@foxden-app/foxclaw 0.5.35 → 0.5.37

package/CHANGELOG.md

@@ -2,6 +2,26 @@
 
 All notable FoxClaw changes are listed here. Each release note is bilingual so GitHub Releases and the npm package are useful to both Chinese and English readers.
 
+## 0.5.37 - 2026-06-17
+
+### 中文
+- 精简 `/auth` RichMessage 表格的 `Quota A` / `Quota B` 单元格：只显示剩余额度百分比，例如 `26%`，窗口含义交给列和后续套餐/状态信息理解。
+- 保持原始文本 fallback 和按钮文本不变，避免影响旧命令、微信复制路径和 auth 切换回调。
+
+### English
+- Simplified the `/auth` RichMessage `Quota A` / `Quota B` cells to show only the remaining percentage, such as `26%`, leaving the window context to the columns and following plan/status fields.
+- Kept the plain-text fallback and button labels unchanged so legacy commands, Weixin copy-paste flows, and auth switching callbacks remain stable.
+
+## 0.5.36 - 2026-06-17
+
+### 中文
+- `/auth` 的 Telegram RichMessage 候选区从旧的竖线分隔文本整理为横向表格，拆出额度窗口、auth 名称、当前标记、套餐、健康状态、最近刷新、过期时间和风险提示列。
+- ChatGPT auth 候选会从 access token `exp` 读取过期时间，并以 UTC `YYYY-MM-DD HH:mmZ` 展示；拿不到过期字段时保持 `-`，原始文本 fallback 仍可展开查看。
+
+### English
+- Refined the Telegram RichMessage `/auth` candidate area from pipe-delimited text into a horizontally scrollable table with quota windows, auth name, current marker, plan, health, last refresh, expiry, and risk columns.
+- ChatGPT auth candidates now read the access token `exp` value and display expiry as UTC `YYYY-MM-DD HH:mmZ`; candidates without an expiry field show `-`, with the expandable plain-text fallback preserved.
+
 ## 0.5.35 - 2026-06-17
 
 ### 中文

package/dist/controller/controller.js

@@ -3,7 +3,8 @@ import fs from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
 import { normalizeLocale, t } from '../i18n.js';
-import { chatGptAuthMetadataMatchesCandidateName, parseChatGptAuthMetadata, readChatGptAuthMetadata, } from '../auth/mirror.js';
+import { chatGptAuthMetadataMatchesCandidateName, parseChatGptAuthMetadata, readChatGptAuthRecord, readChatGptAuthMetadata, } from '../auth/mirror.js';
+import { readAccessTokenExpiresAtMs } from '../auth/cross_node_sync.js';
 import { parseCommand } from './commands.js';
 import { buildAccessSettingsKeyboard, buildModelSettingsKeyboard, buildSetupPanelKeyboard, buildThreadListKeyboard, buildThreadsKeyboard, clampEffortToModel, formatAccessPresetLabel, formatActiveTurnMessageModeLabel, formatAccessSettingsMessage, formatApprovalPolicyLabel, formatCollaborationModeLabel, formatModelSettingsMessage, formatSandboxModeLabel, formatServiceTierStatusLabel, formatSetupPanelMessage, formatThreadContextSummary, formatThreadsMessage, formatWeixinAccessCopyPaste, formatWeixinModelCopyPaste, formatWeixinThreadsCopyPaste, formatWeixinWhereNavCopyPaste, formatWhereMessage, normalizeRequestedEffort, resolveCurrentModel, resolveActiveTurnMessageMode, resolveRequestedModel, } from './presentation.js';
 import { clampServiceTierToModel, resolveFastTierForModel } from './service_tier.js';
@@ -6234,19 +6235,20 @@ export class BridgeSessionCore {
     }
     async readCodexAuthCandidateQuotaIdentities(candidates) {
         const entries = await Promise.all(candidates.map(async (candidate) => {
-            const metadata = await readChatGptAuthMetadata(candidate.path);
-            const metadataMatchesName = metadata
-                ? chatGptAuthMetadataMatchesCandidateName(candidate.name, metadata)
+            const record = await readChatGptAuthRecord(candidate.path);
+            const metadataMatchesName = record
+                ? chatGptAuthMetadataMatchesCandidateName(candidate.name, record)
                 : false;
-            candidate.credentialKind = metadata && metadataMatchesName
+            candidate.credentialKind = record && metadataMatchesName
                 ? 'chatgpt'
                 : await isCodexApiKeyAuthCandidate(candidate.path)
                     ? 'api-key'
                     : 'invalid';
-            candidate.credentialLastRefreshMs = metadata && metadataMatchesName ? metadata.lastRefreshMs : null;
-            return [candidate.name, metadata && metadataMatchesName ? {
-                    accountId: metadata.accountId,
-                    quotaIdentityId: metadata.quotaIdentityId,
+            candidate.credentialLastRefreshMs = record && metadataMatchesName ? record.lastRefreshMs : null;
+            candidate.credentialExpiresAtMs = record && metadataMatchesName ? readAccessTokenExpiresAtMs(record.raw) : null;
+            return [candidate.name, record && metadataMatchesName ? {
+                    accountId: record.accountId,
+                    quotaIdentityId: record.quotaIdentityId,
                 } : null];
         }));
         const quotaIdentities = new Map();
@@ -8479,6 +8481,19 @@ function splitRichInternalSections(text) {
     return sections;
 }
 function formatRichInternalSection(lines) {
+    const candidateRows = lines
+        .map(parseRichAuthCandidateRow)
+        .filter((row) => row !== null);
+    if (candidateRows.length > 0) {
+        const nonCandidateLines = lines.filter(line => parseRichAuthCandidateRow(line) === null);
+        return [
+            nonCandidateLines.length > 0 ? formatRichInternalSectionWithoutCandidates(nonCandidateLines) : '',
+            formatRichAuthCandidateTable(candidateRows),
+        ].filter(Boolean).join('\n');
+    }
+    return formatRichInternalSectionWithoutCandidates(lines);
+}
+function formatRichInternalSectionWithoutCandidates(lines) {
     const rows = lines
         .map(parseRichInternalKeyValue)
         .filter((row) => row !== null);
@@ -8495,6 +8510,107 @@ function formatRichInternalSection(lines) {
         '</ul>',
     ].join('\n');
 }
+function parseRichAuthCandidateRow(line) {
+    const match = line.match(/^\s*(\d+)\.\s+(.+)$/);
+    if (!match) {
+        return null;
+    }
+    let body = match[2].trim();
+    let status = '';
+    const statusMatch = body.match(/^(.*?)\s+(\[[^\]]+\])$/);
+    if (statusMatch) {
+        body = statusMatch[1].trim();
+        status = statusMatch[2].replace(/^\[|\]$/g, '');
+    }
+    const current = body.endsWith(' *');
+    if (current) {
+        body = body.slice(0, -2).trimEnd();
+    }
+    const parts = body.split('|');
+    const name = parts.pop()?.trim() ?? '';
+    if (!name) {
+        return null;
+    }
+    const quotas = parts.map(formatRichAuthQuotaCell);
+    const statusParts = splitRichAuthStatus(status);
+    return {
+        index: match[1],
+        quotaA: quotas[0] ?? '-',
+        quotaB: quotas[1] ?? '-',
+        name,
+        current,
+        ...statusParts,
+    };
+}
+function formatRichAuthCandidateTable(rows) {
+    return [
+        '<table bordered striped>',
+        '<tr><th>#</th><th>Quota A</th><th>Quota B</th><th>Auth</th><th>Current</th><th>Plan</th><th>Health</th><th>Last refresh</th><th>Expiry</th><th>Risk</th></tr>',
+        ...rows.map(row => [
+            '<tr>',
+            `<td>${escapeTelegramHtml(row.index)}</td>`,
+            `<td>${escapeTelegramHtml(row.quotaA)}</td>`,
+            `<td>${escapeTelegramHtml(row.quotaB)}</td>`,
+            `<td>${escapeTelegramHtml(row.name)}</td>`,
+            `<td>${row.current ? 'yes' : '-'}</td>`,
+            `<td>${escapeTelegramHtml(row.plan)}</td>`,
+            `<td>${escapeTelegramHtml(row.health)}</td>`,
+            `<td>${escapeTelegramHtml(row.refresh)}</td>`,
+            `<td>${escapeTelegramHtml(row.expiry)}</td>`,
+            `<td>${escapeTelegramHtml(row.risk)}</td>`,
+            '</tr>',
+        ].join('')),
+        '</table>',
+    ].join('\n');
+}
+function splitRichAuthStatus(status) {
+    const parts = status.split(' · ').map(part => part.trim()).filter(Boolean);
+    const refreshIndex = parts.findIndex(part => /^(refreshed|刷新于)\b/i.test(part));
+    const refresh = refreshIndex >= 0 ? parts.splice(refreshIndex, 1)[0] : '-';
+    const expiryIndex = parts.findIndex(part => /^(expires|过期于)\b/i.test(part));
+    const expiry = expiryIndex >= 0 ? parts.splice(expiryIndex, 1)[0] : '-';
+    const plan = parts.length > 1 ? parts.shift() : '-';
+    const health = parts.shift() ?? '-';
+    return {
+        plan,
+        health,
+        refresh,
+        expiry,
+        risk: formatRichAuthRisk(health),
+    };
+}
+function formatRichAuthRisk(health) {
+    if (/not recently refreshed|长期未刷新/i.test(health)) {
+        return `stale >${CODEX_AUTH_STALE_CREDENTIAL_DAYS}d`;
+    }
+    if (/needs login repair|需要登录修复/i.test(health)) {
+        return 'repair';
+    }
+    if (/quota exhausted|额度耗尽/i.test(health)) {
+        return 'quota exhausted';
+    }
+    if (/invalid|无效/i.test(health)) {
+        return 'invalid';
+    }
+    if (/\blow\b|偏低|低/i.test(health)) {
+        return 'low quota';
+    }
+    if (/unknown|未知/i.test(health)) {
+        return 'unknown';
+    }
+    return '-';
+}
+function formatRichAuthQuotaCell(value) {
+    const trimmed = value.trim();
+    if (!trimmed || trimmed === '--' || trimmed === '—') {
+        return '-';
+    }
+    const [windowLabel, percent] = trimmed.split(':');
+    if (!windowLabel || percent === undefined) {
+        return trimmed;
+    }
+    return `${percent}%`;
+}
 function parseRichInternalKeyValue(line) {
     const separator = line.includes('：') ? '：' : ':';
     const index = line.indexOf(separator);
@@ -9269,6 +9385,7 @@ async function listCodexAuthState(disabledNames = new Set(), candidateStates = n
             mtimeMs: stat.mtimeMs,
             credentialKind: 'invalid',
             credentialLastRefreshMs: null,
+            credentialExpiresAtMs: null,
             quota: null,
         });
     }
@@ -9613,6 +9730,11 @@ function formatCodexAuthCandidateStatus(locale, candidate) {
             value: formatCompactAge(locale, Date.now() - candidate.credentialLastRefreshMs),
         }));
     }
+    if (candidate.credentialExpiresAtMs !== null) {
+        details.push(t(locale, 'auth_candidate_expires_at', {
+            value: formatUtcDateTime(candidate.credentialExpiresAtMs),
+        }));
+    }
     return `[${details.join(' · ')}]`;
 }
 function formatCodexAuthFilter(locale, filter) {
@@ -10459,6 +10581,12 @@ function formatCompactAge(locale, ageMs) {
     const roundedMinutes = Math.floor(minutes);
     return locale === 'zh' ? `${roundedMinutes}分钟前` : `${roundedMinutes}m ago`;
 }
+function formatUtcDateTime(timestampMs) {
+    if (!Number.isFinite(timestampMs)) {
+        return '-';
+    }
+    return `${new Date(timestampMs).toISOString().slice(0, 16).replace('T', ' ')}Z`;
+}
 function formatUsagePercent(value) {
     if (!Number.isFinite(value)) {
         return '?';

package/dist/i18n.d.ts

@@ -173,6 +173,7 @@ declare const MESSAGES: {
         readonly 'auth_candidate_health_api-key': "API key";
         readonly auth_candidate_health_invalid: "invalid auth file";
         readonly auth_candidate_last_refresh: "refreshed {value}";
+        readonly auth_candidate_expires_at: "expires {value}";
         readonly auth_candidate_enabled: "Enabled auth candidate for auto-rotation: {value}";
         readonly auth_candidate_disabled: "Disabled auth candidate for auto-rotation: {value}";
         readonly auth_candidate_enabled_short: "Auth enabled";
@@ -871,6 +872,7 @@ declare const MESSAGES: {
         readonly 'auth_candidate_health_api-key': "API key";
         readonly auth_candidate_health_invalid: "auth 文件无效";
         readonly auth_candidate_last_refresh: "刷新于 {value}";
+        readonly auth_candidate_expires_at: "过期于 {value}";
         readonly auth_candidate_enabled: "已启用 auth 候选自动轮换：{value}";
         readonly auth_candidate_disabled: "已禁用 auth 候选自动轮换：{value}";
         readonly auth_candidate_enabled_short: "auth 已启用";

package/dist/i18n.js

@@ -171,6 +171,7 @@ const MESSAGES = {
         'auth_candidate_health_api-key': 'API key',
         auth_candidate_health_invalid: 'invalid auth file',
         auth_candidate_last_refresh: 'refreshed {value}',
+        auth_candidate_expires_at: 'expires {value}',
         auth_candidate_enabled: 'Enabled auth candidate for auto-rotation: {value}',
         auth_candidate_disabled: 'Disabled auth candidate for auto-rotation: {value}',
         auth_candidate_enabled_short: 'Auth enabled',
@@ -869,6 +870,7 @@ const MESSAGES = {
         'auth_candidate_health_api-key': 'API key',
         auth_candidate_health_invalid: 'auth 文件无效',
         auth_candidate_last_refresh: '刷新于 {value}',
+        auth_candidate_expires_at: '过期于 {value}',
         auth_candidate_enabled: '已启用 auth 候选自动轮换：{value}',
         auth_candidate_disabled: '已禁用 auth 候选自动轮换：{value}',
         auth_candidate_enabled_short: 'auth 已启用',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@foxden-app/foxclaw",
-  "version": "0.5.35",
+  "version": "0.5.37",
   "description": "Foxden local execution claw for controlling Codex from trusted chat interfaces.",
   "type": "module",
   "main": "dist/main.js",