@hasna/economy 0.5.0 → 0.5.2

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## 0.5.2
+
+### Patch Changes
+
+- Support an explicit, bounded single-session reconciliation mode for large historical sessions. Preserve and verify every original before atomically recording dispositions, retain ordinary artifact limits, and optimize PostgreSQL overlap checks without weakening conflict protection.
+
+## 0.5.1
+
+### Patch Changes
+
+- Update the hosted container to the pinned Alpine runtime and age-eligible security fixes, with exact standalone dependency overrides and reproducible lockfile resolution.
+- Repair missing legacy PostgreSQL cost-center schema during explicit migration, preserving original rows and migration history with an atomic, validated completion receipt.
+
 ## 0.5.0
 
 ### Minor Changes

package/dist/chunks/{index-kgy9b6bf.js → index-9d2aky06.js}

@@ -14,7 +14,7 @@ import {
   querySavingsSummary,
   requireCurrentBillingDiffSummary,
   requireCurrentSavingsReport
-} from "./index-axh32d30.js";
+} from "./index-dj3tctqh.js";
 import {
   deleteBudget,
   deleteGoal,

package/dist/chunks/{index-axh32d30.js → index-dj3tctqh.js}

@@ -19,7 +19,7 @@ import {
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.0",
+  version: "0.5.2",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",
@@ -114,7 +114,16 @@ var package_default = {
   },
   trustedDependencies: [
     "@hasna/projects"
-  ]
+  ],
+  overrides: {
+    "fast-uri": "3.1.8",
+    hono: "4.13.7",
+    "ip-address": "10.7.1",
+    nanoid: "5.1.16",
+    "path-to-regexp": "8.4.0",
+    undici: "6.28.1",
+    "express-rate-limit": "8.7.0"
+  }
 };
 
 // src/lib/package-metadata.ts

package/dist/chunks/{index-kn5572kd.js → index-kzwqw3ve.js}

@@ -4,7 +4,7 @@ import {
 } from "./index-w3bvv0ns.js";
 import {
   getStore
-} from "./index-kgy9b6bf.js";
+} from "./index-9d2aky06.js";
 import {
   formatReportedUsd,
   formatSummaryCoverage,

package/dist/chunks/{index-emvs5ph2.js → index-npsjjv96.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   LOCAL_STORAGE_OPT_IN_KEYS
-} from "./index-axh32d30.js";
+} from "./index-dj3tctqh.js";
 import {
   assessCostFromDb,
   getIngestState,

package/dist/chunks/{serve-0k69e4h9.js → serve-p2yarhm8.js}

@@ -5,7 +5,7 @@ import {
 } from "./index-w3bvv0ns.js";
 import {
   syncAll
-} from "./index-emvs5ph2.js";
+} from "./index-npsjjv96.js";
 import {
   buildBrief,
   packageMetadata,
@@ -16,7 +16,7 @@ import {
   queryProjectDetail,
   queryRangeStats,
   querySavingsSummary
-} from "./index-axh32d30.js";
+} from "./index-dj3tctqh.js";
 import {
   AGENTS,
   INGEST_SCHEMA_SQL,
@@ -348,6 +348,30 @@ function resolvePgConnection(dsn) {
   }
 }
 
+// src/db/legacy-large-schema.ts
+var LEGACY_LARGE_SESSION_PG_SQL = `
+CREATE INDEX idx_legacy_targets_session_operation
+  ON legacy_reconciliation_targets(session_id,operation_key);
+CREATE OR REPLACE FUNCTION economy_legacy_target_guard() RETURNS trigger LANGUAGE plpgsql AS $body$
+BEGIN
+  IF EXISTS(
+    SELECT 1 FROM (SELECT DISTINCT session_id,operation_key FROM inserted_legacy_targets) n
+    JOIN economy_legacy_active a ON a.session_id=n.session_id AND a.operation_key<>n.operation_key
+  ) OR EXISTS(
+    SELECT 1 FROM inserted_legacy_targets n
+    JOIN economy_legacy_active a ON a.request_id=n.request_id AND a.operation_key<>n.operation_key
+  ) THEN
+    RAISE EXCEPTION 'legacy reconciliation is already active for this session' USING ERRCODE='23000';
+  END IF;
+  RETURN NULL;
+END
+$body$;
+DROP TRIGGER legacy_target_no_overlap ON legacy_reconciliation_targets;
+CREATE TRIGGER legacy_target_no_overlap AFTER INSERT ON legacy_reconciliation_targets
+  REFERENCING NEW TABLE AS inserted_legacy_targets
+  FOR EACH STATEMENT EXECUTE FUNCTION economy_legacy_target_guard();
+`;
+
 // src/db/pg-migrations.ts
 var PG_MIGRATIONS = [
   `CREATE TABLE IF NOT EXISTS cost_centers (
@@ -579,7 +603,8 @@ var PG_MIGRATIONS = [
   ...OBSERVATION_PG_MIGRATIONS,
   `ALTER TABLE budgets ADD COLUMN IF NOT EXISTS metric TEXT NOT NULL DEFAULT 'legacy_request_cost_usd'
     CHECK (metric IN ('legacy_request_cost_usd', 'metered_api_usd'))`,
-  LEGACY_PG_SQL
+  LEGACY_PG_SQL,
+  LEGACY_LARGE_SESSION_PG_SQL
 ];
 
 // src/db/cloud.ts

package/dist/chunks/{tui-7f8f951w.js → tui-x64hjfrh.js}

@@ -6,10 +6,10 @@ import {
   printStatusLine,
   printWaybarJson,
   runTui
-} from "./index-kn5572kd.js";
+} from "./index-kzwqw3ve.js";
 import"./index-w3bvv0ns.js";
-import"./index-kgy9b6bf.js";
-import"./index-axh32d30.js";
+import"./index-9d2aky06.js";
+import"./index-dj3tctqh.js";
 import"./index-ez9thsr7.js";
 import"./index-p35cyhc4.js";
 export {

package/dist/chunks/{watch-mm1j39vy.js → watch-bxstjpbx.js}

@@ -2,12 +2,12 @@
 import {
   agentPaths,
   syncAll
-} from "./index-emvs5ph2.js";
+} from "./index-npsjjv96.js";
 import {
   getStore,
   isCloudStore
-} from "./index-kgy9b6bf.js";
-import"./index-axh32d30.js";
+} from "./index-9d2aky06.js";
+import"./index-dj3tctqh.js";
 import {
   formatSummaryValue
 } from "./index-ez9thsr7.js";

package/dist/cli/index.js

@@ -8,22 +8,22 @@ import {
 import {
   buildStatusLine,
   gatherStatusData
-} from "../chunks/index-kn5572kd.js";
+} from "../chunks/index-kzwqw3ve.js";
 import"../chunks/index-w3bvv0ns.js";
 import {
   agentPaths,
   syncAll
-} from "../chunks/index-emvs5ph2.js";
+} from "../chunks/index-npsjjv96.js";
 import {
   getStore,
   isCloudStore
-} from "../chunks/index-kgy9b6bf.js";
+} from "../chunks/index-9d2aky06.js";
 import {
   billingDriftCheck,
   economyCloudStorage,
   economyTransportReport,
   packageMetadata
-} from "../chunks/index-axh32d30.js";
+} from "../chunks/index-dj3tctqh.js";
 import {
   AGENTS,
   MAX_INGEST_BYTES,
@@ -1357,23 +1357,23 @@ function registerExtendedCommands(program) {
     console.log();
   });
   program.command("tui").description("Terminal status dashboard (Linux/SSH friendly)").option("--watch", "Live refresh").option("--interval <seconds>", "Refresh interval", "30").action(async (opts) => {
-    const { runTui } = await import("../chunks/tui-7f8f951w.js");
+    const { runTui } = await import("../chunks/tui-x64hjfrh.js");
     await runTui({
       watch: Boolean(opts.watch),
       interval: Number(opts.interval ?? 30)
     });
   });
   program.command("waybar").description("Print waybar-compatible JSON status line").action(async () => {
-    const { printWaybarJson } = await import("../chunks/tui-7f8f951w.js");
+    const { printWaybarJson } = await import("../chunks/tui-x64hjfrh.js");
     await printWaybarJson();
   });
   const barCmd = program.command("bar").description("Status bar helpers (Linux)");
   barCmd.command("tui").description("Alias for economy tui").option("--watch", "Live refresh").action(async (opts) => {
-    const { runTui } = await import("../chunks/tui-7f8f951w.js");
+    const { runTui } = await import("../chunks/tui-x64hjfrh.js");
     await runTui({ watch: Boolean(opts.watch) });
   });
   barCmd.command("waybar").description("Alias for economy waybar").action(async () => {
-    const { printWaybarJson } = await import("../chunks/tui-7f8f951w.js");
+    const { printWaybarJson } = await import("../chunks/tui-x64hjfrh.js");
     await printWaybarJson();
   });
   program.command("estimate").description("Estimate cost for token counts").requiredOption("--model <model>", "Model name").option("--input <n>", "Input tokens", "0").option("--output <n>", "Output tokens", "0").action(async (opts) => {
@@ -3198,7 +3198,7 @@ program.command("accounts [period]").description("List account usage by email ad
   console.log();
 });
 program.command("watch").description("Live stream of incoming costs").option("--interval <seconds>", "Poll interval in seconds", "10").option("--daemon", "Watch agent data directories and sync on change").option("--agent <agent>", `Filter by agent (${AGENTS.join("|")})`).option("--notify <amount>", "Fire macOS notification when cumulative cost crosses this USD threshold").action(async (opts) => {
-  const { watchCosts } = await import("../chunks/watch-mm1j39vy.js");
+  const { watchCosts } = await import("../chunks/watch-bxstjpbx.js");
   await watchCosts({
     interval: parsePositiveCliInteger(opts.interval ?? "10", "--interval"),
     daemon: Boolean(opts.daemon),
@@ -3434,7 +3434,7 @@ pricingCmd.command("remove <model>").description("Remove pricing for a model").a
 });
 program.command("serve").description("Start the REST API server").option("-p, --port <port>", "Port", "3456").action(async (opts) => {
   const port = parseCliPort(opts.port ?? "3456", "--port");
-  const { startServer } = await import("../chunks/serve-0k69e4h9.js");
+  const { startServer } = await import("../chunks/serve-p2yarhm8.js");
   startServer(port);
 });
 program.command("mcp").description("Show MCP server install commands").option("--claude", "Install into Claude Code").option("--codex", "Install into Codex").option("--gemini", "Install into Gemini CLI").option("--all", "Install into all agents").action(async (opts) => {

package/dist/db/legacy-large-schema.d.ts

@@ -0,0 +1,6 @@
+/** Append-only PostgreSQL optimization. Keep the original migration bytes fixed.
+ * Check the complete inserted set once: per-row checks can become quadratic
+ * with stale or small-table statistics even when suitable indexes exist.
+ * Same-operation request duplicates remain prohibited by the primary key. */
+export declare const LEGACY_LARGE_SESSION_PG_SQL = "\nCREATE INDEX idx_legacy_targets_session_operation\n  ON legacy_reconciliation_targets(session_id,operation_key);\nCREATE OR REPLACE FUNCTION economy_legacy_target_guard() RETURNS trigger LANGUAGE plpgsql AS $body$\nBEGIN\n  IF EXISTS(\n    SELECT 1 FROM (SELECT DISTINCT session_id,operation_key FROM inserted_legacy_targets) n\n    JOIN economy_legacy_active a ON a.session_id=n.session_id AND a.operation_key<>n.operation_key\n  ) OR EXISTS(\n    SELECT 1 FROM inserted_legacy_targets n\n    JOIN economy_legacy_active a ON a.request_id=n.request_id AND a.operation_key<>n.operation_key\n  ) THEN\n    RAISE EXCEPTION 'legacy reconciliation is already active for this session' USING ERRCODE='23000';\n  END IF;\n  RETURN NULL;\nEND\n$body$;\nDROP TRIGGER legacy_target_no_overlap ON legacy_reconciliation_targets;\nCREATE TRIGGER legacy_target_no_overlap AFTER INSERT ON legacy_reconciliation_targets\n  REFERENCING NEW TABLE AS inserted_legacy_targets\n  FOR EACH STATEMENT EXECUTE FUNCTION economy_legacy_target_guard();\n";
+//# sourceMappingURL=legacy-large-schema.d.ts.map

package/dist/db/legacy-large-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-large-schema.d.ts","sourceRoot":"","sources":["../../src/db/legacy-large-schema.ts"],"names":[],"mappings":"AAAA;;;6EAG6E;AAC7E,eAAO,MAAM,2BAA2B,ygCAqBvC,CAAA"}

package/dist/db/pg-legacy-schema.d.ts

@@ -0,0 +1,12 @@
+export interface LegacySchemaRepairResult {
+    id: string;
+    status: 'not_needed' | 'applied' | 'already_applied';
+    added: string[];
+}
+/**
+ * Repair one known additive schema gap before the existing numbered migration
+ * sequence. Only the explicit migration command calls this; server startup
+ * never repairs a store. Originals and their migration markers are untouched.
+ */
+export declare function repairLegacyCostCenterSchema(dsn: string): Promise<LegacySchemaRepairResult>;
+//# sourceMappingURL=pg-legacy-schema.d.ts.map

package/dist/db/pg-legacy-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pg-legacy-schema.d.ts","sourceRoot":"","sources":["../../src/db/pg-legacy-schema.ts"],"names":[],"mappings":"AAkBA,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,YAAY,GAAG,SAAS,GAAG,iBAAiB,CAAA;IACpD,KAAK,EAAE,MAAM,EAAE,CAAA;CAChB;AA6HD;;;;GAIG;AACH,wBAAsB,4BAA4B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CA8DjG"}

package/dist/db/pg-migrations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pg-migrations.d.ts","sourceRoot":"","sources":["../../src/db/pg-migrations.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AAEH,eAAO,MAAM,aAAa,EAAE,MAAM,EA+QjC,CAAC"}
+{"version":3,"file":"pg-migrations.d.ts","sourceRoot":"","sources":["../../src/db/pg-migrations.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AAEH,eAAO,MAAM,aAAa,EAAE,MAAM,EAiRjC,CAAC"}

package/dist/index.js

@@ -61,7 +61,7 @@ import { randomUUID } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.0",
+  version: "0.5.2",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",
@@ -156,7 +156,16 @@ var package_default = {
   },
   trustedDependencies: [
     "@hasna/projects"
-  ]
+  ],
+  overrides: {
+    "fast-uri": "3.1.8",
+    hono: "4.13.7",
+    "ip-address": "10.7.1",
+    nanoid: "5.1.16",
+    "path-to-regexp": "8.4.0",
+    undici: "6.28.1",
+    "express-rate-limit": "8.7.0"
+  }
 };
 
 // src/lib/package-metadata.ts

package/dist/mcp/index.js

@@ -84,7 +84,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.0",
+  version: "0.5.2",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",
@@ -179,7 +179,16 @@ var package_default = {
   },
   trustedDependencies: [
     "@hasna/projects"
-  ]
+  ],
+  overrides: {
+    "fast-uri": "3.1.8",
+    hono: "4.13.7",
+    "ip-address": "10.7.1",
+    nanoid: "5.1.16",
+    "path-to-regexp": "8.4.0",
+    undici: "6.28.1",
+    "express-rate-limit": "8.7.0"
+  }
 };
 
 // src/lib/package-metadata.ts

package/dist/otel/index.js

@@ -3458,7 +3458,7 @@ async function pushIngestRows(cloud, scratch) {
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.0",
+  version: "0.5.2",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",
@@ -3553,7 +3553,16 @@ var package_default = {
   },
   trustedDependencies: [
     "@hasna/projects"
-  ]
+  ],
+  overrides: {
+    "fast-uri": "3.1.8",
+    hono: "4.13.7",
+    "ip-address": "10.7.1",
+    nanoid: "5.1.16",
+    "path-to-regexp": "8.4.0",
+    undici: "6.28.1",
+    "express-rate-limit": "8.7.0"
+  }
 };
 
 // src/lib/package-metadata.ts