@hasna/economy 0.5.11 → 0.5.12

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog
 
+## 0.5.12
+
+### Patch Changes
+
+- Avoid recreating local recovery records when a restarted hosted sync encounters
+  an already retired batch with a verified authority anchor and exact server
+  receipt. Preserve pending-command reconciliation and fail closed when receipt
+  or principal validation fails.
+
 ## 0.5.11
 
 ### Patch Changes

package/dist/chunks/{index-mgnzgf1m.js → index-a5gdrfby.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   LOCAL_STORAGE_OPT_IN_KEYS
-} from "./index-b36bq51x.js";
+} from "./index-vavbzb1s.js";
 import {
   assessCostFromDb,
   getIngestState,

package/dist/chunks/{index-akxt4n8x.js → index-bx0wbqyr.js}

@@ -4,7 +4,7 @@ import {
 } from "./index-w3bvv0ns.js";
 import {
   getStore
-} from "./index-v35tm3xg.js";
+} from "./index-mn8ybzv7.js";
 import {
   formatReportedUsd,
   formatSummaryCoverage,

package/dist/chunks/{index-v35tm3xg.js → index-mn8ybzv7.js}

@@ -15,7 +15,7 @@ import {
   requireCurrentBillingDiffSummary,
   requireCurrentRangeStats,
   requireCurrentSavingsReport
-} from "./index-b36bq51x.js";
+} from "./index-vavbzb1s.js";
 import {
   deleteBudget,
   deleteGoal,

package/dist/chunks/{index-yv28hyk7.js → index-pgt6fhkb.js}

@@ -6,7 +6,7 @@ import {
 } from "./index-gtjqy0kd.js";
 import {
   syncAll
-} from "./index-mgnzgf1m.js";
+} from "./index-a5gdrfby.js";
 import {
   MAX_INGEST_BYTES,
   MAX_INGEST_ROWS,
@@ -60,7 +60,7 @@ async function recalculateZeroCostRequests(db) {
 }
 
 // src/lib/cloud-ingest.ts
-import { mkdirSync as mkdirSync2, readFileSync as readFileSync3, renameSync, writeFileSync as writeFileSync2 } from "fs";
+import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync3, renameSync, writeFileSync as writeFileSync2 } from "fs";
 import { dirname, join as join4 } from "path";
 
 // src/lib/ingest-batches.ts
@@ -931,30 +931,35 @@ async function postIngest(cloud, body) {
         const refused = journal.refusal(batch);
         if (refused)
           throw new IngestRefused(refused.status, refused.code, refused.reason);
-        await maintenance.admit(batch);
         const known = await journal.lookupReceipt(cloud, batch);
-        const fresh = journal.stage(batch);
-        const sendFresh = async () => {
-          let response;
-          try {
-            response = await cloud.client.transport.post("/ingest", batch, { retry: false });
-          } catch (error) {
-            const refusal = error instanceof HasnaHttpError2 ? definitiveIngestRefusal(error.status, error.body) : null;
-            if (refusal) {
-              journal.recordRefusal(batch, refusal);
-              throw new IngestRefused(refusal.status, refusal.code, refusal.reason);
+        let payload;
+        if (known && existsSync2(join4(journal.directory, ".authority.json"))) {
+          payload = existsSync2(journal.file(batch.idempotency_key, "intent")) ? journal.accept(batch, known) : known;
+        } else {
+          await maintenance.admit(batch);
+          const fresh = journal.stage(batch);
+          const sendFresh = async () => {
+            let response;
+            try {
+              response = await cloud.client.transport.post("/ingest", batch, { retry: false });
+            } catch (error) {
+              const refusal = error instanceof HasnaHttpError2 ? definitiveIngestRefusal(error.status, error.body) : null;
+              if (refusal) {
+                journal.recordRefusal(batch, refusal);
+                throw new IngestRefused(refusal.status, refusal.code, refusal.reason);
+              }
+              throw error;
             }
-            throw error;
-          }
-          return journal.accept(batch, response);
-        };
-        const payload = known ? journal.accept(batch, known) : fresh ? await sendFresh() : await journal.reconcileCommand(cloud, batch);
+            return journal.accept(batch, response);
+          };
+          payload = known ? journal.accept(batch, known) : fresh ? await sendFresh() : await journal.reconcileCommand(cloud, batch);
+        }
         await verifyJournalAuthority(journal, cloud);
         if (!payload)
           throw new PendingIngestError([batch.idempotency_key]);
-        verifyIngestReceipt(payload, batch);
-        const counts = payload["ingested"];
-        if (!counts || typeof counts !== "object" || Array.isArray(counts) || typeof payload["total"] !== "number" || !Number.isSafeInteger(payload["total"]) || payload["total"] < 0)
+        const verified = verifyIngestReceipt(payload, batch);
+        const counts = verified["ingested"];
+        if (!counts || typeof counts !== "object" || Array.isArray(counts) || typeof verified["total"] !== "number" || !Number.isSafeInteger(verified["total"]) || verified["total"] < 0)
           throw new Error("Invalid ingest receipt");
         let sum = 0;
         for (const [table, count] of Object.entries(counts)) {
@@ -963,16 +968,16 @@ async function postIngest(cloud, body) {
           sum += count;
           ingested[table] = (ingested[table] ?? 0) + count;
         }
-        if (sum !== payload["total"])
+        if (sum !== verified["total"])
           throw new Error("Invalid ingest receipt");
         total += sum;
-        const operation = payload["operation_key"];
+        const operation = verified["operation_key"];
         if (operation !== undefined && (typeof operation !== "string" || !/^[a-f0-9]{64}$/.test(operation)))
           throw new Error("Invalid ingest receipt");
         completed.push({
           idempotency_key: batch.idempotency_key,
           ...typeof operation === "string" ? { operation_key: operation } : {},
-          replayed: payload["replayed"] === true
+          replayed: verified["replayed"] === true
         });
       } catch (error) {
         if (error instanceof PendingIngestError || error instanceof JournalMaintenanceError || error instanceof IngestRefused)

package/dist/chunks/{index-b36bq51x.js → index-vavbzb1s.js}

@@ -86,7 +86,7 @@ function comparisonValueChange(left, right) {
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.11",
+  version: "0.5.12",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",

package/dist/chunks/{serve-kk3n0p7j.js → serve-462ch8yc.js}

@@ -5,7 +5,7 @@ import {
 } from "./index-w3bvv0ns.js";
 import {
   syncAll
-} from "./index-mgnzgf1m.js";
+} from "./index-a5gdrfby.js";
 import {
   buildBrief,
   packageMetadata,
@@ -16,7 +16,7 @@ import {
   queryProjectDetail,
   queryRangeStats,
   querySavingsSummary
-} from "./index-b36bq51x.js";
+} from "./index-vavbzb1s.js";
 import {
   AGENTS,
   INGEST_SCHEMA_SQL,

package/dist/chunks/{tui-hxjczmv5.js → tui-bmf8rp0p.js}

@@ -6,10 +6,10 @@ import {
   printStatusLine,
   printWaybarJson,
   runTui
-} from "./index-akxt4n8x.js";
+} from "./index-bx0wbqyr.js";
 import"./index-w3bvv0ns.js";
-import"./index-v35tm3xg.js";
-import"./index-b36bq51x.js";
+import"./index-mn8ybzv7.js";
+import"./index-vavbzb1s.js";
 import"./index-zgvmrqyc.js";
 import"./index-p35cyhc4.js";
 export {

package/dist/chunks/{watch-ewed2srf.js → watch-msg91cnj.js}

@@ -2,19 +2,19 @@
 import {
   syncAllToCloud,
   syncHasFailures
-} from "./index-yv28hyk7.js";
+} from "./index-pgt6fhkb.js";
 import"./index-gtjqy0kd.js";
 import {
   agentPaths,
   syncAll
-} from "./index-mgnzgf1m.js";
+} from "./index-a5gdrfby.js";
 import {
   getStore,
   isCloudStore
-} from "./index-v35tm3xg.js";
+} from "./index-mn8ybzv7.js";
 import {
   economyCloudStorage
-} from "./index-b36bq51x.js";
+} from "./index-vavbzb1s.js";
 import {
   formatSummaryValue
 } from "./index-zgvmrqyc.js";

package/dist/cli/index.js

@@ -3,7 +3,7 @@
 import {
   buildStatusLine,
   gatherStatusData
-} from "../chunks/index-akxt4n8x.js";
+} from "../chunks/index-bx0wbqyr.js";
 import"../chunks/index-w3bvv0ns.js";
 import {
   JournalMaintenanceError,
@@ -17,7 +17,7 @@ import {
   syncAllToCloud,
   syncHasFailures,
   syncOutcomeLines
-} from "../chunks/index-yv28hyk7.js";
+} from "../chunks/index-pgt6fhkb.js";
 import {
   syncAnthropicBilling,
   syncGeminiBilling,
@@ -26,11 +26,11 @@ import {
 import {
   agentPaths,
   syncAll
-} from "../chunks/index-mgnzgf1m.js";
+} from "../chunks/index-a5gdrfby.js";
 import {
   getStore,
   isCloudStore
-} from "../chunks/index-v35tm3xg.js";
+} from "../chunks/index-mn8ybzv7.js";
 import {
   billingDriftCheck,
   comparisonValueChange,
@@ -38,7 +38,7 @@ import {
   economyTransportReport,
   formatComparisonValue,
   packageMetadata
-} from "../chunks/index-b36bq51x.js";
+} from "../chunks/index-vavbzb1s.js";
 import {
   AGENTS,
   dedupeRequests,
@@ -1365,23 +1365,23 @@ function registerExtendedCommands(program) {
     console.log();
   });
   program.command("tui").description("Terminal status dashboard (Linux/SSH friendly)").option("--watch", "Live refresh").option("--interval <seconds>", "Refresh interval", "30").action(async (opts) => {
-    const { runTui } = await import("../chunks/tui-hxjczmv5.js");
+    const { runTui } = await import("../chunks/tui-bmf8rp0p.js");
     await runTui({
       watch: Boolean(opts.watch),
       interval: Number(opts.interval ?? 30)
     });
   });
   program.command("waybar").description("Print waybar-compatible JSON status line").action(async () => {
-    const { printWaybarJson } = await import("../chunks/tui-hxjczmv5.js");
+    const { printWaybarJson } = await import("../chunks/tui-bmf8rp0p.js");
     await printWaybarJson();
   });
   const barCmd = program.command("bar").description("Status bar helpers (Linux)");
   barCmd.command("tui").description("Alias for economy tui").option("--watch", "Live refresh").action(async (opts) => {
-    const { runTui } = await import("../chunks/tui-hxjczmv5.js");
+    const { runTui } = await import("../chunks/tui-bmf8rp0p.js");
     await runTui({ watch: Boolean(opts.watch) });
   });
   barCmd.command("waybar").description("Alias for economy waybar").action(async () => {
-    const { printWaybarJson } = await import("../chunks/tui-hxjczmv5.js");
+    const { printWaybarJson } = await import("../chunks/tui-bmf8rp0p.js");
     await printWaybarJson();
   });
   program.command("estimate").description("Estimate cost for token counts").requiredOption("--model <model>", "Model name").option("--input <n>", "Input tokens", "0").option("--output <n>", "Output tokens", "0").action(async (opts) => {
@@ -2207,7 +2207,7 @@ program.command("accounts [period]").description("List account usage by email ad
   console.log();
 });
 program.command("watch").description("Live stream of incoming costs").option("--interval <seconds>", "Poll interval in seconds", "10").option("--daemon", "Watch agent data directories and sync on change").option("--sync-interval <seconds>", "Minimum collection interval and fallback scan interval for --daemon", "60").option("--agent <agent>", `Filter by agent (${AGENTS.join("|")})`).option("--notify <amount>", "Fire macOS notification when cumulative cost crosses this USD threshold").option("--no-notifications", "Disable desktop notifications, including high-cost notices").action(async (opts) => {
-  const { watchCosts } = await import("../chunks/watch-ewed2srf.js");
+  const { watchCosts } = await import("../chunks/watch-msg91cnj.js");
   await watchCosts({
     interval: parsePositiveCliInteger(opts.interval ?? "10", "--interval"),
     daemon: Boolean(opts.daemon),
@@ -2445,7 +2445,7 @@ pricingCmd.command("remove <model>").description("Remove pricing for a model").a
 });
 program.command("serve").description("Start the REST API server").option("-p, --port <port>", "Port", "3456").action(async (opts) => {
   const port = parseCliPort(opts.port ?? "3456", "--port");
-  const { startServer } = await import("../chunks/serve-kk3n0p7j.js");
+  const { startServer } = await import("../chunks/serve-462ch8yc.js");
   startServer(port);
 });
 program.command("mcp").description("Show MCP server install commands").option("--claude", "Install into Claude Code").option("--codex", "Install into Codex").option("--gemini", "Install into Gemini CLI").option("--all", "Install into all agents").action(async (opts) => {

package/dist/index.js

@@ -111,7 +111,7 @@ import { randomUUID } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.11",
+  version: "0.5.12",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",

package/dist/lib/cloud-ingest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cloud-ingest.d.ts","sourceRoot":"","sources":["../../src/lib/cloud-ingest.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,aAAa,IAAI,QAAQ,EAAE,MAAM,yBAAyB,CAAA;AAGxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAClD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAGnE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AACpD,OAAO,EAAqC,KAAK,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAUhG;;;GAGG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAI3C;AAqED,qBAAa,aAAc,SAAQ,KAAK;IAC1B,QAAQ,CAAC,MAAM,EAAC,MAAM;IAAC,QAAQ,CAAC,IAAI,EAAC,MAAM;IAAC,QAAQ,CAAC,MAAM;gBAAlD,MAAM,EAAC,MAAM,EAAU,IAAI,EAAC,MAAM,EAAU,MAAM,SAAK;CAC7E;AAED,wBAAsB,UAAU,CAC9B,KAAK,EAAE,yBAAyB,EAChC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,GACnD,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,kBAAkB,EAAE,CAAA;CAAE,CAAC,CAqE9F;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,yBAAyB,EAChC,OAAO,EAAE,QAAQ,GAChB,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,kBAAkB,EAAE,CAAA;CAAE,CAAC,CAK/G;AAED,MAAM,WAAW,gBAAiB,SAAQ,WAAW;IACnD,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,sDAAsD;IACtD,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,uDAAuD;IACvD,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,kEAAkE;IAClE,WAAW,CAAC,EAAE,OAAO,CAAA;CACtB;AAED,MAAM,WAAW,eAAgB,SAAQ,aAAa;IACpD,2EAA2E;IAC3E,MAAM,EAAE,OAAO,CAAA;IACf,gFAAgF;IAChF,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjC,sEAAsE;IACtE,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,kBAAkB,EAAE,CAAA;CAChC;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,yBAAyB,EAAE,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,eAAe,CAAC,CA6B5H;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,yEAAyE;IACzE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC5F,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,kBAAkB,EAAE,CAAA;CAChC;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,yBAAyB,EAAE,IAAI,GAAE,uBAA4B,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAkC9I"}
+{"version":3,"file":"cloud-ingest.d.ts","sourceRoot":"","sources":["../../src/lib/cloud-ingest.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,aAAa,IAAI,QAAQ,EAAE,MAAM,yBAAyB,CAAA;AAGxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAClD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAGnE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AACpD,OAAO,EAAqC,KAAK,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAUhG;;;GAGG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAI3C;AAqED,qBAAa,aAAc,SAAQ,KAAK;IAC1B,QAAQ,CAAC,MAAM,EAAC,MAAM;IAAC,QAAQ,CAAC,IAAI,EAAC,MAAM;IAAC,QAAQ,CAAC,MAAM;gBAAlD,MAAM,EAAC,MAAM,EAAU,IAAI,EAAC,MAAM,EAAU,MAAM,SAAK;CAC7E;AAED,wBAAsB,UAAU,CAC9B,KAAK,EAAE,yBAAyB,EAChC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,GACnD,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,kBAAkB,EAAE,CAAA;CAAE,CAAC,CAgF9F;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,yBAAyB,EAChC,OAAO,EAAE,QAAQ,GAChB,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,kBAAkB,EAAE,CAAA;CAAE,CAAC,CAK/G;AAED,MAAM,WAAW,gBAAiB,SAAQ,WAAW;IACnD,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,sDAAsD;IACtD,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,uDAAuD;IACvD,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,kEAAkE;IAClE,WAAW,CAAC,EAAE,OAAO,CAAA;CACtB;AAED,MAAM,WAAW,eAAgB,SAAQ,aAAa;IACpD,2EAA2E;IAC3E,MAAM,EAAE,OAAO,CAAA;IACf,gFAAgF;IAChF,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjC,sEAAsE;IACtE,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,kBAAkB,EAAE,CAAA;CAChC;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,yBAAyB,EAAE,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,eAAe,CAAC,CA6B5H;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,yEAAyE;IACzE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC5F,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,kBAAkB,EAAE,CAAA;CAChC;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,yBAAyB,EAAE,IAAI,GAAE,uBAA4B,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAkC9I"}

package/dist/mcp/index.js

@@ -86,7 +86,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.11",
+  version: "0.5.12",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",
@@ -3737,7 +3737,7 @@ async function syncAll(db, opts = {}) {
 }
 
 // src/lib/cloud-ingest.ts
-import { mkdirSync as mkdirSync2, readFileSync as readFileSync11, renameSync, writeFileSync as writeFileSync2 } from "fs";
+import { existsSync as existsSync12, mkdirSync as mkdirSync2, readFileSync as readFileSync11, renameSync, writeFileSync as writeFileSync2 } from "fs";
 import { dirname, join as join14 } from "path";
 
 // src/lib/sync-maintenance.ts
@@ -3900,30 +3900,35 @@ async function postIngest(cloud, body) {
         const refused = journal.refusal(batch);
         if (refused)
           throw new IngestRefused(refused.status, refused.code, refused.reason);
-        await maintenance.admit(batch);
         const known = await journal.lookupReceipt(cloud, batch);
-        const fresh = journal.stage(batch);
-        const sendFresh = async () => {
-          let response;
-          try {
-            response = await cloud.client.transport.post("/ingest", batch, { retry: false });
-          } catch (error) {
-            const refusal = error instanceof HasnaHttpError2 ? definitiveIngestRefusal(error.status, error.body) : null;
-            if (refusal) {
-              journal.recordRefusal(batch, refusal);
-              throw new IngestRefused(refusal.status, refusal.code, refusal.reason);
+        let payload;
+        if (known && existsSync12(join14(journal.directory, ".authority.json"))) {
+          payload = existsSync12(journal.file(batch.idempotency_key, "intent")) ? journal.accept(batch, known) : known;
+        } else {
+          await maintenance.admit(batch);
+          const fresh = journal.stage(batch);
+          const sendFresh = async () => {
+            let response;
+            try {
+              response = await cloud.client.transport.post("/ingest", batch, { retry: false });
+            } catch (error) {
+              const refusal = error instanceof HasnaHttpError2 ? definitiveIngestRefusal(error.status, error.body) : null;
+              if (refusal) {
+                journal.recordRefusal(batch, refusal);
+                throw new IngestRefused(refusal.status, refusal.code, refusal.reason);
+              }
+              throw error;
             }
-            throw error;
-          }
-          return journal.accept(batch, response);
-        };
-        const payload = known ? journal.accept(batch, known) : fresh ? await sendFresh() : await journal.reconcileCommand(cloud, batch);
+            return journal.accept(batch, response);
+          };
+          payload = known ? journal.accept(batch, known) : fresh ? await sendFresh() : await journal.reconcileCommand(cloud, batch);
+        }
         await verifyJournalAuthority(journal, cloud);
         if (!payload)
           throw new PendingIngestError([batch.idempotency_key]);
-        verifyIngestReceipt(payload, batch);
-        const counts = payload["ingested"];
-        if (!counts || typeof counts !== "object" || Array.isArray(counts) || typeof payload["total"] !== "number" || !Number.isSafeInteger(payload["total"]) || payload["total"] < 0)
+        const verified = verifyIngestReceipt(payload, batch);
+        const counts = verified["ingested"];
+        if (!counts || typeof counts !== "object" || Array.isArray(counts) || typeof verified["total"] !== "number" || !Number.isSafeInteger(verified["total"]) || verified["total"] < 0)
           throw new Error("Invalid ingest receipt");
         let sum = 0;
         for (const [table, count] of Object.entries(counts)) {
@@ -3932,16 +3937,16 @@ async function postIngest(cloud, body) {
           sum += count;
           ingested[table] = (ingested[table] ?? 0) + count;
         }
-        if (sum !== payload["total"])
+        if (sum !== verified["total"])
           throw new Error("Invalid ingest receipt");
         total += sum;
-        const operation = payload["operation_key"];
+        const operation = verified["operation_key"];
         if (operation !== undefined && (typeof operation !== "string" || !/^[a-f0-9]{64}$/.test(operation)))
           throw new Error("Invalid ingest receipt");
         completed.push({
           idempotency_key: batch.idempotency_key,
           ...typeof operation === "string" ? { operation_key: operation } : {},
-          replayed: payload["replayed"] === true
+          replayed: verified["replayed"] === true
         });
       } catch (error) {
         if (error instanceof PendingIngestError || error instanceof JournalMaintenanceError || error instanceof IngestRefused)

package/dist/otel/index.js

@@ -2370,6 +2370,8 @@ async function ingestOtelRows(db, rows) {
 // src/lib/cloud-ingest.ts
 init_database();
 init_pricing();
+import { existsSync as existsSync3, mkdirSync as mkdirSync4, readFileSync as readFileSync3, renameSync, writeFileSync as writeFileSync2 } from "fs";
+import { dirname, join as join11 } from "path";
 
 // src/ingest/collection-outcome.ts
 import { AsyncLocalStorage } from "async_hooks";
@@ -3457,30 +3459,35 @@ async function postIngest(cloud, body) {
         const refused = journal.refusal(batch);
         if (refused)
           throw new IngestRefused(refused.status, refused.code, refused.reason);
-        await maintenance.admit(batch);
         const known = await journal.lookupReceipt(cloud, batch);
-        const fresh = journal.stage(batch);
-        const sendFresh = async () => {
-          let response;
-          try {
-            response = await cloud.client.transport.post("/ingest", batch, { retry: false });
-          } catch (error) {
-            const refusal = error instanceof HasnaHttpError2 ? definitiveIngestRefusal(error.status, error.body) : null;
-            if (refusal) {
-              journal.recordRefusal(batch, refusal);
-              throw new IngestRefused(refusal.status, refusal.code, refusal.reason);
+        let payload;
+        if (known && existsSync3(join11(journal.directory, ".authority.json"))) {
+          payload = existsSync3(journal.file(batch.idempotency_key, "intent")) ? journal.accept(batch, known) : known;
+        } else {
+          await maintenance.admit(batch);
+          const fresh = journal.stage(batch);
+          const sendFresh = async () => {
+            let response;
+            try {
+              response = await cloud.client.transport.post("/ingest", batch, { retry: false });
+            } catch (error) {
+              const refusal = error instanceof HasnaHttpError2 ? definitiveIngestRefusal(error.status, error.body) : null;
+              if (refusal) {
+                journal.recordRefusal(batch, refusal);
+                throw new IngestRefused(refusal.status, refusal.code, refusal.reason);
+              }
+              throw error;
             }
-            throw error;
-          }
-          return journal.accept(batch, response);
-        };
-        const payload = known ? journal.accept(batch, known) : fresh ? await sendFresh() : await journal.reconcileCommand(cloud, batch);
+            return journal.accept(batch, response);
+          };
+          payload = known ? journal.accept(batch, known) : fresh ? await sendFresh() : await journal.reconcileCommand(cloud, batch);
+        }
         await verifyJournalAuthority(journal, cloud);
         if (!payload)
           throw new PendingIngestError([batch.idempotency_key]);
-        verifyIngestReceipt(payload, batch);
-        const counts = payload["ingested"];
-        if (!counts || typeof counts !== "object" || Array.isArray(counts) || typeof payload["total"] !== "number" || !Number.isSafeInteger(payload["total"]) || payload["total"] < 0)
+        const verified = verifyIngestReceipt(payload, batch);
+        const counts = verified["ingested"];
+        if (!counts || typeof counts !== "object" || Array.isArray(counts) || typeof verified["total"] !== "number" || !Number.isSafeInteger(verified["total"]) || verified["total"] < 0)
           throw new Error("Invalid ingest receipt");
         let sum = 0;
         for (const [table, count] of Object.entries(counts)) {
@@ -3489,16 +3496,16 @@ async function postIngest(cloud, body) {
           sum += count;
           ingested[table] = (ingested[table] ?? 0) + count;
         }
-        if (sum !== payload["total"])
+        if (sum !== verified["total"])
           throw new Error("Invalid ingest receipt");
         total += sum;
-        const operation = payload["operation_key"];
+        const operation = verified["operation_key"];
         if (operation !== undefined && (typeof operation !== "string" || !/^[a-f0-9]{64}$/.test(operation)))
           throw new Error("Invalid ingest receipt");
         completed.push({
           idempotency_key: batch.idempotency_key,
           ...typeof operation === "string" ? { operation_key: operation } : {},
-          replayed: payload["replayed"] === true
+          replayed: verified["replayed"] === true
         });
       } catch (error) {
         if (error instanceof PendingIngestError || error instanceof JournalMaintenanceError || error instanceof IngestRefused)
@@ -3523,7 +3530,7 @@ async function pushIngestRows(cloud, scratch) {
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.11",
+  version: "0.5.12",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",

package/dist/server/index.js

@@ -5578,7 +5578,7 @@ function isAuthorizedRequest(req, path) {
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.11",
+  version: "0.5.12",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",

package/dist/server/service-worker.js

@@ -7454,7 +7454,7 @@ import { randomUUID } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.11",
+  version: "0.5.12",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",

package/docs/ingest-journal.md

@@ -107,6 +107,14 @@ an eligible original principal; successful authentication as another principal
 is insufficient. The same-key path checks hosted history before staging or
 sending a new command.
 
+When a scan retries an already retired batch, the verified authority anchor and
+exact hosted receipt are sufficient: no new local intent, capacity admission or
+Trash capture is needed. Existing local records still reconcile normally. An
+empty journal without an anchor establishes one through the ordinary durable
+record path, even if the server already knows the first batch. Failed lookups,
+changed principals and unresolved commands still stop ingestion; they never
+permit a replacement POST.
+
 These are client source contracts. Publication, fleet readiness, actual hosted
 capture/restore and independent release review require their own acceptance
 evidence.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/economy",
-  "version": "0.5.11",
+  "version": "0.5.12",
   "description": "AI coding cost tracker — CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   "repository": {
     "type": "git",