@kylecheng3146/agent-ops 0.1.17 → 0.1.18

package/dist/runtime/src/review/execute.js

@@ -103,6 +103,17 @@ function firstComplaint(...streams) {
     }
     return undefined;
 }
+function rejectedCallReason(output) {
+    if (/\b(?:quota|rate limit|usage limit|too many requests)\b/iu.test(output)) {
+        return "quota-exhausted";
+    }
+    if (/\b(?:not logged in|login required|log in to|authentication required|unauthenticated|unauthorized)\b/iu.test(output) ||
+        /\b(?:invalid|expired)\s+(?:api key|token|credential)/iu.test(output) ||
+        /\b401\b/u.test(output)) {
+        return "login-required";
+    }
+    return "capability-unavailable";
+}
 async function snapshotRepository(request, destination, options) {
     const cloned = await runVerificationCommand({
         id: `review-snapshot-${request.label}`,
@@ -256,11 +267,8 @@ async function attemptTarget(request, options) {
             return skip("output-too-large", `${spawned.stdoutTruncated ? "stdout" : "stderr"} exceeded the capture limit`);
         }
         if (spawned.failureClass === "nonzero-exit") {
-            // A rejected call is usually missing authentication, but a stale flag
-            // shape exits non-zero too, and reporting only "login-required" sends
-            // the reader to `doctor --check-auth` for a problem it cannot see. The
-            // target's own first line of complaint distinguishes the two.
-            return skip("login-required", firstComplaint(spawned.stderr, spawned.stdout) ??
+            const output = `${spawned.stderr}\n${spawned.stdout}`;
+            return skip(rejectedCallReason(output), firstComplaint(spawned.stderr, spawned.stdout) ??
                 `the call was rejected with exit ${spawned.exitCode ?? "unknown"} and no output`);
         }
         const payload = extractReviewObject(target, spawned.stdout);

package/dist/runtime/src/review/render.js

@@ -40,7 +40,10 @@ export function renderReviewResult(result) {
         for (const error of result.validationErrors ?? []) {
             lines.push(`- ${safe(error.path)}: ${safe(error.code)} — ${safe(error.message)}`);
         }
-        lines.push("Run: agent-ops doctor --check-auth to verify target authentication.");
+        if (result.reason === "login-required" ||
+            result.attempts?.some((attempt) => attempt.reason === "login-required")) {
+            lines.push("Run: agent-ops doctor --check-auth to verify target authentication.");
+        }
         return `${lines.join("\n")}\n`;
     }
     const report = result.report;

package/docs/en/guides/configuration.md

@@ -94,8 +94,11 @@ human-readable report is transient. Completed tasks are never rewritten.
 `--yes` is still required for every review run: init selection decides which
 targets are permitted, `--yes` decides whether to spend money now.
 
-Because target authentication is not sniffed from stderr, an unauthenticated
-CLI surfaces as one review failure. Diagnose it with:
+Reviewer failures are classified conservatively from their output: recognizable
+authentication messages become `login-required`, quota messages become
+`quota-exhausted`, and other non-zero exits become `capability-unavailable`.
+The review suggests `doctor --check-auth` only when an authentication failure
+was detected. Confirm target authentication with:
 
 ```bash
 agent-ops doctor              # presence only: no tokens, no network

package/docs/zh-TW/guides/configuration.md

@@ -82,8 +82,10 @@ policy 設定仍相同的 task；`--criterion` 用來篩選 id。請先執行
 每次執行 review 仍需 `--yes`：init 的勾選決定「允許哪些目標」，
 `--yes` 決定「現在是否要花錢」。
 
-因為不從 stderr 嗅探認證狀態，未登入的 CLI 會表現為一次 review 失敗。
-用以下指令診斷：
+Reviewer 失敗會依輸出採保守分類：可辨識的認證訊息為 `login-required`，
+quota 訊息為 `quota-exhausted`，其他非零退出則為 `capability-unavailable`。
+只有偵測到認證失敗時，review 才會建議執行 `doctor --check-auth`。
+可用以下指令確認目標的認證狀態：
 
 ```bash
 agent-ops doctor              # 只驗執行檔存在：零 token、零網路

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kylecheng3146/agent-ops",
-  "version": "0.1.17",
+  "version": "0.1.18",
   "description": "Evidence-driven development loops for Codex, Claude Code, and opencode",
   "type": "module",
   "license": "MIT",