@foxden-app/foxclaw 0.4.8 → 0.4.9

package/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 All notable FoxClaw changes are listed here. Each release note is bilingual so GitHub Releases and the npm package are useful to both Chinese and English readers.
 
+## 0.4.9 - 2026-06-02
+
+### 中文
+- 修复 ChatGPT auth 到期自动刷新后，主动同步和后台镜像扫描竞态导致同一候选重复发送镜像广播的问题。
+
+### English
+- Fixed duplicate auth mirror broadcasts when an automatic ChatGPT auth refresh was observed by both the direct sync path and the background mirror scan.
+
 ## 0.4.8 - 2026-06-02
 
 ### 中文

package/dist/auth/mirror.d.ts

@@ -39,6 +39,7 @@ export declare class AuthCandidateMirror {
     private timer;
     private readonly lastSyncedRefresh;
     private readonly lastValidationFailures;
+    private readonly activeCandidateSyncs;
     private activeOperations;
     private lastStatus;
     constructor(canonicalDir: string, runtimes: AuthMirrorRuntime[], logger: Logger, statusPath?: string | null);

package/dist/auth/mirror.js

@@ -9,6 +9,7 @@ export class AuthCandidateMirror {
     timer = null;
     lastSyncedRefresh = new Map();
     lastValidationFailures = new Map();
+    activeCandidateSyncs = new Set();
     activeOperations = 0;
     lastStatus = null;
     constructor(canonicalDir, runtimes, logger, statusPath = null) {
@@ -116,55 +117,64 @@ export class AuthCandidateMirror {
         });
     }
     async propagateValidatedCandidate(runtime, name) {
-        const sourcePath = path.join(runtime.authDir, name);
-        const record = await readChatGptAuthRecord(sourcePath);
-        if (!record)
-            return false;
-        const canonicalPath = path.join(this.canonicalDir, name);
-        const canonical = await readChatGptAuthRecord(canonicalPath);
-        if (canonical && canonical.accountId !== record.accountId) {
-            this.logger.warn('auth.mirror.account_conflict', { runtimeId: runtime.id, name });
-            return false;
-        }
-        const previousRefresh = Math.max(canonical?.lastRefreshMs ?? 0, this.lastSyncedRefresh.get(name) ?? 0);
-        if (record.lastRefreshMs <= previousRefresh) {
+        if (this.activeCandidateSyncs.has(name)) {
             return false;
         }
-        const validation = await this.validateRuntimeCandidate(runtime, name, record);
-        if (!validation.ok) {
-            const reason = validation.reason ?? 'unknown';
-            const failureKey = `${runtime.id}:${name}`;
-            const failureValue = `${record.lastRefreshMs}:${reason}`;
-            if (this.lastValidationFailures.get(failureKey) !== failureValue) {
-                this.lastValidationFailures.set(failureKey, failureValue);
-                this.logger.warn('auth.mirror.validation_failed', {
-                    runtimeId: runtime.id,
-                    name,
-                    reason,
-                });
+        this.activeCandidateSyncs.add(name);
+        try {
+            const sourcePath = path.join(runtime.authDir, name);
+            const record = await readChatGptAuthRecord(sourcePath);
+            if (!record)
+                return false;
+            const canonicalPath = path.join(this.canonicalDir, name);
+            const canonical = await readChatGptAuthRecord(canonicalPath);
+            if (canonical && canonical.accountId !== record.accountId) {
+                this.logger.warn('auth.mirror.account_conflict', { runtimeId: runtime.id, name });
+                return false;
             }
-            return false;
-        }
-        this.lastValidationFailures.delete(`${runtime.id}:${name}`);
-        await atomicWrite(canonicalPath, record.raw);
-        for (const target of this.runtimes) {
-            if (target.id !== runtime.id) {
-                await atomicWrite(path.join(target.authDir, name), record.raw);
+            const previousRefresh = Math.max(canonical?.lastRefreshMs ?? 0, this.lastSyncedRefresh.get(name) ?? 0);
+            if (record.lastRefreshMs <= previousRefresh) {
+                return false;
+            }
+            const validation = await this.validateRuntimeCandidate(runtime, name, record);
+            if (!validation.ok) {
+                const reason = validation.reason ?? 'unknown';
+                const failureKey = `${runtime.id}:${name}`;
+                const failureValue = `${record.lastRefreshMs}:${reason}`;
+                if (this.lastValidationFailures.get(failureKey) !== failureValue) {
+                    this.lastValidationFailures.set(failureKey, failureValue);
+                    this.logger.warn('auth.mirror.validation_failed', {
+                        runtimeId: runtime.id,
+                        name,
+                        reason,
+                    });
+                }
+                return false;
             }
+            this.lastValidationFailures.delete(`${runtime.id}:${name}`);
+            await atomicWrite(canonicalPath, record.raw);
+            for (const target of this.runtimes) {
+                if (target.id !== runtime.id) {
+                    await atomicWrite(path.join(target.authDir, name), record.raw);
+                }
+            }
+            this.lastSyncedRefresh.set(name, record.lastRefreshMs);
+            const sourceLabel = runtime.label ?? runtime.id;
+            this.lastStatus = {
+                candidateName: name,
+                sourceRuntimeId: runtime.id,
+                sourceLabel,
+                syncedAt: new Date().toISOString(),
+            };
+            await writeMirrorStatus(this.statusPath, this.lastStatus);
+            this.logger.info('auth.mirror.synced', { sourceRuntimeId: runtime.id, name });
+            const message = `${name} has been refreshed by ${sourceLabel} and synchronized to the other Codex homes.`;
+            await Promise.allSettled(this.runtimes.map((target) => target.notify?.(message)));
+            return true;
+        }
+        finally {
+            this.activeCandidateSyncs.delete(name);
         }
-        this.lastSyncedRefresh.set(name, record.lastRefreshMs);
-        const sourceLabel = runtime.label ?? runtime.id;
-        this.lastStatus = {
-            candidateName: name,
-            sourceRuntimeId: runtime.id,
-            sourceLabel,
-            syncedAt: new Date().toISOString(),
-        };
-        await writeMirrorStatus(this.statusPath, this.lastStatus);
-        this.logger.info('auth.mirror.synced', { sourceRuntimeId: runtime.id, name });
-        const message = `${name} has been refreshed by ${sourceLabel} and synchronized to the other Codex homes.`;
-        await Promise.allSettled(this.runtimes.map((target) => target.notify?.(message)));
-        return true;
     }
     async validateRuntimeCandidate(runtime, name, record) {
         if (!runtime.validate) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@foxden-app/foxclaw",
-  "version": "0.4.8",
+  "version": "0.4.9",
   "description": "Foxden local execution claw for controlling Codex from trusted chat interfaces.",
   "type": "module",
   "main": "dist/main.js",