Skip to content

fix(agents): return investigate run tokens to observe - #2086

Merged
mashkovd merged 1 commit into
mainfrom
fix/investigate-run-token-observe
Oct 23, 2026
Merged

mashkovd merged 1 commit into
mainfrom
fix/investigate-run-token-observe

Conversation

@mashkovd

Copy link
Copy Markdown
Member

Rollback of #2078 for investigate runs.

The first enforced investigate run after #2078 (mctl-agents-investigate-b478e8fa, 2026-10-23 06:52Z) was submitted with an empty execution_id. mctl-api cannot bind such a run to a run token, so the exchange was refused (403) and enforce failed the run as designed. Investigate therefore has an entry path that enforce does not cover yet.

This sets MCTL_RUN_TOKEN_MODE back to observe: the exchange is still attempted and audited, and a refused exchange is logged instead of failing the run. Enforce returns once every investigate entry path carries an execution, tracked in mctlhq/mctl-agents#752.

Draft until the owner OKs the rollback.

🤖 Generated with Claude Code

Investigate runs submitted without an execution_id cannot be bound to a
run token, so enforce failed them at the exchange. Observe keeps the
exchange visible without failing those runs.
@mashkovd
mashkovd marked this pull request as ready for review October 23, 2026 09:25
@claude

claude Bot commented Oct 23, 2026 •

Copy link
Copy Markdown

Claude finished @mashkovd's task in 32s —— View job


Review complete ✅

  • Fetch diff (git diff 2b7a370fe...40ea667ff)
  • Check for other MCTL_RUN_TOKEN_MODE references that might need the same rollback
  • Submit verdict

Verdict: Approved.

This is a trivial config rollback — flips MCTL_RUN_TOKEN_MODE from enforce back to observe for the investigate ClusterWorkflowTemplate, with a matching comment update explaining why (investigate runs submitted without an execution_id can't be bound to a run token, so enforce was failing them with a 403). It's a straight revert of the #2078 change, scoped to this single env var with no other code paths touched. Confirmed MCTL_RUN_TOKEN_MODE has no other occurrences in cluster-templates/ that would need the same rollback.

@claude claude Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Trivial config rollback: flips MCTL_RUN_TOKEN_MODE from enforce back to observe (plus matching comment update) to unblock investigate runs with empty execution_id; no other occurrences of this var need the same change.

@github-actions

Copy link
Copy Markdown
Contributor

Antigravity (agy) review — informational

Model: gemini-3.8-flash-high · commit 40ea667.

No significant issues found.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant