@integrity-labs/agt-cli 0.28.602 → 0.28.604

package/dist/{chunk-BI3LGOV2.js → chunk-TLVS32O4.js}

@@ -6030,7 +6030,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.602" : "dev";
+var agtCliVersion = true ? "0.28.604" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -8046,6 +8046,18 @@ function transientReasonFor(text) {
   }
   return null;
 }
+var DID_NOT_RUN_SIGNATURES = [
+  {
+    re: /the real \S+ binary is not on PATH|only the Augmented shim is/i,
+    reason: "the Augmented credential shim ran but could not find the real binary, so nothing was probed"
+  }
+];
+function didNotRunReasonFor(text) {
+  for (const { re, reason } of DID_NOT_RUN_SIGNATURES) {
+    if (re.test(text)) return reason;
+  }
+  return null;
+}
 var CREDENTIAL_SHAPED = /\b(gh[pousr]_[A-Za-z0-9]{16,}|github_pat_[A-Za-z0-9_]{20,}|xox[abprs]-[A-Za-z0-9-]{10,}|sk-[A-Za-z0-9]{20,}|eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}|AKIA[0-9A-Z]{16})\b/g;
 var MAX_MESSAGE_CHARS = 200;
 function redactAndBound(line) {
@@ -8088,6 +8100,14 @@ function runCliProbe(binary, args, opts = {}) {
         const diagnostic = `${stderr ?? ""}
 ${stdout ?? ""}
 ${e.message}`;
+        const didNotRun = didNotRunReasonFor(diagnostic);
+        if (didNotRun) {
+          resolve({
+            status: "unverified",
+            message: `${binary} probe did not run \u2014 ${didNotRun}. This is NOT a verdict about the integration: ${firstMeaningfulLine(stderr, stdout, e.message)}`
+          });
+          return;
+        }
         const transient = transientReasonFor(diagnostic);
         if (transient) {
           resolve({
@@ -9485,4 +9505,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-BI3LGOV2.js.map
+//# sourceMappingURL=chunk-TLVS32O4.js.map