autodev-cli 1.4.31 → 1.4.33

package/out/rateLimit.js

@@ -5,7 +5,7 @@
 // (RateLimitDetector.PHRASES) and every call site picks it up.
 // ---------------------------------------------------------------------------
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RateLimitDetector = exports.RateLimitError = void 0;
+exports.RateLimitDetector = exports.AuthDetector = exports.AuthError = exports.RateLimitError = void 0;
 class RateLimitError extends Error {
     rawMessage;
     resetAt;
@@ -36,6 +36,59 @@ const PHRASES = [
     /api error[^\n]{0,120}rate limit/i, // "API Error: 429 ... rate limit(ed)"
     /·\s*rate limited/i, // "... · Rate limited" suffix banner
 ];
+/**
+ * Raised when the provider CLI reports it is logged out / unauthenticated /
+ * out of credit — a state the loop must NOT treat as task failure. Unlike a
+ * rate limit there is no reset time: the loop pauses indefinitely and asks the
+ * operator to re-authenticate.
+ */
+class AuthError extends Error {
+    rawMessage;
+    constructor(rawMessage) {
+        super(rawMessage);
+        this.rawMessage = rawMessage;
+        this.name = 'AuthError';
+    }
+}
+exports.AuthError = AuthError;
+/**
+ * Phrases that mean "the CLI is not authenticated / out of credit". These are
+ * high-signal provider error strings (invalid key, expired/revoked token,
+ * /login prompt, low balance) that never appear in ordinary assistant prose,
+ * so they are safe to match case-insensitively across the captured output.
+ */
+const AUTH_PHRASES = [
+    /invalid api key/i, // Claude: "Invalid API key · Please run /login"
+    /credit balance is too low/i, // Anthropic out-of-credit banner
+    /please run\s+\/login/i, // explicit re-login instruction
+    /oauth token[^\n]{0,60}(expired|revoked|invalid)/i, // token lifecycle failure
+    // "authentication_error" ONLY inside the provider's API-error framing or a JSON
+    // error body. A bare occurrence appears in ordinary code/prose the agent writes
+    // ("handle the authentication_error case", a pasted Stripe/Anthropic 401
+    // snippet), which previously bricked the loop into a false reauth pause.
+    /api error[^\n]{0,160}authentication_error/i, // "API Error: 401 ... authentication_error"
+    /"type"\s*:\s*"authentication_error"/i, // {"type":"authentication_error"}
+    // "not logged in / authenticated" only when paired with a re-auth instruction
+    // (a bare mention appears in ordinary code the agent writes).
+    /not (logged in|authenticated)[^\n]{0,40}(log ?in|authenticate|run|sign in|\/login)/i,
+];
+class AuthDetector {
+    /** True when text contains any known auth-failure phrase. */
+    static matches(text) {
+        if (!text) {
+            return false;
+        }
+        return AUTH_PHRASES.some(p => p.test(text));
+    }
+    /** Build an AuthError from text, or null when text is not an auth failure. */
+    static detect(text) {
+        if (!AuthDetector.matches(text)) {
+            return null;
+        }
+        return new AuthError((text ?? '').trim() || 'Authentication required');
+    }
+}
+exports.AuthDetector = AuthDetector;
 class RateLimitDetector {
     /** True when text contains any known rate-limit phrase. */
     static matches(text) {

package/out/rateLimit.js.map

@@ -1 +1 @@
-{"version":3,"file":"rateLimit.js","sourceRoot":"","sources":["../src/rateLimit.ts"],"names":[],"mappings":";AAAA,8EAA8E;AAC9E,2EAA2E;AAC3E,uEAAuE;AACvE,+DAA+D;AAC/D,8EAA8E;;;AAE9E,MAAa,cAAe,SAAQ,KAAK;IAClB;IAA6B;IAAlD,YAAqB,UAAkB,EAAW,OAAyB;QACzE,KAAK,CAAC,UAAU,CAAC,CAAC;QADC,eAAU,GAAV,UAAU,CAAQ;QAAW,YAAO,GAAP,OAAO,CAAkB;QAEzE,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AALD,wCAKC;AAED;;;;;GAKG;AACH,MAAM,OAAO,GAA0B;IACrC,6EAA6E;IAC7E,mDAAmD;IACnD,iBAAiB,EAAiB,sDAAsD;IACxF,qBAAqB,EAAa,6DAA6D;IAC/F,sBAAsB;IACtB,6EAA6E;IAC7E,+EAA+E;IAC/E,4EAA4E;IAC5E,mCAAmC;IACnC,kCAAkC,EAAI,sCAAsC;IAC5E,mBAAmB,EAAmB,qCAAqC;CAC5E,CAAC;AAEF,MAAa,iBAAiB;IAC5B,2DAA2D;IAC3D,MAAM,CAAC,OAAO,CAAC,IAAY;QACzB,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QAC5B,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,2EAA2E;IAC3E,MAAM,CAAC,OAAO,CAAC,IAAY;QACzB,MAAM,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,OAAO,IAAI,cAAc,CAAC,OAAO,IAAI,cAAc,EAAE,iBAAiB,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IAClG,CAAC;IAED,6EAA6E;IAC7E,MAAM,CAAC,MAAM,CAAC,IAAY;QACxB,OAAO,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClF,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,cAAc,CAAC,IAAY;QAChC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;QACjF,IAAI,CAAC,CAAC,EAAE,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC;YACzC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAChB,IAAI,IAAI,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;gBAAC,IAAI,IAAI,EAAE,CAAC;YAAC,CAAC;YACxC,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;gBAAC,IAAI,GAAG,CAAC,CAAC;YAAC,CAAC;YACvC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,GAAG,IAAI,GAAG,SAAS,GAAG,GAAG,GAAG,MAAM,CAAC;gBACpF,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;gBAC3E,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;gBACpD,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC;gBACzC,IAAI,QAAQ,GAAG,GAAG,EAAE,CAAC;oBAAC,OAAO,QAAQ,CAAC;gBAAC,CAAC;YAC1C,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;IAC/B,CAAC;CACF;AA7CD,8CA6CC"}
+{"version":3,"file":"rateLimit.js","sourceRoot":"","sources":["../src/rateLimit.ts"],"names":[],"mappings":";AAAA,8EAA8E;AAC9E,2EAA2E;AAC3E,uEAAuE;AACvE,+DAA+D;AAC/D,8EAA8E;;;AAE9E,MAAa,cAAe,SAAQ,KAAK;IAClB;IAA6B;IAAlD,YAAqB,UAAkB,EAAW,OAAyB;QACzE,KAAK,CAAC,UAAU,CAAC,CAAC;QADC,eAAU,GAAV,UAAU,CAAQ;QAAW,YAAO,GAAP,OAAO,CAAkB;QAEzE,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AALD,wCAKC;AAED;;;;;GAKG;AACH,MAAM,OAAO,GAA0B;IACrC,6EAA6E;IAC7E,mDAAmD;IACnD,iBAAiB,EAAiB,sDAAsD;IACxF,qBAAqB,EAAa,6DAA6D;IAC/F,sBAAsB;IACtB,6EAA6E;IAC7E,+EAA+E;IAC/E,4EAA4E;IAC5E,mCAAmC;IACnC,kCAAkC,EAAI,sCAAsC;IAC5E,mBAAmB,EAAmB,qCAAqC;CAC5E,CAAC;AAEF;;;;;GAKG;AACH,MAAa,SAAU,SAAQ,KAAK;IACb;IAArB,YAAqB,UAAkB;QACrC,KAAK,CAAC,UAAU,CAAC,CAAC;QADC,eAAU,GAAV,UAAU,CAAQ;QAErC,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;IAC1B,CAAC;CACF;AALD,8BAKC;AAED;;;;;GAKG;AACH,MAAM,YAAY,GAA0B;IAC1C,kBAAkB,EAAqC,gDAAgD;IACvG,4BAA4B,EAA2B,iCAAiC;IACxF,uBAAuB,EAAgC,gCAAgC;IACvF,kDAAkD,EAAK,0BAA0B;IACjF,gFAAgF;IAChF,gFAAgF;IAChF,yEAAyE;IACzE,yEAAyE;IACzE,4CAA4C,EAAW,4CAA4C;IACnG,sCAAsC,EAAiB,kCAAkC;IACzF,8EAA8E;IAC9E,8DAA8D;IAC9D,qFAAqF;CACtF,CAAC;AAEF,MAAa,YAAY;IACvB,6DAA6D;IAC7D,MAAM,CAAC,OAAO,CAAC,IAAY;QACzB,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QAC5B,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,8EAA8E;IAC9E,MAAM,CAAC,MAAM,CAAC,IAAY;QACxB,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACjD,OAAO,IAAI,SAAS,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,yBAAyB,CAAC,CAAC;IACzE,CAAC;CACF;AAZD,oCAYC;AAED,MAAa,iBAAiB;IAC5B,2DAA2D;IAC3D,MAAM,CAAC,OAAO,CAAC,IAAY;QACzB,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QAC5B,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,2EAA2E;IAC3E,MAAM,CAAC,OAAO,CAAC,IAAY;QACzB,MAAM,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,OAAO,IAAI,cAAc,CAAC,OAAO,IAAI,cAAc,EAAE,iBAAiB,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IAClG,CAAC;IAED,6EAA6E;IAC7E,MAAM,CAAC,MAAM,CAAC,IAAY;QACxB,OAAO,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClF,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,cAAc,CAAC,IAAY;QAChC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;QACjF,IAAI,CAAC,CAAC,EAAE,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC;YACzC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAChB,IAAI,IAAI,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;gBAAC,IAAI,IAAI,EAAE,CAAC;YAAC,CAAC;YACxC,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;gBAAC,IAAI,GAAG,CAAC,CAAC;YAAC,CAAC;YACvC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,GAAG,IAAI,GAAG,SAAS,GAAG,GAAG,GAAG,MAAM,CAAC;gBACpF,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;gBAC3E,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;gBACpD,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC;gBACzC,IAAI,QAAQ,GAAG,GAAG,EAAE,CAAC;oBAAC,OAAO,QAAQ,CAAC;gBAAC,CAAC;YAC1C,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;IAC/B,CAAC;CACF;AA7CD,8CA6CC"}

package/out/taskLoop.js

@@ -446,6 +446,10 @@ class TaskLoopRunner {
         if (this._webhookPoller) {
             this._webhookPoller.setGitEnabled(settings.gitEnabled ?? false);
             this._webhookPoller.setFileBrowserEnabled(settings.enableFileBrowser ?? false);
+            // VNC / RDP session bridges are honored only when explicitly enabled —
+            // an ungated frame would let a remote party open outbound bridges.
+            this._webhookPoller.setVncEnabled(settings.vncEnabled ?? false);
+            this._webhookPoller.setRdpEnabled(settings.rdpEnabled ?? false);
             // Wake the idle no-task sleep instantly when a WS-pushed task arrives.
             this._webhookPoller.setOnTaskAppend(() => this._wakeIdleSleep());
             this._webhookPoller.setOnSteer((text) => this._handleSteer(text));
@@ -637,11 +641,25 @@ class TaskLoopRunner {
         const root = this._workspaceRoot;
         if (!root)
             return;
-        this._cb?.log('🔧 mcp_update received — writing .mcp.json and syncing providers…');
+        // Opt-in gate: writing remote-supplied MCP config spawns stdio child
+        // processes on restart (code-execution surface). Ignore unless explicitly
+        // enabled, mirroring enableFileBrowser / gitEnabled.
+        if (!this._settings?.mcpUpdateEnabled) {
+            this._cb?.log('🔒 mcp_update ignored — mcpUpdateEnabled is off (set it in .autodev/settings.json to allow)');
+            return;
+        }
+        this._cb?.log('🔧 mcp_update received — validating and writing .mcp.json…');
+        // Reject entries that would execute an arbitrary shell / path command.
+        const { safe, rejected } = (0, projectMcp_1.sanitizeRemoteMcpEntries)(entries);
+        if (rejected.length) {
+            this._cb?.log(`⚠️ mcp_update dropped ${rejected.length} unsafe entr${rejected.length === 1 ? 'y' : 'ies'}: ${rejected.join(', ')}`);
+        }
+        if (Object.keys(safe).length === 0) {
+            this._cb?.log('⚠️ mcp_update had no safe entries — not writing config or restarting.');
+            return;
+        }
         try {
-            // Cast to the shape saveProjectUserMcp expects
-            const typed = entries;
-            (0, projectMcp_1.saveProjectUserMcp)(root, typed);
+            (0, projectMcp_1.saveProjectUserMcp)(root, safe);
             configManager_1.ConfigManager.syncProjectMcpServers(root, (m) => this._cb?.log(m));
             void configManager_1.ConfigManager.reportProjectMcp(root, (m) => this._cb?.log(m));
             this._cb?.log('✅ MCP config synced to .mcp.json, opencode.json, .vscode/mcp.json — restarting loop…');
@@ -687,6 +705,13 @@ class TaskLoopRunner {
             this._cb?.log('⚠️ restore_request ignored — serverApiKey not configured');
             return;
         }
+        // The download carries the agent's Bearer credential and overwrites the
+        // workspace, so the URL must point at the configured server origin — never
+        // an attacker-chosen host from the WS frame.
+        if (!(0, agentBackup_1.isTrustedDownloadUrl)(downloadUrl, settings.serverBaseUrl)) {
+            this._cb?.log(`🔒 restore_request refused — downloadUrl origin does not match the configured server: ${downloadUrl}`);
+            return;
+        }
         this._cb?.log(`🔄 restore_request received — downloading backup from ${downloadUrl}…`);
         const tmpPath = path.join(os.tmpdir(), `agent-restore-${agentId}-${Date.now()}.zip`);
         try {
@@ -766,6 +791,17 @@ class TaskLoopRunner {
             void this.restart();
             return;
         }
+        if (c === '/retry' || c === '/resume') {
+            if (this._state === 'paused') {
+                this._cb?.log(`▶️ ${c} received — resuming paused loop…`);
+                this._notifyDiscord(`▶️ Resuming loop (\`${c}\` received)`);
+                this.retry();
+            }
+            else {
+                this._cb?.log(`▶️ ${c} received but loop is not paused (state=${this._state}) — ignoring.`);
+            }
+            return;
+        }
         if (c === '/clear') {
             this._cb?.log('🗑 /clear received — clearing Claude session…');
             this._notifyDiscord('🗑 `/clear` received — clearing Claude session');
@@ -866,6 +902,13 @@ class TaskLoopRunner {
         const verify = String(env.MCP_EMAIL_SERVER_IMAP_VERIFY_SSL ?? 'true').toLowerCase() !== 'false';
         const allowed = (env.AUTODEV_EMAIL_ALLOWED_SENDERS || '')
             .split(',').map(s => s.trim()).filter(Boolean);
+        // Fail closed: an empty allowlist would otherwise ingest autonomous,
+        // full-tool-access instructions from ANY sender who guesses the mailbox.
+        // Require an explicit allowlist before enabling inbound email tasks.
+        if (allowed.length === 0) {
+            this._cb?.log('🔒 Inbound email tasks disabled — set AUTODEV_EMAIL_ALLOWED_SENDERS to an explicit sender allowlist to enable them.');
+            return null;
+        }
         return new emailPoller_1.EmailTaskPoller({ host, port, secure, user, pass, allowedSenders: allowed, rejectUnauthorized: verify });
     }
     /**
@@ -1687,6 +1730,56 @@ class TaskLoopRunner {
                 }
             }
             catch (err) {
+                // --- Auth required: pause INDEFINITELY, never mark the task done ----
+                // A logged-out / out-of-credit CLI is not a task failure. Put the task
+                // back to [ ], flip the office to a distinct 'needs reauth' state, and
+                // block until the operator re-authenticates and clicks Retry.
+                if (err instanceof rateLimit_1.AuthError) {
+                    const rawMsg = err.rawMessage.slice(0, 300);
+                    const currentProvider = this._cb?.getActiveProvider() ?? 'unknown';
+                    this._cb?.log(`🔑 Authentication required (${currentProvider}) — pausing loop until re-auth. ${rawMsg}`);
+                    this._notifyDiscord(`🔑 **Authentication required** (${currentProvider}) — loop paused until you re-authenticate.\n\`\`\`\n${rawMsg}\n\`\`\``);
+                    this._notifyWebhook('reauth_required', {
+                        iteration: this._iterations,
+                        task: { text: task.text },
+                        message: rawMsg,
+                        provider: currentProvider,
+                        workDir: this._workspaceRoot,
+                        gitRepo: this._gitRepo,
+                        gitBranch: this._gitBranch,
+                    });
+                    // Never markDone — restore the task so it is retried after re-auth.
+                    await todoWriteManager_1.todoWriter.resetToTodo(todoPath, task).catch(() => { });
+                    // Evict the cached persistent provider process. claude-tui / opencode-sdk
+                    // / copilot-sdk cache one live process per root that is still holding the
+                    // dead token, so re-login on disk would otherwise never be picked up and
+                    // Retry would spawn straight back into the same auth failure. Closing it
+                    // forces a fresh process (reading the new credentials) on resume.
+                    const evictRoot = this._workspaceRoot;
+                    if (evictRoot) {
+                        try {
+                            const evictLog = (m) => this._cb?.log(m);
+                            if (currentProvider === 'claude-tui') {
+                                (0, claudeTuiProvider_1.closeClaudeTuiClient)(evictRoot, evictLog);
+                            }
+                            else if (currentProvider === 'opencode-sdk') {
+                                (0, opencodeSdkProvider_1.closeOpencodeSdkClient)(evictRoot, evictLog);
+                            }
+                            else if (currentProvider === 'copilot-sdk') {
+                                (0, copilotSdkProvider_1.closeCopilotSdkSession)(evictRoot, evictLog);
+                            }
+                        }
+                        catch (evictErr) {
+                            this._cb?.log(`⚠️ Failed to evict ${currentProvider} client before reauth pause: ${evictErr instanceof Error ? evictErr.message : String(evictErr)}`);
+                        }
+                    }
+                    // Pause indefinitely (no auto-resume) — operator must re-auth + Retry.
+                    await this._pauseLoop();
+                    if (this._state !== 'running') {
+                        break;
+                    }
+                    continue;
+                }
                 // --- Rate limit: pause loop, schedule auto-resume -----------------
                 if (err instanceof rateLimit_1.RateLimitError) {
                     // Two flavours:
@@ -1979,6 +2072,13 @@ class TaskLoopRunner {
         const iscopilotSdkProvider = this._cb?.getActiveProvider() === 'copilot-sdk';
         const isOpenCodeCli = this._cb?.getActiveProvider() === 'opencode-cli';
         const isOpencodeSdk = this._cb?.getActiveProvider() === 'opencode-sdk';
+        // grok-cli / grok-tui / copilot-cli all tee stdout too — without these flags
+        // the rate-limit / context-length / thrash detectors never ran for them, so
+        // a throttled or context-blown turn was silently walked to give_up and the
+        // task was falsely marked [x].
+        const isGrokCli = this._cb?.getActiveProvider() === 'grok-cli';
+        const isGrokTui = this._cb?.getActiveProvider() === 'grok-tui';
+        const isCopilotCli = this._cb?.getActiveProvider() === 'copilot-cli';
         return new Promise((resolve, reject) => {
             if (this._state !== 'running') {
                 resolve();
@@ -2112,10 +2212,15 @@ class TaskLoopRunner {
             // Track how many characters of the stdout file we've already forwarded
             let lastStdoutLen = 0;
             // Check stdout file: forward any new content to Discord/webhook, detect rate limit / context errors
+            // Providers that write a stdout capture file we can scan for failure
+            // banners (rate-limit / context-length / thrash). Every CLI/TUI provider
+            // tees stdout; the two Claude ones and OpenCode also stream/parse extra.
+            const teesStdout = isClaudeCli || isClaudeTui || iscopilotSdkProvider || isOpenCodeCli
+                || isGrokCli || isGrokTui || isCopilotCli;
             const checkStdout = () => {
-                if (!isClaudeCli && !isClaudeTui && !iscopilotSdkProvider && !isOpenCodeCli) {
+                if (!teesStdout) {
                     return;
-                } // only CLI providers tee stdout
+                }
                 const content = readStdoutFile();
                 // Forward new output lines to Discord / webhook.
                 // claude-cli: stream partial chunks so the operator can see live progress.
@@ -2140,8 +2245,19 @@ class TaskLoopRunner {
                 else {
                     lastStdoutLen = content.length; // keep cursor up to date
                 }
-                // Rate limit detection (Claude CLI + TUI)
-                if (isClaudeCli || isClaudeTui) {
+                // Auth-failure detection is intentionally NOT run here mid-stream. For
+                // claude-tui (and other teeing providers) this growing capture is the
+                // model's own assistant transcript, so an ordinary task that merely
+                // mentions auth/login ("handle the authentication_error case") would
+                // trip AuthDetector and brick the running turn into a false reauth
+                // pause. Auth is detected only on the process-EXIT buffer (see onCliExit
+                // below), which is the provider's real failure surface — a logged-out /
+                // out-of-credit CLI exits fast and is caught there.
+                // Rate limit detection — run for every stdout-teeing provider. The
+                // RateLimitDetector phrases are scoped to error/banner forms, so this
+                // is safe to apply provider-agnostically (grok/copilot were previously
+                // excluded, letting a throttle slip through to a false [x]).
+                {
                     const rlErr = rateLimit_1.RateLimitDetector.detect(content);
                     if (rlErr) {
                         cleanup();
@@ -2158,28 +2274,13 @@ class TaskLoopRunner {
                         return;
                     }
                 }
-                // Context length error detection (Claude). Patterns observed:
+                // Context-length / thrash detection for the remaining CLI+TUI providers.
+                // Patterns observed:
                 //   "prompt is too long: 1018289 tokens > 1000000 maximum"
                 //   "Prompt is too long" (last_assistant_message in StopFailure hook)
-                //   "context_length_exceeded"
+                //   "context_length_exceeded" / "maximum context length"
                 //   "Autocompact is thrashing" (context refills immediately after compact)
-                if (isClaudeCli) {
-                    const lc = content.toLowerCase();
-                    if (lc.includes('autocompact is thrashing')) {
-                        cleanup();
-                        reject(new ThrashingError(content.trim()));
-                        return;
-                    }
-                    if (lc.includes('prompt is too long')
-                        || lc.includes('context_length_exceeded')
-                        || /tokens?\s*>\s*\d+\s*maximum/.test(lc)) {
-                        cleanup();
-                        reject(new ContextLengthError(content.trim()));
-                        return;
-                    }
-                }
-                // Context length detection for claude-tui (same patterns)
-                if (isClaudeTui) {
+                if (isClaudeCli || isClaudeTui || isGrokCli || isGrokTui || isCopilotCli) {
                     const lc = content.toLowerCase();
                     if (lc.includes('autocompact is thrashing')) {
                         cleanup();
@@ -2188,6 +2289,7 @@ class TaskLoopRunner {
                     }
                     if (lc.includes('prompt is too long')
                         || lc.includes('context_length_exceeded')
+                        || lc.includes('maximum context length')
                         || /tokens?\s*>\s*\d+\s*maximum/.test(lc)) {
                         cleanup();
                         reject(new ContextLengthError(content.trim()));
@@ -2227,9 +2329,17 @@ class TaskLoopRunner {
                     return;
                 }
                 // Fast-path: if the stdout capture file already contains a rate-limit
-                // or context-length phrase at exit time, raise immediately.
+                // or context-length phrase at exit time, raise immediately. Applies to
+                // every stdout-teeing provider so a throttled grok/copilot exit pauses
+                // instead of being force-marked done.
                 const exitStdout = readStdoutFile();
-                if (isClaudeCli) {
+                if (teesStdout) {
+                    const authFromStdout = rateLimit_1.AuthDetector.detect(exitStdout);
+                    if (authFromStdout) {
+                        cleanup();
+                        reject(authFromStdout);
+                        return;
+                    }
                     const rlFromStdout = rateLimit_1.RateLimitDetector.detect(exitStdout);
                     if (rlFromStdout) {
                         cleanup();