fix(logs): attribute a revoked OAuth credential to its owner

A CredentialRevokedError anywhere in the cause chain classifies as a user
failure, so the boundaries that log it after token resolution's WARN write
INFO rather than ERROR.

Author: waleedlatif1

apps/sim/lib/core/errors/failure-log.test.ts

@@ -10,6 +10,7 @@ import {
 } from '@/lib/core/errors/failure-log'
 import { RetryableSetupError } from '@/lib/core/errors/retryable-infrastructure'
 import { UserFailure } from '@/lib/core/errors/user-failure'
+import { CredentialRevokedError } from '@/lib/oauth/credential-revoked'
 import { HostedKeyRateLimitedError, HostedKeyUnavailableError } from '@/tools/errors'
 
 const logger = createLogger('FailureLogTest')
@@ -56,6 +57,11 @@ describe('classifyFailure', () => {
     expect(classifyFailure(upstream)).toBe('third_party_client')
   })
 
+  it('attributes a revoked OAuth credential to its owner, not to Sim', () => {
+    const revoked = new CredentialRevokedError('Reconnect your account')
+    expect(classifyFailure(new Error('Tool failed', { cause: revoked }))).toBe('user')
+  })
+
   it('leaves an unattributed failure internal', () => {
     expect(classifyFailure(new Error('something broke'))).toBe('internal')
     expect(classifyFailure('a thrown string')).toBe('internal')

apps/sim/lib/core/errors/failure-log.ts

@@ -3,6 +3,7 @@ import { findDatabaseQueryError } from '@/lib/core/errors/database-query-error'
 import { isRetryableSetupError } from '@/lib/core/errors/retryable-infrastructure'
 import { UserFailure } from '@/lib/core/errors/user-failure'
 import { HttpError } from '@/lib/core/utils/http-error'
+import { CredentialRevokedError } from '@/lib/oauth/credential-revoked'
 
 /**
  * Who a failure is attributable to, which decides how loudly the server logs it. The user
@@ -58,8 +59,9 @@ export function markFailureKind<T>(error: T, kind: FailureKind): T {
 
 /**
  * Attributes `error` from its cause chain. A database or retryable setup failure is always
- * internal, then the outermost link with an explicit mark, a {@link UserFailure}, a Sim `HttpError`
- * status, or an upstream `status` decides. Anything unattributed is internal.
+ * internal, then the outermost link with an explicit mark, a {@link UserFailure} or revoked
+ * credential, a Sim `HttpError` status, or an upstream `status` decides. Anything unattributed is
+ * internal.
  */
 export function classifyFailure(error: unknown): FailureKind {
   if (findDatabaseQueryError(error)) return 'internal'
@@ -69,7 +71,8 @@ export function classifyFailure(error: unknown): FailureKind {
   for (const link of chain) {
     const marked = failureKinds.get(link)
     if (marked) return marked
-    if (link instanceof UserFailure) return 'user'
+    /** Only the credential's owner reconnecting restores a revoked grant. */
+    if (link instanceof UserFailure || link instanceof CredentialRevokedError) return 'user'
 
     if (link instanceof HttpError) {
       return link.statusCode >= 400 && link.statusCode < 500 ? 'user' : 'internal'