fix(codex): route auth failures to fallback provider chain

cli.py

@@ -2155,14 +2155,43 @@ def _ensure_runtime_credentials(self) -> bool:
             format_runtime_provider_error,
         )
 
+        _primary_exc = None
+        runtime = None
         try:
             runtime = resolve_runtime_provider(
                 requested=self.requested_provider,
                 explicit_api_key=self._explicit_api_key,
                 explicit_base_url=self._explicit_base_url,
             )
         except Exception as exc:
-            message = format_runtime_provider_error(exc)
+            _primary_exc = exc
+
+        # Primary provider auth failed — try fallback providers before giving up.
+        if runtime is None and _primary_exc is not None:
+            from hermes_cli.auth import AuthError
+            if isinstance(_primary_exc, AuthError):
+                _fb_chain = self._fallback_model if isinstance(self._fallback_model, list) else []
+                for _fb in _fb_chain:
+                    _fb_provider = (_fb.get("provider") or "").strip().lower()
+                    _fb_model = (_fb.get("model") or "").strip()
+                    if not _fb_provider or not _fb_model:
+                        continue
+                    try:
+                        runtime = resolve_runtime_provider(requested=_fb_provider)
+                        logger.warning(
+                            "Primary provider auth failed (%s). Falling through to fallback: %s/%s",
+                            _primary_exc, _fb_provider, _fb_model,
+                        )
+                        _cprint(f"⚠️  Primary auth failed — switching to fallback: {_fb_provider} / {_fb_model}")
+                        self.requested_provider = _fb_provider
+                        self.model = _fb_model
+                        _primary_exc = None
+                        break
+                    except Exception:
+                        continue
+
+        if runtime is None:
+            message = format_runtime_provider_error(_primary_exc) if _primary_exc else "Provider resolution failed."
             self.console.print(f"[bold red]{message}[/]")
             return False
 

run_agent.py

@@ -7380,9 +7380,27 @@ def _stop_spinner():
                     error_details = []
                     if self.api_mode == "codex_responses":
                         output_items = getattr(response, "output", None) if response is not None else None
+                        _codex_resp_status = str(getattr(response, "status", "") or "").strip().lower() if response is not None else ""
                         if response is None:
                             response_invalid = True
                             error_details.append("response is None")
+                        elif _codex_resp_status in {"failed", "cancelled"}:
+                            # Provider returned a terminal failure (e.g. quota exhaustion).
+                            # Treat as invalid so the fallback chain is triggered instead of
+                            # letting the error bubble up outside the retry/fallback loop.
+                            _codex_error_obj = getattr(response, "error", None)
+                            _codex_error_msg = (
+                                _codex_error_obj.get("message") if isinstance(_codex_error_obj, dict)
+                                else str(_codex_error_obj) if _codex_error_obj
+                                else f"Responses API returned status '{_codex_resp_status}'"
+                            )
+                            logging.warning(
+                                "Codex response status='%s' (error=%s). Routing to fallback. %s",
+                                _codex_resp_status, _codex_error_msg,
+                                self._client_log_context(),
+                            )
+                            response_invalid = True
+                            error_details.append(f"response.status={_codex_resp_status}: {_codex_error_msg}")
                         elif not isinstance(output_items, list):
                             response_invalid = True
                             error_details.append("response.output is not a list")