@integrity-labs/agt-cli 0.28.827 → 0.28.828

package/dist/lib/manager-worker.js

@@ -14,6 +14,7 @@ import {
   decidePin,
   defaultFlagsCachePath,
   deriveMcpServerKey,
+  describeChannelWriteFailure,
   describeStartupCompletion,
   diffEnvIntegrations,
   drainTranscriptFlushDeps,
@@ -59,7 +60,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-VOQ25S2E.js";
+} from "../chunk-FBJFYF3F.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -13595,7 +13596,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.827" : "dev";
+var agtCliVersion = true ? "0.28.828" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -17073,7 +17074,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
                 );
               }
             }
-            frameworkAdapter.writeChannelCredentials(
+            const writeOutcome = frameworkAdapter.writeChannelCredentials(
               agent.code_name,
               channelId,
               entry.config,
@@ -17101,12 +17102,16 @@ async function processAgent(agent, agentStates, managedToolkits) {
             const landed = frameworkAdapter.hasChannelCredentials?.(agent.code_name, channelId) ?? true;
             if (!landed) {
               channelConfigConverged = false;
-              channelConfigFailureReason = `credentials for ${channelId} reported a clean write but did not land on disk (reason=${reason}) \u2014 likely a missing credential field, or the guarded .mcp.json write was rejected by the secret lint / config validator`;
+              channelConfigFailureReason = describeChannelWriteFailure(
+                writeOutcome,
+                channelId,
+                reason
+              );
               const attempts = (channelWriteFailureCounts.get(cacheKey) ?? 0) + 1;
               channelWriteFailureCounts.set(cacheKey, attempts);
               if (attempts === 1 || attempts % CHANNEL_WRITE_FAILURE_ESCALATE_EVERY === 0) {
                 log(
-                  `ERROR: channel credentials for '${agent.code_name}/${channelId}' did NOT land on disk after a write that reported no error (reason=${reason}, attempt ${attempts}). The write was silently skipped \u2014 likely a missing credential field, or the guarded .mcp.json write was rejected by the secret lint / config validator (its reason is printed once per fingerprint on stderr). The channel will stay unusable until this is resolved; not re-logging every cycle.`
+                  `ERROR: channel credentials for '${agent.code_name}/${channelId}' did NOT land on disk (attempt ${attempts}). ${channelConfigFailureReason} The channel will stay unusable until this is resolved; not re-logging every cycle.`
                 );
               }
             } else {