@integrity-labs/agt-cli 0.28.921 → 0.28.923

package/dist/{claude-pair-runtime-NNHCDXLG.js → claude-pair-runtime-SY5VCTCE.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-OQRYZ3YP.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-UEAJJ72P.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-NNHCDXLG.js.map
+//# sourceMappingURL=claude-pair-runtime-SY5VCTCE.js.map

package/dist/lib/manager-worker.js

@@ -63,7 +63,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-GWP5VUJ4.js";
+} from "../chunk-D3DVYP4X.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -136,7 +136,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-NGJFE75J.js";
+} from "../chunk-BLEV5PAO.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -231,7 +231,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-ZOPP3ZC7.js";
+} from "../chunk-VHO7KAB7.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -13138,7 +13138,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-RBWP6HJE.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-VXJKA6RF.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname11(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -13823,7 +13823,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.921" : "dev";
+var agtCliVersion = true ? "0.28.923" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -15413,7 +15413,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-OQRYZ3YP.js");
+      const { collectDiagnostics } = await import("../persistent-session-UEAJJ72P.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -15555,7 +15555,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-OQRYZ3YP.js");
+      const { collectDiagnostics } = await import("../persistent-session-UEAJJ72P.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor) : void 0;
       let tailscaleHostname;
@@ -15730,7 +15730,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-RBWP6HJE.js");
+      } = await import("../responsiveness-probe-VXJKA6RF.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -15847,7 +15847,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-RBWP6HJE.js");
+        } = await import("../responsiveness-probe-VXJKA6RF.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -16003,7 +16003,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-JA437JIB.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-4KUPTD7M.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-XOP4XYBD.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -20267,7 +20267,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
       try {
         const freshId = rotateSessionForWedge(codeName);
         consecutiveWedgeCycles.delete(codeName);
-        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-RBWP6HJE.js");
+        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-VXJKA6RF.js");
         const { parked, deadLettered } = parkForRestart(codeName, /* @__PURE__ */ new Date());
         const parkNote = parked > 0 ? `, ${parked} inbound parked` : "";
         const deadNote = deadLettered > 0 ? `, ${deadLettered} undeliverable dead-lettered` : "";
@@ -20310,7 +20310,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-OQRYZ3YP.js");
+        const { collectDiagnostics } = await import("../persistent-session-UEAJJ72P.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -20361,7 +20361,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-OQRYZ3YP.js");
+      const { collectDiagnostics } = await import("../persistent-session-UEAJJ72P.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -21003,7 +21003,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-NNHCDXLG.js");
+  } = await import("../claude-pair-runtime-SY5VCTCE.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/direct-chat-channel.js

@@ -35092,13 +35092,16 @@ function parseResetDateTime(humanDate, now) {
 
 // ../core/dist/claude-code-usage/banner-parser.js
 var SESSION_QUALIFIER = /^(?:session|\d{1,2}\s*-?\s*hours?|\d{1,2}h)$/i;
-var SPEND_QUALIFIER = /^(?:individual\s+)?spend$/i;
+var SPEND_QUALIFIER = /^(?:individual\s+)?(?:(?:daily|weekly|monthly)\s+)?spend$/i;
+var ORG_SPEND_QUALIFIER = /^(?:your\s+)?(?:org|organi[sz]ation|team|workspace)['’]s\s+(?:(?:daily|weekly|monthly)\s+)?spend$/i;
 function classifyLimitScope(qualifier) {
   const q = (qualifier ?? "").trim();
   if (!q)
     return "weekly";
   if (SESSION_QUALIFIER.test(q))
     return "session";
+  if (ORG_SPEND_QUALIFIER.test(q))
+    return "org_spend";
   if (SPEND_QUALIFIER.test(q))
     return "spend";
   if (/^weekly$/i.test(q))
@@ -35135,7 +35138,13 @@ var BANNER_PATTERNS = [
     // "limit". This parser runs over agent-produced pane.log tails, so that is
     // reachable input. Requiring at least one separator per extra token, and
     // bounding the count, keeps it linear.
-    `${SUBJECT}hit\\s+your\\s+(?<qualifier>[a-z0-9]+(?:[\\s-]+[a-z0-9]+){0,3}\\s+)?limit${SEP}resets\\s+(?<reset>${RESET_DATE})`,
+    //
+    // ENG-10474: the token class admits an apostrophe (both ' and ’). It was
+    // `[a-z0-9]`, so ANY possessive qualifier ("org's monthly", "team's") made
+    // the whole banner unmatchable, not merely unclassified: null, no
+    // observation, no alert. The apostrophe cannot match empty, so the
+    // at-least-one-separator shape above still keeps this linear.
+    `${SUBJECT}hit\\s+your\\s+(?<qualifier>[a-z0-9'\u2019]+(?:[\\s-]+[a-z0-9'\u2019]+){0,3}\\s+)?limit${SEP}resets\\s+(?<reset>${RESET_DATE})`,
     "i"
   ),
   // ENG-10365 — the Claude Team seat's INDIVIDUAL SPEND LIMIT.
@@ -35188,7 +35197,23 @@ var BANNER_PATTERNS = [
   // monitor's auto-close, and synthesising an instant we never read is the exact
   // confident-and-false reporting ENG-8901 exists to stop. Every spend banner
   // observed so far carries one.
-  new RegExp(`${SUBJECT}hit\\s+your\\s+(?<qualifier>(?:individual\\s+)?spend)\\s+limit[\\s\\S]{0,160}?resets\\s+(?<reset>${RESET_DATE})`, "i")
+  //
+  // ENG-10474 — THE CAPTURE NO LONGER GATES THE CLASSIFIER. It admitted exactly
+  // `spend` or `individual spend`, so "You've hit your org's monthly spend
+  // limit" failed here as well as in both patterns above and alyve's agents went
+  // dark with every platform signal green. The capture now takes up to three
+  // qualifier tokens (apostrophes allowed) in front of `spend`, and
+  // `classifyLimitScope` decides what they mean, which is how pattern 2 already
+  // worked.
+  //
+  // `spend` STAYS THE ANCHOR, and that is the design decision. Making this
+  // capture as open as pattern 2's would turn it into "any saturated banner with
+  // up to 160 characters before `resets`", so "You've hit your weekly limit"
+  // followed by pane prose and an unrelated "resets Nov 28" would start
+  // producing observations — the false-pairing surface the 160-character bound
+  // exists to fence. Pattern 2 keeps its adjacency rule for every non-spend
+  // qualifier; this pattern only widens WHICH spend. Pinned by a test either way.
+  new RegExp(`${SUBJECT}hit\\s+your\\s+(?<qualifier>(?:[a-z0-9'\u2019]+[\\s-]+){0,3}spend)\\s+limit[\\s\\S]{0,160}?resets\\s+(?<reset>${RESET_DATE})`, "i")
 ];
 function parseUsageBanner(text, now = /* @__PURE__ */ new Date()) {
   let bestIndex = -1;

package/dist/mcp/index.js

@@ -27761,7 +27761,13 @@ var BANNER_PATTERNS = [
     // "limit". This parser runs over agent-produced pane.log tails, so that is
     // reachable input. Requiring at least one separator per extra token, and
     // bounding the count, keeps it linear.
-    `${SUBJECT}hit\\s+your\\s+(?<qualifier>[a-z0-9]+(?:[\\s-]+[a-z0-9]+){0,3}\\s+)?limit${SEP}resets\\s+(?<reset>${RESET_DATE})`,
+    //
+    // ENG-10474: the token class admits an apostrophe (both ' and ’). It was
+    // `[a-z0-9]`, so ANY possessive qualifier ("org's monthly", "team's") made
+    // the whole banner unmatchable, not merely unclassified: null, no
+    // observation, no alert. The apostrophe cannot match empty, so the
+    // at-least-one-separator shape above still keeps this linear.
+    `${SUBJECT}hit\\s+your\\s+(?<qualifier>[a-z0-9'\u2019]+(?:[\\s-]+[a-z0-9'\u2019]+){0,3}\\s+)?limit${SEP}resets\\s+(?<reset>${RESET_DATE})`,
     "i"
   ),
   // ENG-10365 — the Claude Team seat's INDIVIDUAL SPEND LIMIT.
@@ -27814,7 +27820,23 @@ var BANNER_PATTERNS = [
   // monitor's auto-close, and synthesising an instant we never read is the exact
   // confident-and-false reporting ENG-8901 exists to stop. Every spend banner
   // observed so far carries one.
-  new RegExp(`${SUBJECT}hit\\s+your\\s+(?<qualifier>(?:individual\\s+)?spend)\\s+limit[\\s\\S]{0,160}?resets\\s+(?<reset>${RESET_DATE})`, "i")
+  //
+  // ENG-10474 — THE CAPTURE NO LONGER GATES THE CLASSIFIER. It admitted exactly
+  // `spend` or `individual spend`, so "You've hit your org's monthly spend
+  // limit" failed here as well as in both patterns above and alyve's agents went
+  // dark with every platform signal green. The capture now takes up to three
+  // qualifier tokens (apostrophes allowed) in front of `spend`, and
+  // `classifyLimitScope` decides what they mean, which is how pattern 2 already
+  // worked.
+  //
+  // `spend` STAYS THE ANCHOR, and that is the design decision. Making this
+  // capture as open as pattern 2's would turn it into "any saturated banner with
+  // up to 160 characters before `resets`", so "You've hit your weekly limit"
+  // followed by pane prose and an unrelated "resets Nov 28" would start
+  // producing observations — the false-pairing surface the 160-character bound
+  // exists to fence. Pattern 2 keeps its adjacency rule for every non-spend
+  // qualifier; this pattern only widens WHICH spend. Pinned by a test either way.
+  new RegExp(`${SUBJECT}hit\\s+your\\s+(?<qualifier>(?:[a-z0-9'\u2019]+[\\s-]+){0,3}spend)\\s+limit[\\s\\S]{0,160}?resets\\s+(?<reset>${RESET_DATE})`, "i")
 ];
 
 // ../core/dist/claude-code-usage/run-marker.js
@@ -48514,7 +48536,7 @@ server.tool(
 );
 server.tool(
   "routine_list",
-  "List the routines YOU own - the recurring responsibilities a human accepted on your behalf. Call this FIRST whenever you need a routine_id: routine_revise and submit_routine_output both require one, and this is the only tool that produces it. Each entry gives you the routine_id, its name and status, the schedule it runs on (id, cron, timezone), its version, whether it owes a submit_routine_output call, and its FULL current prompt. The prompt is complete and untruncated on purpose: routine_revise replaces a routine's substance wholesale, so anything missing from what you read is missing from what you write. Read it here before revising rather than reconstructing it from memory. Returns an empty list if you own none - that is an answer, not an error.",
+  "List the routines YOU own - the recurring responsibilities a human accepted on your behalf. Call this FIRST whenever you need a routine_id: routine_revise and submit_routine_output both require one, and this is the only tool that produces it. Each entry gives you the routine_id, its name and status, the schedule it runs on (id, cron, timezone), its version, whether it owes a submit_routine_output call, whether a revision you proposed is still waiting on your manager (ENG-10494 - one is pending until they resolve it, and it blocks every further revision of that routine), and its FULL current prompt. The prompt is complete and untruncated on purpose: routine_revise replaces a routine's substance wholesale, so anything missing from what you read is missing from what you write. Read it here before revising rather than reconstructing it from memory. Returns an empty list if you own none - that is an answer, not an error.",
   {},
   async () => {
     try {
@@ -48537,9 +48559,13 @@ server.tool(
         const when = r.cron ? `cron ${r.cron}` : r.every ? `every ${r.every}` : "no schedule";
         const tz = r.timezone ? ` ${r.timezone}` : "";
         const gated = r.requires_output_approval ? "\n  approval: REQUIRED \u2014 call submit_routine_output instead of delivering directly" : "";
+        const pending = r.pending_revision ? `
+  revision pending since ${r.pending_revision.proposed_at}` + (r.pending_revision.summary ? ` \u2014 "${r.pending_revision.summary}"` : "") + (r.pending_revision.snoozed_until ? `
+    your manager chose "not now"; the card re-surfaces ${r.pending_revision.snoozed_until}` : "") + (r.pending_revision.review_url ? `
+    review: ${r.pending_revision.review_url}` : "") + "\n    You cannot propose another revision of this routine until they resolve it. Call routine_proposal_status to read what is waiting." : "";
         return `\u2022 ${r.name} [${r.status}] v${r.version}
   routine_id: ${r.routine_id}
-  schedule_id: ${r.schedule_id ?? "(none \u2014 this routine has no runtime row)"} (${when}${tz})${gated}
+  schedule_id: ${r.schedule_id ?? "(none \u2014 this routine has no runtime row)"} (${when}${tz})${gated}${pending}
   prompt:
 ${r.prompt ?? "(none)"}`;
       }).join("\n\n");
@@ -48589,11 +48615,14 @@ server.tool(
           content: [{ type: "text", text: data.error ?? data.message ?? "Could not propose the revision." }]
         };
       }
+      const link = data.review_url ? `
+
+Give your manager this link so they can accept or decline it: ${data.review_url}` : "";
       return {
         content: [
           {
             type: "text",
-            text: data.message ?? "Revision proposed. The live routine is unchanged until your manager accepts it."
+            text: (data.message ?? "Revision proposed. The live routine is unchanged until your manager accepts it.") + link + "\n\nCheck the outcome later with routine_proposal_status \u2014 until they resolve this one you cannot propose another revision of this routine."
           }
         ]
       };
@@ -48612,6 +48641,74 @@ server.tool(
     }
   }
 );
+server.tool(
+  "routine_proposal_status",
+  "Read the outcome of the routine revisions YOU proposed with routine_revise: pending (your manager has not resolved it yet), accepted, declined, or expired - plus the summary and the FULL replacement description you submitted, so you can see what is actually waiting on them. A pending proposal also returns a review_url to hand to your manager, and is flagged `stale` when the routine has changed since you proposed (accepting it would apply a rewrite of text the routine no longer says - propose again against the current prompt instead). Call this when routine_list shows a revision pending, when routine_revise refuses because one already is, or to close the loop on a proposal you filed in an earlier session. No decline reason is recorded anywhere on this path, so a declined proposal tells you THAT it was declined and not why - ask the person rather than reporting a reason you do not have.",
+  {
+    routine_id: external_exports.string().trim().min(1).optional().describe("Optional: only proposals targeting this routine (the id from routine_list).")
+  },
+  async (params) => {
+    try {
+      const data = await apiPost(
+        "/host/routines/proposals",
+        {
+          agent_id: AGT_AGENT_ID,
+          ...params.routine_id ? { routine_id: params.routine_id } : {}
+        },
+        false,
+        15e3,
+        "routine_proposal_status",
+        true
+      );
+      if (!data.ok) {
+        return { content: [{ type: "text", text: data.error ?? "Could not read your revision proposals." }] };
+      }
+      const proposals = data.proposals ?? [];
+      if (proposals.length === 0) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: params.routine_id ? `You have proposed no revisions of routine ${params.routine_id}.` : "You have proposed no routine revisions."
+            }
+          ]
+        };
+      }
+      const body = proposals.map((p2) => {
+        const stale = p2.stale ? `
+  STALE \u2014 the routine is now v${p2.current_version ?? "?"} but you proposed against v${p2.from_version ?? "?"}. Read the current prompt with routine_list and propose again.` : "";
+        const snoozed = p2.snoozed_until ? `
+  your manager chose "not now"; the card re-surfaces ${p2.snoozed_until}` : "";
+        const resolved = p2.resolved_at ? `
+  resolved: ${p2.resolved_at}` : "";
+        const link = p2.review_url ? `
+  review: ${p2.review_url}` : "";
+        return `\u2022 ${p2.routine_name ?? p2.routine_id} \u2014 ${p2.state.toUpperCase()}${stale}
+  routine_id: ${p2.routine_id}
+  proposed: ${p2.proposed_at}${resolved}${snoozed}${link}
+  summary: ${p2.summary ?? "(none)"}
+  proposed description:
+${p2.proposed_description ?? "(none)"}`;
+      }).join("\n\n");
+      return {
+        content: [
+          {
+            type: "text",
+            text: `${proposals.length} routine revision${proposals.length === 1 ? "" : "s"} you proposed:
+
+${body}` + (data.truncated ? "\n\nTHIS IS A PAGE, NOT THE WHOLE HISTORY \u2014 the read hit its row cap, so older proposals exist that are not listed. Pass routine_id to narrow it." : "") + "\n\nNo decline reason is captured on this path \u2014 a declined proposal records that it was declined, not why."
+          }
+        ]
+      };
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      return {
+        content: [{ type: "text", text: `Could not read your revision proposals: ${msg}` }],
+        isError: true
+      };
+    }
+  }
+);
 server.tool(
   "submit_routine_output",
   "Submit a gated routine's drafted output for human approval. Use ONLY when your routine prompt says the routine is in its approval phase - the platform delivers the draft after sign-off; do not deliver it yourself.",
@@ -49498,6 +49595,9 @@ var LOCAL_TOOL_NAMES = /* @__PURE__ */ new Set([
   "routine_revise",
   // ENG-9431: the discovery primitive both of the above depend on.
   "routine_list",
+  // ENG-10494: the verdict loop for routine_revise. Without it a proposed
+  // revision is write-only, and an unseen one blocks that routine for good.
+  "routine_proposal_status",
   // ENG-10276: knowledge_get is the untruncated single-entry read. The list and
   // search tools serve a stored SUMMARY column, not the entry, so this is the
   // only one that can be trusted before a knowledge_update.

package/dist/mcp/origami.js

@@ -41683,7 +41683,13 @@ var BANNER_PATTERNS = [
     // "limit". This parser runs over agent-produced pane.log tails, so that is
     // reachable input. Requiring at least one separator per extra token, and
     // bounding the count, keeps it linear.
-    `${SUBJECT}hit\\s+your\\s+(?<qualifier>[a-z0-9]+(?:[\\s-]+[a-z0-9]+){0,3}\\s+)?limit${SEP}resets\\s+(?<reset>${RESET_DATE})`,
+    //
+    // ENG-10474: the token class admits an apostrophe (both ' and ’). It was
+    // `[a-z0-9]`, so ANY possessive qualifier ("org's monthly", "team's") made
+    // the whole banner unmatchable, not merely unclassified: null, no
+    // observation, no alert. The apostrophe cannot match empty, so the
+    // at-least-one-separator shape above still keeps this linear.
+    `${SUBJECT}hit\\s+your\\s+(?<qualifier>[a-z0-9'\u2019]+(?:[\\s-]+[a-z0-9'\u2019]+){0,3}\\s+)?limit${SEP}resets\\s+(?<reset>${RESET_DATE})`,
     "i"
   ),
   // ENG-10365 — the Claude Team seat's INDIVIDUAL SPEND LIMIT.
@@ -41736,7 +41742,23 @@ var BANNER_PATTERNS = [
   // monitor's auto-close, and synthesising an instant we never read is the exact
   // confident-and-false reporting ENG-8901 exists to stop. Every spend banner
   // observed so far carries one.
-  new RegExp(`${SUBJECT}hit\\s+your\\s+(?<qualifier>(?:individual\\s+)?spend)\\s+limit[\\s\\S]{0,160}?resets\\s+(?<reset>${RESET_DATE})`, "i")
+  //
+  // ENG-10474 — THE CAPTURE NO LONGER GATES THE CLASSIFIER. It admitted exactly
+  // `spend` or `individual spend`, so "You've hit your org's monthly spend
+  // limit" failed here as well as in both patterns above and alyve's agents went
+  // dark with every platform signal green. The capture now takes up to three
+  // qualifier tokens (apostrophes allowed) in front of `spend`, and
+  // `classifyLimitScope` decides what they mean, which is how pattern 2 already
+  // worked.
+  //
+  // `spend` STAYS THE ANCHOR, and that is the design decision. Making this
+  // capture as open as pattern 2's would turn it into "any saturated banner with
+  // up to 160 characters before `resets`", so "You've hit your weekly limit"
+  // followed by pane prose and an unrelated "resets Nov 28" would start
+  // producing observations — the false-pairing surface the 160-character bound
+  // exists to fence. Pattern 2 keeps its adjacency rule for every non-spend
+  // qualifier; this pattern only widens WHICH spend. Pinned by a test either way.
+  new RegExp(`${SUBJECT}hit\\s+your\\s+(?<qualifier>(?:[a-z0-9'\u2019]+[\\s-]+){0,3}spend)\\s+limit[\\s\\S]{0,160}?resets\\s+(?<reset>${RESET_DATE})`, "i")
 ];
 
 // ../core/dist/claude-code-usage/run-marker.js

package/dist/mcp/slack-channel.js

@@ -35965,13 +35965,16 @@ function parseResetDateTime(humanDate, now) {
 
 // ../core/dist/claude-code-usage/banner-parser.js
 var SESSION_QUALIFIER = /^(?:session|\d{1,2}\s*-?\s*hours?|\d{1,2}h)$/i;
-var SPEND_QUALIFIER = /^(?:individual\s+)?spend$/i;
+var SPEND_QUALIFIER = /^(?:individual\s+)?(?:(?:daily|weekly|monthly)\s+)?spend$/i;
+var ORG_SPEND_QUALIFIER = /^(?:your\s+)?(?:org|organi[sz]ation|team|workspace)['’]s\s+(?:(?:daily|weekly|monthly)\s+)?spend$/i;
 function classifyLimitScope(qualifier) {
   const q = (qualifier ?? "").trim();
   if (!q)
     return "weekly";
   if (SESSION_QUALIFIER.test(q))
     return "session";
+  if (ORG_SPEND_QUALIFIER.test(q))
+    return "org_spend";
   if (SPEND_QUALIFIER.test(q))
     return "spend";
   if (/^weekly$/i.test(q))
@@ -36008,7 +36011,13 @@ var BANNER_PATTERNS = [
     // "limit". This parser runs over agent-produced pane.log tails, so that is
     // reachable input. Requiring at least one separator per extra token, and
     // bounding the count, keeps it linear.
-    `${SUBJECT}hit\\s+your\\s+(?<qualifier>[a-z0-9]+(?:[\\s-]+[a-z0-9]+){0,3}\\s+)?limit${SEP}resets\\s+(?<reset>${RESET_DATE})`,
+    //
+    // ENG-10474: the token class admits an apostrophe (both ' and ’). It was
+    // `[a-z0-9]`, so ANY possessive qualifier ("org's monthly", "team's") made
+    // the whole banner unmatchable, not merely unclassified: null, no
+    // observation, no alert. The apostrophe cannot match empty, so the
+    // at-least-one-separator shape above still keeps this linear.
+    `${SUBJECT}hit\\s+your\\s+(?<qualifier>[a-z0-9'\u2019]+(?:[\\s-]+[a-z0-9'\u2019]+){0,3}\\s+)?limit${SEP}resets\\s+(?<reset>${RESET_DATE})`,
     "i"
   ),
   // ENG-10365 — the Claude Team seat's INDIVIDUAL SPEND LIMIT.
@@ -36061,7 +36070,23 @@ var BANNER_PATTERNS = [
   // monitor's auto-close, and synthesising an instant we never read is the exact
   // confident-and-false reporting ENG-8901 exists to stop. Every spend banner
   // observed so far carries one.
-  new RegExp(`${SUBJECT}hit\\s+your\\s+(?<qualifier>(?:individual\\s+)?spend)\\s+limit[\\s\\S]{0,160}?resets\\s+(?<reset>${RESET_DATE})`, "i")
+  //
+  // ENG-10474 — THE CAPTURE NO LONGER GATES THE CLASSIFIER. It admitted exactly
+  // `spend` or `individual spend`, so "You've hit your org's monthly spend
+  // limit" failed here as well as in both patterns above and alyve's agents went
+  // dark with every platform signal green. The capture now takes up to three
+  // qualifier tokens (apostrophes allowed) in front of `spend`, and
+  // `classifyLimitScope` decides what they mean, which is how pattern 2 already
+  // worked.
+  //
+  // `spend` STAYS THE ANCHOR, and that is the design decision. Making this
+  // capture as open as pattern 2's would turn it into "any saturated banner with
+  // up to 160 characters before `resets`", so "You've hit your weekly limit"
+  // followed by pane prose and an unrelated "resets Nov 28" would start
+  // producing observations — the false-pairing surface the 160-character bound
+  // exists to fence. Pattern 2 keeps its adjacency rule for every non-spend
+  // qualifier; this pattern only widens WHICH spend. Pinned by a test either way.
+  new RegExp(`${SUBJECT}hit\\s+your\\s+(?<qualifier>(?:[a-z0-9'\u2019]+[\\s-]+){0,3}spend)\\s+limit[\\s\\S]{0,160}?resets\\s+(?<reset>${RESET_DATE})`, "i")
 ];
 function parseUsageBanner(text, now = /* @__PURE__ */ new Date()) {
   let bestIndex = -1;

package/dist/mcp/telegram-channel.js

@@ -36001,13 +36001,16 @@ function parseResetDateTime(humanDate, now) {
 
 // ../core/dist/claude-code-usage/banner-parser.js
 var SESSION_QUALIFIER = /^(?:session|\d{1,2}\s*-?\s*hours?|\d{1,2}h)$/i;
-var SPEND_QUALIFIER = /^(?:individual\s+)?spend$/i;
+var SPEND_QUALIFIER = /^(?:individual\s+)?(?:(?:daily|weekly|monthly)\s+)?spend$/i;
+var ORG_SPEND_QUALIFIER = /^(?:your\s+)?(?:org|organi[sz]ation|team|workspace)['’]s\s+(?:(?:daily|weekly|monthly)\s+)?spend$/i;
 function classifyLimitScope(qualifier) {
   const q = (qualifier ?? "").trim();
   if (!q)
     return "weekly";
   if (SESSION_QUALIFIER.test(q))
     return "session";
+  if (ORG_SPEND_QUALIFIER.test(q))
+    return "org_spend";
   if (SPEND_QUALIFIER.test(q))
     return "spend";
   if (/^weekly$/i.test(q))
@@ -36044,7 +36047,13 @@ var BANNER_PATTERNS = [
     // "limit". This parser runs over agent-produced pane.log tails, so that is
     // reachable input. Requiring at least one separator per extra token, and
     // bounding the count, keeps it linear.
-    `${SUBJECT}hit\\s+your\\s+(?<qualifier>[a-z0-9]+(?:[\\s-]+[a-z0-9]+){0,3}\\s+)?limit${SEP}resets\\s+(?<reset>${RESET_DATE})`,
+    //
+    // ENG-10474: the token class admits an apostrophe (both ' and ’). It was
+    // `[a-z0-9]`, so ANY possessive qualifier ("org's monthly", "team's") made
+    // the whole banner unmatchable, not merely unclassified: null, no
+    // observation, no alert. The apostrophe cannot match empty, so the
+    // at-least-one-separator shape above still keeps this linear.
+    `${SUBJECT}hit\\s+your\\s+(?<qualifier>[a-z0-9'\u2019]+(?:[\\s-]+[a-z0-9'\u2019]+){0,3}\\s+)?limit${SEP}resets\\s+(?<reset>${RESET_DATE})`,
     "i"
   ),
   // ENG-10365 — the Claude Team seat's INDIVIDUAL SPEND LIMIT.
@@ -36097,7 +36106,23 @@ var BANNER_PATTERNS = [
   // monitor's auto-close, and synthesising an instant we never read is the exact
   // confident-and-false reporting ENG-8901 exists to stop. Every spend banner
   // observed so far carries one.
-  new RegExp(`${SUBJECT}hit\\s+your\\s+(?<qualifier>(?:individual\\s+)?spend)\\s+limit[\\s\\S]{0,160}?resets\\s+(?<reset>${RESET_DATE})`, "i")
+  //
+  // ENG-10474 — THE CAPTURE NO LONGER GATES THE CLASSIFIER. It admitted exactly
+  // `spend` or `individual spend`, so "You've hit your org's monthly spend
+  // limit" failed here as well as in both patterns above and alyve's agents went
+  // dark with every platform signal green. The capture now takes up to three
+  // qualifier tokens (apostrophes allowed) in front of `spend`, and
+  // `classifyLimitScope` decides what they mean, which is how pattern 2 already
+  // worked.
+  //
+  // `spend` STAYS THE ANCHOR, and that is the design decision. Making this
+  // capture as open as pattern 2's would turn it into "any saturated banner with
+  // up to 160 characters before `resets`", so "You've hit your weekly limit"
+  // followed by pane prose and an unrelated "resets Nov 28" would start
+  // producing observations — the false-pairing surface the 160-character bound
+  // exists to fence. Pattern 2 keeps its adjacency rule for every non-spend
+  // qualifier; this pattern only widens WHICH spend. Pinned by a test either way.
+  new RegExp(`${SUBJECT}hit\\s+your\\s+(?<qualifier>(?:[a-z0-9'\u2019]+[\\s-]+){0,3}spend)\\s+limit[\\s\\S]{0,160}?resets\\s+(?<reset>${RESET_DATE})`, "i")
 ];
 function parseUsageBanner(text, now = /* @__PURE__ */ new Date()) {
   let bestIndex = -1;

package/dist/{persistent-session-OQRYZ3YP.js → persistent-session-UEAJJ72P.js}

@@ -62,8 +62,8 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-NGJFE75J.js";
-import "./chunk-ZOPP3ZC7.js";
+} from "./chunk-BLEV5PAO.js";
+import "./chunk-VHO7KAB7.js";
 import "./chunk-XWVM4KPK.js";
 export {
   CLAUDE_HOST_WIDE,
@@ -130,4 +130,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-OQRYZ3YP.js.map
+//# sourceMappingURL=persistent-session-UEAJJ72P.js.map

package/dist/{responsiveness-probe-RBWP6HJE.js → responsiveness-probe-VXJKA6RF.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-NGJFE75J.js";
-import "./chunk-ZOPP3ZC7.js";
+} from "./chunk-BLEV5PAO.js";
+import "./chunk-VHO7KAB7.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -799,4 +799,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-RBWP6HJE.js.map
+//# sourceMappingURL=responsiveness-probe-VXJKA6RF.js.map

package/dist/{session-auth-dead-4KUPTD7M.js → session-auth-dead-XOP4XYBD.js}

@@ -1,6 +1,6 @@
 import {
   sessionTranscriptDir
-} from "./chunk-ZOPP3ZC7.js";
+} from "./chunk-VHO7KAB7.js";
 
 // src/lib/session-auth-dead.ts
 import { closeSync, openSync, readSync, readdirSync, statSync } from "fs";
@@ -203,4 +203,4 @@ export {
   decideSessionAuthState,
   probeSessionAuth
 };
-//# sourceMappingURL=session-auth-dead-4KUPTD7M.js.map
+//# sourceMappingURL=session-auth-dead-XOP4XYBD.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.921",
+  "version": "0.28.923",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {