@integrity-labs/agt-cli 0.28.846 → 0.28.848

package/dist/bin/agt.js

@@ -40,12 +40,12 @@ import {
   success,
   table,
   warn
-} from "../chunk-37YAM7WC.js";
+} from "../chunk-N4TMATK2.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
   readDirectChatSessionState
-} from "../chunk-WDYMHXJP.js";
+} from "../chunk-PMQNTU7W.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -79,7 +79,7 @@ import {
   serializeManifestForSlackCli,
   sessionFileExists,
   sessionTranscriptDir
-} from "../chunk-FMA2UULO.js";
+} from "../chunk-MFU2FD4N.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -5467,7 +5467,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.846" : "dev";
+var cliVersion = true ? "0.28.848" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6658,7 +6658,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.846" : "dev";
+var cliVersion2 = true ? "0.28.848" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-FMA2UULO.js → chunk-MFU2FD4N.js}

@@ -11297,7 +11297,24 @@ async function probeBuffer(creds, fetchImpl) {
     });
     if (!res.ok) {
       const rateLimited = isRateLimited(res);
-      const message = res.status === 401 ? "Buffer API key expired or revoked \u2014 reconnect required" : res.status === 429 || res.status === 403 && rateLimited ? rateLimitMessage("Buffer", res.status) : `Buffer API returned ${res.status}`;
+      const message = res.status === 401 ? (
+        // ENG-9809: name the mechanism, because the bare "expired or revoked" sent
+        // two investigations at the wrong thing. Buffer API keys carry a MANDATORY
+        // lifetime chosen at mint time — 7/30/60/90 days or 1 year, defaulting to
+        // 30 days, with no "never expires" option
+        // (support.buffer.com/article/984-how-to-create-your-buffer-api-key). So
+        // every Buffer install on the fleet is on a countdown, and expiry is the
+        // ordinary end of a key's life rather than a customer revoking one.
+        //
+        // All three causes are named, because this one branch answers every Buffer
+        // 401 — a key that lapsed, one that was revoked, and one that was simply
+        // mistyped ("Requests without a valid key will return a 401 Unauthorized",
+        // developers.buffer.com/guides/authentication.html). The status code alone
+        // cannot separate them, so naming expiry as the LIKELIER cause is supported;
+        // asserting it is not, and a message that omitted "invalid" would send
+        // someone who pasted the key wrong looking for an expiry date instead.
+        "Buffer API key expired, invalid, or revoked \u2014 reconnect required. Buffer keys expire by design (30-day default, 1-year maximum), so on a key that was working until now expiry is the likeliest of the three; pick 1 year when minting the replacement."
+      ) : res.status === 429 || res.status === 403 && rateLimited ? rateLimitMessage("Buffer", res.status) : `Buffer API returned ${res.status}`;
       return {
         status: statusForHttp(res.status, { rateLimited }),
         cause: causeForHttp(res.status, { rateLimited }),
@@ -13943,4 +13960,4 @@ export {
   peekCurrentSession,
   readDailySessionPin
 };
-//# sourceMappingURL=chunk-FMA2UULO.js.map
+//# sourceMappingURL=chunk-MFU2FD4N.js.map