Add the Work page: spend by kind of work, labeled locally with Gemma

AGENTS.md

@@ -29,6 +29,9 @@ Token Meter reads local agent traces, calculates clearly labeled usage estimates
 | `tests/contracts/test_design_system.py` | Design-system contract: tokens, scales, contrast, components, dead CSS, provider colors |
 | `scripts/style-snapshot.js` | Browser computed-style before/after diff for stylesheet-wide changes |
 | `menubar/TokenMeterMenuBar.swift` | Native AppKit companion, preferences, notifications |
+| `token_meter/services/work_insights.py` | Opt-in local classifier: queue, pacing, pause, loopback Ollama client, label ledger |
+| `token_meter/domain/work.py` | Work page aggregation over cached summaries and content-free labels |
+| `token_meter/domain/work_evidence.py` | Per-request cost slices and action evidence for Work insights |
 | `token_meter_mcp.py` | Bounded MCP interface; evidence is read-only except explicit confirmed session-budget changes |
 | `tests/test_meter.py` | Server, parser, UI-contract, installer, and Swift-source tests |
 | `tests/test_mcp_server.py` | MCP contract and privacy tests |
@@ -54,7 +57,7 @@ Token Meter reads local agent traces, calculates clearly labeled usage estimates
 | `python3 -m unittest tests.contracts.test_design_system -v` | Check dashboard styling against the design-system contract |
 | `PYTHONPYCACHEPREFIX=/private/tmp/token-meter-pycache python3 -m py_compile meter.py token_meter_mcp.py $(find token_meter -type f -name '*.py' -print)` | Compile Python without polluting the repo |
 | `node -e "const fs=require('fs');const h=fs.readFileSync('page.html','utf8');const m=h.match(/<script>([\\s\\S]*)<\\/script>/);new Function(m[1]);console.log('js ok')"` | Parse embedded dashboard JavaScript |
-| `bash -n scripts/install scripts/install-linux scripts/install-launch-agent scripts/install-systemd-user scripts/run-menubar scripts/run-token-meter-mcp scripts/start-token-meter scripts/uninstall-launch-agent scripts/uninstall-systemd-user scripts/update scripts/update-linux` | Check shell syntax |
+| `bash -n scripts/install scripts/install-linux scripts/install-launch-agent scripts/install-systemd-user scripts/run-menubar scripts/run-token-meter-mcp scripts/start-token-meter scripts/uninstall-launch-agent scripts/uninstall-systemd-user scripts/update scripts/update-linux scripts/setup-work-classifier` | Check shell syntax |
 | `swiftc menubar/TokenMeterMenuBar.swift -o /private/tmp/token-meter-menubar` | Compile the native companion |
 | `TOKEN_METER_MENUBAR_SMOKE=1 /private/tmp/token-meter-menubar` | Run deterministic native smoke output |
 | `powershell -NoProfile -Command "[void] [scriptblock]::Create((Get-Content -Raw scripts/install-windows.ps1))"` | Parse a Windows script on a Windows host |
@@ -74,14 +77,15 @@ Token Meter reads local agent traces, calculates clearly labeled usage estimates
 - Keep `meter.py` and `token_meter_mcp.py` on the Python standard library.
 - Keep the dashboard local-only; do not add hosted assets, analytics, or telemetry.
 - Never output, commit, persist, or transmit prompts, responses, reasoning, tool contents, credentials, account data, or raw traces.
+- Work insights are the only sanctioned consumer of typed user-turn text, the preceding assistant-reply tail (600 characters), and, per request, the basenames of files the agent changed: they stay in the bounded in-memory queue, are sent only to the validated loopback Ollama URL, and only salted keys, labels, and content-free counts (costs, tool and command kinds, file categories) persist. Do not add other consumers.
 - Provider-account requests must remain narrow, bounded, sanitized, and read-only.
 - Cursor databases, transcripts, and request logs are read-only inputs.
 - Label estimates as estimates. Unavailable evidence must not become a measured zero.
 - Scope models by runtime when aggregating; identical model names in different clients are not one history.
 - Persist machine-wide settings through the existing atomic JSON-write path and action-token-protected HTTP endpoints.
 - New settings require validation, idempotent writes, migration behavior, and tests.
 - Preserve legacy hash routes and stored preferences when changing navigation or native settings.
-- Keep the top-level dashboard order `Sessions → Spend → Models → Subagents → Efficiency → Git → Learn → Tools → Settings`. The top-level Subagents page owns only role economics. Sessions contains `Current sessions`, `All sessions`, `Compare`, and `Subagents`; Compare (`#sessions-compare`) owns side-by-side comparison of up to four selected sessions, and Subagents owns child-run `Sessions` and `Issues` investigation. Preserve both `#subagents` and `#sessions-subagents` routes.
+- Keep the top-level dashboard order `Sessions → Spend → Models → Subagents → Efficiency → Work → Git → Learn → Tools → Settings`. The top-level Subagents page owns only role economics. Sessions contains `Current sessions`, `All sessions`, `Compare`, and `Subagents`; Compare (`#sessions-compare`) owns side-by-side comparison of up to four selected sessions, and Subagents owns child-run `Sessions` and `Issues` investigation. Preserve both `#subagents` and `#sessions-subagents` routes.
 - Global is not a dashboard surface. Keep cross-session aggregation as shared backend data for Sessions All, Daily, Models, Tools, Efficiency, MCP, and the menu bar.
 - Keep the complete machine-wide monthly budget status and editor on the Spend page (`#spend-budgets`). The native companion deep-links there; preserve `#settings-budgets` and `#budgets` as compatibility redirects.
 - Use macOS labels such as `⌥`, never `Alt`, in user-facing copy.

README.md

@@ -125,6 +125,48 @@ Spot high-output, failing, repeated, or unused tools and skill packs.
   <img src="images/tool-analytics.png" alt="Token Meter capability evidence and skill-pack review" width="900">
 </p>
 
+### Work
+
+**Work** shows what the spend went into. It is available on macOS only. When
+you turn on **Settings → Work insights**, a local model
+([Gemma 4 E4B](https://huggingface.co/google/gemma-4-E4B-it-qat-q4_0-gguf), Google's
+official 4-bit quantization-aware build, Apache-2.0) running in your own Ollama labels each request's area,
+work type, and complexity, and flags follow-up turns where you pushed back on
+the previous work. The page shows:
+
+- **Right-sizing**: suggestions for spending less on models without losing
+  results, such as a cheaper model that resolves the same kind of work as often,
+  a standard model for routine work, lower reasoning effort, or starting fresh
+  sessions sooner. Each shows an estimated saving.
+- **Where the spend went** by area, with a trend line per area, and **how
+  sessions ended**: accepted, recovered after pushback, or ended on pushback.
+- **Session tags** such as Marathon, Long thread, Big spender, Subagent team, Overkill,
+  Rescued, and One-shot, each with its spend and resolved share.
+- **When you work**: session starts by weekday and hour, and pushback by time
+  of day.
+- **Pushback over time** and **cost per resolved session** by kind of work.
+- **Model choices**: a scorecard of your top models by spend.
+
+Turning Work insights on sets everything up in the background. If this Mac has
+no Ollama 0.34 or newer running, Token Meter downloads a pinned, signed Ollama
+0.34.4 into its own Application Support folder and runs it on 127.0.0.1 only.
+It then downloads the Gemma 4 E4B model (a 4-bit file of about 5 GB, checked
+against a pinned hash), adds it to Ollama, and deletes the download. Setup needs
+about 11 GB free while it runs and about 5 GB after, and the model uses about
+5.5 GB of memory while it labels. When memory runs low, labeling unloads the
+model and waits until there is room again; Macs with less than about 10 GB of
+memory do not load it at all. If an update changes the model,
+Token Meter asks on the Work page before downloading it. Progress shows on the
+Work page; turning Work insights off stops the managed Ollama, and uninstalling
+Token Meter removes it.
+
+Labeling is off by default. When on, it runs in the background at an automatic
+pace: up to 60 model calls a minute while the CPU is mostly idle and your Mac is
+plugged in, and 5 a minute otherwise (or pick a fixed pace). Long fast stretches
+keep the GPU busy, so the fans may run. It pauses on battery, and can be paused from the page,
+Settings, or the menu bar. Labels are estimates; low-confidence answers show as
+Unclear.
+
 ### Git
 
 Pairs local pushes with spend to show code changed per project and day, using
@@ -178,6 +220,8 @@ See the current run without opening the dashboard. Updates are checked every
 - Traces, prompts, responses, paths, and analytics never leave your machine.
 - The MCP returns derived numbers only. Agents you connect may send them to their model provider.
 - Costs are estimates. Codex uses public API rates, which can differ from subscription billing.
+- Work insights, when on, send typed prompts, the end of the reply before each one, uploaded and
+  changed file names only to the local Ollama you choose; Token Meter stores labels and counts, never text.
 
 Full details: [User guide](specs/USER_GUIDE.md#data-and-evidence) ·
 [Security policy](specs/SECURITY.md).

menubar/TokenMeterMenuBar.swift

@@ -8,6 +8,8 @@ private let tokenMeterBudgetSettingsURL = URL(string: "http://127.0.0.1:8722/#sp
 private let tokenMeterGoalsURL = URL(string: "http://127.0.0.1:8722/#efficiency-goals")!
 private let tokenMeterUpdateSettingsURL = URL(string: "http://127.0.0.1:8722/#settings-updates")!
 private let tokenMeterInstallUpdateURL = URL(string: "http://127.0.0.1:8722/updates/install")!
+private let tokenMeterWorkPauseURL = URL(string: "http://127.0.0.1:8722/work-insights/pause")!
+private let tokenMeterWorkSettingsURL = URL(string: "http://127.0.0.1:8722/#settings-work-insights")!
 private let tokenMeterEnterpriseTokenomicsURL = URL(string: "https://www.splunk.com/en_us/products/tokenomics.html")!
 private let pinnedSessionDefaultsKey = "TokenMeterPinnedSessionID"
 private let titleModeDefaultsKey = "TokenMeterTitleMode"
@@ -18,6 +20,8 @@ private let quotaAlertThresholdDefaultsKey = "TokenMeterQuotaAlertThreshold"
 private let quotaNotificationStatesDefaultsKey = "TokenMeterQuotaNotificationStates"
 private let budgetNotificationStatesDefaultsKey = "TokenMeterBudgetNotificationStates"
 private let budgetExceededMonthsDefaultsKey = "TokenMeterBudgetExceededNotificationMonths"
+private let liveHintNotificationIDsDefaultsKey = "TokenMeterLiveHintNotificationIDs"
+private let maxRememberedLiveHintIDs = 200
 private let statusDisplayModeDefaultsKey = "TokenMeterStatusDisplayMode"
 private let globalShortcutDefaultsKey = "TokenMeterGlobalShortcut"
 private let customShortcutKeyCodeDefaultsKey = "TokenMeterCustomShortcutKeyCode"
@@ -757,6 +761,9 @@ struct MeterSnapshot {
     var todaySpendAvailable: Bool
     var todaySpendTotalCost: Double
     var todaySpendEstimated: Bool
+    var workInsightsEnabled: Bool
+    var workInsightsPaused: Bool
+    var workInsightsState: String
     var estimatedCost: Bool
     var estimatedTokens: Bool
     var totalTokens: Int
@@ -805,6 +812,9 @@ struct MeterSnapshot {
             todaySpendAvailable: false,
             todaySpendTotalCost: 0,
             todaySpendEstimated: false,
+            workInsightsEnabled: false,
+            workInsightsPaused: false,
+            workInsightsState: "",
             estimatedCost: false,
             estimatedTokens: false,
             totalTokens: 0,
@@ -857,6 +867,10 @@ struct MeterSnapshot {
         let todaySpendAvailable = bool(todaySpend["available"])
         let todaySpendTotalCost = double(todaySpend["total_cost"])
         let todaySpendEstimated = bool(todaySpend["estimated"])
+        let workInsights = dict["work_insights"] as? [String: Any] ?? [:]
+        let workInsightsEnabled = bool(workInsights["enabled"])
+        let workInsightsPaused = bool(workInsights["paused"])
+        let workInsightsState = workInsights["state"] as? String ?? ""
         let estimatedCost = bool(dict["cost_approx"]) || bool(source["approximate_cost"])
         let estimatedTokens = bool(source["token_estimate"])
         let totalTokens = int(dict["total_tokens"])
@@ -945,6 +959,9 @@ struct MeterSnapshot {
             todaySpendAvailable: todaySpendAvailable,
             todaySpendTotalCost: todaySpendTotalCost,
             todaySpendEstimated: todaySpendEstimated,
+            workInsightsEnabled: workInsightsEnabled,
+            workInsightsPaused: workInsightsPaused,
+            workInsightsState: workInsightsState,
             estimatedCost: estimatedCost,
             estimatedTokens: estimatedTokens,
             totalTokens: totalTokens,
@@ -1153,6 +1170,11 @@ final class TokenMeterMenuBar: NSObject, NSApplicationDelegate, NSMenuDelegate {
     private var menuRefreshPending = false
     private var snapshot = MeterSnapshot.disconnected("Waiting for http://127.0.0.1:8722/menubar")
     private var monthlyBudget: MonthlyBudget?
+    private var deliveredLiveHintIDs: [String] =
+        tokenMeterDefaults.stringArray(forKey: liveHintNotificationIDsDefaultsKey) ?? []
+    // The first poll ever only records what is already showing, so an update never sends a burst.
+    private var liveHintsSeeded = tokenMeterDefaults.object(forKey: liveHintNotificationIDsDefaultsKey) != nil
+    private var liveHintsWereEnabled = false
     private var goals: GoalsSnapshot?
     private var softwareUpdate = SoftwareUpdateSnapshot.waiting
 
@@ -1252,6 +1274,10 @@ final class TokenMeterMenuBar: NSObject, NSApplicationDelegate, NSMenuDelegate {
                 )
                 self.evaluateQuotaNotifications()
                 self.evaluateBudgetNotifications()
+                self.evaluateLiveHintNotifications(
+                    dict["live_hints"] as? [[String: Any]] ?? [],
+                    enabled: dict["live_hints_enabled"] as? Bool ?? false
+                )
                 self.refreshMenu()
             }
         }.resume()
@@ -1311,6 +1337,10 @@ final class TokenMeterMenuBar: NSObject, NSApplicationDelegate, NSMenuDelegate {
         budgetsItem.submenu = makeBudgetsMenu()
         menu.addItem(budgetsItem)
 
+        if snapshot.workInsightsEnabled {
+            menu.addItem(makeWorkInsightsItem())
+        }
+
         let goalsItem = NSMenuItem(title: "Goals", action: nil, keyEquivalent: "")
         goalsItem.image = menuSymbol("target", description: "Goals")
         goalsItem.submenu = makeGoalsMenu()
@@ -2375,6 +2405,35 @@ final class TokenMeterMenuBar: NSObject, NSApplicationDelegate, NSMenuDelegate {
         }
     }
 
+    /// One notification per running session and suggestion; the server only sends hints when
+    /// "Notify me about live suggestions" is on in Settings.
+    private func evaluateLiveHintNotifications(_ hints: [[String: Any]], enabled: Bool) {
+        // Turning notifications on (or Work insights) records what is already showing instead of
+        // announcing every running session at once.
+        if enabled && !liveHintsWereEnabled { liveHintsSeeded = false }
+        liveHintsWereEnabled = enabled
+        var changed = !liveHintsSeeded
+        for hint in hints.prefix(12) {
+            guard let id = hint["id"] as? String, !id.isEmpty,
+                  let title = hint["title"] as? String,
+                  let body = hint["body"] as? String,
+                  !deliveredLiveHintIDs.contains(id)
+            else { continue }
+            if liveHintsSeeded {
+                deliverQuotaNotification(title: "Token Meter: \(title)", body: body)
+            }
+            deliveredLiveHintIDs.append(id)
+            changed = true
+        }
+        if deliveredLiveHintIDs.count > maxRememberedLiveHintIDs {
+            deliveredLiveHintIDs.removeFirst(deliveredLiveHintIDs.count - maxRememberedLiveHintIDs)
+        }
+        liveHintsSeeded = true
+        if changed {
+            tokenMeterDefaults.set(deliveredLiveHintIDs, forKey: liveHintNotificationIDsDefaultsKey)
+        }
+    }
+
     private func deliverQuotaNotification(title: String, body: String) {
         if ProcessInfo.processInfo.environment["TOKEN_METER_MENUBAR_SMOKE"] == "1" { return }
         let process = Process()
@@ -2412,6 +2471,68 @@ final class TokenMeterMenuBar: NSObject, NSApplicationDelegate, NSMenuDelegate {
         NSWorkspace.shared.open(tokenMeterUpdateSettingsURL)
     }
 
+    private func makeWorkInsightsItem() -> NSMenuItem {
+        if snapshot.workInsightsPaused {
+            let item = NSMenuItem(title: "Resume work insights", action: #selector(resumeWorkInsights), keyEquivalent: "")
+            item.image = menuSymbol("play.circle", description: "Resume work insights")
+            item.target = self
+            return item
+        }
+        let item = NSMenuItem(title: "Pause work insights", action: nil, keyEquivalent: "")
+        item.image = menuSymbol("pause.circle", description: "Pause work insights")
+        let submenu = NSMenu()
+        for (title, duration) in [("For 1 hour", "1h"), ("Until tomorrow", "tomorrow"), ("Until I resume", "indefinite")] {
+            let option = NSMenuItem(title: title, action: #selector(pauseWorkInsights(_:)), keyEquivalent: "")
+            option.representedObject = duration
+            option.target = self
+            submenu.addItem(option)
+        }
+        submenu.addItem(.separator())
+        let settings = NSMenuItem(title: "Work insights settings", action: #selector(openWorkInsightsSettings), keyEquivalent: "")
+        settings.target = self
+        submenu.addItem(settings)
+        item.submenu = submenu
+        return item
+    }
+
+    @objc private func pauseWorkInsights(_ sender: NSMenuItem) {
+        guard let duration = sender.representedObject as? String else { return }
+        postWorkInsightsPause(duration)
+    }
+
+    @objc private func resumeWorkInsights() {
+        postWorkInsightsPause("resume")
+    }
+
+    @objc private func openWorkInsightsSettings() {
+        NSWorkspace.shared.open(tokenMeterWorkSettingsURL)
+    }
+
+    private func postWorkInsightsPause(_ duration: String) {
+        guard !softwareUpdate.actionToken.isEmpty,
+              let body = try? JSONSerialization.data(withJSONObject: ["duration": duration]) else {
+            openWorkInsightsSettings()
+            return
+        }
+        var request = URLRequest(url: tokenMeterWorkPauseURL, cachePolicy: .reloadIgnoringLocalCacheData, timeoutInterval: 5.0)
+        request.httpMethod = "POST"
+        request.setValue("application/json", forHTTPHeaderField: "Content-Type")
+        request.setValue(softwareUpdate.actionToken, forHTTPHeaderField: "X-Token-Meter-Action")
+        request.httpBody = body
+        URLSession.shared.dataTask(with: request) { [weak self] _, response, error in
+            DispatchQueue.main.async {
+                guard let self = self else { return }
+                let statusCode = (response as? HTTPURLResponse)?.statusCode ?? 0
+                if error == nil && (200..<300).contains(statusCode) {
+                    self.snapshot.workInsightsPaused = duration != "resume"
+                    self.refreshMenu()
+                } else {
+                    self.openWorkInsightsSettings()
+                }
+            }
+        }.resume()
+    }
+
     @objc private func openEnterpriseTokenomics() {
         NSWorkspace.shared.open(tokenMeterEnterpriseTokenomicsURL)
     }
@@ -2691,6 +2812,7 @@ if ProcessInfo.processInfo.environment["TOKEN_METER_MENUBAR_SMOKE"] == "1" {
         print(snapshot.outputSpeedLabel)
         print("active-title=\(activeTitle)")
         print("budget-state=\(budget?.compactLabel ?? "unconfigured") exceeded=\(budget?.anyExceeded == true)")
+        print("work-insights=\(snapshot.workInsightsEnabled ? (snapshot.workInsightsPaused ? "paused" : "active") : "off") state=\(snapshot.workInsightsState.isEmpty ? "none" : snapshot.workInsightsState)")
         let goals = GoalsSnapshot.fromJSON(dict["goals"] as? [String: Any])
         print("goals=\(goals?.items.count ?? 0) more=\(goals?.additionalCount ?? 0) ready=\(goals?.ready == true) statuses=\(goals?.items.map(\.status).joined(separator: ",") ?? "")")
         print("title-metrics=\(TitleMetric.allCases.filter(savedMetrics.contains).map(\.title).joined(separator: ","))")