chore(routines): daily-upstream-check blocked — no push credentials in remote environment

[NativeTeachingAidsB]

Routine: daily-upstream-check — 2026-08-19

The daily upstream check routine ran successfully and collected upstream versions, but could not push results to the repository due to missing write credentials in the remote execution environment.

What completed successfully

• Fetched 8 of 15 upstream sources (see below)
• Created docs/upstream-log/state.json (baseline — first run)
• Created docs/upstream-log/2026-08.md with today's log entry
• Committed locally on branch chore/routines-daily-2026-08-19

Versions recorded (first run — baseline only, no PRs opened)

Source key	Version
claude-code-cli	2.1.235
claude-agent-sdk	0.3.235
claude-agent-sdk-py	0.2.140
codex-cli	0.148.0
aider	0.86.2
goose	0.1.0
mcp-python	2.0.0
mcp-ts	1.30.0

Fetch failures (7 sources)

• cursor, cline, continue, windsurf — EGRESS_BLOCKED (network proxy blocks these domains)
• zed, mcp-spec, claude-plugins-official — GitHub API 403 (unauthenticated, out-of-scope repos)

Blockers to fix before next run

1. Push credentials: Configure GITHUB_TOKEN env var or SSH key in the remote execution environment so the routine can push branches.
2. Egress allowlist: Allow cursor.com, marketplace.visualstudio.com, and windsurf.com in the network proxy, OR update the routine spec with alternative data sources for these platforms.
3. GitHub API scope: Expand the GitHub MCP session scope to include zed-industries/zed, modelcontextprotocol/specification, and anthropics/claude-plugins-official, OR set a GITHUB_TOKEN so the public API rate limit applies.