@hasna/economy 0.5.0 → 0.5.1

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.5.1
+
+### Patch Changes
+
+- Update the hosted container to the pinned Alpine runtime and age-eligible security fixes, with exact standalone dependency overrides and reproducible lockfile resolution.
+- Repair missing legacy PostgreSQL cost-center schema during explicit migration, preserving original rows and migration history with an atomic, validated completion receipt.
+
 ## 0.5.0
 
 ### Minor Changes

package/dist/chunks/{index-kn5572kd.js → index-49f12css.js}

@@ -4,7 +4,7 @@ import {
 } from "./index-w3bvv0ns.js";
 import {
   getStore
-} from "./index-kgy9b6bf.js";
+} from "./index-r1jv3kpy.js";
 import {
   formatReportedUsd,
   formatSummaryCoverage,

package/dist/chunks/{index-axh32d30.js → index-d480p2wh.js}

@@ -19,7 +19,7 @@ import {
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.0",
+  version: "0.5.1",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",
@@ -114,7 +114,16 @@ var package_default = {
   },
   trustedDependencies: [
     "@hasna/projects"
-  ]
+  ],
+  overrides: {
+    "fast-uri": "3.1.8",
+    hono: "4.13.7",
+    "ip-address": "10.7.1",
+    nanoid: "5.1.16",
+    "path-to-regexp": "8.4.0",
+    undici: "6.28.1",
+    "express-rate-limit": "8.7.0"
+  }
 };
 
 // src/lib/package-metadata.ts

package/dist/chunks/{index-kgy9b6bf.js → index-r1jv3kpy.js}

@@ -14,7 +14,7 @@ import {
   querySavingsSummary,
   requireCurrentBillingDiffSummary,
   requireCurrentSavingsReport
-} from "./index-axh32d30.js";
+} from "./index-d480p2wh.js";
 import {
   deleteBudget,
   deleteGoal,

package/dist/chunks/{index-emvs5ph2.js → index-xsah93s2.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   LOCAL_STORAGE_OPT_IN_KEYS
-} from "./index-axh32d30.js";
+} from "./index-d480p2wh.js";
 import {
   assessCostFromDb,
   getIngestState,

package/dist/chunks/{serve-0k69e4h9.js → serve-2knem98x.js}

@@ -5,7 +5,7 @@ import {
 } from "./index-w3bvv0ns.js";
 import {
   syncAll
-} from "./index-emvs5ph2.js";
+} from "./index-xsah93s2.js";
 import {
   buildBrief,
   packageMetadata,
@@ -16,7 +16,7 @@ import {
   queryProjectDetail,
   queryRangeStats,
   querySavingsSummary
-} from "./index-axh32d30.js";
+} from "./index-d480p2wh.js";
 import {
   AGENTS,
   INGEST_SCHEMA_SQL,

package/dist/chunks/{tui-7f8f951w.js → tui-khmnkat2.js}

@@ -6,10 +6,10 @@ import {
   printStatusLine,
   printWaybarJson,
   runTui
-} from "./index-kn5572kd.js";
+} from "./index-49f12css.js";
 import"./index-w3bvv0ns.js";
-import"./index-kgy9b6bf.js";
-import"./index-axh32d30.js";
+import"./index-r1jv3kpy.js";
+import"./index-d480p2wh.js";
 import"./index-ez9thsr7.js";
 import"./index-p35cyhc4.js";
 export {

package/dist/chunks/{watch-mm1j39vy.js → watch-4y064yys.js}

@@ -2,12 +2,12 @@
 import {
   agentPaths,
   syncAll
-} from "./index-emvs5ph2.js";
+} from "./index-xsah93s2.js";
 import {
   getStore,
   isCloudStore
-} from "./index-kgy9b6bf.js";
-import"./index-axh32d30.js";
+} from "./index-r1jv3kpy.js";
+import"./index-d480p2wh.js";
 import {
   formatSummaryValue
 } from "./index-ez9thsr7.js";

package/dist/cli/index.js

@@ -8,22 +8,22 @@ import {
 import {
   buildStatusLine,
   gatherStatusData
-} from "../chunks/index-kn5572kd.js";
+} from "../chunks/index-49f12css.js";
 import"../chunks/index-w3bvv0ns.js";
 import {
   agentPaths,
   syncAll
-} from "../chunks/index-emvs5ph2.js";
+} from "../chunks/index-xsah93s2.js";
 import {
   getStore,
   isCloudStore
-} from "../chunks/index-kgy9b6bf.js";
+} from "../chunks/index-r1jv3kpy.js";
 import {
   billingDriftCheck,
   economyCloudStorage,
   economyTransportReport,
   packageMetadata
-} from "../chunks/index-axh32d30.js";
+} from "../chunks/index-d480p2wh.js";
 import {
   AGENTS,
   MAX_INGEST_BYTES,
@@ -1357,23 +1357,23 @@ function registerExtendedCommands(program) {
     console.log();
   });
   program.command("tui").description("Terminal status dashboard (Linux/SSH friendly)").option("--watch", "Live refresh").option("--interval <seconds>", "Refresh interval", "30").action(async (opts) => {
-    const { runTui } = await import("../chunks/tui-7f8f951w.js");
+    const { runTui } = await import("../chunks/tui-khmnkat2.js");
     await runTui({
       watch: Boolean(opts.watch),
       interval: Number(opts.interval ?? 30)
     });
   });
   program.command("waybar").description("Print waybar-compatible JSON status line").action(async () => {
-    const { printWaybarJson } = await import("../chunks/tui-7f8f951w.js");
+    const { printWaybarJson } = await import("../chunks/tui-khmnkat2.js");
     await printWaybarJson();
   });
   const barCmd = program.command("bar").description("Status bar helpers (Linux)");
   barCmd.command("tui").description("Alias for economy tui").option("--watch", "Live refresh").action(async (opts) => {
-    const { runTui } = await import("../chunks/tui-7f8f951w.js");
+    const { runTui } = await import("../chunks/tui-khmnkat2.js");
     await runTui({ watch: Boolean(opts.watch) });
   });
   barCmd.command("waybar").description("Alias for economy waybar").action(async () => {
-    const { printWaybarJson } = await import("../chunks/tui-7f8f951w.js");
+    const { printWaybarJson } = await import("../chunks/tui-khmnkat2.js");
     await printWaybarJson();
   });
   program.command("estimate").description("Estimate cost for token counts").requiredOption("--model <model>", "Model name").option("--input <n>", "Input tokens", "0").option("--output <n>", "Output tokens", "0").action(async (opts) => {
@@ -3198,7 +3198,7 @@ program.command("accounts [period]").description("List account usage by email ad
   console.log();
 });
 program.command("watch").description("Live stream of incoming costs").option("--interval <seconds>", "Poll interval in seconds", "10").option("--daemon", "Watch agent data directories and sync on change").option("--agent <agent>", `Filter by agent (${AGENTS.join("|")})`).option("--notify <amount>", "Fire macOS notification when cumulative cost crosses this USD threshold").action(async (opts) => {
-  const { watchCosts } = await import("../chunks/watch-mm1j39vy.js");
+  const { watchCosts } = await import("../chunks/watch-4y064yys.js");
   await watchCosts({
     interval: parsePositiveCliInteger(opts.interval ?? "10", "--interval"),
     daemon: Boolean(opts.daemon),
@@ -3434,7 +3434,7 @@ pricingCmd.command("remove <model>").description("Remove pricing for a model").a
 });
 program.command("serve").description("Start the REST API server").option("-p, --port <port>", "Port", "3456").action(async (opts) => {
   const port = parseCliPort(opts.port ?? "3456", "--port");
-  const { startServer } = await import("../chunks/serve-0k69e4h9.js");
+  const { startServer } = await import("../chunks/serve-2knem98x.js");
   startServer(port);
 });
 program.command("mcp").description("Show MCP server install commands").option("--claude", "Install into Claude Code").option("--codex", "Install into Codex").option("--gemini", "Install into Gemini CLI").option("--all", "Install into all agents").action(async (opts) => {

package/dist/db/pg-legacy-schema.d.ts

@@ -0,0 +1,12 @@
+export interface LegacySchemaRepairResult {
+    id: string;
+    status: 'not_needed' | 'applied' | 'already_applied';
+    added: string[];
+}
+/**
+ * Repair one known additive schema gap before the existing numbered migration
+ * sequence. Only the explicit migration command calls this; server startup
+ * never repairs a store. Originals and their migration markers are untouched.
+ */
+export declare function repairLegacyCostCenterSchema(dsn: string): Promise<LegacySchemaRepairResult>;
+//# sourceMappingURL=pg-legacy-schema.d.ts.map

package/dist/db/pg-legacy-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pg-legacy-schema.d.ts","sourceRoot":"","sources":["../../src/db/pg-legacy-schema.ts"],"names":[],"mappings":"AAkBA,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,YAAY,GAAG,SAAS,GAAG,iBAAiB,CAAA;IACpD,KAAK,EAAE,MAAM,EAAE,CAAA;CAChB;AA6HD;;;;GAIG;AACH,wBAAsB,4BAA4B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CA8DjG"}

package/dist/index.js

@@ -61,7 +61,7 @@ import { randomUUID } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.0",
+  version: "0.5.1",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",
@@ -156,7 +156,16 @@ var package_default = {
   },
   trustedDependencies: [
     "@hasna/projects"
-  ]
+  ],
+  overrides: {
+    "fast-uri": "3.1.8",
+    hono: "4.13.7",
+    "ip-address": "10.7.1",
+    nanoid: "5.1.16",
+    "path-to-regexp": "8.4.0",
+    undici: "6.28.1",
+    "express-rate-limit": "8.7.0"
+  }
 };
 
 // src/lib/package-metadata.ts

package/dist/mcp/index.js

@@ -84,7 +84,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.0",
+  version: "0.5.1",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",
@@ -179,7 +179,16 @@ var package_default = {
   },
   trustedDependencies: [
     "@hasna/projects"
-  ]
+  ],
+  overrides: {
+    "fast-uri": "3.1.8",
+    hono: "4.13.7",
+    "ip-address": "10.7.1",
+    nanoid: "5.1.16",
+    "path-to-regexp": "8.4.0",
+    undici: "6.28.1",
+    "express-rate-limit": "8.7.0"
+  }
 };
 
 // src/lib/package-metadata.ts

package/dist/otel/index.js

@@ -3458,7 +3458,7 @@ async function pushIngestRows(cloud, scratch) {
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.0",
+  version: "0.5.1",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",
@@ -3553,7 +3553,16 @@ var package_default = {
   },
   trustedDependencies: [
     "@hasna/projects"
-  ]
+  ],
+  overrides: {
+    "fast-uri": "3.1.8",
+    hono: "4.13.7",
+    "ip-address": "10.7.1",
+    nanoid: "5.1.16",
+    "path-to-regexp": "8.4.0",
+    undici: "6.28.1",
+    "express-rate-limit": "8.7.0"
+  }
 };
 
 // src/lib/package-metadata.ts

package/dist/server/index.js

@@ -4164,6 +4164,208 @@ var init_pg_migrate = __esm(() => {
   init_pg_connection();
 });
 
+// src/db/pg-legacy-schema.ts
+var exports_pg_legacy_schema = {};
+__export(exports_pg_legacy_schema, {
+  repairLegacyCostCenterSchema: () => repairLegacyCostCenterSchema
+});
+import { createHash as createHash5 } from "crypto";
+import pg4 from "pg";
+async function assertReceiptTable(client, schema) {
+  await client.query("LOCK TABLE " + quote2(schema) + ".economy_schema_repairs IN SHARE ROW EXCLUSIVE MODE");
+  const shape = await relation(client, schema, "economy_schema_repairs");
+  if (!shape || shape.columns.length !== 3 || !checkColumn("economy_schema_repairs", shape.columns.find((c) => c.name === "id"), true) || !checkColumn("economy_schema_repairs", shape.columns.find((c) => c.name === "sql_sha256"), true)) {
+    throw Error("LEGACY_SCHEMA_INCOMPATIBLE: unexpected repair ledger columns");
+  }
+  const completed = shape.columns.find((c) => c.name === "completed_at");
+  if (!completed || completed.type !== "timestamp with time zone" || !completed.required || completed.generated || completed.identity) {
+    throw Error("LEGACY_SCHEMA_INCOMPATIBLE: unexpected repair ledger timestamp");
+  }
+  const meta = await client.query(`
+    SELECT c.relpersistence='p' AND NOT c.relrowsecurity AND NOT c.relforcerowsecurity
+      AND NOT EXISTS (SELECT 1 FROM pg_trigger WHERE tgrelid=c.oid AND NOT tgisinternal)
+      AND NOT EXISTS (SELECT 1 FROM pg_rewrite WHERE ev_class=c.oid)
+      AND NOT EXISTS (SELECT 1 FROM pg_inherits WHERE inhrelid=c.oid OR inhparent=c.oid)
+      AND NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conrelid=c.oid AND (contype<>'p' OR condeferrable))
+      AS ordinary,
+      ARRAY(SELECT a.attname::text FROM pg_index i
+        CROSS JOIN LATERAL unnest(i.indkey) WITH ORDINALITY k(attnum,ordinality)
+        JOIN pg_attribute a ON a.attrelid=c.oid AND a.attnum=k.attnum
+        WHERE i.indrelid=c.oid AND i.indisprimary AND i.indisvalid AND i.indisready
+        ORDER BY k.ordinality) AS primary_columns,
+      (SELECT pg_get_expr(d.adbin,d.adrelid) FROM pg_attrdef d JOIN pg_attribute a
+        ON a.attrelid=d.adrelid AND a.attnum=d.adnum
+        WHERE d.adrelid=c.oid AND a.attname='completed_at') AS clock_default
+    FROM pg_class c JOIN pg_namespace n ON n.oid=c.relnamespace
+    WHERE n.nspname=$1 AND c.relname='economy_schema_repairs'`, [schema]);
+  const row = meta.rows[0];
+  if (!row?.ordinary || JSON.stringify(row.primary_columns) !== '["id"]' || row.clock_default !== "clock_timestamp()") {
+    throw Error("LEGACY_SCHEMA_INCOMPATIBLE: unexpected repair ledger behavior");
+  }
+}
+async function relation(client, schema, name) {
+  const result = await client.query(`
+    SELECT c.relkind AS kind, a.attname AS name, a.atttypid::regtype::text AS type,
+           a.attnotnull AS required, a.attgenerated AS generated, a.attidentity AS identity
+    FROM pg_class c JOIN pg_namespace n ON n.oid=c.relnamespace
+    LEFT JOIN pg_attribute a ON a.attrelid=c.oid AND a.attnum>0 AND NOT a.attisdropped
+    WHERE n.nspname=$1 AND c.relname=$2 ORDER BY a.attnum`, [schema, name]);
+  if (!result.rows.length)
+    return null;
+  if (result.rows[0].kind !== "r")
+    throw Error("LEGACY_SCHEMA_INCOMPATIBLE: expected ordinary table " + name);
+  return { kind: result.rows[0].kind, columns: result.rows.filter((row) => row.name) };
+}
+function checkColumn(table, actual, required3) {
+  if (!actual)
+    return false;
+  if (actual.type !== "text" || actual.required !== required3 || actual.generated || actual.identity) {
+    throw Error("LEGACY_SCHEMA_INCOMPATIBLE: unexpected column " + table + "." + actual.name);
+  }
+  return true;
+}
+async function missingStructure(client, schema) {
+  const missing = [];
+  for (const table of ["requests", "sessions", "budgets"]) {
+    const found = await relation(client, schema, table);
+    if (!found)
+      throw Error("LEGACY_SCHEMA_INCOMPATIBLE: missing core table " + table);
+    if (!checkColumn(table, found.columns.find((column) => column.name === "cost_center_id"), false)) {
+      missing.push(table + ".cost_center_id");
+    }
+  }
+  const centers = await relation(client, schema, "cost_centers");
+  if (!centers)
+    missing.push("cost_centers");
+  else {
+    for (const [name, required3] of [
+      ["id", true],
+      ["kind", true],
+      ["name", true],
+      ["repo_path", false],
+      ["labels_json", false],
+      ["created_at", true],
+      ["updated_at", true]
+    ]) {
+      if (!checkColumn("cost_centers", centers.columns.find((column) => column.name === name), required3)) {
+        throw Error("LEGACY_SCHEMA_INCOMPATIBLE: incomplete cost_centers table");
+      }
+    }
+    const primary = await client.query(`
+      SELECT array_agg(a.attname::text ORDER BY k.ordinality) AS columns
+      FROM pg_index i JOIN pg_class c ON c.oid=i.indrelid JOIN pg_namespace n ON n.oid=c.relnamespace
+      CROSS JOIN LATERAL unnest(i.indkey) WITH ORDINALITY k(attnum,ordinality)
+      JOIN pg_attribute a ON a.attrelid=c.oid AND a.attnum=k.attnum
+      WHERE n.nspname=$1 AND c.relname='cost_centers' AND i.indisprimary
+      GROUP BY i.indexrelid`, [schema]);
+    if (JSON.stringify(primary.rows.map((row) => row.columns)) !== '[["id"]]') {
+      throw Error("LEGACY_SCHEMA_INCOMPATIBLE: unexpected cost_centers primary key");
+    }
+  }
+  for (const [name, table, column] of INDEXES) {
+    const result = await client.query(`
+      SELECT t.relname AS table_name, am.amname AS method,
+             i.indisunique AS unique, i.indisvalid AS valid, i.indisready AS ready,
+             i.indpred IS NULL AS unfiltered, i.indexprs IS NULL AS simple,
+             i.indnatts=i.indnkeyatts AS no_includes,
+             ARRAY(SELECT a.attname::text FROM unnest(i.indkey) WITH ORDINALITY k(attnum,ordinality)
+                   JOIN pg_attribute a ON a.attrelid=t.oid AND a.attnum=k.attnum
+                   ORDER BY k.ordinality) AS columns
+      FROM pg_class c JOIN pg_namespace n ON n.oid=c.relnamespace
+      LEFT JOIN pg_index i ON i.indexrelid=c.oid LEFT JOIN pg_class t ON t.oid=i.indrelid
+      LEFT JOIN pg_am am ON am.oid=c.relam WHERE n.nspname=$1 AND c.relname=$2`, [schema, name]);
+    if (!result.rows.length) {
+      missing.push(name);
+      continue;
+    }
+    const actual = result.rows[0];
+    if (actual.table_name !== table || actual.method !== "btree" || actual.unique || !actual.valid || !actual.ready || !actual.unfiltered || !actual.simple || !actual.no_includes || JSON.stringify(actual.columns) !== JSON.stringify([column])) {
+      throw Error("LEGACY_SCHEMA_INCOMPATIBLE: unexpected index " + name);
+    }
+  }
+  return missing;
+}
+async function repairLegacyCostCenterSchema(dsn) {
+  const result = { id: REPAIR_ID, status: "not_needed", added: [] };
+  const pool = new pg4.Pool({ ...resolvePgConnection(dsn), max: 1, connectionTimeoutMillis: 1e4 });
+  pool.on("error", () => {});
+  let client;
+  try {
+    client = await pool.connect();
+    client.on("error", () => {});
+    await client.query("SET statement_timeout='15min'; SET lock_timeout='15s'");
+    await client.query("SELECT pg_advisory_lock(hashtext('economy.pg-migrations.v1'), hashtext(current_database() || ':' || current_schema()))");
+    const schema = (await client.query("SELECT current_schema() AS name")).rows[0]?.name;
+    if (typeof schema !== "string" || !schema)
+      throw Error("LEGACY_SCHEMA_INCOMPATIBLE: missing migration schema");
+    const ledger = await relation(client, schema, "_pg_migrations");
+    if (!ledger)
+      return result;
+    const history = await client.query("SELECT version FROM " + quote2(schema) + "._pg_migrations WHERE version>=0 AND version<85 ORDER BY version");
+    if (history.rows.length !== 85 || history.rows.some((row, index) => row.version !== index)) {
+      return result;
+    }
+    await client.query("BEGIN");
+    try {
+      await client.query("SELECT set_config('search_path', $1, true)", [quote2(schema)]);
+      const missing = await missingStructure(client, schema);
+      const receiptTable = await relation(client, schema, "economy_schema_repairs");
+      if (receiptTable) {
+        await assertReceiptTable(client, schema);
+        const receipt = await client.query("SELECT sql_sha256 FROM economy_schema_repairs WHERE id=$1", [REPAIR_ID]);
+        if (receipt.rows.length) {
+          if (receipt.rows.length !== 1 || receipt.rows[0].sql_sha256 !== REPAIR_HASH || missing.length) {
+            throw Error("LEGACY_SCHEMA_INCOMPATIBLE: completed repair receipt or schema has changed");
+          }
+          await client.query("COMMIT");
+          return { ...result, status: "already_applied" };
+        }
+      }
+      if (!missing.length) {
+        await client.query("COMMIT");
+        return result;
+      }
+      await client.query(`CREATE TABLE IF NOT EXISTS economy_schema_repairs (
+        id TEXT PRIMARY KEY, sql_sha256 TEXT NOT NULL,
+        completed_at TIMESTAMPTZ NOT NULL DEFAULT pg_catalog.clock_timestamp()
+      )`);
+      await assertReceiptTable(client, schema);
+      for (const sql of REPAIR_SQL)
+        await client.query(sql);
+      if ((await missingStructure(client, schema)).length)
+        throw Error("LEGACY_SCHEMA_INCOMPATIBLE: repair postcondition failed");
+      const inserted = await client.query("INSERT INTO economy_schema_repairs (id,sql_sha256) VALUES ($1,$2) RETURNING id,sql_sha256", [REPAIR_ID, REPAIR_HASH]);
+      const readback = await client.query("SELECT id,sql_sha256 FROM economy_schema_repairs WHERE id=$1", [REPAIR_ID]);
+      for (const receipt of [inserted, readback]) {
+        if (receipt.rowCount !== 1 || receipt.rows[0]?.id !== REPAIR_ID || receipt.rows[0]?.sql_sha256 !== REPAIR_HASH) {
+          throw Error("LEGACY_SCHEMA_INCOMPATIBLE: repair receipt readback failed");
+        }
+      }
+      await client.query("COMMIT");
+      return { id: REPAIR_ID, status: "applied", added: missing };
+    } catch (error) {
+      await client.query("ROLLBACK").catch(() => {});
+      throw error;
+    }
+  } finally {
+    client?.release();
+    await pool.end().catch(() => {});
+  }
+}
+var REPAIR_ID = "legacy-cost-centers-v1", REPAIR_SQL, REPAIR_HASH, INDEXES, quote2 = (name) => '"' + name.replaceAll('"', '""') + '"';
+var init_pg_legacy_schema = __esm(() => {
+  init_pg_connection();
+  init_pg_migrations();
+  REPAIR_SQL = [0, 38, 47, 48, 15, 54, 55, 56].map((index) => PG_MIGRATIONS[index]);
+  REPAIR_HASH = createHash5("sha256").update(JSON.stringify(REPAIR_SQL)).digest("hex");
+  INDEXES = [
+    ["idx_cost_centers_kind", "cost_centers", "kind"],
+    ["idx_requests_cost_center", "requests", "cost_center_id"],
+    ["idx_sessions_cost_center", "sessions", "cost_center_id"],
+    ["idx_budgets_cost_center", "budgets", "cost_center_id"]
+  ];
+});
+
 // src/server/legacy-inventory.ts
 var exports_legacy_inventory = {};
 __export(exports_legacy_inventory, {
@@ -4316,7 +4518,7 @@ __export(exports_legacy_plan, {
   parseLegacySelection: () => parseLegacySelection,
   parseLegacyPlanOptions: () => parseLegacyPlanOptions
 });
-import { createHash as createHash5 } from "crypto";
+import { createHash as createHash6 } from "crypto";
 import { closeSync, constants, fstatSync, openSync, readSync } from "fs";
 import { isAbsolute } from "path";
 function object(value, fields, label) {
@@ -4505,7 +4707,7 @@ async function runLegacyPlan(selection) {
     await pool.end();
   }
 }
-var INPUT_MAX, MEMBERS_MAX = 1e4, sha256 = (text) => createHash5("sha256").update(text).digest("hex");
+var INPUT_MAX, MEMBERS_MAX = 1e4, sha256 = (text) => createHash6("sha256").update(text).digest("hex");
 var init_legacy_plan = __esm(() => {
   init_legacy_inventory();
   INPUT_MAX = 256 * 1024;
@@ -4524,7 +4726,7 @@ __export(exports_legacy_preservation, {
   parseLegacyCapsule: () => parseLegacyCapsule,
   assertLegacyPlanCurrent: () => assertLegacyPlanCurrent
 });
-import { createHash as createHash6, randomUUID as randomUUID3 } from "crypto";
+import { createHash as createHash7, randomUUID as randomUUID3 } from "crypto";
 import { closeSync as closeSync2, constants as constants2, fstatSync as fstatSync2, fsyncSync, lstatSync, openSync as openSync2, readSync as readSync2, realpathSync, writeSync } from "fs";
 import { basename as basename4, dirname as dirname4, isAbsolute as isAbsolute2 } from "path";
 function parseLegacyPlan(value) {
@@ -4774,8 +4976,8 @@ async function rehearseLegacyRestore(client, input, scope = "transaction") {
       const table = tables[i], expected = capsule.plan.snapshot.tables[i];
       if (table.table_name !== expected.table_name || table.columns_sha256 !== expected.columns_sha256)
         fail("Restore target schema differs from the preserved schema");
-      const source = quote2(table.schema_name) + "." + quote2(table.table_name);
-      const temp = quote2("economy_restore_" + randomUUID3().replaceAll("-", ""));
+      const source = quote3(table.schema_name) + "." + quote3(table.table_name);
+      const temp = quote3("economy_restore_" + randomUUID3().replaceAll("-", ""));
       await client.query("CREATE TEMP TABLE " + temp + " (LIKE " + source + " INCLUDING ALL) ON COMMIT DROP");
       const originals = table.table_name === "requests" ? capsule.requests : capsule.sessions;
       restoreTables.push({ source, temp, originals });
@@ -4835,12 +5037,12 @@ async function runLegacyPreservation(command, options) {
     await pool.end();
   }
 }
-var MAX_BYTES, MAX_MEMBERS = 1e4, sha2 = (s) => createHash6("sha256").update(s).digest("hex"), fail = (message) => {
+var MAX_BYTES, MAX_MEMBERS = 1e4, sha2 = (s) => createHash7("sha256").update(s).digest("hex"), fail = (message) => {
   throw Error(message);
 }, record = (v) => v !== null && typeof v === "object" && !Array.isArray(v) ? v : fail("Expected a JSON object"), hash = (v) => typeof v === "string" && /^[a-f0-9]{64}$/.test(v) ? v : fail("Expected a lowercase SHA-256 digest"), identifier3 = (v) => typeof v === "string" && v.length > 0 && v.length <= 1024 && !v.includes("\x00") ? v : fail("Expected a nonempty identifier of at most 1024 characters without NUL"), fields = (o, names) => {
   if (Object.keys(o).sort().join(",") !== [...names].sort().join(","))
     fail("Unexpected or missing preservation fields");
-}, cOrder = (a, b) => Buffer.compare(Buffer.from(a), Buffer.from(b)), same = (a, b) => JSON.stringify(a) === JSON.stringify(b), quote2 = (s) => '"' + s.replaceAll('"', '""') + '"';
+}, cOrder = (a, b) => Buffer.compare(Buffer.from(a), Buffer.from(b)), same = (a, b) => JSON.stringify(a) === JSON.stringify(b), quote3 = (s) => '"' + s.replaceAll('"', '""') + '"';
 var init_legacy_preservation = __esm(() => {
   init_legacy_plan();
   MAX_BYTES = 32 * 1024 * 1024;
@@ -4858,7 +5060,7 @@ __export(exports_legacy_operations, {
   applyLegacyReconciliation: () => applyLegacyReconciliation,
   LegacyOperationInputError: () => LegacyOperationInputError
 });
-import { createHash as createHash7 } from "crypto";
+import { createHash as createHash8 } from "crypto";
 import { isAbsolute as isAbsolute3 } from "path";
 function parseLegacyIntent(action, value) {
   try {
@@ -5150,7 +5352,7 @@ async function runLegacyOperation(command, options) {
     await pool.end();
   }
 }
-var sha3 = (s) => createHash7("sha256").update(s).digest("hex"), fail2 = (s) => {
+var sha3 = (s) => createHash8("sha256").update(s).digest("hex"), fail2 = (s) => {
   throw Error(s);
 }, digest3 = (v, label = "digest") => typeof v === "string" && /^[a-f0-9]{64}$/.test(v) ? v : fail2(label + " must be a lowercase SHA-256 digest"), key = (v, label = "operation_key") => typeof v === "string" && /^[A-Za-z0-9._:-]{1,200}$/.test(v) ? v : fail2(label + " must contain 1-200 letters, digits, dot, underscore, colon or hyphen"), reference = (v, label) => typeof v === "string" && /^[A-Za-z0-9:/._-]{1,512}$/.test(v) ? v : fail2(label + " must contain 1-512 letters, digits, colon, slash, dot, underscore or hyphen"), LegacyOperationInputError, TABLES_SQL = `SELECT c.relname AS table_name,n.nspname AS schema_name,c.oid::text AS relation_oid,
   encode(sha256(convert_to(json_agg(json_build_array(a.attnum,a.attname,a.atttypid::text,a.atttypmod,a.attnotnull,a.attcollation::text) ORDER BY a.attnum)::text,'UTF8')),'hex') AS columns_sha256
@@ -5194,7 +5396,7 @@ function isAuthorizedRequest(req, path) {
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.0",
+  version: "0.5.1",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",
@@ -5289,7 +5491,16 @@ var package_default = {
   },
   trustedDependencies: [
     "@hasna/projects"
-  ]
+  ],
+  overrides: {
+    "fast-uri": "3.1.8",
+    hono: "4.13.7",
+    "ip-address": "10.7.1",
+    nanoid: "5.1.16",
+    "path-to-regexp": "8.4.0",
+    undici: "6.28.1",
+    "express-rate-limit": "8.7.0"
+  }
 };
 
 // src/lib/package-metadata.ts
@@ -12457,10 +12668,12 @@ function parsePort(raw, label) {
 async function runMigrate() {
   const { getCloudDatabaseUrl: getCloudDatabaseUrl2, createCloudPool: createCloudPool2, authClientFromPool: authClientFromPool2, cloudMigrations: cloudMigrations2 } = await Promise.resolve().then(() => (init_cloud(), exports_cloud));
   const { applyPgMigrations: applyPgMigrations2 } = await Promise.resolve().then(() => (init_pg_migrate(), exports_pg_migrate));
+  const { repairLegacyCostCenterSchema: repairLegacyCostCenterSchema2 } = await Promise.resolve().then(() => (init_pg_legacy_schema(), exports_pg_legacy_schema));
   const { ApiKeyStore: ApiKeyStore2 } = await import("@hasna/contracts/auth");
   const dsn = getCloudDatabaseUrl2();
   if (!dsn)
     throw new Error("migrate requires a Postgres DSN: set HASNA_ECONOMY_DATABASE_URL (or ECONOMY_DATABASE_URL / DATABASE_URL)");
+  const repair = await repairLegacyCostCenterSchema2(dsn);
   const result = await applyPgMigrations2(dsn, cloudMigrations2(), "economy");
   const pool = createCloudPool2(dsn);
   try {
@@ -12468,7 +12681,7 @@ async function runMigrate() {
   } finally {
     await pool.end().catch(() => {});
   }
-  console.log(JSON.stringify({ evt: "migrate", service: result.service, applied: result.applied, alreadyApplied: result.alreadyApplied, errors: result.errors, api_keys: "ensured" }));
+  console.log(JSON.stringify({ evt: "migrate", service: result.service, applied: result.applied, alreadyApplied: result.alreadyApplied, errors: result.errors, repair, api_keys: "ensured" }));
   if (result.errors.length)
     process.exit(1);
 }

package/dist/server/service-worker.js

@@ -7266,7 +7266,7 @@ import { randomUUID } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.0",
+  version: "0.5.1",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",
@@ -7361,7 +7361,16 @@ var package_default = {
   },
   trustedDependencies: [
     "@hasna/projects"
-  ]
+  ],
+  overrides: {
+    "fast-uri": "3.1.8",
+    hono: "4.13.7",
+    "ip-address": "10.7.1",
+    nanoid: "5.1.16",
+    "path-to-regexp": "8.4.0",
+    undici: "6.28.1",
+    "express-rate-limit": "8.7.0"
+  }
 };
 
 // src/lib/package-metadata.ts

package/docs/postgresql-legacy-schema-repair.md

@@ -0,0 +1,30 @@
+# Legacy PostgreSQL cost-center schema repair
+
+Some existing databases record migrations 0–84 while missing `cost_centers`
+and the nullable `cost_center_id` columns on `requests`, `sessions` and
+`budgets`. Migration 102 requires those columns.
+
+The explicit `economy-serve migrate` command checks this known layout before
+running the numbered migrations. It adds the missing table, columns and four
+indexes using their unchanged original definitions. It does not infer cost
+center assignments, change existing row values or rewrite migration history.
+Fresh and already complete databases need no compatibility repair.
+
+The repair serializes with the existing migration runner. Its DDL and one
+`legacy-cost-centers-v1` receipt commit in one transaction. The receipt records
+the exact repair SQL hash. An existing receipt ledger must have the canonical
+permanent shape, with no triggers, rewrite rules or row security. A completed
+receipt with changed schema or hash is refused. Incompatible existing tables,
+columns or indexes are also refused without replacing them.
+
+Preserve and restore-test the database before using the normal deployment
+migration operation. Server startup does not run this repair. If a connection
+is lost during commit, keep the outcome uncertain and inspect the database
+before an explicit retry; the command never retries automatically. A subsequent
+invocation recognizes a committed matching receipt as `already_applied`.
+Numbered migrations retain their separate atomic completion markers.
+
+The migration JSON includes `repair.id`, `repair.status` and `repair.added`.
+Possible statuses are `not_needed`, `applied` and `already_applied`. Retain that
+result with the deployment and preservation records. Rolling application code
+back does not remove the added schema or repair receipt.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/economy",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "AI coding cost tracker — CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   "repository": {
     "type": "git",
@@ -95,5 +95,14 @@
   },
   "trustedDependencies": [
     "@hasna/projects"
-  ]
+  ],
+  "overrides": {
+    "fast-uri": "3.1.8",
+    "hono": "4.13.7",
+    "ip-address": "10.7.1",
+    "nanoid": "5.1.16",
+    "path-to-regexp": "8.4.0",
+    "undici": "6.28.1",
+    "express-rate-limit": "8.7.0"
+  }
 }