@hasna/economy 0.5.9 → 0.5.10

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.5.10
+
+### Patch Changes
+
+- Retry temporarily unavailable receipt reads within the original deadline without replaying ingestion. Fix macOS installation to verify the release signature using an inline signing requirement.
+
 ## 0.5.9
 
 ### Patch Changes

package/dist/chunks/{index-spwpgdbb.js → index-4v5r3c22.js}

@@ -86,7 +86,7 @@ function comparisonValueChange(left, right) {
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.9",
+  version: "0.5.10",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",

package/dist/chunks/{index-970htsxe.js → index-t777mc83.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   LOCAL_STORAGE_OPT_IN_KEYS
-} from "./index-spwpgdbb.js";
+} from "./index-4v5r3c22.js";
 import {
   assessCostFromDb,
   getIngestState,

package/dist/chunks/{index-92x56q4h.js → index-twn8ncdp.js}

@@ -15,7 +15,7 @@ import {
   requireCurrentBillingDiffSummary,
   requireCurrentRangeStats,
   requireCurrentSavingsReport
-} from "./index-spwpgdbb.js";
+} from "./index-4v5r3c22.js";
 import {
   deleteBudget,
   deleteGoal,

package/dist/chunks/{index-twkdyrw4.js → index-w4r6xs02.js}

@@ -4,7 +4,7 @@ import {
 } from "./index-w3bvv0ns.js";
 import {
   getStore
-} from "./index-92x56q4h.js";
+} from "./index-twn8ncdp.js";
 import {
   formatReportedUsd,
   formatSummaryCoverage,

package/dist/chunks/{menubar-6xtkt17h.js → menubar-zgazgppv.js}

@@ -164,7 +164,7 @@ function createMenubarManager(host = runtime) {
       refuse("BUNDLE_VERSION", "Release version or build is invalid.");
     if (!host.run("/usr/bin/lipo", ["-archs", join(path, "Contents/MacOS", EXECUTABLE)]).split(/\s+/).includes(host.architecture))
       refuse("BUNDLE_ARCHITECTURE", "The app does not support this Mac architecture.");
-    host.run("/usr/bin/codesign", ["--verify", "--deep", "--strict", "-R", `anchor apple generic and certificate leaf[subject.OU] = "${TEAM_ID}" and identifier "${BUNDLE_ID}"`, path]);
+    host.run("/usr/bin/codesign", ["--verify", "--deep", "--strict", "-R", `=anchor apple generic and certificate leaf[subject.OU] = "${TEAM_ID}" and identifier "${BUNDLE_ID}"`, path]);
     host.run("/usr/sbin/spctl", ["--assess", "--type", "execute", path]);
     const after = fingerprintMacApp(path);
     if (before.sha256 !== after.sha256)

package/dist/chunks/{serve-tmv8zgvh.js → serve-bqn5j46v.js}

@@ -5,7 +5,7 @@ import {
 } from "./index-w3bvv0ns.js";
 import {
   syncAll
-} from "./index-970htsxe.js";
+} from "./index-t777mc83.js";
 import {
   buildBrief,
   packageMetadata,
@@ -16,7 +16,7 @@ import {
   queryProjectDetail,
   queryRangeStats,
   querySavingsSummary
-} from "./index-spwpgdbb.js";
+} from "./index-4v5r3c22.js";
 import {
   AGENTS,
   INGEST_SCHEMA_SQL,

package/dist/chunks/{tui-j8brj3wf.js → tui-5s5w6yjd.js}

@@ -6,10 +6,10 @@ import {
   printStatusLine,
   printWaybarJson,
   runTui
-} from "./index-twkdyrw4.js";
+} from "./index-w4r6xs02.js";
 import"./index-w3bvv0ns.js";
-import"./index-92x56q4h.js";
-import"./index-spwpgdbb.js";
+import"./index-twn8ncdp.js";
+import"./index-4v5r3c22.js";
 import"./index-zgvmrqyc.js";
 import"./index-p35cyhc4.js";
 export {

package/dist/chunks/{watch-ksn2mezm.js → watch-7pf8xj1q.js}

@@ -2,12 +2,12 @@
 import {
   agentPaths,
   syncAll
-} from "./index-970htsxe.js";
+} from "./index-t777mc83.js";
 import {
   getStore,
   isCloudStore
-} from "./index-92x56q4h.js";
-import"./index-spwpgdbb.js";
+} from "./index-twn8ncdp.js";
+import"./index-4v5r3c22.js";
 import {
   formatSummaryValue
 } from "./index-zgvmrqyc.js";

package/dist/cli/index.js

@@ -8,16 +8,16 @@ import {
 import {
   buildStatusLine,
   gatherStatusData
-} from "../chunks/index-twkdyrw4.js";
+} from "../chunks/index-w4r6xs02.js";
 import"../chunks/index-w3bvv0ns.js";
 import {
   agentPaths,
   syncAll
-} from "../chunks/index-970htsxe.js";
+} from "../chunks/index-t777mc83.js";
 import {
   getStore,
   isCloudStore
-} from "../chunks/index-92x56q4h.js";
+} from "../chunks/index-twn8ncdp.js";
 import {
   billingDriftCheck,
   comparisonValueChange,
@@ -25,7 +25,7 @@ import {
   economyTransportReport,
   formatComparisonValue,
   packageMetadata
-} from "../chunks/index-spwpgdbb.js";
+} from "../chunks/index-4v5r3c22.js";
 import {
   AGENTS,
   MAX_INGEST_BYTES,
@@ -1359,23 +1359,23 @@ function registerExtendedCommands(program) {
     console.log();
   });
   program.command("tui").description("Terminal status dashboard (Linux/SSH friendly)").option("--watch", "Live refresh").option("--interval <seconds>", "Refresh interval", "30").action(async (opts) => {
-    const { runTui } = await import("../chunks/tui-j8brj3wf.js");
+    const { runTui } = await import("../chunks/tui-5s5w6yjd.js");
     await runTui({
       watch: Boolean(opts.watch),
       interval: Number(opts.interval ?? 30)
     });
   });
   program.command("waybar").description("Print waybar-compatible JSON status line").action(async () => {
-    const { printWaybarJson } = await import("../chunks/tui-j8brj3wf.js");
+    const { printWaybarJson } = await import("../chunks/tui-5s5w6yjd.js");
     await printWaybarJson();
   });
   const barCmd = program.command("bar").description("Status bar helpers (Linux)");
   barCmd.command("tui").description("Alias for economy tui").option("--watch", "Live refresh").action(async (opts) => {
-    const { runTui } = await import("../chunks/tui-j8brj3wf.js");
+    const { runTui } = await import("../chunks/tui-5s5w6yjd.js");
     await runTui({ watch: Boolean(opts.watch) });
   });
   barCmd.command("waybar").description("Alias for economy waybar").action(async () => {
-    const { printWaybarJson } = await import("../chunks/tui-j8brj3wf.js");
+    const { printWaybarJson } = await import("../chunks/tui-5s5w6yjd.js");
     await printWaybarJson();
   });
   program.command("estimate").description("Estimate cost for token counts").requiredOption("--model <model>", "Model name").option("--input <n>", "Input tokens", "0").option("--output <n>", "Output tokens", "0").action(async (opts) => {
@@ -1439,6 +1439,7 @@ import { z as z2 } from "zod";
 import { constants, closeSync, fsyncSync, fstatSync, lstatSync, mkdirSync, openSync, readFileSync, opendirSync, realpathSync, writeFileSync } from "fs";
 import { createHash } from "crypto";
 import { join as join2, resolve } from "path";
+import { HasnaHttpError } from "@hasna/contracts/client";
 var MAX_COMMANDS = 1000;
 var MAX_BYTES = 64 * 1024 * 1024;
 var RECEIPT_RESERVE = 4096;
@@ -1550,15 +1551,55 @@ function sameReceipt(left, right) {
   return stableJson(meaning(left)) === stableJson(meaning(right));
 }
 async function lookupJournalReceipt(cloud, key, bodyHash, timeoutMs = 1e4) {
+  if (!Number.isFinite(timeoutMs) || timeoutMs <= 0)
+    throw new RangeError("Receipt lookup requires a positive finite timeout");
   const query = new URLSearchParams({ idempotency_key: key, body_hash: bodyHash });
-  const raw = unwrap(await cloud.client.transport.get(`/ingest/receipts?${query}`, { retry: false, timeoutMs }));
-  if (!raw || raw.body_hash !== bodyHash)
-    throw new Error("Invalid reconciliation response");
-  if (raw.status === "absent")
-    return null;
-  if (raw.status !== "committed")
-    throw new Error("Invalid reconciliation response");
-  return raw.receipt;
+  const deadline = performance.now() + timeoutMs;
+  let failures = 0, lastError;
+  for (;; ) {
+    const remaining = Math.floor(deadline - performance.now());
+    if (remaining <= 0)
+      throw lastError ?? new Error("Receipt lookup deadline expired");
+    let response;
+    try {
+      const abort = new AbortController;
+      let timer;
+      try {
+        const expired = new Promise((_, reject) => {
+          timer = setTimeout(() => {
+            abort.abort();
+            reject(new Error("Receipt lookup deadline expired"));
+          }, remaining);
+        });
+        response = await Promise.race([
+          cloud.client.transport.get(`/ingest/receipts?${query}`, { retry: false, timeoutMs: remaining, signal: abort.signal }),
+          expired
+        ]);
+      } finally {
+        clearTimeout(timer);
+      }
+    } catch (error) {
+      if (!(error instanceof HasnaHttpError) || error.status !== 503)
+        throw error;
+      lastError = error;
+      failures++;
+      const delay = 100 * failures;
+      if (failures >= 3 || deadline - performance.now() <= delay)
+        throw error;
+      await new Promise((resolve2) => setTimeout(resolve2, delay));
+      continue;
+    }
+    if (performance.now() >= deadline)
+      throw new Error("Receipt lookup deadline expired");
+    const raw = unwrap(response);
+    if (!raw || raw.body_hash !== bodyHash)
+      throw new Error("Invalid reconciliation response");
+    if (raw.status === "absent")
+      return null;
+    if (raw.status !== "committed")
+      throw new Error("Invalid reconciliation response");
+    return raw.receipt;
+  }
 }
 
 class IngestJournal {
@@ -2415,7 +2456,7 @@ class IngestBatchFailure extends Error {
 }
 
 // src/lib/cloud-ingest.ts
-import { HasnaHttpError } from "@hasna/contracts/client";
+import { HasnaHttpError as HasnaHttpError2 } from "@hasna/contracts/client";
 var CLOUD_INGEST_TABLES = ["requests", "sessions", "billing_daily", "usage_snapshots", "subscriptions", "scan_receipts"];
 function getIngestCachePath() {
   if (process.env["HASNA_ECONOMY_INGEST_CACHE"])
@@ -2498,7 +2539,7 @@ async function postIngest(cloud, body) {
           try {
             response = await cloud.client.transport.post("/ingest", batch, { retry: false });
           } catch (error) {
-            const refusal = error instanceof HasnaHttpError ? definitiveIngestRefusal(error.status, error.body) : null;
+            const refusal = error instanceof HasnaHttpError2 ? definitiveIngestRefusal(error.status, error.body) : null;
             if (refusal) {
               journal.recordRefusal(batch, refusal);
               throw new IngestRefused(refusal.status, refusal.code, refusal.reason);
@@ -2536,7 +2577,7 @@ async function postIngest(cloud, body) {
       } catch (error) {
         if (error instanceof PendingIngestError || error instanceof JournalMaintenanceError || error instanceof IngestRefused)
           throw error;
-        if (error instanceof HasnaHttpError && error.status >= 400 && error.status < 500 && error.status !== 408) {
+        if (error instanceof HasnaHttpError2 && error.status >= 400 && error.status < 500 && error.status !== 408) {
           const body2 = error.body;
           throw new IngestRefused(error.status, body2?.expected === "legacy_aggregate_requires_migration" ? "legacy_aggregate_requires_migration" : "ingest_refused");
         }
@@ -2657,7 +2698,7 @@ async function autoSyncDue(db, env = process.env) {
 }
 
 // src/lib/contracts-client/transport.ts
-import { HasnaHttpError as HasnaHttpError2 } from "@hasna/contracts/client";
+import { HasnaHttpError as HasnaHttpError3 } from "@hasna/contracts/client";
 
 // src/cli/index.ts
 var program = new Command;
@@ -3202,7 +3243,7 @@ program.command("accounts [period]").description("List account usage by email ad
   console.log();
 });
 program.command("watch").description("Live stream of incoming costs").option("--interval <seconds>", "Poll interval in seconds", "10").option("--daemon", "Watch agent data directories and sync on change").option("--agent <agent>", `Filter by agent (${AGENTS.join("|")})`).option("--notify <amount>", "Fire macOS notification when cumulative cost crosses this USD threshold").action(async (opts) => {
-  const { watchCosts } = await import("../chunks/watch-ksn2mezm.js");
+  const { watchCosts } = await import("../chunks/watch-7pf8xj1q.js");
   await watchCosts({
     interval: parsePositiveCliInteger(opts.interval ?? "10", "--interval"),
     daemon: Boolean(opts.daemon),
@@ -3438,7 +3479,7 @@ pricingCmd.command("remove <model>").description("Remove pricing for a model").a
 });
 program.command("serve").description("Start the REST API server").option("-p, --port <port>", "Port", "3456").action(async (opts) => {
   const port = parseCliPort(opts.port ?? "3456", "--port");
-  const { startServer } = await import("../chunks/serve-tmv8zgvh.js");
+  const { startServer } = await import("../chunks/serve-bqn5j46v.js");
   startServer(port);
 });
 program.command("mcp").description("Show MCP server install commands").option("--claude", "Install into Claude Code").option("--codex", "Install into Codex").option("--gemini", "Install into Gemini CLI").option("--all", "Install into all agents").action(async (opts) => {
@@ -3662,23 +3703,23 @@ program.command("efficiency").description("Show output/input token ratio per mod
 });
 var menubarCmd = program.command("menubar").description("Manage the signed HasnaEconomy macOS menu-bar app");
 menubarCmd.command("inspect").description("Verify a selected release bundle and report its content hash as JSON").requiredOption("--app <absolute-path>", "Path to the signed and notarized HasnaEconomy.app artifact").action(async (opts) => {
-  const { menubarInspect } = await import("../chunks/menubar-6xtkt17h.js");
+  const { menubarInspect } = await import("../chunks/menubar-zgazgppv.js");
   menubarInspect(opts);
 });
 menubarCmd.command("install").description("Install an explicitly selected release; refuse an occupied destination").requiredOption("--app <absolute-path>", "Path to the signed and notarized HasnaEconomy.app artifact").requiredOption("--app-version <version>", "Expected reviewed release version").requiredOption("--sha256 <hash>", "Expected hasna-economy-app-tree-v1 SHA-256 from the release receipt").action(async (opts) => {
-  const { menubarInstall } = await import("../chunks/menubar-6xtkt17h.js");
+  const { menubarInstall } = await import("../chunks/menubar-zgazgppv.js");
   await menubarInstall(opts);
 });
 menubarCmd.command("uninstall").description("Capture the stopped HasnaEconomy app through Trash; preserve its recovery receipt").action(async () => {
-  const { menubarUninstall } = await import("../chunks/menubar-6xtkt17h.js");
+  const { menubarUninstall } = await import("../chunks/menubar-zgazgppv.js");
   menubarUninstall();
 });
 menubarCmd.command("start").description("Verify HasnaEconomy and request launch").action(async () => {
-  const { menubarStart } = await import("../chunks/menubar-6xtkt17h.js");
+  const { menubarStart } = await import("../chunks/menubar-zgazgppv.js");
   menubarStart();
 });
 menubarCmd.command("stop").description("Explicitly request that the installed HasnaEconomy app quit").action(async () => {
-  const { menubarStop } = await import("../chunks/menubar-6xtkt17h.js");
+  const { menubarStop } = await import("../chunks/menubar-zgazgppv.js");
   menubarStop();
 });
 var goalCmd = program.command("goal").description("Manage spending goals");
@@ -3859,7 +3900,7 @@ registerJournalCommands(program);
 registerFleetCommands(program);
 registerEventsCommands(program, { source: "economy" });
 function reportCliError(err) {
-  if (err instanceof HasnaHttpError2) {
+  if (err instanceof HasnaHttpError3) {
     if (err.status === 404) {
       fail(`economy: the cloud API has no endpoint for this command (${err.method} ${err.path} -> 404). ` + `The economy API server is likely running an older build \u2014 it needs a redeploy of the current version.`);
     }

package/dist/index.js

@@ -111,7 +111,7 @@ import { randomUUID } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.9",
+  version: "0.5.10",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",
@@ -1760,6 +1760,7 @@ import { z as z2 } from "zod";
 import { constants, closeSync, fsyncSync, fstatSync, lstatSync, mkdirSync, openSync, readFileSync, opendirSync, realpathSync, writeFileSync } from "fs";
 import { createHash } from "crypto";
 import { join, resolve } from "path";
+import { HasnaHttpError } from "@hasna/contracts/client";
 var MAX_COMMANDS = 1000;
 var MAX_BYTES = 64 * 1024 * 1024;
 var RECEIPT_RESERVE = 4096;
@@ -1871,15 +1872,55 @@ function sameReceipt(left, right) {
   return stableJson(meaning(left)) === stableJson(meaning(right));
 }
 async function lookupJournalReceipt(cloud, key, bodyHash, timeoutMs = 1e4) {
+  if (!Number.isFinite(timeoutMs) || timeoutMs <= 0)
+    throw new RangeError("Receipt lookup requires a positive finite timeout");
   const query = new URLSearchParams({ idempotency_key: key, body_hash: bodyHash });
-  const raw = unwrap(await cloud.client.transport.get(`/ingest/receipts?${query}`, { retry: false, timeoutMs }));
-  if (!raw || raw.body_hash !== bodyHash)
-    throw new Error("Invalid reconciliation response");
-  if (raw.status === "absent")
-    return null;
-  if (raw.status !== "committed")
-    throw new Error("Invalid reconciliation response");
-  return raw.receipt;
+  const deadline = performance.now() + timeoutMs;
+  let failures = 0, lastError;
+  for (;; ) {
+    const remaining = Math.floor(deadline - performance.now());
+    if (remaining <= 0)
+      throw lastError ?? new Error("Receipt lookup deadline expired");
+    let response;
+    try {
+      const abort = new AbortController;
+      let timer;
+      try {
+        const expired = new Promise((_, reject) => {
+          timer = setTimeout(() => {
+            abort.abort();
+            reject(new Error("Receipt lookup deadline expired"));
+          }, remaining);
+        });
+        response = await Promise.race([
+          cloud.client.transport.get(`/ingest/receipts?${query}`, { retry: false, timeoutMs: remaining, signal: abort.signal }),
+          expired
+        ]);
+      } finally {
+        clearTimeout(timer);
+      }
+    } catch (error) {
+      if (!(error instanceof HasnaHttpError) || error.status !== 503)
+        throw error;
+      lastError = error;
+      failures++;
+      const delay = 100 * failures;
+      if (failures >= 3 || deadline - performance.now() <= delay)
+        throw error;
+      await new Promise((resolve2) => setTimeout(resolve2, delay));
+      continue;
+    }
+    if (performance.now() >= deadline)
+      throw new Error("Receipt lookup deadline expired");
+    const raw = unwrap(response);
+    if (!raw || raw.body_hash !== bodyHash)
+      throw new Error("Invalid reconciliation response");
+    if (raw.status === "absent")
+      return null;
+    if (raw.status !== "committed")
+      throw new Error("Invalid reconciliation response");
+    return raw.receipt;
+  }
 }
 
 class IngestJournal {

package/dist/lib/ingest-journal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ingest-journal.d.ts","sourceRoot":"","sources":["../../src/lib/ingest-journal.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAEnE,eAAO,MAAM,YAAY,OAAK,CAAA;AAC9B,eAAO,MAAM,SAAS,QAAa,CAAA;AACnC,eAAO,MAAM,eAAe,OAAK,CAAA;AACjC,eAAO,MAAM,mBAAmB,QAAM,CAAA;AAEtC,qBAAa,kBAAmB,SAAQ,KAAK;IAEhC,QAAQ,CAAC,YAAY,EAAC,MAAM,EAAE;IAD1C,QAAQ,CAAC,IAAI,oCAAiC;gBACzB,YAAY,EAAC,MAAM,EAAE;CAC1C;AACD,MAAM,WAAW,MAAM;IAAE,OAAO,EAAC,CAAC,CAAC;IAAA,MAAM,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAC;IAAA,OAAO,EAAC,WAAW,CAAA;CAAC;AACtF,MAAM,WAAW,aAAa;IAC7B,MAAM,EAAC,GAAG,GAAC,GAAG,GAAC,GAAG,GAAC,GAAG,CAAA;IACtB,IAAI,EAAC,gBAAgB,GAAC,qCAAqC,CAAA;IAC3D,MAAM,EAAC,gBAAgB,GAAC,iBAAiB,GAAC,kBAAkB,GAAC,sBAAsB,GAAC,qCAAqC,CAAA;CACzH;AACD,wBAAgB,uBAAuB,CAAC,MAAM,EAAC,MAAM,EAAC,IAAI,EAAC,OAAO,GAAE,aAAa,GAAC,IAAI,CAMrF;AACD,wBAAgB,oBAAoB,IAAG,MAAM,CAE5C;AAMD,wBAAgB,eAAe,CAAC,IAAI,EAAC,MAAM,GAAE,IAAI,CAIhD;AACD,wBAAgB,QAAQ,CAAC,IAAI,EAAC,MAAM,EAAC,GAAG,EAAC,MAAM,GAAE,OAAO,CAOvD;AACD,wBAAgB,WAAW,CAAC,IAAI,EAAC,MAAM,EAAC,KAAK,EAAC,OAAO,GAAE,OAAO,CAS7D;AACD,wBAAgB,MAAM,CAAC,GAAG,EAAC,OAAO,GAAE,GAAG,CAAyE;AAChH,wBAAgB,mBAAmB,CAAC,GAAG,EAAC,OAAO,EAAC,OAAO,EAAC,WAAW,GAAE,GAAG,CAiBvE;AACD,wBAAgB,WAAW,CAAC,IAAI,EAAC,OAAO,EAAC,KAAK,EAAC,OAAO,GAAE,OAAO,CAG9D;AACD,wBAAsB,oBAAoB,CAAC,KAAK,EAAC,yBAAyB,EAAC,GAAG,EAAC,MAAM,EAAC,QAAQ,EAAC,MAAM,EAAC,SAAS,SAAO,GAAE,OAAO,CAAC,OAAO,GAAC,IAAI,CAAC,CAO5I;AACD;kFACkF;AAClF,qBAAa,aAAa;IACzB,QAAQ,CAAC,SAAS,EAAC,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAC,MAAM,CAAA;IACtB,OAAO,CAAC,cAAc,CAAE;IACxB,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAkB;gBACpC,KAAK,EAAC,yBAAyB,EAAC,IAAI,SAAuB;IAGvE,KAAK,IAAG,MAAM,EAAE;IAkBhB,IAAI,CAAC,GAAG,EAAC,MAAM,EAAC,IAAI,EAAC,QAAQ,GAAC,SAAS,GAAC,SAAS,GAAE,MAAM;IACzD,MAAM,CAAC,IAAI,EAAC,MAAM,GAAE,MAAM;IAO1B,MAAM,IAAG;QAAC,MAAM,EAAC,MAAM,CAAC;QAAA,QAAQ,EAAC,MAAM,CAAC;QAAA,SAAS,EAAC,MAAM,CAAC;QAAA,QAAQ,EAAC,MAAM,CAAC;QAAA,OAAO,EAAC,MAAM,CAAC;QAAA,KAAK,EAAC,MAAM,CAAC;QAAA,cAAc,EAAC,MAAM,CAAA;KAAC;IAU3H,QAAQ,CAAC,OAAO,EAAC,WAAW,EAAC,MAAM;gBAVlB,MAAM;kBAAU,MAAM;mBAAW,MAAM;kBAAU,MAAM;iBAAS,MAAM;eAAO,MAAM;wBAAgB,MAAM;KAUzE,GAAE,OAAO;IAS1D,OAAO,CAAC,OAAO,EAAC,WAAW,GAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC;IAMnE,KAAK,CAAC,OAAO,EAAC,WAAW,GAAE,OAAO;IAWlC,MAAM,CAAC,OAAO,EAAC,WAAW,EAAC,GAAG,EAAC,OAAO,GAAE,GAAG;IAe3C;oFACgF;IAChF,aAAa,CAAC,OAAO,EAAC,WAAW,EAAC,OAAO,EAAC,aAAa,GAAE,IAAI;IAa7D,OAAO,CAAC,OAAO,EAAC,WAAW,GAAE,aAAa,GAAC,IAAI;IAUzC,gBAAgB,CAAC,KAAK,EAAC,yBAAyB,EAAC,OAAO,EAAC,WAAW,EAAC,SAAS,SAAO,GAAE,OAAO,CAAC,GAAG,GAAC,IAAI,CAAC;IAI9G,WAAW,CAAC,KAAK,EAAC,yBAAyB,GAAE,IAAI;IAC3C,aAAa,CAAC,KAAK,EAAC,yBAAyB,EAAC,OAAO,EAAC,WAAW,EAAC,SAAS,SAAO,GAAE,OAAO,CAAC,UAAU,CAAC,OAAO,mBAAmB,CAAC,GAAC,IAAI,CAAC;IAKxI,gBAAgB,CAAC,KAAK,EAAC,yBAAyB,GAAE,OAAO,CAAC,IAAI,CAAC;CAiBrE"}
+{"version":3,"file":"ingest-journal.d.ts","sourceRoot":"","sources":["../../src/lib/ingest-journal.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAEnE,eAAO,MAAM,YAAY,OAAK,CAAA;AAC9B,eAAO,MAAM,SAAS,QAAa,CAAA;AACnC,eAAO,MAAM,eAAe,OAAK,CAAA;AACjC,eAAO,MAAM,mBAAmB,QAAM,CAAA;AAEtC,qBAAa,kBAAmB,SAAQ,KAAK;IAEhC,QAAQ,CAAC,YAAY,EAAC,MAAM,EAAE;IAD1C,QAAQ,CAAC,IAAI,oCAAiC;gBACzB,YAAY,EAAC,MAAM,EAAE;CAC1C;AACD,MAAM,WAAW,MAAM;IAAE,OAAO,EAAC,CAAC,CAAC;IAAA,MAAM,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAC;IAAA,OAAO,EAAC,WAAW,CAAA;CAAC;AACtF,MAAM,WAAW,aAAa;IAC7B,MAAM,EAAC,GAAG,GAAC,GAAG,GAAC,GAAG,GAAC,GAAG,CAAA;IACtB,IAAI,EAAC,gBAAgB,GAAC,qCAAqC,CAAA;IAC3D,MAAM,EAAC,gBAAgB,GAAC,iBAAiB,GAAC,kBAAkB,GAAC,sBAAsB,GAAC,qCAAqC,CAAA;CACzH;AACD,wBAAgB,uBAAuB,CAAC,MAAM,EAAC,MAAM,EAAC,IAAI,EAAC,OAAO,GAAE,aAAa,GAAC,IAAI,CAMrF;AACD,wBAAgB,oBAAoB,IAAG,MAAM,CAE5C;AAMD,wBAAgB,eAAe,CAAC,IAAI,EAAC,MAAM,GAAE,IAAI,CAIhD;AACD,wBAAgB,QAAQ,CAAC,IAAI,EAAC,MAAM,EAAC,GAAG,EAAC,MAAM,GAAE,OAAO,CAOvD;AACD,wBAAgB,WAAW,CAAC,IAAI,EAAC,MAAM,EAAC,KAAK,EAAC,OAAO,GAAE,OAAO,CAS7D;AACD,wBAAgB,MAAM,CAAC,GAAG,EAAC,OAAO,GAAE,GAAG,CAAyE;AAChH,wBAAgB,mBAAmB,CAAC,GAAG,EAAC,OAAO,EAAC,OAAO,EAAC,WAAW,GAAE,GAAG,CAiBvE;AACD,wBAAgB,WAAW,CAAC,IAAI,EAAC,OAAO,EAAC,KAAK,EAAC,OAAO,GAAE,OAAO,CAG9D;AACD,wBAAsB,oBAAoB,CAAC,KAAK,EAAC,yBAAyB,EAAC,GAAG,EAAC,MAAM,EAAC,QAAQ,EAAC,MAAM,EAAC,SAAS,SAAO,GAAE,OAAO,CAAC,OAAO,GAAC,IAAI,CAAC,CAuC5I;AACD;kFACkF;AAClF,qBAAa,aAAa;IACzB,QAAQ,CAAC,SAAS,EAAC,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAC,MAAM,CAAA;IACtB,OAAO,CAAC,cAAc,CAAE;IACxB,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAkB;gBACpC,KAAK,EAAC,yBAAyB,EAAC,IAAI,SAAuB;IAGvE,KAAK,IAAG,MAAM,EAAE;IAkBhB,IAAI,CAAC,GAAG,EAAC,MAAM,EAAC,IAAI,EAAC,QAAQ,GAAC,SAAS,GAAC,SAAS,GAAE,MAAM;IACzD,MAAM,CAAC,IAAI,EAAC,MAAM,GAAE,MAAM;IAO1B,MAAM,IAAG;QAAC,MAAM,EAAC,MAAM,CAAC;QAAA,QAAQ,EAAC,MAAM,CAAC;QAAA,SAAS,EAAC,MAAM,CAAC;QAAA,QAAQ,EAAC,MAAM,CAAC;QAAA,OAAO,EAAC,MAAM,CAAC;QAAA,KAAK,EAAC,MAAM,CAAC;QAAA,cAAc,EAAC,MAAM,CAAA;KAAC;IAU3H,QAAQ,CAAC,OAAO,EAAC,WAAW,EAAC,MAAM;gBAVlB,MAAM;kBAAU,MAAM;mBAAW,MAAM;kBAAU,MAAM;iBAAS,MAAM;eAAO,MAAM;wBAAgB,MAAM;KAUzE,GAAE,OAAO;IAS1D,OAAO,CAAC,OAAO,EAAC,WAAW,GAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC;IAMnE,KAAK,CAAC,OAAO,EAAC,WAAW,GAAE,OAAO;IAWlC,MAAM,CAAC,OAAO,EAAC,WAAW,EAAC,GAAG,EAAC,OAAO,GAAE,GAAG;IAe3C;oFACgF;IAChF,aAAa,CAAC,OAAO,EAAC,WAAW,EAAC,OAAO,EAAC,aAAa,GAAE,IAAI;IAa7D,OAAO,CAAC,OAAO,EAAC,WAAW,GAAE,aAAa,GAAC,IAAI;IAUzC,gBAAgB,CAAC,KAAK,EAAC,yBAAyB,EAAC,OAAO,EAAC,WAAW,EAAC,SAAS,SAAO,GAAE,OAAO,CAAC,GAAG,GAAC,IAAI,CAAC;IAI9G,WAAW,CAAC,KAAK,EAAC,yBAAyB,GAAE,IAAI;IAC3C,aAAa,CAAC,KAAK,EAAC,yBAAyB,EAAC,OAAO,EAAC,WAAW,EAAC,SAAS,SAAO,GAAE,OAAO,CAAC,UAAU,CAAC,OAAO,mBAAmB,CAAC,GAAC,IAAI,CAAC;IAKxI,gBAAgB,CAAC,KAAK,EAAC,yBAAyB,GAAE,OAAO,CAAC,IAAI,CAAC;CAiBrE"}

package/dist/mcp/index.js

@@ -86,7 +86,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.9",
+  version: "0.5.10",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",
@@ -758,6 +758,7 @@ import { z as z3 } from "zod";
 import { constants, closeSync, fsyncSync, fstatSync, lstatSync, mkdirSync, openSync, readFileSync, opendirSync, realpathSync, writeFileSync } from "fs";
 import { createHash } from "crypto";
 import { join as join2, resolve } from "path";
+import { HasnaHttpError } from "@hasna/contracts/client";
 var MAX_COMMANDS = 1000;
 var MAX_BYTES = 64 * 1024 * 1024;
 var RECEIPT_RESERVE = 4096;
@@ -869,15 +870,55 @@ function sameReceipt(left, right) {
   return stableJson(meaning(left)) === stableJson(meaning(right));
 }
 async function lookupJournalReceipt(cloud, key, bodyHash, timeoutMs = 1e4) {
+  if (!Number.isFinite(timeoutMs) || timeoutMs <= 0)
+    throw new RangeError("Receipt lookup requires a positive finite timeout");
   const query = new URLSearchParams({ idempotency_key: key, body_hash: bodyHash });
-  const raw = unwrap(await cloud.client.transport.get(`/ingest/receipts?${query}`, { retry: false, timeoutMs }));
-  if (!raw || raw.body_hash !== bodyHash)
-    throw new Error("Invalid reconciliation response");
-  if (raw.status === "absent")
-    return null;
-  if (raw.status !== "committed")
-    throw new Error("Invalid reconciliation response");
-  return raw.receipt;
+  const deadline = performance.now() + timeoutMs;
+  let failures = 0, lastError;
+  for (;; ) {
+    const remaining = Math.floor(deadline - performance.now());
+    if (remaining <= 0)
+      throw lastError ?? new Error("Receipt lookup deadline expired");
+    let response;
+    try {
+      const abort = new AbortController;
+      let timer;
+      try {
+        const expired = new Promise((_, reject) => {
+          timer = setTimeout(() => {
+            abort.abort();
+            reject(new Error("Receipt lookup deadline expired"));
+          }, remaining);
+        });
+        response = await Promise.race([
+          cloud.client.transport.get(`/ingest/receipts?${query}`, { retry: false, timeoutMs: remaining, signal: abort.signal }),
+          expired
+        ]);
+      } finally {
+        clearTimeout(timer);
+      }
+    } catch (error) {
+      if (!(error instanceof HasnaHttpError) || error.status !== 503)
+        throw error;
+      lastError = error;
+      failures++;
+      const delay = 100 * failures;
+      if (failures >= 3 || deadline - performance.now() <= delay)
+        throw error;
+      await new Promise((resolve2) => setTimeout(resolve2, delay));
+      continue;
+    }
+    if (performance.now() >= deadline)
+      throw new Error("Receipt lookup deadline expired");
+    const raw = unwrap(response);
+    if (!raw || raw.body_hash !== bodyHash)
+      throw new Error("Invalid reconciliation response");
+    if (raw.status === "absent")
+      return null;
+    if (raw.status !== "committed")
+      throw new Error("Invalid reconciliation response");
+    return raw.receipt;
+  }
 }
 
 class IngestJournal {
@@ -3784,7 +3825,7 @@ class IngestBatchFailure extends Error {
 }
 
 // src/lib/cloud-ingest.ts
-import { HasnaHttpError } from "@hasna/contracts/client";
+import { HasnaHttpError as HasnaHttpError2 } from "@hasna/contracts/client";
 var CLOUD_INGEST_TABLES = ["requests", "sessions", "billing_daily", "usage_snapshots", "subscriptions", "scan_receipts"];
 function getIngestCachePath() {
   if (process.env["HASNA_ECONOMY_INGEST_CACHE"])
@@ -3867,7 +3908,7 @@ async function postIngest(cloud, body) {
           try {
             response = await cloud.client.transport.post("/ingest", batch, { retry: false });
           } catch (error) {
-            const refusal = error instanceof HasnaHttpError ? definitiveIngestRefusal(error.status, error.body) : null;
+            const refusal = error instanceof HasnaHttpError2 ? definitiveIngestRefusal(error.status, error.body) : null;
             if (refusal) {
               journal.recordRefusal(batch, refusal);
               throw new IngestRefused(refusal.status, refusal.code, refusal.reason);
@@ -3905,7 +3946,7 @@ async function postIngest(cloud, body) {
       } catch (error) {
         if (error instanceof PendingIngestError || error instanceof JournalMaintenanceError || error instanceof IngestRefused)
           throw error;
-        if (error instanceof HasnaHttpError && error.status >= 400 && error.status < 500 && error.status !== 408) {
+        if (error instanceof HasnaHttpError2 && error.status >= 400 && error.status < 500 && error.status !== 408) {
           const body2 = error.body;
           throw new IngestRefused(error.status, body2?.expected === "legacy_aggregate_requires_migration" ? "legacy_aggregate_requires_migration" : "ingest_refused");
         }

package/dist/otel/index.js

@@ -2696,6 +2696,7 @@ init_database();
 import { constants, closeSync, fsyncSync, fstatSync, lstatSync, mkdirSync as mkdirSync3, openSync, readFileSync, opendirSync, realpathSync, writeFileSync } from "fs";
 import { createHash as createHash4 } from "crypto";
 import { join as join8, resolve as resolve2 } from "path";
+import { HasnaHttpError } from "@hasna/contracts/client";
 var MAX_COMMANDS = 1000;
 var MAX_BYTES = 64 * 1024 * 1024;
 var RECEIPT_RESERVE = 4096;
@@ -2807,15 +2808,55 @@ function sameReceipt(left, right) {
   return stableJson(meaning(left)) === stableJson(meaning(right));
 }
 async function lookupJournalReceipt(cloud, key, bodyHash, timeoutMs = 1e4) {
+  if (!Number.isFinite(timeoutMs) || timeoutMs <= 0)
+    throw new RangeError("Receipt lookup requires a positive finite timeout");
   const query = new URLSearchParams({ idempotency_key: key, body_hash: bodyHash });
-  const raw = unwrap(await cloud.client.transport.get(`/ingest/receipts?${query}`, { retry: false, timeoutMs }));
-  if (!raw || raw.body_hash !== bodyHash)
-    throw new Error("Invalid reconciliation response");
-  if (raw.status === "absent")
-    return null;
-  if (raw.status !== "committed")
-    throw new Error("Invalid reconciliation response");
-  return raw.receipt;
+  const deadline = performance.now() + timeoutMs;
+  let failures = 0, lastError;
+  for (;; ) {
+    const remaining = Math.floor(deadline - performance.now());
+    if (remaining <= 0)
+      throw lastError ?? new Error("Receipt lookup deadline expired");
+    let response;
+    try {
+      const abort = new AbortController;
+      let timer;
+      try {
+        const expired = new Promise((_, reject) => {
+          timer = setTimeout(() => {
+            abort.abort();
+            reject(new Error("Receipt lookup deadline expired"));
+          }, remaining);
+        });
+        response = await Promise.race([
+          cloud.client.transport.get(`/ingest/receipts?${query}`, { retry: false, timeoutMs: remaining, signal: abort.signal }),
+          expired
+        ]);
+      } finally {
+        clearTimeout(timer);
+      }
+    } catch (error) {
+      if (!(error instanceof HasnaHttpError) || error.status !== 503)
+        throw error;
+      lastError = error;
+      failures++;
+      const delay = 100 * failures;
+      if (failures >= 3 || deadline - performance.now() <= delay)
+        throw error;
+      await new Promise((resolve3) => setTimeout(resolve3, delay));
+      continue;
+    }
+    if (performance.now() >= deadline)
+      throw new Error("Receipt lookup deadline expired");
+    const raw = unwrap(response);
+    if (!raw || raw.body_hash !== bodyHash)
+      throw new Error("Invalid reconciliation response");
+    if (raw.status === "absent")
+      return null;
+    if (raw.status !== "committed")
+      throw new Error("Invalid reconciliation response");
+    return raw.receipt;
+  }
 }
 
 class IngestJournal {
@@ -3377,7 +3418,7 @@ var ingestJournalOperationSchema = z3.discriminatedUnion("action", [
 ]);
 
 // src/lib/cloud-ingest.ts
-import { HasnaHttpError } from "@hasna/contracts/client";
+import { HasnaHttpError as HasnaHttpError2 } from "@hasna/contracts/client";
 var CLOUD_INGEST_TABLES = ["requests", "sessions", "billing_daily", "usage_snapshots", "subscriptions", "scan_receipts"];
 function exportIngestRows(db) {
   const body = {};
@@ -3424,7 +3465,7 @@ async function postIngest(cloud, body) {
           try {
             response = await cloud.client.transport.post("/ingest", batch, { retry: false });
           } catch (error) {
-            const refusal = error instanceof HasnaHttpError ? definitiveIngestRefusal(error.status, error.body) : null;
+            const refusal = error instanceof HasnaHttpError2 ? definitiveIngestRefusal(error.status, error.body) : null;
             if (refusal) {
               journal.recordRefusal(batch, refusal);
               throw new IngestRefused(refusal.status, refusal.code, refusal.reason);
@@ -3462,7 +3503,7 @@ async function postIngest(cloud, body) {
       } catch (error) {
         if (error instanceof PendingIngestError || error instanceof JournalMaintenanceError || error instanceof IngestRefused)
           throw error;
-        if (error instanceof HasnaHttpError && error.status >= 400 && error.status < 500 && error.status !== 408) {
+        if (error instanceof HasnaHttpError2 && error.status >= 400 && error.status < 500 && error.status !== 408) {
           const body2 = error.body;
           throw new IngestRefused(error.status, body2?.expected === "legacy_aggregate_requires_migration" ? "legacy_aggregate_requires_migration" : "ingest_refused");
         }
@@ -3482,7 +3523,7 @@ async function pushIngestRows(cloud, scratch) {
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.9",
+  version: "0.5.10",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",

package/dist/server/index.js

@@ -5578,7 +5578,7 @@ function isAuthorizedRequest(req, path) {
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.9",
+  version: "0.5.10",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",

package/dist/server/service-worker.js

@@ -7454,7 +7454,7 @@ import { randomUUID } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.9",
+  version: "0.5.10",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/economy",
-  "version": "0.5.9",
+  "version": "0.5.10",
   "description": "AI coding cost tracker — CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   "repository": {
     "type": "git",