@foxden-app/foxclaw 0.3.19 → 0.4.1

package/.env.example

@@ -1,4 +1,4 @@
-# Required: one or more bot tokens for this host
+# Required for new installs: one or more bot tokens for this host
 # Comma-separated bot tokens. Each bot gets an independent Codex runtime/auth selection.
 TG_BOT_TOKENS=<telegram_bot_token>
 # Backward-compatible single-runtime setup:
@@ -14,7 +14,9 @@ TG_ALLOWED_CHAT_ID=
 # Leave empty to use the whole allowed group as the default scope
 TG_ALLOWED_TOPIC_ID=
 
-# Optional Codex Desktop bridge settings
+# Optional Codex Desktop bridge settings.
+# In TG_BOT_TOKENS mode isolated Telegram runtimes start app-server directly and
+# do not auto-launch Codex Desktop; this remains applicable to the default/Weixin runtime.
 CODEX_APP_AUTOLAUNCH=true
 CODEX_APP_LAUNCH_CMD=codex app
 # Optional: persist the managed app-server pid/port and collect its stdout/stderr

package/README.md

@@ -40,7 +40,7 @@ FoxClaw（狸爪）的目标很直接：让你用手机控制本机的 Codex，
 - Git、Node、`.env` 都玩得转？直接往下看快速设置。
 - 卡住了？看 [故障排查](./docs/zh/troubleshooting.md)。
 
-最低要求：一个 Telegram bot token、你的 Telegram 数字用户 ID、Node.js 24+、一份已登录的 `codex` CLI。首次安装大约 10–20 分钟。
+最低要求：一个或多个 Telegram bot token、你的 Telegram 数字用户 ID、Node.js 24+、一份已登录的 `codex` CLI。首次安装大约 10–20 分钟。新安装请使用 `TG_BOT_TOKENS`；`TG_BOT_TOKEN` 只用于兼容旧的单 runtime 配置。
 
 **30 秒体验**：启动 FoxClaw 后，给你的 Telegram 机器人发一句 `List files in DEFAULT_CWD`。Codex 会在本地检查那个目录，然后把结果发回 Telegram。
 
@@ -93,7 +93,7 @@ FoxClaw 只响应 `TG_ALLOWED_USER_ID` 的消息——把机器人拉进群不
 
 **核心能力：**
 - 通过 Telegram 私聊、群组、话题控制本地 Codex
-- 可选微信/iLink 通道，复用同一套桥接核心
+- 可选微信/iLink 通道；在多 Telegram bot 模式下仍使用原默认 Codex runtime，不与隔离 bot 会话混用
 - 手机上完整管理 Codex 线程生命周期：创建、重命名、归档、fork、回滚、compact、review、diff
 - 命令、文件变更、细粒度权限审批的内联按钮——手机上一键审批
 - MCP elicitation 卡片——工具在 turn 中提出结构化问题时展示
@@ -203,7 +203,7 @@ TG_ALLOWED_TOPIC_ID=42
 TG_BOT_TOKENS=123456:token_a,234567:token_b
 ```
 
-FoxClaw 仍然只运行一个系统服务，但会为每个 bot 启动独立 `codex app-server` 和独立 `CODEX_HOME`。因此 A 私聊运行 turn 时，B 私聊仍可独立切换自己的 `/auth`。候选凭据由 FoxClaw 在登录或刷新验证后镜像同步，各 bot 的当前选择互不影响。
+FoxClaw 仍然只运行一个系统服务，但会为每个 bot 启动独立 `codex app-server` 和独立 `CODEX_HOME`。因此 A 私聊运行 turn 时，B 私聊仍可独立切换自己的 `/auth`。候选凭据由 FoxClaw 在登录或刷新验证后镜像同步，各 bot 的当前选择互不影响。每个 bot 首次私聊发送 `/help` 和 `/status`；`/auth` 会标明正在操作的 bot runtime，`/status` 会列出全部 bot 的连接、当前 auth 和活动 turn 摘要。
 
 **怎么找群组和话题 ID：**
 
@@ -239,7 +239,7 @@ CODEX_APP_SYNC_ON_OPEN=true
 CODEX_APP_SYNC_ON_TURN_COMPLETE=false
 ```
 
-FoxClaw 会把 `codex app-server` 作为 detached 子进程启动，记录其 pid 和端口。使用 `TG_BOT_TOKENS` 时，每个 bot 都有自己的 app-server 与 Codex home；重启时如果对应进程还活着就直接重连，否则拉起新进程。`/auth_reload` 和认证切换只重启发起操作的 bot runtime。
+FoxClaw 会把 `codex app-server` 作为 detached 子进程启动，记录其 pid 和端口。使用 `TG_BOT_TOKENS` 时，每个 bot 都有自己的 app-server 与 Codex home，并在该隔离 runtime 内强制使用文件凭据存储；隔离 bot 不自动拉起 Codex Desktop，避免多个新 home 同时初始化桌面状态。重启时如果对应进程还活着就直接重连，否则拉起新进程。`/auth_reload` 和认证切换只重启发起操作的 bot runtime。
 
 一般不需要手动固定 app-server 端口。
 
@@ -284,7 +284,7 @@ WX_ALLOWED_ILINK_USER_IDS=
 foxclaw weixin-login
 ```
 
-微信运行时文件在 `~/.foxclaw/weixin`。
+微信运行时文件在 `~/.foxclaw/weixin`。启用 `TG_BOT_TOKENS` 时，微信继续连接默认 Codex runtime 与原 home，不会查看或恢复隔离 Telegram bot 的线程。
 
 ## Codex Skill
 

package/README_EN.md

@@ -40,7 +40,7 @@ FoxClaw is more than message forwarding. It provides Telegram panels for Codex w
 - Already comfortable with Git, Node, and `.env` files? Use the quick setup below.
 - Something failed? Check [Troubleshooting](./docs/troubleshooting.md).
 
-The minimum install needs only a Telegram bot token, your numeric Telegram user id, Node.js 24+, and a logged-in `codex` CLI. A first install usually takes 10–20 minutes.
+The minimum install needs one or more Telegram bot tokens, your numeric Telegram user id, Node.js 24+, and a logged-in `codex` CLI. A first install usually takes 10–20 minutes. New installs should use `TG_BOT_TOKENS`; `TG_BOT_TOKEN` exists only for legacy single-runtime compatibility.
 
 **30-second demo**: after FoxClaw is running, send `List files in DEFAULT_CWD` to your Telegram bot. FoxClaw asks local Codex to inspect that folder on your computer and sends the answer back to Telegram.
 
@@ -93,7 +93,7 @@ FoxClaw accepts messages only from `TG_ALLOWED_USER_ID`. Putting the bot in a gr
 
 **Core capabilities:**
 - Telegram private chat, group, and topic control for your local Codex
-- Optional Weixin/iLink channel sharing the same bridge core
+- Optional Weixin/iLink channel; in multi-Telegram mode it stays on the original default Codex runtime rather than sharing an isolated bot session
 - Full thread lifecycle management from mobile: create, rename, archive, fork, rollback, compact, review, diff
 - Inline approval buttons for commands, file changes, and granular permissions — one tap to approve
 - MCP elicitation cards for structured questions raised by tools during a turn
@@ -203,7 +203,7 @@ Parallel bot example:
 TG_BOT_TOKENS=123456:token_a,234567:token_b
 ```
 
-FoxClaw remains one system service, but starts an independent `codex app-server` and `CODEX_HOME` for each bot. While bot A is running a turn, bot B can switch its own `/auth` selection. Candidate credentials are mirrored only after validated login or refresh; current selections remain independent.
+FoxClaw remains one system service, but starts an independent `codex app-server` and `CODEX_HOME` for each bot. While bot A is running a turn, bot B can switch its own `/auth` selection. Candidate credentials are mirrored only after validated login or refresh; current selections remain independent. Send `/help` and `/status` in a private chat with each bot after installation; `/auth` names the runtime being managed, and `/status` summarizes every bot's connection, selected auth, and active turns.
 
 **How to find group and topic IDs:**
 
@@ -239,7 +239,7 @@ CODEX_APP_SYNC_ON_OPEN=true
 CODEX_APP_SYNC_ON_TURN_COMPLETE=false
 ```
 
-FoxClaw starts `codex app-server` as a detached, bridge-managed process and records its pid and port. With `TG_BOT_TOKENS`, each bot has its own app-server and Codex home. On restart, FoxClaw reconnects to each live recorded app-server or starts a replacement. `/auth_reload` and auth switching restart only the requesting bot runtime.
+FoxClaw starts `codex app-server` as a detached, bridge-managed process and records its pid and port. With `TG_BOT_TOKENS`, each bot has its own app-server and Codex home, and its isolated runtime is forced to use file-backed credentials. Isolated Telegram runtimes do not auto-launch Codex Desktop, avoiding simultaneous desktop-state initialization for fresh homes. On restart, FoxClaw reconnects to each live recorded app-server or starts a replacement. `/auth_reload` and auth switching restart only the requesting bot runtime.
 
 No static Codex app-server port is required in normal installs.
 
@@ -284,7 +284,7 @@ Run the QR login helper once after building:
 foxclaw weixin-login
 ```
 
-Weixin runtime files default to `~/.foxclaw/weixin`.
+Weixin runtime files default to `~/.foxclaw/weixin`. When `TG_BOT_TOKENS` is enabled, Weixin continues to use the default Codex runtime and original home; it does not inspect or resume isolated Telegram bot threads.
 
 ## Codex Skill
 

package/dist/auth/mirror.d.ts

@@ -1,22 +1,46 @@
 import type { Logger } from '../logger.js';
 export interface AuthMirrorRuntime {
     id: string;
+    label?: string;
     authDir: string;
     notify?: (message: string) => Promise<void>;
+    validate?: (context: AuthMirrorValidationContext) => Promise<AuthMirrorValidationResult | boolean>;
+}
+export interface AuthMirrorStatus {
+    candidateName: string;
+    sourceRuntimeId: string;
+    sourceLabel: string;
+    syncedAt: string;
+}
+export interface AuthMirrorValidationContext {
+    candidateName: string;
+    accountId: string;
+    lastRefreshMs: number;
+}
+export interface AuthMirrorValidationResult {
+    ok: boolean;
+    reason?: string | null;
 }
 export declare class AuthCandidateMirror {
     private readonly canonicalDir;
     private readonly runtimes;
     private readonly logger;
+    private readonly statusPath;
     private timer;
     private readonly lastSyncedRefresh;
-    constructor(canonicalDir: string, runtimes: AuthMirrorRuntime[], logger: Logger);
+    private activeOperations;
+    private lastStatus;
+    constructor(canonicalDir: string, runtimes: AuthMirrorRuntime[], logger: Logger, statusPath?: string | null);
     initialize(): Promise<void>;
     start(): void;
     stop(): void;
+    isIdle(): boolean;
+    getStatus(): AuthMirrorStatus | null;
     syncRuntimeCandidate(runtimeId: string, candidateName: string): Promise<boolean>;
     private scan;
     private propagateValidatedCandidate;
+    private validateRuntimeCandidate;
+    private withActivity;
     private ensureCanonicalDefaultCandidate;
     private collectCandidateNames;
     private reconcileCandidateAtStartup;

package/dist/auth/mirror.js

@@ -5,14 +5,19 @@ export class AuthCandidateMirror {
     canonicalDir;
     runtimes;
     logger;
+    statusPath;
     timer = null;
     lastSyncedRefresh = new Map();
-    constructor(canonicalDir, runtimes, logger) {
+    activeOperations = 0;
+    lastStatus = null;
+    constructor(canonicalDir, runtimes, logger, statusPath = null) {
         this.canonicalDir = canonicalDir;
         this.runtimes = runtimes;
         this.logger = logger;
+        this.statusPath = statusPath;
     }
     async initialize() {
+        this.lastStatus = await readMirrorStatus(this.statusPath);
         await fs.mkdir(this.canonicalDir, { recursive: true, mode: 0o700 });
         await this.ensureCanonicalDefaultCandidate();
         const candidateNames = await this.collectCandidateNames();
@@ -52,21 +57,29 @@ export class AuthCandidateMirror {
         clearInterval(this.timer);
         this.timer = null;
     }
+    isIdle() {
+        return this.activeOperations === 0;
+    }
+    getStatus() {
+        return this.lastStatus;
+    }
     async syncRuntimeCandidate(runtimeId, candidateName) {
         if (!isAuthCandidateName(candidateName))
             return false;
         const runtime = this.runtimes.find((entry) => entry.id === runtimeId);
         if (!runtime)
             return false;
-        return this.propagateValidatedCandidate(runtime, candidateName);
+        return this.withActivity(() => this.propagateValidatedCandidate(runtime, candidateName));
     }
     async scan() {
-        for (const runtime of this.runtimes) {
-            const names = await listAuthCandidateNames(runtime.authDir);
-            for (const name of names) {
-                await this.propagateValidatedCandidate(runtime, name);
+        await this.withActivity(async () => {
+            for (const runtime of this.runtimes) {
+                const names = await listAuthCandidateNames(runtime.authDir);
+                for (const name of names) {
+                    await this.propagateValidatedCandidate(runtime, name);
+                }
             }
-        }
+        });
     }
     async propagateValidatedCandidate(runtime, name) {
         const sourcePath = path.join(runtime.authDir, name);
@@ -83,6 +96,15 @@ export class AuthCandidateMirror {
         if (record.lastRefreshMs <= previousRefresh) {
             return false;
         }
+        const validation = await this.validateRuntimeCandidate(runtime, name, record);
+        if (!validation.ok) {
+            this.logger.warn('auth.mirror.validation_failed', {
+                runtimeId: runtime.id,
+                name,
+                reason: validation.reason ?? 'unknown',
+            });
+            return false;
+        }
         await atomicWrite(canonicalPath, record.raw);
         for (const target of this.runtimes) {
             if (target.id !== runtime.id) {
@@ -90,11 +112,47 @@ export class AuthCandidateMirror {
             }
         }
         this.lastSyncedRefresh.set(name, record.lastRefreshMs);
+        const sourceLabel = runtime.label ?? runtime.id;
+        this.lastStatus = {
+            candidateName: name,
+            sourceRuntimeId: runtime.id,
+            sourceLabel,
+            syncedAt: new Date().toISOString(),
+        };
+        await writeMirrorStatus(this.statusPath, this.lastStatus);
         this.logger.info('auth.mirror.synced', { sourceRuntimeId: runtime.id, name });
-        const message = `${name} has been refreshed by ${runtime.id} and synchronized to the other Codex homes.`;
+        const message = `${name} has been refreshed by ${sourceLabel} and synchronized to the other Codex homes.`;
         await Promise.allSettled(this.runtimes.map((target) => target.notify?.(message)));
         return true;
     }
+    async validateRuntimeCandidate(runtime, name, record) {
+        if (!runtime.validate) {
+            return { ok: true };
+        }
+        try {
+            const result = await runtime.validate({
+                candidateName: name,
+                accountId: record.accountId,
+                lastRefreshMs: record.lastRefreshMs,
+            });
+            if (typeof result === 'boolean') {
+                return { ok: result };
+            }
+            return { ok: Boolean(result.ok), reason: result.reason ?? null };
+        }
+        catch (error) {
+            return { ok: false, reason: formatError(error) };
+        }
+    }
+    async withActivity(operation) {
+        this.activeOperations += 1;
+        try {
+            return await operation();
+        }
+        finally {
+            this.activeOperations -= 1;
+        }
+    }
     async ensureCanonicalDefaultCandidate() {
         const names = await listAuthCandidateNames(this.canonicalDir);
         if (names.length > 0)
@@ -197,3 +255,33 @@ async function exists(filePath) {
 function formatError(error) {
     return error instanceof Error ? error.message : String(error);
 }
+async function readMirrorStatus(statusPath) {
+    if (!statusPath)
+        return null;
+    try {
+        const parsed = JSON.parse(await fs.readFile(statusPath, 'utf8'));
+        if (typeof parsed.candidateName !== 'string'
+            || typeof parsed.sourceRuntimeId !== 'string'
+            || typeof parsed.sourceLabel !== 'string'
+            || typeof parsed.syncedAt !== 'string') {
+            return null;
+        }
+        return {
+            candidateName: parsed.candidateName,
+            sourceRuntimeId: parsed.sourceRuntimeId,
+            sourceLabel: parsed.sourceLabel,
+            syncedAt: parsed.syncedAt,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+async function writeMirrorStatus(statusPath, status) {
+    if (!statusPath)
+        return;
+    await fs.mkdir(path.dirname(statusPath), { recursive: true, mode: 0o700 });
+    const temporary = `${statusPath}.${process.pid}.${Date.now()}.tmp`;
+    await fs.writeFile(temporary, `${JSON.stringify(status, null, 2)}\n`, { encoding: 'utf8', mode: 0o600 });
+    await fs.rename(temporary, statusPath);
+}

package/dist/codex_app/client.d.ts

@@ -58,6 +58,7 @@ interface CodexAppServerRuntimeStatus {
 interface StopOptions {
     terminateServer?: boolean;
 }
+export declare function buildCodexAppServerArgs(port: number, configOverrides?: readonly string[]): string[];
 export declare class CodexAppClient extends EventEmitter {
     private readonly codexCliBin;
     private readonly launchCommand;
@@ -66,6 +67,7 @@ export declare class CodexAppClient extends EventEmitter {
     private readonly serverLogPath;
     private readonly logger;
     private readonly childEnv;
+    private readonly appServerConfigOverrides;
     private child;
     private socket;
     private requestId;
@@ -76,7 +78,7 @@ export declare class CodexAppClient extends EventEmitter {
     private port;
     private connected;
     private userAgent;
-    constructor(codexCliBin: string, launchCommand: string, autolaunch: boolean, serverStatePath: string, serverLogPath: string, logger: Logger, childEnv?: NodeJS.ProcessEnv | null);
+    constructor(codexCliBin: string, launchCommand: string, autolaunch: boolean, serverStatePath: string, serverLogPath: string, logger: Logger, childEnv?: NodeJS.ProcessEnv | null, appServerConfigOverrides?: readonly string[]);
     isConnected(): boolean;
     getUserAgent(): string | null;
     getServerStatus(): CodexAppServerRuntimeStatus;

package/dist/codex_app/client.js

@@ -6,6 +6,14 @@ import { spawn } from 'node:child_process';
 import { fileURLToPath } from 'node:url';
 import { buildThreadDeepLink, openUrl } from './deeplink.js';
 const CLIENT_VERSION = readPackageVersion();
+export function buildCodexAppServerArgs(port, configOverrides = []) {
+    const args = ['app-server'];
+    for (const override of configOverrides) {
+        args.push('-c', override);
+    }
+    args.push('--listen', `ws://127.0.0.1:${port}`);
+    return args;
+}
 export class CodexAppClient extends EventEmitter {
     codexCliBin;
     launchCommand;
@@ -14,6 +22,7 @@ export class CodexAppClient extends EventEmitter {
     serverLogPath;
     logger;
     childEnv;
+    appServerConfigOverrides;
     child = null;
     socket = null;
     requestId = 0;
@@ -24,7 +33,7 @@ export class CodexAppClient extends EventEmitter {
     port = null;
     connected = false;
     userAgent = null;
-    constructor(codexCliBin, launchCommand, autolaunch, serverStatePath, serverLogPath, logger, childEnv = null) {
+    constructor(codexCliBin, launchCommand, autolaunch, serverStatePath, serverLogPath, logger, childEnv = null, appServerConfigOverrides = []) {
         super();
         this.codexCliBin = codexCliBin;
         this.launchCommand = launchCommand;
@@ -33,6 +42,7 @@ export class CodexAppClient extends EventEmitter {
         this.serverLogPath = serverLogPath;
         this.logger = logger;
         this.childEnv = childEnv;
+        this.appServerConfigOverrides = appServerConfigOverrides;
     }
     isConnected() {
         return this.connected;
@@ -474,10 +484,11 @@ export class CodexAppClient extends EventEmitter {
             launcher.unref();
         }
         this.port = await reservePort();
+        const serverArgs = buildCodexAppServerArgs(this.port, this.appServerConfigOverrides);
         const [stdoutFd, stderrFd] = this.openServerLogFiles();
         let child;
         try {
-            child = spawn(this.codexCliBin, ['app-server', '--listen', `ws://127.0.0.1:${this.port}`], {
+            child = spawn(this.codexCliBin, serverArgs, {
                 detached: true,
                 stdio: ['ignore', stdoutFd, stderrFd],
                 env: this.childEnv ? { ...process.env, ...this.childEnv } : process.env,
@@ -496,7 +507,7 @@ export class CodexAppClient extends EventEmitter {
         this.writeServerState({
             pid: child.pid,
             port: this.port,
-            command: `${this.codexCliBin} app-server --listen ws://127.0.0.1:${this.port}`,
+            command: [this.codexCliBin, ...serverArgs].join(' '),
             logPath: this.serverLogPath,
             bridgePid: process.pid,
             startedAt: new Date().toISOString(),

package/dist/controller/controller.d.ts

@@ -5,11 +5,18 @@ import type { RuntimeStatus } from '../types.js';
 import type { TelegramGateway, TelegramTextEvent } from '../telegram/gateway.js';
 import { BridgeMessagingRouter } from '../channels/bridge_messaging_router.js';
 import type { CodexAppClient } from '../codex_app/client.js';
-import type { SelfUpdateRuntime } from '../update.js';
+import type { SelfUpdateRuntime, SelfUpdateStatus } from '../update.js';
 export interface CoreCoordinator {
     canSelfUpdate?: () => boolean;
     authCandidateUpdated?: (runtimeId: string, candidateName: string) => Promise<void>;
     statusUpdated?: (status: RuntimeStatus) => void;
+    getServiceStatus?: () => Promise<{
+        bots: NonNullable<RuntimeStatus['bots']>;
+        weixinRuntime?: RuntimeStatus['weixinRuntime'];
+        authMirror?: RuntimeStatus['authMirror'];
+        lastUpdate?: SelfUpdateStatus | null;
+    }>;
+    selfUpdateCompleted?: (status: SelfUpdateStatus) => void;
 }
 export declare class BridgeSessionCore {
     private readonly config;
@@ -19,6 +26,7 @@ export declare class BridgeSessionCore {
     private readonly app;
     private readonly selfUpdater;
     private readonly coordinator;
+    private readonly ownsTelegramRuntime;
     private activeTurns;
     private activeTurnsByTurnId;
     private observedThreadWatchers;
@@ -57,7 +65,7 @@ export declare class BridgeSessionCore {
     /** Last threads-panel pagination state per scope (Telegram inline nav + /open index alignment). */
     private threadListPresentationState;
     private readonly messaging;
-    constructor(config: AppConfig, store: BridgeStore, logger: Logger, bot: TelegramGateway, app: CodexAppClient, outbound: BridgeMessagingRouter, selfUpdater?: SelfUpdateRuntime | null, coordinator?: CoreCoordinator | null);
+    constructor(config: AppConfig, store: BridgeStore, logger: Logger, bot: TelegramGateway, app: CodexAppClient, outbound: BridgeMessagingRouter, selfUpdater?: SelfUpdateRuntime | null, coordinator?: CoreCoordinator | null, ownsTelegramRuntime?: boolean);
     /** Wire Telegram inbound events. Call before {@link startCodexApp}. */
     registerTelegramInboundHandlers(): void;
     /**
@@ -146,9 +154,11 @@ export declare class BridgeSessionCore {
     private stageAttachments;
     private registerActiveTurn;
     private createActiveTurnState;
+    getCurrentAuthLabel(): Promise<string | null>;
     isIdleForServiceUpdate(): boolean;
     private hasLocalBlockingActivity;
     private authRuntimeId;
+    private authDisplayBotLabel;
     private ownsScope;
     private setActiveTurn;
     private getActiveTurn;

package/dist/controller/controller.js

@@ -94,6 +94,7 @@ export class BridgeSessionCore {
     app;
     selfUpdater;
     coordinator;
+    ownsTelegramRuntime;
     activeTurns = new Map();
     activeTurnsByTurnId = new Map();
     observedThreadWatchers = new Map();
@@ -132,7 +133,7 @@ export class BridgeSessionCore {
     /** Last threads-panel pagination state per scope (Telegram inline nav + /open index alignment). */
     threadListPresentationState = new Map();
     messaging;
-    constructor(config, store, logger, bot, app, outbound, selfUpdater = null, coordinator = null) {
+    constructor(config, store, logger, bot, app, outbound, selfUpdater = null, coordinator = null, ownsTelegramRuntime = true) {
         this.config = config;
         this.store = store;
         this.logger = logger;
@@ -140,6 +141,7 @@ export class BridgeSessionCore {
         this.app = app;
         this.selfUpdater = selfUpdater;
         this.coordinator = coordinator;
+        this.ownsTelegramRuntime = ownsTelegramRuntime;
         this.messaging = outbound;
     }
     /** Wire Telegram inbound events. Call before {@link startCodexApp}. */
@@ -198,13 +200,13 @@ export class BridgeSessionCore {
             this.logger.warn('codex.local_usage_background_refresh_failed', { error: formatUserError(error) });
         });
         this.updateStatus();
+        this.scheduleSelfUpdateStatusPoll(0);
     }
     /** Begin Telegram Bot API long-polling after handlers and Codex are ready. */
     async startTelegramPolling() {
         await this.bot.start();
         this.botUsername = this.bot.username;
         this.updateStatus();
-        this.scheduleSelfUpdateStatusPoll(0);
     }
     /** Telegram-only default startup (single channel). */
     async start() {
@@ -258,7 +260,7 @@ export class BridgeSessionCore {
             lastError: this.lastError,
             updatedAt: new Date().toISOString(),
             channels: {
-                telegram: true,
+                telegram: this.ownsTelegramRuntime,
                 weixin: Boolean(this.config.wxEnabled && this.messaging.hasWeixinTransport),
             },
         };
@@ -360,10 +362,13 @@ export class BridgeSessionCore {
                 const binding = this.store.getBinding(scopeId);
                 const settings = this.store.getChatSettings(scopeId);
                 const access = this.resolveEffectiveAccess(scopeId, settings);
-                const [fastStatus, codexUsageLines, codexLocalUsageLines] = await Promise.all([
+                const [fastStatus, codexUsageLines, codexLocalUsageLines, serviceStatus] = await Promise.all([
                     this.resolveFastStatusLabel(locale, settings),
                     this.buildCodexUsageStatusLines(locale),
                     this.buildCodexLocalUsageStatusLines(locale),
+                    this.config.tgMultiBotMode
+                        ? (this.coordinator?.getServiceStatus?.() ?? Promise.resolve(null))
+                        : Promise.resolve(null),
                 ]);
                 const appServer = this.app.getServerStatus();
                 const appServerLabel = appServer.pid && appServer.port
@@ -392,6 +397,43 @@ export class BridgeSessionCore {
                     t(locale, 'status_pending_user_inputs', { value: this.store.countPendingUserInputs() }),
                     t(locale, 'status_active_turns', { value: this.activeTurns.size }),
                 ];
+                if (serviceStatus) {
+                    lines.push('', t(locale, 'status_runtime_overview'));
+                    for (const runtime of serviceStatus.bots) {
+                        lines.push(t(locale, 'status_runtime_bot', {
+                            bot: runtime.username ? `@${runtime.username}` : runtime.id,
+                            connected: t(locale, runtime.connected ? 'yes' : 'no'),
+                            auth: runtime.currentAuth ?? t(locale, 'none'),
+                            turns: runtime.activeTurns,
+                        }));
+                    }
+                    if (serviceStatus.weixinRuntime) {
+                        lines.push(t(locale, 'status_runtime_weixin', {
+                            connected: t(locale, serviceStatus.weixinRuntime.connected ? 'yes' : 'no'),
+                            turns: serviceStatus.weixinRuntime.activeTurns,
+                        }));
+                    }
+                    lines.push(serviceStatus.authMirror
+                        ? t(locale, 'status_auth_mirror_synced', {
+                            candidate: serviceStatus.authMirror.candidateName,
+                            source: serviceStatus.authMirror.sourceLabel,
+                            time: serviceStatus.authMirror.syncedAt,
+                        })
+                        : t(locale, 'status_auth_mirror_none'));
+                    if (serviceStatus.lastUpdate) {
+                        lines.push(t(locale, 'status_last_update', {
+                            from: serviceStatus.lastUpdate.fromVersion,
+                            to: serviceStatus.lastUpdate.toVersion ?? t(locale, 'unknown'),
+                            time: serviceStatus.lastUpdate.updatedAt,
+                        }));
+                        if (serviceStatus.lastUpdate.codexUpdate) {
+                            lines.push(t(locale, 'status_last_codex_update', { value: serviceStatus.lastUpdate.codexUpdate }));
+                        }
+                    }
+                    else {
+                        lines.push(t(locale, 'status_last_update_none'));
+                    }
+                }
                 lines.push(...codexUsageLines);
                 lines.push(...codexLocalUsageLines);
                 await this.sendMessage(scopeId, lines.join('\n'));
@@ -2551,6 +2593,9 @@ export class BridgeSessionCore {
             resolver,
         };
     }
+    async getCurrentAuthLabel() {
+        return (await this.listCodexAuthState()).currentLabel;
+    }
     isIdleForServiceUpdate() {
         return this.activeTurns.size === 0
             && this.pendingApprovalMessages.size === 0
@@ -2565,10 +2610,18 @@ export class BridgeSessionCore {
     authRuntimeId() {
         return this.config.tgScopeBotId ?? 'default';
     }
+    authDisplayBotLabel() {
+        if (!this.config.tgScopeBotId)
+            return null;
+        return this.botUsername ? `@${this.botUsername}` : this.config.tgScopeBotId;
+    }
     ownsScope(scopeId) {
         if (scopeId.startsWith(BRIDGE_SCOPE_WEIXIN_PREFIX)) {
             return this.messaging.hasWeixinTransport;
         }
+        if (!this.ownsTelegramRuntime) {
+            return false;
+        }
         if (!this.config.tgScopeBotId) {
             return parseTelegramTargetFromBridgeScope(scopeId).botId === null;
         }
@@ -3774,6 +3827,7 @@ export class BridgeSessionCore {
             this.scheduleSelfUpdateStatusPoll();
             return;
         }
+        this.coordinator?.selfUpdateCompleted?.(status);
         await this.sendMessage(status.scopeId, this.formatSelfUpdateResult(status));
         await this.selfUpdater?.clearStatus();
     }
@@ -3820,7 +3874,7 @@ export class BridgeSessionCore {
             createdAt: Date.now(),
         };
         this.pendingAuthChoiceLists.set(record.localId, record);
-        const messageId = await this.sendMessage(scopeId, renderAuthListMessage(locale, state, parseWeixinBridgeScope(scopeId) !== null), authChoiceKeyboard(locale, record));
+        const messageId = await this.sendMessage(scopeId, renderAuthListMessage(locale, state, this.authDisplayBotLabel(), parseWeixinBridgeScope(scopeId) !== null), authChoiceKeyboard(locale, record));
         record.messageId = messageId;
     }
     async handleAuthUseCommand(scopeId, locale, args) {
@@ -3842,7 +3896,7 @@ export class BridgeSessionCore {
         if (!candidate) {
             await this.sendMessage(scopeId, t(locale, 'auth_choice_expired'));
             const state = await this.listCodexAuthState();
-            await this.sendMessage(scopeId, renderAuthListMessage(locale, state, parseWeixinBridgeScope(scopeId) !== null));
+            await this.sendMessage(scopeId, renderAuthListMessage(locale, state, this.authDisplayBotLabel(), parseWeixinBridgeScope(scopeId) !== null));
             return;
         }
         const switchLabels = await this.readCodexAuthSwitchLabels(candidate);
@@ -3859,7 +3913,7 @@ export class BridgeSessionCore {
         const candidate = state.candidates[index - 1];
         if (!candidate) {
             await this.sendMessage(scopeId, t(locale, 'auth_choice_expired'));
-            await this.sendMessage(scopeId, renderAuthListMessage(locale, state, parseWeixinBridgeScope(scopeId) !== null));
+            await this.sendMessage(scopeId, renderAuthListMessage(locale, state, this.authDisplayBotLabel(), parseWeixinBridgeScope(scopeId) !== null));
             return;
         }
         this.store.setCodexAuthCandidateDisabled(candidate.name, disabled, this.authRuntimeId());
@@ -4319,7 +4373,7 @@ export class BridgeSessionCore {
         record.candidates = state.candidates;
         await this.messaging.answerCallback(event.callbackQueryId, t(locale, disabled ? 'auth_candidate_disabled_short' : 'auth_candidate_enabled_short'));
         if (record.messageId !== null) {
-            await this.editMessage(event.scopeId, record.messageId, renderAuthListMessage(locale, state, parseWeixinBridgeScope(event.scopeId) !== null), authChoiceKeyboard(locale, record));
+            await this.editMessage(event.scopeId, record.messageId, renderAuthListMessage(locale, state, this.authDisplayBotLabel(), parseWeixinBridgeScope(event.scopeId) !== null), authChoiceKeyboard(locale, record));
         }
     }
     async handleAuthSwitchCallback(event, localId, index, locale) {
@@ -7304,12 +7358,14 @@ async function switchCodexAuth(targetPath, explicitAuthDir = null) {
         toLabel: await authPathDisplayLabel(candidate.path),
     };
 }
-function renderAuthListMessage(locale, state, includeWeixinCopyPaste = false) {
+function renderAuthListMessage(locale, state, botLabel = null, includeWeixinCopyPaste = false) {
     const lines = [
         t(locale, 'auth_list_title'),
-        t(locale, 'auth_current', { value: state.currentLabel ?? t(locale, 'none') }),
-        t(locale, 'auth_dir', { value: state.authDir }),
     ];
+    if (botLabel) {
+        lines.push(t(locale, 'auth_bot', { value: botLabel }));
+    }
+    lines.push(t(locale, 'auth_current', { value: state.currentLabel ?? t(locale, 'none') }), t(locale, 'auth_dir', { value: state.authDir }));
     if (state.candidates.length === 0) {
         lines.push(t(locale, 'auth_no_candidates'));
         if (includeWeixinCopyPaste) {