impl(pm-stack): cost-anomaly detection to Needs-you via the alert throat (#1259 slice 4)

Part of epic #1184; implementation follow-up of design issue #1259 (spend rollups). Design note: doc/spend-rollups-design-1259.md. Depends on the rollup-store slice of #1259.

Scope

Detect cost anomalies from the spend rollups and surface them through the existing alert throat (pm-stack/aggregator/src/alerts.ts, #3676) into Needs-you (/attention) and the Today/brief summary — no new notification path.

Anomaly classes (v1, thresholds are named constants with tests, per the design note)

Burn without progress: an epic/project consumes spend in a window while closing zero child issues in the same window.
Single-session dominance: one root session accounts for more than the threshold share of an epic's window spend.
Unattributed growth: the unattributed share of total spend rises window-over-window beyond the threshold.
Charge without activity: a matched PAYG charge for a service with no corresponding session/quota activity in its period.

Rules

Missing or partial data suppresses the anomaly, never fabricates it: an anomaly needs a complete window on both sides of its comparison.
Each surfaced anomaly names its evidence: scope, window, the two compared values, and a link to the rollup/drill-down.
Delivery class: page + ledger (warning) in v1; no push, per the alerts design (warnings never push in v1).

Acceptance criteria

One test per anomaly class: fires on the constructed pattern, silent on partial data, silent just below threshold.
Dedupe: a continuing anomaly updates the existing incident (alert-throat dedupe), it does not re-post every tick.
Anomaly constants live in one named place, so Drew's threshold rulings (open questions in the design(pm-stack): spend rollups — token and dollar attribution per project and per epic, rendered on Projects/Roadmap #1259 design note) change one file.

Checks

bun test and bunx tsc --noEmit in pm-stack/aggregator pass (CI on the PR).

agent-note:v1
state: triaged (coverage pass)
Coverage pass 2026-11-03: reviewed in the fleet-wide per-issue pass (drift / overlap / already-handled / stale / blockers / ordering). Verdict: still live; queued in repo-health-code-pilot as triage at priority 40 (priority/normal). If this is already handled at current main, the triage closes it with evidence; if it needs splitting, the triage files the split.
Found via: coverage pass 2026-11-03

🤖 Agent note · handed off

Agent: fleet monitor (repo-fleet-monitor)
Session / ID: task 8442
Found via: monitor reconciliation
Task: claim-evaporated repair — the queue claim on task 8442 ended without complete/park/block, its lease expired, and the task returned to queued unclaimed while this issue still carried claimed labels. Labels reset to the truth: queue/queued + status/needs-triage. Checkpoint stage at evaporation: handed_off.
Expectation: the next lane to claim task 8442 posts a fresh pickup note.

🤖 Agent note · handed off

Agent: queue worker (repo-worker-code), lane code-l
Session / ID: task 8442
Found via: queue claim
Task: execution lane is opencode — handed to the opencode claimant, which launches a session bound to task 8442 for triage of issue impl(pm-stack): cost-anomaly detection to Needs-you via the alert throat (#1259 slice 4) #4825. Fresh recheck: issue impl(pm-stack): cost-anomaly detection to Needs-you via the alert throat (#1259 slice 4) #4825 OPEN, no hard-stop labels; dependencies impl(pm-stack): spend attribution projection — session to issue/epic resolution, unattributed shown (#1259 slice 1) #4822 and impl(pm-stack): spend rollup store — weekly/monthly per project/epic, versioned restatement (#1259 slice 2) #4823 both still OPEN, so the gate noted on task 8442 still stands for the claimant session to recheck.
Expectation: claimant session drives task 8442 to its terminal state
Links: task 8442; issue impl(pm-stack): cost-anomaly detection to Needs-you via the alert throat (#1259 slice 4) #4825

🤖 Agent note · handed off

Agent: fleet monitor
Session / ID: task 8442 (repo-fleet-monitor run 2026-11-05T15:45:48Z)
Found via: monitor reconciliation (Duty 1 claim/label divergence repair)
Task: Claim evaporated: task 8442 is queued and unclaimed in repo-health-code-pilot, but this issue still carried claimed labels. Labels reset to the truth (queue/queued + status/needs-triage). Checkpoint stage at evaporation: handed_off.
Expectation: The next lane claim picks task 8442 up from the queued state and posts a fresh pickup note.

Navigation Menu

Repository navigation

impl(pm-stack): cost-anomaly detection to Needs-you via the alert throat (#1259 slice 4) #4825

Scope

Anomaly classes (v1, thresholds are named constants with tests, per the design note)

Rules

Acceptance criteria

Checks

23 remaining items

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

impl(pm-stack): cost-anomaly detection to Needs-you via the alert throat (#1259 slice 4) #4825

Description

Scope

Anomaly classes (v1, thresholds are named constants with tests, per the design note)

Rules

Acceptance criteria

Checks

Activity

dezren39 commented on Nov 3, 2026

23 remaining items

dezren39 commented on Nov 4, 2026

dezren39 commented on Nov 4, 2026

dezren39 commented on Nov 5, 2026

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions