Initial scaffold: Flask/SQLite backend, React/Vite PWA frontend

Backend: receipt upload -> LLM vision extraction (OpenAI-compatible, provider-agnostic), item review/edit, per-group splitting against Cospend projects/members, highlight+upload via WebDAV, public share link, bill creation via Cospend's OCS API (verified against real source, not just doc summaries). Frontend: capture -> review -> group -> summary flow as an installable PWA. install.sh / run.sh (venv + npm, tmux session) instead of Docker, per the ~/Projects/gain pattern.
2026-08-30 15:02:18 +02:00
commit d97aac0e17
42 changed files with 8274 additions and 0 deletions
@@ -0,0 +1,10 @@
 .env
 backend/.env
 backend/instance/*.sqlite3
 backend/uploads/
 backend/.venv/
 backend/__pycache__/
 backend/**/__pycache__/
 node_modules/
 frontend/dist/
 .DS_Store
@@ -0,0 +1,117 @@
 # wgBill — plan
 Webapp to replace the manual "upload to NC → share link → paste into Cospend
 bill title" flow with: photo → extracted items → pick which ones (per
 splitting group) → highlighted photo → uploaded + shared → Cospend bill(s)
 created automatically.
 ## Confirmed via API research
 - **WebDAV** (`PUT /remote.php/dav/files/<user>/<path>`) — uploads the
  receipt/highlighted image. Auth via NC app password (Basic auth).
 - **OCS Share API** (`POST /ocs/v2.php/apps/files_sharing/api/v1/shares`,
  `shareType=3`) — creates the public link, response includes ready `url`.
 - **Cospend API** — verified against the actual source (`appinfo/routes.php`
  + `lib/Controller/ApiController.php` + `lib/Db/{Project,Member}.php` in
  `julien-nc/cospend-nc`), not just doc summaries:
  - It's an OCS API, same family as the Share API — full paths are under
    `/ocs/v2.php/apps/cospend/api/v1/...`, need `OCS-APIRequest: true`.
  - `GET  /projects` → `getLocalProjects` — lists the authenticated user's
    projects (`{id, name, ...}`). No hardcoded project id needed; the app
    lets you pick.
  - `GET  /projects/{id}/members` → `{id, name, ...}` (member `id` is
    numeric).
  - `POST /projects/{id}/bills` → `createBill(projectId, date, what, payer,
    payedFor, amount, ..., comment, ...)` — **camelCase** params (not the
    old IHateMoney-style snake_case an earlier doc summary suggested);
    `payer`/`payedFor` are numeric member ids, `payedFor` is a
    comma-separated string of them. Returns just the new bill's **id**
    (int), not a bill object.
  **No native attachment/link field on a bill.** Confirms the current manual
  trick (put the link in the bill title) is the only integration point — the
  app does the same. Cospend's UI only recognizes a bill as "has an
  attachment" when the link is in `what` (the title), not `comment` — a link
  in `comment` is just plain text. So: link goes in `what`, itemized
  breakdown goes in `comment`.
 - CORS ruled out doing this as a pure static frontend talking to NC directly
  from a different origin (WebDAV PUT and Login Flow v2 both fight the
  browser here) — decided to just build a small backend instead.
 ## Architecture
 ```
 [PWA frontend]  --(HTTPS, JSON)-->  [backend]  --(WebDAV / OCS / Cospend API)-->  [Nextcloud]
                                        |
                                        +--(OpenAI-compatible chat completions)--> [vision LLM]
 ```
 - **Backend**: Python + Flask + SQLite. Holds NC app password and the
  vision-provider API key as server config (env vars), never exposed to the
  client. SQLite holds the per-receipt session (parsed items, image path,
  group selections) — durable across a backend restart, unlike an in-memory
  store, and trivial to inspect/debug directly.
 - **Frontend**: Vite + React + TypeScript, PWA (installable, camera access
  via `<input capture>` / `getUserMedia`).
 - **Vision extraction**: any OpenAI-compatible endpoint. Config = `base_url`
  + `api_key` + `model`. Works unmodified for OpenAI; for Gemini point
  `base_url` at `https://generativelanguage.googleapis.com/v1beta/openai/`.
  Switch/compare providers via env var, no code change.
 ## Data flow
 1. **Capture** — frontend takes/picks a photo, uploads to backend.
 2. **Extract** — backend sends image to the vision LLM with a prompt asking
   for strict JSON: `{ items: [{ id, label, price, bbox: [x,y,w,h] }] }`
   (bbox in normalized 0–1 coords, for the highlight step later). Backend
   stores the original image on disk and the parsed items in a SQLite
   `receipts` table, keyed by a random session id; a periodic cleanup (or
   just TTL-on-read) drops old sessions/images.
 3. **Review** — frontend shows the parsed list, editable (OCR/LLM extraction
   won't be perfect — fix a mis-read price, merge a split line, add a missed
   item, adjust a bbox by dragging).
 4. **Group & select** — user selects items into one or more groups; each
   group gets its own "split with" member list (loaded from the relevant
   Cospend project's members) and payer. Same UI, run N times per receipt.
 5. **Highlight** — backend (or client canvas) draws boxes over selected
   items' bboxes on the original image, one output image per group.
 6. **Per group**, backend:
   - `PUT` highlighted image via WebDAV to a configured folder.
   - Creates a public share link via OCS Share API.
   - `createBill` in Cospend: amount = sum of group's item prices, payer,
     payedFor = group's members, title (`what`) includes the share link
     (so Cospend's UI shows it as an attachment), comment = itemized list.
 7. Frontend shows confirmation + links to the created bill(s).
 ## Config (env vars)
 - `NC_BASE_URL`, `NC_USERNAME`, `NC_APP_PASSWORD`, `NC_UPLOAD_FOLDER`
 - `COSPEND_PROJECT_ID` (or a picker if you use more than one project)
 - `LLM_BASE_URL`, `LLM_API_KEY`, `LLM_MODEL`
 - Single-user/household tool — one shared backend config, not per-user
  login. If later you want it multi-tenant (each housemate logging in as
  themselves), that's a bigger change (real NC OAuth/session per user) —
  intentionally deferred, not needed for v1.
 ## Open items to confirm before/while building
 - Cospend project/member selection is handled live via the API (project
  picker + member list fetched per request), not hardcoded — resolved.
 - Where the backend actually runs — decided: no Docker for now, plain
  `install.sh`/`run.sh` (venv + npm, tmux session with a backend/frontend
  window each), matching the pattern used in ~/Projects/gain.
 - Bbox-based highlighting depends on the vision model returning usable
  coordinates — some models are much better at this than others; may need a
  fallback (e.g. user manually drags a highlight box) if a given provider's
  bboxes are unreliable. Worth testing with your candidate receipts early.
 ## Build order
 1. Scaffold backend (Flask + SQLite) with the three NC/Cospend calls wired
   to a real test project — verify the WebDAV→share→bill chain works end to
   end with a hardcoded fake bill first, before touching OCR.
 2. Add the LLM extraction endpoint, test against a few real receipt photos,
   compare providers.
 3. Scaffold frontend (Vite/React/PWA), wire capture → review → group →
   submit against the backend.
 4. Highlighting (canvas draw on selected bboxes).
 5. Polish: error handling for OCR misses, mobile camera UX, PWA install.
@@ -0,0 +1,31 @@
 # Copy to .env and fill in. Never commit .env.
 # --- Nextcloud ---
 NC_BASE_URL=https://cloud.dominik-roth.eu
 NC_USERNAME=dodox
 # Settings -> Security -> "Devices & Sessions" -> create app password
 NC_APP_PASSWORD=
 # Folder (relative to the user's files root) receipt images get uploaded to.
 # Created automatically on first upload if missing (each path segment).
 NC_UPLOAD_FOLDER=Documents/Cospend/Assets
 # --- Cospend ---
 # Optional: pre-selects a project in the UI. The app lists all your Cospend
 # projects via the API (GET /ocs/v2.php/apps/cospend/api/v1/projects), so
 # this is just a convenience default, not required.
 COSPEND_PROJECT_ID=
 # --- Vision LLM (OpenAI-compatible chat completions API) ---
 # OpenAI example:
 #   LLM_BASE_URL=https://api.openai.com/v1
 #   LLM_MODEL=gpt-4o-mini
 # Gemini (OpenAI-compat layer) example:
 #   LLM_BASE_URL=https://generativelanguage.googleapis.com/v1beta/openai/
 #   LLM_MODEL=gemini-2.0-flash
 LLM_BASE_URL=
 LLM_API_KEY=
 LLM_MODEL=
 # --- Flask ---
 FLASK_SECRET_KEY=dev-change-me
 DATABASE_PATH=instance/wgbill.sqlite3
@@ -0,0 +1,27 @@
 import os
 from flask import Flask
 from flask_cors import CORS
 from .config import Config
 from .db import init_db
 def create_app() -> Flask:
    app = Flask(__name__, instance_relative_config=True)
    app.config.from_object(Config)
    os.makedirs(app.instance_path, exist_ok=True)
    os.makedirs(Config.UPLOAD_DIR, exist_ok=True)
    # Frontend runs on a different origin (vite dev server) during
    # development; lock this down to that origin in production.
    CORS(app, resources={r"/api/*": {"origins": Config.CORS_ORIGIN}})
    init_db(Config.DATABASE_PATH)
    from .routes import bp as api_bp
    app.register_blueprint(api_bp, url_prefix="/api")
    return app
@@ -0,0 +1,31 @@
 import os
 from dotenv import load_dotenv
 load_dotenv()
 BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
 class Config:
    SECRET_KEY = os.environ.get("FLASK_SECRET_KEY", "dev-change-me")
    DATABASE_PATH = os.path.join(
        BASE_DIR, os.environ.get("DATABASE_PATH", "instance/wgbill.sqlite3")
    )
    UPLOAD_DIR = os.path.join(BASE_DIR, "uploads")
    CORS_ORIGIN = os.environ.get("CORS_ORIGIN", "http://localhost:5173")
    NC_BASE_URL = os.environ.get("NC_BASE_URL", "").rstrip("/")
    NC_USERNAME = os.environ.get("NC_USERNAME", "")
    NC_APP_PASSWORD = os.environ.get("NC_APP_PASSWORD", "")
    NC_UPLOAD_FOLDER = os.environ.get("NC_UPLOAD_FOLDER", "wgBill").strip("/")
    # Optional - pre-selects a project in the UI; the app lists all of the
    # user's Cospend projects via the API either way, so this isn't required.
    COSPEND_DEFAULT_PROJECT_ID = os.environ.get("COSPEND_PROJECT_ID", "")
    LLM_BASE_URL = os.environ.get("LLM_BASE_URL", "").rstrip("/")
    LLM_API_KEY = os.environ.get("LLM_API_KEY", "")
    LLM_MODEL = os.environ.get("LLM_MODEL", "")
@@ -0,0 +1,99 @@
 """Cospend's authenticated (NC-login) API - same app-password auth as
 nc_client. This is an OCS API (same family as the Share API), confirmed
 against the real routes/controller source in julien-nc/cospend-nc:
  appinfo/routes.php ('ocs' section):
    GET  /api/{v}/projects                          -> api#getLocalProjects
    GET  /api/{v}/projects/{projectId}/members       -> api#getMembers
    POST /api/{v}/projects/{projectId}/bills         -> api#createBill
  lib/Controller/ApiController.php, createBill() signature:
    string $projectId, ?string $date, ?string $what, ?int $payer,
    ?string $payedFor, ?float $amount, ... ?string $comment, ...
  -> params are camelCase (payedFor, not payed_for), payer/payedFor are
     numeric member ids (payedFor is a comma-separated string of ids).
 Being an OCS controller, every call needs the OCS-APIRequest header and the
 full path is under /ocs/v2.php/apps/cospend/...
 """
 from __future__ import annotations
 from typing import Any
 import requests
 from .config import Config
 _HEADERS = {"OCS-APIRequest": "true"}
 def _auth() -> tuple[str, str]:
    return (Config.NC_USERNAME, Config.NC_APP_PASSWORD)
 def _base(project_id: str | None = None) -> str:
    root = f"{Config.NC_BASE_URL}/ocs/v2.php/apps/cospend/api/v1"
    if project_id is None:
        return root
    return f"{root}/projects/{project_id}"
 def get_projects() -> list[dict[str, Any]]:
    """Lists Cospend projects visible to the authenticated user."""
    resp = requests.get(
        f"{_base()}/projects",
        auth=_auth(),
        headers=_HEADERS,
        params={"format": "json"},
        timeout=15,
    )
    resp.raise_for_status()
    return resp.json()["ocs"]["data"]
 def get_members(project_id: str) -> list[dict[str, Any]]:
    resp = requests.get(
        f"{_base(project_id)}/members",
        auth=_auth(),
        headers=_HEADERS,
        params={"format": "json"},
        timeout=15,
    )
    resp.raise_for_status()
    return resp.json()["ocs"]["data"]
 def create_bill(
    *,
    project_id: str,
    what: str,
    amount: float,
    payer_id: int,
    ower_ids: list[int],
    date: str,
    comment: str = "",
 ) -> int:
    """Creates a bill split evenly among `ower_ids`, paid by `payer_id`.
    `amount` is the bill total; Cospend divides it across owers itself.
    Returns the new bill's id - createBill's controller method returns just
    the int id (`return new DataResponse($newBillId)`), not a bill object.
    """
    resp = requests.post(
        f"{_base(project_id)}/bills",
        auth=_auth(),
        headers=_HEADERS,
        params={"format": "json"},
        json={
            "what": what,
            "amount": amount,
            "payer": payer_id,
            "payedFor": ",".join(str(i) for i in ower_ids),
            "comment": comment,
            "date": date,  # YYYY-MM-DD, the receipt's issue date, not today
        },
        timeout=15,
    )
    resp.raise_for_status()
    return resp.json()["ocs"]["data"]
@@ -0,0 +1,23 @@
 import os
 import sqlite3
 _SCHEMA_PATH = os.path.join(os.path.dirname(os.path.abspath(__file__)), "schema.sql")
 _db_path: str | None = None
 def init_db(database_path: str) -> None:
    global _db_path
    _db_path = database_path
    os.makedirs(os.path.dirname(database_path), exist_ok=True)
    with get_conn() as conn, open(_SCHEMA_PATH) as f:
        conn.executescript(f.read())
 def get_conn() -> sqlite3.Connection:
    if _db_path is None:
        raise RuntimeError("init_db() must be called before get_conn()")
    conn = sqlite3.connect(_db_path)
    conn.row_factory = sqlite3.Row
    conn.execute("PRAGMA foreign_keys = ON")
    return conn
@@ -0,0 +1,32 @@
 """Draws highlight boxes over selected items on the original receipt image."""
 from __future__ import annotations
 import io
 from PIL import Image, ImageDraw
 _BOX_COLOR = (255, 210, 0)  # translucent yellow highlighter look
 _BOX_WIDTH = 4
 def highlight_items(image_bytes: bytes, bboxes: list[list[float]]) -> bytes:
    """`bboxes` are normalized [x, y, w, h] (0-1). Returns JPEG bytes."""
    base = Image.open(io.BytesIO(image_bytes)).convert("RGBA")
    overlay = Image.new("RGBA", base.size, (0, 0, 0, 0))
    draw = ImageDraw.Draw(overlay)
    w, h = base.size
    for bbox in bboxes:
        if not bbox or len(bbox) != 4:
            continue
        x, y, bw, bh = bbox
        left, top = x * w, y * h
        right, bottom = (x + bw) * w, (y + bh) * h
        draw.rectangle([left, top, right, bottom], fill=(*_BOX_COLOR, 70))
        draw.rectangle([left, top, right, bottom], outline=(*_BOX_COLOR, 255), width=_BOX_WIDTH)
    combined = Image.alpha_composite(base, overlay).convert("RGB")
    out = io.BytesIO()
    combined.save(out, format="JPEG", quality=90)
    return out.getvalue()
@@ -0,0 +1,104 @@
 """Receipt -> [{id, label, price, bbox}] via any OpenAI-compatible chat
 completions endpoint (works unmodified with OpenAI; point LLM_BASE_URL at
 Gemini's OpenAI-compat layer to use that instead, no code change needed).
 """
 from __future__ import annotations
 import base64
 import json
 import re
 import uuid
 import requests
 from .config import Config
 _PROMPT = """You are reading a photo of a shopping receipt. Extract every \
 line item and its price, plus the store name and the date the receipt was \
 issued.
 Respond with ONLY a JSON object, no prose, no markdown fences, shaped like:
 {
  "store_name": "<store/shop name as printed, or null if unreadable>",
  "date": "<receipt date as YYYY-MM-DD, or null if unreadable>",
  "items": [
    {"label": "<item name as printed>", "price": <number>, \
 "bbox": [x, y, w, h]}
  ]
 }
 - price is the item's price in the receipt's currency, as a plain number \
 (no currency symbol).
 - bbox is the item's approximate bounding box on the image, normalized to \
 0-1 (x, y = top-left corner; w, h = width/height as a fraction of the \
 image). Best effort is fine.
 - Skip subtotal/tax/total lines, only real purchased items.
 - If a line item's price is unclear, make your best guess rather than \
 omitting it.
 - date must be the transaction date printed on the receipt, not a guess \
 based on anything else.
 """
 def extract_receipt(image_bytes: bytes, mime_type: str = "image/jpeg") -> dict:
    """Returns {"store_name": str | None, "date": str | None, "items": [...]}."""
    if not Config.LLM_BASE_URL or not Config.LLM_MODEL:
        raise RuntimeError("LLM_BASE_URL / LLM_MODEL not configured (see .env.example)")
    b64 = base64.b64encode(image_bytes).decode("ascii")
    resp = requests.post(
        f"{Config.LLM_BASE_URL}/chat/completions",
        headers={"Authorization": f"Bearer {Config.LLM_API_KEY}"},
        json={
            "model": Config.LLM_MODEL,
            "messages": [
                {
                    "role": "user",
                    "content": [
                        {"type": "text", "text": _PROMPT},
                        {
                            "type": "image_url",
                            "image_url": {"url": f"data:{mime_type};base64,{b64}"},
                        },
                    ],
                }
            ],
            "temperature": 0,
        },
        timeout=60,
    )
    resp.raise_for_status()
    raw = resp.json()["choices"][0]["message"]["content"]
    parsed = _parse_json_response(raw)
    items = []
    for entry in parsed.get("items", []):
        items.append(
            {
                "id": str(uuid.uuid4()),
                "label": str(entry.get("label", "")).strip(),
                "price": float(entry.get("price", 0) or 0),
                "bbox": entry.get("bbox") or None,
            }
        )
    store_name = parsed.get("store_name") or None
    date = parsed.get("date") or None
    # Basic sanity check - if the model didn't return a real YYYY-MM-DD,
    # don't propagate garbage; the caller falls back to today's date.
    if date and not re.match(r"^\d{4}-\d{2}-\d{2}$", str(date)):
        date = None
    return {"store_name": store_name, "date": date, "items": items}
 def _parse_json_response(raw: str) -> dict:
    raw = raw.strip()
    # Models sometimes wrap the JSON in ```json ... ``` despite instructions.
    if raw.startswith("```"):
        raw = raw.strip("`")
        if raw.startswith("json"):
            raw = raw[4:]
        raw = raw.strip()
    return json.loads(raw)
@@ -0,0 +1,76 @@
 """Thin wrapper around the bits of Nextcloud's WebDAV and OCS Share API we need.
 Auth is HTTP Basic with an app password (Settings -> Security -> Devices &
 Sessions -> create app password), never the account's real password.
 """
 from __future__ import annotations
 import requests
 from .config import Config
 def _auth() -> tuple[str, str]:
    return (Config.NC_USERNAME, Config.NC_APP_PASSWORD)
 def _webdav_root() -> str:
    return f"{Config.NC_BASE_URL}/remote.php/dav/files/{Config.NC_USERNAME}"
 def ensure_upload_folder() -> None:
    """MKCOL each segment of the configured upload folder path if missing.
    NC_UPLOAD_FOLDER may be nested (e.g. "Documents/Cospend/Assets"); MKCOL
    only creates one level at a time, so walk the path segment by segment.
    Idempotent.
    """
    if not Config.NC_UPLOAD_FOLDER:
        return
    segments = Config.NC_UPLOAD_FOLDER.split("/")
    partial = ""
    for segment in segments:
        partial = f"{partial}/{segment}" if partial else segment
        url = f"{_webdav_root()}/{partial}"
        resp = requests.request("MKCOL", url, auth=_auth(), timeout=15)
        # 201 = created, 405 = already exists. Anything else is a real problem.
        if resp.status_code not in (201, 405):
            resp.raise_for_status()
 def upload_file(filename: str, content: bytes, content_type: str = "image/jpeg") -> str:
    """Uploads `content` to <upload folder>/<filename> via WebDAV PUT.
    Returns the server-relative path (e.g. "wgBill/receipt-123.jpg"), which is
    what the Share API expects as `path`.
    """
    ensure_upload_folder()
    rel_path = f"{Config.NC_UPLOAD_FOLDER}/{filename}" if Config.NC_UPLOAD_FOLDER else filename
    url = f"{_webdav_root()}/{rel_path}"
    resp = requests.put(
        url, data=content, auth=_auth(), headers={"Content-Type": content_type}, timeout=30
    )
    resp.raise_for_status()
    return rel_path
 def create_public_share(rel_path: str) -> str:
    """Creates a public read-only link share for `rel_path`. Returns the share URL."""
    url = f"{Config.NC_BASE_URL}/ocs/v2.php/apps/files_sharing/api/v1/shares"
    resp = requests.post(
        url,
        auth=_auth(),
        headers={"OCS-APIRequest": "true"},
        data={
            "path": f"/{rel_path}",
            "shareType": 3,  # public link
            "permissions": 1,  # read-only
        },
        params={"format": "json"},
        timeout=15,
    )
    resp.raise_for_status()
    payload = resp.json()
    share_url = payload["ocs"]["data"]["url"]
    return share_url
@@ -0,0 +1,291 @@
 from __future__ import annotations
 import json
 import re
 import uuid
 from datetime import date as date_cls
 from datetime import datetime
 from flask import Blueprint, jsonify, request
 from . import cospend_client, highlight, llm_client, nc_client
 from .config import Config
 from .db import get_conn
 bp = Blueprint("api", __name__)
 # ---------------------------------------------------------------- receipts
@bp.post("/receipts")
 def create_receipt():
    """multipart/form-data with an `image` file. Extracts items via LLM."""
    file = request.files.get("image")
    if file is None:
        return jsonify(error="missing 'image' file"), 400
    image_bytes = file.read()
    receipt_id = str(uuid.uuid4())
    image_path = f"{Config.UPLOAD_DIR}/{receipt_id}.jpg"
    with open(image_path, "wb") as f:
        f.write(image_bytes)
    try:
        extracted = llm_client.extract_receipt(image_bytes, mime_type=file.mimetype or "image/jpeg")
    except Exception as exc:  # noqa: BLE001 - surfaced to the client as-is
        return jsonify(error=f"extraction failed: {exc}"), 502
    items = extracted["items"]
    store_name = extracted["store_name"]
    # Fall back to today if the receipt's date wasn't readable - the user
    # can still override it in the review step.
    receipt_date = extracted["date"] or date_cls.today().isoformat()
    with get_conn() as conn:
        conn.execute(
            """INSERT INTO receipts (id, image_path, items_json, store_name, receipt_date)
               VALUES (?, ?, ?, ?, ?)""",
            (receipt_id, image_path, json.dumps(items), store_name, receipt_date),
        )
    return jsonify(id=receipt_id, items=items, store_name=store_name, date=receipt_date), 201
@bp.get("/receipts/<receipt_id>")
 def get_receipt(receipt_id: str):
    receipt = _load_receipt(receipt_id)
    if receipt is None:
        return jsonify(error="not found"), 404
    return jsonify(receipt)
@bp.patch("/receipts/<receipt_id>/items")
 def update_items(receipt_id: str):
    """Body: {"items": [...]} — full replacement, for the review/edit step."""
    body = request.get_json(force=True) or {}
    items = body.get("items")
    if not isinstance(items, list):
        return jsonify(error="'items' must be a list"), 400
    with get_conn() as conn:
        cur = conn.execute(
            "UPDATE receipts SET items_json = ? WHERE id = ?",
            (json.dumps(items), receipt_id),
        )
        if cur.rowcount == 0:
            return jsonify(error="not found"), 404
    return jsonify(id=receipt_id, items=items)
@bp.patch("/receipts/<receipt_id>/meta")
 def update_meta(receipt_id: str):
    """Body: {"store_name"?: str, "date"?: "YYYY-MM-DD"} - user override for
    what the receipt reader guessed (or didn't find)."""
    body = request.get_json(force=True) or {}
    fields, values = [], []
    if "store_name" in body:
        fields.append("store_name = ?")
        values.append(body["store_name"])
    if "date" in body:
        if not re.match(r"^\d{4}-\d{2}-\d{2}$", str(body["date"] or "")):
            return jsonify(error="date must be YYYY-MM-DD"), 400
        fields.append("receipt_date = ?")
        values.append(body["date"])
    if not fields:
        return jsonify(error="nothing to update"), 400
    values.append(receipt_id)
    with get_conn() as conn:
        cur = conn.execute(f"UPDATE receipts SET {', '.join(fields)} WHERE id = ?", values)
        if cur.rowcount == 0:
            return jsonify(error="not found"), 404
    receipt = _load_receipt(receipt_id)
    return jsonify(receipt)
 def _load_receipt(receipt_id: str) -> dict | None:
    with get_conn() as conn:
        row = conn.execute("SELECT * FROM receipts WHERE id = ?", (receipt_id,)).fetchone()
    if row is None:
        return None
    return {
        "id": row["id"],
        "items": json.loads(row["items_json"]),
        "store_name": row["store_name"],
        "date": row["receipt_date"],
        "status": row["status"],
        "created_at": row["created_at"],
    }
 # -------------------------------------------------------------- cospend
@bp.get("/cospend/projects")
 def cospend_projects():
    try:
        projects = cospend_client.get_projects()
    except Exception as exc:  # noqa: BLE001
        return jsonify(error=f"cospend request failed: {exc}"), 502
    return jsonify(projects=projects, default_project_id=Config.COSPEND_DEFAULT_PROJECT_ID or None)
@bp.get("/cospend/projects/<project_id>/members")
 def cospend_members(project_id: str):
    try:
        members = cospend_client.get_members(project_id)
    except Exception as exc:  # noqa: BLE001
        return jsonify(error=f"cospend request failed: {exc}"), 502
    return jsonify(members)
 # ------------------------------------------------------------------ groups
@bp.post("/receipts/<receipt_id>/groups")
 def create_group(receipt_id: str):
    """Body: {name, cospend_project_id, payer_member_id, member_ids: [...], item_ids: [...]}"""
    receipt = _load_receipt(receipt_id)
    if receipt is None:
        return jsonify(error="not found"), 404
    body = request.get_json(force=True) or {}
    name = body.get("name") or "WG"
    project_id = body.get("cospend_project_id")
    payer_member_id = body.get("payer_member_id")
    member_ids = body.get("member_ids") or []
    item_ids = body.get("item_ids") or []
    if not project_id or not payer_member_id or not member_ids or not item_ids:
        return (
            jsonify(
                error="cospend_project_id, payer_member_id, member_ids and item_ids are required"
            ),
            400,
        )
    group_id = str(uuid.uuid4())
    with get_conn() as conn:
        conn.execute(
            """INSERT INTO groups
               (id, receipt_id, name, cospend_project_id, payer_member_id,
                member_ids_json, item_ids_json)
               VALUES (?, ?, ?, ?, ?, ?, ?)""",
            (
                group_id,
                receipt_id,
                name,
                project_id,
                payer_member_id,
                json.dumps(member_ids),
                json.dumps(item_ids),
            ),
        )
        conn.execute("UPDATE receipts SET status = 'grouped' WHERE id = ?", (receipt_id,))
    return jsonify(id=group_id), 201
@bp.get("/receipts/<receipt_id>/groups")
 def list_groups(receipt_id: str):
    with get_conn() as conn:
        rows = conn.execute(
            "SELECT * FROM groups WHERE receipt_id = ? ORDER BY created_at", (receipt_id,)
        ).fetchall()
    return jsonify([_group_dict(r) for r in rows])
 def _group_dict(row) -> dict:
    return {
        "id": row["id"],
        "receipt_id": row["receipt_id"],
        "name": row["name"],
        "cospend_project_id": row["cospend_project_id"],
        "payer_member_id": row["payer_member_id"],
        "member_ids": json.loads(row["member_ids_json"]),
        "item_ids": json.loads(row["item_ids_json"]),
        "status": row["status"],
        "share_url": row["share_url"],
        "cospend_bill_id": row["cospend_bill_id"],
        "error": row["error"],
    }
@bp.post("/receipts/<receipt_id>/groups/<group_id>/submit")
 def submit_group(receipt_id: str, group_id: str):
    """Highlights selected items, uploads to NC, shares, creates the Cospend bill."""
    receipt = _load_receipt(receipt_id)
    if receipt is None:
        return jsonify(error="receipt not found"), 404
    with get_conn() as conn:
        row = conn.execute(
            "SELECT * FROM groups WHERE id = ? AND receipt_id = ?", (group_id, receipt_id)
        ).fetchone()
    if row is None:
        return jsonify(error="group not found"), 404
    group = _group_dict(row)
    items_by_id = {item["id"]: item for item in receipt["items"]}
    selected = [items_by_id[i] for i in group["item_ids"] if i in items_by_id]
    if not selected:
        return jsonify(error="no matching items on this receipt"), 400
    total = round(sum(item["price"] for item in selected), 2)
    bboxes = [item["bbox"] for item in selected if item.get("bbox")]
    with open(_receipt_image_path(receipt_id), "rb") as f:
        original_bytes = f.read()
    try:
        highlighted = highlight.highlight_items(original_bytes, bboxes)
        # Timestamp for human sorting/browsing in NC, group id suffix so two
        # submits in the same second (or a retry) never collide/overwrite.
        safe_name = re.sub(r"[^A-Za-z0-9_-]+", "-", group["name"]).strip("-") or "group"
        filename = f"{datetime.now():%Y-%m-%d_%H%M%S}_{safe_name}_{group_id[:8]}.jpg"
        rel_path = nc_client.upload_file(filename, highlighted)
        share_url = nc_client.create_public_share(rel_path)
        item_lines = "\n".join(f"- {i['label']}: {i['price']}" for i in selected)
        # Descriptive title: store name when we have one, else just the
        # group name - either way followed by the share link, since
        # Cospend's UI only recognizes a bill as having an attachment when
        # the link is in `what` (the title); a link in `comment` is just
        # plain text and isn't picked up.
        store_name = receipt.get("store_name")
        label = f"{store_name} ({group['name']})" if store_name else group["name"]
        bill_date = receipt.get("date") or date_cls.today().isoformat()
        bill_id = cospend_client.create_bill(
            project_id=group["cospend_project_id"],
            what=f"{label} {share_url}",
            amount=total,
            payer_id=int(group["payer_member_id"]),
            ower_ids=[int(m) for m in group["member_ids"]],
            date=bill_date,
            comment=item_lines,
        )
    except Exception as exc:  # noqa: BLE001
        with get_conn() as conn:
            conn.execute(
                "UPDATE groups SET status = 'failed', error = ? WHERE id = ?",
                (str(exc), group_id),
            )
        return jsonify(error=f"submit failed: {exc}"), 502
    with get_conn() as conn:
        conn.execute(
            """UPDATE groups SET status = 'submitted', share_url = ?, cospend_bill_id = ?
               WHERE id = ?""",
            (share_url, str(bill_id), group_id),
        )
    return jsonify(share_url=share_url, bill_id=bill_id, amount=total)
 def _receipt_image_path(receipt_id: str) -> str:
    with get_conn() as conn:
        row = conn.execute("SELECT image_path FROM receipts WHERE id = ?", (receipt_id,)).fetchone()
    return row["image_path"]
@@ -0,0 +1,27 @@
 CREATE TABLE IF NOT EXISTS receipts (
    id TEXT PRIMARY KEY,
    image_path TEXT NOT NULL,
    image_width INTEGER,
    image_height INTEGER,
    items_json TEXT NOT NULL DEFAULT '[]',
    store_name TEXT,                    -- extracted from the receipt, editable
    receipt_date TEXT,                  -- YYYY-MM-DD, extracted; falls back to
                                         -- today's date if unreadable/unset
    status TEXT NOT NULL DEFAULT 'extracted',   -- extracted | grouped | done
    created_at TEXT NOT NULL DEFAULT (datetime('now'))
 );
 CREATE TABLE IF NOT EXISTS groups (
    id TEXT PRIMARY KEY,
    receipt_id TEXT NOT NULL REFERENCES receipts(id) ON DELETE CASCADE,
    name TEXT NOT NULL,
    cospend_project_id TEXT NOT NULL,
    payer_member_id TEXT NOT NULL,
    member_ids_json TEXT NOT NULL,   -- json list of cospend member ids (owers)
    item_ids_json TEXT NOT NULL,     -- json list of item ids from receipts.items_json
    status TEXT NOT NULL DEFAULT 'pending',   -- pending | submitted | failed
    share_url TEXT,
    cospend_bill_id TEXT,
    error TEXT,
    created_at TEXT NOT NULL DEFAULT (datetime('now'))
 );
@@ -0,0 +1,5 @@
 Flask==3.0.3
 Flask-Cors==4.0.1
 python-dotenv==1.0.1
 requests==2.32.3
 Pillow==10.4.0
@@ -0,0 +1,6 @@
 from app import create_app
 app = create_app()
 if __name__ == "__main__":
    app.run(debug=True, port=5000)
@@ -0,0 +1,4 @@
 # Leave empty for local dev (vite.config.ts proxies /api -> localhost:5000).
 # Set to the deployed backend's origin when building for production, e.g.
 # VITE_API_BASE_URL=https://wgbill-api.example.com
 VITE_API_BASE_URL=
@@ -0,0 +1,24 @@
 # Logs
 logs
 *.log
 npm-debug.log*
 yarn-debug.log*
 yarn-error.log*
 pnpm-debug.log*
 lerna-debug.log*
 node_modules
 dist
 dist-ssr
 *.local
 # Editor directories and files
 .vscode/*
 !.vscode/extensions.json
 .idea
 .DS_Store
 *.suo
 *.ntvs*
 *.njsproj
 *.sln
 *.sw?
@@ -0,0 +1,8 @@
 {
  "$schema": "./node_modules/oxlint/configuration_schema.json",
  "plugins": ["react", "typescript", "oxc"],
  "rules": {
    "react/rules-of-hooks": "error",
    "react/only-export-components": ["warn", { "allowConstantExport": true }]
  }
 }
@@ -0,0 +1,32 @@
 # React + TypeScript + Vite
 This template provides a minimal setup to get React working in Vite with HMR and some Oxlint rules.
 Currently, two official plugins are available:
 - [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react) uses [Oxc](https://oxc.rs)
 - [@vitejs/plugin-react-swc](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react-swc) uses [SWC](https://swc.rs/)
 ## React Compiler
 The React Compiler is not enabled on this template because of its impact on dev & build performances. To add it, see [this documentation](https://react.dev/learn/react-compiler/installation).
 ## Expanding the Oxlint configuration
 If you are developing a production application, we recommend enabling type-aware lint rules by installing `oxlint-tsgolint` and editing `.oxlintrc.json`:
 ```json
 {
  "$schema": "./node_modules/oxlint/configuration_schema.json",
  "plugins": ["react", "typescript", "oxc"],
  "options": {
    "typeAware": true
  },
  "rules": {
    "react/rules-of-hooks": "error",
    "react/only-export-components": ["warn", { "allowConstantExport": true }]
  }
 }
 ```
 See the [Oxlint rules documentation](https://oxc.rs/docs/guide/usage/linter/rules) for the full list of rules and categories.
@@ -0,0 +1,13 @@
 <!doctype html>
 <html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>frontend</title>
  </head>
  <body>
    <div id="root"></div>
    <script type="module" src="/src/main.tsx"></script>
  </body>
 </html>
@@ -0,0 +1,26 @@
 {
  "name": "frontend",
  "private": true,
  "version": "0.0.0",
  "type": "module",
  "scripts": {
    "dev": "vite",
    "build": "tsc -b && vite build",
    "lint": "oxlint",
    "preview": "vite preview"
  },
  "dependencies": {
    "react": "^19.2.8",
    "react-dom": "^19.2.8",
    "vite-plugin-pwa": "^1.3.0"
  },
  "devDependencies": {
    "@types/node": "^24.13.3",
    "@types/react": "^19.2.18",
    "@types/react-dom": "^19.2.4",
    "@vitejs/plugin-react": "^6.1.0",
    "oxlint": "^1.79.0",
    "typescript": "~6.0.2",
    "vite": "^8.2.2"
  }
 }
@@ -0,0 +1,24 @@
 <svg xmlns="http://www.w3.org/2000/svg">
  <symbol id="bluesky-icon" viewBox="0 0 16 17">
    <g clip-path="url(#bluesky-clip)"><path fill="#08060d" d="M7.75 7.735c-.693-1.348-2.58-3.86-4.334-5.097-1.68-1.187-2.32-.981-2.74-.79C.188 2.065.1 2.812.1 3.251s.241 3.602.398 4.13c.52 1.744 2.367 2.333 4.07 2.145-2.495.37-4.71 1.278-1.805 4.512 3.196 3.309 4.38-.71 4.987-2.746.608 2.036 1.307 5.91 4.93 2.746 2.72-2.746.747-4.143-1.747-4.512 1.702.189 3.55-.4 4.07-2.145.156-.528.397-3.691.397-4.13s-.088-1.186-.575-1.406c-.42-.19-1.06-.395-2.741.79-1.755 1.24-3.64 3.752-4.334 5.099"/></g>
    <defs><clipPath id="bluesky-clip"><path fill="#fff" d="M.1.85h15.3v15.3H.1z"/></clipPath></defs>
  </symbol>
  <symbol id="discord-icon" viewBox="0 0 20 19">
    <path fill="#08060d" d="M16.224 3.768a14.5 14.5 0 0 0-3.67-1.153c-.158.286-.343.67-.47.976a13.5 13.5 0 0 0-4.067 0c-.128-.306-.317-.69-.476-.976A14.4 14.4 0 0 0 3.868 3.77C1.546 7.28.916 10.703 1.231 14.077a14.7 14.7 0 0 0 4.5 2.306q.545-.748.965-1.587a9.5 9.5 0 0 1-1.518-.74q.191-.14.372-.293c2.927 1.369 6.107 1.369 8.999 0q.183.152.372.294-.723.437-1.52.74.418.838.963 1.588a14.6 14.6 0 0 0 4.504-2.308c.37-3.911-.63-7.302-2.644-10.309m-9.13 8.234c-.878 0-1.599-.82-1.599-1.82 0-.998.705-1.82 1.6-1.82.894 0 1.614.82 1.599 1.82.001 1-.705 1.82-1.6 1.82m5.91 0c-.878 0-1.599-.82-1.599-1.82 0-.998.705-1.82 1.6-1.82.893 0 1.614.82 1.599 1.82 0 1-.706 1.82-1.6 1.82"/>
  </symbol>
  <symbol id="documentation-icon" viewBox="0 0 21 20">
    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="m15.5 13.333 1.533 1.322c.645.555.967.833.967 1.178s-.322.623-.967 1.179L15.5 18.333m-3.333-5-1.534 1.322c-.644.555-.966.833-.966 1.178s.322.623.966 1.179l1.534 1.321"/>
    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M17.167 10.836v-4.32c0-1.41 0-2.117-.224-2.68-.359-.906-1.118-1.621-2.08-1.96-.599-.21-1.349-.21-2.848-.21-2.623 0-3.935 0-4.983.369-1.684.591-3.013 1.842-3.641 3.428C3 6.449 3 7.684 3 10.154v2.122c0 2.558 0 3.838.706 4.726q.306.383.713.671c.76.536 1.79.64 3.581.66"/>
    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M3 10a2.78 2.78 0 0 1 2.778-2.778c.555 0 1.209.097 1.748-.047.48-.129.854-.503.982-.982.145-.54.048-1.194.048-1.749a2.78 2.78 0 0 1 2.777-2.777"/>
  </symbol>
  <symbol id="github-icon" viewBox="0 0 19 19">
    <path fill="#08060d" fill-rule="evenodd" d="M9.356 1.85C5.05 1.85 1.57 5.356 1.57 9.694a7.84 7.84 0 0 0 5.324 7.44c.387.079.528-.168.528-.376 0-.182-.013-.805-.013-1.454-2.165.467-2.616-.935-2.616-.935-.349-.91-.864-1.143-.864-1.143-.71-.48.051-.48.051-.48.787.051 1.2.805 1.2.805.695 1.194 1.817.857 2.268.649.064-.507.27-.857.49-1.052-1.728-.182-3.545-.857-3.545-3.87 0-.857.31-1.558.8-2.104-.078-.195-.349-1 .077-2.078 0 0 .657-.208 2.14.805a7.5 7.5 0 0 1 1.946-.26c.657 0 1.328.092 1.946.26 1.483-1.013 2.14-.805 2.14-.805.426 1.078.155 1.883.078 2.078.502.546.799 1.247.799 2.104 0 3.013-1.818 3.675-3.558 3.87.284.247.528.714.528 1.454 0 1.052-.012 1.896-.012 2.156 0 .208.142.455.528.377a7.84 7.84 0 0 0 5.324-7.441c.013-4.338-3.48-7.844-7.773-7.844" clip-rule="evenodd"/>
  </symbol>
  <symbol id="social-icon" viewBox="0 0 20 20">
    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M12.5 6.667a4.167 4.167 0 1 0-8.334 0 4.167 4.167 0 0 0 8.334 0"/>
    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M2.5 16.667a5.833 5.833 0 0 1 8.75-5.053m3.837.474.513 1.035c.07.144.257.282.414.309l.93.155c.596.1.736.536.307.965l-.723.73a.64.64 0 0 0-.152.531l.207.903c.164.715-.213.991-.84.618l-.872-.52a.63.63 0 0 0-.577 0l-.872.52c-.624.373-1.003.094-.84-.618l.207-.903a.64.64 0 0 0-.152-.532l-.723-.729c-.426-.43-.289-.864.306-.964l.93-.156a.64.64 0 0 0 .412-.31l.513-1.034c.28-.562.735-.562 1.012 0"/>
  </symbol>
  <symbol id="x-icon" viewBox="0 0 19 19">
    <path fill="#08060d" fill-rule="evenodd" d="M1.893 1.98c.052.072 1.245 1.769 2.653 3.77l2.892 4.114c.183.261.333.48.333.486s-.068.089-.152.183l-.522.593-.765.867-3.597 4.087c-.375.426-.734.834-.798.905a1 1 0 0 0-.118.148c0 .01.236.017.664.017h.663l.729-.83c.4-.457.796-.906.879-.999a692 692 0 0 0 1.794-2.038c.034-.037.301-.34.594-.675l.551-.624.345-.392a7 7 0 0 1 .34-.374c.006 0 .93 1.306 2.052 2.903l2.084 2.965.045.063h2.275c1.87 0 2.273-.003 2.266-.021-.008-.02-1.098-1.572-3.894-5.547-2.013-2.862-2.28-3.246-2.273-3.266.008-.019.282-.332 2.085-2.38l2-2.274 1.567-1.782c.022-.028-.016-.03-.65-.03h-.674l-.3.342a871 871 0 0 1-1.782 2.025c-.067.075-.405.458-.75.852a100 100 0 0 1-.803.91c-.148.172-.299.344-.99 1.127-.304.343-.32.358-.345.327-.015-.019-.904-1.282-1.976-2.808L6.365 1.85H1.8zm1.782.91 8.078 11.294c.772 1.08 1.413 1.973 1.425 1.984.016.017.241.02 1.05.017l1.03-.004-2.694-3.766L7.796 5.75 5.722 2.852l-1.039-.004-1.039-.004z" clip-rule="evenodd"/>
  </symbol>
 </svg>
@@ -0,0 +1,199 @@
 :root {
  color-scheme: light dark;
  --bg: #fafafa;
  --fg: #1a1a1a;
  --accent: #2b6cb0;
  --border: #ddd;
  --danger: #c0392b;
  --selected: #e3f0ff;
 }
@media (prefers-color-scheme: dark) {
  :root {
    --bg: #17181a;
    --fg: #eee;
    --border: #3a3a3a;
    --selected: #1c3350;
  }
 }
 * {
  box-sizing: border-box;
 }
 body {
  margin: 0;
  background: var(--bg);
  color: var(--fg);
  font-family:
    system-ui,
    -apple-system,
    'Segoe UI',
    sans-serif;
 }
 .app {
  max-width: 480px;
  margin: 0 auto;
  padding: 1rem 1rem 3rem;
  min-height: 100vh;
 }
 .step h1,
 .step h2 {
  margin-bottom: 0.25rem;
 }
 .hint {
  color: #888;
  font-size: 0.9rem;
  margin-top: 0;
 }
 button {
  display: block;
  width: 100%;
  padding: 0.9rem;
  margin: 0.75rem 0;
  border: none;
  border-radius: 10px;
  background: var(--accent);
  color: white;
  font-size: 1rem;
  font-weight: 600;
 }
 button:disabled {
  opacity: 0.5;
 }
 button.secondary {
  background: transparent;
  color: var(--accent);
  border: 1px solid var(--accent);
 }
 button.icon-btn {
  width: auto;
  padding: 0.4rem 0.6rem;
  margin: 0;
  background: transparent;
  color: var(--danger);
  font-weight: 400;
 }
 input,
 select {
  padding: 0.6rem;
  border: 1px solid var(--border);
  border-radius: 8px;
  background: transparent;
  color: inherit;
  font-size: 1rem;
 }
 .meta-row {
  display: flex;
  gap: 0.75rem;
  margin: 0.75rem 0;
 }
 .meta-row label {
  flex: 1;
  display: flex;
  flex-direction: column;
  font-size: 0.85rem;
  gap: 0.25rem;
 }
 .item-list {
  list-style: none;
  padding: 0;
  margin: 0.5rem 0;
 }
 .item-row {
  display: flex;
  gap: 0.5rem;
  align-items: center;
  margin-bottom: 0.5rem;
 }
 .item-row input[type='text'],
 .item-row input:not([type]) {
  flex: 1;
 }
 .item-row input[type='number'] {
  width: 5.5rem;
 }
 .item-list.selectable li {
  display: flex;
  justify-content: space-between;
  padding: 0.7rem 0.75rem;
  border: 1px solid var(--border);
  border-radius: 8px;
  margin-bottom: 0.4rem;
  cursor: pointer;
 }
 .item-list.selectable li.selected {
  background: var(--selected);
  border-color: var(--accent);
 }
 .member-list {
  list-style: none;
  padding: 0;
  display: flex;
  flex-wrap: wrap;
  gap: 0.5rem;
 }
 .member-list label {
  display: flex;
  align-items: center;
  gap: 0.35rem;
  border: 1px solid var(--border);
  border-radius: 999px;
  padding: 0.35rem 0.75rem;
 }
 .payer-select {
  display: flex;
  align-items: center;
  gap: 0.5rem;
  margin-top: 0.75rem;
 }
 .group-name {
  width: 100%;
  margin: 0.5rem 0;
 }
 .total {
  font-weight: 600;
  text-align: right;
 }
 .error {
  color: var(--danger);
 }
 .submitted-groups {
  background: var(--selected);
  border-radius: 8px;
  padding: 0.5rem 0.75rem;
  margin-bottom: 1rem;
 }
 .summary-list {
  list-style: none;
  padding: 0;
 }
 .summary-list li {
  padding: 0.6rem 0;
  border-bottom: 1px solid var(--border);
 }
@@ -0,0 +1,55 @@
 import { useState } from 'react'
 import './App.css'
 import { CaptureStep } from './components/CaptureStep'
 import { ReviewStep } from './components/ReviewStep'
 import { GroupStep } from './components/GroupStep'
 import { SummaryStep } from './components/SummaryStep'
 import type { Group, Item } from './types'
 type Stage =
  | { name: 'capture' }
  | { name: 'review'; receiptId: string; items: Item[]; storeName: string | null; date: string }
  | { name: 'group'; receiptId: string; items: Item[] }
  | { name: 'summary'; groups: Group[] }
 export default function App() {
  const [stage, setStage] = useState<Stage>({ name: 'capture' })
  return (
    <div className="app">
      {stage.name === 'capture' && (
        <CaptureStep
          onExtracted={(receiptId, items, storeName, date) =>
            setStage({ name: 'review', receiptId, items, storeName, date: date || today() })
          }
        />
      )}
      {stage.name === 'review' && (
        <ReviewStep
          receiptId={stage.receiptId}
          initialItems={stage.items}
          initialStoreName={stage.storeName}
          initialDate={stage.date}
          onConfirmed={(items) => setStage({ name: 'group', receiptId: stage.receiptId, items })}
        />
      )}
      {stage.name === 'group' && (
        <GroupStep
          receiptId={stage.receiptId}
          items={stage.items}
          onAllDone={(groups) => setStage({ name: 'summary', groups })}
        />
      )}
      {stage.name === 'summary' && (
        <SummaryStep groups={stage.groups} onRestart={() => setStage({ name: 'capture' })} />
      )}
    </div>
  )
 }
 function today(): string {
  return new Date().toISOString().slice(0, 10)
 }
@@ -0,0 +1,66 @@
 import type { CospendProject, Group, Item, Member, Receipt, SubmitResult } from './types'
 const BASE = import.meta.env.VITE_API_BASE_URL ?? ''
 async function req<T>(path: string, init?: RequestInit): Promise<T> {
  const res = await fetch(`${BASE}/api${path}`, {
    ...init,
    headers: init?.body instanceof FormData ? init.headers : { 'Content-Type': 'application/json', ...init?.headers },
  })
  if (!res.ok) {
    const body = await res.json().catch(() => ({}))
    throw new Error(body.error || `${res.status} ${res.statusText}`)
  }
  return res.json()
 }
 export const api = {
  uploadReceipt(
    file: File | Blob,
  ): Promise<{ id: string; items: Item[]; store_name: string | null; date: string }> {
    const form = new FormData()
    form.append('image', file, 'receipt.jpg')
    return req('/receipts', { method: 'POST', body: form })
  },
  getReceipt(id: string): Promise<Receipt> {
    return req(`/receipts/${id}`)
  },
  updateItems(id: string, items: Item[]): Promise<Receipt> {
    return req(`/receipts/${id}/items`, { method: 'PATCH', body: JSON.stringify({ items }) })
  },
  updateMeta(id: string, meta: { store_name?: string; date?: string }): Promise<Receipt> {
    return req(`/receipts/${id}/meta`, { method: 'PATCH', body: JSON.stringify(meta) })
  },
  getProjects(): Promise<{ projects: CospendProject[]; default_project_id: string | null }> {
    return req('/cospend/projects')
  },
  getMembers(projectId: string): Promise<Member[]> {
    return req(`/cospend/projects/${projectId}/members`)
  },
  createGroup(
    receiptId: string,
    group: {
      name: string
      cospend_project_id: string
      payer_member_id: string
      member_ids: string[]
      item_ids: string[]
    },
  ): Promise<{ id: string }> {
    return req(`/receipts/${receiptId}/groups`, { method: 'POST', body: JSON.stringify(group) })
  },
  submitGroup(receiptId: string, groupId: string): Promise<SubmitResult> {
    return req(`/receipts/${receiptId}/groups/${groupId}/submit`, { method: 'POST' })
  },
  listGroups(receiptId: string): Promise<Group[]> {
    return req(`/receipts/${receiptId}/groups`)
  },
 }
@@ -0,0 +1 @@
 <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" aria-hidden="true" role="img" class="iconify iconify--logos" width="35.93" height="32" preserveAspectRatio="xMidYMid meet" viewBox="0 0 256 228"><path fill="#00D8FF" d="M210.483 73.824a171.49 171.49 0 0 0-8.24-2.597c.465-1.9.893-3.777 1.273-5.621c6.238-30.281 2.16-54.676-11.769-62.708c-13.355-7.7-35.196.329-57.254 19.526a171.23 171.23 0 0 0-6.375 5.848a155.866 155.866 0 0 0-4.241-3.917C100.759 3.829 77.587-4.822 63.673 3.233C50.33 10.957 46.379 33.89 51.995 62.588a170.974 170.974 0 0 0 1.892 8.48c-3.28.932-6.445 1.924-9.474 2.98C17.309 83.498 0 98.307 0 113.668c0 15.865 18.582 31.778 46.812 41.427a145.52 145.52 0 0 0 6.921 2.165a167.467 167.467 0 0 0-2.01 9.138c-5.354 28.2-1.173 50.591 12.134 58.266c13.744 7.926 36.812-.22 59.273-19.855a145.567 145.567 0 0 0 5.342-4.923a168.064 168.064 0 0 0 6.92 6.314c21.758 18.722 43.246 26.282 56.54 18.586c13.731-7.949 18.194-32.003 12.4-61.268a145.016 145.016 0 0 0-1.535-6.842c1.62-.48 3.21-.974 4.76-1.488c29.348-9.723 48.443-25.443 48.443-41.52c0-15.417-17.868-30.326-45.517-39.844Zm-6.365 70.984c-1.4.463-2.836.91-4.3 1.345c-3.24-10.257-7.612-21.163-12.963-32.432c5.106-11 9.31-21.767 12.459-31.957c2.619.758 5.16 1.557 7.61 2.4c23.69 8.156 38.14 20.213 38.14 29.504c0 9.896-15.606 22.743-40.946 31.14Zm-10.514 20.834c2.562 12.94 2.927 24.64 1.23 33.787c-1.524 8.219-4.59 13.698-8.382 15.893c-8.067 4.67-25.32-1.4-43.927-17.412a156.726 156.726 0 0 1-6.437-5.87c7.214-7.889 14.423-17.06 21.459-27.246c12.376-1.098 24.068-2.894 34.671-5.345a134.17 134.17 0 0 1 1.386 6.193ZM87.276 214.515c-7.882 2.783-14.16 2.863-17.955.675c-8.075-4.657-11.432-22.636-6.853-46.752a156.923 156.923 0 0 1 1.869-8.499c10.486 2.32 22.093 3.988 34.498 4.994c7.084 9.967 14.501 19.128 21.976 27.15a134.668 134.668 0 0 1-4.877 4.492c-9.933 8.682-19.886 14.842-28.658 17.94ZM50.35 144.747c-12.483-4.267-22.792-9.812-29.858-15.863c-6.35-5.437-9.555-10.836-9.555-15.216c0-9.322 13.897-21.212 37.076-29.293c2.813-.98 5.757-1.905 8.812-2.773c3.204 10.42 7.406 21.315 12.477 32.332c-5.137 11.18-9.399 22.249-12.634 32.792a134.718 134.718 0 0 1-6.318-1.979Zm12.378-84.26c-4.811-24.587-1.616-43.134 6.425-47.789c8.564-4.958 27.502 2.111 47.463 19.835a144.318 144.318 0 0 1 3.841 3.545c-7.438 7.987-14.787 17.08-21.808 26.988c-12.04 1.116-23.565 2.908-34.161 5.309a160.342 160.342 0 0 1-1.76-7.887Zm110.427 27.268a347.8 347.8 0 0 0-7.785-12.803c8.168 1.033 15.994 2.404 23.343 4.08c-2.206 7.072-4.956 14.465-8.193 22.045a381.151 381.151 0 0 0-7.365-13.322Zm-45.032-43.861c5.044 5.465 10.096 11.566 15.065 18.186a322.04 322.04 0 0 0-30.257-.006c4.974-6.559 10.069-12.652 15.192-18.18ZM82.802 87.83a323.167 323.167 0 0 0-7.227 13.238c-3.184-7.553-5.909-14.98-8.134-22.152c7.304-1.634 15.093-2.97 23.209-3.984a321.524 321.524 0 0 0-7.848 12.897Zm8.081 65.352c-8.385-.936-16.291-2.203-23.593-3.793c2.26-7.3 5.045-14.885 8.298-22.6a321.187 321.187 0 0 0 7.257 13.246c2.594 4.48 5.28 8.868 8.038 13.147Zm37.542 31.03c-5.184-5.592-10.354-11.779-15.403-18.433c4.902.192 9.899.29 14.978.29c5.218 0 10.376-.117 15.453-.343c-4.985 6.774-10.018 12.97-15.028 18.486Zm52.198-57.817c3.422 7.8 6.306 15.345 8.596 22.52c-7.422 1.694-15.436 3.058-23.88 4.071a382.417 382.417 0 0 0 7.859-13.026a347.403 347.403 0 0 0 7.425-13.565Zm-16.898 8.101a358.557 358.557 0 0 1-12.281 19.815a329.4 329.4 0 0 1-23.444.823c-7.967 0-15.716-.248-23.178-.732a310.202 310.202 0 0 1-12.513-19.846h.001a307.41 307.41 0 0 1-10.923-20.627a310.278 310.278 0 0 1 10.89-20.637l-.001.001a307.318 307.318 0 0 1 12.413-19.761c7.613-.576 15.42-.876 23.31-.876H128c7.926 0 15.743.303 23.354.883a329.357 329.357 0 0 1 12.335 19.695a358.489 358.489 0 0 1 11.036 20.54a329.472 329.472 0 0 1-11 20.722Zm22.56-122.124c8.572 4.944 11.906 24.881 6.52 51.026c-.344 1.668-.73 3.367-1.15 5.09c-10.622-2.452-22.155-4.275-34.23-5.408c-7.034-10.017-14.323-19.124-21.64-27.008a160.789 160.789 0 0 1 5.888-5.4c18.9-16.447 36.564-22.941 44.612-18.3ZM128 90.808c12.625 0 22.86 10.235 22.86 22.86s-10.235 22.86-22.86 22.86s-22.86-10.235-22.86-22.86s10.235-22.86 22.86-22.86Z"></path></svg>
@@ -0,0 +1,46 @@
 import { useRef, useState } from 'react'
 import { api } from '../api'
 import type { Item } from '../types'
 interface Props {
  onExtracted: (receiptId: string, items: Item[], storeName: string | null, date: string) => void
 }
 export function CaptureStep({ onExtracted }: Props) {
  const inputRef = useRef<HTMLInputElement>(null)
  const [loading, setLoading] = useState(false)
  const [error, setError] = useState<string | null>(null)
  async function handleFile(file: File | undefined) {
    if (!file) return
    setLoading(true)
    setError(null)
    try {
      const { id, items, store_name, date } = await api.uploadReceipt(file)
      onExtracted(id, items, store_name, date)
    } catch (e) {
      setError(e instanceof Error ? e.message : String(e))
    } finally {
      setLoading(false)
    }
  }
  return (
    <div className="step capture-step">
      <h1>wgBill</h1>
      <p>Take a photo of the receipt to get started.</p>
      <input
        ref={inputRef}
        type="file"
        accept="image/*"
        capture="environment"
        hidden
        onChange={(e) => handleFile(e.target.files?.[0])}
      />
      <button disabled={loading} onClick={() => inputRef.current?.click()}>
        {loading ? 'Reading receipt…' : 'Take photo'}
      </button>
      {error && <p className="error">{error}</p>}
    </div>
  )
 }
@@ -0,0 +1,224 @@
 import { useEffect, useState } from 'react'
 import { api } from '../api'
 import type { CospendProject, Group, Item, Member } from '../types'
 interface Props {
  receiptId: string
  items: Item[]
  onAllDone: (groups: Group[]) => void
 }
 export function GroupStep({ receiptId, items, onAllDone }: Props) {
  const [projects, setProjects] = useState<CospendProject[]>([])
  const [projectId, setProjectId] = useState<string | null>(null)
  const [members, setMembers] = useState<Member[]>([])
  const [loadError, setLoadError] = useState<string | null>(null)
  const [remainingIds, setRemainingIds] = useState<Set<string>>(new Set(items.map((i) => i.id)))
  const [groups, setGroups] = useState<Group[]>([])
  // current draft
  const [name, setName] = useState('WG')
  const [payerId, setPayerId] = useState<string | null>(null)
  const [selectedMemberIds, setSelectedMemberIds] = useState<Set<string>>(new Set())
  const [selectedItemIds, setSelectedItemIds] = useState<Set<string>>(new Set())
  const [submitting, setSubmitting] = useState(false)
  const [error, setError] = useState<string | null>(null)
  // load Cospend projects once, pick the configured default (or the only one)
  useEffect(() => {
    api
      .getProjects()
      .then(({ projects: p, default_project_id }) => {
        setProjects(p)
        const initial = default_project_id ?? (p.length === 1 ? p[0].id : null)
        if (initial) setProjectId(initial)
      })
      .catch((e) => setLoadError(e instanceof Error ? e.message : String(e)))
  }, [])
  // load members whenever the selected project changes
  useEffect(() => {
    if (!projectId) return
    api
      .getMembers(projectId)
      .then((m) => {
        setMembers(m)
        if (m.length > 0) {
          setPayerId(m[0].id)
          setSelectedMemberIds(new Set(m.map((mm) => mm.id)))
        }
      })
      .catch((e) => setLoadError(e instanceof Error ? e.message : String(e)))
  }, [projectId])
  function toggleItem(id: string) {
    setSelectedItemIds((prev) => {
      const next = new Set(prev)
      next.has(id) ? next.delete(id) : next.add(id)
      return next
    })
  }
  function toggleMember(id: string) {
    setSelectedMemberIds((prev) => {
      const next = new Set(prev)
      next.has(id) ? next.delete(id) : next.add(id)
      return next
    })
  }
  const remainingItems = items.filter((i) => remainingIds.has(i.id))
  const groupTotal = items
    .filter((i) => selectedItemIds.has(i.id))
    .reduce((sum, i) => sum + i.price, 0)
  async function submitCurrentGroup() {
    if (!projectId) {
      setError('pick a Cospend project')
      return
    }
    if (!payerId || selectedMemberIds.size === 0 || selectedItemIds.size === 0) {
      setError('pick a payer, at least one member, and at least one item')
      return
    }
    setSubmitting(true)
    setError(null)
    try {
      const { id: groupId } = await api.createGroup(receiptId, {
        name,
        cospend_project_id: projectId,
        payer_member_id: payerId,
        member_ids: [...selectedMemberIds],
        item_ids: [...selectedItemIds],
      })
      const result = await api.submitGroup(receiptId, groupId)
      const allGroups = await api.listGroups(receiptId)
      setGroups(allGroups)
      setRemainingIds((prev) => {
        const next = new Set(prev)
        selectedItemIds.forEach((id) => next.delete(id))
        return next
      })
      const wasLastGroup = remainingItems.length === selectedItemIds.size
      setSelectedItemIds(new Set())
      setName('WG')
      if (wasLastGroup) {
        onAllDone(allGroups)
      }
      void result
    } catch (e) {
      setError(e instanceof Error ? e.message : String(e))
    } finally {
      setSubmitting(false)
    }
  }
  if (loadError) {
    return (
      <div className="step">
        <p className="error">Couldn't load Cospend data: {loadError}</p>
      </div>
    )
  }
  return (
    <div className="step group-step">
      <h2>Who's splitting this?</h2>
      <p className="hint">
        Select the items for one splitting arrangement, pick who's in on it, submit. Repeat for
        any items that need a different group (e.g. only your snack).
      </p>
      <label className="payer-select">
        Cospend project
        <select value={projectId ?? ''} onChange={(e) => setProjectId(e.target.value)}>
          <option value="" disabled>
            select a project…
          </option>
          {projects.map((p) => (
            <option key={p.id} value={p.id}>
              {p.name}
            </option>
          ))}
        </select>
      </label>
      {groups.length > 0 && (
        <div className="submitted-groups">
          {groups.map((g) => (
            <p key={g.id}>
              ✓ {g.name} bill created —{' '}
              <a href={g.share_url ?? '#'} target="_blank" rel="noreferrer">
                receipt
              </a>
            </p>
          ))}
        </div>
      )}
      <input
        className="group-name"
        value={name}
        onChange={(e) => setName(e.target.value)}
        placeholder="group name (e.g. WG, just me + Alex)"
      />
      <h3>Items ({remainingItems.length} left)</h3>
      <ul className="item-list selectable">
        {remainingItems.map((item) => (
          <li
            key={item.id}
            className={selectedItemIds.has(item.id) ? 'selected' : ''}
            onClick={() => toggleItem(item.id)}
          >
            <span>{item.label || '(unnamed)'}</span>
            <span>{item.price.toFixed(2)}</span>
          </li>
        ))}
      </ul>
      <h3>Split with</h3>
      <ul className="member-list">
        {members.map((m) => (
          <li key={m.id}>
            <label>
              <input
                type="checkbox"
                checked={selectedMemberIds.has(m.id)}
                onChange={() => toggleMember(m.id)}
              />
              {m.name}
            </label>
          </li>
        ))}
      </ul>
      <label className="payer-select">
        Paid by
        <select value={payerId ?? ''} onChange={(e) => setPayerId(e.target.value)}>
          {members.map((m) => (
            <option key={m.id} value={m.id}>
              {m.name}
            </option>
          ))}
        </select>
      </label>
      <p className="total">Group total: {groupTotal.toFixed(2)}</p>
      {error && <p className="error">{error}</p>}
      <button disabled={submitting || selectedItemIds.size === 0} onClick={submitCurrentGroup}>
        {submitting ? 'Creating bill…' : 'Create bill for this group'}
      </button>
      {remainingItems.length === 0 && groups.length > 0 && (
        <button className="secondary" onClick={() => onAllDone(groups)}>
          All items assigned — finish
        </button>
      )}
    </div>
  )
 }
@@ -0,0 +1,107 @@
 import { useState } from 'react'
 import { api } from '../api'
 import type { Item } from '../types'
 interface Props {
  receiptId: string
  initialItems: Item[]
  initialStoreName: string | null
  initialDate: string
  onConfirmed: (items: Item[], storeName: string, date: string) => void
 }
 export function ReviewStep({
  receiptId,
  initialItems,
  initialStoreName,
  initialDate,
  onConfirmed,
 }: Props) {
  const [items, setItems] = useState<Item[]>(initialItems)
  const [storeName, setStoreName] = useState(initialStoreName ?? '')
  const [date, setDate] = useState(initialDate)
  const [saving, setSaving] = useState(false)
  const [error, setError] = useState<string | null>(null)
  function updateItem(id: string, patch: Partial<Item>) {
    setItems((prev) => prev.map((it) => (it.id === id ? { ...it, ...patch } : it)))
  }
  function removeItem(id: string) {
    setItems((prev) => prev.filter((it) => it.id !== id))
  }
  function addItem() {
    setItems((prev) => [
      ...prev,
      { id: crypto.randomUUID(), label: '', price: 0, bbox: null },
    ])
  }
  async function confirm() {
    setSaving(true)
    setError(null)
    try {
      await api.updateItems(receiptId, items)
      await api.updateMeta(receiptId, { store_name: storeName, date })
      onConfirmed(items, storeName, date)
    } catch (e) {
      setError(e instanceof Error ? e.message : String(e))
    } finally {
      setSaving(false)
    }
  }
  const total = items.reduce((sum, it) => sum + (Number(it.price) || 0), 0)
  return (
    <div className="step review-step">
      <h2>Check the extracted items</h2>
      <p className="hint">Fix anything the receipt reader got wrong before splitting.</p>
      <div className="meta-row">
        <label>
          Store
          <input
            value={storeName}
            placeholder="(unreadable - add it)"
            onChange={(e) => setStoreName(e.target.value)}
          />
        </label>
        <label>
          Date
          <input type="date" value={date} onChange={(e) => setDate(e.target.value)} />
        </label>
      </div>
      <ul className="item-list">
        {items.map((item) => (
          <li key={item.id} className="item-row">
            <input
              value={item.label}
              placeholder="item"
              onChange={(e) => updateItem(item.id, { label: e.target.value })}
            />
            <input
              type="number"
              step="0.01"
              value={item.price}
              onChange={(e) => updateItem(item.id, { price: Number(e.target.value) })}
            />
            <button className="icon-btn" onClick={() => removeItem(item.id)} aria-label="remove item">
              ✕
            </button>
          </li>
        ))}
      </ul>
      <button className="secondary" onClick={addItem}>
        + add missed item
      </button>
      <p className="total">Total: {total.toFixed(2)}</p>
      {error && <p className="error">{error}</p>}
      <button disabled={saving || items.length === 0} onClick={confirm}>
        {saving ? 'Saving…' : 'Looks good, continue'}
      </button>
    </div>
  )
 }
@@ -0,0 +1,32 @@
 import type { Group } from '../types'
 interface Props {
  groups: Group[]
  onRestart: () => void
 }
 export function SummaryStep({ groups, onRestart }: Props) {
  return (
    <div className="step summary-step">
      <h2>Done 🎉</h2>
      <ul className="summary-list">
        {groups.map((g) => (
          <li key={g.id}>
            <strong>{g.name}</strong>
            {g.status === 'submitted' ? (
              <>
                {' — bill created. '}
                <a href={g.share_url ?? '#'} target="_blank" rel="noreferrer">
                  view receipt
                </a>
              </>
            ) : (
              <span className="error"> — failed: {g.error}</span>
            )}
          </li>
        ))}
      </ul>
      <button onClick={onRestart}>Scan another receipt</button>
    </div>
  )
 }
@@ -0,0 +1,111 @@
 :root {
  --text: #6b6375;
  --text-h: #08060d;
  --bg: #fff;
  --border: #e5e4e7;
  --code-bg: #f4f3ec;
  --accent: #aa3bff;
  --accent-bg: rgba(170, 59, 255, 0.1);
  --accent-border: rgba(170, 59, 255, 0.5);
  --social-bg: rgba(244, 243, 236, 0.5);
  --shadow:
    rgba(0, 0, 0, 0.1) 0 10px 15px -3px, rgba(0, 0, 0, 0.05) 0 4px 6px -2px;
  --sans: system-ui, 'Segoe UI', Roboto, sans-serif;
  --heading: system-ui, 'Segoe UI', Roboto, sans-serif;
  --mono: ui-monospace, Consolas, monospace;
  font: 18px/145% var(--sans);
  letter-spacing: 0.18px;
  color-scheme: light dark;
  color: var(--text);
  background: var(--bg);
  font-synthesis: none;
  text-rendering: optimizeLegibility;
  -webkit-font-smoothing: antialiased;
  -moz-osx-font-smoothing: grayscale;
  @media (max-width: 1024px) {
    font-size: 16px;
  }
 }
@media (prefers-color-scheme: dark) {
  :root {
    --text: #9ca3af;
    --text-h: #f3f4f6;
    --bg: #16171d;
    --border: #2e303a;
    --code-bg: #1f2028;
    --accent: #c084fc;
    --accent-bg: rgba(192, 132, 252, 0.15);
    --accent-border: rgba(192, 132, 252, 0.5);
    --social-bg: rgba(47, 48, 58, 0.5);
    --shadow:
      rgba(0, 0, 0, 0.4) 0 10px 15px -3px, rgba(0, 0, 0, 0.25) 0 4px 6px -2px;
  }
  #social .button-icon {
    filter: invert(1) brightness(2);
  }
 }
 #root {
  width: 1126px;
  max-width: 100%;
  margin: 0 auto;
  text-align: center;
  border-inline: 1px solid var(--border);
  min-height: 100svh;
  display: flex;
  flex-direction: column;
  box-sizing: border-box;
 }
 body {
  margin: 0;
 }
 h1,
 h2 {
  font-family: var(--heading);
  font-weight: 500;
  color: var(--text-h);
 }
 h1 {
  font-size: 56px;
  letter-spacing: -1.68px;
  margin: 32px 0;
  @media (max-width: 1024px) {
    font-size: 36px;
    margin: 20px 0;
  }
 }
 h2 {
  font-size: 24px;
  line-height: 118%;
  letter-spacing: -0.24px;
  margin: 0 0 8px;
  @media (max-width: 1024px) {
    font-size: 20px;
  }
 }
 p {
  margin: 0;
 }
 code,
 .counter {
  font-family: var(--mono);
  display: inline-flex;
  border-radius: 4px;
  color: var(--text-h);
 }
 code {
  font-size: 15px;
  line-height: 135%;
  padding: 4px 8px;
  background: var(--code-bg);
 }
@@ -0,0 +1,10 @@
 import { StrictMode } from 'react'
 import { createRoot } from 'react-dom/client'
 import './index.css'
 import App from './App.tsx'
 createRoot(document.getElementById('root')!).render(
  <StrictMode>
    <App />
  </StrictMode>,
 )
@@ -0,0 +1,56 @@
 export type BBox = [number, number, number, number] // x, y, w, h, normalized 0-1
 export interface Item {
  id: string
  label: string
  price: number
  bbox: BBox | null
 }
 export interface Receipt {
  id: string
  items: Item[]
  store_name: string | null
  date: string // YYYY-MM-DD; extracted, falls back to today, user-editable
  status: 'extracted' | 'grouped' | 'done'
  created_at: string
 }
 export interface Member {
  id: string
  name: string
 }
 export interface CospendProject {
  id: string
  name: string
 }
 export interface Group {
  id: string
  receipt_id: string
  name: string
  cospend_project_id: string
  payer_member_id: string
  member_ids: string[]
  item_ids: string[]
  status: 'pending' | 'submitted' | 'failed'
  share_url: string | null
  cospend_bill_id: string | null
  error: string | null
 }
 export interface SubmitResult {
  share_url: string
  amount: number
  bill_id: number
 }
 /** A group draft in progress client-side, before it's persisted via POST /groups. */
 export interface GroupDraft {
  localId: string
  name: string
  payerMemberId: string | null
  memberIds: string[]
  itemIds: string[]
 }
@@ -0,0 +1,26 @@
 {
  "compilerOptions": {
    "tsBuildInfoFile": "./node_modules/.tmp/tsconfig.app.tsbuildinfo",
    "target": "es2023",
    "lib": ["ES2023", "DOM"],
    "module": "esnext",
    "types": ["vite/client"],
    "allowArbitraryExtensions": true,
    "skipLibCheck": true,
    /* Bundler mode */
    "moduleResolution": "bundler",
    "allowImportingTsExtensions": true,
    "verbatimModuleSyntax": true,
    "moduleDetection": "force",
    "noEmit": true,
    "jsx": "react-jsx",
    /* Linting */
    "noUnusedLocals": true,
    "noUnusedParameters": true,
    "erasableSyntaxOnly": true,
    "noFallthroughCasesInSwitch": true
  },
  "include": ["src"]
 }
@@ -0,0 +1,7 @@
 {
  "files": [],
  "references": [
    { "path": "./tsconfig.app.json" },
    { "path": "./tsconfig.node.json" }
  ]
 }
@@ -0,0 +1,23 @@
 {
  "compilerOptions": {
    "tsBuildInfoFile": "./node_modules/.tmp/tsconfig.node.tsbuildinfo",
    "target": "es2023",
    "lib": ["ES2023"],
    "types": ["node"],
    "skipLibCheck": true,
    /* Bundler mode */
    "module": "nodenext",
    "allowImportingTsExtensions": true,
    "verbatimModuleSyntax": true,
    "moduleDetection": "force",
    "noEmit": true,
    /* Linting */
    "noUnusedLocals": true,
    "noUnusedParameters": true,
    "erasableSyntaxOnly": true,
    "noFallthroughCasesInSwitch": true
  },
  "include": ["vite.config.ts"]
 }
@@ -0,0 +1,30 @@
 import react from '@vitejs/plugin-react'
 import { defineConfig } from 'vite'
 import { VitePWA } from 'vite-plugin-pwa'
 // https://vite.dev/config/
 export default defineConfig({
  plugins: [
    react(),
    VitePWA({
      registerType: 'autoUpdate',
      manifest: {
        name: 'wgBill',
        short_name: 'wgBill',
        description: 'Photograph a receipt, split it, bill it via Cospend',
        theme_color: '#1a1a1a',
        background_color: '#1a1a1a',
        display: 'standalone',
        icons: [
          { src: 'pwa-192x192.png', sizes: '192x192', type: 'image/png' },
          { src: 'pwa-512x512.png', sizes: '512x512', type: 'image/png' },
        ],
      },
    }),
  ],
  server: {
    proxy: {
      '/api': 'http://localhost:5000',
    },
  },
 })
@@ -0,0 +1,51 @@
 #!/bin/bash
 set -e
 echo "Installing wgBill"
 echo "=================="
 # Backend
 echo ""
 echo "Setting up backend..."
 cd backend
 # python3 -> 3.14 on this machine has no prebuilt Pillow wheel yet and
 # fails building from source (missing jpeg headers); 3.12 has wheels.
 PYBIN=python3.12
 command -v "$PYBIN" >/dev/null 2>&1 || PYBIN=python3
 "$PYBIN" -m venv .venv
 source .venv/bin/activate
 python -m pip install -r requirements.txt
 if [ ! -f .env ]; then
    echo "Creating backend .env from example..."
    cp .env.example .env
 fi
 cd ..
 # Frontend
 echo ""
 echo "Setting up frontend..."
 cd frontend
 npm install
 if [ ! -f .env ]; then
    echo "Creating frontend .env from example..."
    cp .env.example .env
 fi
 cd ..
 echo ""
 echo "=================================="
 echo "Installation complete!"
 echo ""
 echo "Fill in backend/.env (Nextcloud app password, LLM API key) before"
 echo "first run - see backend/.env.example for what's needed."
 echo ""
 echo "To start the application:"
 echo "  ./run.sh"
 echo "or manually:"
 echo "  Backend:  cd backend && source .venv/bin/activate && python run.py"
 echo "  Frontend: cd frontend && npm run dev"
 echo ""
@@ -0,0 +1,37 @@
 #!/bin/bash
 set -e
 echo "[*] Starting wgBill Local Native Environment..."
 SESSION="wgbill"
 SESSIONEXISTS=$(tmux list-sessions 2>/dev/null | grep $SESSION || true)
 # Only create tmux session if it doesn't exist
 if [ "$SESSIONEXISTS" = "" ]
 then
    echo "[.] Starting new tmux session..."
    tmux new-session -d -s $SESSION
    sleep 3
    # Backend (native)
    tmux new-window -t $SESSION -n 'backend'
    tmux send-keys -t "$SESSION:backend" 'cd ./backend && source .venv/bin/activate && python run.py' C-m
    sleep 5
    # Frontend (native)
    tmux new-window -t $SESSION -n 'frontend'
    tmux send-keys -t "$SESSION:frontend" 'cd ./frontend && npm run dev' C-m
    tmux select-layout -t $SESSION tiled
 else
    echo "[i] Found existing session."
    sleep 1
 fi
 echo "Attaching to tmux session..."
 sleep 1
 tmux attach-session -t $SESSION
		`@@ -0,0 +1 @@`
							<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" aria-hidden="true" role="img" class="iconify iconify--logos" width="35.93" height="32" preserveAspectRatio="xMidYMid meet" viewBox="0 0 256 228"><path fill="#00D8FF" d="M210.483 73.824a171.49 171.49 0 0 0-8.24-2.597c.465-1.9.893-3.777 1.273-5.621c6.238-30.281 2.16-54.676-11.769-62.708c-13.355-7.7-35.196.329-57.254 19.526a171.23 171.23 0 0 0-6.375 5.848a155.866 155.866 0 0 0-4.241-3.917C100.759 3.829 77.587-4.822 63.673 3.233C50.33 10.957 46.379 33.89 51.995 62.588a170.974 170.974 0 0 0 1.892 8.48c-3.28.932-6.445 1.924-9.474 2.98C17.309 83.498 0 98.307 0 113.668c0 15.865 18.582 31.778 46.812 41.427a145.52 145.52 0 0 0 6.921 2.165a167.467 167.467 0 0 0-2.01 9.138c-5.354 28.2-1.173 50.591 12.134 58.266c13.744 7.926 36.812-.22 59.273-19.855a145.567 145.567 0 0 0 5.342-4.923a168.064 168.064 0 0 0 6.92 6.314c21.758 18.722 43.246 26.282 56.54 18.586c13.731-7.949 18.194-32.003 12.4-61.268a145.016 145.016 0 0 0-1.535-6.842c1.62-.48 3.21-.974 4.76-1.488c29.348-9.723 48.443-25.443 48.443-41.52c0-15.417-17.868-30.326-45.517-39.844Zm-6.365 70.984c-1.4.463-2.836.91-4.3 1.345c-3.24-10.257-7.612-21.163-12.963-32.432c5.106-11 9.31-21.767 12.459-31.957c2.619.758 5.16 1.557 7.61 2.4c23.69 8.156 38.14 20.213 38.14 29.504c0 9.896-15.606 22.743-40.946 31.14Zm-10.514 20.834c2.562 12.94 2.927 24.64 1.23 33.787c-1.524 8.219-4.59 13.698-8.382 15.893c-8.067 4.67-25.32-1.4-43.927-17.412a156.726 156.726 0 0 1-6.437-5.87c7.214-7.889 14.423-17.06 21.459-27.246c12.376-1.098 24.068-2.894 34.671-5.345a134.17 134.17 0 0 1 1.386 6.193ZM87.276 214.515c-7.882 2.783-14.16 2.863-17.955.675c-8.075-4.657-11.432-22.636-6.853-46.752a156.923 156.923 0 0 1 1.869-8.499c10.486 2.32 22.093 3.988 34.498 4.994c7.084 9.967 14.501 19.128 21.976 27.15a134.668 134.668 0 0 1-4.877 4.492c-9.933 8.682-19.886 14.842-28.658 17.94ZM50.35 144.747c-12.483-4.267-22.792-9.812-29.858-15.863c-6.35-5.437-9.555-10.836-9.555-15.216c0-9.322 13.897-21.212 37.076-29.293c2.813-.98 5.757-1.905 8.812-2.773c3.204 10.42 7.406 21.315 12.477 32.332c-5.137 11.18-9.399 22.249-12.634 32.792a134.718 134.718 0 0 1-6.318-1.979Zm12.378-84.26c-4.811-24.587-1.616-43.134 6.425-47.789c8.564-4.958 27.502 2.111 47.463 19.835a144.318 144.318 0 0 1 3.841 3.545c-7.438 7.987-14.787 17.08-21.808 26.988c-12.04 1.116-23.565 2.908-34.161 5.309a160.342 160.342 0 0 1-1.76-7.887Zm110.427 27.268a347.8 347.8 0 0 0-7.785-12.803c8.168 1.033 15.994 2.404 23.343 4.08c-2.206 7.072-4.956 14.465-8.193 22.045a381.151 381.151 0 0 0-7.365-13.322Zm-45.032-43.861c5.044 5.465 10.096 11.566 15.065 18.186a322.04 322.04 0 0 0-30.257-.006c4.974-6.559 10.069-12.652 15.192-18.18ZM82.802 87.83a323.167 323.167 0 0 0-7.227 13.238c-3.184-7.553-5.909-14.98-8.134-22.152c7.304-1.634 15.093-2.97 23.209-3.984a321.524 321.524 0 0 0-7.848 12.897Zm8.081 65.352c-8.385-.936-16.291-2.203-23.593-3.793c2.26-7.3 5.045-14.885 8.298-22.6a321.187 321.187 0 0 0 7.257 13.246c2.594 4.48 5.28 8.868 8.038 13.147Zm37.542 31.03c-5.184-5.592-10.354-11.779-15.403-18.433c4.902.192 9.899.29 14.978.29c5.218 0 10.376-.117 15.453-.343c-4.985 6.774-10.018 12.97-15.028 18.486Zm52.198-57.817c3.422 7.8 6.306 15.345 8.596 22.52c-7.422 1.694-15.436 3.058-23.88 4.071a382.417 382.417 0 0 0 7.859-13.026a347.403 347.403 0 0 0 7.425-13.565Zm-16.898 8.101a358.557 358.557 0 0 1-12.281 19.815a329.4 329.4 0 0 1-23.444.823c-7.967 0-15.716-.248-23.178-.732a310.202 310.202 0 0 1-12.513-19.846h.001a307.41 307.41 0 0 1-10.923-20.627a310.278 310.278 0 0 1 10.89-20.637l-.001.001a307.318 307.318 0 0 1 12.413-19.761c7.613-.576 15.42-.876 23.31-.876H128c7.926 0 15.743.303 23.354.883a329.357 329.357 0 0 1 12.335 19.695a358.489 358.489 0 0 1 11.036 20.54a329.472 329.472 0 0 1-11 20.722Zm22.56-122.124c8.572 4.944 11.906 24.881 6.52 51.026c-.344 1.668-.73 3.367-1.15 5.09c-10.622-2.452-22.155-4.275-34.23-5.408c-7.034-10.017-14.323-19.124-21.64-27.008a160.789 160.789 0 0 1 5.888-5.4c18.9-16.447 36.564-22.941 44.612-18.3ZM128 90.808c12.625 0 22.86 10.235 22.86 22.86s-10.235 22.86-22.86 22.86s-22.86-10.235-22.86-22.86s10.235-22.86 22.86-22.86Z"></path></svg>