@foxden-app/foxclaw 0.5.20 → 0.5.22

package/dist/controller/controller.js

@@ -19,6 +19,7 @@ import { diffObservedTurn, findLatestTurn, findLiveTurn } from './observer.js';
 import { applySessionLog, bootstrapSessionLog, splitJsonlChunk, } from './session_observer.js';
 import { renderActiveTurnStatus } from './status.js';
 import { writeRuntimeStatus } from '../runtime.js';
+const AUTH_DELETE_REASON_NEEDS_REPAIR = 'needs_repair';
 class UserFacingError extends Error {
 }
 const OBSERVED_THREAD_POLL_MS = 1500;
@@ -432,6 +433,7 @@ export class BridgeSessionCore {
                     t(locale, 'status_pending_user_inputs', { value: this.store.countPendingUserInputs() }),
                     t(locale, 'status_queued_turns', { value: this.store.countQueuedTurnInputs(scopeId) }),
                     t(locale, 'status_active_turns', { value: this.activeTurns.size }),
+                    formatCodexAuthPoolSummary(locale, this.store.getCodexAuthPoolStats()),
                 ];
                 if (serviceStatus) {
                     lines.push('', t(locale, 'status_runtime_overview'));
@@ -755,7 +757,7 @@ export class BridgeSessionCore {
                 return;
             }
             case 'config': {
-                await this.handleConfigCommand(scopeId, locale);
+                await this.handleConfigCommand(scopeId, locale, args);
                 return;
             }
             case 'requirements': {
@@ -1053,6 +1055,11 @@ export class BridgeSessionCore {
             await this.handleSetupCallback(event, setupMatch[1], setupMatch[2], locale);
             return;
         }
+        const configMatch = /^config:auth_auto_delete:(on|off)$/.exec(event.data);
+        if (configMatch) {
+            await this.handleConfigToggleCallback(event, configMatch[1] === 'on', locale);
+            return;
+        }
         const settingsMatch = /^settings:(model|effort|access):(.+)$/.exec(event.data);
         if (settingsMatch) {
             await this.handleSettingsCallback(event, settingsMatch[1], settingsMatch[2], locale);
@@ -1383,7 +1390,8 @@ export class BridgeSessionCore {
             : threadId
                 ? this.findActiveTurnsByThreadId(threadId)
                 : [];
-        const isAuthRotationError = isCodexAuthRotationError(params);
+        const authRotationReason = classifyCodexAuthRotationError(params);
+        const isAuthRotationError = authRotationReason !== null;
         const willRetry = params?.willRetry === true;
         const active = isAuthRotationError
             ? activeTurns.find(turn => turn.authRetry !== null) ?? activeTurns.find(turn => !turn.isObserved) ?? activeTurns[0] ?? null
@@ -1396,12 +1404,13 @@ export class BridgeSessionCore {
         else if (turnId) {
             this.pendingTurnErrors.set(turnId, message);
         }
-        if (isAuthRotationError && !willRetry && active?.authRetry) {
+        if (authRotationReason && !willRetry && active?.authRetry) {
             const scopeId = active.scopeId;
             if (scopeId) {
                 this.pendingAuthRotation = {
                     scopeId,
                     reason: message,
+                    reasonKind: authRotationReason,
                     retry: cloneAuthRetryContext(active.authRetry),
                 };
             }
@@ -2931,6 +2940,19 @@ export class BridgeSessionCore {
     async getCurrentAuthLabel() {
         return (await this.listCodexAuthState()).currentLabel;
     }
+    async handleExternalCodexAuthCandidateDeleted(candidateName, reason = null) {
+        this.store.deleteCodexAuthCandidate(candidateName);
+        if (isInvalidCodexAuthDeleteReason(reason)) {
+            this.store.recordCodexAuthCandidateInvalidDelete(candidateName, reason);
+        }
+        else {
+            this.store.recordCodexAuthCandidateRemoved(candidateName, reason);
+        }
+        this.authRotationFailedTargets.delete(path.join(this.resolveAuthDir(), candidateName));
+        this.pendingTurnErrors.clear();
+        this.attachedThreads.clear();
+        await this.app.restart();
+    }
     async validateExternalCodexAuthCandidate(candidateName, rawAuth, expectedAccountId) {
         if (this.externalAuthValidationInProgress) {
             return { ok: false, reason: 'runtime is not idle' };
@@ -4761,13 +4783,13 @@ export class BridgeSessionCore {
             throw error;
         }
     }
-    async deleteCodexAuthCandidate(candidate) {
+    async deleteCodexAuthCandidate(candidate, reason = null) {
         const wasCurrent = candidate.isCurrent;
         const authDir = this.resolveAuthDir();
         const authPath = path.join(authDir, 'auth.json');
         let deletedByCoordinator = false;
         try {
-            await this.coordinator?.authCandidateDeleted?.(this.authRuntimeId(), candidate.name);
+            await this.coordinator?.authCandidateDeleted?.(this.authRuntimeId(), candidate.name, reason);
             deletedByCoordinator = Boolean(this.coordinator?.authCandidateDeleted);
         }
         catch (error) {
@@ -4784,6 +4806,12 @@ export class BridgeSessionCore {
             }
         }
         this.store.deleteCodexAuthCandidate(candidate.name);
+        if (isInvalidCodexAuthDeleteReason(reason)) {
+            this.store.recordCodexAuthCandidateInvalidDelete(candidate.name, reason);
+        }
+        else {
+            this.store.recordCodexAuthCandidateRemoved(candidate.name, reason);
+        }
         this.authRotationFailedTargets.delete(candidate.path);
         const snapshots = await this.readCodexAuthQuotaSnapshots();
         if (Object.prototype.hasOwnProperty.call(snapshots, candidate.name)) {
@@ -5092,10 +5120,58 @@ export class BridgeSessionCore {
         const features = await this.app.listExperimentalFeatures();
         await this.sendMessage(scopeId, formatFeaturesMessage(locale, features));
     }
-    async handleConfigCommand(scopeId, locale) {
+    async handleConfigCommand(scopeId, locale, args = []) {
+        const action = args[0]?.toLowerCase() ?? '';
+        if (['auth_auto_delete', 'auth-auto-delete', 'auto_delete_needs_repair', 'auto-delete-needs-repair'].includes(action)) {
+            const enabled = parseConfigBooleanArg(args[1]);
+            if (enabled === null) {
+                await this.sendMessage(scopeId, t(locale, 'config_auth_auto_delete_usage'));
+                return;
+            }
+            const update = await this.setAuthAutoDeleteNeedsRepair(enabled);
+            const binding = this.store.getBinding(scopeId);
+            const result = await this.app.readConfig(binding?.cwd ?? this.config.defaultCwd, true);
+            await this.sendMessage(scopeId, `${this.formatConfigToggleUpdate(locale, update)}\n\n${formatConfigMessage(locale, result, this.config, this.store.getCodexAuthPoolStats())}`, configKeyboard(locale, this.config));
+            return;
+        }
         const binding = this.store.getBinding(scopeId);
         const result = await this.app.readConfig(binding?.cwd ?? this.config.defaultCwd, true);
-        await this.sendMessage(scopeId, formatConfigMessage(locale, result));
+        await this.sendMessage(scopeId, formatConfigMessage(locale, result, this.config, this.store.getCodexAuthPoolStats()), configKeyboard(locale, this.config));
+    }
+    async handleConfigToggleCallback(event, enabled, locale) {
+        const update = await this.setAuthAutoDeleteNeedsRepair(enabled);
+        await this.messaging.answerCallback(event.callbackQueryId, t(locale, 'decision_recorded'));
+        const binding = this.store.getBinding(event.scopeId);
+        const result = await this.app.readConfig(binding?.cwd ?? this.config.defaultCwd, true);
+        const message = `${this.formatConfigToggleUpdate(locale, update)}\n\n${formatConfigMessage(locale, result, this.config, this.store.getCodexAuthPoolStats())}`;
+        if (event.messageId !== null) {
+            await this.editMessage(event.scopeId, event.messageId, message, configKeyboard(locale, this.config));
+        }
+        else {
+            await this.sendMessage(event.scopeId, message, configKeyboard(locale, this.config));
+        }
+    }
+    async setAuthAutoDeleteNeedsRepair(enabled) {
+        this.config.authAutoDeleteNeedsRepair = enabled;
+        const envPath = this.config.envPath;
+        if (!envPath) {
+            return { enabled, envPath: null, envUpdated: false, envError: null };
+        }
+        try {
+            await writeEnvBoolean(envPath, 'AUTH_AUTO_DELETE_NEEDS_REPAIR', enabled);
+            return { enabled, envPath, envUpdated: true, envError: null };
+        }
+        catch (error) {
+            this.logger.warn('config.env_update_failed', { key: 'AUTH_AUTO_DELETE_NEEDS_REPAIR', envPath, error: toErrorMeta(error) });
+            return { enabled, envPath, envUpdated: false, envError: formatUserError(error) };
+        }
+    }
+    formatConfigToggleUpdate(locale, update) {
+        const lines = [t(locale, 'config_auth_auto_delete_updated', { value: t(locale, update.enabled ? 'yes' : 'no') })];
+        if (update.envError) {
+            lines.push(t(locale, 'config_env_update_failed', { value: update.envPath ?? t(locale, 'unknown'), error: update.envError }));
+        }
+        return lines.join('\n');
     }
     async handleRequirementsCommand(scopeId, locale) {
         const requirements = await this.app.readConfigRequirements();
@@ -5430,7 +5506,7 @@ export class BridgeSessionCore {
             const failedTargets = rotation.retry?.failedAuthTargets ?? this.authRotationFailedTargets;
             const locale = this.localeForChat(rotation.scopeId);
             const current = (await this.listCodexAuthState()).candidates.find(candidate => candidate.isCurrent) ?? null;
-            if (current) {
+            if (current && rotation.reasonKind === 'auth_invalid') {
                 const recoveredCurrent = await this.recoverCodexAuthCandidate(current.name);
                 if (recoveredCurrent) {
                     await this.sendMessage(rotation.scopeId, t(locale, 'auth_auto_recovered_current', {
@@ -5447,21 +5523,29 @@ export class BridgeSessionCore {
                     }
                     return false;
                 }
-                this.markCodexAuthCandidateNeedsRepair(current.name);
+                const disposition = await this.markCodexAuthCandidateNeedsRepair(current.name);
+                if (disposition.deleted) {
+                    await this.sendMessage(rotation.scopeId, formatCodexAuthPoolSummary(locale, this.store.getCodexAuthPoolStats()));
+                }
             }
             const selection = await this.selectNextCodexAuthCandidate(failedTargets);
             if (!selection) {
-                await this.sendMessage(rotation.scopeId, t(locale, 'auth_auto_no_candidate', {
+                await this.sendMessage(rotation.scopeId, t(locale, rotation.reasonKind === 'quota_limited' ? 'auth_quota_no_candidate' : 'auth_auto_no_candidate', {
                     error: formatShortStatusError(rotation.reason),
                 }));
                 return false;
             }
             const { candidate, fromLabel, toLabel } = selection;
-            await this.sendMessage(rotation.scopeId, t(locale, 'auth_auto_switching', {
-                ...this.codexAuthSwitchParams(locale, fromLabel, toLabel),
-                error: formatShortStatusError(rotation.reason),
-            }));
-            const outcome = await this.switchCodexAuthAndRestart(rotation.scopeId, locale, candidate, true);
+            const switchingKey = rotation.reasonKind === 'quota_limited'
+                ? (this.config.authAutoDeleteNeedsRepair ? 'auth_quota_switching_quiet' : 'auth_quota_switching')
+                : (this.config.authAutoDeleteNeedsRepair ? 'auth_auto_switching_quiet' : 'auth_auto_switching');
+            await this.sendMessage(rotation.scopeId, this.config.authAutoDeleteNeedsRepair
+                ? t(locale, switchingKey, { error: formatShortStatusError(rotation.reason) })
+                : t(locale, switchingKey, {
+                    ...this.codexAuthSwitchParams(locale, fromLabel, toLabel),
+                    error: formatShortStatusError(rotation.reason),
+                }));
+            const outcome = await this.switchCodexAuthAndRestart(rotation.scopeId, locale, candidate, true, true, rotation.reasonKind);
             if (!outcome.ok) {
                 return false;
             }
@@ -5548,6 +5632,7 @@ export class BridgeSessionCore {
     }
     async listCodexAuthState() {
         const state = await listCodexAuthState(this.store.listDisabledCodexAuthCandidateNames(this.authRuntimeId()), this.store.listCodexAuthCandidateStates(this.authRuntimeId()), this.resolveAuthDir());
+        this.store.recordCodexAuthPoolInventory(state.candidates.map(candidate => candidate.name));
         const snapshots = await this.readCodexAuthQuotaSnapshots();
         const candidateQuotaIdentities = await this.readCodexAuthCandidateQuotaIdentities(state.candidates);
         state.candidates.forEach((candidate) => {
@@ -5579,7 +5664,7 @@ export class BridgeSessionCore {
             to: toLabel,
         };
     }
-    async switchCodexAuthAndRestart(scopeId, locale, candidate, automatic, sendResult = true) {
+    async switchCodexAuthAndRestart(scopeId, locale, candidate, automatic, sendResult = true, automaticReason = 'auth_invalid') {
         const authDir = this.resolveAuthDir();
         const initialState = await listCodexAuthState(new Set(), new Map(), authDir);
         const authStat = await fs.lstat(initialState.authPath).catch(() => null);
@@ -5594,7 +5679,6 @@ export class BridgeSessionCore {
         await this.app.restart();
         const validation = await this.validateCurrentCodexAuthCandidate(candidate);
         if (!validation.ok) {
-            this.markCodexAuthCandidateNeedsRepair(candidate.name);
             let restoredPrevious = false;
             try {
                 await restoreCodexAuthTarget(initialState.authDir, initialState.authPath, initialState.currentTargetPath, originalRegularAuth);
@@ -5609,6 +5693,7 @@ export class BridgeSessionCore {
                     error: toErrorMeta(error),
                 });
             }
+            const repairDisposition = await this.markCodexAuthCandidateNeedsRepair(candidate.name);
             const outcome = {
                 ...result,
                 ok: false,
@@ -5616,6 +5701,8 @@ export class BridgeSessionCore {
                 recovered,
                 error: validation.error,
                 restoredPrevious,
+                autoDeleted: repairDisposition.deleted,
+                deleteRestarted: repairDisposition.restarted,
             };
             if (sendResult) {
                 const lines = this.formatAuthSwitchValidationLines(locale, outcome);
@@ -5632,11 +5719,17 @@ export class BridgeSessionCore {
             recovered,
             error: null,
             restoredPrevious: false,
+            autoDeleted: false,
+            deleteRestarted: false,
         };
         if (!sendResult) {
             return outcome;
         }
-        const lines = [t(locale, automatic ? 'auth_auto_done' : 'auth_switch_done', this.codexAuthSwitchParams(locale, result.fromLabel, result.toLabel))];
+        const doneKey = automaticReason === 'quota_limited' ? 'auth_quota_done' : 'auth_auto_done';
+        const doneQuietKey = automaticReason === 'quota_limited' ? 'auth_quota_done_quiet' : 'auth_auto_done_quiet';
+        const lines = [automatic && this.config.authAutoDeleteNeedsRepair
+                ? t(locale, doneQuietKey)
+                : t(locale, automatic ? doneKey : 'auth_switch_done', this.codexAuthSwitchParams(locale, result.fromLabel, result.toLabel))];
         if (recovered) {
             lines.push(t(locale, 'auth_recovered_newer_candidate', { value: candidate.name }));
         }
@@ -5685,12 +5778,19 @@ export class BridgeSessionCore {
         if (outcome.ok) {
             return [];
         }
+        const validationKey = outcome.autoDeleted && this.config.authAutoDeleteNeedsRepair
+            ? 'auth_switch_validation_auto_deleted_quiet'
+            : outcome.autoDeleted
+                ? 'auth_switch_validation_auto_deleted'
+                : 'auth_switch_validation_failed';
         return [
-            t(locale, 'auth_switch_validation_failed', {
+            t(locale, validationKey, {
                 value: outcome.candidateName,
                 error: outcome.error ?? t(locale, 'unknown'),
             }),
             outcome.restoredPrevious ? t(locale, 'auth_switch_validation_reverted') : '',
+            outcome.deleteRestarted ? t(locale, 'auth_delete_current_restarted') : '',
+            outcome.autoDeleted ? formatCodexAuthPoolSummary(locale, this.store.getCodexAuthPoolStats()) : '',
         ].filter(Boolean);
     }
     async recoverCodexAuthCandidate(candidateName, options = { crossNode: true }) {
@@ -5709,8 +5809,23 @@ export class BridgeSessionCore {
             return false;
         }
     }
-    markCodexAuthCandidateNeedsRepair(candidateName) {
+    async markCodexAuthCandidateNeedsRepair(candidateName) {
+        if (this.config.authAutoDeleteNeedsRepair) {
+            const candidate = (await this.listCodexAuthState()).candidates.find(entry => entry.name === candidateName) ?? null;
+            if (!candidate) {
+                this.store.deleteCodexAuthCandidate(candidateName);
+                this.store.recordCodexAuthCandidateInvalidDelete(candidateName, AUTH_DELETE_REASON_NEEDS_REPAIR);
+                return { deleted: true, restarted: false };
+            }
+            const restarted = await this.deleteCodexAuthCandidate(candidate, AUTH_DELETE_REASON_NEEDS_REPAIR);
+            this.logger.warn('codex.auth_candidate_auto_deleted', {
+                candidate: candidateName,
+                runtimeId: this.authRuntimeId(),
+            });
+            return { deleted: true, restarted };
+        }
         this.store.setCodexAuthCandidateState(candidateName, 'needs_repair');
+        return { deleted: false, restarted: false };
     }
     markCodexAuthCandidateActive(candidateName) {
         this.store.setCodexAuthCandidateState(candidateName, 'active');
@@ -8078,7 +8193,7 @@ function formatFeaturesMessage(locale, features) {
     }
     return lines.join('\n');
 }
-function formatConfigMessage(locale, result) {
+function formatConfigMessage(locale, result, appConfig, authPoolStats) {
     const config = result.config && typeof result.config === 'object' ? result.config : {};
     const layers = Array.isArray(result.layers) ? result.layers : [];
     const keys = ['model', 'model_provider', 'approval_policy', 'sandbox_mode', 'web_search', 'service_tier', 'profile', 'review_model'];
@@ -8088,8 +8203,62 @@ function formatConfigMessage(locale, result) {
         lines.push(`${key}: ${value === null || value === undefined ? '-' : formatConfigValue(value)}`);
     }
     lines.push(t(locale, 'config_layers', { count: layers.length }));
+    lines.push('');
+    lines.push(t(locale, 'config_foxclaw_title'));
+    lines.push(t(locale, 'config_auth_auto_delete_needs_repair', {
+        value: t(locale, appConfig.authAutoDeleteNeedsRepair ? 'yes' : 'no'),
+    }));
+    lines.push(`AUTH_AUTO_DELETE_NEEDS_REPAIR=${appConfig.authAutoDeleteNeedsRepair ? 'true' : 'false'}`);
+    lines.push(formatCodexAuthPoolSummary(locale, authPoolStats));
     return lines.join('\n');
 }
+function formatCodexAuthPoolSummary(locale, stats) {
+    return t(locale, 'auth_pool_summary', {
+        total: stats.totalSeen,
+        alive: stats.alive,
+        deleted: stats.deletedInvalid,
+    });
+}
+function isInvalidCodexAuthDeleteReason(reason) {
+    return reason === AUTH_DELETE_REASON_NEEDS_REPAIR;
+}
+function configKeyboard(locale, appConfig) {
+    const enabled = appConfig.authAutoDeleteNeedsRepair;
+    return [[{
+                text: t(locale, enabled ? 'button_config_auth_auto_delete_off' : 'button_config_auth_auto_delete_on'),
+                callback_data: `config:auth_auto_delete:${enabled ? 'off' : 'on'}`,
+            }]];
+}
+function parseConfigBooleanArg(value) {
+    const normalized = value?.trim().toLowerCase();
+    if (!normalized)
+        return null;
+    if (['1', 'true', 'yes', 'on', 'enable', 'enabled'].includes(normalized))
+        return true;
+    if (['0', 'false', 'no', 'off', 'disable', 'disabled'].includes(normalized))
+        return false;
+    return null;
+}
+async function writeEnvBoolean(envPath, key, enabled) {
+    await fs.mkdir(path.dirname(envPath), { recursive: true });
+    const nextLine = `${key}=${enabled ? 'true' : 'false'}`;
+    let contents = '';
+    try {
+        contents = await fs.readFile(envPath, 'utf8');
+    }
+    catch {
+        await fs.writeFile(envPath, `${nextLine}\n`, { encoding: 'utf8', mode: 0o600 });
+        return;
+    }
+    const pattern = new RegExp(`(^|\\n)[ \\t#]*${escapeRegExp(key)}\\s*=.*(?=\\r?\\n|$)`);
+    const nextContents = pattern.test(contents)
+        ? contents.replace(pattern, (_match, prefix) => `${prefix}${nextLine}`)
+        : `${contents}${contents.endsWith('\n') || contents.length === 0 ? '' : '\n'}${nextLine}\n`;
+    await fs.writeFile(envPath, nextContents, { encoding: 'utf8', mode: 0o600 });
+}
+function escapeRegExp(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
 function formatRequirementsMessage(locale, requirements) {
     const lines = [t(locale, 'requirements_title')];
     if (!requirements) {
@@ -9175,16 +9344,36 @@ function cloneAuthRetryContext(context) {
         failedAuthTargets: new Set(context.failedAuthTargets),
     };
 }
-function isCodexAuthRotationError(params) {
-    if (isChatGptBackendAccessBlocked(collectCodexErrorText(params))) {
-        return false;
+function classifyCodexAuthRotationError(params) {
+    const collected = collectCodexErrorText(params);
+    if (isChatGptBackendAccessBlocked(collected)) {
+        return null;
     }
     const code = stringOrNull(params?.error?.codexErrorInfo) ?? stringOrNull(params?.error?.code);
-    if (code && /usageLimitExceeded|auth|unauthorized|forbidden|login/i.test(code)) {
-        return true;
-    }
     const message = stringOrNull(params?.error?.message) ?? '';
-    return /(usage limit|rate limit|not authenticated|unauthorized|forbidden|sign in|log in|login|auth)/i.test(message);
+    const text = `${code ?? ''}\n${message}\n${collected}`;
+    if (isCodexQuotaLimitError(text)) {
+        return 'quota_limited';
+    }
+    if (code && /auth|unauthorized|forbidden|login/i.test(code)) {
+        return 'auth_invalid';
+    }
+    return /(not authenticated|unauthorized|forbidden|sign in|log in|login|auth)/i.test(message)
+        ? 'auth_invalid'
+        : null;
+}
+function isCodexQuotaLimitError(text) {
+    return /usageLimitExceeded/i.test(text)
+        || /you['’]?ve hit your usage limit/i.test(text)
+        || /\busage limit(?:s)?\b/i.test(text)
+        || /\brate limit(?:ed|s)?\b/i.test(text)
+        || /\btoo many requests\b/i.test(text)
+        || /\binsufficient[_\s-]?quota\b/i.test(text)
+        || /\bquota exceeded\b/i.test(text)
+        || /\bbilling hard limit\b/i.test(text)
+        || /\bcredits? exhausted\b/i.test(text)
+        || /\bout of credits?\b/i.test(text)
+        || /\bcredits? limit\b/i.test(text);
 }
 function formatCodexNotificationError(params) {
     const collected = collectCodexErrorText(params);

package/dist/i18n.d.ts

@@ -187,6 +187,8 @@ declare const MESSAGES: {
         readonly auth_repair_reverted: "Restored previous auth. The candidate still needs repair.";
         readonly auth_candidate_deleted: "Deleted auth candidate: {value}";
         readonly auth_candidate_deleted_short: "Auth deleted";
+        readonly auth_candidate_auto_deleted: "Auto-deleted unrecoverable auth candidate: {value}";
+        readonly auth_pool_summary: "Auth pool: total seen {total}, alive {alive}, invalid-deleted {deleted}.";
         readonly auth_delete_current_restarted: "The deleted candidate was current, so Codex app-server was restarted without it.";
         readonly auth_no_candidates: "No auth candidates found. Expected files like auth.json_personal in the auth dir.";
         readonly auth_choice_expired: "This auth list is no longer active";
@@ -195,6 +197,8 @@ declare const MESSAGES: {
         readonly auth_switching: "Switching Codex auth: {from} -> {to}...";
         readonly auth_switch_done: "Codex auth switched: {from} -> {to}.";
         readonly auth_switch_validation_failed: "Selected auth failed validation: {error}. Marked {value} for login repair.";
+        readonly auth_switch_validation_auto_deleted: "Selected auth failed validation: {error}. Auto-deleted {value}.";
+        readonly auth_switch_validation_auto_deleted_quiet: "Selected auth failed validation and was auto-deleted.";
         readonly auth_switch_validation_reverted: "Restored the previous auth after the failed switch.";
         readonly auth_recovered_newer_candidate: "Recovered a newer same-account credential for {value} from another Codex home before reload.";
         readonly auth_refresh_all_confirm_short: "Review refresh all risk first.";
@@ -211,11 +215,18 @@ declare const MESSAGES: {
         readonly auth_refresh_all_skipped: "Skipped non-ChatGPT/invalid candidates: {value}";
         readonly auth_refresh_all_failed: "Failed: {value}";
         readonly auth_auto_switching: "Codex auth problem detected ({error}). Switching: {from} -> {to}...";
+        readonly auth_auto_switching_quiet: "Codex auth problem detected ({error}). Selecting another maintained candidate...";
         readonly auth_auto_recovered_current: "Codex auth problem detected ({error}). Recovered a newer same-account credential for {value} and restarted Codex app-server.";
         readonly auth_auto_done: "Auto-switched Codex auth: {from} -> {to}.";
+        readonly auth_auto_done_quiet: "Codex auth problem handled with another maintained candidate.";
+        readonly auth_quota_switching: "Codex usage limit detected ({error}). Switching: {from} -> {to}...";
+        readonly auth_quota_switching_quiet: "Codex usage limit detected ({error}). Selecting another maintained candidate...";
+        readonly auth_quota_done: "Switched Codex auth after usage limit: {from} -> {to}.";
+        readonly auth_quota_done_quiet: "Codex usage limit handled with another maintained candidate.";
         readonly auth_auto_retrying: "Retrying the same request with the new auth...";
         readonly auth_auto_retry_thread_missing: "Auth was switched, but the original thread is no longer available ({threadId}). Retry was stopped to avoid creating duplicate sessions.";
         readonly auth_auto_no_candidate: "Codex auth problem detected ({error}), but no unused auth candidate is available.";
+        readonly auth_quota_no_candidate: "Codex usage limit detected ({error}), but no unused auth candidate is available.";
         readonly auth_add_exists: "Auth candidate already exists: {value}";
         readonly auth_add_preparing: "Preparing new Codex auth candidate {value}...";
         readonly auth_add_started: "New auth login started for {value}.";
@@ -263,6 +274,8 @@ declare const MESSAGES: {
         readonly button_auth_filter_all: "All";
         readonly button_auth_filter_enabled: "Enabled";
         readonly button_auth_filter_attention: "Attention";
+        readonly button_config_auth_auto_delete_on: "Auto-delete on";
+        readonly button_config_auth_auto_delete_off: "Auto-delete off";
         readonly another_turn_running: "Another turn is already running. Use /interrupt, /takeover, /queue, or wait.";
         readonly working: "Working...";
         readonly usage_open: "Usage: /open <n>";
@@ -593,6 +606,11 @@ declare const MESSAGES: {
         readonly features_empty: "No features found.";
         readonly config_title: "Config summary";
         readonly config_layers: "Config layers: {count}";
+        readonly config_foxclaw_title: "FoxClaw runtime config";
+        readonly config_auth_auto_delete_needs_repair: "Auto-delete unrecoverable auth candidates: {value}";
+        readonly config_auth_auto_delete_updated: "Auto-delete unrecoverable auth candidates set to: {value}";
+        readonly config_auth_auto_delete_usage: "Usage: /config auth_auto_delete <on|off>";
+        readonly config_env_update_failed: "Runtime setting changed, but updating {value} failed: {error}";
         readonly requirements_title: "Config requirements";
         readonly requirements_empty: "No config requirements are configured.";
         readonly provider_title: "Model provider capabilities";
@@ -862,6 +880,8 @@ declare const MESSAGES: {
         readonly auth_repair_reverted: "已恢复之前的 auth。该候选仍需要修复。";
         readonly auth_candidate_deleted: "已删除 auth 候选：{value}";
         readonly auth_candidate_deleted_short: "auth 已删除";
+        readonly auth_candidate_auto_deleted: "已自动剔除无法恢复的 auth 候选：{value}";
+        readonly auth_pool_summary: "auth 池：历史 {total}，存活 {alive}，因失效剔除 {deleted}。";
         readonly auth_delete_current_restarted: "被删除的候选是当前 auth，已在删除后重启 Codex app-server。";
         readonly auth_no_candidates: "没有找到 auth 候选文件。请在 auth 目录中放置类似 auth.json_personal 的文件。";
         readonly auth_choice_expired: "这个 auth 列表已经不再有效";
@@ -870,6 +890,8 @@ declare const MESSAGES: {
         readonly auth_switching: "正在切换 Codex auth：{from} -> {to}...";
         readonly auth_switch_done: "Codex auth 已切换：{from} -> {to}。";
         readonly auth_switch_validation_failed: "选中的 auth 验证失败：{error}。已将 {value} 标记为需要登录修复。";
+        readonly auth_switch_validation_auto_deleted: "选中的 auth 验证失败：{error}。已自动剔除 {value}。";
+        readonly auth_switch_validation_auto_deleted_quiet: "选中的 auth 验证失败，已自动剔除。";
         readonly auth_switch_validation_reverted: "已在切换失败后恢复到之前的 auth。";
         readonly auth_recovered_newer_candidate: "重载前已从其他 Codex home 恢复 {value} 的同账号较新凭据。";
         readonly auth_refresh_all_confirm_short: "请先确认刷新全部风险。";
@@ -886,11 +908,18 @@ declare const MESSAGES: {
         readonly auth_refresh_all_skipped: "已跳过非 ChatGPT/无效候选：{value}";
         readonly auth_refresh_all_failed: "失败：{value}";
         readonly auth_auto_switching: "检测到 Codex auth 问题（{error}），正在切换：{from} -> {to}...";
+        readonly auth_auto_switching_quiet: "检测到 Codex auth 问题（{error}），正在选择另一个维护中的候选...";
         readonly auth_auto_recovered_current: "检测到 Codex auth 问题（{error}），已为 {value} 恢复同账号较新凭据并重启 Codex app-server。";
         readonly auth_auto_done: "已自动切换 Codex auth：{from} -> {to}。";
+        readonly auth_auto_done_quiet: "Codex auth 问题已用另一个维护中的候选处理。";
+        readonly auth_quota_switching: "检测到 Codex 额度限制（{error}），正在切换：{from} -> {to}...";
+        readonly auth_quota_switching_quiet: "检测到 Codex 额度限制（{error}），正在选择另一个维护中的候选...";
+        readonly auth_quota_done: "已因 Codex 额度限制自动切换 auth：{from} -> {to}。";
+        readonly auth_quota_done_quiet: "Codex 额度限制已用另一个维护中的候选处理。";
         readonly auth_auto_retrying: "正在用新的 auth 重试同一条请求...";
         readonly auth_auto_retry_thread_missing: "Auth 已切换，但原线程已经不可用（{threadId}）。已停止重试，避免创建重复 session。";
         readonly auth_auto_no_candidate: "检测到 Codex auth 问题（{error}），但没有可用的未失败候选 auth。";
+        readonly auth_quota_no_candidate: "检测到 Codex 额度限制（{error}），但没有可用的未失败候选 auth。";
         readonly auth_add_exists: "auth 候选已经存在：{value}";
         readonly auth_add_preparing: "正在准备新的 Codex auth 候选 {value}...";
         readonly auth_add_started: "{value} 的新 auth 登录已开始。";
@@ -938,6 +967,8 @@ declare const MESSAGES: {
         readonly button_auth_filter_all: "全部";
         readonly button_auth_filter_enabled: "已启用";
         readonly button_auth_filter_attention: "需关注";
+        readonly button_config_auth_auto_delete_on: "开启自动剔除";
+        readonly button_config_auth_auto_delete_off: "关闭自动剔除";
         readonly another_turn_running: "已经有一个回复在进行中。请先等待，或使用 /interrupt、/takeover、/queue。";
         readonly working: "处理中...";
         readonly usage_open: "用法：/open <编号>";
@@ -1268,6 +1299,11 @@ declare const MESSAGES: {
         readonly features_empty: "没有找到功能开关。";
         readonly config_title: "配置摘要";
         readonly config_layers: "配置层数：{count}";
+        readonly config_foxclaw_title: "FoxClaw 运行时配置";
+        readonly config_auth_auto_delete_needs_repair: "自动剔除无法恢复的 auth 候选：{value}";
+        readonly config_auth_auto_delete_updated: "自动剔除无法恢复的 auth 候选已设置为：{value}";
+        readonly config_auth_auto_delete_usage: "用法：/config auth_auto_delete <on|off>";
+        readonly config_env_update_failed: "运行时设置已改变，但更新 {value} 失败：{error}";
         readonly requirements_title: "配置要求";
         readonly requirements_empty: "当前没有配置要求。";
         readonly provider_title: "模型供应商能力";