autodev-cli 1.4.32 → 1.4.34

package/out/rateLimit.js

@@ -62,7 +62,12 @@ const AUTH_PHRASES = [
     /credit balance is too low/i, // Anthropic out-of-credit banner
     /please run\s+\/login/i, // explicit re-login instruction
     /oauth token[^\n]{0,60}(expired|revoked|invalid)/i, // token lifecycle failure
-    /authentication_error/i, // Anthropic API error type
+    // "authentication_error" ONLY inside the provider's API-error framing or a JSON
+    // error body. A bare occurrence appears in ordinary code/prose the agent writes
+    // ("handle the authentication_error case", a pasted Stripe/Anthropic 401
+    // snippet), which previously bricked the loop into a false reauth pause.
+    /api error[^\n]{0,160}authentication_error/i, // "API Error: 401 ... authentication_error"
+    /"type"\s*:\s*"authentication_error"/i, // {"type":"authentication_error"}
     // "not logged in / authenticated" only when paired with a re-auth instruction
     // (a bare mention appears in ordinary code the agent writes).
     /not (logged in|authenticated)[^\n]{0,40}(log ?in|authenticate|run|sign in|\/login)/i,

package/out/rateLimit.js.map

@@ -1 +1 @@
-{"version":3,"file":"rateLimit.js","sourceRoot":"","sources":["../src/rateLimit.ts"],"names":[],"mappings":";AAAA,8EAA8E;AAC9E,2EAA2E;AAC3E,uEAAuE;AACvE,+DAA+D;AAC/D,8EAA8E;;;AAE9E,MAAa,cAAe,SAAQ,KAAK;IAClB;IAA6B;IAAlD,YAAqB,UAAkB,EAAW,OAAyB;QACzE,KAAK,CAAC,UAAU,CAAC,CAAC;QADC,eAAU,GAAV,UAAU,CAAQ;QAAW,YAAO,GAAP,OAAO,CAAkB;QAEzE,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AALD,wCAKC;AAED;;;;;GAKG;AACH,MAAM,OAAO,GAA0B;IACrC,6EAA6E;IAC7E,mDAAmD;IACnD,iBAAiB,EAAiB,sDAAsD;IACxF,qBAAqB,EAAa,6DAA6D;IAC/F,sBAAsB;IACtB,6EAA6E;IAC7E,+EAA+E;IAC/E,4EAA4E;IAC5E,mCAAmC;IACnC,kCAAkC,EAAI,sCAAsC;IAC5E,mBAAmB,EAAmB,qCAAqC;CAC5E,CAAC;AAEF;;;;;GAKG;AACH,MAAa,SAAU,SAAQ,KAAK;IACb;IAArB,YAAqB,UAAkB;QACrC,KAAK,CAAC,UAAU,CAAC,CAAC;QADC,eAAU,GAAV,UAAU,CAAQ;QAErC,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;IAC1B,CAAC;CACF;AALD,8BAKC;AAED;;;;;GAKG;AACH,MAAM,YAAY,GAA0B;IAC1C,kBAAkB,EAAqC,gDAAgD;IACvG,4BAA4B,EAA2B,iCAAiC;IACxF,uBAAuB,EAAgC,gCAAgC;IACvF,kDAAkD,EAAK,0BAA0B;IACjF,uBAAuB,EAAgC,2BAA2B;IAClF,8EAA8E;IAC9E,8DAA8D;IAC9D,qFAAqF;CACtF,CAAC;AAEF,MAAa,YAAY;IACvB,6DAA6D;IAC7D,MAAM,CAAC,OAAO,CAAC,IAAY;QACzB,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QAC5B,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,8EAA8E;IAC9E,MAAM,CAAC,MAAM,CAAC,IAAY;QACxB,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACjD,OAAO,IAAI,SAAS,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,yBAAyB,CAAC,CAAC;IACzE,CAAC;CACF;AAZD,oCAYC;AAED,MAAa,iBAAiB;IAC5B,2DAA2D;IAC3D,MAAM,CAAC,OAAO,CAAC,IAAY;QACzB,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QAC5B,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,2EAA2E;IAC3E,MAAM,CAAC,OAAO,CAAC,IAAY;QACzB,MAAM,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,OAAO,IAAI,cAAc,CAAC,OAAO,IAAI,cAAc,EAAE,iBAAiB,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IAClG,CAAC;IAED,6EAA6E;IAC7E,MAAM,CAAC,MAAM,CAAC,IAAY;QACxB,OAAO,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClF,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,cAAc,CAAC,IAAY;QAChC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;QACjF,IAAI,CAAC,CAAC,EAAE,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC;YACzC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAChB,IAAI,IAAI,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;gBAAC,IAAI,IAAI,EAAE,CAAC;YAAC,CAAC;YACxC,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;gBAAC,IAAI,GAAG,CAAC,CAAC;YAAC,CAAC;YACvC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,GAAG,IAAI,GAAG,SAAS,GAAG,GAAG,GAAG,MAAM,CAAC;gBACpF,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;gBAC3E,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;gBACpD,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC;gBACzC,IAAI,QAAQ,GAAG,GAAG,EAAE,CAAC;oBAAC,OAAO,QAAQ,CAAC;gBAAC,CAAC;YAC1C,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;IAC/B,CAAC;CACF;AA7CD,8CA6CC"}
+{"version":3,"file":"rateLimit.js","sourceRoot":"","sources":["../src/rateLimit.ts"],"names":[],"mappings":";AAAA,8EAA8E;AAC9E,2EAA2E;AAC3E,uEAAuE;AACvE,+DAA+D;AAC/D,8EAA8E;;;AAE9E,MAAa,cAAe,SAAQ,KAAK;IAClB;IAA6B;IAAlD,YAAqB,UAAkB,EAAW,OAAyB;QACzE,KAAK,CAAC,UAAU,CAAC,CAAC;QADC,eAAU,GAAV,UAAU,CAAQ;QAAW,YAAO,GAAP,OAAO,CAAkB;QAEzE,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AALD,wCAKC;AAED;;;;;GAKG;AACH,MAAM,OAAO,GAA0B;IACrC,6EAA6E;IAC7E,mDAAmD;IACnD,iBAAiB,EAAiB,sDAAsD;IACxF,qBAAqB,EAAa,6DAA6D;IAC/F,sBAAsB;IACtB,6EAA6E;IAC7E,+EAA+E;IAC/E,4EAA4E;IAC5E,mCAAmC;IACnC,kCAAkC,EAAI,sCAAsC;IAC5E,mBAAmB,EAAmB,qCAAqC;CAC5E,CAAC;AAEF;;;;;GAKG;AACH,MAAa,SAAU,SAAQ,KAAK;IACb;IAArB,YAAqB,UAAkB;QACrC,KAAK,CAAC,UAAU,CAAC,CAAC;QADC,eAAU,GAAV,UAAU,CAAQ;QAErC,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;IAC1B,CAAC;CACF;AALD,8BAKC;AAED;;;;;GAKG;AACH,MAAM,YAAY,GAA0B;IAC1C,kBAAkB,EAAqC,gDAAgD;IACvG,4BAA4B,EAA2B,iCAAiC;IACxF,uBAAuB,EAAgC,gCAAgC;IACvF,kDAAkD,EAAK,0BAA0B;IACjF,gFAAgF;IAChF,gFAAgF;IAChF,yEAAyE;IACzE,yEAAyE;IACzE,4CAA4C,EAAW,4CAA4C;IACnG,sCAAsC,EAAiB,kCAAkC;IACzF,8EAA8E;IAC9E,8DAA8D;IAC9D,qFAAqF;CACtF,CAAC;AAEF,MAAa,YAAY;IACvB,6DAA6D;IAC7D,MAAM,CAAC,OAAO,CAAC,IAAY;QACzB,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QAC5B,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,8EAA8E;IAC9E,MAAM,CAAC,MAAM,CAAC,IAAY;QACxB,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACjD,OAAO,IAAI,SAAS,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,yBAAyB,CAAC,CAAC;IACzE,CAAC;CACF;AAZD,oCAYC;AAED,MAAa,iBAAiB;IAC5B,2DAA2D;IAC3D,MAAM,CAAC,OAAO,CAAC,IAAY;QACzB,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QAC5B,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,2EAA2E;IAC3E,MAAM,CAAC,OAAO,CAAC,IAAY;QACzB,MAAM,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,OAAO,IAAI,cAAc,CAAC,OAAO,IAAI,cAAc,EAAE,iBAAiB,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IAClG,CAAC;IAED,6EAA6E;IAC7E,MAAM,CAAC,MAAM,CAAC,IAAY;QACxB,OAAO,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClF,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,cAAc,CAAC,IAAY;QAChC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;QACjF,IAAI,CAAC,CAAC,EAAE,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC;YACzC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAChB,IAAI,IAAI,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;gBAAC,IAAI,IAAI,EAAE,CAAC;YAAC,CAAC;YACxC,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;gBAAC,IAAI,GAAG,CAAC,CAAC;YAAC,CAAC;YACvC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,GAAG,IAAI,GAAG,SAAS,GAAG,GAAG,GAAG,MAAM,CAAC;gBACpF,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;gBAC3E,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;gBACpD,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC;gBACzC,IAAI,QAAQ,GAAG,GAAG,EAAE,CAAC;oBAAC,OAAO,QAAQ,CAAC;gBAAC,CAAC;YAC1C,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;IAC/B,CAAC;CACF;AA7CD,8CA6CC"}

package/out/taskLoop.d.ts

@@ -52,6 +52,13 @@ export declare class TaskLoopRunner {
     /** Resolves the idle no-task sleep early when a poller appends a new task. */
     private _idleSleepWake;
     private _resumeAt;
+    /** When the loop is paused for reauth/rate-limit, the event+payload to re-emit
+     *  on a WS reconnect INSTEAD of agent_online/task_start. Reconnects are routine
+     *  (heartbeat, NAT blips, server restart); without this a reconnect during a
+     *  pause flips the server status back to active/working and erases the
+     *  operator's 'needs reauth' / 'rate limited' badge, stranding the agent.
+     *  Cleared on retry()/resume. */
+    private _pauseReason;
     /** When fallback is active: the saved main provider and when to switch back. */
     private _mainProviderBeforeFallback;
     private _mainProviderResumeAt;

package/out/taskLoop.js

@@ -174,6 +174,13 @@ class TaskLoopRunner {
     /** Resolves the idle no-task sleep early when a poller appends a new task. */
     _idleSleepWake = null;
     _resumeAt;
+    /** When the loop is paused for reauth/rate-limit, the event+payload to re-emit
+     *  on a WS reconnect INSTEAD of agent_online/task_start. Reconnects are routine
+     *  (heartbeat, NAT blips, server restart); without this a reconnect during a
+     *  pause flips the server status back to active/working and erases the
+     *  operator's 'needs reauth' / 'rate limited' badge, stranding the agent.
+     *  Cleared on retry()/resume. */
+    _pauseReason = null;
     /** When fallback is active: the saved main provider and when to switch back. */
     _mainProviderBeforeFallback = null;
     _mainProviderResumeAt;
@@ -317,6 +324,7 @@ class TaskLoopRunner {
         }
         this._retryScheduler.clear();
         this._resumeAt = undefined;
+        this._pauseReason = null;
         this._mainProviderBeforeFallback = null;
         this._mainProviderResumeAt = undefined;
         this._setState('running');
@@ -403,6 +411,17 @@ class TaskLoopRunner {
                     });
                     return;
                 }
+                // If the loop is paused (reauth / rate-limit), a routine reconnect must
+                // NOT re-emit agent_online + task_start — that flips the server status
+                // back to active/working and erases the reauth/rate-limit alert, so a
+                // stranded agent looks like it is busy working. Re-assert the pause
+                // reason instead and never send task_start while paused.
+                if (this._state === 'paused') {
+                    if (this._pauseReason) {
+                        this._notifyWebhook(this._pauseReason.event, this._pauseReason.payload);
+                    }
+                    return;
+                }
                 this._notifyWebhook('agent_online', {
                     hostname: this._hostname,
                     workDir: this._workspaceRoot ?? '',
@@ -452,7 +471,7 @@ class TaskLoopRunner {
             this._webhookPoller.setRdpEnabled(settings.rdpEnabled ?? false);
             // Wake the idle no-task sleep instantly when a WS-pushed task arrives.
             this._webhookPoller.setOnTaskAppend(() => this._wakeIdleSleep());
-            this._webhookPoller.setOnSteer((text) => this._handleSteer(text));
+            this._webhookPoller.setOnSteer((text, onDelivered) => this._handleSteer(text, onDelivered));
             this._webhookPoller.setOnCommand((cmd) => this._handleCommand(cmd));
             this._webhookPoller.setOnMcpUpdate((entries) => this._handleMcpUpdate(entries));
             this._webhookPoller.setOnExportRequest((agentId) => void this._handleExportRequest(agentId));
@@ -592,6 +611,7 @@ class TaskLoopRunner {
         this._setState('stopping');
         this._retryScheduler.clear();
         this._resumeAt = undefined;
+        this._pauseReason = null;
         this._mainProviderBeforeFallback = null;
         this._mainProviderResumeAt = undefined;
         // Unblock _pause() if we're currently suspended
@@ -791,6 +811,17 @@ class TaskLoopRunner {
             void this.restart();
             return;
         }
+        if (c === '/retry' || c === '/resume') {
+            if (this._state === 'paused') {
+                this._cb?.log(`▶️ ${c} received — resuming paused loop…`);
+                this._notifyDiscord(`▶️ Resuming loop (\`${c}\` received)`);
+                this.retry();
+            }
+            else {
+                this._cb?.log(`▶️ ${c} received but loop is not paused (state=${this._state}) — ignoring.`);
+            }
+            return;
+        }
         if (c === '/clear') {
             this._cb?.log('🗑 /clear received — clearing Claude session…');
             this._notifyDiscord('🗑 `/clear` received — clearing Claude session');
@@ -840,9 +871,12 @@ class TaskLoopRunner {
      *     and wake the idle sleep so it runs at the very next turn boundary rather
      *     than waiting for a poll interval. This is the documented fallback.
      */
-    _handleSteer(text) {
+    _handleSteer(text, onDelivered) {
         const clean = text.trim();
+        // Malformed/empty steer: nothing to deliver — treat as terminally handled so
+        // the server doesn't keep replaying it.
         if (!clean) {
+            onDelivered?.();
             return;
         }
         const root = this._workspaceRoot;
@@ -852,6 +886,7 @@ class TaskLoopRunner {
         if (root && provider === 'claude-tui' && (0, claudeTuiProvider_1.isClaudeTuiBusy)(root)) {
             if ((0, claudeTuiProvider_1.steerClaudeTui)(root, clean, msg => this._cb?.log(msg))) {
                 this._cb?.log(`⚡ Steered mid-turn: "${clean.slice(0, 80)}"`);
+                onDelivered?.(); // durably injected into the live turn
                 return;
             }
         }
@@ -859,12 +894,21 @@ class TaskLoopRunner {
         // idle sleep so an idle loop starts immediately instead of waiting a poll.
         const todoPath = this._settings?.todoPath || (root ? path.join(root, 'TODO.md') : '');
         if (!todoPath) {
+            // No TODO path is a terminal config error, not a transient failure —
+            // redelivery cannot help, so mark it handled to avoid an infinite replay.
             this._cb?.log(`⚡ Steer dropped — no TODO path (text: "${clean.slice(0, 80)}")`);
+            onDelivered?.();
             return;
         }
         this._cb?.log(`⚡ Steer queued for next turn boundary: "${clean.slice(0, 80)}"`);
         todoWriteManager_1.todoWriter.append(todoPath, clean, (0, todo_1.shortId)())
-            .then(() => this._wakeIdleSleep())
+            .then(() => {
+            // At-least-once: only mark the delivery seen AFTER the durable append
+            // succeeds, mirroring the user_message path. Left unmarked on failure so
+            // the server's reconnect replay re-delivers instead of losing the steer.
+            onDelivered?.();
+            this._wakeIdleSleep();
+        })
             .catch(err => this._cb?.log(`⚡ Steer append failed: ${err instanceof Error ? err.message : String(err)}`));
     }
     // -------------------------------------------------------------------------
@@ -891,6 +935,13 @@ class TaskLoopRunner {
         const verify = String(env.MCP_EMAIL_SERVER_IMAP_VERIFY_SSL ?? 'true').toLowerCase() !== 'false';
         const allowed = (env.AUTODEV_EMAIL_ALLOWED_SENDERS || '')
             .split(',').map(s => s.trim()).filter(Boolean);
+        // Fail closed: an empty allowlist would otherwise ingest autonomous,
+        // full-tool-access instructions from ANY sender who guesses the mailbox.
+        // Require an explicit allowlist before enabling inbound email tasks.
+        if (allowed.length === 0) {
+            this._cb?.log('🔒 Inbound email tasks disabled — set AUTODEV_EMAIL_ALLOWED_SENDERS to an explicit sender allowlist to enable them.');
+            return null;
+        }
         return new emailPoller_1.EmailTaskPoller({ host, port, secure, user, pass, allowedSenders: allowed, rejectUnauthorized: verify });
     }
     /**
@@ -1732,6 +1783,43 @@ class TaskLoopRunner {
                     });
                     // Never markDone — restore the task so it is retried after re-auth.
                     await todoWriteManager_1.todoWriter.resetToTodo(todoPath, task).catch(() => { });
+                    // Evict the cached persistent provider process. claude-tui / opencode-sdk
+                    // / copilot-sdk cache one live process per root that is still holding the
+                    // dead token, so re-login on disk would otherwise never be picked up and
+                    // Retry would spawn straight back into the same auth failure. Closing it
+                    // forces a fresh process (reading the new credentials) on resume.
+                    const evictRoot = this._workspaceRoot;
+                    if (evictRoot) {
+                        try {
+                            const evictLog = (m) => this._cb?.log(m);
+                            if (currentProvider === 'claude-tui') {
+                                (0, claudeTuiProvider_1.closeClaudeTuiClient)(evictRoot, evictLog);
+                            }
+                            else if (currentProvider === 'opencode-sdk') {
+                                (0, opencodeSdkProvider_1.closeOpencodeSdkClient)(evictRoot, evictLog);
+                            }
+                            else if (currentProvider === 'copilot-sdk') {
+                                (0, copilotSdkProvider_1.closeCopilotSdkSession)(evictRoot, evictLog);
+                            }
+                        }
+                        catch (evictErr) {
+                            this._cb?.log(`⚠️ Failed to evict ${currentProvider} client before reauth pause: ${evictErr instanceof Error ? evictErr.message : String(evictErr)}`);
+                        }
+                    }
+                    // Remember the pause reason so a WS reconnect during the pause re-emits
+                    // reauth_required instead of clobbering it with agent_online/task_start.
+                    this._pauseReason = {
+                        event: 'reauth_required',
+                        payload: {
+                            iteration: this._iterations,
+                            task: { text: task.text },
+                            message: rawMsg,
+                            provider: currentProvider,
+                            workDir: this._workspaceRoot,
+                            gitRepo: this._gitRepo,
+                            gitBranch: this._gitBranch,
+                        },
+                    };
                     // Pause indefinitely (no auto-resume) — operator must re-auth + Retry.
                     await this._pauseLoop();
                     if (this._state !== 'running') {
@@ -1797,6 +1885,21 @@ class TaskLoopRunner {
                     });
                     // Reset task so it gets picked up again after resume
                     await todoWriteManager_1.todoWriter.resetToTodo(todoPath, task).catch(() => { });
+                    // Remember the pause reason so a WS reconnect during the pause re-emits
+                    // rate_limit instead of clobbering it with agent_online/task_start.
+                    this._pauseReason = {
+                        event: 'rate_limit',
+                        payload: {
+                            iteration: this._iterations,
+                            task: { text: task.text },
+                            message: rawMsg,
+                            resumeAt: resumeAt.toISOString(),
+                            provider: currentProvider,
+                            workDir: this._workspaceRoot,
+                            gitRepo: this._gitRepo,
+                            gitBranch: this._gitBranch,
+                        },
+                    };
                     // Block here until resumed (timer or user clicks Retry Now)
                     this._resumeAt = resumeAt;
                     await this._pauseLoop(resumeMs);
@@ -1946,6 +2049,21 @@ class TaskLoopRunner {
                         gitBranch: this._gitBranch,
                     });
                     await todoWriteManager_1.todoWriter.resetToTodo(todoPath, task).catch(() => { });
+                    // Remember the pause reason so a WS reconnect during the pause re-emits
+                    // it instead of clobbering it with agent_online/task_start.
+                    this._pauseReason = {
+                        event: 'rate_limit',
+                        payload: {
+                            iteration: this._iterations,
+                            task: { text: task.text },
+                            message: rawMsg,
+                            resumeAt: new Date(Date.now() + 60 * 60_000).toISOString(),
+                            provider,
+                            workDir: this._workspaceRoot,
+                            gitRepo: this._gitRepo,
+                            gitBranch: this._gitBranch,
+                        },
+                    };
                     // No auto-resume time — user must click Retry manually
                     this._resumeAt = undefined;
                     await this._pauseLoop(); // pause indefinitely
@@ -2204,17 +2322,14 @@ class TaskLoopRunner {
                 else {
                     lastStdoutLen = content.length; // keep cursor up to date
                 }
-                // Auth failure detection — highest priority. A logged-out / out-of-credit
-                // CLI exits fast with no rate-limit or context signal, so without this it
-                // was walked remind->give_up and the whole backlog was falsely marked [x].
-                {
-                    const authErr = rateLimit_1.AuthDetector.detect(content);
-                    if (authErr) {
-                        cleanup();
-                        reject(authErr);
-                        return;
-                    }
-                }
+                // Auth-failure detection is intentionally NOT run here mid-stream. For
+                // claude-tui (and other teeing providers) this growing capture is the
+                // model's own assistant transcript, so an ordinary task that merely
+                // mentions auth/login ("handle the authentication_error case") would
+                // trip AuthDetector and brick the running turn into a false reauth
+                // pause. Auth is detected only on the process-EXIT buffer (see onCliExit
+                // below), which is the provider's real failure surface — a logged-out /
+                // out-of-credit CLI exits fast and is caught there.
                 // Rate limit detection — run for every stdout-teeing provider. The
                 // RateLimitDetector phrases are scoped to error/banner forms, so this
                 // is safe to apply provider-agnostically (grok/copilot were previously
@@ -2295,12 +2410,33 @@ class TaskLoopRunner {
                 // every stdout-teeing provider so a throttled grok/copilot exit pauses
                 // instead of being force-marked done.
                 const exitStdout = readStdoutFile();
+                // Read the process exit code. Auth-failure detection must be gated on a
+                // NON-ZERO exit: for claude-tui the stdout capture IS the model's own
+                // assistant transcript, so a *successful* task (exit 0) whose output
+                // legitimately contains {"type":"authentication_error"} — e.g. code
+                // working on Anthropic API handling, or a pasted 401 body — would trip
+                // AuthDetector and pause the loop indefinitely over benign output. Real
+                // auth/credit failures exit non-zero (the provider appends `[Error: …]`),
+                // so gating on the exit code loses nothing. Rate-limit detection stays
+                // ungated — its phrases are error-scoped and a throttle can surface on a
+                // zero exit for some providers.
+                const exitCodeRaw = this._workspaceRoot
+                    ? (() => { try {
+                        return fs.readFileSync((0, sessionState_1.exitFilePath)(this._workspaceRoot, activeProvider), 'utf8').trim();
+                    }
+                    catch {
+                        return '';
+                    } })()
+                    : '';
+                const exitedNonZero = exitCodeRaw !== '' && exitCodeRaw !== '0';
                 if (teesStdout) {
-                    const authFromStdout = rateLimit_1.AuthDetector.detect(exitStdout);
-                    if (authFromStdout) {
-                        cleanup();
-                        reject(authFromStdout);
-                        return;
+                    if (exitedNonZero) {
+                        const authFromStdout = rateLimit_1.AuthDetector.detect(exitStdout);
+                        if (authFromStdout) {
+                            cleanup();
+                            reject(authFromStdout);
+                            return;
+                        }
                     }
                     const rlFromStdout = rateLimit_1.RateLimitDetector.detect(exitStdout);
                     if (rlFromStdout) {