@foxden-app/foxclaw 0.6.9 → 0.7.0

package/CHANGELOG.md

@@ -2,6 +2,24 @@
 
 All notable FoxClaw changes are listed here. Each release note is bilingual so GitHub Releases and the npm package are useful to both Chinese and English readers.
 
+## 0.7.0 - 2026-08-26
+
+### 中文
+- 版本对齐发布：代码内容与 0.6.10 相同，无功能性变更。
+
+### English
+- Version alignment release: code content is identical to 0.6.10, no functional changes.
+
+## 0.6.10 - 2026-08-23
+
+### 中文
+- 修复 Linux 重启后旧 `bridge.lock` 中的 PID 被无关进程复用时，FoxClaw 误判已有实例并陷入 systemd 重启失败的问题。新锁记录系统启动 ID 和进程启动标识，同时兼容清理上个系统启动遗留的纯 PID 锁。
+- 修复 `doctor` 在显式配置的 `CODEX_CLI_BIN` 或 `OPENCODE_CLI_BIN` 不存在时仍因 PATH 中有同名命令而误报 `[OK]` 的问题；显式路径现在必须真实存在且可执行。
+
+### English
+- Fixed FoxClaw mistaking an unrelated process for the existing bridge when Linux reuses a PID left in an old `bridge.lock` after reboot. New locks record the boot ID and process start identity while still cleaning legacy PID-only locks from a previous boot.
+- Fixed `doctor` reporting `[OK]` when an explicitly configured `CODEX_CLI_BIN` or `OPENCODE_CLI_BIN` is missing but a same-named command exists on PATH. Explicit paths must now exist and be executable.
+
 ## 0.6.9 - 2026-08-15
 
 ### 中文

package/dist/lock.js

@@ -15,7 +15,10 @@ export function acquireProcessLock(lockPath) {
 function acquireProcessLockInternal(lockPath, allowStaleRetry) {
     try {
         const fd = fs.openSync(lockPath, 'wx');
-        fs.writeFileSync(fd, `${process.pid}\n`, 'utf8');
+        fs.writeFileSync(fd, `${JSON.stringify({
+            pid: process.pid,
+            processIdentity: readLinuxProcessIdentity(process.pid),
+        })}\n`, 'utf8');
         let released = false;
         return {
             release() {
@@ -42,26 +45,73 @@ function acquireProcessLockInternal(lockPath, allowStaleRetry) {
         if (!isAlreadyExistsError(error)) {
             throw error;
         }
-        const pid = readLockPid(lockPath);
-        if (allowStaleRetry && pid !== null && !isProcessAlive(pid)) {
+        const record = readLockRecord(lockPath);
+        if (allowStaleRetry && record.pid !== null && !isLockOwnerAlive(lockPath, record)) {
             fs.rmSync(lockPath, { force: true });
             return acquireProcessLockInternal(lockPath, false);
         }
-        throw new LockHeldError(lockPath, pid);
+        throw new LockHeldError(lockPath, record.pid);
     }
 }
-function readLockPid(lockPath) {
+function readLockRecord(lockPath) {
     try {
         const value = fs.readFileSync(lockPath, 'utf8').trim();
         if (!value) {
-            return null;
+            return { pid: null, processIdentity: null };
+        }
+        if (value.startsWith('{')) {
+            const parsed = JSON.parse(value);
+            return {
+                pid: typeof parsed.pid === 'number' && Number.isInteger(parsed.pid) ? parsed.pid : null,
+                processIdentity: typeof parsed.processIdentity === 'string' ? parsed.processIdentity : null,
+            };
         }
         const pid = Number.parseInt(value, 10);
-        return Number.isFinite(pid) ? pid : null;
+        return { pid: Number.isFinite(pid) ? pid : null, processIdentity: null };
     }
     catch {
+        return { pid: null, processIdentity: null };
+    }
+}
+function isLockOwnerAlive(lockPath, record) {
+    if (record.pid === null || !isProcessAlive(record.pid)) {
+        return false;
+    }
+    const currentIdentity = readLinuxProcessIdentity(record.pid);
+    if (record.processIdentity !== null && currentIdentity !== null) {
+        return record.processIdentity === currentIdentity;
+    }
+    return !wasLockCreatedBeforeCurrentBoot(lockPath);
+}
+function readLinuxProcessIdentity(pid) {
+    if (process.platform !== 'linux') {
         return null;
     }
+    try {
+        const bootId = fs.readFileSync('/proc/sys/kernel/random/boot_id', 'utf8').trim();
+        const stat = fs.readFileSync(`/proc/${pid}/stat`, 'utf8');
+        const commandEnd = stat.lastIndexOf(')');
+        const startTicks = commandEnd >= 0 ? stat.slice(commandEnd + 2).split(' ')[19] : undefined;
+        return bootId && startTicks ? `${bootId}:${startTicks}` : null;
+    }
+    catch {
+        return null;
+    }
+}
+function wasLockCreatedBeforeCurrentBoot(lockPath) {
+    if (process.platform !== 'linux') {
+        return false;
+    }
+    try {
+        const bootTimeSeconds = fs.readFileSync('/proc/stat', 'utf8').match(/^btime (\d+)$/m)?.[1];
+        if (!bootTimeSeconds) {
+            return false;
+        }
+        return fs.statSync(lockPath).mtimeMs < Number(bootTimeSeconds) * 1000;
+    }
+    catch {
+        return false;
+    }
 }
 function isProcessAlive(pid) {
     if (!Number.isFinite(pid) || pid <= 0) {

package/dist/main.js

@@ -1784,13 +1784,13 @@ function runDoctorChecks() {
     const configuredCodexBin = process.env.CODEX_CLI_BIN;
     const checks = [
         ['node >= 24', Number(process.versions.node.split('.')[0]) >= 24],
-        ['codex cli available', hasConfiguredCodexBin(configuredCodexBin) || hasCommand('codex')],
+        ['codex cli available', hasConfiguredCommand(configuredCodexBin, 'codex')],
         ['telegram bot token(s) configured', Boolean(process.env.TG_BOT_TOKENS?.trim() || process.env.TG_BOT_TOKEN?.trim())],
         ['telegram allowed user configured', Boolean(process.env.TG_ALLOWED_USER_ID)],
     ];
     if (process.env.OPENCODE_BOT_TOKEN?.trim()) {
         const configuredOpencodeBin = process.env.OPENCODE_CLI_BIN;
-        checks.push(['opencode cli available', hasConfiguredCodexBin(configuredOpencodeBin) || hasCommand('opencode')]);
+        checks.push(['opencode cli available', hasConfiguredCommand(configuredOpencodeBin, 'opencode')]);
         const codexTokens = [
             ...(process.env.TG_BOT_TOKENS ?? '').split(','),
             process.env.TG_BOT_TOKEN ?? '',
@@ -2337,9 +2337,9 @@ function resolveCommand(commandName) {
         return null;
     }
 }
-function hasConfiguredCodexBin(binPath) {
-    if (!binPath || !binPath.trim())
-        return false;
+function hasConfiguredCommand(binPath, fallbackCommand) {
+    if (!binPath?.trim())
+        return hasCommand(fallbackCommand);
     try {
         fs.accessSync(binPath, fs.constants.X_OK);
         return true;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@foxden-app/foxclaw",
-  "version": "0.6.9",
+  "version": "0.7.0",
   "description": "Foxden local execution claw for controlling Codex and OpenCode from trusted chat interfaces.",
   "type": "module",
   "main": "dist/main.js",