@arcships/morula-runtime 0.1.0-alpha.15 → 0.1.0-alpha.16

package/dist/index.js

@@ -740,7 +740,7 @@ var BUILD_ID, BUILD_CONTEXTS, BUILD_DEFAULT_CONTEXT;
 var init_build_env = __esm({
   "../morula-cli-core/dist/build-env.js"() {
     "use strict";
-    BUILD_ID = "20260924065153.0fc1a372";
+    BUILD_ID = "20260929103157.019b0b1c";
     BUILD_CONTEXTS = {
       "local": "http://localhost:8080/api",
       "test": "https://morula.basecastle.com/api",
@@ -2588,9 +2588,9 @@ async function setupAutostart(context) {
   await removeLegacyAutostart();
   const { command, args } = resolvePortalCommand();
   const stateDir2 = process.env.MORULA_CONFIG_DIR ?? join3(homedir2(), ".morula-cli");
-  const daemonDir2 = join3(stateDir2, "daemon");
-  mkdirSync2(daemonDir2, { recursive: true, mode: 448 });
-  const logFile = join3(daemonDir2, "portal.log");
+  const daemonDir = join3(stateDir2, "daemon");
+  mkdirSync2(daemonDir, { recursive: true, mode: 448 });
+  const logFile = join3(daemonDir, "portal.log");
   const plist = buildLaunchAgentPlist({ label: LABEL, command, args, logFile });
   const plistPath = launchAgentPath();
   mkdirSync2(join3(plistPath, ".."), { recursive: true });
@@ -2626,7 +2626,13 @@ var init_portal_autostart = __esm({
 // src/daemon/daemon-config.ts
 import { randomUUID } from "node:crypto";
 import { homedir as homedir4 } from "node:os";
-import { join as join5 } from "node:path";
+import { dirname as dirname4, join as join5 } from "node:path";
+function configFilePathForEnv(env = process.env) {
+  return env.MORULA_CONFIG ?? join5(env.MORULA_CONFIG_DIR ?? join5(homedir4(), ".morula-cli"), "config.yaml");
+}
+function daemonDirForEnv(env = process.env) {
+  return join5(dirname4(configFilePathForEnv(env)), "daemon");
+}
 function loadDaemonConfig(store) {
   const config = store.load();
   const d = config?.[DAEMON_KEY];
@@ -2666,7 +2672,7 @@ var init_daemon_config = __esm({
 // src/daemon/daemon-lock.ts
 import { execFileSync as execFileSync3 } from "node:child_process";
 import { closeSync as closeSync2, existsSync as existsSync5, mkdirSync as mkdirSync4, openSync as openSync2, readFileSync as readFileSync2, renameSync, rmSync as rmSync4, writeFileSync as writeFileSync3, writeSync } from "node:fs";
-import { dirname as dirname4, join as join6 } from "node:path";
+import { dirname as dirname5, join as join6 } from "node:path";
 function daemonPidPath(configDir) {
   return join6(configDir, "daemon", DAEMON_PID_FILE);
 }
@@ -2769,7 +2775,7 @@ function acquireDaemonLock(lockPath, input) {
     startedAt: (input.now?.() ?? /* @__PURE__ */ new Date()).toISOString(),
     workdir: input.workdir
   };
-  mkdirSync4(dirname4(lockPath), { recursive: true, mode: 448 });
+  mkdirSync4(dirname5(lockPath), { recursive: true, mode: 448 });
   try {
     const fd = openSync2(lockPath, "wx", 384);
     try {
@@ -2854,7 +2860,7 @@ __export(portal_instances_exports, {
 });
 import { readdirSync, statSync } from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import { dirname as dirname5, join as join7 } from "node:path";
+import { dirname as dirname6, join as join7 } from "node:path";
 function parseBaseUrl(raw) {
   if (!raw)
     return null;
@@ -2922,7 +2928,7 @@ function createPortalEnvironmentResolver(options = {}) {
   const env = options.env ?? process.env;
   const log = options.log ?? (() => {
   });
-  const defaultConfigDir = dirname5(env.MORULA_CONFIG ?? join7(env.MORULA_CONFIG_DIR ?? join7(options.homeDir ?? homedir5(), ".morula-cli"), "config.yaml"));
+  const defaultConfigDir = dirname6(env.MORULA_CONFIG ?? join7(env.MORULA_CONFIG_DIR ?? join7(options.homeDir ?? homedir5(), ".morula-cli"), "config.yaml"));
   let index = [];
   let signature = "";
   function buildIndex() {
@@ -2939,7 +2945,7 @@ function createPortalEnvironmentResolver(options = {}) {
       const normalized = normalizeBaseUrl2(entry.url);
       if (!normalized)
         continue;
-      const configDir = dirname5(file);
+      const configDir = dirname6(file);
       built.push({
         configDir,
         context,
@@ -3482,7 +3488,7 @@ var init_dim_locate = __esm({
 // src/daemon/acp/acp-process-registry.ts
 import { execFileSync as execFileSync4 } from "node:child_process";
 import { existsSync as existsSync6, mkdirSync as mkdirSync5, readFileSync as readFileSync4, writeFileSync as writeFileSync5 } from "node:fs";
-import { dirname as dirname6 } from "node:path";
+import { dirname as dirname7 } from "node:path";
 function parseLstartToMs(tokens) {
   if (tokens.length < 5)
     return null;
@@ -3595,7 +3601,7 @@ function persistRecords() {
   if (!recordFile)
     return;
   try {
-    mkdirSync5(dirname6(recordFile), { recursive: true });
+    mkdirSync5(dirname7(recordFile), { recursive: true });
     writeFileSync5(recordFile, JSON.stringify({
       v: RECORD_FILE_VERSION,
       children: [...ownedChildren.values()]
@@ -3838,9 +3844,9 @@ var init_acp_connection = __esm({
             process.stderr.write(`[daemon] dim spawn \u5931\u8D25 ${dimPath}\uFF08\u5C1D\u8BD5\u4E0B\u4E00\u4E2A\u5019\u9009\uFF09: ${message}
 `);
             try {
-              const { existsSync: existsSync19 } = await import("node:fs");
+              const { existsSync: existsSync21 } = await import("node:fs");
               process.stderr.write(
-                `[daemon]   diag: fileExists=${existsSync19(dimPath)} cwdExists=${this.options.cwd ? existsSync19(this.options.cwd) : "n/a"} PATH=${(process.env.PATH ?? "").slice(0, 140)} DYLD=${process.env.DYLD_LIBRARY_PATH ?? "-"} NODE_OPTIONS=${process.env.NODE_OPTIONS ?? "-"}
+                `[daemon]   diag: fileExists=${existsSync21(dimPath)} cwdExists=${this.options.cwd ? existsSync21(this.options.cwd) : "n/a"} PATH=${(process.env.PATH ?? "").slice(0, 140)} DYLD=${process.env.DYLD_LIBRARY_PATH ?? "-"} NODE_OPTIONS=${process.env.NODE_OPTIONS ?? "-"}
 `
               );
             } catch {
@@ -4424,14 +4430,13 @@ init_dist2();
 init_dist2();
 
 // src/build-env.ts
-var BUILD_VERSION2 = "0.1.0-alpha.15";
+var BUILD_VERSION2 = "0.1.0-alpha.16";
 
 // src/commands/daemon.ts
 init_dist();
 init_dist2();
-import { existsSync as existsSync18, mkdirSync as mkdirSync15, readFileSync as readFileSync12, rmSync as rmSync10, writeFileSync as writeFileSync13 } from "node:fs";
-import { homedir as homedir13 } from "node:os";
-import { dirname as dirname11, join as join22 } from "node:path";
+import { existsSync as existsSync19, mkdirSync as mkdirSync16, readFileSync as readFileSync12, rmSync as rmSync10, writeFileSync as writeFileSync14 } from "node:fs";
+import { dirname as dirname13, join as join23 } from "node:path";
 
 // src/daemon/daemon-autostart.ts
 init_portal_autostart();
@@ -4500,9 +4505,9 @@ init_portal_server();
 // src/daemon/runner.ts
 init_dist2();
 import { execFileSync as execFileSync11 } from "node:child_process";
-import { existsSync as existsSync16, mkdirSync as mkdirSync14, statSync as statSync4, writeFileSync as writeFileSync12 } from "node:fs";
+import { existsSync as existsSync17, mkdirSync as mkdirSync15, statSync as statSync4, writeFileSync as writeFileSync13 } from "node:fs";
 import { arch, hostname } from "node:os";
-import { dirname as dirname9, join as join20 } from "node:path";
+import { dirname as dirname11, join as join21 } from "node:path";
 
 // src/daemon/acp/acp-connection-pool.ts
 var DEFAULT_IDLE_MS = 30 * 60 * 1e3;
@@ -4637,6 +4642,10 @@ var DaemonApi = class {
    * D1（daemon-server-connection-unstable）：心跳是「设备存活」的唯一信号，显式 10s 超时——
    * 慢请求快速失败，避免占住单飞槽位（客户端默认 30s，对心跳过松）。
    * 说明：`client.post()` 的第三参是 query，不支持 RequestOptions，故直接走 `client.request`。
+   *
+   * `upgradeRequested`（runtime-self-upgrade，沿用 stop 的一次性认领模式）：服务端置了
+   * upgradeRequestedAt → 本次心跳认领（服务端已清指令）→ daemon 触发自升级；`upgradeVersion`
+   * 为置指令时的目标版本（可空 = daemon 自行解析 latest）。
    */
   heartbeat(runtimeId, runningTaskCount = 0) {
     return this.client.request(
@@ -4647,6 +4656,13 @@ var DaemonApi = class {
   pollTasks(runtimeId, max = 1) {
     return this.client.get("/agent-tasks/poll", { runtimeId, max });
   }
+  /**
+   * runtime-self-upgrade：自升级结果回报（机器协议，设备级凭证）。
+   * best-effort 语义由调用方掌握（失败只 log，不影响本地升级结果）。
+   */
+  reportUpgradeResult(runtimeId, body) {
+    return this.client.post(`/agent-runtimes/${runtimeId}/upgrade-result`, body);
+  }
   claim(taskId, runtimeId) {
     const res = this.client.post(`/agent-tasks/${taskId}/claim`, void 0, { runtimeId });
     res.then((r) => {
@@ -5205,8 +5221,9 @@ var COLLABORATION_SKILL_BODY = `# Working on Morula issues\uFF08\u534F\u4F5C\u59
 - **git / gh \u547D\u4EE4\u4E00\u5F8B\u5728\u5BF9\u5E94\u4ED3\u5E93\u76EE\u5F55\u5185\u6267\u884C**\uFF08\`cd <\u5DE5\u4F5C\u533A\u6839>/<\u4ED3\u5E93\u76EE\u5F55>\`\uFF0C\u6216 \`git -C <\u4ED3\u5E93\u76EE\u5F55> ...\`\uFF09\uFF1A
   \u5DE5\u4F5C\u533A\u6839\u4E0D\u662F git \u4ED3\u5E93\uFF0C\u5728\u6839\u76EE\u5F55\u8DD1 git \u547D\u4EE4\u5FC5\u7136\u5931\u8D25\u3002\`morula\` CLI \u53EF\u5728\u5DE5\u4F5C\u533A\u6839\u6216\u5176\u4EFB\u610F\u5B50\u76EE\u5F55\u6267\u884C\uFF08\u89C1 0.4\uFF09\u3002
 - **\u4E3B\u4ED3\u5E93**\uFF1A\u5E73\u53F0\u5DF2\u89E3\u6790\u51FA\u7684\u4ED3\u5E93\u5728**\u5DE5\u4F5C\u533A\u6839\u4E0B\u5C31\u7EEA**\uFF08\u76EE\u5F55\u540D = \u4ED3\u5E93\u5168\u540D\u628A \`/\` \u6362\u6210 \`-\`\uFF0C\u5982 \`human-resources/xxx\` \u2192 \`human-resources-xxx\`\uFF09\uFF1B\`ls\` \u5DE5\u4F5C\u533A\u6839\u5373\u53EF\u770B\u5230\uFF0C\u76F4\u63A5\u5728\u8BE5\u76EE\u5F55\u5185\u5EFA\u5206\u652F/\u63D0\u4EA4/\u63A8\u5206\u652F/\u63D0 PR\u3002**\u9700\u8981\u7A7A\u95F4\u7ED1\u5B9A\u4E86\u54EA\u4E9B\u4ED3\u5E93\u65F6\u81EA\u5DF1\u67E5**\uFF1A\`morula repo list --space <spaceId>\`\uFF08spaceId \u89C1\u7CFB\u7EDF\u63D0\u793A\u300C\u57FA\u672C\u4FE1\u606F\u300D\u6BB5\uFF09\u3002
-- **\u26A0\uFE0F \`morula repo checkout\` \u7684\u8BED\u4E49 = \u300C\u58F0\u660E/\u5207\u6362\u672C\u4EFB\u52A1\u7684**\u4E3B\u4ED3\u5E93**\u300D**\uFF08\u670D\u52A1\u7AEF generation+1 + daemon \u7269\u5316\u5DE5\u4F5C\u533A\uFF09\uFF1A
-  **\u5B83\u51B3\u5B9A\u540E\u7EED\u5F00\u53D1\u9636\u6BB5\u5728\u54EA\u4E2A\u4ED3\u5E93\u5E72\u6D3B**\u3002\u56E0\u6B64\u53EA\u5728**\u5224\u5B9A\u51FA\u4E3B\u4ED3\u5E93\u4E4B\u540E**\u8C03\u7528\uFF0C**\u4E00\u6B21\u4EFB\u52A1\u53EA\u58F0\u660E\u4E00\u6B21**\uFF08\u5224\u9519\u8981\u7EA0\u6B63\u65F6\u624D\u518D\u8C03\u4E00\u6B21\uFF09\u3002
+- **\u26A0\uFE0F \`morula repo checkout\` \u7684\u8BED\u4E49 = \u300C\u58F0\u660E/\u5207\u6362\u672C\u4EFB\u52A1\u7684\u4E3B\u4ED3\u5E93\u300D**\uFF08\u670D\u52A1\u7AEF generation+1 + daemon \u7269\u5316\u5DE5\u4F5C\u533A\uFF09\uFF1A
+  \u58F0\u660E\u53EA\u4F5C\u7528\u4E8E\u5F53\u524D\u4EFB\u52A1\uFF08\u5F53\u524D\u9636\u6BB5\u7684\u6267\u884C\u8005\uFF09\uFF1B**\u5F00\u53D1\u9636\u6BB5\u4EFB\u52A1\u4E0D\u7EE7\u627F\u5206\u6790\u9636\u6BB5\u7684\u58F0\u660E**\u2014\u2014\u9700\u8981\u6539\u4EE3\u7801\u65F6\u7531\u4F60\u81EA\u5DF1
+  \u6309\u4EFB\u52A1\u63CF\u8FF0/\u5206\u6790\u7ED3\u8BBA checkout\u3002\u56E0\u6B64\u53EA\u5728**\u5224\u5B9A\u51FA\u4E3B\u4ED3\u5E93\u4E4B\u540E**\u8C03\u7528\uFF0C**\u4E00\u6B21\u4EFB\u52A1\u53EA\u58F0\u660E\u4E00\u6B21**\uFF08\u5224\u9519\u8981\u7EA0\u6B63\u65F6\u624D\u518D\u8C03\u4E00\u6B21\uFF09\u3002
   \u4E0D\u8981\u7528\u5B83\u300C\u628A\u7A7A\u95F4\u91CC\u7684\u4ED3\u5E93\u9010\u4E2A\u901B\u4E00\u904D\u300D\u2014\u2014\u6BCF\u8C03\u4E00\u6B21\u4E3B\u4ED3\u5E93\u5C31\u8DDF\u7740\u6362\u4E00\u6B21\uFF08\u771F\u673A\u8E29\u5230\uFF1A\u5206\u6790\u9636\u6BB5\u4E3A\u67E5\u8BC1 checkout \u4E86 3 \u4E2A\u4ED3\u5E93\uFF0C
   \u4E3B\u4ED3\u5E93\u6700\u7EC8\u505C\u5728\u6700\u540E\u90A3\u4E2A\u300C\u53EA\u770B\u4E86\u4E00\u773C\u300D\u7684\u4ED3\u5E93\u4E0A\uFF09\u3002
 - **\u82E5\u4EFB\u52A1\u9700\u8981\u4E86\u89E3\u4ED3\u5E93\u5185\u5BB9/\u4EE3\u7801/\u63D0\u4EA4\u72B6\u6001\uFF08\u8BFB\u573A\u666F\uFF0C\u542B\u7EAF\u95EE\u7B54\uFF09**\uFF1A
@@ -5778,7 +5795,7 @@ function outboxAge(entry) {
 // src/daemon/plugin-register.ts
 import { chmodSync as chmodSync3, cpSync, existsSync as existsSync10, mkdirSync as mkdirSync9, readdirSync as readdirSync3, readFileSync as readFileSync7, rmSync as rmSync8, statSync as statSync2, writeFileSync as writeFileSync7 } from "node:fs";
 import { homedir as homedir10 } from "node:os";
-import { dirname as dirname7, join as join13 } from "node:path";
+import { dirname as dirname8, join as join13 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 var PLUGIN_NAME = "morula-cli";
 var MANIFEST_DIR_NAME = ".codex-plugin";
@@ -5793,9 +5810,9 @@ function defaultPluginsRoot(env = process.env, home = homedir10()) {
   return join13(resolveDimcodeHome(env, home), "plugins");
 }
 function resolvePackagePaths(entryUrl) {
-  const distDir = dirname7(fileURLToPath2(entryUrl));
+  const distDir = dirname8(fileURLToPath2(entryUrl));
   return {
-    packageRoot: dirname7(distDir),
+    packageRoot: dirname8(distDir),
     distDir,
     assetsDir: join13(distDir, "plugin")
   };
@@ -5811,7 +5828,25 @@ if [ -z "$NODE" ]; then
   echo '{"code":"ERROR","message":"node not found; reinstall or re-run: morula-runtime setup"}' >&2
   exit 127
 fi
-exec "$NODE" ${JSON.stringify(entry)} "$@"
+ENTRY=${JSON.stringify(entry)}
+# \u81EA\u6108\u56DE\u9000\uFF1A\u70D8\u7119\u7684\u5B89\u88C5\u76EE\u5F55\u88AB\u6E05\u7406/\u632A\u52A8\u65F6\uFF0C\u6309 daemon \u6CE8\u5165\u7684\u540C\u6E90\u5165\u53E3\u6216\u5F53\u524D morula-runtime \u91CD\u65B0\u5B9A\u4F4D
+if [ ! -f "$ENTRY" ] && [ -n "$MORULA_CLI" ] && [ -f "$MORULA_CLI" ]; then
+  ENTRY="$MORULA_CLI"
+fi
+if [ ! -f "$ENTRY" ]; then
+  RT="$(command -v morula-runtime 2>/dev/null || true)"
+  if [ -n "$RT" ]; then
+    ALT="$("$NODE" -e 'const{realpathSync}=require("fs");const{dirname,join}=require("path");try{const p=realpathSync(process.argv[1]);process.stdout.write(join(dirname(dirname(p)),"dist","morula.js"))}catch(e){}' "$RT" 2>/dev/null || true)"
+    if [ -n "$ALT" ] && [ -f "$ALT" ]; then
+      ENTRY="$ALT"
+    fi
+  fi
+fi
+if [ ! -f "$ENTRY" ]; then
+  echo '{"code":"ERROR","message":"morula.js not found: the install dir was removed or moved; fix: morula-runtime setup (or npm i -g @arcships/morula-runtime)"}' >&2
+  exit 127
+fi
+exec "$NODE" "$ENTRY" "$@"
 `;
 }
 function assetsReady(paths) {
@@ -6068,7 +6103,7 @@ function isAcpInitRetryableError(error) {
 async function withAcpInitRetry(setupOnce, deps = {}) {
   const delays = deps.delaysMs ?? ACP_INIT_RETRY_DELAYS_MS;
   const isRetryable = deps.isRetryable ?? isAcpInitRetryableError;
-  const sleep2 = deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const sleep = deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
   const maxAttempts = delays.length + 1;
   let lastError;
   for (let attempt = 1; attempt <= maxAttempts; attempt++) {
@@ -6083,7 +6118,7 @@ async function withAcpInitRetry(setupOnce, deps = {}) {
         error: lastError instanceof Error ? lastError.message : String(lastError ?? "")
       });
       if (delayMs > 0)
-        await sleep2(delayMs);
+        await sleep(delayMs);
       if (deps.isAborted?.())
         throw new Error("\u4EFB\u52A1\u88AB\u53D6\u6D88");
     }
@@ -6835,8 +6870,8 @@ var DimAgentAdapter = class {
     }
   }
   async probe() {
-    const { existsSync: existsSync19 } = await import("node:fs");
-    const installed = existsSync19(this.dimPath) || this.dimPath === "dim";
+    const { existsSync: existsSync21 } = await import("node:fs");
+    const installed = existsSync21(this.dimPath) || this.dimPath === "dim";
     let authStatus = installed ? "unknown" : "error";
     let lastProbeErrorCode = installed ? void 0 : "DIM_CLI_NOT_FOUND";
     let lastProbeError = installed ? void 0 : `\u672A\u627E\u5230 dim CLI\uFF08${this.dimPath}\uFF09`;
@@ -7129,7 +7164,7 @@ function pickLegacyDimModels(inventory) {
 // src/daemon/repo-cache.ts
 import { execFileSync as execFileSync8 } from "node:child_process";
 import { existsSync as existsSync12, mkdirSync as mkdirSync10 } from "node:fs";
-import { dirname as dirname8, join as join15 } from "node:path";
+import { dirname as dirname9, join as join15 } from "node:path";
 function ownerOf(repoFullName) {
   const idx = repoFullName.indexOf("/");
   return idx > 0 ? repoFullName.slice(0, idx) : "_default";
@@ -7164,7 +7199,7 @@ function openRepoCache(workdir, tenantId, runtimeId, repoFullName, env, agentRem
         syncRemoteUrl(repoCachePath, originUrl(), env);
         return;
       }
-      mkdirSync10(dirname8(repoCachePath), { recursive: true });
+      mkdirSync10(dirname9(repoCachePath), { recursive: true });
       const cloneUrl = fetchUrl();
       try {
         execFileSync8("git", ["clone", "--filter=blob:none", cloneUrl, repoCachePath], { env, stdio: "pipe" });
@@ -8282,11 +8317,333 @@ function materializeAdditionalRepo(input) {
   return input.targetPath;
 }
 
+// src/daemon/self-upgrade.ts
+import { spawn as spawn4 } from "node:child_process";
+import { closeSync as closeSync4, existsSync as existsSync16, mkdirSync as mkdirSync13, openSync as openSync4, writeFileSync as writeFileSync11 } from "node:fs";
+import { dirname as dirname10, join as join19 } from "node:path";
+var RUNTIME_PACKAGE = "@arcships/morula-runtime";
+var DEFAULT_NPM_REGISTRY = "https://registry.npmjs.org";
+var REGISTRY_TIMEOUT_MS = 1e4;
+var NPM_INSTALL_TIMEOUT_MS = 10 * 60 * 1e3;
+var NPM_ROLLBACK_TIMEOUT_MS = 10 * 60 * 1e3;
+var RESTART_LOCK_WAIT_MS = 6e4;
+var RESTART_LIVENESS_CHECK_MS = 5e3;
+function resolveRegistry(env = process.env) {
+  return (env.MORULA_NPM_REGISTRY ?? DEFAULT_NPM_REGISTRY).replace(/\/+$/, "");
+}
+function parseVersion(input) {
+  if (typeof input !== "string")
+    return null;
+  const match = input.trim().match(/^v?(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?$/);
+  if (!match)
+    return null;
+  const prerelease = match[4] ? match[4].split(".").map((part) => /^\d+$/.test(part) ? Number(part) : part) : [];
+  return { major: Number(match[1]), minor: Number(match[2]), patch: Number(match[3]), prerelease };
+}
+function compareVersions(a, b) {
+  const pa = parseVersion(a);
+  const pb = parseVersion(b);
+  if (!pa || !pb)
+    return a === b ? 0 : a < b ? -1 : 1;
+  for (const key of ["major", "minor", "patch"]) {
+    if (pa[key] !== pb[key])
+      return pa[key] < pb[key] ? -1 : 1;
+  }
+  if (pa.prerelease.length === 0 && pb.prerelease.length === 0)
+    return 0;
+  if (pa.prerelease.length === 0)
+    return 1;
+  if (pb.prerelease.length === 0)
+    return -1;
+  for (let i = 0; i < Math.max(pa.prerelease.length, pb.prerelease.length); i++) {
+    const sa = pa.prerelease[i];
+    const sb = pb.prerelease[i];
+    if (sa === void 0)
+      return -1;
+    if (sb === void 0)
+      return 1;
+    if (sa === sb)
+      continue;
+    if (typeof sa === "number" && typeof sb === "number")
+      return sa < sb ? -1 : 1;
+    if (typeof sa === "number")
+      return -1;
+    if (typeof sb === "number")
+      return 1;
+    return sa < sb ? -1 : 1;
+  }
+  return 0;
+}
+function isUpgradeAvailable(current, latest) {
+  if (!parseVersion(current) || !parseVersion(latest))
+    return false;
+  return compareVersions(current, latest) < 0;
+}
+function run2(command, args, opts) {
+  return new Promise((resolve2) => {
+    let child;
+    try {
+      child = spawn4(command, args, { env: opts.env ?? process.env, stdio: ["ignore", "pipe", "pipe"] });
+    } catch (error) {
+      resolve2({ ok: false, code: null, stdout: "", stderr: "", error: error instanceof Error ? error.message : String(error) });
+      return;
+    }
+    let stdout = "";
+    let stderr = "";
+    let settled = false;
+    const timer = setTimeout(() => {
+      if (!settled) {
+        settled = true;
+        try {
+          child.kill("SIGKILL");
+        } catch {
+        }
+        resolve2({ ok: false, code: null, stdout, stderr, error: `timeout after ${Math.round(opts.timeoutMs / 1e3)}s` });
+      }
+    }, opts.timeoutMs);
+    timer.unref?.();
+    child.stdout?.on("data", (d) => {
+      stdout += d.toString();
+    });
+    child.stderr?.on("data", (d) => {
+      stderr += d.toString();
+    });
+    child.on("error", (error) => {
+      if (settled)
+        return;
+      settled = true;
+      clearTimeout(timer);
+      resolve2({ ok: false, code: null, stdout, stderr, error: error.message });
+    });
+    child.on("close", (code) => {
+      if (settled)
+        return;
+      settled = true;
+      clearTimeout(timer);
+      resolve2({ ok: code === 0, code, stdout, stderr });
+    });
+  });
+}
+async function resolveNpmCommand() {
+  const nodeDir = dirname10(process.execPath);
+  const candidates = [
+    { command: "npm", args: [] },
+    { command: join19(nodeDir, "npm"), args: [] },
+    { command: process.execPath, args: [join19(nodeDir, "..", "lib", "node_modules", "npm", "bin", "npm-cli.js")] }
+  ];
+  for (const candidate of candidates) {
+    const res = await run2(candidate.command, [...candidate.args, "--version"], { timeoutMs: 15e3 });
+    if (res.ok && /^\d+\.\d+\.\d+/.test(res.stdout.trim()))
+      return candidate;
+  }
+  return null;
+}
+async function resolveNpmGlobalLayout() {
+  const npm = await resolveNpmCommand();
+  if (!npm)
+    throw new Error("\u672A\u627E\u5230\u53EF\u7528\u7684 npm\uFF08\u5347\u7EA7\u9700\u8981 npm install -g\uFF1B\u8BF7\u786E\u8BA4 node/npm \u5B89\u88C5\u5B8C\u6574\uFF09");
+  const prefixRes = await run2(npm.command, [...npm.args, "prefix", "-g"], { timeoutMs: 3e4 });
+  const rootRes = await run2(npm.command, [...npm.args, "root", "-g"], { timeoutMs: 3e4 });
+  const prefix = prefixRes.ok ? prefixRes.stdout.trim() : "";
+  const nodeModulesRoot = rootRes.ok ? rootRes.stdout.trim() : "";
+  if (!prefix || !nodeModulesRoot)
+    throw new Error(`\u89E3\u6790 npm \u5168\u5C40\u5E03\u5C40\u5931\u8D25\uFF08prefix=${prefix || "?"} root=${nodeModulesRoot || "?"}\uFF09`);
+  return {
+    prefix,
+    nodeModulesRoot,
+    runtimePackageRoot: join19(nodeModulesRoot, RUNTIME_PACKAGE),
+    runtimeBinPath: process.platform === "win32" ? join19(prefix, `${RUNTIME_PACKAGE.split("/")[1] ?? "morula-runtime"}.cmd`) : join19(prefix, "bin", "morula-runtime")
+  };
+}
+async function fetchLatestRuntimeVersion(opts = {}) {
+  const registry2 = opts.registry ?? resolveRegistry();
+  const url = `${registry2}/${encodeURIComponent(RUNTIME_PACKAGE)}/latest`;
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), opts.timeoutMs ?? REGISTRY_TIMEOUT_MS);
+  timer.unref?.();
+  try {
+    const res = await fetch(url, { signal: controller.signal, headers: { Accept: "application/json" } });
+    if (!res.ok)
+      throw new Error(`registry ${res.status}`);
+    const body = await res.json();
+    const version = typeof body.version === "string" ? body.version.trim() : "";
+    if (!version)
+      throw new Error("registry \u54CD\u5E94\u7F3A\u5C11 version");
+    return version;
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    throw new Error(`\u67E5\u8BE2 npm registry \u5931\u8D25\uFF08${url}\uFF09: ${message}`);
+  } finally {
+    clearTimeout(timer);
+  }
+}
+async function npmContext(registry2) {
+  const npm = await resolveNpmCommand();
+  if (!npm)
+    throw new Error("\u672A\u627E\u5230\u53EF\u7528\u7684 npm\uFF08\u5347\u7EA7\u9700\u8981 npm install -g\uFF1B\u8BF7\u786E\u8BA4 node/npm \u5B89\u88C5\u5B8C\u6574\uFF09");
+  const layout = await resolveNpmGlobalLayout();
+  return { npm, layout };
+}
+async function npmInstallGlobal(ctx, version, registry2, timeoutMs) {
+  const args = [...ctx.npm.args, "install", "-g", `${RUNTIME_PACKAGE}@${version}`];
+  if (registry2 && registry2 !== DEFAULT_NPM_REGISTRY)
+    args.push("--registry", registry2);
+  return run2(ctx.npm.command, args, { timeoutMs });
+}
+async function verifyRuntimeInstall(binPath, expected) {
+  if (!existsSync16(binPath))
+    return { ok: false, version: null, reason: `bin \u4E0D\u5B58\u5728\uFF1A${binPath}` };
+  const res = await run2(binPath, ["--version"], { timeoutMs: 6e4 });
+  if (!res.ok)
+    return { ok: false, version: null, reason: `--version \u6267\u884C\u5931\u8D25\uFF08${res.error ?? `exit ${res.code}`}\uFF09\uFF1A${res.stderr.trim().slice(0, 300) || "\u65E0\u8F93\u51FA"}` };
+  try {
+    const parsed = JSON.parse(res.stdout.trim());
+    const version = typeof parsed.version === "string" ? parsed.version : null;
+    if (!version)
+      return { ok: false, version: null, reason: `--version \u8F93\u51FA\u7F3A\u5C11 version\uFF1A${res.stdout.trim().slice(0, 200)}` };
+    if (expected && version !== expected)
+      return { ok: false, version, reason: `\u5B89\u88C5\u540E\u7248\u672C\u4E0D\u7B26\uFF1A\u671F\u671B ${expected}\uFF0C\u5B9E\u9645 ${version}` };
+    return { ok: true, version };
+  } catch {
+    return { ok: false, version: null, reason: `--version \u8F93\u51FA\u975E JSON\uFF1A${res.stdout.trim().slice(0, 200)}` };
+  }
+}
+async function performRuntimeUpgrade(opts) {
+  const log = opts.log ?? (() => {
+  });
+  const registry2 = opts.registry ?? resolveRegistry();
+  const steps = [];
+  const from = opts.currentVersion;
+  let target;
+  if (opts.targetVersion) {
+    target = opts.targetVersion;
+  } else {
+    target = await fetchLatestRuntimeVersion({ registry: registry2 });
+    steps.push(`registry latest: ${target}`);
+  }
+  if (!isUpgradeAvailable(from, target)) {
+    steps.push(`\u5F53\u524D ${from} \u5DF2\u4E0D\u4F4E\u4E8E ${target}\uFF0C\u65E0\u9700\u5347\u7EA7`);
+    return { status: "up_to_date", fromVersion: from, targetVersion: target, steps };
+  }
+  log(`[upgrade] ${from} \u2192 ${target}\uFF08${registry2}\uFF09`);
+  const ctx = await npmContext(registry2);
+  steps.push(`npm install -g ${RUNTIME_PACKAGE}@${target}`);
+  const install = await npmInstallGlobal(ctx, target, registry2, NPM_INSTALL_TIMEOUT_MS);
+  if (!install.ok) {
+    const error = `\u5B89\u88C5\u5931\u8D25\uFF1A${install.error ?? `exit ${install.code}`} ${install.stderr.trim().slice(0, 300)}`.trim();
+    steps.push(error);
+    log(`[upgrade] ${error}`);
+    const still = await verifyRuntimeInstall(ctx.layout.runtimeBinPath);
+    if (still.ok) {
+      steps.push(`\u539F\u7248\u672C ${still.version ?? from} \u5B89\u88C5\u5B8C\u597D\uFF0C\u4FDD\u6301\u4E0D\u53D8`);
+      return { status: "failed", fromVersion: from, toVersion: null, error, steps };
+    }
+    const rollback = await npmInstallGlobal(ctx, from, registry2, NPM_ROLLBACK_TIMEOUT_MS);
+    if (rollback.ok) {
+      steps.push(`\u5DF2\u56DE\u88C5\u539F\u7248\u672C ${from}`);
+      return { status: "rolled_back", fromVersion: from, toVersion: null, error, steps };
+    }
+    steps.push(`\u56DE\u88C5\u539F\u7248\u672C\u5931\u8D25\uFF1A${rollback.error ?? `exit ${rollback.code}`}`);
+    return { status: "failed", fromVersion: from, toVersion: null, error: `${error}\uFF1B\u4E14\u56DE\u88C5\u539F\u7248\u672C\u5931\u8D25\uFF0C\u5F53\u524D\u5168\u5C40\u5B89\u88C5\u53EF\u80FD\u635F\u574F\uFF08\u8BF7\u624B\u52A8\u6267\u884C npm i -g ${RUNTIME_PACKAGE}@${from}\uFF09`, steps };
+  }
+  const verified = await verifyRuntimeInstall(ctx.layout.runtimeBinPath, target);
+  if (!verified.ok) {
+    const error = `\u65B0\u5B89\u88C5\u9A8C\u8BC1\u5931\u8D25\uFF1A${verified.reason ?? "\u672A\u77E5\u539F\u56E0"}`;
+    steps.push(error);
+    log(`[upgrade] ${error}`);
+    const rollback = await npmInstallGlobal(ctx, from, registry2, NPM_ROLLBACK_TIMEOUT_MS);
+    if (rollback.ok) {
+      const rollbackVerified = await verifyRuntimeInstall(ctx.layout.runtimeBinPath, from);
+      if (rollbackVerified.ok) {
+        steps.push(`\u5DF2\u56DE\u88C5\u539F\u7248\u672C ${from} \u5E76\u9A8C\u8BC1\u53EF\u7528`);
+        return { status: "rolled_back", fromVersion: from, toVersion: null, error, steps };
+      }
+      steps.push(`\u56DE\u88C5\u540E\u9A8C\u8BC1\u5931\u8D25\uFF1A${rollbackVerified.reason ?? "\u672A\u77E5"}\uFF08\u8BF7\u624B\u52A8\u6267\u884C npm i -g ${RUNTIME_PACKAGE}@${from}\uFF09`);
+      return { status: "failed", fromVersion: from, toVersion: null, error: `${error}\uFF1B\u56DE\u88C5 ${from} \u540E\u9A8C\u8BC1\u4ECD\u5931\u8D25`, steps };
+    }
+    steps.push(`\u56DE\u88C5\u539F\u7248\u672C\u5931\u8D25\uFF1A${rollback.error ?? `exit ${rollback.code}`}\uFF08\u8BF7\u624B\u52A8\u6267\u884C npm i -g ${RUNTIME_PACKAGE}@${from}\uFF09`);
+    return { status: "failed", fromVersion: from, toVersion: null, error: `${error}\uFF1B\u4E14\u56DE\u88C5\u539F\u7248\u672C\u5931\u8D25`, steps };
+  }
+  steps.push(`\u65B0\u7248\u672C ${verified.version} \u9A8C\u8BC1\u901A\u8FC7`);
+  const warnings = [];
+  const setup = await run2(ctx.layout.runtimeBinPath, ["setup"], { timeoutMs: 6e4 });
+  if (setup.ok) {
+    steps.push("\u63D2\u4EF6\u76EE\u5F55\u5DF2\u91CD\u70D8\u7119\uFF08morula-runtime setup\uFF09");
+  } else {
+    const warning = `\u63D2\u4EF6\u76EE\u5F55\u91CD\u70D8\u7119\u5931\u8D25\uFF08${setup.error ?? `exit ${setup.code}`}\uFF09\u2014\u2014 \u4E0D\u5F71\u54CD\u672C\u6B21\u5347\u7EA7\uFF0C\u53EF\u7A0D\u540E\u624B\u52A8\u6267\u884C morula-runtime setup`;
+    warnings.push(warning);
+    steps.push(warning);
+    log(`[upgrade] ${warning}`);
+  }
+  log(`[upgrade] \u5347\u7EA7\u5B8C\u6210\uFF1A${from} \u2192 ${verified.version}`);
+  return { status: "succeeded", fromVersion: from, toVersion: verified.version ?? target, warnings, steps };
+}
+async function spawnUpgradedDaemon(opts) {
+  let packageRoot = opts.runtimePackageRoot;
+  if (!packageRoot || !existsSync16(join19(packageRoot, "dist", "index.js"))) {
+    const layout = await resolveNpmGlobalLayout();
+    packageRoot = layout.runtimePackageRoot;
+  }
+  const entry = join19(packageRoot, "dist", "index.js");
+  if (!existsSync16(entry))
+    return { pid: 0, entry, error: `\u65B0\u5305\u5165\u53E3\u4E0D\u5B58\u5728\uFF1A${entry}`, waitExit: async () => ({ exited: true, code: null }) };
+  mkdirSync13(dirname10(opts.logFile), { recursive: true, mode: 448 });
+  let logFd;
+  try {
+    logFd = openSync4(opts.logFile, "a", 384);
+  } catch (error) {
+    return { pid: 0, entry, error: `\u65E0\u6CD5\u6253\u5F00\u65E5\u5FD7\u6587\u4EF6 ${opts.logFile}: ${error instanceof Error ? error.message : String(error)}`, waitExit: async () => ({ exited: true, code: null }) };
+  }
+  try {
+    const child = spawn4(process.execPath, [entry, "daemon", "run"], {
+      cwd: process.cwd(),
+      detached: true,
+      stdio: ["ignore", logFd, logFd],
+      env: {
+        ...opts.env,
+        MORULA_DAEMON_NAME: opts.daemonConfig?.name ?? "",
+        MORULA_DAEMON_WORKDIR: opts.daemonConfig?.workdir ?? "",
+        MORULA_DAEMON_MAX_CONCURRENT: String(opts.daemonConfig?.maxConcurrent ?? ""),
+        MORULA_DAEMON_RESTART_WAIT_MS: String(RESTART_LOCK_WAIT_MS)
+      }
+    });
+    child.unref();
+    if (!child.pid)
+      return { pid: 0, entry, error: "spawn \u672A\u8FD4\u56DE pid", waitExit: async () => ({ exited: true, code: null }) };
+    const exitPromise = new Promise((resolve2) => {
+      child.on("exit", (code) => {
+        resolve2(code ?? null);
+      });
+    });
+    const waitExit = async (ms) => {
+      return await Promise.race([
+        exitPromise.then((code) => ({ exited: true, code })),
+        new Promise((resolve2) => {
+          const timer = setTimeout(() => {
+            resolve2({ exited: false, code: null });
+          }, ms);
+          timer.unref?.();
+        })
+      ]);
+    };
+    mkdirSync13(dirname10(opts.pidFile), { recursive: true, mode: 448 });
+    writeFileSync11(opts.pidFile, String(child.pid), { mode: 384 });
+    return { pid: child.pid, entry, waitExit };
+  } catch (error) {
+    return { pid: 0, entry, error: error instanceof Error ? error.message : String(error), waitExit: async () => ({ exited: true, code: null }) };
+  } finally {
+    try {
+      closeSync4(logFd);
+    } catch {
+    }
+  }
+}
+
 // src/daemon/session-host.ts
 init_dist2();
 init_acp_connection();
-import { mkdirSync as mkdirSync13, writeFileSync as writeFileSync11 } from "node:fs";
-import { join as join19 } from "node:path";
+import { mkdirSync as mkdirSync14, writeFileSync as writeFileSync12 } from "node:fs";
+import { join as join20 } from "node:path";
 
 // src/daemon/steward-instructions.ts
 var STEWARD_SYSTEM_INSTRUCTIONS = `\u4F60\u662F\u300C\u7A7A\u95F4\u7BA1\u5BB6\u667A\u80FD\u4F53\u300D\uFF08Project Steward\uFF09\u3002
@@ -8540,8 +8897,8 @@ var SessionHost = class {
   async open(cmd) {
     if (!cmd?.sessionId || !cmd?.tenantId || !cmd?.projectId)
       return { ok: false, error: "SESSION_OPEN_INVALID_ARGS" };
-    const workspaceDir = join19(this.options.workdir, "steward", cmd.tenantId, cmd.projectId);
-    mkdirSync13(workspaceDir, { recursive: true });
+    const workspaceDir = join20(this.options.workdir, "steward", cmd.tenantId, cmd.projectId);
+    mkdirSync14(workspaceDir, { recursive: true });
     this.writeInjections(workspaceDir, cmd);
     const existing = this.sessions.get(cmd.sessionId);
     if (existing?.conn.isAlive) {
@@ -8827,7 +9184,7 @@ var SessionHost = class {
 ---
 
 ${cmd.prompt}`;
-    const run3 = (async () => {
+    const run5 = (async () => {
       try {
         const { blocks, fileRefs } = await this.materializeAttachments(managed.workspaceDir, cmd.attachments ?? []);
         const promptBlocks = [{ type: "text", text: fileRefs.length > 0 ? `${text}
@@ -8874,8 +9231,8 @@ ${fileRefs.join("\n")}` : text }];
         this.touch(managed);
       }
     })();
-    managed.promptInFlight = run3;
-    return run3;
+    managed.promptInFlight = run5;
+    return run5;
   }
   /**
    * 附件物化（§五 P2-3）：
@@ -8890,7 +9247,7 @@ ${fileRefs.join("\n")}` : text }];
     const fileRefs = [];
     if (attachments.length === 0)
       return { blocks, fileRefs };
-    const dir = join19(workspaceDir, "attachments");
+    const dir = join20(workspaceDir, "attachments");
     for (const attachment of attachments) {
       try {
         const res = await fetch(attachment.downloadUrl, { signal: AbortSignal.timeout(ATTACHMENT_FETCH_TIMEOUT_MS) });
@@ -8900,9 +9257,9 @@ ${fileRefs.join("\n")}` : text }];
         if (attachment.isImage) {
           blocks.push({ type: "image", data: bytes.toString("base64"), mimeType: attachment.fileType || "image/png" });
         } else {
-          mkdirSync13(dir, { recursive: true });
-          const target = join19(dir, safeAttachmentName(attachment.fileName));
-          writeFileSync11(target, bytes);
+          mkdirSync14(dir, { recursive: true });
+          const target = join20(dir, safeAttachmentName(attachment.fileName));
+          writeFileSync12(target, bytes);
           fileRefs.push(`- ${attachment.fileName} \u2192 ${target}`);
         }
       } catch (err) {
@@ -8998,13 +9355,13 @@ ${fileRefs.join("\n")}` : text }];
   /** 工作区注入物（幂等覆盖；daemon 侧组装，P1-6） */
   writeInjections(workspaceDir, cmd) {
     writeProjectAgentsMd(workspaceDir, cmd.agentsMd, this.log);
-    const skillDir = join19(workspaceDir, ".agents", "skills", STEWARD_SKILL_NAME);
-    mkdirSync13(skillDir, { recursive: true });
-    writeFileSync11(join19(skillDir, "SKILL.md"), buildStewardSkillFile(), "utf8");
-    const contextDir = join19(workspaceDir, ".agent_context");
-    mkdirSync13(contextDir, { recursive: true });
-    writeFileSync11(
-      join19(contextDir, "steward-context.md"),
+    const skillDir = join20(workspaceDir, ".agents", "skills", STEWARD_SKILL_NAME);
+    mkdirSync14(skillDir, { recursive: true });
+    writeFileSync12(join20(skillDir, "SKILL.md"), buildStewardSkillFile(), "utf8");
+    const contextDir = join20(workspaceDir, ".agent_context");
+    mkdirSync14(contextDir, { recursive: true });
+    writeFileSync12(
+      join20(contextDir, "steward-context.md"),
       buildStewardContextMd(cmd.facts ?? { projectId: cmd.projectId, tenantId: cmd.tenantId }),
       "utf8"
     );
@@ -9548,6 +9905,12 @@ var DaemonRunner = class {
   outboxConsecutiveFailures = 0;
   outboxPausedUntil = 0;
   processing = /* @__PURE__ */ new Set();
+  /**
+   * runtime-self-upgrade：远程升级执行中标志。
+   * 置位期间 tick / WS 派发**不领新任务**——升级完成后 daemon 会重启，中途接的任务会被打断
+   * （心跳超时 → 服务端回收重派），违背「升级不破坏正在执行的任务」的约束。
+   */
+  upgradeInProgress = false;
   /** M1-A1：任务级取消信号（WS cancelled 事件 / 状态轮询触发 abort） */
   cancels = /* @__PURE__ */ new Map();
   /** Phase 2：审批决策等待表（approvalId → resolver；WS 事件 resolve，轮询兜底） */
@@ -9689,7 +10052,10 @@ var DaemonRunner = class {
       models: dimModels,
       // LOCAL-AGENT-COLLAB-001 Phase 1：宿主协议 + Provider inventory
       hostProtocolVersion: 1,
-      hostCapabilities: { worktreeV2: true, workspaceCleanupV1: false },
+      // selfUpgrade（runtime-self-upgrade 评审 P2）：本 daemon 认识心跳响应里的 upgradeRequested
+      // 指令并具备自升级能力。管理页据此门控远程升级按钮——旧版 daemon 会静默吞掉指令，
+      // 对它显示按钮只会误导用户（能力自报比服务端维护最低版本号更准确，register 即刷新）
+      hostCapabilities: { worktreeV2: true, workspaceCleanupV1: false, selfUpgrade: true },
       inventoryRevision: `daemon-v${BUILD_VERSION2}`,
       providers: inventory
     });
@@ -9707,10 +10073,33 @@ var DaemonRunner = class {
       await this.tick();
       if (!this.running)
         break;
-      await sleep(POLL_INTERVAL_MS);
+      await this.waitForPollInterval();
     }
     this.stop();
   }
+  /** 下一拍等待（POLL_INTERVAL_MS，可被 wakeMainLoop 提前唤醒） */
+  pollWake = null;
+  waitForPollInterval() {
+    return new Promise((resolve2) => {
+      const timer = setTimeout(() => {
+        this.pollWake = null;
+        resolve2();
+      }, POLL_INTERVAL_MS);
+      timer.unref?.();
+      this.pollWake = () => {
+        clearTimeout(timer);
+        this.pollWake = null;
+        resolve2();
+      };
+    });
+  }
+  /**
+   * 唤醒主循环的 poll 等待（评审 P4 配套）：远程升级完成（running=false）后立即生效，
+   * 不必最多干等 15s 的 poll 间隔——旧进程越快退出释放锁，新进程越快接管，自重启窗口越小。
+   */
+  wakeMainLoop() {
+    this.pollWake?.();
+  }
   stop() {
     this.running = false;
     this.stopHeartbeatTimer();
@@ -9775,6 +10164,10 @@ var DaemonRunner = class {
           this.running = false;
           return;
         }
+        if (res?.upgradeRequested) {
+          this.log(`[daemon] \u6536\u5230\u670D\u52A1\u7AEF\u8FDC\u7A0B\u5347\u7EA7\u6307\u4EE4${res.upgradeVersion ? `\uFF08\u76EE\u6807 ${res.upgradeVersion}\uFF09` : ""}`);
+          void this.handleRemoteUpgrade(res.upgradeVersion ?? null);
+        }
         if (!res.ok && res.status === "unknown") {
           this.log("[daemon] \u672C\u8BBE\u5907\u5DF2\u5728\u670D\u52A1\u7AEF\u6CE8\u9500\uFF08runtime \u8BB0\u5F55\u4E0D\u5B58\u5728\uFF09\uFF0C\u81EA\u52A8\u9000\u51FA");
           this.running = false;
@@ -9793,6 +10186,95 @@ var DaemonRunner = class {
       this.heartbeatInFlight = false;
     }
   }
+  /**
+   * runtime-self-upgrade：远程升级指令执行（心跳认领后异步触发，见 sendHeartbeat）。
+   *
+   * 边界：
+   * - 有任务在跑（processing 非空）→ 回报 busy 拒绝（指令已消耗，页面可重新下发）；
+   * - 空闲 → performRuntimeUpgrade（安装/验证/失败回装/重烘焙插件目录）；期间心跳照常、不领新任务；
+   * - 成功 → 用**新包入口** detached 拉起新 daemon（等旧进程释放单实例锁）→ 回报 → 本实例退出；
+   * - 失败/回退 → 回报后**继续用原版本运行**（升级失败不中断服务）。
+   */
+  async handleRemoteUpgrade(targetVersion) {
+    if (!this.runtimeId)
+      return;
+    if (this.upgradeInProgress) {
+      this.log("[daemon] \u5347\u7EA7\u5DF2\u5728\u8FDB\u884C\uFF0C\u5FFD\u7565\u91CD\u590D\u6307\u4EE4");
+      return;
+    }
+    this.upgradeInProgress = true;
+    const fromVersion = BUILD_VERSION2;
+    try {
+      if (this.processing.size > 0) {
+        const error = `${this.processing.size} \u4E2A\u4EFB\u52A1\u6267\u884C\u4E2D`;
+        this.log(`[daemon] \u5347\u7EA7\u6307\u4EE4\u88AB\u62D2\u7EDD\uFF1A${error}`);
+        await this.reportUpgradeResultSafe({ status: "busy", fromVersion, error });
+        return;
+      }
+      const report = await performRuntimeUpgrade({
+        currentVersion: fromVersion,
+        targetVersion,
+        log: (line) => this.log(line)
+      });
+      if (report.status === "up_to_date") {
+        this.log(`[daemon] \u5F53\u524D ${fromVersion} \u5DF2\u4E0D\u4F4E\u4E8E ${report.targetVersion}\uFF0C\u65E0\u9700\u5347\u7EA7`);
+        await this.reportUpgradeResultSafe({ status: "succeeded", fromVersion, toVersion: fromVersion, restart: false });
+        return;
+      }
+      if (report.status !== "succeeded") {
+        this.log(`[daemon] \u5347\u7EA7\u5931\u8D25\uFF08${report.status}\uFF09\uFF1A${report.error}\u2014\u2014\u7EE7\u7EED\u7528 ${fromVersion} \u8FD0\u884C`);
+        await this.reportUpgradeResultSafe({
+          status: report.status,
+          fromVersion,
+          toVersion: report.toVersion ?? void 0,
+          error: report.error
+        });
+        return;
+      }
+      const cfg = loadDaemonConfig(this.store);
+      const dir = daemonDirForEnv(process.env);
+      const spawned = await spawnUpgradedDaemon({
+        env: process.env,
+        logFile: join21(dir, "daemon.log"),
+        pidFile: join21(dir, "daemon.pid"),
+        daemonConfig: { name: cfg?.name, workdir: cfg?.workdir, maxConcurrent: cfg?.maxConcurrent ?? DEFAULT_MAX_CONCURRENT }
+      });
+      if (spawned.pid <= 0) {
+        const error = `\u65B0\u7248\u672C ${report.toVersion} \u5DF2\u5B89\u88C5\uFF0C\u4F46\u81EA\u52A8\u91CD\u542F\u5931\u8D25\uFF1A${spawned.error ?? "\u672A\u77E5\u539F\u56E0"}\uFF08\u672C\u5B9E\u4F8B\u7EE7\u7EED\u8FD0\u884C\u65E7\u4EE3\u7801\uFF0C\u8BF7\u624B\u52A8\u6267\u884C morula-runtime daemon start \u91CD\u542F\uFF09`;
+        this.log(`[daemon] ${error}`);
+        await this.reportUpgradeResultSafe({ status: "failed", fromVersion, toVersion: report.toVersion, error });
+        return;
+      }
+      this.log(`[daemon] \u65B0 daemon \u5DF2\u62C9\u8D77\uFF08pid=${spawned.pid}\uFF09\uFF0C\u89C2\u5BDF ${Math.round(RESTART_LIVENESS_CHECK_MS / 1e3)}s \u786E\u8BA4\u63A5\u7BA1\u2026`);
+      const liveness = await spawned.waitExit(RESTART_LIVENESS_CHECK_MS);
+      if (liveness.exited) {
+        const error = `\u65B0\u7248\u672C ${report.toVersion} \u5DF2\u5B89\u88C5\uFF0C\u4F46\u65B0 daemon \u8FDB\u7A0B\u7ACB\u5373\u9000\u51FA\uFF08code=${liveness.code ?? "\u672A\u77E5"}\uFF0C\u8BE6\u89C1 ${join21(dir, "daemon.log")}\uFF09\u2014\u2014\u672C\u5B9E\u4F8B\u7EE7\u7EED\u8FD0\u884C\u65E7\u4EE3\u7801\uFF0C\u8BF7\u68C0\u67E5\u65E5\u5FD7\u540E\u624B\u52A8 morula-runtime daemon start`;
+        this.log(`[daemon] ${error}`);
+        await this.reportUpgradeResultSafe({ status: "failed", fromVersion, toVersion: report.toVersion, error });
+        return;
+      }
+      this.log("[daemon] \u65B0\u8FDB\u7A0B\u8FD0\u884C\u4E2D\uFF08\u7B49\u672C\u5B9E\u4F8B\u9000\u51FA\u91CA\u653E\u9501\u540E\u63A5\u7BA1\uFF09\uFF0C\u56DE\u62A5\u6210\u529F\u5E76\u9000\u51FA");
+      await this.reportUpgradeResultSafe({ status: "succeeded", fromVersion, toVersion: report.toVersion, restart: true });
+      this.running = false;
+      this.wakeMainLoop();
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      this.log(`[daemon] \u81EA\u5347\u7EA7\u5F02\u5E38\uFF1A${message}\u2014\u2014\u7EE7\u7EED\u7528 ${fromVersion} \u8FD0\u884C`);
+      await this.reportUpgradeResultSafe({ status: "failed", fromVersion, error: message });
+    } finally {
+      this.upgradeInProgress = false;
+    }
+  }
+  /** 升级结果回报（best-effort：服务端不可达不影响本地升级流程） */
+  async reportUpgradeResultSafe(body) {
+    if (!this.runtimeId)
+      return;
+    try {
+      await this.api.reportUpgradeResult(this.runtimeId, body);
+    } catch (error) {
+      this.log(`[daemon] \u5347\u7EA7\u7ED3\u679C\u56DE\u62A5\u5931\u8D25\uFF08\u4E0D\u5F71\u54CD\u672C\u5730\u6D41\u7A0B\uFF09: ${error instanceof Error ? error.message : String(error)}`);
+    }
+  }
   /**
    * tick：poll 兜底 + 取消轮询 + cleanup 补拉（心跳与 outbox 补投均已独立于本循环）。
    * D1：整轮加时间预算——超预算记 WARN 并丢弃本轮等待下一拍，避免单个慢请求把 tick 拖死。
@@ -9821,6 +10303,8 @@ var DaemonRunner = class {
   async tickOnce() {
     if (!this.runtimeId)
       return;
+    if (this.upgradeInProgress)
+      return;
     try {
       const tasks = await this.api.pollTasks(this.runtimeId);
       for (const task of tasks) {
@@ -10220,6 +10704,10 @@ var DaemonRunner = class {
   async handleTask(taskId) {
     if (this.processing.has(taskId))
       return;
+    if (this.upgradeInProgress) {
+      this.log(`[daemon] \u5347\u7EA7\u8FDB\u884C\u4E2D\uFF0C\u5FFD\u7565\u4EFB\u52A1\u6D3E\u53D1 task=${taskId}`);
+      return;
+    }
     this.processing.add(taskId);
     const ctrl = new AbortController();
     this.cancels.set(taskId, ctrl);
@@ -10489,12 +10977,12 @@ var DaemonRunner = class {
       });
       if (spaceToken?.token)
         env = { ...env, ...buildRepoEnv(spaceToken.token, spaceToken.baseUrl) };
-      repoDir = join20(cfg.workdir, "scratch", taskId);
+      repoDir = join21(cfg.workdir, "scratch", taskId);
       taskRoot = repoDir;
-      mkdirSync14(repoDir, { recursive: true });
-      const readme = join20(repoDir, "README.md");
-      if (!existsSync16(readme)) {
-        writeFileSync12(
+      mkdirSync15(repoDir, { recursive: true });
+      const readme = join21(repoDir, "README.md");
+      if (!existsSync17(readme)) {
+        writeFileSync13(
           readme,
           `# \u9694\u79BB\u5DE5\u4F5C\u533A\uFF08\u4EFB\u52A1 ${taskId}\uFF09
 
@@ -10792,7 +11280,7 @@ var DaemonRunner = class {
     }, { log: (line) => this.log(`[daemon] ${line}`) });
     const resumeSessionId = providerKey === "dim" ? detail.dimSessionId ?? detail.lastRun?.dimSessionId ?? null : null;
     const resumeWorkDir = detail.dimWorkDir ?? detail.lastRun?.dimWorkDir ?? null;
-    const canResume = !!resumeSessionId && !!resumeWorkDir && existsSync16(resumeWorkDir);
+    const canResume = !!resumeSessionId && !!resumeWorkDir && existsSync17(resumeWorkDir);
     const input = {
       executionId: `${taskId}:1`,
       // task-workspace-layout：新会话 cwd = 任务工作区根（AGENTS.md/.agents 在根下，仓库在子目录）
@@ -11053,7 +11541,7 @@ var DaemonRunner = class {
       await this.api.submitCleanupResult(item.id, this.runtimeId, { ok: true });
       return;
     }
-    const managedRoot = join20(cfg.workdir, "worktrees", this.tenantId);
+    const managedRoot = join21(cfg.workdir, "worktrees", this.tenantId);
     if (!wc.worktreePath.startsWith(`${managedRoot}/`)) {
       await this.api.submitCleanupResult(item.id, this.runtimeId, {
         ok: false,
@@ -11092,47 +11580,44 @@ var DaemonRunner = class {
     }
   }
 };
-function sleep(ms) {
-  return new Promise((r) => setTimeout(r, ms));
-}
 function isDebugLogEnabled() {
   return isFlagEnabled("MORULA_DAEMON_DEBUG_LOG", false);
 }
 var spaceTokenFailureLogged = false;
 function writeCustomSkills(targetDir, skills, log) {
   const NAME_RE = /^[\w-]{1,64}$/;
-  const base = join20(targetDir, ".agents", "skills");
+  const base = join21(targetDir, ".agents", "skills");
   for (const skill of skills) {
     const name = skill.name.trim();
     if (!NAME_RE.test(name)) {
       log?.(`[daemon] \u8DF3\u8FC7\u975E\u6CD5 skill \u540D\u79F0: ${JSON.stringify(name)}`);
       continue;
     }
-    const dir = join20(base, name);
-    if (dirname9(dir) !== base) {
+    const dir = join21(base, name);
+    if (dirname11(dir) !== base) {
       log?.(`[daemon] \u8DF3\u8FC7\u8D8A\u754C skill \u8DEF\u5F84: ${JSON.stringify(name)}`);
       continue;
     }
-    mkdirSync14(dir, { recursive: true });
+    mkdirSync15(dir, { recursive: true });
     const meta = ["---", `name: ${name}`];
     if (skill.description?.trim()) {
       meta.push(`description: ${skill.description.trim().replace(/\n/g, " ")}`);
     }
     meta.push("---", "");
-    writeFileSync12(join20(dir, "SKILL.md"), `${meta.join("\n")}
+    writeFileSync13(join21(dir, "SKILL.md"), `${meta.join("\n")}
 ${skill.content ?? ""}`, "utf8");
   }
 }
 function writeCollaborationSkill(targetDir, repo, repoBaseUrl, log, baseBranch, provider = repoBaseUrl ? "gitlab" : "github") {
-  const dir = join20(targetDir, ".agents", "skills", COLLABORATION_SKILL_NAME);
-  const refsDir = join20(dir, "references");
-  mkdirSync14(refsDir, { recursive: true });
+  const dir = join21(targetDir, ".agents", "skills", COLLABORATION_SKILL_NAME);
+  const refsDir = join21(dir, "references");
+  mkdirSync15(refsDir, { recursive: true });
   const isGitlab = provider === "gitlab" && !!repoBaseUrl;
   const front = isGitlab ? buildGitlabSkillFrontmatter() : COLLABORATION_SKILL_FRONTMATTER;
   const body = isGitlab ? buildGitlabSkillBody(repo ?? "", repoBaseUrl, baseBranch) : buildGithubSkillBody(baseBranch);
-  writeFileSync12(join20(dir, "SKILL.md"), `${front}
+  writeFileSync13(join21(dir, "SKILL.md"), `${front}
 ${body}`, "utf8");
-  writeFileSync12(join20(refsDir, "working-on-issues-source-map.md"), COLLABORATION_SKILL_SOURCE_MAP, "utf8");
+  writeFileSync13(join21(refsDir, "working-on-issues-source-map.md"), COLLABORATION_SKILL_SOURCE_MAP, "utf8");
   log?.(`[daemon] \u5DF2\u6CE8\u5165\u534F\u4F5C\u5951\u7EA6 skill ${COLLABORATION_SKILL_NAME}\uFF08${isGitlab ? "GitLab" : "GitHub"} \u7248\uFF0C\u4ED3\u5E93=${repo ?? "\u65E0"}\uFF09\u5230 .agents/skills/`);
 }
 function resolveContractPlatform(availableRepos, boundRepo, boundBaseUrl, boundBaseBranch) {
@@ -11163,8 +11648,8 @@ function resolveContractPlatform(availableRepos, boundRepo, boundBaseUrl, boundB
   };
 }
 function writeTaskContextBrief(targetDir, taskId, detail, repo, log) {
-  const briefDir = join20(targetDir, ".agent_context");
-  mkdirSync14(briefDir, { recursive: true });
+  const briefDir = join21(targetDir, ".agent_context");
+  mkdirSync15(briefDir, { recursive: true });
   const brief = `# \u4EFB\u52A1\u4E0A\u4E0B\u6587\uFF08Task Context\uFF09
 
 - \u672C AgentTask \u4EFB\u52A1 ID\uFF1A\`${taskId}\`
@@ -11174,7 +11659,7 @@ function writeTaskContextBrief(targetDir, taskId, detail, repo, log) {
 ---
 
 ${buildTaskPromptWithContract(detail, void 0)}`;
-  writeFileSync12(join20(briefDir, "task-context.md"), brief, "utf8");
+  writeFileSync13(join21(briefDir, "task-context.md"), brief, "utf8");
   log?.(`[daemon] \u5DF2\u6CE8\u5165\u4EFB\u52A1\u4E0A\u4E0B\u6587 brief \u5230 .agent_context/task-context.md`);
 }
 var PROJECT_AGENTS_MD_MAX_CHARS = 1e5;
@@ -11188,8 +11673,8 @@ function writeProjectAgentsMd(targetDir, agentsMd, log) {
     log?.(`[daemon] \u7A7A\u95F4 AGENTS.md \u5185\u5BB9\u8D85\u957F\uFF08${content.length} \u5B57\u7B26 > ${PROJECT_AGENTS_MD_MAX_CHARS}\uFF09\uFF0C\u5DF2\u622A\u65AD\u5199\u5165`);
     content = content.slice(0, PROJECT_AGENTS_MD_MAX_CHARS);
   }
-  mkdirSync14(targetDir, { recursive: true });
-  writeFileSync12(join20(targetDir, "AGENTS.md"), `${content}
+  mkdirSync15(targetDir, { recursive: true });
+  writeFileSync13(join21(targetDir, "AGENTS.md"), `${content}
 `, "utf8");
   log?.(`[daemon] \u5DF2\u6CE8\u5165\u7A7A\u95F4\u9879\u76EE\u8BF4\u660E\u5230 AGENTS.md\uFF08${content.length} \u5B57\u7B26\uFF0C\u4F5C\u4E3A project.instructions \u81EA\u52A8\u52A0\u8F7D\uFF09`);
   return true;
@@ -11248,7 +11733,7 @@ async function reportRepoTargets(taskId, targets, env, ops) {
 }
 async function reportOneRepoTarget(taskId, target, env, ops) {
   const execEnv = mergeExecEnv(env);
-  if (!existsSync16(target.dir) || !existsSync16(join20(target.dir, ".git"))) {
+  if (!existsSync17(target.dir) || !existsSync17(join21(target.dir, ".git"))) {
     ops.log(`[daemon] \u4EFB\u52A1 ${taskId} \u4ED3\u5E93 ${target.repoFullName} \u4EA4\u4ED8\u8DF3\u8FC7\uFF1A\u5DE5\u4F5C\u76EE\u5F55\u5DF2\u4E0D\u5B58\u5728\uFF08cleanup/\u5206\u652F\u6539\u540D\u65F6\u5E8F\uFF09`);
     return;
   }
@@ -11416,9 +11901,9 @@ Task ref: ${taskCode}\uFF08\u7531 morula \u81EA\u52A8\u8865\u5145\uFF0C\u7528\u4
 
 // src/commands/doctor.ts
 init_dist2();
-import { existsSync as existsSync17, readFileSync as readFileSync11, realpathSync } from "node:fs";
+import { existsSync as existsSync18, readFileSync as readFileSync11, realpathSync } from "node:fs";
 import { homedir as homedir12 } from "node:os";
-import { dirname as dirname10, join as join21 } from "node:path";
+import { dirname as dirname12, join as join22 } from "node:path";
 init_daemon_config();
 init_daemon_lock();
 init_dim_locate();
@@ -11438,16 +11923,16 @@ async function doctorCommand(context) {
 async function collectDoctor(context, probe) {
   const checks = [];
   const env = context.env;
-  const configDir = env.MORULA_CONFIG_DIR ?? join21(homedir12(), ".morula-cli");
-  const configPath = env.MORULA_CONFIG ?? join21(configDir, "config.yaml");
-  const daemonPath = join21(dirname10(configPath), "daemon");
-  const logFile = join21(daemonPath, "daemon.log");
+  const configDir = env.MORULA_CONFIG_DIR ?? join22(homedir12(), ".morula-cli");
+  const configPath = env.MORULA_CONFIG ?? join22(configDir, "config.yaml");
+  const daemonPath = join22(dirname12(configPath), "daemon");
+  const logFile = join22(daemonPath, "daemon.log");
   const contextName = context.runtime.context ?? null;
   const baseUrl = context.runtime.baseUrl ?? null;
   const tokenPresent = Boolean(context.runtime.token);
   const tokenSource = context.runtime.tokenSource ?? null;
   let configReadable = false;
-  if (existsSync17(configPath)) {
+  if (existsSync18(configPath)) {
     try {
       readFileSync11(configPath, "utf8");
       configReadable = true;
@@ -11455,9 +11940,9 @@ async function collectDoctor(context, probe) {
       configReadable = false;
     }
   }
-  const lockPath = join21(daemonPath, DAEMON_LOCK_FILE);
+  const lockPath = join22(daemonPath, DAEMON_LOCK_FILE);
   const lock = probeDaemonLock(lockPath);
-  const pidFile = join21(daemonPath, DAEMON_PID_FILE);
+  const pidFile = join22(daemonPath, DAEMON_PID_FILE);
   const filePid = readPidFile(pidFile);
   const daemonPid = probeDaemonInstance(configDir).pid;
   const cfg = loadDaemonConfig(context.store);
@@ -11509,8 +11994,8 @@ async function collectDoctor(context, probe) {
       hint: "morula-runtime auth login"
     });
   } else if (probe) {
-    const check = await probeAuth(context);
-    checks.push(check);
+    const check2 = await probeAuth(context);
+    checks.push(check2);
   } else {
     checks.push({
       id: "auth.token",
@@ -11519,7 +12004,7 @@ async function collectDoctor(context, probe) {
       hint: "morula-runtime daemon doctor --probe\uFF08\u8054\u7F51\u786E\u8BA4\u767B\u5F55\u6001\uFF09"
     });
   }
-  checks.push(configReadable ? { id: "config.readable", status: "ok", message: `\u914D\u7F6E\u53EF\u8BFB\uFF1A${configPath}` } : existsSync17(configPath) ? { id: "config.readable", status: "fail", message: `\u914D\u7F6E\u5B58\u5728\u4F46\u4E0D\u53EF\u8BFB\uFF08\u6743\u9650\uFF1F\uFF09\uFF1A${configPath}`, hint: `ls -l ${configPath}` } : { id: "config.readable", status: "warn", message: `\u914D\u7F6E\u6587\u4EF6\u5C1A\u4E0D\u5B58\u5728\uFF1A${configPath}`, hint: "morula-runtime auth login\uFF08\u767B\u5F55\u540E\u751F\u6210\uFF09" });
+  checks.push(configReadable ? { id: "config.readable", status: "ok", message: `\u914D\u7F6E\u53EF\u8BFB\uFF1A${configPath}` } : existsSync18(configPath) ? { id: "config.readable", status: "fail", message: `\u914D\u7F6E\u5B58\u5728\u4F46\u4E0D\u53EF\u8BFB\uFF08\u6743\u9650\uFF1F\uFF09\uFF1A${configPath}`, hint: `ls -l ${configPath}` } : { id: "config.readable", status: "warn", message: `\u914D\u7F6E\u6587\u4EF6\u5C1A\u4E0D\u5B58\u5728\uFF1A${configPath}`, hint: "morula-runtime auth login\uFF08\u767B\u5F55\u540E\u751F\u6210\uFF09" });
   if (!dimFound) {
     checks.push({
       id: "dim.present",
@@ -11626,19 +12111,13 @@ function detectInstallMode() {
 }
 
 // src/commands/daemon.ts
-function configFilePath(env) {
-  return env.MORULA_CONFIG ?? join22(env.MORULA_CONFIG_DIR ?? join22(homedir13(), ".morula-cli"), "config.yaml");
-}
-function daemonDir(configPath) {
-  return join22(dirname11(configPath), "daemon");
-}
 var PID_FILE = DAEMON_PID_FILE;
 var LOG_FILE = "daemon.log";
 var DAEMON_EXIT_FALLBACK_MS = 3e3;
 async function daemonCommand(context) {
   const { action } = context.parsed;
   if (action === "run")
-    return run2(context);
+    return run3(context);
   if (action === "start")
     return start(context);
   if (action === "stop")
@@ -11815,7 +12294,7 @@ async function models(context) {
     contextWindow: m.contextWindow
   }));
 }
-async function run2(context) {
+async function run3(context) {
   rejectUnknownFlags(context.parsed.flags, ["name", "workdir", "max-concurrent"]);
   const armBoundedExit = () => {
     setTimeout(() => process.exit(0), DAEMON_EXIT_FALLBACK_MS).unref();
@@ -11828,9 +12307,18 @@ async function run2(context) {
     saveDaemonConfig(context.store, { name, workdir, maxConcurrent });
   }
   const resolvedWorkdir = workdir ?? loadDaemonConfig(context.store)?.workdir ?? DEFAULT_WORKDIR;
-  mkdirSync15(resolvedWorkdir, { recursive: true });
-  const lockPath = join22(daemonDir(configFilePath(context.env)), DAEMON_LOCK_FILE);
-  const acquired = acquireDaemonLock(lockPath, { workdir: resolvedWorkdir });
+  mkdirSync16(resolvedWorkdir, { recursive: true });
+  const lockPath = join23(daemonDirForEnv(context.env), DAEMON_LOCK_FILE);
+  let acquired = acquireDaemonLock(lockPath, { workdir: resolvedWorkdir });
+  const restartWaitMs = Number(context.env.MORULA_DAEMON_RESTART_WAIT_MS ?? 0) || 0;
+  if (!acquired.ok && restartWaitMs > 0) {
+    const deadline = Date.now() + restartWaitMs;
+    context.err(`[daemon] \u81EA\u5347\u7EA7\u91CD\u542F\uFF1A\u7B49\u5F85\u65E7\u5B9E\u4F8B\u91CA\u653E\u5355\u5B9E\u4F8B\u9501\uFF08\u6700\u591A ${Math.round(restartWaitMs / 1e3)}s\uFF09`);
+    while (!acquired.ok && Date.now() < deadline) {
+      await new Promise((resolve2) => setTimeout(resolve2, 1e3));
+      acquired = acquireDaemonLock(lockPath, { workdir: resolvedWorkdir });
+    }
+  }
   if (!acquired.ok) {
     const pid = acquired.existing?.pid;
     if (context.env.MORULA_DAEMON_SUPERVISED === "1") {
@@ -11856,7 +12344,7 @@ async function run2(context) {
     log: (line) => context.err(line),
     // dim acp 子进程治理（issues/dim-acp-process-leak-shared-space-contention.md）：
     // spawn 记录落盘（供 daemon 重启后的启动自愈认领自己的孤儿）+ 无归属子进程周期巡检
-    acpChildRecordFile: join22(daemonDir(configFilePath(context.env)), "dim-acp-children.json"),
+    acpChildRecordFile: join23(daemonDirForEnv(context.env), "dim-acp-children.json"),
     // D6：认证失败时重新读 config 换票（不传则退回「启动即快照」旧行为）。
     // 只重算凭证，不重建 client——WS 用返回值更新 socket.auth 后重连。
     resolveToken: () => {
@@ -11907,12 +12395,12 @@ async function start(context) {
       throw error;
     identityError = error instanceof Error ? error.message : String(error);
   }
-  const dir = daemonDir(configFilePath(context.env));
+  const dir = daemonDirForEnv(context.env);
   if (!dryRun)
-    mkdirSync15(dir, { recursive: true, mode: 448 });
-  const pidFile = join22(dir, PID_FILE);
-  const logFile = join22(dir, LOG_FILE);
-  const lockPath = join22(dir, DAEMON_LOCK_FILE);
+    mkdirSync16(dir, { recursive: true, mode: 448 });
+  const pidFile = join23(dir, PID_FILE);
+  const logFile = join23(dir, LOG_FILE);
+  const lockPath = join23(dir, DAEMON_LOCK_FILE);
   const lock = probeDaemonLock(lockPath);
   if (lock.state === "active") {
     throw new CliError(
@@ -11923,7 +12411,7 @@ async function start(context) {
       { hint: "morula-runtime daemon status" }
     );
   }
-  if (existsSync18(pidFile)) {
+  if (existsSync19(pidFile)) {
     const pid = Number(readFileSync12(pidFile, "utf8").trim());
     if (isProcessAlive(pid)) {
       throw new CliError("ALREADY_RUNNING", EXIT.CONFLICT, `daemon \u5DF2\u5728\u8FD0\u884C\uFF08pid=${pid}\uFF09\uFF1B\u5982\u9700\u5F3A\u5236\u91CD\u542F\u8BF7\u5148\u6267\u884C kill -9 ${pid}`, false, {
@@ -11974,19 +12462,19 @@ async function start(context) {
       hint: `tail -n 50 ${logFile}`
     });
   }
-  writeFileSync13(pidFile, String(result.pid), { mode: 384 });
+  writeFileSync14(pidFile, String(result.pid), { mode: 384 });
   context.err(`[daemon] \u5DF2\u540E\u53F0\u542F\u52A8\uFF08pid=${result.pid}\uFF09\uFF0C\u65E5\u5FD7: ${logFile}`);
   return { running: true, pid: result.pid, logFile, lockFile: lockPath };
 }
 async function stop(context) {
   rejectUnknownFlags(context.parsed.flags, ["dry-run"]);
   const dryRun = isDryRun(context);
-  const dir = daemonDir(configFilePath(context.env));
-  const pidFile = join22(dir, PID_FILE);
-  const lockPath = join22(dir, DAEMON_LOCK_FILE);
+  const dir = daemonDirForEnv(context.env);
+  const pidFile = join23(dir, PID_FILE);
+  const lockPath = join23(dir, DAEMON_LOCK_FILE);
   const lock = probeDaemonLock(lockPath);
   const lockPid = lock.state === "absent" ? null : lock.record?.pid ?? null;
-  const filePid = existsSync18(pidFile) ? Number(readFileSync12(pidFile, "utf8").trim()) : null;
+  const filePid = existsSync19(pidFile) ? Number(readFileSync12(pidFile, "utf8").trim()) : null;
   const pid = [lockPid, filePid].find((p) => p !== null && isProcessAlive(p)) ?? null;
   if (dryRun) {
     return {
@@ -12013,9 +12501,9 @@ async function stop(context) {
 async function status2(context) {
   rejectUnknownFlags(context.parsed.flags, []);
   const cfg = loadDaemonConfig(context.store);
-  const dir = daemonDir(configFilePath(context.env));
-  const lockPath = join22(dir, DAEMON_LOCK_FILE);
-  const probe = probeDaemonInstance(dirname11(configFilePath(context.env)));
+  const dir = daemonDirForEnv(context.env);
+  const lockPath = join23(dir, DAEMON_LOCK_FILE);
+  const probe = probeDaemonInstance(dirname13(configFilePathForEnv(context.env)));
   return {
     running: probe.running,
     pid: probe.pid,
@@ -12024,7 +12512,7 @@ async function status2(context) {
     name: cfg?.name ?? null,
     workdir: cfg?.workdir ?? DEFAULT_WORKDIR,
     maxConcurrent: cfg?.maxConcurrent ?? DEFAULT_MAX_CONCURRENT,
-    logFile: join22(dir, LOG_FILE),
+    logFile: join23(dir, LOG_FILE),
     lockFile: lockPath
   };
 }
@@ -12081,11 +12569,228 @@ async function setupCommand(context) {
   };
 }
 
+// src/commands/upgrade.ts
+init_dist2();
+import { existsSync as existsSync20, mkdirSync as mkdirSync17, readFileSync as readFileSync13, rmSync as rmSync11 } from "node:fs";
+import { join as join24 } from "node:path";
+init_daemon_config();
+init_daemon_lock();
+var PID_FILE2 = DAEMON_PID_FILE;
+var LOG_FILE2 = "daemon.log";
+async function upgradeCommand(context) {
+  const { action } = context.parsed;
+  if (action === "check")
+    return check(context);
+  if (action === "run")
+    return run4(context);
+  throw usage("usage: morula-runtime upgrade <check|run>", {
+    hint: "morula-runtime upgrade --help"
+  });
+}
+async function check(context) {
+  rejectUnknownFlags(context.parsed.flags, ["registry"]);
+  const registry2 = flagString(context.parsed.flags, "registry") ?? resolveRegistry(context.env);
+  let latest = null;
+  let error = null;
+  try {
+    latest = await fetchLatestRuntimeVersion({ registry: registry2 });
+  } catch (e) {
+    error = e instanceof Error ? e.message : String(e);
+  }
+  if (latest === null) {
+    context.setExitCode(EXIT.UPSTREAM);
+    return {
+      ok: false,
+      current: BUILD_VERSION2,
+      latest: null,
+      updateAvailable: null,
+      registry: registry2,
+      error,
+      hint: "\u7F51\u7EDC\u4E0D\u53EF\u8FBE\u6216 registry \u4E0D\u53EF\u7528\uFF1B\u7A0D\u540E\u91CD\u8BD5\uFF0C\u6216\u76F4\u63A5\u6267\u884C morula-runtime upgrade run --yes\uFF08run \u4F1A\u81EA\u884C\u89E3\u6790\u76EE\u6807\u7248\u672C\uFF09"
+    };
+  }
+  const updateAvailable = isUpgradeAvailable(BUILD_VERSION2, latest);
+  return {
+    ok: true,
+    current: BUILD_VERSION2,
+    latest,
+    updateAvailable,
+    registry: registry2,
+    ...updateAvailable ? { hint: "morula-runtime upgrade run --yes\uFF08\u5347\u7EA7\u4F1A\u5148\u786E\u8BA4\u65E0\u4EFB\u52A1\u6267\u884C\u4E2D\uFF0C\u5931\u8D25\u81EA\u52A8\u56DE\u88C5\u539F\u7248\u672C\uFF09" } : {}
+  };
+}
+function probeDaemonPid(env) {
+  const dir = daemonDirForEnv(env);
+  const pidFile = join24(dir, PID_FILE2);
+  const lockPath = join24(dir, DAEMON_LOCK_FILE);
+  const lock = probeDaemonLock(lockPath);
+  const lockPid = lock.state === "absent" ? null : lock.record?.pid ?? null;
+  const filePid = existsSync20(pidFile) ? Number(readFileSync13(pidFile, "utf8").trim()) : null;
+  const pid = [lockPid, filePid].find((p) => p !== null && isProcessAlive(p)) ?? null;
+  return { pid, pidFile, lockPath, lockState: lock.state };
+}
+async function reportUpgradeResult(context, body) {
+  const cfg = loadDaemonConfig(context.store);
+  if (!context.runtime.token || !cfg?.runtimeId)
+    return;
+  try {
+    await context.client.http.post(`/agent-runtimes/${cfg.runtimeId}/upgrade-result`, body);
+  } catch (error) {
+    context.err(`[upgrade] \u5347\u7EA7\u7ED3\u679C\u56DE\u62A5\u5931\u8D25\uFF08\u4E0D\u5F71\u54CD\u672C\u5730\u7ED3\u679C\uFF09: ${error instanceof Error ? error.message : String(error)}`);
+  }
+}
+async function countActiveTasks(context, runtimeId) {
+  const res = await context.client.http.get(
+    "/agent-tasks",
+    { runtimeId, statusGroup: "active", page: 1, pageSize: 100 }
+  );
+  return (res?.data ?? []).filter((t) => ["dispatched", "running", "awaiting_approval"].includes(t.status)).length;
+}
+async function run4(context) {
+  rejectUnknownFlags(context.parsed.flags, ["yes", "version", "registry"]);
+  const yes = flagBoolean(context.parsed.flags, "yes");
+  const targetVersion = flagString(context.parsed.flags, "version") ?? null;
+  const registry2 = flagString(context.parsed.flags, "registry") ?? resolveRegistry(context.env);
+  if (!yes) {
+    throw usage("upgrade run \u9700\u8981 --yes \u663E\u5F0F\u786E\u8BA4\uFF08\u5148\u8DD1 morula-runtime upgrade check \u67E5\u770B\u5DEE\u8DDD\uFF09", {
+      hint: "morula-runtime upgrade run --yes"
+    });
+  }
+  const dir = daemonDirForEnv(context.env);
+  const pidFile = join24(dir, PID_FILE2);
+  const lockPath = join24(dir, DAEMON_LOCK_FILE);
+  const probe = probeDaemonPid(context.env);
+  const wasRunning = probe.pid !== null;
+  const cfgForSafety = loadDaemonConfig(context.store);
+  let activeTasks = 0;
+  if (wasRunning && cfgForSafety?.runtimeId) {
+    if (!context.runtime.token) {
+      throw new CliError(
+        "TASKS_UNKNOWN",
+        EXIT.UNAUTHENTICATED,
+        "daemon \u8FD0\u884C\u4E2D\u4F46\u5F53\u524D\u672A\u767B\u5F55\uFF0C\u65E0\u6CD5\u786E\u8BA4\u662F\u5426\u6709\u4EFB\u52A1\u6267\u884C\u4E2D\uFF0C\u5DF2\u62D2\u7EDD\u5347\u7EA7",
+        false,
+        { hint: "morula-runtime auth login \u540E\u91CD\u8BD5\uFF1B\u6216\u786E\u8BA4\u53EF\u4E2D\u65AD\u540E\u5148 morula-runtime daemon stop" }
+      );
+    }
+    try {
+      activeTasks = await countActiveTasks(context, cfgForSafety.runtimeId);
+    } catch (error) {
+      throw new CliError(
+        "TASKS_UNKNOWN",
+        EXIT.UPSTREAM,
+        `daemon \u8FD0\u884C\u4E2D\u4E14\u65E0\u6CD5\u786E\u8BA4\u4EFB\u52A1\u72B6\u6001\uFF08${error instanceof Error ? error.message : String(error)}\uFF09\uFF0C\u5DF2\u62D2\u7EDD\u5347\u7EA7`,
+        false,
+        { hint: "\u7A0D\u540E\u91CD\u8BD5\uFF0C\u6216\u5148 morula-runtime daemon stop \u518D\u5347\u7EA7\uFF08\u5347\u7EA7\u540E daemon \u4E0D\u4F1A\u81EA\u52A8\u62C9\u8D77\uFF09" }
+      );
+    }
+  }
+  if (activeTasks > 0) {
+    throw new CliError(
+      "TASKS_RUNNING",
+      EXIT.CONFLICT,
+      `daemon \u6709 ${activeTasks} \u4E2A\u4EFB\u52A1\u6267\u884C\u4E2D\uFF0C\u62D2\u7EDD\u5347\u7EA7\uFF08\u5347\u7EA7\u4F1A\u7834\u574F\u6B63\u5728\u6267\u884C\u7684\u4EFB\u52A1\uFF09`,
+      false,
+      { hint: "\u7B49\u4EFB\u52A1\u5B8C\u6210\u540E\u518D\u5347\u7EA7\uFF1B\u6216\u786E\u8BA4\u53EF\u4E2D\u65AD\u540E\u5148 morula-runtime daemon stop" }
+    );
+  }
+  const report = await performRuntimeUpgrade({
+    currentVersion: BUILD_VERSION2,
+    targetVersion,
+    registry: registry2,
+    log: (line) => context.err(line)
+  });
+  if (report.status === "up_to_date") {
+    await reportUpgradeResult(context, { status: "succeeded", fromVersion: BUILD_VERSION2, toVersion: BUILD_VERSION2, restart: false });
+    return { ok: true, upToDate: true, current: BUILD_VERSION2, target: report.targetVersion, steps: report.steps };
+  }
+  if (report.status !== "succeeded") {
+    await reportUpgradeResult(context, { status: report.status, fromVersion: report.fromVersion, toVersion: report.toVersion ?? void 0, error: report.error });
+    context.setExitCode(EXIT.OTHER);
+    return {
+      ok: false,
+      status: report.status,
+      from: report.fromVersion,
+      to: report.toVersion,
+      error: report.error,
+      steps: report.steps,
+      hint: report.status === "rolled_back" ? "\u5DF2\u56DE\u88C5\u539F\u7248\u672C\uFF1B\u53EF\u67E5\u770B steps \u5B9A\u4F4D\u5931\u8D25\u539F\u56E0\u540E\u91CD\u8BD5" : "\u539F\u7248\u672C\u4FDD\u6301\u4E0D\u53D8\uFF1B\u53EF\u67E5\u770B steps \u5B9A\u4F4D\u5931\u8D25\u539F\u56E0\u540E\u91CD\u8BD5"
+    };
+  }
+  const cfg = loadDaemonConfig(context.store);
+  let restart = null;
+  let deferredRestart = false;
+  if (wasRunning) {
+    if (cfgForSafety?.runtimeId && context.runtime.token) {
+      const stillBusy = await countActiveTasks(context, cfgForSafety.runtimeId);
+      if (stillBusy > 0) {
+        deferredRestart = true;
+        context.err(`[upgrade] daemon \u6709 ${stillBusy} \u4E2A\u4EFB\u52A1\u5728\u5347\u7EA7\u671F\u95F4\u88AB\u6D3E\u53D1\uFF0C\u4FDD\u7559\u5176\u8FD0\u884C\u2014\u2014\u65B0\u7248\u672C ${report.toVersion} \u5DF2\u5B89\u88C5\uFF0C\u4E0B\u6B21 daemon \u91CD\u542F\u65F6\u751F\u6548\uFF08morula-runtime daemon stop && morula-runtime daemon start\uFF09`);
+      }
+    }
+    if (!deferredRestart) {
+      if (probe.pid !== null) {
+        const stopped = await stopDaemonByPid(probe.pid);
+        context.err(`[upgrade] \u65E7 daemon\uFF08pid=${probe.pid}\uFF09\u5DF2\u505C\u6B62\uFF08${stopped.outcome}\uFF09`);
+      }
+      if (probe.lockState === "stale")
+        releaseDaemonLock(lockPath);
+      else if (probe.pid !== null)
+        releaseDaemonLock(lockPath, probe.pid);
+      rmSync11(pidFile, { force: true });
+      mkdirSync17(dir, { recursive: true, mode: 448 });
+      restart = await spawnUpgradedDaemon({
+        env: context.env,
+        logFile: join24(dir, LOG_FILE2),
+        pidFile,
+        daemonConfig: { name: cfg?.name, workdir: cfg?.workdir, maxConcurrent: cfg?.maxConcurrent ?? DEFAULT_MAX_CONCURRENT }
+      });
+      if (restart.pid > 0) {
+        const liveness = await restart.waitExit(RESTART_LIVENESS_CHECK_MS);
+        if (liveness.exited) {
+          context.err(`[upgrade] \u65B0 daemon \u8FDB\u7A0B\u7ACB\u5373\u9000\u51FA\uFF08code=${liveness.code ?? "\u672A\u77E5"}\uFF09\uFF0C\u8BE6\u89C1 ${join24(dir, LOG_FILE2)}\u2014\u2014\u8BF7\u68C0\u67E5\u65E5\u5FD7\u540E\u624B\u52A8 morula-runtime daemon start`);
+          restart = { pid: 0, entry: restart.entry, error: `\u65B0 daemon \u8FDB\u7A0B\u7ACB\u5373\u9000\u51FA\uFF08code=${liveness.code ?? "\u672A\u77E5"}\uFF09`, waitExit: async () => ({ exited: true, code: liveness.code ?? null }) };
+        } else {
+          context.err(`[upgrade] \u65B0 daemon \u5DF2\u62C9\u8D77\uFF08pid=${restart.pid}\uFF09\uFF0C\u65E5\u5FD7: ${join24(dir, LOG_FILE2)}`);
+        }
+      } else {
+        context.err(`[upgrade] \u65B0 daemon \u62C9\u8D77\u5931\u8D25\uFF1A${restart.error ?? "\u672A\u77E5\u539F\u56E0"}\u2014\u2014\u8BF7\u624B\u52A8\u6267\u884C morula-runtime daemon start`);
+      }
+    }
+  } else {
+    context.err("[upgrade] daemon \u672A\u5728\u8FD0\u884C\uFF0C\u4FDD\u6301\u505C\u6B62\u72B6\u6001\uFF08\u9700\u8981\u65F6\u624B\u52A8 morula-runtime daemon start\uFF09");
+  }
+  const spawnFailed = wasRunning && !deferredRestart && restart !== null && restart.pid <= 0;
+  await reportUpgradeResult(context, {
+    status: spawnFailed ? "failed" : "succeeded",
+    fromVersion: report.fromVersion,
+    toVersion: report.toVersion,
+    restart: !spawnFailed && wasRunning && !deferredRestart,
+    ...spawnFailed ? { error: `\u65B0\u7248\u672C\u5DF2\u5B89\u88C5\u4F46\u81EA\u52A8\u91CD\u542F\u5931\u8D25\uFF1A${restart?.error ?? "\u672A\u77E5\u539F\u56E0"}` } : {}
+  });
+  if (spawnFailed) {
+    context.setExitCode(EXIT.OTHER);
+  }
+  return {
+    ok: !spawnFailed,
+    status: spawnFailed ? "restart_failed" : deferredRestart ? "installed_pending_restart" : "succeeded",
+    from: report.fromVersion,
+    to: report.toVersion,
+    // deferredRestart（评审 P3）：安装期有任务被派发 → 不打断 daemon，新版本下次重启生效
+    restarted: !spawnFailed && wasRunning && !deferredRestart,
+    pid: !spawnFailed && wasRunning && !deferredRestart ? restart?.pid ?? null : null,
+    ...deferredRestart ? { note: "\u65B0\u7248\u672C\u5DF2\u5B89\u88C5\uFF1Bdaemon \u6709\u4EFB\u52A1\u5728\u6267\u884C\u672A\u91CD\u542F\uFF0C\u4E0B\u6B21 daemon \u91CD\u542F\u65F6\u751F\u6548" } : {},
+    warnings: report.warnings,
+    steps: report.steps
+  };
+}
+
 // src/commands/registry-runtime.ts
 var COMMANDS = {
   auth: authCommand,
   daemon: daemonCommand,
-  setup: setupCommand
+  setup: setupCommand,
+  upgrade: upgradeCommand
 };
 var EXIT_CODES = {
   0: "success",
@@ -12107,7 +12812,7 @@ var GLOBAL_FLAGS2 = {
 };
 var SPEC = {
   name: "morula-runtime",
-  summary: "Device-level CLI for the Morula local agent runtime: authentication, daemon lifecycle (run/start/stop/status), local assistant portal, model inventory, and device diagnostics. Success output is JSON on stdout; errors are JSON on stderr.",
+  summary: "Device-level CLI for the Morula local agent runtime: authentication, daemon lifecycle (run/start/stop/status), local assistant portal, model inventory, device diagnostics, and runtime self-upgrade (check + confirmed run). Success output is JSON on stdout; errors are JSON on stderr.",
   resources: [
     {
       resource: "auth",
@@ -12278,6 +12983,44 @@ var SPEC = {
         "canonical form is the bare `morula-runtime setup`; postinstall runs the same registration automatically",
         "only writes <root>/morula-cli; never deletes other plugins or the legacy ~/.agents/plugins/morula-cli (reported as legacyRoot)"
       ]
+    },
+    {
+      resource: "upgrade",
+      summary: "runtime self-upgrade: compare the installed version against the latest npm release, then upgrade this device after explicit confirmation (installs, verifies, rolls back on failure, and re-bakes the plugin launcher)",
+      actions: [
+        {
+          action: "check",
+          summary: "read-only: compare current version with the latest published version on the npm registry (one network call)",
+          flags: [
+            { name: "registry", type: "string", valueHint: "<url>", description: "npm registry to query (default https://registry.npmjs.org, or $MORULA_NPM_REGISTRY)" }
+          ],
+          examples: ["morula-runtime upgrade check"],
+          writes: "none",
+          interactive: false,
+          idempotent: true,
+          emits: ["ok", "current", "latest", "updateAvailable", "registry"]
+        },
+        {
+          action: "run",
+          summary: "upgrade this device to the target version (default: registry latest). REQUIRES --yes (no silent auto-upgrade). Refuses while the daemon has tasks running; stops an idle daemon, upgrades, verifies (rolls back on failure), re-runs setup, then restarts the daemon",
+          flags: [
+            { name: "yes", type: "boolean", description: "REQUIRED: explicit confirmation; without it the command refuses (exit 2). No silent auto-upgrade" },
+            { name: "version", type: "string", valueHint: "<semver>", description: "target version (default: latest from the registry)" },
+            { name: "registry", type: "string", valueHint: "<url>", description: "npm registry to install from (default https://registry.npmjs.org, or $MORULA_NPM_REGISTRY)" }
+          ],
+          examples: ["morula-runtime upgrade run --yes", "morula-runtime upgrade run --yes --version 0.1.0-alpha.16"],
+          writes: "local",
+          interactive: false,
+          idempotent: false,
+          emits: ["ok", "status", "from", "to", "restarted", "pid", "steps"]
+        }
+      ],
+      notes: [
+        "check: exit 0 = compared (see updateAvailable); 7 = registry unreachable (see error/hint)",
+        "run: exit 0 = upgraded or already up to date; 6 (conflict) = daemon has running tasks (upgrade refused); 1 = install/verify failed (previous version kept or re-installed, see steps/error)",
+        "the daemon restart only happens when the daemon was running before the upgrade; a stopped daemon stays stopped",
+        "a stopped daemon is upgraded but not started \u2014 start it manually with morula-runtime daemon start"
+      ]
     }
   ]
 };