taximeter 0.2.2 → 0.3.0

package/dist/{chunk-DJPLFDD7.js → chunk-Q2M76JNT.js}

@@ -65,17 +65,23 @@ var blockedBodySchema = z.object({
   reason: z.string(),
   budget: amountSchema.nullable(),
   spent: integerStringSchema,
-  remaining: amountSchema.nullable()
+  remaining: amountSchema.nullable(),
+  fix: z.string().optional()
 });
 
 // src/config.ts
 import { z as z2 } from "zod";
-var budgetSchema = z2.strictObject({
-  amount: amountSchema,
+var budgetFieldsSchema = z2.strictObject({
+  amount: amountSchema.optional(),
+  maxPayments: z2.number().int().positive().max(Number.MAX_SAFE_INTEGER).optional(),
   asset: labelSchema,
   network: labelSchema.optional(),
   window: z2.enum(["1h", "24h", "7d", "30d"]).optional()
 });
+var budgetSchema = budgetFieldsSchema.refine(
+  (budget) => budget.amount !== void 0 || budget.maxPayments !== void 0,
+  { message: "A budget must set amount or maxPayments", path: ["amount"] }
+);
 var policySchema = z2.strictObject({
   allowHosts: z2.array(labelSchema).default([]),
   denyHosts: z2.array(labelSchema).default([]),
@@ -101,9 +107,9 @@ var configSchema = z2.strictObject({
 });
 var configPatchSchema = z2.strictObject({
   budgets: z2.strictObject({
-    perTask: budgetSchema.partial().nullable().optional(),
-    perAgent: budgetSchema.partial().nullable().optional(),
-    global: budgetSchema.partial().nullable().optional()
+    perTask: budgetFieldsSchema.partial().nullable().optional(),
+    perAgent: budgetFieldsSchema.partial().nullable().optional(),
+    global: budgetFieldsSchema.partial().nullable().optional()
   }).optional(),
   policy: z2.strictObject({
     allowHosts: z2.array(labelSchema).optional(),
@@ -127,8 +133,17 @@ function parseConfig(...layers) {
     const budgets = { ...current.budgets };
     for (const key of ["perTask", "perAgent", "global"]) {
       const next = layer.budgets?.[key];
-      if (next !== void 0)
-        budgets[key] = next === null ? null : budgetSchema.parse({ ...budgets[key], ...next });
+      if (next === void 0) continue;
+      if (next === null) {
+        budgets[key] = null;
+        continue;
+      }
+      const parsed = budgetSchema.safeParse({ ...budgets[key], ...next });
+      if (!parsed.success)
+        throw new z2.ZodError(
+          parsed.error.issues.map((issue) => ({ ...issue, path: ["budgets", key, ...issue.path] }))
+        );
+      budgets[key] = parsed.data;
     }
     current = configSchema.parse({
       ...current,
@@ -158,8 +173,9 @@ function readConfig(path) {
   if (!existsSync(path)) return {};
   try {
     return configPatchSchema.parse(JSON.parse(readFileSync(path, "utf8")));
-  } catch {
-    throw new Error(`Invalid Taximeter configuration: ${path}`);
+  } catch (error) {
+    const detail = error instanceof z3.ZodError ? error.issues.map((issue) => `${issue.path.join(".") || "(root)"}: ${issue.message}`).join("; ") : "expected valid JSON";
+    throw new Error(`Invalid Taximeter configuration: ${path}: ${detail}`);
   }
 }
 var portInputSchema = z3.string().regex(/^[0-9]{1,5}$/).pipe(z3.coerce.number().int().min(0).max(65535));
@@ -168,7 +184,14 @@ var environmentSchema = z3.object({
   TAXIMETER_PORT: portInputSchema.optional(),
   TAXIMETER_DASHBOARD_PORT: portInputSchema.optional()
 });
-function loadConfig(flags = {}, options = {}) {
+function leafKeys(value, prefix = "") {
+  if (value === void 0) return [];
+  if (value === null || typeof value !== "object" || Array.isArray(value)) return [prefix];
+  return Object.entries(value).flatMap(
+    ([key, child]) => leafKeys(child, prefix ? `${prefix}.${key}` : key)
+  );
+}
+function loadConfigDetails(flags = {}, options = {}) {
   const cwd = options.cwd ?? process.cwd();
   const home = options.home ?? homedir();
   const env = environmentSchema.parse(options.env ?? process.env);
@@ -179,16 +202,78 @@ function loadConfig(flags = {}, options = {}) {
       ...env.TAXIMETER_DASHBOARD_PORT !== void 0 ? { dashboard: env.TAXIMETER_DASHBOARD_PORT } : {}
     }
   };
-  if (options.configFile && !existsSync(resolve(cwd, options.configFile)))
+  const paths = {
+    home: expandPath(resolve(home, ".taximeter", "config.json"), home, cwd),
+    cwd: expandPath(resolve(cwd, "taximeter.config.json"), home, cwd),
+    explicit: options.configFile ? expandPath(options.configFile, home, cwd) : void 0
+  };
+  const overridden = (path) => Object.hasOwn(options.layerOverrides ?? {}, path);
+  const fileValue = (path) => !path ? {} : overridden(path) ? configPatchSchema.parse(options.layerOverrides?.[path]) : readConfig(path);
+  if (paths.explicit && !existsSync(paths.explicit) && !overridden(paths.explicit))
     throw new Error(`Configuration file not found: ${options.configFile}`);
-  const config = parseConfig(
-    readConfig(join(home, ".taximeter", "config.json")),
-    readConfig(join(cwd, "taximeter.config.json")),
-    ...options.configFile ? [readConfig(resolve(cwd, options.configFile))] : [],
+  const values = {
+    defaults: parseConfig(),
+    home: fileValue(paths.home),
+    cwd: fileValue(paths.cwd),
+    explicit: fileValue(paths.explicit),
     environment,
-    flags
+    flags: configPatchSchema.parse(flags)
+  };
+  const config = parseConfig(
+    values.home,
+    values.cwd,
+    values.explicit,
+    values.environment,
+    values.flags
   );
-  return { ...config, db: expandPath(config.db, home, cwd) };
+  const names = ["defaults", "home", "cwd", "explicit", "environment", "flags"];
+  const labels = {
+    flags: "flags",
+    environment: "environment",
+    explicit: "--config",
+    cwd: "cwd",
+    home: "home",
+    defaults: "defaults"
+  };
+  const owners = /* @__PURE__ */ new Map();
+  for (const name of names) {
+    for (const key of leafKeys(values[name])) {
+      for (const owned of owners.keys()) {
+        if (owned === key || owned.startsWith(`${key}.`) || key.startsWith(`${owned}.`))
+          owners.delete(owned);
+      }
+      owners.set(key, name);
+    }
+  }
+  const layers = names.map((name) => {
+    const path = name === "home" || name === "cwd" || name === "explicit" ? paths[name] : void 0;
+    const keys = leafKeys(values[name]);
+    const contributedKeys = keys.filter((key) => owners.get(key) === name);
+    return {
+      name,
+      label: labels[name] ?? name,
+      ...path ? { path } : {},
+      exists: path ? existsSync(path) : name === "defaults" || keys.length > 0,
+      supplied: path ? existsSync(path) || overridden(path) : name === "defaults" || keys.length > 0,
+      contributed: contributedKeys.length > 0,
+      keys,
+      contributedKeys,
+      overriddenKeys: keys.filter((key) => !contributedKeys.includes(key)),
+      ...name === "environment" ? {
+        environmentVariables: Object.keys(env).filter(
+          (key) => env[key] !== void 0
+        )
+      } : {}
+    };
+  }).reverse();
+  return {
+    config: { ...config, db: expandPath(config.db, home, cwd) },
+    layers,
+    defaultWritePath: existsSync(paths.cwd) ? paths.cwd : paths.home
+  };
+}
+function loadConfig(flags = {}, options = {}) {
+  return loadConfigDetails(flags, options).config;
 }
 
 // src/ledger/derive.ts
@@ -289,14 +374,59 @@ var usdc = {
 function assetMetadata(network, asset) {
   return usdc[network] === asset.toLowerCase() ? { decimals: 6, decimalsKnown: true, assetSymbol: "USDC" } : { decimals: 0, decimalsKnown: false };
 }
+function knownAssets() {
+  return Object.entries(usdc).map(([network, asset]) => ({
+    network,
+    asset,
+    ...assetMetadata(network, asset)
+  }));
+}
 function matchesAsset(selector, payment) {
   return selector.toLowerCase() === payment.asset.toLowerCase() || selector === "USDC" && assetMetadata(payment.network, payment.asset).assetSymbol === "USDC";
 }
 
 // src/policy/index.ts
 var windows = { "1h": 36e5, "24h": 864e5, "7d": 6048e5, "30d": 2592e6 };
-function deny(reason, budget = null, spent = "0") {
+var amountReasons = {
+  perTask: "per_task_budget",
+  perAgent: "per_agent_budget",
+  global: "global_budget"
+};
+var countReasons = {
+  perTask: "per_task_payment_count",
+  perAgent: "per_agent_payment_count",
+  global: "global_payment_count"
+};
+var fixedRemedies = {
+  host_denied: 'taximeter config set policy.denyHosts "[]"',
+  host_not_allowed: 'taximeter config set policy.allowHosts "[]"',
+  recipient_not_allowed: 'taximeter config set policy.allowPayTo "[]"',
+  unknown_asset: "taximeter config set policy.unknownAsset allow"
+};
+var limitKeys = {
+  max_single_payment: "policy.maxSinglePayment",
+  per_task_budget: "budgets.perTask.amount",
+  per_agent_budget: "budgets.perAgent.amount",
+  global_budget: "budgets.global.amount",
+  per_task_payment_count: "budgets.perTask.maxPayments",
+  per_agent_payment_count: "budgets.perAgent.maxPayments",
+  global_payment_count: "budgets.global.maxPayments"
+};
+function deny(reason, budget = null, spent = "0", increment = 0n) {
   const difference = budget === null ? null : BigInt(budget) - BigInt(spent);
+  let fix;
+  if (reason in fixedRemedies) {
+    fix = fixedRemedies[reason];
+  } else {
+    const key = limitKeys[reason];
+    const minimum = BigInt(budget) + 1n;
+    const needed = BigInt(spent) + increment;
+    const next = needed > minimum ? needed : minimum;
+    const countLimit = key.endsWith(".maxPayments");
+    const representable = countLimit ? next <= BigInt(Number.MAX_SAFE_INTEGER) : next.toString().length <= 78;
+    const target = key.startsWith("budgets.") ? key.slice(0, key.lastIndexOf(".")) : key;
+    fix = representable ? `taximeter config set ${key} ${next}` : `taximeter config set ${target} null`;
+  }
   return {
     allowed: false,
     body: {
@@ -304,13 +434,15 @@ function deny(reason, budget = null, spent = "0") {
       reason,
       budget,
       spent,
-      remaining: difference === null ? null : (difference < 0n ? 0n : difference).toString()
+      remaining: difference === null ? null : (difference < 0n ? 0n : difference).toString(),
+      fix
     }
   };
 }
-function spentForBudget(proposed, events, budget, scope, now) {
+function totalsForBudget(proposed, events, budget, scope, now) {
   const start = budget.window ? now - windows[budget.window] : -Infinity;
   let spent = 0n;
+  let count = 0n;
   for (const event of deriveEvents(events)) {
     if (!countsAsSpend(event) || assetKey(event) !== assetKey(proposed)) continue;
     const ts = Date.parse(event.attemptedAt ?? event.ts);
@@ -318,21 +450,28 @@ function spentForBudget(proposed, events, budget, scope, now) {
     if (scope === "perTask" && event.taskId !== proposed.taskId) continue;
     if (scope === "perAgent" && event.agentId !== proposed.agentId) continue;
     spent += BigInt(event.amount);
+    count += 1n;
   }
-  return spent.toString();
+  return { amount: spent.toString(), count: count.toString() };
 }
 function evaluate(proposed, events, config, now) {
+  const spent = { perTask: "0", perAgent: "0", global: "0" };
+  const counts = { perTask: "0", perAgent: "0", global: "0" };
+  for (const scope of ["perTask", "perAgent", "global"]) {
+    const budget = config.budgets[scope];
+    if (!budget) continue;
+    const total = totalsForBudget(proposed, events, budget, scope, now);
+    spent[scope] = total.amount;
+    counts[scope] = total.count;
+  }
   return evaluateWithState(
     proposed,
     {
       reserved: events.find(
         (event) => event.paymentKey === proposed.paymentKey && countsAsSpend(event)
       ),
-      spent: {
-        perTask: config.budgets.perTask ? spentForBudget(proposed, events, config.budgets.perTask, "perTask", now) : "0",
-        perAgent: config.budgets.perAgent ? spentForBudget(proposed, events, config.budgets.perAgent, "perAgent", now) : "0",
-        global: config.budgets.global ? spentForBudget(proposed, events, config.budgets.global, "global", now) : "0"
-      }
+      spent,
+      counts
     },
     config,
     now
@@ -349,7 +488,7 @@ function evaluateWithState(proposed, state, config, now) {
   if (policy.unknownAsset === "deny" && !assetMetadata(proposed.network, proposed.asset).decimalsKnown)
     return deny("unknown_asset");
   if (policy.maxSinglePayment !== null && matchesAsset(policy.maxSingleAsset, proposed) && BigInt(proposed.amount) > BigInt(policy.maxSinglePayment))
-    return deny("max_single_payment", policy.maxSinglePayment);
+    return deny("max_single_payment", policy.maxSinglePayment, "0", BigInt(proposed.amount));
   const reserved = state.reserved && countsAsSpend(state.reserved) ? state.reserved : void 0;
   for (const scope of ["perTask", "perAgent", "global"]) {
     const budget = config.budgets[scope];
@@ -358,10 +497,14 @@ function evaluateWithState(proposed, state, config, now) {
     const spent = state.spent[scope];
     const reservedTime = reserved ? Date.parse(reserved.attemptedAt ?? reserved.ts) : -Infinity;
     const inWindow = reservedTime <= now && (!budget.window || reservedTime >= now - windows[budget.window]);
-    const increment = reserved && (reserved.settlementStatus === "confirmed" || inWindow) ? 0n : BigInt(proposed.amount);
-    if (BigInt(spent) + increment > BigInt(budget.amount)) {
-      const reason = scope === "perTask" ? "per_task_budget" : scope === "perAgent" ? "per_agent_budget" : "global_budget";
-      return deny(reason, budget.amount, spent);
+    const countIncrement = reserved && (reserved.settlementStatus === "confirmed" || inWindow) ? 0n : 1n;
+    const increment = countIncrement * BigInt(proposed.amount);
+    if (budget.amount !== void 0 && BigInt(spent) + increment > BigInt(budget.amount)) {
+      return deny(amountReasons[scope], budget.amount, spent, increment);
+    }
+    const count = state.counts[scope];
+    if (budget.maxPayments !== void 0 && BigInt(count) + countIncrement > BigInt(budget.maxPayments)) {
+      return deny(countReasons[scope], budget.maxPayments.toString(), count, countIncrement);
     }
   }
   return { allowed: true };
@@ -641,10 +784,27 @@ var X402Rail = class {
 
 // src/core.ts
 import { v7 as v72 } from "uuid";
+
+// src/notices.ts
+import { Console } from "console";
+var console = new Console({ stdout: process.stdout, stderr: process.stderr, ignoreErrors: true });
+var shown = /* @__PURE__ */ new Set();
+function blockedNotice(body) {
+  if (!body.fix || shown.has(body.reason)) return;
+  shown.add(body.reason);
+  try {
+    console.error(
+      `Taximeter blocked (${body.reason}). To change this policy: ${body.fix}. Restart taximeter after editing.`
+    );
+  } catch {
+  }
+}
+
+// src/core.ts
 var Meter = class {
   constructor(ledger, config) {
     this.ledger = ledger;
-    this.config = parseConfig(config);
+    this.config = configSchema.parse(config);
     this.rail = new X402Rail({
       diagnostic: (code, resource, message) => this.diagnose(code, resource, message)
     });
@@ -665,7 +825,7 @@ var Meter = class {
     const proposed = this.rail.parse(request);
     if (!proposed) return {};
     try {
-      return this.ledger.transaction(() => {
+      const intake = this.ledger.transaction(() => {
         const now = Date.now();
         const state = this.ledger.policyState(proposed, this.config.budgets, now);
         const decision = evaluateWithState(proposed, state, this.config, now);
@@ -695,6 +855,8 @@ var Meter = class {
         this.ledger.appendOutcome(attempt);
         return { payment, attempt };
       });
+      if (intake.body) blockedNotice(intake.body);
+      return intake;
     } catch {
       this.diagnose(
         "storage_failed",
@@ -822,12 +984,15 @@ var __default = "CREATE TABLE schema_version (version INTEGER PRIMARY KEY);\nINS
 // migrations/002.sql
 var __default2 = "CREATE TABLE cache_cursors (\n  id INTEGER PRIMARY KEY CHECK (id = 1),\n  eventRowid INTEGER NOT NULL CHECK (eventRowid >= 0),\n  outcomeRowid INTEGER NOT NULL CHECK (outcomeRowid >= 0)\n);\nINSERT INTO cache_cursors VALUES (1, 0, 0);\n\nCREATE TABLE cache_payments (\n  paymentId TEXT PRIMARY KEY REFERENCES events(id),\n  paymentKey TEXT NOT NULL UNIQUE,\n  payload TEXT NOT NULL CHECK (json_valid(payload)),\n  maxAttemptedAt TEXT\n);\n\nCREATE TABLE cache_attempts (\n  paymentId TEXT NOT NULL REFERENCES cache_payments(paymentId),\n  attemptId TEXT NOT NULL,\n  firstTs TEXT NOT NULL,\n  firstId TEXT NOT NULL,\n  winnerTs TEXT NOT NULL,\n  winnerId TEXT NOT NULL,\n  status TEXT NOT NULL CHECK (status IN ('unknown', 'confirmed', 'failed')),\n  payload TEXT NOT NULL CHECK (json_valid(payload)),\n  PRIMARY KEY (paymentId, attemptId)\n);\nCREATE INDEX cache_attempt_selection ON cache_attempts (\n  paymentId, status, firstTs, firstId COLLATE NOCASE, firstId DESC\n);\n\nCREATE TABLE cache_prefix (\n  partitionKey TEXT NOT NULL,\n  prefix TEXT NOT NULL,\n  amount TEXT NOT NULL CHECK (amount <> '' AND amount NOT GLOB '*[^0-9]*'),\n  PRIMARY KEY (partitionKey, prefix)\n) WITHOUT ROWID;\n\nINSERT INTO schema_version VALUES (2);\n";
 
+// migrations/003.sql
+var __default3 = "ALTER TABLE cache_prefix ADD COLUMN count TEXT NOT NULL DEFAULT '0'\n  CHECK (count <> '' AND count NOT GLOB '*[^0-9]*');\n\nINSERT INTO schema_version VALUES (3);\n";
+
 // src/ledger/backup.ts
 import { mkdtempSync, renameSync, writeFileSync } from "fs";
 import { join as join2, resolve as resolve2 } from "path";
 import Database from "better-sqlite3";
-function backupLedger(path) {
-  const directory = mkdtempSync(`${resolve2(path)}.backup-v1-`);
+function backupLedger(path, version3) {
+  const directory = mkdtempSync(`${resolve2(path)}.backup-v${version3}-`);
   const partial = join2(directory, "ledger.partial.db");
   const destination = join2(directory, "ledger.db");
   writeFileSync(partial, "", { flag: "wx", mode: 384 });
@@ -868,7 +1033,8 @@ var attemptRowSchema = z7.object({
 });
 var prefixRowSchema = z7.object({
   prefix: z7.string().regex(/^[0-9a-f]{0,16}$/),
-  amount: integerStringSchema
+  amount: integerStringSchema,
+  count: integerStringSchema
 });
 var scopeSchema = z7.enum(["perTask", "perAgent", "global"]);
 var windowSchema = z7.enum(["1h", "24h", "7d", "30d"]);
@@ -968,17 +1134,18 @@ var LedgerCache = class {
     const row = payloadSchema.optional().parse(this.statement("SELECT payload FROM cache_payments WHERE paymentKey = ?").get(key));
     return row ? paymentEventSchema.parse(JSON.parse(row.payload)) : void 0;
   }
-  spent(proposed, inputScope, inputWindow, now) {
+  totals(proposed, inputScope, inputWindow, now) {
     const payment = paymentEventSchema.parse(proposed);
     const scope = scopeSchema.parse(inputScope);
     const window = windowSchema.optional().parse(inputWindow);
     const end = timeSchema.parse(now);
     const key = partition(payment, scope);
     const upper = this.prefixTotal(key, end);
-    const lower = window ? this.prefixTotal(key, end - windows2[window] - 1) : 0n;
-    const result = upper - lower;
-    if (result < 0n) throw new Error("Cached budget total is inconsistent");
-    return result.toString();
+    const lower = window ? this.prefixTotal(key, end - windows2[window] - 1) : { amount: 0n, count: 0n };
+    const amount = upper.amount - lower.amount;
+    const count = upper.count - lower.count;
+    if (amount < 0n || count < 0n) throw new Error("Cached budget total is inconsistent");
+    return { amount: amount.toString(), count: count.toString() };
   }
   applyOutcome(outcome) {
     const row = paymentRowSchema.optional().parse(
@@ -1065,14 +1232,16 @@ var LedgerCache = class {
     const add = (payment, sign) => {
       if (!countsAsSpend(payment)) return;
       const amount = BigInt(payment.amount) * sign;
-      if (amount === 0n) return;
       const timestamp = timeKey(Date.parse(payment.attemptedAt ?? payment.ts));
       for (const scope of ["perTask", "perAgent", "global"]) {
         const key = partition(payment, scope);
         const nodes = changes.get(key) ?? /* @__PURE__ */ new Map();
         for (let length = 0; length <= timestamp.length; length += 1) {
           const prefix = timestamp.slice(0, length);
-          nodes.set(prefix, (nodes.get(prefix) ?? 0n) + amount);
+          const contribution = nodes.get(prefix) ?? { amount: 0n, count: 0n };
+          contribution.amount += amount;
+          contribution.count += sign;
+          nodes.set(prefix, contribution);
         }
         changes.set(key, nodes);
       }
@@ -1080,27 +1249,29 @@ var LedgerCache = class {
     if (previous) add(previous, -1n);
     add(current, 1n);
     for (const [key, nodes] of changes) {
-      const pending = [...nodes].filter(([, amount]) => amount !== 0n);
+      const pending = [...nodes].filter(([, value]) => value.amount !== 0n || value.count !== 0n);
       if (pending.length === 0) continue;
       const existing = /* @__PURE__ */ new Map();
       for (const input of this.statement(
-        "SELECT prefix, amount FROM cache_prefix WHERE partitionKey = ? AND prefix IN (SELECT value FROM json_each(?))"
+        "SELECT prefix, amount, count FROM cache_prefix WHERE partitionKey = ? AND prefix IN (SELECT value FROM json_each(?))"
       ).iterate(key, JSON.stringify(pending.map(([prefix]) => prefix)))) {
         const row = prefixRowSchema.parse(input);
-        existing.set(row.prefix, BigInt(row.amount));
+        existing.set(row.prefix, { amount: BigInt(row.amount), count: BigInt(row.count) });
       }
       for (const [prefix, delta] of pending) {
-        const next = (existing.get(prefix) ?? 0n) + delta;
-        if (next < 0n) throw new Error("Cached monetary contribution underflow");
-        if (next === 0n) {
+        const before = existing.get(prefix) ?? { amount: 0n, count: 0n };
+        const amount = before.amount + delta.amount;
+        const count = before.count + delta.count;
+        if (amount < 0n || count < 0n) throw new Error("Cached contribution underflow");
+        if (amount === 0n && count === 0n) {
           this.statement("DELETE FROM cache_prefix WHERE partitionKey = ? AND prefix = ?").run(
             key,
             prefix
           );
         } else {
           this.statement(
-            "INSERT INTO cache_prefix (partitionKey, prefix, amount) VALUES (?, ?, ?) ON CONFLICT(partitionKey, prefix) DO UPDATE SET amount = excluded.amount"
-          ).run(key, prefix, next.toString());
+            "INSERT INTO cache_prefix (partitionKey, prefix, amount, count) VALUES (?, ?, ?, ?) ON CONFLICT(partitionKey, prefix) DO UPDATE SET amount = excluded.amount, count = excluded.count"
+          ).run(key, prefix, amount.toString(), count.toString());
         }
       }
     }
@@ -1117,11 +1288,13 @@ var LedgerCache = class {
       }
     }
     prefixes.push(timestamp);
-    let sum = 0n;
+    const sum = { amount: 0n, count: 0n };
     for (const input of this.statement(
-      "SELECT prefix, amount FROM cache_prefix WHERE partitionKey = ? AND prefix IN (SELECT value FROM json_each(?))"
+      "SELECT prefix, amount, count FROM cache_prefix WHERE partitionKey = ? AND prefix IN (SELECT value FROM json_each(?))"
     ).iterate(key, JSON.stringify(prefixes))) {
-      sum += BigInt(prefixRowSchema.parse(input).amount);
+      const row = prefixRowSchema.parse(input);
+      sum.amount += BigInt(row.amount);
+      sum.count += BigInt(row.count);
     }
     return sum;
   }
@@ -1129,6 +1302,7 @@ var LedgerCache = class {
 
 // src/ledger/store.ts
 var rowSchema = z8.object({ payload: z8.string() });
+var countRowSchema = z8.object({ count: z8.number().int().nonnegative() });
 var Ledger = class {
   database;
   cache;
@@ -1145,20 +1319,22 @@ var Ledger = class {
           "SELECT name FROM sqlite_master WHERE type = 'table' AND name = 'schema_version'"
         ).get();
         if (!table) this.database.exec(__default);
-        const version3 = z8.object({ version: z8.union([z8.literal(1), z8.literal(2)]) }).parse(
+        const version3 = z8.object({ version: z8.union([z8.literal(1), z8.literal(2), z8.literal(3)]) }).parse(
           this.database.prepare("SELECT MAX(version) AS version FROM schema_version").get()
         );
-        if (version3.version === 1) {
+        if (version3.version !== 3) {
           if (table && path !== ":memory:") {
             process.stderr.write("Migrating ledger\u2026\n");
-            const backup = backupLedger(path);
+            const backup = backupLedger(path, version3.version);
             process.stderr.write(`Ledger backup saved: ${backup}
 `);
           }
-          this.database.exec(__default2);
+          if (version3.version === 1) this.database.exec(__default2);
+          this.database.exec(__default3);
         }
         const cache = new LedgerCache(this.database);
-        cache.synchronize();
+        if (version3.version === 2) cache.rebuild();
+        else cache.synchronize();
         return cache;
       }).immediate();
     } catch (error) {
@@ -1201,12 +1377,22 @@ var Ledger = class {
   policyState(proposed, budgets, now) {
     return this.transaction(() => {
       this.cache.synchronize();
+      const totals2 = {
+        perTask: budgets.perTask ? this.cache.totals(proposed, "perTask", budgets.perTask.window, now) : { amount: "0", count: "0" },
+        perAgent: budgets.perAgent ? this.cache.totals(proposed, "perAgent", budgets.perAgent.window, now) : { amount: "0", count: "0" },
+        global: budgets.global ? this.cache.totals(proposed, "global", budgets.global.window, now) : { amount: "0", count: "0" }
+      };
       return {
         reserved: this.cache.reservation(proposed.paymentKey),
         spent: {
-          perTask: budgets.perTask ? this.cache.spent(proposed, "perTask", budgets.perTask.window, now) : "0",
-          perAgent: budgets.perAgent ? this.cache.spent(proposed, "perAgent", budgets.perAgent.window, now) : "0",
-          global: budgets.global ? this.cache.spent(proposed, "global", budgets.global.window, now) : "0"
+          perTask: totals2.perTask.amount,
+          perAgent: totals2.perAgent.amount,
+          global: totals2.global.amount
+        },
+        counts: {
+          perTask: totals2.perTask.count,
+          perAgent: totals2.perAgent.count,
+          global: totals2.global.count
         }
       };
     });
@@ -1215,6 +1401,9 @@ var Ledger = class {
   rebuildCache() {
     this.transaction(() => this.cache.rebuild());
   }
+  eventCount() {
+    return countRowSchema.parse(this.database.prepare("SELECT COUNT(*) AS count FROM events").get()).count;
+  }
   events() {
     return this.database.prepare("SELECT payload FROM events ORDER BY ts, id").all().map((row) => paymentEventSchema.parse(JSON.parse(rowSchema.parse(row).payload)));
   }
@@ -1243,7 +1432,7 @@ var Ledger = class {
 };
 
 // src/proxy/index.ts
-import { Console } from "console";
+import { Console as Console2 } from "console";
 import {
   createServer,
   request as httpRequest,
@@ -1258,7 +1447,7 @@ var incomingHeadersSchema = z9.record(
 );
 var sockets = /* @__PURE__ */ new WeakMap();
 var tlsUnmeteredMessage = "Encrypted CONNECT tunnel forwarded without payment visibility. Use the SDK or explicit upstream mode to meter HTTPS.";
-var notices = new Console({ stdout: process.stdout, stderr: process.stderr, ignoreErrors: true });
+var notices = new Console2({ stdout: process.stdout, stderr: process.stderr, ignoreErrors: true });
 var tlsNoticeShown = false;
 function normalizedHeaders(input) {
   const result = {};
@@ -1315,7 +1504,7 @@ function json(response, status, body) {
   response.end(JSON.stringify(body));
 }
 function createProxy(options) {
-  const config = parseConfig(options.config);
+  const config = configSchema.parse(options.config);
   const meter = new Meter(options.ledger, config);
   const server = createServer({ requestTimeout: 0 }, (request, response) => {
     let target;
@@ -1512,13 +1701,14 @@ async function closeProxy(server) {
 import { z as z10 } from "zod";
 
 // package.json
-var version = "0.2.2";
+var version = "0.3.0";
 
 // src/version.ts
 var version2 = z10.string().regex(/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/).parse(version);
 
 export {
   integerStringSchema,
+  amountSchema,
   httpUrlSchema,
   labelSchema,
   paymentEventSchema,
@@ -1528,14 +1718,17 @@ export {
   parseConfig,
   expandPath,
   portInputSchema,
+  loadConfigDetails,
   loadConfig,
+  assetMetadata,
+  knownAssets,
   matchesAsset,
   totalSchema,
   deriveEvents,
   countsAsSpend,
   totals,
   formatAmount,
-  spentForBudget,
+  totalsForBudget,
   evaluate,
   X402Rail,
   Meter,