An Unimplemented answer to GetAgentNetworkSetup can only come from a
server binary compiled without the regenerated management proto — the
combined and management servers share the one registration path in
boot.go. Make that failure mode self-diagnosing:
- Log "ManagementService registered on gRPC server (agent-network
setup RPC available)" at boot, so server logs prove which build is
running.
- Have the CLI name the management URL it dialed in every error, and
map Unimplemented to an actionable message including the binary
check (grep -ac GetAgentNetworkSetup <server binary>).
- Pin the wire path with a round-trip test: a real gRPC server built
from this tree routes the RPC through the NaCl envelope end to end.
Verified live: a combined server built from this branch answers an
unregistered probe with PermissionDenied "peer is not registered",
never Unimplemented.
Linear: NET-1399
9169a36658