@bongos/core 1.19.316 → 1.19.318

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.316",
-  "core_contract": "1.19.316",
-  "source_commit": "8248fac14dda1af6df3a5414027a4bf9d6ba23e0",
+  "core_version": "1.19.318",
+  "core_contract": "1.19.318",
+  "source_commit": "01d0a25617f7ca9212b310552724d7eb8c183a32",
   "source_ref": "HEAD",
-  "built_at": "2026-08-23T22:02:43.920Z",
+  "built_at": "2026-08-23T22:11:19.148Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 323,
     "agent_docs_stubbed": 22,
-    "functional_verbatim": 1423,
+    "functional_verbatim": 1438,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1768,
-  "tree_sha256": "6e3e95467f3b58d962df6fc2490011be711c43787e43adff339b3da3390c2da6",
+  "file_count": 1783,
+  "tree_sha256": "24fa1a6a45d9a8ad89550dcdf06b82e5aeffa56776dcd6666a1be6524d9d4a6e",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -2987,7 +2987,7 @@
     {
       "path": "modules/economy/cost.js",
       "mode": "0000644",
-      "sha256": "5d125e8b884ebfeb5687ee6748c49bf752d5757114ede98d0cabf2eee4a38b76"
+      "sha256": "01bc7725fe16388971fd4def2544d0de9af6b3a522973df7ef86386737933d40"
     },
     {
       "path": "modules/economy/credits.js",
@@ -3824,10 +3824,70 @@
       "mode": "0000644",
       "sha256": "4a4a513ed0759e1e999454e6b6972b921789a5c2a88521755812d97fb6194f83"
     },
+    {
+      "path": "modules/lifecycle/db-analytics.js",
+      "mode": "0000644",
+      "sha256": "b0cb5fb6853d39fd99feaa0b8e3b1040b0877a8476273789dad8976be42070cd"
+    },
+    {
+      "path": "modules/lifecycle/db-claim-reads.js",
+      "mode": "0000644",
+      "sha256": "7aafa6f538811bd29d7f8ce3ebbf59fea72a90fea99de1fdfb6c62124eff23d5"
+    },
+    {
+      "path": "modules/lifecycle/db-claims.js",
+      "mode": "0000644",
+      "sha256": "dbce7de39b91cdd1843ba26efc3f3be76690a7112aaa3b1b0406a9b9f98dfb32"
+    },
+    {
+      "path": "modules/lifecycle/db-deps-criteria.js",
+      "mode": "0000644",
+      "sha256": "b3906a4704be5df9cdfdff9f13e2a18878f93ff7285c42edf25856ec1c4531be"
+    },
+    {
+      "path": "modules/lifecycle/db-goals.js",
+      "mode": "0000644",
+      "sha256": "29b950000d31618de168c6128d9b78c03daad7e68b9a9b6d3e83aa40abd3d9fb"
+    },
+    {
+      "path": "modules/lifecycle/db-grade.js",
+      "mode": "0000644",
+      "sha256": "e6c9a996c11a73847317db47620007c8d21f70b19c73ade4499361c1c0c330f9"
+    },
+    {
+      "path": "modules/lifecycle/db-overrides.js",
+      "mode": "0000644",
+      "sha256": "fa3f251ef2bd0d2caaf49ecc2a250ca65ea7814ee25d606e00c23db0572b23fe"
+    },
+    {
+      "path": "modules/lifecycle/db-rank-authz.js",
+      "mode": "0000644",
+      "sha256": "c93780ea71bb2f8f3d2b21f042c21d029f1ed5336a3aaf178fb3e14925dcc19b"
+    },
+    {
+      "path": "modules/lifecycle/db-shared.js",
+      "mode": "0000644",
+      "sha256": "17a6ddfb4a9415c67dfbd06b052a3a7686df7a55287aa78ff2b55c6a2ca3d954"
+    },
+    {
+      "path": "modules/lifecycle/db-ship.js",
+      "mode": "0000644",
+      "sha256": "0a313d9c20cc0da5952e3a5acbca83cd1fd3df7ecccbbd109701d865b4dd2fe6"
+    },
+    {
+      "path": "modules/lifecycle/db-tasks.js",
+      "mode": "0000644",
+      "sha256": "43748950aee899125bc40b8fb6f26a7df5645746e23fcbe6bbe3ea486f0b7248"
+    },
+    {
+      "path": "modules/lifecycle/db-versions.js",
+      "mode": "0000644",
+      "sha256": "aa98bd22cf237579b065a9a85cb64dda30a0b6b9894ebc5d6ca0592bbb7a977f"
+    },
     {
       "path": "modules/lifecycle/db.js",
       "mode": "0000644",
-      "sha256": "f4d3df748f39109c775ae167712926cd44832aba0651251f508adc4a8d4e57fe"
+      "sha256": "70448ebd079d5167bcf0c9c2b4473d46e996a54202f09f5a8ebc30980aba4166"
     },
     {
       "path": "modules/lifecycle/dead-deps.js",
@@ -3912,7 +3972,7 @@
     {
       "path": "modules/lifecycle/publish-reconciler.js",
       "mode": "0000644",
-      "sha256": "8f08c6d58db41ba247aaf5b04b5a8988365b469e96c0ad04c336f272ef308c4e"
+      "sha256": "28c61d55fe2b492f0fce4c99b60e88f0cbeb542c47c04482558818d65628e0d7"
     },
     {
       "path": "modules/lifecycle/routes/analytics.js",
@@ -4582,12 +4642,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "6c10d47c4db2e1e159b3c4aad631491bf7818c3a89fbf3f02bc1de512b1163b3"
+      "sha256": "509e4a76d5eb6f21fd8c926c6bf7ec9f1938d62ed4055558e2d3911858166b38"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "2bfd8f95e547fbbf060361a024395b256fe5eb7bde0796600d44494a718da5cb"
+      "sha256": "5e3c53bb9627f4dcf747e5e7bc8fa7fb0e136554f04d96081137ca1bc05654ad"
     },
     {
       "path": "public-docs/index.html",
@@ -5122,7 +5182,7 @@
     {
       "path": "scripts/gds/coreB-carve-proof.sh",
       "mode": "0000644",
-      "sha256": "52daeb629c872ad4f596955257f60d43444db4c91ffa96e6e3752145c92f0fec"
+      "sha256": "55ac5440a1c5481766198d6a89cef601fde816024b592b1e77f535c465a2df47"
     },
     {
       "path": "scripts/gds/cost.js",
@@ -5237,7 +5297,7 @@
     {
       "path": "scripts/gds/fitness.js",
       "mode": "0000644",
-      "sha256": "a300efecfa69f8ad597a8125df6dd1999d7cdffc8317ac8616b7081555c8b303"
+      "sha256": "fc4af6845de5bf3775629d492bb793f96cf707dfd9837e338cb2344250f733b5"
     },
     {
       "path": "scripts/gds/gate-review.js",
@@ -5339,6 +5399,11 @@
       "mode": "0000644",
       "sha256": "4bf1e6c352e83a63a4747b892c5f9310dc860f8b2f5fc7c607ed432dcb2dd110"
     },
+    {
+      "path": "scripts/gds/identity-strip.js",
+      "mode": "0000644",
+      "sha256": "a5ac6e41f30fd13738e52800616c2e0e3b1f8150dbb5e3f43e1fdbced5f58fe0"
+    },
     {
       "path": "scripts/gds/init.js",
       "mode": "0000644",
@@ -5532,7 +5597,7 @@
     {
       "path": "scripts/gds/provision.js",
       "mode": "0000644",
-      "sha256": "1b1e4ca721a9052206265736712ea17e96b2b724c2926faba49839def36a1818"
+      "sha256": "b445702caa082164d8b733a44be2407f3e3889f28838dfd38222a6a0eb5ec672"
     },
     {
       "path": "scripts/gds/publish-credential-check.js",
@@ -5607,7 +5672,7 @@
     {
       "path": "scripts/gds/run-unit-tests.js",
       "mode": "0000644",
-      "sha256": "e2e3cd6299f63b838ed5a78121eedcb44e76b3cc62b622581cd537c154b1d8ae"
+      "sha256": "c96e50e533f4e20dba91c6a26ac6efd2c6ad33ffcdc856eeb46af21a17e67975"
     },
     {
       "path": "scripts/gds/sandbox-stage.js",
@@ -5767,7 +5832,12 @@
     {
       "path": "scripts/gds/session-cost.js",
       "mode": "0000644",
-      "sha256": "52d6c931fa0d7213632a365984ed360cb8df2d369762dbb417d0c0a1b74145a6"
+      "sha256": "fdf3b9d8e0089078da550ac65d0c012583cc21103a668deecf481383a73c9da1"
+    },
+    {
+      "path": "scripts/gds/session-digest-build.js",
+      "mode": "0000644",
+      "sha256": "95e5c21533f67588fd02fae311cef8985d3eee58ad3217fcb6e9998e1f4da965"
     },
     {
       "path": "scripts/gds/session-digest.js",
@@ -5802,7 +5872,7 @@
     {
       "path": "scripts/gds/ship.js",
       "mode": "0000644",
-      "sha256": "f3005175abc0ba20e958381df6aee02402267e9956da466386656dd4e86ad8cf"
+      "sha256": "8f2c0ca63abae081cccfa96059ae07b008bd108f85866a248075cb4a1b7e025e"
     },
     {
       "path": "scripts/gds/skill-preflight.js",
@@ -6262,7 +6332,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "049a62ecc239e85005e2f79fea63f46edf406b53eb2b4c36e21e81281365afc7"
+      "sha256": "af9d10cbaf1d6320df892f4d0e1403c0f5f1bb6e8c314695e89477690ba7fc85"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -6492,7 +6562,7 @@
     {
       "path": "tests/auto_satisfy_criteria.mjs",
       "mode": "0000644",
-      "sha256": "1a5524b0e63631a0ebdc5e3e87c04eb862a9be7021b3b1caf5a44afb2dcb455b"
+      "sha256": "135d0af6b1535e50d68ed62baa36b616ba28888e899940cabf2f2940f3cd6f9d"
     },
     {
       "path": "tests/autonomous_fit_protected_paths.mjs",
@@ -6902,7 +6972,7 @@
     {
       "path": "tests/dependencies_migration.mjs",
       "mode": "0000644",
-      "sha256": "cd5010d2794a23eac2f84a19d6abc8fc5da75400d023373d289f61cbb08ede2c"
+      "sha256": "daf81be50910d712cdfe10ac2c50578f70dc1d8cf261d435db23a120ec310968"
     },
     {
       "path": "tests/dependencies_polymorphic.mjs",
@@ -7112,7 +7182,7 @@
     {
       "path": "tests/fitness.mjs",
       "mode": "0000644",
-      "sha256": "de84ceb6c73818975d5da77949c8ff4823f6e9d4613d9c95ea21c96a92b66760"
+      "sha256": "465c7ef58342b6e03947858fe34649f5a13a5bcf3658478601baed1e8b2420ef"
     },
     {
       "path": "tests/fitness_ratchets.mjs",
@@ -7192,7 +7262,7 @@
     {
       "path": "tests/goal_abuse_matrix.mjs",
       "mode": "0000644",
-      "sha256": "daf3a5942ce3f154d29618e4242557758db50d8c70046562995fc2c10d5ee954"
+      "sha256": "b9fea609f0dc0aa1c0d05c1794290a65e48996c817a4a435098e91220ade89c1"
     },
     {
       "path": "tests/goal_achievement.mjs",
@@ -7202,7 +7272,7 @@
     {
       "path": "tests/goal_advisory.mjs",
       "mode": "0000644",
-      "sha256": "f5a6985502bc85589d688bf96b3e9242d84efec39d52f5a451e92c23cbb9175c"
+      "sha256": "b9fe4a36c7b60512c71e1d4837e8639381d441c19261007e186cb8c369d5b2c6"
     },
     {
       "path": "tests/goal_cli.mjs",
@@ -7332,7 +7402,7 @@
     {
       "path": "tests/government_claim_eligibility.mjs",
       "mode": "0000644",
-      "sha256": "2750f75bc0ef7f5286a2abe1d59e49ff2ea6ea300d3c1760dda31ae8ad74dc61"
+      "sha256": "7eb103c6a201345728af5002aae1be09c1f3b1459b74bef7ea14e990a28dd05b"
     },
     {
       "path": "tests/government_config.mjs",
@@ -7392,7 +7462,7 @@
     {
       "path": "tests/government_rank_sync.mjs",
       "mode": "0000644",
-      "sha256": "8e430f7286ec798eceaba7db962bb3725c1de2e9cbaeee70739aae6287695d7e"
+      "sha256": "8750d0bbfc33403ff451b780935496a037dbab4a8e30bdc089abde8da8b7400a"
     },
     {
       "path": "tests/government_require_permission.mjs",
@@ -7532,7 +7602,7 @@
     {
       "path": "tests/helpers.mjs",
       "mode": "0000644",
-      "sha256": "56321847cf62d27db361b7b4f2511f3573967e3d1b95630f7efd48bad74a7a8f"
+      "sha256": "7a306648d5fd083313126ce98d364e19d130313edf7d37dd23e3767c7e527c8f"
     },
     {
       "path": "tests/hierarchy-config.mjs",
@@ -7847,7 +7917,7 @@
     {
       "path": "tests/migration_allocation.mjs",
       "mode": "0000644",
-      "sha256": "6755c9568cd6cdb7b8600ae2c6651856d63c053684dcb8b765f7329590a9fc08"
+      "sha256": "017770d7639ca5dfb204b613b9ed287fb01c1f768c4f6e0550cc0ac7cad5fb5e"
     },
     {
       "path": "tests/migration_namespace.mjs",
@@ -8222,12 +8292,12 @@
     {
       "path": "tests/publish_reconciler.mjs",
       "mode": "0000644",
-      "sha256": "c61741aebfad2e85e55f0e734b3195d9474f8dd0c7812c3ee1434b05d088c1de"
+      "sha256": "5a9ea0bf7b4d776a6f9036b8bd060fef76335533274ed748e9b9d742da6960d3"
     },
     {
       "path": "tests/rank_gate.mjs",
       "mode": "0000644",
-      "sha256": "2745778ec6ff188a9e65b0a5964f07d5a399aaafdd8854aa962e3cb6728244e6"
+      "sha256": "d8fff57f5fee95bf11a5c1df3e2c0e342d39ef5b22c5e87f47a61dd9a3d2a8cb"
     },
     {
       "path": "tests/rank_tier_single_source.mjs",
@@ -8292,7 +8362,7 @@
     {
       "path": "tests/reward_gate.mjs",
       "mode": "0000644",
-      "sha256": "a21d9f4d3ff937d59b9361b330a2e5e93ded9c9a12d73434eb843cae9d1a3c74"
+      "sha256": "52f9997d60ce03c60137376dc2bba1940c669617f0ca69fdafd3d90091411df3"
     },
     {
       "path": "tests/reward_mode_cost_plus_only.mjs",
@@ -8442,7 +8512,12 @@
     {
       "path": "tests/session_cost.mjs",
       "mode": "0000644",
-      "sha256": "6531fd14dbfc025543c4855c326746c126cfcc94173b9a724e56f74a989a1d4e"
+      "sha256": "5f330f79eee8c39dc589d892ba5fa6835906e7b61ff5fe52aec3285721e84876"
+    },
+    {
+      "path": "tests/session_cost_row_raise.mjs",
+      "mode": "0000644",
+      "sha256": "74a106432222df7d8e845ec409bd2e1d49aff18bf80cdeff032cfe91b1d6dc3f"
     },
     {
       "path": "tests/session_digest.mjs",
@@ -8462,7 +8537,7 @@
     {
       "path": "tests/session_records.mjs",
       "mode": "0000644",
-      "sha256": "c33e4f5bb635eb523bc7014fe8cfad343b7ab7753822644ce987cd419520c748"
+      "sha256": "8c62fe0bec07aea4c30f84d296eb7b40c9550606aacf6cb63f9644ca34f12069"
     },
     {
       "path": "tests/session_reward_on_land.mjs",

package/modules/economy/cost.js

@@ -105,23 +105,51 @@ async function logCost({
   outputUsd = null,
   // task #385 / migration 181: which skill invocation incurred this cost.
   skillName = null,
+  // task 1003217 — opt-in MONOTONIC RAISE on (source, source_ref) conflict.
+  //
+  // Default false, so every existing caller keeps the plain insert-once
+  // idempotency it relies on. The session reconciler below sets it true: a
+  // long session's digest GROWS on every ship, and a cost row written from an
+  // early digest must be allowed to catch up, or the session is billed at its
+  // first hour forever (the bug this task fixes).
+  //
+  // Safe because the update SETS an absolute amount rather than adding to one:
+  // re-running with the same figure is a no-op, so there is no double-count
+  // path, and the WHERE guard means a row can only ever move UP.
+  raiseOnConflict = false,
 }) {
   // V3.R11 (#91): builder_id is the per-builder attribution column added by
   // migration 046. Routes default it to the authed builder, so the only
   // legitimately-null builder_id is for historical rows or system-injected
   // costs (infra, domain, etc.) that don't belong to any one person.
+  // Monotonic raise (opt-in) vs the historical insert-once. `recorded_at` moves
+  // with the amount so the reconciler's "digest is newer than the priced row"
+  // predicate settles instead of re-firing every sweep.
+  const conflictAction = raiseOnConflict
+    ? `DO UPDATE SET
+         amount_usd      = EXCLUDED.amount_usd,
+         description     = EXCLUDED.description,
+         fresh_input_usd = EXCLUDED.fresh_input_usd,
+         cache_read_usd  = EXCLUDED.cache_read_usd,
+         cache_write_usd = EXCLUDED.cache_write_usd,
+         output_usd      = EXCLUDED.output_usd,
+         recorded_at     = EXCLUDED.recorded_at
+       WHERE EXCLUDED.amount_usd > cost_log.amount_usd`
+    : 'DO NOTHING';
   const { rows } = await pool.query(
     `INSERT INTO cost_log (task_id, amount_usd, category, description, source, source_ref, recorded_at, builder_id,
                            fresh_input_usd, cache_read_usd, cache_write_usd, output_usd, skill_name)
      VALUES ($1, $2, $3, $4, $5, $6, COALESCE($7, now()), $8, $9, $10, $11, $12, $13)
      ON CONFLICT (source, source_ref)
        WHERE source IS NOT NULL AND source_ref IS NOT NULL
-       DO NOTHING
+       ${conflictAction}
      RETURNING id, recorded_at`,
     [taskId, amountUsd, category, description, source, sourceRef, recordedAt, builderId,
      freshInputUsd, cacheReadUsd, cacheWriteUsd, outputUsd, skillName || null]
   );
-  return rows[0] ?? null; // null when ON CONFLICT skipped the insert
+  // null when the conflict clause skipped the write (DO NOTHING, or a raise that
+  // would not have moved the row upward).
+  return rows[0] ?? null;
 }
 
 // task 1366 (System 1) — server-side session-cost reconciler.
@@ -144,25 +172,45 @@ async function logCost({
 //                        first crack at posting (avoids racing it). 15m default.
 //   - limit            : per-sweep cap (runaway guard; there are normally few).
 //
-// The NOT EXISTS checks BOTH the interactive key (session_id) AND the subagent
-// key (session_id || ':sub') — session-cost.js splits a captured session into
-// those two rows (task 1344), so a session the client captured even partially
-// is skipped entirely (we only have the combined model_usage, so we can't split
-// it; better to defer to the client's split than to add a duplicate total).
-// Returns { scanned, reconciled, totalUsd, unknownModels } for logging.
+// A session the CLIENT split into interactive + subagent rows (session_id ||
+// ':sub', task 1344) is skipped entirely — we hold only the combined
+// model_usage, so we cannot reproduce that split and should defer to it.
+//
+// task 1003217 — WHY THIS NO LONGER SKIPS EVERY PRICED SESSION. It used to
+// exclude any session that had a cost row at all. But `session_records` is
+// upserted on EVERY ship, so a session that ships twelve tasks has a digest
+// from its FIRST ship, and this sweep priced that partial digest ~15 minutes
+// later and then never looked again — logCost's DO NOTHING silently dropped
+// every subsequent, larger figure. Measured on prod: a 9.3-hour session was
+// billed at its first 56 minutes, and across four audited sessions the ledger
+// captured 14%, 14%, 16% and 54% of real spend. Now a session is revisited
+// while its digest is NEWER than the row we priced from it, and logCost raises
+// the row monotonically. `recorded_at` advances on each raise, so a settled
+// session stops matching and the sweep converges.
+//
+// Historical rows are NOT re-priced downward: llm-pricing.js is explicit that a
+// paid row records what was charged, and ADR 0054 paid credits from it. The
+// raise is upward-only, so pre-fix inflated rows stay as they are — expect a
+// visible step change in cost-per-ship at deploy rather than a rewritten past.
+// Returns { scanned, reconciled, raised, totalUsd, unknownModels } for logging.
 async function reconcileSessionCosts({ olderThanMinutes = 15, limit = 500 } = {}) {
   const mins = Number.isFinite(Number(olderThanMinutes)) ? Number(olderThanMinutes) : 15;
   const lim = Number.isFinite(Number(limit)) ? Number(limit) : 500;
   const { rows } = await pool.query(
-    `SELECT sr.session_id, sr.builder_id, sr.model_usage
+    `SELECT sr.session_id, sr.builder_id, sr.model_usage,
+            c.amount_usd AS prior_usd
        FROM session_records sr
+       LEFT JOIN cost_log c
+              ON c.source = 'session:interactive'
+             AND c.source_ref = sr.session_id
       WHERE sr.model_usage IS NOT NULL
         AND sr.uploaded_at < now() - ($1 || ' minutes')::interval
         AND NOT EXISTS (
-          SELECT 1 FROM cost_log c
-           WHERE c.source_ref = sr.session_id
-              OR c.source_ref = sr.session_id || ':sub'
+          SELECT 1 FROM cost_log s
+           WHERE s.source_ref = sr.session_id || ':sub'
         )
+        -- Never priced, or the digest has grown since we priced it.
+        AND (c.id IS NULL OR c.recorded_at < sr.uploaded_at)
       ORDER BY sr.uploaded_at DESC
       LIMIT $2`,
     [String(mins), lim]
@@ -170,6 +218,7 @@ async function reconcileSessionCosts({ olderThanMinutes = 15, limit = 500 } = {}
 
   const round4 = (n) => Math.round((Number(n) || 0) * 10000) / 10000;
   let reconciled = 0;
+  let raised = 0;
   let totalUsd = 0;
   const unknownModels = new Set();
   for (const r of rows) {
@@ -177,34 +226,50 @@ async function reconcileSessionCosts({ olderThanMinutes = 15, limit = 500 } = {}
     for (const m of comp.unknown_models) unknownModels.add(m);
     const amount = round4(comp.total_usd);
     if (!(amount > 0)) continue; // nothing priceable on this row — skip
+    const prior = round4(r.prior_usd);
+    // A row already at or above this figure needs no write: the digest grew but
+    // the price did not (or the stored row predates a pricing fix and is higher,
+    // which we deliberately leave alone).
+    if (prior > 0 && amount <= prior) continue;
     const id8 = String(r.session_id).slice(0, 8);
     const unkNote = comp.unknown_models.length
       ? ` [unpriced model(s) priced as opus: ${comp.unknown_models.join(',')}]`
       : '';
+    const provenance = prior > 0
+      ? `raised from $${prior.toFixed(4)} as the session grew`
+      : 'reconciled from digest; client cost-hook did not post';
     const inserted = await logCost({
       amountUsd: amount,
       category: 'api',
       source: 'session:interactive',
-      // SAME key the client would use → ON CONFLICT DO NOTHING prevents any
-      // double-count if the client also posts later.
+      // SAME key the client would use, so a client post and this sweep can
+      // never both land as separate rows.
       sourceRef: r.session_id,
       builderId: r.builder_id,
-      description: `session ${id8} — $${amount.toFixed(4)} (reconciled from digest; client cost-hook did not post)${unkNote}`.slice(0, 1000),
+      // Upward-only: catches a long session up as it ships more tasks, and can
+      // never lower a row that has already been paid from.
+      raiseOnConflict: true,
+      description: `session ${id8} — $${amount.toFixed(4)} (${provenance})${unkNote}`.slice(0, 1000),
       freshInputUsd: round4(comp.fresh_input_usd),
       cacheReadUsd: round4(comp.cache_read_usd),
       cacheWriteUsd: round4(comp.cache_write_usd),
       outputUsd: round4(comp.output_usd),
     });
-    // inserted === null means ON CONFLICT skipped it (client raced in between the
-    // SELECT and the INSERT) — expected + idempotent, not counted.
+    // inserted === null means the conflict clause skipped the write (the client
+    // raced in between the SELECT and the INSERT, or the raise would not have
+    // moved the row up) — expected + idempotent, not counted.
     if (inserted) {
-      reconciled++;
-      totalUsd += amount;
+      if (prior > 0) raised++;
+      else reconciled++;
+      // Bill only the INCREMENT on a raise, so this figure stays a true
+      // "spend recorded by this sweep" rather than re-counting the whole row.
+      totalUsd += amount - prior;
     }
   }
   return {
     scanned: rows.length,
     reconciled,
+    raised,
     totalUsd: round4(totalUsd),
     unknownModels: Array.from(unknownModels),
   };