), ms2);
   t.unref?.();
 });
 var McpHub = class {
@@ -4722,7 +4633,7 @@ var ChannelHub = class _ChannelHub {
     this.deps = deps;
     this.f = deps.fetch ?? fetch;
     this.now = deps.clock ?? Date.now;
-    this.sleep = deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+    this.sleep = deps.sleep ?? ((ms2) => new Promise((r) => setTimeout(r, ms2)));
   }
   deps;
   f;
@@ -5021,7 +4932,6 @@ var ChannelHub = class _ChannelHub {
 
 // ../server/src/alexa/devices.ts
 var MAX_WAITING = 20;
-var MAX_ALLOWED = 10;
 var WAITING_TTL_MS = 24 * 36e5;
 var USER_ID = /^amzn1\.ask\.account\.[A-Za-z0-9._-]{8,500}$/;
 var SHORT = 8;
@@ -5056,7 +4966,7 @@ var AlexaDevices = class {
   allow(short, name) {
     this.prune();
     const matches = [...this.waitingMap.values()].filter((w2) => short.length === SHORT && w2.id.endsWith(short));
-    if (matches.length !== 1 || this.store.config().allowedUsers.length >= MAX_ALLOWED) return false;
+    if (matches.length !== 1 || this.store.config().allowedUsers.length >= this.store.config().maxDevices) return false;
     const w = matches[0];
     const label2 = name.replace(/[\u0000-\u001f\u007f]/g, " ").trim().slice(0, 40) || "Echo";
     this.store.update((a) => a.allowedUsers.push({ id: w.id, name: label2, addedAt: this.clock() }));
@@ -5159,6 +5069,7 @@ function shortForVoice(text2) {
 
 // ../server/src/alexa/engine.ts
 var FAST = ["PortfolioIntent", "WeatherIntent", "TasksIntent", "StatusIntent"];
+var ms = (v, def) => typeof v === "function" ? v() : v ?? def;
 var AlexaEngine = class {
   constructor(d) {
     this.d = d;
@@ -5206,7 +5117,7 @@ var AlexaEngine = class {
   ready(key, lang) {
     const slot = this.slots.get(key);
     if (slot?.pending) return { speech: say(lang, "working"), end: false };
-    if (!slot || this.d.clock() - slot.at > (this.d.holdMs ?? 6e5)) {
+    if (!slot || this.d.clock() - slot.at > ms(this.d.holdMs, 6e5)) {
       this.slots.delete(key);
       return { speech: say(lang, "nothing"), end: true };
     }
@@ -5231,7 +5142,7 @@ var AlexaEngine = class {
     const waited = await Promise.race([
       work,
       new Promise((resolve11) => {
-        timer = setTimeout(() => resolve11("late"), this.d.budgetMs ?? 6500);
+        timer = setTimeout(() => resolve11("late"), ms(this.d.budgetMs, 6500));
       })
     ]);
     clearTimeout(timer);
@@ -5250,6 +5161,70 @@ var AlexaEngine = class {
   }
 };
 
+// ../server/src/alexa/package.ts
+var packageFileNames = (locales) => ["skill.json", ...locales.map((l) => `${l}.json`)];
+var langOf2 = (locale2) => locale2.startsWith("hi") ? "hi" : "en";
+var FIXED = {
+  en: {
+    PortfolioIntent: ["how is my portfolio", "how is my portfolio doing", "how are my stocks doing", "what is my portfolio", "my portfolio", "portfolio"],
+    TasksIntent: ["what are my tasks", "what do i have to do", "what is on my list", "read my tasks", "my tasks"],
+    StatusIntent: ["status", "give me the status", "what is the status", "are you there"],
+    ReadyIntent: ["is it ready", "is it done", "are you done", "do you have an answer", "what is the answer"],
+    weather: ["what is the weather in {city}", "how is the weather in {city}", "weather in {city}", "tell me the weather in {city}"]
+  },
+  hi: {
+    PortfolioIntent: ["\u092E\u0947\u0930\u093E \u092A\u094B\u0930\u094D\u091F\u092B\u094B\u0932\u093F\u092F\u094B \u0915\u0948\u0938\u093E \u0939\u0948", "\u092E\u0947\u0930\u093E \u092A\u094B\u0930\u094D\u091F\u092B\u094B\u0932\u093F\u092F\u094B \u0915\u0948\u0938\u093E \u091A\u0932 \u0930\u0939\u093E \u0939\u0948", "\u092E\u0947\u0930\u0947 \u0936\u0947\u092F\u0930 \u0915\u0948\u0938\u0947 \u0939\u0948\u0902", "\u092E\u0947\u0930\u093E \u092A\u094B\u0930\u094D\u091F\u092B\u094B\u0932\u093F\u092F\u094B", "\u092A\u094B\u0930\u094D\u091F\u092B\u094B\u0932\u093F\u092F\u094B"],
+    TasksIntent: ["\u092E\u0947\u0930\u0947 \u0915\u093E\u092E \u0915\u094D\u092F\u093E \u0939\u0948\u0902", "\u092E\u0941\u091D\u0947 \u0915\u094D\u092F\u093E \u0915\u0930\u0928\u093E \u0939\u0948", "\u092E\u0947\u0930\u0940 \u0938\u0942\u091A\u0940 \u092E\u0947\u0902 \u0915\u094D\u092F\u093E \u0939\u0948", "\u092E\u0947\u0930\u0947 \u0915\u093E\u092E \u092A\u0922\u093C\u094B", "\u092E\u0947\u0930\u0947 \u0915\u093E\u092E"],
+    StatusIntent: ["\u0938\u094D\u0925\u093F\u0924\u093F", "\u0938\u094D\u0925\u093F\u0924\u093F \u092C\u0924\u093E\u0913", "\u0915\u094D\u092F\u093E \u0924\u0941\u092E \u092F\u0939\u093E\u0901 \u0939\u094B"],
+    ReadyIntent: ["\u0915\u094D\u092F\u093E \u0924\u0948\u092F\u093E\u0930 \u0939\u0948", "\u091C\u0935\u093E\u092C \u0924\u0948\u092F\u093E\u0930 \u0939\u0948", "\u0939\u094B \u0917\u092F\u093E \u0915\u094D\u092F\u093E", "\u0915\u094D\u092F\u093E \u091C\u0935\u093E\u092C \u0939\u0948"],
+    weather: ["{city} \u092E\u0947\u0902 \u092E\u094C\u0938\u092E \u0915\u0948\u0938\u093E \u0939\u0948", "{city} \u0915\u093E \u092E\u094C\u0938\u092E \u0915\u0948\u0938\u093E \u0939\u0948", "{city} \u0915\u093E \u092E\u094C\u0938\u092E"]
+  }
+};
+var BUILT_IN = ["AMAZON.CancelIntent", "AMAZON.HelpIntent", "AMAZON.StopIntent", "AMAZON.FallbackIntent", "AMAZON.NavigateHomeIntent"];
+function intents(lang) {
+  const f = FIXED[lang];
+  return [
+    ...BUILT_IN.map((name) => ({ name, samples: [] })),
+    { name: "PortfolioIntent", samples: f.PortfolioIntent },
+    { name: "WeatherIntent", slots: [{ name: "city", type: "AMAZON.SearchQuery" }], samples: f.weather },
+    { name: "TasksIntent", samples: f.TasksIntent },
+    { name: "StatusIntent", samples: f.StatusIntent },
+    { name: "ReadyIntent", samples: f.ReadyIntent },
+    // open questions: one free-text slot per sentence, so each lead-in is its own intent and the engine can put the sentence back together
+    ...LEAD_INTENTS.map((name) => ({ name, slots: [{ name: "q", type: "AMAZON.SearchQuery" }], samples: [`${LEAD_INS[name][lang]} {q}`] }))
+  ];
+}
+var model = (invocationName, lang) => JSON.stringify({ interactionModel: { languageModel: { invocationName, intents: intents(lang), types: [] } } }, null, 2);
+var locale = (lang, invocationName, name) => ({
+  name,
+  summary: lang === "hi" ? "\u0905\u092A\u0928\u0947 \u092B\u094D\u0930\u0947\u0902\u0921 \u0905\u0938\u093F\u0938\u094D\u091F\u0947\u0902\u091F \u0938\u0947 \u092C\u093E\u0924 \u0915\u0930\u0947\u0902\u0964" : "Talk to your own Friend assistant.",
+  description: lang === "hi" ? "\u092F\u0939 \u0906\u092A\u0915\u0947 \u0905\u092A\u0928\u0947 \u092B\u094D\u0930\u0947\u0902\u0921 \u0905\u0938\u093F\u0938\u094D\u091F\u0947\u0902\u091F \u0915\u0947 \u0932\u093F\u090F \u0928\u093F\u091C\u0940 \u0938\u094D\u0915\u093F\u0932 \u0939\u0948\u0964 \u0906\u092A\u0915\u0947 \u0905\u092A\u0928\u0947 \u0915\u0902\u092A\u094D\u092F\u0942\u091F\u0930 \u092A\u0930 \u091A\u0932\u0924\u093E \u0939\u0948\u0964" : "A private skill for your own self-hosted Friend assistant. It talks to your own computer.",
+  examplePhrases: [lang === "hi" ? `\u0905\u0932\u0947\u0915\u094D\u0938\u093E, ${invocationName} \u0938\u0947 \u092E\u0947\u0930\u093E \u092A\u094B\u0930\u094D\u091F\u092B\u094B\u0932\u093F\u092F\u094B \u0915\u0948\u0938\u093E \u0939\u0948 \u092A\u0942\u091B\u094B` : `Alexa, ask ${invocationName} how my portfolio is`, `Alexa, open ${invocationName}`, `Alexa, ask ${invocationName} what is on my list`],
+  keywords: ["friend", "assistant"]
+});
+function buildSkillPackage(o) {
+  const locales = o.locales?.length ? o.locales : ALEXA_LOCALES;
+  const skillName = o.skillName?.trim() || "Friend Assistant";
+  const problem = invocationNameProblem(o.invocationName);
+  if (problem) throw new Error(problem);
+  if (!/^https:\/\/[^\s/]+\/\S*$/.test(o.endpoint)) throw new Error("The address must be an https address, such as https://your-address/api/alexa.");
+  const manifest = {
+    manifest: {
+      manifestVersion: "1.0",
+      publishingInformation: {
+        locales: Object.fromEntries(locales.map((l) => [l, locale(langOf2(l), o.invocationName, skillName)])),
+        isAvailableWorldwide: false,
+        distributionCountries: [...new Set(locales.map((l) => l.slice(3)))],
+        category: "ORGANIZERS_AND_ASSISTANTS",
+        testingInstructions: "A private skill for its owner's own self-hosted assistant. It is used in development mode only."
+      },
+      apis: { custom: { endpoint: { uri: o.endpoint, sslCertificateType: "Trusted" } } },
+      privacyAndCompliance: { allowsPurchases: false, usesPersonalInfo: false, isChildDirected: false, isExportCompliant: true, containsAds: false }
+    }
+  };
+  return { "skill.json": JSON.stringify(manifest, null, 2), ...Object.fromEntries(locales.map((l) => [`${l}.json`, model(o.invocationName, langOf2(l))])) };
+}
+
 // ../server/src/alexa/permission.ts
 var YES = /* @__PURE__ */ new Set(["yes", "y", "yeah", "ok", "okay", "ha", "haan", "han", "\u0939\u093E\u0901", "\u0939\u093E\u0902", "\u0939\u093E"]);
 var NO = /* @__PURE__ */ new Set(["no", "n", "nope", "nahi", "nahin", "\u0928\u0939\u0940\u0902", "\u0928\u093E"]);
@@ -5270,17 +5245,19 @@ var VoicePermission = class {
     const channels = this.d.linked();
     const screen = this.d.screenOpen();
     if (card.needsPin || !channels.length && !screen) return answer(card.id, false);
+    const waitMs = typeof this.d.waitMs === "function" ? this.d.waitMs() : this.d.waitMs ?? 12e4;
+    const minutes2 = Math.max(1, Math.round(waitMs / 6e4));
     const entry = {
       id: card.id,
       answer,
-      timer: setTimeout(() => this.settle(card.id, false), this.d.waitMs ?? 12e4)
+      timer: setTimeout(() => this.settle(card.id, false), waitMs)
     };
     this.waiting.push(entry);
     if (screen) base(card);
     if (channels.length) {
       const channel = channels.includes("telegram") ? "telegram" : channels[0];
       const text2 = `Alexa asked to: ${card.summary}
-Reply YES to allow it, or NO to refuse, within 2 minutes.`;
+Reply YES to allow it, or NO to refuse, within ${minutes2} ${minutes2 === 1 ? "minute" : "minutes"}.`;
       this.d.send(channel, "me", text2).then(
         (r) => {
           if (!r.ok && !screen) this.settle(card.id, false);
@@ -5437,6 +5414,7 @@ var AlexaHub = class {
     this.d = d;
     this.devices = new AlexaDevices(d.store, d.clock);
     this.permission = new VoicePermission({
+      waitMs: () => d.config.alexa.permissionSeconds * 1e3,
       send: async (channel, to, text2) => {
         const r = await d.channels.send(channel, to, text2);
         return { ok: r.ok };
@@ -5444,7 +5422,13 @@ var AlexaHub = class {
       linked: d.linked,
       screenOpen: d.screenOpen
     });
-    this.engine = new AlexaEngine({ ask: (t, l, k) => this.ask(t, l, k), fast: d.fast, clock: d.clock });
+    this.engine = new AlexaEngine({
+      ask: (t, l, k) => this.ask(t, l, k),
+      fast: d.fast,
+      clock: d.clock,
+      budgetMs: () => d.config.alexa.answerSeconds * 1e3,
+      holdMs: () => d.config.alexa.holdMinutes * 6e4
+    });
   }
   d;
   devices;
@@ -5456,7 +5440,7 @@ var AlexaHub = class {
   }
   status() {
     const a = this.d.config.alexa;
-    return { installed: a.installed, enabled: a.enabled, skillIdSet: !!a.skillId, invocationName: a.invocationName, endpoint: this.endpoint(), waiting: this.devices.waiting(), allowed: this.devices.allowed() };
+    return { installed: a.installed, enabled: a.enabled, skillIdSet: !!a.skillId, invocationName: a.invocationName, endpoint: this.endpoint(), files: packageFileNames(a.locales), waiting: this.devices.waiting(), allowed: this.devices.allowed() };
   }
   /** The owner's reply on Telegram or WhatsApp. True when it answered a permission request from Alexa. */
   tryApprove(text2) {
@@ -5528,83 +5512,21 @@ var AlexaHub = class {
   }
 };
 
-// ../server/src/alexa/package.ts
-var PACKAGE_FILES = ["skill.json", "en-IN.json", "hi-IN.json"];
-var FIXED = {
-  en: {
-    PortfolioIntent: ["how is my portfolio", "how is my portfolio doing", "how are my stocks doing", "what is my portfolio", "my portfolio", "portfolio"],
-    TasksIntent: ["what are my tasks", "what do i have to do", "what is on my list", "read my tasks", "my tasks"],
-    StatusIntent: ["status", "give me the status", "what is the status", "are you there"],
-    ReadyIntent: ["is it ready", "is it done", "are you done", "do you have an answer", "what is the answer"],
-    weather: ["what is the weather in {city}", "how is the weather in {city}", "weather in {city}", "tell me the weather in {city}"]
-  },
-  hi: {
-    PortfolioIntent: ["\u092E\u0947\u0930\u093E \u092A\u094B\u0930\u094D\u091F\u092B\u094B\u0932\u093F\u092F\u094B \u0915\u0948\u0938\u093E \u0939\u0948", "\u092E\u0947\u0930\u093E \u092A\u094B\u0930\u094D\u091F\u092B\u094B\u0932\u093F\u092F\u094B \u0915\u0948\u0938\u093E \u091A\u0932 \u0930\u0939\u093E \u0939\u0948", "\u092E\u0947\u0930\u0947 \u0936\u0947\u092F\u0930 \u0915\u0948\u0938\u0947 \u0939\u0948\u0902", "\u092E\u0947\u0930\u093E \u092A\u094B\u0930\u094D\u091F\u092B\u094B\u0932\u093F\u092F\u094B", "\u092A\u094B\u0930\u094D\u091F\u092B\u094B\u0932\u093F\u092F\u094B"],
-    TasksIntent: ["\u092E\u0947\u0930\u0947 \u0915\u093E\u092E \u0915\u094D\u092F\u093E \u0939\u0948\u0902", "\u092E\u0941\u091D\u0947 \u0915\u094D\u092F\u093E \u0915\u0930\u0928\u093E \u0939\u0948", "\u092E\u0947\u0930\u0940 \u0938\u0942\u091A\u0940 \u092E\u0947\u0902 \u0915\u094D\u092F\u093E \u0939\u0948", "\u092E\u0947\u0930\u0947 \u0915\u093E\u092E \u092A\u0922\u093C\u094B", "\u092E\u0947\u0930\u0947 \u0915\u093E\u092E"],
-    StatusIntent: ["\u0938\u094D\u0925\u093F\u0924\u093F", "\u0938\u094D\u0925\u093F\u0924\u093F \u092C\u0924\u093E\u0913", "\u0915\u094D\u092F\u093E \u0924\u0941\u092E \u092F\u0939\u093E\u0901 \u0939\u094B"],
-    ReadyIntent: ["\u0915\u094D\u092F\u093E \u0924\u0948\u092F\u093E\u0930 \u0939\u0948", "\u091C\u0935\u093E\u092C \u0924\u0948\u092F\u093E\u0930 \u0939\u0948", "\u0939\u094B \u0917\u092F\u093E \u0915\u094D\u092F\u093E", "\u0915\u094D\u092F\u093E \u091C\u0935\u093E\u092C \u0939\u0948"],
-    weather: ["{city} \u092E\u0947\u0902 \u092E\u094C\u0938\u092E \u0915\u0948\u0938\u093E \u0939\u0948", "{city} \u0915\u093E \u092E\u094C\u0938\u092E \u0915\u0948\u0938\u093E \u0939\u0948", "{city} \u0915\u093E \u092E\u094C\u0938\u092E"]
-  }
-};
-var BUILT_IN = ["AMAZON.CancelIntent", "AMAZON.HelpIntent", "AMAZON.StopIntent", "AMAZON.FallbackIntent", "AMAZON.NavigateHomeIntent"];
-function intents(lang) {
-  const f = FIXED[lang];
-  return [
-    ...BUILT_IN.map((name) => ({ name, samples: [] })),
-    { name: "PortfolioIntent", samples: f.PortfolioIntent },
-    { name: "WeatherIntent", slots: [{ name: "city", type: "AMAZON.SearchQuery" }], samples: f.weather },
-    { name: "TasksIntent", samples: f.TasksIntent },
-    { name: "StatusIntent", samples: f.StatusIntent },
-    { name: "ReadyIntent", samples: f.ReadyIntent },
-    // open questions: one free-text slot per sentence, so each lead-in is its own intent and the engine can put the sentence back together
-    ...LEAD_INTENTS.map((name) => ({ name, slots: [{ name: "q", type: "AMAZON.SearchQuery" }], samples: [`${LEAD_INS[name][lang]} {q}`] }))
-  ];
-}
-var model = (invocationName, lang) => JSON.stringify({ interactionModel: { languageModel: { invocationName, intents: intents(lang), types: [] } } }, null, 2);
-var SKILL_NAME = "Friend Assistant";
-var locale = (lang, invocationName) => ({
-  name: SKILL_NAME,
-  summary: lang === "hi" ? "\u0905\u092A\u0928\u0947 \u092B\u094D\u0930\u0947\u0902\u0921 \u0905\u0938\u093F\u0938\u094D\u091F\u0947\u0902\u091F \u0938\u0947 \u092C\u093E\u0924 \u0915\u0930\u0947\u0902\u0964" : "Talk to your own Friend assistant.",
-  description: lang === "hi" ? "\u092F\u0939 \u0906\u092A\u0915\u0947 \u0905\u092A\u0928\u0947 \u092B\u094D\u0930\u0947\u0902\u0921 \u0905\u0938\u093F\u0938\u094D\u091F\u0947\u0902\u091F \u0915\u0947 \u0932\u093F\u090F \u0928\u093F\u091C\u0940 \u0938\u094D\u0915\u093F\u0932 \u0939\u0948\u0964 \u0906\u092A\u0915\u0947 \u0905\u092A\u0928\u0947 \u0915\u0902\u092A\u094D\u092F\u0942\u091F\u0930 \u092A\u0930 \u091A\u0932\u0924\u093E \u0939\u0948\u0964" : "A private skill for your own self-hosted Friend assistant. It talks to your own computer.",
-  examplePhrases: [lang === "hi" ? `\u0905\u0932\u0947\u0915\u094D\u0938\u093E, ${invocationName} \u0938\u0947 \u092E\u0947\u0930\u093E \u092A\u094B\u0930\u094D\u091F\u092B\u094B\u0932\u093F\u092F\u094B \u0915\u0948\u0938\u093E \u0939\u0948 \u092A\u0942\u091B\u094B` : `Alexa, ask ${invocationName} how my portfolio is`, `Alexa, open ${invocationName}`, `Alexa, ask ${invocationName} what is on my list`],
-  keywords: ["friend", "assistant"]
-});
-function buildSkillPackage(o) {
-  const problem = invocationNameProblem(o.invocationName);
-  if (problem) throw new Error(problem);
-  if (!/^https:\/\/[^\s/]+\/\S*$/.test(o.endpoint)) throw new Error("The address must be an https address, such as https://your-address/api/alexa.");
-  const manifest = {
-    manifest: {
-      manifestVersion: "1.0",
-      publishingInformation: {
-        locales: { "en-IN": locale("en", o.invocationName), "hi-IN": locale("hi", o.invocationName) },
-        isAvailableWorldwide: false,
-        distributionCountries: ["IN"],
-        category: "ORGANIZERS_AND_ASSISTANTS",
-        testingInstructions: "A private skill for its owner's own self-hosted assistant. It is used in development mode only."
-      },
-      apis: { custom: { endpoint: { uri: o.endpoint, sslCertificateType: "Trusted" } } },
-      privacyAndCompliance: { allowsPurchases: false, usesPersonalInfo: false, isChildDirected: false, isExportCompliant: true, containsAds: false }
-    }
-  };
-  return {
-    "skill.json": JSON.stringify(manifest, null, 2),
-    "en-IN.json": model(o.invocationName, "en"),
-    "hi-IN.json": model(o.invocationName, "hi")
-  };
-}
-
 // ../server/src/alexa/fast.ts
-var rupees = (n, lang) => `${formatInr(Math.abs(n)).replace("\u20B9", "").replace(/\.00$/, "")} ${lang === "hi" ? "\u0930\u0941\u092A\u092F\u0947" : "rupees"}`;
+var rupees = (n, lang, o = {}) => {
+  const word2 = o.currencyName ?? "rupees";
+  const spoken = lang === "hi" && word2 === "rupees" ? "\u0930\u0941\u092A\u092F\u0947" : word2;
+  return `${formatMoney(Math.abs(n), { symbol: "", locale: (o.money ?? DEFAULT_MONEY).locale }).replace(/[.,]00$/, "")} ${spoken}`;
+};
 var pct = (n) => String(Math.round(Math.abs(n) * 100) / 100);
-function portfolioSpeech(s, lang) {
+function portfolioSpeech(s, lang, o = {}) {
   if (s.value === 0 && s.invested === 0) return lang === "hi" ? "\u0906\u092A\u0915\u0947 \u0916\u093E\u0924\u0947 \u092E\u0947\u0902 \u0905\u092D\u0940 \u0915\u094B\u0908 \u0939\u094B\u0932\u094D\u0921\u093F\u0902\u0917 \u0928\u0939\u0940\u0902 \u0939\u0948\u0964" : "You have no holdings right now.";
   const up = s.dayChange >= 0;
   const gain = s.pnl >= 0;
   if (lang === "hi") {
-    return `\u0906\u092A\u0915\u093E \u092A\u094B\u0930\u094D\u091F\u092B\u094B\u0932\u093F\u092F\u094B ${rupees(s.value, lang)} \u0915\u093E \u0939\u0948\u0964 \u0906\u091C \u092F\u0939 ${pct(s.dayChangePct)} \u092A\u094D\u0930\u0924\u093F\u0936\u0924 ${up ? "\u090A\u092A\u0930" : "\u0928\u0940\u091A\u0947"} \u0939\u0948\u0964 \u0915\u0941\u0932 ${gain ? "\u092E\u0941\u0928\u093E\u092B\u093C\u093E" : "\u0918\u093E\u091F\u093E"} ${rupees(s.pnl, lang)} \u0939\u0948\u0964`;
+    return `\u0906\u092A\u0915\u093E \u092A\u094B\u0930\u094D\u091F\u092B\u094B\u0932\u093F\u092F\u094B ${rupees(s.value, lang, o)} \u0915\u093E \u0939\u0948\u0964 \u0906\u091C \u092F\u0939 ${pct(s.dayChangePct)} \u092A\u094D\u0930\u0924\u093F\u0936\u0924 ${up ? "\u090A\u092A\u0930" : "\u0928\u0940\u091A\u0947"} \u0939\u0948\u0964 \u0915\u0941\u0932 ${gain ? "\u092E\u0941\u0928\u093E\u092B\u093C\u093E" : "\u0918\u093E\u091F\u093E"} ${rupees(s.pnl, lang, o)} \u0939\u0948\u0964`;
   }
-  return `Your portfolio is worth ${rupees(s.value, lang)}. It is ${up ? "up" : "down"} ${pct(s.dayChangePct)} percent today, ${rupees(s.dayChange, lang)}. Overall you have a ${gain ? "profit" : "loss"} of ${rupees(s.pnl, lang)}.`;
+  return `Your portfolio is worth ${rupees(s.value, lang, o)}. It is ${up ? "up" : "down"} ${pct(s.dayChangePct)} percent today, ${rupees(s.dayChange, lang, o)}. Overall you have a ${gain ? "profit" : "loss"} of ${rupees(s.pnl, lang, o)}.`;
 }
 var FIRST_TASKS = 3;
 function tasksSpeech(rows3, lang) {
@@ -5620,8 +5542,157 @@ function statusSpeech(s, lang) {
   return `Friend is running. You have ${s.openTasks} open ${s.openTasks === 1 ? "task" : "tasks"}.${s.brokerLoggedIn === false ? " Zerodha needs you to log in." : ""}`;
 }
 
+// ../server/src/brokers/types.ts
+var BrokerError = class extends Error {
+  constructor(message, kind) {
+    super(message);
+    this.kind = kind;
+    this.name = "BrokerError";
+  }
+  kind;
+};
+
+// ../server/src/brokers/portfolio.ts
+var MOVERS = 3;
+var TOP = 5;
+var r2 = (n) => Number.isFinite(n) ? Math.round((n + Number.EPSILON) * 100) / 100 : 0;
+function summarize(holdings) {
+  let value = 0;
+  let invested = 0;
+  let yesterday = 0;
+  for (const h of holdings) {
+    value += h.quantity * h.lastPrice;
+    invested += h.quantity * h.avgPrice;
+    yesterday += h.quantity * h.closePrice;
+  }
+  const dayChange = value - yesterday;
+  const pnl = value - invested;
+  const move = (h) => h.quantity * (h.lastPrice - h.closePrice);
+  const worth = (h) => h.quantity * h.lastPrice;
+  const top = [...holdings].sort((a, b) => worth(b) - worth(a)).slice(0, TOP).map((h) => ({ symbol: h.symbol, pct: value > 0 ? r2(worth(h) / value * 100) : 0 }));
+  return {
+    value: r2(value),
+    invested: r2(invested),
+    pnl: r2(pnl),
+    pnlPct: invested > 0 ? r2(pnl / invested * 100) : 0,
+    dayChange: r2(dayChange),
+    dayChangePct: yesterday > 0 ? r2(dayChange / yesterday * 100) : 0,
+    gainers: holdings.filter((h) => move(h) > 0).sort((a, b) => move(b) - move(a)).slice(0, MOVERS),
+    losers: holdings.filter((h) => move(h) < 0).sort((a, b) => move(a) - move(b)).slice(0, MOVERS),
+    topHoldingPct: top[0]?.pct ?? 0,
+    top
+  };
+}
+var Portfolio = class {
+  constructor(provider, clock = Date.now, ttlMs = 3e4) {
+    this.provider = provider;
+    this.clock = clock;
+    this.ttlMs = ttlMs;
+  }
+  provider;
+  clock;
+  ttlMs;
+  cached = null;
+  inflight = null;
+  invalidate() {
+    this.cached = null;
+  }
+  snapshot() {
+    if (this.cached && this.clock() - this.cached.at < (typeof this.ttlMs === "function" ? this.ttlMs() : this.ttlMs)) return Promise.resolve(this.cached);
+    this.inflight ??= this.read().finally(() => {
+      this.inflight = null;
+    });
+    return this.inflight;
+  }
+  async read() {
+    const at = this.clock();
+    const caps = this.provider.capabilities;
+    const [holdings, positions, funds, orders] = await Promise.all([
+      section(caps.holdings, () => this.provider.holdings()),
+      section(caps.positions, () => this.provider.positions()),
+      section(caps.funds, () => this.provider.funds()),
+      section(caps.orders, () => this.provider.orders())
+    ]);
+    this.cached = { at, holdings, positions, funds, orders };
+    return this.cached;
+  }
+};
+async function section(supported, read) {
+  if (!supported) return { ok: false, error: "Not available from this broker.", kind: "other" };
+  try {
+    return { ok: true, data: await read() };
+  } catch (e) {
+    return e instanceof BrokerError ? { ok: false, error: e.message, kind: e.kind } : { ok: false, error: "Could not read this.", kind: "other" };
+  }
+}
+
+// ../server/src/brokers/report.ts
+var signedMoney = (n, m) => n > 4e-3 ? `+${formatMoney(n, m)}` : formatMoney(n, m);
+var signedPct = (p) => {
+  const x = Number.isFinite(p) ? p : 0;
+  const text2 = Math.abs(x).toFixed(2);
+  return text2 === "0.00" ? "0.00%" : `${x > 0 ? "+" : "-"}${text2}%`;
+};
+var pct1 = (p) => Math.abs(p).toFixed(1);
+var TITLE = { morning: "Morning report", close: "Market close report", custom: "Portfolio report" };
+var WHY2 = { rate: "rate limit", session: "login expired", network: "network problem", auth: "login problem" };
+var missing = (label2, s) => `${label2}: not available (${WHY2[s.kind] ?? s.error.slice(0, 60)})`;
+var DEFAULT_REPORT_OPTIONS = { money: DEFAULT_MONEY, concentrationPct: 30, bigDropPct: 5 };
+function title(kind, broker, now, zone) {
+  const parts = Object.fromEntries(
+    new Intl.DateTimeFormat("en-GB", { timeZone: zone, weekday: "short", day: "numeric", month: "short", hour: "2-digit", minute: "2-digit", hourCycle: "h23" }).formatToParts(now).map((p) => [p.type, p.value])
+  );
+  return `${TITLE[kind]} - ${broker} - ${parts.weekday} ${parts.day} ${parts.month}, ${parts.hour}:${parts.minute}`;
+}
+var dayMovePct = (h) => h.closePrice > 0 ? (h.lastPrice - h.closePrice) / h.closePrice * 100 : 0;
+function buildReport(input) {
+  const { snapshot: snap, caps } = input;
+  const o = input.options ?? DEFAULT_REPORT_OPTIONS;
+  const fmt = (n) => formatMoney(n, o.money);
+  const signed = (n) => signedMoney(n, o.money);
+  const out = [title(input.kind, input.broker, input.now, input.zone ?? "Asia/Kolkata"), ""];
+  if (caps.holdings) {
+    if (!snap.holdings.ok) out.push(missing("Holdings", snap.holdings));
+    else if (snap.holdings.data.length === 0) out.push("No holdings.");
+    else {
+      const holdings = snap.holdings.data;
+      const s = summarize(holdings);
+      out.push(`Portfolio: ${fmt(s.value)} (invested ${fmt(s.invested)})`);
+      out.push(`Profit/loss: ${signed(s.pnl)} (${signedPct(s.pnlPct)})`);
+      out.push(`Today: ${signed(s.dayChange)} (${signedPct(s.dayChangePct)})`);
+      const mover = (h) => `- ${h.symbol} ${signed(h.quantity * (h.lastPrice - h.closePrice))} (${signedPct(dayMovePct(h))})`;
+      if (s.gainers.length) out.push("", "Up today:", ...s.gainers.map(mover));
+      if (s.losers.length) out.push("", "Down today:", ...s.losers.map(mover));
+      const flags = [];
+      const top = s.top[0];
+      if (top && s.topHoldingPct > o.concentrationPct) flags.push(`- ${top.symbol} is ${pct1(s.topHoldingPct)}% of the portfolio.`);
+      for (const h of holdings) if (dayMovePct(h) < -o.bigDropPct) flags.push(`- ${h.symbol} is down ${pct1(dayMovePct(h))}% today.`);
+      if (flags.length) out.push("", "Worth a look:", ...flags);
+    }
+  }
+  if (caps.positions) {
+    out.push("");
+    if (!snap.positions.ok) out.push(missing("Positions", snap.positions));
+    else {
+      const open = snap.positions.data.filter((p) => p.quantity !== 0);
+      if (open.length === 0) out.push("No open positions.");
+      else {
+        out.push("Open positions:");
+        for (const p of open) out.push(`- ${p.symbol} ${p.product} ${p.quantity}${p.quantity < 0 ? " (short)" : ""} @ ${fmt(p.avgPrice)}, P&L ${signed(p.pnl)}`);
+      }
+    }
+  }
+  if (caps.funds) {
+    out.push("");
+    if (!snap.funds.ok) out.push(missing("Funds", snap.funds));
+    else out.push(`Funds: ${fmt(snap.funds.data.available)} available, ${fmt(snap.funds.data.used)} used`);
+  }
+  if (caps.orders && snap.orders.ok && snap.orders.data.length > 0) out.push(`Orders today: ${snap.orders.data.length}`);
+  return out.join("\n").replace(/\n{3,}/g, "\n\n").trim();
+}
+
 // ../server/src/brokers/scheduler.ts
-var MAX_TRIES_PER_DAY = 3;
+var DEFAULT_TRIES_PER_DAY = 3;
 var WEEKDAYS = { Mon: 1, Tue: 2, Wed: 3, Thu: 4, Fri: 5, Sat: 6, Sun: 7 };
 function localDay(now, zone) {
   return new Intl.DateTimeFormat("en-CA", { timeZone: zone, year: "numeric", month: "2-digit", day: "2-digit" }).format(now);
@@ -5647,7 +5718,7 @@ var ReportScheduler = class {
     let sent = 0;
     for (const s of this.d.schedules.list()) {
       if (!s.enabled || s.lastRunDay === day || !s.days.includes(weekday) || time < s.time) continue;
-      if (this.d.schedules.noteAttempt(s.id, day) > MAX_TRIES_PER_DAY) continue;
+      if (this.d.schedules.noteAttempt(s.id, day) > (this.d.maxTries?.() ?? DEFAULT_TRIES_PER_DAY)) continue;
       try {
         await this.d.run(s);
         this.d.schedules.markRun(s.id, day);
@@ -5677,10 +5748,13 @@ var toSchedule = (r) => ({
   lastRunDay: r.last_run_day
 });
 var ReportSchedules = class {
-  constructor(db) {
+  /** `max`: how many schedules there may be (the owner's setting). */
+  constructor(db, max = () => MAX_SCHEDULES) {
     this.db = db;
+    this.max = max;
   }
   db;
+  max;
   list() {
     return this.db.prepare("select id, name, broker, kind, time, days, channel, commentary, enabled, last_run_day from report_schedules order by id").all().map(toSchedule);
   }
@@ -5693,7 +5767,8 @@ var ReportSchedules = class {
     if (days.length === 0 || days.length !== new Set(s.days).size) throw new Error("Choose the days as numbers 1 (Monday) to 7 (Sunday).");
     if (!CHANNELS.includes(s.channel)) throw new Error("The channel must be telegram, whatsapp or sms.");
     if (typeof s.broker !== "string" || !/^[a-z0-9-]{1,40}$/.test(s.broker)) throw new Error("That is not a broker id.");
-    if (this.list().length >= MAX_SCHEDULES) throw new Error(`There can be at most ${MAX_SCHEDULES} schedules.`);
+    const limit = this.max();
+    if (this.list().length >= limit) throw new Error(`There can be at most ${limit} schedules.`);
     const info = this.db.prepare("insert into report_schedules (name, broker, kind, time, days, channel, commentary, enabled) values (?, ?, ?, ?, ?, ?, ?, ?)").run(name, s.broker, s.kind, s.time, days.join(","), s.channel, s.commentary ? 1 : 0, s.enabled ? 1 : 0);
     return this.list().find((x) => x.id === Number(info.lastInsertRowid));
   }
@@ -5918,16 +5993,18 @@ function createZerodha(opts) {
 }
 
 // ../server/src/brokers/hub.ts
+var reportOptions = (b) => ({ money: { symbol: b.currencySymbol, locale: b.numberLocale }, concentrationPct: b.concentrationPct, bigDropPct: b.bigDropPct });
 var NAMES = { zerodha: "Zerodha" };
 var minutes = (hhmm) => Number(hhmm.slice(0, 2)) * 60 + Number(hhmm.slice(3, 5));
 var BrokerHub = class {
   constructor(d) {
     this.d = d;
-    this.schedules = new ReportSchedules(d.db);
+    this.schedules = new ReportSchedules(d.db, () => d.config.brokers.maxSchedules);
     this.sessions = new BrokerSessions(d.dataDir, this.now);
     this.scheduler = new ReportScheduler({
       schedules: this.schedules,
       zone: () => d.config.brokers.timezone,
+      maxTries: () => d.config.brokers.maxTriesPerDay,
       skipDates: () => d.config.brokers.skipDates,
       run: (s) => this.deliver(s)
     });
@@ -5952,7 +6029,7 @@ ${z12.apiSecret}`;
     if (!usable) this.providers.delete("zerodha");
     else if (!have || have.made !== made) {
       const provider = createZerodha({ apiKey: z12.apiKey, apiSecret: z12.apiSecret, fetch: this.d.fetch, clock: this.now });
-      this.providers.set("zerodha", { provider, portfolio: new Portfolio(provider, this.now), made });
+      this.providers.set("zerodha", { provider, portfolio: new Portfolio(provider, this.now, () => this.d.config.brokers.cacheSeconds * 1e3), made });
     }
     const now = this.providers.get("zerodha");
     if (now) {
@@ -6035,7 +6112,7 @@ ${z12.apiSecret}`;
   async report(id2, kind = "custom") {
     const got = await this.snapshot(id2);
     if (!got.ok) return got;
-    const text2 = buildReport({ snapshot: got.snapshot, kind, caps: got.caps, now: new Date(this.now()), broker: got.broker, zone: got.zone });
+    const text2 = buildReport({ snapshot: got.snapshot, kind, caps: got.caps, now: new Date(this.now()), broker: got.broker, zone: got.zone, options: reportOptions(this.d.config.brokers) });
     this.d.audit.log("system", "broker.report", { broker: id2, kind, lines: text2.split("\n").length });
     return { ok: true, text: text2 };
   }
@@ -6769,8 +6846,8 @@ function createGateway(deps) {
     try {
       pairLimiter.check(key);
     } catch (e) {
-      const ms = e instanceof LockoutError ? e.retryAfterMs : 6e4;
-      return reply.code(429).header("retry-after", Math.ceil(ms / 1e3)).send({ error: "Too many attempts" });
+      const ms2 = e instanceof LockoutError ? e.retryAfterMs : 6e4;
+      return reply.code(429).header("retry-after", Math.ceil(ms2 / 1e3)).send({ error: "Too many attempts" });
     }
     try {
       const token = auth.redeemPairCode(body.data.code, body.data.name);
@@ -6989,11 +7066,16 @@ function createGateway(deps) {
       return brokerError(reply, e);
     }
   });
-  const alexaWindow = new SlidingWindow(60, 6e4);
+  let alexaLimit = config.alexa.requestsPerMinute;
+  let alexaWindow = new SlidingWindow(alexaLimit, 6e4);
   void app.register(async (inst) => {
     inst.removeContentTypeParser("application/json");
     inst.addContentTypeParser("application/json", { parseAs: "buffer", bodyLimit: 32 * 1024 }, (_req, body, done) => done(null, body));
     inst.addHook("onRequest", async (req, reply) => {
+      if (config.alexa.requestsPerMinute !== alexaLimit) {
+        alexaLimit = config.alexa.requestsPerMinute;
+        alexaWindow = new SlidingWindow(alexaLimit, 6e4);
+      }
       if (!alexaWindow.allow(`alexa:${req.ip}`)) return reply.code(429).header("retry-after", 30).send();
     });
     inst.post("/api/alexa", async (req, reply) => {
@@ -8283,13 +8365,29 @@ var SettingsPatch = z11.object({
       apiSecret: z11.string().trim().max(100)
     }).partial().strict(),
     timezone: z11.string().trim().min(1).max(60),
+    currencySymbol: z11.string().trim().min(1).max(4),
+    currencyName: z11.string().trim().min(1).max(20),
+    numberLocale: z11.string().trim().min(2).max(35),
+    concentrationPct: z11.number().int().min(5).max(90),
+    bigDropPct: z11.number().int().min(1).max(50),
+    cacheSeconds: z11.number().int().min(5).max(300),
+    maxSchedules: z11.number().int().min(1).max(50),
+    maxTriesPerDay: z11.number().int().min(1).max(10),
     skipDates: z11.array(z11.string().regex(/^\d{4}-\d{2}-\d{2}$/, "A date like 2026-10-02")).max(100),
     loginReminderMinutes: z11.number().int().min(0).max(120)
   }).partial().strict(),
   /** The owner's Alexa skill. The skill id is not a secret; both need the PIN to change. */
   alexa: z11.object({
     skillId: z11.string().trim().max(100).regex(/^(amzn1\.ask\.skill\.[A-Za-z0-9-]{8,80})?$/, "A skill id like amzn1.ask.skill.xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"),
-    invocationName: z11.string().trim().max(60)
+    invocationName: z11.string().trim().max(60),
+    skillName: z11.string().trim().min(1).max(50),
+    locales: z11.array(z11.enum(ALEXA_LOCALES)).min(1).max(ALEXA_LOCALES.length),
+    answerSeconds: z11.number().min(ALEXA_LIMITS.answerSeconds.min).max(ALEXA_LIMITS.answerSeconds.max),
+    holdMinutes: z11.number().int().min(ALEXA_LIMITS.holdMinutes.min).max(ALEXA_LIMITS.holdMinutes.max),
+    permissionSeconds: z11.number().int().min(ALEXA_LIMITS.permissionSeconds.min).max(ALEXA_LIMITS.permissionSeconds.max),
+    requestsPerMinute: z11.number().int().min(ALEXA_LIMITS.requestsPerMinute.min).max(ALEXA_LIMITS.requestsPerMinute.max),
+    maxDevices: z11.number().int().min(ALEXA_LIMITS.maxDevices.min).max(ALEXA_LIMITS.maxDevices.max),
+    extraVoiceTools: z11.array(z11.string().regex(TOOL_NAME, "A tool name like calendar.list")).max(20)
   }).partial().strict(),
   /** What the assistant may do with money. Only "read" exists in this version; any other level is refused. */
   trading: z11.object({ level: z11.enum(["read"]) }).partial().strict(),
@@ -8351,7 +8449,15 @@ function settingsView(c) {
       zerodha: { installed: c.brokers.zerodha.installed, enabled: c.brokers.zerodha.enabled, apiKey: c.brokers.zerodha.apiKey, secretSet: !!c.brokers.zerodha.apiSecret },
       timezone: c.brokers.timezone,
       skipDates: [...c.brokers.skipDates],
-      loginReminderMinutes: c.brokers.loginReminderMinutes
+      loginReminderMinutes: c.brokers.loginReminderMinutes,
+      currencySymbol: c.brokers.currencySymbol,
+      currencyName: c.brokers.currencyName,
+      numberLocale: c.brokers.numberLocale,
+      concentrationPct: c.brokers.concentrationPct,
+      bigDropPct: c.brokers.bigDropPct,
+      cacheSeconds: c.brokers.cacheSeconds,
+      maxSchedules: c.brokers.maxSchedules,
+      maxTriesPerDay: c.brokers.maxTriesPerDay
     },
     trading: { level: c.trading.level },
     alexa: {
@@ -8359,7 +8465,15 @@ function settingsView(c) {
       enabled: c.alexa.enabled,
       skillId: c.alexa.skillId,
       invocationName: c.alexa.invocationName,
-      allowed: c.alexa.allowedUsers.map((u) => ({ id: "\u2026" + u.id.slice(-8), name: u.name }))
+      allowed: c.alexa.allowedUsers.map((u) => ({ id: "\u2026" + u.id.slice(-8), name: u.name })),
+      skillName: c.alexa.skillName,
+      locales: [...c.alexa.locales],
+      answerSeconds: c.alexa.answerSeconds,
+      holdMinutes: c.alexa.holdMinutes,
+      permissionSeconds: c.alexa.permissionSeconds,
+      requestsPerMinute: c.alexa.requestsPerMinute,
+      maxDevices: c.alexa.maxDevices,
+      extraVoiceTools: [...c.alexa.extraVoiceTools]
     },
     look: { ...c.look },
     ollama: { url: c.ollama.url, model: c.ollama.model, vision: !!c.ollama.vision, contextTokens: c.ollama.contextTokens },
@@ -8401,6 +8515,10 @@ function applySettings(config, raw) {
   }
   const p = parsed.data;
   if (p.brokers?.timezone !== void 0 && !isValidTimeZone(p.brokers.timezone)) throw new SettingsError("brokers.timezone: That is not a time zone, try one like Asia/Kolkata.");
+  if (p.brokers?.numberLocale !== void 0 && !validNumberLocale(p.brokers.numberLocale)) throw new SettingsError("brokers.numberLocale: That is not a number format this PC knows, try one like en-IN or en-US.");
+  for (const t of p.alexa?.extraVoiceTools ?? []) {
+    if (isNeverByVoice(t)) throw new SettingsError(`alexa.extraVoiceTools: ${t} can never be used by voice (it reaches your PC, files, settings, add-ons or camera).`);
+  }
   if (p.alexa?.invocationName) {
     const problem = invocationNameProblem(p.alexa.invocationName);
     if (problem) throw new SettingsError(`alexa.invocationName: ${problem}`);
@@ -8457,11 +8575,17 @@ function applySettings(config, raw) {
     if (rest.timezone !== void 0) config.brokers.timezone = rest.timezone;
     if (rest.skipDates !== void 0) config.brokers.skipDates = sanitizeBrokers({ skipDates: rest.skipDates }).skipDates;
     if (rest.loginReminderMinutes !== void 0) config.brokers.loginReminderMinutes = rest.loginReminderMinutes;
+    for (const k of ["currencySymbol", "currencyName", "numberLocale", "concentrationPct", "bigDropPct", "cacheSeconds", "maxSchedules", "maxTriesPerDay"]) {
+      if (rest[k] !== void 0) config.brokers[k] = rest[k];
+    }
   }
   if (p.alexa) {
     config.alexa.installed = true;
     if (p.alexa.skillId !== void 0) config.alexa.skillId = p.alexa.skillId;
     if (p.alexa.invocationName !== void 0) config.alexa.invocationName = p.alexa.invocationName;
+    for (const k of ["skillName", "locales", "answerSeconds", "holdMinutes", "permissionSeconds", "requestsPerMinute", "maxDevices", "extraVoiceTools"]) {
+      if (p.alexa[k] !== void 0) config.alexa[k] = p.alexa[k];
+    }
   }
   if (p.approvals) config.approvals = p.approvals;
   if (p.channels) {
@@ -9754,7 +9878,7 @@ async function createApp(opts) {
         const got = await brokerHub.snapshot("zerodha");
         if (!got.ok) return got.sessionExpired ? "Zerodha needs you to log in first." : got.error;
         if (!got.snapshot.holdings.ok) return "I could not read your holdings just now.";
-        return portfolioSpeech(summarize(got.snapshot.holdings.data), locale2.startsWith("hi") ? "hi" : "en");
+        return portfolioSpeech(summarize(got.snapshot.holdings.data), locale2.startsWith("hi") ? "hi" : "en", { money: { symbol: config.brokers.currencySymbol, locale: config.brokers.numberLocale }, currencyName: config.brokers.currencyName });
       },
       WeatherIntent: async (_locale, slots) => {
         if (!slots.city) return "Tell me which city, for example: what is the weather in Pune.";
@@ -10241,9 +10365,10 @@ async function createApp(opts) {
       },
       packageFile: (name) => {
         const endpoint = alexaHub.endpoint();
-        if (!PACKAGE_FILES.includes(name) || !endpoint || !config.alexa.invocationName) return null;
+        if (!packageFileNames(config.alexa.locales).includes(name) || !endpoint || !config.alexa.invocationName) return null;
         try {
-          return { type: "application/json", text: buildSkillPackage({ invocationName: config.alexa.invocationName, endpoint })[name] };
+          const text2 = buildSkillPackage({ invocationName: config.alexa.invocationName, endpoint, skillName: config.alexa.skillName, locales: config.alexa.locales })[name];
+          return text2 ? { type: "application/json", text: text2 } : null;
         } catch {
           return null;
         }
@@ -11523,7 +11648,7 @@ async function startFriend(opts) {
     async stop() {
       if (watcher) clearInterval(watcher);
       node.stop();
-      const wait = (ms) => new Promise((r) => setTimeout(r, ms).unref?.());
+      const wait = (ms2) => new Promise((r) => setTimeout(r, ms2).unref?.());
       await Promise.race([Promise.allSettled([sidecar?.stop(), app.stop()]), wait(6e3)]);
     }
   };
@@ -12700,7 +12825,7 @@ import { connect } from "node:net";
 import { join as join19 } from "node:path";
 var USAGE3 = "Usage: friend daemon start | stop | restart | status";
 var MAX_LOG_BYTES = 5 * 1024 * 1024;
-var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+var sleep = (ms2) => new Promise((r) => setTimeout(r, ms2));
 var realDeps = {
   launch(logFile) {
     const fd = openSync2(logFile, "a");
@@ -12769,8 +12894,8 @@ function running(dataDir, deps) {
   if (r) rmSync7(pidFile(dataDir), { force: true });
   return null;
 }
-function since(ms) {
-  const s = Math.max(0, Math.round(ms / 1e3));
+function since(ms2) {
+  const s = Math.max(0, Math.round(ms2 / 1e3));
   if (s < 90) return `${s} seconds`;
   if (s < 5400) return `${Math.round(s / 60)} minutes`;
   if (s < 129600) return `${Math.round(s / 3600)} hours`;
@@ -12866,7 +12991,7 @@ async function daemonCommand(args, io2, deps = realDeps) {
 import crossSpawn5 from "cross-spawn";
 var PACKAGE = "friend-assistant";
 var real = {
-  current: () => true ? "0.1.25" : "development",
+  current: () => true ? "0.1.26" : "development",
   latest: () => new Promise((resolve11) => {
     const child = crossSpawn5("npm", ["view", PACKAGE, "version", "--prefer-online"], { stdio: ["ignore", "pipe", "ignore"] });
     let out = "";
@@ -13154,7 +13279,7 @@ async function run(argv, io2) {
       case "version":
       case "--version":
       case "-v":
-        io2.out(true ? "0.1.25" : "development");
+        io2.out(true ? "0.1.26" : "development");
         return 0;
       case "lan":
         return await lanCommand(rest, io2);