From 833912fe27095098d1044c3dae28a9471f278490 Mon Sep 17 00:00:00 2001
From: hzhang <hzhang@hangman-lab.top>
Date: Sat, 6 Jun 2026 00:55:32 +0100
Subject: [PATCH] refactor(kb): downgrade hf-token lookup info logs, keep warn
 on failure
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The per-turn render path fires AgentClient resolution once per agent
per dynamic-block render — info-level logging on every call ("kb
AgentClient resolved token_present=true") drowns out actual signal.
Keep only the warn-level branch that fires when the lookup itself
errors (RPC failure, decrypt failure); silent success is the common
case and matches every other tool dispatch.
---
 cmd/plexum-harborforge-plugin/main.go | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/cmd/plexum-harborforge-plugin/main.go b/cmd/plexum-harborforge-plugin/main.go
index 1388ebd..9c38aaf 100644
--- a/cmd/plexum-harborforge-plugin/main.go
+++ b/cmd/plexum-harborforge-plugin/main.go
@@ -213,6 +213,8 @@ func (p *harborForgePlugin) Init(ctx context.Context, host sdkplugin.HostAPI) er
 				}
 				token, err := host.GetAgentSecret(ctx, agentID, "hf-token")
 				if err != nil {
+					host.Log("warn", "kb hf-token lookup failed",
+						map[string]any{"agent": agentID, "err": err.Error()})
 					return nil, err
 				}
 				if token == "" {