taximeter 0.1.0 → 0.1.1

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Taximeter
 
+## 0.1.1
+
+### Patch Changes
+
+- Publish the complete local x402 spend meter after the npm ownership bootstrap. Include the proxy, fetch SDK, exact ledger, budget enforcement, CLI exports, prebuilt dashboard, and tested documentation. Improve release authentication diagnostics and keep package verification aligned with the release version.
+
 ## 0.1.0
 
 ### Minor Changes

package/CONTRIBUTING.md

@@ -88,10 +88,10 @@ change package behavior.
 
 The release workflow uses Changesets on `main` to prepare version changes and
 publish after the release pull request is merged. With no pending changesets,
-the action also publishes an unpublished version; the **first push to `main`
-with working npm credentials can publish v0.1.0 directly**. Enable credentials
-only when that initial release is intended. Maintainers configure npm
-credentials separately. `npm run version-packages` updates package versions and
+the action also publishes the current version if npm does not yet contain it.
+A push to `main` with working npm credentials can therefore publish directly.
+Maintainers configure npm credentials separately.
+`npm run version-packages` updates package versions and
 the changelog; `npm run release` builds and runs Changesets publishing. Publishing
 requires maintainer authorization and credentials. The presence of that workflow
 does not mean any package version has already been published.

package/README.md

@@ -7,9 +7,8 @@ npx taximeter start
 ```
 
 Taximeter records supported agent payments, checks budgets before forwarding them,
-and keeps an exact local ledger. **This is the unpublished v0.1.0 source release.**
-The registry command above becomes available after publication; the three-command
-source quickstart below works today. Requires Node 20 or newer.
+and keeps an exact local ledger. Install from npm with the command above, or build
+from source with the quickstart below. Requires Node 20 or newer.
 
 ## A 20-second demo
 
@@ -51,7 +50,7 @@ Open a terminal in this source checkout, with Node 20+ and npm installed.
 You should now see:
 
 ```text
-Taximeter 0.1.0
+Taximeter 0.1.1
 Proxy: http://127.0.0.1:8402
 Dashboard: http://127.0.0.1:8403
 Point an HTTP-proxy-aware agent at http://127.0.0.1:8402.
@@ -193,7 +192,7 @@ Host/recipient denials have `budget: null` and `remaining: null`.
 - A wallet or facilitator: it never holds keys or funds, signs, verifies, or settles payments.
 - A cloud service: no accounts, telemetry, analytics, or external font requests.
 - A multi-user service: no authentication, tenancy, or RBAC. Both listeners bind to loopback.
-- A universal payment parser: Permit2, ERC-7710, non-EVM rails, Stripe MPP, and cards are outside v0.1.0.
+- A universal payment parser: Permit2, ERC-7710, non-EVM rails, Stripe MPP, and cards are unsupported.
 - A security boundary against a bypassing agent: unsupported traffic passes through with diagnostics. CONNECT and post-upgrade frames are unmetered. Storage failure also passes traffic and prints a warning, so budget guarantees require working storage.
 
 Raw payment authorizations stay in the local audit ledger and JSON export. Treat

package/SPEC-NOTES.md

@@ -36,7 +36,7 @@ unless a row names one intake specifically.
 | Export and invoice format (§2, §5) | CSV includes all derived payment rows: `amount` is the counted contribution, while `authorizedAmount` preserves the original proposal. Blocked and wholly failed payments contribute zero. Sum each network/asset separately to reproduce the dashboard ledger totals. The invoice is standalone printable HTML, with no PDF renderer, exchange-rate conversion, tax calculation, or settlement attestation. |
 | Module and dependency choices (§7) | Ship ESM only, with no optional CommonJS build. Pin `better-sqlite3` 12.8.0 to preserve Node 20 support; version 13 requires Node 22. Exact pins and the audited esbuild override are recorded in `package.json` and the lockfile. |
 | Fixture realism and financial claims (§7) | Fixture envelopes follow primary protocol examples but all authorizations, signatures, and settlement responses are synthetic. Tests exercise parsing, transport, budget races, failures, and exact accounting; no real transfers, wallet signing, facilitator call, or independent chain verification is performed. |
-| Public installation and repository tagline (§1, §6) | `npm view taximeter` returned `E404` on **2026-09-08**, so the package name remains `taximeter` and registry installation is not yet available. The README retains the required `npx taximeter start` release command and provides source-build commands for current use. Fresh-directory startup from the local tarball is documented in `VERIFICATION.md`. Registry publication and repository visibility are maintainer-managed release settings. The intended repository description is **A taximeter for your AI agents.** |
+| Public installation and repository tagline (§1, §6) | The initial registry check returned `E404`; npm ownership was subsequently established with `0.1.0`. The release package uses `0.1.1`, and the README provides both `npx taximeter start` and source-build instructions. Fresh-directory startup from the local tarball is documented in `VERIFICATION.md`. Repository visibility is a maintainer-managed setting. The intended repository description is **A taximeter for your AI agents.** |
 
 These limitations make Taximeter a cooperative local meter. An agent that
 bypasses the intake, uses an unsupported payment method, or hides a replay

package/VERIFICATION.md

@@ -1,8 +1,8 @@
 # Release verification
 
-The release passed the local clean-checkout audit on `feat/taximeter-v0.1.0`.
-The hosted release build also completed; publishing requires npm credentials as
-described below. Public npm publication is not claimed.
+The initial release passed the local clean-checkout audit on `feat/taximeter-v0.1.0`.
+The historical audit transcripts below cover version 0.1.0. npm ownership was
+subsequently established with that version; the next release is 0.1.1.
 
 ## Behavioral evidence
 
@@ -799,8 +799,8 @@ Screenshots: <CHECKOUT>/tmp/dashboard-qa
   desktop, and Linux browser rendering have not been exercised here.
 - Native Windows ConPTY capture and agg encoding were executed for the follow-up
   demo recording documented below. VHS and asciinema command-line recipes have not been run.
-- The npm name remains unpublished. The README's source commands work before
-  publication; its registry command requires the first public release.
+- Historical registry-authentication failures below preceded npm ownership setup.
+  The 0.1.1 checks and release status are recorded separately from those transcripts.
 - Long-running/high-volume ledger performance, disk exhaustion, and OS crash
   recovery have not been stress-tested. Storage failures preserve traffic and
   can prevent enforcement; hidden redirects, unsupported forms, and encrypted
@@ -941,3 +941,37 @@ PASS all publishing preflight checks; npm was stubbed and nothing was published.
 
 The repository owner must supply a publishing-capable Actions secret before the
 hosted release can succeed. No live publication is represented by these checks.
+
+## Version 0.1.1 release checks
+
+The package version is now the source for the CLI, SDK, dashboard API, and archive
+validation. This prevents runtime version strings from lagging behind a Changesets
+release. Version 0.1.1 was generated through `npm run version-packages` with the
+matching package-lock metadata and changelog.
+
+On Windows with Node 24.13.0, typecheck, lint, all 298 tests, the build, package
+validation, isolated archive installation/startup, and CLI version checks passed.
+Ledger and policy coverage remained 100% in all four metrics. The isolated smoke
+check verified both listeners, the empty dashboard summary, prebuilt assets, and
+an installation directory with no configuration file.
+
+Captured final package-check output before adding this transcript:
+
+```text
+> taximeter@0.1.1 lint
+> biome check --error-on-warnings .
+
+Checked 58 files in 45ms. No fixes applied.
+
+> taximeter@0.1.1 check:package
+> node scripts/check-package.mjs
+
+Package verified: taximeter-0.1.1.tgz
+246248 bytes compressed; 648100 bytes unpacked; 25 files.
+Both CLI aliases, ESM entry point, declarations, and prebuilt UI are present.
+26 relative Markdown file links resolve inside the package.
+Files whitelist honored; no UI source maps, source tree, tests, dependencies, or local state.
+```
+
+`node dist/cli/index.js --version` returned `0.1.1`. Subsequent archive sizes include
+this transcript; the same package validation enforces the size limit.

package/dist/{chunk-I7YXGTRZ.js → chunk-P3T2DVCP.js}

@@ -818,10 +818,10 @@ var Ledger = class {
           "SELECT name FROM sqlite_master WHERE type = 'table' AND name = 'schema_version'"
         ).get();
         if (!table) this.database.exec(__default);
-        const version = z7.object({ version: z7.literal(1) }).parse(
+        const version3 = z7.object({ version: z7.literal(1) }).parse(
           this.database.prepare("SELECT MAX(version) AS version FROM schema_version").get()
         );
-        return version.version;
+        return version3.version;
       }).immediate();
     } catch (error) {
       this.database.close();
@@ -1136,6 +1136,15 @@ async function closeProxy(server) {
   );
 }
 
+// src/version.ts
+import { z as z9 } from "zod";
+
+// package.json
+var version = "0.1.1";
+
+// src/version.ts
+var version2 = z9.string().regex(/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/).parse(version);
+
 export {
   integerStringSchema,
   httpUrlSchema,
@@ -1163,5 +1172,6 @@ export {
   toInvoice,
   Ledger,
   createProxy,
-  closeProxy
+  closeProxy,
+  version2 as version
 };

package/dist/cli/index.js

@@ -20,8 +20,9 @@ import {
   toInvoice,
   toJson,
   totalSchema,
-  totals
-} from "../chunk-I7YXGTRZ.js";
+  totals,
+  version
+} from "../chunk-P3T2DVCP.js";
 
 // src/cli/index.ts
 import { CommanderError } from "commander";
@@ -48,7 +49,7 @@ import { z } from "zod";
 var dashboardEventSchema = paymentEventSchema.omit({ raw: true });
 var groupSchema = totalSchema.extend({ key: z.string().nullable() });
 var dashboardStateSchema = z.object({
-  version: z.literal("0.1.0"),
+  version: z.literal(version),
   generatedAt: z.iso.datetime(),
   totalEvents: z.number().int(),
   blockedEvents: z.number().int(),
@@ -121,7 +122,7 @@ function dashboardState(ledger, config, now = Date.now()) {
     return { ts: new Date(start).toISOString(), totals: totals(rows) };
   });
   return dashboardStateSchema.parse({
-    version: "0.1.0",
+    version,
     generatedAt: new Date(now).toISOString(),
     totalEvents: events.length,
     blockedEvents: events.filter((event) => event.status === "blocked").length,
@@ -358,7 +359,7 @@ function configFrom(flags) {
 }
 async function runCli(input, output = (text) => process.stdout.write(text)) {
   const argv = z4.array(z4.string()).parse(input);
-  const program = new Command().name("taximeter").description("A taximeter for your AI agents.").version("0.1.0").exitOverride();
+  const program = new Command().name("taximeter").description("A taximeter for your AI agents.").version(version).exitOverride();
   program.configureOutput({ writeOut: output, writeErr: (text) => process.stderr.write(text) });
   options(program.command("start").description("Start the local proxy and dashboard")).option("--proxy-port <port>", "Proxy port (0 selects an available port)").option("--dashboard-port <port>", "Dashboard port").option("--upstream <url>", "Forward origin-form requests to this HTTP(S) upstream").action(async (raw) => {
     const flags = startFlags.parse(raw);
@@ -375,7 +376,7 @@ async function runCli(input, output = (text) => process.stdout.write(text)) {
     );
     const running = await startServices(config);
     output(
-      `Taximeter 0.1.0
+      `Taximeter ${version}
 Proxy: http://127.0.0.1:${running.proxyPort}
 Dashboard: http://127.0.0.1:${running.dashboardPort}
 Point an HTTP-proxy-aware agent at http://127.0.0.1:${running.proxyPort}.

package/dist/index.d.ts

@@ -399,6 +399,6 @@ type MeteredFetch = typeof globalThis.fetch & {
 /** Place inside the payment wrapper: wrapFetchWithPayment(withMeter(fetch, opts), client). */
 declare function withMeter(fetchImpl: typeof globalThis.fetch, input?: MeterOptions): MeteredFetch;
 
-declare const version = "0.1.0";
+declare const version: string;
 
 export { Ledger, Meter, type MeterOptions, type MeteredFetch, type PaymentEvent, type Rail, type TaximeterConfig, X402Rail, closeProxy, createProxy, deriveEvents, evaluate, formatAmount, loadConfig, parseConfig, paymentEventSchema, toCsv, toInvoice, toJson, totals, version, withMeter };

package/dist/index.js

@@ -16,8 +16,9 @@ import {
   toCsv,
   toInvoice,
   toJson,
-  totals
-} from "./chunk-I7YXGTRZ.js";
+  totals,
+  version
+} from "./chunk-P3T2DVCP.js";
 
 // src/sdk/index.ts
 import { z } from "zod";
@@ -158,9 +159,6 @@ function withMeter(fetchImpl, input = {}) {
     }
   });
 }
-
-// src/index.ts
-var version = "0.1.0";
 export {
   Ledger,
   Meter,