An open-source car logbook PWA for Australian taxpayers using the ATO logbook method to claim work-related car expenses. Track trips, odometer readings, and business-use percentage, then generate the records the ATO expects for your logbook period.

⚠️ Early stage — use with caution. This project is a 100% AI-coded experiment (see Built with Claude). It is not yet battle-tested. Always double-check every figure before you lodge anything with the ATO, and confirm with a registered tax agent. Not tax advice.

Every line of this project — code, tests, docs, and this README — was written by Claude (Anthropic's Claude Code), with a human acting only as product owner: setting direction, reviewing, and approving. No human hand-wrote the implementation. It was built the "vibecoded" way: brainstorm → plan → test-driven development → PR review → deploy, all driven by Claude.

That's the fun of it — and the caveat. It's early and experimental; treat outputs as a starting point, not gospel. Bug reports and scrutiny welcome via Issues.

New here or not a developer? The Wiki is a plain-English manual: what you need, a step-by-step setup guide, how to use the app day to day, the logbook method explained, and the reports. Source lives in wiki/ and is published to the Wiki automatically.

• Next.js 16 (App Router, TypeScript strict mode)
• Tailwind CSS 4
• Cloudflare Workers via OpenNext — hosting, D1 (database), R2 (receipt storage), Workers AI
• Drizzle ORM — D1 schema and queries
• Vitest — unit tests, including the tax engine

pnpm install
pnpm dev

Open http://localhost:3000.

Copy .env.example to .dev.vars and fill in local-only values before running anything that needs them:

cp .env.example .dev.vars

Each user self-hosts their own copy on Cloudflare Workers (via OpenNext). You deploy a tagged release, not main.

1. Log in to your Cloudflare account (once):

corepack pnpm install                      # installs the pinned local wrangler
corepack pnpm exec wrangler login

Use the project-local wrangler (corepack pnpm exec wrangler …), not pnpm dlx wrangler. On pnpm 12 dlx blocks the esbuild/workerd build scripts and aborts with ERR_PNPM_IGNORED_BUILDS. The local binary is already pinned in package.json and matches CI.

2. Create the Cloudflare resources (once), then note the printed IDs:

corepack pnpm exec wrangler d1 create ginoos-log-book
corepack pnpm exec wrangler r2 bucket create ginoos-log-book-receipts
# Workers AI needs no resource — the [ai] binding is enough.

3. Configure wrangler — copy the example and paste your own database_id:

cp wrangler.toml.example wrangler.toml   # gitignored; never commit real IDs
# edit wrangler.toml: set database_id (the id printed by `d1 create` above)

4. Apply migrations to the remote D1, then build + deploy:

pnpm cf-typegen        # generate CloudflareEnv types (optional but recommended)
pnpm db:remote         # wrangler d1 migrations apply DB --remote
pnpm run deploy        # opennextjs-cloudflare build && ... deploy

Use pnpm preview to run the built Worker locally before deploying.

Use pnpm run deploy, not pnpm deploy. deploy is a built-in pnpm command, so the bare form ignores this project's script and aborts with ERR_PNPM_INVALID_DEPLOY_TARGET. The run prefix forces the package script.

Your checkout path must not contain an apostrophe (or other shell-special characters). OpenNext bakes the absolute build path into the bundled Worker, and esbuild then chokes on a path like .../Ginoo's Log Book/... with Expected ")" but found "s". Clone into a plain path such as aussie-car-logbook/ and the build succeeds.

This app has no built-in login; it assumes a single user and delegates auth to Cloudflare Access (free tier). Without this, your financial data is public. No custom domain is needed — Access protects the *.workers.dev URL directly:

1. Zero Trust (https://one.dash.cloudflare.com) — first time only, pick a team name and the Free plan.
2. Workers & Pages → your Worker → Access tab → Protect this Worker behind Access, scope All traffic (production + preview URLs).
3. Policy: rule type Emails (not "Email domain") → your own address only.
4. Login method: One-time PIN (email code). If it isn't offered, enable it once under Zero Trust → Settings → Authentication → Login methods → Add → One-time PIN (new Zero Trust orgs no longer add it automatically). Add Google later if you like.
5. Verify in an incognito window: the Cloudflare login page must appear before the app loads. Note a non-allowed email still sees that page and a "code emailed" message — Cloudflare does this to prevent address enumeration; only your allowed email actually receives a working code and reaches the app.

See SECURITY.md.

This is a public, open-source repository. Never commit:

• Real Cloudflare account IDs, D1 database IDs, or API tokens
• .dev.vars, wrangler.toml, or any .env* file (only the *.example templates with placeholder values are committed)
• Trip logs, odometer readings, receipts/receipt images, or any other personal or financial data

Local secrets and personal data stay in gitignored files (.dev.vars, wrangler.toml, .wrangler/, .open-next/) or in your own Cloudflare account — never in the git history.