@integrity-labs/agt-cli 0.28.774 → 0.28.776

package/dist/{chunk-SXTHAF3R.js → chunk-NRMBKDER.js}

@@ -18,7 +18,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-PMKI7ZTP.js";
+} from "./chunk-N6DU2RYO.js";
 import {
   reapOrphanChannelMcps
 } from "./chunk-XWVM4KPK.js";
@@ -5141,4 +5141,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-SXTHAF3R.js.map
+//# sourceMappingURL=chunk-NRMBKDER.js.map

package/dist/{chunk-BUCKLMKD.js → chunk-P5SXR47I.js}

@@ -14,7 +14,7 @@ import {
   parseEnvFileEntries,
   parseEnvIntegrations,
   shellQuote
-} from "./chunk-SXTHAF3R.js";
+} from "./chunk-NRMBKDER.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -66,7 +66,7 @@ import {
   sessionTranscriptDir,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-PMKI7ZTP.js";
+} from "./chunk-N6DU2RYO.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -6388,7 +6388,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.774" : "dev";
+var agtCliVersion = true ? "0.28.776" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -8566,6 +8566,37 @@ var DID_NOT_RUN_SIGNATURES = [
     re: /AGT_AGENT_ID is not set/i,
     reason: "the probe process was spawned without AGT_AGENT_ID, so the credential shim could not identify the agent and nothing was probed (ENG-9005)"
   },
+  {
+    // ENG-9810: THE SIBLING VARIABLE. The entry above catches a probe spawned
+    // without AGT_AGENT_ID. The shim needs two things to fetch a token, and the
+    // other one had no signature at all.
+    //
+    // REPRODUCED ON agt-aws-1 TODAY, by running this agent's own shim with a
+    // stripped environment — not inferred from a log:
+    //
+    //   augmented: GitHub credential fetch failed: AGT_HOST is not set in this
+    //   process environment
+    //   augmented: the token is fetched per use from <AGT_HOST unset>/host/...
+    //   for agent_id=... (ENG-8344). This is NOT a GitHub permissions problem.
+    //
+    // The shim's own second line says it: *this is not a GitHub permissions
+    // problem*. Without this entry that message matched nothing, fell past every
+    // transient signature, and landed on the flat `down` — incrementing
+    // `consecutive_connectivity_failures` and, past the threshold, opening an
+    // `integration_down` alert that reads as a GitHub outage. The identical
+    // defect the AGT_AGENT_ID entry was written to stop, reached through the
+    // other missing variable.
+    //
+    // NARROW, and narrow in exactly the way the entry above is: matched on OUR
+    // OWN VARIABLE NAME, which no provider CLI emits. Deliberately NOT matched
+    // on the broader `credential fetch failed` shape, even though that would
+    // catch both variables in one pattern — a broker HTTP 500 contains that
+    // phrase and must KEEP its transient grading, as the entry above states at
+    // length. Widening to the shape would silently reverse a decision somebody
+    // made on purpose.
+    re: /AGT_HOST is not set/i,
+    reason: "the probe process was spawned without AGT_HOST, so the credential shim had nowhere to fetch a token from and nothing was probed (ENG-8344)"
+  },
   {
     // THE INTERPRETER NEVER STARTED — the wrapper could not even be launched.
     //
@@ -10590,4 +10621,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-BUCKLMKD.js.map
+//# sourceMappingURL=chunk-P5SXR47I.js.map