taximeter 0.1.0 → 0.1.2

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Taximeter
 
+## 0.1.2
+
+### Patch Changes
+
+- Exclude development specifications, verification transcripts, design decisions, contribution files, and recording sources from the npm package. Keep the CLI, SDK, dashboard, usage documentation, demo image, license, security guidance, changelog, and example configuration. Link to repository-only documentation from packaged guides.
+
+## 0.1.1
+
+### Patch Changes
+
+- Publish the complete local x402 spend meter after the npm ownership bootstrap. Include the proxy, fetch SDK, exact ledger, budget enforcement, CLI exports, prebuilt dashboard, and tested documentation. Improve release authentication diagnostics and keep package verification aligned with the release version.
+
 ## 0.1.0
 
 ### Minor Changes

package/README.md

@@ -7,9 +7,8 @@ npx taximeter start
 ```
 
 Taximeter records supported agent payments, checks budgets before forwarding them,
-and keeps an exact local ledger. **This is the unpublished v0.1.0 source release.**
-The registry command above becomes available after publication; the three-command
-source quickstart below works today. Requires Node 20 or newer.
+and keeps an exact local ledger. Install from npm with the command above, or build
+from source with the quickstart below. Requires Node 20 or newer.
 
 ## A 20-second demo
 
@@ -17,7 +16,8 @@ source quickstart below works today. Requires Node 20 or newer.
 
 This local recording shows 20 payments passing and payment 21 being blocked at
 an exact total of 140 atomic units. It uses synthetic x402 envelopes and never
-moves money. [Record the demo](docs/RECORDING.md) with the included simulation.
+moves money. [Record the demo](https://github.com/Ding808/taximeter/blob/main/docs/RECORDING.md)
+with the simulation in the source checkout.
 
 ## Why
 
@@ -51,7 +51,7 @@ Open a terminal in this source checkout, with Node 20+ and npm installed.
 You should now see:
 
 ```text
-Taximeter 0.1.0
+Taximeter 0.1.2
 Proxy: http://127.0.0.1:8402
 Dashboard: http://127.0.0.1:8403
 Point an HTTP-proxy-aware agent at http://127.0.0.1:8402.
@@ -61,7 +61,7 @@ HTTPS CONNECT is unmetered; use --upstream or withMeter for HTTPS payments.
 Open [the local dashboard](http://127.0.0.1:8403). It explains how to connect an
 agent before the first payment arrives. Stop the process with Ctrl+C.
 The prebuilt npm package starts directly; installing it does not build the frontend.
-Dependency download time depends on the connection. See [measured verification](VERIFICATION.md).
+Dependency download time depends on the connection.
 
 Choose the connection mode your agent supports:
 
@@ -127,7 +127,8 @@ Repeated EIP-3009 authorizations count once across retries, using network, contr
 payer, nonce, amount, recipient, and validity bounds. Conflicting authorization
 details receive separate reservations. Each unresolved forwarding attempt keeps
 capacity reserved; an old unconfirmed retry must reacquire capacity in the current
-window. [Protocol notes](SPEC-NOTES.md) explain these rules and the supported subset.
+window. [Protocol notes](https://github.com/Ding808/taximeter/blob/main/SPEC-NOTES.md)
+explain these rules and the supported subset.
 
 CSV `amount` is the counted contribution, including zero for blocked/known failed
 rows. `authorizedAmount` retains the original amount. Sum `amount` with BigInt
@@ -193,7 +194,7 @@ Host/recipient denials have `budget: null` and `remaining: null`.
 - A wallet or facilitator: it never holds keys or funds, signs, verifies, or settles payments.
 - A cloud service: no accounts, telemetry, analytics, or external font requests.
 - A multi-user service: no authentication, tenancy, or RBAC. Both listeners bind to loopback.
-- A universal payment parser: Permit2, ERC-7710, non-EVM rails, Stripe MPP, and cards are outside v0.1.0.
+- A universal payment parser: Permit2, ERC-7710, non-EVM rails, Stripe MPP, and cards are unsupported.
 - A security boundary against a bypassing agent: unsupported traffic passes through with diagnostics. CONNECT and post-upgrade frames are unmetered. Storage failure also passes traffic and prints a warning, so budget guarantees require working storage.
 
 Raw payment authorizations stay in the local audit ledger and JSON export. Treat
@@ -202,6 +203,6 @@ to report a problem.
 
 ## Contributing / license
 
-Read [CONTRIBUTING.md](CONTRIBUTING.md), [the decisions](DECISIONS.md), and
-[the specification](SPEC.md). Test and release evidence is in [VERIFICATION.md](VERIFICATION.md).
+See the [contribution guide](https://github.com/Ding808/taximeter/blob/main/CONTRIBUTING.md)
+for development instructions, design documents, and verification evidence.
 Licensed under [MIT](LICENSE).

package/SECURITY.md

@@ -31,7 +31,7 @@ against a hostile agent or another process running as the same user.
 
 - Unsupported or malformed payment forms pass through with a diagnostic.
   Supported parsing is narrower than the full x402 protocol; see
-  [SPEC-NOTES.md](SPEC-NOTES.md).
+  [protocol notes](https://github.com/Ding808/taximeter/blob/main/SPEC-NOTES.md).
 - HTTPS CONNECT tunnels encrypted bytes without metering their payments.
   Taximeter does not install a certificate authority or intercept TLS.
 - The SDK must wrap the transport inside the payment wrapper. Redirects and

package/dist/{chunk-I7YXGTRZ.js → chunk-DWBUWM3G.js}

@@ -818,10 +818,10 @@ var Ledger = class {
           "SELECT name FROM sqlite_master WHERE type = 'table' AND name = 'schema_version'"
         ).get();
         if (!table) this.database.exec(__default);
-        const version = z7.object({ version: z7.literal(1) }).parse(
+        const version3 = z7.object({ version: z7.literal(1) }).parse(
           this.database.prepare("SELECT MAX(version) AS version FROM schema_version").get()
         );
-        return version.version;
+        return version3.version;
       }).immediate();
     } catch (error) {
       this.database.close();
@@ -1136,6 +1136,15 @@ async function closeProxy(server) {
   );
 }
 
+// src/version.ts
+import { z as z9 } from "zod";
+
+// package.json
+var version = "0.1.2";
+
+// src/version.ts
+var version2 = z9.string().regex(/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/).parse(version);
+
 export {
   integerStringSchema,
   httpUrlSchema,
@@ -1163,5 +1172,6 @@ export {
   toInvoice,
   Ledger,
   createProxy,
-  closeProxy
+  closeProxy,
+  version2 as version
 };

package/dist/cli/index.js

@@ -20,8 +20,9 @@ import {
   toInvoice,
   toJson,
   totalSchema,
-  totals
-} from "../chunk-I7YXGTRZ.js";
+  totals,
+  version
+} from "../chunk-DWBUWM3G.js";
 
 // src/cli/index.ts
 import { CommanderError } from "commander";
@@ -48,7 +49,7 @@ import { z } from "zod";
 var dashboardEventSchema = paymentEventSchema.omit({ raw: true });
 var groupSchema = totalSchema.extend({ key: z.string().nullable() });
 var dashboardStateSchema = z.object({
-  version: z.literal("0.1.0"),
+  version: z.literal(version),
   generatedAt: z.iso.datetime(),
   totalEvents: z.number().int(),
   blockedEvents: z.number().int(),
@@ -121,7 +122,7 @@ function dashboardState(ledger, config, now = Date.now()) {
     return { ts: new Date(start).toISOString(), totals: totals(rows) };
   });
   return dashboardStateSchema.parse({
-    version: "0.1.0",
+    version,
     generatedAt: new Date(now).toISOString(),
     totalEvents: events.length,
     blockedEvents: events.filter((event) => event.status === "blocked").length,
@@ -358,7 +359,7 @@ function configFrom(flags) {
 }
 async function runCli(input, output = (text) => process.stdout.write(text)) {
   const argv = z4.array(z4.string()).parse(input);
-  const program = new Command().name("taximeter").description("A taximeter for your AI agents.").version("0.1.0").exitOverride();
+  const program = new Command().name("taximeter").description("A taximeter for your AI agents.").version(version).exitOverride();
   program.configureOutput({ writeOut: output, writeErr: (text) => process.stderr.write(text) });
   options(program.command("start").description("Start the local proxy and dashboard")).option("--proxy-port <port>", "Proxy port (0 selects an available port)").option("--dashboard-port <port>", "Dashboard port").option("--upstream <url>", "Forward origin-form requests to this HTTP(S) upstream").action(async (raw) => {
     const flags = startFlags.parse(raw);
@@ -375,7 +376,7 @@ async function runCli(input, output = (text) => process.stdout.write(text)) {
     );
     const running = await startServices(config);
     output(
-      `Taximeter 0.1.0
+      `Taximeter ${version}
 Proxy: http://127.0.0.1:${running.proxyPort}
 Dashboard: http://127.0.0.1:${running.dashboardPort}
 Point an HTTP-proxy-aware agent at http://127.0.0.1:${running.proxyPort}.

package/dist/index.d.ts

@@ -399,6 +399,6 @@ type MeteredFetch = typeof globalThis.fetch & {
 /** Place inside the payment wrapper: wrapFetchWithPayment(withMeter(fetch, opts), client). */
 declare function withMeter(fetchImpl: typeof globalThis.fetch, input?: MeterOptions): MeteredFetch;
 
-declare const version = "0.1.0";
+declare const version: string;
 
 export { Ledger, Meter, type MeterOptions, type MeteredFetch, type PaymentEvent, type Rail, type TaximeterConfig, X402Rail, closeProxy, createProxy, deriveEvents, evaluate, formatAmount, loadConfig, parseConfig, paymentEventSchema, toCsv, toInvoice, toJson, totals, version, withMeter };

package/dist/index.js

@@ -16,8 +16,9 @@ import {
   toCsv,
   toInvoice,
   toJson,
-  totals
-} from "./chunk-I7YXGTRZ.js";
+  totals,
+  version
+} from "./chunk-DWBUWM3G.js";
 
 // src/sdk/index.ts
 import { z } from "zod";
@@ -158,9 +159,6 @@ function withMeter(fetchImpl, input = {}) {
     }
   });
 }
-
-// src/index.ts
-var version = "0.1.0";
 export {
   Ledger,
   Meter,