@dsh-sup/dsh-core-linux-x64 0.1.5-BETA.4 → 0.1.5-BETA.5

package/core.cjs

@@ -131,15 +131,13 @@ var require_config = __commonJS({
       notifyEnabled: true,
       routerAutostart: false,
       // 智能路由启动开关（旧键 switcherAutoStart 已迁移）
-      // 守卫自更新（2026-09 收敛：npm 通道取代 manifest）：corePackageName = 内核自身 npm 子包名
-      //（形如 @dsh-sup/dsh-core-linux-x64，按平台/架构发布；null = 不启用自更新）。
+      // 内核更新（单写入者 = 桌面壳）：corePackageName = 内核自身 npm 子包名
+      //（形如 @dsh-sup/dsh-core-linux-x64，按平台/架构发布）。守卫**只读**它来查询版本状态；
+      //安装/升级由桌面壳执行（见 RELEASE-AND-UPDATE-MECHANISM.md §6）。
       corePackageName: null,
-      // ⚠ `selfUpdateManifestUrl` / `selfUpdateDir` 是**旧 manifest 模式的残留键**（2026-09-12 核实）：
-      //   全仓**无任何赋值点**（默认恒 null），其唯一消费方 `env-catalog.selfUpdateEntry()` 已改为
-      //   按 `corePackageName` 判定。保留它们只为兼容既有用户 config.json（读到即忽略，不报错）。
-      //   新代码**不得**再依赖这两个键。
-      selfUpdateManifestUrl: null,
-      selfUpdateDir: null,
+      // ⚠ 2026-09-15：旧 manifest 模式的残留键 `selfUpdateManifestUrl` / `selfUpdateDir` **已删除**
+      //   （全仓无赋值点；其唯一消费方曾改为按 corePackageName 判定）。既有用户 config.json 若仍含
+      //   这两键，加载时忽略即可（未知键不报错）。新代码**不得**再引入 manifest 更新通道。
       pluginsProfileName: "web",
       packageName: "@deepseek-ai/dsh",
       // **最小兜底**镜像源（2026-09-11 契约化）。
@@ -225,7 +223,7 @@ var require_version = __commonJS({
     var fs2 = require("node:fs");
     var path2 = require("node:path");
     function guardVersion() {
-      if (true) return String("0.1.5-BETA.4");
+      if (true) return String("0.1.5-BETA.5");
       try {
         return JSON.parse(fs2.readFileSync(path2.join(__dirname, "..", "..", "package.json"), "utf8")).version || "unknown";
       } catch {
@@ -4721,6 +4719,60 @@ var require_proxy_apps = __commonJS({
   }
 });
 
+// src/platform/runtime-contract.js
+var require_runtime_contract = __commonJS({
+  "src/platform/runtime-contract.js"(exports2, module2) {
+    "use strict";
+    var fs2 = require("node:fs");
+    var os2 = require("node:os");
+    var path2 = require("node:path");
+    var SUPPORTED_SCHEMA = 2;
+    function file() {
+      return path2.join(os2.homedir(), ".dsh", "supervisor", "runtime.json");
+    }
+    function read() {
+      let j;
+      try {
+        j = JSON.parse(fs2.readFileSync(file(), "utf8"));
+      } catch {
+        return null;
+      }
+      if (!j || typeof j !== "object" || Array.isArray(j)) return null;
+      const node = j.node && typeof j.node === "object" ? j.node : {};
+      const npm = j.npm && typeof j.npm === "object" ? j.npm : {};
+      return {
+        schema: Number(j.schema) || 1,
+        nodePath: j.nodePath || node.path || null,
+        nodeBinDir: j.nodeBinDir || node.binDir || null,
+        npmPath: j.npmPath || npm.path || null,
+        minNode: j.minNode || null,
+        writtenBy: j.writtenBy || null,
+        raw: j
+      };
+    }
+    function npmBin(fallback) {
+      const c = read();
+      if (c && c.npmPath) {
+        try {
+          if (fs2.existsSync(c.npmPath)) return c.npmPath;
+        } catch {
+        }
+      }
+      return typeof fallback === "function" ? fallback() : fallback;
+    }
+    function withPath(env) {
+      const e = Object.assign({}, env || {});
+      const c = read();
+      if (c && c.nodeBinDir) {
+        const cur = e.PATH || e.Path || "";
+        e.PATH = c.nodeBinDir + path2.delimiter + cur;
+      }
+      return e;
+    }
+    module2.exports = { SUPPORTED_SCHEMA, file, read, npmBin, withPath };
+  }
+});
+
 // src/platform/registry-contract.js
 var require_registry_contract = __commonJS({
   "src/platform/registry-contract.js"(exports2, module2) {
@@ -4832,6 +4884,7 @@ var require_dist = __commonJS({
     var matrix = require_matrix();
     var { spawn } = require("node:child_process");
     var { npmBin } = require_exec_path();
+    var runtimeContract = require_runtime_contract();
     var registryContract = require_registry_contract();
     var CONTRACT_TTL_MS = 60 * 1e3;
     var service = require_service().current();
@@ -5227,17 +5280,17 @@ var require_dist = __commonJS({
         const pkg = o.pkg || "@deepseek-ai/dsh";
         if (!o.version) return Promise.resolve({ ok: false, error: "runNpmInstall: \u7F3A\u5C11 version\uFF08\u5FC5\u987B\u663E\u5F0F\u643A\u5E26\uFF09", output: [] });
         let argv;
-        let bin = npmBin();
+        let bin = runtimeContract.npmBin(npmBin);
         if (Array.isArray(o.commandTemplate) && o.commandTemplate.length) {
           argv = o.commandTemplate.map((s) => String(s).replace(/{pkg}/g, pkg).replace(/{version}/g, o.version).replace(/{prefix}/g, o.prefix || ""));
-          bin = argv[0] === "npm" ? npmBin() : argv[0];
+          bin = argv[0] === "npm" ? runtimeContract.npmBin(npmBin) : argv[0];
           argv = argv.slice(1);
         } else {
           argv = ["install", "-g", "--no-audit", "--no-fund"];
           if (o.prefix) argv.push("--prefix", o.prefix);
           argv.push(pkg + "@" + o.version);
         }
-        const envVars = Object.assign({}, process.env);
+        const envVars = runtimeContract.withPath(process.env);
         if (o.registry) {
           envVars.npm_config_registry = o.registry;
           envVars.NPM_CONFIG_REGISTRY = o.registry;
@@ -10387,60 +10440,6 @@ var require_fs_utils = __commonJS({
     "use strict";
     var fs2 = require("node:fs");
     var path2 = require("node:path");
-    var zlib = require("node:zlib");
-    function extractTarGz(tgzBuf, destDir, opts) {
-      const strip = opts && opts.stripComponents !== void 0 ? opts.stripComponents : 1;
-      const tarData = zlib.gunzipSync(tgzBuf);
-      fs2.mkdirSync(destDir, { recursive: true });
-      const written = [];
-      const stripName = (name) => {
-        const parts = String(name).split("/").filter((p) => p !== "" && p !== ".");
-        const cut = Math.min(strip, parts.length - 1);
-        const rel = parts.slice(cut).join("/");
-        if (!rel || rel.split("/").some((s) => s === "..") || rel.startsWith("/")) return null;
-        return rel;
-      };
-      let offset = 0;
-      let pendingLong = null;
-      while (offset + 512 <= tarData.length) {
-        const header = tarData.slice(offset, offset + 512);
-        if (header.every((b) => b === 0)) break;
-        let name = header.slice(0, 100).toString("utf8").split("\0")[0];
-        const size = parseInt(header.slice(124, 136).toString("utf8").replace(/[\0 ]/g, ""), 8) || 0;
-        const typeFlag = String.fromCharCode(header[156] || 48);
-        const dataStart = offset + 512;
-        const data = tarData.slice(dataStart, dataStart + size);
-        offset = dataStart + Math.ceil(size / 512) * 512;
-        if (pendingLong !== null) {
-          name = pendingLong;
-          pendingLong = null;
-        }
-        if (typeFlag === "L") {
-          pendingLong = name;
-          continue;
-        }
-        const rel = stripName(name);
-        if (rel === null) continue;
-        const target = path2.join(destDir, rel);
-        if (typeFlag === "5") {
-          fs2.mkdirSync(target, { recursive: true });
-          continue;
-        }
-        if (typeFlag === "2") {
-          const linkTo = header.slice(157, 157 + 100).toString("utf8").split("\0")[0];
-          try {
-            fs2.unlinkSync(target);
-          } catch {
-          }
-          fs2.symlinkSync(linkTo, target);
-          continue;
-        }
-        fs2.mkdirSync(path2.dirname(target), { recursive: true });
-        fs2.writeFileSync(target, data);
-        written.push(rel);
-      }
-      return written;
-    }
     function dirSizeBytes(root) {
       let total = 0;
       let seen = 0;
@@ -10474,7 +10473,7 @@ var require_fs_utils = __commonJS({
       }
       return total;
     }
-    module2.exports = { dirSizeBytes, extractTarGz };
+    module2.exports = { dirSizeBytes };
   }
 });
 
@@ -15624,20 +15623,22 @@ var require_guard = __commonJS({
         return;
       }
       if (req.method === "POST" && pathname === "/self-update/apply") {
-        if (!originAllowed(req, sup.config.apiPort)) {
-          req.resume();
-          return send(403, {});
-        }
-        Promise.resolve(sup.guardSelfUpdateApply()).then((r) => send(r.ok ? 200 : 400, r));
-        return;
+        req.resume();
+        return send(410, {
+          ok: false,
+          code: "KERNEL_UPDATE_SINGLE_WRITER",
+          owner: "desktop-shell",
+          error: "\u5185\u6838\u66F4\u65B0\u7531\u684C\u9762\u58F3\u6267\u884C\uFF08\u5355\u5199\u5165\u8005\u5951\u7EA6\uFF09\uFF1A\u8BF7\u5728\u684C\u9762\u58F3\u7684\u9762\u677F\u4E2D\u70B9\u300C\u66F4\u65B0\u300D\uFF0C\u6216\u5347\u7EA7/\u91CD\u88C5\u684C\u9762\u58F3\u3002"
+        });
       }
       if (req.method === "POST" && pathname === "/self-update/restart-guard") {
-        if (!originAllowed(req, sup.config.apiPort)) {
-          req.resume();
-          return send(403, {});
-        }
-        const r = sup.guardSelfUpdateRestart();
-        return send(r.ok ? 200 : 400, r);
+        req.resume();
+        return send(410, {
+          ok: false,
+          code: "KERNEL_UPDATE_SINGLE_WRITER",
+          owner: "desktop-shell",
+          error: "\u5B88\u536B\u91CD\u542F\u7531\u684C\u9762\u58F3\u7ECF\u670D\u52A1\u7BA1\u7406\u5668\u6267\u884C\uFF08\u5B88\u536B\u4ECE\u4E0D\u91CD\u542F\u81EA\u5DF1\uFF09\uFF1A\u66F4\u65B0\u5185\u6838\u8BF7\u7528\u684C\u9762\u58F3\u3002"
+        });
       }
       if (req.method === "GET" && pathname === "/env/dsh") {
         if (!originAllowed(req, sup.config.apiPort)) {
@@ -17460,15 +17461,8 @@ var require_env_catalog = __commonJS({
     function runtimeMeta() {
       const now = Date.now();
       if (_runtimeMetaCache && now - _runtimeMetaAt < 1e4) return _runtimeMetaCache;
-      let meta = {};
-      try {
-        const os2 = require("node:os");
-        const path2 = require("node:path");
-        const f = path2.join(os2.homedir(), ".dsh", "supervisor", "runtime.json");
-        meta = JSON.parse(fs2.readFileSync(f, "utf8")) || {};
-      } catch {
-        meta = {};
-      }
+      const c = require_runtime_contract().read();
+      const meta = c && c.raw || {};
       _runtimeMetaCache = meta;
       _runtimeMetaAt = now;
       return meta;
@@ -17535,27 +17529,24 @@ var require_env_catalog = __commonJS({
         }
         return out;
       }
-      /** 守卫自更新条目。
+      /** 内核更新依赖条目（单写入者契约：安装/重启归桌面壳）。
        *
-       *  ⚠ 2026-09-12 校正（P2）：本条目原先依据 `selfUpdateManifestUrl` / `selfUpdateDir`，
-       *   但**真实机制早已换成 npm 通道**（`corePackageName` + `runNpmInstall`，见 settings-view 的
-       *   `guardSelfUpdateStatus` / `guardCorePkg`）。那两个键**没有任何发行流程赋值**（默认恒为 null），
-       *   于是 `/env/status` 里的「守卫自更新」**恒报 unconfigured**，且把原因归到了无效键上 ——
-       *   用户与排障者据此查 `selfUpdateManifestUrl`，而真正该看的是 `corePackageName`。
-       *
-       *   现改为按 npm 通道的真实开关（`corePackageName`）判定，detail 也给出该键。
+       *  2026-09-15（A 方案）：守卫**不再自更新**，`corePackageName` 只用于查询内核版本状态；
+       *  安装/升级由桌面壳执行（见 RELEASE-AND-UPDATE-MECHANISM.md §6）。
+       *  本条目因此只报告「壳执行内核更新所需的包名」是否就位 —— 不再暗示守卫能自己装。
+       *  id 仍为 `selfUpdate` 以兼容既有 `/env/status` 消费方。
        */
       selfUpdateEntry() {
         const pkg = this.config.corePackageName;
         if (!pkg) {
           return {
-            label: "\u5B88\u536B\u81EA\u66F4\u65B0",
+            label: "\u5185\u6838\u66F4\u65B0\uFF08\u684C\u9762\u58F3\u6267\u884C\uFF09",
             required: false,
             state: "unconfigured",
-            detail: "\u672A\u914D\u7F6E corePackageName\uFF08npm \u901A\u9053\uFF1B\u5F62\u5982 @dsh-sup/dsh-core-<os>-<arch>\uFF09"
+            detail: "\u672A\u914D\u7F6E corePackageName\uFF08\u5F62\u5982 @dsh-sup/dsh-core-<os>-<arch>\uFF09"
           };
         }
-        return { label: "\u5B88\u536B\u81EA\u66F4\u65B0", required: false, state: "configured", detail: pkg };
+        return { label: "\u5185\u6838\u66F4\u65B0\uFF08\u684C\u9762\u58F3\u6267\u884C\uFF09", required: false, state: "configured", detail: pkg };
       }
       /** DSH 本体条目（外传判定：bin 可执行 + 已装版本）。 */
       dshEntry(binOk, installed, bin) {
@@ -17723,7 +17714,6 @@ var require_settings_view = __commonJS({
     "use strict";
     var fs2 = require("node:fs");
     var path2 = require("node:path");
-    var os2 = require("node:os");
     var { spawn } = require("node:child_process");
     var { execFile } = require("node:child_process");
     var ex2 = require_exec();
@@ -17826,54 +17816,24 @@ var require_settings_view = __commonJS({
           return { ok: false, error: e.message };
         }
       }
-      /** 守卫自更新「重启生效」衔接：仅当配置 guardRestartAllowed=true 且存在 systemd 用户单元才执行；
-       *  否则返回明确指引（避免误杀/误起守卫）。 */
-      /** 自更新后的守卫重启（A2）：能力按部署形态自动判定（打包态=systemd 重启闭环；源码形态=拒绝），
-       *  去掉 guardRestartAllowed 人工配置门槛。重启前落盘「预期版本」，重启后 /status 校验自报版本
-       *  达标才算更新成功——闭环可观测，不再出现"装了没生效"的静默失败。 */
-      guardSelfUpdateRestart() {
-        const dep = deploy.detect();
-        if (!dep.updatable) {
-          return { ok: false, error: dep.reason || "\u5F53\u524D\u90E8\u7F72\u5F62\u6001\u4E0D\u652F\u6301\u81EA\u52A8\u91CD\u542F", form: dep.form };
-        }
-        const unit = path2.join(os2.homedir(), ".config", "systemd", "user", "dsh-supervisor.service");
-        if (!fs2.existsSync(unit)) return { ok: false, error: "\u7CFB\u7EDF\u672A\u542F\u7528 systemd \u7528\u6237\u5355\u5143\uFF0C\u8BF7\u624B\u52A8\u91CD\u542F\u5B88\u536B" };
-        const swDir = path2.dirname(this.config.stateFile);
-        try {
-          fs2.writeFileSync(path2.join(swDir, "self-update-expected.json"), JSON.stringify({ expectedVersion: this._selfUpdateExpectedVersion || null, at: Date.now() }), { mode: 384 });
-        } catch {
-        }
-        if (this.events) this.events.append("guard_self_update_restart", { expectedVersion: this._selfUpdateExpectedVersion || null, via: "exit+systemd-restart" });
-        this.logger && this.logger.info && this.logger.info("[self-update] \u5B88\u536B\u5C06\u9000\u51FA\uFF0C\u7531 systemd Restart=always \u62C9\u8D77\u65B0\u5185\u6838");
-        setTimeout(() => {
-          const bail = setTimeout(() => process.exit(0), 8e3);
-          if (bail.unref) bail.unref();
-          Promise.resolve().then(() => this.shutdown()).catch((e) => {
-            this.logger && this.logger.warn && this.logger.warn("[self-update] shutdown \u5F02\u5E38: " + (e && e.message || e));
-          }).then(() => {
-            clearTimeout(bail);
-            process.exit(0);
-          });
-        }, 500).unref();
-        return { ok: true, restarted: true, via: "exit+systemd-restart" };
-      }
-      // ---- 守卫自更新（2026-09 收敛：npm 通道取代 manifest/目录翻转）----
+      // ---- 内核更新（单写入者契约：安装/重启归桌面壳）----
       //
-      // ⚠ 此处原有 `guardSelfUpdateDir()` —— 已于 2026-09-12 删除（P2 死代码）：
-      //   全仓**零调用点**，且它所依赖的 `config.selfUpdateDir` 也从未被任何发行流程赋值
-      //   （默认恒为 null）。保留它会造成「自更新仍走 manifest/目录翻转」的错误印象，
-      //   而真实机制是 npm 通道（`guardCorePkg()` + `runNpmInstall`）。
+      // ⚠ 2026-09-15（A 方案）：`guardSelfUpdateApply` 与 `guardSelfUpdateRestart` **已删除** ——
+      //   内核 npm 包的唯一写入者是桌面壳（见 RELEASE-AND-UPDATE-MECHANISM.md §6）；
+      //   守卫只保留只读的 `guardSelfUpdateStatus`，接口 `/self-update/apply|restart-guard` 返回 410。
+      //   （此前 2026-09-12 已删除零调用点的 `guardSelfUpdateDir()`。）
       /** 内核 npm 子包名（按当前平台/架构）。corePackageName 可为显式常量或含 {os}/{arch} 占位的模板。 */
       guardCorePkg() {
         const raw = this.config.corePackageName;
         if (!raw) return null;
         return String(raw).replace(/{os}/g, matrix.osTag()).replace(/{arch}/g, matrix.current().arch) || null;
       }
-      /** 守卫自更新（2026-09 收敛：npm 通道）——查 @dsh-sup/dsh-core-<os>-<arch> 全 tag 最高版本（全更新：
-       *  BETA/RC/正式都算更新，任一更高即提示可更新），对本机 guardVersion 比较。 */
+      /** 内核更新状态（**只读**；安装/重启归桌面壳，单写入者契约）。
+       *  查 @dsh-sup/dsh-core-<os>-<arch> 全 tag 最高版本（BETA/RC/正式都算更新），与本机 guardVersion 比较。
+       *  本方法**不写任何东西**：面板据此显示「可更新」，实际安装由桌面壳 kernel_update_apply 执行。 */
       async guardSelfUpdateStatus() {
         const pkg = this.guardCorePkg();
-        if (!pkg) return { ok: false, error: "\u672A\u914D\u7F6E\u5185\u6838\u81EA\u66F4\u65B0\u5305\uFF08corePackageName\uFF09" };
+        if (!pkg) return { ok: false, error: "\u672A\u914D\u7F6E\u5185\u6838\u5305\uFF08corePackageName\uFF09" };
         if (!this.dist || typeof this.dist.fetchLatestVersion !== "function") return { ok: false, error: "\u53D1\u5E03\u670D\u52A1\u672A\u521D\u59CB\u5316" };
         const dep = deploy.detect();
         if (!dep.updatable) {
@@ -17890,82 +17850,6 @@ var require_settings_view = __commonJS({
           return { ok: false, error: e.message };
         }
       }
-      /** 应用内核更新（npm 通道，全更新强制语义）：`npm i -g <pkg>@<latest>`。
-       *  安装后由调用方（壳/面板）据 restartRequired 调 /self-update/restart-guard（或手动重启）生效。 */
-      async guardSelfUpdateApply() {
-        const pkg = this.guardCorePkg();
-        if (!pkg) return { ok: false, error: "\u672A\u914D\u7F6E\u5185\u6838\u81EA\u66F4\u65B0\u5305\uFF08corePackageName\uFF09" };
-        if (!this.dist || typeof this.dist.runNpmInstall !== "function") return { ok: false, error: "\u53D1\u5E03\u670D\u52A1\u672A\u521D\u59CB\u5316" };
-        if (!this.config.installCommandTemplate || !Array.isArray(this.config.installCommandTemplate)) return { ok: false, error: "\u672A\u914D\u7F6E\u5B89\u88C5\u547D\u4EE4\u6A21\u677F\uFF08installCommandTemplate\uFF09" };
-        const latest = await this.guardSelfUpdateStatus();
-        if (!latest.ok || !latest.latest) return { ok: false, error: latest && latest.error || "\u7248\u672C\u67E5\u8BE2\u5931\u8D25" };
-        if (latest.updatable === false) return { ok: false, error: latest.error || "\u5F53\u524D\u90E8\u7F72\u5F62\u6001\u4E0D\u652F\u6301\u81EA\u66F4\u65B0", form: latest.form };
-        if (!latest.updateAvailable) return { ok: true, upToDate: true, version: this.guardVersion };
-        const target = latest.latest;
-        try {
-          const registry = "https://registry.npmjs.org";
-          const r = await this.dist.runNpmInstall({
-            pkg,
-            version: target,
-            commandTemplate: this.config.installCommandTemplate,
-            registry,
-            onLine: (l) => {
-              if (this.logger && this.logger.info) this.logger.info("[self-update] " + l);
-            }
-          });
-          if (r && r.ok) {
-            let diskVersion = null;
-            try {
-              diskVersion = deploy.detect().runningTarget ? this._readBinarySelfVersion() : null;
-            } catch {
-            }
-            const verified = diskVersion === target;
-            this._selfUpdateExpectedVersion = verified ? target : null;
-            const restartRequired = true;
-            if (this.events) {
-              this.events.append("guard_self_update_applied", { from: this.guardVersion, version: target, pkg, diskVersion, verified });
-            }
-            if (!verified) {
-              return {
-                ok: true,
-                from: this.guardVersion,
-                version: target,
-                diskVersion,
-                verified: false,
-                restartRequired,
-                warn: "\u5DF2\u5B89\u88C5\u4F46\u78C1\u76D8\u7248\u672C\u6821\u9A8C\u672A\u901A\u8FC7\uFF08\u88C5\u5230\u975E\u8FD0\u884C\u4F4D/\u955C\u50CF stale\uFF09\uFF0C\u8BF7\u68C0\u67E5\u90E8\u7F72\u5F62\u6001"
-              };
-            }
-            return { ok: true, from: this.guardVersion, version: target, diskVersion, verified: true, restartRequired };
-          }
-          return { ok: false, error: r && r.error || "npm \u5B89\u88C5\u5931\u8D25" };
-        } catch (e) {
-          return { ok: false, error: e.message };
-        }
-      }
-      /** 自更新「已安装待重启生效」判定（A3）：最近一次 apply 落盘的预期版本存在、
-       *  且进程运行版本仍低于它 → updatePending=true（面板显示重启提示；重启达标后自动清除）。 */
-      _selfUpdatePending() {
-        try {
-          const swDir = path2.dirname(this.config.stateFile);
-          const f = path2.join(swDir, "self-update-expected.json");
-          if (!fs2.existsSync(f)) return false;
-          const j = JSON.parse(fs2.readFileSync(f, "utf8"));
-          const expected = j && j.expectedVersion;
-          if (!expected) return false;
-          if (this.guardVersion === expected) {
-            try {
-              fs2.unlinkSync(f);
-            } catch {
-            }
-            if (this.events) this.events.append("guard_self_update_verified", { version: expected });
-            return false;
-          }
-          return semverCompare(expected, this.guardVersion) > 0;
-        } catch {
-          return false;
-        }
-      }
       /** 读磁盘上**运行位**的自报版本（A1 校验用）：spawn `--version`，解析 guardVersion= 行。
        *
        *  ⚠ 2026-09-12（P0 配套）：条件从 `form === 'sea-binary'` 放宽为「**可更新的标准形态**」
@@ -19642,7 +19526,6 @@ var require_supervisor = __commonJS({
         this.manualRestart = false;
         this._ticking = false;
         this.intents = new IntentLedger();
-        this._selfUpdateExpectedVersion = null;
         this._stopping = false;
         this._sessionState = "starting";
         this._crashHalted = false;
@@ -20210,8 +20093,6 @@ var require_supervisor = __commonJS({
           backoffUntil: this._mBackoffUntil(),
           lastFailure: this._mLastFailure(),
           lastRestartAt: this._mLastRestartAt(),
-          updatePending: this._selfUpdatePending(),
-          // A3：更新已安装待重启生效
           upgradeHold: this._upgradeHold,
           commandMissing: !!(this._mSpawnBlockedUntil() && Date.now() < this._mSpawnBlockedUntil()),
           dshTokenCaptured: !!(this.tokenService && this.tokenService.get("main")),
@@ -21276,20 +21157,16 @@ function cmdSelfUpdate(action) {
       if (s.ok) {
         console.log("\u5B88\u536B\u5F53\u524D\u7248\u672C: " + s.installed);
         console.log("\u6700\u65B0\u7248\u672C:     " + s.latest);
-        console.log(s.updateAvailable ? "\u2192 \u6709\u53EF\u7528\u66F4\u65B0\uFF01\u6267\u884C: dsh-supervisor self-update apply" : "\u5DF2\u662F\u6700\u65B0\u3002");
+        console.log(s.updateAvailable ? "\u2192 \u6709\u53EF\u7528\u66F4\u65B0\uFF1A\u8BF7\u5728\u684C\u9762\u58F3\u9762\u677F\u300C\u5173\u4E8E\u300D\u4E2D\u70B9\u300C\u66F4\u65B0\u300D" : "\u5DF2\u662F\u6700\u65B0\u3002");
       }
       return;
     }
     if (action === "apply") {
-      const r = await apiOne("POST", "/self-update/apply");
-      if (r.error) return console.log("\u5E94\u7528\u66F4\u65B0\u5931\u8D25: " + r.error);
-      if (r.ok) {
-        console.log("\u5DF2\u66F4\u65B0\u5230 v" + r.version + (r.restartRequired ? "\uFF0C\u9700\u8981\u91CD\u542F\u5B88\u536B\u751F\u6548" : "\uFF08\u65E0\u53D8\u5316\uFF09"));
-        console.log("\u91CD\u542F: systemctl --user restart dsh-supervisor");
-      }
-      return;
+      console.error("\u5185\u6838\u66F4\u65B0\u7531\u684C\u9762\u58F3\u6267\u884C\uFF08\u5355\u5199\u5165\u8005\u5951\u7EA6\uFF09\uFF1A\u8BF7\u5728\u684C\u9762\u58F3\u9762\u677F\u300C\u5173\u4E8E\u300D\u4E2D\u70B9\u300C\u66F4\u65B0\u300D\u3002");
+      console.error("\u672C\u547D\u4EE4\u4E0D\u518D\u5B89\u88C5\u5185\u6838\u3002");
+      process.exit(2);
     }
-    console.log("\u7528\u6CD5: dsh-supervisor self-update [check|apply]");
+    console.log("\u7528\u6CD5: dsh-supervisor self-update [check]");
   })();
 }
 function cmdUpgrade(requested) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dsh-sup/dsh-core-linux-x64",
-  "version": "0.1.5-BETA.4",
+  "version": "0.1.5-BETA.5",
   "description": "DSH lifecycle guard core (Node launcher) for linux-x64 — requires Node >=18.",
   "license": "UNLICENSED",
   "os": [

package/ui-react/assets/{InstancesPage-rigmvUH5.js → InstancesPage-B2OXFYf0.js}

@@ -1,3 +1,3 @@
-import{A as e,E as t,L as n,O as r,P as i,T as a,_ as o,b as s,g as c,h as l,i as u,k as d,m as f,n as p,o as m,r as h,t as g,v as _,y as v,z as y}from"./supervisor-BVac7io-.js";import{t as b}from"./external-link-SYs4QOvn.js";import{n as x,t as ee}from"./rocket-Dt6NGQXE.js";import{t as te}from"./shield-check-B-D3XDKa.js";import{c as ne,f as re,o as S,s as C}from"./supervisor-DwJMunGH.js";import{t as w}from"./useSupervisorAction-B1Piyga4.js";import{c as T,i as E,o as D,r as O,t as k}from"./widgets-DMpjcPY5.js";var A=i(`box`,[[`path`,{d:`M21 8a2 2 0 0 0-1-1.73l-7-4a2 2 0 0 0-2 0l-7 4A2 2 0 0 0 3 8v8a2 2 0 0 0 1 1.73l7 4a2 2 0 0 0 2 0l7-4A2 2 0 0 0 21 16Z`,key:`hh9hay`}],[`path`,{d:`m3.3 7 8.7 5 8.7-5`,key:`g66t2b`}],[`path`,{d:`M12 22V12`,key:`d0xqtd`}]]),j=i(`rotate-cw`,[[`path`,{d:`M21 12a9 9 0 1 1-9-9c2.52 0 4.93 1 6.74 2.74L21 8`,key:`1p45f6`}],[`path`,{d:`M21 3v5h-5`,key:`1q7to0`}]]),M=i(`square`,[[`rect`,{width:`18`,height:`18`,x:`3`,y:`3`,rx:`2`,key:`afitv7`}]]),N=y(n(),1),P=r();function F({onRegisterActions:n}){let{snap:r}=g(),{busy:i,run:y}=w(),[F,I]=(0,N.useState)(!1),[L,R]=(0,N.useState)(null),[z,B]=(0,N.useState)(``),[V,H]=(0,N.useState)(``),[U,W]=(0,N.useState)(``),[G,K]=(0,N.useState)(`4G`),[q,J]=(0,N.useState)(`150%`),Y=r.instances?.instances??[],[X,ie]=(0,N.useState)(null);(0,N.useEffect)(()=>{let e=!0;return h.envStatus().then(t=>{e&&ie(t.capabilities??null)}).catch(()=>void 0),()=>{e=!1}},[]);let Z=X!==null&&X.multiInstance===!1;(0,N.useEffect)(()=>(n?.({onAdd:()=>I(!0)}),()=>n?.(null)),[n]);let Q=(e,t)=>y(e,t);async function ae(){if(Z){d.error(`当前平台不支持沙箱实例（需 Linux + systemd-run）`);return}let e=parseInt(V,10);if(!Number.isFinite(e)||e<=0){d.error(`请填写有效端口`);return}let t=U?U.split(/\n/).map(e=>e.trim()).filter(Boolean):[];try{let n=await h.instanceAdd({name:z.trim()||`沙箱 `+e,port:e,command:t,memoryMax:G||`4G`,cpuQuota:q||`150%`});if(n&&n.ok===!1){d.error(n.error||`添加失败`);return}d.success(`已添加实例`),I(!1),B(``),H(``),W(``),K(`4G`),J(`150%`),p.refresh()}catch(e){d.error(String(e))}}async function oe(e){await y(e.id,async()=>{let t=await h.instanceCheckUpdate(e.id);t.updateAvailable?(d.success(`发现新版 `+t.latest+`，可点「更新」升级`),ce(t=>new Map(t).set(e.id,!0))):t.latest?d.info(`已是最新 `+t.latest):d.error(t.error||`版本检测失败`)})}let[se,ce]=(0,N.useState)(new Map);async function le(e){confirm(`将升级该沙箱实例的 DSH 到最新版（实例会短暂重启，进行中的请求中断）。确定升级？`)&&await y(e.id,()=>h.instanceUpgrade(e.id),{success:`升级已开始…`})}let $=({it:n})=>{let r=n.state?.running??!1,o=n.state?.lifecyclePhase,s=C(o,r),c=n.updateJob,l=c?.state===`running`,u=n.sandbox?.memoryMax||`—`,d=n.sandbox?.cpuQuota||`—`,f=i===n.id;return(0,P.jsxs)(k,{className:`overflow-visible`,children:[(0,P.jsxs)(`div`,{className:`grid grid-cols-1 @min-[720px]:grid-cols-[minmax(0,5fr)_minmax(0,6fr)]`,children:[(0,P.jsxs)(`div`,{className:`flex flex-col gap-4 border-b border-border px-6 py-5 md:border-b-0 md:border-r`,children:[(0,P.jsxs)(`div`,{className:`flex flex-wrap items-center justify-between gap-3`,children:[(0,P.jsxs)(`div`,{className:`flex min-w-0 flex-wrap items-center gap-2`,children:[(0,P.jsx)(`strong`,{className:`truncate text-lg font-semibold tracking-[-0.01em] text-foreground`,children:n.name}),n.version?(0,P.jsxs)(`span`,{className:`font-mono text-sm text-muted-foreground`,children:[`v`,n.version]}):null]}),se.get(n.id)?(0,P.jsxs)(a,{className:`text-primary-foreground`,onClick:()=>void le(n),size:`chip`,children:[(0,P.jsx)(j,{className:`size-3`}),`更新`]}):(0,P.jsxs)(a,{className:`bg-primary/10 text-primary hover:bg-primary/15`,disabled:f||l,onClick:()=>void oe(n),size:`chip`,variant:`ghost`,children:[(0,P.jsx)(j,{className:t(`size-3`,f&&`animate-spin`)}),`检测更新`]})]}),(0,P.jsxs)(`div`,{className:`flex flex-wrap items-center gap-2`,children:[(0,P.jsx)(T,{tone:s.tone,ping:s.tone===`ok`}),(0,P.jsx)(`span`,{className:`text-base font-semibold leading-none text-foreground`,children:s.label})]}),l?(0,P.jsxs)(`div`,{className:`flex items-center gap-2 text-xs text-muted-foreground`,children:[(0,P.jsx)(m,{className:`size-3`}),`正在升级 DeepSeek Harness（`,c?.step||``,`）…`]}):null,n.state?.installing?(0,P.jsxs)(`div`,{className:`flex items-center gap-2 text-xs text-muted-foreground`,children:[(0,P.jsx)(m,{className:`size-3`}),`正在安装…`]}):null,o===`FAILED`?(0,P.jsxs)(`div`,{className:`flex items-center gap-1.5 text-xs text-destructive`,children:[(0,P.jsx)(e,{className:`size-3.5`}),(0,P.jsx)(`span`,{className:`truncate`,children:n.state?.lastError||`失败`})]}):null]}),(0,P.jsx)(`div`,{className:`flex items-center bg-[image:var(--panel-accent-gradient)] px-6 py-5`,children:(0,P.jsxs)(`div`,{className:`grid w-full grid-cols-2 gap-x-6 gap-y-4 sm:grid-cols-4`,children:[(0,P.jsx)(E,{icon:(0,P.jsx)(re,{className:`size-4`}),label:`端口`,value:String(n.port),mono:!0}),(0,P.jsx)(E,{icon:(0,P.jsx)(M,{className:`size-4`}),label:`PID`,value:n.state?.pid?String(n.state.pid):`—`,mono:!0}),(0,P.jsx)(E,{icon:(0,P.jsx)(j,{className:`size-4`}),label:`重启次数`,value:String(n.state?.restartCount??0),mono:!0}),(0,P.jsx)(E,{icon:(0,P.jsx)(e,{className:`size-4`}),label:`最近故障`,value:n.state?.lastFailure?S(n.state.lastFailure):`无`,warn:!!n.state?.lastFailure})]})})]}),(0,P.jsxs)(`div`,{className:`flex flex-wrap items-center justify-between gap-3 border-t border-border/60 px-6 py-3`,children:[(0,P.jsxs)(`span`,{className:`hidden min-w-0 items-center lg:inline-flex gap-2 text-xs text-muted-foreground`,children:[(0,P.jsx)(O,{domain:`sandbox`}),(0,P.jsx)(D,{tone:n.remoteEnabled?`boot`:`off`,children:n.remoteEnabled?`远程开启`:`远程关闭`}),(0,P.jsxs)(`span`,{className:`whitespace-nowrap`,children:[`内存 `,u,` · CPU `,d]})]}),(0,P.jsxs)(`div`,{className:`ml-auto flex flex-wrap items-center gap-2`,children:[(0,P.jsxs)(a,{disabled:!r,onClick:()=>void Q(n.id,()=>h.instanceOpenWeb(n.id)),size:`sm`,title:`打开 DSH Web（自动带认证连接）`,variant:`outline`,className:`hidden md:inline-flex`,children:[(0,P.jsx)(b,{className:`size-4`}),`DSH Web`]}),(0,P.jsx)(a,{disabled:l,onClick:()=>void Q(n.id,()=>r?h.instanceStop(n.id):h.instanceStart(n.id)),size:`sm`,variant:`outline`,children:r?(0,P.jsxs)(P.Fragment,{children:[(0,P.jsx)(x,{className:`size-4 text-status-error`}),`停止实例`]}):(0,P.jsxs)(P.Fragment,{children:[(0,P.jsx)(ee,{className:`size-4 text-primary`}),`启动实例`]})}),(0,P.jsx)(`span`,{"aria-hidden":`true`,className:`mx-1 h-5 w-px bg-border`}),(0,P.jsxs)(a,{disabled:f,onClick:()=>void Q(n.id,()=>h.instanceUpdate(n.id,{guardian:!n.guardian})),size:`sm`,variant:`outline`,children:[(0,P.jsx)(te,{className:t(`size-4`,n.guardian?`text-status-ok`:`text-muted-foreground`)}),n.guardian?`停止守护`:`启动守护`]}),(0,P.jsxs)(a,{className:`hidden h-[30px] md:inline-flex`,disabled:f,onClick:()=>R(n.id),size:`sm`,variant:`destructive`,children:[(0,P.jsx)(ne,{className:`size-4`}),`删除`]})]})]})]})};return(0,P.jsxs)(`div`,{className:`grid content-start gap-4`,children:[Z?(0,P.jsxs)(`div`,{className:`flex items-start gap-2 rounded-lg border border-amber-500/30 bg-amber-500/5 px-3 py-2.5 text-xs text-muted-foreground`,children:[(0,P.jsx)(e,{className:`mt-0.5 size-3.5 shrink-0 text-amber-500`}),(0,P.jsxs)(`span`,{children:[`当前平台（`,X?.platform||`未知`,`）不支持沙箱实例：需 Linux + systemd-run（独立 cgroup 隔离）。 原生 DSH 主实例不受影响。`]})]}):null,Y.length?(0,P.jsx)(`div`,{className:`grid gap-3`,children:Y.map(e=>(0,P.jsx)($,{it:e},e.id))}):(0,P.jsx)(`div`,{className:`grid min-h-[220px] place-items-center rounded-lg border border-dashed border-border text-center`,children:(0,P.jsxs)(`div`,{children:[(0,P.jsx)(A,{className:`mx-auto mb-3 size-8 text-muted-foreground`}),(0,P.jsx)(`p`,{className:`text-sm font-medium text-foreground`,children:`尚未添加沙箱实例`}),(0,P.jsx)(`p`,{className:`mt-1 text-xs text-muted-foreground`,children:Z?`当前平台不支持沙箱实例（见上方说明）`:`点击顶部「添加实例」创建沙箱`})]})}),(0,P.jsx)(c,{open:F,onOpenChange:I,children:(0,P.jsxs)(o,{className:`max-w-[440px]`,children:[(0,P.jsx)(v,{children:(0,P.jsx)(s,{children:`添加 DSH 实例`})}),(0,P.jsxs)(`div`,{className:`grid gap-3`,children:[(0,P.jsxs)(`div`,{className:`grid gap-1.5`,children:[(0,P.jsx)(f,{children:`实例名称`}),(0,P.jsx)(l,{placeholder:`如 沙箱二开`,value:z,onChange:e=>B(e.target.value)})]}),(0,P.jsxs)(`div`,{className:`grid gap-1.5`,children:[(0,P.jsx)(f,{children:`监听端口`}),(0,P.jsx)(l,{inputMode:`numeric`,placeholder:`如 3082`,value:V,onChange:e=>H(e.target.value)})]}),(0,P.jsxs)(`div`,{className:`grid gap-1.5`,children:[(0,P.jsx)(f,{children:`启动命令（每项一参数，可留空用默认）`}),(0,P.jsx)(u,{className:`min-h-[72px] font-mono text-sm`,placeholder:`node
+import{A as e,E as t,L as n,O as r,P as i,T as a,_ as o,b as s,g as c,h as l,i as u,k as d,m as f,n as p,o as m,r as h,t as g,v as _,y as v,z as y}from"./supervisor-DdCExALH.js";import{t as b}from"./external-link-B3goz-0m.js";import{n as x,t as ee}from"./rocket-B9cBKQUY.js";import{t as te}from"./shield-check-UgQY0o2B.js";import{c as ne,f as re,o as S,s as C}from"./supervisor-4Q6BBx68.js";import{t as w}from"./useSupervisorAction-C0KJmCu7.js";import{c as T,i as E,o as D,r as O,t as k}from"./widgets-BXmNWJy5.js";var A=i(`box`,[[`path`,{d:`M21 8a2 2 0 0 0-1-1.73l-7-4a2 2 0 0 0-2 0l-7 4A2 2 0 0 0 3 8v8a2 2 0 0 0 1 1.73l7 4a2 2 0 0 0 2 0l7-4A2 2 0 0 0 21 16Z`,key:`hh9hay`}],[`path`,{d:`m3.3 7 8.7 5 8.7-5`,key:`g66t2b`}],[`path`,{d:`M12 22V12`,key:`d0xqtd`}]]),j=i(`rotate-cw`,[[`path`,{d:`M21 12a9 9 0 1 1-9-9c2.52 0 4.93 1 6.74 2.74L21 8`,key:`1p45f6`}],[`path`,{d:`M21 3v5h-5`,key:`1q7to0`}]]),M=i(`square`,[[`rect`,{width:`18`,height:`18`,x:`3`,y:`3`,rx:`2`,key:`afitv7`}]]),N=y(n(),1),P=r();function F({onRegisterActions:n}){let{snap:r}=g(),{busy:i,run:y}=w(),[F,I]=(0,N.useState)(!1),[L,R]=(0,N.useState)(null),[z,B]=(0,N.useState)(``),[V,H]=(0,N.useState)(``),[U,W]=(0,N.useState)(``),[G,K]=(0,N.useState)(`4G`),[q,J]=(0,N.useState)(`150%`),Y=r.instances?.instances??[],[X,ie]=(0,N.useState)(null);(0,N.useEffect)(()=>{let e=!0;return h.envStatus().then(t=>{e&&ie(t.capabilities??null)}).catch(()=>void 0),()=>{e=!1}},[]);let Z=X!==null&&X.multiInstance===!1;(0,N.useEffect)(()=>(n?.({onAdd:()=>I(!0)}),()=>n?.(null)),[n]);let Q=(e,t)=>y(e,t);async function ae(){if(Z){d.error(`当前平台不支持沙箱实例（需 Linux + systemd-run）`);return}let e=parseInt(V,10);if(!Number.isFinite(e)||e<=0){d.error(`请填写有效端口`);return}let t=U?U.split(/\n/).map(e=>e.trim()).filter(Boolean):[];try{let n=await h.instanceAdd({name:z.trim()||`沙箱 `+e,port:e,command:t,memoryMax:G||`4G`,cpuQuota:q||`150%`});if(n&&n.ok===!1){d.error(n.error||`添加失败`);return}d.success(`已添加实例`),I(!1),B(``),H(``),W(``),K(`4G`),J(`150%`),p.refresh()}catch(e){d.error(String(e))}}async function oe(e){await y(e.id,async()=>{let t=await h.instanceCheckUpdate(e.id);t.updateAvailable?(d.success(`发现新版 `+t.latest+`，可点「更新」升级`),ce(t=>new Map(t).set(e.id,!0))):t.latest?d.info(`已是最新 `+t.latest):d.error(t.error||`版本检测失败`)})}let[se,ce]=(0,N.useState)(new Map);async function le(e){confirm(`将升级该沙箱实例的 DSH 到最新版（实例会短暂重启，进行中的请求中断）。确定升级？`)&&await y(e.id,()=>h.instanceUpgrade(e.id),{success:`升级已开始…`})}let $=({it:n})=>{let r=n.state?.running??!1,o=n.state?.lifecyclePhase,s=C(o,r),c=n.updateJob,l=c?.state===`running`,u=n.sandbox?.memoryMax||`—`,d=n.sandbox?.cpuQuota||`—`,f=i===n.id;return(0,P.jsxs)(k,{className:`overflow-visible`,children:[(0,P.jsxs)(`div`,{className:`grid grid-cols-1 @min-[720px]:grid-cols-[minmax(0,5fr)_minmax(0,6fr)]`,children:[(0,P.jsxs)(`div`,{className:`flex flex-col gap-4 border-b border-border px-6 py-5 md:border-b-0 md:border-r`,children:[(0,P.jsxs)(`div`,{className:`flex flex-wrap items-center justify-between gap-3`,children:[(0,P.jsxs)(`div`,{className:`flex min-w-0 flex-wrap items-center gap-2`,children:[(0,P.jsx)(`strong`,{className:`truncate text-lg font-semibold tracking-[-0.01em] text-foreground`,children:n.name}),n.version?(0,P.jsxs)(`span`,{className:`font-mono text-sm text-muted-foreground`,children:[`v`,n.version]}):null]}),se.get(n.id)?(0,P.jsxs)(a,{className:`text-primary-foreground`,onClick:()=>void le(n),size:`chip`,children:[(0,P.jsx)(j,{className:`size-3`}),`更新`]}):(0,P.jsxs)(a,{className:`bg-primary/10 text-primary hover:bg-primary/15`,disabled:f||l,onClick:()=>void oe(n),size:`chip`,variant:`ghost`,children:[(0,P.jsx)(j,{className:t(`size-3`,f&&`animate-spin`)}),`检测更新`]})]}),(0,P.jsxs)(`div`,{className:`flex flex-wrap items-center gap-2`,children:[(0,P.jsx)(T,{tone:s.tone,ping:s.tone===`ok`}),(0,P.jsx)(`span`,{className:`text-base font-semibold leading-none text-foreground`,children:s.label})]}),l?(0,P.jsxs)(`div`,{className:`flex items-center gap-2 text-xs text-muted-foreground`,children:[(0,P.jsx)(m,{className:`size-3`}),`正在升级 DeepSeek Harness（`,c?.step||``,`）…`]}):null,n.state?.installing?(0,P.jsxs)(`div`,{className:`flex items-center gap-2 text-xs text-muted-foreground`,children:[(0,P.jsx)(m,{className:`size-3`}),`正在安装…`]}):null,o===`FAILED`?(0,P.jsxs)(`div`,{className:`flex items-center gap-1.5 text-xs text-destructive`,children:[(0,P.jsx)(e,{className:`size-3.5`}),(0,P.jsx)(`span`,{className:`truncate`,children:n.state?.lastError||`失败`})]}):null]}),(0,P.jsx)(`div`,{className:`flex items-center bg-[image:var(--panel-accent-gradient)] px-6 py-5`,children:(0,P.jsxs)(`div`,{className:`grid w-full grid-cols-2 gap-x-6 gap-y-4 sm:grid-cols-4`,children:[(0,P.jsx)(E,{icon:(0,P.jsx)(re,{className:`size-4`}),label:`端口`,value:String(n.port),mono:!0}),(0,P.jsx)(E,{icon:(0,P.jsx)(M,{className:`size-4`}),label:`PID`,value:n.state?.pid?String(n.state.pid):`—`,mono:!0}),(0,P.jsx)(E,{icon:(0,P.jsx)(j,{className:`size-4`}),label:`重启次数`,value:String(n.state?.restartCount??0),mono:!0}),(0,P.jsx)(E,{icon:(0,P.jsx)(e,{className:`size-4`}),label:`最近故障`,value:n.state?.lastFailure?S(n.state.lastFailure):`无`,warn:!!n.state?.lastFailure})]})})]}),(0,P.jsxs)(`div`,{className:`flex flex-wrap items-center justify-between gap-3 border-t border-border/60 px-6 py-3`,children:[(0,P.jsxs)(`span`,{className:`hidden min-w-0 items-center lg:inline-flex gap-2 text-xs text-muted-foreground`,children:[(0,P.jsx)(O,{domain:`sandbox`}),(0,P.jsx)(D,{tone:n.remoteEnabled?`boot`:`off`,children:n.remoteEnabled?`远程开启`:`远程关闭`}),(0,P.jsxs)(`span`,{className:`whitespace-nowrap`,children:[`内存 `,u,` · CPU `,d]})]}),(0,P.jsxs)(`div`,{className:`ml-auto flex flex-wrap items-center gap-2`,children:[(0,P.jsxs)(a,{disabled:!r,onClick:()=>void Q(n.id,()=>h.instanceOpenWeb(n.id)),size:`sm`,title:`打开 DSH Web（自动带认证连接）`,variant:`outline`,className:`hidden md:inline-flex`,children:[(0,P.jsx)(b,{className:`size-4`}),`DSH Web`]}),(0,P.jsx)(a,{disabled:l,onClick:()=>void Q(n.id,()=>r?h.instanceStop(n.id):h.instanceStart(n.id)),size:`sm`,variant:`outline`,children:r?(0,P.jsxs)(P.Fragment,{children:[(0,P.jsx)(x,{className:`size-4 text-status-error`}),`停止实例`]}):(0,P.jsxs)(P.Fragment,{children:[(0,P.jsx)(ee,{className:`size-4 text-primary`}),`启动实例`]})}),(0,P.jsx)(`span`,{"aria-hidden":`true`,className:`mx-1 h-5 w-px bg-border`}),(0,P.jsxs)(a,{disabled:f,onClick:()=>void Q(n.id,()=>h.instanceUpdate(n.id,{guardian:!n.guardian})),size:`sm`,variant:`outline`,children:[(0,P.jsx)(te,{className:t(`size-4`,n.guardian?`text-status-ok`:`text-muted-foreground`)}),n.guardian?`停止守护`:`启动守护`]}),(0,P.jsxs)(a,{className:`hidden h-[30px] md:inline-flex`,disabled:f,onClick:()=>R(n.id),size:`sm`,variant:`destructive`,children:[(0,P.jsx)(ne,{className:`size-4`}),`删除`]})]})]})]})};return(0,P.jsxs)(`div`,{className:`grid content-start gap-4`,children:[Z?(0,P.jsxs)(`div`,{className:`flex items-start gap-2 rounded-lg border border-amber-500/30 bg-amber-500/5 px-3 py-2.5 text-xs text-muted-foreground`,children:[(0,P.jsx)(e,{className:`mt-0.5 size-3.5 shrink-0 text-amber-500`}),(0,P.jsxs)(`span`,{children:[`当前平台（`,X?.platform||`未知`,`）不支持沙箱实例：需 Linux + systemd-run（独立 cgroup 隔离）。 原生 DSH 主实例不受影响。`]})]}):null,Y.length?(0,P.jsx)(`div`,{className:`grid gap-3`,children:Y.map(e=>(0,P.jsx)($,{it:e},e.id))}):(0,P.jsx)(`div`,{className:`grid min-h-[220px] place-items-center rounded-lg border border-dashed border-border text-center`,children:(0,P.jsxs)(`div`,{children:[(0,P.jsx)(A,{className:`mx-auto mb-3 size-8 text-muted-foreground`}),(0,P.jsx)(`p`,{className:`text-sm font-medium text-foreground`,children:`尚未添加沙箱实例`}),(0,P.jsx)(`p`,{className:`mt-1 text-xs text-muted-foreground`,children:Z?`当前平台不支持沙箱实例（见上方说明）`:`点击顶部「添加实例」创建沙箱`})]})}),(0,P.jsx)(c,{open:F,onOpenChange:I,children:(0,P.jsxs)(o,{className:`max-w-[440px]`,children:[(0,P.jsx)(v,{children:(0,P.jsx)(s,{children:`添加 DSH 实例`})}),(0,P.jsxs)(`div`,{className:`grid gap-3`,children:[(0,P.jsxs)(`div`,{className:`grid gap-1.5`,children:[(0,P.jsx)(f,{children:`实例名称`}),(0,P.jsx)(l,{placeholder:`如 沙箱二开`,value:z,onChange:e=>B(e.target.value)})]}),(0,P.jsxs)(`div`,{className:`grid gap-1.5`,children:[(0,P.jsx)(f,{children:`监听端口`}),(0,P.jsx)(l,{inputMode:`numeric`,placeholder:`如 3082`,value:V,onChange:e=>H(e.target.value)})]}),(0,P.jsxs)(`div`,{className:`grid gap-1.5`,children:[(0,P.jsx)(f,{children:`启动命令（每项一参数，可留空用默认）`}),(0,P.jsx)(u,{className:`min-h-[72px] font-mono text-sm`,placeholder:`node
 /usr/local/bin/dsh
 web`,value:U,onChange:e=>W(e.target.value)})]}),(0,P.jsxs)(`div`,{className:`grid grid-cols-2 gap-3`,children:[(0,P.jsxs)(`div`,{className:`grid gap-1.5`,children:[(0,P.jsx)(f,{children:`内存限额`}),(0,P.jsx)(l,{placeholder:`如 4G`,value:G,onChange:e=>K(e.target.value)})]}),(0,P.jsxs)(`div`,{className:`grid gap-1.5`,children:[(0,P.jsx)(f,{children:`CPU 配额`}),(0,P.jsx)(l,{placeholder:`如 150%`,value:q,onChange:e=>J(e.target.value)})]})]})]}),(0,P.jsxs)(_,{children:[(0,P.jsx)(a,{onClick:()=>I(!1),variant:`outline`,children:`取消`}),(0,P.jsx)(a,{onClick:()=>void ae(),children:`添加`})]})]})}),(0,P.jsx)(c,{open:!!L,onOpenChange:e=>!e&&R(null),children:(0,P.jsxs)(o,{className:`max-w-[380px]`,children:[(0,P.jsx)(v,{children:(0,P.jsx)(s,{children:`删除实例？`})}),(0,P.jsx)(`p`,{className:`text-sm text-muted-foreground`,children:`将彻底删除该沙箱实例（含配置与运行时数据）。此操作不可恢复。`}),(0,P.jsxs)(_,{children:[(0,P.jsx)(a,{onClick:()=>R(null),variant:`outline`,children:`取消`}),(0,P.jsx)(a,{className:`h-[34px]`,onClick:()=>{let e=L;R(null),e&&y(e,async()=>{let t=await h.instanceRemove(e);t&&t.ok!==!1&&t.dataPreserved===!0?d.warning(`实例已移除，但因其单元仍在运行，数据目录已保留（未删除）——请先停止实例再删数据`):t&&t.ok===!1&&d.error(t.error||`删除失败`),p.refresh()})},variant:`destructive`,children:`删除`})]})]})})]})}export{F as InstancesPage};