From f6f7be5e5169751315f2c9a710ba6c5621b15721 Mon Sep 17 00:00:00 2001 From: drjones Date: Fri, 2 Oct 2026 07:14:32 -0700 Subject: [PATCH] fix: increment total_calls on every metered call (audit finding) --- draco_core.py | 1 + 1 file changed, 1 insertion(+) diff --git a/draco_core.py b/draco_core.py index 1614f86..f790b2d 100644 --- a/draco_core.py +++ b/draco_core.py @@ -434,6 +434,7 @@ def consume(user, kind, detail="", ip=""): c.close() return False, "Out of credits. Free tier: %d/mo. Buy more at %s/pricing" % ( CFG["free_monthly"], CFG["base_url"]) + c.execute("UPDATE users SET total_calls=total_calls+1 WHERE id=?", (user["id"],)) c.execute("INSERT INTO usage_log (user_id, api_key, ip, kind, detail) VALUES (?,?,?,?,?)", (user["id"], user["api_key"], ip, kind, detail[:200])) else: