@foxden-app/foxclaw 0.5.45 → 0.5.47

package/CHANGELOG.md

@@ -2,6 +2,30 @@
 
 All notable FoxClaw changes are listed here. Each release note is bilingual so GitHub Releases and the npm package are useful to both Chinese and English readers.
 
+## 0.5.47 - 2026-06-20
+
+### 中文
+- 修复远端 auth 候选已成功导入后，`/auth` 面板仍保留旧的 `needs_repair`/禁用状态，导致候选显示问号且无法切换的问题。
+- 远端导入成功现在会恢复该候选的全局状态和各 Telegram runtime 覆盖状态为 active/enabled，确保“确认可用后文件和 UI 状态一致”。
+- 增加 mirror 远端导入 hook 回归测试，避免后续同步链路再次只更新 auth 文件、不恢复健康标记。
+
+### English
+- Fixed `/auth` keeping stale `needs_repair`/disabled state after a remote auth candidate was successfully imported, which left the candidate shown with a question mark and blocked switching.
+- Successful remote imports now restore the candidate's global state and each Telegram runtime override to active/enabled, keeping the UI state aligned with validated auth files.
+- Added a regression test for the mirror remote-import hook so future sync changes do not update auth files without clearing health markers.
+
+## 0.5.46 - 2026-06-20
+
+### 中文
+- 修复跨节点 pull 回来的较新 auth 候选在本机 runtime 忙碌时被立即判定失败的问题；现在会先接受并进入远端导入队列，等 runtime 空闲后再验证和导入，避免 RT/WSL 节点已有更新却同步不到本机。
+- 调整主动刷新租约策略：如果 peer 明确拒绝仍会停止，但 peer 慢回包或暂时无响应时不再让刷新一直失败；FoxClaw 会记录 `granted_partial` 事件并优先保持授权可用性和连续性。
+- 增加回归测试覆盖忙碌期间的 pull recovery 排队导入，以及 peer 超时但无明确拒绝时的刷新租约继续执行。
+
+### English
+- Fixed cross-node pull recovery dropping newer auth candidates when the local runtime is busy; pulled bundles are now accepted into the remote import queue and validated/imported once the runtime becomes idle, so updates from RT/WSL peers are not lost.
+- Relaxed proactive refresh leases for availability: explicit peer denials still stop the refresh, but slow or temporarily silent peers no longer make the refresh fail indefinitely. FoxClaw records `granted_partial` events and prioritizes auth continuity.
+- Added regression tests for queued pull recovery while busy and refresh lease continuation when peers time out without an explicit denial.
+
 ## 0.5.45 - 2026-06-18
 
 ### 中文

package/dist/auth/cross_node_sync.d.ts

@@ -317,10 +317,12 @@ export declare class CrossNodeAuthSync {
     private handleServiceUpdateRequest;
     private handlePullRequest;
     private handlePullResponse;
+    private finishPendingPullAsAccepted;
     private markPullPeerUnavailable;
     private handleDigest;
     private handleLeaseRequest;
     private handleLeaseReply;
+    private shouldQueueRemoteImport;
     private enqueueImport;
     private processPendingImports;
     private enqueueDelete;

package/dist/auth/cross_node_sync.js

@@ -372,7 +372,22 @@ export class CrossNodeAuthSync {
         const expiresAt = Date.now() + LEASE_TTL_MS;
         const result = await new Promise((resolve) => {
             const timer = setTimeout(() => {
+                const pending = this.pendingLeases.get(leaseId);
                 this.pendingLeases.delete(leaseId);
+                if (pending && pending.denies.length === 0) {
+                    const detail = `partial grants=${pending.grants.size}/${this.peers.length}; reason=${reason}`;
+                    this.recordEvent({
+                        direction: 'local',
+                        kind: 'lease.request',
+                        stage: 'partial_granted',
+                        peer: null,
+                        requestId: leaseId,
+                        candidateName: null,
+                        detail,
+                    });
+                    resolve({ ok: true, leaseId, reason: detail });
+                    return;
+                }
                 this.recordEvent({
                     direction: 'local',
                     kind: 'lease.request',
@@ -405,7 +420,7 @@ export class CrossNodeAuthSync {
         });
         if (result.ok) {
             this.activeLocalLease = { leaseId, expiresAt };
-            this.recordEvent({ direction: 'local', kind: 'lease.request', stage: 'granted', peer: null, requestId: leaseId, candidateName: null, detail: reason });
+            this.recordEvent({ direction: 'local', kind: 'lease.request', stage: result.reason?.startsWith('partial grants=') ? 'granted_partial' : 'granted', peer: null, requestId: leaseId, candidateName: null, detail: result.reason ?? reason });
         }
         else {
             this.recordEvent({ direction: 'local', kind: 'lease.request', stage: 'denied', peer: null, requestId: leaseId, candidateName: null, detail: result.reason ?? reason });
@@ -696,6 +711,11 @@ export class CrossNodeAuthSync {
             peer,
             sourceNodeId: senderNodeId,
         });
+        if (this.shouldQueueRemoteImport()) {
+            this.finishPendingPullAsAccepted(pending, peer, 'queued until local runtime is idle');
+            this.enqueueImport(message.bundle, senderNodeId, sourceLabel, peer, 'pull');
+            return;
+        }
         const outcome = await this.validateAndImport(message.bundle, senderNodeId, sourceLabel, peer, 'pull');
         if (!outcome.imported) {
             this.markPullPeerUnavailable(message.requestId, matchedPeer, outcome.reason ?? 'peer candidate was not imported');
@@ -708,6 +728,21 @@ export class CrossNodeAuthSync {
         pending.resolve(true);
         this.recordEvent({ direction: 'local', kind: 'pull.response', stage: 'imported', peer, requestId: message.requestId, candidateName: pending.candidateName, detail: null });
     }
+    finishPendingPullAsAccepted(pending, peer, detail) {
+        pending.finished = true;
+        clearTimeout(pending.timer);
+        this.pendingPulls.delete(pending.requestId);
+        this.recordEvent({
+            direction: 'local',
+            kind: 'pull.response',
+            stage: 'queued',
+            peer,
+            requestId: pending.requestId,
+            candidateName: pending.candidateName,
+            detail,
+        });
+        pending.resolve(true);
+    }
     markPullPeerUnavailable(requestId, peer, reason) {
         const pending = this.pendingPulls.get(requestId);
         if (!pending || pending.finished)
@@ -798,18 +833,26 @@ export class CrossNodeAuthSync {
             pending.resolve({ ok: true, leaseId: message.leaseId });
         }
     }
-    enqueueImport(bundle, sourceNodeId, sourceLabel, fromPeer) {
-        const queued = this.importProcessorActive || !this.callbacks.isIdle() || this.pendingImports.length > 0;
+    shouldQueueRemoteImport() {
+        return this.importProcessorActive
+            || this.deleteProcessorActive
+            || !this.callbacks.isIdle()
+            || this.pendingImports.length > 0
+            || this.pendingDeletes.length > 0;
+    }
+    enqueueImport(bundle, sourceNodeId, sourceLabel, fromPeer, mode = 'push') {
+        const queued = this.shouldQueueRemoteImport();
         this.pendingImports.push({
             bundle,
             sourceNodeId,
             sourceLabel,
             receivedAt: Date.now(),
             fromPeer,
+            mode,
         });
         this.recordEvent({
             direction: 'local',
-            kind: 'push.bundle',
+            kind: mode === 'pull' ? 'pull.response' : 'push.bundle',
             stage: queued ? 'queued' : 'processing',
             peer: fromPeer,
             requestId: bundle.requestId ?? null,
@@ -842,7 +885,7 @@ export class CrossNodeAuthSync {
                 if (!this.callbacks.isIdle())
                     return;
                 const pending = this.pendingImports.shift();
-                await this.validateAndImport(pending.bundle, pending.sourceNodeId, pending.sourceLabel, pending.fromPeer, 'push');
+                await this.validateAndImport(pending.bundle, pending.sourceNodeId, pending.sourceLabel, pending.fromPeer, pending.mode);
             }
         }
         finally {

package/dist/auth/mirror.d.ts

@@ -61,6 +61,7 @@ export interface AuthMirrorSyncAllResult {
 }
 export interface AuthMirrorHooks {
     onSynced?: (event: AuthMirrorSyncedEvent) => Promise<void> | void;
+    onRemoteImported?: (event: AuthMirrorSyncedEvent) => Promise<void> | void;
 }
 export type AuthMirrorNotification = {
     kind: 'local_synced';

package/dist/auth/mirror.js

@@ -304,6 +304,16 @@ export class AuthCandidateMirror {
                     sourceLabel,
                 };
                 await Promise.allSettled(this.runtimes.map((target) => target.notify?.(notification)));
+                await this.hooks.onRemoteImported?.({
+                    status: this.lastStatus,
+                    record: {
+                        raw,
+                        ...metadata,
+                        candidateName,
+                        sourceRuntimeId: `remote:${source.nodeId}`,
+                        sourceLabel,
+                    },
+                });
                 return {
                     ok: true,
                     imported: true,

package/dist/main.js

@@ -410,6 +410,7 @@ async function runServeCli() {
                 seeds.push({ id, home, authDir, sharedDefaultRuntime, config: runtimeConfig, bot, app });
             }
             let authSync = null;
+            const authRuntimeIds = seeds.map((runtime) => runtime.id);
             const mirror = new AuthCandidateMirror(canonicalAuthDir, seeds.map((runtime) => ({
                 id: runtime.id,
                 label: runtime.bot.username ? `@${runtime.bot.username}` : runtime.id,
@@ -423,6 +424,9 @@ async function runServeCli() {
                 onSynced: async (event) => {
                     await authSync?.publishCandidate(event.record.candidateName);
                 },
+                onRemoteImported: (event) => {
+                    restoreImportedAuthCandidateState(store, event.record.candidateName, authRuntimeIds);
+                },
             });
             await mirror.initialize();
             activeAuthMirror = mirror;
@@ -757,6 +761,9 @@ async function runServeCli() {
                 onSynced: async (event) => {
                     await singleAuthSync?.publishCandidate(event.record.candidateName);
                 },
+                onRemoteImported: (event) => {
+                    restoreImportedAuthCandidateState(store, event.record.candidateName, ['default']);
+                },
             });
             await singleMirror.initialize();
             activeAuthMirror = singleMirror;
@@ -863,6 +870,14 @@ async function runServeCli() {
         throw error;
     }
 }
+function restoreImportedAuthCandidateState(store, candidateName, runtimeIds) {
+    store.setCodexAuthCandidateState(candidateName, 'active');
+    store.setCodexAuthCandidateDisabled(candidateName, false);
+    for (const runtimeId of runtimeIds) {
+        store.setCodexAuthCandidateState(candidateName, 'active', runtimeId);
+        store.setCodexAuthCandidateDisabled(candidateName, false, runtimeId);
+    }
+}
 function createAuthMirrorNotifier(store, botId, bot, aggregator, options = {}) {
     return async (event) => {
         if (options.suppressBackgroundNotifications?.())

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@foxden-app/foxclaw",
-  "version": "0.5.45",
+  "version": "0.5.47",
   "description": "Foxden local execution claw for controlling Codex from trusted chat interfaces.",
   "type": "module",
   "main": "dist/main.js",