@foxden-app/foxclaw 0.5.45 → 0.5.46

package/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 All notable FoxClaw changes are listed here. Each release note is bilingual so GitHub Releases and the npm package are useful to both Chinese and English readers.
 
+## 0.5.46 - 2026-06-20
+
+### 中文
+- 修复跨节点 pull 回来的较新 auth 候选在本机 runtime 忙碌时被立即判定失败的问题；现在会先接受并进入远端导入队列，等 runtime 空闲后再验证和导入，避免 RT/WSL 节点已有更新却同步不到本机。
+- 调整主动刷新租约策略：如果 peer 明确拒绝仍会停止，但 peer 慢回包或暂时无响应时不再让刷新一直失败；FoxClaw 会记录 `granted_partial` 事件并优先保持授权可用性和连续性。
+- 增加回归测试覆盖忙碌期间的 pull recovery 排队导入，以及 peer 超时但无明确拒绝时的刷新租约继续执行。
+
+### English
+- Fixed cross-node pull recovery dropping newer auth candidates when the local runtime is busy; pulled bundles are now accepted into the remote import queue and validated/imported once the runtime becomes idle, so updates from RT/WSL peers are not lost.
+- Relaxed proactive refresh leases for availability: explicit peer denials still stop the refresh, but slow or temporarily silent peers no longer make the refresh fail indefinitely. FoxClaw records `granted_partial` events and prioritizes auth continuity.
+- Added regression tests for queued pull recovery while busy and refresh lease continuation when peers time out without an explicit denial.
+
 ## 0.5.45 - 2026-06-18
 
 ### 中文

package/dist/auth/cross_node_sync.d.ts

@@ -317,10 +317,12 @@ export declare class CrossNodeAuthSync {
     private handleServiceUpdateRequest;
     private handlePullRequest;
     private handlePullResponse;
+    private finishPendingPullAsAccepted;
     private markPullPeerUnavailable;
     private handleDigest;
     private handleLeaseRequest;
     private handleLeaseReply;
+    private shouldQueueRemoteImport;
     private enqueueImport;
     private processPendingImports;
     private enqueueDelete;

package/dist/auth/cross_node_sync.js

@@ -372,7 +372,22 @@ export class CrossNodeAuthSync {
         const expiresAt = Date.now() + LEASE_TTL_MS;
         const result = await new Promise((resolve) => {
             const timer = setTimeout(() => {
+                const pending = this.pendingLeases.get(leaseId);
                 this.pendingLeases.delete(leaseId);
+                if (pending && pending.denies.length === 0) {
+                    const detail = `partial grants=${pending.grants.size}/${this.peers.length}; reason=${reason}`;
+                    this.recordEvent({
+                        direction: 'local',
+                        kind: 'lease.request',
+                        stage: 'partial_granted',
+                        peer: null,
+                        requestId: leaseId,
+                        candidateName: null,
+                        detail,
+                    });
+                    resolve({ ok: true, leaseId, reason: detail });
+                    return;
+                }
                 this.recordEvent({
                     direction: 'local',
                     kind: 'lease.request',
@@ -405,7 +420,7 @@ export class CrossNodeAuthSync {
         });
         if (result.ok) {
             this.activeLocalLease = { leaseId, expiresAt };
-            this.recordEvent({ direction: 'local', kind: 'lease.request', stage: 'granted', peer: null, requestId: leaseId, candidateName: null, detail: reason });
+            this.recordEvent({ direction: 'local', kind: 'lease.request', stage: result.reason?.startsWith('partial grants=') ? 'granted_partial' : 'granted', peer: null, requestId: leaseId, candidateName: null, detail: result.reason ?? reason });
         }
         else {
             this.recordEvent({ direction: 'local', kind: 'lease.request', stage: 'denied', peer: null, requestId: leaseId, candidateName: null, detail: result.reason ?? reason });
@@ -696,6 +711,11 @@ export class CrossNodeAuthSync {
             peer,
             sourceNodeId: senderNodeId,
         });
+        if (this.shouldQueueRemoteImport()) {
+            this.finishPendingPullAsAccepted(pending, peer, 'queued until local runtime is idle');
+            this.enqueueImport(message.bundle, senderNodeId, sourceLabel, peer, 'pull');
+            return;
+        }
         const outcome = await this.validateAndImport(message.bundle, senderNodeId, sourceLabel, peer, 'pull');
         if (!outcome.imported) {
             this.markPullPeerUnavailable(message.requestId, matchedPeer, outcome.reason ?? 'peer candidate was not imported');
@@ -708,6 +728,21 @@ export class CrossNodeAuthSync {
         pending.resolve(true);
         this.recordEvent({ direction: 'local', kind: 'pull.response', stage: 'imported', peer, requestId: message.requestId, candidateName: pending.candidateName, detail: null });
     }
+    finishPendingPullAsAccepted(pending, peer, detail) {
+        pending.finished = true;
+        clearTimeout(pending.timer);
+        this.pendingPulls.delete(pending.requestId);
+        this.recordEvent({
+            direction: 'local',
+            kind: 'pull.response',
+            stage: 'queued',
+            peer,
+            requestId: pending.requestId,
+            candidateName: pending.candidateName,
+            detail,
+        });
+        pending.resolve(true);
+    }
     markPullPeerUnavailable(requestId, peer, reason) {
         const pending = this.pendingPulls.get(requestId);
         if (!pending || pending.finished)
@@ -798,18 +833,26 @@ export class CrossNodeAuthSync {
             pending.resolve({ ok: true, leaseId: message.leaseId });
         }
     }
-    enqueueImport(bundle, sourceNodeId, sourceLabel, fromPeer) {
-        const queued = this.importProcessorActive || !this.callbacks.isIdle() || this.pendingImports.length > 0;
+    shouldQueueRemoteImport() {
+        return this.importProcessorActive
+            || this.deleteProcessorActive
+            || !this.callbacks.isIdle()
+            || this.pendingImports.length > 0
+            || this.pendingDeletes.length > 0;
+    }
+    enqueueImport(bundle, sourceNodeId, sourceLabel, fromPeer, mode = 'push') {
+        const queued = this.shouldQueueRemoteImport();
         this.pendingImports.push({
             bundle,
             sourceNodeId,
             sourceLabel,
             receivedAt: Date.now(),
             fromPeer,
+            mode,
         });
         this.recordEvent({
             direction: 'local',
-            kind: 'push.bundle',
+            kind: mode === 'pull' ? 'pull.response' : 'push.bundle',
             stage: queued ? 'queued' : 'processing',
             peer: fromPeer,
             requestId: bundle.requestId ?? null,
@@ -842,7 +885,7 @@ export class CrossNodeAuthSync {
                 if (!this.callbacks.isIdle())
                     return;
                 const pending = this.pendingImports.shift();
-                await this.validateAndImport(pending.bundle, pending.sourceNodeId, pending.sourceLabel, pending.fromPeer, 'push');
+                await this.validateAndImport(pending.bundle, pending.sourceNodeId, pending.sourceLabel, pending.fromPeer, pending.mode);
             }
         }
         finally {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@foxden-app/foxclaw",
-  "version": "0.5.45",
+  "version": "0.5.46",
   "description": "Foxden local execution claw for controlling Codex from trusted chat interfaces.",
   "type": "module",
   "main": "dist/main.js",