Function buildCredentialAuthErrorContext

actions/setup/js/handle_agent_failure.cjs:2070–2085

* Build a context string when the firewall audit log shows authentication rejections * from AI provider endpoints (expired or missing API credentials). * * Reads audit.jsonl from the known path relative to GH_AW_AGENT_OUTPUT and surfaces * a remediation hint for each affected provider in the fai

(auditJsonlPathOverride)

 * @returns {string} Formatted context string, or empty string if no auth errors
 */
function buildCredentialAuthErrorContext(auditJsonlPathOverride) {
  const auditJsonlPath = resolveFirewallAuditLogPath(auditJsonlPathOverride);

  const authErrors = parseFirewallAuthErrors(auditJsonlPath);

  if (authErrors.length === 0) {
    return "";
  }

  core.info(`Firewall audit log: detected ${authErrors.length} credential auth rejection(s) for: ${authErrors.map(e => e.provider).join(", ")}`);

  const providersList = authErrors.map(e => `- ${e.provider} (${e.credential})`).join("\n");

  const templatePath = getPromptPath("credential_auth_error.md");
  return "\n" + renderTemplateFromFile(templatePath, { providers: providersList });
}

/**
 * Build a context string when assign_to_agent reported assignment errors.