@hasna/economy 0.5.1 → 0.5.2

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.5.2
+
+### Patch Changes
+
+- Support an explicit, bounded single-session reconciliation mode for large historical sessions. Preserve and verify every original before atomically recording dispositions, retain ordinary artifact limits, and optimize PostgreSQL overlap checks without weakening conflict protection.
+
 ## 0.5.1
 
 ### Patch Changes

package/dist/chunks/{index-r1jv3kpy.js → index-9d2aky06.js}

@@ -14,7 +14,7 @@ import {
   querySavingsSummary,
   requireCurrentBillingDiffSummary,
   requireCurrentSavingsReport
-} from "./index-d480p2wh.js";
+} from "./index-dj3tctqh.js";
 import {
   deleteBudget,
   deleteGoal,

package/dist/chunks/{index-d480p2wh.js → index-dj3tctqh.js}

@@ -19,7 +19,7 @@ import {
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.1",
+  version: "0.5.2",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",

package/dist/chunks/{index-49f12css.js → index-kzwqw3ve.js}

@@ -4,7 +4,7 @@ import {
 } from "./index-w3bvv0ns.js";
 import {
   getStore
-} from "./index-r1jv3kpy.js";
+} from "./index-9d2aky06.js";
 import {
   formatReportedUsd,
   formatSummaryCoverage,

package/dist/chunks/{index-xsah93s2.js → index-npsjjv96.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   LOCAL_STORAGE_OPT_IN_KEYS
-} from "./index-d480p2wh.js";
+} from "./index-dj3tctqh.js";
 import {
   assessCostFromDb,
   getIngestState,

package/dist/chunks/{serve-2knem98x.js → serve-p2yarhm8.js}

@@ -5,7 +5,7 @@ import {
 } from "./index-w3bvv0ns.js";
 import {
   syncAll
-} from "./index-xsah93s2.js";
+} from "./index-npsjjv96.js";
 import {
   buildBrief,
   packageMetadata,
@@ -16,7 +16,7 @@ import {
   queryProjectDetail,
   queryRangeStats,
   querySavingsSummary
-} from "./index-d480p2wh.js";
+} from "./index-dj3tctqh.js";
 import {
   AGENTS,
   INGEST_SCHEMA_SQL,
@@ -348,6 +348,30 @@ function resolvePgConnection(dsn) {
   }
 }
 
+// src/db/legacy-large-schema.ts
+var LEGACY_LARGE_SESSION_PG_SQL = `
+CREATE INDEX idx_legacy_targets_session_operation
+  ON legacy_reconciliation_targets(session_id,operation_key);
+CREATE OR REPLACE FUNCTION economy_legacy_target_guard() RETURNS trigger LANGUAGE plpgsql AS $body$
+BEGIN
+  IF EXISTS(
+    SELECT 1 FROM (SELECT DISTINCT session_id,operation_key FROM inserted_legacy_targets) n
+    JOIN economy_legacy_active a ON a.session_id=n.session_id AND a.operation_key<>n.operation_key
+  ) OR EXISTS(
+    SELECT 1 FROM inserted_legacy_targets n
+    JOIN economy_legacy_active a ON a.request_id=n.request_id AND a.operation_key<>n.operation_key
+  ) THEN
+    RAISE EXCEPTION 'legacy reconciliation is already active for this session' USING ERRCODE='23000';
+  END IF;
+  RETURN NULL;
+END
+$body$;
+DROP TRIGGER legacy_target_no_overlap ON legacy_reconciliation_targets;
+CREATE TRIGGER legacy_target_no_overlap AFTER INSERT ON legacy_reconciliation_targets
+  REFERENCING NEW TABLE AS inserted_legacy_targets
+  FOR EACH STATEMENT EXECUTE FUNCTION economy_legacy_target_guard();
+`;
+
 // src/db/pg-migrations.ts
 var PG_MIGRATIONS = [
   `CREATE TABLE IF NOT EXISTS cost_centers (
@@ -579,7 +603,8 @@ var PG_MIGRATIONS = [
   ...OBSERVATION_PG_MIGRATIONS,
   `ALTER TABLE budgets ADD COLUMN IF NOT EXISTS metric TEXT NOT NULL DEFAULT 'legacy_request_cost_usd'
     CHECK (metric IN ('legacy_request_cost_usd', 'metered_api_usd'))`,
-  LEGACY_PG_SQL
+  LEGACY_PG_SQL,
+  LEGACY_LARGE_SESSION_PG_SQL
 ];
 
 // src/db/cloud.ts

package/dist/chunks/{tui-khmnkat2.js → tui-x64hjfrh.js}

@@ -6,10 +6,10 @@ import {
   printStatusLine,
   printWaybarJson,
   runTui
-} from "./index-49f12css.js";
+} from "./index-kzwqw3ve.js";
 import"./index-w3bvv0ns.js";
-import"./index-r1jv3kpy.js";
-import"./index-d480p2wh.js";
+import"./index-9d2aky06.js";
+import"./index-dj3tctqh.js";
 import"./index-ez9thsr7.js";
 import"./index-p35cyhc4.js";
 export {

package/dist/chunks/{watch-4y064yys.js → watch-bxstjpbx.js}

@@ -2,12 +2,12 @@
 import {
   agentPaths,
   syncAll
-} from "./index-xsah93s2.js";
+} from "./index-npsjjv96.js";
 import {
   getStore,
   isCloudStore
-} from "./index-r1jv3kpy.js";
-import"./index-d480p2wh.js";
+} from "./index-9d2aky06.js";
+import"./index-dj3tctqh.js";
 import {
   formatSummaryValue
 } from "./index-ez9thsr7.js";

package/dist/cli/index.js

@@ -8,22 +8,22 @@ import {
 import {
   buildStatusLine,
   gatherStatusData
-} from "../chunks/index-49f12css.js";
+} from "../chunks/index-kzwqw3ve.js";
 import"../chunks/index-w3bvv0ns.js";
 import {
   agentPaths,
   syncAll
-} from "../chunks/index-xsah93s2.js";
+} from "../chunks/index-npsjjv96.js";
 import {
   getStore,
   isCloudStore
-} from "../chunks/index-r1jv3kpy.js";
+} from "../chunks/index-9d2aky06.js";
 import {
   billingDriftCheck,
   economyCloudStorage,
   economyTransportReport,
   packageMetadata
-} from "../chunks/index-d480p2wh.js";
+} from "../chunks/index-dj3tctqh.js";
 import {
   AGENTS,
   MAX_INGEST_BYTES,
@@ -1357,23 +1357,23 @@ function registerExtendedCommands(program) {
     console.log();
   });
   program.command("tui").description("Terminal status dashboard (Linux/SSH friendly)").option("--watch", "Live refresh").option("--interval <seconds>", "Refresh interval", "30").action(async (opts) => {
-    const { runTui } = await import("../chunks/tui-khmnkat2.js");
+    const { runTui } = await import("../chunks/tui-x64hjfrh.js");
     await runTui({
       watch: Boolean(opts.watch),
       interval: Number(opts.interval ?? 30)
     });
   });
   program.command("waybar").description("Print waybar-compatible JSON status line").action(async () => {
-    const { printWaybarJson } = await import("../chunks/tui-khmnkat2.js");
+    const { printWaybarJson } = await import("../chunks/tui-x64hjfrh.js");
     await printWaybarJson();
   });
   const barCmd = program.command("bar").description("Status bar helpers (Linux)");
   barCmd.command("tui").description("Alias for economy tui").option("--watch", "Live refresh").action(async (opts) => {
-    const { runTui } = await import("../chunks/tui-khmnkat2.js");
+    const { runTui } = await import("../chunks/tui-x64hjfrh.js");
     await runTui({ watch: Boolean(opts.watch) });
   });
   barCmd.command("waybar").description("Alias for economy waybar").action(async () => {
-    const { printWaybarJson } = await import("../chunks/tui-khmnkat2.js");
+    const { printWaybarJson } = await import("../chunks/tui-x64hjfrh.js");
     await printWaybarJson();
   });
   program.command("estimate").description("Estimate cost for token counts").requiredOption("--model <model>", "Model name").option("--input <n>", "Input tokens", "0").option("--output <n>", "Output tokens", "0").action(async (opts) => {
@@ -3198,7 +3198,7 @@ program.command("accounts [period]").description("List account usage by email ad
   console.log();
 });
 program.command("watch").description("Live stream of incoming costs").option("--interval <seconds>", "Poll interval in seconds", "10").option("--daemon", "Watch agent data directories and sync on change").option("--agent <agent>", `Filter by agent (${AGENTS.join("|")})`).option("--notify <amount>", "Fire macOS notification when cumulative cost crosses this USD threshold").action(async (opts) => {
-  const { watchCosts } = await import("../chunks/watch-4y064yys.js");
+  const { watchCosts } = await import("../chunks/watch-bxstjpbx.js");
   await watchCosts({
     interval: parsePositiveCliInteger(opts.interval ?? "10", "--interval"),
     daemon: Boolean(opts.daemon),
@@ -3434,7 +3434,7 @@ pricingCmd.command("remove <model>").description("Remove pricing for a model").a
 });
 program.command("serve").description("Start the REST API server").option("-p, --port <port>", "Port", "3456").action(async (opts) => {
   const port = parseCliPort(opts.port ?? "3456", "--port");
-  const { startServer } = await import("../chunks/serve-2knem98x.js");
+  const { startServer } = await import("../chunks/serve-p2yarhm8.js");
   startServer(port);
 });
 program.command("mcp").description("Show MCP server install commands").option("--claude", "Install into Claude Code").option("--codex", "Install into Codex").option("--gemini", "Install into Gemini CLI").option("--all", "Install into all agents").action(async (opts) => {

package/dist/db/legacy-large-schema.d.ts

@@ -0,0 +1,6 @@
+/** Append-only PostgreSQL optimization. Keep the original migration bytes fixed.
+ * Check the complete inserted set once: per-row checks can become quadratic
+ * with stale or small-table statistics even when suitable indexes exist.
+ * Same-operation request duplicates remain prohibited by the primary key. */
+export declare const LEGACY_LARGE_SESSION_PG_SQL = "\nCREATE INDEX idx_legacy_targets_session_operation\n  ON legacy_reconciliation_targets(session_id,operation_key);\nCREATE OR REPLACE FUNCTION economy_legacy_target_guard() RETURNS trigger LANGUAGE plpgsql AS $body$\nBEGIN\n  IF EXISTS(\n    SELECT 1 FROM (SELECT DISTINCT session_id,operation_key FROM inserted_legacy_targets) n\n    JOIN economy_legacy_active a ON a.session_id=n.session_id AND a.operation_key<>n.operation_key\n  ) OR EXISTS(\n    SELECT 1 FROM inserted_legacy_targets n\n    JOIN economy_legacy_active a ON a.request_id=n.request_id AND a.operation_key<>n.operation_key\n  ) THEN\n    RAISE EXCEPTION 'legacy reconciliation is already active for this session' USING ERRCODE='23000';\n  END IF;\n  RETURN NULL;\nEND\n$body$;\nDROP TRIGGER legacy_target_no_overlap ON legacy_reconciliation_targets;\nCREATE TRIGGER legacy_target_no_overlap AFTER INSERT ON legacy_reconciliation_targets\n  REFERENCING NEW TABLE AS inserted_legacy_targets\n  FOR EACH STATEMENT EXECUTE FUNCTION economy_legacy_target_guard();\n";
+//# sourceMappingURL=legacy-large-schema.d.ts.map

package/dist/db/legacy-large-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-large-schema.d.ts","sourceRoot":"","sources":["../../src/db/legacy-large-schema.ts"],"names":[],"mappings":"AAAA;;;6EAG6E;AAC7E,eAAO,MAAM,2BAA2B,ygCAqBvC,CAAA"}

package/dist/db/pg-migrations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pg-migrations.d.ts","sourceRoot":"","sources":["../../src/db/pg-migrations.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AAEH,eAAO,MAAM,aAAa,EAAE,MAAM,EA+QjC,CAAC"}
+{"version":3,"file":"pg-migrations.d.ts","sourceRoot":"","sources":["../../src/db/pg-migrations.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AAEH,eAAO,MAAM,aAAa,EAAE,MAAM,EAiRjC,CAAC"}

package/dist/index.js

@@ -61,7 +61,7 @@ import { randomUUID } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.1",
+  version: "0.5.2",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",

package/dist/mcp/index.js

@@ -84,7 +84,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.1",
+  version: "0.5.2",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",

package/dist/otel/index.js

@@ -3458,7 +3458,7 @@ async function pushIngestRows(cloud, scratch) {
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.1",
+  version: "0.5.2",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",

package/dist/server/index.js

@@ -3360,6 +3360,30 @@ function resolvePgConnection(dsn) {
 }
 var init_pg_connection = () => {};
 
+// src/db/legacy-large-schema.ts
+var LEGACY_LARGE_SESSION_PG_SQL = `
+CREATE INDEX idx_legacy_targets_session_operation
+  ON legacy_reconciliation_targets(session_id,operation_key);
+CREATE OR REPLACE FUNCTION economy_legacy_target_guard() RETURNS trigger LANGUAGE plpgsql AS $body$
+BEGIN
+  IF EXISTS(
+    SELECT 1 FROM (SELECT DISTINCT session_id,operation_key FROM inserted_legacy_targets) n
+    JOIN economy_legacy_active a ON a.session_id=n.session_id AND a.operation_key<>n.operation_key
+  ) OR EXISTS(
+    SELECT 1 FROM inserted_legacy_targets n
+    JOIN economy_legacy_active a ON a.request_id=n.request_id AND a.operation_key<>n.operation_key
+  ) THEN
+    RAISE EXCEPTION 'legacy reconciliation is already active for this session' USING ERRCODE='23000';
+  END IF;
+  RETURN NULL;
+END
+$body$;
+DROP TRIGGER legacy_target_no_overlap ON legacy_reconciliation_targets;
+CREATE TRIGGER legacy_target_no_overlap AFTER INSERT ON legacy_reconciliation_targets
+  REFERENCING NEW TABLE AS inserted_legacy_targets
+  FOR EACH STATEMENT EXECUTE FUNCTION economy_legacy_target_guard();
+`;
+
 // src/db/pg-migrations.ts
 var PG_MIGRATIONS;
 var init_pg_migrations = __esm(() => {
@@ -3595,7 +3619,8 @@ var init_pg_migrations = __esm(() => {
     ...OBSERVATION_PG_MIGRATIONS,
     `ALTER TABLE budgets ADD COLUMN IF NOT EXISTS metric TEXT NOT NULL DEFAULT 'legacy_request_cost_usd'
     CHECK (metric IN ('legacy_request_cost_usd', 'metered_api_usd'))`,
-    LEGACY_PG_SQL
+    LEGACY_PG_SQL,
+    LEGACY_LARGE_SESSION_PG_SQL
   ];
 });
 
@@ -4508,6 +4533,42 @@ var init_legacy_inventory = __esm(() => {
   allCandidates = LEGACY_FAMILIES.map((family) => `(${predicates[family]})`).join(" OR ");
 });
 
+// src/server/legacy-limits.ts
+function legacyMode(kind, schema) {
+  if (schema === LEGACY_STANDARD[kind])
+    return LEGACY_STANDARD;
+  if (schema === LEGACY_SINGLE_SESSION[kind])
+    return LEGACY_SINGLE_SESSION;
+  throw Error(`Unsupported legacy ${kind} schema`);
+}
+var LEGACY_STANDARD, LEGACY_SINGLE_SESSION;
+var init_legacy_limits = __esm(() => {
+  LEGACY_STANDARD = {
+    selection: "economy.legacy-selection.v1",
+    plan: "economy.legacy-plan.v1",
+    capsule: "economy.legacy-preservation.v1",
+    receipt: "economy.legacy-operation-receipt.v1",
+    items: 100,
+    sessions: 100,
+    members: 1e4,
+    inputBytes: 256 * 1024,
+    originalBytes: 16 * 1024 * 1024,
+    capsuleBytes: 32 * 1024 * 1024
+  };
+  LEGACY_SINGLE_SESSION = {
+    selection: "economy.legacy-session-selection.v1",
+    plan: "economy.legacy-session-plan.v1",
+    capsule: "economy.legacy-session-preservation.v1",
+    receipt: "economy.legacy-session-operation-receipt.v1",
+    items: 50000,
+    sessions: 1,
+    members: 50000,
+    inputBytes: 32 * 1024 * 1024,
+    originalBytes: 64 * 1024 * 1024,
+    capsuleBytes: 128 * 1024 * 1024
+  };
+});
+
 // src/server/legacy-plan.ts
 var exports_legacy_plan = {};
 __export(exports_legacy_plan, {
@@ -4543,10 +4604,11 @@ function digest2(value) {
 }
 function parseLegacySelection(value) {
   const input = object(value, ["schema", "items"], "selection");
-  if (input.schema !== "economy.legacy-selection.v1")
-    throw Error("schema must be economy.legacy-selection.v1");
-  if (!Array.isArray(input.items) || input.items.length < 1 || input.items.length > 100)
-    throw Error("items must contain 1-100 explicit request selections");
+  const mode = legacyMode("selection", input.schema);
+  if (!Array.isArray(input.items) || input.items.length < 1 || input.items.length > mode.items)
+    throw Error(`items must contain 1-${mode.items} explicit request selections`);
+  if (Buffer.byteLength(JSON.stringify(input)) > mode.inputBytes)
+    throw Error(`Selection exceeds its ${mode.inputBytes}-byte artifact bound`);
   const ids = new Set;
   const items = input.items.map((item) => {
     const row = object(item, ["id", "family", "original_sha256", "disposition", "reason", "evidence_ref"], "item");
@@ -4569,7 +4631,7 @@ function parseLegacySelection(value) {
       evidence_ref: text(row.evidence_ref, 512, "evidence_ref")
     };
   }).sort((a, b) => a.id < b.id ? -1 : a.id > b.id ? 1 : 0);
-  return { schema: "economy.legacy-selection.v1", items };
+  return { schema: mode.selection, items };
 }
 function readLegacySelectionFile(path) {
   if (!isAbsolute(path) || path.includes("\x00"))
@@ -4582,9 +4644,10 @@ function readLegacySelectionFile(path) {
   }
   try {
     const before = fstatSync(fd);
+    const sizeError = "--input must be a regular JSON file of 1-262144 bytes for standard selection, or at most 33554432 bytes for explicit single-session selection";
     if (!before.isFile() || before.size < 1 || before.size > INPUT_MAX)
-      throw Error("--input must be a regular JSON file of 1-262144 bytes");
-    const bytes = Buffer.alloc(INPUT_MAX + 1);
+      throw Error(sizeError);
+    const bytes = Buffer.alloc(Math.min(INPUT_MAX + 1, before.size + 1));
     let offset = 0, n;
     while (offset < bytes.length && (n = readSync(fd, bytes, offset, bytes.length - offset, null)) > 0)
       offset += n;
@@ -4595,9 +4658,12 @@ function readLegacySelectionFile(path) {
     try {
       value = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes.subarray(0, offset)));
     } catch {
-      throw Error("--input must contain valid UTF-8 JSON");
+      throw Error(before.size > LEGACY_STANDARD.inputBytes ? sizeError : "--input must contain valid UTF-8 JSON");
     }
-    return parseLegacySelection(value);
+    const selection = parseLegacySelection(value);
+    if (offset > legacyMode("selection", selection.schema).inputBytes)
+      throw Error(sizeError);
+    return selection;
   } finally {
     closeSync(fd);
   }
@@ -4612,6 +4678,7 @@ async function prepareLegacyPlan(client, input) {
 }
 async function withLegacyPlanSnapshot(client, input, read) {
   const selection = parseLegacySelection(input);
+  const mode = legacyMode("selection", selection.schema);
   let began = false;
   try {
     await client.query("BEGIN ISOLATION LEVEL REPEATABLE READ READ ONLY");
@@ -4646,14 +4713,16 @@ async function withLegacyPlanSnapshot(client, input, read) {
       return { ...item, session_id: identifier2(row.session_id, "session_id") };
     });
     const sessionIds = [...new Set(items.map((x) => x.session_id))].sort();
+    if (mode.sessions === 1 && sessionIds.length !== 1)
+      throw Error("Single-session reconciliation requires exactly one session");
     const sessions = (await client.query(`SELECT id, encode(sha256(convert_to(row_to_json(sessions)::text,'UTF8')),'hex') AS original_sha256
       FROM sessions WHERE id=ANY($1::text[]) ORDER BY id`, [sessionIds])).rows;
     if (sessions.length !== sessionIds.length)
       throw Error("A selected request has no session; resolve that inconsistency before reconciliation");
     const members = (await client.query(`SELECT id, session_id, encode(sha256(convert_to(row_to_json(requests)::text,'UTF8')),'hex') AS original_sha256
-      FROM requests WHERE session_id=ANY($1::text[]) ORDER BY session_id COLLATE "C", id COLLATE "C" LIMIT ${MEMBERS_MAX + 1}`, [sessionIds])).rows;
-    if (members.length > MEMBERS_MAX)
-      throw Error("Selected sessions exceed 10000 requests; split the selection by session or use a separately reviewed large-session procedure");
+      FROM requests WHERE session_id=ANY($1::text[]) ORDER BY session_id COLLATE "C", id COLLATE "C" LIMIT ${mode.members + 1}`, [sessionIds])).rows;
+    if (members.length > mode.members)
+      throw Error(`Selected sessions exceed ${mode.members} requests; complete-session reconciliation cannot truncate membership`);
     const populations = sessions.map((session) => {
       const rows = members.filter((row) => row.session_id === session.id);
       if (!rows.length)
@@ -4663,7 +4732,7 @@ async function withLegacyPlanSnapshot(client, input, read) {
       return { id: session.id, original_sha256, request_count: rows.length, members_sha256 };
     });
     const body = {
-      schema: "economy.legacy-plan.v1",
+      schema: mode.plan,
       mode: "read-only",
       original_encoding: "postgres-row-json-text-v1",
       member_encoding: "sha256-json-id-digest-pairs-utf8-c-order-v1",
@@ -4707,10 +4776,11 @@ async function runLegacyPlan(selection) {
     await pool.end();
   }
 }
-var INPUT_MAX, MEMBERS_MAX = 1e4, sha256 = (text) => createHash6("sha256").update(text).digest("hex");
+var INPUT_MAX, sha256 = (text) => createHash6("sha256").update(text).digest("hex");
 var init_legacy_plan = __esm(() => {
   init_legacy_inventory();
-  INPUT_MAX = 256 * 1024;
+  init_legacy_limits();
+  INPUT_MAX = LEGACY_SINGLE_SESSION.inputBytes;
 });
 
 // src/server/legacy-preservation.ts
@@ -4731,15 +4801,16 @@ import { closeSync as closeSync2, constants as constants2, fstatSync as fstatSyn
 import { basename as basename4, dirname as dirname4, isAbsolute as isAbsolute2 } from "path";
 function parseLegacyPlan(value) {
   const p = record(value);
+  const mode = legacyMode("plan", p.schema);
   fields(p, ["schema", "mode", "original_encoding", "member_encoding", "snapshot", "items", "sessions", "mutations_performed", "limitations", "plan_sha256"]);
-  if (p.schema !== "economy.legacy-plan.v1" || p.mode !== "read-only" || p.original_encoding !== "postgres-row-json-text-v1" || p.member_encoding !== "sha256-json-id-digest-pairs-utf8-c-order-v1" || p.mutations_performed !== 0)
+  if (p.mode !== "read-only" || p.original_encoding !== "postgres-row-json-text-v1" || p.member_encoding !== "sha256-json-id-digest-pairs-utf8-c-order-v1" || p.mutations_performed !== 0)
     fail("Unsupported legacy plan contract");
   const { plan_sha256, ...body } = p;
   if (hash(plan_sha256) !== sha2(JSON.stringify(body)))
     fail("Legacy plan digest mismatch");
   if (!Array.isArray(p.items))
     fail("Legacy plan items must be an array");
-  const selection = parseLegacySelection({ schema: "economy.legacy-selection.v1", items: p.items.map((item) => {
+  const selection = parseLegacySelection({ schema: mode.selection, items: p.items.map((item) => {
     const row = record(item);
     fields(row, ["id", "family", "original_sha256", "disposition", "reason", "evidence_ref", "session_id"]);
     identifier3(row.session_id);
@@ -4767,7 +4838,7 @@ function parseLegacyPlan(value) {
     if (typeof t.relation_oid !== "string" || !/^[0-9]+$/.test(t.relation_oid))
       fail("Invalid relation locator");
   }
-  if (!Array.isArray(p.sessions) || p.sessions.length < 1 || p.sessions.length > 100)
+  if (!Array.isArray(p.sessions) || p.sessions.length < 1 || p.sessions.length > mode.sessions)
     fail("Invalid legacy session population");
   const ids = new Set;
   let members = 0;
@@ -4784,7 +4855,7 @@ function parseLegacyPlan(value) {
       fail("Invalid legacy member count");
     members += s.request_count;
   }
-  if (members > MAX_MEMBERS || p.items.some((x) => !ids.has(x.session_id)) || ids.size !== new Set(p.items.map((x) => x.session_id)).size)
+  if (members > mode.members || p.items.some((x) => !ids.has(x.session_id)) || ids.size !== new Set(p.items.map((x) => x.session_id)).size)
     fail("Incomplete or excessive legacy session membership");
   if (!Array.isArray(p.limitations) || p.limitations.length > 20 || p.limitations.some((x) => typeof x !== "string" || x.length > 2048))
     fail("Invalid legacy plan limitations");
@@ -4801,16 +4872,28 @@ function assertLegacyPlanCurrent(expected, current) {
 }
 function parseLegacyCapsule(value) {
   const c = record(value);
+  const mode = legacyMode("capsule", c.schema);
   fields(c, ["schema", "plan", "captured_at", "requests", "sessions", "capsule_sha256"]);
-  if (c.schema !== "economy.legacy-preservation.v1" || typeof c.captured_at !== "string" || c.captured_at.length > 100 || !c.captured_at)
+  if (typeof c.captured_at !== "string" || c.captured_at.length > 100 || !c.captured_at)
     fail("Invalid preservation capsule");
   const { capsule_sha256, ...body } = c;
   const bytes = JSON.stringify(body);
-  if (Buffer.byteLength(bytes) > MAX_BYTES || hash(capsule_sha256) !== sha2(bytes))
+  if (Buffer.byteLength(bytes) > mode.capsuleBytes || hash(capsule_sha256) !== sha2(bytes))
     fail("Preservation capsule bound or digest mismatch");
   const plan = parseLegacyPlan(c.plan);
-  if (!Array.isArray(c.requests) || c.requests.length > MAX_MEMBERS || !Array.isArray(c.sessions) || c.sessions.length !== plan.sessions.length)
+  if (plan.schema !== mode.plan)
+    fail("Preservation capsule and plan use different artifact modes");
+  if (!Array.isArray(c.requests) || c.requests.length > mode.members || !Array.isArray(c.sessions) || c.sessions.length !== plan.sessions.length)
     fail("Invalid original populations");
+  let originalBytes = 0;
+  const boundOriginal = (original) => {
+    if (typeof original !== "string")
+      fail("Invalid original row text");
+    originalBytes += Buffer.byteLength(original);
+    if (originalBytes > mode.originalBytes)
+      fail("Preserved original row text exceeds its artifact mode bound");
+    return original;
+  };
   const requests = new Map;
   for (const value2 of c.requests) {
     const row = record(value2);
@@ -4818,7 +4901,7 @@ function parseLegacyCapsule(value) {
     const id = identifier3(row.id);
     if (requests.has(id) || typeof row.original !== "string")
       fail("Invalid or duplicate request original");
-    const original = record(JSON.parse(row.original));
+    const original = record(JSON.parse(boundOriginal(row.original)));
     if (original.id !== id)
       fail("Request original identity mismatch");
     requests.set(id, { session: identifier3(original.session_id), digest: sha2(row.original) });
@@ -4832,7 +4915,7 @@ function parseLegacyCapsule(value) {
       fail("Invalid or duplicate session original");
     sessions.add(id);
     const expected = plan.sessions.find((s) => s.id === id) ?? fail("Session original does not match the plan");
-    if (record(JSON.parse(row.original)).id !== id || sha2(row.original) !== expected.original_sha256)
+    if (record(JSON.parse(boundOriginal(row.original))).id !== id || sha2(row.original) !== expected.original_sha256)
       fail("Session original does not match the plan");
     const members = [...requests].filter(([, r]) => r.session === id).sort(([a], [b]) => cOrder(a, b)).map(([rid, r]) => [rid, r.digest]);
     if (members.length !== expected.request_count || sha2(JSON.stringify(members)) !== expected.members_sha256)
@@ -4849,18 +4932,19 @@ function parseLegacyCapsule(value) {
 }
 async function preserveLegacyOriginals(client, input) {
   const expected = parseLegacyPlan(input);
-  const selection = { schema: "economy.legacy-selection.v1", items: expected.items.map(({ session_id, ...item }) => item) };
+  const mode = legacyMode("plan", expected.schema);
+  const selection = { schema: mode.selection, items: expected.items.map(({ session_id, ...item }) => item) };
   return withLegacyPlanSnapshot(client, selection, async (current) => {
     assertLegacyPlanCurrent(expected, current);
     const ids = current.sessions.map((x) => x.id);
     const sizes = (await client.query(`SELECT
       (SELECT COALESCE(SUM(octet_length(row_to_json(requests)::text)),0) FROM requests WHERE session_id=ANY($1::text[]))::text AS request_bytes,
       (SELECT COALESCE(SUM(octet_length(row_to_json(sessions)::text)),0) FROM sessions WHERE id=ANY($1::text[]))::text AS session_bytes`, [ids])).rows[0];
-    if (!sizes || !/^[0-9]+$/.test(sizes.request_bytes) || !/^[0-9]+$/.test(sizes.session_bytes) || BigInt(sizes.request_bytes) + BigInt(sizes.session_bytes) > BigInt(MAX_BYTES / 2))
-      fail("Preservation exceeds 16 MiB of original row text; split by session");
-    const requests = (await client.query('SELECT id,row_to_json(requests)::text AS original FROM requests WHERE session_id=ANY($1::text[]) ORDER BY session_id COLLATE "C",id COLLATE "C" LIMIT 10001', [ids])).rows;
-    const sessions = (await client.query('SELECT id,row_to_json(sessions)::text AS original FROM sessions WHERE id=ANY($1::text[]) ORDER BY id COLLATE "C" LIMIT 101', [ids])).rows;
-    const body = { schema: "economy.legacy-preservation.v1", plan: expected, captured_at: current.snapshot.at, requests, sessions };
+    if (!sizes || !/^[0-9]+$/.test(sizes.request_bytes) || !/^[0-9]+$/.test(sizes.session_bytes) || BigInt(sizes.request_bytes) + BigInt(sizes.session_bytes) > BigInt(mode.originalBytes))
+      fail(`Preservation exceeds ${mode.originalBytes / 1024 / 1024} MiB of original row text; complete sessions cannot be truncated`);
+    const requests = (await client.query(`SELECT id,row_to_json(requests)::text AS original FROM requests WHERE session_id=ANY($1::text[]) ORDER BY session_id COLLATE "C",id COLLATE "C" LIMIT ${mode.members + 1}`, [ids])).rows;
+    const sessions = (await client.query(`SELECT id,row_to_json(sessions)::text AS original FROM sessions WHERE id=ANY($1::text[]) ORDER BY id COLLATE "C" LIMIT ${mode.sessions + 1}`, [ids])).rows;
+    const body = { schema: mode.capsule, plan: expected, captured_at: current.snapshot.at, requests, sessions };
     return parseLegacyCapsule({ ...body, capsule_sha256: sha2(JSON.stringify(body)) });
   });
 }
@@ -4891,11 +4975,16 @@ function readLegacyBytes(path, maxBytes = MAX_BYTES) {
 }
 function readLegacyArtifact(path, maxBytes = MAX_BYTES) {
   const bytes = readLegacyBytes(path, maxBytes);
+  let value;
   try {
-    return JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
+    value = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
   } catch {
     fail("Artifact must contain valid UTF-8 JSON");
   }
+  const limit = value?.schema === LEGACY_SINGLE_SESSION.plan || value?.schema === LEGACY_SINGLE_SESSION.capsule ? LEGACY_SINGLE_SESSION.capsuleBytes : LEGACY_STANDARD.capsuleBytes;
+  if (bytes.length > limit)
+    fail("Artifact exceeds its schema file bound");
+  return value;
 }
 function writeLegacyCapsule(path, input) {
   const capsule = parseLegacyCapsule(input);
@@ -4906,7 +4995,7 @@ function writeLegacyCapsule(path, input) {
     fail("Output parent must be an owner-only directory");
   const bytes = Buffer.from(JSON.stringify(capsule) + `
 `);
-  if (bytes.length > MAX_BYTES)
+  if (bytes.length > legacyMode("capsule", capsule.schema).capsuleBytes)
     fail("Preservation capsule exceeds the file bound");
   const fd = openSync2(path, constants2.O_WRONLY | constants2.O_CREAT | constants2.O_EXCL | constants2.O_NOFOLLOW, 384);
   try {
@@ -5037,7 +5126,7 @@ async function runLegacyPreservation(command, options) {
     await pool.end();
   }
 }
-var MAX_BYTES, MAX_MEMBERS = 1e4, sha2 = (s) => createHash7("sha256").update(s).digest("hex"), fail = (message) => {
+var MAX_BYTES, sha2 = (s) => createHash7("sha256").update(s).digest("hex"), fail = (message) => {
   throw Error(message);
 }, record = (v) => v !== null && typeof v === "object" && !Array.isArray(v) ? v : fail("Expected a JSON object"), hash = (v) => typeof v === "string" && /^[a-f0-9]{64}$/.test(v) ? v : fail("Expected a lowercase SHA-256 digest"), identifier3 = (v) => typeof v === "string" && v.length > 0 && v.length <= 1024 && !v.includes("\x00") ? v : fail("Expected a nonempty identifier of at most 1024 characters without NUL"), fields = (o, names) => {
   if (Object.keys(o).sort().join(",") !== [...names].sort().join(","))
@@ -5045,7 +5134,8 @@ var MAX_BYTES, MAX_MEMBERS = 1e4, sha2 = (s) => createHash7("sha256").update(s).
 }, cOrder = (a, b) => Buffer.compare(Buffer.from(a), Buffer.from(b)), same = (a, b) => JSON.stringify(a) === JSON.stringify(b), quote3 = (s) => '"' + s.replaceAll('"', '""') + '"';
 var init_legacy_preservation = __esm(() => {
   init_legacy_plan();
-  MAX_BYTES = 32 * 1024 * 1024;
+  init_legacy_limits();
+  MAX_BYTES = LEGACY_SINGLE_SESSION.capsuleBytes;
 });
 
 // src/server/legacy-operations.ts
@@ -5109,6 +5199,7 @@ function matchIntent(intent, capsule, target) {
 }
 async function verifyOriginals(client, capsule) {
   const p = capsule.plan;
+  const mode = legacyMode("capsule", capsule.schema);
   const context2 = (await client.query("SELECT current_database() AS database,(SELECT oid::text FROM pg_database WHERE datname=current_database()) AS database_oid")).rows[0];
   if (context2?.database !== p.snapshot.database || context2?.database_oid !== p.snapshot.database_oid)
     fail2("Legacy operation targets a different database");
@@ -5122,7 +5213,7 @@ async function verifyOriginals(client, capsule) {
     fail2("Legacy session originals changed; preserve later work and prepare a new review");
   const rows = (await client.query(`SELECT id,session_id,encode(sha256(convert_to(row_to_json(requests)::text,'UTF8')),'hex') AS original_sha256,
     CASE ${LEGACY_FAMILIES.map((f) => "WHEN " + LEGACY_PREDICATES[f] + " THEN '" + f + "'").join(" ")} END AS family
-    FROM requests WHERE session_id=ANY($1::text[]) ORDER BY session_id COLLATE "C",id COLLATE "C" LIMIT 10001`, [ids])).rows;
+    FROM requests WHERE session_id=ANY($1::text[]) ORDER BY session_id COLLATE "C",id COLLATE "C" LIMIT ${mode.members + 1}`, [ids])).rows;
   if (rows.length !== capsule.requests.length)
     fail2("Legacy request membership changed; preserve later work and prepare a new review");
   const originals = new Map(capsule.requests.map((r) => [r.id, sha3(r.original)]));
@@ -5176,13 +5267,14 @@ async function observed(client, run) {
 }
 function validateReceipt(value) {
   const v = value;
-  if (!v || v.schema !== "economy.legacy-operation-receipt.v1" || !["apply", "rollback"].includes(v.action))
+  if (!v || !["apply", "rollback"].includes(v.action))
     fail2("Invalid stored legacy receipt");
+  const mode = legacyMode("receipt", v.schema);
   key(v.operation_key);
   key(v.apply_key);
   digest3(v.plan_sha256);
   digest3(v.capsule_sha256);
-  if (v.source_rows_changed !== 0 || ![v.target_requests, v.preserved_requests, v.sessions].every((n) => Number.isSafeInteger(n) && n > 0 && n <= 1e4) || v.target_requests > 100 || v.sessions > 100 || typeof v.created_at !== "string" || !Number.isFinite(Date.parse(v.created_at)))
+  if (v.source_rows_changed !== 0 || ![v.target_requests, v.preserved_requests, v.sessions].every((n) => Number.isSafeInteger(n) && n > 0 && n <= mode.members) || v.target_requests > mode.items || v.sessions > mode.sessions || typeof v.created_at !== "string" || !Number.isFinite(Date.parse(v.created_at)))
     fail2("Invalid stored legacy receipt fields");
   const names = ["schema", "action", "operation_key", "apply_key", "plan_sha256", "capsule_sha256", "target_requests", "preserved_requests", "sessions", "source_rows_changed", "created_at"];
   if (Object.keys(v).sort().join(",") !== names.sort().join(","))
@@ -5207,7 +5299,7 @@ async function reply(client, row, expectedHash) {
 }
 function receipt(action, intent, capsule) {
   return {
-    schema: "economy.legacy-operation-receipt.v1",
+    schema: legacyMode("capsule", capsule.schema).receipt,
     action,
     operation_key: intent.operation_key,
     apply_key: action === "apply" ? intent.operation_key : intent.apply_key,
@@ -5247,8 +5339,9 @@ async function applyLegacyReconciliation(client, input, preserved, target) {
     const saved = (await client.query("SELECT capsule_json,capsule_sha256 FROM legacy_reconciliations WHERE operation_key=$1", [intent.operation_key])).rows[0];
     if (saved?.capsule_json !== json3 || saved?.capsule_sha256 !== capsule.capsule_sha256 || parseLegacyCapsule(JSON.parse(saved.capsule_json)).capsule_sha256 !== capsule.capsule_sha256)
       fail2("Durable preservation readback failed");
-    for (const item of capsule.plan.items)
-      await client.query("INSERT INTO legacy_reconciliation_targets VALUES($1,$2,$3,$4,$5)", [intent.operation_key, item.id, item.session_id, item.disposition, item.original_sha256]);
+    await client.query(`INSERT INTO legacy_reconciliation_targets(operation_key,request_id,session_id,disposition,original_sha256)
+      SELECT $1, x.id, x.session_id, x.disposition, x.original_sha256
+      FROM jsonb_to_recordset($2::jsonb) AS x(id text,session_id text,disposition text,original_sha256 text)`, [intent.operation_key, JSON.stringify(capsule.plan.items.map(({ id, session_id, disposition, original_sha256 }) => ({ id, session_id, disposition, original_sha256 })))]);
     const stored = await lookup(client, "apply", intent.operation_key) ?? fail2("Legacy receipt readback failed");
     if (stored.response_json !== responseJson)
       fail2("Legacy receipt readback failed");
@@ -5360,6 +5453,7 @@ var sha3 = (s) => createHash8("sha256").update(s).digest("hex"), fail2 = (s) =>
   WHERE c.oid IN ('requests'::regclass,'sessions'::regclass) AND a.attnum>0 AND NOT a.attisdropped
   GROUP BY c.oid,c.relname,n.nspname ORDER BY c.relname`, same2 = (a, b) => JSON.stringify(a) === JSON.stringify(b);
 var init_legacy_operations = __esm(() => {
+  init_legacy_limits();
   init_pg_connection();
   init_legacy_inventory();
   init_legacy_preservation();
@@ -5396,7 +5490,7 @@ function isAuthorizedRequest(req, path) {
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.1",
+  version: "0.5.2",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",

package/dist/server/legacy-limits.d.ts

@@ -0,0 +1,51 @@
+/** Artifact schemas select a closed resource envelope. A larger envelope is
+ * explicit and restricted to one complete session; ordinary artifacts keep
+ * their original limits. These profiles confer no reconciliation authority. */
+export declare const LEGACY_STANDARD: {
+    readonly selection: "economy.legacy-selection.v1";
+    readonly plan: "economy.legacy-plan.v1";
+    readonly capsule: "economy.legacy-preservation.v1";
+    readonly receipt: "economy.legacy-operation-receipt.v1";
+    readonly items: 100;
+    readonly sessions: 100;
+    readonly members: 10000;
+    readonly inputBytes: number;
+    readonly originalBytes: number;
+    readonly capsuleBytes: number;
+};
+export declare const LEGACY_SINGLE_SESSION: {
+    readonly selection: "economy.legacy-session-selection.v1";
+    readonly plan: "economy.legacy-session-plan.v1";
+    readonly capsule: "economy.legacy-session-preservation.v1";
+    readonly receipt: "economy.legacy-session-operation-receipt.v1";
+    readonly items: 50000;
+    readonly sessions: 1;
+    readonly members: 50000;
+    readonly inputBytes: number;
+    readonly originalBytes: number;
+    readonly capsuleBytes: number;
+};
+export declare function legacyMode(kind: 'selection' | 'plan' | 'capsule' | 'receipt', schema: unknown): {
+    readonly selection: "economy.legacy-selection.v1";
+    readonly plan: "economy.legacy-plan.v1";
+    readonly capsule: "economy.legacy-preservation.v1";
+    readonly receipt: "economy.legacy-operation-receipt.v1";
+    readonly items: 100;
+    readonly sessions: 100;
+    readonly members: 10000;
+    readonly inputBytes: number;
+    readonly originalBytes: number;
+    readonly capsuleBytes: number;
+} | {
+    readonly selection: "economy.legacy-session-selection.v1";
+    readonly plan: "economy.legacy-session-plan.v1";
+    readonly capsule: "economy.legacy-session-preservation.v1";
+    readonly receipt: "economy.legacy-session-operation-receipt.v1";
+    readonly items: 50000;
+    readonly sessions: 1;
+    readonly members: 50000;
+    readonly inputBytes: number;
+    readonly originalBytes: number;
+    readonly capsuleBytes: number;
+};
+//# sourceMappingURL=legacy-limits.d.ts.map

package/dist/server/legacy-limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-limits.d.ts","sourceRoot":"","sources":["../../src/server/legacy-limits.ts"],"names":[],"mappings":"AAAA;;+EAE+E;AAC/E,eAAO,MAAM,eAAe;;;;;;;;;;;CAKlB,CAAA;AAEV,eAAO,MAAM,qBAAqB;;;;;;;;;;;CAKxB,CAAA;AAEV,wBAAgB,UAAU,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,EAAE,MAAM,EAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;EAI7F"}

package/dist/server/legacy-operations.d.ts

@@ -1,4 +1,5 @@
 import type pg from 'pg';
+import { LEGACY_STANDARD, LEGACY_SINGLE_SESSION } from './legacy-limits.js';
 import type { LegacyReader } from './legacy-plan.js';
 type Action = 'apply' | 'rollback';
 export interface LegacyIntent {
@@ -19,7 +20,7 @@ export declare function parseLegacyIntent(action: Action, value: unknown): Legac
  * complements exact database/relation locators; it is not ownership approval. */
 export declare function legacyTargetDigest(target: string | pg.PoolConfig): string;
 interface Receipt {
-    schema: 'economy.legacy-operation-receipt.v1';
+    schema: typeof LEGACY_STANDARD.receipt | typeof LEGACY_SINGLE_SESSION.receipt;
     action: Action;
     operation_key: string;
     apply_key: string;

package/dist/server/legacy-operations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"legacy-operations.d.ts","sourceRoot":"","sources":["../../src/server/legacy-operations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AAGxB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAQpD,KAAK,MAAM,GAAC,OAAO,GAAC,UAAU,CAAA;AAC9B,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAC,MAAM,CAAC;IAAC,aAAa,EAAC,MAAM,CAAC;IAAC,aAAa,EAAC,MAAM,CAAC;IAAC,WAAW,EAAC,MAAM,CAAC;IAAC,cAAc,EAAC,MAAM,CAAA;IACpG,SAAS,EAAC,MAAM,CAAC;IAAC,aAAa,EAAC,MAAM,CAAC;IAAC,SAAS,CAAC,EAAC,MAAM,CAAA;CAC1D;AACD,4EAA4E;AAC5E,qBAAa,yBAA0B,SAAQ,KAAK;CAAG;AACvD,wBAAgB,iBAAiB,CAAC,MAAM,EAAC,MAAM,EAAC,KAAK,EAAC,OAAO,GAAE,YAAY,CAY1E;AACD;iFACiF;AACjF,wBAAgB,kBAAkB,CAAC,MAAM,EAAC,MAAM,GAAC,EAAE,CAAC,UAAU,GAAE,MAAM,CAOrE;AAgED,UAAU,OAAO;IACf,MAAM,EAAC,qCAAqC,CAAC;IAAA,MAAM,EAAC,MAAM,CAAC;IAAA,aAAa,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAA;IAChG,WAAW,EAAC,MAAM,CAAC;IAAA,cAAc,EAAC,MAAM,CAAC;IAAA,eAAe,EAAC,MAAM,CAAC;IAAA,kBAAkB,EAAC,MAAM,CAAC;IAAA,QAAQ,EAAC,MAAM,CAAA;IACzG,mBAAmB,EAAC,CAAC,CAAC;IAAA,UAAU,EAAC,MAAM,CAAA;CACxC;AAmCD,wBAAsB,yBAAyB,CAAC,MAAM,EAAC,YAAY,EAAC,KAAK,EAAC,OAAO,EAAC,SAAS,EAAC,OAAO,EAAC,MAAM,EAAC,MAAM;;;;;GA8BhH;AACD,wBAAsB,4BAA4B,CAAC,MAAM,EAAC,YAAY,EAAC,KAAK,EAAC,OAAO,EAAC,MAAM,EAAC,MAAM;;;;;GAuBjG;AACD,4FAA4F;AAC5F,wBAAsB,mBAAmB,CAAC,MAAM,EAAC,YAAY,EAAC,SAAS,EAAC,MAAM;;;;;;;;;GAQ7E;AACD,wBAAgB,2BAA2B,CAAC,OAAO,EAAC,MAAM,EAAC,IAAI,EAAC,MAAM,EAAE,GAAE;IAAC,KAAK,CAAC,EAAC,MAAM,CAAC;IAAA,OAAO,CAAC,EAAC,MAAM,CAAC;IAAA,SAAS,CAAC,EAAC,MAAM,CAAA;CAAC,CAQ1H;AACD,wBAAsB,kBAAkB,CAAC,OAAO,EAAC,MAAM,EAAC,OAAO,EAAC,UAAU,CAAC,OAAO,2BAA2B,CAAC,iBAgC7G"}
+{"version":3,"file":"legacy-operations.d.ts","sourceRoot":"","sources":["../../src/server/legacy-operations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAc,MAAM,oBAAoB,CAAA;AAGvF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAQpD,KAAK,MAAM,GAAC,OAAO,GAAC,UAAU,CAAA;AAC9B,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAC,MAAM,CAAC;IAAC,aAAa,EAAC,MAAM,CAAC;IAAC,aAAa,EAAC,MAAM,CAAC;IAAC,WAAW,EAAC,MAAM,CAAC;IAAC,cAAc,EAAC,MAAM,CAAA;IACpG,SAAS,EAAC,MAAM,CAAC;IAAC,aAAa,EAAC,MAAM,CAAC;IAAC,SAAS,CAAC,EAAC,MAAM,CAAA;CAC1D;AACD,4EAA4E;AAC5E,qBAAa,yBAA0B,SAAQ,KAAK;CAAG;AACvD,wBAAgB,iBAAiB,CAAC,MAAM,EAAC,MAAM,EAAC,KAAK,EAAC,OAAO,GAAE,YAAY,CAY1E;AACD;iFACiF;AACjF,wBAAgB,kBAAkB,CAAC,MAAM,EAAC,MAAM,GAAC,EAAE,CAAC,UAAU,GAAE,MAAM,CAOrE;AAiED,UAAU,OAAO;IACf,MAAM,EAAC,OAAO,eAAe,CAAC,OAAO,GAAC,OAAO,qBAAqB,CAAC,OAAO,CAAC;IAAA,MAAM,EAAC,MAAM,CAAC;IAAA,aAAa,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAA;IAC9H,WAAW,EAAC,MAAM,CAAC;IAAA,cAAc,EAAC,MAAM,CAAC;IAAA,eAAe,EAAC,MAAM,CAAC;IAAA,kBAAkB,EAAC,MAAM,CAAC;IAAA,QAAQ,EAAC,MAAM,CAAA;IACzG,mBAAmB,EAAC,CAAC,CAAC;IAAA,UAAU,EAAC,MAAM,CAAA;CACxC;AAoCD,wBAAsB,yBAAyB,CAAC,MAAM,EAAC,YAAY,EAAC,KAAK,EAAC,OAAO,EAAC,SAAS,EAAC,OAAO,EAAC,MAAM,EAAC,MAAM;;;;;GAmChH;AACD,wBAAsB,4BAA4B,CAAC,MAAM,EAAC,YAAY,EAAC,KAAK,EAAC,OAAO,EAAC,MAAM,EAAC,MAAM;;;;;GAuBjG;AACD,4FAA4F;AAC5F,wBAAsB,mBAAmB,CAAC,MAAM,EAAC,YAAY,EAAC,SAAS,EAAC,MAAM;;;;;;;;;GAQ7E;AACD,wBAAgB,2BAA2B,CAAC,OAAO,EAAC,MAAM,EAAC,IAAI,EAAC,MAAM,EAAE,GAAE;IAAC,KAAK,CAAC,EAAC,MAAM,CAAC;IAAA,OAAO,CAAC,EAAC,MAAM,CAAC;IAAA,SAAS,CAAC,EAAC,MAAM,CAAA;CAAC,CAQ1H;AACD,wBAAsB,kBAAkB,CAAC,OAAO,EAAC,MAAM,EAAC,OAAO,EAAC,UAAU,CAAC,OAAO,2BAA2B,CAAC,iBAgC7G"}

package/dist/server/legacy-plan.d.ts

@@ -1,4 +1,5 @@
 import { type LegacyFamily } from './legacy-inventory.js';
+import { LEGACY_STANDARD, LEGACY_SINGLE_SESSION } from './legacy-limits.js';
 export interface LegacyReader {
     query(sql: string, values?: unknown[]): Promise<{
         rows: Record<string, any>[];
@@ -30,7 +31,7 @@ export interface LegacyPlan {
 }
 type Disposition = 'quarantine_aggregate' | 'mark_billing_unknown';
 export interface LegacySelection {
-    schema: 'economy.legacy-selection.v1';
+    schema: typeof LEGACY_STANDARD.selection | typeof LEGACY_SINGLE_SESSION.selection;
     items: Array<{
         id: string;
         family: LegacyFamily;

package/dist/server/legacy-plan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"legacy-plan.d.ts","sourceRoot":"","sources":["../../src/server/legacy-plan.ts"],"names":[],"mappings":"AAGA,OAAO,EAAsC,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAE7F,MAAM,WAAW,YAAY;IAAG,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAA;KAAE,CAAC,CAAA;CAAE;AAClH,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;IAChF,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;KAAE,CAAA;IACpG,KAAK,EAAE,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,GAAG;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACvE,QAAQ,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACvG,mBAAmB,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CACxE;AACD,KAAK,WAAW,GAAG,sBAAsB,GAAG,sBAAsB,CAAA;AAClE,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,6BAA6B,CAAA;IACrC,KAAK,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,YAAY,CAAC;QAAC,eAAe,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,WAAW,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAC5I;AAuBD,qFAAqF;AACrF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAkBpE;AAED,wFAAwF;AACxF,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAkBrE;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAG7D;AAED;mFACmF;AACnF,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAEjG;AAED,+EAA+E;AAC/E,wBAAsB,sBAAsB,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAClF,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAwEpD;AAED,wBAAsB,aAAa,CAAC,SAAS,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAU7E"}
+{"version":3,"file":"legacy-plan.d.ts","sourceRoot":"","sources":["../../src/server/legacy-plan.ts"],"names":[],"mappings":"AAGA,OAAO,EAAsC,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAC7F,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAc,MAAM,oBAAoB,CAAA;AAEvF,MAAM,WAAW,YAAY;IAAG,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAA;KAAE,CAAC,CAAA;CAAE;AAClH,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;IAChF,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;KAAE,CAAA;IACpG,KAAK,EAAE,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,GAAG;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACvE,QAAQ,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACvG,mBAAmB,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CACxE;AACD,KAAK,WAAW,GAAG,sBAAsB,GAAG,sBAAsB,CAAA;AAClE,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,OAAO,eAAe,CAAC,SAAS,GAAG,OAAO,qBAAqB,CAAC,SAAS,CAAA;IACjF,KAAK,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,YAAY,CAAC;QAAC,eAAe,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,WAAW,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAC5I;AAsBD,qFAAqF;AACrF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAmBpE;AAED,wFAAwF;AACxF,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAqBrE;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAG7D;AAED;mFACmF;AACnF,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAEjG;AAED,+EAA+E;AAC/E,wBAAsB,sBAAsB,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAClF,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CA0EpD;AAED,wBAAsB,aAAa,CAAC,SAAS,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAU7E"}

package/dist/server/legacy-preservation.d.ts

@@ -1,4 +1,5 @@
 import { type LegacyPlan, type LegacyReader } from './legacy-plan.js';
+import { LEGACY_STANDARD, LEGACY_SINGLE_SESSION } from './legacy-limits.js';
 /** Validate the complete emitted proposal before taking a connection or opening output. */
 export declare function parseLegacyPlan(value: unknown): LegacyPlan;
 export declare function assertLegacyPlanCurrent(expected: LegacyPlan, current: LegacyPlan): void;
@@ -7,7 +8,7 @@ interface Original {
     original: string;
 }
 export interface LegacyCapsule {
-    schema: 'economy.legacy-preservation.v1';
+    schema: typeof LEGACY_STANDARD.capsule | typeof LEGACY_SINGLE_SESSION.capsule;
     plan: LegacyPlan;
     captured_at: string;
     requests: Original[];

package/dist/server/legacy-preservation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"legacy-preservation.d.ts","sourceRoot":"","sources":["../../src/server/legacy-preservation.ts"],"names":[],"mappings":"AAGA,OAAO,EAAgD,KAAK,UAAU,EAAE,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAgBnH,2FAA2F;AAC3F,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CA6C1D;AAOD,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,GAAG,IAAI,CAEvF;AAED,UAAU,QAAQ;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE;AACnD,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,gCAAgC,CAAA;IACxC,IAAI,EAAE,UAAU,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,QAAQ,EAAE,CAAA;IACpB,QAAQ,EAAE,QAAQ,EAAE,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;CACvB;AAED,wFAAwF;AACxF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,aAAa,CAmChE;AAED,wBAAsB,uBAAuB,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,CAiB1G;AAmBD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,SAAU,GAAG,OAAO,CAI5E;AAED;sFACsF;AACtF,wBAAgB,kBAAkB,CAAC,IAAI,EAAC,MAAM,EAAC,KAAK,EAAC,OAAO;;;;;;;;;;;EAwB3D;AAED;;kFAEkF;AAClF,wBAAsB,qBAAqB,CAAC,MAAM,EAAC,YAAY,EAAC,KAAK,EAAC,OAAO,EAAC,KAAK,GAAC,aAAa,GAAC,WAAyB;;;;;;;;;;GAwD1H;AAED,wBAAgB,8BAA8B,CAAC,OAAO,EAAC,MAAM,EAAC,IAAI,EAAC,MAAM,EAAE,GAAG;IAAC,KAAK,EAAC,MAAM,CAAC;IAAA,MAAM,CAAC,EAAC,MAAM,CAAA;CAAC,CAM1G;AAED,wBAAsB,qBAAqB,CAAC,OAAO,EAAC,MAAM,EAAC,OAAO,EAAC;IAAC,KAAK,EAAC,MAAM,CAAC;IAAA,MAAM,CAAC,EAAC,MAAM,CAAA;CAAC,iBAgB/F"}
+{"version":3,"file":"legacy-preservation.d.ts","sourceRoot":"","sources":["../../src/server/legacy-preservation.ts"],"names":[],"mappings":"AAGA,OAAO,EAAgD,KAAK,UAAU,EAAE,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAA;AACnH,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAc,MAAM,oBAAoB,CAAA;AAevF,2FAA2F;AAC3F,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CA8C1D;AAOD,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,GAAG,IAAI,CAEvF;AAED,UAAU,QAAQ;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE;AACnD,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,OAAO,eAAe,CAAC,OAAO,GAAG,OAAO,qBAAqB,CAAC,OAAO,CAAA;IAC7E,IAAI,EAAE,UAAU,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,QAAQ,EAAE,CAAA;IACpB,QAAQ,EAAE,QAAQ,EAAE,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;CACvB;AAED,wFAAwF;AACxF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,aAAa,CA4ChE;AAED,wBAAsB,uBAAuB,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,CAkB1G;AAmBD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,SAAU,GAAG,OAAO,CAS5E;AAED;sFACsF;AACtF,wBAAgB,kBAAkB,CAAC,IAAI,EAAC,MAAM,EAAC,KAAK,EAAC,OAAO;;;;;;;;;;;EAwB3D;AAED;;kFAEkF;AAClF,wBAAsB,qBAAqB,CAAC,MAAM,EAAC,YAAY,EAAC,KAAK,EAAC,OAAO,EAAC,KAAK,GAAC,aAAa,GAAC,WAAyB;;;;;;;;;;GAwD1H;AAED,wBAAgB,8BAA8B,CAAC,OAAO,EAAC,MAAM,EAAC,IAAI,EAAC,MAAM,EAAE,GAAG;IAAC,KAAK,EAAC,MAAM,CAAC;IAAA,MAAM,CAAC,EAAC,MAAM,CAAA;CAAC,CAM1G;AAED,wBAAsB,qBAAqB,CAAC,OAAO,EAAC,MAAM,EAAC,OAAO,EAAC;IAAC,KAAK,EAAC,MAAM,CAAC;IAAA,MAAM,CAAC,EAAC,MAAM,CAAA;CAAC,iBAgB/F"}

package/dist/server/service-worker.js

@@ -7266,7 +7266,7 @@ import { randomUUID } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.1",
+  version: "0.5.2",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",

package/docs/historical-data-reconciliation.md

@@ -122,6 +122,44 @@ database backup, production ownership attestation or disaster-recovery exercise.
 Neither command authorizes quarantine or performs application or rollback of a
 reconciliation.
 
+## One large session
+
+When one complete session exceeds the ordinary envelope, select it explicitly
+with `schema: "economy.legacy-session-selection.v1"` in the same selection file.
+Use the same maintained `legacy-plan`, `legacy-preserve` and `legacy-rehearse`
+commands. Every target still needs its exact original digest and reviewed
+disposition, reason and evidence reference. The planner requires exactly one
+session, preserves its entire request population including unselected rows, and
+emits `economy.legacy-session-plan.v1`. Preservation emits
+`economy.legacy-session-preservation.v1`; neither schema can be substituted for
+its ordinary counterpart.
+
+This mode accepts at most 50,000 selected requests, 50,000 complete-session
+members, a 32 MiB selection file, 64 MiB of original row text, and a 128 MiB
+preservation file. Each bound refuses the operation without truncation. Ordinary
+artifacts retain their 100-target, 10,000-member, 256 KiB selection, 16 MiB
+original and 32 MiB preservation bounds. A population above the explicit
+single-session bounds still needs another reviewed procedure; the tool never
+silently increases them.
+
+Apply uses one set-based insertion for the selected dispositions and commits
+one immutable capsule and receipt for the whole operation. Its receipt schema
+is `economy.legacy-session-operation-receipt.v1`. Use the same exact-target
+intent, observation, explicit retry and rollback commands described below.
+Session overlap remains prohibited: select all reviewed targets for that
+session together, instead of repeatedly preserving the same whole session for
+small target batches. File and row preservation, typed restoration, complete
+membership preconditions, ingestion exclusion and rollback checks all apply.
+Use a version supporting these explicit artifact schemas for every stage;
+older versions refuse them. These limits do not establish source provenance or
+authorize changing a production report.
+
+The appended PostgreSQL migration checks conflicts once for the inserted set,
+including conflicts between operations in that same set. This avoids repeated
+scans of a growing operation when existing history has small or stale planner
+statistics. The 15-second statement timeout and session/request conflict rules
+remain in force.
+
 ## Apply, observe and roll back
 
 Deploy the reviewed runtime integration and apply its appended PostgreSQL schema

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/economy",
-  "version": "0.5.1",
+  "version": "0.5.2",
   "description": "AI coding cost tracker — CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   "repository": {
     "type": "git",