@foxden-app/foxclaw 0.5.44 → 0.5.46

package/CHANGELOG.md

@@ -2,6 +2,30 @@
 
 All notable FoxClaw changes are listed here. Each release note is bilingual so GitHub Releases and the npm package are useful to both Chinese and English readers.
 
+## 0.5.46 - 2026-06-20
+
+### 中文
+- 修复跨节点 pull 回来的较新 auth 候选在本机 runtime 忙碌时被立即判定失败的问题；现在会先接受并进入远端导入队列，等 runtime 空闲后再验证和导入，避免 RT/WSL 节点已有更新却同步不到本机。
+- 调整主动刷新租约策略：如果 peer 明确拒绝仍会停止，但 peer 慢回包或暂时无响应时不再让刷新一直失败；FoxClaw 会记录 `granted_partial` 事件并优先保持授权可用性和连续性。
+- 增加回归测试覆盖忙碌期间的 pull recovery 排队导入，以及 peer 超时但无明确拒绝时的刷新租约继续执行。
+
+### English
+- Fixed cross-node pull recovery dropping newer auth candidates when the local runtime is busy; pulled bundles are now accepted into the remote import queue and validated/imported once the runtime becomes idle, so updates from RT/WSL peers are not lost.
+- Relaxed proactive refresh leases for availability: explicit peer denials still stop the refresh, but slow or temporarily silent peers no longer make the refresh fail indefinitely. FoxClaw records `granted_partial` events and prioritizes auth continuity.
+- Added regression tests for queued pull recovery while busy and refresh lease continuation when peers time out without an explicit denial.
+
+## 0.5.45 - 2026-06-18
+
+### 中文
+- 将 `/update` 完成通知升级为 RichMessage 表格，分别展示 FoxClaw 版本与重启结果、Codex CLI 版本与升级状态、集群广播目标及真实发送 peer。
+- 发布说明改为默认收起的 details，避免较长更新内容挤占聊天页面；RichMessage 不可用时仍保留清晰的 HTML 降级文本。
+- 升级完成后会短暂等待 auth sync 广播事件，只展示本次升级对应的广播结果；未启用跨节点同步、无 peer 或广播仍在等待时会给出明确状态。
+
+### English
+- Upgraded `/update` completion notifications to a RichMessage table with separate FoxClaw version/restart, Codex CLI version/state, and cluster broadcast target/peer results.
+- Release notes now live in a collapsed details block to keep update notifications compact, with a clear HTML fallback when RichMessage is unavailable.
+- The completion report briefly waits for the matching auth sync broadcast event and only shows results from the current update; disabled sync, no peers, and pending broadcasts are reported explicitly.
+
 ## 0.5.44 - 2026-06-18
 
 ### 中文

package/dist/auth/cross_node_sync.d.ts

@@ -317,10 +317,12 @@ export declare class CrossNodeAuthSync {
     private handleServiceUpdateRequest;
     private handlePullRequest;
     private handlePullResponse;
+    private finishPendingPullAsAccepted;
     private markPullPeerUnavailable;
     private handleDigest;
     private handleLeaseRequest;
     private handleLeaseReply;
+    private shouldQueueRemoteImport;
     private enqueueImport;
     private processPendingImports;
     private enqueueDelete;

package/dist/auth/cross_node_sync.js

@@ -372,7 +372,22 @@ export class CrossNodeAuthSync {
         const expiresAt = Date.now() + LEASE_TTL_MS;
         const result = await new Promise((resolve) => {
             const timer = setTimeout(() => {
+                const pending = this.pendingLeases.get(leaseId);
                 this.pendingLeases.delete(leaseId);
+                if (pending && pending.denies.length === 0) {
+                    const detail = `partial grants=${pending.grants.size}/${this.peers.length}; reason=${reason}`;
+                    this.recordEvent({
+                        direction: 'local',
+                        kind: 'lease.request',
+                        stage: 'partial_granted',
+                        peer: null,
+                        requestId: leaseId,
+                        candidateName: null,
+                        detail,
+                    });
+                    resolve({ ok: true, leaseId, reason: detail });
+                    return;
+                }
                 this.recordEvent({
                     direction: 'local',
                     kind: 'lease.request',
@@ -405,7 +420,7 @@ export class CrossNodeAuthSync {
         });
         if (result.ok) {
             this.activeLocalLease = { leaseId, expiresAt };
-            this.recordEvent({ direction: 'local', kind: 'lease.request', stage: 'granted', peer: null, requestId: leaseId, candidateName: null, detail: reason });
+            this.recordEvent({ direction: 'local', kind: 'lease.request', stage: result.reason?.startsWith('partial grants=') ? 'granted_partial' : 'granted', peer: null, requestId: leaseId, candidateName: null, detail: result.reason ?? reason });
         }
         else {
             this.recordEvent({ direction: 'local', kind: 'lease.request', stage: 'denied', peer: null, requestId: leaseId, candidateName: null, detail: result.reason ?? reason });
@@ -696,6 +711,11 @@ export class CrossNodeAuthSync {
             peer,
             sourceNodeId: senderNodeId,
         });
+        if (this.shouldQueueRemoteImport()) {
+            this.finishPendingPullAsAccepted(pending, peer, 'queued until local runtime is idle');
+            this.enqueueImport(message.bundle, senderNodeId, sourceLabel, peer, 'pull');
+            return;
+        }
         const outcome = await this.validateAndImport(message.bundle, senderNodeId, sourceLabel, peer, 'pull');
         if (!outcome.imported) {
             this.markPullPeerUnavailable(message.requestId, matchedPeer, outcome.reason ?? 'peer candidate was not imported');
@@ -708,6 +728,21 @@ export class CrossNodeAuthSync {
         pending.resolve(true);
         this.recordEvent({ direction: 'local', kind: 'pull.response', stage: 'imported', peer, requestId: message.requestId, candidateName: pending.candidateName, detail: null });
     }
+    finishPendingPullAsAccepted(pending, peer, detail) {
+        pending.finished = true;
+        clearTimeout(pending.timer);
+        this.pendingPulls.delete(pending.requestId);
+        this.recordEvent({
+            direction: 'local',
+            kind: 'pull.response',
+            stage: 'queued',
+            peer,
+            requestId: pending.requestId,
+            candidateName: pending.candidateName,
+            detail,
+        });
+        pending.resolve(true);
+    }
     markPullPeerUnavailable(requestId, peer, reason) {
         const pending = this.pendingPulls.get(requestId);
         if (!pending || pending.finished)
@@ -798,18 +833,26 @@ export class CrossNodeAuthSync {
             pending.resolve({ ok: true, leaseId: message.leaseId });
         }
     }
-    enqueueImport(bundle, sourceNodeId, sourceLabel, fromPeer) {
-        const queued = this.importProcessorActive || !this.callbacks.isIdle() || this.pendingImports.length > 0;
+    shouldQueueRemoteImport() {
+        return this.importProcessorActive
+            || this.deleteProcessorActive
+            || !this.callbacks.isIdle()
+            || this.pendingImports.length > 0
+            || this.pendingDeletes.length > 0;
+    }
+    enqueueImport(bundle, sourceNodeId, sourceLabel, fromPeer, mode = 'push') {
+        const queued = this.shouldQueueRemoteImport();
         this.pendingImports.push({
             bundle,
             sourceNodeId,
             sourceLabel,
             receivedAt: Date.now(),
             fromPeer,
+            mode,
         });
         this.recordEvent({
             direction: 'local',
-            kind: 'push.bundle',
+            kind: mode === 'pull' ? 'pull.response' : 'push.bundle',
             stage: queued ? 'queued' : 'processing',
             peer: fromPeer,
             requestId: bundle.requestId ?? null,
@@ -842,7 +885,7 @@ export class CrossNodeAuthSync {
                 if (!this.callbacks.isIdle())
                     return;
                 const pending = this.pendingImports.shift();
-                await this.validateAndImport(pending.bundle, pending.sourceNodeId, pending.sourceLabel, pending.fromPeer, 'push');
+                await this.validateAndImport(pending.bundle, pending.sourceNodeId, pending.sourceLabel, pending.fromPeer, pending.mode);
             }
         }
         finally {

package/dist/controller/controller.d.ts

@@ -296,6 +296,7 @@ export declare class BridgeSessionCore {
     private clearSelfUpdateStatusPoll;
     private pollSelfUpdateStatus;
     private formatSelfUpdateResult;
+    private resolveSelfUpdateBroadcastSummary;
     private formatSelfUpdateReleaseNotes;
     private formatCodexUpdateResult;
     private scheduleProactiveAuthRefresh;

package/dist/controller/controller.js

@@ -4585,21 +4585,84 @@ export class BridgeSessionCore {
             return;
         }
         this.coordinator?.selfUpdateCompleted?.(status);
-        await this.sendMessage(status.scopeId, this.formatSelfUpdateResult(status));
+        const broadcast = await this.resolveSelfUpdateBroadcastSummary(status);
+        const result = this.formatSelfUpdateResult(status, broadcast);
+        await this.sendRichHtmlMessage(status.scopeId, result.html, result.fallbackHtml);
         await this.selfUpdater?.clearStatus();
     }
-    formatSelfUpdateResult(status) {
+    formatSelfUpdateResult(status, broadcast) {
         const codexUpdateLine = this.formatCodexUpdateResult(status);
         const releaseNotes = this.formatSelfUpdateReleaseNotes(status);
         if (status.state === 'succeeded') {
-            const result = t(status.locale, 'update_succeeded', {
+            const foxclawResult = t(status.locale, 'update_succeeded', {
                 from: status.fromVersion,
                 to: status.toVersion ?? t(status.locale, 'unknown'),
             });
-            return [result, releaseNotes, codexUpdateLine].filter(Boolean).join('\n');
+            const broadcastLine = formatSelfUpdateBroadcastLine(status.locale, status.toVersion, broadcast);
+            const rows = [
+                ['FoxClaw', `${status.fromVersion} -> ${status.toVersion ?? t(status.locale, 'unknown')}`, status.locale === 'zh' ? '升级完成，服务已重启' : 'Updated; service restarted'],
+                ['Codex CLI', formatSelfUpdateVersionTransition(status.codexFromVersion, status.codexToVersion, status.locale), formatCodexUpdateState(status)],
+                [status.locale === 'zh' ? '集群广播' : 'Cluster broadcast', status.toVersion ?? t(status.locale, 'unknown'), broadcastLine],
+            ];
+            const notes = status.releaseNotes?.filter(note => note.trim()) ?? [];
+            const notesHtml = notes.length > 0
+                ? telegramDetails(status.locale === 'zh' ? `查看更新内容 · ${notes.length} 项` : `Release notes · ${notes.length} items`, `<ul>${notes.map(note => `<li>${escapeTelegramHtml(note)}</li>`).join('')}</ul>`)
+                : '';
+            const title = status.locale === 'zh' ? 'FoxClaw 升级完成' : 'FoxClaw update completed';
+            const html = [
+                `<h3>${escapeTelegramHtml(title)}</h3>`,
+                renderTelegramTable(status.locale === 'zh' ? ['组件', '版本', '结果'] : ['Component', 'Version', 'Result'], rows),
+                notesHtml,
+                '<footer>FoxClaw · update</footer>',
+            ].filter(Boolean).join('\n');
+            const fallbackHtml = [
+                telegramBold(title),
+                escapeTelegramHtml(foxclawResult),
+                escapeTelegramHtml(codexUpdateLine ?? (status.locale === 'zh' ? 'Codex CLI：未执行升级。' : 'Codex CLI: not updated.')),
+                escapeTelegramHtml(broadcastLine),
+                releaseNotes ? escapeTelegramHtml(releaseNotes) : '',
+            ].filter(Boolean).join('\n');
+            return { html, fallbackHtml };
         }
         const result = t(status.locale, 'update_failed', { error: status.error ?? t(status.locale, 'unknown') });
-        return codexUpdateLine ? `${result}\n${codexUpdateLine}` : result;
+        const fallback = codexUpdateLine ? `${result}\n${codexUpdateLine}` : result;
+        return {
+            html: `<h3>${escapeTelegramHtml(status.locale === 'zh' ? 'FoxClaw 升级失败' : 'FoxClaw update failed')}</h3><p>${escapeTelegramHtml(fallback)}</p>`,
+            fallbackHtml: escapeTelegramHtml(fallback),
+        };
+    }
+    async resolveSelfUpdateBroadcastSummary(status) {
+        if (status.state !== 'succeeded' || !status.toVersion || !this.coordinator?.getServiceStatus) {
+            return { state: 'pending', sent: 0, peers: [] };
+        }
+        for (let attempt = 0; attempt < 5; attempt += 1) {
+            const serviceStatus = await this.coordinator.getServiceStatus().catch(() => null);
+            const authSync = serviceStatus?.authSync;
+            if (!authSync?.enabled) {
+                return { state: 'disabled', sent: 0, peers: [] };
+            }
+            const recentEvents = authSync.recentEvents ?? [];
+            const updateCompletedAt = Date.parse(status.updatedAt);
+            const broadcast = [...recentEvents].reverse().find(event => (event.kind === 'service.update.request'
+                && event.stage === 'broadcast'
+                && event.detail === `target=${status.toVersion}`
+                && (!Number.isFinite(updateCompletedAt) || Date.parse(event.createdAt) >= updateCompletedAt)));
+            if (broadcast) {
+                const peers = recentEvents
+                    .filter(event => (event.kind === 'service.update.request'
+                    && event.stage === 'sent'
+                    && event.direction === 'out'
+                    && event.requestId === broadcast.requestId
+                    && Boolean(event.peer)))
+                    .map(event => event.peer)
+                    .filter((peer, index, all) => all.indexOf(peer) === index);
+                return { state: 'sent', sent: peers.length, peers };
+            }
+            if (attempt < 4) {
+                await new Promise(resolve => setTimeout(resolve, 500));
+            }
+        }
+        return { state: 'pending', sent: 0, peers: [] };
     }
     formatSelfUpdateReleaseNotes(status) {
         const notes = status.releaseNotes?.filter(note => note.trim()) ?? [];
@@ -8896,6 +8959,45 @@ function formatRichInternalValue(value) {
     const escaped = escapeTelegramHtml(value);
     return escaped.replace(/`([^`]+)`/g, '<code>$1</code>');
 }
+function renderTelegramTable(headers, rows) {
+    return [
+        '<table bordered striped>',
+        `<thead><tr>${headers.map(header => `<th>${escapeTelegramHtml(header)}</th>`).join('')}</tr></thead>`,
+        `<tbody>${rows.map(row => `<tr>${row.map(cell => `<td>${escapeTelegramHtml(cell)}</td>`).join('')}</tr>`).join('')}</tbody>`,
+        '</table>',
+    ].join('');
+}
+function formatSelfUpdateVersionTransition(fromVersion, toVersion, locale) {
+    if (!fromVersion && !toVersion) {
+        return locale === 'zh' ? '未检测' : 'Not detected';
+    }
+    return `${fromVersion ?? '?'} -> ${toVersion ?? '?'}`;
+}
+function formatCodexUpdateState(status) {
+    if (status.codexFromVersion && status.codexToVersion) {
+        if (status.codexFromVersion === status.codexToVersion) {
+            return status.locale === 'zh' ? '已是最新版本' : 'Already current';
+        }
+        return status.locale === 'zh' ? '升级完成' : 'Updated';
+    }
+    return status.codexUpdate ?? (status.locale === 'zh' ? '未执行升级' : 'Not updated');
+}
+function formatSelfUpdateBroadcastLine(locale, targetVersion, broadcast) {
+    if (broadcast.state === 'disabled') {
+        return locale === 'zh' ? '未启用跨节点同步' : 'Cross-node sync is disabled';
+    }
+    if (broadcast.state === 'pending') {
+        return locale === 'zh'
+            ? `目标 ${targetVersion ?? '?'}，等待广播结果`
+            : `Target ${targetVersion ?? '?'}; waiting for broadcast result`;
+    }
+    if (broadcast.peers.length === 0) {
+        return locale === 'zh' ? '广播完成，无已配置 peer' : 'Broadcast completed; no configured peers';
+    }
+    return locale === 'zh'
+        ? `已发送 ${broadcast.sent} 个 peer：${broadcast.peers.join('、')}`
+        : `Sent to ${broadcast.sent} peers: ${broadcast.peers.join(', ')}`;
+}
 function clipRichMessageText(value, limit) {
     if (value.length <= limit) {
         return value;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@foxden-app/foxclaw",
-  "version": "0.5.44",
+  "version": "0.5.46",
   "description": "Foxden local execution claw for controlling Codex from trusted chat interfaces.",
   "type": "module",
   "main": "dist/main.js",