@integrity-labs/agt-cli 0.28.694 → 0.28.696

package/dist/mcp/direct-chat-channel.js

@@ -34388,6 +34388,111 @@ var CONDITIONAL_DELIVERY_BODY = [
 // ../core/dist/liveness/agent-liveness.js
 var FRESH_HEARTBEAT_THRESHOLD_MS = 2 * 60 * 1e3;
 
+// ../core/dist/claude-code-usage/reset-time.js
+var MONTHS = [
+  "jan",
+  "feb",
+  "mar",
+  "apr",
+  "may",
+  "jun",
+  "jul",
+  "aug",
+  "sep",
+  "oct",
+  "nov",
+  "dec"
+];
+var FULL_MONTHS = [
+  "january",
+  "february",
+  "march",
+  "april",
+  "may",
+  "june",
+  "july",
+  "august",
+  "september",
+  "october",
+  "november",
+  "december"
+];
+var MONTH_TOKENS = new Map([
+  ...MONTHS.map((m, i) => [m, i]),
+  ...FULL_MONTHS.map((m, i) => [m, i]),
+  // "Sept" is the one four-letter abbreviation in common use and is inside the
+  // {3,9} the grammar accepts, so it is reachable and must resolve.
+  ["sept", 8]
+]);
+var TIME_OF_DAY_SOURCE = /\d{1,2}(?::\d{2})?\s*(?:am|pm)(?:\s*\(?UTC\)?)?/.source;
+var RESET_DATE_SOURCE = `(?:[A-Za-z]{3,9}\\s+\\d{1,2}(?:\\s*,\\s*${TIME_OF_DAY_SOURCE})?|${TIME_OF_DAY_SOURCE})`;
+var TIME_TAIL = /,\s*(\d{1,2})(?::(\d{2}))?\s*(am|pm)(?:\s*\(?UTC\)?)?\s*$/i;
+var TIME_ONLY = /^(\d{1,2})(?::(\d{2}))?\s*(am|pm)(?:\s*\(?UTC\)?)?$/i;
+var MS_PER_DAY = 24 * 60 * 60 * 1e3;
+function parseAmPm(hourStr, minStr, ampm) {
+  const rawHour = Number.parseInt(hourStr, 10);
+  if (!Number.isFinite(rawHour) || rawHour < 1 || rawHour > 12)
+    return null;
+  let minute = 0;
+  if (minStr) {
+    minute = Number.parseInt(minStr, 10);
+    if (!Number.isFinite(minute) || minute < 0 || minute > 59)
+      return null;
+  }
+  const isPm = ampm.toLowerCase() === "pm";
+  return { hour: rawHour % 12 + (isPm ? 12 : 0), minute };
+}
+function parseResetDateTime(humanDate, now) {
+  const trimmed = humanDate.trim();
+  const timeOnly = trimmed.match(TIME_ONLY);
+  if (timeOnly) {
+    const hm = parseAmPm(timeOnly[1], timeOnly[2], timeOnly[3]);
+    if (!hm)
+      return null;
+    const todayAt = Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate(), hm.hour, hm.minute);
+    return {
+      at: new Date(todayAt <= now.getTime() ? todayAt + MS_PER_DAY : todayAt),
+      precision: "hour_only"
+    };
+  }
+  const timeMatch = trimmed.match(TIME_TAIL);
+  const dateOnly = timeMatch ? trimmed.slice(0, timeMatch.index).trim() : trimmed;
+  const parts = dateOnly.split(/\s+/);
+  if (parts.length !== 2)
+    return null;
+  const lookedUpMonth = MONTH_TOKENS.get(parts[0].toLowerCase());
+  if (lookedUpMonth === void 0)
+    return null;
+  const month = lookedUpMonth;
+  const day = Number.parseInt(parts[1], 10);
+  if (!Number.isFinite(day) || day < 1 || day > 31)
+    return null;
+  let hour = 0;
+  let minute = 0;
+  if (timeMatch) {
+    const hm = parseAmPm(timeMatch[1], timeMatch[2], timeMatch[3]);
+    if (!hm)
+      return null;
+    hour = hm.hour;
+    minute = hm.minute;
+  }
+  const baseYear = now.getUTCFullYear();
+  let resolved = null;
+  let bestDelta = Number.POSITIVE_INFINITY;
+  for (const y of [baseYear - 1, baseYear, baseYear + 1]) {
+    const candidate = new Date(Date.UTC(y, month, day, hour, minute));
+    if (candidate.getUTCFullYear() !== y || candidate.getUTCMonth() !== month || candidate.getUTCDate() !== day) {
+      continue;
+    }
+    const delta = Math.abs(candidate.getTime() - now.getTime());
+    if (delta < bestDelta) {
+      bestDelta = delta;
+      resolved = candidate;
+    }
+  }
+  return resolved ? { at: resolved, precision: "dated" } : null;
+}
+
 // ../core/dist/claude-code-usage/banner-parser.js
 var SESSION_QUALIFIER = /^(?:session|\d{1,2}\s*-?\s*hours?|\d{1,2}h)$/i;
 function classifyLimitScope(qualifier) {
@@ -34402,8 +34507,7 @@ function classifyLimitScope(qualifier) {
 }
 var SEP = /[\s·\-–—]+/.source;
 var SUBJECT = /(?:You(?:['’]ve|\s+have)?\s+)?/.source;
-var TIME_OF_DAY = /\d{1,2}(?::\d{2})?\s*(?:am|pm)(?:\s*\(?UTC\)?)?/.source;
-var RESET_DATE = `(?:[A-Za-z]{3,9}\\s+\\d{1,2}(?:\\s*,\\s*${TIME_OF_DAY})?|${TIME_OF_DAY})`;
+var RESET_DATE = RESET_DATE_SOURCE;
 var BANNER_PATTERNS = [
   // Percentage form — pct in group 1, reset in group 2.
   new RegExp(`${SUBJECT}used\\s+(\\d{1,3})%\\s+of\\s+your\\s+weekly\\s+limit${SEP}resets\\s+(${RESET_DATE})`, "i"),
@@ -34478,82 +34582,6 @@ function parseUsageBanner(text, now = /* @__PURE__ */ new Date()) {
   }
   return best;
 }
-var MONTHS = [
-  "jan",
-  "feb",
-  "mar",
-  "apr",
-  "may",
-  "jun",
-  "jul",
-  "aug",
-  "sep",
-  "oct",
-  "nov",
-  "dec"
-];
-var TIME_TAIL = /,\s*(\d{1,2})(?::(\d{2}))?\s*(am|pm)(?:\s*\(?UTC\)?)?\s*$/i;
-var TIME_ONLY = /^(\d{1,2})(?::(\d{2}))?\s*(am|pm)(?:\s*\(?UTC\)?)?$/i;
-var MS_PER_DAY = 24 * 60 * 60 * 1e3;
-function parseAmPm(hourStr, minStr, ampm) {
-  const rawHour = Number.parseInt(hourStr, 10);
-  if (!Number.isFinite(rawHour) || rawHour < 1 || rawHour > 12)
-    return null;
-  let minute = 0;
-  if (minStr) {
-    minute = Number.parseInt(minStr, 10);
-    if (!Number.isFinite(minute) || minute < 0 || minute > 59)
-      return null;
-  }
-  const isPm = ampm.toLowerCase() === "pm";
-  return { hour: rawHour % 12 + (isPm ? 12 : 0), minute };
-}
-function parseResetDateTime(humanDate, now) {
-  const trimmed = humanDate.trim();
-  const timeOnly = trimmed.match(TIME_ONLY);
-  if (timeOnly) {
-    const hm = parseAmPm(timeOnly[1], timeOnly[2], timeOnly[3]);
-    if (!hm)
-      return null;
-    const todayAt = Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate(), hm.hour, hm.minute);
-    return {
-      at: new Date(todayAt <= now.getTime() ? todayAt + MS_PER_DAY : todayAt),
-      precision: "hour_only"
-    };
-  }
-  const timeMatch = trimmed.match(TIME_TAIL);
-  const dateOnly = timeMatch ? trimmed.slice(0, timeMatch.index).trim() : trimmed;
-  const parts = dateOnly.split(/\s+/);
-  if (parts.length !== 2)
-    return null;
-  const month = MONTHS.indexOf(parts[0].slice(0, 3).toLowerCase());
-  if (month < 0)
-    return null;
-  const day = Number.parseInt(parts[1], 10);
-  if (!Number.isFinite(day) || day < 1 || day > 31)
-    return null;
-  let hour = 0;
-  let minute = 0;
-  if (timeMatch) {
-    const hm = parseAmPm(timeMatch[1], timeMatch[2], timeMatch[3]);
-    if (!hm)
-      return null;
-    hour = hm.hour;
-    minute = hm.minute;
-  }
-  const baseYear = now.getUTCFullYear();
-  let resolved = null;
-  let bestDelta = Number.POSITIVE_INFINITY;
-  for (const y of [baseYear - 1, baseYear, baseYear + 1]) {
-    const candidate = new Date(Date.UTC(y, month, day, hour, minute));
-    const delta = Math.abs(candidate.getTime() - now.getTime());
-    if (delta < bestDelta) {
-      bestDelta = delta;
-      resolved = candidate;
-    }
-  }
-  return resolved ? { at: resolved, precision: "dated" } : null;
-}
 
 // ../core/dist/claude-code-usage/run-marker.js
 var RUN_MARKER_RE = /<!--\s*agt-run:([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})\s*-->/;
@@ -34572,6 +34600,13 @@ function buildUsageLimitReplyText(limitedUntil) {
   return `Your agent has hit its Claude Code usage limit until ${formatUtcClock(limitedUntil)}. It'll pick back up once the limit resets \u2014 please try again after then.`;
 }
 
+// ../core/dist/claude-code-usage/usage-report-parser.js
+var SEP2 = /[\s·\-–—]+/.source;
+var WINDOW_LINE = new RegExp(`^\\s*Current\\s+(session|week)(?:\\s*\\(([^)]*)\\))?\\s*:\\s*(\\d{1,3})%\\s+used(?:${SEP2}resets\\s+(${RESET_DATE_SOURCE}))?\\s*$`, "gim");
+
+// ../core/dist/claude-code-usage/host-usage-reading.js
+var RESET_JITTER_TOLERANCE_MS = 5 * 60 * 1e3;
+
 // ../core/dist/claude-code-usage/rate-limit-classifier.js
 var UNKNOWN_RATE_LIMIT = Object.freeze({
   verdict: "unknown",
@@ -35925,7 +35960,7 @@ var FLAG_REGISTRY = [
   },
   {
     key: "tool-call-audit",
-    description: "Host-side tool-call audit extraction (ENG-8575, slice 3 of ENG-8427): the manager scans agent transcripts for tool calls, redacts each to identity-without-content, and POSTs them to /host/tool-calls. Boolean gate; ships dark \u2014 when off the manager reads no transcripts and sends nothing, so 0 agent_tool_calls rows fleet-wide is the expected steady state until it is armed. NOT the commercial gate: /host/tool-calls independently re-checks the advanced_governance entitlement and refuses regardless of this flag, because the host is customer-owned infrastructure. This flag is rollout control only.",
+    description: "Host-side tool-call audit extraction (ENG-8575, slice 3 of ENG-8427): the manager scans agent transcripts for tool calls, redacts each to identity-without-content, and POSTs them to /host/tool-calls. Boolean gate; when off the manager reads no transcripts and sends nothing. ARMED STAGE-WIDE SINCE 2026-08-17 \u2014 the compiled default below is what a host resolves when nothing else says otherwise, NOT a description of the fleet. This text once asserted the opposite and outlived its truth by nine days, which is what got ENG-9472 filed to arm an already-armed flag. Query the table, do not infer it from this line. NOT the commercial gate: /host/tool-calls independently re-checks the advanced_governance entitlement and refuses regardless of this flag, because the host is customer-owned infrastructure. This flag is rollout control only.",
     flagType: "boolean",
     // Declared safe value is `false` (no extraction). Fail-safe direction: a
     // flag-DB read error must never start shipping tool-call metadata across the

package/dist/mcp/index.js

@@ -41732,11 +41732,50 @@ var CONDITIONAL_DELIVERY_BODY = [
 // ../core/dist/liveness/agent-liveness.js
 var FRESH_HEARTBEAT_THRESHOLD_MS = 2 * 60 * 1e3;
 
+// ../core/dist/claude-code-usage/reset-time.js
+var MONTHS = [
+  "jan",
+  "feb",
+  "mar",
+  "apr",
+  "may",
+  "jun",
+  "jul",
+  "aug",
+  "sep",
+  "oct",
+  "nov",
+  "dec"
+];
+var FULL_MONTHS = [
+  "january",
+  "february",
+  "march",
+  "april",
+  "may",
+  "june",
+  "july",
+  "august",
+  "september",
+  "october",
+  "november",
+  "december"
+];
+var MONTH_TOKENS = new Map([
+  ...MONTHS.map((m, i) => [m, i]),
+  ...FULL_MONTHS.map((m, i) => [m, i]),
+  // "Sept" is the one four-letter abbreviation in common use and is inside the
+  // {3,9} the grammar accepts, so it is reachable and must resolve.
+  ["sept", 8]
+]);
+var TIME_OF_DAY_SOURCE = /\d{1,2}(?::\d{2})?\s*(?:am|pm)(?:\s*\(?UTC\)?)?/.source;
+var RESET_DATE_SOURCE = `(?:[A-Za-z]{3,9}\\s+\\d{1,2}(?:\\s*,\\s*${TIME_OF_DAY_SOURCE})?|${TIME_OF_DAY_SOURCE})`;
+var MS_PER_DAY = 24 * 60 * 60 * 1e3;
+
 // ../core/dist/claude-code-usage/banner-parser.js
 var SEP = /[\s·\-–—]+/.source;
 var SUBJECT = /(?:You(?:['’]ve|\s+have)?\s+)?/.source;
-var TIME_OF_DAY = /\d{1,2}(?::\d{2})?\s*(?:am|pm)(?:\s*\(?UTC\)?)?/.source;
-var RESET_DATE = `(?:[A-Za-z]{3,9}\\s+\\d{1,2}(?:\\s*,\\s*${TIME_OF_DAY})?|${TIME_OF_DAY})`;
+var RESET_DATE = RESET_DATE_SOURCE;
 var BANNER_PATTERNS = [
   // Percentage form — pct in group 1, reset in group 2.
   new RegExp(`${SUBJECT}used\\s+(\\d{1,3})%\\s+of\\s+your\\s+weekly\\s+limit${SEP}resets\\s+(${RESET_DATE})`, "i"),
@@ -41768,12 +41807,18 @@ var BANNER_PATTERNS = [
     "i"
   )
 ];
-var MS_PER_DAY = 24 * 60 * 60 * 1e3;
 
 // ../core/dist/claude-code-usage/run-marker.js
 var RUN_MARKER_RE = /<!--\s*agt-run:([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})\s*-->/;
 var RUN_MARKER_RE_GLOBAL = new RegExp(RUN_MARKER_RE.source, "g");
 
+// ../core/dist/claude-code-usage/usage-report-parser.js
+var SEP2 = /[\s·\-–—]+/.source;
+var WINDOW_LINE = new RegExp(`^\\s*Current\\s+(session|week)(?:\\s*\\(([^)]*)\\))?\\s*:\\s*(\\d{1,3})%\\s+used(?:${SEP2}resets\\s+(${RESET_DATE_SOURCE}))?\\s*$`, "gim");
+
+// ../core/dist/claude-code-usage/host-usage-reading.js
+var RESET_JITTER_TOLERANCE_MS = 5 * 60 * 1e3;
+
 // ../core/dist/claude-code-usage/rate-limit-classifier.js
 var UNKNOWN_RATE_LIMIT = Object.freeze({
   verdict: "unknown",
@@ -42876,7 +42921,7 @@ var FLAG_REGISTRY = [
   },
   {
     key: "tool-call-audit",
-    description: "Host-side tool-call audit extraction (ENG-8575, slice 3 of ENG-8427): the manager scans agent transcripts for tool calls, redacts each to identity-without-content, and POSTs them to /host/tool-calls. Boolean gate; ships dark \u2014 when off the manager reads no transcripts and sends nothing, so 0 agent_tool_calls rows fleet-wide is the expected steady state until it is armed. NOT the commercial gate: /host/tool-calls independently re-checks the advanced_governance entitlement and refuses regardless of this flag, because the host is customer-owned infrastructure. This flag is rollout control only.",
+    description: "Host-side tool-call audit extraction (ENG-8575, slice 3 of ENG-8427): the manager scans agent transcripts for tool calls, redacts each to identity-without-content, and POSTs them to /host/tool-calls. Boolean gate; when off the manager reads no transcripts and sends nothing. ARMED STAGE-WIDE SINCE 2026-08-17 \u2014 the compiled default below is what a host resolves when nothing else says otherwise, NOT a description of the fleet. This text once asserted the opposite and outlived its truth by nine days, which is what got ENG-9472 filed to arm an already-armed flag. Query the table, do not infer it from this line. NOT the commercial gate: /host/tool-calls independently re-checks the advanced_governance entitlement and refuses regardless of this flag, because the host is customer-owned infrastructure. This flag is rollout control only.",
     flagType: "boolean",
     // Declared safe value is `false` (no extraction). Fail-safe direction: a
     // flag-DB read error must never start shipping tool-call metadata across the

package/dist/mcp/origami.js

@@ -40540,11 +40540,50 @@ var CONDITIONAL_DELIVERY_BODY = [
 // ../core/dist/liveness/agent-liveness.js
 var FRESH_HEARTBEAT_THRESHOLD_MS = 2 * 60 * 1e3;
 
+// ../core/dist/claude-code-usage/reset-time.js
+var MONTHS = [
+  "jan",
+  "feb",
+  "mar",
+  "apr",
+  "may",
+  "jun",
+  "jul",
+  "aug",
+  "sep",
+  "oct",
+  "nov",
+  "dec"
+];
+var FULL_MONTHS = [
+  "january",
+  "february",
+  "march",
+  "april",
+  "may",
+  "june",
+  "july",
+  "august",
+  "september",
+  "october",
+  "november",
+  "december"
+];
+var MONTH_TOKENS = new Map([
+  ...MONTHS.map((m, i) => [m, i]),
+  ...FULL_MONTHS.map((m, i) => [m, i]),
+  // "Sept" is the one four-letter abbreviation in common use and is inside the
+  // {3,9} the grammar accepts, so it is reachable and must resolve.
+  ["sept", 8]
+]);
+var TIME_OF_DAY_SOURCE = /\d{1,2}(?::\d{2})?\s*(?:am|pm)(?:\s*\(?UTC\)?)?/.source;
+var RESET_DATE_SOURCE = `(?:[A-Za-z]{3,9}\\s+\\d{1,2}(?:\\s*,\\s*${TIME_OF_DAY_SOURCE})?|${TIME_OF_DAY_SOURCE})`;
+var MS_PER_DAY = 24 * 60 * 60 * 1e3;
+
 // ../core/dist/claude-code-usage/banner-parser.js
 var SEP = /[\s·\-–—]+/.source;
 var SUBJECT = /(?:You(?:['’]ve|\s+have)?\s+)?/.source;
-var TIME_OF_DAY = /\d{1,2}(?::\d{2})?\s*(?:am|pm)(?:\s*\(?UTC\)?)?/.source;
-var RESET_DATE = `(?:[A-Za-z]{3,9}\\s+\\d{1,2}(?:\\s*,\\s*${TIME_OF_DAY})?|${TIME_OF_DAY})`;
+var RESET_DATE = RESET_DATE_SOURCE;
 var BANNER_PATTERNS = [
   // Percentage form — pct in group 1, reset in group 2.
   new RegExp(`${SUBJECT}used\\s+(\\d{1,3})%\\s+of\\s+your\\s+weekly\\s+limit${SEP}resets\\s+(${RESET_DATE})`, "i"),
@@ -40576,12 +40615,18 @@ var BANNER_PATTERNS = [
     "i"
   )
 ];
-var MS_PER_DAY = 24 * 60 * 60 * 1e3;
 
 // ../core/dist/claude-code-usage/run-marker.js
 var RUN_MARKER_RE = /<!--\s*agt-run:([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})\s*-->/;
 var RUN_MARKER_RE_GLOBAL = new RegExp(RUN_MARKER_RE.source, "g");
 
+// ../core/dist/claude-code-usage/usage-report-parser.js
+var SEP2 = /[\s·\-–—]+/.source;
+var WINDOW_LINE = new RegExp(`^\\s*Current\\s+(session|week)(?:\\s*\\(([^)]*)\\))?\\s*:\\s*(\\d{1,3})%\\s+used(?:${SEP2}resets\\s+(${RESET_DATE_SOURCE}))?\\s*$`, "gim");
+
+// ../core/dist/claude-code-usage/host-usage-reading.js
+var RESET_JITTER_TOLERANCE_MS = 5 * 60 * 1e3;
+
 // ../core/dist/claude-code-usage/rate-limit-classifier.js
 var UNKNOWN_RATE_LIMIT = Object.freeze({
   verdict: "unknown",
@@ -41663,7 +41708,7 @@ var FLAG_REGISTRY = [
   },
   {
     key: "tool-call-audit",
-    description: "Host-side tool-call audit extraction (ENG-8575, slice 3 of ENG-8427): the manager scans agent transcripts for tool calls, redacts each to identity-without-content, and POSTs them to /host/tool-calls. Boolean gate; ships dark \u2014 when off the manager reads no transcripts and sends nothing, so 0 agent_tool_calls rows fleet-wide is the expected steady state until it is armed. NOT the commercial gate: /host/tool-calls independently re-checks the advanced_governance entitlement and refuses regardless of this flag, because the host is customer-owned infrastructure. This flag is rollout control only.",
+    description: "Host-side tool-call audit extraction (ENG-8575, slice 3 of ENG-8427): the manager scans agent transcripts for tool calls, redacts each to identity-without-content, and POSTs them to /host/tool-calls. Boolean gate; when off the manager reads no transcripts and sends nothing. ARMED STAGE-WIDE SINCE 2026-08-17 \u2014 the compiled default below is what a host resolves when nothing else says otherwise, NOT a description of the fleet. This text once asserted the opposite and outlived its truth by nine days, which is what got ENG-9472 filed to arm an already-armed flag. Query the table, do not infer it from this line. NOT the commercial gate: /host/tool-calls independently re-checks the advanced_governance entitlement and refuses regardless of this flag, because the host is customer-owned infrastructure. This flag is rollout control only.",
     flagType: "boolean",
     // Declared safe value is `false` (no extraction). Fail-safe direction: a
     // flag-DB read error must never start shipping tool-call metadata across the

package/dist/mcp/slack-channel.js

@@ -34594,6 +34594,111 @@ var CONDITIONAL_DELIVERY_BODY = [
 // ../core/dist/liveness/agent-liveness.js
 var FRESH_HEARTBEAT_THRESHOLD_MS = 2 * 60 * 1e3;
 
+// ../core/dist/claude-code-usage/reset-time.js
+var MONTHS = [
+  "jan",
+  "feb",
+  "mar",
+  "apr",
+  "may",
+  "jun",
+  "jul",
+  "aug",
+  "sep",
+  "oct",
+  "nov",
+  "dec"
+];
+var FULL_MONTHS = [
+  "january",
+  "february",
+  "march",
+  "april",
+  "may",
+  "june",
+  "july",
+  "august",
+  "september",
+  "october",
+  "november",
+  "december"
+];
+var MONTH_TOKENS = new Map([
+  ...MONTHS.map((m, i) => [m, i]),
+  ...FULL_MONTHS.map((m, i) => [m, i]),
+  // "Sept" is the one four-letter abbreviation in common use and is inside the
+  // {3,9} the grammar accepts, so it is reachable and must resolve.
+  ["sept", 8]
+]);
+var TIME_OF_DAY_SOURCE = /\d{1,2}(?::\d{2})?\s*(?:am|pm)(?:\s*\(?UTC\)?)?/.source;
+var RESET_DATE_SOURCE = `(?:[A-Za-z]{3,9}\\s+\\d{1,2}(?:\\s*,\\s*${TIME_OF_DAY_SOURCE})?|${TIME_OF_DAY_SOURCE})`;
+var TIME_TAIL = /,\s*(\d{1,2})(?::(\d{2}))?\s*(am|pm)(?:\s*\(?UTC\)?)?\s*$/i;
+var TIME_ONLY = /^(\d{1,2})(?::(\d{2}))?\s*(am|pm)(?:\s*\(?UTC\)?)?$/i;
+var MS_PER_DAY = 24 * 60 * 60 * 1e3;
+function parseAmPm(hourStr, minStr, ampm) {
+  const rawHour = Number.parseInt(hourStr, 10);
+  if (!Number.isFinite(rawHour) || rawHour < 1 || rawHour > 12)
+    return null;
+  let minute = 0;
+  if (minStr) {
+    minute = Number.parseInt(minStr, 10);
+    if (!Number.isFinite(minute) || minute < 0 || minute > 59)
+      return null;
+  }
+  const isPm = ampm.toLowerCase() === "pm";
+  return { hour: rawHour % 12 + (isPm ? 12 : 0), minute };
+}
+function parseResetDateTime(humanDate, now) {
+  const trimmed = humanDate.trim();
+  const timeOnly = trimmed.match(TIME_ONLY);
+  if (timeOnly) {
+    const hm = parseAmPm(timeOnly[1], timeOnly[2], timeOnly[3]);
+    if (!hm)
+      return null;
+    const todayAt = Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate(), hm.hour, hm.minute);
+    return {
+      at: new Date(todayAt <= now.getTime() ? todayAt + MS_PER_DAY : todayAt),
+      precision: "hour_only"
+    };
+  }
+  const timeMatch = trimmed.match(TIME_TAIL);
+  const dateOnly = timeMatch ? trimmed.slice(0, timeMatch.index).trim() : trimmed;
+  const parts = dateOnly.split(/\s+/);
+  if (parts.length !== 2)
+    return null;
+  const lookedUpMonth = MONTH_TOKENS.get(parts[0].toLowerCase());
+  if (lookedUpMonth === void 0)
+    return null;
+  const month = lookedUpMonth;
+  const day = Number.parseInt(parts[1], 10);
+  if (!Number.isFinite(day) || day < 1 || day > 31)
+    return null;
+  let hour = 0;
+  let minute = 0;
+  if (timeMatch) {
+    const hm = parseAmPm(timeMatch[1], timeMatch[2], timeMatch[3]);
+    if (!hm)
+      return null;
+    hour = hm.hour;
+    minute = hm.minute;
+  }
+  const baseYear = now.getUTCFullYear();
+  let resolved = null;
+  let bestDelta = Number.POSITIVE_INFINITY;
+  for (const y of [baseYear - 1, baseYear, baseYear + 1]) {
+    const candidate = new Date(Date.UTC(y, month, day, hour, minute));
+    if (candidate.getUTCFullYear() !== y || candidate.getUTCMonth() !== month || candidate.getUTCDate() !== day) {
+      continue;
+    }
+    const delta = Math.abs(candidate.getTime() - now.getTime());
+    if (delta < bestDelta) {
+      bestDelta = delta;
+      resolved = candidate;
+    }
+  }
+  return resolved ? { at: resolved, precision: "dated" } : null;
+}
+
 // ../core/dist/claude-code-usage/banner-parser.js
 var SESSION_QUALIFIER = /^(?:session|\d{1,2}\s*-?\s*hours?|\d{1,2}h)$/i;
 function classifyLimitScope(qualifier) {
@@ -34608,8 +34713,7 @@ function classifyLimitScope(qualifier) {
 }
 var SEP = /[\s·\-–—]+/.source;
 var SUBJECT = /(?:You(?:['’]ve|\s+have)?\s+)?/.source;
-var TIME_OF_DAY = /\d{1,2}(?::\d{2})?\s*(?:am|pm)(?:\s*\(?UTC\)?)?/.source;
-var RESET_DATE = `(?:[A-Za-z]{3,9}\\s+\\d{1,2}(?:\\s*,\\s*${TIME_OF_DAY})?|${TIME_OF_DAY})`;
+var RESET_DATE = RESET_DATE_SOURCE;
 var BANNER_PATTERNS = [
   // Percentage form — pct in group 1, reset in group 2.
   new RegExp(`${SUBJECT}used\\s+(\\d{1,3})%\\s+of\\s+your\\s+weekly\\s+limit${SEP}resets\\s+(${RESET_DATE})`, "i"),
@@ -34684,82 +34788,6 @@ function parseUsageBanner(text, now = /* @__PURE__ */ new Date()) {
   }
   return best;
 }
-var MONTHS = [
-  "jan",
-  "feb",
-  "mar",
-  "apr",
-  "may",
-  "jun",
-  "jul",
-  "aug",
-  "sep",
-  "oct",
-  "nov",
-  "dec"
-];
-var TIME_TAIL = /,\s*(\d{1,2})(?::(\d{2}))?\s*(am|pm)(?:\s*\(?UTC\)?)?\s*$/i;
-var TIME_ONLY = /^(\d{1,2})(?::(\d{2}))?\s*(am|pm)(?:\s*\(?UTC\)?)?$/i;
-var MS_PER_DAY = 24 * 60 * 60 * 1e3;
-function parseAmPm(hourStr, minStr, ampm) {
-  const rawHour = Number.parseInt(hourStr, 10);
-  if (!Number.isFinite(rawHour) || rawHour < 1 || rawHour > 12)
-    return null;
-  let minute = 0;
-  if (minStr) {
-    minute = Number.parseInt(minStr, 10);
-    if (!Number.isFinite(minute) || minute < 0 || minute > 59)
-      return null;
-  }
-  const isPm = ampm.toLowerCase() === "pm";
-  return { hour: rawHour % 12 + (isPm ? 12 : 0), minute };
-}
-function parseResetDateTime(humanDate, now) {
-  const trimmed = humanDate.trim();
-  const timeOnly = trimmed.match(TIME_ONLY);
-  if (timeOnly) {
-    const hm = parseAmPm(timeOnly[1], timeOnly[2], timeOnly[3]);
-    if (!hm)
-      return null;
-    const todayAt = Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate(), hm.hour, hm.minute);
-    return {
-      at: new Date(todayAt <= now.getTime() ? todayAt + MS_PER_DAY : todayAt),
-      precision: "hour_only"
-    };
-  }
-  const timeMatch = trimmed.match(TIME_TAIL);
-  const dateOnly = timeMatch ? trimmed.slice(0, timeMatch.index).trim() : trimmed;
-  const parts = dateOnly.split(/\s+/);
-  if (parts.length !== 2)
-    return null;
-  const month = MONTHS.indexOf(parts[0].slice(0, 3).toLowerCase());
-  if (month < 0)
-    return null;
-  const day = Number.parseInt(parts[1], 10);
-  if (!Number.isFinite(day) || day < 1 || day > 31)
-    return null;
-  let hour = 0;
-  let minute = 0;
-  if (timeMatch) {
-    const hm = parseAmPm(timeMatch[1], timeMatch[2], timeMatch[3]);
-    if (!hm)
-      return null;
-    hour = hm.hour;
-    minute = hm.minute;
-  }
-  const baseYear = now.getUTCFullYear();
-  let resolved = null;
-  let bestDelta = Number.POSITIVE_INFINITY;
-  for (const y of [baseYear - 1, baseYear, baseYear + 1]) {
-    const candidate = new Date(Date.UTC(y, month, day, hour, minute));
-    const delta = Math.abs(candidate.getTime() - now.getTime());
-    if (delta < bestDelta) {
-      bestDelta = delta;
-      resolved = candidate;
-    }
-  }
-  return resolved ? { at: resolved, precision: "dated" } : null;
-}
 
 // ../core/dist/claude-code-usage/run-marker.js
 var RUN_MARKER_RE = /<!--\s*agt-run:([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})\s*-->/;
@@ -34778,6 +34806,13 @@ function buildUsageLimitReplyText(limitedUntil) {
   return `Your agent has hit its Claude Code usage limit until ${formatUtcClock(limitedUntil)}. It'll pick back up once the limit resets \u2014 please try again after then.`;
 }
 
+// ../core/dist/claude-code-usage/usage-report-parser.js
+var SEP2 = /[\s·\-–—]+/.source;
+var WINDOW_LINE = new RegExp(`^\\s*Current\\s+(session|week)(?:\\s*\\(([^)]*)\\))?\\s*:\\s*(\\d{1,3})%\\s+used(?:${SEP2}resets\\s+(${RESET_DATE_SOURCE}))?\\s*$`, "gim");
+
+// ../core/dist/claude-code-usage/host-usage-reading.js
+var RESET_JITTER_TOLERANCE_MS = 5 * 60 * 1e3;
+
 // ../core/dist/claude-code-usage/rate-limit-classifier.js
 var UNKNOWN_RATE_LIMIT = Object.freeze({
   verdict: "unknown",
@@ -36134,7 +36169,7 @@ var FLAG_REGISTRY = [
   },
   {
     key: "tool-call-audit",
-    description: "Host-side tool-call audit extraction (ENG-8575, slice 3 of ENG-8427): the manager scans agent transcripts for tool calls, redacts each to identity-without-content, and POSTs them to /host/tool-calls. Boolean gate; ships dark \u2014 when off the manager reads no transcripts and sends nothing, so 0 agent_tool_calls rows fleet-wide is the expected steady state until it is armed. NOT the commercial gate: /host/tool-calls independently re-checks the advanced_governance entitlement and refuses regardless of this flag, because the host is customer-owned infrastructure. This flag is rollout control only.",
+    description: "Host-side tool-call audit extraction (ENG-8575, slice 3 of ENG-8427): the manager scans agent transcripts for tool calls, redacts each to identity-without-content, and POSTs them to /host/tool-calls. Boolean gate; when off the manager reads no transcripts and sends nothing. ARMED STAGE-WIDE SINCE 2026-08-17 \u2014 the compiled default below is what a host resolves when nothing else says otherwise, NOT a description of the fleet. This text once asserted the opposite and outlived its truth by nine days, which is what got ENG-9472 filed to arm an already-armed flag. Query the table, do not infer it from this line. NOT the commercial gate: /host/tool-calls independently re-checks the advanced_governance entitlement and refuses regardless of this flag, because the host is customer-owned infrastructure. This flag is rollout control only.",
     flagType: "boolean",
     // Declared safe value is `false` (no extraction). Fail-safe direction: a
     // flag-DB read error must never start shipping tool-call metadata across the