[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_380":381,"_382":383},"routes/_app.x.$handle.$name",{"_116":115,"_34":61,"_125":104,"_29":126,"_13":14,"_127":-5,"_11":128,"_129":130,"_131":132,"_133":134,"_135":136,"_22":-5,"_137":-5,"_138":139,"_140":27,"_141":142,"_143":144,"_145":-5,"_146":-5,"_147":148},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_59":60,"_34":61,"_39":62,"_63":-5,"_64":27,"_65":66,"_67":66,"_68":69,"_70":-5,"_18":71,"_72":-5,"_73":27,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":81,"_82":83,"_84":85,"_86":-5,"_87":88,"_89":88,"_90":91,"_92":91,"_93":91,"_94":88,"_95":88,"_96":97,"_98":99,"_100":101,"_102":27},"version",350,"changes",[19,20,21],"aiChatInfo","userId",{"_22":52,"_24":53,"_26":27,"_28":27,"_29":54,"_31":54},{"_22":44,"_24":45,"_26":27,"_28":27,"_29":46,"_31":46},{"_22":23,"_24":25,"_26":27,"_28":27,"_29":30,"_31":30},"file",{"_32":33,"_34":30,"_35":36,"_37":38,"_39":40,"_41":14,"_42":43,"_26":27},"previous",{"_32":33,"_34":30,"_35":36,"_37":38},"deleted",false,"deletedHere","path","rehearsal.ts","latestPath","fileId","88e4ed34-7f2b-11f1-ab5e-1607ee4eb77e","name","fileType","script","content","// A STRANGER'S FIRST DAY.\n//\n// Nobody has ever created a Stash account from nothing and used it. Everything built so far has\n// been tested on accounts that already had data in them. This walks the exact path a new person\n// takes, using the real shipped code, and reports what they actually experience.\n//\n// Cleanup only ever touches the throwaway user it created. (An earlier version of this script\n// cleared the whole rate-limit table, which would have unlocked every account on the server.)\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\n\n(globalThis as any).window = globalThis;\nawait import(\"./csv.js\");\nconst CSV = (globalThis as any).CSV;\n\n// Points at LIVE. To rehearse a change before it ships, swap this for the dev branch's endpoint,\n// run it there, and swap it back before merging.\nconst B = \"https://stash.val.run\";\nconst U = \"zz_new_\" + Math.random().toString(36).slice(2, 6);\nconst PW = \"brand-new-user-1\";\nconst ITER = 250000;\n\nconst te = new TextEncoder(), td = new TextDecoder();\nconst hex = (b: ArrayBuffer) => [...new Uint8Array(b)].map(x => x.toString(16).padStart(2, \"0\")).join(\"\");\nconst rand = (n: number) => hex(crypto.getRandomValues(new Uint8Array(n)).buffer);\nconst fromHex = (h: string) => Uint8Array.from(h.match(/../g)!.map(x => parseInt(x, 16)));\nconst b64 = (b: ArrayBuffer) => btoa(String.fromCharCode(...new Uint8Array(b)));\nconst unb64 = (s: string) => Uint8Array.from(atob(s), c => c.charCodeAt(0));\nconst sha256hex = async (s: string) => hex(await crypto.subtle.digest(\"SHA-256\", te.encode(s)));\nasync function derive(secret: string, salt: string, usage: \"bits\" | \"key\"): Promise {\n const base = await crypto.subtle.importKey(\"raw\", te.encode(secret), \"PBKDF2\", false, [\"deriveBits\", \"deriveKey\"]);\n const s = te.encode(salt);\n if (usage === \"bits\") return hex(await crypto.subtle.deriveBits({ name: \"PBKDF2\", salt: s, iterations: ITER, hash: \"SHA-256\" }, base, 256));\n return crypto.subtle.deriveKey({ name: \"PBKDF2\", salt: s, iterations: ITER, hash: \"SHA-256\" }, base, { name: \"AES-GCM\", length: 256 }, false, [\"encrypt\", \"decrypt\"]);\n}\nconst seal = async (k: CryptoKey, txt: string) => {\n const iv = crypto.getRandomValues(new Uint8Array(12));\n return { iv: b64(iv.buffer), ct: b64(await crypto.subtle.encrypt({ name: \"AES-GCM\", iv }, k, te.encode(txt))) };\n};\nconst open = async (k: CryptoKey, box: any) =>\n td.decode(await crypto.subtle.decrypt({ name: \"AES-GCM\", iv: unb64(box.iv) }, k, unb64(box.ct)));\nconst dkKey = (h: string) => crypto.subtle.importKey(\"raw\", fromHex(h), { name: \"AES-GCM\" }, false, [\"encrypt\", \"decrypt\"]);\nconst post = (p: string, body: any, tok?: string) =>\n fetch(B + p, { method: \"POST\", headers: Object.assign({ \"content-type\": \"application/json\" }, tok ? { authorization: \"Bearer \" + tok } : {}), body: JSON.stringify(body) });\nconst get = (p: string, tok: string) => fetch(B + p, { headers: { authorization: \"Bearer \" + tok }, cache: \"no-store\" as any });\n\nlet pass = 0, fail = 0;\nconst notes: string[] = [];\nconst ok = (n: string, c: boolean, e = \"\") => { if (c) { pass++; console.log(\" ok \" + n); } else { fail++; console.log(\" FAIL \" + n + (e ? \" -> \" + e : \"\")); } };\nconst gap = (s: string) => { notes.push(s); console.log(\" GAP \" + s); };\n\nconsole.log(\"STEP 1 — they sign up\");\nconst DK = rand(32), kdfSalt = rand(16), rcSalt = rand(16);\nconst CODE = \"STASHAAAABBBBCCCCDDDD\";\nconst su = await post(\"/api/signup\", {\n username: U,\n authKey: await derive(PW, kdfSalt + \"|auth\", \"bits\"), kdfSalt, rcSalt,\n dkPw: JSON.stringify(await seal(await derive(PW, kdfSalt + \"|enc\", \"key\"), DK)),\n dkRc: JSON.stringify(await seal(await derive(CODE, rcSalt + \"|rc\", \"key\"), DK)),\n recoveryLookup: await sha256hex(CODE),\n});\nconst sj = await su.json();\nok(\"signup works\", su.status === 200 && !!sj.token, JSON.stringify(sj));\nlet TOK = sj.token;\nconst uid = (await sqlite.execute({ sql: \"SELECT id, plan FROM mb_users WHERE username = ?\", args: [U] })).rows[0] as any;\nok(\"they land on the free plan\", uid.plan === \"free\");\nconst me = await (await get(\"/api/me\", TOK)).json();\nok(\"account is encrypted from the very first moment\", me.v === 2);\n\nconsole.log(\"\\nSTEP 2 — what do they actually SEE?\");\nconst first: any = await (await get(\"/api/state\", TOK)).json();\nconsole.log(\" the server returns:\", JSON.stringify(first));\nif (!first || !first.accounts) {\n gap(\"A brand new account has NO state on the server. Whatever they see is whatever the browser \" +\n \"invents. Nobody has ever looked at that first screen.\");\n}\n\nconsole.log(\"\\nSTEP 3 — they set themselves up (accounts + pockets)\");\nconst budget: any = {\n version: 4, updated: Date.now(), payFreq: \"fortnightly\",\n accounts: [{\n id: \"a1\", name: \"Everyday\", showInPayday: true,\n pockets: [\n { id: \"p1\", name: \"Groceries\", balance: 0, amount: 120, freq: \"fortnightly\" },\n { id: \"p2\", name: \"Petrol\", balance: 0, amount: 60, freq: \"fortnightly\" },\n { id: \"p3\", name: \"Fun\", balance: 0, amount: 80, freq: \"fortnightly\" },\n ],\n }],\n txns: [], inbox: [], handled: [], done: [], goals: [], rules: [],\n autoMatchPockets: true, worth: { assets: [], debts: [], snaps: [] },\n bills: [], billsSkip: [], notify: { enabled: false },\n};\nconst put = async (s: any) => {\n const box = await seal(await dkKey(DK), JSON.stringify(s));\n return post(\"/api/state\", { enc: 1, iv: box.iv, ct: box.ct, updated: Date.now(), loaded: true }, TOK);\n};\nok(\"they can save their first budget\", (await put(budget)).status === 200);\n\nconsole.log(\"\\nSTEP 4 — they import a statement (the only way in, on the free plan)\");\nconst csv = [\n \"Type,Details,Particulars,Code,Reference,Amount,Date\",\n \"Eftpos,COUNTDOWN 4412,,,,-42.90,05/07/2026\",\n \"Eftpos,Z ENERGY,,,,-64.20,06/07/2026\",\n \"Direct Credit,WAGES,SALARY,,,1200.00,03/07/2026\",\n].join(\"\\n\");\nconst det = CSV.read(csv);\nconst built = CSV.build(det, det.map, det.order, \"Everyday\");\nbuilt.items.forEach((i: any) => i.id = CSV.fingerprint(i));\nok(\"the statement parses\", built.items.length === 3, \"got \" + built.items.length);\nok(\" wages arrive as money IN\", built.items.find((i: any) => /wages/i.test(i.description))?.amount === 1200);\nbudget.inbox = built.items;\nok(\"the import saves\", (await put(budget)).status === 200);\n\nconsole.log(\"\\nSTEP 5 — they sort it, and run their first payday\");\nbudget.inbox = [];\nbudget.done = built.items.filter((i: any) => i.amount < 0).map((i: any) => ({ ...i, resolution: \"Filed\" }));\nbudget.txns = [\n { id: \"t1\", ts: Date.now(), type: \"spend\", account: \"a1\", pocketId: \"p1\", amount: 42.9, note: \"Countdown\", label: \"Groceries\" },\n { id: \"t2\", ts: Date.now(), type: \"spend\", account: \"a1\", pocketId: \"p2\", amount: 64.2, note: \"Z Energy\", label: \"Petrol\" },\n { id: \"t3\", ts: Date.now(), type: \"payday\", amount: 260, label: \"Payday\",\n meta: [{ account: \"a1\", pocketId: \"p1\", amount: 120 }, { account: \"a1\", pocketId: \"p2\", amount: 60 }, { account: \"a1\", pocketId: \"p3\", amount: 80 }] },\n];\nbudget.accounts[0].pockets[0].balance = 77.1;\nbudget.accounts[0].pockets[1].balance = -4.2;\nbudget.accounts[0].pockets[2].balance = 80;\nok(\"payday and spends save\", (await put(budget)).status === 200);\n\nconsole.log(\"\\nSTEP 6 — they close the app and come back tomorrow\");\nconst ai = await (await post(\"/api/authinfo\", { username: U })).json();\nconst lg = await (await post(\"/api/login\", { username: U, authKey: await derive(PW, ai.kdfSalt + \"|auth\", \"bits\") })).json();\nok(\"they can log back in\", !!lg.token);\nconst dk2 = await open(await derive(PW, lg.kdfSalt + \"|enc\", \"key\"), JSON.parse(lg.dkPw));\nok(\"their key rebuilds from the password alone\", dk2 === DK);\nconst backState = JSON.parse(await open(await dkKey(dk2), await (await get(\"/api/state\", lg.token)).json()));\nok(\"EVERYTHING is still there\", JSON.stringify(backState) === JSON.stringify(budget));\nok(\" 3 pockets\", backState.accounts[0].pockets.length === 3);\nok(\" the payday is recorded\", backState.txns.some((t: any) => t.type === \"payday\"));\nTOK = lg.token;\n\nconsole.log(\"\\nSTEP 7 — the things they will inevitably want\");\nok(\"bank feed correctly blocked on free\", (await post(\"/api/bank/connect\", { userToken: \"x\", appToken: \"y\" }, TOK)).status === 402);\nok(\"they can register interest in Pro\", (await post(\"/api/waitlist\", { email: \"new@example.com\", wouldPay: \"yes\", price: 5 }, TOK)).status === 200);\nok(\"they can back up their own data\", (await post(\"/api/backup/now\", {}, TOK)).status === 200);\n\nconsole.log(\"\\nSTEP 8 — will they ever get a notification?\");\nconst hint: any = await blob.getJSON(\"hint_\" + uid.id);\nif (!hint) gap(\"No notification hints exist for this user. Hints are only written by the browser, so the nightly cron has nothing to act on until they open the app at least once with notifications on.\");\n\n// ============================================================\nconsole.log(\"\\nSTEP 9 — they change their mind and want to leave\");\n\n// wrong password: refused\nconst bad = await post(\"/api/account/delete\", { authKey: await derive(\"wrong-password\", ai.kdfSalt + \"|auth\", \"bits\"), confirm: U }, TOK);\nok(\"a wrong password cannot delete the account\", bad.status === 403, \"got \" + bad.status);\n\n// right password, but they did not type their username: refused\nconst noConf = await post(\"/api/account/delete\", { authKey: await derive(PW, ai.kdfSalt + \"|auth\", \"bits\"), confirm: \"\" }, TOK);\nok(\"deleting needs the username typed out, not just a tap\", noConf.status === 400, \"got \" + noConf.status);\n\n// still all there\nok(\"nothing was deleted by the failed attempts\", !!(await blob.getJSON(\"bud_\" + uid.id)));\n\n// and now for real\nconst gone = await post(\"/api/account/delete\", { authKey: await derive(PW, ai.kdfSalt + \"|auth\", \"bits\"), confirm: U }, TOK);\nok(\"the account deletes\", gone.status === 200, await gone.text());\n\nconst user = await sqlite.execute({ sql: \"SELECT id FROM mb_users WHERE username = ?\", args: [U] });\nok(\" the user row is gone\", user.rows.length === 0);\nok(\" the budget is gone\", !(await blob.getJSON(\"bud_\" + uid.id)));\nok(\" the previous version is gone\", !(await blob.getJSON(\"bud_prev_\" + uid.id)));\nok(\" the hints are gone\", !(await blob.getJSON(\"hint_\" + uid.id)));\nconst baks = await blob.list(\"bak_\" + uid.id + \"_\");\nok(\" every backup is gone\", (baks as any[]).length === 0, (baks as any[]).length + \" left\");\nconst sess = await sqlite.execute({ sql: \"SELECT token FROM mb_sessions WHERE user_id = ?\", args: [uid.id] });\nok(\" the sessions are gone\", sess.rows.length === 0);\nconst wlrow = await sqlite.execute({ sql: \"SELECT user_id FROM mb_waitlist WHERE user_id = ?\", args: [uid.id] });\nok(\" the waitlist entry is gone\", wlrow.rows.length === 0);\nconst after = await get(\"/api/state\", TOK);\nok(\" their old session no longer works\", after.status === 401);\nconsole.log(\" -> delete means delete. Nothing is left for anyone, including the developer.\");\n\nconsole.log(\"\\n=== cleanup ===\");\nawait sqlite.execute({ sql: \"DELETE FROM mb_throttle WHERE k = ?\", args: [\"login:u:\" + U] });\nawait sqlite.execute({ sql: \"DELETE FROM mb_throttle WHERE k = ?\", args: [\"backup:\" + uid.id] });\nawait sqlite.execute({ sql: \"DELETE FROM mb_throttle WHERE k = ?\", args: [\"pw:\" + uid.id] });\nconsole.log(\"(the account deleted itself, which is rather the point)\");\n\nconsole.log(\"\\n\" + pass + \" ok, \" + fail + \" failed\");\nconsole.log(\"\\n=== WHAT A STRANGER RUNS INTO ===\");\nnotes.forEach((n, i) => console.log(\" \" + (i + 1) + \". \" + n));\n","createdAt",["D",1784025010929],"branchVersion","branchId","ed4a7306-ec27-4f91-a09a-f7efb782a629",{"_32":47,"_34":46,"_35":48,"_37":50,"_39":51,"_41":14,"_42":43,"_26":27},{"_32":47,"_34":46,"_35":48,"_37":49},"main.tsx","019f4a79-aa80-769e-a1a0-4e4da31108ce","http","// Money — Pocket Budget (multi-user)\n// Each person has their own account; data is fully isolated per user.\nimport { Hono } from \"npm:hono\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { readFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { email } from \"https://esm.town/v/std/email\";\nimport { privacyHtml, termsHtml } from \"./legal.ts\";\nimport { landingHtml } from \"./site.ts\";\n\nconst APP_SECRET = Deno.env.get(\"APP_KEY\") || \"dev-secret\";\nconst OWNER_AKAHU_USER = Deno.env.get(\"AKAHU_USER_TOKEN\") || \"\";\nconst OWNER_AKAHU_APP = Deno.env.get(\"AKAHU_APP_TOKEN\") || \"\";\n\n// ---- one-time schema ----\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS mb_users (id TEXT PRIMARY KEY, username TEXT UNIQUE, pass_hash TEXT, salt TEXT, created INTEGER)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS mb_sessions (token TEXT PRIMARY KEY, user_id TEXT, created INTEGER)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS mb_bank (user_id TEXT PRIMARY KEY, akahu_user TEXT, akahu_app TEXT)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS mb_feedback (id TEXT PRIMARY KEY, username TEXT, message TEXT, created INTEGER)`);\ntry { await sqlite.execute(`ALTER TABLE mb_users ADD COLUMN recovery_lookup TEXT`); } catch (_) { /* column already exists */ }\n// one row per device that has agreed to receive notifications\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS mb_push (endpoint TEXT PRIMARY KEY, user_id TEXT, p256dh TEXT, auth TEXT, created INTEGER)`);\n// failed-attempt counters, so passwords and recovery codes can't be brute-forced\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS mb_throttle (k TEXT PRIMARY KEY, n INTEGER, reset INTEGER)`);\n\n// ---- free vs pro ----\n// Akahu charges per user, so the automatic bank feed is the ONLY thing behind the paywall.\n// Everything else -- pockets, stats, net worth, forecasting, encryption, statement import --\n// stays free, because it costs nothing to run.\ntry { await sqlite.execute(`ALTER TABLE mb_users ADD COLUMN plan TEXT`); } catch (_) {}\n// This line used to say plan = 'pro', to grandfather the handful of accounts that existed when\n// the paywall was added. It runs on EVERY server restart -- so it also silently upgraded every\n// new stranger who signed up, handing them a bank feed that costs real money per user.\n// Existing accounts already have their plan set, so anything still NULL is a new signup: free.\ntry { await sqlite.execute(`UPDATE mb_users SET plan = 'free' WHERE plan IS NULL`); } catch (_) {}\n// people telling us whether they'd actually pay. This is the only way to know if Pro is worth building.\nawait sqlite.execute(\n `CREATE TABLE IF NOT EXISTS mb_waitlist (user_id TEXT PRIMARY KEY, username TEXT, email TEXT, would_pay TEXT, price REAL, note TEXT, created INTEGER)`,\n);\n\n// ---- a way to warn people ----\n// OPTIONAL, and deliberately so. Until now Stash held no email address for anyone, which is lovely\n// for privacy and useless the day something goes wrong: the Privacy Act expects affected people to\n// be told directly, and an in-app banner only reaches whoever happens to open the app.\n// This column is the ONLY thing it is for. Not marketing, not newsletters, not \"product updates\".\ntry { await sqlite.execute(`ALTER TABLE mb_users ADD COLUMN email TEXT`); } catch (_) {}\n\n// ---- who signed in, and when ----\n// Stash used to keep no record of this at all. That meant two things: nobody could tell whether an\n// account had been broken into, and when the question \"was the demo ever actually opened?\" came up,\n// the honest answer was \"there is no way to know\". An app that holds money data should not have to\n// shrug at that question.\n//\n// This is deliberately BOTH ways round: the user sees their own sign-ins, so THEY can spot a login\n// they don't recognise. That is the point of it. It is not an operator surveillance tool.\nawait sqlite.execute(\n `CREATE TABLE IF NOT EXISTS mb_logins (id TEXT PRIMARY KEY, user_id TEXT, username TEXT, ok INTEGER, kind TEXT, ip TEXT, ua TEXT, created INTEGER)`,\n);\nawait sqlite.execute(`CREATE INDEX IF NOT EXISTS mb_logins_user ON mb_logins (user_id, created)`);\n\n// ---- errors the app hits in the wild ----\n// Nobody reports bugs. They just stop using the thing. The notification bug below sat there for\n// weeks because every piece reported success and nothing was watching the joins between them.\n// Stores a message, a stack and a build id. It must NEVER carry budget data -- see /api/error.\nawait sqlite.execute(\n `CREATE TABLE IF NOT EXISTS mb_errors (id TEXT PRIMARY KEY, user_id TEXT, build TEXT, kind TEXT, message TEXT, stack TEXT, ua TEXT, created INTEGER)`,\n);\n\n// ---- end-to-end encryption ----\n// The browser holds the only key. The server stores the user's data key TWICE, each time wrapped\n// by a key we never see: one derived from their password, one from their recovery code. We hold\n// the locked boxes and none of the keys, so nobody with database access (including the operator)\n// can read a user's data. See SECURITY_NOTES.md.\n// auth_v 1 = old account, password sent to server, data in plaintext\n// auth_v 2 = encrypted. The client sends an \"auth key\" derived from the password by a DIFFERENT\n// derivation than the encryption key, so even the login request leaks nothing usable.\nfor (\n const col of [\"kdf_salt TEXT\", \"rc_salt TEXT\", \"dk_pw TEXT\", \"dk_rc TEXT\", \"auth_v INTEGER\"]\n) {\n try { await sqlite.execute(`ALTER TABLE mb_users ADD COLUMN ${col}`); } catch (_) { /* already there */ }\n}\n// sessions used to live forever. They now expire; last_seen is bumped as the session is used.\ntry { await sqlite.execute(`ALTER TABLE mb_sessions ADD COLUMN last_seen INTEGER`); } catch (_) { /* column already exists */ }\n// Anyone already logged in when this shipped has last_seen = NULL. Treat them as active right now\n// rather than dating them from `created` — otherwise deploying this would sign everybody out.\ntry { await sqlite.execute({ sql: `UPDATE mb_sessions SET last_seen = ? WHERE last_seen IS NULL`, args: [Date.now()] }); } catch (_) {}\n\n// ---- helpers ----\nconst enc = new TextEncoder();\nconst dec = new TextDecoder();\nfunction toHex(b: Uint8Array) { return [...b].map(x => x.toString(16).padStart(2, \"0\")).join(\"\"); }\nfunction fromHex(h: string) { const a = new Uint8Array(h.length / 2); for (let i = 0; i < a.length; i++) a[i] = parseInt(h.substr(i * 2, 2), 16); return a; }\nfunction randHex(n: number) { return toHex(crypto.getRandomValues(new Uint8Array(n))); }\nfunction makeRecoveryCode() {\n const abc = \"ABCDEFGHJKLMNPQRSTUVWXYZ23456789\"; // no 0/O/1/I to avoid confusion\n const b = crypto.getRandomValues(new Uint8Array(16));\n let s = \"\"; for (let i = 0; i < 16; i++) s += abc[b[i] % 32];\n return \"STASH-\" + s.slice(0, 4) + \"-\" + s.slice(4, 8) + \"-\" + s.slice(8, 12) + \"-\" + s.slice(12, 16);\n}\nfunction normCode(c: string) { return String(c || \"\").toUpperCase().replace(/[^A-Z0-9]/g, \"\"); }\n// Akahu's pending transactions carry no _id. Derive a stable one from the contents so the\n// same pending item keeps the same id on every refresh (otherwise the inbox re-adds it forever).\nfunction pendId(t: any) {\n const raw = [t._account || \"\", t.date || \"\", String(t.amount), t.description || \"\"].join(\"|\");\n let a = 0x811c9dc5, b = 0x811c9dc5 ^ raw.length;\n for (let i = 0; i < raw.length; i++) { a ^= raw.charCodeAt(i); a = Math.imul(a, 0x01000193) >>> 0; }\n for (let i = raw.length - 1; i >= 0; i--) { b ^= raw.charCodeAt(i); b = Math.imul(b, 0x01000193) >>> 0; }\n return \"pend_\" + a.toString(36) + b.toString(36);\n}\nasync function sha256hex(s: string) { const b = await crypto.subtle.digest(\"SHA-256\", enc.encode(s)); return toHex(new Uint8Array(b)); }\n\nasync function hashPw(pw: string, saltHex: string) {\n const key = await crypto.subtle.importKey(\"raw\", enc.encode(pw), \"PBKDF2\", false, [\"deriveBits\"]);\n const bits = await crypto.subtle.deriveBits({ name: \"PBKDF2\", salt: fromHex(saltHex), iterations: 120000, hash: \"SHA-256\" }, key, 256);\n return toHex(new Uint8Array(bits));\n}\nasync function aesKey() {\n const base = await crypto.subtle.importKey(\"raw\", enc.encode(APP_SECRET), \"PBKDF2\", false, [\"deriveKey\"]);\n return crypto.subtle.deriveKey({ name: \"PBKDF2\", salt: enc.encode(\"mb-bank-salt\"), iterations: 100000, hash: \"SHA-256\" }, base, { name: \"AES-GCM\", length: 256 }, false, [\"encrypt\", \"decrypt\"]);\n}\nasync function encTok(plain: string) {\n const key = await aesKey(); const iv = crypto.getRandomValues(new Uint8Array(12));\n const ct = await crypto.subtle.encrypt({ name: \"AES-GCM\", iv }, key, enc.encode(plain));\n return toHex(iv) + \":\" + toHex(new Uint8Array(ct));\n}\nasync function decTok(s: string) {\n const [ivh, cth] = s.split(\":\"); const key = await aesKey();\n const pt = await crypto.subtle.decrypt({ name: \"AES-GCM\", iv: fromHex(ivh) }, key, fromHex(cth));\n return dec.decode(pt);\n}\n\n// ---- brute-force protection ----\n// Counts failed attempts against a key inside a rolling window. Returns null when the caller may\n// proceed, or the number of seconds to wait when they've had too many goes.\nasync function throttle(key: string, limit: number, windowMs: number): Promise {\n const now = Date.now();\n const r = await sqlite.execute({ sql: \"SELECT n, reset FROM mb_throttle WHERE k = ?\", args: [key] });\n if (r.rows.length) {\n const row = r.rows[0] as any;\n const reset = Number(row.reset) || 0;\n const n = Number(row.n) || 0;\n if (reset > now) {\n if (n >= limit) return Math.ceil((reset - now) / 1000);\n return null;\n }\n }\n return null; // window has lapsed (or no record) — let them try\n}\n// Call ONLY after an attempt actually fails.\nasync function throttleFail(key: string, windowMs: number) {\n const now = Date.now();\n const r = await sqlite.execute({ sql: \"SELECT n, reset FROM mb_throttle WHERE k = ?\", args: [key] });\n const row = r.rows.length ? (r.rows[0] as any) : null;\n if (row && (Number(row.reset) || 0) > now) {\n await sqlite.execute({ sql: \"UPDATE mb_throttle SET n = n + 1 WHERE k = ?\", args: [key] });\n } else {\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO mb_throttle (k, n, reset) VALUES (?, ?, ?)\", args: [key, 1, now + windowMs] });\n }\n}\nasync function throttleClear(key: string) {\n await sqlite.execute({ sql: \"DELETE FROM mb_throttle WHERE k = ?\", args: [key] });\n}\nfunction clientIp(c: any) {\n const f = c.req.header(\"x-forwarded-for\") || \"\";\n return (f.split(\",\")[0] || \"\").trim() || c.req.header(\"cf-connecting-ip\") || \"unknown\";\n}\nfunction tooMany(c: any, secs: number) {\n const mins = Math.max(1, Math.ceil(secs / 60));\n return c.json({ error: `Too many attempts. Try again in about ${mins} minute${mins === 1 ? \"\" : \"s\"}.` }, 429, { \"retry-after\": String(secs) });\n}\n\n// ---- password strength ----\n// Applied to NEW passwords only (signup, change, reset). Login never re-checks, so people who\n// already have a short password can still get in — they just can't set another one.\nconst COMMON_PW = [\"password\", \"password1\", \"12345678\", \"123456789\", \"1234567890\", \"qwertyuiop\", \"letmein123\", \"iloveyou\", \"abc12345\", \"passw0rd\"];\nfunction pwProblem(pw: string, username?: string): string | null {\n const p = String(pw || \"\");\n if (p.length < 10) return \"Password must be at least 10 characters.\";\n if (p.length > 200) return \"That password is too long.\";\n const lower = p.toLowerCase();\n if (COMMON_PW.includes(lower)) return \"That password is too common. Pick something else.\";\n if (username && lower.includes(String(username).toLowerCase())) return \"Password can't contain your username.\";\n // Character variation — unless it's long enough to be a passphrase, which is fine on its own.\n if (p.length < 16) {\n let classes = 0;\n if (/[a-z]/.test(p)) classes++;\n if (/[A-Z]/.test(p)) classes++;\n if (/[0-9]/.test(p)) classes++;\n if (/[^a-zA-Z0-9]/.test(p)) classes++;\n if (classes < 2) return \"Mix it up a bit — use letters and at least one number or symbol (or make it 16+ characters).\";\n }\n return null;\n}\n\n// Sessions expire after 30 days of not being used. Every request slides the window forward, so\n// anyone actually using the app never gets kicked out.\nconst SESSION_TTL = 30 * 86400000;\nasync function userFromReq(c: any) {\n const tok = (c.req.header(\"authorization\") || \"\").replace(/^Bearer\\s+/i, \"\") || c.req.header(\"x-session\") || \"\";\n if (!tok) return null;\n const r = await sqlite.execute({ sql: \"SELECT user_id, last_seen FROM mb_sessions WHERE token = ?\", args: [tok] });\n if (!r.rows.length) return null;\n const row = r.rows[0] as any;\n const now = Date.now();\n const seen = Number(row.last_seen) || 0;\n if (seen && now - seen > SESSION_TTL) {\n await sqlite.execute({ sql: \"DELETE FROM mb_sessions WHERE token = ?\", args: [tok] });\n return null;\n }\n // Only write once an hour — this runs on every single API call.\n if (now - seen > 3600000) {\n await sqlite.execute({ sql: \"UPDATE mb_sessions SET last_seen = ? WHERE token = ?\", args: [now, tok] });\n }\n const u = await sqlite.execute({ sql: \"SELECT id, username FROM mb_users WHERE id = ?\", args: [row.user_id] });\n return u.rows.length ? u.rows[0] : null;\n}\n\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\n// ---- auth ----\n// 20 new accounts per hour from one IP is plenty for anything legitimate.\nconst SIGNUP_WINDOW = 3600000, SIGNUP_LIMIT = 20;\n// 8 wrong passwords in 15 minutes and you wait. Counted per username AND per IP, so one attacker\n// can't grind a single account, and can't spray many accounts from one machine either.\nconst LOGIN_WINDOW = 900000, LOGIN_LIMIT = 8;\n// Recovery codes are the keys to the kingdom, so they get a tighter leash.\nconst RECOVER_WINDOW = 3600000, RECOVER_LIMIT = 5;\n\n// The client needs to know, BEFORE it can log in, which scheme an account uses and what salt to\n// derive its keys with. For usernames that don't exist we return a stable made-up salt so this\n// can't be used to find out who has an account.\napp.post(\"/api/authinfo\", async (c) => {\n const { username } = await c.req.json().catch(() => ({}));\n const uname = String(username || \"\").trim().toLowerCase();\n const r = await sqlite.execute({ sql: \"SELECT kdf_salt, auth_v FROM mb_users WHERE username = ?\", args: [uname] });\n if (!r.rows.length) {\n const decoy = await sha256hex(\"decoy|\" + APP_SECRET + \"|\" + uname);\n return c.json({ v: 2, kdfSalt: decoy.slice(0, 32) });\n }\n const row = r.rows[0] as any;\n const v = Number(row.auth_v) || 1;\n return c.json({ v, kdfSalt: row.kdf_salt || \"\" });\n});\n\n/**\n * Record a sign-in attempt, good or bad.\n *\n * Kept for 90 days and no longer. It records the IP, which IS personal information -- that is a\n * deliberate trade: without it, \"someone signed in\" tells you nothing, and the whole point is that\n * a person can look at their own list and say \"that wasn't me\". It is disclosed in the privacy\n * policy, it is shown to the user themselves, and it dies with the account.\n *\n * This must never be able to break a login. If the write fails, the user still gets in.\n */\nasync function noteLogin(\n c: any,\n opts: { userId?: string | null; username: string; ok: boolean; kind: string },\n) {\n try {\n await sqlite.execute({\n sql: \"INSERT INTO mb_logins (id, user_id, username, ok, kind, ip, ua, created) VALUES (?, ?, ?, ?, ?, ?, ?, ?)\",\n args: [\n randHex(12),\n opts.userId ?? null,\n opts.username,\n opts.ok ? 1 : 0,\n opts.kind,\n clientIp(c),\n String(c.req.header(\"user-agent\") ?? \"\").slice(0, 200),\n Date.now(),\n ],\n });\n // prune on write. Cheap, and it means retention is enforced by the code rather than by a promise\n // in a policy document that nobody ever runs.\n await sqlite.execute({\n sql: \"DELETE FROM mb_logins WHERE created < ?\",\n args: [Date.now() - 90 * 24 * 60 * 60 * 1000],\n });\n } catch (_) { /* a login must never fail because the audit trail did */ }\n}\n\n/* ================= THE DEMO ACCOUNT =================\n\n Its username and password are PUBLIC. They are on the landing page. That makes it the one account\n on the server that anybody at all can sign into, which has two consequences worth taking seriously:\n\n 1. A visitor could change its password, its username, or simply delete it -- and the shop window\n would be broken for everyone until the 2:30am rebuild. So the account-altering endpoints are\n closed to it. Look around all you like; you cannot take the keys.\n\n 2. Whatever a visitor does to the budget should not greet the next visitor. So the demo can be\n reset back to its pristine state, and the app calls that on the way out.\n\n None of this is security through obscurity -- there is nothing in the demo to protect. It is\n about the thing being intact for the next person who looks at it.\n ============================================= */\nconst DEMO_USER = \"demo\";\n\n/** The endpoints that would let a visitor take the demo away from everyone else. */\napp.use(\"/api/account/*\", async (c, next) => {\n const u = await userFromReq(c).catch(() => null);\n if (u && (u as any).username === DEMO_USER) {\n return c.json({\n error: \"This is the demo account. It cannot be changed — it resets for the next person.\",\n demo: true,\n }, 403);\n }\n await next();\n});\n\n/**\n * Put the demo back the way it was.\n *\n * Restores the budget from the pristine copy that make_demo saved alongside it. It does NOT rebuild\n * the account: the user id, password and data key all stay put, so a second person browsing the demo\n * in another tab does not get thrown out mid-look. (Rebuilding would issue a new id and invalidate\n * their session — a fine thing to do at 2:30am, a rude thing to do at 2:30pm.)\n *\n * No auth required, deliberately: this fires from a page that is being closed, when the session may\n * already be gone. There is nothing to abuse — the worst anyone can do by hammering it is keep the\n * demo tidy.\n */\napp.post(\"/api/demo/reset\", async (c) => {\n const wait = await throttle(\"demoreset:\" + clientIp(c), 60, 60 * 60 * 1000);\n if (wait) return c.json({ ok: true, skipped: true });\n await throttleFail(\"demoreset:\" + clientIp(c), 60 * 60 * 1000);\n\n const r = await sqlite.execute({ sql: \"SELECT id FROM mb_users WHERE username = ?\", args: [DEMO_USER] });\n if (!r.rows.length) return c.json({ error: \"no demo\" }, 404);\n const uid = (r.rows[0] as any).id;\n\n const clean = await blob.getJSON(\"demo_clean\");\n if (!clean) return c.json({ error: \"no pristine copy\" }, 500);\n\n await blob.setJSON(\"bud_\" + uid, clean);\n // and the trail a visitor leaves behind\n for (const k of [\"bud_prev_\" + uid, \"bud_hist_\" + uid, \"hint_\" + uid, \"notif_\" + uid]) {\n try { await blob.delete(k); } catch (_) { /* nothing there */ }\n }\n return c.json({ ok: true });\n});\n\n/** Optional email, stored only so a security notice can actually reach someone. Blank stays blank. */\nfunction cleanEmail(v: any): string | null {\n const s = String(v ?? \"\").trim().toLowerCase();\n if (!s) return null;\n // deliberately loose: the job here is to reject obvious junk, not to police valid addresses\n if (s.length > 200 || !/^[^@\\s]+@[^@\\s.]+\\.[^@\\s]+$/.test(s)) return null;\n return s;\n}\n\napp.post(\"/api/signup\", async (c) => {\n const ipKey = \"signup:\" + clientIp(c);\n const wait = await throttle(ipKey, SIGNUP_LIMIT, SIGNUP_WINDOW);\n if (wait) return tooMany(c, wait);\n const b = await c.req.json().catch(() => ({}));\n const uname = String(b.username || \"\").trim().toLowerCase();\n if (!/^[a-z0-9_]{3,20}$/.test(uname)) return c.json({ error: \"Username must be 3-20 letters, numbers or underscore.\" }, 400);\n\n // Every new account is encrypted. There is no plaintext signup path any more.\n // NOTE: we get an auth key, never a password — so password strength is enforced in the browser\n // (see __pwProblem in index.html). A user could bypass that only to weaken their own account.\n const { authKey, kdfSalt, rcSalt, dkPw, dkRc, recoveryLookup } = b;\n if (!authKey || !kdfSalt || !rcSalt || !dkPw || !dkRc || !recoveryLookup) {\n return c.json({ error: \"Your app is out of date. Refresh the page and try again.\" }, 400);\n }\n const exists = await sqlite.execute({ sql: \"SELECT id FROM mb_users WHERE username = ?\", args: [uname] });\n if (exists.rows.length) return c.json({ error: \"That username is taken.\" }, 409);\n await throttleFail(ipKey, SIGNUP_WINDOW); // counts every account created from this IP\n\n const id = randHex(12); const salt = randHex(16);\n // the auth key still gets hashed before storage, so a database leak doesn't hand over a login\n const ph = await hashPw(String(authKey), salt);\n // Optional. Blank is a perfectly valid answer and must stay one: an account that works without an\n // email is the whole reason someone would trust this over a bank app.\n const mail = cleanEmail(b.email);\n // plan is set EXPLICITLY. Leaving it null once meant a migration silently upgraded new users to pro.\n await sqlite.execute({\n sql: \"INSERT INTO mb_users (id, username, pass_hash, salt, created, recovery_lookup, kdf_salt, rc_salt, dk_pw, dk_rc, auth_v, plan, email) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 2, 'free', ?)\",\n args: [id, uname, ph, salt, Date.now(), String(recoveryLookup), String(kdfSalt), String(rcSalt), String(dkPw), String(dkRc), mail],\n });\n await noteLogin(c, { userId: id, username: uname, ok: true, kind: \"signup\" });\n const token = randHex(32);\n await sqlite.execute({ sql: \"INSERT INTO mb_sessions (token, user_id, created, last_seen) VALUES (?, ?, ?, ?)\", args: [token, id, Date.now(), Date.now()] });\n return c.json({ token, username: uname, v: 2 });\n});\n\n// Your own sign-in history. Not owner-only, on purpose: the person who can tell whether a login is\n// suspicious is the one who knows where they were on Tuesday.\napp.get(\"/api/logins\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const r = await sqlite.execute({\n sql: \"SELECT ok, kind, ip, ua, created FROM mb_logins WHERE user_id = ? ORDER BY created DESC LIMIT 20\",\n args: [(u as any).id],\n });\n return c.json({ logins: r.rows });\n});\n\napp.post(\"/api/login\", async (c) => {\n const { username, password, authKey } = await c.req.json().catch(() => ({}));\n const uname = String(username || \"\").trim().toLowerCase();\n const userKey = \"login:u:\" + uname;\n const ipKey = \"login:i:\" + clientIp(c);\n const wait = (await throttle(userKey, LOGIN_LIMIT, LOGIN_WINDOW)) || (await throttle(ipKey, LOGIN_LIMIT * 3, LOGIN_WINDOW));\n if (wait) return tooMany(c, wait);\n\n const r = await sqlite.execute({\n sql: \"SELECT id, pass_hash, salt, auth_v, kdf_salt, rc_salt, dk_pw FROM mb_users WHERE username = ?\",\n args: [uname],\n });\n const fail = async (userId?: string | null) => {\n await throttleFail(userKey, LOGIN_WINDOW);\n await throttleFail(ipKey, LOGIN_WINDOW);\n // A failed attempt is the one a user most needs to see: it is what \"someone is trying to get\n // into my account\" actually looks like.\n await noteLogin(c, { userId, username: uname, ok: false, kind: \"password\" });\n return c.json({ error: \"Wrong username or password.\" }, 401);\n };\n if (!r.rows.length) return await fail(null);\n const row = r.rows[0] as any;\n const v = Number(row.auth_v) || 1;\n\n // v2: the browser sends a key derived from the password, never the password itself.\n // v1: legacy account, still sends the raw password. This is the ONLY remaining place the server\n // can see a password, and it happens once — the client upgrades the account straight after.\n // No strength check here either way: people who signed up under the old 6-char rule must still\n // be able to get in. Strength is only enforced when SETTING a password.\n const secret = v === 2 ? String(authKey || \"\") : String(password || \"\");\n if (!secret) return await fail(row.id);\n const ph = await hashPw(secret, row.salt);\n if (ph !== row.pass_hash) return await fail(row.id);\n\n await throttleClear(userKey); // a good password wipes the slate\n await noteLogin(c, { userId: row.id, username: uname, ok: true, kind: \"password\" });\n const token = randHex(32);\n await sqlite.execute({ sql: \"INSERT INTO mb_sessions (token, user_id, created, last_seen) VALUES (?, ?, ?, ?)\", args: [token, row.id, Date.now(), Date.now()] });\n // dk_pw is the user's data key, locked with a key only their browser can rebuild. Useless to us.\n return c.json({ token, username: uname, v, kdfSalt: row.kdf_salt || \"\", rcSalt: row.rc_salt || \"\", dkPw: row.dk_pw || \"\" });\n});\n\n// One-time upgrade of an old plaintext account to an encrypted one. The browser has just proved it\n// knows the real password (we re-check it here), has generated a data key, encrypted the user's\n// data with it, and is now handing us the locked boxes. It also issues a fresh recovery code,\n// because the old one can't unlock a key it was never used to wrap.\napp.post(\"/api/account/encrypt\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const uid = (u as any).id;\n const key = \"pw:\" + uid;\n const wait = await throttle(key, LOGIN_LIMIT, LOGIN_WINDOW);\n if (wait) return tooMany(c, wait);\n\n const b = await c.req.json().catch(() => ({}));\n const cur = await sqlite.execute({ sql: \"SELECT auth_v FROM mb_users WHERE id = ?\", args: [uid] });\n if ((Number((cur.rows[0] as any)?.auth_v) || 1) === 2) return c.json({ error: \"already_encrypted\" }, 409);\n if (!(await checkPw(uid, b.password))) {\n await throttleFail(key, LOGIN_WINDOW);\n return c.json({ error: \"Current password is incorrect.\" }, 403);\n }\n await throttleClear(key);\n\n const { authKey, kdfSalt, rcSalt, dkPw, dkRc, recoveryLookup, state } = b;\n if (!authKey || !kdfSalt || !rcSalt || !dkPw || !dkRc || !recoveryLookup || !state || !state.enc) {\n return c.json({ error: \"bad_upgrade\" }, 400);\n }\n // Write the ciphertext FIRST. If we flipped the account to v2 and then failed to store the\n // encrypted data, the user could no longer read their own plaintext. Order matters here.\n await blob.setJSON(\"bud_\" + uid, state);\n const salt = randHex(16);\n const ph = await hashPw(String(authKey), salt);\n await sqlite.execute({\n sql: \"UPDATE mb_users SET pass_hash = ?, salt = ?, kdf_salt = ?, rc_salt = ?, dk_pw = ?, dk_rc = ?, recovery_lookup = ?, auth_v = 2 WHERE id = ?\",\n args: [ph, salt, String(kdfSalt), String(rcSalt), String(dkPw), String(dkRc), String(recoveryLookup), uid],\n });\n // every other device is now holding a session that can't decrypt anything — send them back to login\n const tok = (c.req.header(\"authorization\") || \"\").replace(/^Bearer\\s+/i, \"\") || c.req.header(\"x-session\") || \"\";\n await sqlite.execute({ sql: \"DELETE FROM mb_sessions WHERE user_id = ? AND token != ?\", args: [uid, tok] });\n return c.json({ ok: true });\n});\n\napp.post(\"/api/logout\", async (c) => {\n const tok = (c.req.header(\"authorization\") || \"\").replace(/^Bearer\\s+/i, \"\") || c.req.header(\"x-session\") || \"\";\n if (tok) await sqlite.execute({ sql: \"DELETE FROM mb_sessions WHERE token = ?\", args: [tok] });\n return c.json({ ok: true });\n});\n\napp.get(\"/api/me\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n // so the app can nudge anyone who never set up a recovery code (accounts made before the feature existed)\n const rr = await sqlite.execute({ sql: \"SELECT recovery_lookup, auth_v, plan, email FROM mb_users WHERE id = ?\", args: [(u as any).id] });\n const rl = rr.rows.length ? (rr.rows[0] as any).recovery_lookup : null;\n const v = rr.rows.length ? (Number((rr.rows[0] as any).auth_v) || 1) : 1;\n const plan = rr.rows.length ? ((rr.rows[0] as any).plan || \"free\") : \"free\";\n const mail = rr.rows.length ? ((rr.rows[0] as any).email || \"\") : \"\";\n const wl = await sqlite.execute({ sql: \"SELECT would_pay FROM mb_waitlist WHERE user_id = ?\", args: [(u as any).id] });\n return c.json({ username: (u as any).username, hasRecovery: !!rl, v, plan, email: mail, onWaitlist: wl.rows.length > 0 });\n});\n\n// Set or clear the security-notice email. Clearing it is a first-class action, not a hidden one:\n// people must be able to take it back as easily as they gave it.\napp.post(\"/api/account/email\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const b = await c.req.json().catch(() => ({}));\n const raw = String((b as any).email ?? \"\").trim();\n const mail = cleanEmail(raw);\n if (raw && !mail) return c.json({ error: \"That does not look like an email address.\" }, 400);\n await sqlite.execute({ sql: \"UPDATE mb_users SET email = ? WHERE id = ?\", args: [mail, (u as any).id] });\n return c.json({ ok: true, email: mail || \"\" });\n});\n\n// ---- error reports ----\n// What this deliberately does NOT take: the budget, the state, any request body, any field value.\n// A stack trace names functions and line numbers, not the numbers in someone's account. If that ever\n// stops being true, this endpoint is the first thing to delete.\nconst ERR_LIMIT = 20, ERR_WINDOW = 60 * 60 * 1000; // a loop that throws must not become a DDoS on us\napp.post(\"/api/error\", async (c) => {\n const wait = await throttle(\"err:\" + clientIp(c), ERR_LIMIT, ERR_WINDOW);\n if (wait) return c.json({ ok: true, dropped: true }); // never let reporting an error cause an error\n await throttleFail(\"err:\" + clientIp(c), ERR_WINDOW);\n\n const b = await c.req.json().catch(() => ({}));\n const cut = (v: any, n: number) => String(v ?? \"\").slice(0, n);\n const u = await userFromReq(c).catch(() => null); // errors from logged-out users are still worth having\n\n await sqlite.execute({\n sql: \"INSERT INTO mb_errors (id, user_id, build, kind, message, stack, ua, created) VALUES (?, ?, ?, ?, ?, ?, ?, ?)\",\n args: [\n randHex(12),\n u ? (u as any).id : null,\n cut((b as any).build, 20),\n cut((b as any).kind, 40),\n cut((b as any).message, 500),\n cut((b as any).stack, 2000),\n cut(c.req.header(\"user-agent\"), 200),\n Date.now(),\n ],\n });\n return c.json({ ok: true });\n});\n\n// Owner-only. Same check as the waitlist stats.\napp.get(\"/api/errors\", async (c) => {\n const u = await userFromReq(c);\n if (!u || (u as any).username !== \"rileys\") return c.json({ error: \"unauthorized\" }, 401);\n const r = await sqlite.execute(\n `SELECT e.build, e.kind, e.message, e.stack, e.ua, e.created, u.username\n FROM mb_errors e LEFT JOIN mb_users u ON u.id = e.user_id\n ORDER BY e.created DESC LIMIT 100`,\n );\n return c.json({ errors: r.rows });\n});\n\n// ---- per-user budget ----\napp.get(\"/api/state\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const data = (await blob.getJSON(\"bud_\" + (u as any).id)) ?? {};\n return c.json(data);\n});\napp.post(\"/api/state\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const body = await c.req.json();\n // Encrypted state is {enc:1, iv, ct} and is opaque to us. Plaintext state (old accounts that\n // haven't upgraded yet) still has to look like a budget.\n const okShape = body && (body.enc ? (body.iv && body.ct) : body.accounts);\n if (!okShape) return c.json({ error: \"bad state\" }, 400);\n\n const uid = (u as any).id;\n let prev: any = null;\n try { prev = await blob.getJSON(\"bud_\" + uid); } catch (_) {}\n\n // ---- shrink guard ----\n // A client that failed to load someone's data and booted blank will happily save that blank\n // state over everything. It happened. The server can't read encrypted state, but it CAN see\n // that 33KB just became 2KB — so refuse, unless the client can vouch that it actually LOADED\n // the data first. A blank client cannot honestly set that flag.\n if (prev) {\n const before = JSON.stringify(prev).length;\n const after = JSON.stringify(body).length;\n if (before > 5000 && after < before * 0.4 && body.loaded !== true) {\n console.log(`REFUSED a shrinking write for ${(u as any).username}: ${before} -> ${after} bytes, client never loaded`);\n return c.json({ error: \"shrink_guard\", before, after }, 409);\n }\n }\n\n // ---- version history ----\n // ONE previous version was not enough. A bug wrote junk over a live account TWICE in the same\n // second; the second write pushed the first bad version into the single history slot and\n // destroyed the only good copy. So keep a rolling history instead, and -- crucially -- only\n // record a version that is BIGGER than the junk, so a run of bad writes cannot flush the good\n // ones out.\n try {\n if (prev) {\n const prevSize = JSON.stringify(prev).length;\n const hist = ((await blob.getJSON(\"bud_hist_\" + uid)) ?? []) as any[];\n // don't record near-identical saves; we want distinct points in time, not every keystroke\n const last = hist[0];\n if (!last || Math.abs(last.size - prevSize) > 200 || Date.now() - last.saved > 3600000) {\n hist.unshift({ saved: Date.now(), size: prevSize, state: prev });\n }\n // keep the 5 most recent, PLUS the 3 largest ever seen. The largest are almost certainly\n // the real budget, and they survive any number of bad writes.\n const recent = hist.slice(0, 5);\n const biggest = hist.slice().sort((a, b) => b.size - a.size).slice(0, 3);\n const keep: any[] = [];\n for (const h of [...recent, ...biggest]) {\n if (!keep.some(k => k.saved === h.saved)) keep.push(h);\n }\n await blob.setJSON(\"bud_hist_\" + uid, keep);\n await blob.setJSON(\"bud_prev_\" + uid, { saved: Date.now(), state: prev });\n }\n } catch (_) { /* don't block the save over a failed backup */ }\n\n await blob.setJSON(\"bud_\" + uid, body);\n return c.json({ ok: true, updated: Date.now() });\n});\n\n// ---- notification hints ----\n// The daily cron can no longer read anyone's data — it's ciphertext. So the app itself works out\n// what is worth a nudge and leaves this behind: counts and dates, never amounts, names or balances.\n// This is deliberately the least the server can know while still being able to notify you at all.\napp.post(\"/api/hints\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const b = await c.req.json().catch(() => ({}));\n const num = (v: any) => (typeof v === \"number\" && isFinite(v) ? v : 0);\n // whitelist — anything the client tries to smuggle in here gets dropped on the floor\n const hint = {\n notify: {\n enabled: !!(b.notify && b.notify.enabled),\n updates: !(b.notify && b.notify.updates === false),\n inbox: !(b.notify && b.notify.inbox === false),\n bills: !(b.notify && b.notify.bills === false),\n shortfall: !(b.notify && b.notify.shortfall === false),\n refix: !(b.notify && b.notify.refix === false),\n },\n inbox: Math.max(0, Math.round(num(b.inbox))), // a count, e.g. 3\n billTs: num(b.billTs), // when the next bill lands\n billCount: Math.max(0, Math.round(num(b.billCount))),\n shortfallTs: num(b.shortfallTs), // when the forecast goes negative\n refixTs: num(b.refixTs), // when a fixed rate ends\n updated: Date.now(),\n };\n await blob.setJSON(\"hint_\" + (u as any).id, hint);\n return c.json({ ok: true });\n});\n\n// ---- per-user bank connection ----\napp.get(\"/api/bank/status\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const r = await sqlite.execute({ sql: \"SELECT user_id FROM mb_bank WHERE user_id = ?\", args: [(u as any).id] });\n return c.json({ connected: r.rows.length > 0 });\n});\nasync function planOf(userId: string) {\n const r = await sqlite.execute({ sql: \"SELECT plan FROM mb_users WHERE id = ?\", args: [userId] });\n return r.rows.length ? ((r.rows[0] as any).plan || \"free\") : \"free\";\n}\n\n// ---- the Pro waitlist ----\n// The only honest way to find out whether the bank feed is worth $200/month to run.\napp.post(\"/api/waitlist\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const b = await c.req.json().catch(() => ({}));\n const email = String(b.email || \"\").trim().slice(0, 200);\n if (email && !/^[^@\\s]+@[^@\\s]+\\.[^@\\s]+$/.test(email)) return c.json({ error: \"That email doesn't look right.\" }, 400);\n const wouldPay = [\"yes\", \"no\", \"maybe\"].includes(String(b.wouldPay)) ? String(b.wouldPay) : \"maybe\";\n const price = Math.max(0, Math.min(99, Number(b.price) || 0));\n await sqlite.execute({\n sql: \"INSERT OR REPLACE INTO mb_waitlist (user_id, username, email, would_pay, price, note, created) VALUES (?, ?, ?, ?, ?, ?, ?)\",\n args: [(u as any).id, (u as any).username, email, wouldPay, price, String(b.note || \"\").slice(0, 500), Date.now()],\n });\n return c.json({ ok: true });\n});\n\n// Owner-only. The number Riley actually needs before committing to $200/month.\napp.get(\"/api/waitlist/stats\", async (c) => {\n const u = await userFromReq(c);\n if (!u || (u as any).username !== \"rileys\") return c.json({ error: \"unauthorized\" }, 401);\n const rows = (await sqlite.execute(\"SELECT would_pay, price, email, username, created FROM mb_waitlist ORDER BY created DESC\")).rows as any[];\n const yes = rows.filter(r => r.would_pay === \"yes\");\n const maybe = rows.filter(r => r.would_pay === \"maybe\");\n const prices = rows.map(r => Number(r.price) || 0).filter(p => p > 0).sort((a, b) => a - b);\n return c.json({\n total: rows.length,\n yes: yes.length,\n maybe: maybe.length,\n no: rows.filter(r => r.would_pay === \"no\").length,\n medianPrice: prices.length ? prices[Math.floor(prices.length / 2)] : 0,\n // 60 people paying 5 dollars a month is roughly what covers Akahu's floor plus the per-user fee\n breakEvenAt5: 58,\n people: rows.slice(0, 100),\n });\n});\n\napp.post(\"/api/bank/connect\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n // Akahu bills per connected user, so this is the one thing that has to be paid for.\n if ((await planOf((u as any).id)) !== \"pro\") return c.json({ error: \"pro_only\" }, 402);\n const { userToken, appToken } = await c.req.json().catch(() => ({}));\n if (!userToken || !appToken) return c.json({ error: \"Both tokens are required.\" }, 400);\n // validate against Akahu\n const test = await fetch(\"https://api.akahu.io/v1/me\", { headers: { Authorization: `Bearer ${userToken}`, \"X-Akahu-Id\": appToken } });\n if (!test.ok) return c.json({ error: \"Those tokens didn't work with Akahu. Double-check them.\" }, 400);\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO mb_bank (user_id, akahu_user, akahu_app) VALUES (?, ?, ?)\", args: [(u as any).id, await encTok(userToken), await encTok(appToken)] });\n return c.json({ ok: true });\n});\napp.post(\"/api/bank/disconnect\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n await sqlite.execute({ sql: \"DELETE FROM mb_bank WHERE user_id = ?\", args: [(u as any).id] });\n return c.json({ ok: true });\n});\n\n// ---- pull transactions using THIS user's own bank connection ----\napp.get(\"/api/akahu\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n let U = \"\", A = \"\";\n const r = await sqlite.execute({ sql: \"SELECT akahu_user, akahu_app FROM mb_bank WHERE user_id = ?\", args: [(u as any).id] });\n if (r.rows.length) { U = await decTok((r.rows[0] as any).akahu_user); A = await decTok((r.rows[0] as any).akahu_app); }\n if (!U || !A) return c.json({ error: \"no_bank\" }, 400);\n const h = { Authorization: `Bearer ${U}`, \"X-Akahu-Id\": A };\n const names: Record = {};\n try {\n const ar = await fetch(\"https://api.akahu.io/v1/accounts\", { headers: h });\n if (ar.ok) { const aj = await ar.json(); (aj.items || []).forEach((a: any) => { names[a._id] = a.name || a.formatted_account || \"\"; }); }\n } catch (_) {}\n const days = Math.min(parseInt(c.req.query(\"days\") || \"35\") || 35, 365);\n const start = new Date(Date.now() - days * 86400000).toISOString();\n const items: any[] = []; let cursor: string | undefined; let guard = 0;\n try {\n do {\n const uu = new URL(\"https://api.akahu.io/v1/transactions\");\n uu.searchParams.set(\"start\", start);\n if (cursor) uu.searchParams.set(\"cursor\", cursor);\n const rr = await fetch(uu.toString(), { headers: h });\n if (!rr.ok) return c.json({ error: \"akahu_\" + rr.status }, 502);\n const j = await rr.json();\n (j.items || []).forEach((t: any) => items.push({\n id: t._id, date: t.date, amount: t.amount, description: t.description || \"\",\n merchant: (t.merchant && t.merchant.name) || \"\", category: (t.category && t.category.name) || \"\",\n account: names[t._account] || \"\", accountId: t._account || \"\",\n }));\n cursor = j.cursor && j.cursor.next ? j.cursor.next : undefined; guard++;\n } while (cursor && guard < 25);\n } catch (_) { return c.json({ error: \"akahu_fetch\" }, 502); }\n // Pending (not-yet-settled) transactions live on a SEPARATE endpoint and are NOT returned by\n // /v1/transactions. Banks can hold transfers as pending for days. Pull them too, flagged.\n // Note: Akahu pending items have NO _id, so we derive a stable one from their contents —\n // it must be identical across refreshes or the inbox would add the same item over and over.\n let pendingOk = false;\n try {\n const pr = await fetch(\"https://api.akahu.io/v1/transactions/pending\", { headers: h });\n if (pr.ok) {\n const pj = await pr.json();\n pendingOk = true;\n (pj.items || []).forEach((t: any) => items.push({\n id: pendId(t),\n date: t.date,\n amount: t.amount,\n description: t.description || \"\",\n merchant: (t.merchant && t.merchant.name) || \"\",\n category: (t.category && t.category.name) || \"\",\n account: names[t._account] || \"\",\n accountId: t._account || \"\",\n pending: true,\n }));\n }\n } catch (_) {}\n return c.json({ items, pendingOk });\n});\n\n// ---- real bank balances, for the \"do my numbers line up?\" check ----\n// NOTE: Akahu's balance.current ALREADY has pending transactions deducted, while the app only\n// knows about ones the user has filed. So we also return the pending total per account, and the\n// client compares against (current - pending the user hasn't filed yet).\napp.get(\"/api/bank/balances\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const r = await sqlite.execute({ sql: \"SELECT akahu_user, akahu_app FROM mb_bank WHERE user_id = ?\", args: [(u as any).id] });\n if (!r.rows.length) return c.json({ error: \"no_bank\" }, 400);\n const U = await decTok((r.rows[0] as any).akahu_user);\n const A = await decTok((r.rows[0] as any).akahu_app);\n const h = { Authorization: `Bearer ${U}`, \"X-Akahu-Id\": A };\n const accounts: any[] = [];\n try {\n const ar = await fetch(\"https://api.akahu.io/v1/accounts\", { headers: h });\n if (!ar.ok) return c.json({ error: \"akahu_\" + ar.status }, 502);\n const aj = await ar.json();\n (aj.items || []).forEach((a: any) => accounts.push({\n id: a._id,\n name: a.name || \"\",\n formatted: a.formatted_account || \"\",\n type: a.type || \"\",\n balance: (a.balance && typeof a.balance.current === \"number\") ? a.balance.current : null,\n }));\n } catch (_) { return c.json({ error: \"akahu_fetch\" }, 502); }\n const pending: Record = {};\n let pendingOk = false;\n try {\n const pr = await fetch(\"https://api.akahu.io/v1/transactions/pending\", { headers: h });\n if (pr.ok) {\n const pj = await pr.json();\n pendingOk = true;\n (pj.items || []).forEach((t: any) => {\n const k = t._account || \"\";\n pending[k] = Math.round(((pending[k] || 0) + (t.amount || 0)) * 100) / 100;\n // id must match the one /api/akahu hands the inbox, so the client can tell filed from unfiled\n });\n }\n } catch (_) {}\n return c.json({ accounts, pending, pendingOk });\n});\n\n// ---- trigger an on-demand bank refresh at Akahu ----\napp.post(\"/api/akahu/refresh\", async (c: any) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const r = await sqlite.execute({ sql: \"SELECT akahu_user, akahu_app FROM mb_bank WHERE user_id = ?\", args: [(u as any).id] });\n if (!r.rows.length) return c.json({ error: \"no_bank\" }, 400);\n const U = await decTok((r.rows[0] as any).akahu_user);\n const A = await decTok((r.rows[0] as any).akahu_app);\n try {\n const rr = await fetch(\"https://api.akahu.io/v1/refresh\", { method: \"POST\", headers: { Authorization: `Bearer ${U}`, \"X-Akahu-Id\": A } });\n if (!rr.ok) return c.json({ error: \"akahu_\" + rr.status }, 502);\n } catch (_) { return c.json({ error: \"akahu_fetch\" }, 502); }\n return c.json({ ok: true });\n});\n\n// ---- account management (change username / password / recovery code) ----\nasync function checkPw(userId: string, pw: string) {\n const r = await sqlite.execute({ sql: \"SELECT pass_hash, salt FROM mb_users WHERE id = ?\", args: [userId] });\n if (!r.rows.length) return false;\n const row = r.rows[0] as any;\n return (await hashPw(String(pw || \"\"), row.salt)) === row.pass_hash;\n}\napp.post(\"/api/account/username\", async (c) => {\n const u = await userFromReq(c); if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const { password, newUsername } = await c.req.json().catch(() => ({}));\n if (!(await checkPw((u as any).id, password))) return c.json({ error: \"Current password is incorrect.\" }, 403);\n const uname = String(newUsername || \"\").trim().toLowerCase();\n if (!/^[a-z0-9_]{3,20}$/.test(uname)) return c.json({ error: \"Username must be 3-20 letters, numbers or underscore.\" }, 400);\n const exists = await sqlite.execute({ sql: \"SELECT id FROM mb_users WHERE username = ? AND id != ?\", args: [uname, (u as any).id] });\n if (exists.rows.length) return c.json({ error: \"That username is taken.\" }, 409);\n await sqlite.execute({ sql: \"UPDATE mb_users SET username = ? WHERE id = ?\", args: [uname, (u as any).id] });\n return c.json({ ok: true, username: uname });\n});\napp.post(\"/api/account/password\", async (c) => {\n const u = await userFromReq(c); if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const uid = (u as any).id;\n // a stolen session shouldn't get unlimited guesses at the current password\n const key = \"pw:\" + uid;\n const wait = await throttle(key, LOGIN_LIMIT, LOGIN_WINDOW);\n if (wait) return tooMany(c, wait);\n const b = await c.req.json().catch(() => ({}));\n const vr = await sqlite.execute({ sql: \"SELECT auth_v FROM mb_users WHERE id = ?\", args: [uid] });\n const v = Number((vr.rows[0] as any)?.auth_v) || 1;\n\n // v2: the browser proves itself with the derived auth key, and hands back the data key re-locked\n // with a key made from the NEW password. We never learn either password.\n const proof = v === 2 ? String(b.authKeyCur || \"\") : String(b.currentPassword || \"\");\n if (!(await checkPw(uid, proof))) {\n await throttleFail(key, LOGIN_WINDOW);\n return c.json({ error: \"Current password is incorrect.\" }, 403);\n }\n await throttleClear(key);\n\n let ph: string, salt: string;\n if (v === 2) {\n if (!b.authKeyNew || !b.dkPw) return c.json({ error: \"bad_request\" }, 400);\n salt = randHex(16);\n ph = await hashPw(String(b.authKeyNew), salt);\n await sqlite.execute({ sql: \"UPDATE mb_users SET pass_hash = ?, salt = ?, dk_pw = ? WHERE id = ?\", args: [ph, salt, String(b.dkPw), uid] });\n } else {\n const pwErr = pwProblem(String(b.newPassword || \"\"), (u as any).username);\n if (pwErr) return c.json({ error: pwErr }, 400);\n salt = randHex(16);\n ph = await hashPw(String(b.newPassword), salt);\n await sqlite.execute({ sql: \"UPDATE mb_users SET pass_hash = ?, salt = ? WHERE id = ?\", args: [ph, salt, uid] });\n }\n // changing your password kicks every other device off — that's the point of changing it\n const cur = (c.req.header(\"authorization\") || \"\").replace(/^Bearer\\s+/i, \"\") || c.req.header(\"x-session\") || \"\";\n await sqlite.execute({ sql: \"DELETE FROM mb_sessions WHERE user_id = ? AND token != ?\", args: [uid, cur] });\n return c.json({ ok: true });\n});\napp.post(\"/api/account/recovery\", async (c) => {\n const u = await userFromReq(c); if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const uid = (u as any).id;\n const key = \"pw:\" + uid;\n const wait = await throttle(key, LOGIN_LIMIT, LOGIN_WINDOW);\n if (wait) return tooMany(c, wait);\n const b = await c.req.json().catch(() => ({}));\n const vr = await sqlite.execute({ sql: \"SELECT auth_v FROM mb_users WHERE id = ?\", args: [uid] });\n const v = Number((vr.rows[0] as any)?.auth_v) || 1;\n const proof = v === 2 ? String(b.authKey || \"\") : String(b.password || \"\");\n if (!(await checkPw(uid, proof))) {\n await throttleFail(key, LOGIN_WINDOW);\n return c.json({ error: \"Current password is incorrect.\" }, 403);\n }\n await throttleClear(key);\n\n if (v === 2) {\n // The browser made the code, wrapped the data key with it, and is only telling us the hash.\n // We could not reconstruct the code from this even if we wanted to.\n if (!b.recoveryLookup || !b.dkRc || !b.rcSalt) return c.json({ error: \"bad_request\" }, 400);\n await sqlite.execute({\n sql: \"UPDATE mb_users SET recovery_lookup = ?, dk_rc = ?, rc_salt = ? WHERE id = ?\",\n args: [String(b.recoveryLookup), String(b.dkRc), String(b.rcSalt), uid],\n });\n return c.json({ ok: true });\n }\n const recoveryCode = makeRecoveryCode();\n await sqlite.execute({ sql: \"UPDATE mb_users SET recovery_lookup = ? WHERE id = ?\", args: [await sha256hex(normCode(recoveryCode)), uid] });\n return c.json({ ok: true, recoveryCode });\n});\n\n// ---- account recovery (public, no login) ----\n// The browser sends the HASH of the recovery code, never the code. On an encrypted account we hand\n// back the locked data key and the salt, so the browser can unlock it on its own. The code itself\n// never crosses the wire — if it did, we could unlock the account, which is the whole thing we are\n// trying to make impossible.\napp.post(\"/api/recover/username\", async (c) => {\n const key = \"rec:\" + clientIp(c);\n const wait = await throttle(key, RECOVER_LIMIT, RECOVER_WINDOW);\n if (wait) return tooMany(c, wait);\n const b = await c.req.json().catch(() => ({}));\n const look = b.lookup ? String(b.lookup) : (normCode(b.code) ? await sha256hex(normCode(b.code)) : \"\");\n if (!look) return c.json({ error: \"Enter your recovery code.\" }, 400);\n const r = await sqlite.execute({\n sql: \"SELECT username, auth_v, kdf_salt, rc_salt, dk_rc FROM mb_users WHERE recovery_lookup = ?\",\n args: [look],\n });\n if (!r.rows.length) {\n await throttleFail(key, RECOVER_WINDOW);\n return c.json({ error: \"No account matches that recovery code.\" }, 404);\n }\n const row = r.rows[0] as any;\n return c.json({\n ok: true,\n username: row.username,\n v: Number(row.auth_v) || 1,\n kdfSalt: row.kdf_salt || \"\",\n rcSalt: row.rc_salt || \"\",\n dkRc: row.dk_rc || \"\",\n });\n});\napp.post(\"/api/recover/reset\", async (c) => {\n const key = \"rec:\" + clientIp(c);\n const wait = await throttle(key, RECOVER_LIMIT, RECOVER_WINDOW);\n if (wait) return tooMany(c, wait);\n const b = await c.req.json().catch(() => ({}));\n const uname = String(b.username || \"\").trim().toLowerCase();\n const look = b.lookup ? String(b.lookup) : (normCode(b.code) ? await sha256hex(normCode(b.code)) : \"\");\n if (!look) return c.json({ error: \"Enter your recovery code.\" }, 400);\n const r = await sqlite.execute({ sql: \"SELECT id, recovery_lookup, auth_v FROM mb_users WHERE username = ?\", args: [uname] });\n const row = r.rows[0] as any;\n if (!row || !row.recovery_lookup || row.recovery_lookup !== look) {\n await throttleFail(key, RECOVER_WINDOW);\n await noteLogin(c, { userId: row ? row.id : null, username: uname, ok: false, kind: \"recovery\" });\n return c.json({ error: \"Username and recovery code don't match.\" }, 403);\n }\n await throttleClear(key);\n // Someone just reset the password on this account using the recovery code. If that was not the\n // owner, it is the single most important line their sign-in list will ever show them.\n await noteLogin(c, { userId: row.id, username: uname, ok: true, kind: \"recovery\" });\n const v = Number(row.auth_v) || 1;\n\n if (v === 2) {\n // The browser already unlocked the data key with the recovery code and re-locked it with the\n // new password. It also minted a brand new recovery code (the old one is spent).\n const { authKey, kdfSalt, rcSalt, dkPw, dkRc, recoveryLookup } = b;\n if (!authKey || !kdfSalt || !rcSalt || !dkPw || !dkRc || !recoveryLookup) return c.json({ error: \"bad_request\" }, 400);\n const salt = randHex(16);\n const ph = await hashPw(String(authKey), salt);\n await sqlite.execute({\n sql: \"UPDATE mb_users SET pass_hash = ?, salt = ?, kdf_salt = ?, rc_salt = ?, dk_pw = ?, dk_rc = ?, recovery_lookup = ? WHERE id = ?\",\n args: [ph, salt, String(kdfSalt), String(rcSalt), String(dkPw), String(dkRc), String(recoveryLookup), row.id],\n });\n await sqlite.execute({ sql: \"DELETE FROM mb_sessions WHERE user_id = ?\", args: [row.id] });\n return c.json({ ok: true });\n }\n\n const pwErr = pwProblem(String(b.newPassword || \"\"), uname);\n if (pwErr) return c.json({ error: pwErr }, 400);\n const salt = randHex(16); const ph = await hashPw(String(b.newPassword), salt);\n const recoveryCode = makeRecoveryCode();\n await sqlite.execute({ sql: \"UPDATE mb_users SET pass_hash = ?, salt = ?, recovery_lookup = ? WHERE id = ?\", args: [ph, salt, await sha256hex(normCode(recoveryCode)), row.id] });\n await sqlite.execute({ sql: \"DELETE FROM mb_sessions WHERE user_id = ?\", args: [row.id] });\n return c.json({ ok: true, recoveryCode });\n});\n\n// ---- push notifications ----\napp.get(\"/api/push/key\", (c) => c.json({ key: Deno.env.get(\"VAPID_PUBLIC_KEY\") || \"\" }));\n\napp.post(\"/api/push/subscribe\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const { endpoint, p256dh, auth } = await c.req.json().catch(() => ({}));\n if (!endpoint || !p256dh || !auth) return c.json({ error: \"bad_subscription\" }, 400);\n await sqlite.execute({\n sql: \"INSERT OR REPLACE INTO mb_push (endpoint, user_id, p256dh, auth, created) VALUES (?, ?, ?, ?, ?)\",\n args: [endpoint, (u as any).id, p256dh, auth, Date.now()],\n });\n return c.json({ ok: true });\n});\n\napp.post(\"/api/push/unsubscribe\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const { endpoint } = await c.req.json().catch(() => ({}));\n if (endpoint) await sqlite.execute({ sql: \"DELETE FROM mb_push WHERE endpoint = ? AND user_id = ?\", args: [endpoint, (u as any).id] });\n else await sqlite.execute({ sql: \"DELETE FROM mb_push WHERE user_id = ?\", args: [(u as any).id] });\n return c.json({ ok: true });\n});\n\n// Is THIS device actually registered for push, right now, on the server?\n// The app used to trust a saved flag in the budget. That flag can be true while the registration\n// is long gone -- which is exactly what happens after a logout, since a push subscription belongs\n// to the browser, not the account. Ask the server instead of guessing.\napp.get(\"/api/push/status\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const endpoint = c.req.query(\"endpoint\") || \"\";\n const all = await sqlite.execute({ sql: \"SELECT endpoint FROM mb_push WHERE user_id = ?\", args: [(u as any).id] });\n const thisDevice = endpoint\n ? (all.rows as any[]).some(r => r.endpoint === endpoint)\n : false;\n return c.json({ devices: all.rows.length, thisDevice });\n});\n\n// ---- back up on demand ----\n// The nightly cron is the safety net. This is the button for when someone is about to do something\n// they are nervous about, and wants a known-good point to come back to.\napp.post(\"/api/backup/now\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const uid = (u as any).id;\n\n const key = \"backup:\" + uid;\n const wait = await throttle(key, 3, 300000); // three a minute is plenty; five-minute window\n if (wait) return tooMany(c, wait);\n await throttleFail(key, 300000);\n\n const state: any = await blob.getJSON(\"bud_\" + uid);\n if (!state) return c.json({ error: \"nothing to back up\" }, 400);\n const size = state.enc ? (state.ct || \"\").length : JSON.stringify(state).length;\n\n const stamp = new Date().toISOString().slice(0, 19).replace(/[:T]/g, \"\");\n const bkey = \"bak_\" + uid + \"_manual_\" + stamp;\n await blob.setJSON(bkey, { saved: Date.now(), username: (u as any).username, size, state, manual: true });\n\n // a backup you have not read back is not a backup\n const check: any = await blob.getJSON(bkey);\n const ok = !!check && (check.state.enc ? (check.state.ct || \"\").length : JSON.stringify(check.state).length) === size;\n if (!ok) return c.json({ error: \"the backup did not read back correctly\" }, 500);\n\n // keep the high-water mark up to date, so this can never be lost\n const best: any = await blob.getJSON(\"bak_\" + uid + \"_best\");\n if (!best || size >= best.size) {\n await blob.setJSON(\"bak_\" + uid + \"_best\", { saved: Date.now(), username: (u as any).username, size, state });\n }\n\n console.log(`manual backup for @${(u as any).username}: ${size} bytes`);\n return c.json({ ok: true, size, at: Date.now() });\n});\n\n// ---- delete my account ----\n//\n// The Privacy Act says people can demand their data be deleted, and it is the most basic thing a\n// stranger will ask for. Delete means delete: the account, the budget, the backups, the bank\n// tokens, the push registrations, the waitlist entry. Everything.\n//\n// EXPORT FIRST is enforced in the app, not here -- the server cannot produce a readable export,\n// because the data is encrypted with a key only the browser has. That is working as intended.\napp.post(\"/api/account/delete\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const uid = (u as any).id;\n const uname = (u as any).username;\n\n const key = \"pw:\" + uid;\n const wait = await throttle(key, LOGIN_LIMIT, LOGIN_WINDOW);\n if (wait) return tooMany(c, wait);\n\n const b = await c.req.json().catch(() => ({}));\n\n // They must prove it is them, AND type their own username. Deleting someone's money records by\n // a mis-tap is not something you get to undo.\n const vr = await sqlite.execute({ sql: \"SELECT auth_v FROM mb_users WHERE id = ?\", args: [uid] });\n const v = Number((vr.rows[0] as any)?.auth_v) || 1;\n const proof = v === 2 ? String(b.authKey || \"\") : String(b.password || \"\");\n if (!(await checkPw(uid, proof))) {\n await throttleFail(key, LOGIN_WINDOW);\n return c.json({ error: \"That password is not right.\" }, 403);\n }\n if (String(b.confirm || \"\").trim().toLowerCase() !== uname) {\n return c.json({ error: \"Type your username exactly to confirm.\" }, 400);\n }\n\n // every blob belonging to this person\n const keys = new Set([\n \"bud_\" + uid, \"bud_prev_\" + uid, \"bud_hist_\" + uid, \"hint_\" + uid, \"notif_\" + uid,\n ]);\n for (const prefix of [\"bak_\" + uid + \"_\"]) {\n try {\n for (const item of (await blob.list(prefix)) as any[]) keys.add(item.key);\n } catch (_) {}\n }\n let gone = 0;\n for (const k of keys) {\n try { await blob.delete(k); gone++; } catch (_) { /* already absent */ }\n }\n\n await sqlite.execute({ sql: \"DELETE FROM mb_push WHERE user_id = ?\", args: [uid] });\n await sqlite.execute({ sql: \"DELETE FROM mb_bank WHERE user_id = ?\", args: [uid] });\n // their email, crash reports and sign-in history go too. \"Delete\" has to mean it, or the word is\n // worthless. Note this removes the audit trail as well -- that is the right call: it is THEIR\n // record of THEIR logins, and keeping it after they leave would be keeping data on someone who\n // has asked to be forgotten.\n await sqlite.execute({ sql: \"DELETE FROM mb_errors WHERE user_id = ?\", args: [uid] });\n await sqlite.execute({ sql: \"DELETE FROM mb_logins WHERE user_id = ?\", args: [uid] });\n await sqlite.execute({ sql: \"DELETE FROM mb_waitlist WHERE user_id = ?\", args: [uid] });\n await sqlite.execute({ sql: \"DELETE FROM mb_sessions WHERE user_id = ?\", args: [uid] });\n await sqlite.execute({ sql: \"DELETE FROM mb_throttle WHERE k = ?\", args: [\"pw:\" + uid] });\n await sqlite.execute({ sql: \"DELETE FROM mb_throttle WHERE k = ?\", args: [\"backup:\" + uid] });\n await sqlite.execute({ sql: \"DELETE FROM mb_throttle WHERE k = ?\", args: [\"login:u:\" + uname] });\n await sqlite.execute({ sql: \"DELETE FROM mb_users WHERE id = ?\", args: [uid] });\n\n console.log(`account deleted: @${uname} (${gone} blobs removed)`);\n return c.json({ ok: true });\n});\n\n// lets someone prove to themselves that notifications actually work\napp.post(\"/api/push/test\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const { pushToUser } = await import(\"./push.ts\");\n const n = await pushToUser((u as any).id, {\n title: \"Stash notifications are on\",\n body: \"This is what they look like. You can turn any of them off in Settings.\",\n url: \"/\",\n tag: \"test\",\n });\n return c.json({ ok: true, sent: n });\n});\n\n// ---- PWA assets (public) ----\nconst ICON_SVG = ``;\n// start_url is /app, not / -- \"/\" is now the marketing page, and nobody wants their home-screen\n// budget icon to open an advert. Scope stays \"/\" so the whole origin (including /privacy) is in\n// scope. Anyone with the OLD manifest installed still opens \"/\", which redirects them to /app.\nconst MANIFEST = JSON.stringify({ name: \"Stash — Pocket Budget\", short_name: \"Stash\", start_url: \"/app\", scope: \"/\", display: \"standalone\", orientation: \"portrait\", background_color: \"#f4f6f8\", theme_color: \"#0f766e\", icons: [{ src: \"/icon.svg\", sizes: \"any\", type: \"image/svg+xml\", purpose: \"any\" }, { src: \"/icon.svg\", sizes: \"any\", type: \"image/svg+xml\", purpose: \"maskable\" }] });\n// Still no caching (so everyone always gets the latest app), but now it handles push.\nconst SW_JS = `\nself.addEventListener('install', e => self.skipWaiting());\nself.addEventListener('activate', e => self.clients.claim());\nself.addEventListener('fetch', e => {});\n\nself.addEventListener('push', function(e){\n var d = {};\n try { d = e.data ? e.data.json() : {}; }\n catch (err) { d = { title: 'Stash', body: (e.data && e.data.text()) || '' }; }\n var title = d.title || 'Stash';\n var opts = {\n body: d.body || '',\n icon: '/icon.svg',\n badge: '/icon.svg',\n tag: d.tag || 'stash',\n renotify: false,\n // '/app', never '/'. Tapping a notification about a bill must open the budget, not the\n // marketing page. (Logged-in users would be bounced there anyway, but only after a flash of\n // the wrong page, which looks broken.)\n data: { url: d.url || '/app' }\n };\n e.waitUntil(self.registration.showNotification(title, opts));\n});\n\nself.addEventListener('notificationclick', function(e){\n e.notification.close();\n var url = (e.notification.data && e.notification.data.url) || '/app';\n e.waitUntil(\n clients.matchAll({ type: 'window', includeUncontrolled: true }).then(function(list){\n for (var i = 0; i < list.length; i++) {\n var c = list[i];\n if ('focus' in c) { if (c.navigate) { try { c.navigate(url); } catch (x) {} } return c.focus(); }\n }\n if (clients.openWindow) return clients.openWindow(url);\n })\n );\n});\n`;\napp.get(\"/icon.svg\", (c) => new Response(ICON_SVG, { headers: { \"content-type\": \"image/svg+xml\", \"cache-control\": \"public, max-age=86400\" } }));\napp.get(\"/manifest.webmanifest\", (c) => new Response(MANIFEST, { headers: { \"content-type\": \"application/manifest+json\" } }));\napp.get(\"/sw.js\", (c) => new Response(SW_JS, { headers: { \"content-type\": \"application/javascript\" } }));\n\n// Feedback / bug reports -> emailed to the val owner (admin)\napp.post(\"/api/feedback\", async (c: any) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const { message, images } = await c.req.json().catch(() => ({}));\n const msg = String(message || \"\").slice(0, 5000);\n if (!msg.trim()) return c.json({ error: \"empty\" }, 400);\n const uname = (u as any).username;\n const id = randHex(10);\n try { await sqlite.execute({ sql: \"INSERT INTO mb_feedback (id, username, message, created) VALUES (?, ?, ?, ?)\", args: [id, uname, msg, Date.now()] }); } catch (_) {}\n const atts = Array.isArray(images)\n ? images.slice(0, 5).map((im: any, i: number) => ({ filename: im.name || (\"image\" + (i + 1) + \".png\"), content: im.b64 || \"\", contentType: im.type || \"image/png\", encoding: \"base64\" })).filter((a: any) => a.content)\n : [];\n try {\n await email({ subject: `Money app feedback from @${uname}`, text: `From: @${uname}\\n\\n${msg}`, attachments: atts });\n } catch (e) {\n return c.json({ ok: true, emailed: false });\n }\n return c.json({ ok: true, emailed: true });\n});\n\n// the statement parsers live in their own files purely so they can be unit-tested outside a browser\napp.get(\"/csv.js\", async (c) =>\n new Response(await readFile(\"/csv.js\", import.meta.url), {\n headers: { \"content-type\": \"application/javascript\", \"cache-control\": \"no-store\" },\n }));\napp.get(\"/pdfstmt.js\", async (c) =>\n new Response(await readFile(\"/pdfstmt.js\", import.meta.url), {\n headers: { \"content-type\": \"application/javascript\", \"cache-control\": \"no-store\" },\n }));\n\n// Every build gets an id, stamped into the page it is served with. The running app can then ask\n// the server \"am I still the current build?\" and reload itself if it is not. Without this, a\n// stale copy in a home-screen PWA is invisible -- it just quietly misbehaves.\nlet BUILD = \"\";\nlet BUILD_HTML = \"\";\nasync function buildOf() {\n const html = await readFile(\"/index.html\", import.meta.url);\n if (html !== BUILD_HTML) {\n BUILD_HTML = html;\n const h = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(html));\n BUILD = [...new Uint8Array(h)].slice(0, 5).map(x => x.toString(16).padStart(2, \"0\")).join(\"\");\n }\n return { build: BUILD, html: BUILD_HTML };\n}\n\napp.get(\"/api/build\", async (c) => c.json({ build: (await buildOf()).build }));\n\n// Privacy policy and terms. Static, no auth, cacheable for a few minutes -- they must stay reachable\n// even when someone is logged out, because that is exactly when people go looking for them.\nconst legalHeaders = { \"content-type\": \"text/html; charset=utf-8\", \"cache-control\": \"public, max-age=300\" };\napp.get(\"/privacy\", (c) => new Response(privacyHtml(), { headers: legalHeaders }));\napp.get(\"/terms\", (c) => new Response(termsHtml(), { headers: legalHeaders }));\n\n// ---- the site, and the app, are now different things ----\n//\n// / the landing page. Static, no app JS. See site.ts.\n// /login the app, opened on the log-in form.\n// /signup the app, opened on the create-account form.\n// /demo the app, signed straight into the demo account.\n// /app the app. This is the PWA's start_url.\n//\n// Everything except \"/\" serves the SAME index.html; the difference is a route marker substituted\n// into the page, which a script near the bottom of index.html reads. One app, four doors.\n//\n// The trap this avoids: existing installs still point at \"/\", so the landing page checks for a\n// session token before it paints and redirects to /app. Their home-screen icon keeps working.\n\nasync function serveApp(route: string) {\n const { build, html } = await buildOf();\n const body = html\n .replace(/__BUILD_ID__/g, build)\n .replace(/__ROUTE__/g, route);\n return new Response(body, {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n // NEVER let a browser or a home-screen PWA hold on to an old copy of the app.\n \"cache-control\": \"no-store, no-cache, must-revalidate, max-age=0\",\n \"pragma\": \"no-cache\",\n \"expires\": \"0\",\n \"x-build\": build,\n },\n });\n}\n\napp.get(\"/\", (c) =>\n new Response(landingHtml(), {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n // short cache: it is a static page, but a stale pitch is still a bad look\n \"cache-control\": \"public, max-age=300\",\n },\n }));\n\napp.get(\"/app\", () => serveApp(\"app\"));\napp.get(\"/login\", () => serveApp(\"login\"));\napp.get(\"/signup\", () => serveApp(\"signup\"));\napp.get(\"/demo\", () => serveApp(\"demo\"));\n\nexport default app.fetch;\n","// Money — Pocket Budget (multi-user)\n// Each person has their own account; data is fully isolated per user.\nimport { Hono } from \"npm:hono\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { readFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { email } from \"https://esm.town/v/std/email\";\nimport { privacyHtml, termsHtml } from \"./legal.ts\";\nimport { landingHtml } from \"./site.ts\";\nimport { DEMO } from \"./demo_data.ts\";\n\nconst APP_SECRET = Deno.env.get(\"APP_KEY\") || \"dev-secret\";\nconst OWNER_AKAHU_USER = Deno.env.get(\"AKAHU_USER_TOKEN\") || \"\";\nconst OWNER_AKAHU_APP = Deno.env.get(\"AKAHU_APP_TOKEN\") || \"\";\n\n// ---- one-time schema ----\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS mb_users (id TEXT PRIMARY KEY, username TEXT UNIQUE, pass_hash TEXT, salt TEXT, created INTEGER)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS mb_sessions (token TEXT PRIMARY KEY, user_id TEXT, created INTEGER)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS mb_bank (user_id TEXT PRIMARY KEY, akahu_user TEXT, akahu_app TEXT)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS mb_feedback (id TEXT PRIMARY KEY, username TEXT, message TEXT, created INTEGER)`);\ntry { await sqlite.execute(`ALTER TABLE mb_users ADD COLUMN recovery_lookup TEXT`); } catch (_) { /* column already exists */ }\n// one row per device that has agreed to receive notifications\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS mb_push (endpoint TEXT PRIMARY KEY, user_id TEXT, p256dh TEXT, auth TEXT, created INTEGER)`);\n// failed-attempt counters, so passwords and recovery codes can't be brute-forced\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS mb_throttle (k TEXT PRIMARY KEY, n INTEGER, reset INTEGER)`);\n\n// ---- free vs pro ----\n// Akahu charges per user, so the automatic bank feed is the ONLY thing behind the paywall.\n// Everything else -- pockets, stats, net worth, forecasting, encryption, statement import --\n// stays free, because it costs nothing to run.\ntry { await sqlite.execute(`ALTER TABLE mb_users ADD COLUMN plan TEXT`); } catch (_) {}\n// This line used to say plan = 'pro', to grandfather the handful of accounts that existed when\n// the paywall was added. It runs on EVERY server restart -- so it also silently upgraded every\n// new stranger who signed up, handing them a bank feed that costs real money per user.\n// Existing accounts already have their plan set, so anything still NULL is a new signup: free.\ntry { await sqlite.execute(`UPDATE mb_users SET plan = 'free' WHERE plan IS NULL`); } catch (_) {}\n// people telling us whether they'd actually pay. This is the only way to know if Pro is worth building.\nawait sqlite.execute(\n `CREATE TABLE IF NOT EXISTS mb_waitlist (user_id TEXT PRIMARY KEY, username TEXT, email TEXT, would_pay TEXT, price REAL, note TEXT, created INTEGER)`,\n);\n\n// ---- a way to warn people ----\n// OPTIONAL, and deliberately so. Until now Stash held no email address for anyone, which is lovely\n// for privacy and useless the day something goes wrong: the Privacy Act expects affected people to\n// be told directly, and an in-app banner only reaches whoever happens to open the app.\n// This column is the ONLY thing it is for. Not marketing, not newsletters, not \"product updates\".\ntry { await sqlite.execute(`ALTER TABLE mb_users ADD COLUMN email TEXT`); } catch (_) {}\n\n// ---- who signed in, and when ----\n// Stash used to keep no record of this at all. That meant two things: nobody could tell whether an\n// account had been broken into, and when the question \"was the demo ever actually opened?\" came up,\n// the honest answer was \"there is no way to know\". An app that holds money data should not have to\n// shrug at that question.\n//\n// This is deliberately BOTH ways round: the user sees their own sign-ins, so THEY can spot a login\n// they don't recognise. That is the point of it. It is not an operator surveillance tool.\nawait sqlite.execute(\n `CREATE TABLE IF NOT EXISTS mb_logins (id TEXT PRIMARY KEY, user_id TEXT, username TEXT, ok INTEGER, kind TEXT, ip TEXT, ua TEXT, created INTEGER)`,\n);\nawait sqlite.execute(`CREATE INDEX IF NOT EXISTS mb_logins_user ON mb_logins (user_id, created)`);\n\n// ---- errors the app hits in the wild ----\n// Nobody reports bugs. They just stop using the thing. The notification bug below sat there for\n// weeks because every piece reported success and nothing was watching the joins between them.\n// Stores a message, a stack and a build id. It must NEVER carry budget data -- see /api/error.\nawait sqlite.execute(\n `CREATE TABLE IF NOT EXISTS mb_errors (id TEXT PRIMARY KEY, user_id TEXT, build TEXT, kind TEXT, message TEXT, stack TEXT, ua TEXT, created INTEGER)`,\n);\n\n// ---- end-to-end encryption ----\n// The browser holds the only key. The server stores the user's data key TWICE, each time wrapped\n// by a key we never see: one derived from their password, one from their recovery code. We hold\n// the locked boxes and none of the keys, so nobody with database access (including the operator)\n// can read a user's data. See SECURITY_NOTES.md.\n// auth_v 1 = old account, password sent to server, data in plaintext\n// auth_v 2 = encrypted. The client sends an \"auth key\" derived from the password by a DIFFERENT\n// derivation than the encryption key, so even the login request leaks nothing usable.\nfor (\n const col of [\"kdf_salt TEXT\", \"rc_salt TEXT\", \"dk_pw TEXT\", \"dk_rc TEXT\", \"auth_v INTEGER\"]\n) {\n try { await sqlite.execute(`ALTER TABLE mb_users ADD COLUMN ${col}`); } catch (_) { /* already there */ }\n}\n// sessions used to live forever. They now expire; last_seen is bumped as the session is used.\ntry { await sqlite.execute(`ALTER TABLE mb_sessions ADD COLUMN last_seen INTEGER`); } catch (_) { /* column already exists */ }\n// Anyone already logged in when this shipped has last_seen = NULL. Treat them as active right now\n// rather than dating them from `created` — otherwise deploying this would sign everybody out.\ntry { await sqlite.execute({ sql: `UPDATE mb_sessions SET last_seen = ? WHERE last_seen IS NULL`, args: [Date.now()] }); } catch (_) {}\n\n// ---- helpers ----\nconst enc = new TextEncoder();\nconst dec = new TextDecoder();\nfunction toHex(b: Uint8Array) { return [...b].map(x => x.toString(16).padStart(2, \"0\")).join(\"\"); }\nfunction fromHex(h: string) { const a = new Uint8Array(h.length / 2); for (let i = 0; i < a.length; i++) a[i] = parseInt(h.substr(i * 2, 2), 16); return a; }\nfunction randHex(n: number) { return toHex(crypto.getRandomValues(new Uint8Array(n))); }\nfunction makeRecoveryCode() {\n const abc = \"ABCDEFGHJKLMNPQRSTUVWXYZ23456789\"; // no 0/O/1/I to avoid confusion\n const b = crypto.getRandomValues(new Uint8Array(16));\n let s = \"\"; for (let i = 0; i < 16; i++) s += abc[b[i] % 32];\n return \"STASH-\" + s.slice(0, 4) + \"-\" + s.slice(4, 8) + \"-\" + s.slice(8, 12) + \"-\" + s.slice(12, 16);\n}\nfunction normCode(c: string) { return String(c || \"\").toUpperCase().replace(/[^A-Z0-9]/g, \"\"); }\n// Akahu's pending transactions carry no _id. Derive a stable one from the contents so the\n// same pending item keeps the same id on every refresh (otherwise the inbox re-adds it forever).\nfunction pendId(t: any) {\n const raw = [t._account || \"\", t.date || \"\", String(t.amount), t.description || \"\"].join(\"|\");\n let a = 0x811c9dc5, b = 0x811c9dc5 ^ raw.length;\n for (let i = 0; i < raw.length; i++) { a ^= raw.charCodeAt(i); a = Math.imul(a, 0x01000193) >>> 0; }\n for (let i = raw.length - 1; i >= 0; i--) { b ^= raw.charCodeAt(i); b = Math.imul(b, 0x01000193) >>> 0; }\n return \"pend_\" + a.toString(36) + b.toString(36);\n}\nasync function sha256hex(s: string) { const b = await crypto.subtle.digest(\"SHA-256\", enc.encode(s)); return toHex(new Uint8Array(b)); }\n\nasync function hashPw(pw: string, saltHex: string) {\n const key = await crypto.subtle.importKey(\"raw\", enc.encode(pw), \"PBKDF2\", false, [\"deriveBits\"]);\n const bits = await crypto.subtle.deriveBits({ name: \"PBKDF2\", salt: fromHex(saltHex), iterations: 120000, hash: \"SHA-256\" }, key, 256);\n return toHex(new Uint8Array(bits));\n}\nasync function aesKey() {\n const base = await crypto.subtle.importKey(\"raw\", enc.encode(APP_SECRET), \"PBKDF2\", false, [\"deriveKey\"]);\n return crypto.subtle.deriveKey({ name: \"PBKDF2\", salt: enc.encode(\"mb-bank-salt\"), iterations: 100000, hash: \"SHA-256\" }, base, { name: \"AES-GCM\", length: 256 }, false, [\"encrypt\", \"decrypt\"]);\n}\nasync function encTok(plain: string) {\n const key = await aesKey(); const iv = crypto.getRandomValues(new Uint8Array(12));\n const ct = await crypto.subtle.encrypt({ name: \"AES-GCM\", iv }, key, enc.encode(plain));\n return toHex(iv) + \":\" + toHex(new Uint8Array(ct));\n}\nasync function decTok(s: string) {\n const [ivh, cth] = s.split(\":\"); const key = await aesKey();\n const pt = await crypto.subtle.decrypt({ name: \"AES-GCM\", iv: fromHex(ivh) }, key, fromHex(cth));\n return dec.decode(pt);\n}\n\n// ---- brute-force protection ----\n// Counts failed attempts against a key inside a rolling window. Returns null when the caller may\n// proceed, or the number of seconds to wait when they've had too many goes.\nasync function throttle(key: string, limit: number, windowMs: number): Promise {\n const now = Date.now();\n const r = await sqlite.execute({ sql: \"SELECT n, reset FROM mb_throttle WHERE k = ?\", args: [key] });\n if (r.rows.length) {\n const row = r.rows[0] as any;\n const reset = Number(row.reset) || 0;\n const n = Number(row.n) || 0;\n if (reset > now) {\n if (n >= limit) return Math.ceil((reset - now) / 1000);\n return null;\n }\n }\n return null; // window has lapsed (or no record) — let them try\n}\n// Call ONLY after an attempt actually fails.\nasync function throttleFail(key: string, windowMs: number) {\n const now = Date.now();\n const r = await sqlite.execute({ sql: \"SELECT n, reset FROM mb_throttle WHERE k = ?\", args: [key] });\n const row = r.rows.length ? (r.rows[0] as any) : null;\n if (row && (Number(row.reset) || 0) > now) {\n await sqlite.execute({ sql: \"UPDATE mb_throttle SET n = n + 1 WHERE k = ?\", args: [key] });\n } else {\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO mb_throttle (k, n, reset) VALUES (?, ?, ?)\", args: [key, 1, now + windowMs] });\n }\n}\nasync function throttleClear(key: string) {\n await sqlite.execute({ sql: \"DELETE FROM mb_throttle WHERE k = ?\", args: [key] });\n}\nfunction clientIp(c: any) {\n const f = c.req.header(\"x-forwarded-for\") || \"\";\n return (f.split(\",\")[0] || \"\").trim() || c.req.header(\"cf-connecting-ip\") || \"unknown\";\n}\nfunction tooMany(c: any, secs: number) {\n const mins = Math.max(1, Math.ceil(secs / 60));\n return c.json({ error: `Too many attempts. Try again in about ${mins} minute${mins === 1 ? \"\" : \"s\"}.` }, 429, { \"retry-after\": String(secs) });\n}\n\n// ---- password strength ----\n// Applied to NEW passwords only (signup, change, reset). Login never re-checks, so people who\n// already have a short password can still get in — they just can't set another one.\nconst COMMON_PW = [\"password\", \"password1\", \"12345678\", \"123456789\", \"1234567890\", \"qwertyuiop\", \"letmein123\", \"iloveyou\", \"abc12345\", \"passw0rd\"];\nfunction pwProblem(pw: string, username?: string): string | null {\n const p = String(pw || \"\");\n if (p.length < 10) return \"Password must be at least 10 characters.\";\n if (p.length > 200) return \"That password is too long.\";\n const lower = p.toLowerCase();\n if (COMMON_PW.includes(lower)) return \"That password is too common. Pick something else.\";\n if (username && lower.includes(String(username).toLowerCase())) return \"Password can't contain your username.\";\n // Character variation — unless it's long enough to be a passphrase, which is fine on its own.\n if (p.length < 16) {\n let classes = 0;\n if (/[a-z]/.test(p)) classes++;\n if (/[A-Z]/.test(p)) classes++;\n if (/[0-9]/.test(p)) classes++;\n if (/[^a-zA-Z0-9]/.test(p)) classes++;\n if (classes < 2) return \"Mix it up a bit — use letters and at least one number or symbol (or make it 16+ characters).\";\n }\n return null;\n}\n\n// Sessions expire after 30 days of not being used. Every request slides the window forward, so\n// anyone actually using the app never gets kicked out.\nconst SESSION_TTL = 30 * 86400000;\nasync function userFromReq(c: any) {\n const tok = (c.req.header(\"authorization\") || \"\").replace(/^Bearer\\s+/i, \"\") || c.req.header(\"x-session\") || \"\";\n if (!tok) return null;\n const r = await sqlite.execute({ sql: \"SELECT user_id, last_seen FROM mb_sessions WHERE token = ?\", args: [tok] });\n if (!r.rows.length) return null;\n const row = r.rows[0] as any;\n const now = Date.now();\n const seen = Number(row.last_seen) || 0;\n if (seen && now - seen > SESSION_TTL) {\n await sqlite.execute({ sql: \"DELETE FROM mb_sessions WHERE token = ?\", args: [tok] });\n return null;\n }\n // Only write once an hour — this runs on every single API call.\n if (now - seen > 3600000) {\n await sqlite.execute({ sql: \"UPDATE mb_sessions SET last_seen = ? WHERE token = ?\", args: [now, tok] });\n }\n const u = await sqlite.execute({ sql: \"SELECT id, username FROM mb_users WHERE id = ?\", args: [row.user_id] });\n return u.rows.length ? u.rows[0] : null;\n}\n\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\n// ---- auth ----\n// 20 new accounts per hour from one IP is plenty for anything legitimate.\nconst SIGNUP_WINDOW = 3600000, SIGNUP_LIMIT = 20;\n// 8 wrong passwords in 15 minutes and you wait. Counted per username AND per IP, so one attacker\n// can't grind a single account, and can't spray many accounts from one machine either.\nconst LOGIN_WINDOW = 900000, LOGIN_LIMIT = 8;\n// Recovery codes are the keys to the kingdom, so they get a tighter leash.\nconst RECOVER_WINDOW = 3600000, RECOVER_LIMIT = 5;\n\n// The client needs to know, BEFORE it can log in, which scheme an account uses and what salt to\n// derive its keys with. For usernames that don't exist we return a stable made-up salt so this\n// can't be used to find out who has an account.\napp.post(\"/api/authinfo\", async (c) => {\n const { username } = await c.req.json().catch(() => ({}));\n const uname = String(username || \"\").trim().toLowerCase();\n const r = await sqlite.execute({ sql: \"SELECT kdf_salt, auth_v FROM mb_users WHERE username = ?\", args: [uname] });\n if (!r.rows.length) {\n const decoy = await sha256hex(\"decoy|\" + APP_SECRET + \"|\" + uname);\n return c.json({ v: 2, kdfSalt: decoy.slice(0, 32) });\n }\n const row = r.rows[0] as any;\n const v = Number(row.auth_v) || 1;\n return c.json({ v, kdfSalt: row.kdf_salt || \"\" });\n});\n\n/**\n * Record a sign-in attempt, good or bad.\n *\n * Kept for 90 days and no longer. It records the IP, which IS personal information -- that is a\n * deliberate trade: without it, \"someone signed in\" tells you nothing, and the whole point is that\n * a person can look at their own list and say \"that wasn't me\". It is disclosed in the privacy\n * policy, it is shown to the user themselves, and it dies with the account.\n *\n * This must never be able to break a login. If the write fails, the user still gets in.\n */\nasync function noteLogin(\n c: any,\n opts: { userId?: string | null; username: string; ok: boolean; kind: string },\n) {\n try {\n await sqlite.execute({\n sql: \"INSERT INTO mb_logins (id, user_id, username, ok, kind, ip, ua, created) VALUES (?, ?, ?, ?, ?, ?, ?, ?)\",\n args: [\n randHex(12),\n opts.userId ?? null,\n opts.username,\n opts.ok ? 1 : 0,\n opts.kind,\n clientIp(c),\n String(c.req.header(\"user-agent\") ?? \"\").slice(0, 200),\n Date.now(),\n ],\n });\n // prune on write. Cheap, and it means retention is enforced by the code rather than by a promise\n // in a policy document that nobody ever runs.\n await sqlite.execute({\n sql: \"DELETE FROM mb_logins WHERE created < ?\",\n args: [Date.now() - 90 * 24 * 60 * 60 * 1000],\n });\n } catch (_) { /* a login must never fail because the audit trail did */ }\n}\n\n/* ================= THE DEMO ACCOUNT =================\n\n Its username and password are PUBLIC. They are on the landing page. That makes it the one account\n on the server that anybody at all can sign into, which has two consequences worth taking seriously:\n\n 1. A visitor could change its password, its username, or simply delete it -- and the shop window\n would be broken for everyone until the 2:30am rebuild. So the account-altering endpoints are\n closed to it. Look around all you like; you cannot take the keys.\n\n 2. Whatever a visitor does to the budget should not greet the next visitor. So the demo can be\n reset back to its pristine state, and the app calls that on the way out.\n\n None of this is security through obscurity -- there is nothing in the demo to protect. It is\n about the thing being intact for the next person who looks at it.\n ============================================= */\nconst DEMO_USER = \"demo\";\n\n/** The endpoints that would let a visitor take the demo away from everyone else. */\napp.use(\"/api/account/*\", async (c, next) => {\n const u = await userFromReq(c).catch(() => null);\n if (u && (u as any).username === DEMO_USER) {\n return c.json({\n error: \"This is the demo account. It cannot be changed — it resets for the next person.\",\n demo: true,\n }, 403);\n }\n await next();\n});\n\n/**\n * The demo data, as plain JSON. No account, no session, no encryption.\n *\n * This is what /demo actually runs on now. The old design signed every visitor into ONE shared\n * account, which worked exactly as long as only one person was ever looking. Two at once and they\n * trod on each other: A renames a pocket, B reloads and sees A's change; B saves and A's work is\n * gone; A closes the tab, the exit-wipe fires, and B's budget resets while B is still reading it.\n * All four of those were reproduced against the live server before this was written.\n *\n * So the demo stopped being an account. The browser gets a copy of this, holds it in memory, and\n * never writes it anywhere. Everyone gets their own. There is nothing to collide over, nothing to\n * vandalise, and nothing to wipe -- closing the tab IS the wipe.\n *\n * It is fake data about a fictional person, so it is served in the clear and cached.\n */\napp.get(\"/api/demo/data\", (c) =>\n new Response(JSON.stringify(DEMO), {\n headers: {\n \"content-type\": \"application/json; charset=utf-8\",\n \"cache-control\": \"public, max-age=600\",\n },\n }));\n\n/**\n * Put the demo ACCOUNT back the way it was.\n *\n * The account still exists -- Akahu were given its credentials, so it has to keep working for them.\n * It is no longer what the public /demo link uses, so this and the nightly rebuild are now a safety\n * net rather than load-bearing.\n *\n * Restores the budget from the pristine copy that make_demo saved alongside it. It does NOT rebuild\n * the account: the user id, password and data key all stay put, so a second person browsing the demo\n * in another tab does not get thrown out mid-look. (Rebuilding would issue a new id and invalidate\n * their session — a fine thing to do at 2:30am, a rude thing to do at 2:30pm.)\n *\n * No auth required, deliberately: this fires from a page that is being closed, when the session may\n * already be gone. There is nothing to abuse — the worst anyone can do by hammering it is keep the\n * demo tidy.\n */\napp.post(\"/api/demo/reset\", async (c) => {\n const wait = await throttle(\"demoreset:\" + clientIp(c), 60, 60 * 60 * 1000);\n if (wait) return c.json({ ok: true, skipped: true });\n await throttleFail(\"demoreset:\" + clientIp(c), 60 * 60 * 1000);\n\n const r = await sqlite.execute({ sql: \"SELECT id FROM mb_users WHERE username = ?\", args: [DEMO_USER] });\n if (!r.rows.length) return c.json({ error: \"no demo\" }, 404);\n const uid = (r.rows[0] as any).id;\n\n const clean = await blob.getJSON(\"demo_clean\");\n if (!clean) return c.json({ error: \"no pristine copy\" }, 500);\n\n await blob.setJSON(\"bud_\" + uid, clean);\n // and the trail a visitor leaves behind\n for (const k of [\"bud_prev_\" + uid, \"bud_hist_\" + uid, \"hint_\" + uid, \"notif_\" + uid]) {\n try { await blob.delete(k); } catch (_) { /* nothing there */ }\n }\n return c.json({ ok: true });\n});\n\n/** Optional email, stored only so a security notice can actually reach someone. Blank stays blank. */\nfunction cleanEmail(v: any): string | null {\n const s = String(v ?? \"\").trim().toLowerCase();\n if (!s) return null;\n // deliberately loose: the job here is to reject obvious junk, not to police valid addresses\n if (s.length > 200 || !/^[^@\\s]+@[^@\\s.]+\\.[^@\\s]+$/.test(s)) return null;\n return s;\n}\n\napp.post(\"/api/signup\", async (c) => {\n const ipKey = \"signup:\" + clientIp(c);\n const wait = await throttle(ipKey, SIGNUP_LIMIT, SIGNUP_WINDOW);\n if (wait) return tooMany(c, wait);\n const b = await c.req.json().catch(() => ({}));\n const uname = String(b.username || \"\").trim().toLowerCase();\n if (!/^[a-z0-9_]{3,20}$/.test(uname)) return c.json({ error: \"Username must be 3-20 letters, numbers or underscore.\" }, 400);\n\n // Every new account is encrypted. There is no plaintext signup path any more.\n // NOTE: we get an auth key, never a password — so password strength is enforced in the browser\n // (see __pwProblem in index.html). A user could bypass that only to weaken their own account.\n const { authKey, kdfSalt, rcSalt, dkPw, dkRc, recoveryLookup } = b;\n if (!authKey || !kdfSalt || !rcSalt || !dkPw || !dkRc || !recoveryLookup) {\n return c.json({ error: \"Your app is out of date. Refresh the page and try again.\" }, 400);\n }\n const exists = await sqlite.execute({ sql: \"SELECT id FROM mb_users WHERE username = ?\", args: [uname] });\n if (exists.rows.length) return c.json({ error: \"That username is taken.\" }, 409);\n await throttleFail(ipKey, SIGNUP_WINDOW); // counts every account created from this IP\n\n const id = randHex(12); const salt = randHex(16);\n // the auth key still gets hashed before storage, so a database leak doesn't hand over a login\n const ph = await hashPw(String(authKey), salt);\n // Optional. Blank is a perfectly valid answer and must stay one: an account that works without an\n // email is the whole reason someone would trust this over a bank app.\n const mail = cleanEmail(b.email);\n // plan is set EXPLICITLY. Leaving it null once meant a migration silently upgraded new users to pro.\n await sqlite.execute({\n sql: \"INSERT INTO mb_users (id, username, pass_hash, salt, created, recovery_lookup, kdf_salt, rc_salt, dk_pw, dk_rc, auth_v, plan, email) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 2, 'free', ?)\",\n args: [id, uname, ph, salt, Date.now(), String(recoveryLookup), String(kdfSalt), String(rcSalt), String(dkPw), String(dkRc), mail],\n });\n await noteLogin(c, { userId: id, username: uname, ok: true, kind: \"signup\" });\n const token = randHex(32);\n await sqlite.execute({ sql: \"INSERT INTO mb_sessions (token, user_id, created, last_seen) VALUES (?, ?, ?, ?)\", args: [token, id, Date.now(), Date.now()] });\n return c.json({ token, username: uname, v: 2 });\n});\n\n// Your own sign-in history. Not owner-only, on purpose: the person who can tell whether a login is\n// suspicious is the one who knows where they were on Tuesday.\napp.get(\"/api/logins\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const r = await sqlite.execute({\n sql: \"SELECT ok, kind, ip, ua, created FROM mb_logins WHERE user_id = ? ORDER BY created DESC LIMIT 20\",\n args: [(u as any).id],\n });\n return c.json({ logins: r.rows });\n});\n\napp.post(\"/api/login\", async (c) => {\n const { username, password, authKey } = await c.req.json().catch(() => ({}));\n const uname = String(username || \"\").trim().toLowerCase();\n const userKey = \"login:u:\" + uname;\n const ipKey = \"login:i:\" + clientIp(c);\n const wait = (await throttle(userKey, LOGIN_LIMIT, LOGIN_WINDOW)) || (await throttle(ipKey, LOGIN_LIMIT * 3, LOGIN_WINDOW));\n if (wait) return tooMany(c, wait);\n\n const r = await sqlite.execute({\n sql: \"SELECT id, pass_hash, salt, auth_v, kdf_salt, rc_salt, dk_pw FROM mb_users WHERE username = ?\",\n args: [uname],\n });\n const fail = async (userId?: string | null) => {\n await throttleFail(userKey, LOGIN_WINDOW);\n await throttleFail(ipKey, LOGIN_WINDOW);\n // A failed attempt is the one a user most needs to see: it is what \"someone is trying to get\n // into my account\" actually looks like.\n await noteLogin(c, { userId, username: uname, ok: false, kind: \"password\" });\n return c.json({ error: \"Wrong username or password.\" }, 401);\n };\n if (!r.rows.length) return await fail(null);\n const row = r.rows[0] as any;\n const v = Number(row.auth_v) || 1;\n\n // v2: the browser sends a key derived from the password, never the password itself.\n // v1: legacy account, still sends the raw password. This is the ONLY remaining place the server\n // can see a password, and it happens once — the client upgrades the account straight after.\n // No strength check here either way: people who signed up under the old 6-char rule must still\n // be able to get in. Strength is only enforced when SETTING a password.\n const secret = v === 2 ? String(authKey || \"\") : String(password || \"\");\n if (!secret) return await fail(row.id);\n const ph = await hashPw(secret, row.salt);\n if (ph !== row.pass_hash) return await fail(row.id);\n\n await throttleClear(userKey); // a good password wipes the slate\n await noteLogin(c, { userId: row.id, username: uname, ok: true, kind: \"password\" });\n const token = randHex(32);\n await sqlite.execute({ sql: \"INSERT INTO mb_sessions (token, user_id, created, last_seen) VALUES (?, ?, ?, ?)\", args: [token, row.id, Date.now(), Date.now()] });\n // dk_pw is the user's data key, locked with a key only their browser can rebuild. Useless to us.\n return c.json({ token, username: uname, v, kdfSalt: row.kdf_salt || \"\", rcSalt: row.rc_salt || \"\", dkPw: row.dk_pw || \"\" });\n});\n\n// One-time upgrade of an old plaintext account to an encrypted one. The browser has just proved it\n// knows the real password (we re-check it here), has generated a data key, encrypted the user's\n// data with it, and is now handing us the locked boxes. It also issues a fresh recovery code,\n// because the old one can't unlock a key it was never used to wrap.\napp.post(\"/api/account/encrypt\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const uid = (u as any).id;\n const key = \"pw:\" + uid;\n const wait = await throttle(key, LOGIN_LIMIT, LOGIN_WINDOW);\n if (wait) return tooMany(c, wait);\n\n const b = await c.req.json().catch(() => ({}));\n const cur = await sqlite.execute({ sql: \"SELECT auth_v FROM mb_users WHERE id = ?\", args: [uid] });\n if ((Number((cur.rows[0] as any)?.auth_v) || 1) === 2) return c.json({ error: \"already_encrypted\" }, 409);\n if (!(await checkPw(uid, b.password))) {\n await throttleFail(key, LOGIN_WINDOW);\n return c.json({ error: \"Current password is incorrect.\" }, 403);\n }\n await throttleClear(key);\n\n const { authKey, kdfSalt, rcSalt, dkPw, dkRc, recoveryLookup, state } = b;\n if (!authKey || !kdfSalt || !rcSalt || !dkPw || !dkRc || !recoveryLookup || !state || !state.enc) {\n return c.json({ error: \"bad_upgrade\" }, 400);\n }\n // Write the ciphertext FIRST. If we flipped the account to v2 and then failed to store the\n // encrypted data, the user could no longer read their own plaintext. Order matters here.\n await blob.setJSON(\"bud_\" + uid, state);\n const salt = randHex(16);\n const ph = await hashPw(String(authKey), salt);\n await sqlite.execute({\n sql: \"UPDATE mb_users SET pass_hash = ?, salt = ?, kdf_salt = ?, rc_salt = ?, dk_pw = ?, dk_rc = ?, recovery_lookup = ?, auth_v = 2 WHERE id = ?\",\n args: [ph, salt, String(kdfSalt), String(rcSalt), String(dkPw), String(dkRc), String(recoveryLookup), uid],\n });\n // every other device is now holding a session that can't decrypt anything — send them back to login\n const tok = (c.req.header(\"authorization\") || \"\").replace(/^Bearer\\s+/i, \"\") || c.req.header(\"x-session\") || \"\";\n await sqlite.execute({ sql: \"DELETE FROM mb_sessions WHERE user_id = ? AND token != ?\", args: [uid, tok] });\n return c.json({ ok: true });\n});\n\napp.post(\"/api/logout\", async (c) => {\n const tok = (c.req.header(\"authorization\") || \"\").replace(/^Bearer\\s+/i, \"\") || c.req.header(\"x-session\") || \"\";\n if (tok) await sqlite.execute({ sql: \"DELETE FROM mb_sessions WHERE token = ?\", args: [tok] });\n return c.json({ ok: true });\n});\n\napp.get(\"/api/me\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n // so the app can nudge anyone who never set up a recovery code (accounts made before the feature existed)\n const rr = await sqlite.execute({ sql: \"SELECT recovery_lookup, auth_v, plan, email FROM mb_users WHERE id = ?\", args: [(u as any).id] });\n const rl = rr.rows.length ? (rr.rows[0] as any).recovery_lookup : null;\n const v = rr.rows.length ? (Number((rr.rows[0] as any).auth_v) || 1) : 1;\n const plan = rr.rows.length ? ((rr.rows[0] as any).plan || \"free\") : \"free\";\n const mail = rr.rows.length ? ((rr.rows[0] as any).email || \"\") : \"\";\n const wl = await sqlite.execute({ sql: \"SELECT would_pay FROM mb_waitlist WHERE user_id = ?\", args: [(u as any).id] });\n return c.json({ username: (u as any).username, hasRecovery: !!rl, v, plan, email: mail, onWaitlist: wl.rows.length > 0 });\n});\n\n// Set or clear the security-notice email. Clearing it is a first-class action, not a hidden one:\n// people must be able to take it back as easily as they gave it.\napp.post(\"/api/account/email\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const b = await c.req.json().catch(() => ({}));\n const raw = String((b as any).email ?? \"\").trim();\n const mail = cleanEmail(raw);\n if (raw && !mail) return c.json({ error: \"That does not look like an email address.\" }, 400);\n await sqlite.execute({ sql: \"UPDATE mb_users SET email = ? WHERE id = ?\", args: [mail, (u as any).id] });\n return c.json({ ok: true, email: mail || \"\" });\n});\n\n// ---- error reports ----\n// What this deliberately does NOT take: the budget, the state, any request body, any field value.\n// A stack trace names functions and line numbers, not the numbers in someone's account. If that ever\n// stops being true, this endpoint is the first thing to delete.\nconst ERR_LIMIT = 20, ERR_WINDOW = 60 * 60 * 1000; // a loop that throws must not become a DDoS on us\napp.post(\"/api/error\", async (c) => {\n const wait = await throttle(\"err:\" + clientIp(c), ERR_LIMIT, ERR_WINDOW);\n if (wait) return c.json({ ok: true, dropped: true }); // never let reporting an error cause an error\n await throttleFail(\"err:\" + clientIp(c), ERR_WINDOW);\n\n const b = await c.req.json().catch(() => ({}));\n const cut = (v: any, n: number) => String(v ?? \"\").slice(0, n);\n const u = await userFromReq(c).catch(() => null); // errors from logged-out users are still worth having\n\n await sqlite.execute({\n sql: \"INSERT INTO mb_errors (id, user_id, build, kind, message, stack, ua, created) VALUES (?, ?, ?, ?, ?, ?, ?, ?)\",\n args: [\n randHex(12),\n u ? (u as any).id : null,\n cut((b as any).build, 20),\n cut((b as any).kind, 40),\n cut((b as any).message, 500),\n cut((b as any).stack, 2000),\n cut(c.req.header(\"user-agent\"), 200),\n Date.now(),\n ],\n });\n return c.json({ ok: true });\n});\n\n// Owner-only. Same check as the waitlist stats.\napp.get(\"/api/errors\", async (c) => {\n const u = await userFromReq(c);\n if (!u || (u as any).username !== \"rileys\") return c.json({ error: \"unauthorized\" }, 401);\n const r = await sqlite.execute(\n `SELECT e.build, e.kind, e.message, e.stack, e.ua, e.created, u.username\n FROM mb_errors e LEFT JOIN mb_users u ON u.id = e.user_id\n ORDER BY e.created DESC LIMIT 100`,\n );\n return c.json({ errors: r.rows });\n});\n\n// ---- per-user budget ----\napp.get(\"/api/state\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const data = (await blob.getJSON(\"bud_\" + (u as any).id)) ?? {};\n return c.json(data);\n});\napp.post(\"/api/state\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const body = await c.req.json();\n // Encrypted state is {enc:1, iv, ct} and is opaque to us. Plaintext state (old accounts that\n // haven't upgraded yet) still has to look like a budget.\n const okShape = body && (body.enc ? (body.iv && body.ct) : body.accounts);\n if (!okShape) return c.json({ error: \"bad state\" }, 400);\n\n const uid = (u as any).id;\n let prev: any = null;\n try { prev = await blob.getJSON(\"bud_\" + uid); } catch (_) {}\n\n // ---- shrink guard ----\n // A client that failed to load someone's data and booted blank will happily save that blank\n // state over everything. It happened. The server can't read encrypted state, but it CAN see\n // that 33KB just became 2KB — so refuse, unless the client can vouch that it actually LOADED\n // the data first. A blank client cannot honestly set that flag.\n if (prev) {\n const before = JSON.stringify(prev).length;\n const after = JSON.stringify(body).length;\n if (before > 5000 && after < before * 0.4 && body.loaded !== true) {\n console.log(`REFUSED a shrinking write for ${(u as any).username}: ${before} -> ${after} bytes, client never loaded`);\n return c.json({ error: \"shrink_guard\", before, after }, 409);\n }\n }\n\n // ---- version history ----\n // ONE previous version was not enough. A bug wrote junk over a live account TWICE in the same\n // second; the second write pushed the first bad version into the single history slot and\n // destroyed the only good copy. So keep a rolling history instead, and -- crucially -- only\n // record a version that is BIGGER than the junk, so a run of bad writes cannot flush the good\n // ones out.\n try {\n if (prev) {\n const prevSize = JSON.stringify(prev).length;\n const hist = ((await blob.getJSON(\"bud_hist_\" + uid)) ?? []) as any[];\n // don't record near-identical saves; we want distinct points in time, not every keystroke\n const last = hist[0];\n if (!last || Math.abs(last.size - prevSize) > 200 || Date.now() - last.saved > 3600000) {\n hist.unshift({ saved: Date.now(), size: prevSize, state: prev });\n }\n // keep the 5 most recent, PLUS the 3 largest ever seen. The largest are almost certainly\n // the real budget, and they survive any number of bad writes.\n const recent = hist.slice(0, 5);\n const biggest = hist.slice().sort((a, b) => b.size - a.size).slice(0, 3);\n const keep: any[] = [];\n for (const h of [...recent, ...biggest]) {\n if (!keep.some(k => k.saved === h.saved)) keep.push(h);\n }\n await blob.setJSON(\"bud_hist_\" + uid, keep);\n await blob.setJSON(\"bud_prev_\" + uid, { saved: Date.now(), state: prev });\n }\n } catch (_) { /* don't block the save over a failed backup */ }\n\n await blob.setJSON(\"bud_\" + uid, body);\n return c.json({ ok: true, updated: Date.now() });\n});\n\n// ---- notification hints ----\n// The daily cron can no longer read anyone's data — it's ciphertext. So the app itself works out\n// what is worth a nudge and leaves this behind: counts and dates, never amounts, names or balances.\n// This is deliberately the least the server can know while still being able to notify you at all.\napp.post(\"/api/hints\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const b = await c.req.json().catch(() => ({}));\n const num = (v: any) => (typeof v === \"number\" && isFinite(v) ? v : 0);\n // whitelist — anything the client tries to smuggle in here gets dropped on the floor\n const hint = {\n notify: {\n enabled: !!(b.notify && b.notify.enabled),\n updates: !(b.notify && b.notify.updates === false),\n inbox: !(b.notify && b.notify.inbox === false),\n bills: !(b.notify && b.notify.bills === false),\n shortfall: !(b.notify && b.notify.shortfall === false),\n refix: !(b.notify && b.notify.refix === false),\n },\n inbox: Math.max(0, Math.round(num(b.inbox))), // a count, e.g. 3\n billTs: num(b.billTs), // when the next bill lands\n billCount: Math.max(0, Math.round(num(b.billCount))),\n shortfallTs: num(b.shortfallTs), // when the forecast goes negative\n refixTs: num(b.refixTs), // when a fixed rate ends\n updated: Date.now(),\n };\n await blob.setJSON(\"hint_\" + (u as any).id, hint);\n return c.json({ ok: true });\n});\n\n// ---- per-user bank connection ----\napp.get(\"/api/bank/status\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const r = await sqlite.execute({ sql: \"SELECT user_id FROM mb_bank WHERE user_id = ?\", args: [(u as any).id] });\n return c.json({ connected: r.rows.length > 0 });\n});\nasync function planOf(userId: string) {\n const r = await sqlite.execute({ sql: \"SELECT plan FROM mb_users WHERE id = ?\", args: [userId] });\n return r.rows.length ? ((r.rows[0] as any).plan || \"free\") : \"free\";\n}\n\n// ---- the Pro waitlist ----\n// The only honest way to find out whether the bank feed is worth $200/month to run.\napp.post(\"/api/waitlist\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const b = await c.req.json().catch(() => ({}));\n const email = String(b.email || \"\").trim().slice(0, 200);\n if (email && !/^[^@\\s]+@[^@\\s]+\\.[^@\\s]+$/.test(email)) return c.json({ error: \"That email doesn't look right.\" }, 400);\n const wouldPay = [\"yes\", \"no\", \"maybe\"].includes(String(b.wouldPay)) ? String(b.wouldPay) : \"maybe\";\n const price = Math.max(0, Math.min(99, Number(b.price) || 0));\n await sqlite.execute({\n sql: \"INSERT OR REPLACE INTO mb_waitlist (user_id, username, email, would_pay, price, note, created) VALUES (?, ?, ?, ?, ?, ?, ?)\",\n args: [(u as any).id, (u as any).username, email, wouldPay, price, String(b.note || \"\").slice(0, 500), Date.now()],\n });\n return c.json({ ok: true });\n});\n\n// Owner-only. The number Riley actually needs before committing to $200/month.\napp.get(\"/api/waitlist/stats\", async (c) => {\n const u = await userFromReq(c);\n if (!u || (u as any).username !== \"rileys\") return c.json({ error: \"unauthorized\" }, 401);\n const rows = (await sqlite.execute(\"SELECT would_pay, price, email, username, created FROM mb_waitlist ORDER BY created DESC\")).rows as any[];\n const yes = rows.filter(r => r.would_pay === \"yes\");\n const maybe = rows.filter(r => r.would_pay === \"maybe\");\n const prices = rows.map(r => Number(r.price) || 0).filter(p => p > 0).sort((a, b) => a - b);\n return c.json({\n total: rows.length,\n yes: yes.length,\n maybe: maybe.length,\n no: rows.filter(r => r.would_pay === \"no\").length,\n medianPrice: prices.length ? prices[Math.floor(prices.length / 2)] : 0,\n // 60 people paying 5 dollars a month is roughly what covers Akahu's floor plus the per-user fee\n breakEvenAt5: 58,\n people: rows.slice(0, 100),\n });\n});\n\napp.post(\"/api/bank/connect\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n // Akahu bills per connected user, so this is the one thing that has to be paid for.\n if ((await planOf((u as any).id)) !== \"pro\") return c.json({ error: \"pro_only\" }, 402);\n const { userToken, appToken } = await c.req.json().catch(() => ({}));\n if (!userToken || !appToken) return c.json({ error: \"Both tokens are required.\" }, 400);\n // validate against Akahu\n const test = await fetch(\"https://api.akahu.io/v1/me\", { headers: { Authorization: `Bearer ${userToken}`, \"X-Akahu-Id\": appToken } });\n if (!test.ok) return c.json({ error: \"Those tokens didn't work with Akahu. Double-check them.\" }, 400);\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO mb_bank (user_id, akahu_user, akahu_app) VALUES (?, ?, ?)\", args: [(u as any).id, await encTok(userToken), await encTok(appToken)] });\n return c.json({ ok: true });\n});\napp.post(\"/api/bank/disconnect\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n await sqlite.execute({ sql: \"DELETE FROM mb_bank WHERE user_id = ?\", args: [(u as any).id] });\n return c.json({ ok: true });\n});\n\n// ---- pull transactions using THIS user's own bank connection ----\napp.get(\"/api/akahu\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n let U = \"\", A = \"\";\n const r = await sqlite.execute({ sql: \"SELECT akahu_user, akahu_app FROM mb_bank WHERE user_id = ?\", args: [(u as any).id] });\n if (r.rows.length) { U = await decTok((r.rows[0] as any).akahu_user); A = await decTok((r.rows[0] as any).akahu_app); }\n if (!U || !A) return c.json({ error: \"no_bank\" }, 400);\n const h = { Authorization: `Bearer ${U}`, \"X-Akahu-Id\": A };\n const names: Record = {};\n try {\n const ar = await fetch(\"https://api.akahu.io/v1/accounts\", { headers: h });\n if (ar.ok) { const aj = await ar.json(); (aj.items || []).forEach((a: any) => { names[a._id] = a.name || a.formatted_account || \"\"; }); }\n } catch (_) {}\n const days = Math.min(parseInt(c.req.query(\"days\") || \"35\") || 35, 365);\n const start = new Date(Date.now() - days * 86400000).toISOString();\n const items: any[] = []; let cursor: string | undefined; let guard = 0;\n try {\n do {\n const uu = new URL(\"https://api.akahu.io/v1/transactions\");\n uu.searchParams.set(\"start\", start);\n if (cursor) uu.searchParams.set(\"cursor\", cursor);\n const rr = await fetch(uu.toString(), { headers: h });\n if (!rr.ok) return c.json({ error: \"akahu_\" + rr.status }, 502);\n const j = await rr.json();\n (j.items || []).forEach((t: any) => items.push({\n id: t._id, date: t.date, amount: t.amount, description: t.description || \"\",\n merchant: (t.merchant && t.merchant.name) || \"\", category: (t.category && t.category.name) || \"\",\n account: names[t._account] || \"\", accountId: t._account || \"\",\n }));\n cursor = j.cursor && j.cursor.next ? j.cursor.next : undefined; guard++;\n } while (cursor && guard < 25);\n } catch (_) { return c.json({ error: \"akahu_fetch\" }, 502); }\n // Pending (not-yet-settled) transactions live on a SEPARATE endpoint and are NOT returned by\n // /v1/transactions. Banks can hold transfers as pending for days. Pull them too, flagged.\n // Note: Akahu pending items have NO _id, so we derive a stable one from their contents —\n // it must be identical across refreshes or the inbox would add the same item over and over.\n let pendingOk = false;\n try {\n const pr = await fetch(\"https://api.akahu.io/v1/transactions/pending\", { headers: h });\n if (pr.ok) {\n const pj = await pr.json();\n pendingOk = true;\n (pj.items || []).forEach((t: any) => items.push({\n id: pendId(t),\n date: t.date,\n amount: t.amount,\n description: t.description || \"\",\n merchant: (t.merchant && t.merchant.name) || \"\",\n category: (t.category && t.category.name) || \"\",\n account: names[t._account] || \"\",\n accountId: t._account || \"\",\n pending: true,\n }));\n }\n } catch (_) {}\n return c.json({ items, pendingOk });\n});\n\n// ---- real bank balances, for the \"do my numbers line up?\" check ----\n// NOTE: Akahu's balance.current ALREADY has pending transactions deducted, while the app only\n// knows about ones the user has filed. So we also return the pending total per account, and the\n// client compares against (current - pending the user hasn't filed yet).\napp.get(\"/api/bank/balances\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const r = await sqlite.execute({ sql: \"SELECT akahu_user, akahu_app FROM mb_bank WHERE user_id = ?\", args: [(u as any).id] });\n if (!r.rows.length) return c.json({ error: \"no_bank\" }, 400);\n const U = await decTok((r.rows[0] as any).akahu_user);\n const A = await decTok((r.rows[0] as any).akahu_app);\n const h = { Authorization: `Bearer ${U}`, \"X-Akahu-Id\": A };\n const accounts: any[] = [];\n try {\n const ar = await fetch(\"https://api.akahu.io/v1/accounts\", { headers: h });\n if (!ar.ok) return c.json({ error: \"akahu_\" + ar.status }, 502);\n const aj = await ar.json();\n (aj.items || []).forEach((a: any) => accounts.push({\n id: a._id,\n name: a.name || \"\",\n formatted: a.formatted_account || \"\",\n type: a.type || \"\",\n balance: (a.balance && typeof a.balance.current === \"number\") ? a.balance.current : null,\n }));\n } catch (_) { return c.json({ error: \"akahu_fetch\" }, 502); }\n const pending: Record = {};\n let pendingOk = false;\n try {\n const pr = await fetch(\"https://api.akahu.io/v1/transactions/pending\", { headers: h });\n if (pr.ok) {\n const pj = await pr.json();\n pendingOk = true;\n (pj.items || []).forEach((t: any) => {\n const k = t._account || \"\";\n pending[k] = Math.round(((pending[k] || 0) + (t.amount || 0)) * 100) / 100;\n // id must match the one /api/akahu hands the inbox, so the client can tell filed from unfiled\n });\n }\n } catch (_) {}\n return c.json({ accounts, pending, pendingOk });\n});\n\n// ---- trigger an on-demand bank refresh at Akahu ----\napp.post(\"/api/akahu/refresh\", async (c: any) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const r = await sqlite.execute({ sql: \"SELECT akahu_user, akahu_app FROM mb_bank WHERE user_id = ?\", args: [(u as any).id] });\n if (!r.rows.length) return c.json({ error: \"no_bank\" }, 400);\n const U = await decTok((r.rows[0] as any).akahu_user);\n const A = await decTok((r.rows[0] as any).akahu_app);\n try {\n const rr = await fetch(\"https://api.akahu.io/v1/refresh\", { method: \"POST\", headers: { Authorization: `Bearer ${U}`, \"X-Akahu-Id\": A } });\n if (!rr.ok) return c.json({ error: \"akahu_\" + rr.status }, 502);\n } catch (_) { return c.json({ error: \"akahu_fetch\" }, 502); }\n return c.json({ ok: true });\n});\n\n// ---- account management (change username / password / recovery code) ----\nasync function checkPw(userId: string, pw: string) {\n const r = await sqlite.execute({ sql: \"SELECT pass_hash, salt FROM mb_users WHERE id = ?\", args: [userId] });\n if (!r.rows.length) return false;\n const row = r.rows[0] as any;\n return (await hashPw(String(pw || \"\"), row.salt)) === row.pass_hash;\n}\napp.post(\"/api/account/username\", async (c) => {\n const u = await userFromReq(c); if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const { password, newUsername } = await c.req.json().catch(() => ({}));\n if (!(await checkPw((u as any).id, password))) return c.json({ error: \"Current password is incorrect.\" }, 403);\n const uname = String(newUsername || \"\").trim().toLowerCase();\n if (!/^[a-z0-9_]{3,20}$/.test(uname)) return c.json({ error: \"Username must be 3-20 letters, numbers or underscore.\" }, 400);\n const exists = await sqlite.execute({ sql: \"SELECT id FROM mb_users WHERE username = ? AND id != ?\", args: [uname, (u as any).id] });\n if (exists.rows.length) return c.json({ error: \"That username is taken.\" }, 409);\n await sqlite.execute({ sql: \"UPDATE mb_users SET username = ? WHERE id = ?\", args: [uname, (u as any).id] });\n return c.json({ ok: true, username: uname });\n});\napp.post(\"/api/account/password\", async (c) => {\n const u = await userFromReq(c); if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const uid = (u as any).id;\n // a stolen session shouldn't get unlimited guesses at the current password\n const key = \"pw:\" + uid;\n const wait = await throttle(key, LOGIN_LIMIT, LOGIN_WINDOW);\n if (wait) return tooMany(c, wait);\n const b = await c.req.json().catch(() => ({}));\n const vr = await sqlite.execute({ sql: \"SELECT auth_v FROM mb_users WHERE id = ?\", args: [uid] });\n const v = Number((vr.rows[0] as any)?.auth_v) || 1;\n\n // v2: the browser proves itself with the derived auth key, and hands back the data key re-locked\n // with a key made from the NEW password. We never learn either password.\n const proof = v === 2 ? String(b.authKeyCur || \"\") : String(b.currentPassword || \"\");\n if (!(await checkPw(uid, proof))) {\n await throttleFail(key, LOGIN_WINDOW);\n return c.json({ error: \"Current password is incorrect.\" }, 403);\n }\n await throttleClear(key);\n\n let ph: string, salt: string;\n if (v === 2) {\n if (!b.authKeyNew || !b.dkPw) return c.json({ error: \"bad_request\" }, 400);\n salt = randHex(16);\n ph = await hashPw(String(b.authKeyNew), salt);\n await sqlite.execute({ sql: \"UPDATE mb_users SET pass_hash = ?, salt = ?, dk_pw = ? WHERE id = ?\", args: [ph, salt, String(b.dkPw), uid] });\n } else {\n const pwErr = pwProblem(String(b.newPassword || \"\"), (u as any).username);\n if (pwErr) return c.json({ error: pwErr }, 400);\n salt = randHex(16);\n ph = await hashPw(String(b.newPassword), salt);\n await sqlite.execute({ sql: \"UPDATE mb_users SET pass_hash = ?, salt = ? WHERE id = ?\", args: [ph, salt, uid] });\n }\n // changing your password kicks every other device off — that's the point of changing it\n const cur = (c.req.header(\"authorization\") || \"\").replace(/^Bearer\\s+/i, \"\") || c.req.header(\"x-session\") || \"\";\n await sqlite.execute({ sql: \"DELETE FROM mb_sessions WHERE user_id = ? AND token != ?\", args: [uid, cur] });\n return c.json({ ok: true });\n});\napp.post(\"/api/account/recovery\", async (c) => {\n const u = await userFromReq(c); if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const uid = (u as any).id;\n const key = \"pw:\" + uid;\n const wait = await throttle(key, LOGIN_LIMIT, LOGIN_WINDOW);\n if (wait) return tooMany(c, wait);\n const b = await c.req.json().catch(() => ({}));\n const vr = await sqlite.execute({ sql: \"SELECT auth_v FROM mb_users WHERE id = ?\", args: [uid] });\n const v = Number((vr.rows[0] as any)?.auth_v) || 1;\n const proof = v === 2 ? String(b.authKey || \"\") : String(b.password || \"\");\n if (!(await checkPw(uid, proof))) {\n await throttleFail(key, LOGIN_WINDOW);\n return c.json({ error: \"Current password is incorrect.\" }, 403);\n }\n await throttleClear(key);\n\n if (v === 2) {\n // The browser made the code, wrapped the data key with it, and is only telling us the hash.\n // We could not reconstruct the code from this even if we wanted to.\n if (!b.recoveryLookup || !b.dkRc || !b.rcSalt) return c.json({ error: \"bad_request\" }, 400);\n await sqlite.execute({\n sql: \"UPDATE mb_users SET recovery_lookup = ?, dk_rc = ?, rc_salt = ? WHERE id = ?\",\n args: [String(b.recoveryLookup), String(b.dkRc), String(b.rcSalt), uid],\n });\n return c.json({ ok: true });\n }\n const recoveryCode = makeRecoveryCode();\n await sqlite.execute({ sql: \"UPDATE mb_users SET recovery_lookup = ? WHERE id = ?\", args: [await sha256hex(normCode(recoveryCode)), uid] });\n return c.json({ ok: true, recoveryCode });\n});\n\n// ---- account recovery (public, no login) ----\n// The browser sends the HASH of the recovery code, never the code. On an encrypted account we hand\n// back the locked data key and the salt, so the browser can unlock it on its own. The code itself\n// never crosses the wire — if it did, we could unlock the account, which is the whole thing we are\n// trying to make impossible.\napp.post(\"/api/recover/username\", async (c) => {\n const key = \"rec:\" + clientIp(c);\n const wait = await throttle(key, RECOVER_LIMIT, RECOVER_WINDOW);\n if (wait) return tooMany(c, wait);\n const b = await c.req.json().catch(() => ({}));\n const look = b.lookup ? String(b.lookup) : (normCode(b.code) ? await sha256hex(normCode(b.code)) : \"\");\n if (!look) return c.json({ error: \"Enter your recovery code.\" }, 400);\n const r = await sqlite.execute({\n sql: \"SELECT username, auth_v, kdf_salt, rc_salt, dk_rc FROM mb_users WHERE recovery_lookup = ?\",\n args: [look],\n });\n if (!r.rows.length) {\n await throttleFail(key, RECOVER_WINDOW);\n return c.json({ error: \"No account matches that recovery code.\" }, 404);\n }\n const row = r.rows[0] as any;\n return c.json({\n ok: true,\n username: row.username,\n v: Number(row.auth_v) || 1,\n kdfSalt: row.kdf_salt || \"\",\n rcSalt: row.rc_salt || \"\",\n dkRc: row.dk_rc || \"\",\n });\n});\napp.post(\"/api/recover/reset\", async (c) => {\n const key = \"rec:\" + clientIp(c);\n const wait = await throttle(key, RECOVER_LIMIT, RECOVER_WINDOW);\n if (wait) return tooMany(c, wait);\n const b = await c.req.json().catch(() => ({}));\n const uname = String(b.username || \"\").trim().toLowerCase();\n const look = b.lookup ? String(b.lookup) : (normCode(b.code) ? await sha256hex(normCode(b.code)) : \"\");\n if (!look) return c.json({ error: \"Enter your recovery code.\" }, 400);\n const r = await sqlite.execute({ sql: \"SELECT id, recovery_lookup, auth_v FROM mb_users WHERE username = ?\", args: [uname] });\n const row = r.rows[0] as any;\n if (!row || !row.recovery_lookup || row.recovery_lookup !== look) {\n await throttleFail(key, RECOVER_WINDOW);\n await noteLogin(c, { userId: row ? row.id : null, username: uname, ok: false, kind: \"recovery\" });\n return c.json({ error: \"Username and recovery code don't match.\" }, 403);\n }\n await throttleClear(key);\n // Someone just reset the password on this account using the recovery code. If that was not the\n // owner, it is the single most important line their sign-in list will ever show them.\n await noteLogin(c, { userId: row.id, username: uname, ok: true, kind: \"recovery\" });\n const v = Number(row.auth_v) || 1;\n\n if (v === 2) {\n // The browser already unlocked the data key with the recovery code and re-locked it with the\n // new password. It also minted a brand new recovery code (the old one is spent).\n const { authKey, kdfSalt, rcSalt, dkPw, dkRc, recoveryLookup } = b;\n if (!authKey || !kdfSalt || !rcSalt || !dkPw || !dkRc || !recoveryLookup) return c.json({ error: \"bad_request\" }, 400);\n const salt = randHex(16);\n const ph = await hashPw(String(authKey), salt);\n await sqlite.execute({\n sql: \"UPDATE mb_users SET pass_hash = ?, salt = ?, kdf_salt = ?, rc_salt = ?, dk_pw = ?, dk_rc = ?, recovery_lookup = ? WHERE id = ?\",\n args: [ph, salt, String(kdfSalt), String(rcSalt), String(dkPw), String(dkRc), String(recoveryLookup), row.id],\n });\n await sqlite.execute({ sql: \"DELETE FROM mb_sessions WHERE user_id = ?\", args: [row.id] });\n return c.json({ ok: true });\n }\n\n const pwErr = pwProblem(String(b.newPassword || \"\"), uname);\n if (pwErr) return c.json({ error: pwErr }, 400);\n const salt = randHex(16); const ph = await hashPw(String(b.newPassword), salt);\n const recoveryCode = makeRecoveryCode();\n await sqlite.execute({ sql: \"UPDATE mb_users SET pass_hash = ?, salt = ?, recovery_lookup = ? WHERE id = ?\", args: [ph, salt, await sha256hex(normCode(recoveryCode)), row.id] });\n await sqlite.execute({ sql: \"DELETE FROM mb_sessions WHERE user_id = ?\", args: [row.id] });\n return c.json({ ok: true, recoveryCode });\n});\n\n// ---- push notifications ----\napp.get(\"/api/push/key\", (c) => c.json({ key: Deno.env.get(\"VAPID_PUBLIC_KEY\") || \"\" }));\n\napp.post(\"/api/push/subscribe\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const { endpoint, p256dh, auth } = await c.req.json().catch(() => ({}));\n if (!endpoint || !p256dh || !auth) return c.json({ error: \"bad_subscription\" }, 400);\n await sqlite.execute({\n sql: \"INSERT OR REPLACE INTO mb_push (endpoint, user_id, p256dh, auth, created) VALUES (?, ?, ?, ?, ?)\",\n args: [endpoint, (u as any).id, p256dh, auth, Date.now()],\n });\n return c.json({ ok: true });\n});\n\napp.post(\"/api/push/unsubscribe\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const { endpoint } = await c.req.json().catch(() => ({}));\n if (endpoint) await sqlite.execute({ sql: \"DELETE FROM mb_push WHERE endpoint = ? AND user_id = ?\", args: [endpoint, (u as any).id] });\n else await sqlite.execute({ sql: \"DELETE FROM mb_push WHERE user_id = ?\", args: [(u as any).id] });\n return c.json({ ok: true });\n});\n\n// Is THIS device actually registered for push, right now, on the server?\n// The app used to trust a saved flag in the budget. That flag can be true while the registration\n// is long gone -- which is exactly what happens after a logout, since a push subscription belongs\n// to the browser, not the account. Ask the server instead of guessing.\napp.get(\"/api/push/status\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const endpoint = c.req.query(\"endpoint\") || \"\";\n const all = await sqlite.execute({ sql: \"SELECT endpoint FROM mb_push WHERE user_id = ?\", args: [(u as any).id] });\n const thisDevice = endpoint\n ? (all.rows as any[]).some(r => r.endpoint === endpoint)\n : false;\n return c.json({ devices: all.rows.length, thisDevice });\n});\n\n// ---- back up on demand ----\n// The nightly cron is the safety net. This is the button for when someone is about to do something\n// they are nervous about, and wants a known-good point to come back to.\napp.post(\"/api/backup/now\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const uid = (u as any).id;\n\n const key = \"backup:\" + uid;\n const wait = await throttle(key, 3, 300000); // three a minute is plenty; five-minute window\n if (wait) return tooMany(c, wait);\n await throttleFail(key, 300000);\n\n const state: any = await blob.getJSON(\"bud_\" + uid);\n if (!state) return c.json({ error: \"nothing to back up\" }, 400);\n const size = state.enc ? (state.ct || \"\").length : JSON.stringify(state).length;\n\n const stamp = new Date().toISOString().slice(0, 19).replace(/[:T]/g, \"\");\n const bkey = \"bak_\" + uid + \"_manual_\" + stamp;\n await blob.setJSON(bkey, { saved: Date.now(), username: (u as any).username, size, state, manual: true });\n\n // a backup you have not read back is not a backup\n const check: any = await blob.getJSON(bkey);\n const ok = !!check && (check.state.enc ? (check.state.ct || \"\").length : JSON.stringify(check.state).length) === size;\n if (!ok) return c.json({ error: \"the backup did not read back correctly\" }, 500);\n\n // keep the high-water mark up to date, so this can never be lost\n const best: any = await blob.getJSON(\"bak_\" + uid + \"_best\");\n if (!best || size >= best.size) {\n await blob.setJSON(\"bak_\" + uid + \"_best\", { saved: Date.now(), username: (u as any).username, size, state });\n }\n\n console.log(`manual backup for @${(u as any).username}: ${size} bytes`);\n return c.json({ ok: true, size, at: Date.now() });\n});\n\n// ---- delete my account ----\n//\n// The Privacy Act says people can demand their data be deleted, and it is the most basic thing a\n// stranger will ask for. Delete means delete: the account, the budget, the backups, the bank\n// tokens, the push registrations, the waitlist entry. Everything.\n//\n// EXPORT FIRST is enforced in the app, not here -- the server cannot produce a readable export,\n// because the data is encrypted with a key only the browser has. That is working as intended.\napp.post(\"/api/account/delete\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const uid = (u as any).id;\n const uname = (u as any).username;\n\n const key = \"pw:\" + uid;\n const wait = await throttle(key, LOGIN_LIMIT, LOGIN_WINDOW);\n if (wait) return tooMany(c, wait);\n\n const b = await c.req.json().catch(() => ({}));\n\n // They must prove it is them, AND type their own username. Deleting someone's money records by\n // a mis-tap is not something you get to undo.\n const vr = await sqlite.execute({ sql: \"SELECT auth_v FROM mb_users WHERE id = ?\", args: [uid] });\n const v = Number((vr.rows[0] as any)?.auth_v) || 1;\n const proof = v === 2 ? String(b.authKey || \"\") : String(b.password || \"\");\n if (!(await checkPw(uid, proof))) {\n await throttleFail(key, LOGIN_WINDOW);\n return c.json({ error: \"That password is not right.\" }, 403);\n }\n if (String(b.confirm || \"\").trim().toLowerCase() !== uname) {\n return c.json({ error: \"Type your username exactly to confirm.\" }, 400);\n }\n\n // every blob belonging to this person\n const keys = new Set([\n \"bud_\" + uid, \"bud_prev_\" + uid, \"bud_hist_\" + uid, \"hint_\" + uid, \"notif_\" + uid,\n ]);\n for (const prefix of [\"bak_\" + uid + \"_\"]) {\n try {\n for (const item of (await blob.list(prefix)) as any[]) keys.add(item.key);\n } catch (_) {}\n }\n let gone = 0;\n for (const k of keys) {\n try { await blob.delete(k); gone++; } catch (_) { /* already absent */ }\n }\n\n await sqlite.execute({ sql: \"DELETE FROM mb_push WHERE user_id = ?\", args: [uid] });\n await sqlite.execute({ sql: \"DELETE FROM mb_bank WHERE user_id = ?\", args: [uid] });\n // their email, crash reports and sign-in history go too. \"Delete\" has to mean it, or the word is\n // worthless. Note this removes the audit trail as well -- that is the right call: it is THEIR\n // record of THEIR logins, and keeping it after they leave would be keeping data on someone who\n // has asked to be forgotten.\n await sqlite.execute({ sql: \"DELETE FROM mb_errors WHERE user_id = ?\", args: [uid] });\n await sqlite.execute({ sql: \"DELETE FROM mb_logins WHERE user_id = ?\", args: [uid] });\n await sqlite.execute({ sql: \"DELETE FROM mb_waitlist WHERE user_id = ?\", args: [uid] });\n await sqlite.execute({ sql: \"DELETE FROM mb_sessions WHERE user_id = ?\", args: [uid] });\n await sqlite.execute({ sql: \"DELETE FROM mb_throttle WHERE k = ?\", args: [\"pw:\" + uid] });\n await sqlite.execute({ sql: \"DELETE FROM mb_throttle WHERE k = ?\", args: [\"backup:\" + uid] });\n await sqlite.execute({ sql: \"DELETE FROM mb_throttle WHERE k = ?\", args: [\"login:u:\" + uname] });\n await sqlite.execute({ sql: \"DELETE FROM mb_users WHERE id = ?\", args: [uid] });\n\n console.log(`account deleted: @${uname} (${gone} blobs removed)`);\n return c.json({ ok: true });\n});\n\n// lets someone prove to themselves that notifications actually work\napp.post(\"/api/push/test\", async (c) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const { pushToUser } = await import(\"./push.ts\");\n const n = await pushToUser((u as any).id, {\n title: \"Stash notifications are on\",\n body: \"This is what they look like. You can turn any of them off in Settings.\",\n url: \"/\",\n tag: \"test\",\n });\n return c.json({ ok: true, sent: n });\n});\n\n// ---- PWA assets (public) ----\nconst ICON_SVG = ``;\n// start_url is /app, not / -- \"/\" is now the marketing page, and nobody wants their home-screen\n// budget icon to open an advert. Scope stays \"/\" so the whole origin (including /privacy) is in\n// scope. Anyone with the OLD manifest installed still opens \"/\", which redirects them to /app.\nconst MANIFEST = JSON.stringify({ name: \"Stash — Pocket Budget\", short_name: \"Stash\", start_url: \"/app\", scope: \"/\", display: \"standalone\", orientation: \"portrait\", background_color: \"#f4f6f8\", theme_color: \"#0f766e\", icons: [{ src: \"/icon.svg\", sizes: \"any\", type: \"image/svg+xml\", purpose: \"any\" }, { src: \"/icon.svg\", sizes: \"any\", type: \"image/svg+xml\", purpose: \"maskable\" }] });\n// Still no caching (so everyone always gets the latest app), but now it handles push.\nconst SW_JS = `\nself.addEventListener('install', e => self.skipWaiting());\nself.addEventListener('activate', e => self.clients.claim());\nself.addEventListener('fetch', e => {});\n\nself.addEventListener('push', function(e){\n var d = {};\n try { d = e.data ? e.data.json() : {}; }\n catch (err) { d = { title: 'Stash', body: (e.data && e.data.text()) || '' }; }\n var title = d.title || 'Stash';\n var opts = {\n body: d.body || '',\n icon: '/icon.svg',\n badge: '/icon.svg',\n tag: d.tag || 'stash',\n renotify: false,\n // '/app', never '/'. Tapping a notification about a bill must open the budget, not the\n // marketing page. (Logged-in users would be bounced there anyway, but only after a flash of\n // the wrong page, which looks broken.)\n data: { url: d.url || '/app' }\n };\n e.waitUntil(self.registration.showNotification(title, opts));\n});\n\nself.addEventListener('notificationclick', function(e){\n e.notification.close();\n var url = (e.notification.data && e.notification.data.url) || '/app';\n e.waitUntil(\n clients.matchAll({ type: 'window', includeUncontrolled: true }).then(function(list){\n for (var i = 0; i < list.length; i++) {\n var c = list[i];\n if ('focus' in c) { if (c.navigate) { try { c.navigate(url); } catch (x) {} } return c.focus(); }\n }\n if (clients.openWindow) return clients.openWindow(url);\n })\n );\n});\n`;\napp.get(\"/icon.svg\", (c) => new Response(ICON_SVG, { headers: { \"content-type\": \"image/svg+xml\", \"cache-control\": \"public, max-age=86400\" } }));\napp.get(\"/manifest.webmanifest\", (c) => new Response(MANIFEST, { headers: { \"content-type\": \"application/manifest+json\" } }));\napp.get(\"/sw.js\", (c) => new Response(SW_JS, { headers: { \"content-type\": \"application/javascript\" } }));\n\n// Feedback / bug reports -> emailed to the val owner (admin)\napp.post(\"/api/feedback\", async (c: any) => {\n const u = await userFromReq(c);\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n const { message, images } = await c.req.json().catch(() => ({}));\n const msg = String(message || \"\").slice(0, 5000);\n if (!msg.trim()) return c.json({ error: \"empty\" }, 400);\n const uname = (u as any).username;\n const id = randHex(10);\n try { await sqlite.execute({ sql: \"INSERT INTO mb_feedback (id, username, message, created) VALUES (?, ?, ?, ?)\", args: [id, uname, msg, Date.now()] }); } catch (_) {}\n const atts = Array.isArray(images)\n ? images.slice(0, 5).map((im: any, i: number) => ({ filename: im.name || (\"image\" + (i + 1) + \".png\"), content: im.b64 || \"\", contentType: im.type || \"image/png\", encoding: \"base64\" })).filter((a: any) => a.content)\n : [];\n try {\n await email({ subject: `Money app feedback from @${uname}`, text: `From: @${uname}\\n\\n${msg}`, attachments: atts });\n } catch (e) {\n return c.json({ ok: true, emailed: false });\n }\n return c.json({ ok: true, emailed: true });\n});\n\n// the statement parsers live in their own files purely so they can be unit-tested outside a browser\napp.get(\"/csv.js\", async (c) =>\n new Response(await readFile(\"/csv.js\", import.meta.url), {\n headers: { \"content-type\": \"application/javascript\", \"cache-control\": \"no-store\" },\n }));\napp.get(\"/pdfstmt.js\", async (c) =>\n new Response(await readFile(\"/pdfstmt.js\", import.meta.url), {\n headers: { \"content-type\": \"application/javascript\", \"cache-control\": \"no-store\" },\n }));\n\n// Every build gets an id, stamped into the page it is served with. The running app can then ask\n// the server \"am I still the current build?\" and reload itself if it is not. Without this, a\n// stale copy in a home-screen PWA is invisible -- it just quietly misbehaves.\nlet BUILD = \"\";\nlet BUILD_HTML = \"\";\nasync function buildOf() {\n const html = await readFile(\"/index.html\", import.meta.url);\n if (html !== BUILD_HTML) {\n BUILD_HTML = html;\n const h = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(html));\n BUILD = [...new Uint8Array(h)].slice(0, 5).map(x => x.toString(16).padStart(2, \"0\")).join(\"\");\n }\n return { build: BUILD, html: BUILD_HTML };\n}\n\napp.get(\"/api/build\", async (c) => c.json({ build: (await buildOf()).build }));\n\n// Privacy policy and terms. Static, no auth, cacheable for a few minutes -- they must stay reachable\n// even when someone is logged out, because that is exactly when people go looking for them.\nconst legalHeaders = { \"content-type\": \"text/html; charset=utf-8\", \"cache-control\": \"public, max-age=300\" };\napp.get(\"/privacy\", (c) => new Response(privacyHtml(), { headers: legalHeaders }));\napp.get(\"/terms\", (c) => new Response(termsHtml(), { headers: legalHeaders }));\n\n// ---- the site, and the app, are now different things ----\n//\n// / the landing page. Static, no app JS. See site.ts.\n// /login the app, opened on the log-in form.\n// /signup the app, opened on the create-account form.\n// /demo the app, signed straight into the demo account.\n// /app the app. This is the PWA's start_url.\n//\n// Everything except \"/\" serves the SAME index.html; the difference is a route marker substituted\n// into the page, which a script near the bottom of index.html reads. One app, four doors.\n//\n// The trap this avoids: existing installs still point at \"/\", so the landing page checks for a\n// session token before it paints and redirects to /app. Their home-screen icon keeps working.\n\nasync function serveApp(route: string) {\n const { build, html } = await buildOf();\n const body = html\n .replace(/__BUILD_ID__/g, build)\n .replace(/__ROUTE__/g, route);\n return new Response(body, {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n // NEVER let a browser or a home-screen PWA hold on to an old copy of the app.\n \"cache-control\": \"no-store, no-cache, must-revalidate, max-age=0\",\n \"pragma\": \"no-cache\",\n \"expires\": \"0\",\n \"x-build\": build,\n },\n });\n}\n\napp.get(\"/\", (c) =>\n new Response(landingHtml(), {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n // short cache: it is a static page, but a stale pitch is still a bad look\n \"cache-control\": \"public, max-age=300\",\n },\n }));\n\napp.get(\"/app\", () => serveApp(\"app\"));\napp.get(\"/login\", () => serveApp(\"login\"));\napp.get(\"/signup\", () => serveApp(\"signup\"));\napp.get(\"/demo\", () => serveApp(\"demo\"));\n\nexport default app.fetch;\n",["D",1784025010929],{"_32":55,"_34":54,"_35":22,"_37":57,"_39":58,"_41":14,"_42":43,"_26":27},{"_32":55,"_34":54,"_35":22,"_37":56},"index.html","019f4a79-aa80-769e-a1a0-4aa08060a090","\n\n\n\n\n\n\n\n\n\n\n\n\nStash — Pocket Budget\n\n\n\n\n

Stash

Welcome back

\n Username\n \n Password\n \n

\n \n

New here? Create an account

Enter PIN

Quick unlock

\n \n

Use password instead

\n\n

Stash

Accounts

Inbox

Goals

Stats

\n\n

\n \n \n \n \n

\n\n

Stash

Welcome back

\n Username\n \n Password\n \n

\n \n

New here? Create an account

Enter PIN

Quick unlock

\n \n

Use password instead

\n\n

Stash

Accounts

Inbox

Goals

Stats

\n\n

\n \n \n \n \n

\n\n

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n",["D",1784025010929],"id","9a8f532d-d413-48dd-9c0f-576fd227edcf","money-budget",["D",1783644524287],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Pocket budgeting app — syncs across phone and laptop","imageUrl","9ce636d8-a261-43ee-aad5-aba0afcc9805","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019f497e-7eff-7029-9247-01cc1300f2ae","tursoName","9a8f532dd41348dd9c0f576fd227edcf","tursoHostname","9a8f532dd41348dd9c0f576fd227edcf-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789525245864],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_116":115,"_124":120},"org",{"_116":115,"_117":118,"_119":120,"_18":71,"_121":122,"_123":27},"branch",{"_13":103,"_34":104,"_59":43,"_105":60,"_106":107,"_108":109,"_110":66,"_111":60,"_112":79,"_113":61,"_114":115},"isOwned",391,"multiuser","projectId","forkedBranchId","1d7321a2-4f46-4733-b86a-498e1d666a4b","forkedBranchVersion",43,"forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","rileys1011","handle","displayName","Riley Smith","avatar","https://lh3.googleusercontent.com/a/ACg8ocKLn-WocVfdzaKwIdLHV1VQfr-Cu-Zr_dXM84NUtd0tHciAd52i=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_59":60,"_34":61,"_39":375,"_63":-5,"_64":27,"_65":66,"_67":66,"_68":69,"_70":-5,"_18":71,"_72":-5,"_73":27,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":81,"_82":83,"_84":376,"_86":-5,"_87":88,"_89":88,"_90":91,"_92":91,"_93":91,"_94":88,"_95":88,"_96":377,"_98":378,"_100":379,"_102":27},"tree",[302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319],"files",[302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319],"counts",{"_291":77,"_292":220,"_293":77,"_294":295,"_296":297},"contents",[156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173],"upstreamProject","upstreamBranch",{"_59":107,"_39":149,"_150":151,"_34":152,"_105":60,"_13":153,"_106":-5,"_108":-5,"_154":155,"_63":-5,"_102":27,"_65":66,"_114":115,"_78":79,"_113":61},"emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},["D",1783644524292],"updatedAt",["D",1784024173742],"main",70,"lockfileKey","1784024174095-esm.town_v_rileys1011_money-budget@70-main",{"_59":284,"_34":285,"_32":286,"_177":-5,"_42":43,"_41":287,"_179":144,"_39":288,"_13":77,"_35":22,"_37":289,"_26":27,"_182":-5,"_29":290},{"_59":277,"_34":278,"_32":279,"_177":-5,"_42":43,"_41":280,"_179":144,"_39":281,"_13":77,"_35":22,"_37":282,"_26":27,"_182":-5,"_29":283},{"_59":271,"_34":272,"_32":273,"_177":-5,"_42":43,"_41":198,"_179":144,"_39":274,"_13":77,"_35":36,"_37":275,"_26":27,"_182":-5,"_29":276},{"_59":265,"_34":266,"_32":267,"_177":-5,"_42":43,"_41":198,"_179":144,"_39":268,"_13":77,"_35":36,"_37":269,"_26":27,"_182":-5,"_29":270},{"_59":258,"_34":259,"_32":260,"_177":-5,"_42":43,"_41":261,"_179":144,"_39":262,"_13":77,"_35":36,"_37":263,"_26":27,"_182":-5,"_29":264},{"_59":251,"_34":252,"_32":253,"_177":-5,"_42":43,"_41":254,"_179":144,"_39":255,"_13":77,"_35":36,"_37":256,"_26":27,"_182":-5,"_29":257},{"_59":245,"_34":246,"_32":247,"_177":-5,"_42":43,"_41":212,"_179":144,"_39":248,"_13":77,"_35":22,"_37":249,"_26":27,"_182":-5,"_29":250},{"_59":239,"_34":240,"_32":241,"_177":-5,"_42":43,"_41":212,"_179":144,"_39":242,"_13":77,"_35":22,"_37":243,"_26":27,"_182":-5,"_29":244},{"_59":235,"_34":54,"_32":55,"_177":-5,"_42":43,"_41":14,"_179":27,"_39":236,"_13":237,"_35":22,"_37":57,"_26":27,"_182":-5,"_29":238},{"_59":228,"_34":229,"_32":230,"_177":-5,"_42":43,"_41":231,"_179":144,"_39":232,"_13":220,"_35":36,"_37":233,"_26":27,"_182":-5,"_29":234},{"_59":223,"_34":46,"_32":47,"_177":-5,"_42":43,"_41":14,"_179":27,"_39":224,"_13":225,"_35":48,"_37":50,"_26":27,"_182":226,"_29":227},{"_59":215,"_34":216,"_32":217,"_177":-5,"_42":43,"_41":218,"_179":144,"_39":219,"_13":220,"_35":36,"_37":221,"_26":27,"_182":-5,"_29":222},{"_59":208,"_34":209,"_32":210,"_177":-5,"_42":43,"_41":178,"_179":144,"_39":211,"_13":212,"_35":36,"_37":213,"_26":27,"_182":-5,"_29":214},{"_59":202,"_34":203,"_32":204,"_177":-5,"_42":43,"_41":198,"_179":144,"_39":205,"_13":77,"_35":36,"_37":206,"_26":27,"_182":-5,"_29":207},{"_59":195,"_34":196,"_32":197,"_177":-5,"_42":43,"_41":198,"_179":144,"_39":199,"_13":77,"_35":36,"_37":200,"_26":27,"_182":-5,"_29":201},{"_59":188,"_34":189,"_32":190,"_177":-5,"_42":43,"_41":191,"_179":144,"_39":192,"_13":77,"_35":36,"_37":193,"_26":27,"_182":-5,"_29":194},{"_59":184,"_34":30,"_32":33,"_177":-5,"_42":43,"_41":14,"_179":144,"_39":185,"_13":186,"_35":36,"_37":38,"_26":27,"_182":-5,"_29":187},{"_59":174,"_34":175,"_32":176,"_177":-5,"_42":43,"_41":178,"_179":144,"_39":180,"_13":77,"_35":36,"_37":181,"_26":27,"_182":-5,"_29":183},"7ed7b30c-d957-4283-a317-2cfc56056a69","site.ts","019f5fc8-c502-7259-ba87-ba8f9c7dc70d","parentId",318,"latest",["D",1784018421002],"/**\n * The public face of Stash: the page somebody sees before they have decided anything.\n *\n * It used to be a block of text jammed above the login form on the app's own screen. That is the\n * wrong shape for a first impression -- it made a stranger scroll past a sales pitch to reach a\n * password box, and it made the pitch itself cramped and shouty.\n *\n * Now the site and the app are separate things:\n *\n * / this page. Static, fast, no app JavaScript at all.\n * /login the app, opened on the log-in form.\n * /signup the app, opened on the create-account form.\n * /demo the app, signed into the demo account, one tap, no questions.\n * /app the app itself. The PWA's start_url.\n *\n * The one hazard: existing users have the PWA installed pointing at \"/\". If \"/\" simply became a\n * marketing page, their home-screen icon would open an advert instead of their budget. So this page\n * checks for a session token FIRST, before it paints anything, and sends them straight to /app.\n * That check is the small inline script at the top of -- do not move it below the fold.\n */\n\nconst CSS = `\n *{box-sizing:border-box;margin:0;padding:0}\n :root{\n --ink:#0b1220; --dim:#5b6675; --faint:#8b95a3;\n --line:#e4e8ee; --bg:#ffffff; --wash:#f6f8fa;\n --teal:#0f766e; --teal-dark:#0b5b55;\n }\n html{scroll-behavior:smooth}\n body{\n background:var(--bg); color:var(--ink);\n font:400 17px/1.6 -apple-system,BlinkMacSystemFont,\"Segoe UI\",Roboto,Helvetica,Arial,sans-serif;\n -webkit-font-smoothing:antialiased; text-rendering:optimizeLegibility;\n }\n a{color:inherit;text-decoration:none}\n .wrap{max-width:1080px;margin:0 auto;padding:0 28px}\n\n /* ---- nav ---- */\n nav{position:sticky;top:0;z-index:10;background:rgba(255,255,255,.86);\n backdrop-filter:saturate(180%) blur(14px);border-bottom:1px solid var(--line)}\n nav .wrap{display:flex;align-items:center;justify-content:space-between;height:66px}\n .logo{font-weight:800;font-size:19px;letter-spacing:-.4px}\n .logo span{color:var(--teal)}\n .navlinks{display:flex;align-items:center;gap:26px;font-size:14.5px;color:var(--dim)}\n .navlinks a:hover{color:var(--ink)}\n .btn{display:inline-block;border-radius:10px;padding:10px 18px;font-size:14.5px;font-weight:600;\n border:1px solid transparent;transition:.15s;cursor:pointer}\n .btn-solid{background:var(--teal);color:#fff}\n .btn-solid:hover{background:var(--teal-dark)}\n .btn-line{border-color:var(--line);color:var(--ink);background:#fff}\n .btn-line:hover{border-color:#c9d1da}\n\n /* ---- hero ---- */\n header{padding:120px 0 96px;text-align:center}\n h1{font-size:66px;line-height:1.02;letter-spacing:-2.4px;font-weight:800;max-width:15ch;margin:0 auto}\n h1 em{font-style:normal;color:var(--teal)}\n .sub{margin:26px auto 0;max-width:52ch;font-size:20px;line-height:1.55;color:var(--dim)}\n .cta{display:flex;gap:12px;justify-content:center;margin-top:38px;flex-wrap:wrap}\n .cta .btn{padding:14px 26px;font-size:16px;border-radius:12px}\n .trust{margin-top:22px;font-size:13.5px;color:var(--faint);letter-spacing:.2px}\n .trust b{color:var(--dim);font-weight:600}\n\n /* ---- the lying-bank demo ---- */\n .contrast{background:var(--wash);border-top:1px solid var(--line);border-bottom:1px solid var(--line);\n padding:88px 0}\n .cols{display:grid;grid-template-columns:1fr 1fr;gap:20px;max-width:820px;margin:0 auto}\n .pane{background:#fff;border:1px solid var(--line);border-radius:16px;padding:26px 28px}\n .pane .tag{font-size:12px;font-weight:700;letter-spacing:.9px;text-transform:uppercase;color:var(--faint)}\n .pane .big{font-size:40px;font-weight:800;letter-spacing:-1.2px;margin:10px 0 4px}\n .pane .note{font-size:14px;color:var(--dim)}\n .pane.bad .big{color:#b4263a}\n .pane.good .big{color:var(--teal)}\n .rows{margin-top:18px;border-top:1px solid var(--line);padding-top:14px}\n .row{display:flex;justify-content:space-between;font-size:14.5px;padding:5px 0;color:var(--dim)}\n .row b{color:var(--ink);font-weight:600}\n .verdict{text-align:center;margin-top:34px;font-size:17px;color:var(--dim)}\n .verdict b{color:var(--ink)}\n\n /* ---- features ---- */\n .feat{padding:96px 0}\n .feat h2{font-size:40px;letter-spacing:-1.2px;font-weight:800;text-align:center;margin-bottom:12px}\n .feat .lede{text-align:center;color:var(--dim);max-width:48ch;margin:0 auto 56px;font-size:18px}\n .grid{display:grid;grid-template-columns:repeat(3,1fr);gap:26px}\n .card{border:1px solid var(--line);border-radius:16px;padding:28px 26px}\n .card h3{font-size:18px;font-weight:700;letter-spacing:-.3px;margin-bottom:8px}\n .card p{font-size:15px;line-height:1.6;color:var(--dim)}\n .dot{width:34px;height:34px;border-radius:9px;background:var(--wash);display:flex;align-items:center;\n justify-content:center;margin-bottom:16px;font-size:17px}\n\n /* ---- privacy strip ---- */\n .privacy{background:var(--ink);color:#fff;padding:88px 0;text-align:center}\n .privacy h2{font-size:40px;letter-spacing:-1.2px;font-weight:800;max-width:18ch;margin:0 auto 18px}\n .privacy p{color:#9aa6b6;max-width:56ch;margin:0 auto;font-size:17px;line-height:1.65}\n .privacy .fine{margin-top:22px;font-size:14px;color:#6c7889}\n .privacy a{color:#fff;text-decoration:underline;text-underline-offset:3px}\n\n /* ---- pricing ---- */\n .price{padding:96px 0;text-align:center}\n .price h2{font-size:40px;letter-spacing:-1.2px;font-weight:800;margin-bottom:12px}\n .price .lede{color:var(--dim);max-width:50ch;margin:0 auto 44px;font-size:18px}\n .plans{display:grid;grid-template-columns:1fr 1fr;gap:22px;max-width:760px;margin:0 auto;text-align:left}\n .plan{border:1px solid var(--line);border-radius:16px;padding:30px 28px}\n .plan.now{border-color:var(--teal);box-shadow:0 0 0 1px var(--teal)}\n .plan .name{font-size:13px;font-weight:700;letter-spacing:.9px;text-transform:uppercase;color:var(--faint)}\n .plan .amt{font-size:38px;font-weight:800;letter-spacing:-1.2px;margin:8px 0 2px}\n .plan .when{font-size:14px;color:var(--dim);margin-bottom:18px}\n .plan ul{list-style:none;font-size:15px;color:var(--dim);line-height:1.9}\n .plan li:before{content:\"—\";color:var(--faint);margin-right:9px}\n\n /* ---- footer ---- */\n footer{border-top:1px solid var(--line);padding:44px 0;font-size:14px;color:var(--faint)}\n footer .wrap{display:flex;justify-content:space-between;flex-wrap:wrap;gap:14px}\n footer a{color:var(--dim)}\n footer a:hover{color:var(--ink)}\n\n @media (max-width:820px){\n .wrap{padding:0 20px}\n header{padding:78px 0 64px}\n h1{font-size:42px;letter-spacing:-1.4px;max-width:none}\n .sub{font-size:18px}\n .cols,.grid,.plans{grid-template-columns:1fr}\n .feat h2,.privacy h2,.price h2{font-size:31px;letter-spacing:-.8px}\n .navlinks a.hide-sm{display:none}\n .feat,.price,.privacy,.contrast{padding:64px 0}\n }\n`;\n\nexport function landingHtml(): string {\n return `\n\n\n\n\nStash — spend what's actually yours\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

Spend what's actually yours.

Your bank shows you one number. Rent is in that number. So is power, and the\n car rego you forgot about. Stash splits your pay into pockets, so the balance you see is a\n balance you can trust.

\n Start free\n Look around first →\n

No bank login. · No ads. · \n Encrypted on your device. · Made in New Zealand.

\n\n

Your banking app

$2,431.68

Available balance

Rent, due Thursday?

Power?

Car rego?

Actually spendable?

Stash

$186.40

Actually spendable

Rent, due Thursday$1,100.00

Power$140.00

Car rego$105.28

Savings — don't touch$900.00

Same account. Same money. One of these two numbers is a lie.

\n\n

How it works

Three things, and none of them require handing over your internet banking password.

◑

Pockets, not a lump sum

Rent, groceries, petrol, savings — each gets its own pocket. On payday, Stash shares your\n pay across all of them in a single tap, and the leftover is genuinely leftover.

↥

Drop in a bank statement

Export a PDF or CSV from your banking app. Stash reads it on your device and files each\n transaction against a pocket. It even reconciles against the totals your bank printed, and\n refuses to import if the maths doesn't agree.

↗

See where you're heading

Net worth, assets, debts, and a forecast that tells you if you're about to run out —\n before you run out, rather than after.

\n\n

Your money is nobody else's business.

Your budget is encrypted on your device with a key made from your password. The key never\n leaves your phone. The server stores scrambled text it cannot read — which means nobody who\n runs Stash can see your balances, your transactions or what you spend it on. Not the developer.\n Not anyone who steals the database.

We'd rather tell you the limit than oversell it: read\n exactly what we store, and what encryption can't protect you from.

\n\n

Free. All of it.

Everything above is the whole app. There is no upgrade to buy, and there may\n never be one.

Available now

Everything, forever

Unlimited pockets and accounts
PDF and CSV statement import
Payday, forecasting, net worth
End-to-end encryption
Export or delete your data any time

Not built yet

Automatic bank feed

Only if enough people want it

Transactions arrive on their own
No statement to import
Costs real money to run, so it would be paid
Register interest inside the app
Everything free today stays free

\n\n\n\n\n`;\n}\n","label",[175],"cab55d5d-7dfc-4add-b812-5a116db64af0",["D",1784025010929],7,[30],"01c346b2-77fa-4df4-bcf0-ff201d78e803","push.ts","99ce0c56-7e82-11f1-9d1f-1607ee4eb77e",217,["D",1783923481610],"// Web Push sender. Shared by the HTTP val (test push) and the cron (real notifications).\nimport * as webpush from \"jsr:@negrel/webpush\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst PRIV = JSON.parse(Deno.env.get(\"VAPID_PRIVATE_JWK\") || \"{}\");\n\n/** The library wants a JWK pair. We stored the private JWK, which already carries x and y. */\nfunction vapidJwks() {\n const { kty, crv, x, y, d } = PRIV;\n return {\n publicKey: { kty, crv, x, y, key_ops: [\"verify\"], ext: true },\n privateKey: { kty, crv, x, y, d, key_ops: [\"sign\"], ext: true },\n };\n}\n\nlet _server: any = null;\nasync function server() {\n if (_server) return _server;\n const keys = await webpush.importVapidKeys(vapidJwks() as any, { extractable: false });\n _server = await webpush.ApplicationServer.new({\n contactInformation: \"mailto:rileysmith1272@gmail.com\",\n vapidKeys: keys,\n });\n return _server;\n}\n\nexport type Sub = { endpoint: string; p256dh: string; auth: string };\n\n/** Send one notification. Returns true if delivered, false if the subscription is dead (and prunes it). */\nexport async function sendPush(sub: Sub, payload: Record): Promise {\n try {\n const app = await server();\n const subscriber = app.subscribe({\n endpoint: sub.endpoint,\n keys: { p256dh: sub.p256dh, auth: sub.auth },\n } as any);\n await subscriber.pushTextMessage(JSON.stringify(payload), {});\n return true;\n } catch (e: any) {\n const msg = String(e?.message || e);\n // 404/410 mean the browser threw the subscription away — stop trying forever\n if (msg.includes(\"404\") || msg.includes(\"410\") || msg.includes(\"Gone\") || msg.includes(\"NotFound\")) {\n try {\n await sqlite.execute({ sql: \"DELETE FROM mb_push WHERE endpoint = ?\", args: [sub.endpoint] });\n console.log(\"pruned dead subscription\");\n } catch (_) {}\n return false;\n }\n console.log(\"push failed:\", msg);\n return false;\n }\n}\n\n/** Every subscription belonging to a user (they may have several devices). */\nexport async function subsFor(userId: string): Promise {\n const r = await sqlite.execute({\n sql: \"SELECT endpoint, p256dh, auth FROM mb_push WHERE user_id = ?\",\n args: [userId],\n });\n return r.rows as unknown as Sub[];\n}\n\n/** Send to all of a user's devices. Returns how many got through. */\nexport async function pushToUser(userId: string, payload: Record): Promise {\n const subs = await subsFor(userId);\n let ok = 0;\n for (const s of subs) if (await sendPush(s, payload)) ok++;\n return ok;\n}\n",[189],"bb9d4d29-bd9e-4a4f-9133-f7b1592395f6","pdfstmt.js","02c1e4e4-7f23-11f1-a14e-1607ee4eb77e",240,["D",1783992377175],"/* Bank statement PDF import. Runs entirely in the browser -- the statement is never uploaded.\n\n A PDF has no columns, only text at positions. On an ANZ statement the Withdrawals and Deposits\n columns are told apart ONLY by where they sit horizontally, and that is exactly the kind of\n thing that fails silently and turns wages into a spend.\n\n So the columns are not used at all. Every row also prints the RUNNING BALANCE, so the sign comes\n from arithmetic: if the balance went 765.56 -> 665.56, that 100.00 was money out. Nothing to\n misread.\n\n The statement then marks its own homework: it prints its own totals. If the parse does not\n reproduce them to the cent, nothing is imported. A CSV carries no such check, which makes this\n the more trustworthy of the two importers. */\n(function(){\n var MON = ['Jan','Feb','Mar','Apr','May','Jun','Jul','Aug','Sep','Oct','Nov','Dec'];\n var NUM = '[\\\\d,]+\\\\.\\\\d{2}';\n var f = function(s){ return parseFloat(String(s).replace(/,/g, '')); };\n var squash = function(s){ return String(s).replace(/\\s+/g, '').toLowerCase(); };\n var r2 = function(v){ return Math.round((v + Number.EPSILON) * 100) / 100; };\n\n var ROW = new RegExp('^(\\\\d{1,2})\\\\s+(' + MON.join('|') + ')\\\\s+(.+?)\\\\s+(' + NUM + ')\\\\s+(' + NUM + ')\\\\s*$');\n var NUMS = new RegExp(NUM, 'g');\n var ONLY_NUMS = /^[\\s$()+\\-0-9.,]+$/;\n\n /* ---- pdf.js, loaded only when someone actually imports a PDF ---- */\n var pdfjsReady = null;\n function loadPdfJs(){\n if(pdfjsReady) return pdfjsReady;\n pdfjsReady = new Promise(function(resolve, reject){\n if(window.pdfjsLib){ resolve(window.pdfjsLib); return; }\n var s = document.createElement('script');\n s.src = 'https://cdnjs.cloudflare.com/ajax/libs/pdf.js/3.11.174/pdf.min.js';\n s.onload = function(){\n try{\n window.pdfjsLib.GlobalWorkerOptions.workerSrc =\n 'https://cdnjs.cloudflare.com/ajax/libs/pdf.js/3.11.174/pdf.worker.min.js';\n resolve(window.pdfjsLib);\n }catch(e){ reject(e); }\n };\n s.onerror = function(){ reject(new Error('Could not load the PDF reader.')); };\n document.head.appendChild(s);\n });\n return pdfjsReady;\n }\n\n /* Group positioned text back into lines.\n\n This needs a TOLERANCE, not exact matching. Cells in one visual row are often a fraction of a\n point apart vertically, and bucketing too tightly tears a row in half -- which is how the\n totals row got separated from its own numbers, leaving the statement with nothing to check\n itself against. 2.5pt is about a third of a line: loose enough to hold a row together, tight\n enough never to merge two. */\n var Y_TOL = 2.5;\n function linesFrom(items){\n var got = [];\n items.forEach(function(it){\n if(!it.str || !it.str.trim()) return;\n got.push({ y: it.transform[5], x: it.transform[4], s: it.str, w: it.width || 0 });\n });\n got.sort(function(a, b){ return b.y - a.y; }); // PDF y grows upwards\n\n var groups = [], cur = null;\n got.forEach(function(it){\n if(!cur || Math.abs(cur.y - it.y) > Y_TOL){\n cur = { y: it.y, parts: [it] };\n groups.push(cur);\n } else {\n cur.parts.push(it);\n }\n });\n\n return groups.map(function(g){\n var parts = g.parts.sort(function(a, b){ return a.x - b.x; });\n var out = '';\n for(var i = 0; i < parts.length; i++){\n if(i){\n var gap = parts[i].x - (parts[i-1].x + parts[i-1].w);\n if(gap > 1) out += ' ';\n }\n out += parts[i].s;\n }\n return out.replace(/\\s+/g, ' ').trim();\n }).filter(function(l){ return l; });\n }\n\n /* \"Statement period 24 May 2026 - 23 Jun 2026\". Rows only say \"24 May\", so the year comes from\n here. Statements can straddle new year, so the year rolls when the months wrap. */\n function periodOf(lines){\n for(var i = 0; i < lines.length; i++){\n if(squash(lines[i]).indexOf('statementperiod') < 0) continue;\n var m = lines[i].match(new RegExp('(\\\\d{1,2})\\\\s*(' + MON.join('|') + ')\\\\w*\\\\s*(\\\\d{4})\\\\s*-\\\\s*(\\\\d{1,2})\\\\s*(' + MON.join('|') + ')\\\\w*\\\\s*(\\\\d{4})'));\n if(m) return { startMon: MON.indexOf(m[2]), startYear: +m[3], endMon: MON.indexOf(m[5]), endYear: +m[6] };\n }\n return null;\n }\n\n /* Pull the figures belonging to a label. If the label's own line does not carry them (some\n layouts put the label and its amounts in separate cells), keep reading the lines below --\n but ONLY while they contain nothing except numbers, so a transaction row can never be\n mistaken for a total. */\n function figuresFor(lines, i){\n var out = (lines[i].match(NUMS) || []);\n for(var j = i + 1; j < lines.length && out.length < 3; j++){\n if(!ONLY_NUMS.test(lines[j])) break;\n out = out.concat(lines[j].match(NUMS) || []);\n }\n return out.map(f);\n }\n\n function parseLines(lines){\n var period = periodOf(lines);\n var sections = [], cur = null, problems = [];\n\n var yearFor = function(mi){\n if(!period) return new Date().getFullYear();\n if(period.startYear === period.endYear) return period.startYear;\n return mi >= period.startMon ? period.startYear : period.endYear;\n };\n\n lines.forEach(function(line, i){\n var sq = squash(line);\n\n if(sq.indexOf('openingbalance') >= 0){\n var n = figuresFor(lines, i);\n if(n.length){\n cur = { opening: n[n.length - 1], bal: n[n.length - 1], txns: [], totals: null, pageTotal: null };\n sections.push(cur);\n }\n return;\n }\n if(sq.indexOf('balancebroughtforward') >= 0){\n var b = figuresFor(lines, i);\n if(cur && b.length && Math.abs(b[b.length - 1] - cur.bal) > 0.005){\n problems.push('The balance carried over between pages does not line up (' +\n b[b.length - 1].toFixed(2) + ' on the page, ' + cur.bal.toFixed(2) + ' from the transactions).');\n }\n return;\n }\n if(sq.indexOf('totalsatendofperiod') >= 0){\n var t = figuresFor(lines, i);\n if(cur && t.length >= 3) cur.totals = { out: t[0], in: t[1], closing: t[2] };\n return;\n }\n if(sq.indexOf('totalsatendofpage') >= 0){\n // per-page subtotal. Not a transaction -- but its closing figure is a useful backstop if\n // the end-of-period totals turn out to be missing.\n var pt = figuresFor(lines, i);\n if(cur && pt.length >= 3) cur.pageTotal = { closing: pt[2] };\n return;\n }\n\n var m = ROW.exec(line);\n if(!m || !cur) return;\n\n var day = +m[1], mi = MON.indexOf(m[2]), desc = m[3].trim();\n var amt = f(m[4]), newBal = f(m[5]);\n var delta = r2(newBal - cur.bal);\n\n /* The printed amount must equal the balance movement. If it does not, the row has been\n misread -- say so rather than guess. */\n if(Math.abs(Math.abs(delta) - amt) > 0.005){\n problems.push('A row does not add up: \"' + line.slice(0, 60) + '\"');\n return;\n }\n\n cur.txns.push({\n date: new Date(yearFor(mi), mi, day, 12).toISOString(),\n amount: delta, // sign from the balance, never from the column\n description: clean(desc),\n raw: desc,\n merchant: '',\n category: '',\n });\n cur.bal = newBal;\n });\n\n /* --- the statement checks the parse --- */\n var checks = [];\n sections.forEach(function(s){\n var out = r2(-s.txns.filter(function(t){ return t.amount < 0; }).reduce(function(a, t){ return a + t.amount; }, 0));\n var inn = r2(s.txns.filter(function(t){ return t.amount > 0; }).reduce(function(a, t){ return a + t.amount; }, 0));\n\n if(s.totals){\n var okOut = Math.abs(out - s.totals.out) < 0.005;\n var okIn = Math.abs(inn - s.totals.in) < 0.005;\n var okBal = Math.abs(s.bal - s.totals.closing) < 0.005;\n checks.push({\n opening: s.opening, closing: s.bal, moneyOut: out, moneyIn: inn,\n saysOut: s.totals.out, saysIn: s.totals.in, saysClosing: s.totals.closing,\n basis: 'the totals printed on the statement',\n ok: okOut && okIn && okBal,\n });\n if(!okOut) problems.push('Money out came to ' + out.toFixed(2) + ' but the statement says ' + s.totals.out.toFixed(2) + '.');\n if(!okIn) problems.push('Money in came to ' + inn.toFixed(2) + ' but the statement says ' + s.totals.in.toFixed(2) + '.');\n if(!okBal) problems.push('The closing balance came to ' + s.bal.toFixed(2) + ' but the statement says ' + s.totals.closing.toFixed(2) + '.');\n return;\n }\n\n /* No end-of-period totals on this statement. The running balance is still a real check:\n opening plus every transaction must land exactly on the closing balance the bank printed. */\n if(s.pageTotal){\n var okClose = Math.abs(s.bal - s.pageTotal.closing) < 0.005;\n checks.push({\n opening: s.opening, closing: s.bal, moneyOut: out, moneyIn: inn,\n saysOut: out, saysIn: inn, saysClosing: s.pageTotal.closing,\n basis: 'the closing balance printed on the statement',\n ok: okClose,\n });\n if(!okClose) problems.push('The closing balance came to ' + s.bal.toFixed(2) + ' but the statement says ' + s.pageTotal.closing.toFixed(2) + '.');\n return;\n }\n\n problems.push('The statement totals could not be found, so the figures could not be checked.');\n });\n\n var txns = [];\n sections.forEach(function(s){ txns = txns.concat(s.txns); });\n\n return {\n txns: txns,\n checks: checks,\n problems: problems,\n lines: lines, // so the app can show exactly what was read, if it goes wrong\n /* the whole point: only true if the figures prove out against the bank's own numbers */\n verified: sections.length > 0 && problems.length === 0 && checks.length > 0 &&\n checks.every(function(c){ return c.ok; }),\n period: period,\n };\n }\n\n /* \"DD 01-0495-0390687-20 Clothes\" -> \"Clothes\". Drops the two-letter transaction code and any\n NZ account numbers, which are noise once the transaction is in a pocket. */\n var CODES = ['AP','AT','BP','CQ','DC','DD','ED','EP','FX','IA','IF','IP','VT'];\n function clean(d){\n var s = String(d).trim();\n var first = s.split(/\\s+/)[0];\n if(CODES.indexOf(first) >= 0) s = s.slice(first.length).trim();\n s = s.replace(/\\b\\d{2}-\\d{4}-\\d{7}-\\d{2}\\b/g, '').trim();\n return s.replace(/\\s+/g, ' ').trim() || String(d).trim();\n }\n\n window.PDFSTMT = {\n parseLines: parseLines, // exported so it can be unit-tested without a browser\n linesFrom: linesFrom,\n clean: clean,\n parse: async function(arrayBuffer){\n var pdfjs = await loadPdfJs();\n var doc = await pdfjs.getDocument({ data: arrayBuffer }).promise;\n var lines = [];\n for(var p = 1; p <= doc.numPages; p++){\n var page = await doc.getPage(p);\n var content = await page.getTextContent();\n lines = lines.concat(linesFrom(content.items));\n }\n return parseLines(lines);\n },\n };\n})();\n",[196],"862b9ece-66c5-46ff-8afe-07f19d932c47","pdf_test.ts","02c1b85c-7f23-11f1-a14e-1607ee4eb77e",["D",1783992377175],"// PDF statement parser. Synthetic ANZ-shaped statements -- same layout, invented numbers.\n// (The real statement was verified separately and never stored here.)\n(globalThis as any).window = globalThis;\n(globalThis as any).document = { createElement: () => ({}), head: { appendChild: () => {} } };\nawait import(\"./pdfstmt.js\");\nconst P = (globalThis as any).PDFSTMT;\n\nlet pass = 0, fail = 0;\nconst ok = (n: string, c: boolean, e = \"\") => {\n if (c) { pass++; console.log(\" PASS \" + n); }\n else { fail++; console.log(\" FAIL \" + n + (e ? \" -> \" + e : \"\")); }\n};\n\n// Note the deliberate quirks of a real ANZ export: words glued together with no spaces\n// (\"Openingbalance\"), the per-page subtotal line, the carry-forward line, and amounts whose\n// column can only be told apart by the running balance.\nconst good = [\n \"Statement of Accounts\",\n \"Online Account\",\n \"Statementperiod 24 May 2026 - 23 Jun 2026\",\n \"Date Transactiontypeanddetails Withdrawals Deposits Balance\",\n \"24 May Openingbalance 1,000.00\",\n \"25 May DD 01-0495-0390687-20 Groceries 150.00 850.00\",\n \"26 May DC Some Employer wages Wages 500.00 1,350.00\",\n \"29 May GROSS CREDIT INTEREST PAID 0.35 1,350.35\",\n \"29 May WITHHOLDING TAX PAID 0.04 1,350.31\",\n \"Totalsatendofpage $150.04 $500.35 $1,350.31\",\n \"Page 1 of 2\",\n \"Online Account- continued\",\n \"Date Transactiontypeanddetails Withdrawals Deposits Balance\",\n \"Balancebroughtforwardfrompreviouspage 1,350.31\",\n \"02 Jun DD AA INSURANCE PRE AMC036774334 158.38 1,191.93\",\n \"23 Jun DC Some Employer wages Wages 308.07 1,500.00\",\n \"Totalsatendofpage $158.38 $308.07 $1,500.00\",\n \"Totalsatendofperiod $308.42 $808.42 $1,500.00\",\n];\n\nconsole.log(\"=== a well-formed statement ===\");\n{\n const r = P.parseLines(good);\n ok(\"found the period\", !!r.period && r.period.startYear === 2026);\n // groceries, wages, interest, tax (page 1), AA insurance, wages (page 2)\n ok(\"parsed 6 transactions\", r.txns.length === 6, \"got \" + r.txns.length);\n ok(\"no problems\", r.problems.length === 0, JSON.stringify(r.problems));\n ok(\">>> VERIFIED against the statement's own totals\", r.verified === true);\n\n const c = r.checks[0];\n ok(\"opening 1000.00\", c.opening === 1000);\n ok(\"closing 1500.00\", c.closing === 1500);\n ok(\"money out matches (308.42)\", Math.abs(c.moneyOut - 308.42) < 0.005, \"\" + c.moneyOut);\n ok(\"money in matches (808.42)\", Math.abs(c.moneyIn - 808.42) < 0.005, \"\" + c.moneyIn);\n\n const t = r.txns;\n ok(\"groceries booked as money OUT\", t[0].amount === -150);\n ok(\"wages booked as money IN\", t[1].amount === 500);\n ok(\"interest is a credit\", t[2].amount === 0.35);\n ok(\"withholding tax is a debit\", t[3].amount === -0.04);\n ok(\"first row on page 2, after the carry-forward\", t[4].amount === -158.38, \"\" + t[4].amount);\n ok(\"last row on page 2\", t[5].amount === 308.07, \"\" + t[5].amount);\n ok(\"dates get the year from the period\", t[0].date.slice(0, 10) === \"2026-05-25\", t[0].date);\n ok(\"descriptions are cleaned up\", t[0].description === \"Groceries\", t[0].description);\n ok(\"the per-page subtotal is not treated as a transaction\", !t.some((x: any) => Math.abs(x.amount) === 150.04));\n}\n\nconsole.log(\"\\n=== the sign comes from the BALANCE, not the column ===\");\n{\n // Same amount, same day. Only the balance movement says which way the money went.\n const tricky = [\n \"Statementperiod 01 Jul 2026 - 31 Jul 2026\",\n \"01 Jul Openingbalance 500.00\",\n \"02 Jul DD Mystery 100.00 400.00\", // out\n \"03 Jul DC Mystery 100.00 500.00\", // in -- identical amount and text\n \"Totalsatendofperiod $100.00 $100.00 $500.00\",\n ];\n const r = P.parseLines(tricky);\n ok(\"two identical-looking rows, opposite signs\", r.txns[0].amount === -100 && r.txns[1].amount === 100);\n ok(\"still verifies\", r.verified === true);\n}\n\nconsole.log(\"\\n=== a statement that straddles new year ===\");\n{\n const ny = [\n \"Statementperiod 24 Dec 2025 - 23 Jan 2026\",\n \"24 Dec Openingbalance 100.00\",\n \"27 Dec DD Christmas 50.00 50.00\",\n \"05 Jan DC Refund 25.00 75.00\",\n \"Totalsatendofperiod $50.00 $25.00 $75.00\",\n ];\n const r = P.parseLines(ny);\n ok(\"December is 2025\", r.txns[0].date.slice(0, 10) === \"2025-12-27\", r.txns[0].date);\n ok(\"January is 2026\", r.txns[1].date.slice(0, 10) === \"2026-01-05\", r.txns[1].date);\n ok(\"verifies\", r.verified === true);\n}\n\nconsole.log(\"\\n=== IT MUST REFUSE when the numbers do not add up ===\");\n{\n // A row has been misread: the amount doesn't match the balance movement.\n const broken = good.slice();\n broken[5] = \"25 May DD 01-0495-0390687-20 Groceries 150.00 860.00\"; // balance is wrong\n const r = P.parseLines(broken);\n ok(\"spots the bad row\", r.problems.length > 0);\n ok(\">>> REFUSES to verify\", r.verified === false);\n console.log(\" it said: \" + r.problems[0]);\n}\n{\n // Everything parses, but our totals don't reproduce the bank's. Must not import.\n const cooked = good.slice();\n cooked[cooked.length - 1] = \"Totalsatendofperiod $999.99 $808.42 $1,500.00\";\n const r = P.parseLines(cooked);\n ok(\"catches a totals mismatch\", r.verified === false);\n console.log(\" it said: \" + r.problems[0]);\n}\n{\n // No end-of-period totals, but the page subtotals still give a closing balance to check against.\n // Opening + every transaction must land exactly on it, which is a real check -- so this SHOULD\n // still verify. Losing that fallback is what broke the real ANZ import.\n const noPeriodTotals = good.filter(l => !l.startsWith(\"Totalsatendofperiod\"));\n const r = P.parseLines(noPeriodTotals);\n ok(\"falls back to the closing balance and still verifies\", r.verified === true, JSON.stringify(r.problems));\n ok(\" and says what it checked against\", r.checks[0].basis.includes(\"closing balance\"));\n}\n{\n // Nothing at all to check against: no totals, no subtotals. Must refuse.\n const nothing = good.filter(l => !/^Totalsatendof/.test(l));\n const r = P.parseLines(nothing);\n ok(\"refuses when there is nothing whatsoever to check against\", r.verified === false);\n console.log(\" it said: \" + r.problems[0]);\n}\n{\n // The fallback must still CATCH a bad parse, not just wave it through.\n const bent = good.filter(l => !l.startsWith(\"Totalsatendofperiod\")).slice();\n bent[bent.length - 1] = \"Totalsatendofpage $158.38 $308.07 $9,999.99\";\n const r = P.parseLines(bent);\n ok(\"the fallback still refuses a wrong closing balance\", r.verified === false);\n}\n{\n const r = P.parseLines([\"this is not a bank statement\", \"just some words\"]);\n ok(\"junk in, nothing out, no crash\", r.verified === false && r.txns.length === 0);\n}\n\nconsole.log(\"\\n\" + pass + \" passed, \" + fail + \" failed\");\n",[203],"5f10e6a9-a147-4461-b2eb-92f6d26c2b22","notify.ts","42902232-7ea3-11f1-8a16-1607ee4eb77e",["D",1784018421002],1,"// Daily notification run. Decides what is worth interrupting someone for, and nothing else.\n//\n// This used to read each user's budget. It CAN'T any more -- everything is encrypted with a key\n// only their browser holds. So the app itself does the thinking and leaves behind a \"hint\": a\n// count and a few dates, and nothing else. That is why the wording below is vague. We genuinely\n// do not know what the bill is, who it's to, or how much it's for -- and that's the point.\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { pushToUser } from \"./push.ts\";\n\nconst DAY = 86400000;\nconst fmtDay = (ts: number) => new Date(ts).toLocaleDateString(\"en-NZ\", { day: \"numeric\", month: \"short\" });\n\n/** Don't send the same thing every single day. Remembers what we last told each user. */\nasync function seen(userId: string) {\n return ((await blob.getJSON(\"notif_\" + userId)) ?? {}) as Record;\n}\nasync function markSeen(userId: string, s: Record) {\n await blob.setJSON(\"notif_\" + userId, s);\n}\nfunction due(s: Record, key: string, everyDays: number) {\n const last = s[key] || 0;\n return Date.now() - last > everyDays * DAY;\n}\n\nexport default async function () {\n await run();\n}\n\nasync function run() {\n const users = await sqlite.execute(\n `SELECT DISTINCT u.id, u.username FROM mb_users u JOIN mb_push p ON p.user_id = u.id`,\n );\n console.log(`checking ${users.rows.length} user(s) with notifications on`);\n\n for (const u of users.rows as any[]) {\n const h: any = (await blob.getJSON(\"hint_\" + u.id)) ?? null;\n if (!h) { console.log(`@${u.username}: no hints yet (they need to open the app once)`); continue; }\n const n = h.notify || {};\n if (!n.enabled) { console.log(`@${u.username}: notifications off`); continue; }\n\n // A stale hint means they haven't opened the app in a while. Dates in it may have passed, so\n // we don't trust anything older than a fortnight rather than nag about a bill from last month.\n if (Date.now() - (h.updated || 0) > 14 * DAY) {\n console.log(`@${u.username}: hints are stale, staying quiet`);\n continue;\n }\n\n const s = await seen(u.id);\n const sent: string[] = [];\n const now = Date.now();\n\n // --- transactions waiting to be sorted ---\n if (n.inbox !== false) {\n const c = Math.round(h.inbox || 0);\n if (c > 0 && due(s, \"inbox\", 1)) {\n await pushToUser(u.id, {\n title: c === 1 ? \"1 transaction to sort\" : `${c} transactions to sort`,\n body: \"Your bank sent through new activity.\",\n url: \"/app\", tag: \"inbox\", // \"/\" is the marketing page now\n });\n s.inbox = now; sent.push(\"inbox\");\n }\n }\n\n // --- a bill lands in the next couple of days ---\n // We know WHEN, not what or how much. So we don't pretend to.\n if (n.bills !== false) {\n const ts = h.billTs || 0;\n if (ts > now && ts <= now + 2 * DAY && due(s, \"bills\", 1)) {\n const more = Math.max(0, Math.round(h.billCount || 0) - 1);\n await pushToUser(u.id, {\n title: \"A bill is due \" + fmtDay(ts),\n body: more > 0 ? `Plus ${more} more around the same time. Open Stash for the details.` : \"Open Stash for the details.\",\n url: \"/app\", tag: \"bills\",\n });\n s.bills = now; sent.push(\"bills\");\n }\n }\n\n // --- the forecast says you run out of money ---\n if (n.shortfall !== false) {\n const ts = h.shortfallTs || 0;\n if (ts > now && due(s, \"shortfall\", 7)) {\n await pushToUser(u.id, {\n title: \"You are heading for empty\",\n body: `Your forecast runs out around ${fmtDay(ts)}.`,\n url: \"/app\", tag: \"shortfall\",\n });\n s.shortfall = now; sent.push(\"shortfall\");\n }\n }\n\n // --- a fixed mortgage rate is about to end ---\n if (n.refix !== false) {\n const ts = h.refixTs || 0;\n const days = ts ? Math.ceil((ts - now) / DAY) : 0;\n if (days > 0 && days <= 90 && due(s, \"refix\", 30)) {\n await pushToUser(u.id, {\n title: \"Your fixed rate is ending\",\n body: `It comes off in ${days} days. Worth shopping around.`,\n url: \"/app\", tag: \"refix\",\n });\n s.refix = now; sent.push(\"refix\");\n }\n }\n\n await markSeen(u.id, s);\n console.log(`@${u.username}: ${sent.length ? \"sent \" + sent.join(\", \") : \"nothing worth saying\"}`);\n }\n\n console.log(\"done\");\n}\n",[209],"5599a90c-1179-4e95-9fd8-4af9ea365ca0","make_demo.ts","9a204808-7eb0-11f1-9baa-1607ee4eb77e",345,["D",1784024163073],3,"// Creates (or rebuilds) the encrypted demo account. Uses the exact same key derivation as the\n// browser, so the account opens normally with just the username and password.\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { DEMO, SUMMARY } from \"./demo_data.ts\";\n\nconst USERNAME = \"demo\";\nconst PASSWORD = \"demo-stash-2026\";\nconst ITER = 250000;\n\nconst te = new TextEncoder(), td = new TextDecoder();\nconst hex = (b: ArrayBuffer) => [...new Uint8Array(b)].map(x => x.toString(16).padStart(2, \"0\")).join(\"\");\nconst rand = (n: number) => hex(crypto.getRandomValues(new Uint8Array(n)).buffer);\nconst fromHex = (h: string) => { const a = new Uint8Array(h.length / 2); for (let i = 0; i < a.length; i++) a[i] = parseInt(h.substr(i * 2, 2), 16); return a; };\nconst b64 = (b: ArrayBuffer) => btoa(String.fromCharCode(...new Uint8Array(b)));\nconst unb64 = (s: string) => Uint8Array.from(atob(s), c => c.charCodeAt(0));\nconst sha256hex = async (s: string) => hex(await crypto.subtle.digest(\"SHA-256\", te.encode(s)));\nconst normCode = (c: string) => String(c || \"\").toUpperCase().replace(/[^A-Z0-9]/g, \"\");\n\nasync function hashPw(pw: string, saltHex: string) {\n const k = await crypto.subtle.importKey(\"raw\", te.encode(pw), \"PBKDF2\", false, [\"deriveBits\"]);\n return hex(await crypto.subtle.deriveBits({ name: \"PBKDF2\", salt: fromHex(saltHex), iterations: 120000, hash: \"SHA-256\" }, k, 256));\n}\nasync function derive(secret: string, saltStr: string, usage: \"bits\" | \"key\"): Promise {\n const base = await crypto.subtle.importKey(\"raw\", te.encode(secret), \"PBKDF2\", false, [\"deriveBits\", \"deriveKey\"]);\n const salt = te.encode(saltStr);\n if (usage === \"bits\") return hex(await crypto.subtle.deriveBits({ name: \"PBKDF2\", salt, iterations: ITER, hash: \"SHA-256\" }, base, 256));\n return crypto.subtle.deriveKey({ name: \"PBKDF2\", salt, iterations: ITER, hash: \"SHA-256\" }, base, { name: \"AES-GCM\", length: 256 }, false, [\"encrypt\", \"decrypt\"]);\n}\nconst authKeyFrom = (pw: string, s: string) => derive(pw, s + \"|auth\", \"bits\") as Promise;\nconst encKeyFrom = (pw: string, s: string) => derive(pw, s + \"|enc\", \"key\") as Promise;\nconst rcKeyFrom = (c: string, s: string) => derive(c, s + \"|rc\", \"key\") as Promise;\nasync function seal(key: CryptoKey, txt: string) {\n const iv = crypto.getRandomValues(new Uint8Array(12));\n return { iv: b64(iv.buffer), ct: b64(await crypto.subtle.encrypt({ name: \"AES-GCM\", iv }, key, te.encode(txt))) };\n}\nasync function open(key: CryptoKey, box: any) {\n return td.decode(await crypto.subtle.decrypt({ name: \"AES-GCM\", iv: unb64(box.iv) }, key, unb64(box.ct)));\n}\nconst dkToKey = (dkHex: string) => crypto.subtle.importKey(\"raw\", fromHex(dkHex), { name: \"AES-GCM\" }, false, [\"encrypt\", \"decrypt\"]);\nfunction makeRecoveryCode() {\n const abc = \"ABCDEFGHJKLMNPQRSTUVWXYZ23456789\";\n const b = crypto.getRandomValues(new Uint8Array(16));\n let s = \"\"; for (let i = 0; i < 16; i++) s += abc[b[i] % 32];\n return \"STASH-\" + s.slice(0, 4) + \"-\" + s.slice(4, 8) + \"-\" + s.slice(8, 12) + \"-\" + s.slice(12, 16);\n}\n\n/**\n * Rebuild the demo account from scratch.\n *\n * The demo's credentials are PUBLIC -- they go to Akahu, and eventually onto the landing page.\n * That means anybody can log in and change anything in it: rename the pockets, delete the lot,\n * or write something unpleasant where a reviewer will see it. So it cannot be a thing we set up\n * once; it has to be rebuilt on a schedule. `demo_reset.ts` calls this nightly.\n *\n * Exported rather than run at import, so the cron and the manual script share one implementation.\n * Running this file directly still resets the demo -- see the bottom.\n */\nexport async function rebuildDemo() {\n// wipe any previous demo so this can be re-run any time to reset it\n//\n// NOT wiped: mb_logins. The sign-in history is the only record of who has been poking at the demo,\n// and the demo is the one account whose password is public. Blowing that away nightly would mean\n// permanently never being able to answer \"has anyone actually opened this?\" -- a question that has\n// already been asked once, and which could not be answered precisely because a rebuild had eaten\n// the evidence. The rows keep the old user_id and the username 'demo'; they age out after 90 days\n// like everyone else's.\nconst old = await sqlite.execute({ sql: \"SELECT id FROM mb_users WHERE username = ?\", args: [USERNAME] });\nfor (const o of old.rows as any[]) {\n await sqlite.execute({ sql: \"DELETE FROM mb_sessions WHERE user_id = ?\", args: [o.id] });\n await sqlite.execute({ sql: \"DELETE FROM mb_bank WHERE user_id = ?\", args: [o.id] });\n await sqlite.execute({ sql: \"DELETE FROM mb_push WHERE user_id = ?\", args: [o.id] });\n await sqlite.execute({ sql: \"DELETE FROM mb_users WHERE id = ?\", args: [o.id] });\n try { await blob.delete(\"bud_\" + o.id); } catch (_) {}\n try { await blob.delete(\"hint_\" + o.id); } catch (_) {}\n console.log(\"removed the previous demo account (its sign-in history is deliberately kept)\");\n}\n\n// build the identity exactly as the browser would\nconst id = rand(12);\nconst dk = rand(32), kdfSalt = rand(16), rcSalt = rand(16), salt = rand(16);\nconst code = makeRecoveryCode();\nconst authKey = await authKeyFrom(PASSWORD, kdfSalt);\nconst dkPw = JSON.stringify(await seal(await encKeyFrom(PASSWORD, kdfSalt), dk));\nconst dkRc = JSON.stringify(await seal(await rcKeyFrom(normCode(code), rcSalt), dk));\n\n// plan is set EXPLICITLY, and to 'free'. Two reasons, both learned the hard way:\n// - leaving it NULL means it depends on a migration happening to run later. That is exactly how\n// every new signup once silently became Pro.\n// - the demo should show what a real new user actually gets. A demo on a plan nobody can have is\n// a lie, and a lie in a demo is the worst possible place for one.\nawait sqlite.execute({\n sql: `INSERT INTO mb_users (id, username, pass_hash, salt, created, recovery_lookup, kdf_salt, rc_salt, dk_pw, dk_rc, auth_v, plan)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 2, 'free')`,\n args: [id, USERNAME, await hashPw(authKey, salt), salt, Date.now(), await sha256hex(normCode(code)), kdfSalt, rcSalt, dkPw, dkRc],\n});\n\nconst box = await seal(await dkToKey(dk), JSON.stringify(DEMO));\nconst encrypted = { enc: 1, iv: box.iv, ct: box.ct, updated: Date.now() };\nawait blob.setJSON(\"bud_\" + id, encrypted);\n\n// The pristine copy. /api/demo/reset restores from this when a visitor leaves, so whatever they did\n// while looking around does not greet the next person.\n//\n// It has to be written HERE, in the same breath as the account, because the ciphertext is only\n// meaningful against the data key this rebuild just generated. A pristine copy from a previous\n// rebuild would be undecryptable junk -- and the app would show an empty budget, which is precisely\n// the failure the whole \"my account keeps resetting\" saga was about. Same rebuild, same key, same\n// blob. Never separate these two lines.\nawait blob.setJSON(\"demo_clean\", encrypted);\n\n// ---- verify it actually opens, the same way the app will ----\nconst row = (await sqlite.execute({ sql: \"SELECT kdf_salt, dk_pw, pass_hash, salt FROM mb_users WHERE id = ?\", args: [id] })).rows[0] as any;\nconst ok1 = (await hashPw(await authKeyFrom(PASSWORD, row.kdf_salt), row.salt)) === row.pass_hash;\nconst dkBack = await open(await encKeyFrom(PASSWORD, row.kdf_salt), JSON.parse(row.dk_pw));\nconst stored: any = await blob.getJSON(\"bud_\" + id);\nconst back = JSON.parse(await open(await dkToKey(dkBack), stored));\n\nconsole.log(\"\\nlogin with the password works: \", ok1);\nconsole.log(\"data key unwraps: \", dkBack === dk);\nconsole.log(\"budget decrypts back identically: \", JSON.stringify(back) === JSON.stringify(DEMO));\nconsole.log(\"stored blob is ciphertext: \", !!stored.enc && !stored.accounts);\nconsole.log(\"no bank connected: \", (await sqlite.execute({ sql: \"SELECT 1 FROM mb_bank WHERE user_id = ?\", args: [id] })).rows.length === 0);\n\nconst money = (v: number) => \"$\" + v.toLocaleString(\"en-NZ\", { minimumFractionDigits: 2, maximumFractionDigits: 2 });\nconsole.log(\"\\n--- what's in it ---\");\nconsole.log(\" pockets: \", SUMMARY.pockets, \"across 2 accounts\");\nconsole.log(\" transactions: \", SUMMARY.txns, \"over ~9 months\");\nconsole.log(\" net worth graph:\", SUMMARY.snaps, \"daily snapshots\");\nconsole.log(\" inbox: \", DEMO.inbox.length, \"waiting to be sorted\");\nconsole.log(\" bills detected: \", DEMO.bills.length);\nconsole.log(\" goals: \", DEMO.goals.length);\nconsole.log(\" cash: \", money(SUMMARY.cash));\nconsole.log(\" assets: \", money(SUMMARY.assets), \"(house, KiwiSaver, investments, car)\");\nconsole.log(\" debts: \", money(SUMMARY.debts), \"(mortgage w/ fixed+floating splits, car loan)\");\nconsole.log(\" net worth: \", money(SUMMARY.net));\n\nconsole.log(\"\\n=== give these to Akahu ===\");\nconsole.log(\" https://stash.val.run\");\nconsole.log(\" username: \" + USERNAME);\nconsole.log(\" password: \" + PASSWORD);\nconsole.log(\"\\n(recovery code, keep somewhere or ignore: \" + code + \")\");\nconsole.log(\"Re-run this file any time to reset the demo back to a clean state.\");\n\n return { ok: ok1 && dkBack === dk && JSON.stringify(back) === JSON.stringify(DEMO), id };\n}\n\n// Running this file directly resets the demo. Importing it (as the nightly cron does) does not --\n// an import that silently wipes an account would be a nasty little trap to leave lying around.\nif (import.meta.main) await rebuildDemo();\n",[216],"6661f54d-b962-4047-bb5a-2c92f2f96ae3",["D",1784025010929],39,"stash",[46],"51a86eaa-92d9-4199-b667-5ad11f13c6c1","legal.ts","019f5f53-c06b-7495-ad02-36502c449758",315,["D",1784015571639],"/**\n * Privacy policy and terms, served at /privacy and /terms.\n *\n * These are written against what the code ACTUALLY does -- the sqlite schema, the blob keys, and\n * the hints file were all read before a word of this was written. If you change what Stash stores,\n * change this file in the same commit. A privacy policy that describes a system you no longer run\n * is worse than none: it is a false statement about how you handle someone's money data.\n *\n * Not legal advice, and not written by a lawyer. It is an honest, specific description of the\n * system, written to meet the Privacy Act 2020's information principles. If Stash ever takes money\n * or connects strangers' banks, get it looked at by someone qualified.\n */\n\n// Both confirmed by Riley, 14 Jul 2026.\nconst OPERATOR = \"Riley Smith\";\n\n// A personal address, used deliberately for now. Worth knowing what that costs: it is published on\n// a public page, so it will be scraped and it will get spam, and it ties the project to a personal\n// inbox. The cheap fix, whenever it is wanted, is a domain plus free forwarding (Cloudflare Email\n// Routing) -- change this one line and both pages follow.\nconst CONTACT = \"rileysmith1272@gmail.com\";\nconst UPDATED = \"14 July 2026\";\n\nconst CSS = `\n :root{--bg:#0f1115;--card:#171a21;--ink:#e8eaf0;--dim:#9aa3b2;--line:#252a34;--accent:#5b8cff}\n *{box-sizing:border-box}\n body{margin:0;background:var(--bg);color:var(--ink);\n font:16px/1.65 -apple-system,BlinkMacSystemFont,\"Segoe UI\",Roboto,sans-serif;\n -webkit-text-size-adjust:100%}\n .wrap{max-width:760px;margin:0 auto;padding:28px 20px 80px}\n a{color:var(--accent)}\n .back{display:inline-block;margin-bottom:28px;color:var(--dim);text-decoration:none;font-size:14px}\n .back:hover{color:var(--ink)}\n h1{font-size:28px;margin:0 0 6px;letter-spacing:-.3px}\n .upd{color:var(--dim);font-size:13px;margin:0 0 28px}\n h2{font-size:19px;margin:36px 0 10px;letter-spacing:-.2px}\n h3{font-size:16px;margin:24px 0 6px}\n p,li{color:#cfd5e0}\n li{margin:6px 0}\n .lede{background:var(--card);border:1px solid var(--line);border-radius:12px;padding:16px 18px;margin:0 0 8px}\n .lede p{margin:0 0 10px}\n .lede p:last-child{margin:0}\n table{width:100%;border-collapse:collapse;margin:14px 0;font-size:14.5px;display:block;overflow-x:auto}\n th,td{text-align:left;padding:10px 12px;border-bottom:1px solid var(--line);vertical-align:top}\n th{color:var(--dim);font-weight:600;white-space:nowrap}\n code{background:#0b0d11;border:1px solid var(--line);border-radius:5px;padding:1px 5px;font-size:13px}\n .warn{border-left:3px solid #e0a458;background:#1b1710;border-radius:0 10px 10px 0;padding:14px 16px;margin:18px 0}\n .warn strong{color:#f0c07a}\n footer{margin-top:56px;padding-top:20px;border-top:1px solid var(--line);color:var(--dim);font-size:13px}\n`;\n\nconst shell = (title: string, body: string) =>\n `\n\n\n${title} — Stash\n\n

\n← Back to Stash\n${body}\n\n

`;\n\n/* ------------------------------------------------------------------ privacy */\n\nconst PRIVACY = `\n

Privacy Policy

Last updated ${UPDATED}

\n\n

The short version. Your budget is encrypted inside your own browser, with a key\n derived from your password. Stash's server only ever receives the scrambled result. The operator\n cannot read your transactions, balances, pockets or assets — not because of a policy, but because\n the server does not hold the key.

Stash does not sell your data, does not run ads, does not use tracking or analytics, and does not\n share your information with anyone except the small number of suppliers listed below that are needed\n to actually run the app.

There is one honest limit on all of this, and it is set out in full under\n “What encryption does not protect you from”. Please read it.

\n\n

1. Who is responsible

Stash is operated by ${OPERATOR}, an individual based in New Zealand. Under the Privacy Act 2020\nthat makes the operator an “agency”, and this policy explains how your personal information is\nhandled. You can reach us at ${CONTACT}.

\n\n

2. What Stash collects, and why

Only what the app needs to function. There is no analytics, no advertising, no profiling and no\nthird-party trackers on any page.

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

What	Why	Can the operator read it?
Your username	To identify your account.	Yes. It does not have to be your real name, and we suggest it isn't.
Your password	To log you in and to unlock your data.	No — it is never sent to the server. Your browser stretches it into a separate\nlogin key, and only that key is sent. The server stores a salted PBKDF2 hash of that key, so even the\nkey itself is not recoverable from the database.
Your budget — transactions, pockets, balances, assets, bills, notes, history	It is the app.	No. Encrypted with AES-GCM in your browser before it is sent. The server stores\nciphertext and could not decrypt it if it wanted to.
A small “hints” record	So the daily reminder job can decide whether to notify you, without being able to read your budget.	Yes — this part is not encrypted, and you should know exactly what is in it. It\nholds: your notification on/off settings; a count of transactions waiting to be sorted; and up\nto three dates — when your next bill is due, when your forecast runs out of money, and when a\nfixed mortgage rate ends. It contains no amounts, no payees, no account numbers and no descriptions.\nTurn notifications off and it is not used.
Push notification subscription — only if you turn notifications on	To send the reminder to your device.	Yes: an anonymous device address issued by your browser vendor, plus its encryption keys. It\nidentifies a browser, not a person.
Your IP address	Rate limiting only — to stop someone brute-forcing logins.	Yes, briefly. It is stored against a counter that expires automatically (within an hour for\nsignups, 15 minutes for logins) and is then gone.
A session token	To keep you logged in.	Yes. Expires; deleted when you log out.
Your email address — optional, and blank is a perfectly good answer	One thing only: to warn you if there is a security problem with Stash. No\nnewsletters, no product updates, no marketing, ever. If you don't give one, the account works\nexactly the same — you simply can't be warned directly.	Yes. You can add, change or remove it at any time in Settings, and removing it means we hold\nnone.
A record of sign-ins to your account	So you can see whether anyone else has been in it. Every attempt, successful or failed, with the\ntime, the IP address it came from and the browser used. Stash shows this list to you\n— Settings → Recent sign-ins. That is what it is for.	Yes. Kept for 90 days, then deleted automatically. Deleted immediately if you delete your account.\nThis does mean Stash stores your IP address against your account for that period; it is the only way\na sign-in record can tell you anything useful, and we would rather you could catch an intruder than\nprotect you from a fact you already gave your internet provider.
Error reports	So a bug that breaks the app for you gets noticed. Users don't file bug reports, they just stop\nopening the app.	Yes: an error message, a stack trace, the app version and your browser type. Never your\nbudget, balances, transactions or any field value — a stack trace names functions and line\nnumbers, not the numbers in your account.
Feedback you send us	To read it and fix things.	Yes — whatever you choose to type, plus your username.
Waitlist details — only if you fill in the waitlist form	To gauge whether the paid version is worth building, and to tell you if it ships.	Yes: your email address, whether you'd pay, what price you'd pay, and any note. You can ask us to\ndelete this at any time.
Bank connection — not available to anyone at present	Would let Stash fetch transactions automatically via Akahu.	See section 6. This is the one part that would not be end-to-end encrypted, and it\nis switched off for all accounts today.

\n\n

Stash does not ask for your date of birth, your address, your phone number, your IRD number or your\nbank login. It never will. If a page claiming to be Stash asks you for your internet banking password,\nit is not us — close it.

\n\n

3. What Stash does not do

No advertising, and no selling or renting of personal information to anyone, ever.
No analytics or tracking scripts — no Google Analytics, no pixels, no fingerprinting.
No sharing of your financial data with any third party.
No emails to you other than ones you have asked for or that we are legally required to send.

\n\n

4. What encryption does not protect you from

This is the part most apps leave out, so here it is plainly.

Stash's encryption happens in JavaScript that the Stash server sends to your browser. That\nmeans the encryption protects you from the server reading stored data — a leaked database, a\nstolen backup, a curious operator — and it does so completely.

It does not protect you from a malicious or compromised version of the app itself. If\nsomeone took control of the server, they could serve altered code that captured your data before it was\nencrypted. This is true of every web app that claims end-to-end encryption, including the well-known\nones; it is a property of the web, not a flaw unique to Stash. The only real cures are running code you\ncompiled yourself, or independently verifying what is served. We would rather tell you this than let the\nword “encrypted” do work it hasn't earned.

Encryption also cannot protect data on a device someone else can unlock. Use a screen lock.

\n\n

5. Where your data lives, and who else touches it

Stash runs on Val Town, a hosting provider whose servers are in the United States.\nYour encrypted budget and the items in the table above are stored there. That is a cross-border\ndisclosure under Information Privacy Principle 12: your budget itself is encrypted before it ever\nleaves your device, so what is transferred is unreadable ciphertext.

The only other parties involved:

Your browser vendor's push service (Google, Apple or Mozilla, depending on your\ndevice) — only if you turn notifications on, and only to deliver the notification. The content of a\nStash notification never contains an amount or a payee, precisely because the server does not know them.
Akahu — only for bank connections, which are currently switched off for everyone.

Nobody else. No advertisers, no data brokers, no analytics vendors.

\n\n

6. Bank connections (Akahu)

The paid “Pro” tier would connect your bank through Akahu,\nNew Zealand's open banking provider. It is not available to any user today and will not be\nturned on for anyone until Stash is properly accredited.

Being straight with you about the design: a bank connection needs a token that the server can\nuse to fetch your transactions in the background. A server that can use a token is a server that can read\nit. So the bank connection is the one feature that cannot be end-to-end encrypted the way the rest of\nStash is. The tokens would be encrypted at rest with a server-held key — which protects against a database\nleak, but not against the operator. If and when this ships, that trade-off will be stated at the point you\nturn it on, not buried here.

\n\n

7. Backups

Stash backs up accounts nightly, keeps 14 days of them, and permanently keeps one “best known” copy as\ninsurance against corruption. Backups are copies of your encrypted data — they are as\nunreadable to us as the live copy. You can also take a backup yourself at any time from Settings. When you\ndelete your account, every backup of it is deleted with it.

\n\n

8. How long it is kept

Your account data is kept until you delete it. Sessions expire on their own. Rate-limit records expire\nwithin the hour. We do not keep data we no longer need.

\n\n

9. Deleting your account, and getting your data out

Both live in Settings, and both work without asking us for anything:

Export my data — downloads everything as a file. It is produced in your browser,\nbecause your browser is the only place your data can be read.
Delete my account — permanently removes your account, your budget, every backup of\nit, your hints, your notification settings, your email address, your sign-in history, any error reports\nfrom your account, and your waitlist entry. It asks for your password and your username first, because\nit cannot be undone. There is no grace period and no copy left behind.

\n\n

10. Your rights

Under the Privacy Act 2020 you can ask for access to the personal information we hold about you\n(Principle 6) and ask us to correct it (Principle 7). In practice the app gives you both directly, but you\nare welcome to ask us instead: ${CONTACT}. We will respond within 20\nworking days.

If you are not happy with how we have handled your information, you can complain to the\nOffice of the Privacy Commissioner — privacy.org.nz,\n0800 803 909.

\n\n

11. If something goes wrong

If there is a privacy breach that is likely to cause serious harm, we will notify the Office of the\nPrivacy Commissioner and the people affected as soon as practicable — we aim to notify the Commissioner\nwithin 72 hours of establishing that a breach is notifiable, in line with their guidance.

How we would reach you: by email, if you gave us one — that is the only thing an\nemail address is used for. If you did not, we will use a notice in the app, a push notification if you\nhave them switched on, and a prominent notice on this site. That is a weaker channel, and it is the\nhonest reason the email field exists at all.

\n\n

12. Children

Stash is not aimed at children under 13 and we don't knowingly hold their information. If you believe a\nchild has created an account, email us and we will remove it.

\n\n

13. Changes to this policy

If this policy changes in a way that matters, the date at the top changes and the app tells you the next\ntime you open it. We will not quietly widen what we collect.

\n`;\n\n/* -------------------------------------------------------------------- terms */\n\nconst TERMS = `\n

Terms of Use

Last updated ${UPDATED}

\n\n

The short version. Stash is free, it is made by one person, it is not a bank and it\n is not financial advice. Your data is encrypted with your password — if you lose both your\n password and your recovery code, your data is gone permanently and nobody, including us, can get it\n back. Please read section 4.

\n\n

1. Who you are agreeing with

Stash is provided by ${OPERATOR}, an individual in New Zealand (\"we\", \"us\"). By creating an account you\nagree to these terms. If you don't, don't use it — and if you've already signed up, delete your account in\nSettings.

\n\n

2. Stash is free, and comes as-is

Stash costs nothing and is provided \"as is\", without warranties of any kind. It is a personal project,\nnot a company with a support desk. We try hard to keep it working and to keep your data safe, but we can't\npromise it will always be available, always correct, or free of bugs. Nothing in these terms limits any\nrights you have under New Zealand law that cannot lawfully be excluded.

\n\n

3. It is not financial advice

Stash shows you your own numbers and does arithmetic on them. It does not give financial advice, and\nnothing in it is a recommendation to spend, save, borrow, invest or do anything else with your money. Its\nforecasts are projections from what you have entered — they are not predictions, and they will be wrong if\nyour inputs are wrong. Decisions about your money are yours. If you need advice, talk to someone licensed\nto give it.

Imported transactions and connected balances can be incomplete or out of date. Your bank's own\nrecords are the authoritative ones, not Stash's. Do not rely on Stash to tell you whether a\npayment will clear.

\n\n

4. Your password is the only key — losing it means losing your data

Read this one properly. Your budget is encrypted with a key derived from your password.\nWe do not have that key, and we cannot reset it. This is the whole point: it is why we cannot read your\ndata, and it is why we cannot rescue it either.

You are given a recovery code when you sign up. It is the only other way in. Write it\ndown and keep it somewhere that is not your phone.

If you lose your password and your recovery code, your data is permanently and irrecoverably\ngone. Not \"gone unless you email support\" — actually gone. We will not be able to help you, no\nmatter how much we would like to. There is no back door, by design.

Keeping your password and recovery code safe is your responsibility, as is anything done by someone you\nlet into your account.

\n\n

5. The paid tier does not exist yet

Stash is currently free, in full. A paid \"Pro\" tier — mainly automatic bank\nconnection — is something we would like to build, but it depends on accreditation and on enough\npeople wanting it. It may never be released.

Joining the waitlist costs nothing, commits you to nothing, and is not a pre-order or a purchase. If Pro\never ships, everything that is free today stays free — we will not take a feature away from you and sell it\nback.

\n\n

6. Using Stash sensibly

Don't try to break into other people's accounts, don't attack or overload the service, don't use it for\nanything illegal, and don't upload other people's financial information without their say-so. We may\nsuspend or remove an account that does these things.

\n\n

7. If Stash shuts down

This is a personal project and it may not run forever. If it is going to be shut down, we will give you\nreasonable notice in the app and leave the export tool working so you can take your data with you. We\nwon't sell your data as part of any wind-down — it is encrypted, so there would be nothing to sell.

\n\n

8. Liability

To the extent the law allows, we are not liable for any loss arising from your use of Stash — including\nfinancial loss from decisions you make using it, loss of data, or the service being unavailable. Stash is\nfree, and this limit is part of why we can offer it at all. Again, nothing here removes rights you have\nunder New Zealand law that cannot be excluded.

\n\n

9. Changes

We may update these terms. If a change is significant, the app will tell you. Carrying on using Stash\nafter that means you accept the new terms.

\n\n

10. Law

These terms are governed by New Zealand law, and the New Zealand courts have jurisdiction.

\n\n

11. Contact

${CONTACT}

\n`;\n\nexport const privacyHtml = () => shell(\"Privacy Policy\", PRIVACY);\nexport const termsHtml = () => shell(\"Terms of Use\", TERMS);\n",[229],"9d3c7c43-64af-4e70-a360-94349f82a99b",["D",1784025010929],208,[54],"7ddeee94-5fc5-480b-9f75-fe342e5d42a7","icon192.b64","019f4a79-aa80-769e-a1a0-46e47c26915f",["D",1783660915335],"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",[240],"ea95a6f0-66b0-47f8-955d-8547dda3706b","icon180.b64","019f4a79-aa80-769e-a1a0-40fa4ecd3fcf",["D",1783660915335],"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",[246],"6ec9b905-4ff2-4e4c-9b7e-24b26c86be30","demo_reset.ts","019f5f62-9651-713b-8b6d-776d9ab8cbf2",310,["D",1784011724373],"// Nightly: put the demo account back exactly as it was.\n//\n// The demo's username and password are public by design -- they go to Akahu, and to anyone who\n// wants a look before signing up. Public credentials mean anyone can log in and change anything:\n// rename the pockets, delete the transactions, or leave something obscene where a reviewer or a\n// prospective user will find it. A demo that anyone can vandalise is worse than no demo.\n//\n// So it gets rebuilt every night, from the same data, every time. Nothing in it is real, nothing\n// in it is anyone's, and nothing anyone does to it survives the night.\n//\n// Lives on `main` because that is the only branch where crons run. Runs at 14:30 UTC = 2:30am NZ,\n// half an hour before the backup job, so a wrecked demo is never what gets backed up.\nimport { rebuildDemo } from \"./make_demo.ts\";\n\nexport default async function () {\n const started = Date.now();\n try {\n const r = await rebuildDemo();\n // rebuildDemo verifies its own work: it logs back in, unwraps the key and decrypts the budget.\n // If that check ever fails, the demo is broken and saying so loudly beats a silent green tick.\n if (!r.ok) {\n console.error(\"DEMO RESET FAILED ITS OWN VERIFICATION -- the demo account may not open\");\n throw new Error(\"demo verification failed\");\n }\n console.log(`demo reset ok in ${Date.now() - started}ms`);\n } catch (e) {\n console.error(\"demo reset threw:\", (e as Error).message);\n throw e; // let it show up as a failed run rather than a quiet no-op\n }\n}\n",[252],"05b1d603-32dc-470c-ba7f-ffd47e8cb775","demo_data.ts","9a1fe4ee-7eb0-11f1-9baa-1607ee4eb77e",233,["D",1783943238986],"// Builds a believable 9-month budget for the demo account. Pure data — no side effects.\nconst DAY = 86400000;\nconst NOW = Date.now();\nconst r2 = (v: number) => Math.round((v + Number.EPSILON) * 100) / 100;\nlet seed = 20260713;\nconst rnd = () => { seed = (seed * 1103515245 + 12345) & 0x7fffffff; return seed / 0x7fffffff; };\nconst jitter = (v: number, pct: number) => r2(v * (1 + (rnd() - 0.5) * 2 * pct));\nconst pick = (a: T[]): T => a[Math.floor(rnd() * a.length)];\nlet n = 0;\nconst uid = () => \"demo\" + (n++).toString(36) + Math.floor(rnd() * 1e6).toString(36);\n\nconst DAYS = 274; // ~9 months of history\nconst START = NOW - DAYS * DAY;\n\n// ---- accounts and pockets ----\nconst P = (name: string, amount: number, freq: string, balance: number) => ({ id: uid(), name, balance, amount, freq });\n\nconst everyday = {\n id: uid(),\n name: \"Everyday\",\n showInPayday: true,\n pockets: [\n P(\"Rent\", 260, \"weekly\", 260),\n P(\"Groceries\", 130, \"weekly\", 84.15),\n P(\"Power\", 75, \"fortnightly\", 112.4),\n P(\"Internet\", 45, \"fortnightly\", 45),\n P(\"Phone\", 20, \"fortnightly\", 31.5),\n P(\"Petrol\", 60, \"fortnightly\", 38.2),\n P(\"Eating out\", 55, \"fortnightly\", 22.8),\n P(\"Coffee\", 25, \"fortnightly\", 11.5),\n P(\"Gym\", 25, \"fortnightly\", 25),\n P(\"Subscriptions\", 22, \"fortnightly\", 14.01),\n P(\"Car costs\", 50, \"fortnightly\", 462.75),\n P(\"Clothes\", 30, \"fortnightly\", 187.4),\n P(\"Gifts\", 20, \"fortnightly\", 143.6),\n P(\"Fun money\", 80, \"fortnightly\", 56.9),\n ],\n};\nconst savings = {\n id: uid(),\n name: \"Savings\",\n showInPayday: true,\n pockets: [\n P(\"Emergency fund\", 100, \"fortnightly\", 5240),\n P(\"Holiday\", 120, \"fortnightly\", 2870),\n P(\"House repairs\", 60, \"fortnightly\", 1615),\n ],\n};\nconst accounts = [everyday, savings];\nconst pk = (acc: any, name: string) => acc.pockets.find((p: any) => p.name === name);\n\n// ---- transaction history ----\nconst txns: any[] = [];\nconst spend = (ts: number, acc: any, pocket: any, amount: number, note: string) =>\n txns.push({ id: uid(), ts, type: \"spend\", account: acc.id, pocketId: pocket.id, amount: r2(amount), note, label: pocket.name });\n\nconst SHOPS = [\"New World\", \"Pak'nSave\", \"Countdown\", \"Four Square\"];\nconst CAFES = [\"Coffee Supreme\", \"Mojo\", \"The Daily\", \"Ozone\"];\nconst EATS = [\"Hell Pizza\", \"Burger Fuel\", \"Sal's Pizza\", \"Thai Bowl\", \"Sushi Ichiban\"];\nconst FUEL = [\"Z Energy\", \"BP Connect\", \"Mobil\", \"Gull\"];\n\nfor (let d = 0; d < DAYS; d++) {\n const ts = START + d * DAY + 9 * 3600000 + Math.floor(rnd() * 8 * 3600000);\n const dow = new Date(ts).getDay();\n\n // payday, fortnightly on Thursdays\n if (dow === 4 && Math.floor(d / 7) % 2 === 0) {\n txns.push({ id: uid(), ts, type: \"income\", account: \"\", pocketId: \"\", amount: jitter(2620, 0.06), note: \"Wages\", label: \"Pay\", payday: true });\n }\n if (dow === 2) spend(ts, everyday, pk(everyday, \"Rent\"), 260, \"Rent\"); // weekly\n if (dow === 0 || dow === 4) spend(ts, everyday, pk(everyday, \"Groceries\"), jitter(62, 0.35), pick(SHOPS));\n if (rnd() < 0.55) spend(ts, everyday, pk(everyday, \"Coffee\"), jitter(5.5, 0.2), pick(CAFES));\n if (rnd() < 0.16) spend(ts, everyday, pk(everyday, \"Eating out\"), jitter(28, 0.5), pick(EATS));\n if (d % 12 === 3) spend(ts, everyday, pk(everyday, \"Petrol\"), jitter(78, 0.2), pick(FUEL));\n if (d % 30 === 5) spend(ts, everyday, pk(everyday, \"Power\"), jitter(148, 0.25), \"Contact Energy\");\n if (d % 30 === 9) spend(ts, everyday, pk(everyday, \"Internet\"), 89.95, \"2degrees Broadband\");\n if (d % 30 === 12) spend(ts, everyday, pk(everyday, \"Phone\"), 40, \"One NZ\");\n if (d % 30 === 15) spend(ts, everyday, pk(everyday, \"Subscriptions\"), 24.99, \"Spotify\");\n if (d % 30 === 16) spend(ts, everyday, pk(everyday, \"Subscriptions\"), 19.99, \"Netflix\");\n if (d % 14 === 2) spend(ts, everyday, pk(everyday, \"Gym\"), 24.5, \"Les Mills\");\n if (rnd() < 0.07) spend(ts, everyday, pk(everyday, \"Fun money\"), jitter(35, 0.7), pick([\"Mitre 10\", \"Kmart\", \"The Warehouse\", \"JB Hi-Fi\", \"Whitcoulls\"]));\n if (rnd() < 0.03) spend(ts, everyday, pk(everyday, \"Clothes\"), jitter(75, 0.6), pick([\"Hallenstein\", \"Barkers\", \"Glassons\", \"Rebel Sport\"]));\n if (rnd() < 0.02) spend(ts, everyday, pk(everyday, \"Gifts\"), jitter(45, 0.5), \"Gift\");\n if (rnd() < 0.04) spend(ts, everyday, pk(everyday, \"Car costs\"), jitter(120, 0.8), pick([\"VTNZ\", \"Repco\", \"Tyre shop\", \"Car service\"]));\n}\ntxns.sort((a, b) => a.ts - b.ts);\n\n// ---- bills the app has detected ----\nconst bill = (name: string, amount: number, freq: string, nextInDays: number, kind: string, acc?: any, pocket?: any, extra: any = {}) =>\n Object.assign({ id: uid(), key: \"spend|\" + name.toLowerCase(), name, amount, kind, freq, nextTs: NOW + nextInDays * DAY, account: acc ? acc.id : \"\", pocketId: pocket ? pocket.id : \"\", source: \"auto\" }, extra);\n\nconst bills = [\n bill(\"Wages\", 2620, \"fortnightly\", 4, \"income\", undefined, undefined, { key: \"income|wages\", varies: true, source: \"picked\", sources: [\"wages\"] }),\n bill(\"Rent\", 260, \"weekly\", 1, \"bill\", everyday, pk(everyday, \"Rent\")),\n bill(\"Power\", 148, \"monthly\", 2, \"bill\", everyday, pk(everyday, \"Power\"), { varies: true }),\n bill(\"2degrees Broadband\", 89.95, \"monthly\", 6, \"bill\", everyday, pk(everyday, \"Internet\")),\n bill(\"One NZ\", 40, \"monthly\", 9, \"bill\", everyday, pk(everyday, \"Phone\")),\n bill(\"Spotify\", 24.99, \"monthly\", 12, \"bill\", everyday, pk(everyday, \"Subscriptions\")),\n bill(\"Netflix\", 19.99, \"monthly\", 13, \"bill\", everyday, pk(everyday, \"Subscriptions\")),\n bill(\"Les Mills\", 24.5, \"fortnightly\", 5, \"bill\", everyday, pk(everyday, \"Gym\")),\n];\n\n// ---- things still waiting in the inbox ----\nconst inbox = [\n { id: \"demo_in_1\", date: new Date(NOW - 1 * DAY).toISOString(), amount: -42.9, description: \"PAK N SAVE 4412\", merchant: \"Pak'nSave\", category: \"Groceries\", account: \"Everyday\" },\n { id: \"demo_in_2\", date: new Date(NOW - 1 * DAY).toISOString(), amount: -18.5, description: \"MOJO COFFEE\", merchant: \"Mojo\", category: \"Cafe\", account: \"Everyday\" },\n { id: \"demo_in_3\", date: new Date(NOW - 2 * DAY).toISOString(), amount: -129, description: \"REPCO 118\", merchant: \"Repco\", category: \"Automotive\", account: \"Everyday\" },\n { id: \"demo_in_4\", date: new Date(NOW - 3 * DAY).toISOString(), amount: -64.2, description: \"Z ENERGY GREENLANE\", merchant: \"Z Energy\", category: \"Fuel\", account: \"Everyday\" },\n { id: \"demo_in_5\", date: new Date(NOW - 4 * DAY).toISOString(), amount: -230, description: \"AA INSURANCE PREMIUM\", merchant: \"AA Insurance\", category: \"Insurance\", account: \"Everyday\" },\n];\nconst done = [\n { id: \"demo_dn_1\", date: new Date(NOW - 5 * DAY).toISOString(), amount: -24.99, description: \"SPOTIFY NZ\", merchant: \"Spotify\", category: \"Subscriptions\", account: \"Everyday\", resolution: \"Auto-filed to Subscriptions (rule)\", resolvedAt: NOW - 5 * DAY },\n { id: \"demo_dn_2\", date: new Date(NOW - 6 * DAY).toISOString(), amount: -61.4, description: \"NEW WORLD METRO\", merchant: \"New World\", category: \"Groceries\", account: \"Everyday\", resolution: \"Auto-filed to Groceries (rule)\", resolvedAt: NOW - 6 * DAY },\n { id: \"demo_dn_3\", date: new Date(NOW - 8 * DAY).toISOString(), amount: 2634.18, description: \"SALARY\", merchant: \"\", category: \"\", account: \"Everyday\", resolution: \"Filed as payday\", resolvedAt: NOW - 8 * DAY },\n];\n\nconst rules = [\n { id: uid(), match: \"New World\", account: everyday.id, pocketId: pk(everyday, \"Groceries\").id, mode: \"auto\" },\n { id: uid(), match: \"Pak'nSave\", account: everyday.id, pocketId: pk(everyday, \"Groceries\").id, mode: \"auto\" },\n { id: uid(), match: \"Z Energy\", account: everyday.id, pocketId: pk(everyday, \"Petrol\").id, mode: \"auto\" },\n { id: uid(), match: \"Spotify\", account: everyday.id, pocketId: pk(everyday, \"Subscriptions\").id, mode: \"auto\" },\n { id: uid(), match: \"Transfer to savings\", account: \"\", pocketId: \"\", mode: \"ignore\" },\n];\n\nconst goals = [\n { id: uid(), name: \"Japan trip\", target: 6000, date: \"2027-03-01\", scope: \"pocket\", account: savings.id, pocketId: pk(savings, \"Holiday\").id },\n { id: uid(), name: \"6 months emergency fund\", target: 12000, date: \"\", scope: \"pocket\", account: savings.id, pocketId: pk(savings, \"Emergency fund\").id },\n];\n\n// ---- assets, debts, and the net-worth history behind the graph ----\nconst assets = [\n { id: uid(), name: \"House\", type: \"Property\", balance: 735000, updated: NOW },\n { id: uid(), name: \"KiwiSaver\", type: \"Investment\", balance: 31480, updated: NOW },\n { id: uid(), name: \"Investments\", type: \"Investment\", balance: 9260, updated: NOW },\n { id: uid(), name: \"Car\", type: \"Vehicle\", balance: 11500, updated: NOW },\n];\nconst debts = [\n {\n id: uid(), name: \"Home loan\", kind: \"mortgage\", splits: [\n { id: uid(), name: \"Fixed portion\", type: \"fixed\", balance: 372000, rate: 5.79, repayment: 1180, freq: \"fortnightly\", fixedUntil: new Date(NOW + 61 * DAY).toISOString().slice(0, 10) },\n { id: uid(), name: \"Floating portion\", type: \"floating\", balance: 84000, rate: 7.19, repayment: 320, freq: \"fortnightly\", fixedUntil: \"\" },\n ],\n },\n { id: uid(), name: \"Car loan\", kind: \"loan\", balance: 6180, rate: 9.95, repayment: 145, freq: \"fortnightly\" },\n];\n\nconst cashNow = r2(accounts.reduce((t, a) => t + a.pockets.reduce((x: number, p: any) => x + p.balance, 0), 0));\nconst assetsNow = assets.reduce((t, a) => t + a.balance, 0);\nconst debtsNow = debts.reduce((t: number, d: any) =>\n t + (d.splits ? d.splits.reduce((x: number, s: any) => x + s.balance, 0) : d.balance), 0);\n\n// walk backwards so today's snapshot is exactly what the app shows\nconst snaps: any[] = [];\nfor (let d = DAYS; d >= 0; d--) {\n const ts = NOW - d * DAY;\n const back = d / DAYS;\n const cash = r2(cashNow - back * 3100 + (rnd() - 0.5) * 260);\n const asset = r2(assetsNow - back * 6900 - (rnd() - 0.5) * 400);\n const debt = r2(debtsNow + back * 11800 + (rnd() - 0.5) * 300);\n snaps.push({ d: new Date(ts).toISOString().slice(0, 10), ts, cash, assets: asset, debts: debt, net: r2(cash + asset - debt) });\n}\n\nexport const DEMO = {\n version: 4,\n updated: NOW,\n payFreq: \"fortnightly\",\n accounts,\n paydayLines: [],\n txns,\n inbox,\n handled: [],\n done,\n goals,\n rules,\n autoMatchPockets: true,\n worth: { assets, debts, snaps },\n bills,\n billsSkip: [],\n notify: { enabled: false, updates: true, shortfall: true, bills: true, refix: true, inbox: true },\n};\n\nexport const SUMMARY = {\n txns: txns.length,\n cash: cashNow,\n assets: assetsNow,\n debts: debtsNow,\n net: r2(cashNow + assetsNow - debtsNow),\n snaps: snaps.length,\n pockets: accounts.reduce((t, a) => t + a.pockets.length, 0),\n};\n",[259],"f56a1c14-9801-4833-a597-891f97539fc9","csv_test.ts","02c11d7a-7f23-11f1-a14e-1607ee4eb77e",["D",1783992377175],"// Tests the statement parser against the shapes NZ bank exports actually come in, plus the\n// horrible edge cases. The parser is format-agnostic by design -- these are here to prove it\n// copes, NOT to hard-code any bank's layout.\n(globalThis as any).window = globalThis;\nawait import(\"./csv.js\");\nconst CSV = (globalThis as any).CSV;\n\nlet pass = 0, fail = 0;\nconst ok = (n: string, c: boolean, extra = \"\") => {\n if (c) { pass++; console.log(\" PASS \" + n); }\n else { fail++; console.log(\" FAIL \" + n + (extra ? \" -> \" + extra : \"\")); }\n};\nconst d = (ts: number) => new Date(ts).toISOString().slice(0, 10);\n\n// ---------------------------------------------------------------- amounts\nconsole.log(\"=== money parsing ===\");\nconst A = CSV.parseAmount;\nok(\"plain negative\", A(\"-42.50\") === -42.5);\nok(\"dollar sign + thousands\", A(\"$1,234.56\") === 1234.56);\nok(\"brackets mean negative\", A(\"(1,234.56)\") === -1234.56);\nok(\"trailing minus\", A(\"42.50-\") === -42.5);\nok(\"blank is null\", A(\"\") === null);\nok(\"zero\", A(\"0.00\") === 0);\nok(\"no false positive on text\", A(\"Countdown\") === null);\n\n// ---------------------------------------------------------------- dates\nconsole.log(\"\\n=== date parsing ===\");\nconst P = CSV.parseDate;\nok(\"NZ day-first 05/07/2026 = 5 July\", d(P(\"05/07/2026\", \"DMY\")) === \"2026-07-05\");\nok(\"US month-first 05/07/2026 = 5 May\", d(P(\"05/07/2026\", \"MDY\")) === \"2026-05-07\");\nok(\"ISO\", d(P(\"2026-07-05\", \"DMY\")) === \"2026-07-05\");\nok(\"2-digit year\", d(P(\"05/07/26\", \"DMY\")) === \"2026-07-05\");\nok(\"written month\", d(P(\"14 Jul 2026\", \"DMY\")) === \"2026-07-14\");\nok(\"rubbish is null\", P(\"not a date\", \"DMY\") === null);\nok(\"impossible month rejected\", P(\"05/19/2026\", \"DMY\") === null);\n\nconsole.log(\"\\n=== day-first vs month-first detection ===\");\nok(\"sees 25/01 and knows it's day-first\", CSV.dateOrder([\"01/02/2026\", \"25/01/2026\"]) === \"DMY\");\nok(\"sees 01/25 and knows it's month-first\", CSV.dateOrder([\"02/01/2026\", \"01/25/2026\"]) === \"MDY\");\nok(\"ambiguous defaults to NZ day-first\", CSV.dateOrder([\"01/02/2026\", \"03/04/2026\"]) === \"DMY\");\n\n// ---------------------------------------------------------------- whole files\nfunction run(name: string, text: string, expect: any) {\n console.log(\"\\n=== \" + name + \" ===\");\n const det = CSV.read(text);\n const built = CSV.build(det, det.map, det.order, \"Everyday\");\n const items = built.items;\n const hdr = det.headerIdx >= 0 ? det.header : [];\n console.log(\" detected: date=\" + (hdr[det.map.date] ?? det.map.date) +\n \" amount=\" + (det.map.amount >= 0 ? (hdr[det.map.amount] ?? det.map.amount) : \"debit/credit pair\") +\n \" desc=\" + (hdr[det.map.desc] ?? det.map.desc) + \" order=\" + det.order);\n ok(\"row count\", items.length === expect.count, \"got \" + items.length + \" want \" + expect.count);\n if (items.length) {\n ok(\"first date \" + d(Date.parse(items[0].date)), d(Date.parse(items[0].date)) === expect.firstDate, \"got \" + d(Date.parse(items[0].date)));\n ok(\"first amount \" + items[0].amount, items[0].amount === expect.firstAmount, \"got \" + items[0].amount);\n ok(\"first description mentions \" + expect.descHas, String(items[0].description).toLowerCase().includes(expect.descHas.toLowerCase()), \"got \" + items[0].description);\n const total = Math.round(items.reduce((t: number, i: any) => t + i.amount, 0) * 100) / 100;\n ok(\"net total \" + total, total === expect.total, \"got \" + total);\n const debits = items.filter((i: any) => i.amount < 0).length;\n ok(\"debits/credits split \" + debits + \"/\" + (items.length - debits), debits === expect.debits);\n }\n return items;\n}\n\n// ANZ-style: Type, Details, Particulars, Code, Reference, Amount, Date\nrun(\"ANZ-style (amount and date at the end)\", [\n \"Type,Details,Particulars,Code,Reference,Amount,Date,ForeignCurrencyAmount,ConversionCharge\",\n \"Eftpos,COUNTDOWN 4412,,,,-42.90,05/07/2026,,\",\n \"Direct Credit,WAGES,SALARY,,,2620.00,03/07/2026,,\",\n \"Bank Fee,MONTHLY FEE,,,,-5.00,01/07/2026,,\",\n].join(\"\\n\"), { count: 3, firstDate: \"2026-07-05\", firstAmount: -42.9, descHas: \"countdown\", total: 2572.1, debits: 2 });\n\n// ASB-style: preamble junk lines, THEN headers\nrun(\"ASB-style (preamble rows before the header)\", [\n \"Created date / time : 14 July 2026 / 09:12:05\",\n \"Bank 12; Branch 3011; Account 0123456-50 (Streamline)\",\n \"From date 20260601\",\n \"To date 20260714\",\n \"\",\n \"Date,Unique Id,Tran Type,Cheque Number,Payee,Memo,Amount\",\n \"2026-07-05,2026070501,EFTPOS,,NEW WORLD METRO,,-61.40\",\n \"2026-07-03,2026070301,CREDIT,,SALARY,PAY,2634.18\",\n \"2026-07-02,2026070201,DEBIT,,SPOTIFY NZ,,-24.99\",\n].join(\"\\n\"), { count: 3, firstDate: \"2026-07-05\", firstAmount: -61.4, descHas: \"new world\", total: 2547.79, debits: 2 });\n\n// Kiwibank-style: SEPARATE debit and credit columns, plus a running balance to trip us up\nrun(\"Kiwibank-style (separate debit/credit columns + balance)\", [\n \"Account number,Date,Memo/Description,Source Code,Amount (credit),Amount (debit),Balance\",\n \"38-9012-0123456-00,05/07/2026,Z ENERGY GREENLANE,POS,,64.20,1935.80\",\n \"38-9012-0123456-00,03/07/2026,SALARY,DC,2620.00,,2000.00\",\n \"38-9012-0123456-00,01/07/2026,LES MILLS,DD,,24.50,-620.00\",\n].join(\"\\n\"), { count: 3, firstDate: \"2026-07-05\", firstAmount: -64.2, descHas: \"z energy\", total: 2531.3, debits: 2 });\n\n// Westpac-style with quoted fields containing commas\nrun(\"quoted fields with commas inside\", [\n \"Date,Amount,Other Party,Description,Reference\",\n '05/07/2026,-129.00,\"REPCO 118, GREENLANE\",\"Car parts, oil\",',\n '03/07/2026,2620.00,\"EMPLOYER LTD\",\"Salary\",PAY',\n].join(\"\\n\"), { count: 2, firstDate: \"2026-07-05\", firstAmount: -129, descHas: \"repco\", total: 2491, debits: 1 });\n\n// Semicolon-delimited, European decimals\nrun(\"semicolons and comma decimals\", [\n \"Date;Description;Amount\",\n \"05/07/2026;PAK N SAVE;-42,90\",\n \"03/07/2026;WAGES;2620,00\",\n].join(\"\\n\"), { count: 2, firstDate: \"2026-07-05\", firstAmount: -42.9, descHas: \"pak\", total: 2577.1, debits: 1 });\n\n// The nastiest realistic case: balance column that looks exactly like an amount column\nconsole.log(\"\\n=== the trap: don't mistake the BALANCE column for the amount ===\");\n{\n const text = [\n \"Date,Description,Amount,Balance\",\n \"05/07/2026,COUNTDOWN,-42.90,1957.10\",\n \"03/07/2026,WAGES,2620.00,2000.00\",\n ].join(\"\\n\");\n const det = CSV.read(text);\n const items = CSV.build(det, det.map, det.order, \"X\").items;\n ok(\"picked Amount, not Balance\", det.header[det.map.amount] === \"Amount\", \"picked \" + det.header[det.map.amount]);\n ok(\"amounts are right\", items[0].amount === -42.9 && items[1].amount === 2620);\n}\n\n// ---------------------------------------------------------------- dedupe\nconsole.log(\"\\n=== dedupe: re-importing an overlapping statement ===\");\n{\n const jan = \"Date,Description,Amount\\n05/07/2026,COUNTDOWN,-42.90\\n03/07/2026,WAGES,2620.00\";\n const feb = \"Date,Description,Amount\\n05/07/2026,COUNTDOWN,-42.90\\n03/07/2026,WAGES,2620.00\\n08/07/2026,MOJO,-5.50\";\n const a = CSV.build(CSV.read(jan), CSV.read(jan).map, \"DMY\", \"X\").items;\n const b = CSV.build(CSV.read(feb), CSV.read(feb).map, \"DMY\", \"X\").items;\n const seen: Record = {};\n a.forEach((i: any) => seen[CSV.fingerprint(i)] = 1);\n const fresh = b.filter((i: any) => !seen[CSV.fingerprint(i)]);\n ok(\"second import only brings in the ONE new row\", fresh.length === 1, \"got \" + fresh.length);\n ok(\"and it's the right one\", fresh[0].description.includes(\"MOJO\"));\n ok(\"identical rows produce identical ids\", CSV.fingerprint(a[0]) === CSV.fingerprint(b[0]));\n ok(\"different amounts produce different ids\",\n CSV.fingerprint({ date: \"2026-07-05\", amount: -42.9, description: \"X\" }) !==\n CSV.fingerprint({ date: \"2026-07-05\", amount: -42.91, description: \"X\" }));\n // a genuine second coffee on the same day for the same amount SHOULD be treated as a duplicate --\n // that's the safe direction to err. Better to miss one than to double-count someone's money.\n console.log(\" (note: two identical purchases on one day collapse to one. Safe direction.)\");\n}\n\n// ---------------------------------------------------------------- junk\nconsole.log(\"\\n=== junk in, nothing broken out ===\");\n{\n const junk = \"this is not a csv at all\\njust some words\";\n let threw = false;\n try { const det = CSV.read(junk); CSV.build(det, det.map, det.order, \"X\"); } catch (_) { threw = true; }\n ok(\"garbage doesn't throw\", !threw);\n\n const partial = [\"Date,Description,Amount\", \"05/07/2026,GOOD,-10.00\", \"NOT A DATE,BAD,-20.00\", \",,\", \"07/07/2026,ALSO GOOD,-30.00\"].join(\"\\n\");\n const det = CSV.read(partial);\n const built = CSV.build(det, det.map, det.order, \"X\");\n ok(\"keeps the good rows, drops the bad\", built.items.length === 2, \"kept \" + built.items.length);\n ok(\"and counts what it skipped\", built.skipped === 1, \"skipped \" + built.skipped);\n ok(\"no money invented\", built.items.reduce((t: number, i: any) => t + i.amount, 0) === -40);\n}\n\nconsole.log(\"\\n\" + pass + \" passed, \" + fail + \" failed\");\n",[266],"49071fb0-6439-4328-b0b5-6682e76d96d3","csv.js","02c174be-7f23-11f1-a14e-1607ee4eb77e",["D",1783992377175],"/* Statement import. Everything here runs in the browser -- a bank statement never touches the\n server, which is the whole point of the encryption work.\n\n Deliberately NOT hard-coded per bank. Every bank has a different CSV layout and they change\n them without telling anyone, so instead we read the file and work out what's in it, then let\n the user correct us. Guessing wrong about which column is \"amount\" would silently corrupt\n someone's money, so the user always sees a preview before anything is imported. */\n(function(){\n\n /* ---------- RFC-4180-ish parser: handles quoted fields, embedded commas and newlines ---------- */\n function parseDelimited(text, delim){\n var rows = [], row = [], cur = '', inQ = false, i = 0;\n text = String(text).replace(/^/, ''); // strip BOM\n while(i < text.length){\n var ch = text[i];\n if(inQ){\n if(ch === '\"'){\n if(text[i+1] === '\"'){ cur += '\"'; i += 2; continue; } // escaped quote\n inQ = false; i++; continue;\n }\n cur += ch; i++; continue;\n }\n if(ch === '\"'){ inQ = true; i++; continue; }\n if(ch === delim){ row.push(cur); cur = ''; i++; continue; }\n if(ch === '\\r'){ i++; continue; }\n if(ch === '\\n'){ row.push(cur); rows.push(row); row = []; cur = ''; i++; continue; }\n cur += ch; i++;\n }\n if(cur.length || row.length){ row.push(cur); rows.push(row); }\n return rows.filter(function(r){ return r.some(function(c){ return String(c).trim() !== ''; }); });\n }\n\n /* Which separator is it? Whichever gives the most consistent column count. */\n function sniffDelim(text){\n var head = text.split(/\\r?\\n/).slice(0, 20).join('\\n');\n var best = ',', bestScore = -1;\n [',', ';', '\\t', '|'].forEach(function(d){\n var rows = parseDelimited(head, d);\n if(rows.length < 2) return;\n var counts = {};\n rows.forEach(function(r){ counts[r.length] = (counts[r.length] || 0) + 1; });\n var mode = 0, modeN = 0;\n Object.keys(counts).forEach(function(k){ if(counts[k] > modeN){ modeN = counts[k]; mode = +k; } });\n var score = mode > 1 ? modeN * mode : 0; // consistent AND more than one column\n if(score > bestScore){ bestScore = score; best = d; }\n });\n return best;\n }\n\n /* ---------- value readers ---------- */\n\n /* NZ banks write dates as DD/MM/YYYY. American software writes MM/DD/YYYY. Getting this backwards\n silently moves transactions into the wrong month, so we look at the WHOLE column: if any value\n has a first part above 12, it must be day-first. Only if it's genuinely ambiguous do we assume\n day-first, because this is New Zealand. */\n function dateOrder(values){\n var sawBigFirst = false, sawBigSecond = false;\n values.forEach(function(v){\n var m = String(v).match(/^(\\d{1,2})[\\/\\-.](\\d{1,2})[\\/\\-.](\\d{2,4})/);\n if(!m) return;\n if(+m[1] > 12) sawBigFirst = true;\n if(+m[2] > 12) sawBigSecond = true;\n });\n if(sawBigFirst) return 'DMY';\n if(sawBigSecond) return 'MDY';\n return 'DMY';\n }\n\n function parseDate(v, order){\n var s = String(v || '').trim();\n if(!s) return null;\n var m = s.match(/^(\\d{4})-(\\d{1,2})-(\\d{1,2})/); // ISO\n if(m) return new Date(+m[1], +m[2]-1, +m[3], 12).getTime();\n m = s.match(/^(\\d{1,2})[\\/\\-.](\\d{1,2})[\\/\\-.](\\d{2,4})/);\n if(m){\n var a = +m[1], b = +m[2], y = +m[3];\n if(y < 100) y += y < 70 ? 2000 : 1900;\n var d = (order === 'MDY') ? b : a;\n var mo = (order === 'MDY') ? a : b;\n if(mo < 1 || mo > 12 || d < 1 || d > 31) return null;\n return new Date(y, mo-1, d, 12).getTime();\n }\n m = s.match(/^(\\d{1,2})\\s+([A-Za-z]{3,})\\s+(\\d{2,4})/); // 14 Jul 2026\n if(m){\n var MON = ['jan','feb','mar','apr','may','jun','jul','aug','sep','oct','nov','dec'];\n var mi = MON.indexOf(m[2].slice(0,3).toLowerCase());\n if(mi < 0) return null;\n var yy = +m[3]; if(yy < 100) yy += 2000;\n return new Date(yy, mi, +m[1], 12).getTime();\n }\n var t = Date.parse(s);\n return isNaN(t) ? null : t;\n }\n\n /* Money. Handles $1,234.56 (1,234.56) -1234.56 1 234,56 */\n function parseAmount(v){\n var s = String(v == null ? '' : v).trim();\n if(!s) return null;\n var neg = false;\n if(/^\$.*\$$/.test(s)){ neg = true; s = s.slice(1, -1); }\n if(/^-/.test(s)){ neg = true; s = s.slice(1); }\n if(/-$/.test(s)){ neg = true; s = s.slice(0, -1); } // trailing minus\n s = s.replace(/[^0-9.,]/g, '');\n if(!s) return null;\n var lastDot = s.lastIndexOf('.'), lastCom = s.lastIndexOf(',');\n if(lastCom > lastDot){ s = s.replace(/\\./g, '').replace(',', '.'); } // european\n else { s = s.replace(/,/g, ''); }\n var n = parseFloat(s);\n if(isNaN(n)) return null;\n return neg ? -Math.abs(n) : n;\n }\n\n var looksLikeDate = function(v){ return parseDate(v, 'DMY') !== null; };\n var looksLikeMoney = function(v){\n var s = String(v == null ? '' : v).trim();\n if(!s) return false;\n if(!/[0-9]/.test(s)) return false;\n if(!/^[\\s$()\\-+0-9.,]+$/.test(s)) return false;\n return parseAmount(s) !== null;\n };\n\n /* ---------- work out which column is which ---------- */\n var DATE_WORDS = ['date', 'transaction date', 'processed', 'posted'];\n var DESC_WORDS = ['description', 'details', 'payee', 'particulars', 'memo', 'narrative', 'reference', 'other party', 'op name', 'merchant', 'transaction'];\n var AMT_WORDS = ['amount', 'value', 'transaction amount'];\n var DR_WORDS = ['debit', 'withdrawal', 'money out', 'paid out', 'amount (debit)'];\n var CR_WORDS = ['credit', 'deposit', 'money in', 'paid in', 'amount (credit)'];\n var BAL_WORDS = ['balance', 'running balance'];\n\n var norm = function(s){ return String(s || '').toLowerCase().replace(/[^a-z() ]/g, ' ').replace(/\\s+/g, ' ').trim(); };\n function hits(header, words){\n var h = norm(header);\n if(!h) return 0;\n var best = 0;\n words.forEach(function(w){\n if(h === w) best = Math.max(best, 3);\n else if(h.indexOf(w) >= 0) best = Math.max(best, 2);\n });\n return best;\n }\n\n /* Banks love a few lines of preamble (\"Account: 01-0495...\", blank line, THEN the headers).\n Find the row that actually looks like a header: mostly non-numeric, and followed by rows\n that parse as dates/money. */\n function findHeader(rows){\n var limit = Math.min(rows.length, 15);\n for(var i = 0; i < limit; i++){\n var r = rows[i];\n if(r.length < 3) continue;\n var wordy = r.filter(function(c){ return /[a-z]/i.test(c) && !looksLikeMoney(c) && !looksLikeDate(c); }).length;\n if(wordy < 2) continue;\n var below = rows.slice(i+1, i+6).filter(function(x){ return x.length === r.length; });\n if(!below.length) continue;\n var anyDate = below.some(function(x){ return x.some(looksLikeDate); });\n var anyMoney = below.some(function(x){ return x.some(looksLikeMoney); });\n if(anyDate && anyMoney) return i;\n }\n return -1; // no header at all -- some exports are headerless\n }\n\n function detect(rows, headerIdx){\n var header = headerIdx >= 0 ? rows[headerIdx] : [];\n var body = rows.slice(headerIdx + 1).filter(function(r){ return r.length === (header.length || r.length); });\n var cols = Math.max.apply(null, rows.map(function(r){ return r.length; }));\n var sample = body.slice(0, 40);\n\n var stats = [];\n for(var c = 0; c < cols; c++){\n var vals = sample.map(function(r){ return r[c]; }).filter(function(v){ return v != null && String(v).trim() !== ''; });\n stats.push({\n i: c,\n head: header[c] || '',\n vals: vals,\n /* How often the column is filled in at all. ANZ splits the merchant name across Details /\n Particulars / Code / Reference and leaves most of them blank -- without this, a column\n that's empty on 9 rows out of 10 can still win on the one row it does have. */\n coverage: sample.length ? vals.length / sample.length : 0,\n dateRate: vals.length ? vals.filter(looksLikeDate).length / vals.length : 0,\n moneyRate: vals.length ? vals.filter(looksLikeMoney).length / vals.length : 0,\n textRate: vals.length ? vals.filter(function(v){ return /[a-z]{3}/i.test(v) && !looksLikeDate(v); }).length / vals.length : 0,\n avgLen: vals.length ? vals.reduce(function(t, v){ return t + String(v).length; }, 0) / vals.length : 0,\n });\n }\n\n var used = {};\n function best(scorer){\n var pick = null, top = 0;\n stats.forEach(function(s){\n if(used[s.i]) return;\n var v = scorer(s);\n if(v > top){ top = v; pick = s; }\n });\n if(pick) used[pick.i] = 1;\n return pick ? pick.i : -1;\n }\n\n var date = best(function(s){ return s.dateRate * s.coverage * 10 + hits(s.head, DATE_WORDS) * 5; });\n\n // separate debit / credit columns (Kiwibank, some ASB exports)\n var drIdx = -1, crIdx = -1;\n stats.forEach(function(s){\n if(used[s.i] || s.moneyRate < 0.3) return;\n if(hits(s.head, DR_WORDS) >= 2 && drIdx < 0) drIdx = s.i;\n if(hits(s.head, CR_WORDS) >= 2 && crIdx < 0) crIdx = s.i;\n });\n var amount = -1;\n if(drIdx >= 0 || crIdx >= 0){\n used[drIdx] = 1; used[crIdx] = 1;\n } else {\n amount = best(function(s){\n if(hits(s.head, BAL_WORDS) >= 2) return 0; // never mistake balance for amount\n return s.moneyRate * s.coverage * 10 + hits(s.head, AMT_WORDS) * 6;\n });\n }\n\n /* Coverage matters most here: the column that names the merchant is the one that's filled in\n on nearly every row. A header that says \"Particulars\" but is blank 2 rows out of 3 is not\n the description, whatever it calls itself. */\n var desc = best(function(s){\n return s.textRate * s.coverage * 8\n + hits(s.head, DESC_WORDS) * 5 * (0.3 + 0.7 * s.coverage)\n + Math.min(s.avgLen, 30) / 10 * s.coverage;\n });\n\n return {\n header: header, headerIdx: headerIdx, body: body, cols: cols, stats: stats,\n map: { date: date, amount: amount, debit: drIdx, credit: crIdx, desc: desc },\n order: dateOrder((date >= 0 ? sample.map(function(r){ return r[date]; }) : [])),\n };\n }\n\n /* ---------- turn rows into inbox items ---------- */\n function build(det, map, order, accountName){\n var out = [], skipped = 0;\n det.body.forEach(function(r){\n var ts = parseDate(r[map.date], order);\n if(ts === null){ skipped++; return; }\n\n var amt = null;\n if(map.amount >= 0){\n amt = parseAmount(r[map.amount]);\n } else {\n var dr = map.debit >= 0 ? parseAmount(r[map.debit]) : null;\n var cr = map.credit >= 0 ? parseAmount(r[map.credit]) : null;\n if(dr) amt = -Math.abs(dr);\n else if(cr) amt = Math.abs(cr);\n }\n if(amt === null || amt === 0){ skipped++; return; }\n\n // stitch together anything descriptive we didn't otherwise use\n var bits = [];\n if(map.desc >= 0 && r[map.desc]) bits.push(String(r[map.desc]).trim());\n var desc = bits.join(' ').replace(/\\s+/g, ' ').trim() || 'Imported transaction';\n\n out.push({\n date: new Date(ts).toISOString(),\n amount: Math.round(amt * 100) / 100,\n description: desc,\n merchant: '',\n category: '',\n account: accountName || 'Imported',\n imported: true,\n });\n });\n return { items: out, skipped: skipped };\n }\n\n /* Stable id from the contents, so importing an overlapping statement twice can't double-count.\n Same shape as the Akahu pending ids: contents in, short string out. */\n function fingerprint(it){\n var raw = [\n String(it.date).slice(0, 10),\n Math.round(Math.abs(it.amount) * 100),\n String(it.description || '').toLowerCase().replace(/\\s+/g, ' ').trim(),\n it.amount < 0 ? 'd' : 'c',\n ].join('|');\n var a = 0x811c9dc5, b = 0x811c9dc5 ^ raw.length;\n for(var i = 0; i < raw.length; i++){ a ^= raw.charCodeAt(i); a = Math.imul(a, 0x01000193) >>> 0; }\n for(var j = raw.length - 1; j >= 0; j--){ b ^= raw.charCodeAt(j); b = Math.imul(b, 0x01000193) >>> 0; }\n return 'csv_' + a.toString(36) + b.toString(36);\n }\n\n window.CSV = {\n parseDelimited: parseDelimited,\n sniffDelim: sniffDelim,\n parseDate: parseDate,\n parseAmount: parseAmount,\n dateOrder: dateOrder,\n findHeader: findHeader,\n detect: detect,\n build: build,\n fingerprint: fingerprint,\n read: function(text){\n var d = sniffDelim(text);\n var rows = parseDelimited(text, d);\n var hi = findHeader(rows);\n var det = detect(rows, hi);\n det.delim = d;\n return det;\n },\n };\n})();\n",[272],"8a0acb59-52f8-4fb0-a1ea-3ced82679fc5","SECURITY_NOTES.md","fa055076-7e9f-11f1-8f37-1607ee4eb77e",230,["D",1783936098389],"# Stash — security & \"can we release this?\" notes\n\nWritten 13 Jul 2026. Parked, not actioned. Read before opening signups to anyone\noutside the circle of people who already trust Riley personally.\n\n---\n\n## 1. The thing Riley noticed\n\nThe operator (Riley) can read every user's financial data without their password.\n\n| What | Where | Who can read it |\n|---|---|---|\n| Budget data (pockets, txns, assets, worth) | blob `bud_`, **plaintext JSON** | anyone with the Val Town login |\n| Akahu tokens | sqlite `mb_bank`, AES-GCM **encrypted with `APP_KEY`** | anyone with the Val Town login (they own `APP_KEY`) |\n| Passwords | sqlite `mb_users`, PBKDF2-SHA256 120k iters + per-user salt | **nobody** — this bit is fine |\n\nEncrypting with a key you own is not protection *from you*. It only protects\nagainst a leaked database.\n\n## 2. The fix, if we ever want it: E2E encrypt the budget blob\n\nDesign (do NOT half-build this — losing the key means losing user data):\n\n1. On signup, generate a random 256-bit **data key** (DK).\n2. Derive `Kpw` from the user's password (PBKDF2/Argon2, **different salt+params\n from the auth hash** — never reuse the auth derivation).\n3. Derive `Krc` from their recovery code the same way.\n4. Store DK **twice**: `wrap(DK, Kpw)` and `wrap(DK, Krc)`. Server holds only\n ciphertext, never DK.\n5. Client encrypts state with DK before `POST /api/state`; decrypts after `GET`.\n6. Password change = re-wrap DK with the new `Kpw`. Recovery reset = unwrap with\n `Krc`, re-wrap with new `Kpw`. **Data survives both.**\n\n### Two honest costs\n\n- **Crons go blind.** `notify.ts` reads budget data to detect shortfall / bills\n due / inbox count. Encrypted, it can't. Those checks must move client-side\n (compute on app open, schedule a local notification) or we keep a tiny\n plaintext \"hints\" blob — which leaks a little, so decide deliberately.\n- **Bank tokens can NOT be E2E encrypted** while a server-side cron refreshes\n them. Something on the server must decrypt them to call Akahu. Either accept\n that narrower exposure, or drop background refresh and sync only when the app\n is open.\n\n## 3. Cheap fixes worth doing regardless\n\n- **No rate limiting** on `/api/login` or `/api/recover/*` → brute-forceable.\n- **Sessions never expire** (`mb_sessions` has `created` but nothing reads it).\n- **Password minimum is 6 chars**, no complexity rule.\n- Delete one-off admin/debug scripts after use (they're the read-anything hole).\n- Consider an audit log of any operator data access.\n\n---\n\n## 4. Akahu: the real wall to a public release\n\nSource: developers.akahu.nz — Personal Apps, App Accreditation, OAuth2 guides.\n\n### What we're on now\n\n**Personal App.** Akahu's stated limit: **1 user, restricted to your own Akahu\naccount.** Free. Daily scheduled refresh, 1-hour manual refresh rest period.\nRiley and Ella each have their own personal app and paste their own tokens.\n**This model cannot serve other people. There is no \"add users\" option.**\n\n### What public release requires: a Full App + Accreditation\n\nFour gates:\n\n1. **Privacy notice** covering data exchanged via Akahu.\n2. **Consumer information page** — what data, why, one-off vs ongoing, plus an\n accurate description of Akahu and their logo.\n3. **Security + penetration test** — grey-box pentest of the user-facing app and\n its APIs, by a competent firm. Real money (thousands). Only waivable if we\n hold SOC 2 / ISO 27001, which we don't.\n4. **Akahu application review** — free for the first review and the first re-check\n of fixes; **$1,000 per subsequent review**. Full apps are usage-priced, not free.\n\n### Where Stash currently FAILS their requirements\n\n- ❌ *\"Akahu credentials (App Secret and User Access Tokens) are not exposed to\n the client\"* — our entire connect flow is the user pasting a **user access\n token** into the client. This is exactly backwards. Needs the **OAuth2\n authorization-code flow**: redirect to Akahu → user picks accounts → we get a\n `code` → **server** exchanges it (within 60s) for the user token via `/token`\n with our App Secret. Must use the `state` param.\n- ❌ **Password strength** — 6 chars, no complexity. They require \"high quality\n strength requirements (minimum length & character variation)\".\n- ⚠️ **MFA** — required in general, BUT they explicitly say read-only apps may get\n relaxed requirements at their discretion (username + strong password is\n allowable). **Stash is read-only, no payments — ask them for this exemption.**\n- ⚠️ **Persistent sessions** — web sessions >2h must expire MFA status after 2h.\n Ours never expire at all.\n- ❌ **Consumer controls**, none of which we have:\n - show a summary of accounts connected via Akahu\n - let the user revoke access (`DELETE /authorisations/{id}` or `DELETE /token`)\n - revoke ALL access + delete their Akahu-derived data when they delete their\n Stash account (Privacy Act 2020: only retain data as long as reasonably needed)\n - handle the token being revoked externally — either the `TOKEN DELETE` webhook\n or by handling 401s from Akahu\n - alert the user when a connected account's `status` goes `INACTIVE`\n\n### NZ Privacy Act 2020\n\nOnce we hold strangers' financial data we're an \"agency\": need a privacy policy,\na breach-notification plan, and data deletion on revoke/account-deletion.\n\n---\n\n## 5. The three realistic paths\n\n1. **Friends-only, stay as-is.** Free, legitimate, works. Each person makes their\n own Akahu personal app and pastes tokens. Never leaves the circle of people who\n already trust Riley. Do the §3 cheap fixes anyway.\n2. **Build it properly, decide later.** Get a Full App in sandbox, build OAuth +\n consumer controls + strong auth, ask Akahu about the read-only MFA exemption.\n Only pay for the pentest if we actually commit to launching.\n3. **Public without banks.** Strangers get Stash in manual mode (no Akahu at all);\n the bank connection stays personal-app, for Riley and Ella only. Sidesteps\n accreditation entirely.\n\n**Note:** the reason Akahu demands all of the above is precisely the concern Riley\nraised unprompted. His instinct matched the regulatory bar.\n",[278],"786cd03a-4fd5-4294-b891-e2e58119c72c","BREACH_PLAN.md","019f5f53-c06b-7495-ad02-39995e39c63d",304,["D",1784010752114],"# Stash — privacy breach response plan\n\nInternal. Not served to users. Written 14 July 2026.\n\nThis exists so that the worst hour of this project is not also the hour you have to invent a\nprocess. Read it now, while nothing is on fire. The whole thing takes ten minutes.\n\n**Who runs this:** Riley. There is nobody else. That is a real weakness — see §7.\n\n---\n\n## 1. What a breach actually looks like here\n\nA privacy breach under the Privacy Act 2020 is unauthorised access to, disclosure of, alteration\nof, or **loss of** personal information. Loss counts. The data-loss incident on 13 July 2026 — where\na bad deploy overwrote a live account with junk — was, technically, a privacy breach affecting one\nperson who happened to be the operator.\n\nRealistic scenarios, roughly in order of likelihood:\n\n| # | Scenario | Is user data exposed? |\n|---|---|---|\n| 1 | A deploy bug destroys or corrupts user data | No, but data is **lost** — still a breach |\n| 2 | Val Town account compromised (password/token stolen) | See §2 — this is the bad one |\n| 3 | The SQLite database or blobs leak | Budget data is **ciphertext**. Usernames, hints, waitlist emails are not |\n| 4 | An access-control bug serves user A's blob to user B | Ciphertext, so B cannot read it — but it is still unauthorised disclosure |\n| 5 | A user's own password is guessed | Their data is exposed, to whoever guessed it |\n| 6 | Akahu tokens leak (only if Pro ever ships) | Yes, and badly. Bank transaction access |\n\n## 2. The one that matters: Val Town account compromise\n\nEncryption means a stolen *database* is close to harmless. It does **not** mean a stolen *account*\nis harmless, because whoever holds the Val Town login can **change the JavaScript that Stash serves**\nand capture passwords and plaintext from the next person who logs in.\n\nSo: **the Val Town login is the crown jewel, not the database.** Protect it accordingly —\nstrong unique password, 2FA on, and never paste the API token anywhere.\n\nIf you ever suspect it is compromised, that is a **live, ongoing** breach, not a historical one.\nTake the app offline first and ask questions second. Every minute it is up, it is harvesting.\n\n## 3. What to do, in order\n\n**Contain (minutes, not hours).**\n1. If the server may be serving malicious code: **take Stash offline.** A blank page beats a\n compromised one. Do this before investigating.\n2. Rotate: Val Town password + 2FA, `APP_KEY`, VAPID keys, Akahu tokens.\n3. Invalidate every session: `DELETE FROM mb_sessions`. Everyone gets logged out. Fine.\n4. Do **not** delete logs, blobs or backups. You will need them, and destroying evidence of a\n breach is its own problem.\n\n**Assess (same day).**\n5. What was taken or lost, whose, and when. Write it down as you go — memory is unreliable and you\n will be stressed.\n6. Ask the s.113 question honestly: **is serious harm likely?** Consider the sensitivity (this is\n financial data — treat it as sensitive), whether it was protected (encrypted budget = a strong\n mitigating factor; usernames, hints and waitlist emails = not protected), who has it, and whether\n it can still be misused. Do not talk yourself out of it because notifying is embarrassing.\n\n**Notify (as soon as practicable; target within 72 hours of deciding it is notifiable).**\n7. **Office of the Privacy Commissioner** via NotifyUs — \n You can notify while still investigating. Do not sit on it waiting for a complete picture.\n8. **Affected people.** See §4 — this is the gap.\n9. If Akahu is involved: tell Akahu immediately. It is their accreditation on the line too.\n\n**Fix and learn.**\n10. Patch the cause. Then write the postmortem into `SECURITY_NOTES.md`, including what let it\n happen. The gravestone comments in `index.html` exist for exactly this reason and they work.\n\n## 4. The hole: there is no way to email users\n\n**Stash does not collect email addresses.** That is good for privacy and bad for exactly one thing —\nthe Privacy Act obligation to notify affected individuals directly. Right now the only channels are:\n\n- a banner inside the app (only reaches people who open it),\n- a push notification (only people who turned them on),\n- a public notice on the site (s.116 allows public notice where individual notice is not reasonably\n practicable — this is the fallback, and it is a fallback, not a plan).\n\n**Recommendation:** add an *optional* email field at signup, used only for security notices. Say so\nplainly at the point of asking. It is a small privacy cost for a real ability to warn people that\ntheir money data is at risk. Until that exists, this plan cannot fully meet the notification duty,\nand the privacy policy says so honestly rather than pretending otherwise.\n\n## 5. Numbers to have to hand\n\n- Office of the Privacy Commissioner — 0800 803 909 — privacy.org.nz\n- NotifyUs (self-assessment + notification tool) — privacy.org.nz/responsibilities/privacy-breaches/notify-us/\n- Val Town support — for hosting-side incidents\n- Akahu support — only relevant if a bank feed is ever live\n- CERT NZ () — worth reporting an attack to, separate from the Privacy\n Commissioner\n\n## 6. What is already in place\n\n- Budget data is end-to-end encrypted; the server cannot read it, so a database leak is far less severe.\n- Nightly verified backups, 14-day retention, plus a permanently protected best-known copy, so\n scenario 1 is recoverable.\n- A shrink guard on `/api/state` that refuses a write which would collapse an account, plus rolling\n version history.\n- Rate limiting on login, signup and recovery.\n- Account deletion purges backups too, so \"delete\" means deleted.\n\n## 7. The honest weaknesses\n\n- **One person.** If Riley is asleep, on a plane, or ill, nothing in §3 happens. There is no\n on-call, no second pair of eyes, and no one to notice a breach at 2am.\n- **No monitoring or alerting.** Nothing would tell you a breach was under way. The backup job's\n size-drop alert is the only automated warning of anything, and it only catches data *loss*.\n- **No email channel to users** (§4).\n- **The operator serves the JavaScript.** This is the ceiling on the encryption and it cannot be\n fixed by policy. It is disclosed in the privacy policy rather than hidden.\n\nNone of these are reasons not to launch a free tool to a handful of people. All of them are reasons\nnot to hold strangers' bank credentials — which is exactly why the bank feed is off.\n",[285],"pulls","branches","forks","envVars",{"_298":300,"_301":77},"connections",{"_298":77,"_299":77},"count","unfilledCount",5,"emptyCount",{"_59":284,"_34":285,"_32":286,"_177":-5,"_42":43,"_41":287,"_179":144,"_39":372,"_13":77,"_35":22,"_37":289,"_26":27,"_182":-5,"_321":373,"_29":374},{"_59":277,"_34":278,"_32":279,"_177":-5,"_42":43,"_41":280,"_179":144,"_39":369,"_13":77,"_35":22,"_37":282,"_26":27,"_182":-5,"_321":370,"_29":371},{"_59":271,"_34":272,"_32":273,"_177":-5,"_42":43,"_41":198,"_179":144,"_39":366,"_13":77,"_35":36,"_37":275,"_26":27,"_182":-5,"_321":367,"_29":368},{"_59":265,"_34":266,"_32":267,"_177":-5,"_42":43,"_41":198,"_179":144,"_39":363,"_13":77,"_35":36,"_37":269,"_26":27,"_182":-5,"_321":364,"_29":365},{"_59":258,"_34":259,"_32":260,"_177":-5,"_42":43,"_41":261,"_179":144,"_39":360,"_13":77,"_35":36,"_37":263,"_26":27,"_182":-5,"_321":361,"_29":362},{"_59":251,"_34":252,"_32":253,"_177":-5,"_42":43,"_41":254,"_179":144,"_39":357,"_13":77,"_35":36,"_37":256,"_26":27,"_182":-5,"_321":358,"_29":359},{"_59":245,"_34":246,"_32":247,"_177":-5,"_42":43,"_41":212,"_179":144,"_39":354,"_13":77,"_35":22,"_37":249,"_26":27,"_182":-5,"_321":355,"_29":356},{"_59":239,"_34":240,"_32":241,"_177":-5,"_42":43,"_41":212,"_179":144,"_39":351,"_13":77,"_35":22,"_37":243,"_26":27,"_182":-5,"_321":352,"_29":353},{"_59":235,"_34":54,"_32":55,"_177":-5,"_42":43,"_41":14,"_179":27,"_39":348,"_13":237,"_35":22,"_37":57,"_26":27,"_182":-5,"_321":349,"_29":350},{"_59":228,"_34":229,"_32":230,"_177":-5,"_42":43,"_41":231,"_179":144,"_39":345,"_13":220,"_35":36,"_37":233,"_26":27,"_182":-5,"_321":346,"_29":347},{"_59":223,"_34":46,"_32":47,"_177":-5,"_42":43,"_41":14,"_179":27,"_39":342,"_13":225,"_35":48,"_37":50,"_26":27,"_182":226,"_321":343,"_29":344},{"_59":215,"_34":216,"_32":217,"_177":-5,"_42":43,"_41":218,"_179":144,"_39":339,"_13":220,"_35":36,"_37":221,"_26":27,"_182":-5,"_321":340,"_29":341},{"_59":208,"_34":209,"_32":210,"_177":-5,"_42":43,"_41":178,"_179":144,"_39":336,"_13":212,"_35":36,"_37":213,"_26":27,"_182":-5,"_321":337,"_29":338},{"_59":202,"_34":203,"_32":204,"_177":-5,"_42":43,"_41":198,"_179":144,"_39":333,"_13":77,"_35":36,"_37":206,"_26":27,"_182":-5,"_321":334,"_29":335},{"_59":195,"_34":196,"_32":197,"_177":-5,"_42":43,"_41":198,"_179":144,"_39":330,"_13":77,"_35":36,"_37":200,"_26":27,"_182":-5,"_321":331,"_29":332},{"_59":188,"_34":189,"_32":190,"_177":-5,"_42":43,"_41":191,"_179":144,"_39":327,"_13":77,"_35":36,"_37":193,"_26":27,"_182":-5,"_321":328,"_29":329},{"_59":184,"_34":30,"_32":33,"_177":-5,"_42":43,"_41":14,"_179":144,"_39":324,"_13":186,"_35":36,"_37":38,"_26":27,"_182":-5,"_321":325,"_29":326},{"_59":174,"_34":175,"_32":176,"_177":-5,"_42":43,"_41":178,"_179":144,"_39":320,"_13":77,"_35":36,"_37":181,"_26":27,"_182":-5,"_321":322,"_29":323},["D",1784018421002],"children",[],[175],["D",1784025010929],[],[30],["D",1783923481610],[],[189],["D",1783992377175],[],[196],["D",1783992377175],[],[203],["D",1784018421002],[],[209],["D",1784024163073],[],[216],["D",1784025010929],[],[46],["D",1784015571639],[],[229],["D",1784025010929],[],[54],["D",1783660915335],[],[240],["D",1783660915335],[],[246],["D",1784011724373],[],[252],["D",1783943238986],[],[259],["D",1783992377175],[],[266],["D",1783992377175],[],[272],["D",1783936098389],[],[278],["D",1784010752114],[],[285],["D",1783644524287],["D",1789525245864],{"_116":115,"_124":120},{"_116":115,"_117":118,"_119":120,"_18":71,"_121":122,"_123":27},{"_13":103,"_34":104,"_59":43,"_105":60,"_106":107,"_108":109,"_110":66,"_111":60,"_112":79,"_113":61,"_114":115},"ctx",{"_96":-5,"_146":413,"_414":415,"_416":417,"_418":27,"_419":27,"_420":27,"_421":144,"_422":-5,"_423":-7,"_424":-7,"_425":77,"_426":27,"_427":27,"_428":-5,"_429":27,"_430":27,"_431":27,"_432":-5},"ENV",{"_384":385,"_386":387,"_388":152,"_389":390,"_391":392,"_393":394,"_395":396,"_397":398,"_399":400,"_401":402,"_403":404,"_405":406,"_407":408,"_409":410,"_411":412},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v350