@foxden-app/foxclaw 0.5.20 → 0.5.21

package/dist/controller/controller.js

@@ -19,6 +19,7 @@ import { diffObservedTurn, findLatestTurn, findLiveTurn } from './observer.js';
 import { applySessionLog, bootstrapSessionLog, splitJsonlChunk, } from './session_observer.js';
 import { renderActiveTurnStatus } from './status.js';
 import { writeRuntimeStatus } from '../runtime.js';
+const AUTH_DELETE_REASON_NEEDS_REPAIR = 'needs_repair';
 class UserFacingError extends Error {
 }
 const OBSERVED_THREAD_POLL_MS = 1500;
@@ -432,6 +433,7 @@ export class BridgeSessionCore {
                     t(locale, 'status_pending_user_inputs', { value: this.store.countPendingUserInputs() }),
                     t(locale, 'status_queued_turns', { value: this.store.countQueuedTurnInputs(scopeId) }),
                     t(locale, 'status_active_turns', { value: this.activeTurns.size }),
+                    formatCodexAuthPoolSummary(locale, this.store.getCodexAuthPoolStats()),
                 ];
                 if (serviceStatus) {
                     lines.push('', t(locale, 'status_runtime_overview'));
@@ -755,7 +757,7 @@ export class BridgeSessionCore {
                 return;
             }
             case 'config': {
-                await this.handleConfigCommand(scopeId, locale);
+                await this.handleConfigCommand(scopeId, locale, args);
                 return;
             }
             case 'requirements': {
@@ -1053,6 +1055,11 @@ export class BridgeSessionCore {
             await this.handleSetupCallback(event, setupMatch[1], setupMatch[2], locale);
             return;
         }
+        const configMatch = /^config:auth_auto_delete:(on|off)$/.exec(event.data);
+        if (configMatch) {
+            await this.handleConfigToggleCallback(event, configMatch[1] === 'on', locale);
+            return;
+        }
         const settingsMatch = /^settings:(model|effort|access):(.+)$/.exec(event.data);
         if (settingsMatch) {
             await this.handleSettingsCallback(event, settingsMatch[1], settingsMatch[2], locale);
@@ -2931,6 +2938,19 @@ export class BridgeSessionCore {
     async getCurrentAuthLabel() {
         return (await this.listCodexAuthState()).currentLabel;
     }
+    async handleExternalCodexAuthCandidateDeleted(candidateName, reason = null) {
+        this.store.deleteCodexAuthCandidate(candidateName);
+        if (isInvalidCodexAuthDeleteReason(reason)) {
+            this.store.recordCodexAuthCandidateInvalidDelete(candidateName, reason);
+        }
+        else {
+            this.store.recordCodexAuthCandidateRemoved(candidateName, reason);
+        }
+        this.authRotationFailedTargets.delete(path.join(this.resolveAuthDir(), candidateName));
+        this.pendingTurnErrors.clear();
+        this.attachedThreads.clear();
+        await this.app.restart();
+    }
     async validateExternalCodexAuthCandidate(candidateName, rawAuth, expectedAccountId) {
         if (this.externalAuthValidationInProgress) {
             return { ok: false, reason: 'runtime is not idle' };
@@ -4761,13 +4781,13 @@ export class BridgeSessionCore {
             throw error;
         }
     }
-    async deleteCodexAuthCandidate(candidate) {
+    async deleteCodexAuthCandidate(candidate, reason = null) {
         const wasCurrent = candidate.isCurrent;
         const authDir = this.resolveAuthDir();
         const authPath = path.join(authDir, 'auth.json');
         let deletedByCoordinator = false;
         try {
-            await this.coordinator?.authCandidateDeleted?.(this.authRuntimeId(), candidate.name);
+            await this.coordinator?.authCandidateDeleted?.(this.authRuntimeId(), candidate.name, reason);
             deletedByCoordinator = Boolean(this.coordinator?.authCandidateDeleted);
         }
         catch (error) {
@@ -4784,6 +4804,12 @@ export class BridgeSessionCore {
             }
         }
         this.store.deleteCodexAuthCandidate(candidate.name);
+        if (isInvalidCodexAuthDeleteReason(reason)) {
+            this.store.recordCodexAuthCandidateInvalidDelete(candidate.name, reason);
+        }
+        else {
+            this.store.recordCodexAuthCandidateRemoved(candidate.name, reason);
+        }
         this.authRotationFailedTargets.delete(candidate.path);
         const snapshots = await this.readCodexAuthQuotaSnapshots();
         if (Object.prototype.hasOwnProperty.call(snapshots, candidate.name)) {
@@ -5092,10 +5118,58 @@ export class BridgeSessionCore {
         const features = await this.app.listExperimentalFeatures();
         await this.sendMessage(scopeId, formatFeaturesMessage(locale, features));
     }
-    async handleConfigCommand(scopeId, locale) {
+    async handleConfigCommand(scopeId, locale, args = []) {
+        const action = args[0]?.toLowerCase() ?? '';
+        if (['auth_auto_delete', 'auth-auto-delete', 'auto_delete_needs_repair', 'auto-delete-needs-repair'].includes(action)) {
+            const enabled = parseConfigBooleanArg(args[1]);
+            if (enabled === null) {
+                await this.sendMessage(scopeId, t(locale, 'config_auth_auto_delete_usage'));
+                return;
+            }
+            const update = await this.setAuthAutoDeleteNeedsRepair(enabled);
+            const binding = this.store.getBinding(scopeId);
+            const result = await this.app.readConfig(binding?.cwd ?? this.config.defaultCwd, true);
+            await this.sendMessage(scopeId, `${this.formatConfigToggleUpdate(locale, update)}\n\n${formatConfigMessage(locale, result, this.config, this.store.getCodexAuthPoolStats())}`, configKeyboard(locale, this.config));
+            return;
+        }
         const binding = this.store.getBinding(scopeId);
         const result = await this.app.readConfig(binding?.cwd ?? this.config.defaultCwd, true);
-        await this.sendMessage(scopeId, formatConfigMessage(locale, result));
+        await this.sendMessage(scopeId, formatConfigMessage(locale, result, this.config, this.store.getCodexAuthPoolStats()), configKeyboard(locale, this.config));
+    }
+    async handleConfigToggleCallback(event, enabled, locale) {
+        const update = await this.setAuthAutoDeleteNeedsRepair(enabled);
+        await this.messaging.answerCallback(event.callbackQueryId, t(locale, 'decision_recorded'));
+        const binding = this.store.getBinding(event.scopeId);
+        const result = await this.app.readConfig(binding?.cwd ?? this.config.defaultCwd, true);
+        const message = `${this.formatConfigToggleUpdate(locale, update)}\n\n${formatConfigMessage(locale, result, this.config, this.store.getCodexAuthPoolStats())}`;
+        if (event.messageId !== null) {
+            await this.editMessage(event.scopeId, event.messageId, message, configKeyboard(locale, this.config));
+        }
+        else {
+            await this.sendMessage(event.scopeId, message, configKeyboard(locale, this.config));
+        }
+    }
+    async setAuthAutoDeleteNeedsRepair(enabled) {
+        this.config.authAutoDeleteNeedsRepair = enabled;
+        const envPath = this.config.envPath;
+        if (!envPath) {
+            return { enabled, envPath: null, envUpdated: false, envError: null };
+        }
+        try {
+            await writeEnvBoolean(envPath, 'AUTH_AUTO_DELETE_NEEDS_REPAIR', enabled);
+            return { enabled, envPath, envUpdated: true, envError: null };
+        }
+        catch (error) {
+            this.logger.warn('config.env_update_failed', { key: 'AUTH_AUTO_DELETE_NEEDS_REPAIR', envPath, error: toErrorMeta(error) });
+            return { enabled, envPath, envUpdated: false, envError: formatUserError(error) };
+        }
+    }
+    formatConfigToggleUpdate(locale, update) {
+        const lines = [t(locale, 'config_auth_auto_delete_updated', { value: t(locale, update.enabled ? 'yes' : 'no') })];
+        if (update.envError) {
+            lines.push(t(locale, 'config_env_update_failed', { value: update.envPath ?? t(locale, 'unknown'), error: update.envError }));
+        }
+        return lines.join('\n');
     }
     async handleRequirementsCommand(scopeId, locale) {
         const requirements = await this.app.readConfigRequirements();
@@ -5447,7 +5521,10 @@ export class BridgeSessionCore {
                     }
                     return false;
                 }
-                this.markCodexAuthCandidateNeedsRepair(current.name);
+                const disposition = await this.markCodexAuthCandidateNeedsRepair(current.name);
+                if (disposition.deleted) {
+                    await this.sendMessage(rotation.scopeId, formatCodexAuthPoolSummary(locale, this.store.getCodexAuthPoolStats()));
+                }
             }
             const selection = await this.selectNextCodexAuthCandidate(failedTargets);
             if (!selection) {
@@ -5457,10 +5534,12 @@ export class BridgeSessionCore {
                 return false;
             }
             const { candidate, fromLabel, toLabel } = selection;
-            await this.sendMessage(rotation.scopeId, t(locale, 'auth_auto_switching', {
-                ...this.codexAuthSwitchParams(locale, fromLabel, toLabel),
-                error: formatShortStatusError(rotation.reason),
-            }));
+            await this.sendMessage(rotation.scopeId, this.config.authAutoDeleteNeedsRepair
+                ? t(locale, 'auth_auto_switching_quiet', { error: formatShortStatusError(rotation.reason) })
+                : t(locale, 'auth_auto_switching', {
+                    ...this.codexAuthSwitchParams(locale, fromLabel, toLabel),
+                    error: formatShortStatusError(rotation.reason),
+                }));
             const outcome = await this.switchCodexAuthAndRestart(rotation.scopeId, locale, candidate, true);
             if (!outcome.ok) {
                 return false;
@@ -5548,6 +5627,7 @@ export class BridgeSessionCore {
     }
     async listCodexAuthState() {
         const state = await listCodexAuthState(this.store.listDisabledCodexAuthCandidateNames(this.authRuntimeId()), this.store.listCodexAuthCandidateStates(this.authRuntimeId()), this.resolveAuthDir());
+        this.store.recordCodexAuthPoolInventory(state.candidates.map(candidate => candidate.name));
         const snapshots = await this.readCodexAuthQuotaSnapshots();
         const candidateQuotaIdentities = await this.readCodexAuthCandidateQuotaIdentities(state.candidates);
         state.candidates.forEach((candidate) => {
@@ -5594,7 +5674,6 @@ export class BridgeSessionCore {
         await this.app.restart();
         const validation = await this.validateCurrentCodexAuthCandidate(candidate);
         if (!validation.ok) {
-            this.markCodexAuthCandidateNeedsRepair(candidate.name);
             let restoredPrevious = false;
             try {
                 await restoreCodexAuthTarget(initialState.authDir, initialState.authPath, initialState.currentTargetPath, originalRegularAuth);
@@ -5609,6 +5688,7 @@ export class BridgeSessionCore {
                     error: toErrorMeta(error),
                 });
             }
+            const repairDisposition = await this.markCodexAuthCandidateNeedsRepair(candidate.name);
             const outcome = {
                 ...result,
                 ok: false,
@@ -5616,6 +5696,8 @@ export class BridgeSessionCore {
                 recovered,
                 error: validation.error,
                 restoredPrevious,
+                autoDeleted: repairDisposition.deleted,
+                deleteRestarted: repairDisposition.restarted,
             };
             if (sendResult) {
                 const lines = this.formatAuthSwitchValidationLines(locale, outcome);
@@ -5632,11 +5714,15 @@ export class BridgeSessionCore {
             recovered,
             error: null,
             restoredPrevious: false,
+            autoDeleted: false,
+            deleteRestarted: false,
         };
         if (!sendResult) {
             return outcome;
         }
-        const lines = [t(locale, automatic ? 'auth_auto_done' : 'auth_switch_done', this.codexAuthSwitchParams(locale, result.fromLabel, result.toLabel))];
+        const lines = [automatic && this.config.authAutoDeleteNeedsRepair
+                ? t(locale, 'auth_auto_done_quiet')
+                : t(locale, automatic ? 'auth_auto_done' : 'auth_switch_done', this.codexAuthSwitchParams(locale, result.fromLabel, result.toLabel))];
         if (recovered) {
             lines.push(t(locale, 'auth_recovered_newer_candidate', { value: candidate.name }));
         }
@@ -5685,12 +5771,19 @@ export class BridgeSessionCore {
         if (outcome.ok) {
             return [];
         }
+        const validationKey = outcome.autoDeleted && this.config.authAutoDeleteNeedsRepair
+            ? 'auth_switch_validation_auto_deleted_quiet'
+            : outcome.autoDeleted
+                ? 'auth_switch_validation_auto_deleted'
+                : 'auth_switch_validation_failed';
         return [
-            t(locale, 'auth_switch_validation_failed', {
+            t(locale, validationKey, {
                 value: outcome.candidateName,
                 error: outcome.error ?? t(locale, 'unknown'),
             }),
             outcome.restoredPrevious ? t(locale, 'auth_switch_validation_reverted') : '',
+            outcome.deleteRestarted ? t(locale, 'auth_delete_current_restarted') : '',
+            outcome.autoDeleted ? formatCodexAuthPoolSummary(locale, this.store.getCodexAuthPoolStats()) : '',
         ].filter(Boolean);
     }
     async recoverCodexAuthCandidate(candidateName, options = { crossNode: true }) {
@@ -5709,8 +5802,23 @@ export class BridgeSessionCore {
             return false;
         }
     }
-    markCodexAuthCandidateNeedsRepair(candidateName) {
+    async markCodexAuthCandidateNeedsRepair(candidateName) {
+        if (this.config.authAutoDeleteNeedsRepair) {
+            const candidate = (await this.listCodexAuthState()).candidates.find(entry => entry.name === candidateName) ?? null;
+            if (!candidate) {
+                this.store.deleteCodexAuthCandidate(candidateName);
+                this.store.recordCodexAuthCandidateInvalidDelete(candidateName, AUTH_DELETE_REASON_NEEDS_REPAIR);
+                return { deleted: true, restarted: false };
+            }
+            const restarted = await this.deleteCodexAuthCandidate(candidate, AUTH_DELETE_REASON_NEEDS_REPAIR);
+            this.logger.warn('codex.auth_candidate_auto_deleted', {
+                candidate: candidateName,
+                runtimeId: this.authRuntimeId(),
+            });
+            return { deleted: true, restarted };
+        }
         this.store.setCodexAuthCandidateState(candidateName, 'needs_repair');
+        return { deleted: false, restarted: false };
     }
     markCodexAuthCandidateActive(candidateName) {
         this.store.setCodexAuthCandidateState(candidateName, 'active');
@@ -8078,7 +8186,7 @@ function formatFeaturesMessage(locale, features) {
     }
     return lines.join('\n');
 }
-function formatConfigMessage(locale, result) {
+function formatConfigMessage(locale, result, appConfig, authPoolStats) {
     const config = result.config && typeof result.config === 'object' ? result.config : {};
     const layers = Array.isArray(result.layers) ? result.layers : [];
     const keys = ['model', 'model_provider', 'approval_policy', 'sandbox_mode', 'web_search', 'service_tier', 'profile', 'review_model'];
@@ -8088,8 +8196,62 @@ function formatConfigMessage(locale, result) {
         lines.push(`${key}: ${value === null || value === undefined ? '-' : formatConfigValue(value)}`);
     }
     lines.push(t(locale, 'config_layers', { count: layers.length }));
+    lines.push('');
+    lines.push(t(locale, 'config_foxclaw_title'));
+    lines.push(t(locale, 'config_auth_auto_delete_needs_repair', {
+        value: t(locale, appConfig.authAutoDeleteNeedsRepair ? 'yes' : 'no'),
+    }));
+    lines.push(`AUTH_AUTO_DELETE_NEEDS_REPAIR=${appConfig.authAutoDeleteNeedsRepair ? 'true' : 'false'}`);
+    lines.push(formatCodexAuthPoolSummary(locale, authPoolStats));
     return lines.join('\n');
 }
+function formatCodexAuthPoolSummary(locale, stats) {
+    return t(locale, 'auth_pool_summary', {
+        total: stats.totalSeen,
+        alive: stats.alive,
+        deleted: stats.deletedInvalid,
+    });
+}
+function isInvalidCodexAuthDeleteReason(reason) {
+    return reason === AUTH_DELETE_REASON_NEEDS_REPAIR;
+}
+function configKeyboard(locale, appConfig) {
+    const enabled = appConfig.authAutoDeleteNeedsRepair;
+    return [[{
+                text: t(locale, enabled ? 'button_config_auth_auto_delete_off' : 'button_config_auth_auto_delete_on'),
+                callback_data: `config:auth_auto_delete:${enabled ? 'off' : 'on'}`,
+            }]];
+}
+function parseConfigBooleanArg(value) {
+    const normalized = value?.trim().toLowerCase();
+    if (!normalized)
+        return null;
+    if (['1', 'true', 'yes', 'on', 'enable', 'enabled'].includes(normalized))
+        return true;
+    if (['0', 'false', 'no', 'off', 'disable', 'disabled'].includes(normalized))
+        return false;
+    return null;
+}
+async function writeEnvBoolean(envPath, key, enabled) {
+    await fs.mkdir(path.dirname(envPath), { recursive: true });
+    const nextLine = `${key}=${enabled ? 'true' : 'false'}`;
+    let contents = '';
+    try {
+        contents = await fs.readFile(envPath, 'utf8');
+    }
+    catch {
+        await fs.writeFile(envPath, `${nextLine}\n`, { encoding: 'utf8', mode: 0o600 });
+        return;
+    }
+    const pattern = new RegExp(`(^|\\n)[ \\t#]*${escapeRegExp(key)}\\s*=.*(?=\\r?\\n|$)`);
+    const nextContents = pattern.test(contents)
+        ? contents.replace(pattern, (_match, prefix) => `${prefix}${nextLine}`)
+        : `${contents}${contents.endsWith('\n') || contents.length === 0 ? '' : '\n'}${nextLine}\n`;
+    await fs.writeFile(envPath, nextContents, { encoding: 'utf8', mode: 0o600 });
+}
+function escapeRegExp(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
 function formatRequirementsMessage(locale, requirements) {
     const lines = [t(locale, 'requirements_title')];
     if (!requirements) {

package/dist/i18n.d.ts

@@ -187,6 +187,8 @@ declare const MESSAGES: {
         readonly auth_repair_reverted: "Restored previous auth. The candidate still needs repair.";
         readonly auth_candidate_deleted: "Deleted auth candidate: {value}";
         readonly auth_candidate_deleted_short: "Auth deleted";
+        readonly auth_candidate_auto_deleted: "Auto-deleted unrecoverable auth candidate: {value}";
+        readonly auth_pool_summary: "Auth pool: total seen {total}, alive {alive}, invalid-deleted {deleted}.";
         readonly auth_delete_current_restarted: "The deleted candidate was current, so Codex app-server was restarted without it.";
         readonly auth_no_candidates: "No auth candidates found. Expected files like auth.json_personal in the auth dir.";
         readonly auth_choice_expired: "This auth list is no longer active";
@@ -195,6 +197,8 @@ declare const MESSAGES: {
         readonly auth_switching: "Switching Codex auth: {from} -> {to}...";
         readonly auth_switch_done: "Codex auth switched: {from} -> {to}.";
         readonly auth_switch_validation_failed: "Selected auth failed validation: {error}. Marked {value} for login repair.";
+        readonly auth_switch_validation_auto_deleted: "Selected auth failed validation: {error}. Auto-deleted {value}.";
+        readonly auth_switch_validation_auto_deleted_quiet: "Selected auth failed validation and was auto-deleted.";
         readonly auth_switch_validation_reverted: "Restored the previous auth after the failed switch.";
         readonly auth_recovered_newer_candidate: "Recovered a newer same-account credential for {value} from another Codex home before reload.";
         readonly auth_refresh_all_confirm_short: "Review refresh all risk first.";
@@ -211,8 +215,10 @@ declare const MESSAGES: {
         readonly auth_refresh_all_skipped: "Skipped non-ChatGPT/invalid candidates: {value}";
         readonly auth_refresh_all_failed: "Failed: {value}";
         readonly auth_auto_switching: "Codex auth problem detected ({error}). Switching: {from} -> {to}...";
+        readonly auth_auto_switching_quiet: "Codex auth problem detected ({error}). Selecting another maintained candidate...";
         readonly auth_auto_recovered_current: "Codex auth problem detected ({error}). Recovered a newer same-account credential for {value} and restarted Codex app-server.";
         readonly auth_auto_done: "Auto-switched Codex auth: {from} -> {to}.";
+        readonly auth_auto_done_quiet: "Codex auth problem handled with another maintained candidate.";
         readonly auth_auto_retrying: "Retrying the same request with the new auth...";
         readonly auth_auto_retry_thread_missing: "Auth was switched, but the original thread is no longer available ({threadId}). Retry was stopped to avoid creating duplicate sessions.";
         readonly auth_auto_no_candidate: "Codex auth problem detected ({error}), but no unused auth candidate is available.";
@@ -263,6 +269,8 @@ declare const MESSAGES: {
         readonly button_auth_filter_all: "All";
         readonly button_auth_filter_enabled: "Enabled";
         readonly button_auth_filter_attention: "Attention";
+        readonly button_config_auth_auto_delete_on: "Auto-delete on";
+        readonly button_config_auth_auto_delete_off: "Auto-delete off";
         readonly another_turn_running: "Another turn is already running. Use /interrupt, /takeover, /queue, or wait.";
         readonly working: "Working...";
         readonly usage_open: "Usage: /open <n>";
@@ -593,6 +601,11 @@ declare const MESSAGES: {
         readonly features_empty: "No features found.";
         readonly config_title: "Config summary";
         readonly config_layers: "Config layers: {count}";
+        readonly config_foxclaw_title: "FoxClaw runtime config";
+        readonly config_auth_auto_delete_needs_repair: "Auto-delete unrecoverable auth candidates: {value}";
+        readonly config_auth_auto_delete_updated: "Auto-delete unrecoverable auth candidates set to: {value}";
+        readonly config_auth_auto_delete_usage: "Usage: /config auth_auto_delete <on|off>";
+        readonly config_env_update_failed: "Runtime setting changed, but updating {value} failed: {error}";
         readonly requirements_title: "Config requirements";
         readonly requirements_empty: "No config requirements are configured.";
         readonly provider_title: "Model provider capabilities";
@@ -862,6 +875,8 @@ declare const MESSAGES: {
         readonly auth_repair_reverted: "已恢复之前的 auth。该候选仍需要修复。";
         readonly auth_candidate_deleted: "已删除 auth 候选：{value}";
         readonly auth_candidate_deleted_short: "auth 已删除";
+        readonly auth_candidate_auto_deleted: "已自动剔除无法恢复的 auth 候选：{value}";
+        readonly auth_pool_summary: "auth 池：历史 {total}，存活 {alive}，因失效剔除 {deleted}。";
         readonly auth_delete_current_restarted: "被删除的候选是当前 auth，已在删除后重启 Codex app-server。";
         readonly auth_no_candidates: "没有找到 auth 候选文件。请在 auth 目录中放置类似 auth.json_personal 的文件。";
         readonly auth_choice_expired: "这个 auth 列表已经不再有效";
@@ -870,6 +885,8 @@ declare const MESSAGES: {
         readonly auth_switching: "正在切换 Codex auth：{from} -> {to}...";
         readonly auth_switch_done: "Codex auth 已切换：{from} -> {to}。";
         readonly auth_switch_validation_failed: "选中的 auth 验证失败：{error}。已将 {value} 标记为需要登录修复。";
+        readonly auth_switch_validation_auto_deleted: "选中的 auth 验证失败：{error}。已自动剔除 {value}。";
+        readonly auth_switch_validation_auto_deleted_quiet: "选中的 auth 验证失败，已自动剔除。";
         readonly auth_switch_validation_reverted: "已在切换失败后恢复到之前的 auth。";
         readonly auth_recovered_newer_candidate: "重载前已从其他 Codex home 恢复 {value} 的同账号较新凭据。";
         readonly auth_refresh_all_confirm_short: "请先确认刷新全部风险。";
@@ -886,8 +903,10 @@ declare const MESSAGES: {
         readonly auth_refresh_all_skipped: "已跳过非 ChatGPT/无效候选：{value}";
         readonly auth_refresh_all_failed: "失败：{value}";
         readonly auth_auto_switching: "检测到 Codex auth 问题（{error}），正在切换：{from} -> {to}...";
+        readonly auth_auto_switching_quiet: "检测到 Codex auth 问题（{error}），正在选择另一个维护中的候选...";
         readonly auth_auto_recovered_current: "检测到 Codex auth 问题（{error}），已为 {value} 恢复同账号较新凭据并重启 Codex app-server。";
         readonly auth_auto_done: "已自动切换 Codex auth：{from} -> {to}。";
+        readonly auth_auto_done_quiet: "Codex auth 问题已用另一个维护中的候选处理。";
         readonly auth_auto_retrying: "正在用新的 auth 重试同一条请求...";
         readonly auth_auto_retry_thread_missing: "Auth 已切换，但原线程已经不可用（{threadId}）。已停止重试，避免创建重复 session。";
         readonly auth_auto_no_candidate: "检测到 Codex auth 问题（{error}），但没有可用的未失败候选 auth。";
@@ -938,6 +957,8 @@ declare const MESSAGES: {
         readonly button_auth_filter_all: "全部";
         readonly button_auth_filter_enabled: "已启用";
         readonly button_auth_filter_attention: "需关注";
+        readonly button_config_auth_auto_delete_on: "开启自动剔除";
+        readonly button_config_auth_auto_delete_off: "关闭自动剔除";
         readonly another_turn_running: "已经有一个回复在进行中。请先等待，或使用 /interrupt、/takeover、/queue。";
         readonly working: "处理中...";
         readonly usage_open: "用法：/open <编号>";
@@ -1268,6 +1289,11 @@ declare const MESSAGES: {
         readonly features_empty: "没有找到功能开关。";
         readonly config_title: "配置摘要";
         readonly config_layers: "配置层数：{count}";
+        readonly config_foxclaw_title: "FoxClaw 运行时配置";
+        readonly config_auth_auto_delete_needs_repair: "自动剔除无法恢复的 auth 候选：{value}";
+        readonly config_auth_auto_delete_updated: "自动剔除无法恢复的 auth 候选已设置为：{value}";
+        readonly config_auth_auto_delete_usage: "用法：/config auth_auto_delete <on|off>";
+        readonly config_env_update_failed: "运行时设置已改变，但更新 {value} 失败：{error}";
         readonly requirements_title: "配置要求";
         readonly requirements_empty: "当前没有配置要求。";
         readonly provider_title: "模型供应商能力";

package/dist/i18n.js

@@ -185,6 +185,8 @@ const MESSAGES = {
         auth_repair_reverted: 'Restored previous auth. The candidate still needs repair.',
         auth_candidate_deleted: 'Deleted auth candidate: {value}',
         auth_candidate_deleted_short: 'Auth deleted',
+        auth_candidate_auto_deleted: 'Auto-deleted unrecoverable auth candidate: {value}',
+        auth_pool_summary: 'Auth pool: total seen {total}, alive {alive}, invalid-deleted {deleted}.',
         auth_delete_current_restarted: 'The deleted candidate was current, so Codex app-server was restarted without it.',
         auth_no_candidates: 'No auth candidates found. Expected files like auth.json_personal in the auth dir.',
         auth_choice_expired: 'This auth list is no longer active',
@@ -193,6 +195,8 @@ const MESSAGES = {
         auth_switching: 'Switching Codex auth: {from} -> {to}...',
         auth_switch_done: 'Codex auth switched: {from} -> {to}.',
         auth_switch_validation_failed: 'Selected auth failed validation: {error}. Marked {value} for login repair.',
+        auth_switch_validation_auto_deleted: 'Selected auth failed validation: {error}. Auto-deleted {value}.',
+        auth_switch_validation_auto_deleted_quiet: 'Selected auth failed validation and was auto-deleted.',
         auth_switch_validation_reverted: 'Restored the previous auth after the failed switch.',
         auth_recovered_newer_candidate: 'Recovered a newer same-account credential for {value} from another Codex home before reload.',
         auth_refresh_all_confirm_short: 'Review refresh all risk first.',
@@ -209,8 +213,10 @@ const MESSAGES = {
         auth_refresh_all_skipped: 'Skipped non-ChatGPT/invalid candidates: {value}',
         auth_refresh_all_failed: 'Failed: {value}',
         auth_auto_switching: 'Codex auth problem detected ({error}). Switching: {from} -> {to}...',
+        auth_auto_switching_quiet: 'Codex auth problem detected ({error}). Selecting another maintained candidate...',
         auth_auto_recovered_current: 'Codex auth problem detected ({error}). Recovered a newer same-account credential for {value} and restarted Codex app-server.',
         auth_auto_done: 'Auto-switched Codex auth: {from} -> {to}.',
+        auth_auto_done_quiet: 'Codex auth problem handled with another maintained candidate.',
         auth_auto_retrying: 'Retrying the same request with the new auth...',
         auth_auto_retry_thread_missing: 'Auth was switched, but the original thread is no longer available ({threadId}). Retry was stopped to avoid creating duplicate sessions.',
         auth_auto_no_candidate: 'Codex auth problem detected ({error}), but no unused auth candidate is available.',
@@ -261,6 +267,8 @@ const MESSAGES = {
         button_auth_filter_all: 'All',
         button_auth_filter_enabled: 'Enabled',
         button_auth_filter_attention: 'Attention',
+        button_config_auth_auto_delete_on: 'Auto-delete on',
+        button_config_auth_auto_delete_off: 'Auto-delete off',
         another_turn_running: 'Another turn is already running. Use /interrupt, /takeover, /queue, or wait.',
         working: 'Working...',
         usage_open: 'Usage: /open <n>',
@@ -591,6 +599,11 @@ const MESSAGES = {
         features_empty: 'No features found.',
         config_title: 'Config summary',
         config_layers: 'Config layers: {count}',
+        config_foxclaw_title: 'FoxClaw runtime config',
+        config_auth_auto_delete_needs_repair: 'Auto-delete unrecoverable auth candidates: {value}',
+        config_auth_auto_delete_updated: 'Auto-delete unrecoverable auth candidates set to: {value}',
+        config_auth_auto_delete_usage: 'Usage: /config auth_auto_delete <on|off>',
+        config_env_update_failed: 'Runtime setting changed, but updating {value} failed: {error}',
         requirements_title: 'Config requirements',
         requirements_empty: 'No config requirements are configured.',
         provider_title: 'Model provider capabilities',
@@ -860,6 +873,8 @@ const MESSAGES = {
         auth_repair_reverted: '已恢复之前的 auth。该候选仍需要修复。',
         auth_candidate_deleted: '已删除 auth 候选：{value}',
         auth_candidate_deleted_short: 'auth 已删除',
+        auth_candidate_auto_deleted: '已自动剔除无法恢复的 auth 候选：{value}',
+        auth_pool_summary: 'auth 池：历史 {total}，存活 {alive}，因失效剔除 {deleted}。',
         auth_delete_current_restarted: '被删除的候选是当前 auth，已在删除后重启 Codex app-server。',
         auth_no_candidates: '没有找到 auth 候选文件。请在 auth 目录中放置类似 auth.json_personal 的文件。',
         auth_choice_expired: '这个 auth 列表已经不再有效',
@@ -868,6 +883,8 @@ const MESSAGES = {
         auth_switching: '正在切换 Codex auth：{from} -> {to}...',
         auth_switch_done: 'Codex auth 已切换：{from} -> {to}。',
         auth_switch_validation_failed: '选中的 auth 验证失败：{error}。已将 {value} 标记为需要登录修复。',
+        auth_switch_validation_auto_deleted: '选中的 auth 验证失败：{error}。已自动剔除 {value}。',
+        auth_switch_validation_auto_deleted_quiet: '选中的 auth 验证失败，已自动剔除。',
         auth_switch_validation_reverted: '已在切换失败后恢复到之前的 auth。',
         auth_recovered_newer_candidate: '重载前已从其他 Codex home 恢复 {value} 的同账号较新凭据。',
         auth_refresh_all_confirm_short: '请先确认刷新全部风险。',
@@ -884,8 +901,10 @@ const MESSAGES = {
         auth_refresh_all_skipped: '已跳过非 ChatGPT/无效候选：{value}',
         auth_refresh_all_failed: '失败：{value}',
         auth_auto_switching: '检测到 Codex auth 问题（{error}），正在切换：{from} -> {to}...',
+        auth_auto_switching_quiet: '检测到 Codex auth 问题（{error}），正在选择另一个维护中的候选...',
         auth_auto_recovered_current: '检测到 Codex auth 问题（{error}），已为 {value} 恢复同账号较新凭据并重启 Codex app-server。',
         auth_auto_done: '已自动切换 Codex auth：{from} -> {to}。',
+        auth_auto_done_quiet: 'Codex auth 问题已用另一个维护中的候选处理。',
         auth_auto_retrying: '正在用新的 auth 重试同一条请求...',
         auth_auto_retry_thread_missing: 'Auth 已切换，但原线程已经不可用（{threadId}）。已停止重试，避免创建重复 session。',
         auth_auto_no_candidate: '检测到 Codex auth 问题（{error}），但没有可用的未失败候选 auth。',
@@ -936,6 +955,8 @@ const MESSAGES = {
         button_auth_filter_all: '全部',
         button_auth_filter_enabled: '已启用',
         button_auth_filter_attention: '需关注',
+        button_config_auth_auto_delete_on: '开启自动剔除',
+        button_config_auth_auto_delete_off: '关闭自动剔除',
         another_turn_running: '已经有一个回复在进行中。请先等待，或使用 /interrupt、/takeover、/queue。',
         working: '处理中...',
         usage_open: '用法：/open <编号>',
@@ -1266,6 +1287,11 @@ const MESSAGES = {
         features_empty: '没有找到功能开关。',
         config_title: '配置摘要',
         config_layers: '配置层数：{count}',
+        config_foxclaw_title: 'FoxClaw 运行时配置',
+        config_auth_auto_delete_needs_repair: '自动剔除无法恢复的 auth 候选：{value}',
+        config_auth_auto_delete_updated: '自动剔除无法恢复的 auth 候选已设置为：{value}',
+        config_auth_auto_delete_usage: '用法：/config auth_auto_delete <on|off>',
+        config_env_update_failed: '运行时设置已改变，但更新 {value} 失败：{error}',
         requirements_title: '配置要求',
         requirements_empty: '当前没有配置要求。',
         provider_title: '模型供应商能力',