Skip to content

Classify Grok not-signed-in as provider authentication failure - #744

Merged
Meta-Develop merged 3 commits into
mainfrom
codex/grok-not-signed-in
Oct 24, 2026
Merged

Meta-Develop merged 3 commits into
mainfrom
codex/grok-not-signed-in

Conversation

@Meta-Develop

@Meta-Develop Meta-Develop commented Oct 23, 2026 •

Copy link
Copy Markdown
Owner

Summary

When a managed Grok account's credentials are missing or expired, the Grok CLI emits Not signed in. To authenticate without a browser, run: ....
is_inference_authentication_error matched only not authenticated, so this failure surfaced as a generic exit 1 with empty environment_failures.
Only the auditors later recovered provider_auth_required.

This change recognizes not signed in (case-insensitive) inside the existing error-event-only classifier.
It adds the captured CLI event as a fixture and asserts propagation through retain_grok_stream_auth_failure.
Negative cases for ordinary text and catalog banners are unchanged.

Validation

  • Local (WSL): cargo fmt --check, clippy, and these exact tests:
    • runtime_adapter::grok::tests::inference_auth_failures_are_observed_only_in_worker_errors_and_redacted_native_failures
    • external_agent::tests::grok_native_auth_failure_is_environment_and_fails_closed
  • Independent read-only review (Grok 4.7): ACCEPT, no findings.

@Meta-Develop
Meta-Develop merged commit 284aa5e into main Oct 24, 2026
23 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant