toolroll 0.9.90 → 0.9.92

package/dist/server/render-chat.js

@@ -34,7 +34,7 @@ import { chatMoney, oneLineOf, relativeAge, safePrUrl, screen, sentenceCase, str
 import { chatResultHref, projectChatHref, taskChatHref, taskHref } from "./http.js";
 import {} from "./render-pages.js";
 import { completionReceiptCard } from "./render-results.js";
-import { agentsAvailabilityHtml, agentsBadgesHtml, agentsStripHtml, agentsSummaryWords, agentsWhyHtml, approvalSheetHtml, checkProgressHtml, consentClosedHtml, consentDoorOf, decisionAnswerCard, dispatchHeadline, milestoneProgressHtml, planRevisionLedgerHtml, profileWords, sizeConsequence, taskControlDetailsHtml, taskStatusCard, taskViewSwitch } from "./render-tasks.js";
+import { routeEvidenceHtml, agentsAvailabilityHtml, agentsBadgesHtml, agentsStripHtml, agentsSummaryWords, agentsWhyHtml, approvalSheetHtml, checkProgressHtml, consentClosedHtml, consentDoorOf, decisionAnswerCard, dispatchHeadline, milestoneProgressHtml, planRevisionLedgerHtml, profileWords, sizeConsequence, taskControlDetailsHtml, taskStatusCard, taskViewSwitch } from "./render-tasks.js";
 /** The installation fact that the lead was turned on by default, once (its value: the provider). */
 export const LEAD_BY_DEFAULT_FACT = "lead-on-by-default";
 /** The installation fact that the phone card was put away. */
@@ -51,7 +51,7 @@ export function taskChatContext(focus) {
     // conversation never hides which agent runs.
     focus.route === null
         ? ""
-        : html `<div class="task-chat-agents-aside"><span class="eyebrow">agents</span><p class="agents-summary">${agentsSummaryWords(focus.route)}</p><div class="agents-badges">${agentsBadgesHtml(focus.route)}</div>${focus.route.projection === null ? "" : html `${agentsAvailabilityHtml(focus.route.projection)}${agentsWhyHtml(focus.route.projection)}`}<p class="meta"><a href="${taskHref(focus.id)}#agents">Change agents on the task →</a></p></div>`}<div class="task-chat-overview-actions"><a class="task-chat-overview-link" href="${taskHref(focus.id)}">Open full overview →</a></div></aside>`;
+        : html `<div class="task-chat-agents-aside"><span class="eyebrow">agents</span><p class="agents-summary">${agentsSummaryWords(focus.route)}</p>${routeEvidenceHtml(focus.route)}<div class="agents-badges">${agentsBadgesHtml(focus.route)}</div>${focus.route.projection === null ? "" : html `${agentsAvailabilityHtml(focus.route.projection)}${agentsWhyHtml(focus.route.projection)}`}<p class="meta"><a href="${taskHref(focus.id)}#agents">Change agents on the task →</a></p></div>`}<div class="task-chat-overview-actions"><a class="task-chat-overview-link" href="${taskHref(focus.id)}">Open full overview →</a></div></aside>`;
 }
 export function taskChatApproval(focus, csrf) {
     const approval = focus.approval;

package/dist/server/render-tasks.d.ts

@@ -220,7 +220,12 @@ export type RouteView = {
      * every option an exact pair the operator named once in configuration.
      * The form offers these and nothing else. */
     choices: Record<Phase, AgentChoice[]>;
+    /** Results routing (slice 2): "Why this model: …" when an earned rule selected the build leg (route-rules.ts
+     * selectionEvidenceWords), else absent. The selection is sealed; the counts read "so far". */
+    evidence?: string | null;
 };
+/** The evidence line beside the agents, only when an earned rule chose the builder. */
+export declare function routeEvidenceHtml(view: RouteView | null | undefined, className?: string): Html;
 export declare const ROLE_NOUN: Record<RouteProjection["legs"][number]["phase"], string>;
 export declare function agentsStandingWords(view: RouteView): string;
 /** The size line an approval leads its agents with — "Small change: fast
@@ -609,6 +614,8 @@ export declare function taskBodyParts(data: {
     qualityMode?: QualityMode | null;
     /** The phase route (v47) and whether this session may edit it. */
     route?: RouteView | null;
+    /** Results routing (slice 1): this task family's result record in words; null when it has none yet. */
+    resultRecord?: string | null;
     canEditRoute?: boolean;
     runs: Run[];
     /** Proof produced by the newest finished attempt. The two booleans are

package/dist/server/render-tasks.js

@@ -439,6 +439,7 @@ export function approvalSheetParts(input) {
         // The size, said once and plainly beside who builds: "Small change: fast model, no plan".
         projection === null ? "" : sizeLineHtml(projection),
         who.length === 0 ? "" : html `<p class="approval-who">${who.join(" · ")}</p>`,
+        routeEvidenceHtml(route, "approval-evidence"),
         consent,
     ]);
     return { lead, rows, editor, editorForm, details, submit, label: rebuild !== null ? "Approve and build again" : "Approve and start", after, allowing, passwordNote };
@@ -565,6 +566,14 @@ export function profileWords(scope) {
     const terms = sandboxTermsWords(profile);
     return html `${base}<p class="meta" data-scope-network>${networkWords(profile.network ?? null)}</p><p class="meta" data-scope-writes>Writes: ${writesWords(profile.writes)}.</p>${profile.checkAccess === undefined ? "" : html `<p class="meta" data-scope-checks>Checks: ${checkAccessWords(profile.checkAccess)}.</p>`}<p class="meta" data-scope-reads>Reads: ${terms.reads}.</p>${terms.mach === null ? "" : html `<p class="meta" data-scope-mach>${terms.mach.charAt(0).toUpperCase()}${terms.mach.slice(1)}.</p>`}`;
 }
+/** The evidence line beside the agents, only when an earned rule chose the builder. */
+export function routeEvidenceHtml(view, className = "meta") {
+    const words = view?.evidence ?? null;
+    if (words === null)
+        return html ``;
+    const split = words.indexOf(": ");
+    return html `<p class="${className} route-evidence" data-route-evidence><strong>${words.slice(0, split + 1)}</strong>${words.slice(split + 1)}</p>`;
+}
 export const ROLE_NOUN = { plan: "Planner", build: "Builder", repair: "Repair", review: "Reviewer" };
 export function agentsStandingWords(view) {
     return view.kind === "legacy"
@@ -658,6 +667,7 @@ export function agentsCeremonyHtml(view) {
         html `<div class="agents-ceremony"><p class="approval-label">agents</p>`,
         sizeLineHtml(view.projection),
         html `<p class="agents-summary">${view.projection.summary}</p>`,
+        routeEvidenceHtml(view),
         html `<div class="agents-badges">${riskBadgeHtml(view.projection)}<span class="badge">${sentenceCase(view.projection.postureWords)}</span></div>`,
         agentsWhyHtml(view.projection),
         html `<p class="meta">These exact agents are part of what you approve; changing any of them asks for a fresh approval.</p></div>`,
@@ -735,6 +745,7 @@ export function agentsCardHtml(taskId, view, canEdit) {
         html `<section class="card agents-card" id="agents" aria-label="agents">`,
         html `<div class="agents-head"><h3>Agents</h3><div class="agents-badges">${agentsBadgesHtml(view)}</div></div>`,
         html `<p class="agents-summary">${agentsSummaryWords(view)}</p>`,
+        routeEvidenceHtml(view),
         p === null
             ? view.kind === "unreadable"
                 ? html `<p class="agents-halted">Nothing runs for this task until its scope is filed again and approved.</p>`
@@ -2280,6 +2291,8 @@ export function taskBodyParts(data) {
         review.push({ ...approvedScope, label: approvedScope.label === "Approved scope" ? "Approvals" : "Scope" });
     review.push({ label: "Who reviews", parts: [facts.find(one => one.label === "Approval rules")?.parts[0] ?? "Any approver in this project"] });
     review.push({ label: "Publishes as", parts: [publishesAs] });
+    if (data.resultRecord != null)
+        review.push({ label: "Result record", parts: [data.resultRecord] });
     const about = [];
     const filedFact = facts.find(one => one.label === "Filed by");
     about.push(filedFact ?? { label: "Filed by", parts: [filedBy ?? (data.origin != null ? "An automation" : data.filedVia == null ? "Not recorded" : `via ${data.filedVia}`)] });

package/dist/server/route-table.js

@@ -91,6 +91,11 @@ const LOCAL_POSTS = Object.freeze({
     "settings.lead-on": "choose-default-agent",
     // Choosing which open project the pages show: a view filter, never authorization.
     "projects.select": "read",
+    // Results routing: lowering only.
+    "settings.models-turn-off": "routing-turn-off",
+    "settings.models-not-now": "dismiss-suggestion",
+    "settings.models-suggest-off": "dismiss-suggestion",
+    "settings.models-stop": "trial-stop",
     "agents.seen": "mark-seen",
     "agents.watch": "watch-agent",
 });
@@ -483,6 +488,13 @@ for (const one of ["check", "watch", "update"])
 // Passwordless session; model-choices.ts re-proves the session and standing inside its one transaction).
 for (const one of ["agent", "apply"])
     post("settings", `settings.models-${one}`, `/settings/models/${one}`, { scope: "step-up", ...operator("An instance operator changes models.", "/settings/models") });
+// Earned rules (results routing): accepting, keeping a paused rule and switching suggestions on are an instance
+// operator's browser step-up; turning a rule off, Not now and switching suggestions off only take authority away (a
+// signed-in operator, or the local owner in exactly that act: route-store.ts proveRuleDoor re-checks it in the write).
+for (const one of ["accept", "keep", "suggest-on", "try"])
+    post("settings", `settings.models-${one}`, `/settings/models/${one}`, { scope: "step-up", ...operator("An instance operator changes which models run.", "/settings/models") });
+for (const one of ["turn-off", "not-now", "suggest-off", "stop"])
+    post("settings", `settings.models-${one}`, `/settings/models/${one}`, operator("An instance operator changes which models run.", "/settings/models"));
 // Any other models action answers the models area's own refusal.
 post("settings", "settings.models-act", "^\\/settings\\/models\\/.*$", { sample: "/settings/models/unknown", ...MODELS });
 post("settings", "settings.knowledge-refresh", "/settings/knowledge/refresh", { project: "form", limited: "unscoped", ...approver("Sign in as an approver to refresh project context.", "/settings/knowledge") });

package/dist/server/settings.d.ts

@@ -1,5 +1,5 @@
 import type { ServerRuntime } from './runtime.js';
-import { type RoleView } from "../models-ui.js";
+import { type RoleView, type SuggestedView } from "../models-ui.js";
 export declare function createSettingsHandlers(runtime: ServerRuntime): {
     registrations: import("./handler-registry.js").Registration[];
     modelsView: (canManage: boolean, csrf: string, now: Date, said: string | null, problem: string | null, query?: URLSearchParams) => {
@@ -71,5 +71,6 @@ export declare function createSettingsHandlers(runtime: ServerRuntime): {
             taskId: string;
             title: string;
         }[];
+        suggested: SuggestedView;
     };
 };

package/dist/server/settings.js

@@ -76,6 +76,7 @@ import { startConnect } from "../mcp-connect.js";
 import { decideProposal, listProposals, memoryStatus } from "../memory-pass.js";
 import { checkModels, isNewModel, modelOptions, modelWords, RUNTIME_TOOLS, runtimeStates, seenModels, setWatch, updateRuntime, watchState } from "../model-catalog.js";
 import { modelsHtml, modelsScript } from "../models-ui.js";
+import { acceptSuggestion, dismissSuggestion, grantWords, keepRule, modelName, ruleWords, rulesOf, setSuggestModels, startTrial, stopTrial, suggestionsFor, suggestionWords, suggestModelsOn, trialOffersFor, trialOfferWords, trialsOf, trialWords, turnOffRule } from "../route-rules.js";
 import { ALL_SLOTS, applyModelChoices, browserWords, checkScope, DEFAULT_PRESET, defaultAgentOf, fillDefaultRouting, isPresetName, newerModels, PRESETS, presetChange, presetInUse, previewModelChange, recentRuns, rowAt, slotKey, SLOTS, slotWords, stateDigest, switchChange } from "../model-choices.js";
 import { HEADROOM_FIVE_HOUR_LIMIT, HEADROOM_WEEKLY_LIMIT, exactModelId } from "../phase-routing.js";
 import { RISKY_MEANS, SIZE_MEANS, SIZING_CLAUDE_MODEL } from "../task-sizing.js";
@@ -118,6 +119,7 @@ import { slackSettingsHtml } from "../slack-settings.js";
 import { spendHtml, spendScript } from "../spend-ui.js";
 import { approvalFactsNow } from "./kit.js";
 import { spendReport, spendReportCsv, spendRows } from "../spend-report.js";
+import { savingsReportOrError } from "../route-savings.js";
 import { limitsView } from "../limits-ui.js";
 import { budgetStates, monthNamed, spendItems, usd as spendUsd, subagentNames as subagentNamesOf } from "../spend.js";
 import { removeSsoSettings, saveSsoSettings, SSO_CALLBACK, ssoChangeWords } from "../sso-settings.js";
@@ -185,7 +187,9 @@ export function createSettingsHandlers(runtime) {
         };
         const windows = limitsView(store.providerLimits(), [], { project: projectName, subagent: id => subagentNames.get(id) ?? `Subagent ${id}` }, now);
         const view = { month: month.name, previous: shift(-1), next: month.name === current.name ? null : shift(1), current: current.name, report: spendReport(rows),
-            budgets, unlimited, targets, windows, subagentNames, edit, facts: approvalFactsNow() };
+            budgets, unlimited, targets, windows, subagentNames, edit, facts: approvalFactsNow(),
+            // Suggestions and rules (results-routing slice 4): read-only, for every project this console shows.
+            savings: savingsReportOrError(store, consoleProjects(), now) };
         // A refusal for the open form shows in the form; anything else under the limits' heading.
         const said = { said: url.searchParams.get("said"), problem: edit === null ? url.searchParams.get("problem") : null };
         return sendScreen(response, 200, screen("Spend", spendHtml(view, said), { chrome: chromeFor(null, "spend"), functional: { script: spendScript() } }));
@@ -2565,6 +2569,7 @@ ${postForm("/settings/chat-approval/save", html `\
                 chosen: one.chosen === null ? "its default" : /^(opus|sonnet|haiku|fable)$/.test(one.chosen) ? `floating ${one.chosen}` : one.chosen,
                 ranOn: one.ranOn ?? "not reported" })),
             waiting: canManage ? store.scopesAwaitingApproval(null, 10, admissionList()).map(one => ({ taskId: one.taskId, title: one.title })) : [],
+            suggested: suggestedView(repo, projects, query.get("suggestion"), now),
         };
     }
     /** Google's redirect back: the code becomes a saved refresh token, and a page sends the person back to Settings. */
@@ -2739,6 +2744,14 @@ ${postForm("/settings/chat-approval/save", html `\
         "settings.models-agent": modelsSave,
         "settings.models-apply": modelsApply,
         "settings.models-act": modelsAct("other"),
+        "settings.models-accept": modelsRuleAct("accept"),
+        "settings.models-keep": modelsRuleAct("keep"),
+        "settings.models-suggest-on": modelsRuleAct("suggest-on"),
+        "settings.models-turn-off": modelsRuleAct("turn-off"),
+        "settings.models-not-now": modelsRuleAct("not-now"),
+        "settings.models-suggest-off": modelsRuleAct("suggest-off"),
+        "settings.models-try": modelsRuleAct("try"),
+        "settings.models-stop": modelsRuleAct("stop"),
         "settings.knowledge-refresh": knowledgeRefresh,
         "settings.knowledge-proposal": knowledgeProposal,
         "settings.knowledge-decision": knowledgeDecision,
@@ -3005,5 +3018,78 @@ ${postForm("/settings/chat-approval/save", html `\
             return back("problem", turned.reason === "not-on" ? "Local mode is already off." : "Only an instance operator can turn off local mode.");
         return back("said", "Local mode is off. This computer's browser signs in with your password now.");
     }
+    /** Settings → Models → Suggested: one project's offers, rules and switch; on the installation scope, every
+     * project's offers and rules, each reviewed on its own project's page. */
+    function suggestedView(repo, projects, asked, now) {
+        const repos = repo === null ? projects : [repo];
+        const offers = repos.flatMap(one => suggestionsFor(store, one, now));
+        const sizeTitle = (size, name) => `${name} for ${size === "small" ? "small" : "routine"} tasks`;
+        const reviewed = asked === null || repo === null ? null : offers.find(one => one.id === asked && one.repo === repo) ?? null;
+        return {
+            repo,
+            offers: offers.map(one => ({ id: one.id, repo: one.repo, project: projectName(one.repo), title: sizeTitle(one.cohortSize, one.name), words: suggestionWords(one) })),
+            review: asked === null || repo === null ? null : reviewed === null ? { stale: true, repo } : {
+                id: reviewed.id, repo: reviewed.repo, title: `${sizeTitle(reviewed.cohortSize, reviewed.name)} instead of ${reviewed.configured.name}`,
+                evidence: [suggestionWords(reviewed), reviewed.configuredEvidence.decided === 0 ? `${reviewed.configured.name}: no decided similar tasks here in the last 90 days.` : `${reviewed.configured.name}: ${reviewed.configuredEvidence.mature} of its last ${reviewed.configuredEvidence.decided} decided similar tasks accepted with checks passing.`],
+                prices: `${reviewed.name} $${reviewed.prices.model.in} / $${reviewed.prices.model.out}, ${reviewed.configured.name} $${reviewed.prices.configured.in} / $${reviewed.prices.configured.out} per 1M tokens (listed now)`,
+                terms: grantWords(reviewed.grant), save: `Use ${reviewed.name} for ${reviewed.cohortSize === "small" ? "small" : "routine"} tasks`,
+            },
+            rules: repos.flatMap(one => rulesOf(store, one, now)).map(one => ({ id: one.id, repo: one.repo, project: projectName(one.repo), title: sizeTitle(one.cohortSize, modelName(store, one.model)), words: ruleWords(store, one),
+                state: one.state === "active" ? "active" : one.state === "paused" ? "paused" : "ended" })),
+            suggest: repo === null ? null : { on: suggestModelsOn(store, repo) },
+            trialOffers: repos.flatMap(one => trialOffersFor(store, one, now)).map(one => ({ id: one.id, repo: one.repo, project: projectName(one.repo),
+                title: `Try ${sizeTitle(one.cohortSize, one.name)}`, words: trialOfferWords(one), save: `Try it on the next ${one.places}` })),
+            trials: repos.flatMap(one => trialsOf(store, one, now)).map(one => ({ id: one.id, repo: one.repo, project: projectName(one.repo),
+                title: `Trying ${sizeTitle(one.cohortSize, modelName(store, one.model))}`, words: trialWords(store, one), live: one.state === "trialling" || one.state === "paused" })),
+        };
+    }
+    /**
+     * Settings → Models → Suggested (results routing, slice 2): the earned-rule doors (route-rules.ts), re-proved inside
+     * their own transaction. Accepting, keeping a paused rule and switching suggestions on are an instance operator's
+     * step-up (the password, or a Passwordless session); turning a rule off or dropping it, Not now, and switching
+     * suggestions off only take authority away, so a signed-in session does — or this computer's local owner, whose
+     * route row narrows it to exactly that act.
+     */
+    function modelsRuleAct(kind) {
+        return async (ctx) => {
+            const { response, now, posted } = ctx;
+            const who = browserCaller(ctx.who);
+            const body = readForm(posted, CONSOLE_FORMS.modelsRules);
+            const repo = body.get("scope") ?? "";
+            const back = (key, words) => redirect(response, `/settings/models?scope=${encodeURIComponent(repo)}&${key}=${encodeURIComponent(words)}#models-suggested`);
+            if (["scope", "password", "id", "rule"].some(field => body.sent.getAll(field).length > 1))
+                return back("problem", "That form was sent twice over. Nothing changed.");
+            if (!consoleProjects().includes(repo) || !store.accountCanAccess(who.name, repo))
+                return refuse(response, who, 403, "That project is outside your access.", "/settings/models");
+            let door;
+            if (kind === "accept" || kind === "keep" || kind === "suggest-on" || kind === "try") {
+                const proved = authenticateApprover(who, body.get("password") ?? "");
+                if (!proved.ok)
+                    return back("problem", "Enter your Toolroll password to change which models run.");
+                door = { kind: "person", person: modelsAuthority(who, proved.method) };
+            }
+            else {
+                door = who.authority === "local-owner" ? { kind: "local-owner", actor: who.name } : { kind: "person", person: modelsAuthority(who, "session") };
+            }
+            const ruleId = /^[1-9][0-9]{0,9}$/.test(body.get("rule") ?? "") ? Number(body.get("rule")) : -1;
+            const id = body.get("id") ?? "";
+            const result = kind === "accept" ? acceptSuggestion(store, { repo, id }, door, now)
+                : kind === "try" ? startTrial(store, { repo, id }, door, now)
+                    : kind === "stop" ? stopTrial(store, ruleId, door, now)
+                        : kind === "keep" ? keepRule(store, ruleId, door, now)
+                            : kind === "turn-off" ? turnOffRule(store, ruleId, door, now)
+                                : kind === "not-now" ? dismissSuggestion(store, { repo, id }, door, now)
+                                    : setSuggestModels(store, repo, kind === "suggest-on", door);
+            if (!result.ok)
+                return back("problem", result.problem);
+            return back("said", kind === "try" ? "Trial started. The next tasks of that size try the cheaper model; each waits for your approval."
+                : kind === "stop" ? "Trial stopped. New tasks build on the configured model; tasks already approved keep their model."
+                    : kind === "accept" ? "Saved. New tasks of that size build on the suggested model; each is still approved by a person."
+                        : kind === "keep" ? "Kept. The rule is on again with its original terms."
+                            : kind === "turn-off" ? "Turned off. New tasks build on the configured model; tasks already approved keep their model."
+                                : kind === "not-now" ? "Not now. This suggestion stays quiet for 30 days."
+                                    : kind === "suggest-on" ? "Suggestions are on for this project." : "Suggestions are off for this project.");
+        };
+    }
     return { registrations, modelsView };
 }

package/dist/server/task-views.js

@@ -1,3 +1,5 @@
+import { resultRecordWordsOf } from "../route-results.js";
+import { selectionEvidenceWords } from "../route-rules.js";
 import { feedbackImageProblem } from "../result-actions.js";
 import { parseFeedbackImage } from "../result-review.js";
 import { releaseViewOf } from "../release-view.js";
@@ -473,6 +475,8 @@ export function createTaskViews(runtime) {
             // and the focused chat, with the readiness this task's runners report.
             route: routeView,
             canEditRoute: who.role === "approver",
+            // Results routing (slice 1): the family's saved record, or the one its rows give now; never a reason to fail the page.
+            resultRecord: resultRecordWordsOf(runtime.store, taskId, runtime.evidenceRoot, now),
             spendDefaults: runtime.store.getSpendDefaults(),
             permissionDefault: runtime.store.permissionDefault().mode,
             permissionMode: ref?.permissionMode ?? null,
@@ -571,6 +575,8 @@ export function createTaskViews(runtime) {
             replanOnPlanChange: ref.plan === "drafted" && scope !== null && !approvalOf(scope).approved,
             digest: scope?.digest ?? null,
             choices: agentChoicesFor(runtime.store, ref.repo, routed.kind === "route" ? routed.route : null),
+            // Results routing: why an earned rule's model builds it, from the records as they stand now.
+            evidence: routed.kind === "route" ? selectionEvidenceWords(runtime.store, routed.route, now) : null,
         };
         if (routed.kind === "route") {
             return { kind: "route", source: routed.source, projection: projectRoute(routed.route, runtime.store.readinessLookupFor(ref.repo, ref.assignedRunner, now)), legacy: null, problem: null, ...shared };

package/dist/server/tasks.js

@@ -1444,6 +1444,8 @@ export function createTasksHandlers(runtime) {
             const result = requestResultChanges(store, evidenceRoot, {
                 run: id, batch: body.get("batch"), source: body.get("source"), actor: who.name,
                 repos: admissionList(), includeUnplaced: visible(null), allowMode: who.via === "cookie",
+                // A browser session is a person's proof; a bearer credential is a machine's.
+                origin: who.via === "cookie" ? "person" : "machine",
                 note: body.get("note") ?? "", path: body.get("path") ?? "", line: body.get("line") ?? "", request: body.get("request"), image,
             }, now);
             if (!result.ok) {
@@ -1556,6 +1558,7 @@ export function createTasksHandlers(runtime) {
         const result = createResultRevision(store, evidenceRoot, {
             run: id, batch: body.get("batch"), source: body.get("source"), actor: who.name,
             repos: admissionList(), includeUnplaced: visible(null), allowMode: who.via === "cookie",
+            origin: who.via === "cookie" ? "person" : "machine",
         }, now);
         if (!result.ok)
             return refuse(response, who, result.status, result.message, back);

package/dist/settings-proofs.js

@@ -35,11 +35,13 @@ export const PROOF_INVENTORY = [
     { id: "google", action: "Connect or disconnect Google", routes: ["/settings/google", "/settings/google/disconnect"], form: "google", field: null, proof: "none", ...NONE, role: "any", secrets: ["clientSecret"], terms: [] },
     { id: "appearance", action: "Change the theme or accent", routes: ["/settings/appearance"], form: "appearance", field: null, proof: "none", ...NONE, role: "any", secrets: [], terms: [] },
     { id: "chat-approval-confirm", action: "Review approving from chat", routes: ["/settings/chat-approval/confirm", "/settings/chat-approval/off"], form: "chatApproval", field: null, proof: "none", ...NONE, role: "approver", secrets: [], terms: [] },
+    { id: "models-rules-off", action: "Turn an earned rule off, stop a trial, say Not now, or turn suggestions off", routes: ["/settings/models/turn-off", "/settings/models/not-now", "/settings/models/suggest-off", "/settings/models/stop"], form: "modelsRules", field: null, proof: "none", ...NONE, role: "operator", secrets: [], terms: [] },
     ...CHAT_APPS.map(([app, name, form]) => ({ id: `${app}-alerts`, action: `Send alerts to ${name}`, routes: [`/settings/${app}/alerts`], form, field: null, proof: "none", ...NONE, role: "approver", secrets: [], terms: [] })),
     // Step-up: a password typed now, the Passwordless session, or a one-use re-check.
     { id: "permission-default", action: "Start new tasks with Full access", routes: ["/settings/permission-default"], form: "permissionDefault", field: "password", proof: "step-up", when: "only when widening to Full access", ...ACCEPT, role: "any", secrets: [], terms: [] },
     { id: "spend-budget", action: "Set a monthly limit", routes: ["/spend/budget"], form: "spendBudget", field: "password", proof: "step-up", ...ACCEPT, role: "operator", secrets: [], terms: [] },
     { id: "models-agent", action: "Change which model does each job", routes: ["/settings/models/agent"], form: "modelsChange", field: "password", proof: "step-up", ...ACCEPT, role: "operator", secrets: [], terms: ["scope", "digest"] },
+    { id: "models-rules", action: "Accept a suggested model, try a cheaper one, keep a paused rule, or turn suggestions on", routes: ["/settings/models/accept", "/settings/models/keep", "/settings/models/suggest-on", "/settings/models/try"], form: "modelsRules", field: "password", proof: "step-up", ...ACCEPT, role: "operator", secrets: [], terms: ["scope", "id", "rule"], note: "the rule door re-proves the session and its generation in the write" },
     { id: "models-apply", action: "Apply a model preset or switch", routes: ["/settings/models/apply"], form: "modelsChange", field: "password", proof: "step-up", ...ACCEPT, role: "operator", secrets: [], terms: ["scope", "digest", "change"], note: "plus the previewed preset, or switch and to" },
     ...[
         ["policy", "Change the policy", "policy", "operator"],

package/dist/setup-guide.d.ts

@@ -15,10 +15,10 @@ export declare function detectPreparation(repo: string): {
 } | null;
 /** Browser installation may write only this known file inside its project. */
 export declare function previewProjectInstructions(repo: string): {
+    content?: never;
     ok: false;
     message: string;
     plan?: never;
-    content?: never;
     fingerprint?: never;
     installed?: never;
 } | {
@@ -30,10 +30,10 @@ export declare function previewProjectInstructions(repo: string): {
     installed: boolean;
 };
 export declare function addProjectInstructions(repo: string, fingerprint: string): {
+    content?: never;
     ok: false;
     message: string;
     plan?: never;
-    content?: never;
     fingerprint?: never;
     installed?: never;
 } | import("./skills.js").InstallResult;

package/dist/spend-ui.d.ts

@@ -10,6 +10,7 @@ import { type ApprovalFacts } from "./design/kit.js";
 import { type BudgetState, type SpendItem } from "./spend.js";
 import type { SpendReport } from "./spend-report.js";
 import type { BrowserLimits } from "./browser-workspace.js";
+import { type SavingsReport } from "./route-savings.js";
 /** The page's own layout: the limit rows and meters, the summary figures and the quiet bars. Colour from tokens only. */
 export declare const SPEND_CSS: string;
 /** What this page doesn't record, in plain words (docs/plans/spend-dashboard.md §2.2). */
@@ -53,6 +54,10 @@ export type SpendView = {
     facts?: ApprovalFacts;
     /** This month's name (YYYY-MM): the limits are this month's. */
     current?: string;
+    /** Suggestions and rules (route-savings.ts): what each rule, trial and suggestion observed, or that it can't be read. */
+    savings?: SavingsReport | {
+        error: string;
+    } | null;
 };
 /** Dollars for the page: a positive amount under a cent reads "<$0.01", never a false $0. */
 export declare const money: (microusd: number) => string;
@@ -62,6 +67,12 @@ export declare function spendHtml(view: SpendView, said: {
     said?: string | null;
     problem?: string | null;
 }): Html;
+/** Suggestions and rules (docs/plans/results-routing.md, slice 4): per project and size, each live or recently ended
+ * rule or trial, and each standing suggestion, with what it observed over matched 90-day windows. Labelled "observed,
+ * not a promise"; a median shows only from 5 API-priced results a side; unknown is "—", never $0. Read-only. */
+export declare function savingsSection(savings: SavingsReport | {
+    error: string;
+} | null): Html | "";
 /** Checks the amount next to its field before any password is asked or the form leaves the page; the server checks
  * it again. Remove skips it. */
 export declare function spendScript(): string;

package/dist/spend-ui.js

@@ -10,6 +10,7 @@ import { approvalAsk, termsOf } from "./design/kit.js";
 import { acts, btn, chip, disclose, dock, empty, field, input, note, notice, segLinks, settingsShell } from "./server/kit.js";
 import { budgetLabel, usd } from "./spend.js";
 import { runHref, taskHref } from "./server/http.js";
+import { notEnoughWords, pricesWords, sideWords, SAVINGS_LABEL } from "./route-savings.js";
 const projectName = (repo) => repo.split("/").filter(Boolean).pop() ?? repo;
 /** The page's own layout: the limit rows and meters, the summary figures and the quiet bars. Colour from tokens only. */
 export const SPEND_CSS = `.spend{display:grid;gap:24px;min-width:0}.spend-sec{display:grid;gap:0}.spend-sec .k-secthead{margin-bottom:0}.spend-sec .k-secthead small{font-weight:400;color:var(--so-muted);font-size:12.5px}` +
@@ -29,7 +30,14 @@ export const SPEND_CSS = `.spend{display:grid;gap:24px;min-width:0}.spend-sec{di
     `.spend-win.warning .spend-meter>i,.spend-win.danger .spend-meter>i{background:var(--so-danger)}.spend .k-disclose{padding-top:4px}.spend .k-disclose[open]>summary{margin-bottom:8px}` +
     `@media(max-width:760px){.spend-lim-h{grid-template-columns:minmax(0,1fr) auto}.spend-lim-a{grid-column:1/-1}.spend-lim-a .k-btn{width:100%}.spend-sum{grid-template-columns:minmax(0,1fr)}` +
     `.spend-sum>div+div{border-left:0;border-top:1px solid var(--so-line);padding-left:0}.spend-bar{grid-template-columns:minmax(0,120px) minmax(0,1fr) 68px;gap:8px;font-size:12.5px}` +
-    `.spend-edit-row .k-field{flex:1 1 100%}.spend .k-btn.k-btn-primary.k-docked{display:none}}`;
+    `.spend-edit-row .k-field{flex:1 1 100%}.spend .k-btn.k-btn-primary.k-docked{display:none}}` +
+    // Suggestions and rules (results-routing slice 4): each rule's two sides, side by side; stacked on a phone.
+    `.spend-rr{display:grid;gap:10px;padding:14px 0;border-bottom:1px solid var(--so-line);min-width:0}.spend-rr-h{display:flex;flex-wrap:wrap;align-items:center;gap:6px 10px;min-width:0}` +
+    `.spend-rr-t{font-weight:500;overflow-wrap:anywhere;min-width:0}.spend-rr-x{font-size:12.5px;color:var(--so-muted);overflow-wrap:anywhere}` +
+    `.spend-rr-g{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:12px}.spend-rr-s{display:grid;gap:4px;align-content:start;min-width:0;padding:12px;border:1px solid var(--so-line);border-radius:8px}` +
+    `.spend-rr-k{font-size:12px;color:var(--so-muted);overflow-wrap:anywhere}.spend-rr-v{font-size:18px;font-weight:600;font-variant-numeric:tabular-nums}.spend-rr-v small{font-size:12px;font-weight:400;color:var(--so-muted)}` +
+    `.spend-rr-p{display:grid;gap:2px;margin:0;padding:0;list-style:none;font-size:12.5px;color:var(--so-muted)}.spend-rr .k-note{margin:0}` +
+    `@media(max-width:760px){.spend-rr-g{grid-template-columns:minmax(0,1fr)}}`;
 const ROLE_WORDS = {
     builder: "Builds", repair: "Repairs", planner: "Plans", reviewer: "Reviews", scout: "Scouting",
     lead: "Lead chat", chat: "Chat", subagent: "Subagents", flow: "Flows", evals: "Evals",
@@ -148,10 +156,49 @@ export function spendHtml(view, said) {
     const docked = edit !== null && (rows.some(row => row.target === edit.target) || adding !== null)
         ? dock(btn("Save limit", { variant: "primary", type: "submit", attrs: { form: `limit-${edit.target.replace(/[^a-z0-9]+/gi, "-").replace(/^-|-$/g, "").slice(0, 60) || "new"}`, name: "action", value: "save" } }))
         : "";
-    const body = html `<div class="spend">${limits}${monthBar}${figures}${breakdowns}${windows}${notCounted}</div>${docked}`;
+    const body = html `<div class="spend">${limits}${monthBar}${figures}${breakdowns}${windows}${savingsSection(view.savings ?? null)}${notCounted}</div>${docked}`;
     return settingsShell({ group: "spend", title: "Spend", lead: "What agents cost, by project and by model, with the limits that stop them. Dates are UTC months.", body,
         flags: { spend: saved.some(one => one.budget !== null && limitNeedsYou(one.budget)) } });
 }
+const sizeWords = (size) => size === "small" ? "Small tasks" : "Routine tasks";
+const dateWords = (iso) => new Intl.DateTimeFormat("en-US", { month: "short", day: "numeric", year: "numeric", timeZone: "UTC" }).format(new Date(iso));
+const STATUS_TONE = { active: "live", trialling: "live", paused: "needs" };
+/** One side of a rule's comparison: its model and window, the median API dollars a task (— when hidden), and the
+ * completeness, plan usage, unknown cost and remediation counts, each on its own line. */
+function savingsSide(label, side) {
+    const words = sideWords(side);
+    const cap = (text) => text.charAt(0).toUpperCase() + text.slice(1);
+    return html `<div class="spend-rr-s" role="group" aria-label="${label}: ${side.name}" data-side="${label.toLowerCase()}"><span class="spend-rr-k">${label} · ${side.name} · ${dateWords(side.from)} to ${dateWords(side.to)}</span>\
+<span class="spend-rr-v" data-amount-kind="api" data-microusd="${side.medianApiMicrousd ?? ""}">${words.median} <small>median API dollars a task</small></span>\
+<ul class="spend-rr-p"><li data-priced="${side.apiPriced}" data-results="${side.results}">${words.parts[0]}</li><li data-amount-kind="subscription">${cap(words.parts[1])}</li><li data-amount-kind="unknown">${cap(words.parts[2])}</li><li>${cap(words.parts[3])}</li></ul></div>`;
+}
+function savingsRow(row) {
+    const suggestion = row.kind === "suggestion";
+    const what = `${row.cheaper.name} instead of ${row.configured.name}${row.kind === "trial" ? " (a trial)" : suggestion ? " (suggested, not in use)" : ""}`;
+    const href = `/settings/models?scope=${encodeURIComponent(row.repo)}#models-suggested`;
+    return html `<article class="spend-rr" data-savings-row data-kind="${row.kind}" data-state="${row.state}" data-enough="${row.enough ? "yes" : "no"}">\
+<div class="spend-rr-h"><span class="spend-rr-t">${row.project} · ${sizeWords(row.size)}</span>${chip(row.status, STATUS_TONE[row.state] ?? "")}</div><span class="spend-rr-x">${what}</span>\
+<div class="spend-rr-g">${savingsSide(suggestion ? "Configured" : "Before", row.configured)}${savingsSide(suggestion ? "Suggested" : "After", row.cheaper)}</div>\
+${row.enough ? "" : html `<p class="k-note" data-not-enough>${notEnoughWords(row)}</p>`}<p class="k-note" data-prices>${pricesWords(row)}</p>\
+<span><a class="k-link" href="${href}">${suggestion ? "Review in Models settings" : "Open Models settings"}</a></span></article>`;
+}
+/** Suggestions and rules (docs/plans/results-routing.md, slice 4): per project and size, each live or recently ended
+ * rule or trial, and each standing suggestion, with what it observed over matched 90-day windows. Labelled "observed,
+ * not a promise"; a median shows only from 5 API-priced results a side; unknown is "—", never $0. Read-only. */
+export function savingsSection(savings) {
+    if (savings === null)
+        return "";
+    const state = `${SAVINGS_LABEL} · 90 days a side`;
+    if ("error" in savings)
+        return sec("savings", "Suggestions and rules", state, notice("Suggestions and rules can't be read right now. Nothing else on this page is affected."), html ` data-savings="error"`);
+    if (savings.rows.length === 0) {
+        return sec("savings", "Suggestions and rules", state, empty({ title: "No suggestions or rules yet.",
+            text: "When a cheaper model does as well on a project's small or routine tasks, its suggestion shows here, and once it's in use, what it cost before and after." }), html ` data-savings="empty"`);
+    }
+    const stale = savings.staleSince === null ? "" : html `<p class="k-note" data-savings-stale>Some results were last checked on ${dateWords(savings.staleSince)}; they update while Toolroll runs.</p>`;
+    const lead = html `<p class="k-note">Median API dollars a task, including revision and repair runs. Plan usage and unknown cost are counted apart, never added in. A median shows once each side has ${savings.minPriced} results priced in API dollars.</p>`;
+    return sec("savings", "Suggestions and rules", state, html `${lead}${stale}${savings.rows.map(savingsRow)}`, html ` data-savings="rows"`);
+}
 /** Checks the amount next to its field before any password is asked or the form leaves the page; the server checks
  * it again. Remove skips it. */
 export function spendScript() {

package/dist/store.d.ts

@@ -234,7 +234,7 @@ export type SealedLedgerEntry = LedgerEntry & {
         hash: string;
     } | null;
 };
-export declare const SCHEMA_VERSION = 147;
+export declare const SCHEMA_VERSION = 148;
 /** v118: the tables merged into `credential`, in the order they move (a person's API tokens keep their ids first). */
 export declare const V118_MERGED_TABLES: Readonly<Record<string, CredentialKind>>;
 /**
@@ -426,7 +426,38 @@ export declare const V147_ADDED_COLUMNS: Readonly<Record<string, Readonly<Record
 }>>>>;
 /** The v147 migration's steps after the epoch, in order: a test seam (OpenOptions.migrationStep) may stop after each. */
 export declare const V147_STEPS: readonly ["epoch", "local-mode", "password-set", "web-session", "console-instance"];
-export type MigrationStep = (typeof V147_STEPS)[number];
+export type MigrationStep = (typeof V147_STEPS)[number] | (typeof V148_STEPS)[number];
+/**
+ * v148 (docs/plans/results-routing.md): every table the results-routing arc uses, landed at once because a current
+ * store runs no DDL. Slice 1 writes run_cohort, route_record and models_generation; route_rule, route_exposure* and
+ * route_trial_reservation are written from later slices. src/route-store.ts is the only writer of all of them (the
+ * migration aside), which release-auto.ts's routing scan (route-hooks.ts) holds a release to.
+ *
+ * - run_cohort: one row per code-writing run (builder, repair), written in the run's admission transaction beside its
+ *   route stamp and never updated: the sealed facts its eligibility was decided from. cohort_size NULL = not eligible,
+ *   with the reason in `ineligible`.
+ * - route_record: a task family's result record (keyed by its root task_ref), recomputed by the reconcile pass.
+ *   `settled` = its verdict (state, reason, result, acceptance, decision time) is final; its spending and counts keep
+ *   accumulating through later revision and repair runs until `closed` (the family is quiet, or 90 days after its
+ *   first run: route-results.ts ACCUMULATE_FOR_MS).
+ * - route_rule: an earned rule or a trial, with its sealed grant, price snapshot and the configuration generations it
+ *   depends on; one live winner per project and size (route_rule_one_winner).
+ * - route_exposure / route_exposure_event: one exposure per task and rule, its events append-only.
+ * - route_trial_reservation: a trial's place, reserved, then consumed (once, at admission) or released.
+ * - models_generation: a counter per (scope, phase), moved by every Models row writer in the same transaction.
+ */
+export declare const V148_SCHEMA = "\nCREATE TABLE IF NOT EXISTS run_cohort (\n  run              INTEGER PRIMARY KEY REFERENCES run(id) ON DELETE CASCADE,\n  task_ref         INTEGER NOT NULL REFERENCES task_ref(id) ON DELETE CASCADE,\n  root_ref         INTEGER NOT NULL REFERENCES task_ref(id) ON DELETE CASCADE,\n  repo             TEXT,\n  role             TEXT NOT NULL CHECK (role IN ('builder','repair')),\n  size             TEXT CHECK (size IS NULL OR size IN ('small','medium','large')),\n  risky            INTEGER CHECK (risky IS NULL OR risky IN (0,1)),\n  quality_mode     TEXT NOT NULL CHECK (quality_mode IN ('default','strict')),\n  evidence_demands INTEGER NOT NULL CHECK (evidence_demands IN (0,1)),\n  publication      TEXT NOT NULL CHECK (publication IN ('none','notify','automerge')),\n  release          INTEGER NOT NULL CHECK (release IN (0,1)),\n  protected        INTEGER NOT NULL CHECK (protected IN (0,1)),\n  selection_json   TEXT NOT NULL,\n  route_digest     TEXT NOT NULL,\n  provider         TEXT NOT NULL,\n  model            TEXT,\n  cohort_size      TEXT CHECK (cohort_size IS NULL OR cohort_size IN ('small','medium')),\n  ineligible       TEXT,\n  started_at       TEXT NOT NULL,\n  CHECK ((cohort_size IS NULL) = (ineligible IS NOT NULL))\n);\nCREATE INDEX IF NOT EXISTS run_cohort_by_task ON run_cohort (task_ref);\nCREATE INDEX IF NOT EXISTS run_cohort_by_root ON run_cohort (repo, root_ref);\nCREATE TABLE IF NOT EXISTS route_record (\n  task_ref            INTEGER PRIMARY KEY REFERENCES task_ref(id) ON DELETE CASCADE,\n  repo                TEXT,\n  cohort_size         TEXT CHECK (cohort_size IS NULL OR cohort_size IN ('small','medium')),\n  provider            TEXT,\n  model               TEXT,\n  state               TEXT NOT NULL CHECK (state IN ('pending','provisional','mature','rejected','not-counted')),\n  reason              TEXT,\n  result_run          INTEGER REFERENCES run(id) ON DELETE SET NULL,\n  first_started_at    TEXT,\n  accepted_at         TEXT,\n  decided_at          TEXT,\n  model_failures      INTEGER NOT NULL DEFAULT 0 CHECK (model_failures >= 0),\n  infra_failures      INTEGER NOT NULL DEFAULT 0 CHECK (infra_failures >= 0),\n  api_microusd        INTEGER NOT NULL DEFAULT 0 CHECK (api_microusd >= 0),\n  subscription_runs   INTEGER NOT NULL DEFAULT 0 CHECK (subscription_runs >= 0),\n  subscription_tokens INTEGER NOT NULL DEFAULT 0 CHECK (subscription_tokens >= 0),\n  unknown_runs        INTEGER NOT NULL DEFAULT 0 CHECK (unknown_runs >= 0),\n  remediation_runs    INTEGER NOT NULL DEFAULT 0 CHECK (remediation_runs >= 0),\n  person_revisions    INTEGER NOT NULL DEFAULT 0 CHECK (person_revisions >= 0),\n  first_check_passed  INTEGER CHECK (first_check_passed IS NULL OR first_check_passed IN (0,1)),\n  agent_turns         INTEGER NOT NULL DEFAULT 0 CHECK (agent_turns >= 0),\n  turns_unknown_runs  INTEGER NOT NULL DEFAULT 0 CHECK (turns_unknown_runs >= 0),\n  provenance_json     TEXT NOT NULL DEFAULT '[]',\n  settled             INTEGER NOT NULL DEFAULT 0 CHECK (settled IN (0,1)),\n  closed              INTEGER NOT NULL DEFAULT 0 CHECK (closed IN (0,1)),\n  evaluated_at        TEXT NOT NULL,\n  CHECK ((state IN ('rejected','not-counted')) = (reason IS NOT NULL)),\n  CHECK (closed = 0 OR settled = 1)\n);\nCREATE INDEX IF NOT EXISTS route_record_by_cohort ON route_record (repo, cohort_size, state, first_started_at);\nCREATE INDEX IF NOT EXISTS route_record_open ON route_record (evaluated_at) WHERE closed = 0;\nCREATE TABLE IF NOT EXISTS route_rule (\n  id                  INTEGER PRIMARY KEY AUTOINCREMENT,\n  repo                TEXT NOT NULL,\n  cohort_size         TEXT NOT NULL CHECK (cohort_size IN ('small','medium')),\n  kind                TEXT NOT NULL CHECK (kind IN ('rule','trial')),\n  provider            TEXT NOT NULL,\n  model               TEXT NOT NULL,\n  configured_provider TEXT NOT NULL,\n  configured_model    TEXT,\n  state               TEXT NOT NULL CHECK (state IN ('active','trialling','paused','switched-off','turned-off','expired','dropped','finished')),\n  generation          INTEGER NOT NULL DEFAULT 1 CHECK (generation >= 1),\n  grant_json          TEXT NOT NULL,\n  prices_json         TEXT NOT NULL,\n  depends_json        TEXT NOT NULL,\n  trial_limit         INTEGER CHECK (trial_limit IS NULL OR trial_limit >= 1),\n  accepted_by         TEXT NOT NULL,\n  accepted_at         TEXT NOT NULL,\n  ended_at            TEXT,\n  ended_by            TEXT,\n  end_reason          TEXT,\n  CHECK ((kind = 'trial') = (trial_limit IS NOT NULL))\n);\nCREATE UNIQUE INDEX IF NOT EXISTS route_rule_one_winner ON route_rule (repo, cohort_size) WHERE state IN ('active','trialling','paused');\nCREATE TABLE IF NOT EXISTS route_exposure (\n  id         INTEGER PRIMARY KEY AUTOINCREMENT,\n  task_ref   INTEGER NOT NULL REFERENCES task_ref(id) ON DELETE CASCADE,\n  rule       INTEGER NOT NULL REFERENCES route_rule(id) ON DELETE CASCADE,\n  created_at TEXT NOT NULL,\n  closed_at  TEXT,\n  UNIQUE (task_ref, rule)\n);\nCREATE TABLE IF NOT EXISTS route_exposure_event (\n  id       INTEGER PRIMARY KEY AUTOINCREMENT,\n  exposure INTEGER NOT NULL REFERENCES route_exposure(id) ON DELETE CASCADE,\n  kind     TEXT NOT NULL CHECK (kind IN ('proposed','refiled','approved-as-proposed','approved-with-other','cancelled')),\n  model    TEXT,\n  at       TEXT NOT NULL,\n  CHECK ((kind = 'approved-with-other') = (model IS NOT NULL))\n);\nCREATE INDEX IF NOT EXISTS route_exposure_event_by_exposure ON route_exposure_event (exposure, id);\nCREATE TABLE IF NOT EXISTS route_trial_reservation (\n  id           INTEGER PRIMARY KEY AUTOINCREMENT,\n  rule         INTEGER NOT NULL REFERENCES route_rule(id) ON DELETE CASCADE,\n  task_ref     INTEGER NOT NULL REFERENCES task_ref(id) ON DELETE CASCADE,\n  scope_digest TEXT NOT NULL,\n  state        TEXT NOT NULL CHECK (state IN ('reserved','consumed','released')),\n  consumed_run INTEGER REFERENCES run(id) ON DELETE SET NULL,\n  created_at   TEXT NOT NULL,\n  updated_at   TEXT NOT NULL,\n  UNIQUE (rule, task_ref),\n  CHECK (state = 'consumed' OR consumed_run IS NULL)\n);\nCREATE TABLE IF NOT EXISTS models_generation (\n  scope      TEXT NOT NULL,\n  phase      TEXT NOT NULL,\n  generation INTEGER NOT NULL CHECK (generation >= 1),\n  changed_at TEXT NOT NULL,\n  PRIMARY KEY (scope, phase)\n);\n";
+/** The tables V148_SCHEMA adds, in the order a test drops them to make the v147 shape. */
+export declare const V148_TABLES: readonly ["route_trial_reservation", "route_exposure_event", "route_exposure", "route_rule", "route_record", "run_cohort", "models_generation"];
+/** v148: a run's execution class (saved runs read NULL: none kept, which the records count as the model's), a
+ * revision's origin (saved revisions read NULL: not recorded, never a person), and a project's "Suggest cheaper models"
+ * switch (saved projects read 1: on). */
+export declare const V148_ADDED_COLUMNS: Readonly<Record<string, Readonly<Record<string, {
+    definition: string;
+    saved: string;
+}>>>>;
+/** The v148 migration's steps after v147's, in order (OpenOptions.migrationStep may stop after each). */
+export declare const V148_STEPS: readonly ["results-tables", "exec-class", "revision-origin", "suggest-models"];
 /**
  * v135: one approval per release (docs/plans/release-once.md). `release_authority` is the single source of truth for a
  * release a person approved: one row per generation, changed only by compare-and-swap on `rev`, with a lease whose
@@ -8364,3 +8395,8 @@ export declare const LAPTOP_PORT_FACT = "laptop-port";
 export declare function laptopPortOf(store: Store): number | null;
 /** Record the laptop port, once (installation facts are never updated). */
 export declare function recordLaptopPort(store: Store, port: number, now: Date): void;
+/** The Models rows of a project being deleted (project-delete.ts), through the same counter as every other Models
+ * writer: each phase whose rows go moves its generation (pausing what depended on it), then the project's
+ * results-routing rows go (route-store.ts forgetProjectRoutes). One of the routing scan's named phase_* writers
+ * (route-hooks.ts). How many rows went. */
+export declare function forgetProjectModels(store: Store, repo: string, now: Date): number;