Skip to content

Detect Grok's grok login OAuth as auth #44

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
eirikb merged 1 commit into from
Jul 2, 2026
Merged

Detect Grok's grok login OAuth as auth #44

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 9 additions & 10 deletions src/agents.rs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -106,7 +106,7 @@ impl Agent {
Agent::Claude => "run `claude` once to refresh its login",
Agent::Codex => "run `codex login` to refresh its login",
Agent::Antigravity => "run `antigravity` once to refresh its Google login",
Agent::Grok => "set XAI_API_KEY (headless auth; get one at console.x.ai)",
Agent::Grok => "run `grok login`, or set XAI_API_KEY (console.x.ai)",
Agent::Qwen | Agent::Vibe => "no native login; runs on OpenRouter",
}
}
Expand Down Expand Up @@ -443,11 +443,12 @@ impl Agent {
// gemini-cli, runs that login headless - so the saved account is
// usable auth on its own, no API key required.
Agent::Antigravity => exists(".gemini/google_accounts.json"),
// Grok Build authenticates headless with an xAI API key
// (console.x.ai). Its browser OAuth caches credentials we don't
// probe, and the ~/.grok dir is created on install before any login
// (verified), so dir-existence is NOT an auth signal - only the key.
Agent::Grok => env_set("XAI_API_KEY"),
// Grok Build authenticates headless two ways: `grok login` (device
// OAuth) writes ~/.grok/auth.json and runs against the subscription
// proxy, or XAI_API_KEY hits the plain API. auth.json is written only
// on login (NOT on install, unlike the ~/.grok dir), so it is a safe
// signal. Either counts as usable headless auth.
Agent::Grok => exists(".grok/auth.json") || env_set("XAI_API_KEY"),
// Qwen and Vibe have no widely-held native login wired up; they
// run through OpenRouter when a key is present (see attempt_plan).
Agent::Qwen | Agent::Vibe => false,
Expand All @@ -460,15 +461,13 @@ impl Agent {
Agent::Claude => "logged in (subscription or API)".into(),
Agent::Codex => "logged in".into(),
Agent::Antigravity => "logged in (Google account)".into(),
Agent::Grok => "XAI_API_KEY set".into(),
Agent::Grok => "signed in (grok login or XAI_API_KEY)".into(),
Agent::Qwen | Agent::Vibe => "logged in".into(),
}
} else if matches!(self, Agent::Qwen | Agent::Vibe) {
"runs via OpenRouter (needs a key; no native login wired up)".into()
} else if matches!(self, Agent::Grok) {
// Grok headless auth is XAI_API_KEY; `grok login` (browser OAuth) is
// not probed and does not satisfy authed(), so don't suggest it here.
"no XAI_API_KEY set - headless auth needs a key from console.x.ai".into()
"not signed in - run `grok login`, or set XAI_API_KEY (console.x.ai)".into()
} else {
format!(
"no credentials found - run `{}` once to log in",
Expand Down
Loading