@foxden-app/foxclaw 0.5.58 → 0.5.60

package/.env.example

@@ -38,6 +38,9 @@ TELEGRAM_PREVIEW_THROTTLE_MS=800
 # Set to false if you prefer to keep "read files / edited files / ran command"
 # detail cards in the chat history.
 # TELEGRAM_DELETE_TOOL_DETAILS_AFTER_FINAL=true
+# Delete time-sensitive interactive panels such as /auth and /threads after 30 minutes.
+# The timer restarts whenever the panel is refreshed. Set to 0 to disable.
+# TELEGRAM_PANEL_TTL_MS=1800000
 THREAD_LIST_LIMIT=10
 CODEX_CLI_BIN=/absolute/path/to/codex
 

package/CHANGELOG.md

@@ -2,6 +2,26 @@
 
 All notable FoxClaw changes are listed here. Each release note is bilingual so GitHub Releases and the npm package are useful to both Chinese and English readers.
 
+## 0.5.60 - 2026-06-21
+
+### 中文
+- 修复 `/auth` 刷新时间测试对 Asia/Shanghai 时区的硬编码，使 Linux、macOS 和 UTC CI runner 都按各自本地时区验证；功能内容与 0.5.59 一并发布。
+
+### English
+- Fixed the `/auth` reset-time test to respect the runner's local timezone across Linux, macOS, and UTC CI environments. This release publishes the feature set introduced in 0.5.59.
+
+## 0.5.59 - 2026-06-21
+
+### 中文
+- `/auth` 富文本表格新增 Quota A、Quota B 的下次刷新时间；精确时间随额度快照持久化并可在节点间共享，旧快照安全显示 `-`。
+- 修复 `/auth` 按钮回调后退化为普通消息的问题：切换、启停、筛选、翻页、修复、刷新和安全同步现在始终使用 RichMessage 编辑。
+- 新增时效面板自动清理：`/auth`、`/threads` 和统一 `/setup` 面板默认空闲 30 分钟后删除，每次交互重新计时；可用 `TELEGRAM_PANEL_TTL_MS` 调整，设为 `0` 可关闭。
+
+### English
+- Added next-reset columns for Quota A and Quota B in the `/auth` RichMessage table. Exact reset timestamps now persist with quota snapshots and can be shared across nodes; legacy snapshots safely show `-`.
+- Fixed `/auth` callback refreshes degrading to plain messages. Switch, toggle, filter, pagination, repair, refresh, and safe-sync actions now consistently edit the panel as a RichMessage.
+- Added automatic cleanup for time-sensitive panels. `/auth`, `/threads`, and unified `/setup` panels are deleted after 30 minutes of inactivity by default, with interaction resetting the timer. Configure `TELEGRAM_PANEL_TTL_MS`, or set it to `0` to disable cleanup.
+
 ## 0.5.58 - 2026-06-21
 
 ### 中文

package/dist/config.d.ts

@@ -41,6 +41,7 @@ export interface AppConfig {
     telegramPollIntervalMs: number;
     telegramPreviewThrottleMs: number;
     telegramDeleteToolDetailsAfterFinal: boolean;
+    telegramPanelTtlMs: number;
     threadListLimit: number;
     statusPath: string;
     logPath: string;

package/dist/config.js

@@ -78,6 +78,7 @@ export function loadConfig() {
         telegramPollIntervalMs: intEnv('TELEGRAM_POLL_INTERVAL_MS', 1200),
         telegramPreviewThrottleMs: intEnv('TELEGRAM_PREVIEW_THROTTLE_MS', 800),
         telegramDeleteToolDetailsAfterFinal: boolEnv('TELEGRAM_DELETE_TOOL_DETAILS_AFTER_FINAL', true),
+        telegramPanelTtlMs: intEnv('TELEGRAM_PANEL_TTL_MS', 30 * 60_000),
         threadListLimit: intEnv('THREAD_LIST_LIMIT', 10),
         statusPath: DEFAULT_STATUS_PATH,
         logPath: DEFAULT_LOG_PATH,

package/dist/controller/controller.d.ts

@@ -96,6 +96,7 @@ export declare class BridgeSessionCore {
     private proactiveAuthRefreshTimer;
     private proactiveAuthRefreshInProgress;
     private proactiveAuthRefreshStatus;
+    private stalePanelDeleteTimers;
     private attachedThreads;
     private botUsername;
     private lastError;
@@ -236,6 +237,9 @@ export declare class BridgeSessionCore {
     private editMessage;
     private editHtmlMessage;
     private editRichHtmlMessage;
+    private editRichInternalMessage;
+    private editAuthPanelMessage;
+    private scheduleStalePanelDeletion;
     private deleteMessage;
     private sendTyping;
     private sendObservedCliUserMessage;

package/dist/controller/controller.js

@@ -152,6 +152,7 @@ export class BridgeSessionCore {
     proactiveAuthRefreshTimer = null;
     proactiveAuthRefreshInProgress = false;
     proactiveAuthRefreshStatus = null;
+    stalePanelDeleteTimers = new Map();
     attachedThreads = new Set();
     botUsername = null;
     lastError = null;
@@ -276,6 +277,10 @@ export class BridgeSessionCore {
         this.clearRestartPreviewRecoveryTimers();
         this.clearSelfUpdateStatusPoll();
         this.clearProactiveAuthRefreshTimer();
+        for (const timer of this.stalePanelDeleteTimers.values()) {
+            clearTimeout(timer);
+        }
+        this.stalePanelDeleteTimers.clear();
         await this.app.stop({ terminateServer: false });
         this.updateStatus();
     }
@@ -3431,6 +3436,35 @@ export class BridgeSessionCore {
             await this.editHtmlMessage(scopeId, messageId, fallbackHtml, inlineKeyboard);
         }
     }
+    async editRichInternalMessage(scopeId, messageId, title, text, inlineKeyboard) {
+        if (scopeId.startsWith(BRIDGE_SCOPE_WEIXIN_PREFIX)) {
+            await this.editMessage(scopeId, messageId, text, inlineKeyboard);
+            return;
+        }
+        await this.editRichHtmlMessage(scopeId, messageId, formatRichInternalMessage(title, text), escapeTelegramHtml(text), inlineKeyboard);
+    }
+    async editAuthPanelMessage(scopeId, messageId, text, inlineKeyboard) {
+        await this.editRichInternalMessage(scopeId, messageId, '/auth', text, inlineKeyboard);
+        this.scheduleStalePanelDeletion(scopeId, messageId);
+    }
+    scheduleStalePanelDeletion(scopeId, messageId) {
+        if (this.config.telegramPanelTtlMs <= 0 || parseWeixinBridgeScope(scopeId)) {
+            return;
+        }
+        const key = `${scopeId}:${messageId}`;
+        const existing = this.stalePanelDeleteTimers.get(key);
+        if (existing) {
+            clearTimeout(existing);
+        }
+        const timer = setTimeout(() => {
+            this.stalePanelDeleteTimers.delete(key);
+            void this.deleteMessage(scopeId, messageId).catch(error => {
+                this.logger.warn('telegram.stale_panel_delete_failed', { scopeId, messageId, error: toErrorMeta(error) });
+            });
+        }, this.config.telegramPanelTtlMs);
+        timer.unref();
+        this.stalePanelDeleteTimers.set(key, timer);
+    }
     async deleteMessage(scopeId, messageId) {
         await this.messaging.deleteMessage(scopeId, messageId);
     }
@@ -4859,6 +4893,7 @@ export class BridgeSessionCore {
         const authListMessage = renderAuthListMessage(locale, state, this.authDisplayBotLabel(), parseWeixinBridgeScope(scopeId) !== null, record);
         const messageId = await this.sendRichInternalMessage(scopeId, '/auth', authListMessage, authChoiceKeyboard(locale, record));
         record.messageId = messageId;
+        this.scheduleStalePanelDeletion(scopeId, messageId);
     }
     async handleAuthSyncCommand(scopeId, locale, args) {
         const action = args[0]?.toLowerCase() ?? 'status';
@@ -5664,12 +5699,12 @@ export class BridgeSessionCore {
             }
             await this.messaging.answerCallback(event.callbackQueryId, t(locale, 'auth_sync_safe_starting'));
             if (record.messageId !== null) {
-                await this.editMessage(event.scopeId, record.messageId, t(locale, 'auth_sync_safe_starting'), []);
+                await this.editAuthPanelMessage(event.scopeId, record.messageId, t(locale, 'auth_sync_safe_starting'), []);
             }
             const result = await this.runAuthSafeSyncAll();
             if (!result) {
                 if (record.messageId !== null) {
-                    await this.editMessage(event.scopeId, record.messageId, t(locale, 'auth_sync_disabled'), authChoiceKeyboard(locale, record));
+                    await this.editAuthPanelMessage(event.scopeId, record.messageId, t(locale, 'auth_sync_disabled'), authChoiceKeyboard(locale, record));
                 }
                 return;
             }
@@ -5679,7 +5714,7 @@ export class BridgeSessionCore {
             record.createdAt = Date.now();
             clampCodexAuthListOffset(record);
             if (record.messageId !== null) {
-                await this.editMessage(event.scopeId, record.messageId, `${t(locale, 'auth_sync_safe_done', {
+                await this.editAuthPanelMessage(event.scopeId, record.messageId, `${t(locale, 'auth_sync_safe_done', {
                     localSynced: result.localSynced,
                     localSkipped: result.localSkipped,
                     sent: result.sent,
@@ -5695,7 +5730,7 @@ export class BridgeSessionCore {
             }
             await this.messaging.answerCallback(event.callbackQueryId, t(locale, 'auth_refresh_all_confirm_short'));
             if (record.messageId !== null) {
-                await this.editMessage(event.scopeId, record.messageId, t(locale, 'auth_refresh_all_confirm_message'), authRefreshAllConfirmKeyboard(locale, record));
+                await this.editAuthPanelMessage(event.scopeId, record.messageId, t(locale, 'auth_refresh_all_confirm_message'), authRefreshAllConfirmKeyboard(locale, record));
             }
             return;
         }
@@ -5706,7 +5741,7 @@ export class BridgeSessionCore {
             record.candidates = state.candidates;
             record.createdAt = Date.now();
             if (record.messageId !== null) {
-                await this.editMessage(event.scopeId, record.messageId, renderAuthListMessage(locale, state, this.authDisplayBotLabel(), parseWeixinBridgeScope(event.scopeId) !== null, record), authChoiceKeyboard(locale, record));
+                await this.editAuthPanelMessage(event.scopeId, record.messageId, renderAuthListMessage(locale, state, this.authDisplayBotLabel(), parseWeixinBridgeScope(event.scopeId) !== null, record), authChoiceKeyboard(locale, record));
             }
             return;
         }
@@ -5717,12 +5752,12 @@ export class BridgeSessionCore {
             }
             await this.messaging.answerCallback(event.callbackQueryId, t(locale, 'auth_refresh_all_starting'));
             if (record.messageId !== null) {
-                await this.editMessage(event.scopeId, record.messageId, t(locale, 'auth_refresh_all_starting'), []);
+                await this.editAuthPanelMessage(event.scopeId, record.messageId, t(locale, 'auth_refresh_all_starting'), []);
             }
             const lease = await this.coordinator?.acquireAuthRefreshLease?.('auth refresh all');
             if (lease && !lease.ok) {
                 if (record.messageId !== null) {
-                    await this.editMessage(event.scopeId, record.messageId, t(locale, 'auth_refresh_all_lease_failed', { error: lease.reason ?? t(locale, 'unknown') }), authChoiceKeyboard(locale, record));
+                    await this.editAuthPanelMessage(event.scopeId, record.messageId, t(locale, 'auth_refresh_all_lease_failed', { error: lease.reason ?? t(locale, 'unknown') }), authChoiceKeyboard(locale, record));
                 }
                 return;
             }
@@ -5738,7 +5773,7 @@ export class BridgeSessionCore {
             record.candidates = state.candidates;
             record.createdAt = Date.now();
             if (record.messageId !== null) {
-                await this.editMessage(event.scopeId, record.messageId, `${formatAuthRefreshAllResult(locale, result)}\n\n${renderAuthListMessage(locale, state, this.authDisplayBotLabel(), parseWeixinBridgeScope(event.scopeId) !== null, record)}`, authChoiceKeyboard(locale, record));
+                await this.editAuthPanelMessage(event.scopeId, record.messageId, `${formatAuthRefreshAllResult(locale, result)}\n\n${renderAuthListMessage(locale, state, this.authDisplayBotLabel(), parseWeixinBridgeScope(event.scopeId) !== null, record)}`, authChoiceKeyboard(locale, record));
             }
             return;
         }
@@ -5775,7 +5810,7 @@ export class BridgeSessionCore {
         clampCodexAuthListOffset(record);
         await this.messaging.answerCallback(event.callbackQueryId, t(locale, 'decision_recorded'));
         if (record.messageId !== null) {
-            await this.editMessage(event.scopeId, record.messageId, renderAuthListMessage(locale, state, this.authDisplayBotLabel(), parseWeixinBridgeScope(event.scopeId) !== null, record), authChoiceKeyboard(locale, record));
+            await this.editAuthPanelMessage(event.scopeId, record.messageId, renderAuthListMessage(locale, state, this.authDisplayBotLabel(), parseWeixinBridgeScope(event.scopeId) !== null, record), authChoiceKeyboard(locale, record));
         }
     }
     async handleAuthRepairMenuCallback(event, localId, index, locale) {
@@ -5795,7 +5830,7 @@ export class BridgeSessionCore {
         }
         await this.messaging.answerCallback(event.callbackQueryId, t(locale, 'auth_repair_actions_short'));
         if (record.messageId !== null) {
-            await this.editMessage(event.scopeId, record.messageId, t(locale, 'auth_repair_actions_message', { value: formatCodexAuthCandidateDisplayName(candidate.name) }), authRepairKeyboard(locale, record, index));
+            await this.editAuthPanelMessage(event.scopeId, record.messageId, t(locale, 'auth_repair_actions_message', { value: formatCodexAuthCandidateDisplayName(candidate.name) }), authRepairKeyboard(locale, record, index));
         }
     }
     async handleAuthRepairActionCallback(event, localId, action, index, locale) {
@@ -5820,7 +5855,7 @@ export class BridgeSessionCore {
             record.createdAt = Date.now();
             clampCodexAuthListOffset(record);
             if (record.messageId !== null) {
-                await this.editMessage(event.scopeId, record.messageId, renderAuthListMessage(locale, state, this.authDisplayBotLabel(), parseWeixinBridgeScope(event.scopeId) !== null, record), authChoiceKeyboard(locale, record));
+                await this.editAuthPanelMessage(event.scopeId, record.messageId, renderAuthListMessage(locale, state, this.authDisplayBotLabel(), parseWeixinBridgeScope(event.scopeId) !== null, record), authChoiceKeyboard(locale, record));
             }
             return;
         }
@@ -5831,7 +5866,7 @@ export class BridgeSessionCore {
         if (action === 'login') {
             await this.messaging.answerCallback(event.callbackQueryId, t(locale, 'login_device_started'));
             if (record.messageId !== null) {
-                await this.editMessage(event.scopeId, record.messageId, t(locale, 'auth_repair_login_preparing', { value: candidate.name }), []);
+                await this.editAuthPanelMessage(event.scopeId, record.messageId, t(locale, 'auth_repair_login_preparing', { value: candidate.name }), []);
             }
             await this.startAuthRepairLogin(event.scopeId, locale, candidate);
             return;
@@ -5843,7 +5878,7 @@ export class BridgeSessionCore {
         record.createdAt = Date.now();
         clampCodexAuthListOffset(record);
         if (record.messageId !== null) {
-            await this.editMessage(event.scopeId, record.messageId, `${t(locale, 'auth_candidate_deleted', { value: candidate.name })}${restarted ? `\n${t(locale, 'auth_delete_current_restarted')}` : ''}\n\n${renderAuthListMessage(locale, state, this.authDisplayBotLabel(), parseWeixinBridgeScope(event.scopeId) !== null, record)}`, authChoiceKeyboard(locale, record));
+            await this.editAuthPanelMessage(event.scopeId, record.messageId, `${t(locale, 'auth_candidate_deleted', { value: candidate.name })}${restarted ? `\n${t(locale, 'auth_delete_current_restarted')}` : ''}\n\n${renderAuthListMessage(locale, state, this.authDisplayBotLabel(), parseWeixinBridgeScope(event.scopeId) !== null, record)}`, authChoiceKeyboard(locale, record));
         }
     }
     async handleAuthToggleCallback(event, localId, index, locale) {
@@ -5868,7 +5903,7 @@ export class BridgeSessionCore {
         clampCodexAuthListOffset(record);
         await this.messaging.answerCallback(event.callbackQueryId, t(locale, disabled ? 'auth_candidate_disabled_short' : 'auth_candidate_enabled_short'));
         if (record.messageId !== null) {
-            await this.editMessage(event.scopeId, record.messageId, renderAuthListMessage(locale, state, this.authDisplayBotLabel(), parseWeixinBridgeScope(event.scopeId) !== null, record), authChoiceKeyboard(locale, record));
+            await this.editAuthPanelMessage(event.scopeId, record.messageId, renderAuthListMessage(locale, state, this.authDisplayBotLabel(), parseWeixinBridgeScope(event.scopeId) !== null, record), authChoiceKeyboard(locale, record));
         }
     }
     async handleAuthSwitchCallback(event, localId, index, locale) {
@@ -5898,7 +5933,7 @@ export class BridgeSessionCore {
         const switchLabels = await this.readCodexAuthSwitchLabels(candidate);
         const switchingMessage = t(locale, 'auth_switching', this.codexAuthSwitchParams(locale, switchLabels.fromLabel, switchLabels.toLabel));
         if (record.messageId !== null) {
-            await this.editMessage(event.scopeId, record.messageId, switchingMessage, []);
+            await this.editAuthPanelMessage(event.scopeId, record.messageId, switchingMessage, []);
         }
         const outcome = await this.switchCodexAuthAndRestart(event.scopeId, locale, candidate, false, false);
         const state = await this.listCodexAuthState();
@@ -5906,7 +5941,7 @@ export class BridgeSessionCore {
         record.createdAt = Date.now();
         clampCodexAuthListOffset(record);
         if (record.messageId !== null) {
-            await this.editMessage(event.scopeId, record.messageId, [
+            await this.editAuthPanelMessage(event.scopeId, record.messageId, [
                 ...this.formatAuthSwitchValidationLines(locale, outcome),
                 renderAuthListMessage(locale, state, this.authDisplayBotLabel(), parseWeixinBridgeScope(event.scopeId) !== null, record),
             ].filter(Boolean).join('\n\n'), authChoiceKeyboard(locale, record));
@@ -6839,6 +6874,7 @@ export class BridgeSessionCore {
                 ? buildThreadsKeyboard(locale, threadLikes, binding.threadId)
                 : buildThreadListKeyboard(locale, threadLikes, listState, binding.threadId);
             await this.editHtmlMessage(scopeId, event.messageId, text, keyboard);
+            this.scheduleStalePanelDeletion(scopeId, event.messageId);
         }
         let callbackText = t(locale, 'thread_opened');
         if (this.config.codexAppSyncOnOpen) {
@@ -7289,9 +7325,11 @@ export class BridgeSessionCore {
             : buildThreadListKeyboard(locale, forDisplay, presentationState, binding?.threadId ?? null);
         if (messageId !== undefined) {
             await this.editHtmlMessage(scopeId, messageId, text, keyboard);
+            this.scheduleStalePanelDeletion(scopeId, messageId);
             return;
         }
-        await this.sendHtmlMessage(scopeId, text, keyboard);
+        const sentMessageId = await this.sendHtmlMessage(scopeId, text, keyboard);
+        this.scheduleStalePanelDeletion(scopeId, sentMessageId);
     }
     async showModelSettingsPanel(scopeId, messageId, locale = this.localeForChat(scopeId)) {
         const models = await this.app.listModels();
@@ -7321,9 +7359,11 @@ export class BridgeSessionCore {
         const keyboard = buildSetupPanelKeyboard(locale, { focus, models, settings, access });
         if (messageId !== undefined) {
             await this.editHtmlMessage(scopeId, messageId, text, keyboard);
+            this.scheduleStalePanelDeletion(scopeId, messageId);
             return;
         }
-        await this.sendHtmlMessage(scopeId, text, keyboard);
+        const sentMessageId = await this.sendHtmlMessage(scopeId, text, keyboard);
+        this.scheduleStalePanelDeletion(scopeId, sentMessageId);
     }
     async showAccessSettingsPanel(scopeId, messageId, locale = this.localeForChat(scopeId)) {
         const access = this.resolveEffectiveAccess(scopeId);
@@ -9004,12 +9044,14 @@ function parseRichAuthCandidateRow(line) {
     if (!name) {
         return null;
     }
-    const quotas = parts.map(formatRichAuthQuotaCell);
+    const quotas = parts.map(parseRichAuthQuotaCell);
     const statusParts = splitRichAuthStatus(status);
     return {
         index: match[1],
-        quotaA: quotas[0] ?? '-',
-        quotaB: quotas[1] ?? '-',
+        quotaA: quotas[0]?.value ?? '-',
+        quotaAReset: quotas[0]?.reset ?? '-',
+        quotaB: quotas[1]?.value ?? '-',
+        quotaBReset: quotas[1]?.reset ?? '-',
         name,
         current,
         enabled: statusParts.health === 'disabled' || statusParts.health === '已禁用'
@@ -9021,12 +9063,14 @@ function parseRichAuthCandidateRow(line) {
 function formatRichAuthCandidateTable(rows) {
     return [
         '<table bordered striped>',
-        '<tr><th>#</th><th>Quota A</th><th>Quota B</th><th>Auth</th><th>Current</th><th>Plan</th><th>Health</th><th>Last refresh</th><th>Expiry</th><th>Risk</th><th>Command</th></tr>',
+        '<tr><th>#</th><th>Quota A</th><th>A reset</th><th>Quota B</th><th>B reset</th><th>Auth</th><th>Current</th><th>Plan</th><th>Health</th><th>Last refresh</th><th>Expiry</th><th>Risk</th><th>Command</th></tr>',
         ...rows.map(row => [
             '<tr>',
             `<td>${escapeTelegramHtml(row.index)}</td>`,
             `<td>${escapeTelegramHtml(row.quotaA)}</td>`,
+            `<td>${escapeTelegramHtml(row.quotaAReset)}</td>`,
             `<td>${escapeTelegramHtml(row.quotaB)}</td>`,
+            `<td>${escapeTelegramHtml(row.quotaBReset)}</td>`,
             `<td>${formatRichAuthCommandLink(`/auth use ${row.index}`, row.name)}</td>`,
             `<td>${row.current ? 'yes' : '-'}</td>`,
             `<td>${escapeTelegramHtml(row.plan)}</td>`,
@@ -9077,16 +9121,17 @@ function formatRichAuthRisk(health) {
     }
     return '-';
 }
-function formatRichAuthQuotaCell(value) {
+function parseRichAuthQuotaCell(value) {
     const trimmed = value.trim();
     if (!trimmed || trimmed === '--' || trimmed === '—') {
-        return '-';
+        return { value: '-', reset: '-' };
     }
-    const [windowLabel, percent] = trimmed.split(':');
+    const [quotaPart, reset = '-'] = trimmed.split('@', 2);
+    const [windowLabel, percent] = quotaPart.split(':');
     if (!windowLabel || percent === undefined) {
-        return trimmed;
+        return { value: quotaPart, reset };
     }
-    return `${percent}%`;
+    return { value: `${percent}%`, reset };
 }
 function formatRichAuthCommandCell(row) {
     const commands = [formatRichAuthCommandLink(`/auth use ${row.index}`, 'use')];
@@ -11135,8 +11180,10 @@ function authQuotaSnapshotFromRateLimit(snapshot, accountId = null, quotaIdentit
         planType: snapshot.planType,
         primaryWindowDurationMins: snapshot.primary?.windowDurationMins ?? null,
         primaryRemainingPercent: snapshot.primary ? remainingUsagePercent(snapshot.primary.usedPercent) : null,
+        primaryResetsAt: snapshot.primary?.resetsAt ?? null,
         secondaryWindowDurationMins: snapshot.secondary?.windowDurationMins ?? null,
         secondaryRemainingPercent: snapshot.secondary ? remainingUsagePercent(snapshot.secondary.usedPercent) : null,
+        secondaryResetsAt: snapshot.secondary?.resetsAt ?? null,
     };
 }
 function codexAuthQuotaSnapshotFromRecord(record) {
@@ -11147,8 +11194,10 @@ function codexAuthQuotaSnapshotFromRecord(record) {
         planType: record.planType,
         primaryWindowDurationMins: record.primaryWindowDurationMins,
         primaryRemainingPercent: record.primaryRemainingPercent,
+        primaryResetsAt: record.primaryResetsAt,
         secondaryWindowDurationMins: record.secondaryWindowDurationMins,
         secondaryRemainingPercent: record.secondaryRemainingPercent,
+        secondaryResetsAt: record.secondaryResetsAt,
     };
 }
 function mergeCodexAuthQuotaSnapshots(current, incoming) {
@@ -11171,8 +11220,10 @@ function isFiniteCodexAuthQuotaSnapshotRecord(record) {
         && isNullableString(record.planType)
         && isNullableFiniteNumber(record.primaryWindowDurationMins)
         && isNullableFiniteNumber(record.primaryRemainingPercent)
+        && isNullableFiniteNumber(record.primaryResetsAt)
         && isNullableFiniteNumber(record.secondaryWindowDurationMins)
-        && isNullableFiniteNumber(record.secondaryRemainingPercent);
+        && isNullableFiniteNumber(record.secondaryRemainingPercent)
+        && isNullableFiniteNumber(record.secondaryResetsAt);
 }
 function remainingUsagePercent(usedPercent) {
     if (!Number.isFinite(usedPercent)) {
@@ -11185,12 +11236,12 @@ function formatAuthQuotaPrefix(locale, snapshot) {
         return '--';
     }
     const windows = [
-        [snapshot.primaryWindowDurationMins, snapshot.primaryRemainingPercent, 'primary'],
-        [snapshot.secondaryWindowDurationMins, snapshot.secondaryRemainingPercent, 'secondary'],
+        [snapshot.primaryWindowDurationMins, snapshot.primaryRemainingPercent, snapshot.primaryResetsAt, 'primary'],
+        [snapshot.secondaryWindowDurationMins, snapshot.secondaryRemainingPercent, snapshot.secondaryResetsAt, 'secondary'],
     ];
     const values = windows
-        .filter(([duration, remaining]) => duration !== null || remaining !== null)
-        .map(([duration, remaining, fallback]) => (`${formatCompactRateLimitWindowLabel(locale, duration, fallback)}:${remaining === null ? '--' : formatUsagePercent(remaining)}`));
+        .filter(([duration, remaining, resetsAt]) => duration !== null || remaining !== null || resetsAt !== null)
+        .map(([duration, remaining, resetsAt, fallback]) => (`${formatCompactRateLimitWindowLabel(locale, duration, fallback)}:${remaining === null ? '--' : formatUsagePercent(remaining)}${resetsAt === null ? '' : `@${formatLocalTimestamp(resetsAt)}`}`));
     return values.length > 0 ? values.join('|') : '--';
 }
 function formatAuthQuotaButtonPrefix(snapshot) {
@@ -11216,8 +11267,10 @@ function isCodexAuthQuotaSnapshot(value) {
         && (snapshot.planType === undefined || isNullableString(snapshot.planType))
         && (snapshot.primaryWindowDurationMins === undefined || isNullableFiniteNumber(snapshot.primaryWindowDurationMins))
         && isNullableFiniteNumber(snapshot.primaryRemainingPercent)
+        && (snapshot.primaryResetsAt === undefined || isNullableFiniteNumber(snapshot.primaryResetsAt))
         && (snapshot.secondaryWindowDurationMins === undefined || isNullableFiniteNumber(snapshot.secondaryWindowDurationMins))
-        && isNullableFiniteNumber(snapshot.secondaryRemainingPercent);
+        && isNullableFiniteNumber(snapshot.secondaryRemainingPercent)
+        && (snapshot.secondaryResetsAt === undefined || isNullableFiniteNumber(snapshot.secondaryResetsAt));
 }
 function normalizeCodexAuthQuotaSnapshot(snapshot) {
     return {
@@ -11227,8 +11280,10 @@ function normalizeCodexAuthQuotaSnapshot(snapshot) {
         planType: snapshot.planType ?? null,
         primaryWindowDurationMins: snapshot.primaryWindowDurationMins ?? null,
         primaryRemainingPercent: snapshot.primaryRemainingPercent,
+        primaryResetsAt: snapshot.primaryResetsAt ?? null,
         secondaryWindowDurationMins: snapshot.secondaryWindowDurationMins ?? null,
         secondaryRemainingPercent: snapshot.secondaryRemainingPercent,
+        secondaryResetsAt: snapshot.secondaryResetsAt ?? null,
     };
 }
 function chatGptAuthMetadataCompatible(left, right) {

package/dist/store/database.d.ts

@@ -35,8 +35,10 @@ export interface CodexAuthQuotaSnapshotRecord {
     planType: string | null;
     primaryWindowDurationMins: number | null;
     primaryRemainingPercent: number | null;
+    primaryResetsAt: number | null;
     secondaryWindowDurationMins: number | null;
     secondaryRemainingPercent: number | null;
+    secondaryResetsAt: number | null;
     updatedAt: number;
 }
 export interface CodexAuthPoolStats {
@@ -136,7 +138,7 @@ export declare class BridgeStore {
     recordCodexAuthCandidateInvalidDelete(name: string, reason?: string | null): void;
     recordCodexAuthCandidateRemoved(name: string, reason?: string | null): void;
     getCodexAuthPoolStats(): CodexAuthPoolStats;
-    setCodexAuthQuotaSnapshot(runtimeId: string, candidateName: string, accountId: string, quotaIdentityId: string, snapshot: Pick<CodexAuthQuotaSnapshotRecord, 'capturedAtMs' | 'planType' | 'primaryWindowDurationMins' | 'primaryRemainingPercent' | 'secondaryWindowDurationMins' | 'secondaryRemainingPercent'>): void;
+    setCodexAuthQuotaSnapshot(runtimeId: string, candidateName: string, accountId: string, quotaIdentityId: string, snapshot: Pick<CodexAuthQuotaSnapshotRecord, 'capturedAtMs' | 'planType' | 'primaryWindowDurationMins' | 'primaryRemainingPercent' | 'secondaryWindowDurationMins' | 'secondaryRemainingPercent'> & Partial<Pick<CodexAuthQuotaSnapshotRecord, 'primaryResetsAt' | 'secondaryResetsAt'>>): void;
     listCodexAuthQuotaSnapshots(quotaIdentityIds: string[]): CodexAuthQuotaSnapshotRecord[];
     private ensureColumn;
 }

package/dist/store/database.js

@@ -191,8 +191,10 @@ export class BridgeStore {
         plan_type TEXT,
         primary_window_duration_mins REAL,
         primary_remaining_percent REAL,
+        primary_resets_at INTEGER,
         secondary_window_duration_mins REAL,
         secondary_remaining_percent REAL,
+        secondary_resets_at INTEGER,
         updated_at INTEGER NOT NULL,
         PRIMARY KEY (runtime_id, candidate_name)
       );
@@ -225,7 +227,9 @@ export class BridgeStore {
         this.ensureColumn('codex_auth_candidate_runtime', 'state', "TEXT NOT NULL DEFAULT 'active'");
         this.ensureColumn('codex_auth_quota_snapshots', 'plan_type', 'TEXT');
         this.ensureColumn('codex_auth_quota_snapshots', 'primary_window_duration_mins', 'REAL');
+        this.ensureColumn('codex_auth_quota_snapshots', 'primary_resets_at', 'INTEGER');
         this.ensureColumn('codex_auth_quota_snapshots', 'secondary_window_duration_mins', 'REAL');
+        this.ensureColumn('codex_auth_quota_snapshots', 'secondary_resets_at', 'INTEGER');
         this.ensureColumn('codex_auth_quota_snapshots', 'quota_identity_id', "TEXT NOT NULL DEFAULT ''");
         this.ensureColumn('codex_auth_pool_history', 'invalid_delete_count', 'INTEGER NOT NULL DEFAULT 0');
         this.db.prepare(`
@@ -997,11 +1001,13 @@ export class BridgeStore {
         plan_type,
         primary_window_duration_mins,
         primary_remaining_percent,
+        primary_resets_at,
         secondary_window_duration_mins,
         secondary_remaining_percent,
+        secondary_resets_at,
         updated_at
       )
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
       ON CONFLICT(runtime_id, candidate_name) DO UPDATE SET
         account_id = excluded.account_id,
         quota_identity_id = excluded.quota_identity_id,
@@ -1009,10 +1015,12 @@ export class BridgeStore {
         plan_type = excluded.plan_type,
         primary_window_duration_mins = excluded.primary_window_duration_mins,
         primary_remaining_percent = excluded.primary_remaining_percent,
+        primary_resets_at = excluded.primary_resets_at,
         secondary_window_duration_mins = excluded.secondary_window_duration_mins,
         secondary_remaining_percent = excluded.secondary_remaining_percent,
+        secondary_resets_at = excluded.secondary_resets_at,
         updated_at = excluded.updated_at
-    `).run(runtimeId, candidateName, accountId, quotaIdentityId, snapshot.capturedAtMs, snapshot.planType, snapshot.primaryWindowDurationMins, snapshot.primaryRemainingPercent, snapshot.secondaryWindowDurationMins, snapshot.secondaryRemainingPercent, Date.now());
+    `).run(runtimeId, candidateName, accountId, quotaIdentityId, snapshot.capturedAtMs, snapshot.planType, snapshot.primaryWindowDurationMins, snapshot.primaryRemainingPercent, snapshot.primaryResetsAt ?? null, snapshot.secondaryWindowDurationMins, snapshot.secondaryRemainingPercent, snapshot.secondaryResetsAt ?? null, Date.now());
     }
     listCodexAuthQuotaSnapshots(quotaIdentityIds) {
         const uniqueQuotaIdentityIds = [...new Set(quotaIdentityIds.filter(Boolean))];
@@ -1030,8 +1038,10 @@ export class BridgeStore {
         plan_type,
         primary_window_duration_mins,
         primary_remaining_percent,
+        primary_resets_at,
         secondary_window_duration_mins,
         secondary_remaining_percent,
+        secondary_resets_at,
         updated_at
       FROM codex_auth_quota_snapshots
       WHERE quota_identity_id IN (${placeholders})
@@ -1045,8 +1055,10 @@ export class BridgeStore {
             planType: nullableString(row.plan_type),
             primaryWindowDurationMins: nullableNumber(row.primary_window_duration_mins),
             primaryRemainingPercent: nullableNumber(row.primary_remaining_percent),
+            primaryResetsAt: nullableNumber(row.primary_resets_at),
             secondaryWindowDurationMins: nullableNumber(row.secondary_window_duration_mins),
             secondaryRemainingPercent: nullableNumber(row.secondary_remaining_percent),
+            secondaryResetsAt: nullableNumber(row.secondary_resets_at),
             updatedAt: Number(row.updated_at),
         }));
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@foxden-app/foxclaw",
-  "version": "0.5.58",
+  "version": "0.5.60",
   "description": "Foxden local execution claw for controlling Codex from trusted chat interfaces.",
   "type": "module",
   "main": "dist/main.js",