${message}

\n \n `,\n 403,\n );\n }\n\n c.set(\"viewer\", { username: viewer.username });\n return next();\n});\n\napp.get(\"/\", (c) => c.html(Root()));\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\n/** Everything the dashboard needs, in one round trip. */\napp.get(\"/api/state\", async (c) => {\n await ensureSchema();\n const views = await listViews(true);\n const live = views.filter((s) => isLive(s.status));\n const [sum, fc, hist, sav, review, cats, base] = await Promise.all([\n summary(views),\n forecast(12, live),\n history(12),\n savings(),\n listReviewItems(\"open\"),\n byCategory(live),\n baseCurrency(),\n ]);\n const viewer = c.get(\"viewer\");\n return c.json({\n baseCurrency: base,\n period: currentPeriod(),\n llmConfigured: isConfigured(),\n viewer: viewer ? { username: viewer.username } : null,\n summary: sum,\n subscriptions: views,\n forecast: fc,\n history: hist,\n savings: sav,\n review,\n categories: cats,\n });\n});\n\napp.get(\"/api/subscriptions/:id\", async (c) => {\n const id = Number(c.req.param(\"id\"));\n const sub = await getSubscription(id);\n if (!sub) return c.json({ error: \"not found\" }, 404);\n const [charges, ratings] = await Promise.all([chargesFor(id), ratingsFor(id)]);\n return c.json({ subscription: sub, charges, ratings });\n});\n\napp.post(\"/api/subscriptions\", async (c) => {\n const body = await c.req.json();\n const parsed = parseSubscriptionBody(body);\n if (\"error\" in parsed) return c.json(parsed, 400);\n const id = await createSubscription(parsed.value);\n return c.json({ id }, 201);\n});\n\napp.patch(\"/api/subscriptions/:id\", async (c) => {\n const id = Number(c.req.param(\"id\"));\n const body = await c.req.json() as Record;\n const patch: Record = {};\n\n if (body.amount != null) patch.amountMinor = toMinor(Number(body.amount));\n if (body.amountMinor != null) patch.amountMinor = Math.round(Number(body.amountMinor));\n for (const key of [\"planName\", \"startedOn\", \"nextChargeOn\", \"paymentMethod\", \"notes\", \"status\"]) {\n if (key in body) patch[key] = body[key];\n }\n if (body.currency && CURRENCIES.includes(String(body.currency) as Currency)) patch.currency = body.currency;\n if (body.billingCycle === \"monthly\" || body.billingCycle === \"yearly\") patch.billingCycle = body.billingCycle;\n if (\"autoRenew\" in body) patch.autoRenew = Boolean(body.autoRenew);\n\n await updateSubscription(id, patch);\n\n // Category is a property of the service behind this subscription, so it is set\n // separately rather than through the subscription patch.\n if (\"category\" in body) {\n const category = String(body.category ?? \"\").trim();\n await setCategory(id, category === \"\" ? null : category);\n }\n return c.json({ ok: true });\n});\n\napp.post(\"/api/subscriptions/:id/cancel\", async (c) => {\n const id = Number(c.req.param(\"id\"));\n const body = await c.req.json().catch(() => ({})) as { reason?: string; on?: string };\n await cancelSubscription(id, { reason: body.reason, on: body.on });\n await closeItemsFor(id);\n return c.json({ ok: true });\n});\n\napp.post(\"/api/subscriptions/:id/reactivate\", async (c) => {\n const id = Number(c.req.param(\"id\"));\n const body = await c.req.json().catch(() => ({})) as { nextChargeOn?: string };\n await reactivateSubscription(id, body.nextChargeOn);\n return c.json({ ok: true });\n});\n\napp.delete(\"/api/subscriptions/:id\", async (c) => {\n await deleteSubscription(Number(c.req.param(\"id\")));\n return c.json({ ok: true });\n});\n\napp.post(\"/api/subscriptions/:id/ratings\", async (c) => {\n const id = Number(c.req.param(\"id\"));\n const body = await c.req.json() as { quality?: number; usage?: number; period?: string; note?: string };\n const quality = Number(body.quality);\n const usage = Number(body.usage);\n if (!Number.isFinite(quality) || !Number.isFinite(usage)) {\n return c.json({ error: \"quality and usage are required, 1 to 5\" }, 400);\n }\n await saveRating(id, body.period ?? currentPeriod(), quality, usage, body.note ?? null);\n await closeItemsFor(id, [\"rating_due\"]);\n return c.json({ ok: true });\n});\n\napp.post(\"/api/review/:id/:action\", async (c) => {\n const id = Number(c.req.param(\"id\"));\n const action = c.req.param(\"action\");\n if (action !== \"done\" && action !== \"dismissed\") return c.json({ error: \"unknown action\" }, 400);\n await resolveReviewItem(id, action);\n return c.json({ ok: true });\n});\n\n/** Rebuild the decision inbox on demand — the same routine the daily cron runs. */\napp.post(\"/api/review/refresh\", async (c) => {\n const created = await generateReviewItems();\n return c.json({ created: created.length, items: created });\n});\n\n/**\n * Paste an email here to see exactly what the inbound handler would do with it,\n * without having to send real mail. Writes for real, so it is the fastest way to\n * check extraction against a receipt you actually received.\n */\napp.post(\"/api/email/simulate\", async (c) => {\n const body = await c.req.json() as {\n from?: string;\n subject?: string;\n text?: string;\n html?: string;\n messageId?: string;\n };\n if (!body.text && !body.html) return c.json({ error: \"text or html is required\" }, 400);\n const result = await handleInbound({\n from: body.from ?? \"test@example.com\",\n subject: body.subject ?? null,\n text: body.text ?? null,\n html: body.html ?? null,\n messageId: body.messageId ?? null,\n });\n return c.json(result);\n});\n\n// Full stack traces in the val logs rather than a swallowed 500.\napp.onError((err) => Promise.reject(err));\n\nfunction parseSubscriptionBody(body: Record):\n | { value: Parameters[0] }\n | { error: string }\n{\n const serviceName = String(body.serviceName ?? \"\").trim();\n if (!serviceName) return { error: \"serviceName is required\" };\n\n const amountMinor = body.amountMinor != null\n ? Math.round(Number(body.amountMinor))\n : toMinor(Number(body.amount));\n if (!Number.isFinite(amountMinor) || amountMinor <= 0) return { error: \"amount must be a positive number\" };\n\n const currency = String(body.currency ?? \"PLN\").toUpperCase() as Currency;\n if (!CURRENCIES.includes(currency)) return { error: `currency must be one of ${CURRENCIES.join(\", \")}` };\n\n const billingCycle = body.billingCycle === \"yearly\" ? \"yearly\" : \"monthly\" as BillingCycle;\n\n return {\n value: {\n serviceName,\n planName: body.planName ? String(body.planName) : null,\n amountMinor,\n currency,\n billingCycle,\n startedOn: body.startedOn ? String(body.startedOn) : null,\n nextChargeOn: body.nextChargeOn ? String(body.nextChargeOn) : null,\n category: body.category ? String(body.category) : null,\n paymentMethod: body.paymentMethod ? String(body.paymentMethod) : null,\n notes: body.notes ? String(body.notes) : null,\n source: \"manual\",\n },\n };\n}\n\nexport default oauthMiddleware(app.fetch);\n","children",[],[287],"9f1cdf07-a042-4605-a44b-92034e0bd27c","email.ts","01a05e91-3c61-747c-96e4-e2c7a9706763",["D",1788303294625],2,"email","/**\n * Email entry point — forward receipts here, or ask questions.\n *\n * Val Town assigns this file its own address; read it from `links.email` on the\n * file listing rather than guessing the format. Forwarding a confirmation with no\n * comment of your own tracks it; adding a line asks a question or runs a command.\n */\nimport { email } from \"https://esm.town/v/std/email\";\nimport { handleInbound } from \"./backend/email/handle.ts\";\nimport { isAllowedSender } from \"./backend/email/senders.ts\";\nimport { replyToFor } from \"./backend/links.ts\";\n\n/** Shape Val Town delivers. Declared locally so the file type-checks anywhere. */\ninterface InboundEmail {\n from: string;\n to: string[];\n subject?: string;\n text?: string;\n html?: string;\n attachments: File[];\n headers: Record;\n}\n\nexport default async function (e: InboundEmail) {\n // The address is public and guessable, and this assistant will answer questions\n // about the owner's spending — so check the sender before doing anything at all.\n // Rejected mail is dropped silently: replying would confirm the address is live\n // and let anyone use the val to bounce mail at a forged sender.\n const sender = isAllowedSender(e.from);\n if (!sender.allowed) {\n console.warn(`Ignored inbound email from ${e.from}: ${sender.reason}`, {\n subject: e.subject ?? null,\n });\n return;\n }\n\n const messageId = headerOf(e.headers, \"message-id\");\n\n let result;\n try {\n result = await handleInbound({\n from: e.from,\n subject: e.subject ?? null,\n text: e.text ?? null,\n html: e.html ?? null,\n messageId,\n });\n } catch (err) {\n // A failure still gets a reply — silence would look like the address is dead.\n console.error(\"inbound email failed:\", err);\n await email({\n to: e.from,\n replyTo: replyToFor(e.to),\n subject: `Re: ${e.subject ?? \"your subscriptions\"}`,\n text: `Something went wrong handling that email:\\n\\n${err instanceof Error ? err.message : String(err)}`,\n });\n throw err;\n }\n\n if (!result.replied || !result.body) {\n console.log(\"no reply sent (duplicate or empty)\", { from: e.from, subject: e.subject });\n return;\n }\n\n // Reply-To points back at this val, so replying to the answer is itself a command.\n await email({ to: e.from, replyTo: replyToFor(e.to), subject: result.subject, text: result.body });\n}\n\nfunction headerOf(headers: Record, name: string): string | null {\n const wanted = name.toLowerCase();\n for (const [key, value] of Object.entries(headers ?? {})) {\n if (key.toLowerCase() === wanted) return value;\n }\n return null;\n}\n",[],[296],"2a3e26e2-2b2c-4e8b-b2ec-4425670771af","cron.ts","01a05e91-3c61-747c-96e4-dfb00d40a542",["D",1788303294625],"interval","/**\n * Daily maintenance and the digest email.\n *\n * Runs at 06:00 UTC — 07:00 or 08:00 in Warsaw depending on the season. Cron on\n * Val Town is UTC only and does not follow daylight saving, so a fixed early-morning\n * UTC time is the right compromise for a once-a-day digest.\n *\n * The digest stays quiet on purpose. A mail every morning saying \"nothing changed\"\n * gets filtered within a week, and then the one that matters gets filtered with it.\n */\nimport { email } from \"https://esm.town/v/std/email\";\nimport { refreshRates } from \"./backend/fx.ts\";\nimport { baseCurrency } from \"./backend/fx.ts\";\nimport { listViews } from \"./backend/subscriptions.ts\";\nimport { summary, upcoming } from \"./backend/analytics.ts\";\nimport { generateReviewItems, listReviewItems } from \"./backend/review.ts\";\nimport { formatReview, formatSummary, formatUpcoming } from \"./backend/email/reply.ts\";\nimport { today } from \"./shared/money.ts\";\nimport { primeLinks, replyToFor } from \"./backend/links.ts\";\nimport { isLive } from \"./shared/types.ts\";\n\ninterface Interval {\n lastRunAt?: Date;\n}\n\n/** Charges inside this window go in the digest. */\nconst LOOKAHEAD_DAYS = 7;\n\n/**\n * Where the digest goes.\n *\n * A val owned by an organisation has no single \"owner\" for std/email to fall back\n * to, so the recipient has to be named explicitly — an org-owned val that omits\n * `to` fails at send time rather than at deploy time.\n */\nfunction digestRecipient(): string | null {\n return Deno.env.get(\"DIGEST_EMAIL\")?.trim() || null;\n}\n\nexport default async function (_interval: Interval) {\n await primeLinks();\n\n try {\n await refreshRates();\n } catch (err) {\n console.error(\"fx refresh failed, continuing with cached rates:\", err);\n }\n\n const created = await generateReviewItems();\n const [views, base] = await Promise.all([listViews(true), baseCurrency()]);\n const live = views.filter((s) => isLive(s.status));\n const soon = await upcoming(LOOKAHEAD_DAYS, live);\n const open = await listReviewItems(\"open\");\n\n const isFirstOfMonth = today().endsWith(\"-01\");\n const worthSending = created.length > 0 || soon.length > 0 || isFirstOfMonth;\n\n console.log(\"daily run\", {\n newItems: created.length,\n dueSoon: soon.length,\n openItems: open.length,\n sending: worthSending,\n });\n\n if (!worthSending) return;\n\n const to = digestRecipient();\n if (!to) {\n console.error(\"DIGEST_EMAIL is not set — nothing to send the digest to. Skipping.\");\n return;\n }\n\n const sections: string[] = [];\n\n if (created.length > 0) {\n sections.push(`New since yesterday\\n${\"-\".repeat(52)}\\n${created.map((i) => `• ${i.title}`).join(\"\\n\")}`);\n }\n if (soon.length > 0) {\n sections.push(formatUpcoming(soon, base, LOOKAHEAD_DAYS));\n }\n if (open.length > 0) {\n sections.push(formatReview(open));\n }\n if (isFirstOfMonth) {\n sections.push(formatSummary(await summary(views)));\n }\n\n await email({\n to,\n // So a reply to the digest — \"cancel Netflix\" — reaches the inbound handler.\n replyTo: replyToFor(),\n subject: subjectFor(created.length, soon.length, isFirstOfMonth),\n text: sections.join(`\\n\\n${\"=\".repeat(52)}\\n\\n`),\n });\n}\n\nfunction subjectFor(newItems: number, dueSoon: number, monthStart: boolean): string {\n if (monthStart) return \"Subscriptions — new month, time to rate\";\n if (dueSoon > 0) return `Subscriptions — ${dueSoon} charge${dueSoon === 1 ? \"\" : \"s\"} coming up`;\n return `Subscriptions — ${newItems} thing${newItems === 1 ? \"\" : \"s\"} to decide`;\n}\n",[],[305],"2dddc377-c870-4644-aa7a-4a819a915310","README.md","01a05e91-3c61-747c-96e4-db61a2b339ab",10,["D",1788295013395],"# Subscription tracker — feedback instance\n\nThis is a **separate copy** of `xdv/subscriptions`, remixed so a second person can\ntry the tracker without sharing data. The app has no multi-tenancy: one val is one\nperson's subscriptions. The two instances share code and nothing else — separate\ndatabases, separate email addresses, separate dashboards. Verified: a row written\nhere is not visible in the original.\n\nKeep them in sync by re-applying code changes to both, or by remixing again.\n\n## Before it works — what to set\n\nEnvironment variables live under **Settings → Environment variables** on this val.\n\n| Variable | Status | Value |\n|---|---|---|\n| `ANTHROPIC_API_KEY` | **set** | A key dedicated to this instance. Verified working: it extracts subscriptions from forwarded receipts and answers emailed questions. |\n| `ALLOWED_USERS` | **needed** | The colleague's Val Town handle. Without it they get a 403. Alternative: add them to the `xdv` org, which the gate also accepts. |\n| `DIGEST_EMAIL` | optional | **The colleague's own address**, so their digest goes to them and not to the owner of the other instance. While empty the cron runs and skips sending. |\n| `BASE_CURRENCY` | optional | Defaults to `PLN`. `USD` and `EUR` also supported. |\n| `APP_URL` | not needed | The val resolves its own endpoint at runtime, so email links work without it. Override only for a custom domain. |\n\n## This instance\n\n- Dashboard: https://xdv--01a05e913c61747c96e4e7f8845199ec.web.val.run\n- Forward receipts to: `xdv-01a05e913c61747c96e4e2c7a9706763@valtown.email`\n- Daily digest: 06:00 UTC, and only when there is something to say\n\n---\n\n\nA Val Town app for deciding, month by month, whether each subscription is still\nworth paying for. Three parts: a schema that keeps enough history to answer\n\"what did cancelling save me\", an email assistant you forward receipts to, and a\ndashboard.\n\n## What it answers\n\n| Question | Where |\n|---|---|\n| What do my subscriptions cost me a month? | Run rate — every yearly plan divided by twelve |\n| What leaves my account in March? | 12-month calendar forecast, yearly renewals marked separately |\n| Which ones should I drop? | Two grades a month (quality, usage) → a keep/watch/cancel verdict |\n| What has cancelling saved me? | Monthly equivalent of each cancelled plan, counted from the day it stopped |\n| What do I need to decide right now? | The decision inbox — renewals you can still stop, ratings due, cancel candidates |\n\nRun rate and the calendar forecast are deliberately separate numbers. Averaging a\nyearly plan into a monthly figure makes it comparable; it also hides the month the\nmoney actually leaves, which is the surprise worth avoiding.\n\n## Files\n\n```\nindex.ts HTTP: the dashboard and its JSON API (fileType: http)\nemail.ts inbound mail: forward receipts here (fileType: email)\ncron.ts daily: FX, decision inbox, digest (fileType: interval, 0 6 * * *)\n\nshared/ types, money and date maths, verdicts, forecasting — pure, runs on both sides\nbackend/ db schema, FX, queries, analytics, review inbox, LLM, email handling\nfrontend/ the React dashboard (no build step; Val Town transpiles per request)\ntests/ the pure logic, run with `deno test --allow-import tests/`\n```\n\n## The schema\n\n`services` — the vendor. `subscriptions` — one billing arrangement for a service;\na service can own several over time as plans and prices change, but only one is\nlive. `charges` — payments that really happened. Nothing in the future is stored:\nit is projected from `next_charge_on`, so a price change never leaves stale rows\nbehind.\n\n```\nservices id, name, name_key(unique), vendor_domain, category, notes\nsubscriptions id, service_id, plan_name, amount_minor, currency, billing_cycle,\n started_on, next_charge_on, status, cancelled_on, cancel_reason,\n payment_method, auto_renew, source, notes\ncharges id, subscription_id, charged_on, amount_minor, currency,\n base_minor, fx_rate, source, inbound_email_id\nratings id, subscription_id, period(YYYY-MM), quality 1-5, usage 1-5, note\n unique(subscription_id, period)\nreview_items id, subscription_id, kind, status, title, detail, due_on, dedupe_key\ninbound_emails id, message_id(unique), from_addr, subject, body, intent, handled, result\nfx_rates quote, base, rate, as_of\nsettings key, value\n```\n\nMoney is stored as **integer minor units** (grosze, cents) in the currency it is\nactually billed in — never a float, never pre-converted. Conversion to your base\ncurrency happens at read time, except on `charges`, which pin the rate that applied\non the day so history is not re-priced when the zloty moves.\n\n`status` is `active | trial | paused | cancelled`. Cancelling keeps the row: the\nprice and the stop date are exactly what the savings figure is computed from.\n\n## The verdict\n\nEach month, two grades out of five: **quality** (how good is it) and **usage** (how\noften do you reach for it). They are combined with a harmonic mean, which collapses\ntoward whichever is worse — 5 and 1 give 1.7, not 3. A brilliant tool you opened\ntwice is still money leaving.\n\nRatings are recency-weighted over six months (each month back counts 0.75 of the\none after it), so one quiet month nudges the score without flipping it. Bands:\n`>= 3.5` keep, `>= 2.5` watch, below that a cancel candidate. A *watch* that costs\nmore than your median subscription is promoted to a cancel candidate — an\nabove-median price only has to be middling to deserve a decision.\n\n## The email assistant\n\nForward mail to the address Val Town assigns `email.ts` (read it from `links.email`\non the file listing — never construct it).\n\n- **Forward a receipt with nothing on top** → it is extracted and tracked, and a\n *confirm* item appears in the decision inbox. Nothing is ever written silently.\n- **Forward it with a question on top** → both: the charge is recorded *and* the\n question is answered from your data.\n- **Send a command** as the first line:\n\n```\nlist active subscriptions and run rate\nforecast [months] calendar forecast, yearly renewals marked\nupcoming [days] what is due soon\nsavings what cancelling has saved you\nreview the decisions waiting on you\nrate 4 2 quality 4, usage 2, for this month\ncancel [because …]\nkeep clear its open decisions\nadd 49.99 PLN monthly\nhelp\n```\n\nAnything else is treated as a question and answered by the model from your\nsubscription data.\n\nExtraction uses a strict tool rather than a forced one: a receipt the model cannot\nread comes back as \"no result\" instead of a confidently wrong row. Without an API\nkey the app still works — receipts fall back to a text scan that takes the largest\nmoney amount, and commands are unaffected.\n\n## Environment variables\n\n| Variable | Required | What it does |\n|---|---|---|\n| `ANTHROPIC_API_KEY` | for the assistant | Receipt extraction and email Q&A. Without it, commands and the heuristic scan still work. |\n| `APP_URL` | no | Overrides the dashboard link in emails. Leave unset — the val asks the platform for its own endpoint, so a remixed copy links to itself with no setup. Set it only for a custom domain or a proxy. |\n| `BASE_CURRENCY` | no | `PLN` (default), `USD` or `EUR`. Everything rolls up into this. |\n| `ALLOWED_USERS` | no | Extra Val Town handles allowed in, comma-separated. Members of the owning org always get in. |\n\nFX rates come from Frankfurter (ECB reference rates, no key), cached daily, falling\nback to the last cached value.\n\n## Who can see it\n\nThe dashboard is spending data, so the endpoint is not open. Val Town's\nplatform-level restricted access needs a paid business org, so the gate lives in\nthe val instead: `std/oauth` wraps the whole app, and a visitor gets through only\nif they are signed in to Val Town **and** belong to the org that owns this val.\nAnyone else gets a 401 (API) or a 403 page (browser) — never the data. Add\nindividual handles with `ALLOWED_USERS` if someone outside the org needs in.\n\nIf this val ever moves to a business-tier org, `set_http_privacy: restricted` is\nthe better mechanism — it gates at the platform edge, before any code runs — and\nthe `oauthMiddleware` wrapper should come off at the same time so nobody has to\nauthenticate twice.\n\n## Deploying\n\nThe val needs three file types: `index.ts` as `http`, `email.ts` as `email`,\n`cron.ts` as `interval` with `0 6 * * *` (UTC — that is 07:00 or 08:00 Warsaw\ndepending on the season; cron does not follow daylight saving).\n\nNo post-deploy URL configuration is needed: `backend/links.ts` resolves this val's\nown endpoint at runtime via `httpEndpoint()` from `std/utils`, so a fresh remix\nlinks to itself. `APP_URL` remains available as an override.\n\n## Not built yet\n\nGoogle Calendar entries for upcoming renewals, and bank feeds via bkpr to\nreconcile charges against what actually left the account.\n",[],[313],["D",1788292971385],[],[18,79],["D",1788292971385],[],[18,89],["D",1788292971385],[],[18,95],["D",1788292971385],[],[18,101],["D",1788292971385],[],[18,106],["D",1788292971385],[277,278,279,280,281],[18],"b591eefb-0ab4-4bd1-a770-611f4fab49d6","types.ts","01a05e91-3c61-747c-96e4-bbe529acd174","01a05e91-3c61-747c-96e4-bc414149ff8a",["D",1788302892448],"/** Shared types used by both the backend and the browser bundle. */\n\nexport type Currency = \"PLN\" | \"USD\" | \"EUR\";\nexport const CURRENCIES: Currency[] = [\"PLN\", \"USD\", \"EUR\"];\n\nexport type BillingCycle = \"monthly\" | \"yearly\";\nexport const BILLING_CYCLES: BillingCycle[] = [\"monthly\", \"yearly\"];\n\nexport type SubscriptionStatus = \"active\" | \"trial\" | \"paused\" | \"cancelled\";\n\n/** Statuses that still cost money and still get forecast, rated and reminded about. */\nexport const LIVE_STATUSES: SubscriptionStatus[] = [\"active\", \"trial\"];\n\nexport function isLive(status: SubscriptionStatus): boolean {\n return status === \"active\" || status === \"trial\";\n}\n\nexport interface Service {\n id: number;\n name: string;\n /** Sender domain of confirmation mail, used to match forwarded email to a service. */\n vendorDomain: string | null;\n category: string | null;\n notes: string | null;\n createdAt: string;\n}\n\nexport interface Subscription {\n id: number;\n serviceId: number;\n serviceName: string;\n category: string | null;\n planName: string | null;\n /** Native amount in minor units (grosze / cents). Never a float. */\n amountMinor: number;\n currency: Currency;\n billingCycle: BillingCycle;\n startedOn: string | null;\n /** ISO date of the next expected charge. Drives forecasts and reminders. */\n nextChargeOn: string | null;\n status: SubscriptionStatus;\n cancelledOn: string | null;\n cancelReason: string | null;\n paymentMethod: string | null;\n autoRenew: boolean;\n /** Where the row came from: typed in by hand, or extracted from a forwarded email. */\n source: \"manual\" | \"email\";\n notes: string | null;\n createdAt: string;\n updatedAt: string;\n}\n\n/** A real payment that happened, as opposed to a projected one. */\nexport interface Charge {\n id: number;\n subscriptionId: number;\n chargedOn: string;\n amountMinor: number;\n currency: Currency;\n /** Value in base currency at the time of the charge, so history is not re-rated by later FX moves. */\n baseMinor: number;\n fxRate: number;\n source: \"manual\" | \"email\" | \"projected\";\n /** Order / invoice / transaction number from the receipt, when it had one. */\n orderRef: string | null;\n inboundEmailId: number | null;\n createdAt: string;\n}\n\n/** One month's worth of \"how good is this, really\". */\nexport interface Rating {\n id: number;\n subscriptionId: number;\n /** YYYY-MM */\n period: string;\n /** 1..5 — how happy am I with the quality of the service. */\n quality: number;\n /** 1..5 — how often do I actually use it. */\n usage: number;\n note: string | null;\n createdAt: string;\n}\n\nexport type ReviewKind =\n | \"confirm_new\"\n | \"renewal_soon\"\n | \"yearly_upcoming\"\n | \"rating_due\"\n | \"cancel_candidate\";\n\nexport type ReviewStatus = \"open\" | \"done\" | \"dismissed\";\n\n/** The actionable inbox: the thing that stops a \"I meant to cancel that\" from evaporating. */\nexport interface ReviewItem {\n id: number;\n subscriptionId: number | null;\n kind: ReviewKind;\n status: ReviewStatus;\n title: string;\n detail: string | null;\n dueOn: string | null;\n createdAt: string;\n resolvedAt: string | null;\n}\n\nexport type EmailIntent = \"ingest\" | \"question\" | \"command\" | \"unknown\";\n\nexport interface InboundEmail {\n id: number;\n messageId: string | null;\n fromAddr: string;\n subject: string | null;\n intent: EmailIntent;\n handled: boolean;\n result: string | null;\n createdAt: string;\n}\n\n/** Verdict for a single subscription, computed from its recent ratings and its cost. */\nexport interface Verdict {\n /** Recency-weighted quality, 1..5, or null when never rated. */\n quality: number | null;\n usage: number | null;\n /** Harmonic mean of quality and usage — punishes \"great but unused\" and \"used but bad\". */\n score: number | null;\n ratedMonths: number;\n band: \"keep\" | \"watch\" | \"cancel_candidate\" | \"unrated\";\n reason: string;\n}\n\n/** A subscription plus everything the dashboard needs to render a row. */\nexport interface SubscriptionView extends Subscription {\n /** Native cost normalised to a month, in minor units of the native currency. */\n monthlyMinor: number;\n yearlyMinor: number;\n /** Same, converted to the base currency. */\n monthlyBaseMinor: number;\n yearlyBaseMinor: number;\n /** Units of base currency per unit of this subscription's currency, at render time. */\n fxRate: number;\n verdict: Verdict;\n latestRating: Rating | null;\n /** True when this month has no rating yet and the subscription is live. */\n ratingDue: boolean;\n}\n\n/**\n * What a receipt yielded. `billingCycle` is nullable on purpose: a receipt that\n * never says whether it is monthly or yearly must not be allowed to assert one,\n * because that guess would otherwise overwrite a known-good cycle on an existing\n * subscription.\n */\nexport interface ExtractedSubscription {\n serviceName: string;\n planName: string | null;\n amount: number;\n currency: Currency;\n billingCycle: BillingCycle | null;\n chargedOn: string | null;\n nextChargeOn: string | null;\n category: string | null;\n /** Order / invoice / transaction number as printed on the receipt. */\n orderReference: string | null;\n /** 0..1 — how sure the model is that this really is a subscription receipt. */\n confidence: number;\n notes: string | null;\n}\n\n/** One projected (not yet charged) payment. */\nexport interface ProjectedCharge {\n subscriptionId: number;\n serviceName: string;\n date: string;\n amountMinor: number;\n currency: Currency;\n baseMinor: number;\n billingCycle: BillingCycle;\n}\n\nexport interface MonthBucket {\n /** YYYY-MM */\n period: string;\n baseMinor: number;\n charges: ProjectedCharge[];\n}\n\nexport interface Summary {\n baseCurrency: Currency;\n /** Sum of monthly-equivalents of everything live — the steady-state burn. */\n monthlyRunRateBaseMinor: number;\n yearlyRunRateBaseMinor: number;\n /** What the next 30 days will actually cost, on the calendar. */\n next30DaysBaseMinor: number;\n /** Calendar-accurate 12-month projection, so yearly renewals land in their real month. */\n next12MonthsBaseMinor: number;\n activeCount: number;\n monthlyCount: number;\n yearlyCount: number;\n /** Cumulative monthly-equivalent not spent since each cancellation. */\n savedToDateBaseMinor: number;\n /** Monthly-equivalent of everything cancelled — the ongoing saving. */\n savedPerMonthBaseMinor: number;\n openReviewCount: number;\n ratingDueCount: number;\n}\n",[],[346,339],"shared","f356ef00-0eee-48d8-8c27-20d4e9ffcc39","reconcile.ts","01a05f28-9d9e-732a-b3b9-b4ad7f1774ec",["D",1788302892448],"/**\n * Working out what a receipt changes about a subscription we already track.\n *\n * This exists because the first version only ever applied the new *price*. When a\n * plan moved from monthly to yearly, the yearly amount landed on a monthly cadence\n * — the run rate overstated it twelvefold and the next charge was predicted a month\n * out instead of a year. Deciding the whole patch in one pure function makes that\n * class of omission visible, and testable.\n */\nimport type { BillingCycle, Currency, ExtractedSubscription, Subscription } from \"./types.ts\";\nimport { advanceByCycle, normaliseNextCharge, toMinor } from \"./money.ts\";\n\nexport interface Reconciliation {\n /** Patch for updateSubscription. Empty when the receipt tells us nothing new. */\n patch: Record;\n priceChanged: boolean;\n cycleChanged: boolean;\n planChanged: boolean;\n previous: { amountMinor: number; currency: Currency; billingCycle: BillingCycle };\n next: { amountMinor: number; currency: Currency; billingCycle: BillingCycle; nextChargeOn: string };\n}\n\nexport function reconcile(\n existing: Subscription,\n extracted: ExtractedSubscription,\n chargedOn: string,\n today: string,\n): Reconciliation {\n const amountMinor = toMinor(extracted.amount);\n\n // A receipt that does not state a cycle leaves the existing one alone. The\n // extractor is allowed to return null precisely so it cannot guess here.\n const billingCycle = extracted.billingCycle ?? existing.billingCycle;\n\n const priceChanged = existing.amountMinor !== amountMinor || existing.currency !== extracted.currency;\n const cycleChanged = billingCycle !== existing.billingCycle;\n const planChanged = Boolean(extracted.planName) && extracted.planName !== existing.planName;\n\n // The next charge follows the *new* cycle. Using the old one is what put a\n // yearly plan back on the calendar a month later.\n const nextChargeOn = normaliseNextCharge(\n extracted.nextChargeOn ?? advanceByCycle(chargedOn, billingCycle),\n billingCycle,\n today,\n );\n\n const patch: Record = { nextChargeOn };\n if (priceChanged) {\n patch.amountMinor = amountMinor;\n patch.currency = extracted.currency;\n }\n if (cycleChanged) patch.billingCycle = billingCycle;\n if (planChanged) patch.planName = extracted.planName;\n\n return {\n patch,\n priceChanged,\n cycleChanged,\n planChanged,\n previous: {\n amountMinor: existing.amountMinor,\n currency: existing.currency,\n billingCycle: existing.billingCycle,\n },\n next: { amountMinor, currency: extracted.currency, billingCycle, nextChargeOn },\n };\n}\n",[],[346,348],"562c6e7d-bb32-494e-8677-cb1935206e9c","money.ts","01a05e91-3c61-747c-96e4-b64ac2c18e33",["D",1788302892448],"/**\n * Money and billing-cycle maths. Pure — no imports, runs on both sides.\n *\n * Amounts are integer minor units (grosze / cents) everywhere. PLN, USD and EUR\n * all have two decimal places, so one constant covers every supported currency.\n */\nimport type { BillingCycle, Currency } from \"./types.ts\";\n\nexport const MINOR = 100;\n\nexport function toMinor(amount: number): number {\n return Math.round(amount * MINOR);\n}\n\nexport function fromMinor(minor: number): number {\n return minor / MINOR;\n}\n\nconst SYMBOLS: Record = { PLN: \"zł\", USD: \"$\", EUR: \"€\" };\n\n/** \"1 234,56 zł\" for PLN, \"$1,234.56\" for USD/EUR — matches where each symbol normally sits. */\nexport function formatMoney(minor: number, currency: Currency, opts?: { compact?: boolean }): string {\n const value = fromMinor(minor);\n const locale = currency === \"PLN\" ? \"pl-PL\" : \"en-US\";\n const body = value.toLocaleString(locale, {\n minimumFractionDigits: opts?.compact ? 0 : 2,\n maximumFractionDigits: opts?.compact ? 0 : 2,\n });\n return currency === \"PLN\" ? `${body} ${SYMBOLS.PLN}` : `${SYMBOLS[currency]}${body}`;\n}\n\n/**\n * Cost of one cycle expressed as a month.\n *\n * A yearly subscription is divided by twelve — this is the \"average monthly cost\"\n * that makes a 600 zł/year plan comparable to a 49 zł/month one. It is a run-rate,\n * not a cash-flow figure; the calendar projection below is what tells you when the\n * money actually leaves.\n */\nexport function monthlyEquivalentMinor(amountMinor: number, cycle: BillingCycle): number {\n return cycle === \"yearly\" ? Math.round(amountMinor / 12) : amountMinor;\n}\n\nexport function yearlyEquivalentMinor(amountMinor: number, cycle: BillingCycle): number {\n return cycle === \"yearly\" ? amountMinor : amountMinor * 12;\n}\n\n// ---------------------------------------------------------------------------\n// Dates. Stored as YYYY-MM-DD strings and manipulated in UTC so that a server in\n// one timezone and a browser in another agree on which day a charge lands.\n// ---------------------------------------------------------------------------\n\nexport function today(now: Date = new Date()): string {\n return toISODate(now);\n}\n\nexport function toISODate(d: Date): string {\n return d.toISOString().slice(0, 10);\n}\n\nexport function parseISODate(s: string): Date {\n const [y, m, d] = s.split(\"-\").map(Number);\n return new Date(Date.UTC(y, m - 1, d));\n}\n\n/** YYYY-MM for a date string. */\nexport function periodOf(isoDate: string): string {\n return isoDate.slice(0, 7);\n}\n\nexport function currentPeriod(now: Date = new Date()): string {\n return toISODate(now).slice(0, 7);\n}\n\n/** Previous period, e.g. \"2026-01\" -> \"2025-12\". */\nexport function shiftPeriod(period: string, months: number): string {\n const [y, m] = period.split(\"-\").map(Number);\n const d = new Date(Date.UTC(y, m - 1 + months, 1));\n return toISODate(d).slice(0, 7);\n}\n\n/**\n * Add months, clamping the day to the end of the target month.\n * 31 Jan + 1 month is 28/29 Feb, which is how card renewals actually behave.\n */\nexport function addMonths(isoDate: string, months: number): string {\n const d = parseISODate(isoDate);\n const day = d.getUTCDate();\n const target = new Date(Date.UTC(d.getUTCFullYear(), d.getUTCMonth() + months, 1));\n const lastDay = new Date(Date.UTC(target.getUTCFullYear(), target.getUTCMonth() + 1, 0)).getUTCDate();\n target.setUTCDate(Math.min(day, lastDay));\n return toISODate(target);\n}\n\nexport function addDays(isoDate: string, days: number): string {\n const d = parseISODate(isoDate);\n d.setUTCDate(d.getUTCDate() + days);\n return toISODate(d);\n}\n\nexport function advanceByCycle(isoDate: string, cycle: BillingCycle): string {\n return addMonths(isoDate, cycle === \"yearly\" ? 12 : 1);\n}\n\nexport function daysBetween(from: string, to: string): number {\n return Math.round((parseISODate(to).getTime() - parseISODate(from).getTime()) / 86_400_000);\n}\n\n/**\n * Roll a stale next-charge date forward until it is in the future.\n * Cheaper than a backfill job: a subscription whose date was never updated still\n * forecasts correctly, and the loop is bounded so bad data cannot hang a request.\n */\nexport function normaliseNextCharge(nextChargeOn: string, cycle: BillingCycle, from: string): string {\n let next = nextChargeOn;\n for (let i = 0; i < 240 && next < from; i++) {\n next = advanceByCycle(next, cycle);\n }\n return next;\n}\n",[],[346,355],"ab5ed126-38e7-4cb0-a598-8a0e065c0b4d","grade.ts","01a05e91-3c61-747c-96e4-b3cf2a4bc98c",["D",1788302892448],"/**\n * Turning two monthly grades into a keep/cancel verdict.\n *\n * Each month you give a subscription two scores out of five: how good it is\n * (quality) and how much you actually reach for it (usage). Neither alone is a\n * decision — a brilliant tool you opened twice is still money leaving, and a\n * mediocre one you live in is worth keeping. So the two are combined with a\n * harmonic mean, which collapses toward whichever score is *worse*: 5 and 1 give\n * 1.7, not 3. Lopsided pairs are exactly the ones worth surfacing.\n */\nimport type { Rating, Verdict } from \"./types.ts\";\nimport { shiftPeriod } from \"./money.ts\";\n\n/** How many months of history feed a verdict. */\nexport const WINDOW_MONTHS = 6;\n/** Each month back counts for three quarters of the one after it. */\nconst DECAY = 0.75;\n\nexport const KEEP_THRESHOLD = 3.5;\nexport const WATCH_THRESHOLD = 2.5;\n\nexport function harmonicMean(a: number, b: number): number {\n if (a <= 0 || b <= 0) return 0;\n return (2 * a * b) / (a + b);\n}\n\nexport interface VerdictInput {\n ratings: Rating[];\n currentPeriod: string;\n /** Monthly cost in base currency, used to escalate an expensive middling service. */\n monthlyBaseMinor?: number;\n /** Cost above which \"watch\" becomes \"cancel candidate\". Typically the portfolio median. */\n expensiveThresholdMinor?: number;\n}\n\nexport function computeVerdict(input: VerdictInput): Verdict {\n const { ratings, currentPeriod, monthlyBaseMinor, expensiveThresholdMinor } = input;\n\n // Index the window by period so gaps (months you skipped) simply carry no weight.\n const windowPeriods = new Map();\n for (let i = 0; i < WINDOW_MONTHS; i++) {\n windowPeriods.set(shiftPeriod(currentPeriod, -i), Math.pow(DECAY, i));\n }\n\n let qSum = 0, uSum = 0, wSum = 0, months = 0;\n for (const r of ratings) {\n const w = windowPeriods.get(r.period);\n if (w === undefined) continue;\n qSum += r.quality * w;\n uSum += r.usage * w;\n wSum += w;\n months++;\n }\n\n if (wSum === 0) {\n return {\n quality: null,\n usage: null,\n score: null,\n ratedMonths: 0,\n band: \"unrated\",\n reason: \"No ratings yet — rate it once to get a verdict.\",\n };\n }\n\n const quality = round1(qSum / wSum);\n const usage = round1(uSum / wSum);\n const score = round1(harmonicMean(quality, usage));\n\n let band: Verdict[\"band\"] = score >= KEEP_THRESHOLD ? \"keep\" : score >= WATCH_THRESHOLD ? \"watch\" : \"cancel_candidate\";\n\n const expensive = monthlyBaseMinor !== undefined\n && expensiveThresholdMinor !== undefined\n && monthlyBaseMinor > expensiveThresholdMinor;\n\n // An above-median cost only has to be middling, not bad, to deserve a decision.\n if (band === \"watch\" && expensive) band = \"cancel_candidate\";\n\n return { quality, usage, score, ratedMonths: months, band, reason: explain(quality, usage, score, band, expensive) };\n}\n\nfunction explain(quality: number, usage: number, score: number, band: Verdict[\"band\"], expensive: boolean): string {\n const gap = quality - usage;\n if (gap >= 1.5) {\n return `Good service (${quality}) you barely use (${usage}) — the usual cancel candidate.`;\n }\n if (gap <= -1.5) {\n return `You use it (${usage}) despite rating it ${quality} — look for a better alternative.`;\n }\n if (band === \"keep\") return `Solid on both axes (${quality} quality, ${usage} usage).`;\n if (band === \"cancel_candidate\" && expensive) {\n return `Middling (${score}) and above your median cost — decide on it.`;\n }\n if (band === \"cancel_candidate\") return `Low on both axes (${quality} quality, ${usage} usage).`;\n return `Neither good nor bad (${score}) — worth a conscious decision.`;\n}\n\nfunction round1(n: number): number {\n return Math.round(n * 10) / 10;\n}\n\nexport function bandLabel(band: Verdict[\"band\"]): string {\n return { keep: \"Keep\", watch: \"Watch\", cancel_candidate: \"Cancel?\", unrated: \"Unrated\" }[band];\n}\n\n/** Median of the live monthly costs — the reference point for \"expensive\". */\nexport function medianMinor(values: number[]): number | undefined {\n if (values.length === 0) return undefined;\n const sorted = [...values].sort((a, b) => a - b);\n const mid = Math.floor(sorted.length / 2);\n return sorted.length % 2 ? sorted[mid] : Math.round((sorted[mid - 1] + sorted[mid]) / 2);\n}\n",[],[346,362],"c9ccf692-7341-4e55-8de6-21fc9dc6b759","forecast.ts","01a05e91-3c61-747c-96e4-adbc3c48919a",["D",1788302892448],"/**\n * Projecting charges forward. Pure — the calendar maths that turns a set of\n * subscriptions into \"what leaves the account, and when\".\n *\n * Kept out of the backend so it can be tested without a database, and so the\n * browser could run the same projection if it ever needed to.\n */\nimport type { MonthBucket, ProjectedCharge, SubscriptionView } from \"./types.ts\";\nimport { isLive } from \"./types.ts\";\nimport { advanceByCycle, normaliseNextCharge, periodOf, shiftPeriod, today } from \"./money.ts\";\n\n/** Bound on how many charges one subscription can contribute — 20 years of monthly. */\nconst MAX_ITERATIONS = 240;\n\nexport function projectCharges(\n subs: SubscriptionView[],\n opts: { from?: string; until: string },\n): ProjectedCharge[] {\n const from = opts.from ?? today();\n const out: ProjectedCharge[] = [];\n\n for (const s of subs) {\n if (!isLive(s.status) || !s.nextChargeOn) continue;\n // A stale next-charge date rolls forward to the first one still ahead of us,\n // so a row nobody has touched in months still forecasts correctly.\n let date = normaliseNextCharge(s.nextChargeOn, s.billingCycle, from);\n for (let i = 0; i < MAX_ITERATIONS && date <= opts.until; i++) {\n out.push({\n subscriptionId: s.id,\n serviceName: s.serviceName,\n date,\n amountMinor: s.amountMinor,\n currency: s.currency,\n baseMinor: Math.round(s.amountMinor * s.fxRate),\n billingCycle: s.billingCycle,\n });\n // Auto-renew off means the charge already scheduled happens and nothing after it.\n if (!s.autoRenew) break;\n date = advanceByCycle(date, s.billingCycle);\n }\n }\n return out.sort((a, b) => a.date.localeCompare(b.date) || a.serviceName.localeCompare(b.serviceName));\n}\n\n/** Group into calendar months, keeping empty months so the chart has a continuous axis. */\nexport function bucketByMonth(charges: ProjectedCharge[], startPeriod: string, months: number): MonthBucket[] {\n const buckets: MonthBucket[] = [];\n const index = new Map();\n for (let i = 0; i < months; i++) {\n const period = shiftPeriod(startPeriod, i);\n const bucket: MonthBucket = { period, baseMinor: 0, charges: [] };\n buckets.push(bucket);\n index.set(period, bucket);\n }\n for (const c of charges) {\n const bucket = index.get(periodOf(c.date));\n if (!bucket) continue;\n bucket.baseMinor += c.baseMinor;\n bucket.charges.push(c);\n }\n return buckets;\n}\n",[],[346,369],"f9da6f2e-43ae-4f10-bc3d-eeaa35af77d1","dedupe.ts","01a05f28-9d9e-732a-b3b9-b2471d5b0c22",["D",1788302892448],"/**\n * Deciding whether a charge has already been recorded.\n *\n * The original rule was a UNIQUE index on (subscription, date, amount), which only\n * catches a byte-identical repeat. It missed the real case: the same annual payment\n * arriving twice — once from an instruction typed by hand, once from the receipt a\n * day later — which double-counted the year's spend.\n *\n * Two rules, cheapest and most reliable first:\n *\n * 1. The vendor's own order number. If two records carry the same one they are the\n * same payment, whatever the dates say. This is an idempotency key we are handed\n * for free, and it is exact.\n * 2. Otherwise, the same amount on the same subscription within a few days. Real\n * subscriptions bill monthly at the closest; two identical amounts three days\n * apart are a duplicate, not a second payment.\n */\nimport type { Charge, Currency } from \"./types.ts\";\nimport { daysBetween } from \"./money.ts\";\n\n/** How close two identical amounts must be to count as the same payment. */\nexport const DEDUPE_WINDOW_DAYS = 3;\n\nexport interface CandidateCharge {\n chargedOn: string;\n amountMinor: number;\n currency: Currency;\n orderRef?: string | null;\n}\n\nexport type DuplicateOf = { charge: Charge; reason: string } | null;\n\nexport function findDuplicate(existing: Charge[], candidate: CandidateCharge): DuplicateOf {\n const ref = candidate.orderRef?.trim();\n\n if (ref) {\n const sameOrder = existing.find((c) => c.orderRef?.trim() === ref);\n if (sameOrder) {\n return { charge: sameOrder, reason: `same order number ${ref}` };\n }\n }\n\n const near = existing.find((c) =>\n c.amountMinor === candidate.amountMinor &&\n c.currency === candidate.currency &&\n Math.abs(daysBetween(c.chargedOn, candidate.chargedOn)) <= DEDUPE_WINDOW_DAYS\n );\n if (near) {\n return {\n charge: near,\n reason: `an identical amount was already recorded on ${near.chargedOn}`,\n };\n }\n\n return null;\n}\n",[],[346,376],"97ef590a-12d0-4e46-b88a-cd0e76ce8f06",["D",1788292971385],[270,271,272,273,274,275],[346],"ae9ca92a-2c6a-4925-80ee-044cd0a59c1a","root.tsx","01a05e91-3c61-747c-96e4-a4b05c9d6ec8","01a05e91-3c61-747c-96e4-aaea203286b2",["D",1788302892448],"/** @jsxImportSource npm:hono@^4.13.5/jsx */\n/**\n * The HTML shell. Never cached, so it can stamp the current version onto the\n * client entry — `immutableFileUrl` turns /frontend/index.tsx into\n * /__immutable//frontend/index.tsx, which browsers may cache forever and\n * which a publish invalidates by bumping the version.\n *\n * The

History · tests