@foxden-app/foxclaw 0.3.18 → 0.4.0

package/dist/controller/controller.d.ts

@@ -5,7 +5,19 @@ import type { RuntimeStatus } from '../types.js';
 import type { TelegramGateway, TelegramTextEvent } from '../telegram/gateway.js';
 import { BridgeMessagingRouter } from '../channels/bridge_messaging_router.js';
 import type { CodexAppClient } from '../codex_app/client.js';
-import type { SelfUpdateRuntime } from '../update.js';
+import type { SelfUpdateRuntime, SelfUpdateStatus } from '../update.js';
+export interface CoreCoordinator {
+    canSelfUpdate?: () => boolean;
+    authCandidateUpdated?: (runtimeId: string, candidateName: string) => Promise<void>;
+    statusUpdated?: (status: RuntimeStatus) => void;
+    getServiceStatus?: () => Promise<{
+        bots: NonNullable<RuntimeStatus['bots']>;
+        weixinRuntime?: RuntimeStatus['weixinRuntime'];
+        authMirror?: RuntimeStatus['authMirror'];
+        lastUpdate?: SelfUpdateStatus | null;
+    }>;
+    selfUpdateCompleted?: (status: SelfUpdateStatus) => void;
+}
 export declare class BridgeSessionCore {
     private readonly config;
     private readonly store;
@@ -13,6 +25,8 @@ export declare class BridgeSessionCore {
     private readonly bot;
     private readonly app;
     private readonly selfUpdater;
+    private readonly coordinator;
+    private readonly ownsTelegramRuntime;
     private activeTurns;
     private activeTurnsByTurnId;
     private observedThreadWatchers;
@@ -51,7 +65,7 @@ export declare class BridgeSessionCore {
     /** Last threads-panel pagination state per scope (Telegram inline nav + /open index alignment). */
     private threadListPresentationState;
     private readonly messaging;
-    constructor(config: AppConfig, store: BridgeStore, logger: Logger, bot: TelegramGateway, app: CodexAppClient, outbound: BridgeMessagingRouter, selfUpdater?: SelfUpdateRuntime | null);
+    constructor(config: AppConfig, store: BridgeStore, logger: Logger, bot: TelegramGateway, app: CodexAppClient, outbound: BridgeMessagingRouter, selfUpdater?: SelfUpdateRuntime | null, coordinator?: CoreCoordinator | null, ownsTelegramRuntime?: boolean);
     /** Wire Telegram inbound events. Call before {@link startCodexApp}. */
     registerTelegramInboundHandlers(): void;
     /**
@@ -140,6 +154,12 @@ export declare class BridgeSessionCore {
     private stageAttachments;
     private registerActiveTurn;
     private createActiveTurnState;
+    getCurrentAuthLabel(): Promise<string | null>;
+    isIdleForServiceUpdate(): boolean;
+    private hasLocalBlockingActivity;
+    private authRuntimeId;
+    private authDisplayBotLabel;
+    private ownsScope;
     private setActiveTurn;
     private getActiveTurn;
     private getActiveTurnsForTurn;
@@ -261,6 +281,7 @@ export declare class BridgeSessionCore {
     private retryTurnAfterAuthRotation;
     private selectNextCodexAuthCandidate;
     private listCodexAuthState;
+    private resolveAuthDir;
     private readCodexAuthSwitchLabels;
     private codexAuthSwitchParams;
     private switchCodexAuthAndRestart;
@@ -277,6 +298,7 @@ export declare class BridgeSessionCore {
     private readCodexAuthQuotaSnapshots;
     private writeCodexAuthQuotaSnapshots;
     private codexAuthQuotaSnapshotPath;
+    private runtimeSnapshotFilename;
     private sendThreadContextSummary;
     private handleModelCommand;
     private handleEffortCommand;

package/dist/controller/controller.js

@@ -93,6 +93,8 @@ export class BridgeSessionCore {
     bot;
     app;
     selfUpdater;
+    coordinator;
+    ownsTelegramRuntime;
     activeTurns = new Map();
     activeTurnsByTurnId = new Map();
     observedThreadWatchers = new Map();
@@ -131,13 +133,15 @@ export class BridgeSessionCore {
     /** Last threads-panel pagination state per scope (Telegram inline nav + /open index alignment). */
     threadListPresentationState = new Map();
     messaging;
-    constructor(config, store, logger, bot, app, outbound, selfUpdater = null) {
+    constructor(config, store, logger, bot, app, outbound, selfUpdater = null, coordinator = null, ownsTelegramRuntime = true) {
         this.config = config;
         this.store = store;
         this.logger = logger;
         this.bot = bot;
         this.app = app;
         this.selfUpdater = selfUpdater;
+        this.coordinator = coordinator;
+        this.ownsTelegramRuntime = ownsTelegramRuntime;
         this.messaging = outbound;
     }
     /** Wire Telegram inbound events. Call before {@link startCodexApp}. */
@@ -196,13 +200,13 @@ export class BridgeSessionCore {
             this.logger.warn('codex.local_usage_background_refresh_failed', { error: formatUserError(error) });
         });
         this.updateStatus();
+        this.scheduleSelfUpdateStatusPoll(0);
     }
     /** Begin Telegram Bot API long-polling after handlers and Codex are ready. */
     async startTelegramPolling() {
         await this.bot.start();
         this.botUsername = this.bot.username;
         this.updateStatus();
-        this.scheduleSelfUpdateStatusPoll(0);
     }
     /** Telegram-only default startup (single channel). */
     async start() {
@@ -256,7 +260,7 @@ export class BridgeSessionCore {
             lastError: this.lastError,
             updatedAt: new Date().toISOString(),
             channels: {
-                telegram: true,
+                telegram: this.ownsTelegramRuntime,
                 weixin: Boolean(this.config.wxEnabled && this.messaging.hasWeixinTransport),
             },
         };
@@ -323,6 +327,7 @@ export class BridgeSessionCore {
                 allowedChatId: this.config.tgAllowedChatId,
                 allowedTopicId: this.config.tgAllowedTopicId,
                 topicId: event.topicId,
+                requireExplicitGroupAddressing: this.config.tgRequireExplicitGroupAddressing,
             }),
             replyToBot: event.replyToBot,
         });
@@ -357,10 +362,13 @@ export class BridgeSessionCore {
                 const binding = this.store.getBinding(scopeId);
                 const settings = this.store.getChatSettings(scopeId);
                 const access = this.resolveEffectiveAccess(scopeId, settings);
-                const [fastStatus, codexUsageLines, codexLocalUsageLines] = await Promise.all([
+                const [fastStatus, codexUsageLines, codexLocalUsageLines, serviceStatus] = await Promise.all([
                     this.resolveFastStatusLabel(locale, settings),
                     this.buildCodexUsageStatusLines(locale),
                     this.buildCodexLocalUsageStatusLines(locale),
+                    this.config.tgMultiBotMode
+                        ? (this.coordinator?.getServiceStatus?.() ?? Promise.resolve(null))
+                        : Promise.resolve(null),
                 ]);
                 const appServer = this.app.getServerStatus();
                 const appServerLabel = appServer.pid && appServer.port
@@ -389,6 +397,43 @@ export class BridgeSessionCore {
                     t(locale, 'status_pending_user_inputs', { value: this.store.countPendingUserInputs() }),
                     t(locale, 'status_active_turns', { value: this.activeTurns.size }),
                 ];
+                if (serviceStatus) {
+                    lines.push('', t(locale, 'status_runtime_overview'));
+                    for (const runtime of serviceStatus.bots) {
+                        lines.push(t(locale, 'status_runtime_bot', {
+                            bot: runtime.username ? `@${runtime.username}` : runtime.id,
+                            connected: t(locale, runtime.connected ? 'yes' : 'no'),
+                            auth: runtime.currentAuth ?? t(locale, 'none'),
+                            turns: runtime.activeTurns,
+                        }));
+                    }
+                    if (serviceStatus.weixinRuntime) {
+                        lines.push(t(locale, 'status_runtime_weixin', {
+                            connected: t(locale, serviceStatus.weixinRuntime.connected ? 'yes' : 'no'),
+                            turns: serviceStatus.weixinRuntime.activeTurns,
+                        }));
+                    }
+                    lines.push(serviceStatus.authMirror
+                        ? t(locale, 'status_auth_mirror_synced', {
+                            candidate: serviceStatus.authMirror.candidateName,
+                            source: serviceStatus.authMirror.sourceLabel,
+                            time: serviceStatus.authMirror.syncedAt,
+                        })
+                        : t(locale, 'status_auth_mirror_none'));
+                    if (serviceStatus.lastUpdate) {
+                        lines.push(t(locale, 'status_last_update', {
+                            from: serviceStatus.lastUpdate.fromVersion,
+                            to: serviceStatus.lastUpdate.toVersion ?? t(locale, 'unknown'),
+                            time: serviceStatus.lastUpdate.updatedAt,
+                        }));
+                        if (serviceStatus.lastUpdate.codexUpdate) {
+                            lines.push(t(locale, 'status_last_codex_update', { value: serviceStatus.lastUpdate.codexUpdate }));
+                        }
+                    }
+                    else {
+                        lines.push(t(locale, 'status_last_update_none'));
+                    }
+                }
                 lines.push(...codexUsageLines);
                 lines.push(...codexLocalUsageLines);
                 await this.sendMessage(scopeId, lines.join('\n'));
@@ -1563,6 +1608,16 @@ export class BridgeSessionCore {
                 return;
             }
             const lines = [t(locale, 'auth_add_done', { value: pendingAuthAdd.name })];
+            try {
+                await this.coordinator?.authCandidateUpdated?.(this.authRuntimeId(), pendingAuthAdd.name);
+            }
+            catch (error) {
+                this.logger.warn('codex.auth_candidate_sync_failed', {
+                    candidate: pendingAuthAdd.name,
+                    runtimeId: this.authRuntimeId(),
+                    error: toErrorMeta(error),
+                });
+            }
             lines.push(...await this.buildCodexUsageStatusLines(locale));
             await this.sendMessage(scopeId, lines.join('\n'));
             return;
@@ -1572,7 +1627,7 @@ export class BridgeSessionCore {
             : t(locale, 'login_failed', { error: params?.error ?? t(locale, 'unknown') }));
     }
     async restorePendingAuthAdd(record) {
-        const state = await listCodexAuthState();
+        const state = await this.listCodexAuthState();
         await this.restoreAuthAfterAddFailure(state.authDir, state.authPath, record.previousTargetPath);
     }
     async restoreAuthAfterAddFailure(authDir, authPath, previousTargetPath) {
@@ -1849,6 +1904,9 @@ export class BridgeSessionCore {
     }
     async restorePendingUserInputs() {
         for (const stored of this.store.listPendingUserInputs()) {
+            if (!this.ownsScope(stored.chatId)) {
+                continue;
+            }
             const record = parseStoredPendingUserInput(stored);
             if (!record) {
                 this.store.markPendingUserInputResolved(stored.localId);
@@ -2535,6 +2593,45 @@ export class BridgeSessionCore {
             resolver,
         };
     }
+    async getCurrentAuthLabel() {
+        return (await this.listCodexAuthState()).currentLabel;
+    }
+    isIdleForServiceUpdate() {
+        return this.activeTurns.size === 0
+            && this.pendingApprovalMessages.size === 0
+            && this.pendingUserInputs.size === 0
+            && this.pendingMcpElicitations.size === 0
+            && this.pendingLoginsByScope.size === 0
+            && !this.authRotationInProgress;
+    }
+    hasLocalBlockingActivity() {
+        return !this.isIdleForServiceUpdate();
+    }
+    authRuntimeId() {
+        return this.config.tgScopeBotId ?? 'default';
+    }
+    authDisplayBotLabel() {
+        if (!this.config.tgScopeBotId)
+            return null;
+        return this.botUsername ? `@${this.botUsername}` : this.config.tgScopeBotId;
+    }
+    ownsScope(scopeId) {
+        if (scopeId.startsWith(BRIDGE_SCOPE_WEIXIN_PREFIX)) {
+            return this.messaging.hasWeixinTransport;
+        }
+        if (!this.ownsTelegramRuntime) {
+            return false;
+        }
+        if (!this.config.tgScopeBotId) {
+            return parseTelegramTargetFromBridgeScope(scopeId).botId === null;
+        }
+        try {
+            return parseTelegramTargetFromBridgeScope(scopeId).botId === this.config.tgScopeBotId;
+        }
+        catch {
+            return false;
+        }
+    }
     setActiveTurn(scopeId, turnId, active) {
         const key = activeTurnKey(scopeId, turnId);
         this.activeTurns.set(key, active);
@@ -2785,7 +2882,7 @@ export class BridgeSessionCore {
             }
         }
         for (const scopeId of this.store.findAllChatIdsByThreadId(threadId)) {
-            if (!this.messaging.canSendToScope(scopeId)) {
+            if (!this.ownsScope(scopeId) || !this.messaging.canSendToScope(scopeId)) {
                 continue;
             }
             scopes.add(scopeId);
@@ -2818,7 +2915,12 @@ export class BridgeSessionCore {
         return next;
     }
     updateStatus() {
-        writeRuntimeStatus(this.config.statusPath, this.getRuntimeStatus());
+        const status = this.getRuntimeStatus();
+        if (this.coordinator?.statusUpdated) {
+            this.coordinator.statusUpdated(status);
+            return;
+        }
+        writeRuntimeStatus(this.config.statusPath, status);
     }
     async sendMessage(scopeId, text, inlineKeyboard) {
         return this.messaging.sendPlain(scopeId, text, inlineKeyboard);
@@ -3653,7 +3755,7 @@ export class BridgeSessionCore {
         ].join('\n'));
     }
     async handleAuthReloadCommand(scopeId, locale) {
-        if (this.activeTurns.size > 0 || this.store.countPendingApprovals() > 0 || this.pendingUserInputs.size > 0 || this.pendingMcpElicitations.size > 0) {
+        if (this.hasLocalBlockingActivity()) {
             await this.sendMessage(scopeId, t(locale, 'auth_reload_blocked_active'));
             return;
         }
@@ -3670,7 +3772,7 @@ export class BridgeSessionCore {
             await this.sendMessage(scopeId, t(locale, 'update_unavailable'));
             return;
         }
-        if (this.activeTurns.size > 0 || this.store.countPendingApprovals() > 0 || this.pendingUserInputs.size > 0 || this.pendingMcpElicitations.size > 0) {
+        if (!this.isIdleForServiceUpdate() || this.store.countPendingApprovals() > 0 || this.store.countPendingUserInputs() > 0 || (this.coordinator?.canSelfUpdate && !this.coordinator.canSelfUpdate())) {
             await this.sendMessage(scopeId, t(locale, 'update_blocked_active'));
             return;
         }
@@ -3721,17 +3823,24 @@ export class BridgeSessionCore {
             this.scheduleSelfUpdateStatusPoll();
             return;
         }
+        if (!this.ownsScope(status.scopeId)) {
+            this.scheduleSelfUpdateStatusPoll();
+            return;
+        }
+        this.coordinator?.selfUpdateCompleted?.(status);
         await this.sendMessage(status.scopeId, this.formatSelfUpdateResult(status));
         await this.selfUpdater?.clearStatus();
     }
     formatSelfUpdateResult(status) {
         if (status.state === 'succeeded') {
-            return t(status.locale, 'update_succeeded', {
+            const result = t(status.locale, 'update_succeeded', {
                 from: status.fromVersion,
                 to: status.toVersion ?? t(status.locale, 'unknown'),
             });
+            return status.codexUpdate ? `${result}\n${status.codexUpdate}` : result;
         }
-        return t(status.locale, 'update_failed', { error: status.error ?? t(status.locale, 'unknown') });
+        const result = t(status.locale, 'update_failed', { error: status.error ?? t(status.locale, 'unknown') });
+        return status.codexUpdate ? `${result}\n${status.codexUpdate}` : result;
     }
     async handleAuthCommand(scopeId, locale, args) {
         const action = args[0]?.toLowerCase() ?? 'list';
@@ -3765,11 +3874,11 @@ export class BridgeSessionCore {
             createdAt: Date.now(),
         };
         this.pendingAuthChoiceLists.set(record.localId, record);
-        const messageId = await this.sendMessage(scopeId, renderAuthListMessage(locale, state, parseWeixinBridgeScope(scopeId) !== null), authChoiceKeyboard(locale, record));
+        const messageId = await this.sendMessage(scopeId, renderAuthListMessage(locale, state, this.authDisplayBotLabel(), parseWeixinBridgeScope(scopeId) !== null), authChoiceKeyboard(locale, record));
         record.messageId = messageId;
     }
     async handleAuthUseCommand(scopeId, locale, args) {
-        if (this.activeTurns.size > 0 || this.store.countPendingApprovals() > 0 || this.pendingUserInputs.size > 0 || this.pendingMcpElicitations.size > 0) {
+        if (this.hasLocalBlockingActivity()) {
             await this.sendMessage(scopeId, t(locale, 'auth_reload_blocked_active'));
             return;
         }
@@ -3787,7 +3896,7 @@ export class BridgeSessionCore {
         if (!candidate) {
             await this.sendMessage(scopeId, t(locale, 'auth_choice_expired'));
             const state = await this.listCodexAuthState();
-            await this.sendMessage(scopeId, renderAuthListMessage(locale, state, parseWeixinBridgeScope(scopeId) !== null));
+            await this.sendMessage(scopeId, renderAuthListMessage(locale, state, this.authDisplayBotLabel(), parseWeixinBridgeScope(scopeId) !== null));
             return;
         }
         const switchLabels = await this.readCodexAuthSwitchLabels(candidate);
@@ -3804,10 +3913,10 @@ export class BridgeSessionCore {
         const candidate = state.candidates[index - 1];
         if (!candidate) {
             await this.sendMessage(scopeId, t(locale, 'auth_choice_expired'));
-            await this.sendMessage(scopeId, renderAuthListMessage(locale, state, parseWeixinBridgeScope(scopeId) !== null));
+            await this.sendMessage(scopeId, renderAuthListMessage(locale, state, this.authDisplayBotLabel(), parseWeixinBridgeScope(scopeId) !== null));
             return;
         }
-        this.store.setCodexAuthCandidateDisabled(candidate.name, disabled);
+        this.store.setCodexAuthCandidateDisabled(candidate.name, disabled, this.authRuntimeId());
         await this.sendMessage(scopeId, t(locale, disabled ? 'auth_candidate_disabled' : 'auth_candidate_enabled', {
             value: candidate.name,
         }));
@@ -3825,7 +3934,7 @@ export class BridgeSessionCore {
         return latest;
     }
     async handleAuthAddCommand(scopeId, locale, args) {
-        if (this.activeTurns.size > 0 || this.store.countPendingApprovals() > 0 || this.pendingUserInputs.size > 0 || this.pendingMcpElicitations.size > 0) {
+        if (this.hasLocalBlockingActivity()) {
             await this.sendMessage(scopeId, t(locale, 'auth_reload_blocked_active'));
             return;
         }
@@ -4259,12 +4368,12 @@ export class BridgeSessionCore {
             return;
         }
         const disabled = !candidate.disabled;
-        this.store.setCodexAuthCandidateDisabled(candidate.name, disabled);
+        this.store.setCodexAuthCandidateDisabled(candidate.name, disabled, this.authRuntimeId());
         const state = await this.listCodexAuthState();
         record.candidates = state.candidates;
         await this.messaging.answerCallback(event.callbackQueryId, t(locale, disabled ? 'auth_candidate_disabled_short' : 'auth_candidate_enabled_short'));
         if (record.messageId !== null) {
-            await this.editMessage(event.scopeId, record.messageId, renderAuthListMessage(locale, state, parseWeixinBridgeScope(event.scopeId) !== null), authChoiceKeyboard(locale, record));
+            await this.editMessage(event.scopeId, record.messageId, renderAuthListMessage(locale, state, this.authDisplayBotLabel(), parseWeixinBridgeScope(event.scopeId) !== null), authChoiceKeyboard(locale, record));
         }
     }
     async handleAuthSwitchCallback(event, localId, index, locale) {
@@ -4277,7 +4386,7 @@ export class BridgeSessionCore {
             await this.messaging.answerCallback(event.callbackQueryId, t(locale, 'auth_choice_mismatch'));
             return;
         }
-        if (this.activeTurns.size > 0 || this.store.countPendingApprovals() > 0 || this.pendingUserInputs.size > 0 || this.pendingMcpElicitations.size > 0) {
+        if (this.hasLocalBlockingActivity()) {
             await this.messaging.answerCallback(event.callbackQueryId, t(locale, 'auth_reload_blocked_active'));
             return;
         }
@@ -4299,7 +4408,7 @@ export class BridgeSessionCore {
         if (!this.pendingAuthRotation || this.authRotationInProgress) {
             return false;
         }
-        if (this.activeTurns.size > 0 || this.store.countPendingApprovals() > 0 || this.pendingUserInputs.size > 0 || this.pendingMcpElicitations.size > 0) {
+        if (this.hasLocalBlockingActivity()) {
             return false;
         }
         const rotation = this.pendingAuthRotation;
@@ -4398,13 +4507,19 @@ export class BridgeSessionCore {
         return candidate ? { candidate, fromLabel: state.currentLabel, toLabel: await authPathDisplayLabel(candidate.path) } : null;
     }
     async listCodexAuthState() {
-        const state = await listCodexAuthState(this.store.listDisabledCodexAuthCandidateNames());
+        const state = await listCodexAuthState(this.store.listDisabledCodexAuthCandidateNames(this.authRuntimeId()), this.resolveAuthDir());
         const snapshots = await this.readCodexAuthQuotaSnapshots();
         state.candidates.forEach((candidate) => {
             candidate.quota = snapshots[candidate.name] ?? null;
         });
         return state;
     }
+    resolveAuthDir() {
+        return this.config.codexAuthDir
+            ?? (this.config.tgMultiBotMode ? this.config.codexHome : null)
+            ?? process.env.CODEX_AUTH_DIR
+            ?? path.join(os.homedir(), '.codex');
+    }
     async readCodexAuthSwitchLabels(candidate) {
         const state = await this.listCodexAuthState();
         return {
@@ -4419,7 +4534,7 @@ export class BridgeSessionCore {
         };
     }
     async switchCodexAuthAndRestart(scopeId, locale, candidate, automatic) {
-        const result = await switchCodexAuth(candidate.path);
+        const result = await switchCodexAuth(candidate.path, this.resolveAuthDir());
         this.authRotationFailedTargets.delete(candidate.path);
         this.pendingTurnErrors.clear();
         this.attachedThreads.clear();
@@ -4610,14 +4725,14 @@ export class BridgeSessionCore {
         await this.localUsageRefresh;
     }
     async refreshCodexLocalUsageStats() {
-        const stats = await readCodexLocalUsageStats();
+        const stats = await readCodexLocalUsageStats(this.config.codexHome ?? undefined);
         const snapshot = { computedAtMs: Date.now(), stats };
         this.localUsageCache = snapshot;
         this.localUsageCacheLoaded = true;
         await writeCodexLocalUsageSnapshot(this.codexLocalUsageSnapshotPath(), snapshot);
     }
     codexLocalUsageSnapshotPath() {
-        return path.join(path.dirname(this.config.statusPath), CODEX_LOCAL_USAGE_SNAPSHOT_FILENAME);
+        return path.join(path.dirname(this.config.statusPath), this.runtimeSnapshotFilename(CODEX_LOCAL_USAGE_SNAPSHOT_FILENAME));
     }
     async refreshCurrentCodexAuthQuota(state) {
         const candidate = state.candidates.find(entry => entry.isCurrent);
@@ -4669,7 +4784,13 @@ export class BridgeSessionCore {
         await fs.rename(temporaryPath, snapshotPath);
     }
     codexAuthQuotaSnapshotPath() {
-        return path.join(path.dirname(this.config.statusPath), CODEX_AUTH_QUOTA_SNAPSHOT_FILENAME);
+        return path.join(path.dirname(this.config.statusPath), this.runtimeSnapshotFilename(CODEX_AUTH_QUOTA_SNAPSHOT_FILENAME));
+    }
+    runtimeSnapshotFilename(filename) {
+        if (!this.config.tgScopeBotId) {
+            return filename;
+        }
+        return filename.replace(/\.json$/, `-${this.config.tgScopeBotId}.json`);
     }
     async sendThreadContextSummary(scopeId, locale, threadId) {
         try {
@@ -5588,6 +5709,9 @@ export class BridgeSessionCore {
     }
     async cleanupStaleTurnPreviews() {
         for (const preview of this.store.listActiveTurnPreviews()) {
+            if (!this.ownsScope(preview.scopeId)) {
+                continue;
+            }
             if (!this.messaging.canSendToScope(preview.scopeId)) {
                 this.store.removeActiveTurnPreview(preview.turnId);
                 this.logger.info('telegram.preview_dropped_disabled_channel', {
@@ -7119,11 +7243,11 @@ function parseActiveTurnKey(key) {
         turnId: decodeURIComponent(key.slice(split + 1)),
     };
 }
-function codexAuthDir() {
-    return process.env.CODEX_AUTH_DIR || path.join(os.homedir(), '.codex');
+function codexAuthDir(explicitAuthDir = null) {
+    return explicitAuthDir || process.env.CODEX_AUTH_DIR || path.join(os.homedir(), '.codex');
 }
-async function listCodexAuthState(disabledNames = new Set()) {
-    const authDir = codexAuthDir();
+async function listCodexAuthState(disabledNames = new Set(), explicitAuthDir = null) {
+    const authDir = codexAuthDir(explicitAuthDir);
     const authPath = path.join(authDir, 'auth.json');
     const currentTargetPath = await resolveCurrentAuthTarget(authDir, authPath);
     const candidates = [];
@@ -7222,8 +7346,8 @@ async function pointCodexAuthAtTarget(authDir, authPath, targetPath) {
         throw error;
     }
 }
-async function switchCodexAuth(targetPath) {
-    const state = await listCodexAuthState();
+async function switchCodexAuth(targetPath, explicitAuthDir = null) {
+    const state = await listCodexAuthState(new Set(), explicitAuthDir);
     const candidate = state.candidates.find(entry => entry.path === targetPath);
     if (!candidate) {
         throw new Error(`Auth candidate is no longer available: ${path.basename(targetPath)}`);
@@ -7234,12 +7358,14 @@ async function switchCodexAuth(targetPath) {
         toLabel: await authPathDisplayLabel(candidate.path),
     };
 }
-function renderAuthListMessage(locale, state, includeWeixinCopyPaste = false) {
+function renderAuthListMessage(locale, state, botLabel = null, includeWeixinCopyPaste = false) {
     const lines = [
         t(locale, 'auth_list_title'),
-        t(locale, 'auth_current', { value: state.currentLabel ?? t(locale, 'none') }),
-        t(locale, 'auth_dir', { value: state.authDir }),
     ];
+    if (botLabel) {
+        lines.push(t(locale, 'auth_bot', { value: botLabel }));
+    }
+    lines.push(t(locale, 'auth_current', { value: state.currentLabel ?? t(locale, 'none') }), t(locale, 'auth_dir', { value: state.authDir }));
     if (state.candidates.length === 0) {
         lines.push(t(locale, 'auth_no_candidates'));
         if (includeWeixinCopyPaste) {

package/dist/core/bridge_scope.d.ts

@@ -7,12 +7,15 @@ export interface WeixinBridgeScope {
     accountId: string;
     fromUserId: string;
 }
+export interface TelegramBridgeTarget extends TelegramScope {
+    botId: string | null;
+}
 export declare function isBridgeScopedKey(key: string): boolean;
 /** Wrap legacy Telegram inner scope (`chat::topic`) for storage and routing. */
-export declare function toTelegramBridgeScopeId(telegramInnerScopeId: string): string;
+export declare function toTelegramBridgeScopeId(telegramInnerScopeId: string, botId?: string | null): string;
 /** Strip `telegram:` prefix; returns `null` if not a Telegram bridge scope. */
 export declare function telegramInnerScopeFromBridge(bridgeScopeId: string): string | null;
-export declare function parseTelegramTargetFromBridgeScope(bridgeScopeId: string): TelegramScope;
+export declare function parseTelegramTargetFromBridgeScope(bridgeScopeId: string): TelegramBridgeTarget;
 /** Parse `weixin:<accountId>:<from_user_id>`; returns `null` if not a Weixin scope. */
 export declare function parseWeixinBridgeScope(bridgeScopeId: string): WeixinBridgeScope | null;
 export declare function toWeixinBridgeScopeId(accountId: string, fromUserId: string): string;

package/dist/core/bridge_scope.js

@@ -7,8 +7,8 @@ export function isBridgeScopedKey(key) {
     return key.startsWith(BRIDGE_SCOPE_TELEGRAM_PREFIX) || key.startsWith(BRIDGE_SCOPE_WEIXIN_PREFIX);
 }
 /** Wrap legacy Telegram inner scope (`chat::topic`) for storage and routing. */
-export function toTelegramBridgeScopeId(telegramInnerScopeId) {
-    return `${BRIDGE_SCOPE_TELEGRAM_PREFIX}${telegramInnerScopeId}`;
+export function toTelegramBridgeScopeId(telegramInnerScopeId, botId = null) {
+    return `${BRIDGE_SCOPE_TELEGRAM_PREFIX}${botId ? `${botId}:` : ''}${telegramInnerScopeId}`;
 }
 /** Strip `telegram:` prefix; returns `null` if not a Telegram bridge scope. */
 export function telegramInnerScopeFromBridge(bridgeScopeId) {
@@ -22,7 +22,11 @@ export function parseTelegramTargetFromBridgeScope(bridgeScopeId) {
     if (inner === null) {
         throw new Error(`Expected ${BRIDGE_SCOPE_TELEGRAM_PREFIX} scope, got: ${bridgeScopeId}`);
     }
-    return parseTelegramScopeId(inner);
+    const namespaced = /^(bot\d+):(.*)$/.exec(inner);
+    if (!namespaced) {
+        return { ...parseTelegramScopeId(inner), botId: null };
+    }
+    return { ...parseTelegramScopeId(namespaced[2]), botId: namespaced[1] };
 }
 /** Parse `weixin:<accountId>:<from_user_id>`; returns `null` if not a Weixin scope. */
 export function parseWeixinBridgeScope(bridgeScopeId) {

package/dist/i18n.d.ts

@@ -118,18 +118,27 @@ declare const MESSAGES: {
         readonly status_codex_local_usage_unavailable: "Codex local history: unavailable ({error})";
         readonly status_codex_credits: "Codex credits: {value}";
         readonly status_codex_limit_reached: "Codex limit: {value}";
+        readonly status_runtime_overview: "Telegram bot runtimes:";
+        readonly status_runtime_bot: "- {bot}: connected {connected}, auth {auth}, active turns {turns}";
+        readonly status_runtime_weixin: "- Weixin default runtime: connected {connected}, active turns {turns}";
+        readonly status_auth_mirror_none: "Last auth mirror: none recorded";
+        readonly status_auth_mirror_synced: "Last auth mirror: {candidate} from {source} at {time}";
+        readonly status_last_update_none: "Last service update: none recorded";
+        readonly status_last_update: "Last service update: {from} -> {to} at {time}";
+        readonly status_last_codex_update: "Last Codex update: {value}";
         readonly update_started: "FoxClaw update started. I will report here after installation, checks, and service restart complete.";
         readonly update_succeeded: "FoxClaw updated and restarted: {from} -> {to}.";
         readonly update_failed: "FoxClaw update failed: {error}\nRun foxclaw update in a terminal for details.";
         readonly update_unavailable: "Self-update is unavailable in this runtime. Run foxclaw update in a terminal.";
         readonly update_already_running: "A FoxClaw update is already running. I will report here when it finishes.";
-        readonly update_blocked_active: "Cannot update FoxClaw while a turn, approval, or question is active. Wait or use /interrupt first.";
+        readonly update_blocked_active: "Cannot update FoxClaw while a runtime activity or auth mirror write is active. Wait or use /interrupt first.";
         readonly auth_reload_restarting: "Restarting Codex app-server to reload auth...";
         readonly auth_reload_done: "Codex app-server restarted. Current auth has been reloaded.";
         readonly auth_reload_blocked_active: "Cannot reload Codex auth while a turn, approval, or question is active. Wait or use /interrupt first.";
         readonly usage_auth: "Usage: /auth [list|use <n>|enable <n>|disable <n>|reload|add <name>]";
         readonly usage_auth_add: "Usage: /auth add <name>. Use letters, numbers, dot, dash, or underscore.";
         readonly auth_list_title: "Codex auth files:";
+        readonly auth_bot: "Bot runtime: {value}";
         readonly auth_current: "Current auth: {value}";
         readonly auth_dir: "Auth dir: {value}";
         readonly auth_candidate_count: "Candidates: {value}";
@@ -682,18 +691,27 @@ declare const MESSAGES: {
         readonly status_codex_local_usage_unavailable: "Codex 本地历史：无法获取（{error}）";
         readonly status_codex_credits: "Codex 额度：{value}";
         readonly status_codex_limit_reached: "Codex 限制：{value}";
+        readonly status_runtime_overview: "Telegram bot 运行时：";
+        readonly status_runtime_bot: "- {bot}：连接 {connected}，auth {auth}，进行中回复 {turns}";
+        readonly status_runtime_weixin: "- 微信默认运行时：连接 {connected}，进行中回复 {turns}";
+        readonly status_auth_mirror_none: "最近 auth 镜像：暂无记录";
+        readonly status_auth_mirror_synced: "最近 auth 镜像：{candidate} 由 {source} 于 {time} 同步";
+        readonly status_last_update_none: "最近服务升级：暂无记录";
+        readonly status_last_update: "最近服务升级：{from} -> {to}（{time}）";
+        readonly status_last_codex_update: "最近 Codex 升级：{value}";
         readonly update_started: "已开始升级 FoxClaw。安装、自检和服务重启完成后，我会在这里回报结果。";
         readonly update_succeeded: "FoxClaw 已升级并重启：{from} -> {to}。";
         readonly update_failed: "FoxClaw 升级失败：{error}\n请在终端运行 foxclaw update 查看详情。";
         readonly update_unavailable: "当前运行方式不支持自升级，请在终端运行 foxclaw update。";
         readonly update_already_running: "FoxClaw 升级已经在进行中，结束后我会在这里回报结果。";
-        readonly update_blocked_active: "当前有回复、审批或问题在进行中，不能升级 FoxClaw。请先等待，或使用 /interrupt。";
+        readonly update_blocked_active: "当前有 runtime 操作或 auth 镜像写入在进行中，不能升级 FoxClaw。请先等待，或使用 /interrupt。";
         readonly auth_reload_restarting: "正在重启 Codex app-server 以重新读取 auth...";
         readonly auth_reload_done: "Codex app-server 已重启，当前 auth 已重新读取。";
         readonly auth_reload_blocked_active: "当前有回复、审批或问题在进行中，不能重载 Codex auth。请先等待，或使用 /interrupt。";
         readonly usage_auth: "用法：/auth [list|use <编号>|enable <编号>|disable <编号>|reload|add <名称>]";
         readonly usage_auth_add: "用法：/auth add <名称>。名称只能包含字母、数字、点、短横线或下划线。";
         readonly auth_list_title: "Codex auth 文件：";
+        readonly auth_bot: "Bot runtime：{value}";
         readonly auth_current: "当前 auth：{value}";
         readonly auth_dir: "Auth 目录：{value}";
         readonly auth_candidate_count: "候选数量：{value}";