@rackbops/plugin-tracker 0.13.0 → 0.14.0

package/README.md

@@ -13,7 +13,8 @@ slice 3) -- the JSON task API with personal API tokens (#80, slice 4), for a pro
 you, such as a later intake agent (plan E10) -- and the one-off research request (#82, plan E8,
 category 5): a question looked into on the web by a model run, checked by a second run against its
 sources, and DMed once, with its claims kept as findings -- and an admin raising one person's
-daily model ceiling from the web (#82, plan 5.7). The model runs never happen here: they go
+daily model ceiling from the web (#82, plan 5.7), with an operator switch that turns the daily
+ceilings off for the alpha and an admin page of daily model usage to evaluate it by. The model runs never happen here: they go
 through city-hall to Rackbops/docket-runner on roshne's own host (plan 5.12), and the whole execute
 lane stays off until the city-hall Executor is configured (Configuration below).
 
@@ -127,7 +128,11 @@ says research is not available; it does not list the waiting ones (`/tasks` does
 calls in all. At a ceiling the person's research waits until midnight Eastern; the person gets one
 DM and the admins one each. Reminders, renewals and prices never count. An admin can raise one
 person's ceiling from their admin page (0.13.0, below); the global ceiling still applies to everyone
-together.
+together. **For the alpha the ceilings can be switched off** (0.14.0; roshne, 2026-10-02, choosing option
+A: "A.  but lets build in an unlimited budget "flag" during alpha, evaluate usage during alpha, then
+test budgets during beta"): with `TRACKER_BUDGET_UNLIMITED` on (Configuration, below) no daily ceiling holds a run,
+while each Job's own caps (15 turns and 1 USD for a research run) still bound it and every run is
+still charged, so `/admin/usage` (below) shows what the defaults would have held.
 
 **Findings.** A passed research answer's claims are stored with their first source (docket's
 `findings`), shown on the task's page to its owner, accepted recipients and admins (docket's
@@ -284,6 +289,16 @@ the function the command path runs:
   when) and a log line (`u1 set u2's daily ceiling to 4 USD / 40 calls (c1)`).
 - **Remove from the tracker**: forget-me for that person (below), with the same confirmation.
 
+**Usage** (0.14.0). `/admin/usage`, linked from every admin page, shows the model spend per budget
+day (midnight Eastern) for the last 14 days, newest first: dollars and calls for everyone together,
+then per person. Each row is measured against the default ceilings, not a person's raise -- a
+"would have hit the 20 call limit" (or "2.00 USD") marker on a day that reached one, and how many
+calls were charged after it had, roughly what that ceiling would have held (docket checks before a
+run and charges at its end). It reads docket's `usage` table, which every run is charged to whether
+budgets are on or off -- the way to evaluate the alpha with `TRACKER_BUDGET_UNLIMITED` on
+(Configuration, below). Read-only, and like every admin page answers anyone who is not an admin
+with the unknown page's 404.
+
 **Deliveries** (0.10.0). `/admin/deliveries`, linked from every admin page, lists the DMs that
 settled `failed`, `unconfirmed` or `deferred` in the last 30 days, newest first, at most 200 rows
 (the page says how many matched when the bound cuts it). Each row: the task (its title, linking to
@@ -294,8 +309,10 @@ say). Before 0.10.0 these showed only in the bot log, where the warnings still g
 read-only, and like every admin page answers anyone who is not an admin with the unknown page's 404.
 
 Not here yet, though plan 5.10 lists them: grants and retry, and an admin pause of someone else's
-task. Of budgets, raising one person's ceiling is here; the global ceiling and the defaults are
-docket's constants.
+task. Of budgets, raising one person's ceiling and the usage page are here; the global ceiling and
+the defaults are docket's constants, and turning budgets off is the operator's
+`TRACKER_BUDGET_UNLIMITED`, not a web control. While it is on, the ceiling section says the ceiling
+is not enforced; a change is still recorded and applies once it is off.
 
 **Forget me** (plan 5.8). A signed-in person erases themselves from `/forget` (web only: the plan
 asks for no Discord command, so without `TRACKER_WEB_URL` the only path is an admin with the web
@@ -499,6 +516,7 @@ $ curl -s https://clerk.example.com/tracker/api/v1/tasks/t9 -H "Authorization: B
 | Store | `src/store.ts`, `src/schema.ts` | docket's `Store` port on `bun:sqlite`, in `<dataDir>/tracker/tracker.sqlite` (WAL). A Discord id belongs to at most one user. Schema versioned by `PRAGMA user_version`; a shipped migration is never edited. Schema 5 (0.9.0) is docket 0.4.0's: a run's `record`, a series point's `key`, `deliveries` (from `delivery_claims`), `usage` and `notices`. Schema 6 (0.11.0) is docket 0.5.0's, all additive: `findings`, a charge's `usage.key`, and the Executor's `executor_jobs`. Forget-me erases a person's findings and their runs' Job records too. `store.test.ts` runs docket's `STORE_CONTRACT` against it. |
 | Notify lane | `src/notify-lane.ts` | docket's `Lanes.tickNotify` on two host ticks, every 60 s, one pass per task with work (a due run, a run in flight, a DM owed or claimed), each under that task's lock through a view of the store limited to that task: `notify` runs every type but the page readers, `poll` runs only them (`price`) with the Fetch port, so a slow page never holds up a reminder. A task the execute tick holds is left for the next notify tick, never waited on. Registers `reminder`, `renewal`, `price` and `research`. |
 | Execute lane | `src/execute-lane.ts`, `src/executor.ts`, `src/research.ts` | Only when the city-hall Executor is configured: a third host tick, `execute`, that starts docket's `Lanes.tickExecute` in the background (one at a time, at most once a minute) over every task with a due execute-lane run, reserving those tasks and then holding their locks in id order, through one docket `Lanes` kept while the plugin is active (docket keeps its usage-limit pause on it). The Executor is city-hall#18's source pair (above), its I/O injected; `executor_jobs` keeps each Job key's city-hall id. `/research`'s rules. |
+| Budgets, usage | `src/ceilings.ts`, `src/usage.ts`; `src/web/ceiling-pages.ts`, `src/web/usage-pages.ts` | The execute lane's `BudgetPolicy` (docket's defaults plus each person's raise, or no ceiling at all while `TRACKER_BUDGET_UNLIMITED` is on), the ceiling changes, and the pure usage report `/admin/usage` renders from docket's `usage` table. |
 | Page reads | `src/fetch.ts` | docket's `Fetch` port for `price`: http or https on the default port, no credentials, every resolved address public (no loopback, private, link-local, CGNAT, multicast or reserved range, IPv4 or IPv6), redirects followed by hand and re-checked (at most 5), 15 s including the name lookup, at most 3 MB kept. The body is then rebuilt in linear time (`src/page.ts`) to just what extraction reads -- JSON-LD, meta tags, and the page with every `<` blanked, so `near` still reads text, attributes and script data -- because docket's extraction patterns take quadratic time on a page of unclosed tags. A read the tick's abort cuts short requeues its run instead of counting a miss. A DNS answer that changes between the check and the read is not caught here. |
 | Renewals, prices | `src/tracked.ts`, `src/price.ts`, `src/series.ts`, `src/page.ts` | `/renewal`, `/price` and `/task decide`; the series lines of `/task history`. The series (docket's `series` table, schema 1) holds a renewal's paid amounts and a price's readings. |
 | Delivery | `src/notifier.ts`, `src/buttons.ts` | docket's `Notifier` over `host.dm`, with the buttons. docket claims each (run, person) in the store's `deliveries` before the DM and settles it after. The notifier maps the host's answers to docket's errors: cannot be messaged (50007) or an unknown user is `DeliveryFailedError(msg, true)` (failed for good; 50007 and 10013 count toward the pause); a message refused for its content is a plain `DeliveryFailedError` (retried); a paused person is `ExecutorUnavailableError` (deferred); anything else is rethrown, so docket settles it unconfirmed and never resends it. |
@@ -519,6 +537,7 @@ $ curl -s https://clerk.example.com/tracker/api/v1/tasks/t9 -H "Authorization: B
 | `TRACKER_ADMIN_DISCORD_IDS` | no | Comma-separated Discord user ids (spaces around commas allowed; an empty entry, as from a trailing comma, is refused and the plugin does not load) made admin at start. Unset = none. Removing an id does not revoke it. |
 | `TRACKER_GUILD_ID` | no | The Discord server whose members may use the tracker, or a comma-separated list of them (spaces around commas allowed; a repeated id counts once): a member of any listed server passes. Checked through the interaction's client with a single-member lookup per server (no privileged intent), all asked at once; a yes from any server is a member, a no from every server is not, and otherwise the answer is unknown (refused, never revoked). Inside a listed server, the person running a command needs no lookup. Unset = no membership gate, and a warning is logged each time the plugin activates; a malformed or empty entry anywhere in the list refuses to load, naming it. One store and one admission list serve every listed server; there are no per-server admins. |
 | `TRACKER_WEB_URL` | no | The https origin the bot's HTTP is reached at through its tunnel, e.g. `https://clerk.example.com` (no path). `/web` links and the allowed `Origin` come from it, never from a request's `Host`. Unset = no web area (`/web` says so, the pages answer 404); anything but a bare https origin refuses to load. |
+| `TRACKER_BUDGET_UNLIMITED` | no | Budgets off for the alpha (0.14.0): `true` or `1` means no daily ceiling -- a person's or the global one -- holds a model run, bot-wide. Each Job's own caps still apply, usage is still recorded (see `/admin/usage`), the bot logs one line at start saying so (or, with the execute lane off, that no model work runs), the People and Usage admin pages show a "Budgets off (alpha): unlimited" banner, and the person page's ceiling section shows a "not enforced" note. Unset, empty, `false` or `0` = the ceilings apply (the default); anything else refuses to load. |
 | `TRACKER_CITY_HALL_URL` | no | The https origin of the city-hall that queues the tracker's model Jobs (no path). |
 | `TRACKER_CITY_HALL_KEY` | yes | The source bearer key city-hall checks on `/api/execute/jobs` (its `CITY_HALL_API_KEY`, city-hall#18). Never logged. Kept in the instance's own env, never in a repo. |
 | `TRACKER_CITY_HALL_CAPABILITY` | no | The capability tag every Job names, one only docket-runner carries (plan item 71), e.g. `claude-cli:subscription`. No default: a guessed tag could send the tracker's Jobs to another agent. |

package/dist/plugin.js

@@ -3331,6 +3331,7 @@ function isRaised(latest) {
 function budgetNoticeKey(userId, at) {
   return `budget:person:${userId}:${budgetDay(at).day}`;
 }
+var NOT_ENFORCED = "Budgets are off (alpha): TRACKER_BUDGET_UNLIMITED is on, so no ceiling is enforced; this one applies once it is turned off.";
 var HISTORY_SHOWN = 20;
 function toChange(r) {
   return { id: `c${r.seq}`, userId: r.user_id, usd: r.usd, calls: r.calls, setBy: r.set_by, at: r.at };
@@ -3385,8 +3386,9 @@ async function setCeiling(d, admin, targetId, input) {
     return { ok: true, text: `${who2(target)} is already on the default ceiling.` };
   const change = d.ceilings.record(target.id, decided.limits, admin.id, d.clock.now().toISOString());
   const now = limitsOf(change);
+  const note = d.budgetUnlimited ? ` ${NOT_ENFORCED}` : "";
   d.log.info(`${admin.id} set ${target.id}'s daily ceiling to ${decided.limits === null ? "the default" : `${now.usd} USD / ${now.calls} calls`} (${change.id})`);
-  return decided.limits === null ? { ok: true, text: `${who2(target)} is back on the default ceiling: ${describeLimits(now)}.` } : { ok: true, text: `${who2(target)}'s ceiling is now ${describeLimits(now)}, until an admin changes it.` };
+  return decided.limits === null ? { ok: true, text: `${who2(target)} is back on the default ceiling: ${describeLimits(now)}.${note}` } : { ok: true, text: `${who2(target)}'s ceiling is now ${describeLimits(now)}, until an admin changes it.${note}` };
 }
 
 // plugins/tracker/src/delivery-health.ts
@@ -8869,7 +8871,8 @@ function ceilingSection(v, personId, view, now) {
   const { min, max } = view.bounds;
   return html`<section>
 <h2>Daily model budget</h2>
-<p>Today: ${view.today.usd.toFixed(2)} USD and ${view.today.calls} model call(s). Ceiling: ${describeLimits(limits)}${raised ? html` <span class="rb-badge">raised</span>` : " (the default)"}.</p>
+${view.unlimited ? html`<div class="rb-alert rb-alert--warning" role="status"><p>${NOT_ENFORCED}</p></div>` : null}
+<p>Today: ${view.today.usd.toFixed(2)} USD and ${view.today.calls} model call(s). Ceiling: ${describeLimits(limits)}${raised ? html` <span class="rb-badge">raised</span>` : " (the default)"}${view.unlimited ? " -- not enforced" : null}.</p>
 <p class="rb-muted">A raise stands until an admin changes it. Setting exactly the default puts them back on it. It may not go below the default (${describeLimits(view.defaults)}) or above the global ceiling (${describeLimits(max)}), which still applies to everyone together. A day ends at midnight Eastern.</p>
 <form method="post" action="${action}" class="tr-stack">
 ${csrf}
@@ -8887,6 +8890,74 @@ ${view.history.length === 0 ? html`<p class="rb-muted">No admin has changed thei
 </section>`;
 }
 
+// plugins/tracker/src/usage.ts
+var BUDGET_UNLIMITED_KEY = "TRACKER_BUDGET_UNLIMITED";
+function parseBudgetUnlimited(raw) {
+  const value = (raw ?? "").trim().toLowerCase();
+  if (value === "" || value === "false" || value === "0")
+    return false;
+  if (value === "true" || value === "1")
+    return true;
+  throw new Error(`${BUDGET_UNLIMITED_KEY} must be true, 1, false or 0 (or unset)`);
+}
+var NO_LIMITS = Object.freeze({ usd: null, calls: null });
+var UNLIMITED_BUDGET = Object.freeze({ person: NO_LIMITS, global: NO_LIMITS });
+function executeBudget(ceilings, unlimited) {
+  return unlimited ? UNLIMITED_BUDGET : budgetPolicy(ceilings);
+}
+var UNLIMITED_LOG = `budgets off (alpha): ${BUDGET_UNLIMITED_KEY} is on, so no daily ceiling holds a model run; each Job's own caps still apply and usage is still recorded`;
+var UNLIMITED_IDLE_LOG = `${BUDGET_UNLIMITED_KEY} is on, but the execute lane is off, so no model work runs for it to leave unbudgeted`;
+var UNLIMITED_BANNER = "Budgets off (alpha): unlimited. No daily ceiling holds a model run while TRACKER_BUDGET_UNLIMITED is on; usage is still recorded.";
+var USAGE_DAYS = 14;
+function usageWindow(now, days = USAGE_DAYS) {
+  const out = [budgetDay(now)];
+  while (out.length < days)
+    out.unshift(budgetDay(new Date(Date.parse(out[0].start) - 1)));
+  return out;
+}
+function measure(rows, limits) {
+  const total = { usd: 0, calls: 0 };
+  let past = 0;
+  for (const r of rows) {
+    if (reached(total, limits) !== null)
+      past += r.calls;
+    total.usd += r.costUsd;
+    total.calls += r.calls;
+  }
+  return { ...total, reached: reached(total, limits), past };
+}
+function byAt(a, b) {
+  return a.at < b.at ? -1 : a.at > b.at ? 1 : 0;
+}
+function usageReport(rows, now, days = USAGE_DAYS, policy = DEFAULT_BUDGET) {
+  const window = usageWindow(now, days);
+  const index = new Map(window.map((w, i) => [w.day, i]));
+  const buckets = window.map(() => []);
+  for (const r of [...rows].sort(byAt)) {
+    const i = index.get(budgetDay(new Date(r.at)).day);
+    if (i !== undefined)
+      buckets[i]?.push(r);
+  }
+  const out = window.map((w, i) => {
+    const dayRows = buckets[i] ?? [];
+    const users = [...new Set(dayRows.map((r) => r.userId))];
+    const people = users.map((userId) => ({ userId, ...measure(dayRows.filter((r) => r.userId === userId), policy.person) })).sort((a, b) => b.usd - a.usd || b.calls - a.calls || (a.userId < b.userId ? -1 : 1));
+    return { day: w.day, everyone: measure(dayRows, policy.global), people };
+  });
+  return {
+    days: out.reverse(),
+    person: policy.person,
+    global: policy.global,
+    since: window[0].start,
+    before: window.at(-1).end
+  };
+}
+async function loadUsage(store, now, days = USAGE_DAYS) {
+  const window = usageWindow(now, days);
+  const rows = await store.listUsage({ since: window[0].start, before: window.at(-1).end });
+  return usageReport(rows, now, days);
+}
+
 // plugins/tracker/src/web/admin-pages.ts
 var CONFIGURED_NOTE = "Named in TRACKER_ADMIN_DISCORD_IDS: made an admin again at every start, so they cannot be revoked or removed here. Remove them from the configuration first.";
 var CONFIRM_WORD = "forget";
@@ -8908,7 +8979,10 @@ function hidden(v) {
   return html`<input type="hidden" name="csrf" value="${v.csrf}">`;
 }
 function adminNav(v) {
-  return html`<p class="tr-row"><a class="rb-link" href="${v.base}/admin">People</a> <a class="rb-link" href="${v.base}/admin/tasks">All tasks</a> <a class="rb-link" href="${v.base}/admin/deliveries">Deliveries</a></p>`;
+  return html`<p class="tr-row"><a class="rb-link" href="${v.base}/admin">People</a> <a class="rb-link" href="${v.base}/admin/tasks">All tasks</a> <a class="rb-link" href="${v.base}/admin/deliveries">Deliveries</a> <a class="rb-link" href="${v.base}/admin/usage">Usage</a></p>`;
+}
+function budgetsOffBanner(unlimited) {
+  return unlimited ? html`<div class="rb-alert rb-alert--warning" role="status"><p><strong>${UNLIMITED_BANNER}</strong></p></div>` : null;
 }
 function personHref(v, id, action = "") {
   return `${v.base}/admin/people/${encodeURIComponent(id)}${action ? `/${action}` : ""}`;
@@ -8943,6 +9017,7 @@ function adminPage(v, data, o = {}) {
   return framed(v, "Admin", html`<section>
 <h1>People</h1>
 ${adminNav(v)}
+${budgetsOffBanner(o.unlimited === true)}
 ${flash(o.result ?? null)}
 <div class="rb-table-scroll"><table class="rb-table">
 <thead><tr><th scope="col">Person</th><th scope="col">Status</th><th scope="col">Zone, hour</th><th scope="col">Delivery</th><th scope="col">Tasks</th></tr></thead>
@@ -9078,6 +9153,48 @@ ${hidden(v)}
 </section>`);
 }
 
+// plugins/tracker/src/web/usage-pages.ts
+function marker(m, limits) {
+  if (m.reached === null)
+    return html`<span class="rb-muted">under</span>`;
+  const which = m.reached === "calls" ? `${limits.calls} call` : `${(limits.usd ?? 0).toFixed(2)} USD`;
+  const past = m.past > 0 ? `; ${m.past} call(s) after it` : "";
+  return html`<span class="rb-badge">would have hit the ${which} limit</span>${past}`;
+}
+function row(day, who, m, limits) {
+  return html`<tr>
+<td>${day ?? ""}</td>
+<td>${who}</td>
+<td>${m.usd.toFixed(2)}</td>
+<td>${m.calls}</td>
+<td>${marker(m, limits)}</td>
+</tr>`;
+}
+function adminUsagePage(v, data) {
+  const { report, names } = data;
+  const rows = report.days.map((d) => {
+    if (d.everyone.calls === 0 && d.everyone.usd === 0) {
+      return html`<tr><td>${d.day}</td><td colspan="4" class="rb-muted">No model use.</td></tr>`;
+    }
+    return [
+      row(d.day, html`<strong>Everyone</strong>`, d.everyone, report.global),
+      ...d.people.map((p) => row(null, html`<a class="rb-link" href="${personHref(v, p.userId)}">${names.get(p.userId) ?? p.userId}</a>`, p, report.person))
+    ];
+  });
+  const total = report.days.reduce((s, d) => ({ usd: s.usd + d.everyone.usd, calls: s.calls + d.everyone.calls }), { usd: 0, calls: 0 });
+  return framed(v, "Usage", html`<section>
+<h1>Model usage</h1>
+${adminNav(v)}
+${budgetsOffBanner(data.unlimited)}
+<p>The last ${report.days.length} days, newest first: ${total.usd.toFixed(2)} USD and ${total.calls} model call(s) in all. A day ends at midnight Eastern. Dollars are the CLI's list-price estimate, not a bill.</p>
+<p class="rb-muted">Each row is measured against the default ceilings -- ${describeLimits(report.person)} a person, ${describeLimits(report.global)} for everyone together -- not a person's raised one. "Would have hit" means that day's spend reached the ceiling; "calls after it" are the calls charged once it had, roughly what it would have held (the ceiling is checked before a run and the run charged at its end).${data.unlimited ? " While budgets are off, nothing is held." : ""}</p>
+<div class="rb-table-scroll"><table class="rb-table">
+<thead><tr><th scope="col">Day</th><th scope="col">Who</th><th scope="col">USD</th><th scope="col">Calls</th><th scope="col">Default ceiling</th></tr></thead>
+<tbody>${rows}</tbody>
+</table></div>
+</section>`);
+}
+
 // plugins/tracker/src/web/admin.ts
 function unknownPage(base) {
   return htmlResponse(notFoundPage(base), 404);
@@ -9101,7 +9218,7 @@ function confirmed(form) {
 var WRONG_WORD = `Type ${CONFIRM_WORD} to confirm. Nothing was deleted.`;
 async function peoplePage(a, result, status, allow) {
   const data = { people: a.d.roster.people(), blocks: a.d.roster.activeBlocks(a.d.clock.now()), now: a.d.clock.now() };
-  return htmlResponse(adminPage(a.v, data, { result, ...allow !== undefined ? { allow } : {} }), status);
+  return htmlResponse(adminPage(a.v, data, { result, unlimited: a.d.budgetUnlimited === true, ...allow !== undefined ? { allow } : {} }), status);
 }
 async function onePerson(a, id, result = null) {
   const everyone = a.d.roster.people();
@@ -9117,7 +9234,8 @@ async function onePerson(a, id, result = null) {
     today: await spentToday(a.d.store, p.id, now),
     defaults: DEFAULT_BUDGET.person,
     bounds: boundsOf(),
-    names: new Map(everyone.map((x) => [x.id, nameOf(x)]))
+    names: new Map(everyone.map((x) => [x.id, nameOf(x)])),
+    unlimited: a.d.budgetUnlimited === true
   };
   return htmlResponse(personPage(a.v, p, tasks, now, result, isConfiguredAdmin(a.d, p), tokens, budget), result && !result.ok ? 400 : 200);
 }
@@ -9126,6 +9244,11 @@ async function adminGet(a, r) {
     return peoplePage(a, null, 200);
   if (r.kind === "admin-person")
     return onePerson(a, r.id);
+  if (r.kind === "admin-usage") {
+    const now = a.d.clock.now();
+    const people = new Map(a.d.roster.people().map((p) => [p.id, nameOf(p)]));
+    return htmlResponse(adminUsagePage(a.v, { report: await loadUsage(a.d.store, now), names: people, unlimited: a.d.budgetUnlimited === true }));
+  }
   const people = new Map(a.d.roster.people().map((p) => [p.id, nameOf(p)]));
   if (r.kind === "admin-deliveries") {
     const now = a.d.clock.now();
@@ -10131,6 +10254,8 @@ function route2(path) {
     return { kind: "admin-tasks" };
   if (path === "/admin/deliveries")
     return { kind: "admin-deliveries" };
+  if (path === "/admin/usage")
+    return { kind: "admin-usage" };
   if (path === "/admin/allow")
     return { kind: "admin-allow" };
   const ceiling = PERSON_CEILING.exec(path);
@@ -10484,6 +10609,7 @@ function createWebHandler(w) {
       case "admin":
       case "admin-tasks":
       case "admin-deliveries":
+      case "admin-usage":
       case "admin-person":
         return adminGet(a, r);
       default:
@@ -10534,6 +10660,7 @@ function createPlugin(host, options = {}) {
   const guildIds = parseGuildIds(host.env.TRACKER_GUILD_ID);
   const webOrigin = parseWebUrl(host.env.TRACKER_WEB_URL);
   const cityHall = parseCityHallConfig(host.env);
+  const budgetUnlimited = parseBudgetUnlimited(host.env[BUDGET_UNLIMITED_KEY]);
   const cityHallConfig = cityHall.config;
   const executeOn = cityHallConfig !== null || options.executor !== undefined;
   const clock = options.clock ?? { now: () => new Date };
@@ -10740,7 +10867,9 @@ function createPlugin(host, options = {}) {
         });
       }
       const ceilings = new Ceilings(opened);
-      executeLane = executor ? new ExecuteLane({ store: openedStore, clock, types, notifier, executor, locks, budget: budgetPolicy(ceilings) }) : null;
+      executeLane = executor ? new ExecuteLane({ store: openedStore, clock, types, notifier, executor, locks, budget: executeBudget(ceilings, budgetUnlimited) }) : null;
+      if (budgetUnlimited)
+        host.log.info(executeLane ? UNLIMITED_LOG : UNLIMITED_IDLE_LOG);
       if (cityHallConfig)
         host.log.info(`execute lane on: city-hall ${cityHallConfig.url}, capability ${cityHallConfig.capability}`);
       else if ("missing" in cityHall && cityHall.missing.length > 0)
@@ -10761,6 +10890,7 @@ function createPlugin(host, options = {}) {
         apiTokens: new ApiTokens(opened),
         roster: new Roster(opened),
         ceilings,
+        budgetUnlimited,
         configuredAdmins: new Set(adminIds),
         lanes,
         webEditor: webOrigin !== null,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@rackbops/plugin-tracker",
-  "version": "0.13.0",
-  "description": "The task tracker for Rackbops Clerk: reminders, renewals, price drops and one-off research (through city-hall, with its findings) by slash command, delivered by DM with buttons, on docket's SQLite store (/allow, /register, /remind, /renewal, /price, /research, /tasks, /task, /settings, /web), with a web area for your tasks, history and settings, a web editor to make, change, pause and delete your own tasks (research requests too, made but not changed), an admin view (with the DMs that did not arrive, and raising a person's daily model ceiling), forget-me, and a JSON task API with personal API tokens",
+  "version": "0.14.0",
+  "description": "The task tracker for Rackbops Clerk: reminders, renewals, price drops and one-off research (through city-hall, with its findings) by slash command, delivered by DM with buttons, on docket's SQLite store (/allow, /register, /remind, /renewal, /price, /research, /tasks, /task, /settings, /web), with a web area for your tasks, history and settings, a web editor to make, change, pause and delete your own tasks (research requests too, made but not changed), an admin view (with the DMs that did not arrive, raising a person's daily model ceiling, and daily model usage per person), an operator switch that turns the daily budgets off for the alpha, forget-me, and a JSON task API with personal API tokens",
   "type": "module",
   "main": "dist/plugin.js",
   "files": ["dist"],
@@ -44,6 +44,13 @@
         "secret": false,
         "description": "The https origin the bot's HTTP is reached at through its tunnel, e.g. https://clerk.example.com (no path). /web links to <this>/tracker/login, and a form post from any other origin is refused. Unset = no web area: /web says so and its pages answer 404."
       },
+      {
+        "key": "TRACKER_BUDGET_UNLIMITED",
+        "format": "^ *([Tt][Rr][Uu][Ee]|[Ff][Aa][Ll][Ss][Ee]|1|0)? *$",
+        "required": false,
+        "secret": false,
+        "description": "Budgets off for the alpha: true or 1 means no daily ceiling (per person or for everyone) holds a model run, bot-wide. Each Job's own caps still apply, usage is still recorded, the People and Usage admin pages show a budgets-off banner, and the person page shows a not-enforced note. Unset, empty, false or 0 = the daily ceilings apply (the default); anything else refuses to load."
+      },
       {
         "key": "TRACKER_CITY_HALL_URL",
         "format": "^https://[A-Za-z0-9.-]+(:[0-9]{1,5})?/?$",