@foxden-app/foxclaw 0.5.34 → 0.5.36

package/CHANGELOG.md

@@ -2,6 +2,26 @@
 
 All notable FoxClaw changes are listed here. Each release note is bilingual so GitHub Releases and the npm package are useful to both Chinese and English readers.
 
+## 0.5.36 - 2026-06-17
+
+### 中文
+- `/auth` 的 Telegram RichMessage 候选区从旧的竖线分隔文本整理为横向表格，拆出额度窗口、auth 名称、当前标记、套餐、健康状态、最近刷新、过期时间和风险提示列。
+- ChatGPT auth 候选会从 access token `exp` 读取过期时间，并以 UTC `YYYY-MM-DD HH:mmZ` 展示；拿不到过期字段时保持 `-`，原始文本 fallback 仍可展开查看。
+
+### English
+- Refined the Telegram RichMessage `/auth` candidate area from pipe-delimited text into a horizontally scrollable table with quota windows, auth name, current marker, plan, health, last refresh, expiry, and risk columns.
+- ChatGPT auth candidates now read the access token `exp` value and display expiry as UTC `YYYY-MM-DD HH:mmZ`; candidates without an expiry field show `-`, with the expandable plain-text fallback preserved.
+
+## 0.5.35 - 2026-06-17
+
+### 中文
+- `/status`、`/auth`、`/auth sync status/events/trace` 在 Telegram 上优先使用 RichMessage 展示，内部状态会自动整理成标题、表格、列表和可展开原文。
+- 保留微信和 RichMessage 失败 fallback：微信继续走原文本通道，Telegram rich 发送失败时退回原 HTML/plain 内容，不影响按钮和回调。
+
+### English
+- `/status`, `/auth`, and `/auth sync status/events/trace` now prefer RichMessage on Telegram, rendering internal diagnostics as headings, tables, lists, and expandable plain-text details.
+- Weixin and RichMessage failure fallbacks are preserved: Weixin keeps the previous text path, and Telegram falls back without breaking buttons or callbacks.
+
 ## 0.5.34 - 2026-06-17
 
 ### 中文

package/dist/controller/controller.d.ts

@@ -229,6 +229,7 @@ export declare class BridgeSessionCore {
     private sendHtmlMessage;
     private sendRichHtmlMessage;
     private sendRichMarkdownMessage;
+    private sendRichInternalMessage;
     private editMessage;
     private editHtmlMessage;
     private editRichHtmlMessage;

package/dist/controller/controller.js

@@ -3,7 +3,8 @@ import fs from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
 import { normalizeLocale, t } from '../i18n.js';
-import { chatGptAuthMetadataMatchesCandidateName, parseChatGptAuthMetadata, readChatGptAuthMetadata, } from '../auth/mirror.js';
+import { chatGptAuthMetadataMatchesCandidateName, parseChatGptAuthMetadata, readChatGptAuthRecord, readChatGptAuthMetadata, } from '../auth/mirror.js';
+import { readAccessTokenExpiresAtMs } from '../auth/cross_node_sync.js';
 import { parseCommand } from './commands.js';
 import { buildAccessSettingsKeyboard, buildModelSettingsKeyboard, buildSetupPanelKeyboard, buildThreadListKeyboard, buildThreadsKeyboard, clampEffortToModel, formatAccessPresetLabel, formatActiveTurnMessageModeLabel, formatAccessSettingsMessage, formatApprovalPolicyLabel, formatCollaborationModeLabel, formatModelSettingsMessage, formatSandboxModeLabel, formatServiceTierStatusLabel, formatSetupPanelMessage, formatThreadContextSummary, formatThreadsMessage, formatWeixinAccessCopyPaste, formatWeixinModelCopyPaste, formatWeixinThreadsCopyPaste, formatWeixinWhereNavCopyPaste, formatWhereMessage, normalizeRequestedEffort, resolveCurrentModel, resolveActiveTurnMessageMode, resolveRequestedModel, } from './presentation.js';
 import { clampServiceTierToModel, resolveFastTierForModel } from './service_tier.js';
@@ -508,7 +509,7 @@ export class BridgeSessionCore {
                 }
                 lines.push(...codexUsageLines);
                 lines.push(...codexLocalUsageLines);
-                await this.sendMessage(scopeId, lines.join('\n'));
+                await this.sendRichInternalMessage(scopeId, '/status', lines.join('\n'));
                 return;
             }
             case 'account': {
@@ -3377,6 +3378,12 @@ export class BridgeSessionCore {
     async sendRichMarkdownMessage(scopeId, text, inlineKeyboard) {
         return this.sendRichHtmlMessage(scopeId, renderTelegramMarkdownRichHtml(text), escapeTelegramHtml(text), inlineKeyboard);
     }
+    async sendRichInternalMessage(scopeId, title, text, inlineKeyboard) {
+        if (scopeId.startsWith(BRIDGE_SCOPE_WEIXIN_PREFIX)) {
+            return this.sendMessage(scopeId, text, inlineKeyboard);
+        }
+        return this.sendRichHtmlMessage(scopeId, formatRichInternalMessage(title, text), escapeTelegramHtml(text), inlineKeyboard);
+    }
     async editMessage(scopeId, messageId, text, inlineKeyboard) {
         await this.messaging.editPlain(scopeId, messageId, text, inlineKeyboard);
     }
@@ -4572,17 +4579,20 @@ export class BridgeSessionCore {
         await this.refreshCurrentCodexAuthQuota(state);
         const record = createPendingAuthChoiceList(scopeId, state.candidates, listRequest);
         this.pendingAuthChoiceLists.set(record.localId, record);
-        const messageId = await this.sendMessage(scopeId, renderAuthListMessage(locale, state, this.authDisplayBotLabel(), parseWeixinBridgeScope(scopeId) !== null, record), authChoiceKeyboard(locale, record));
+        const authListMessage = renderAuthListMessage(locale, state, this.authDisplayBotLabel(), parseWeixinBridgeScope(scopeId) !== null, record);
+        const messageId = await this.sendRichInternalMessage(scopeId, '/auth', authListMessage, authChoiceKeyboard(locale, record));
         record.messageId = messageId;
     }
     async handleAuthSyncCommand(scopeId, locale, args) {
         const action = args[0]?.toLowerCase() ?? 'status';
         if (action === 'status') {
-            await this.sendMessage(scopeId, formatAuthSyncStatus(locale, this.coordinator?.getAuthSyncStatus?.() ?? null, this.getRuntimeStatus().authProactiveRefresh ?? null));
+            const message = formatAuthSyncStatus(locale, this.coordinator?.getAuthSyncStatus?.() ?? null, this.getRuntimeStatus().authProactiveRefresh ?? null);
+            await this.sendRichInternalMessage(scopeId, '/auth sync status', message);
             return;
         }
         if (action === 'events') {
-            await this.sendMessage(scopeId, formatAuthSyncEvents(locale, this.coordinator?.getAuthSyncStatus?.() ?? null, args.slice(1).join(' ').trim() || null));
+            const message = formatAuthSyncEvents(locale, this.coordinator?.getAuthSyncStatus?.() ?? null, args.slice(1).join(' ').trim() || null);
+            await this.sendRichInternalMessage(scopeId, '/auth sync events', message);
             return;
         }
         if (action === 'trace') {
@@ -4591,7 +4601,7 @@ export class BridgeSessionCore {
                 await this.sendMessage(scopeId, t(locale, 'auth_sync_trace_missing'));
                 return;
             }
-            await this.sendMessage(scopeId, formatAuthSyncTrace(locale, this.coordinator?.getAuthSyncStatus?.() ?? null, requestId));
+            await this.sendRichInternalMessage(scopeId, '/auth sync trace', formatAuthSyncTrace(locale, this.coordinator?.getAuthSyncStatus?.() ?? null, requestId));
             return;
         }
         if (action === 'test') {
@@ -6225,19 +6235,20 @@ export class BridgeSessionCore {
     }
     async readCodexAuthCandidateQuotaIdentities(candidates) {
         const entries = await Promise.all(candidates.map(async (candidate) => {
-            const metadata = await readChatGptAuthMetadata(candidate.path);
-            const metadataMatchesName = metadata
-                ? chatGptAuthMetadataMatchesCandidateName(candidate.name, metadata)
+            const record = await readChatGptAuthRecord(candidate.path);
+            const metadataMatchesName = record
+                ? chatGptAuthMetadataMatchesCandidateName(candidate.name, record)
                 : false;
-            candidate.credentialKind = metadata && metadataMatchesName
+            candidate.credentialKind = record && metadataMatchesName
                 ? 'chatgpt'
                 : await isCodexApiKeyAuthCandidate(candidate.path)
                     ? 'api-key'
                     : 'invalid';
-            candidate.credentialLastRefreshMs = metadata && metadataMatchesName ? metadata.lastRefreshMs : null;
-            return [candidate.name, metadata && metadataMatchesName ? {
-                    accountId: metadata.accountId,
-                    quotaIdentityId: metadata.quotaIdentityId,
+            candidate.credentialLastRefreshMs = record && metadataMatchesName ? record.lastRefreshMs : null;
+            candidate.credentialExpiresAtMs = record && metadataMatchesName ? readAccessTokenExpiresAtMs(record.raw) : null;
+            return [candidate.name, record && metadataMatchesName ? {
+                    accountId: record.accountId,
+                    quotaIdentityId: record.quotaIdentityId,
                 } : null];
         }));
         const quotaIdentities = new Map();
@@ -8440,6 +8451,183 @@ function formatRichDemoFallbackMessage(locale) {
         telegramPreCode('sendRichMessage({ rich_message: { html } })', 'typescript'),
     ].join('\n');
 }
+function formatRichInternalMessage(title, text) {
+    const sections = splitRichInternalSections(text);
+    const body = sections.map(formatRichInternalSection).filter(Boolean).join('\n');
+    return [
+        `<h3>${escapeTelegramHtml(title)}</h3>`,
+        body || `<p>${escapeTelegramHtml(text)}</p>`,
+        telegramDetails('Plain text', telegramPreCode(text, 'text')),
+        '<footer>FoxClaw · RichMessage</footer>',
+    ].join('\n');
+}
+function splitRichInternalSections(text) {
+    const sections = [];
+    let current = [];
+    for (const rawLine of text.split('\n')) {
+        const line = rawLine.trimEnd();
+        if (!line.trim()) {
+            if (current.length > 0) {
+                sections.push(current);
+                current = [];
+            }
+            continue;
+        }
+        current.push(line);
+    }
+    if (current.length > 0) {
+        sections.push(current);
+    }
+    return sections;
+}
+function formatRichInternalSection(lines) {
+    const candidateRows = lines
+        .map(parseRichAuthCandidateRow)
+        .filter((row) => row !== null);
+    if (candidateRows.length > 0) {
+        const nonCandidateLines = lines.filter(line => parseRichAuthCandidateRow(line) === null);
+        return [
+            nonCandidateLines.length > 0 ? formatRichInternalSectionWithoutCandidates(nonCandidateLines) : '',
+            formatRichAuthCandidateTable(candidateRows),
+        ].filter(Boolean).join('\n');
+    }
+    return formatRichInternalSectionWithoutCandidates(lines);
+}
+function formatRichInternalSectionWithoutCandidates(lines) {
+    const rows = lines
+        .map(parseRichInternalKeyValue)
+        .filter((row) => row !== null);
+    if (rows.length >= Math.max(2, Math.floor(lines.length * 0.6))) {
+        return [
+            '<table bordered striped>',
+            ...rows.map(([key, value]) => (`<tr><td>${escapeTelegramHtml(key)}</td><td>${formatRichInternalValue(value)}</td></tr>`)),
+            '</table>',
+        ].join('\n');
+    }
+    return [
+        '<ul>',
+        ...lines.map(line => `<li>${formatRichInternalValue(line.replace(/^\s*[-*]\s+/, '').replace(/^\s*\d+[.)]\s+/, ''))}</li>`),
+        '</ul>',
+    ].join('\n');
+}
+function parseRichAuthCandidateRow(line) {
+    const match = line.match(/^\s*(\d+)\.\s+(.+)$/);
+    if (!match) {
+        return null;
+    }
+    let body = match[2].trim();
+    let status = '';
+    const statusMatch = body.match(/^(.*?)\s+(\[[^\]]+\])$/);
+    if (statusMatch) {
+        body = statusMatch[1].trim();
+        status = statusMatch[2].replace(/^\[|\]$/g, '');
+    }
+    const current = body.endsWith(' *');
+    if (current) {
+        body = body.slice(0, -2).trimEnd();
+    }
+    const parts = body.split('|');
+    const name = parts.pop()?.trim() ?? '';
+    if (!name) {
+        return null;
+    }
+    const quotas = parts.map(formatRichAuthQuotaCell);
+    const statusParts = splitRichAuthStatus(status);
+    return {
+        index: match[1],
+        quotaA: quotas[0] ?? '-',
+        quotaB: quotas[1] ?? '-',
+        name,
+        current,
+        ...statusParts,
+    };
+}
+function formatRichAuthCandidateTable(rows) {
+    return [
+        '<table bordered striped>',
+        '<tr><th>#</th><th>Quota A</th><th>Quota B</th><th>Auth</th><th>Current</th><th>Plan</th><th>Health</th><th>Last refresh</th><th>Expiry</th><th>Risk</th></tr>',
+        ...rows.map(row => [
+            '<tr>',
+            `<td>${escapeTelegramHtml(row.index)}</td>`,
+            `<td>${escapeTelegramHtml(row.quotaA)}</td>`,
+            `<td>${escapeTelegramHtml(row.quotaB)}</td>`,
+            `<td>${escapeTelegramHtml(row.name)}</td>`,
+            `<td>${row.current ? 'yes' : '-'}</td>`,
+            `<td>${escapeTelegramHtml(row.plan)}</td>`,
+            `<td>${escapeTelegramHtml(row.health)}</td>`,
+            `<td>${escapeTelegramHtml(row.refresh)}</td>`,
+            `<td>${escapeTelegramHtml(row.expiry)}</td>`,
+            `<td>${escapeTelegramHtml(row.risk)}</td>`,
+            '</tr>',
+        ].join('')),
+        '</table>',
+    ].join('\n');
+}
+function splitRichAuthStatus(status) {
+    const parts = status.split(' · ').map(part => part.trim()).filter(Boolean);
+    const refreshIndex = parts.findIndex(part => /^(refreshed|刷新于)\b/i.test(part));
+    const refresh = refreshIndex >= 0 ? parts.splice(refreshIndex, 1)[0] : '-';
+    const expiryIndex = parts.findIndex(part => /^(expires|过期于)\b/i.test(part));
+    const expiry = expiryIndex >= 0 ? parts.splice(expiryIndex, 1)[0] : '-';
+    const plan = parts.length > 1 ? parts.shift() : '-';
+    const health = parts.shift() ?? '-';
+    return {
+        plan,
+        health,
+        refresh,
+        expiry,
+        risk: formatRichAuthRisk(health),
+    };
+}
+function formatRichAuthRisk(health) {
+    if (/not recently refreshed|长期未刷新/i.test(health)) {
+        return `stale >${CODEX_AUTH_STALE_CREDENTIAL_DAYS}d`;
+    }
+    if (/needs login repair|需要登录修复/i.test(health)) {
+        return 'repair';
+    }
+    if (/quota exhausted|额度耗尽/i.test(health)) {
+        return 'quota exhausted';
+    }
+    if (/invalid|无效/i.test(health)) {
+        return 'invalid';
+    }
+    if (/\blow\b|偏低|低/i.test(health)) {
+        return 'low quota';
+    }
+    if (/unknown|未知/i.test(health)) {
+        return 'unknown';
+    }
+    return '-';
+}
+function formatRichAuthQuotaCell(value) {
+    const trimmed = value.trim();
+    if (!trimmed || trimmed === '--' || trimmed === '—') {
+        return '-';
+    }
+    const [windowLabel, percent] = trimmed.split(':');
+    if (!windowLabel || percent === undefined) {
+        return trimmed;
+    }
+    return `${windowLabel} ${percent}%`;
+}
+function parseRichInternalKeyValue(line) {
+    const separator = line.includes('：') ? '：' : ':';
+    const index = line.indexOf(separator);
+    if (index <= 0) {
+        return null;
+    }
+    const key = line.slice(0, index).trim();
+    const value = line.slice(index + separator.length).trim();
+    if (!key || !value || key.length > 80) {
+        return null;
+    }
+    return [key, value];
+}
+function formatRichInternalValue(value) {
+    const escaped = escapeTelegramHtml(value);
+    return escaped.replace(/`([^`]+)`/g, '<code>$1</code>');
+}
 function clipRichMessageText(value, limit) {
     if (value.length <= limit) {
         return value;
@@ -9197,6 +9385,7 @@ async function listCodexAuthState(disabledNames = new Set(), candidateStates = n
             mtimeMs: stat.mtimeMs,
             credentialKind: 'invalid',
             credentialLastRefreshMs: null,
+            credentialExpiresAtMs: null,
             quota: null,
         });
     }
@@ -9541,6 +9730,11 @@ function formatCodexAuthCandidateStatus(locale, candidate) {
             value: formatCompactAge(locale, Date.now() - candidate.credentialLastRefreshMs),
         }));
     }
+    if (candidate.credentialExpiresAtMs !== null) {
+        details.push(t(locale, 'auth_candidate_expires_at', {
+            value: formatUtcDateTime(candidate.credentialExpiresAtMs),
+        }));
+    }
     return `[${details.join(' · ')}]`;
 }
 function formatCodexAuthFilter(locale, filter) {
@@ -10387,6 +10581,12 @@ function formatCompactAge(locale, ageMs) {
     const roundedMinutes = Math.floor(minutes);
     return locale === 'zh' ? `${roundedMinutes}分钟前` : `${roundedMinutes}m ago`;
 }
+function formatUtcDateTime(timestampMs) {
+    if (!Number.isFinite(timestampMs)) {
+        return '-';
+    }
+    return `${new Date(timestampMs).toISOString().slice(0, 16).replace('T', ' ')}Z`;
+}
 function formatUsagePercent(value) {
     if (!Number.isFinite(value)) {
         return '?';

package/dist/i18n.d.ts

@@ -173,6 +173,7 @@ declare const MESSAGES: {
         readonly 'auth_candidate_health_api-key': "API key";
         readonly auth_candidate_health_invalid: "invalid auth file";
         readonly auth_candidate_last_refresh: "refreshed {value}";
+        readonly auth_candidate_expires_at: "expires {value}";
         readonly auth_candidate_enabled: "Enabled auth candidate for auto-rotation: {value}";
         readonly auth_candidate_disabled: "Disabled auth candidate for auto-rotation: {value}";
         readonly auth_candidate_enabled_short: "Auth enabled";
@@ -871,6 +872,7 @@ declare const MESSAGES: {
         readonly 'auth_candidate_health_api-key': "API key";
         readonly auth_candidate_health_invalid: "auth 文件无效";
         readonly auth_candidate_last_refresh: "刷新于 {value}";
+        readonly auth_candidate_expires_at: "过期于 {value}";
         readonly auth_candidate_enabled: "已启用 auth 候选自动轮换：{value}";
         readonly auth_candidate_disabled: "已禁用 auth 候选自动轮换：{value}";
         readonly auth_candidate_enabled_short: "auth 已启用";

package/dist/i18n.js

@@ -171,6 +171,7 @@ const MESSAGES = {
         'auth_candidate_health_api-key': 'API key',
         auth_candidate_health_invalid: 'invalid auth file',
         auth_candidate_last_refresh: 'refreshed {value}',
+        auth_candidate_expires_at: 'expires {value}',
         auth_candidate_enabled: 'Enabled auth candidate for auto-rotation: {value}',
         auth_candidate_disabled: 'Disabled auth candidate for auto-rotation: {value}',
         auth_candidate_enabled_short: 'Auth enabled',
@@ -869,6 +870,7 @@ const MESSAGES = {
         'auth_candidate_health_api-key': 'API key',
         auth_candidate_health_invalid: 'auth 文件无效',
         auth_candidate_last_refresh: '刷新于 {value}',
+        auth_candidate_expires_at: '过期于 {value}',
         auth_candidate_enabled: '已启用 auth 候选自动轮换：{value}',
         auth_candidate_disabled: '已禁用 auth 候选自动轮换：{value}',
         auth_candidate_enabled_short: 'auth 已启用',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@foxden-app/foxclaw",
-  "version": "0.5.34",
+  "version": "0.5.36",
   "description": "Foxden local execution claw for controlling Codex from trusted chat interfaces.",
   "type": "module",
   "main": "dist/main.js",