Auth errors incorrectly marked retryable in message classifier

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

• #7027 fix: set retryable=False for message-based auth errors in _classify_by_message()

  merged to main

  files: agent/error_classifier.py

  Show the diff

  • agent/error_classifier.py

    @@ -725,10 +725,14 @@ def _classify_by_message(
             )
     
         # Auth patterns
    +    # Auth errors should NOT be retried directly — the credential is invalid and
    +    # retrying with the same key will always fail.  Set retryable=False so the
    +    # caller triggers credential rotation (should_rotate_credential=True) or
    +    # provider fallback rather than an immediate retry loop.
         if any(p in error_msg for p in _AUTH_PATTERNS):
             return result_fn(
                 FailoverReason.auth,
    -            retryable=True,
    +            retryable=False,
                 should_rotate_credential=True,
             )