@dsh-sup/dsh-core-linux-x64 0.1.5-BETA.3 → 0.1.5-BETA.5

package/core.cjs

@@ -131,15 +131,13 @@ var require_config = __commonJS({
       notifyEnabled: true,
       routerAutostart: false,
       // 智能路由启动开关（旧键 switcherAutoStart 已迁移）
-      // 守卫自更新（2026-09 收敛：npm 通道取代 manifest）：corePackageName = 内核自身 npm 子包名
-      //（形如 @dsh-sup/dsh-core-linux-x64，按平台/架构发布；null = 不启用自更新）。
+      // 内核更新（单写入者 = 桌面壳）：corePackageName = 内核自身 npm 子包名
+      //（形如 @dsh-sup/dsh-core-linux-x64，按平台/架构发布）。守卫**只读**它来查询版本状态；
+      //安装/升级由桌面壳执行（见 RELEASE-AND-UPDATE-MECHANISM.md §6）。
       corePackageName: null,
-      // ⚠ `selfUpdateManifestUrl` / `selfUpdateDir` 是**旧 manifest 模式的残留键**（2026-09-12 核实）：
-      //   全仓**无任何赋值点**（默认恒 null），其唯一消费方 `env-catalog.selfUpdateEntry()` 已改为
-      //   按 `corePackageName` 判定。保留它们只为兼容既有用户 config.json（读到即忽略，不报错）。
-      //   新代码**不得**再依赖这两个键。
-      selfUpdateManifestUrl: null,
-      selfUpdateDir: null,
+      // ⚠ 2026-09-15：旧 manifest 模式的残留键 `selfUpdateManifestUrl` / `selfUpdateDir` **已删除**
+      //   （全仓无赋值点；其唯一消费方曾改为按 corePackageName 判定）。既有用户 config.json 若仍含
+      //   这两键，加载时忽略即可（未知键不报错）。新代码**不得**再引入 manifest 更新通道。
       pluginsProfileName: "web",
       packageName: "@deepseek-ai/dsh",
       // **最小兜底**镜像源（2026-09-11 契约化）。
@@ -225,7 +223,7 @@ var require_version = __commonJS({
     var fs2 = require("node:fs");
     var path2 = require("node:path");
     function guardVersion() {
-      if (true) return String("0.1.5-BETA.3");
+      if (true) return String("0.1.5-BETA.5");
       try {
         return JSON.parse(fs2.readFileSync(path2.join(__dirname, "..", "..", "package.json"), "utf8")).version || "unknown";
       } catch {
@@ -269,7 +267,7 @@ var require_matrix = __commonJS({
     function isSupported(platform, arch) {
       const p = platform || process.platform;
       const a = arch || process.arch;
-      return !!(OS_TAG[p] && (a === "x64" || a === "arm64"));
+      return SUPPORTED.some((x) => x.platform === p && x.arch === a);
     }
     function frpTag(platform, arch) {
       const p = platform || process.platform;
@@ -4721,6 +4719,60 @@ var require_proxy_apps = __commonJS({
   }
 });
 
+// src/platform/runtime-contract.js
+var require_runtime_contract = __commonJS({
+  "src/platform/runtime-contract.js"(exports2, module2) {
+    "use strict";
+    var fs2 = require("node:fs");
+    var os2 = require("node:os");
+    var path2 = require("node:path");
+    var SUPPORTED_SCHEMA = 2;
+    function file() {
+      return path2.join(os2.homedir(), ".dsh", "supervisor", "runtime.json");
+    }
+    function read() {
+      let j;
+      try {
+        j = JSON.parse(fs2.readFileSync(file(), "utf8"));
+      } catch {
+        return null;
+      }
+      if (!j || typeof j !== "object" || Array.isArray(j)) return null;
+      const node = j.node && typeof j.node === "object" ? j.node : {};
+      const npm = j.npm && typeof j.npm === "object" ? j.npm : {};
+      return {
+        schema: Number(j.schema) || 1,
+        nodePath: j.nodePath || node.path || null,
+        nodeBinDir: j.nodeBinDir || node.binDir || null,
+        npmPath: j.npmPath || npm.path || null,
+        minNode: j.minNode || null,
+        writtenBy: j.writtenBy || null,
+        raw: j
+      };
+    }
+    function npmBin(fallback) {
+      const c = read();
+      if (c && c.npmPath) {
+        try {
+          if (fs2.existsSync(c.npmPath)) return c.npmPath;
+        } catch {
+        }
+      }
+      return typeof fallback === "function" ? fallback() : fallback;
+    }
+    function withPath(env) {
+      const e = Object.assign({}, env || {});
+      const c = read();
+      if (c && c.nodeBinDir) {
+        const cur = e.PATH || e.Path || "";
+        e.PATH = c.nodeBinDir + path2.delimiter + cur;
+      }
+      return e;
+    }
+    module2.exports = { SUPPORTED_SCHEMA, file, read, npmBin, withPath };
+  }
+});
+
 // src/platform/registry-contract.js
 var require_registry_contract = __commonJS({
   "src/platform/registry-contract.js"(exports2, module2) {
@@ -4832,6 +4884,7 @@ var require_dist = __commonJS({
     var matrix = require_matrix();
     var { spawn } = require("node:child_process");
     var { npmBin } = require_exec_path();
+    var runtimeContract = require_runtime_contract();
     var registryContract = require_registry_contract();
     var CONTRACT_TTL_MS = 60 * 1e3;
     var service = require_service().current();
@@ -5227,17 +5280,17 @@ var require_dist = __commonJS({
         const pkg = o.pkg || "@deepseek-ai/dsh";
         if (!o.version) return Promise.resolve({ ok: false, error: "runNpmInstall: \u7F3A\u5C11 version\uFF08\u5FC5\u987B\u663E\u5F0F\u643A\u5E26\uFF09", output: [] });
         let argv;
-        let bin = npmBin();
+        let bin = runtimeContract.npmBin(npmBin);
         if (Array.isArray(o.commandTemplate) && o.commandTemplate.length) {
           argv = o.commandTemplate.map((s) => String(s).replace(/{pkg}/g, pkg).replace(/{version}/g, o.version).replace(/{prefix}/g, o.prefix || ""));
-          bin = argv[0] === "npm" ? npmBin() : argv[0];
+          bin = argv[0] === "npm" ? runtimeContract.npmBin(npmBin) : argv[0];
           argv = argv.slice(1);
         } else {
           argv = ["install", "-g", "--no-audit", "--no-fund"];
           if (o.prefix) argv.push("--prefix", o.prefix);
           argv.push(pkg + "@" + o.version);
         }
-        const envVars = Object.assign({}, process.env);
+        const envVars = runtimeContract.withPath(process.env);
         if (o.registry) {
           envVars.npm_config_registry = o.registry;
           envVars.NPM_CONFIG_REGISTRY = o.registry;
@@ -10387,60 +10440,6 @@ var require_fs_utils = __commonJS({
     "use strict";
     var fs2 = require("node:fs");
     var path2 = require("node:path");
-    var zlib = require("node:zlib");
-    function extractTarGz(tgzBuf, destDir, opts) {
-      const strip = opts && opts.stripComponents !== void 0 ? opts.stripComponents : 1;
-      const tarData = zlib.gunzipSync(tgzBuf);
-      fs2.mkdirSync(destDir, { recursive: true });
-      const written = [];
-      const stripName = (name) => {
-        const parts = String(name).split("/").filter((p) => p !== "" && p !== ".");
-        const cut = Math.min(strip, parts.length - 1);
-        const rel = parts.slice(cut).join("/");
-        if (!rel || rel.split("/").some((s) => s === "..") || rel.startsWith("/")) return null;
-        return rel;
-      };
-      let offset = 0;
-      let pendingLong = null;
-      while (offset + 512 <= tarData.length) {
-        const header = tarData.slice(offset, offset + 512);
-        if (header.every((b) => b === 0)) break;
-        let name = header.slice(0, 100).toString("utf8").split("\0")[0];
-        const size = parseInt(header.slice(124, 136).toString("utf8").replace(/[\0 ]/g, ""), 8) || 0;
-        const typeFlag = String.fromCharCode(header[156] || 48);
-        const dataStart = offset + 512;
-        const data = tarData.slice(dataStart, dataStart + size);
-        offset = dataStart + Math.ceil(size / 512) * 512;
-        if (pendingLong !== null) {
-          name = pendingLong;
-          pendingLong = null;
-        }
-        if (typeFlag === "L") {
-          pendingLong = name;
-          continue;
-        }
-        const rel = stripName(name);
-        if (rel === null) continue;
-        const target = path2.join(destDir, rel);
-        if (typeFlag === "5") {
-          fs2.mkdirSync(target, { recursive: true });
-          continue;
-        }
-        if (typeFlag === "2") {
-          const linkTo = header.slice(157, 157 + 100).toString("utf8").split("\0")[0];
-          try {
-            fs2.unlinkSync(target);
-          } catch {
-          }
-          fs2.symlinkSync(linkTo, target);
-          continue;
-        }
-        fs2.mkdirSync(path2.dirname(target), { recursive: true });
-        fs2.writeFileSync(target, data);
-        written.push(rel);
-      }
-      return written;
-    }
     function dirSizeBytes(root) {
       let total = 0;
       let seen = 0;
@@ -10474,7 +10473,7 @@ var require_fs_utils = __commonJS({
       }
       return total;
     }
-    module2.exports = { dirSizeBytes, extractTarGz };
+    module2.exports = { dirSizeBytes };
   }
 });
 
@@ -11635,7 +11634,7 @@ var require_watchdog = __commonJS({
         if (inUpdate && !phaseStale) return true;
         try {
           const j = shell.readJournal && shell.readJournal();
-          if (j && j.to && !j.confirmed && !j.rolledBack) return true;
+          if (j && j.to && !j.confirmed) return true;
         } catch {
         }
         return false;
@@ -11790,11 +11789,7 @@ var require_shell = __commonJS({
       return readJson(journalPath()) || {
         from: null,
         to: null,
-        attempts: 0,
-        maxAttempts: 2,
         confirmed: false,
-        rolledBack: false,
-        pinnedVersions: [],
         startedAt: null,
         lastAttemptAt: null
       };
@@ -11806,9 +11801,7 @@ var require_shell = __commonJS({
       const j = readJournal();
       j.from = from || j.from;
       j.to = to;
-      j.attempts = 0;
       j.confirmed = false;
-      j.rolledBack = false;
       j.startedAt = (/* @__PURE__ */ new Date()).toISOString();
       writeJournal(j);
       return j;
@@ -11821,45 +11814,19 @@ var require_shell = __commonJS({
       if (cur && cur === j.to && id && id.phase === "ready") {
         if (!j.confirmed) {
           j.confirmed = true;
-          j.attempts = 0;
           writeJournal(j);
         }
         return { state: "confirmed", version: cur, reason: "\u58F3\u5DF2\u5065\u5EB7\u8FD0\u884C\u65B0\u7248\u672C", journal: j, identity: id };
       }
-      const attempt = id && typeof id.attempt === "number" ? id.attempt : 0;
-      if (cur && cur !== j.to && attempt >= (j.maxAttempts || 2)) {
-        return {
-          state: "should-rollback",
-          target: j.to,
-          current: cur,
-          attempts: attempt,
-          reason: `\u58F3 ${attempt} \u6B21\u672A\u80FD\u5728 ${j.to} \u4E0A\u5C31\u7EEA\uFF08\u5F53\u524D ${cur}\uFF09`,
-          journal: j,
-          identity: id
-        };
-      }
       return {
         state: "pending",
         target: j.to,
         current: cur,
-        attempts: attempt,
         reason: cur === j.to ? "\u7B49\u5F85\u58F3\u4E0A\u62A5\u5C31\u7EEA" : "\u7B49\u5F85\u58F3\u91CD\u542F\u5230\u65B0\u7248\u672C",
         journal: j,
         identity: id
       };
     }
-    function rollback(reason) {
-      const j = readJournal();
-      const bad = j.to;
-      if (bad && !j.pinnedVersions.includes(bad)) j.pinnedVersions.push(bad);
-      j.rolledBack = true;
-      j.confirmed = false;
-      j.attempts = 0;
-      j.to = null;
-      j.lastAttemptAt = (/* @__PURE__ */ new Date()).toISOString();
-      writeJournal(j);
-      return { ok: true, pinned: bad, reason: reason || null, journal: j };
-    }
     function health(payload) {
       const p = payload || {};
       const dir = shellDir();
@@ -11882,7 +11849,6 @@ var require_shell = __commonJS({
         journal: j,
         state: ev.state,
         reason: ev.reason || null,
-        pinned: j.pinnedVersions || [],
         dir: shellDir()
       };
     }
@@ -11988,7 +11954,7 @@ var require_shell = __commonJS({
         return { ok: false, error: "\u62C9\u8D77\u65B0\u58F3\u5931\u8D25: " + (e && e.message || e), killed };
       }
     }
-    module2.exports = { status, evaluate, health, markPending, rollback, identity, readJournal, shellDir, checkUpdate, restartShell, SHELL_RELEASE_PKG };
+    module2.exports = { status, evaluate, health, markPending, identity, readJournal, shellDir, checkUpdate, restartShell, SHELL_RELEASE_PKG };
   }
 });
 
@@ -15657,20 +15623,22 @@ var require_guard = __commonJS({
         return;
       }
       if (req.method === "POST" && pathname === "/self-update/apply") {
-        if (!originAllowed(req, sup.config.apiPort)) {
-          req.resume();
-          return send(403, {});
-        }
-        Promise.resolve(sup.guardSelfUpdateApply()).then((r) => send(r.ok ? 200 : 400, r));
-        return;
+        req.resume();
+        return send(410, {
+          ok: false,
+          code: "KERNEL_UPDATE_SINGLE_WRITER",
+          owner: "desktop-shell",
+          error: "\u5185\u6838\u66F4\u65B0\u7531\u684C\u9762\u58F3\u6267\u884C\uFF08\u5355\u5199\u5165\u8005\u5951\u7EA6\uFF09\uFF1A\u8BF7\u5728\u684C\u9762\u58F3\u7684\u9762\u677F\u4E2D\u70B9\u300C\u66F4\u65B0\u300D\uFF0C\u6216\u5347\u7EA7/\u91CD\u88C5\u684C\u9762\u58F3\u3002"
+        });
       }
       if (req.method === "POST" && pathname === "/self-update/restart-guard") {
-        if (!originAllowed(req, sup.config.apiPort)) {
-          req.resume();
-          return send(403, {});
-        }
-        const r = sup.guardSelfUpdateRestart();
-        return send(r.ok ? 200 : 400, r);
+        req.resume();
+        return send(410, {
+          ok: false,
+          code: "KERNEL_UPDATE_SINGLE_WRITER",
+          owner: "desktop-shell",
+          error: "\u5B88\u536B\u91CD\u542F\u7531\u684C\u9762\u58F3\u7ECF\u670D\u52A1\u7BA1\u7406\u5668\u6267\u884C\uFF08\u5B88\u536B\u4ECE\u4E0D\u91CD\u542F\u81EA\u5DF1\uFF09\uFF1A\u66F4\u65B0\u5185\u6838\u8BF7\u7528\u684C\u9762\u58F3\u3002"
+        });
       }
       if (req.method === "GET" && pathname === "/env/dsh") {
         if (!originAllowed(req, sup.config.apiPort)) {
@@ -16323,26 +16291,6 @@ var require_shell2 = __commonJS({
           return send(r.ok ? 200 : 500, r);
         }).catch((e) => send(500, { ok: false, error: e.message }));
       }
-      if (req.method === "POST" && pathname === "/shell/rollback") {
-        if (!originAllowed(req, sup.config.apiPort)) {
-          req.resume();
-          return send(403, {});
-        }
-        return collectBody(req, res, 8192, (body) => {
-          let j = {};
-          try {
-            j = body ? JSON.parse(body) : {};
-          } catch {
-          }
-          try {
-            const r = shell.rollback(j.reason || "manual");
-            if (sup.events) sup.events.append("shell_update_rolled_back", { pinned: r.pinned, reason: r.reason });
-            return send(200, r);
-          } catch (e) {
-            return send(500, { ok: false, error: e.message });
-          }
-        });
-      }
       if (req.method === "GET" || req.method === "POST") return send(404, { error: "not found", path: pathname });
       return send(405, { error: "method not allowed" });
     }
@@ -17513,15 +17461,8 @@ var require_env_catalog = __commonJS({
     function runtimeMeta() {
       const now = Date.now();
       if (_runtimeMetaCache && now - _runtimeMetaAt < 1e4) return _runtimeMetaCache;
-      let meta = {};
-      try {
-        const os2 = require("node:os");
-        const path2 = require("node:path");
-        const f = path2.join(os2.homedir(), ".dsh", "supervisor", "runtime.json");
-        meta = JSON.parse(fs2.readFileSync(f, "utf8")) || {};
-      } catch {
-        meta = {};
-      }
+      const c = require_runtime_contract().read();
+      const meta = c && c.raw || {};
       _runtimeMetaCache = meta;
       _runtimeMetaAt = now;
       return meta;
@@ -17588,27 +17529,24 @@ var require_env_catalog = __commonJS({
         }
         return out;
       }
-      /** 守卫自更新条目。
-       *
-       *  ⚠ 2026-09-12 校正（P2）：本条目原先依据 `selfUpdateManifestUrl` / `selfUpdateDir`，
-       *   但**真实机制早已换成 npm 通道**（`corePackageName` + `runNpmInstall`，见 settings-view 的
-       *   `guardSelfUpdateStatus` / `guardCorePkg`）。那两个键**没有任何发行流程赋值**（默认恒为 null），
-       *   于是 `/env/status` 里的「守卫自更新」**恒报 unconfigured**，且把原因归到了无效键上 ——
-       *   用户与排障者据此查 `selfUpdateManifestUrl`，而真正该看的是 `corePackageName`。
+      /** 内核更新依赖条目（单写入者契约：安装/重启归桌面壳）。
        *
-       *   现改为按 npm 通道的真实开关（`corePackageName`）判定，detail 也给出该键。
+       *  2026-09-15（A 方案）：守卫**不再自更新**，`corePackageName` 只用于查询内核版本状态；
+       *  安装/升级由桌面壳执行（见 RELEASE-AND-UPDATE-MECHANISM.md §6）。
+       *  本条目因此只报告「壳执行内核更新所需的包名」是否就位 —— 不再暗示守卫能自己装。
+       *  id 仍为 `selfUpdate` 以兼容既有 `/env/status` 消费方。
        */
       selfUpdateEntry() {
         const pkg = this.config.corePackageName;
         if (!pkg) {
           return {
-            label: "\u5B88\u536B\u81EA\u66F4\u65B0",
+            label: "\u5185\u6838\u66F4\u65B0\uFF08\u684C\u9762\u58F3\u6267\u884C\uFF09",
             required: false,
             state: "unconfigured",
-            detail: "\u672A\u914D\u7F6E corePackageName\uFF08npm \u901A\u9053\uFF1B\u5F62\u5982 @dsh-sup/dsh-core-<os>-<arch>\uFF09"
+            detail: "\u672A\u914D\u7F6E corePackageName\uFF08\u5F62\u5982 @dsh-sup/dsh-core-<os>-<arch>\uFF09"
           };
         }
-        return { label: "\u5B88\u536B\u81EA\u66F4\u65B0", required: false, state: "configured", detail: pkg };
+        return { label: "\u5185\u6838\u66F4\u65B0\uFF08\u684C\u9762\u58F3\u6267\u884C\uFF09", required: false, state: "configured", detail: pkg };
       }
       /** DSH 本体条目（外传判定：bin 可执行 + 已装版本）。 */
       dshEntry(binOk, installed, bin) {
@@ -17776,7 +17714,6 @@ var require_settings_view = __commonJS({
     "use strict";
     var fs2 = require("node:fs");
     var path2 = require("node:path");
-    var os2 = require("node:os");
     var { spawn } = require("node:child_process");
     var { execFile } = require("node:child_process");
     var ex2 = require_exec();
@@ -17879,54 +17816,24 @@ var require_settings_view = __commonJS({
           return { ok: false, error: e.message };
         }
       }
-      /** 守卫自更新「重启生效」衔接：仅当配置 guardRestartAllowed=true 且存在 systemd 用户单元才执行；
-       *  否则返回明确指引（避免误杀/误起守卫）。 */
-      /** 自更新后的守卫重启（A2）：能力按部署形态自动判定（SEA=systemd 重启闭环；源码形态=拒绝），
-       *  去掉 guardRestartAllowed 人工配置门槛。重启前落盘「预期版本」，重启后 /status 校验自报版本
-       *  达标才算更新成功——闭环可观测，不再出现"装了没生效"的静默失败。 */
-      guardSelfUpdateRestart() {
-        const dep = deploy.detect();
-        if (!dep.updatable) {
-          return { ok: false, error: dep.reason || "\u5F53\u524D\u90E8\u7F72\u5F62\u6001\u4E0D\u652F\u6301\u81EA\u52A8\u91CD\u542F", form: dep.form };
-        }
-        const unit = path2.join(os2.homedir(), ".config", "systemd", "user", "dsh-supervisor.service");
-        if (!fs2.existsSync(unit)) return { ok: false, error: "\u7CFB\u7EDF\u672A\u542F\u7528 systemd \u7528\u6237\u5355\u5143\uFF0C\u8BF7\u624B\u52A8\u91CD\u542F\u5B88\u536B" };
-        const swDir = path2.dirname(this.config.stateFile);
-        try {
-          fs2.writeFileSync(path2.join(swDir, "self-update-expected.json"), JSON.stringify({ expectedVersion: this._selfUpdateExpectedVersion || null, at: Date.now() }), { mode: 384 });
-        } catch {
-        }
-        if (this.events) this.events.append("guard_self_update_restart", { expectedVersion: this._selfUpdateExpectedVersion || null, via: "exit+systemd-restart" });
-        this.logger && this.logger.info && this.logger.info("[self-update] \u5B88\u536B\u5C06\u9000\u51FA\uFF0C\u7531 systemd Restart=always \u62C9\u8D77\u65B0\u5185\u6838");
-        setTimeout(() => {
-          const bail = setTimeout(() => process.exit(0), 8e3);
-          if (bail.unref) bail.unref();
-          Promise.resolve().then(() => this.shutdown()).catch((e) => {
-            this.logger && this.logger.warn && this.logger.warn("[self-update] shutdown \u5F02\u5E38: " + (e && e.message || e));
-          }).then(() => {
-            clearTimeout(bail);
-            process.exit(0);
-          });
-        }, 500).unref();
-        return { ok: true, restarted: true, via: "exit+systemd-restart" };
-      }
-      // ---- 守卫自更新（2026-09 收敛：npm 通道取代 manifest/目录翻转）----
+      // ---- 内核更新（单写入者契约：安装/重启归桌面壳）----
       //
-      // ⚠ 此处原有 `guardSelfUpdateDir()` —— 已于 2026-09-12 删除（P2 死代码）：
-      //   全仓**零调用点**，且它所依赖的 `config.selfUpdateDir` 也从未被任何发行流程赋值
-      //   （默认恒为 null）。保留它会造成「自更新仍走 manifest/目录翻转」的错误印象，
-      //   而真实机制是 npm 通道（`guardCorePkg()` + `runNpmInstall`）。
+      // ⚠ 2026-09-15（A 方案）：`guardSelfUpdateApply` 与 `guardSelfUpdateRestart` **已删除** ——
+      //   内核 npm 包的唯一写入者是桌面壳（见 RELEASE-AND-UPDATE-MECHANISM.md §6）；
+      //   守卫只保留只读的 `guardSelfUpdateStatus`，接口 `/self-update/apply|restart-guard` 返回 410。
+      //   （此前 2026-09-12 已删除零调用点的 `guardSelfUpdateDir()`。）
       /** 内核 npm 子包名（按当前平台/架构）。corePackageName 可为显式常量或含 {os}/{arch} 占位的模板。 */
       guardCorePkg() {
         const raw = this.config.corePackageName;
         if (!raw) return null;
         return String(raw).replace(/{os}/g, matrix.osTag()).replace(/{arch}/g, matrix.current().arch) || null;
       }
-      /** 守卫自更新（2026-09 收敛：npm 通道）——查 @dsh-sup/dsh-core-<os>-<arch> 全 tag 最高版本（全更新：
-       *  BETA/RC/正式都算更新，任一更高即提示可更新），对本机 guardVersion 比较。 */
+      /** 内核更新状态（**只读**；安装/重启归桌面壳，单写入者契约）。
+       *  查 @dsh-sup/dsh-core-<os>-<arch> 全 tag 最高版本（BETA/RC/正式都算更新），与本机 guardVersion 比较。
+       *  本方法**不写任何东西**：面板据此显示「可更新」，实际安装由桌面壳 kernel_update_apply 执行。 */
       async guardSelfUpdateStatus() {
         const pkg = this.guardCorePkg();
-        if (!pkg) return { ok: false, error: "\u672A\u914D\u7F6E\u5185\u6838\u81EA\u66F4\u65B0\u5305\uFF08corePackageName\uFF09" };
+        if (!pkg) return { ok: false, error: "\u672A\u914D\u7F6E\u5185\u6838\u5305\uFF08corePackageName\uFF09" };
         if (!this.dist || typeof this.dist.fetchLatestVersion !== "function") return { ok: false, error: "\u53D1\u5E03\u670D\u52A1\u672A\u521D\u59CB\u5316" };
         const dep = deploy.detect();
         if (!dep.updatable) {
@@ -17943,82 +17850,6 @@ var require_settings_view = __commonJS({
           return { ok: false, error: e.message };
         }
       }
-      /** 应用内核更新（npm 通道，全更新强制语义）：`npm i -g <pkg>@<latest>`。
-       *  安装后由调用方（壳/面板）据 restartRequired 调 /self-update/restart-guard（或手动重启）生效。 */
-      async guardSelfUpdateApply() {
-        const pkg = this.guardCorePkg();
-        if (!pkg) return { ok: false, error: "\u672A\u914D\u7F6E\u5185\u6838\u81EA\u66F4\u65B0\u5305\uFF08corePackageName\uFF09" };
-        if (!this.dist || typeof this.dist.runNpmInstall !== "function") return { ok: false, error: "\u53D1\u5E03\u670D\u52A1\u672A\u521D\u59CB\u5316" };
-        if (!this.config.installCommandTemplate || !Array.isArray(this.config.installCommandTemplate)) return { ok: false, error: "\u672A\u914D\u7F6E\u5B89\u88C5\u547D\u4EE4\u6A21\u677F\uFF08installCommandTemplate\uFF09" };
-        const latest = await this.guardSelfUpdateStatus();
-        if (!latest.ok || !latest.latest) return { ok: false, error: latest && latest.error || "\u7248\u672C\u67E5\u8BE2\u5931\u8D25" };
-        if (latest.updatable === false) return { ok: false, error: latest.error || "\u5F53\u524D\u90E8\u7F72\u5F62\u6001\u4E0D\u652F\u6301\u81EA\u66F4\u65B0", form: latest.form };
-        if (!latest.updateAvailable) return { ok: true, upToDate: true, version: this.guardVersion };
-        const target = latest.latest;
-        try {
-          const registry = "https://registry.npmjs.org";
-          const r = await this.dist.runNpmInstall({
-            pkg,
-            version: target,
-            commandTemplate: this.config.installCommandTemplate,
-            registry,
-            onLine: (l) => {
-              if (this.logger && this.logger.info) this.logger.info("[self-update] " + l);
-            }
-          });
-          if (r && r.ok) {
-            let diskVersion = null;
-            try {
-              diskVersion = deploy.detect().runningTarget ? this._readBinarySelfVersion() : null;
-            } catch {
-            }
-            const verified = diskVersion === target;
-            this._selfUpdateExpectedVersion = verified ? target : null;
-            const restartRequired = true;
-            if (this.events) {
-              this.events.append("guard_self_update_applied", { from: this.guardVersion, version: target, pkg, diskVersion, verified });
-            }
-            if (!verified) {
-              return {
-                ok: true,
-                from: this.guardVersion,
-                version: target,
-                diskVersion,
-                verified: false,
-                restartRequired,
-                warn: "\u5DF2\u5B89\u88C5\u4F46\u78C1\u76D8\u7248\u672C\u6821\u9A8C\u672A\u901A\u8FC7\uFF08\u88C5\u5230\u975E\u8FD0\u884C\u4F4D/\u955C\u50CF stale\uFF09\uFF0C\u8BF7\u68C0\u67E5\u90E8\u7F72\u5F62\u6001"
-              };
-            }
-            return { ok: true, from: this.guardVersion, version: target, diskVersion, verified: true, restartRequired };
-          }
-          return { ok: false, error: r && r.error || "npm \u5B89\u88C5\u5931\u8D25" };
-        } catch (e) {
-          return { ok: false, error: e.message };
-        }
-      }
-      /** 自更新「已安装待重启生效」判定（A3）：最近一次 apply 落盘的预期版本存在、
-       *  且进程运行版本仍低于它 → updatePending=true（面板显示重启提示；重启达标后自动清除）。 */
-      _selfUpdatePending() {
-        try {
-          const swDir = path2.dirname(this.config.stateFile);
-          const f = path2.join(swDir, "self-update-expected.json");
-          if (!fs2.existsSync(f)) return false;
-          const j = JSON.parse(fs2.readFileSync(f, "utf8"));
-          const expected = j && j.expectedVersion;
-          if (!expected) return false;
-          if (this.guardVersion === expected) {
-            try {
-              fs2.unlinkSync(f);
-            } catch {
-            }
-            if (this.events) this.events.append("guard_self_update_verified", { version: expected });
-            return false;
-          }
-          return semverCompare(expected, this.guardVersion) > 0;
-        } catch {
-          return false;
-        }
-      }
       /** 读磁盘上**运行位**的自报版本（A1 校验用）：spawn `--version`，解析 guardVersion= 行。
        *
        *  ⚠ 2026-09-12（P0 配套）：条件从 `form === 'sea-binary'` 放宽为「**可更新的标准形态**」
@@ -19695,7 +19526,6 @@ var require_supervisor = __commonJS({
         this.manualRestart = false;
         this._ticking = false;
         this.intents = new IntentLedger();
-        this._selfUpdateExpectedVersion = null;
         this._stopping = false;
         this._sessionState = "starting";
         this._crashHalted = false;
@@ -20263,8 +20093,6 @@ var require_supervisor = __commonJS({
           backoffUntil: this._mBackoffUntil(),
           lastFailure: this._mLastFailure(),
           lastRestartAt: this._mLastRestartAt(),
-          updatePending: this._selfUpdatePending(),
-          // A3：更新已安装待重启生效
           upgradeHold: this._upgradeHold,
           commandMissing: !!(this._mSpawnBlockedUntil() && Date.now() < this._mSpawnBlockedUntil()),
           dshTokenCaptured: !!(this.tokenService && this.tokenService.get("main")),
@@ -21329,20 +21157,16 @@ function cmdSelfUpdate(action) {
       if (s.ok) {
         console.log("\u5B88\u536B\u5F53\u524D\u7248\u672C: " + s.installed);
         console.log("\u6700\u65B0\u7248\u672C:     " + s.latest);
-        console.log(s.updateAvailable ? "\u2192 \u6709\u53EF\u7528\u66F4\u65B0\uFF01\u6267\u884C: dsh-supervisor self-update apply" : "\u5DF2\u662F\u6700\u65B0\u3002");
+        console.log(s.updateAvailable ? "\u2192 \u6709\u53EF\u7528\u66F4\u65B0\uFF1A\u8BF7\u5728\u684C\u9762\u58F3\u9762\u677F\u300C\u5173\u4E8E\u300D\u4E2D\u70B9\u300C\u66F4\u65B0\u300D" : "\u5DF2\u662F\u6700\u65B0\u3002");
       }
       return;
     }
     if (action === "apply") {
-      const r = await apiOne("POST", "/self-update/apply");
-      if (r.error) return console.log("\u5E94\u7528\u66F4\u65B0\u5931\u8D25: " + r.error);
-      if (r.ok) {
-        console.log("\u5DF2\u66F4\u65B0\u5230 v" + r.version + (r.restartRequired ? "\uFF0C\u9700\u8981\u91CD\u542F\u5B88\u536B\u751F\u6548" : "\uFF08\u65E0\u53D8\u5316\uFF09"));
-        console.log("\u91CD\u542F: systemctl --user restart dsh-supervisor");
-      }
-      return;
+      console.error("\u5185\u6838\u66F4\u65B0\u7531\u684C\u9762\u58F3\u6267\u884C\uFF08\u5355\u5199\u5165\u8005\u5951\u7EA6\uFF09\uFF1A\u8BF7\u5728\u684C\u9762\u58F3\u9762\u677F\u300C\u5173\u4E8E\u300D\u4E2D\u70B9\u300C\u66F4\u65B0\u300D\u3002");
+      console.error("\u672C\u547D\u4EE4\u4E0D\u518D\u5B89\u88C5\u5185\u6838\u3002");
+      process.exit(2);
     }
-    console.log("\u7528\u6CD5: dsh-supervisor self-update [check|apply]");
+    console.log("\u7528\u6CD5: dsh-supervisor self-update [check]");
   })();
 }
 function cmdUpgrade(requested) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dsh-sup/dsh-core-linux-x64",
-  "version": "0.1.5-BETA.3",
+  "version": "0.1.5-BETA.5",
   "description": "DSH lifecycle guard core (Node launcher) for linux-x64 — requires Node >=18.",
   "license": "UNLICENSED",
   "os": [