@foxden-app/foxclaw 0.5.22 → 0.5.23

package/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 All notable FoxClaw changes are listed here. Each release note is bilingual so GitHub Releases and the npm package are useful to both Chinese and English readers.
 
+## 0.5.23 - 2026-06-09
+
+### 中文
+- 补齐切换后验证路径：如果目标候选在验证 rate-limit usage 时返回 usage/rate/quota/billing/credits limit，FoxClaw 会恢复到原 auth，但不会把目标候选标记为 `?`，也不会触发自动剔除。
+- 这让额度耗尽在自动轮换、手动切换和验证失败提示里都保持同一语义：它只是暂时没额度，不是凭据失效。
+
+### English
+- Completed the post-switch validation path: if the selected candidate returns a usage/rate/quota/billing/credits limit while validating rate-limit usage, FoxClaw restores the previous auth but does not mark the selected candidate `?` or auto-delete it.
+- Quota exhaustion now has the same meaning across automatic rotation, manual switching, and validation failure messages: temporarily out of quota, not an invalid credential.
+
 ## 0.5.22 - 2026-06-09
 
 ### 中文

package/dist/controller/controller.js

@@ -5693,13 +5693,19 @@ export class BridgeSessionCore {
                     error: toErrorMeta(error),
                 });
             }
-            const repairDisposition = await this.markCodexAuthCandidateNeedsRepair(candidate.name);
+            const validationFailureKind = isCodexQuotaLimitError(validation.error)
+                ? 'quota_limited'
+                : 'auth_invalid';
+            const repairDisposition = validationFailureKind === 'auth_invalid'
+                ? await this.markCodexAuthCandidateNeedsRepair(candidate.name)
+                : { deleted: false, restarted: false };
             const outcome = {
                 ...result,
                 ok: false,
                 candidateName: candidate.name,
                 recovered,
                 error: validation.error,
+                validationFailureKind,
                 restoredPrevious,
                 autoDeleted: repairDisposition.deleted,
                 deleteRestarted: repairDisposition.restarted,
@@ -5718,6 +5724,7 @@ export class BridgeSessionCore {
             candidateName: candidate.name,
             recovered,
             error: null,
+            validationFailureKind: null,
             restoredPrevious: false,
             autoDeleted: false,
             deleteRestarted: false,
@@ -5778,11 +5785,13 @@ export class BridgeSessionCore {
         if (outcome.ok) {
             return [];
         }
-        const validationKey = outcome.autoDeleted && this.config.authAutoDeleteNeedsRepair
-            ? 'auth_switch_validation_auto_deleted_quiet'
-            : outcome.autoDeleted
-                ? 'auth_switch_validation_auto_deleted'
-                : 'auth_switch_validation_failed';
+        const validationKey = outcome.validationFailureKind === 'quota_limited'
+            ? 'auth_switch_validation_quota_limited'
+            : outcome.autoDeleted && this.config.authAutoDeleteNeedsRepair
+                ? 'auth_switch_validation_auto_deleted_quiet'
+                : outcome.autoDeleted
+                    ? 'auth_switch_validation_auto_deleted'
+                    : 'auth_switch_validation_failed';
         return [
             t(locale, validationKey, {
                 value: outcome.candidateName,

package/dist/i18n.d.ts

@@ -199,6 +199,7 @@ declare const MESSAGES: {
         readonly auth_switch_validation_failed: "Selected auth failed validation: {error}. Marked {value} for login repair.";
         readonly auth_switch_validation_auto_deleted: "Selected auth failed validation: {error}. Auto-deleted {value}.";
         readonly auth_switch_validation_auto_deleted_quiet: "Selected auth failed validation and was auto-deleted.";
+        readonly auth_switch_validation_quota_limited: "Selected auth hit a Codex usage limit: {error}. It was not marked invalid.";
         readonly auth_switch_validation_reverted: "Restored the previous auth after the failed switch.";
         readonly auth_recovered_newer_candidate: "Recovered a newer same-account credential for {value} from another Codex home before reload.";
         readonly auth_refresh_all_confirm_short: "Review refresh all risk first.";
@@ -892,6 +893,7 @@ declare const MESSAGES: {
         readonly auth_switch_validation_failed: "选中的 auth 验证失败：{error}。已将 {value} 标记为需要登录修复。";
         readonly auth_switch_validation_auto_deleted: "选中的 auth 验证失败：{error}。已自动剔除 {value}。";
         readonly auth_switch_validation_auto_deleted_quiet: "选中的 auth 验证失败，已自动剔除。";
+        readonly auth_switch_validation_quota_limited: "选中的 auth 已触发 Codex 额度限制：{error}。没有把它标记为失效。";
         readonly auth_switch_validation_reverted: "已在切换失败后恢复到之前的 auth。";
         readonly auth_recovered_newer_candidate: "重载前已从其他 Codex home 恢复 {value} 的同账号较新凭据。";
         readonly auth_refresh_all_confirm_short: "请先确认刷新全部风险。";

package/dist/i18n.js

@@ -197,6 +197,7 @@ const MESSAGES = {
         auth_switch_validation_failed: 'Selected auth failed validation: {error}. Marked {value} for login repair.',
         auth_switch_validation_auto_deleted: 'Selected auth failed validation: {error}. Auto-deleted {value}.',
         auth_switch_validation_auto_deleted_quiet: 'Selected auth failed validation and was auto-deleted.',
+        auth_switch_validation_quota_limited: 'Selected auth hit a Codex usage limit: {error}. It was not marked invalid.',
         auth_switch_validation_reverted: 'Restored the previous auth after the failed switch.',
         auth_recovered_newer_candidate: 'Recovered a newer same-account credential for {value} from another Codex home before reload.',
         auth_refresh_all_confirm_short: 'Review refresh all risk first.',
@@ -890,6 +891,7 @@ const MESSAGES = {
         auth_switch_validation_failed: '选中的 auth 验证失败：{error}。已将 {value} 标记为需要登录修复。',
         auth_switch_validation_auto_deleted: '选中的 auth 验证失败：{error}。已自动剔除 {value}。',
         auth_switch_validation_auto_deleted_quiet: '选中的 auth 验证失败，已自动剔除。',
+        auth_switch_validation_quota_limited: '选中的 auth 已触发 Codex 额度限制：{error}。没有把它标记为失效。',
         auth_switch_validation_reverted: '已在切换失败后恢复到之前的 auth。',
         auth_recovered_newer_candidate: '重载前已从其他 Codex home 恢复 {value} 的同账号较新凭据。',
         auth_refresh_all_confirm_short: '请先确认刷新全部风险。',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@foxden-app/foxclaw",
-  "version": "0.5.22",
+  "version": "0.5.23",
   "description": "Foxden local execution claw for controlling Codex from trusted chat interfaces.",
   "type": "module",
   "main": "dist/main.js",