arisa 2.3.29 → 2.3.30

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arisa",
-  "version": "2.3.29",
+  "version": "2.3.30",
   "description": "Arisa - dynamic agent runtime with daemon/core architecture that evolves through user interaction",
   "keywords": [
     "tinyclaw",

package/src/daemon/fallback.ts

@@ -15,6 +15,25 @@ import { getAgentCliLabel, runWithCliFallback } from "./agent-cli";
 
 const log = createLogger("daemon");
 
+/** Detect CLI output that is an error message, not a real response */
+function looksLikeCliError(output: string): boolean {
+  const lower = output.toLowerCase();
+  const errorPatterns = [
+    "authentication_error",
+    "invalid bearer token",
+    "invalid api key",
+    "api error: 401",
+    "api error: 403",
+    "failed to authenticate",
+    "permission_error",
+    "rate_limit_error",
+    "overloaded_error",
+    "api error: 429",
+    "api error: 529",
+  ];
+  return errorPatterns.some(p => lower.includes(p));
+}
+
 export async function fallbackClaude(message: string, coreError?: string): Promise<string> {
   const systemContext = coreError
     ? `[System: Core process is down. Error: ${coreError}. You are running in fallback mode from Daemon. The user's project is at ${config.projectDir}. Respond to the user normally. If they ask about the error, explain what you see.]\n\n`
@@ -37,6 +56,11 @@ export async function fallbackClaude(message: string, coreError?: string): Promi
     const cli = getAgentCliLabel(result.cli);
     if (result.partial) {
       log.warn(`Fallback ${cli} returned output but exited with code ${result.exitCode}`);
+      // Don't forward CLI error messages (auth failures, API errors) to the user
+      if (looksLikeCliError(result.output)) {
+        log.error(`Fallback ${cli} output is a CLI error, not forwarding to user: ${result.output.slice(0, 300)}`);
+        return `[Fallback mode] ${cli} CLI failed (exit ${result.exitCode}). Please check server logs.`;
+      }
     } else {
       log.warn(`Using fallback ${cli} CLI`);
     }