[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_529":530,"_531":532},"routes/_app.x.$handle.$name",{"_104":103,"_32":46,"_112":91,"_27":113,"_13":14,"_114":-5,"_11":115,"_116":117,"_118":119,"_120":121,"_122":123,"_20":-5,"_124":125,"_126":127,"_128":25,"_129":130,"_131":60,"_132":-5,"_133":-5,"_134":135},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_44":45,"_32":46,"_39":47,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":72,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":84,"_85":86,"_87":88,"_89":25},"version",5,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":38,"_39":40,"_41":14,"_42":43,"_24":25},"previous",{"_30":31,"_32":33,"_34":35,"_36":37},"deleted",false,"deletedHere","path","backend/links.ts","latestPath","fileId","01a05e91-3c61-747c-96e4-5b9bf3767f5a","name","links.ts","fileType","script","content","/**\n * Where the dashboard lives.\n *\n * Val Town assigns the endpoint URL, so it is not knowable at authoring time.\n * `APP_URL` is set once after the first deploy (the create/list-files response\n * carries `links.endpoint`); until then, emails simply omit their links rather\n * than pointing somewhere wrong.\n */\nexport function dashboardUrl(path = \"\"): string | null {\n const base = Deno.env.get(\"APP_URL\")?.replace(/\\/+$/, \"\");\n if (!base) return null;\n return path ? `${base}${path.startsWith(\"/\") ? path : `/${path}`}` : base;\n}\n\n/** A \"→ open the dashboard\" line, or nothing when the URL is not configured yet. */\nexport function linkLine(label: string, path = \"\"): string {\n const url = dashboardUrl(path);\n return url ? `${label}: ${url}` : \"\";\n}\n","/**\n * Where the dashboard lives.\n *\n * Val Town assigns the endpoint URL, so it is not knowable at authoring time.\n * Rather than require it to be configured, the val asks the platform for its own\n * endpoint — which means a remixed copy links to itself with no setup at all.\n * `APP_URL` still wins when set, for a custom domain or a proxy.\n *\n * Resolution is async but the formatters that use it are not, so it is primed\n * once at the top of each entry point and read synchronously thereafter.\n */\nimport { httpEndpoint } from \"https://esm.town/v/std/utils/index.ts\";\n\n/** undefined = not yet resolved, null = resolved and unavailable. */\nlet cached: string | null | undefined;\n\nexport async function primeLinks(): Promise {\n if (cached !== undefined) return;\n\n const override = Deno.env.get(\"APP_URL\")?.trim();\n if (override) {\n cached = trimSlashes(override);\n return;\n }\n\n try {\n const url = await httpEndpoint(\"index.ts\", import.meta.url);\n cached = url ? trimSlashes(url) : null;\n } catch (err) {\n // Not fatal: emails simply go out without a link rather than not at all.\n console.error(\"links: could not resolve this val's endpoint:\", err);\n cached = null;\n }\n}\n\nexport function dashboardUrl(path = \"\"): string | null {\n if (!cached) return null;\n return path ? `${cached}${path.startsWith(\"/\") ? path : `/${path}`}` : cached;\n}\n\n/** A \"→ open the dashboard\" line, or nothing when the URL could not be resolved. */\nexport function linkLine(label: string, path = \"\"): string {\n const url = dashboardUrl(path);\n return url ? `${label}: ${url}` : \"\";\n}\n\nfunction trimSlashes(url: string): string {\n return url.replace(/\\/+$/, \"\");\n}\n","createdAt",["D",1788294854632],"branchVersion","branchId","3cb18c55-e6c7-42be-b35f-89b94db8140e","id","9bc728ac-50f9-4071-a163-6ccfe685ce52","subscriptions-feedback",["D",1788292971385],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Subscription tracker — separate instance for colleague feedback","imageUrl","5f1525c6-51a0-4c57-858d-f94f1e686d46","pinnedFileId","01a05e91-3c61-747c-96e4-e7f8845199ec","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a05e29-777a-77c1-a910-e4a1d8102a40","tursoName","9bc728ac50f94071a1636ccfe685ce52","tursoHostname","9bc728ac50f94071a1636ccfe685ce52-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789514495229],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_104":103,"_111":-5},"org",{"_104":103,"_105":106,"_107":-5,"_18":-5,"_108":109,"_110":25},"branch",{"_13":90,"_32":91,"_44":43,"_92":45,"_93":94,"_95":96,"_97":51,"_98":99,"_100":66,"_101":46,"_102":103},"isOwned",20,"main","projectId","forkedBranchId","723ee93a-6b67-428c-b3cc-6f9491011d78","forkedBranchVersion",60,"forkedProjectPrivacy","forkedProjectId","5588f200-1c41-400f-bf66-81f9f6ac0211","forkedProjectOrgId","projectName","userHandle","xdv","handle","displayName","xd.ventures","avatar","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_44":45,"_32":46,"_39":524,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":525,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":526,"_85":527,"_87":528,"_89":25},"tree",[217,229,245,250,256,257,258,259],"files",[217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259],"counts",{"_205":64,"_206":156,"_207":64,"_208":209,"_210":211},"contents",[145,146,147,148,149,150,151,152],"upstreamProject",{"_44":99,"_32":142,"_53":143,"_55":-5,"_50":51,"_83":144},"upstreamBranch",{"_44":94,"_39":136,"_137":138,"_32":91,"_92":99,"_13":139,"_93":-5,"_95":-5,"_140":141,"_48":-5,"_89":25,"_50":51,"_102":103,"_65":66,"_101":142},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1788290256185],"updatedAt",["D",1788303327624],92,"lockfileKey","1788303327809-esm.town_v_xdv_subscriptions@92-main","subscriptions","Track subscriptions, forecast spend, decide what to cancel",{"_104":103,"_111":-5},{"_44":200,"_32":201,"_30":202,"_155":-5,"_42":43,"_41":156,"_157":60,"_39":203,"_13":64,"_34":188,"_36":-5,"_24":25,"_161":-5,"_27":204},{"_44":195,"_32":196,"_30":197,"_155":-5,"_42":43,"_41":156,"_157":60,"_39":198,"_13":64,"_34":188,"_36":-5,"_24":25,"_161":-5,"_27":199},{"_44":190,"_32":191,"_30":192,"_155":-5,"_42":43,"_41":156,"_157":60,"_39":193,"_13":64,"_34":188,"_36":-5,"_24":25,"_161":-5,"_27":194},{"_44":184,"_32":185,"_30":186,"_155":-5,"_42":43,"_41":156,"_157":60,"_39":187,"_13":64,"_34":188,"_36":-5,"_24":25,"_161":-5,"_27":189},{"_44":177,"_32":178,"_30":179,"_155":-5,"_42":43,"_41":180,"_157":25,"_39":181,"_13":156,"_34":20,"_36":182,"_24":25,"_161":-5,"_27":183},{"_44":170,"_32":171,"_30":172,"_155":-5,"_42":43,"_41":156,"_157":25,"_39":173,"_13":64,"_34":174,"_36":175,"_24":25,"_161":-5,"_27":176},{"_44":163,"_32":164,"_30":165,"_155":-5,"_42":43,"_41":156,"_157":25,"_39":166,"_13":64,"_34":167,"_36":168,"_24":25,"_161":-5,"_27":169},{"_44":153,"_32":154,"_30":58,"_155":-5,"_42":43,"_41":156,"_157":25,"_39":158,"_13":64,"_34":159,"_36":160,"_24":25,"_161":-5,"_27":162},"a557d301-566e-408a-ac46-0d77b773e641","index.ts","parentId",1,"latest",["D",1788292971385],"http","/**\n * HTTP entry point: the dashboard and its JSON API.\n *\n * Val Town assigns this file's URL — read it from `links.endpoint` rather than\n * constructing it. Set the same value as the APP_URL environment variable so the\n * outgoing emails can link back here.\n */\nimport { Hono } from \"npm:hono@^4.13.5\";\nimport { parseVal, serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { getOAuthUserData, oauthMiddleware } from \"https://esm.town/v/std/oauth/middleware.ts\";\nimport type { BillingCycle, Currency } from \"./shared/types.ts\";\nimport { CURRENCIES, isLive } from \"./shared/types.ts\";\nimport { currentPeriod, toMinor } from \"./shared/money.ts\";\nimport { ensureSchema } from \"./backend/db.ts\";\nimport { baseCurrency } from \"./backend/fx.ts\";\nimport {\n cancelSubscription,\n chargesFor,\n createSubscription,\n deleteSubscription,\n getSubscription,\n listViews,\n ratingsFor,\n reactivateSubscription,\n saveRating,\n updateSubscription,\n} from \"./backend/subscriptions.ts\";\nimport { byCategory, forecast, history, savings, summary } from \"./backend/analytics.ts\";\nimport { closeItemsFor, generateReviewItems, listReviewItems, resolveReviewItem } from \"./backend/review.ts\";\nimport { handleInbound } from \"./backend/email/handle.ts\";\nimport { isConfigured } from \"./backend/llm.ts\";\nimport { Root } from \"./frontend/root.tsx\";\n\n/** The signed-in Val Town account, once it has passed the gate below. */\ninterface Viewer {\n username: string | null;\n}\n\nconst app = new Hono<{ Variables: { viewer: Viewer } }>();\n\n/**\n * Who may see the dashboard.\n *\n * This is spending data, so the endpoint is not left open. Val Town's platform-level\n * restricted access needs a paid business org, so the gate lives in the val instead:\n * log in with a Val Town account, and you are let through if you belong to the org\n * that owns this val. `ALLOWED_USERS` (comma-separated handles) lets specific people\n * in on top of that — leave it unset and org membership is the only rule.\n */\nfunction allowedHandles(): string[] {\n return (Deno.env.get(\"ALLOWED_USERS\") ?? \"\")\n .split(\",\")\n .map((h) => h.trim().toLowerCase())\n .filter(Boolean);\n}\n\nasync function viewerOf(req: Request) {\n const session = await getOAuthUserData(req).catch(() => null);\n if (!session?.user) return null;\n const handle = session.user.username?.toLowerCase() ?? \"\";\n const permitted = session.isOrgMember === true || allowedHandles().includes(handle);\n return permitted ? session.user : { ...session.user, denied: true as const };\n}\n\napp.use(\"*\", async (c, next) => {\n const viewer = await viewerOf(c.req.raw);\n const isApi = c.req.path.startsWith(\"/api/\");\n\n if (!viewer) {\n // Not signed in at all: send people to log in, tell machines plainly.\n if (isApi) return c.json({ error: \"sign in to use this API\" }, 401);\n return c.redirect(\"/auth/login\");\n }\n if (\"denied\" in viewer) {\n // Signed in but not on the list — redirecting here would just bounce them\n // back and forth, so say what happened instead.\n const message = `Signed in as ${viewer.username}, but this dashboard is limited to its owners.`;\n if (isApi) return c.json({ error: message }, 403);\n return c.html(\n `\n

${message}

\n \n `,\n 403,\n );\n }\n\n c.set(\"viewer\", { username: viewer.username });\n return next();\n});\n\napp.get(\"/\", (c) => c.html(Root()));\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\n/** Everything the dashboard needs, in one round trip. */\napp.get(\"/api/state\", async (c) => {\n await ensureSchema();\n const views = await listViews(true);\n const live = views.filter((s) => isLive(s.status));\n const [sum, fc, hist, sav, review, cats, base] = await Promise.all([\n summary(views),\n forecast(12, live),\n history(12),\n savings(),\n listReviewItems(\"open\"),\n byCategory(live),\n baseCurrency(),\n ]);\n const viewer = c.get(\"viewer\");\n return c.json({\n baseCurrency: base,\n period: currentPeriod(),\n llmConfigured: isConfigured(),\n viewer: viewer ? { username: viewer.username } : null,\n summary: sum,\n subscriptions: views,\n forecast: fc,\n history: hist,\n savings: sav,\n review,\n categories: cats,\n });\n});\n\napp.get(\"/api/subscriptions/:id\", async (c) => {\n const id = Number(c.req.param(\"id\"));\n const sub = await getSubscription(id);\n if (!sub) return c.json({ error: \"not found\" }, 404);\n const [charges, ratings] = await Promise.all([chargesFor(id), ratingsFor(id)]);\n return c.json({ subscription: sub, charges, ratings });\n});\n\napp.post(\"/api/subscriptions\", async (c) => {\n const body = await c.req.json();\n const parsed = parseSubscriptionBody(body);\n if (\"error\" in parsed) return c.json(parsed, 400);\n const id = await createSubscription(parsed.value);\n return c.json({ id }, 201);\n});\n\napp.patch(\"/api/subscriptions/:id\", async (c) => {\n const id = Number(c.req.param(\"id\"));\n const body = await c.req.json() as Record;\n const patch: Record = {};\n\n if (body.amount != null) patch.amountMinor = toMinor(Number(body.amount));\n if (body.amountMinor != null) patch.amountMinor = Math.round(Number(body.amountMinor));\n for (const key of [\"planName\", \"startedOn\", \"nextChargeOn\", \"paymentMethod\", \"notes\", \"status\"]) {\n if (key in body) patch[key] = body[key];\n }\n if (body.currency && CURRENCIES.includes(String(body.currency) as Currency)) patch.currency = body.currency;\n if (body.billingCycle === \"monthly\" || body.billingCycle === \"yearly\") patch.billingCycle = body.billingCycle;\n if (\"autoRenew\" in body) patch.autoRenew = Boolean(body.autoRenew);\n\n await updateSubscription(id, patch);\n return c.json({ ok: true });\n});\n\napp.post(\"/api/subscriptions/:id/cancel\", async (c) => {\n const id = Number(c.req.param(\"id\"));\n const body = await c.req.json().catch(() => ({})) as { reason?: string; on?: string };\n await cancelSubscription(id, { reason: body.reason, on: body.on });\n await closeItemsFor(id);\n return c.json({ ok: true });\n});\n\napp.post(\"/api/subscriptions/:id/reactivate\", async (c) => {\n const id = Number(c.req.param(\"id\"));\n const body = await c.req.json().catch(() => ({})) as { nextChargeOn?: string };\n await reactivateSubscription(id, body.nextChargeOn);\n return c.json({ ok: true });\n});\n\napp.delete(\"/api/subscriptions/:id\", async (c) => {\n await deleteSubscription(Number(c.req.param(\"id\")));\n return c.json({ ok: true });\n});\n\napp.post(\"/api/subscriptions/:id/ratings\", async (c) => {\n const id = Number(c.req.param(\"id\"));\n const body = await c.req.json() as { quality?: number; usage?: number; period?: string; note?: string };\n const quality = Number(body.quality);\n const usage = Number(body.usage);\n if (!Number.isFinite(quality) || !Number.isFinite(usage)) {\n return c.json({ error: \"quality and usage are required, 1 to 5\" }, 400);\n }\n await saveRating(id, body.period ?? currentPeriod(), quality, usage, body.note ?? null);\n await closeItemsFor(id, [\"rating_due\"]);\n return c.json({ ok: true });\n});\n\napp.post(\"/api/review/:id/:action\", async (c) => {\n const id = Number(c.req.param(\"id\"));\n const action = c.req.param(\"action\");\n if (action !== \"done\" && action !== \"dismissed\") return c.json({ error: \"unknown action\" }, 400);\n await resolveReviewItem(id, action);\n return c.json({ ok: true });\n});\n\n/** Rebuild the decision inbox on demand — the same routine the daily cron runs. */\napp.post(\"/api/review/refresh\", async (c) => {\n const created = await generateReviewItems();\n return c.json({ created: created.length, items: created });\n});\n\n/**\n * Paste an email here to see exactly what the inbound handler would do with it,\n * without having to send real mail. Writes for real, so it is the fastest way to\n * check extraction against a receipt you actually received.\n */\napp.post(\"/api/email/simulate\", async (c) => {\n const body = await c.req.json() as {\n from?: string;\n subject?: string;\n text?: string;\n html?: string;\n messageId?: string;\n };\n if (!body.text && !body.html) return c.json({ error: \"text or html is required\" }, 400);\n const result = await handleInbound({\n from: body.from ?? \"test@example.com\",\n subject: body.subject ?? null,\n text: body.text ?? null,\n html: body.html ?? null,\n messageId: body.messageId ?? null,\n });\n return c.json(result);\n});\n\n// Full stack traces in the val logs rather than a swallowed 500.\napp.onError((err) => Promise.reject(err));\n\nfunction parseSubscriptionBody(body: Record):\n | { value: Parameters[0] }\n | { error: string }\n{\n const serviceName = String(body.serviceName ?? \"\").trim();\n if (!serviceName) return { error: \"serviceName is required\" };\n\n const amountMinor = body.amountMinor != null\n ? Math.round(Number(body.amountMinor))\n : toMinor(Number(body.amount));\n if (!Number.isFinite(amountMinor) || amountMinor <= 0) return { error: \"amount must be a positive number\" };\n\n const currency = String(body.currency ?? \"PLN\").toUpperCase() as Currency;\n if (!CURRENCIES.includes(currency)) return { error: `currency must be one of ${CURRENCIES.join(\", \")}` };\n\n const billingCycle = body.billingCycle === \"yearly\" ? \"yearly\" : \"monthly\" as BillingCycle;\n\n return {\n value: {\n serviceName,\n planName: body.planName ? String(body.planName) : null,\n amountMinor,\n currency,\n billingCycle,\n startedOn: body.startedOn ? String(body.startedOn) : null,\n nextChargeOn: body.nextChargeOn ? String(body.nextChargeOn) : null,\n category: body.category ? String(body.category) : null,\n paymentMethod: body.paymentMethod ? String(body.paymentMethod) : null,\n notes: body.notes ? String(body.notes) : null,\n source: \"manual\",\n },\n };\n}\n\nexport default oauthMiddleware(app.fetch);\n","label",[154],"da2a945e-6b63-4f43-8edd-cb0fc6d3af54","email.ts","01a05e91-3c61-747c-96e4-e2c7a9706763",["D",1788292971385],"email","/**\n * Email entry point — forward receipts here, or ask questions.\n *\n * Val Town assigns this file its own address; read it from `links.email` on the\n * file listing rather than guessing the format. Forwarding a confirmation with no\n * comment of your own tracks it; adding a line asks a question or runs a command.\n */\nimport { email } from \"https://esm.town/v/std/email\";\nimport { handleInbound } from \"./backend/email/handle.ts\";\n\n/** Shape Val Town delivers. Declared locally so the file type-checks anywhere. */\ninterface InboundEmail {\n from: string;\n to: string[];\n subject?: string;\n text?: string;\n html?: string;\n attachments: File[];\n headers: Record;\n}\n\nexport default async function (e: InboundEmail) {\n const messageId = headerOf(e.headers, \"message-id\");\n\n let result;\n try {\n result = await handleInbound({\n from: e.from,\n subject: e.subject ?? null,\n text: e.text ?? null,\n html: e.html ?? null,\n messageId,\n });\n } catch (err) {\n // A failure still gets a reply — silence would look like the address is dead.\n console.error(\"inbound email failed:\", err);\n await email({\n to: e.from,\n subject: `Re: ${e.subject ?? \"your subscriptions\"}`,\n text: `Something went wrong handling that email:\\n\\n${err instanceof Error ? err.message : String(err)}`,\n });\n throw err;\n }\n\n if (!result.replied || !result.body) {\n console.log(\"no reply sent (duplicate or empty)\", { from: e.from, subject: e.subject });\n return;\n }\n\n await email({ to: e.from, subject: result.subject, text: result.body });\n}\n\nfunction headerOf(headers: Record, name: string): string | null {\n const wanted = name.toLowerCase();\n for (const [key, value] of Object.entries(headers ?? {})) {\n if (key.toLowerCase() === wanted) return value;\n }\n return null;\n}\n",[164],"58b4032f-0610-4b32-9760-1b015323bbca","cron.ts","01a05e91-3c61-747c-96e4-dfb00d40a542",["D",1788292971385],"interval","/**\n * Daily maintenance and the digest email.\n *\n * Runs at 06:00 UTC — 07:00 or 08:00 in Warsaw depending on the season. Cron on\n * Val Town is UTC only and does not follow daylight saving, so a fixed early-morning\n * UTC time is the right compromise for a once-a-day digest.\n *\n * The digest stays quiet on purpose. A mail every morning saying \"nothing changed\"\n * gets filtered within a week, and then the one that matters gets filtered with it.\n */\nimport { email } from \"https://esm.town/v/std/email\";\nimport { refreshRates } from \"./backend/fx.ts\";\nimport { baseCurrency } from \"./backend/fx.ts\";\nimport { listViews } from \"./backend/subscriptions.ts\";\nimport { summary, upcoming } from \"./backend/analytics.ts\";\nimport { generateReviewItems, listReviewItems } from \"./backend/review.ts\";\nimport { formatReview, formatSummary, formatUpcoming } from \"./backend/email/reply.ts\";\nimport { today } from \"./shared/money.ts\";\nimport { isLive } from \"./shared/types.ts\";\n\ninterface Interval {\n lastRunAt?: Date;\n}\n\n/** Charges inside this window go in the digest. */\nconst LOOKAHEAD_DAYS = 7;\n\n/**\n * Where the digest goes.\n *\n * A val owned by an organisation has no single \"owner\" for std/email to fall back\n * to, so the recipient has to be named explicitly — an org-owned val that omits\n * `to` fails at send time rather than at deploy time.\n */\nfunction digestRecipient(): string | null {\n return Deno.env.get(\"DIGEST_EMAIL\")?.trim() || null;\n}\n\nexport default async function (_interval: Interval) {\n try {\n await refreshRates();\n } catch (err) {\n console.error(\"fx refresh failed, continuing with cached rates:\", err);\n }\n\n const created = await generateReviewItems();\n const [views, base] = await Promise.all([listViews(true), baseCurrency()]);\n const live = views.filter((s) => isLive(s.status));\n const soon = await upcoming(LOOKAHEAD_DAYS, live);\n const open = await listReviewItems(\"open\");\n\n const isFirstOfMonth = today().endsWith(\"-01\");\n const worthSending = created.length > 0 || soon.length > 0 || isFirstOfMonth;\n\n console.log(\"daily run\", {\n newItems: created.length,\n dueSoon: soon.length,\n openItems: open.length,\n sending: worthSending,\n });\n\n if (!worthSending) return;\n\n const to = digestRecipient();\n if (!to) {\n console.error(\"DIGEST_EMAIL is not set — nothing to send the digest to. Skipping.\");\n return;\n }\n\n const sections: string[] = [];\n\n if (created.length > 0) {\n sections.push(`New since yesterday\\n${\"-\".repeat(52)}\\n${created.map((i) => `• ${i.title}`).join(\"\\n\")}`);\n }\n if (soon.length > 0) {\n sections.push(formatUpcoming(soon, base, LOOKAHEAD_DAYS));\n }\n if (open.length > 0) {\n sections.push(formatReview(open));\n }\n if (isFirstOfMonth) {\n sections.push(formatSummary(await summary(views)));\n }\n\n await email({\n to,\n subject: subjectFor(created.length, soon.length, isFirstOfMonth),\n text: sections.join(`\\n\\n${\"=\".repeat(52)}\\n\\n`),\n });\n}\n\nfunction subjectFor(newItems: number, dueSoon: number, monthStart: boolean): string {\n if (monthStart) return \"Subscriptions — new month, time to rate\";\n if (dueSoon > 0) return `Subscriptions — ${dueSoon} charge${dueSoon === 1 ? \"\" : \"s\"} coming up`;\n return `Subscriptions — ${newItems} thing${newItems === 1 ? \"\" : \"s\"} to decide`;\n}\n",[171],"c064aea0-dcbc-4178-bd85-299138b4d7af","README.md","01a05e91-3c61-747c-96e4-db61a2b339ab",2,["D",1788293140525],"# Subscription tracker — feedback instance\n\nThis is a **separate copy** of `xdv/subscriptions`, remixed so a second person can\ntry the tracker without sharing data. The app has no multi-tenancy: one val is one\nperson's subscriptions. The two instances share code and nothing else — separate\ndatabases, separate email addresses, separate dashboards. Verified: a row written\nhere is not visible in the original.\n\nKeep them in sync by re-applying code changes to both, or by remixing again.\n\n## Before it works — three things to set\n\nEnvironment variables live under **Settings → Environment variables** on this val.\n\n| Variable | Value | Without it |\n|---|---|---|\n| `ANTHROPIC_API_KEY` | an Anthropic API key | Forwarded receipts are read by a plain text scan instead of the model, and emailed questions are not answered. Commands still work. |\n| `ALLOWED_USERS` | the colleague's Val Town handle | They get a 403. Alternative: add them to the `xdv` org, which the gate also accepts. |\n| `APP_URL` | `https://xdv--01a05e913c61747c96e4e7f8845199ec.web.val.run` | Emails still send, but without a link back to the dashboard. |\n\n`DIGEST_EMAIL` is deliberately left empty: set it to **the colleague's own address**\nso their daily digest goes to them, not to the owner of the other instance. While it\nis empty the cron runs and simply skips sending.\n\n`BASE_CURRENCY` defaults to `PLN`; set `USD` or `EUR` if they'd rather.\n\n## This instance\n\n- Dashboard: https://xdv--01a05e913c61747c96e4e7f8845199ec.web.val.run\n- Forward receipts to: `xdv-01a05e913c61747c96e4e2c7a9706763@valtown.email`\n- Daily digest: 06:00 UTC\n\n---\n\n\nA Val Town app for deciding, month by month, whether each subscription is still\nworth paying for. Three parts: a schema that keeps enough history to answer\n\"what did cancelling save me\", an email assistant you forward receipts to, and a\ndashboard.\n\n## What it answers\n\n| Question | Where |\n|---|---|\n| What do my subscriptions cost me a month? | Run rate — every yearly plan divided by twelve |\n| What leaves my account in March? | 12-month calendar forecast, yearly renewals marked separately |\n| Which ones should I drop? | Two grades a month (quality, usage) → a keep/watch/cancel verdict |\n| What has cancelling saved me? | Monthly equivalent of each cancelled plan, counted from the day it stopped |\n| What do I need to decide right now? | The decision inbox — renewals you can still stop, ratings due, cancel candidates |\n\nRun rate and the calendar forecast are deliberately separate numbers. Averaging a\nyearly plan into a monthly figure makes it comparable; it also hides the month the\nmoney actually leaves, which is the surprise worth avoiding.\n\n## Files\n\n```\nindex.ts HTTP: the dashboard and its JSON API (fileType: http)\nemail.ts inbound mail: forward receipts here (fileType: email)\ncron.ts daily: FX, decision inbox, digest (fileType: interval, 0 6 * * *)\n\nshared/ types, money and date maths, verdicts, forecasting — pure, runs on both sides\nbackend/ db schema, FX, queries, analytics, review inbox, LLM, email handling\nfrontend/ the React dashboard (no build step; Val Town transpiles per request)\ntests/ the pure logic, run with `deno test --allow-import tests/`\n```\n\n## The schema\n\n`services` — the vendor. `subscriptions` — one billing arrangement for a service;\na service can own several over time as plans and prices change, but only one is\nlive. `charges` — payments that really happened. Nothing in the future is stored:\nit is projected from `next_charge_on`, so a price change never leaves stale rows\nbehind.\n\n```\nservices id, name, name_key(unique), vendor_domain, category, notes\nsubscriptions id, service_id, plan_name, amount_minor, currency, billing_cycle,\n started_on, next_charge_on, status, cancelled_on, cancel_reason,\n payment_method, auto_renew, source, notes\ncharges id, subscription_id, charged_on, amount_minor, currency,\n base_minor, fx_rate, source, inbound_email_id\nratings id, subscription_id, period(YYYY-MM), quality 1-5, usage 1-5, note\n unique(subscription_id, period)\nreview_items id, subscription_id, kind, status, title, detail, due_on, dedupe_key\ninbound_emails id, message_id(unique), from_addr, subject, body, intent, handled, result\nfx_rates quote, base, rate, as_of\nsettings key, value\n```\n\nMoney is stored as **integer minor units** (grosze, cents) in the currency it is\nactually billed in — never a float, never pre-converted. Conversion to your base\ncurrency happens at read time, except on `charges`, which pin the rate that applied\non the day so history is not re-priced when the zloty moves.\n\n`status` is `active | trial | paused | cancelled`. Cancelling keeps the row: the\nprice and the stop date are exactly what the savings figure is computed from.\n\n## The verdict\n\nEach month, two grades out of five: **quality** (how good is it) and **usage** (how\noften do you reach for it). They are combined with a harmonic mean, which collapses\ntoward whichever is worse — 5 and 1 give 1.7, not 3. A brilliant tool you opened\ntwice is still money leaving.\n\nRatings are recency-weighted over six months (each month back counts 0.75 of the\none after it), so one quiet month nudges the score without flipping it. Bands:\n`>= 3.5` keep, `>= 2.5` watch, below that a cancel candidate. A *watch* that costs\nmore than your median subscription is promoted to a cancel candidate — an\nabove-median price only has to be middling to deserve a decision.\n\n## The email assistant\n\nForward mail to the address Val Town assigns `email.ts` (read it from `links.email`\non the file listing — never construct it).\n\n- **Forward a receipt with nothing on top** → it is extracted and tracked, and a\n *confirm* item appears in the decision inbox. Nothing is ever written silently.\n- **Forward it with a question on top** → both: the charge is recorded *and* the\n question is answered from your data.\n- **Send a command** as the first line:\n\n```\nlist active subscriptions and run rate\nforecast [months] calendar forecast, yearly renewals marked\nupcoming [days] what is due soon\nsavings what cancelling has saved you\nreview the decisions waiting on you\nrate 4 2 quality 4, usage 2, for this month\ncancel [because …]\nkeep clear its open decisions\nadd 49.99 PLN monthly\nhelp\n```\n\nAnything else is treated as a question and answered by the model from your\nsubscription data.\n\nExtraction uses a strict tool rather than a forced one: a receipt the model cannot\nread comes back as \"no result\" instead of a confidently wrong row. Without an API\nkey the app still works — receipts fall back to a text scan that takes the largest\nmoney amount, and commands are unaffected.\n\n## Environment variables\n\n| Variable | Required | What it does |\n|---|---|---|\n| `ANTHROPIC_API_KEY` | for the assistant | Receipt extraction and email Q&A. Without it, commands and the heuristic scan still work. |\n| `APP_URL` | recommended | This val's HTTP endpoint, so emails can link back to the dashboard. Set it after the first deploy. |\n| `BASE_CURRENCY` | no | `PLN` (default), `USD` or `EUR`. Everything rolls up into this. |\n| `ALLOWED_USERS` | no | Extra Val Town handles allowed in, comma-separated. Members of the owning org always get in. |\n\nFX rates come from Frankfurter (ECB reference rates, no key), cached daily, falling\nback to the last cached value.\n\n## Who can see it\n\nThe dashboard is spending data, so the endpoint is not open. Val Town's\nplatform-level restricted access needs a paid business org, so the gate lives in\nthe val instead: `std/oauth` wraps the whole app, and a visitor gets through only\nif they are signed in to Val Town **and** belong to the org that owns this val.\nAnyone else gets a 401 (API) or a 403 page (browser) — never the data. Add\nindividual handles with `ALLOWED_USERS` if someone outside the org needs in.\n\nIf this val ever moves to a business-tier org, `set_http_privacy: restricted` is\nthe better mechanism — it gates at the platform edge, before any code runs — and\nthe `oauthMiddleware` wrapper should come off at the same time so nobody has to\nauthenticate twice.\n\n## Deploying\n\nThe val needs three file types: `index.ts` as `http`, `email.ts` as `email`,\n`cron.ts` as `interval` with `0 6 * * *` (UTC — that is 07:00 or 08:00 Warsaw\ndepending on the season; cron does not follow daylight saving).\n\nAfter the first deploy, read the HTTP endpoint off the file listing and set it as\n`APP_URL`.\n\n## Not built yet\n\nGoogle Calendar entries for upcoming renewals, and bank feeds via bkpr to\nreconcile charges against what actually left the account.\n",[178],"89c69a17-3e9f-482c-a4e5-69fcbef71e4c","tests","01a05e91-3c61-747c-96e4-d728b6f47ece",["D",1788292971385],"directory",[185],"97ef590a-12d0-4e46-b88a-cd0e76ce8f06","shared","01a05e91-3c61-747c-96e4-bc414149ff8a",["D",1788292971385],[191],"0c9d8d0f-fcce-481b-bbea-86b3bca1ca19","frontend","01a05e91-3c61-747c-96e4-aaea203286b2",["D",1788292971385],[196],"9e42e85e-74b3-40ac-b7ff-d7ea346d5430","backend","01a05e91-3c61-747c-96e4-6bafb8891850",["D",1788292971385],[201],"pulls","branches","forks","envVars",{"_212":214,"_215":216},"connections",{"_212":64,"_213":64},"count","unfilledCount",7,"emptyCount",3,{"_44":200,"_32":201,"_30":202,"_155":-5,"_42":43,"_41":156,"_157":60,"_39":521,"_13":64,"_34":188,"_36":-5,"_24":25,"_161":-5,"_261":522,"_27":523},{"_44":517,"_32":167,"_30":498,"_155":202,"_42":43,"_41":156,"_157":60,"_39":518,"_13":64,"_34":188,"_36":-5,"_24":25,"_161":-5,"_261":519,"_27":520},{"_44":510,"_32":511,"_30":512,"_155":498,"_42":43,"_41":156,"_157":25,"_39":513,"_13":64,"_34":35,"_36":514,"_24":25,"_161":-5,"_261":515,"_27":516},{"_44":503,"_32":504,"_30":505,"_155":498,"_42":43,"_41":156,"_157":25,"_39":506,"_13":64,"_34":35,"_36":507,"_24":25,"_161":-5,"_261":508,"_27":509},{"_44":495,"_32":496,"_30":497,"_155":498,"_42":43,"_41":156,"_157":25,"_39":499,"_13":64,"_34":35,"_36":500,"_24":25,"_161":-5,"_261":501,"_27":502},{"_44":488,"_32":489,"_30":490,"_155":202,"_42":43,"_41":156,"_157":25,"_39":491,"_13":64,"_34":35,"_36":492,"_24":25,"_161":-5,"_261":493,"_27":494},{"_44":481,"_32":482,"_30":483,"_155":202,"_42":43,"_41":156,"_157":25,"_39":484,"_13":64,"_34":35,"_36":485,"_24":25,"_161":-5,"_261":486,"_27":487},{"_44":474,"_32":475,"_30":476,"_155":202,"_42":43,"_41":156,"_157":25,"_39":477,"_13":64,"_34":35,"_36":478,"_24":25,"_161":-5,"_261":479,"_27":480},{"_44":470,"_32":33,"_30":31,"_155":202,"_42":43,"_41":14,"_157":25,"_39":471,"_13":156,"_34":35,"_36":38,"_24":25,"_161":-5,"_261":472,"_27":473},{"_44":463,"_32":464,"_30":465,"_155":202,"_42":43,"_41":156,"_157":25,"_39":466,"_13":64,"_34":35,"_36":467,"_24":25,"_161":-5,"_261":468,"_27":469},{"_44":456,"_32":457,"_30":458,"_155":202,"_42":43,"_41":156,"_157":25,"_39":459,"_13":64,"_34":35,"_36":460,"_24":25,"_161":-5,"_261":461,"_27":462},{"_44":449,"_32":450,"_30":451,"_155":202,"_42":43,"_41":156,"_157":25,"_39":452,"_13":64,"_34":35,"_36":453,"_24":25,"_161":-5,"_261":454,"_27":455},{"_44":195,"_32":196,"_30":197,"_155":-5,"_42":43,"_41":156,"_157":60,"_39":446,"_13":64,"_34":188,"_36":-5,"_24":25,"_161":-5,"_261":447,"_27":448},{"_44":442,"_32":371,"_30":366,"_155":197,"_42":43,"_41":156,"_157":60,"_39":443,"_13":64,"_34":188,"_36":-5,"_24":25,"_161":-5,"_261":444,"_27":445},{"_44":435,"_32":436,"_30":437,"_155":366,"_42":43,"_41":156,"_157":25,"_39":438,"_13":64,"_34":35,"_36":439,"_24":25,"_161":-5,"_261":440,"_27":441},{"_44":428,"_32":429,"_30":430,"_155":366,"_42":43,"_41":156,"_157":25,"_39":431,"_13":64,"_34":35,"_36":432,"_24":25,"_161":-5,"_261":433,"_27":434},{"_44":421,"_32":422,"_30":423,"_155":366,"_42":43,"_41":156,"_157":25,"_39":424,"_13":64,"_34":35,"_36":425,"_24":25,"_161":-5,"_261":426,"_27":427},{"_44":414,"_32":415,"_30":416,"_155":366,"_42":43,"_41":156,"_157":25,"_39":417,"_13":64,"_34":35,"_36":418,"_24":25,"_161":-5,"_261":419,"_27":420},{"_44":407,"_32":408,"_30":409,"_155":366,"_42":43,"_41":156,"_157":25,"_39":410,"_13":64,"_34":35,"_36":411,"_24":25,"_161":-5,"_261":412,"_27":413},{"_44":400,"_32":401,"_30":402,"_155":366,"_42":43,"_41":156,"_157":25,"_39":403,"_13":64,"_34":35,"_36":404,"_24":25,"_161":-5,"_261":405,"_27":406},{"_44":393,"_32":394,"_30":395,"_155":366,"_42":43,"_41":156,"_157":25,"_39":396,"_13":64,"_34":35,"_36":397,"_24":25,"_161":-5,"_261":398,"_27":399},{"_44":386,"_32":387,"_30":388,"_155":366,"_42":43,"_41":156,"_157":25,"_39":389,"_13":64,"_34":35,"_36":390,"_24":25,"_161":-5,"_261":391,"_27":392},{"_44":379,"_32":380,"_30":381,"_155":366,"_42":43,"_41":156,"_157":25,"_39":382,"_13":64,"_34":35,"_36":383,"_24":25,"_161":-5,"_261":384,"_27":385},{"_44":372,"_32":373,"_30":374,"_155":366,"_42":43,"_41":156,"_157":25,"_39":375,"_13":64,"_34":35,"_36":376,"_24":25,"_161":-5,"_261":377,"_27":378},{"_44":363,"_32":364,"_30":365,"_155":366,"_42":43,"_41":156,"_157":25,"_39":367,"_13":64,"_34":35,"_36":368,"_24":25,"_161":-5,"_261":369,"_27":370},{"_44":356,"_32":357,"_30":358,"_155":197,"_42":43,"_41":156,"_157":25,"_39":359,"_13":64,"_34":35,"_36":360,"_24":25,"_161":-5,"_261":361,"_27":362},{"_44":349,"_32":350,"_30":351,"_155":197,"_42":43,"_41":156,"_157":25,"_39":352,"_13":64,"_34":35,"_36":353,"_24":25,"_161":-5,"_261":354,"_27":355},{"_44":342,"_32":343,"_30":344,"_155":197,"_42":43,"_41":156,"_157":25,"_39":345,"_13":64,"_34":35,"_36":346,"_24":25,"_161":-5,"_261":347,"_27":348},{"_44":190,"_32":191,"_30":192,"_155":-5,"_42":43,"_41":156,"_157":60,"_39":339,"_13":64,"_34":188,"_36":-5,"_24":25,"_161":-5,"_261":340,"_27":341},{"_44":332,"_32":333,"_30":334,"_155":192,"_42":43,"_41":156,"_157":25,"_39":335,"_13":64,"_34":35,"_36":336,"_24":25,"_161":-5,"_261":337,"_27":338},{"_44":325,"_32":326,"_30":327,"_155":192,"_42":43,"_41":156,"_157":25,"_39":328,"_13":64,"_34":35,"_36":329,"_24":25,"_161":-5,"_261":330,"_27":331},{"_44":318,"_32":319,"_30":320,"_155":192,"_42":43,"_41":156,"_157":25,"_39":321,"_13":64,"_34":35,"_36":322,"_24":25,"_161":-5,"_261":323,"_27":324},{"_44":311,"_32":312,"_30":313,"_155":192,"_42":43,"_41":156,"_157":25,"_39":314,"_13":64,"_34":35,"_36":315,"_24":25,"_161":-5,"_261":316,"_27":317},{"_44":184,"_32":185,"_30":186,"_155":-5,"_42":43,"_41":156,"_157":60,"_39":308,"_13":64,"_34":188,"_36":-5,"_24":25,"_161":-5,"_261":309,"_27":310},{"_44":301,"_32":302,"_30":303,"_155":186,"_42":43,"_41":156,"_157":60,"_39":304,"_13":64,"_34":35,"_36":305,"_24":25,"_161":-5,"_261":306,"_27":307},{"_44":294,"_32":295,"_30":296,"_155":186,"_42":43,"_41":156,"_157":60,"_39":297,"_13":64,"_34":35,"_36":298,"_24":25,"_161":-5,"_261":299,"_27":300},{"_44":287,"_32":288,"_30":289,"_155":186,"_42":43,"_41":156,"_157":60,"_39":290,"_13":64,"_34":35,"_36":291,"_24":25,"_161":-5,"_261":292,"_27":293},{"_44":280,"_32":281,"_30":282,"_155":186,"_42":43,"_41":156,"_157":60,"_39":283,"_13":64,"_34":35,"_36":284,"_24":25,"_161":-5,"_261":285,"_27":286},{"_44":273,"_32":274,"_30":275,"_155":186,"_42":43,"_41":156,"_157":60,"_39":276,"_13":64,"_34":35,"_36":277,"_24":25,"_161":-5,"_261":278,"_27":279},{"_44":177,"_32":178,"_30":179,"_155":-5,"_42":43,"_41":180,"_157":25,"_39":270,"_13":156,"_34":20,"_36":182,"_24":25,"_161":-5,"_261":271,"_27":272},{"_44":170,"_32":171,"_30":172,"_155":-5,"_42":43,"_41":156,"_157":25,"_39":267,"_13":64,"_34":174,"_36":175,"_24":25,"_161":-5,"_261":268,"_27":269},{"_44":163,"_32":164,"_30":165,"_155":-5,"_42":43,"_41":156,"_157":25,"_39":264,"_13":64,"_34":167,"_36":168,"_24":25,"_161":-5,"_261":265,"_27":266},{"_44":153,"_32":154,"_30":58,"_155":-5,"_42":43,"_41":156,"_157":25,"_39":260,"_13":64,"_34":159,"_36":160,"_24":25,"_161":-5,"_261":262,"_27":263},["D",1788292971385],"children",[],[154],["D",1788292971385],[],[164],["D",1788292971385],[],[171],["D",1788293140525],[],[178],"fba4138c-ffe4-4991-91eb-8144251bbd09","money_test.ts","01a05e91-3c61-747c-96e4-d206c5aa558e",["D",1788292971385],"import { assertEquals } from \"jsr:@std/assert@1\";\nimport {\n addMonths,\n advanceByCycle,\n daysBetween,\n formatMoney,\n monthlyEquivalentMinor,\n normaliseNextCharge,\n shiftPeriod,\n toMinor,\n yearlyEquivalentMinor,\n} from \"../shared/money.ts\";\n\nDeno.test(\"a yearly price becomes an average monthly cost\", () => {\n assertEquals(monthlyEquivalentMinor(60000, \"yearly\"), 5000);\n assertEquals(monthlyEquivalentMinor(5000, \"monthly\"), 5000);\n assertEquals(yearlyEquivalentMinor(5000, \"monthly\"), 60000);\n assertEquals(yearlyEquivalentMinor(60000, \"yearly\"), 60000);\n});\n\nDeno.test(\"amounts are integers, so no floating point cents\", () => {\n assertEquals(toMinor(49.99), 4999);\n assertEquals(toMinor(0.1 + 0.2), 30);\n});\n\nDeno.test(\"month arithmetic clamps to the end of a short month\", () => {\n // A card charged on the 31st is charged on the 28th in February, not the 3rd of March.\n assertEquals(addMonths(\"2026-01-31\", 1), \"2026-02-28\");\n assertEquals(addMonths(\"2028-01-31\", 1), \"2028-02-29\"); // leap year\n assertEquals(addMonths(\"2026-03-31\", 1), \"2026-04-30\");\n assertEquals(addMonths(\"2026-12-15\", 1), \"2027-01-15\");\n});\n\nDeno.test(\"advancing by cycle moves a month or a year\", () => {\n assertEquals(advanceByCycle(\"2026-09-15\", \"monthly\"), \"2026-10-15\");\n assertEquals(advanceByCycle(\"2026-09-15\", \"yearly\"), \"2027-09-15\");\n});\n\nDeno.test(\"a stale next-charge date rolls forward to the first future one\", () => {\n // Untouched since January, monthly: the next charge is in September, not January.\n assertEquals(normaliseNextCharge(\"2026-01-10\", \"monthly\", \"2026-09-01\"), \"2026-09-10\");\n // Already in the future: left alone.\n assertEquals(normaliseNextCharge(\"2026-12-10\", \"monthly\", \"2026-09-01\"), \"2026-12-10\");\n // Yearly rolls a whole year at a time.\n assertEquals(normaliseNextCharge(\"2024-03-05\", \"yearly\", \"2026-09-01\"), \"2027-03-05\");\n});\n\nDeno.test(\"periods shift across year boundaries\", () => {\n assertEquals(shiftPeriod(\"2026-01\", -1), \"2025-12\");\n assertEquals(shiftPeriod(\"2026-12\", 1), \"2027-01\");\n assertEquals(shiftPeriod(\"2026-09\", 0), \"2026-09\");\n});\n\nDeno.test(\"day counts span months and leap days\", () => {\n assertEquals(daysBetween(\"2026-09-01\", \"2026-09-30\"), 29);\n assertEquals(daysBetween(\"2028-02-28\", \"2028-03-01\"), 2);\n});\n\nDeno.test(\"each currency is formatted the way it is written\", () => {\n assertEquals(formatMoney(4999, \"USD\"), \"$49.99\");\n assertEquals(formatMoney(4999, \"EUR\"), \"€49.99\");\n assertEquals(formatMoney(4999, \"PLN\").endsWith(\"zł\"), true);\n});\n",[],[185,274],"8590bda2-fbc5-409d-b008-08706e42cf23","grade_test.ts","01a05e91-3c61-747c-96e4-cf3efd98c756",["D",1788292971385],"import { assertEquals, assertLess } from \"jsr:@std/assert@1\";\nimport { computeVerdict, harmonicMean, medianMinor } from \"../shared/grade.ts\";\nimport { rating } from \"./fixtures.ts\";\n\nDeno.test(\"an unrated subscription gets no verdict, not a default one\", () => {\n const v = computeVerdict({ ratings: [], currentPeriod: \"2026-09\" });\n assertEquals(v.band, \"unrated\");\n assertEquals(v.score, null);\n});\n\nDeno.test(\"a great service you never open scores badly\", () => {\n const v = computeVerdict({ ratings: [rating(\"2026-09\", 5, 1)], currentPeriod: \"2026-09\" });\n // The mean of 5 and 1 would be 3 — a passing grade for something you never use.\n assertLess(v.score!, 2);\n assertEquals(v.band, \"cancel_candidate\");\n});\n\nDeno.test(\"solid on both axes reads as keep\", () => {\n const v = computeVerdict({ ratings: [rating(\"2026-09\", 4, 4)], currentPeriod: \"2026-09\" });\n assertEquals(v.band, \"keep\");\n assertEquals(v.score, 4);\n});\n\nDeno.test(\"the newest month counts for more than any single older month\", () => {\n const improving = computeVerdict({\n ratings: [rating(\"2026-09\", 5, 5), rating(\"2026-08\", 1, 1)],\n currentPeriod: \"2026-09\",\n });\n const declining = computeVerdict({\n ratings: [rating(\"2026-09\", 1, 1), rating(\"2026-08\", 5, 5)],\n currentPeriod: \"2026-09\",\n });\n assertLess(declining.score!, improving.score!);\n});\n\nDeno.test(\"one good month lifts a long bad run, without erasing it\", () => {\n const flat = computeVerdict({\n ratings: [\"2026-09\", \"2026-08\", \"2026-07\", \"2026-06\"].map((p) => rating(p, 2, 2)),\n currentPeriod: \"2026-09\",\n });\n const recovering = computeVerdict({\n ratings: [rating(\"2026-09\", 5, 5), ...[\"2026-08\", \"2026-07\", \"2026-06\"].map((p) => rating(p, 2, 2))],\n currentPeriod: \"2026-09\",\n });\n // Moves up, but a single month does not outvote a season of history.\n assertLess(flat.score!, recovering.score!);\n assertLess(recovering.score!, 4);\n});\n\nDeno.test(\"ratings older than the window are ignored\", () => {\n const v = computeVerdict({ ratings: [rating(\"2025-01\", 5, 5)], currentPeriod: \"2026-09\" });\n assertEquals(v.band, \"unrated\");\n assertEquals(v.ratedMonths, 0);\n});\n\nDeno.test(\"a middling service above the median cost becomes a decision\", () => {\n const ratings = [rating(\"2026-09\", 3, 3)];\n const cheap = computeVerdict({\n ratings,\n currentPeriod: \"2026-09\",\n monthlyBaseMinor: 1000,\n expensiveThresholdMinor: 5000,\n });\n const pricey = computeVerdict({\n ratings,\n currentPeriod: \"2026-09\",\n monthlyBaseMinor: 9000,\n expensiveThresholdMinor: 5000,\n });\n assertEquals(cheap.band, \"watch\");\n assertEquals(pricey.band, \"cancel_candidate\");\n});\n\nDeno.test(\"harmonic mean collapses toward the worse score\", () => {\n assertEquals(harmonicMean(5, 5), 5);\n assertLess(harmonicMean(5, 2), 3.5);\n});\n\nDeno.test(\"median handles both even and odd counts\", () => {\n assertEquals(medianMinor([100, 300, 200]), 200);\n assertEquals(medianMinor([100, 200, 300, 400]), 250);\n assertEquals(medianMinor([]), undefined);\n});\n",[],[185,281],"71c900b4-8318-4cfd-a3e5-7bb49e64b3e2","forecast_test.ts","01a05e91-3c61-747c-96e4-cac4e07ef378",["D",1788292971385],"import { assertEquals } from \"jsr:@std/assert@1\";\nimport { bucketByMonth, projectCharges } from \"../shared/forecast.ts\";\nimport { sub } from \"./fixtures.ts\";\n\nconst FROM = \"2026-09-01\";\nconst UNTIL = \"2027-08-31\";\n\nDeno.test(\"a monthly plan projects one charge per month\", () => {\n const charges = projectCharges([sub({ nextChargeOn: \"2026-09-15\", billingCycle: \"monthly\" })], {\n from: FROM,\n until: UNTIL,\n });\n assertEquals(charges.length, 12);\n assertEquals(charges[0].date, \"2026-09-15\");\n assertEquals(charges[11].date, \"2027-08-15\");\n});\n\nDeno.test(\"a yearly plan projects one charge, in the month it actually falls\", () => {\n const charges = projectCharges(\n [sub({ nextChargeOn: \"2027-03-20\", billingCycle: \"yearly\", amountMinor: 120000 })],\n { from: FROM, until: UNTIL },\n );\n assertEquals(charges.length, 1);\n assertEquals(charges[0].date, \"2027-03-20\");\n assertEquals(charges[0].billingCycle, \"yearly\");\n});\n\nDeno.test(\"cancelled and paused subscriptions cost nothing going forward\", () => {\n const charges = projectCharges(\n [sub({ status: \"cancelled\" }), sub({ status: \"paused\" }), sub({ status: \"trial\" })],\n { from: FROM, until: UNTIL },\n );\n // Only the trial is still live.\n assertEquals(new Set(charges.map((c) => c.subscriptionId)).size, 1);\n});\n\nDeno.test(\"auto-renew off means the booked charge happens and nothing after it\", () => {\n const charges = projectCharges([sub({ autoRenew: false, nextChargeOn: \"2026-09-15\" })], {\n from: FROM,\n until: UNTIL,\n });\n assertEquals(charges.length, 1);\n});\n\nDeno.test(\"a next-charge date left behind still forecasts from today\", () => {\n const charges = projectCharges([sub({ nextChargeOn: \"2025-02-10\", billingCycle: \"monthly\" })], {\n from: FROM,\n until: \"2026-12-31\",\n });\n assertEquals(charges[0].date, \"2026-09-10\");\n assertEquals(charges.length, 4); // Sep, Oct, Nov, Dec\n});\n\nDeno.test(\"foreign currency is converted at the subscription's rate\", () => {\n const charges = projectCharges(\n [sub({ currency: \"USD\", amountMinor: 1000, fxRate: 4, nextChargeOn: \"2026-09-15\" })],\n { from: FROM, until: \"2026-09-30\" },\n );\n assertEquals(charges[0].amountMinor, 1000);\n assertEquals(charges[0].baseMinor, 4000);\n});\n\nDeno.test(\"months with nothing due still appear on the axis\", () => {\n const charges = projectCharges(\n [sub({ nextChargeOn: \"2026-11-05\", billingCycle: \"yearly\" })],\n { from: FROM, until: UNTIL },\n );\n const buckets = bucketByMonth(charges, \"2026-09\", 12);\n assertEquals(buckets.length, 12);\n assertEquals(buckets[0].period, \"2026-09\");\n assertEquals(buckets[0].baseMinor, 0);\n assertEquals(buckets[2].period, \"2026-11\");\n assertEquals(buckets[2].charges.length, 1);\n});\n\nDeno.test(\"a yearly renewal lands in one month rather than being smeared across twelve\", () => {\n const yearly = sub({ nextChargeOn: \"2027-01-10\", billingCycle: \"yearly\", amountMinor: 120000 });\n const buckets = bucketByMonth(projectCharges([yearly], { from: FROM, until: UNTIL }), \"2026-09\", 12);\n const withMoney = buckets.filter((b) => b.baseMinor > 0);\n assertEquals(withMoney.length, 1);\n assertEquals(withMoney[0].period, \"2027-01\");\n assertEquals(withMoney[0].baseMinor, 120000);\n});\n",[],[185,288],"ae1e8728-a8ef-4b3e-bf18-957f3e3ea001","fixtures.ts","01a05e91-3c61-747c-96e4-c78be5db5fd8",["D",1788292971385],"/** Builders for test data — only the fields a given test cares about need naming. */\nimport type { Rating, SubscriptionView } from \"../shared/types.ts\";\n\nlet nextId = 1;\n\nexport function sub(overrides: Partial = {}): SubscriptionView {\n const id = overrides.id ?? nextId++;\n return {\n id,\n serviceId: id,\n serviceName: `Service ${id}`,\n category: null,\n planName: null,\n amountMinor: 5000,\n currency: \"PLN\",\n billingCycle: \"monthly\",\n startedOn: \"2026-01-01\",\n nextChargeOn: \"2026-09-15\",\n status: \"active\",\n cancelledOn: null,\n cancelReason: null,\n paymentMethod: null,\n autoRenew: true,\n source: \"manual\",\n notes: null,\n createdAt: \"2026-01-01\",\n updatedAt: \"2026-01-01\",\n monthlyMinor: 5000,\n yearlyMinor: 60000,\n monthlyBaseMinor: 5000,\n yearlyBaseMinor: 60000,\n fxRate: 1,\n verdict: { quality: null, usage: null, score: null, ratedMonths: 0, band: \"unrated\", reason: \"\" },\n latestRating: null,\n ratingDue: true,\n ...overrides,\n };\n}\n\nexport function rating(period: string, quality: number, usage: number): Rating {\n return { id: nextId++, subscriptionId: 1, period, quality, usage, note: null, createdAt: period };\n}\n",[],[185,295],"eaf3110f-3c14-494c-8480-e7a3956f9ba6","email_parse_test.ts","01a05e91-3c61-747c-96e4-c1a477bb710f",["D",1788292971385],"import { assertEquals } from \"jsr:@std/assert@1\";\nimport {\n cleanSubject,\n heuristicAmount,\n parseAmount,\n parseCommand,\n senderDomain,\n splitEmail,\n} from \"../backend/email/parse.ts\";\n\nconst GMAIL_FORWARD = `Please handle this one.\n\n---------- Forwarded message ---------\nFrom: Netflix \nDate: Mon, 1 Sep 2026 at 09:12\nSubject: Your Netflix bill\n\nYour payment of 56,00 zł was received.\n`;\n\nDeno.test(\"a note above a forward is separated from the receipt below it\", () => {\n const split = splitEmail(GMAIL_FORWARD);\n assertEquals(split.hasComment, true);\n assertEquals(split.comment, \"Please handle this one.\");\n assertEquals(split.quoted.includes(\"Your payment of 56,00 zł\"), true);\n});\n\nDeno.test(\"a bare forward has no comment, so it is an ingest\", () => {\n assertEquals(splitEmail(BARE_FORWARD).hasComment, false);\n});\n\nconst BARE_FORWARD = GMAIL_FORWARD.replace(\"Please handle this one.\\n\\n\", \"\");\n\nDeno.test(\"'fyi' on its own is not a comment\", () => {\n for (const noise of [\"fyi\", \"FYI\", \"fwd\", \"thanks\", \" ok \"]) {\n assertEquals(splitEmail(`${noise}\\n\\n${BARE_FORWARD}`).hasComment, false, noise);\n }\n});\n\nDeno.test(\"Apple and Outlook forward styles are recognised too\", () => {\n const apple = \"is this worth keeping?\\n\\nBegin forwarded message:\\n\\nFrom: iCloud\\nTotal: $2.99\";\n assertEquals(splitEmail(apple).comment, \"is this worth keeping?\");\n\n const outlook = \"check this\\n\\n-----Original Message-----\\nFrom: Spotify\\nAmount: 23,99 zł\";\n assertEquals(splitEmail(outlook).comment, \"check this\");\n});\n\nDeno.test(\"a phone signature is not mistaken for a comment\", () => {\n assertEquals(splitEmail(`Sent from my iPhone\\n\\n${BARE_FORWARD}`).hasComment, false);\n});\n\nDeno.test(\"quoted reply lines are not the sender's own words\", () => {\n const split = splitEmail(\"> Your payment of 56,00 zł was received.\\n> Thanks\");\n assertEquals(split.hasComment, false);\n});\n\nDeno.test(\"both decimal conventions parse to the same number\", () => {\n assertEquals(parseAmount(\"1 234,56\"), 1234.56);\n assertEquals(parseAmount(\"1,234.56\"), 1234.56);\n assertEquals(parseAmount(\"56,00\"), 56);\n assertEquals(parseAmount(\"2.99\"), 2.99);\n assertEquals(parseAmount(\"nope\"), null);\n});\n\nDeno.test(\"the largest amount in a receipt is taken as the total\", () => {\n const hit = heuristicAmount(\"Subtotal 45,53 zł\\nVAT 10,47 zł\\nTotal 56,00 zł\");\n assertEquals(hit?.amount, 56);\n assertEquals(hit?.currency, \"PLN\");\n\n // The same vendor writes \"zł\" in one template and ASCII \"zl\" in another.\n assertEquals(heuristicAmount(\"Your payment of 56,00 zl was received\")?.amount, 56);\n assertEquals(heuristicAmount(\"Your payment of 56,00 zl was received\")?.currency, \"PLN\");\n assertEquals(heuristicAmount(\"Total: PLN 129.00\")?.amount, 129);\n assertEquals(heuristicAmount(\"You paid $9.99 for your monthly plan\")?.currency, \"USD\");\n assertEquals(heuristicAmount(\"Charged €120.00 annually\")?.currency, \"EUR\");\n assertEquals(heuristicAmount(\"Charged €120.00 annually\")?.cycle, \"yearly\");\n});\n\nDeno.test(\"commands parse off the first line\", () => {\n assertEquals(parseCommand(\"list\"), { kind: \"list\" });\n assertEquals(parseCommand(\"forecast 6\"), { kind: \"forecast\", months: 6 });\n assertEquals(parseCommand(\"upcoming\"), { kind: \"upcoming\", days: 30 });\n assertEquals(parseCommand(\"cancel Netflix\"), { kind: \"cancel\", service: \"Netflix\", reason: null });\n assertEquals(parseCommand(\"cancel Netflix because I never watch it\"), {\n kind: \"cancel\",\n service: \"Netflix\",\n reason: \"I never watch it\",\n });\n assertEquals(parseCommand(\"rate Figma 4 2\"), {\n kind: \"rate\",\n service: \"Figma\",\n quality: 4,\n usage: 2,\n note: null,\n });\n assertEquals(parseCommand(\"add Spotify 23.99 PLN monthly\"), {\n kind: \"add\",\n service: \"Spotify\",\n amount: 23.99,\n currency: \"PLN\",\n cycle: \"monthly\",\n });\n});\n\nDeno.test(\"a question is not a command\", () => {\n assertEquals(parseCommand(\"how much am I spending on software?\"), null);\n assertEquals(parseCommand(\"is Netflix worth keeping\"), null);\n});\n\nDeno.test(\"sender domains are normalised, and forward prefixes stripped\", () => {\n assertEquals(senderDomain(\"Netflix \"), \"netflix.com\");\n assertEquals(senderDomain(\"billing@figma.com\"), \"figma.com\");\n assertEquals(senderDomain(\"no-reply@email.apple.com\"), \"apple.com\");\n assertEquals(senderDomain(\"receipts@billing.example.co.uk\"), \"example.co.uk\");\n assertEquals(cleanSubject(\"Fwd: Re: Your receipt\"), \"Your receipt\");\n assertEquals(cleanSubject(null), \"\");\n});\n",[],[185,302],["D",1788292971385],[251,252,253,254,255],[185],"ecb87f55-534f-49ff-8a5c-b82abf633a9a","types.ts","01a05e91-3c61-747c-96e4-bbe529acd174",["D",1788292971385],"/** Shared types used by both the backend and the browser bundle. */\n\nexport type Currency = \"PLN\" | \"USD\" | \"EUR\";\nexport const CURRENCIES: Currency[] = [\"PLN\", \"USD\", \"EUR\"];\n\nexport type BillingCycle = \"monthly\" | \"yearly\";\nexport const BILLING_CYCLES: BillingCycle[] = [\"monthly\", \"yearly\"];\n\nexport type SubscriptionStatus = \"active\" | \"trial\" | \"paused\" | \"cancelled\";\n\n/** Statuses that still cost money and still get forecast, rated and reminded about. */\nexport const LIVE_STATUSES: SubscriptionStatus[] = [\"active\", \"trial\"];\n\nexport function isLive(status: SubscriptionStatus): boolean {\n return status === \"active\" || status === \"trial\";\n}\n\nexport interface Service {\n id: number;\n name: string;\n /** Sender domain of confirmation mail, used to match forwarded email to a service. */\n vendorDomain: string | null;\n category: string | null;\n notes: string | null;\n createdAt: string;\n}\n\nexport interface Subscription {\n id: number;\n serviceId: number;\n serviceName: string;\n category: string | null;\n planName: string | null;\n /** Native amount in minor units (grosze / cents). Never a float. */\n amountMinor: number;\n currency: Currency;\n billingCycle: BillingCycle;\n startedOn: string | null;\n /** ISO date of the next expected charge. Drives forecasts and reminders. */\n nextChargeOn: string | null;\n status: SubscriptionStatus;\n cancelledOn: string | null;\n cancelReason: string | null;\n paymentMethod: string | null;\n autoRenew: boolean;\n /** Where the row came from: typed in by hand, or extracted from a forwarded email. */\n source: \"manual\" | \"email\";\n notes: string | null;\n createdAt: string;\n updatedAt: string;\n}\n\n/** A real payment that happened, as opposed to a projected one. */\nexport interface Charge {\n id: number;\n subscriptionId: number;\n chargedOn: string;\n amountMinor: number;\n currency: Currency;\n /** Value in base currency at the time of the charge, so history is not re-rated by later FX moves. */\n baseMinor: number;\n fxRate: number;\n source: \"manual\" | \"email\" | \"projected\";\n inboundEmailId: number | null;\n createdAt: string;\n}\n\n/** One month's worth of \"how good is this, really\". */\nexport interface Rating {\n id: number;\n subscriptionId: number;\n /** YYYY-MM */\n period: string;\n /** 1..5 — how happy am I with the quality of the service. */\n quality: number;\n /** 1..5 — how often do I actually use it. */\n usage: number;\n note: string | null;\n createdAt: string;\n}\n\nexport type ReviewKind =\n | \"confirm_new\"\n | \"renewal_soon\"\n | \"yearly_upcoming\"\n | \"rating_due\"\n | \"cancel_candidate\";\n\nexport type ReviewStatus = \"open\" | \"done\" | \"dismissed\";\n\n/** The actionable inbox: the thing that stops a \"I meant to cancel that\" from evaporating. */\nexport interface ReviewItem {\n id: number;\n subscriptionId: number | null;\n kind: ReviewKind;\n status: ReviewStatus;\n title: string;\n detail: string | null;\n dueOn: string | null;\n createdAt: string;\n resolvedAt: string | null;\n}\n\nexport type EmailIntent = \"ingest\" | \"question\" | \"command\" | \"unknown\";\n\nexport interface InboundEmail {\n id: number;\n messageId: string | null;\n fromAddr: string;\n subject: string | null;\n intent: EmailIntent;\n handled: boolean;\n result: string | null;\n createdAt: string;\n}\n\n/** Verdict for a single subscription, computed from its recent ratings and its cost. */\nexport interface Verdict {\n /** Recency-weighted quality, 1..5, or null when never rated. */\n quality: number | null;\n usage: number | null;\n /** Harmonic mean of quality and usage — punishes \"great but unused\" and \"used but bad\". */\n score: number | null;\n ratedMonths: number;\n band: \"keep\" | \"watch\" | \"cancel_candidate\" | \"unrated\";\n reason: string;\n}\n\n/** A subscription plus everything the dashboard needs to render a row. */\nexport interface SubscriptionView extends Subscription {\n /** Native cost normalised to a month, in minor units of the native currency. */\n monthlyMinor: number;\n yearlyMinor: number;\n /** Same, converted to the base currency. */\n monthlyBaseMinor: number;\n yearlyBaseMinor: number;\n /** Units of base currency per unit of this subscription's currency, at render time. */\n fxRate: number;\n verdict: Verdict;\n latestRating: Rating | null;\n /** True when this month has no rating yet and the subscription is live. */\n ratingDue: boolean;\n}\n\n/** One projected (not yet charged) payment. */\nexport interface ProjectedCharge {\n subscriptionId: number;\n serviceName: string;\n date: string;\n amountMinor: number;\n currency: Currency;\n baseMinor: number;\n billingCycle: BillingCycle;\n}\n\nexport interface MonthBucket {\n /** YYYY-MM */\n period: string;\n baseMinor: number;\n charges: ProjectedCharge[];\n}\n\nexport interface Summary {\n baseCurrency: Currency;\n /** Sum of monthly-equivalents of everything live — the steady-state burn. */\n monthlyRunRateBaseMinor: number;\n yearlyRunRateBaseMinor: number;\n /** What the next 30 days will actually cost, on the calendar. */\n next30DaysBaseMinor: number;\n /** Calendar-accurate 12-month projection, so yearly renewals land in their real month. */\n next12MonthsBaseMinor: number;\n activeCount: number;\n monthlyCount: number;\n yearlyCount: number;\n /** Cumulative monthly-equivalent not spent since each cancellation. */\n savedToDateBaseMinor: number;\n /** Monthly-equivalent of everything cancelled — the ongoing saving. */\n savedPerMonthBaseMinor: number;\n openReviewCount: number;\n ratingDueCount: number;\n}\n",[],[191,312],"d38758ac-4b8b-44f0-ad77-095d40ec7ce6","money.ts","01a05e91-3c61-747c-96e4-b64ac2c18e33",["D",1788292971385],"/**\n * Money and billing-cycle maths. Pure — no imports, runs on both sides.\n *\n * Amounts are integer minor units (grosze / cents) everywhere. PLN, USD and EUR\n * all have two decimal places, so one constant covers every supported currency.\n */\nimport type { BillingCycle, Currency } from \"./types.ts\";\n\nexport const MINOR = 100;\n\nexport function toMinor(amount: number): number {\n return Math.round(amount * MINOR);\n}\n\nexport function fromMinor(minor: number): number {\n return minor / MINOR;\n}\n\nconst SYMBOLS: Record = { PLN: \"zł\", USD: \"$\", EUR: \"€\" };\n\n/** \"1 234,56 zł\" for PLN, \"$1,234.56\" for USD/EUR — matches where each symbol normally sits. */\nexport function formatMoney(minor: number, currency: Currency, opts?: { compact?: boolean }): string {\n const value = fromMinor(minor);\n const locale = currency === \"PLN\" ? \"pl-PL\" : \"en-US\";\n const body = value.toLocaleString(locale, {\n minimumFractionDigits: opts?.compact ? 0 : 2,\n maximumFractionDigits: opts?.compact ? 0 : 2,\n });\n return currency === \"PLN\" ? `${body} ${SYMBOLS.PLN}` : `${SYMBOLS[currency]}${body}`;\n}\n\n/**\n * Cost of one cycle expressed as a month.\n *\n * A yearly subscription is divided by twelve — this is the \"average monthly cost\"\n * that makes a 600 zł/year plan comparable to a 49 zł/month one. It is a run-rate,\n * not a cash-flow figure; the calendar projection below is what tells you when the\n * money actually leaves.\n */\nexport function monthlyEquivalentMinor(amountMinor: number, cycle: BillingCycle): number {\n return cycle === \"yearly\" ? Math.round(amountMinor / 12) : amountMinor;\n}\n\nexport function yearlyEquivalentMinor(amountMinor: number, cycle: BillingCycle): number {\n return cycle === \"yearly\" ? amountMinor : amountMinor * 12;\n}\n\n// ---------------------------------------------------------------------------\n// Dates. Stored as YYYY-MM-DD strings and manipulated in UTC so that a server in\n// one timezone and a browser in another agree on which day a charge lands.\n// ---------------------------------------------------------------------------\n\nexport function today(now: Date = new Date()): string {\n return toISODate(now);\n}\n\nexport function toISODate(d: Date): string {\n return d.toISOString().slice(0, 10);\n}\n\nexport function parseISODate(s: string): Date {\n const [y, m, d] = s.split(\"-\").map(Number);\n return new Date(Date.UTC(y, m - 1, d));\n}\n\n/** YYYY-MM for a date string. */\nexport function periodOf(isoDate: string): string {\n return isoDate.slice(0, 7);\n}\n\nexport function currentPeriod(now: Date = new Date()): string {\n return toISODate(now).slice(0, 7);\n}\n\n/** Previous period, e.g. \"2026-01\" -> \"2025-12\". */\nexport function shiftPeriod(period: string, months: number): string {\n const [y, m] = period.split(\"-\").map(Number);\n const d = new Date(Date.UTC(y, m - 1 + months, 1));\n return toISODate(d).slice(0, 7);\n}\n\n/**\n * Add months, clamping the day to the end of the target month.\n * 31 Jan + 1 month is 28/29 Feb, which is how card renewals actually behave.\n */\nexport function addMonths(isoDate: string, months: number): string {\n const d = parseISODate(isoDate);\n const day = d.getUTCDate();\n const target = new Date(Date.UTC(d.getUTCFullYear(), d.getUTCMonth() + months, 1));\n const lastDay = new Date(Date.UTC(target.getUTCFullYear(), target.getUTCMonth() + 1, 0)).getUTCDate();\n target.setUTCDate(Math.min(day, lastDay));\n return toISODate(target);\n}\n\nexport function addDays(isoDate: string, days: number): string {\n const d = parseISODate(isoDate);\n d.setUTCDate(d.getUTCDate() + days);\n return toISODate(d);\n}\n\nexport function advanceByCycle(isoDate: string, cycle: BillingCycle): string {\n return addMonths(isoDate, cycle === \"yearly\" ? 12 : 1);\n}\n\nexport function daysBetween(from: string, to: string): number {\n return Math.round((parseISODate(to).getTime() - parseISODate(from).getTime()) / 86_400_000);\n}\n\n/**\n * Roll a stale next-charge date forward until it is in the future.\n * Cheaper than a backfill job: a subscription whose date was never updated still\n * forecasts correctly, and the loop is bounded so bad data cannot hang a request.\n */\nexport function normaliseNextCharge(nextChargeOn: string, cycle: BillingCycle, from: string): string {\n let next = nextChargeOn;\n for (let i = 0; i < 240 && next < from; i++) {\n next = advanceByCycle(next, cycle);\n }\n return next;\n}\n",[],[191,319],"45c5dce4-960a-468c-8562-8bdd58ac32db","grade.ts","01a05e91-3c61-747c-96e4-b3cf2a4bc98c",["D",1788292971385],"/**\n * Turning two monthly grades into a keep/cancel verdict.\n *\n * Each month you give a subscription two scores out of five: how good it is\n * (quality) and how much you actually reach for it (usage). Neither alone is a\n * decision — a brilliant tool you opened twice is still money leaving, and a\n * mediocre one you live in is worth keeping. So the two are combined with a\n * harmonic mean, which collapses toward whichever score is *worse*: 5 and 1 give\n * 1.7, not 3. Lopsided pairs are exactly the ones worth surfacing.\n */\nimport type { Rating, Verdict } from \"./types.ts\";\nimport { shiftPeriod } from \"./money.ts\";\n\n/** How many months of history feed a verdict. */\nexport const WINDOW_MONTHS = 6;\n/** Each month back counts for three quarters of the one after it. */\nconst DECAY = 0.75;\n\nexport const KEEP_THRESHOLD = 3.5;\nexport const WATCH_THRESHOLD = 2.5;\n\nexport function harmonicMean(a: number, b: number): number {\n if (a <= 0 || b <= 0) return 0;\n return (2 * a * b) / (a + b);\n}\n\nexport interface VerdictInput {\n ratings: Rating[];\n currentPeriod: string;\n /** Monthly cost in base currency, used to escalate an expensive middling service. */\n monthlyBaseMinor?: number;\n /** Cost above which \"watch\" becomes \"cancel candidate\". Typically the portfolio median. */\n expensiveThresholdMinor?: number;\n}\n\nexport function computeVerdict(input: VerdictInput): Verdict {\n const { ratings, currentPeriod, monthlyBaseMinor, expensiveThresholdMinor } = input;\n\n // Index the window by period so gaps (months you skipped) simply carry no weight.\n const windowPeriods = new Map();\n for (let i = 0; i < WINDOW_MONTHS; i++) {\n windowPeriods.set(shiftPeriod(currentPeriod, -i), Math.pow(DECAY, i));\n }\n\n let qSum = 0, uSum = 0, wSum = 0, months = 0;\n for (const r of ratings) {\n const w = windowPeriods.get(r.period);\n if (w === undefined) continue;\n qSum += r.quality * w;\n uSum += r.usage * w;\n wSum += w;\n months++;\n }\n\n if (wSum === 0) {\n return {\n quality: null,\n usage: null,\n score: null,\n ratedMonths: 0,\n band: \"unrated\",\n reason: \"No ratings yet — rate it once to get a verdict.\",\n };\n }\n\n const quality = round1(qSum / wSum);\n const usage = round1(uSum / wSum);\n const score = round1(harmonicMean(quality, usage));\n\n let band: Verdict[\"band\"] = score >= KEEP_THRESHOLD ? \"keep\" : score >= WATCH_THRESHOLD ? \"watch\" : \"cancel_candidate\";\n\n const expensive = monthlyBaseMinor !== undefined\n && expensiveThresholdMinor !== undefined\n && monthlyBaseMinor > expensiveThresholdMinor;\n\n // An above-median cost only has to be middling, not bad, to deserve a decision.\n if (band === \"watch\" && expensive) band = \"cancel_candidate\";\n\n return { quality, usage, score, ratedMonths: months, band, reason: explain(quality, usage, score, band, expensive) };\n}\n\nfunction explain(quality: number, usage: number, score: number, band: Verdict[\"band\"], expensive: boolean): string {\n const gap = quality - usage;\n if (gap >= 1.5) {\n return `Good service (${quality}) you barely use (${usage}) — the usual cancel candidate.`;\n }\n if (gap <= -1.5) {\n return `You use it (${usage}) despite rating it ${quality} — look for a better alternative.`;\n }\n if (band === \"keep\") return `Solid on both axes (${quality} quality, ${usage} usage).`;\n if (band === \"cancel_candidate\" && expensive) {\n return `Middling (${score}) and above your median cost — decide on it.`;\n }\n if (band === \"cancel_candidate\") return `Low on both axes (${quality} quality, ${usage} usage).`;\n return `Neither good nor bad (${score}) — worth a conscious decision.`;\n}\n\nfunction round1(n: number): number {\n return Math.round(n * 10) / 10;\n}\n\nexport function bandLabel(band: Verdict[\"band\"]): string {\n return { keep: \"Keep\", watch: \"Watch\", cancel_candidate: \"Cancel?\", unrated: \"Unrated\" }[band];\n}\n\n/** Median of the live monthly costs — the reference point for \"expensive\". */\nexport function medianMinor(values: number[]): number | undefined {\n if (values.length === 0) return undefined;\n const sorted = [...values].sort((a, b) => a - b);\n const mid = Math.floor(sorted.length / 2);\n return sorted.length % 2 ? sorted[mid] : Math.round((sorted[mid - 1] + sorted[mid]) / 2);\n}\n",[],[191,326],"127f38d7-cc16-4450-81dd-2c798772a2bb","forecast.ts","01a05e91-3c61-747c-96e4-adbc3c48919a",["D",1788292971385],"/**\n * Projecting charges forward. Pure — the calendar maths that turns a set of\n * subscriptions into \"what leaves the account, and when\".\n *\n * Kept out of the backend so it can be tested without a database, and so the\n * browser could run the same projection if it ever needed to.\n */\nimport type { MonthBucket, ProjectedCharge, SubscriptionView } from \"./types.ts\";\nimport { isLive } from \"./types.ts\";\nimport { advanceByCycle, normaliseNextCharge, periodOf, shiftPeriod, today } from \"./money.ts\";\n\n/** Bound on how many charges one subscription can contribute — 20 years of monthly. */\nconst MAX_ITERATIONS = 240;\n\nexport function projectCharges(\n subs: SubscriptionView[],\n opts: { from?: string; until: string },\n): ProjectedCharge[] {\n const from = opts.from ?? today();\n const out: ProjectedCharge[] = [];\n\n for (const s of subs) {\n if (!isLive(s.status) || !s.nextChargeOn) continue;\n // A stale next-charge date rolls forward to the first one still ahead of us,\n // so a row nobody has touched in months still forecasts correctly.\n let date = normaliseNextCharge(s.nextChargeOn, s.billingCycle, from);\n for (let i = 0; i < MAX_ITERATIONS && date <= opts.until; i++) {\n out.push({\n subscriptionId: s.id,\n serviceName: s.serviceName,\n date,\n amountMinor: s.amountMinor,\n currency: s.currency,\n baseMinor: Math.round(s.amountMinor * s.fxRate),\n billingCycle: s.billingCycle,\n });\n // Auto-renew off means the charge already scheduled happens and nothing after it.\n if (!s.autoRenew) break;\n date = advanceByCycle(date, s.billingCycle);\n }\n }\n return out.sort((a, b) => a.date.localeCompare(b.date) || a.serviceName.localeCompare(b.serviceName));\n}\n\n/** Group into calendar months, keeping empty months so the chart has a continuous axis. */\nexport function bucketByMonth(charges: ProjectedCharge[], startPeriod: string, months: number): MonthBucket[] {\n const buckets: MonthBucket[] = [];\n const index = new Map();\n for (let i = 0; i < months; i++) {\n const period = shiftPeriod(startPeriod, i);\n const bucket: MonthBucket = { period, baseMinor: 0, charges: [] };\n buckets.push(bucket);\n index.set(period, bucket);\n }\n for (const c of charges) {\n const bucket = index.get(periodOf(c.date));\n if (!bucket) continue;\n bucket.baseMinor += c.baseMinor;\n bucket.charges.push(c);\n }\n return buckets;\n}\n",[],[191,333],["D",1788292971385],[246,247,248,249],[191],"eeae0170-63a0-4e48-9d33-556c1ca56401","root.tsx","01a05e91-3c61-747c-96e4-a4b05c9d6ec8",["D",1788292971385],"/** @jsxImportSource npm:hono@^4.13.5/jsx */\n/**\n * The HTML shell. Never cached, so it can stamp the current version onto the\n * client entry — `immutableFileUrl` turns /frontend/index.tsx into\n * /__immutable//frontend/index.tsx, which browsers may cache forever and\n * which a publish invalidates by bumping the version.\n *\n * The

Diff · v5