@integrity-labs/agt-cli 0.28.630 → 0.28.632

package/dist/{chunk-7QNQRV3A.js → chunk-IT2WYXBM.js}

@@ -16,7 +16,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-XQ7BNYC4.js";
+} from "./chunk-FKG7DIE2.js";
 import {
   reapOrphanChannelMcps
 } from "./chunk-XWVM4KPK.js";
@@ -4167,4 +4167,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-7QNQRV3A.js.map
+//# sourceMappingURL=chunk-IT2WYXBM.js.map

package/dist/{chunk-A2HB4OMY.js → chunk-QDIF33SF.js}

@@ -7,7 +7,7 @@ import {
   expandTemplateVars,
   isolationMode,
   parseEnvIntegrations
-} from "./chunk-7QNQRV3A.js";
+} from "./chunk-IT2WYXBM.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -51,7 +51,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-XQ7BNYC4.js";
+} from "./chunk-FKG7DIE2.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -6069,7 +6069,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.630" : "dev";
+var agtCliVersion = true ? "0.28.632" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -8106,6 +8106,44 @@ var DID_NOT_RUN_SIGNATURES = [
   {
     re: /the real \S+ binary is not on PATH|only the Augmented shim is/i,
     reason: "the Augmented credential shim ran but could not find the real binary, so nothing was probed"
+  },
+  {
+    // ENG-8902: the PROBER's own child process is missing AGT_AGENT_ID, so the
+    // credential shim cannot identify which agent to mint for. It never reaches
+    // GitHub, and it never can — this is a defect in how the probe is spawned
+    // (ENG-9005), not a statement about the integration.
+    //
+    // Measured live on 2026-08-18T07:16:30Z, gordon / my-second-host:
+    //   "gh probe inconclusive — our credential broker could not supply a
+    //    token: augmented: GitHub credential fetch failed: AGT_AGENT_ID is not
+    //    set in this process environment"
+    //
+    // It was landing in the TRANSIENT branch, so every occurrence incremented
+    // consecutive_connectivity_failures. That is how gordon reached 85 and ada
+    // 234 against credentials that mint on demand — the streak counts prober
+    // failures and calls them connectivity failures. The probe's own message
+    // already said "inconclusive"; the grading disagreed with the wording.
+    //
+    // DELIBERATELY NARROW. A broker failure is NOT automatically did-not-run:
+    // an HTTP 500 from the credential endpoint is a real transient that should
+    // keep its transient grading (I hit one tonight mid-session; it recovered
+    // on retry). Only the missing-env case is unambiguously unrunnable, so only
+    // that signature is matched here.
+    // ENG-9122: matched on `AGT_AGENT_ID is not set` rather than the full
+    // "…in this process environment" sentence, because there is a SECOND
+    // emitter that does not use that wording: `packages/mcp/src/index.ts:4035`
+    // throws `Cannot forward tool call: AGT_AGENT_ID is not set`. Under the
+    // longer pattern that one graded `transient_error` and climbed the failure
+    // counter — the exact defect this entry exists to stop, reached by a
+    // different door.
+    //
+    // Still narrow on purpose, and the narrowness is the point: a broker HTTP
+    // 500 ("host key exchange failed … returned HTTP 500") does not contain
+    // this phrase and therefore stays `transient_error`. That is correct — it
+    // is a real intermittent our broker genuinely has, and grading it neutral
+    // would hide a fault worth seeing.
+    re: /AGT_AGENT_ID is not set/i,
+    reason: "the probe process was spawned without AGT_AGENT_ID, so the credential shim could not identify the agent and nothing was probed (ENG-9005)"
   }
 ];
 function didNotRunReasonFor(text) {
@@ -8461,7 +8499,7 @@ function deriveMcpServerKey(input) {
   if (isDefaultRemoteMcpConnection(input.connectionKey)) return base;
   return remoteMcpServerKey(input.definitionId, input.connectionKey);
 }
-function buildProbeEnv(projectDir) {
+function buildProbeEnv(projectDir, agentId) {
   const probeEnv = { ...process.env };
   try {
     const envIntPath = join5(projectDir, ".env.integrations");
@@ -8470,6 +8508,9 @@ function buildProbeEnv(projectDir) {
     }
   } catch {
   }
+  if (typeof agentId === "string" && agentId.trim().length > 0) {
+    probeEnv.AGT_AGENT_ID = agentId.trim();
+  }
   try {
     const agentBinDir = join5(projectDir, ".claude", "agt-bin");
     if (existsSync6(agentBinDir)) {
@@ -8640,7 +8681,7 @@ async function gatherSessionToolBindProbe(agent, integrations, projectDir, opts)
   } catch {
     if (hasDeclaredStdio) return null;
   }
-  const probeEnv = buildProbeEnv(projectDir);
+  const probeEnv = buildProbeEnv(projectDir, agent.agent_id);
   const probeDeps = buildConnectivityProbeDeps(projectDir, probeEnv);
   const probeHttp = async (serverKey) => {
     if (!probeDeps.mcpProbe) return void 0;
@@ -9589,4 +9630,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-A2HB4OMY.js.map
+//# sourceMappingURL=chunk-QDIF33SF.js.map