@foxden-app/foxclaw 0.4.12 → 0.4.14

package/dist/controller/controller.js

@@ -3,7 +3,7 @@ import fs from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
 import { normalizeLocale, t } from '../i18n.js';
-import { readChatGptAuthMetadata } from '../auth/mirror.js';
+import { parseChatGptAuthMetadata, readChatGptAuthMetadata } from '../auth/mirror.js';
 import { parseCommand } from './commands.js';
 import { buildAccessSettingsKeyboard, buildModelSettingsKeyboard, buildSetupPanelKeyboard, buildThreadListKeyboard, buildThreadsKeyboard, clampEffortToModel, formatAccessPresetLabel, formatActiveTurnMessageModeLabel, formatAccessSettingsMessage, formatApprovalPolicyLabel, formatCollaborationModeLabel, formatModelSettingsMessage, formatSandboxModeLabel, formatServiceTierStatusLabel, formatSetupPanelMessage, formatThreadContextSummary, formatThreadsMessage, formatWeixinAccessCopyPaste, formatWeixinModelCopyPaste, formatWeixinThreadsCopyPaste, formatWeixinWhereNavCopyPaste, formatWhereMessage, normalizeRequestedEffort, resolveCurrentModel, resolveActiveTurnMessageMode, resolveRequestedModel, } from './presentation.js';
 import { clampServiceTierToModel, resolveFastTierForModel } from './service_tier.js';
@@ -427,14 +427,25 @@ export class BridgeSessionCore {
                             time: serviceStatus.authMirror.syncedAt,
                         })
                         : t(locale, 'status_auth_mirror_none'));
+                    if (serviceStatus.authSync?.enabled) {
+                        lines.push(t(locale, 'status_auth_sync', {
+                            node: serviceStatus.authSync.nodeId ?? t(locale, 'unknown'),
+                            peers: serviceStatus.authSync.peers.length,
+                            pending: serviceStatus.authSync.pendingImports,
+                        }));
+                        if (serviceStatus.authSync.lastError) {
+                            lines.push(t(locale, 'status_auth_sync_error', { value: serviceStatus.authSync.lastError }));
+                        }
+                    }
                     if (serviceStatus.lastUpdate) {
                         lines.push(t(locale, 'status_last_update', {
                             from: serviceStatus.lastUpdate.fromVersion,
                             to: serviceStatus.lastUpdate.toVersion ?? t(locale, 'unknown'),
                             time: serviceStatus.lastUpdate.updatedAt,
                         }));
-                        if (serviceStatus.lastUpdate.codexUpdate) {
-                            lines.push(t(locale, 'status_last_codex_update', { value: serviceStatus.lastUpdate.codexUpdate }));
+                        const codexUpdateLine = this.formatCodexUpdateResult(serviceStatus.lastUpdate);
+                        if (codexUpdateLine) {
+                            lines.push(t(locale, 'status_last_codex_update', { value: codexUpdateLine }));
                         }
                     }
                     else {
@@ -2618,6 +2629,55 @@ export class BridgeSessionCore {
     async getCurrentAuthLabel() {
         return (await this.listCodexAuthState()).currentLabel;
     }
+    async validateExternalCodexAuthCandidate(candidateName, rawAuth, expectedAccountId) {
+        if (!this.isIdleForServiceUpdate()) {
+            return { ok: false, reason: 'runtime is not idle' };
+        }
+        const metadata = parseChatGptAuthMetadata(rawAuth);
+        if (!metadata || metadata.accountId !== expectedAccountId) {
+            return { ok: false, reason: 'remote auth account id mismatch' };
+        }
+        const state = await this.listCodexAuthState();
+        const existing = state.candidates.find(candidate => candidate.name === candidateName) ?? null;
+        if (existing) {
+            const existingMetadata = await readChatGptAuthMetadata(existing.path);
+            if (existingMetadata && existingMetadata.accountId !== expectedAccountId) {
+                return { ok: false, reason: 'same candidate belongs to a different account' };
+            }
+        }
+        const authStat = await fs.lstat(state.authPath).catch(() => null);
+        const originalRegularAuth = authStat?.isFile()
+            ? await fs.readFile(state.authPath, 'utf8').catch(() => null)
+            : null;
+        const tempPath = path.join(state.authDir, `.auth-sync-validate-${process.pid}-${Date.now()}.json`);
+        try {
+            await fs.writeFile(tempPath, rawAuth, { encoding: 'utf8', mode: 0o600 });
+            await pointCodexAuthAtTarget(state.authDir, state.authPath, tempPath);
+            this.pendingTurnErrors.clear();
+            this.attachedThreads.clear();
+            await this.app.restart();
+            const account = await this.app.readAccount(false);
+            const rateLimits = await this.app.readAccountRateLimits();
+            if (!account || !rateLimits || !selectCodexRateLimitSnapshot(rateLimits)) {
+                return { ok: false, reason: 'Codex did not validate ChatGPT usage for remote auth' };
+            }
+            return { ok: true };
+        }
+        catch (error) {
+            return { ok: false, reason: formatUserError(error) };
+        }
+        finally {
+            await restoreCodexAuthTarget(state.authDir, state.authPath, state.currentTargetPath, originalRegularAuth).catch((error) => {
+                this.logger.warn('codex.auth_sync_restore_failed', { error: toErrorMeta(error) });
+            });
+            await fs.rm(tempPath, { force: true }).catch(() => undefined);
+            this.pendingTurnErrors.clear();
+            this.attachedThreads.clear();
+            await this.app.restart().catch((error) => {
+                this.logger.warn('codex.auth_sync_restart_restore_failed', { error: toErrorMeta(error) });
+            });
+        }
+    }
     isIdleForServiceUpdate() {
         return this.activeTurns.size === 0
             && this.pendingApprovalMessages.size === 0
@@ -3871,18 +3931,32 @@ export class BridgeSessionCore {
         await this.selfUpdater?.clearStatus();
     }
     formatSelfUpdateResult(status) {
+        const codexUpdateLine = this.formatCodexUpdateResult(status);
         if (status.state === 'succeeded') {
             const result = t(status.locale, 'update_succeeded', {
                 from: status.fromVersion,
                 to: status.toVersion ?? t(status.locale, 'unknown'),
             });
-            return status.codexUpdate ? `${result}\n${status.codexUpdate}` : result;
+            return codexUpdateLine ? `${result}\n${codexUpdateLine}` : result;
         }
         const result = t(status.locale, 'update_failed', { error: status.error ?? t(status.locale, 'unknown') });
-        return status.codexUpdate ? `${result}\n${status.codexUpdate}` : result;
+        return codexUpdateLine ? `${result}\n${codexUpdateLine}` : result;
+    }
+    formatCodexUpdateResult(status) {
+        if (status.codexFromVersion || status.codexToVersion) {
+            return t(status.locale, 'update_codex_result', {
+                from: status.codexFromVersion ?? t(status.locale, 'unknown'),
+                to: status.codexToVersion ?? t(status.locale, 'unknown'),
+            });
+        }
+        return status.codexUpdate ?? null;
     }
     async handleAuthCommand(scopeId, locale, args) {
         const action = args[0]?.toLowerCase() ?? 'list';
+        if (action === 'sync') {
+            await this.handleAuthSyncCommand(scopeId, locale, args.slice(1));
+            return;
+        }
         if (action === 'reload' || action === 'restart') {
             await this.handleAuthReloadCommand(scopeId, locale);
             return;
@@ -3923,6 +3997,39 @@ export class BridgeSessionCore {
         const messageId = await this.sendMessage(scopeId, renderAuthListMessage(locale, state, this.authDisplayBotLabel(), parseWeixinBridgeScope(scopeId) !== null, record), authChoiceKeyboard(locale, record));
         record.messageId = messageId;
     }
+    async handleAuthSyncCommand(scopeId, locale, args) {
+        const action = args[0]?.toLowerCase() ?? 'status';
+        if (action === 'status') {
+            await this.sendMessage(scopeId, formatAuthSyncStatus(locale, this.coordinator?.getAuthSyncStatus?.() ?? null));
+            return;
+        }
+        if (action === 'test') {
+            const result = await this.coordinator?.authSyncTest?.();
+            if (!result) {
+                await this.sendMessage(scopeId, t(locale, 'auth_sync_disabled'));
+                return;
+            }
+            await this.sendMessage(scopeId, t(locale, 'auth_sync_test_sent', { count: result.sent }));
+            return;
+        }
+        if (action === 'push' && args[1]?.toLowerCase() === 'all') {
+            if (!this.canRunGlobalAuthRefresh()) {
+                await this.sendMessage(scopeId, t(locale, 'auth_sync_push_blocked_active'));
+                return;
+            }
+            const result = await this.coordinator?.authSyncPushAll?.();
+            if (!result) {
+                await this.sendMessage(scopeId, t(locale, 'auth_sync_disabled'));
+                return;
+            }
+            await this.sendMessage(scopeId, t(locale, 'auth_sync_push_done', {
+                sent: result.sent,
+                skipped: result.skipped,
+            }));
+            return;
+        }
+        await this.sendMessage(scopeId, t(locale, 'usage_auth_sync'));
+    }
     async handleAuthRefreshAllCommand(scopeId, locale, confirmed = false) {
         if (!this.canRunGlobalAuthRefresh()) {
             await this.sendMessage(scopeId, t(locale, 'auth_refresh_all_blocked_active'));
@@ -3938,7 +4045,18 @@ export class BridgeSessionCore {
             return;
         }
         await this.sendMessage(scopeId, t(locale, 'auth_refresh_all_starting'));
-        const result = await this.refreshAllCodexAuthCandidates();
+        const lease = await this.coordinator?.acquireAuthRefreshLease?.('auth refresh all');
+        if (lease && !lease.ok) {
+            await this.sendMessage(scopeId, t(locale, 'auth_refresh_all_lease_failed', { error: lease.reason ?? t(locale, 'unknown') }));
+            return;
+        }
+        let result;
+        try {
+            result = await this.refreshAllCodexAuthCandidates();
+        }
+        finally {
+            await this.coordinator?.releaseAuthRefreshLease?.(lease?.leaseId ?? null);
+        }
         const state = await this.listCodexAuthState();
         await this.applySharedCodexAuthQuotaSnapshots(state);
         const record = createPendingAuthChoiceList(scopeId, state.candidates);
@@ -4449,7 +4567,20 @@ export class BridgeSessionCore {
             if (record.messageId !== null) {
                 await this.editMessage(event.scopeId, record.messageId, t(locale, 'auth_refresh_all_starting'), []);
             }
-            const result = await this.refreshAllCodexAuthCandidates();
+            const lease = await this.coordinator?.acquireAuthRefreshLease?.('auth refresh all');
+            if (lease && !lease.ok) {
+                if (record.messageId !== null) {
+                    await this.editMessage(event.scopeId, record.messageId, t(locale, 'auth_refresh_all_lease_failed', { error: lease.reason ?? t(locale, 'unknown') }), authChoiceKeyboard(locale, record));
+                }
+                return;
+            }
+            let result;
+            try {
+                result = await this.refreshAllCodexAuthCandidates();
+            }
+            finally {
+                await this.coordinator?.releaseAuthRefreshLease?.(lease?.leaseId ?? null);
+            }
             const state = await this.listCodexAuthState();
             await this.applySharedCodexAuthQuotaSnapshots(state);
             record.candidates = state.candidates;
@@ -4567,8 +4698,27 @@ export class BridgeSessionCore {
         this.authRotationInProgress = true;
         try {
             const failedTargets = rotation.retry?.failedAuthTargets ?? this.authRotationFailedTargets;
-            const selection = await this.selectNextCodexAuthCandidate(failedTargets);
             const locale = this.localeForChat(rotation.scopeId);
+            const current = (await this.listCodexAuthState()).candidates.find(candidate => candidate.isCurrent) ?? null;
+            if (current) {
+                const recoveredCurrent = await this.recoverCodexAuthCandidate(current.name);
+                if (recoveredCurrent) {
+                    await this.sendMessage(rotation.scopeId, t(locale, 'auth_auto_recovered_current', {
+                        value: current.name,
+                        error: formatShortStatusError(rotation.reason),
+                    }));
+                    this.pendingTurnErrors.clear();
+                    this.attachedThreads.clear();
+                    await this.app.restart();
+                    await this.syncCodexAuthCandidate(current.name);
+                    if (rotation.retry) {
+                        await this.retryTurnAfterAuthRotation(rotation.scopeId, locale, rotation.retry);
+                        return true;
+                    }
+                    return false;
+                }
+            }
+            const selection = await this.selectNextCodexAuthCandidate(failedTargets);
             if (!selection) {
                 await this.sendMessage(rotation.scopeId, t(locale, 'auth_auto_no_candidate', {
                     error: formatShortStatusError(rotation.reason),
@@ -7834,7 +7984,7 @@ function authChoiceKeyboard(locale, record) {
     const page = codexAuthListPage(record.candidates, record);
     const rows = page.visible.map(({ candidate, index }) => [
         {
-            text: clipButtonText(`${candidate.isCurrent ? '✅ ' : '🔐 '}${formatAuthQuotaPrefix(locale, candidate.quota)}|${formatCodexAuthCandidateDisplayName(candidate.name)}${candidate.disabled ? ' · off' : ''}`),
+            text: clipButtonText(`${candidate.isCurrent ? '✅ ' : '🔐 '}${formatAuthQuotaButtonPrefix(candidate.quota)}|${formatCodexAuthCandidateDisplayName(candidate.name)}${candidate.disabled ? ' · off' : ''}`),
             callback_data: `auth:${record.localId}:${index}`,
         },
         {
@@ -7960,6 +8110,36 @@ function formatAuthRefreshAllResult(locale, result) {
     }
     return lines.join('\n');
 }
+function formatAuthSyncStatus(locale, status) {
+    if (!status?.enabled) {
+        return t(locale, 'auth_sync_disabled');
+    }
+    const lines = [
+        t(locale, 'auth_sync_status_title'),
+        t(locale, 'auth_sync_status_node', { value: status.nodeId ?? t(locale, 'unknown') }),
+        t(locale, 'auth_sync_status_peers', { value: status.peers.length === 0 ? t(locale, 'none') : status.peers.join(', ') }),
+        t(locale, 'auth_sync_status_pending', { value: status.pendingImports }),
+        t(locale, 'auth_sync_status_sent', { value: status.lastSentAt ?? t(locale, 'none') }),
+        t(locale, 'auth_sync_status_received', { value: status.lastReceivedAt ?? t(locale, 'none') }),
+        t(locale, 'auth_sync_status_imported', {
+            value: status.lastImportedAt
+                ? `${status.lastImportCandidate ?? t(locale, 'unknown')} @ ${status.lastImportedAt}`
+                : t(locale, 'none'),
+        }),
+        t(locale, 'auth_sync_status_pull', {
+            value: status.lastPullAt
+                ? `${status.lastPullCandidate ?? t(locale, 'unknown')} @ ${status.lastPullAt}`
+                : t(locale, 'none'),
+        }),
+    ];
+    if (status.activeLeaseId) {
+        lines.push(t(locale, 'auth_sync_status_lease', { value: status.activeLeaseId }));
+    }
+    if (status.lastError) {
+        lines.push(t(locale, 'auth_sync_status_error', { value: status.lastError }));
+    }
+    return lines.join('\n');
+}
 function normalizeHelpUsageKey(name) {
     const normalized = name.toLowerCase();
     switch (normalized) {
@@ -8576,6 +8756,17 @@ function formatAuthQuotaPrefix(locale, snapshot) {
         .map(([duration, remaining, fallback]) => (`${formatCompactRateLimitWindowLabel(locale, duration, fallback)}:${remaining === null ? '--' : formatUsagePercent(remaining)}`));
     return values.length > 0 ? values.join('|') : '--';
 }
+function formatAuthQuotaButtonPrefix(snapshot) {
+    return [
+        snapshot?.primaryRemainingPercent ?? null,
+        snapshot?.secondaryRemainingPercent ?? null,
+    ].map(formatAuthQuotaButtonValue).join('|');
+}
+function formatAuthQuotaButtonValue(value) {
+    return typeof value === 'number' && Number.isFinite(value)
+        ? formatUsagePercent(value)
+        : '—';
+}
 function isCodexAuthQuotaSnapshot(value) {
     if (!value || typeof value !== 'object') {
         return false;

package/dist/i18n.d.ts

@@ -125,11 +125,14 @@ declare const MESSAGES: {
         readonly status_runtime_weixin: "- Weixin default runtime: connected {connected}, active turns {turns}";
         readonly status_auth_mirror_none: "Last auth mirror: none recorded";
         readonly status_auth_mirror_synced: "Last auth mirror: {candidate} from {source} at {time}";
+        readonly status_auth_sync: "Cross-node auth sync: node {node}, peers {peers}, pending imports {pending}";
+        readonly status_auth_sync_error: "Cross-node auth sync error: {value}";
         readonly status_last_update_none: "Last service update: none recorded";
         readonly status_last_update: "Last service update: {from} -> {to} at {time}";
         readonly status_last_codex_update: "Last Codex update: {value}";
         readonly update_started: "FoxClaw update started. I will report here after installation, checks, and service restart complete.";
         readonly update_succeeded: "FoxClaw updated and restarted: {from} -> {to}.";
+        readonly update_codex_result: "Codex CLI: {from} -> {to}.";
         readonly update_failed: "FoxClaw update failed: {error}\nRun foxclaw update in a terminal for details.";
         readonly update_unavailable: "Self-update is unavailable in this runtime. Run foxclaw update in a terminal.";
         readonly update_already_running: "A FoxClaw update is already running. I will report here when it finishes.";
@@ -137,7 +140,8 @@ declare const MESSAGES: {
         readonly auth_reload_restarting: "Restarting Codex app-server to reload auth...";
         readonly auth_reload_done: "Codex app-server restarted. Current auth has been reloaded.";
         readonly auth_reload_blocked_active: "Cannot reload Codex auth while a turn, approval, or question is active. Wait or use /interrupt first.";
-        readonly usage_auth: "Usage: /auth [list [keyword]|filter <all|enabled|attention>|page <n>|use <n>|enable <n>|disable <n>|reload|refresh all [confirm]|add <name>]";
+        readonly usage_auth: "Usage: /auth [list [keyword]|filter <all|enabled|attention>|page <n>|use <n>|enable <n>|disable <n>|reload|refresh all [confirm]|sync <status|test|push all>|add <name>]";
+        readonly usage_auth_sync: "Usage: /auth sync <status|test|push all>";
         readonly usage_auth_add: "Usage: /auth add <name>. Use letters, numbers, dot, dash, or underscore.";
         readonly auth_list_title: "Codex auth files:";
         readonly auth_bot: "Bot runtime: {value}";
@@ -179,11 +183,13 @@ declare const MESSAGES: {
         readonly auth_refresh_all_cancelled: "Refresh all cancelled.";
         readonly auth_refresh_all_starting: "Refreshing all ChatGPT auth candidates. Every runtime must stay idle...";
         readonly auth_refresh_all_blocked_active: "Cannot refresh all auth candidates while any runtime, approval, input, login, or auth mirror write is active. Wait or use /interrupt first.";
+        readonly auth_refresh_all_lease_failed: "Cross-node refresh lock was not granted: {error}";
         readonly auth_refresh_all_done: "Auth refresh all complete: {refreshed} refreshed, {skipped} skipped, {failed} failed.";
         readonly auth_refresh_all_refreshed: "Refreshed: {value}";
         readonly auth_refresh_all_skipped: "Skipped non-ChatGPT/invalid candidates: {value}";
         readonly auth_refresh_all_failed: "Failed: {value}";
         readonly auth_auto_switching: "Codex auth problem detected ({error}). Switching: {from} -> {to}...";
+        readonly auth_auto_recovered_current: "Codex auth problem detected ({error}). Recovered a newer same-account credential for {value} and restarted Codex app-server.";
         readonly auth_auto_done: "Auto-switched Codex auth: {from} -> {to}.";
         readonly auth_auto_retrying: "Retrying the same request with the new auth...";
         readonly auth_auto_retry_thread_missing: "Auth was switched, but the original thread is no longer available ({threadId}). Retry was stopped to avoid creating duplicate sessions.";
@@ -196,6 +202,20 @@ declare const MESSAGES: {
         readonly auth_add_cancelled: "New auth login cancelled. Restored previous auth.";
         readonly auth_add_reverted: "Restored previous auth.";
         readonly auth_add_missing_file: "Login completed, but the new auth file was not created: {value}";
+        readonly auth_sync_disabled: "Cross-node auth sync is disabled.";
+        readonly auth_sync_test_sent: "Auth sync test ping sent to {count} peer(s).";
+        readonly auth_sync_push_blocked_active: "Cannot push auth sync while any runtime, approval, input, login, or auth mirror write is active.";
+        readonly auth_sync_push_done: "Auth sync push complete: sent {sent}, skipped {skipped}.";
+        readonly auth_sync_status_title: "Cross-node auth sync:";
+        readonly auth_sync_status_node: "Node: {value}";
+        readonly auth_sync_status_peers: "Peers: {value}";
+        readonly auth_sync_status_pending: "Pending imports: {value}";
+        readonly auth_sync_status_sent: "Last sent: {value}";
+        readonly auth_sync_status_received: "Last received: {value}";
+        readonly auth_sync_status_imported: "Last import: {value}";
+        readonly auth_sync_status_pull: "Last pull: {value}";
+        readonly auth_sync_status_lease: "Active refresh lease: {value}";
+        readonly auth_sync_status_error: "Last error: {value}";
         readonly button_login_device: "🔑 Login";
         readonly button_auth_reload: "🔄 Reload auth";
         readonly button_auth_refresh_all_confirm: "⚠️ Accept risk & refresh";
@@ -730,11 +750,14 @@ declare const MESSAGES: {
         readonly status_runtime_weixin: "- 微信默认运行时：连接 {connected}，进行中回复 {turns}";
         readonly status_auth_mirror_none: "最近 auth 镜像：暂无记录";
         readonly status_auth_mirror_synced: "最近 auth 镜像：{candidate} 由 {source} 于 {time} 同步";
+        readonly status_auth_sync: "跨节点 auth 同步：节点 {node}，peer {peers}，待导入 {pending}";
+        readonly status_auth_sync_error: "跨节点 auth 同步错误：{value}";
         readonly status_last_update_none: "最近服务升级：暂无记录";
         readonly status_last_update: "最近服务升级：{from} -> {to}（{time}）";
         readonly status_last_codex_update: "最近 Codex 升级：{value}";
         readonly update_started: "已开始升级 FoxClaw。安装、自检和服务重启完成后，我会在这里回报结果。";
         readonly update_succeeded: "FoxClaw 已升级并重启：{from} -> {to}。";
+        readonly update_codex_result: "Codex CLI：{from} -> {to}。";
         readonly update_failed: "FoxClaw 升级失败：{error}\n请在终端运行 foxclaw update 查看详情。";
         readonly update_unavailable: "当前运行方式不支持自升级，请在终端运行 foxclaw update。";
         readonly update_already_running: "FoxClaw 升级已经在进行中，结束后我会在这里回报结果。";
@@ -742,7 +765,8 @@ declare const MESSAGES: {
         readonly auth_reload_restarting: "正在重启 Codex app-server 以重新读取 auth...";
         readonly auth_reload_done: "Codex app-server 已重启，当前 auth 已重新读取。";
         readonly auth_reload_blocked_active: "当前有回复、审批或问题在进行中，不能重载 Codex auth。请先等待，或使用 /interrupt。";
-        readonly usage_auth: "用法：/auth [list [关键词]|filter <all|enabled|attention>|page <页码>|use <编号>|enable <编号>|disable <编号>|reload|refresh all [confirm]|add <名称>]";
+        readonly usage_auth: "用法：/auth [list [关键词]|filter <all|enabled|attention>|page <页码>|use <编号>|enable <编号>|disable <编号>|reload|refresh all [confirm]|sync <status|test|push all>|add <名称>]";
+        readonly usage_auth_sync: "用法：/auth sync <status|test|push all>";
         readonly usage_auth_add: "用法：/auth add <名称>。名称只能包含字母、数字、点、短横线或下划线。";
         readonly auth_list_title: "Codex auth 文件：";
         readonly auth_bot: "Bot runtime：{value}";
@@ -784,11 +808,13 @@ declare const MESSAGES: {
         readonly auth_refresh_all_cancelled: "已取消刷新全部。";
         readonly auth_refresh_all_starting: "正在刷新全部 ChatGPT auth 候选。执行期间所有 runtime 必须保持空闲...";
         readonly auth_refresh_all_blocked_active: "当前有任一 runtime、审批、待输入、登录或 auth 镜像写入在进行中，不能刷新全部 auth。请先等待，或使用 /interrupt。";
+        readonly auth_refresh_all_lease_failed: "跨节点刷新锁未授予：{error}";
         readonly auth_refresh_all_done: "全部 auth 刷新完成：已刷新 {refreshed}，已跳过 {skipped}，失败 {failed}。";
         readonly auth_refresh_all_refreshed: "已刷新：{value}";
         readonly auth_refresh_all_skipped: "已跳过非 ChatGPT/无效候选：{value}";
         readonly auth_refresh_all_failed: "失败：{value}";
         readonly auth_auto_switching: "检测到 Codex auth 问题（{error}），正在切换：{from} -> {to}...";
+        readonly auth_auto_recovered_current: "检测到 Codex auth 问题（{error}），已为 {value} 恢复同账号较新凭据并重启 Codex app-server。";
         readonly auth_auto_done: "已自动切换 Codex auth：{from} -> {to}。";
         readonly auth_auto_retrying: "正在用新的 auth 重试同一条请求...";
         readonly auth_auto_retry_thread_missing: "Auth 已切换，但原线程已经不可用（{threadId}）。已停止重试，避免创建重复 session。";
@@ -801,6 +827,20 @@ declare const MESSAGES: {
         readonly auth_add_cancelled: "新 auth 登录已取消，已恢复之前的 auth。";
         readonly auth_add_reverted: "已恢复之前的 auth。";
         readonly auth_add_missing_file: "登录已完成，但没有创建新的 auth 文件：{value}";
+        readonly auth_sync_disabled: "跨节点 auth 同步未启用。";
+        readonly auth_sync_test_sent: "已向 {count} 个 peer 发送 auth sync 测试 ping。";
+        readonly auth_sync_push_blocked_active: "当前有任一 runtime、审批、待输入、登录或 auth 镜像写入在进行中，不能推送 auth 同步。";
+        readonly auth_sync_push_done: "auth 同步推送完成：已发送 {sent}，已跳过 {skipped}。";
+        readonly auth_sync_status_title: "跨节点 auth 同步：";
+        readonly auth_sync_status_node: "节点：{value}";
+        readonly auth_sync_status_peers: "Peer：{value}";
+        readonly auth_sync_status_pending: "待导入：{value}";
+        readonly auth_sync_status_sent: "最近发送：{value}";
+        readonly auth_sync_status_received: "最近接收：{value}";
+        readonly auth_sync_status_imported: "最近导入：{value}";
+        readonly auth_sync_status_pull: "最近拉取：{value}";
+        readonly auth_sync_status_lease: "当前刷新锁：{value}";
+        readonly auth_sync_status_error: "最近错误：{value}";
         readonly button_login_device: "🔑 设备登录";
         readonly button_auth_reload: "🔄 重载 auth";
         readonly button_auth_refresh_all_confirm: "⚠️ 接受风险并刷新";

package/dist/i18n.js

@@ -123,11 +123,14 @@ const MESSAGES = {
         status_runtime_weixin: '- Weixin default runtime: connected {connected}, active turns {turns}',
         status_auth_mirror_none: 'Last auth mirror: none recorded',
         status_auth_mirror_synced: 'Last auth mirror: {candidate} from {source} at {time}',
+        status_auth_sync: 'Cross-node auth sync: node {node}, peers {peers}, pending imports {pending}',
+        status_auth_sync_error: 'Cross-node auth sync error: {value}',
         status_last_update_none: 'Last service update: none recorded',
         status_last_update: 'Last service update: {from} -> {to} at {time}',
         status_last_codex_update: 'Last Codex update: {value}',
         update_started: 'FoxClaw update started. I will report here after installation, checks, and service restart complete.',
         update_succeeded: 'FoxClaw updated and restarted: {from} -> {to}.',
+        update_codex_result: 'Codex CLI: {from} -> {to}.',
         update_failed: 'FoxClaw update failed: {error}\nRun foxclaw update in a terminal for details.',
         update_unavailable: 'Self-update is unavailable in this runtime. Run foxclaw update in a terminal.',
         update_already_running: 'A FoxClaw update is already running. I will report here when it finishes.',
@@ -135,7 +138,8 @@ const MESSAGES = {
         auth_reload_restarting: 'Restarting Codex app-server to reload auth...',
         auth_reload_done: 'Codex app-server restarted. Current auth has been reloaded.',
         auth_reload_blocked_active: 'Cannot reload Codex auth while a turn, approval, or question is active. Wait or use /interrupt first.',
-        usage_auth: 'Usage: /auth [list [keyword]|filter <all|enabled|attention>|page <n>|use <n>|enable <n>|disable <n>|reload|refresh all [confirm]|add <name>]',
+        usage_auth: 'Usage: /auth [list [keyword]|filter <all|enabled|attention>|page <n>|use <n>|enable <n>|disable <n>|reload|refresh all [confirm]|sync <status|test|push all>|add <name>]',
+        usage_auth_sync: 'Usage: /auth sync <status|test|push all>',
         usage_auth_add: 'Usage: /auth add <name>. Use letters, numbers, dot, dash, or underscore.',
         auth_list_title: 'Codex auth files:',
         auth_bot: 'Bot runtime: {value}',
@@ -177,11 +181,13 @@ const MESSAGES = {
         auth_refresh_all_cancelled: 'Refresh all cancelled.',
         auth_refresh_all_starting: 'Refreshing all ChatGPT auth candidates. Every runtime must stay idle...',
         auth_refresh_all_blocked_active: 'Cannot refresh all auth candidates while any runtime, approval, input, login, or auth mirror write is active. Wait or use /interrupt first.',
+        auth_refresh_all_lease_failed: 'Cross-node refresh lock was not granted: {error}',
         auth_refresh_all_done: 'Auth refresh all complete: {refreshed} refreshed, {skipped} skipped, {failed} failed.',
         auth_refresh_all_refreshed: 'Refreshed: {value}',
         auth_refresh_all_skipped: 'Skipped non-ChatGPT/invalid candidates: {value}',
         auth_refresh_all_failed: 'Failed: {value}',
         auth_auto_switching: 'Codex auth problem detected ({error}). Switching: {from} -> {to}...',
+        auth_auto_recovered_current: 'Codex auth problem detected ({error}). Recovered a newer same-account credential for {value} and restarted Codex app-server.',
         auth_auto_done: 'Auto-switched Codex auth: {from} -> {to}.',
         auth_auto_retrying: 'Retrying the same request with the new auth...',
         auth_auto_retry_thread_missing: 'Auth was switched, but the original thread is no longer available ({threadId}). Retry was stopped to avoid creating duplicate sessions.',
@@ -194,6 +200,20 @@ const MESSAGES = {
         auth_add_cancelled: 'New auth login cancelled. Restored previous auth.',
         auth_add_reverted: 'Restored previous auth.',
         auth_add_missing_file: 'Login completed, but the new auth file was not created: {value}',
+        auth_sync_disabled: 'Cross-node auth sync is disabled.',
+        auth_sync_test_sent: 'Auth sync test ping sent to {count} peer(s).',
+        auth_sync_push_blocked_active: 'Cannot push auth sync while any runtime, approval, input, login, or auth mirror write is active.',
+        auth_sync_push_done: 'Auth sync push complete: sent {sent}, skipped {skipped}.',
+        auth_sync_status_title: 'Cross-node auth sync:',
+        auth_sync_status_node: 'Node: {value}',
+        auth_sync_status_peers: 'Peers: {value}',
+        auth_sync_status_pending: 'Pending imports: {value}',
+        auth_sync_status_sent: 'Last sent: {value}',
+        auth_sync_status_received: 'Last received: {value}',
+        auth_sync_status_imported: 'Last import: {value}',
+        auth_sync_status_pull: 'Last pull: {value}',
+        auth_sync_status_lease: 'Active refresh lease: {value}',
+        auth_sync_status_error: 'Last error: {value}',
         button_login_device: '🔑 Login',
         button_auth_reload: '🔄 Reload auth',
         button_auth_refresh_all_confirm: '⚠️ Accept risk & refresh',
@@ -728,11 +748,14 @@ const MESSAGES = {
         status_runtime_weixin: '- 微信默认运行时：连接 {connected}，进行中回复 {turns}',
         status_auth_mirror_none: '最近 auth 镜像：暂无记录',
         status_auth_mirror_synced: '最近 auth 镜像：{candidate} 由 {source} 于 {time} 同步',
+        status_auth_sync: '跨节点 auth 同步：节点 {node}，peer {peers}，待导入 {pending}',
+        status_auth_sync_error: '跨节点 auth 同步错误：{value}',
         status_last_update_none: '最近服务升级：暂无记录',
         status_last_update: '最近服务升级：{from} -> {to}（{time}）',
         status_last_codex_update: '最近 Codex 升级：{value}',
         update_started: '已开始升级 FoxClaw。安装、自检和服务重启完成后，我会在这里回报结果。',
         update_succeeded: 'FoxClaw 已升级并重启：{from} -> {to}。',
+        update_codex_result: 'Codex CLI：{from} -> {to}。',
         update_failed: 'FoxClaw 升级失败：{error}\n请在终端运行 foxclaw update 查看详情。',
         update_unavailable: '当前运行方式不支持自升级，请在终端运行 foxclaw update。',
         update_already_running: 'FoxClaw 升级已经在进行中，结束后我会在这里回报结果。',
@@ -740,7 +763,8 @@ const MESSAGES = {
         auth_reload_restarting: '正在重启 Codex app-server 以重新读取 auth...',
         auth_reload_done: 'Codex app-server 已重启，当前 auth 已重新读取。',
         auth_reload_blocked_active: '当前有回复、审批或问题在进行中，不能重载 Codex auth。请先等待，或使用 /interrupt。',
-        usage_auth: '用法：/auth [list [关键词]|filter <all|enabled|attention>|page <页码>|use <编号>|enable <编号>|disable <编号>|reload|refresh all [confirm]|add <名称>]',
+        usage_auth: '用法：/auth [list [关键词]|filter <all|enabled|attention>|page <页码>|use <编号>|enable <编号>|disable <编号>|reload|refresh all [confirm]|sync <status|test|push all>|add <名称>]',
+        usage_auth_sync: '用法：/auth sync <status|test|push all>',
         usage_auth_add: '用法：/auth add <名称>。名称只能包含字母、数字、点、短横线或下划线。',
         auth_list_title: 'Codex auth 文件：',
         auth_bot: 'Bot runtime：{value}',
@@ -782,11 +806,13 @@ const MESSAGES = {
         auth_refresh_all_cancelled: '已取消刷新全部。',
         auth_refresh_all_starting: '正在刷新全部 ChatGPT auth 候选。执行期间所有 runtime 必须保持空闲...',
         auth_refresh_all_blocked_active: '当前有任一 runtime、审批、待输入、登录或 auth 镜像写入在进行中，不能刷新全部 auth。请先等待，或使用 /interrupt。',
+        auth_refresh_all_lease_failed: '跨节点刷新锁未授予：{error}',
         auth_refresh_all_done: '全部 auth 刷新完成：已刷新 {refreshed}，已跳过 {skipped}，失败 {failed}。',
         auth_refresh_all_refreshed: '已刷新：{value}',
         auth_refresh_all_skipped: '已跳过非 ChatGPT/无效候选：{value}',
         auth_refresh_all_failed: '失败：{value}',
         auth_auto_switching: '检测到 Codex auth 问题（{error}），正在切换：{from} -> {to}...',
+        auth_auto_recovered_current: '检测到 Codex auth 问题（{error}），已为 {value} 恢复同账号较新凭据并重启 Codex app-server。',
         auth_auto_done: '已自动切换 Codex auth：{from} -> {to}。',
         auth_auto_retrying: '正在用新的 auth 重试同一条请求...',
         auth_auto_retry_thread_missing: 'Auth 已切换，但原线程已经不可用（{threadId}）。已停止重试，避免创建重复 session。',
@@ -799,6 +825,20 @@ const MESSAGES = {
         auth_add_cancelled: '新 auth 登录已取消，已恢复之前的 auth。',
         auth_add_reverted: '已恢复之前的 auth。',
         auth_add_missing_file: '登录已完成，但没有创建新的 auth 文件：{value}',
+        auth_sync_disabled: '跨节点 auth 同步未启用。',
+        auth_sync_test_sent: '已向 {count} 个 peer 发送 auth sync 测试 ping。',
+        auth_sync_push_blocked_active: '当前有任一 runtime、审批、待输入、登录或 auth 镜像写入在进行中，不能推送 auth 同步。',
+        auth_sync_push_done: 'auth 同步推送完成：已发送 {sent}，已跳过 {skipped}。',
+        auth_sync_status_title: '跨节点 auth 同步：',
+        auth_sync_status_node: '节点：{value}',
+        auth_sync_status_peers: 'Peer：{value}',
+        auth_sync_status_pending: '待导入：{value}',
+        auth_sync_status_sent: '最近发送：{value}',
+        auth_sync_status_received: '最近接收：{value}',
+        auth_sync_status_imported: '最近导入：{value}',
+        auth_sync_status_pull: '最近拉取：{value}',
+        auth_sync_status_lease: '当前刷新锁：{value}',
+        auth_sync_status_error: '最近错误：{value}',
         button_login_device: '🔑 设备登录',
         button_auth_reload: '🔄 重载 auth',
         button_auth_refresh_all_confirm: '⚠️ 接受风险并刷新',