@dsh-sup/dsh-core-linux-x64 0.1.5-BETA.4 → 0.1.5-BETA.6

package/core.cjs

@@ -80,6 +80,71 @@ var require_exec = __commonJS({
   }
 });
 
+// src/platform/state-root.js
+var require_state_root = __commonJS({
+  "src/platform/state-root.js"(exports2, module2) {
+    "use strict";
+    var fs2 = require("node:fs");
+    var os2 = require("node:os");
+    var path2 = require("node:path");
+    var SCHEMA = 1;
+    function root() {
+      const override = process.env.DSH_SUPERVISOR_HOME;
+      if (override && String(override).trim()) return path2.resolve(String(override).trim());
+      if (process.platform === "win32") {
+        const local = process.env.LOCALAPPDATA || path2.join(os2.homedir(), "AppData", "Local");
+        return path2.join(local, "dsh-supervisor");
+      }
+      if (process.platform === "darwin") {
+        return path2.join(os2.homedir(), "Library", "Application Support", "dsh-supervisor");
+      }
+      const xdg = process.env.XDG_STATE_HOME;
+      return xdg && String(xdg).trim() ? path2.join(String(xdg).trim(), "dsh-supervisor") : path2.join(os2.homedir(), ".local", "state", "dsh-supervisor");
+    }
+    function supervisorDir() {
+      return path2.join(root(), "supervisor");
+    }
+    function shellDir() {
+      return path2.join(root(), "shell");
+    }
+    function legacySupervisorDir() {
+      return path2.join(os2.homedir(), ".dsh", "supervisor");
+    }
+    function legacyShellDir() {
+      return path2.join(os2.homedir(), ".dsh", "shell");
+    }
+    function migrateLegacy() {
+      const moved = [];
+      for (const [from, to] of [
+        [legacySupervisorDir(), supervisorDir()],
+        [legacyShellDir(), shellDir()]
+      ]) {
+        try {
+          if (!fs2.existsSync(from)) continue;
+          fs2.mkdirSync(to, { recursive: true });
+          for (const name of fs2.readdirSync(from)) {
+            const src = path2.join(from, name);
+            const dst = path2.join(to, name);
+            if (fs2.existsSync(dst)) continue;
+            try {
+              fs2.renameSync(src, dst);
+              moved.push(src + " -> " + dst);
+            } catch {
+            }
+          }
+          try {
+            if (fs2.readdirSync(from).length === 0) fs2.rmdirSync(from);
+          } catch {
+          }
+        } catch {
+        }
+      }
+      return moved;
+    }
+    module2.exports = { SCHEMA, root, supervisorDir, shellDir, legacySupervisorDir, legacyShellDir, migrateLegacy };
+  }
+});
+
 // src/platform/config.js
 var require_config = __commonJS({
   "src/platform/config.js"(exports2, module2) {
@@ -92,6 +157,7 @@ var require_config = __commonJS({
       if (p.startsWith("~/")) return path2.join(os2.homedir(), p.slice(2));
       return p;
     }
+    var SUP = require_state_root().supervisorDir();
     var DEFAULTS = {
       probeIntervalMs: 5e3,
       // 健康探测（三层）：L0 进程存活 + L1 端口监听 + L2 HTTP GET healthUrl。
@@ -117,29 +183,27 @@ var require_config = __commonJS({
       // managed = relay/proxyInstance/oauthCallback 共享池（K8s 单一范围思想，杜绝段碎片化）；
       // providerApi = 智能路由供应商独立端点池（按供应商规模调大）。null = 用内置默认池。
       portPools: null,
-      stateFile: "~/.dsh/supervisor/state.json",
+      stateFile: path2.join(SUP, "state.json"),
       // 系统日志框架目录布局：log/ 与 events/ 分目录；
       // 守卫(guard) 事件在 events/guard.events.log、分级日志在 log/guard.log（daemon 用 router/lan 同构文件）。
       // 显式配置（既有生产 config.json / 测试）仍尊重用户给定路径——不强行改写。
-      logFile: "~/.dsh/supervisor/events/guard.events.log",
+      logFile: path2.join(SUP, "events", "guard.events.log"),
       eventsMaxBytes: 5 * 1024 * 1024,
-      supervisorLogFile: "~/.dsh/supervisor/log/guard.log",
-      dshLogFile: "~/.dsh/supervisor/log/dsh.log",
-      upgradeLogFile: "~/.dsh/supervisor/log/upgrade.log",
+      supervisorLogFile: path2.join(SUP, "log", "guard.log"),
+      dshLogFile: path2.join(SUP, "log", "dsh.log"),
+      upgradeLogFile: path2.join(SUP, "log", "upgrade.log"),
       logLevel: "info",
       logMaxBytes: 5 * 1024 * 1024,
       notifyEnabled: true,
       routerAutostart: false,
       // 智能路由启动开关（旧键 switcherAutoStart 已迁移）
-      // 守卫自更新（2026-09 收敛：npm 通道取代 manifest）：corePackageName = 内核自身 npm 子包名
-      //（形如 @dsh-sup/dsh-core-linux-x64，按平台/架构发布；null = 不启用自更新）。
+      // 内核更新（单写入者 = 桌面壳）：corePackageName = 内核自身 npm 子包名
+      //（形如 @dsh-sup/dsh-core-linux-x64，按平台/架构发布）。守卫**只读**它来查询版本状态；
+      //安装/升级由桌面壳执行（见 RELEASE-AND-UPDATE-MECHANISM.md §6）。
       corePackageName: null,
-      // ⚠ `selfUpdateManifestUrl` / `selfUpdateDir` 是**旧 manifest 模式的残留键**（2026-09-12 核实）：
-      //   全仓**无任何赋值点**（默认恒 null），其唯一消费方 `env-catalog.selfUpdateEntry()` 已改为
-      //   按 `corePackageName` 判定。保留它们只为兼容既有用户 config.json（读到即忽略，不报错）。
-      //   新代码**不得**再依赖这两个键。
-      selfUpdateManifestUrl: null,
-      selfUpdateDir: null,
+      // ⚠ 2026-09-15：旧 manifest 模式的残留键 `selfUpdateManifestUrl` / `selfUpdateDir` **已删除**
+      //   （全仓无赋值点；其唯一消费方曾改为按 corePackageName 判定）。既有用户 config.json 若仍含
+      //   这两键，加载时忽略即可（未知键不报错）。新代码**不得**再引入 manifest 更新通道。
       pluginsProfileName: "web",
       packageName: "@deepseek-ai/dsh",
       // **最小兜底**镜像源（2026-09-11 契约化）。
@@ -225,7 +289,7 @@ var require_version = __commonJS({
     var fs2 = require("node:fs");
     var path2 = require("node:path");
     function guardVersion() {
-      if (true) return String("0.1.5-BETA.4");
+      if (true) return String("0.1.5-BETA.6");
       try {
         return JSON.parse(fs2.readFileSync(path2.join(__dirname, "..", "..", "package.json"), "utf8")).version || "unknown";
       } catch {
@@ -1553,7 +1617,7 @@ var require_autostart = __commonJS({
       return String(s).replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
     }
     function macGuiPlist(guiExe) {
-      const log = path2.join(os2.homedir(), ".dsh", "shell", "gui-stdio.log");
+      const log = path2.join(require_state_root().shellDir(), "gui-stdio.log");
       return '<?xml version="1.0" encoding="UTF-8"?>\n<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">\n<plist version="1.0"><dict>\n  <key>Label</key><string>' + xmlEscape(GUI_LABEL) + "</string>\n  <key>ProgramArguments</key>\n  <array><string>" + xmlEscape(guiExe) + "</string></array>\n  <key>RunAtLoad</key><true/>\n  <key>LimitLoadToSessionType</key><string>Aqua</string>\n  <key>ProcessType</key><string>Interactive</string>\n  <key>StandardOutPath</key><string>" + xmlEscape(log) + "</string>\n  <key>StandardErrorPath</key><string>" + xmlEscape(log) + "</string>\n</dict></plist>\n";
     }
     function guiFile() {
@@ -1607,54 +1671,14 @@ var require_autostart = __commonJS({
       const errors = [];
       if (isWindows) {
         try {
-          const watchdogPs1 = path2.join(os2.homedir(), ".dsh", "supervisor", "watchdog.ps1");
           if (on) {
-            const apiPort = process.env.DSH_SUPERVISOR_API_PORT || "36361";
-            const daemon = daemonCommand();
-            const guiPath = guiCommand();
-            const ps = [
-              '$ErrorActionPreference = "SilentlyContinue"',
-              "$port = " + JSON.stringify(String(apiPort)),
-              "$daemon = " + JSON.stringify(String(daemon)),
-              "$gui = " + JSON.stringify(String(guiPath)),
-              "$up = Test-NetConnection -ComputerName 127.0.0.1 -Port $port -InformationLevel Quiet -WarningAction SilentlyContinue",
-              "# \u2500\u2500 \u5B88\u536B\u4FDD\u6D3B\uFF08\u4EC5\u5728\u5B88\u536B\u4E0D\u53EF\u8FBE\u65F6\uFF09\u2500\u2500",
-              "if (-not $up) {",
-              "  $p = @(Get-Process -Name dsh-supervisor -ErrorAction SilentlyContinue)",
-              "  if (-not $p) { Start-Process -FilePath $daemon -ArgumentList 'daemon' -WindowStyle Hidden }",
-              "}",
-              "# \u2500\u2500 \u58F3\u4FDD\u6D3B\uFF08\u26A0 \u5FC5\u987B**\u72EC\u7ACB\u4E8E\u5B88\u536B\u72B6\u6001**\uFF09\u2500\u2500",
-              "#   2026-09-11 \u5BA1\u8BA1\u4FEE\u590D\uFF1A\u65E7\u5B9E\u73B0\u628A\u58F3\u68C0\u67E5\u5D4C\u5728\u4E0A\u9762\u7684 if (-not $up) \u5185\uFF0C",
-              "#   \u4E8E\u662F\u300C\u58F3\u5D29\u3001\u5B88\u536B\u6D3B\u300D\u65F6 $up \u4E3A\u771F \u2192 \u6574\u5757\u8DF3\u8FC7 \u2192 **\u58F3\u6C38\u8FDC\u4E0D\u4F1A\u88AB\u62C9\u8D77**\u3002",
-              "#   \u800C\u90A3\u6070\u662F\u58F3\u81EA\u6108\u552F\u4E00\u9700\u8981\u751F\u6548\u7684\u573A\u666F\uFF08\u5B88\u536B\u7531\u670D\u52A1\u7BA1\u7406\u5668\u4FDD\u6D3B\uFF0C\u58F3\u65E0\u4EBA\u7BA1\uFF09\u3002",
-              "$g = @(Get-Process -Name dsh-supervisor-gui -ErrorAction SilentlyContinue)",
-              "if (-not $g -and (Test-Path $gui)) { Start-Process -FilePath $gui -WindowStyle Hidden }",
-              "exit 0"
-            ].join(String.fromCharCode(13, 10));
-            fs2.mkdirSync(path2.dirname(watchdogPs1), { recursive: true });
-            const atmp = watchdogPs1 + ".tmp";
-            fs2.writeFileSync(atmp, ps);
-            fs2.renameSync(atmp, watchdogPs1);
-            {
-              const r = ex2.runDetail("schtasks", ["/Create", "/TN", "DSH-Supervisor-GUI", "/SC", "ONLOGON", "/RL", "HIGHEST", "/F", "/TR", '"' + guiCommand() + '"']);
-              if (!r.ok) errors.push("schtasks gui: " + (r.error || "\u6267\u884C\u5931\u8D25"));
-            }
-            ex2.run("schtasks", ["/Change", "/TN", "DSH-Supervisor", "/ENABLE"]);
-            {
-              const r = ex2.runDetail("schtasks", ["/Create", "/TN", "DSH-Supervisor-Watchdog", "/SC", "MINUTE", "/MO", "5", "/RL", "HIGHEST", "/F", "/TR", 'powershell -NoProfile -NonInteractive -ExecutionPolicy Bypass -File "' + watchdogPs1 + '"']);
-              if (!r.ok) errors.push("schtasks watchdog: " + (r.error || "\u6267\u884C\u5931\u8D25"));
-            }
+            const r = ex2.runDetail("schtasks", ["/Create", "/TN", "DSH-Supervisor-GUI", "/SC", "ONLOGON", "/RL", "HIGHEST", "/F", "/TR", '"' + guiCommand() + '"']);
+            if (!r.ok) errors.push("schtasks gui: " + (r.error || "\u6267\u884C\u5931\u8D25"));
           } else {
-            ex2.run("schtasks", ["/Delete", "/TN", "DSH-Supervisor-Watchdog", "/F"]);
             ex2.run("schtasks", ["/Delete", "/TN", "DSH-Supervisor-GUI", "/F"]);
-            ex2.run("schtasks", ["/Change", "/TN", "DSH-Supervisor", "/DISABLE"]);
-            try {
-              fs2.unlinkSync(watchdogPs1);
-            } catch {
-            }
           }
         } catch (e) {
-          errors.push("watchdog setup: " + e.message);
+          errors.push("gui autostart: " + e.message);
         }
         return { ok: errors.length === 0, errors, ...status() };
       }
@@ -1836,7 +1860,7 @@ var require_os = __commonJS({
       return path2.join(os2.homedir(), ".dsh");
     }
     function supervisorDir() {
-      return path2.join(dataDir(), "supervisor");
+      return require_state_root().supervisorDir();
     }
     function capabilityProfile(platform, arch) {
       const pl = platform || PLATFORM;
@@ -2069,7 +2093,7 @@ var require_ports = __commonJS({
     };
     var PortRegistry = class {
       constructor(opts) {
-        this._file = opts && opts.file || path2.join(os2.homedir(), ".dsh", "supervisor", "ports.json");
+        this._file = opts && opts.file || path2.join(require_state_root().supervisorDir(), "ports.json");
         this._records = /* @__PURE__ */ new Map();
         this._allocLock = false;
         this._pools = Object.assign({}, DEFAULT_POOLS, opts && opts.pools || {});
@@ -3393,6 +3417,7 @@ var require_proxy = __commonJS({
         this.kind = "proxy";
         this.proxyAppId = opts.proxyAppId;
         this.app = opts.app || null;
+        this.stateDir = opts.stateDir || null;
         this.proxyRunning = false;
         this.instances = [];
         this.selectedAccountKeyId = null;
@@ -3626,7 +3651,8 @@ var require_proxy = __commonJS({
         const logFilter = /error|streaming|idle|timeout|ECONN|abort|socket|finish|truncat/i;
         let logStream = null;
         try {
-          const logDir = require("node:path").join(require("node:os").homedir(), ".dsh", "supervisor", "logs");
+          const baseDir = this.stateDir || require("../../platform/state-root").supervisorDir();
+          const logDir = require("node:path").join(baseDir, "logs");
           require("node:fs").mkdirSync(logDir, { recursive: true });
           logStream = require("node:fs").createWriteStream(require("node:path").join(logDir, "proxy-instance-" + this.proxyAppId + "-" + port + ".log"), { flags: "a" });
         } catch {
@@ -4721,6 +4747,60 @@ var require_proxy_apps = __commonJS({
   }
 });
 
+// src/platform/runtime-contract.js
+var require_runtime_contract = __commonJS({
+  "src/platform/runtime-contract.js"(exports2, module2) {
+    "use strict";
+    var fs2 = require("node:fs");
+    var os2 = require("node:os");
+    var path2 = require("node:path");
+    var SUPPORTED_SCHEMA = 2;
+    function file() {
+      return path2.join(require_state_root().supervisorDir(), "runtime.json");
+    }
+    function read() {
+      let j;
+      try {
+        j = JSON.parse(fs2.readFileSync(file(), "utf8"));
+      } catch {
+        return null;
+      }
+      if (!j || typeof j !== "object" || Array.isArray(j)) return null;
+      const node = j.node && typeof j.node === "object" ? j.node : {};
+      const npm = j.npm && typeof j.npm === "object" ? j.npm : {};
+      return {
+        schema: Number(j.schema) || 1,
+        nodePath: j.nodePath || node.path || null,
+        nodeBinDir: j.nodeBinDir || node.binDir || null,
+        npmPath: j.npmPath || npm.path || null,
+        minNode: j.minNode || null,
+        writtenBy: j.writtenBy || null,
+        raw: j
+      };
+    }
+    function npmBin(fallback) {
+      const c = read();
+      if (c && c.npmPath) {
+        try {
+          if (fs2.existsSync(c.npmPath)) return c.npmPath;
+        } catch {
+        }
+      }
+      return typeof fallback === "function" ? fallback() : fallback;
+    }
+    function withPath(env) {
+      const e = Object.assign({}, env || {});
+      const c = read();
+      if (c && c.nodeBinDir) {
+        const cur = e.PATH || e.Path || "";
+        e.PATH = c.nodeBinDir + path2.delimiter + cur;
+      }
+      return e;
+    }
+    module2.exports = { SUPPORTED_SCHEMA, file, read, npmBin, withPath };
+  }
+});
+
 // src/platform/registry-contract.js
 var require_registry_contract = __commonJS({
   "src/platform/registry-contract.js"(exports2, module2) {
@@ -4832,6 +4912,7 @@ var require_dist = __commonJS({
     var matrix = require_matrix();
     var { spawn } = require("node:child_process");
     var { npmBin } = require_exec_path();
+    var runtimeContract = require_runtime_contract();
     var registryContract = require_registry_contract();
     var CONTRACT_TTL_MS = 60 * 1e3;
     var service = require_service().current();
@@ -5227,17 +5308,17 @@ var require_dist = __commonJS({
         const pkg = o.pkg || "@deepseek-ai/dsh";
         if (!o.version) return Promise.resolve({ ok: false, error: "runNpmInstall: \u7F3A\u5C11 version\uFF08\u5FC5\u987B\u663E\u5F0F\u643A\u5E26\uFF09", output: [] });
         let argv;
-        let bin = npmBin();
+        let bin = runtimeContract.npmBin(npmBin);
         if (Array.isArray(o.commandTemplate) && o.commandTemplate.length) {
           argv = o.commandTemplate.map((s) => String(s).replace(/{pkg}/g, pkg).replace(/{version}/g, o.version).replace(/{prefix}/g, o.prefix || ""));
-          bin = argv[0] === "npm" ? npmBin() : argv[0];
+          bin = argv[0] === "npm" ? runtimeContract.npmBin(npmBin) : argv[0];
           argv = argv.slice(1);
         } else {
           argv = ["install", "-g", "--no-audit", "--no-fund"];
           if (o.prefix) argv.push("--prefix", o.prefix);
           argv.push(pkg + "@" + o.version);
         }
-        const envVars = Object.assign({}, process.env);
+        const envVars = runtimeContract.withPath(process.env);
         if (o.registry) {
           envVars.npm_config_registry = o.registry;
           envVars.NPM_CONFIG_REGISTRY = o.registry;
@@ -6699,7 +6780,7 @@ var require_router = __commonJS({
         }
       }
       _deserializeProvider(p) {
-        const common = { id: p.id, name: p.name, logger: this.logger, events: this.events, dist: this.dist, onPersist: () => this._save(), apiPort: p.apiPort || null, activated: p.activated === true };
+        const common = { id: p.id, name: p.name, logger: this.logger, events: this.events, dist: this.dist, onPersist: () => this._save(), stateDir: this.config && this.config.stateFile ? path2.dirname(this.config.stateFile) : null, apiPort: p.apiPort || null, activated: p.activated === true };
         let prov;
         if (p.kind === "proxy") {
           prov = new ProxyProvider({ ...common, kind: "proxy", proxyAppId: p.proxyAppId, app: PROXY_APPS[p.proxyAppId] || null });
@@ -10387,60 +10468,6 @@ var require_fs_utils = __commonJS({
     "use strict";
     var fs2 = require("node:fs");
     var path2 = require("node:path");
-    var zlib = require("node:zlib");
-    function extractTarGz(tgzBuf, destDir, opts) {
-      const strip = opts && opts.stripComponents !== void 0 ? opts.stripComponents : 1;
-      const tarData = zlib.gunzipSync(tgzBuf);
-      fs2.mkdirSync(destDir, { recursive: true });
-      const written = [];
-      const stripName = (name) => {
-        const parts = String(name).split("/").filter((p) => p !== "" && p !== ".");
-        const cut = Math.min(strip, parts.length - 1);
-        const rel = parts.slice(cut).join("/");
-        if (!rel || rel.split("/").some((s) => s === "..") || rel.startsWith("/")) return null;
-        return rel;
-      };
-      let offset = 0;
-      let pendingLong = null;
-      while (offset + 512 <= tarData.length) {
-        const header = tarData.slice(offset, offset + 512);
-        if (header.every((b) => b === 0)) break;
-        let name = header.slice(0, 100).toString("utf8").split("\0")[0];
-        const size = parseInt(header.slice(124, 136).toString("utf8").replace(/[\0 ]/g, ""), 8) || 0;
-        const typeFlag = String.fromCharCode(header[156] || 48);
-        const dataStart = offset + 512;
-        const data = tarData.slice(dataStart, dataStart + size);
-        offset = dataStart + Math.ceil(size / 512) * 512;
-        if (pendingLong !== null) {
-          name = pendingLong;
-          pendingLong = null;
-        }
-        if (typeFlag === "L") {
-          pendingLong = name;
-          continue;
-        }
-        const rel = stripName(name);
-        if (rel === null) continue;
-        const target = path2.join(destDir, rel);
-        if (typeFlag === "5") {
-          fs2.mkdirSync(target, { recursive: true });
-          continue;
-        }
-        if (typeFlag === "2") {
-          const linkTo = header.slice(157, 157 + 100).toString("utf8").split("\0")[0];
-          try {
-            fs2.unlinkSync(target);
-          } catch {
-          }
-          fs2.symlinkSync(linkTo, target);
-          continue;
-        }
-        fs2.mkdirSync(path2.dirname(target), { recursive: true });
-        fs2.writeFileSync(target, data);
-        written.push(rel);
-      }
-      return written;
-    }
     function dirSizeBytes(root) {
       let total = 0;
       let seen = 0;
@@ -10474,7 +10501,7 @@ var require_fs_utils = __commonJS({
       }
       return total;
     }
-    module2.exports = { dirSizeBytes, extractTarGz };
+    module2.exports = { dirSizeBytes };
   }
 });
 
@@ -11764,7 +11791,7 @@ var require_shell = __commonJS({
     var path2 = require("node:path");
     var { semverCompare } = require_dist();
     function shellDir() {
-      return path2.join(os2.homedir(), ".dsh", "shell");
+      return require_state_root().shellDir();
     }
     function readJson(p) {
       try {
@@ -15624,20 +15651,22 @@ var require_guard = __commonJS({
         return;
       }
       if (req.method === "POST" && pathname === "/self-update/apply") {
-        if (!originAllowed(req, sup.config.apiPort)) {
-          req.resume();
-          return send(403, {});
-        }
-        Promise.resolve(sup.guardSelfUpdateApply()).then((r) => send(r.ok ? 200 : 400, r));
-        return;
+        req.resume();
+        return send(410, {
+          ok: false,
+          code: "KERNEL_UPDATE_SINGLE_WRITER",
+          owner: "desktop-shell",
+          error: "\u5185\u6838\u66F4\u65B0\u7531\u684C\u9762\u58F3\u6267\u884C\uFF08\u5355\u5199\u5165\u8005\u5951\u7EA6\uFF09\uFF1A\u8BF7\u5728\u684C\u9762\u58F3\u7684\u9762\u677F\u4E2D\u70B9\u300C\u66F4\u65B0\u300D\uFF0C\u6216\u5347\u7EA7/\u91CD\u88C5\u684C\u9762\u58F3\u3002"
+        });
       }
       if (req.method === "POST" && pathname === "/self-update/restart-guard") {
-        if (!originAllowed(req, sup.config.apiPort)) {
-          req.resume();
-          return send(403, {});
-        }
-        const r = sup.guardSelfUpdateRestart();
-        return send(r.ok ? 200 : 400, r);
+        req.resume();
+        return send(410, {
+          ok: false,
+          code: "KERNEL_UPDATE_SINGLE_WRITER",
+          owner: "desktop-shell",
+          error: "\u5B88\u536B\u91CD\u542F\u7531\u684C\u9762\u58F3\u7ECF\u670D\u52A1\u7BA1\u7406\u5668\u6267\u884C\uFF08\u5B88\u536B\u4ECE\u4E0D\u91CD\u542F\u81EA\u5DF1\uFF09\uFF1A\u66F4\u65B0\u5185\u6838\u8BF7\u7528\u684C\u9762\u58F3\u3002"
+        });
       }
       if (req.method === "GET" && pathname === "/env/dsh") {
         if (!originAllowed(req, sup.config.apiPort)) {
@@ -17460,15 +17489,8 @@ var require_env_catalog = __commonJS({
     function runtimeMeta() {
       const now = Date.now();
       if (_runtimeMetaCache && now - _runtimeMetaAt < 1e4) return _runtimeMetaCache;
-      let meta = {};
-      try {
-        const os2 = require("node:os");
-        const path2 = require("node:path");
-        const f = path2.join(os2.homedir(), ".dsh", "supervisor", "runtime.json");
-        meta = JSON.parse(fs2.readFileSync(f, "utf8")) || {};
-      } catch {
-        meta = {};
-      }
+      const c = require_runtime_contract().read();
+      const meta = c && c.raw || {};
       _runtimeMetaCache = meta;
       _runtimeMetaAt = now;
       return meta;
@@ -17535,27 +17557,24 @@ var require_env_catalog = __commonJS({
         }
         return out;
       }
-      /** 守卫自更新条目。
+      /** 内核更新依赖条目（单写入者契约：安装/重启归桌面壳）。
        *
-       *  ⚠ 2026-09-12 校正（P2）：本条目原先依据 `selfUpdateManifestUrl` / `selfUpdateDir`，
-       *   但**真实机制早已换成 npm 通道**（`corePackageName` + `runNpmInstall`，见 settings-view 的
-       *   `guardSelfUpdateStatus` / `guardCorePkg`）。那两个键**没有任何发行流程赋值**（默认恒为 null），
-       *   于是 `/env/status` 里的「守卫自更新」**恒报 unconfigured**，且把原因归到了无效键上 ——
-       *   用户与排障者据此查 `selfUpdateManifestUrl`，而真正该看的是 `corePackageName`。
-       *
-       *   现改为按 npm 通道的真实开关（`corePackageName`）判定，detail 也给出该键。
+       *  2026-09-15（A 方案）：守卫**不再自更新**，`corePackageName` 只用于查询内核版本状态；
+       *  安装/升级由桌面壳执行（见 RELEASE-AND-UPDATE-MECHANISM.md §6）。
+       *  本条目因此只报告「壳执行内核更新所需的包名」是否就位 —— 不再暗示守卫能自己装。
+       *  id 仍为 `selfUpdate` 以兼容既有 `/env/status` 消费方。
        */
       selfUpdateEntry() {
         const pkg = this.config.corePackageName;
         if (!pkg) {
           return {
-            label: "\u5B88\u536B\u81EA\u66F4\u65B0",
+            label: "\u5185\u6838\u66F4\u65B0\uFF08\u684C\u9762\u58F3\u6267\u884C\uFF09",
             required: false,
             state: "unconfigured",
-            detail: "\u672A\u914D\u7F6E corePackageName\uFF08npm \u901A\u9053\uFF1B\u5F62\u5982 @dsh-sup/dsh-core-<os>-<arch>\uFF09"
+            detail: "\u672A\u914D\u7F6E corePackageName\uFF08\u5F62\u5982 @dsh-sup/dsh-core-<os>-<arch>\uFF09"
           };
         }
-        return { label: "\u5B88\u536B\u81EA\u66F4\u65B0", required: false, state: "configured", detail: pkg };
+        return { label: "\u5185\u6838\u66F4\u65B0\uFF08\u684C\u9762\u58F3\u6267\u884C\uFF09", required: false, state: "configured", detail: pkg };
       }
       /** DSH 本体条目（外传判定：bin 可执行 + 已装版本）。 */
       dshEntry(binOk, installed, bin) {
@@ -17723,7 +17742,6 @@ var require_settings_view = __commonJS({
     "use strict";
     var fs2 = require("node:fs");
     var path2 = require("node:path");
-    var os2 = require("node:os");
     var { spawn } = require("node:child_process");
     var { execFile } = require("node:child_process");
     var ex2 = require_exec();
@@ -17826,54 +17844,24 @@ var require_settings_view = __commonJS({
           return { ok: false, error: e.message };
         }
       }
-      /** 守卫自更新「重启生效」衔接：仅当配置 guardRestartAllowed=true 且存在 systemd 用户单元才执行；
-       *  否则返回明确指引（避免误杀/误起守卫）。 */
-      /** 自更新后的守卫重启（A2）：能力按部署形态自动判定（打包态=systemd 重启闭环；源码形态=拒绝），
-       *  去掉 guardRestartAllowed 人工配置门槛。重启前落盘「预期版本」，重启后 /status 校验自报版本
-       *  达标才算更新成功——闭环可观测，不再出现"装了没生效"的静默失败。 */
-      guardSelfUpdateRestart() {
-        const dep = deploy.detect();
-        if (!dep.updatable) {
-          return { ok: false, error: dep.reason || "\u5F53\u524D\u90E8\u7F72\u5F62\u6001\u4E0D\u652F\u6301\u81EA\u52A8\u91CD\u542F", form: dep.form };
-        }
-        const unit = path2.join(os2.homedir(), ".config", "systemd", "user", "dsh-supervisor.service");
-        if (!fs2.existsSync(unit)) return { ok: false, error: "\u7CFB\u7EDF\u672A\u542F\u7528 systemd \u7528\u6237\u5355\u5143\uFF0C\u8BF7\u624B\u52A8\u91CD\u542F\u5B88\u536B" };
-        const swDir = path2.dirname(this.config.stateFile);
-        try {
-          fs2.writeFileSync(path2.join(swDir, "self-update-expected.json"), JSON.stringify({ expectedVersion: this._selfUpdateExpectedVersion || null, at: Date.now() }), { mode: 384 });
-        } catch {
-        }
-        if (this.events) this.events.append("guard_self_update_restart", { expectedVersion: this._selfUpdateExpectedVersion || null, via: "exit+systemd-restart" });
-        this.logger && this.logger.info && this.logger.info("[self-update] \u5B88\u536B\u5C06\u9000\u51FA\uFF0C\u7531 systemd Restart=always \u62C9\u8D77\u65B0\u5185\u6838");
-        setTimeout(() => {
-          const bail = setTimeout(() => process.exit(0), 8e3);
-          if (bail.unref) bail.unref();
-          Promise.resolve().then(() => this.shutdown()).catch((e) => {
-            this.logger && this.logger.warn && this.logger.warn("[self-update] shutdown \u5F02\u5E38: " + (e && e.message || e));
-          }).then(() => {
-            clearTimeout(bail);
-            process.exit(0);
-          });
-        }, 500).unref();
-        return { ok: true, restarted: true, via: "exit+systemd-restart" };
-      }
-      // ---- 守卫自更新（2026-09 收敛：npm 通道取代 manifest/目录翻转）----
+      // ---- 内核更新（单写入者契约：安装/重启归桌面壳）----
       //
-      // ⚠ 此处原有 `guardSelfUpdateDir()` —— 已于 2026-09-12 删除（P2 死代码）：
-      //   全仓**零调用点**，且它所依赖的 `config.selfUpdateDir` 也从未被任何发行流程赋值
-      //   （默认恒为 null）。保留它会造成「自更新仍走 manifest/目录翻转」的错误印象，
-      //   而真实机制是 npm 通道（`guardCorePkg()` + `runNpmInstall`）。
+      // ⚠ 2026-09-15（A 方案）：`guardSelfUpdateApply` 与 `guardSelfUpdateRestart` **已删除** ——
+      //   内核 npm 包的唯一写入者是桌面壳（见 RELEASE-AND-UPDATE-MECHANISM.md §6）；
+      //   守卫只保留只读的 `guardSelfUpdateStatus`，接口 `/self-update/apply|restart-guard` 返回 410。
+      //   （此前 2026-09-12 已删除零调用点的 `guardSelfUpdateDir()`。）
       /** 内核 npm 子包名（按当前平台/架构）。corePackageName 可为显式常量或含 {os}/{arch} 占位的模板。 */
       guardCorePkg() {
         const raw = this.config.corePackageName;
         if (!raw) return null;
         return String(raw).replace(/{os}/g, matrix.osTag()).replace(/{arch}/g, matrix.current().arch) || null;
       }
-      /** 守卫自更新（2026-09 收敛：npm 通道）——查 @dsh-sup/dsh-core-<os>-<arch> 全 tag 最高版本（全更新：
-       *  BETA/RC/正式都算更新，任一更高即提示可更新），对本机 guardVersion 比较。 */
+      /** 内核更新状态（**只读**；安装/重启归桌面壳，单写入者契约）。
+       *  查 @dsh-sup/dsh-core-<os>-<arch> 全 tag 最高版本（BETA/RC/正式都算更新），与本机 guardVersion 比较。
+       *  本方法**不写任何东西**：面板据此显示「可更新」，实际安装由桌面壳 kernel_update_apply 执行。 */
       async guardSelfUpdateStatus() {
         const pkg = this.guardCorePkg();
-        if (!pkg) return { ok: false, error: "\u672A\u914D\u7F6E\u5185\u6838\u81EA\u66F4\u65B0\u5305\uFF08corePackageName\uFF09" };
+        if (!pkg) return { ok: false, error: "\u672A\u914D\u7F6E\u5185\u6838\u5305\uFF08corePackageName\uFF09" };
         if (!this.dist || typeof this.dist.fetchLatestVersion !== "function") return { ok: false, error: "\u53D1\u5E03\u670D\u52A1\u672A\u521D\u59CB\u5316" };
         const dep = deploy.detect();
         if (!dep.updatable) {
@@ -17890,82 +17878,6 @@ var require_settings_view = __commonJS({
           return { ok: false, error: e.message };
         }
       }
-      /** 应用内核更新（npm 通道，全更新强制语义）：`npm i -g <pkg>@<latest>`。
-       *  安装后由调用方（壳/面板）据 restartRequired 调 /self-update/restart-guard（或手动重启）生效。 */
-      async guardSelfUpdateApply() {
-        const pkg = this.guardCorePkg();
-        if (!pkg) return { ok: false, error: "\u672A\u914D\u7F6E\u5185\u6838\u81EA\u66F4\u65B0\u5305\uFF08corePackageName\uFF09" };
-        if (!this.dist || typeof this.dist.runNpmInstall !== "function") return { ok: false, error: "\u53D1\u5E03\u670D\u52A1\u672A\u521D\u59CB\u5316" };
-        if (!this.config.installCommandTemplate || !Array.isArray(this.config.installCommandTemplate)) return { ok: false, error: "\u672A\u914D\u7F6E\u5B89\u88C5\u547D\u4EE4\u6A21\u677F\uFF08installCommandTemplate\uFF09" };
-        const latest = await this.guardSelfUpdateStatus();
-        if (!latest.ok || !latest.latest) return { ok: false, error: latest && latest.error || "\u7248\u672C\u67E5\u8BE2\u5931\u8D25" };
-        if (latest.updatable === false) return { ok: false, error: latest.error || "\u5F53\u524D\u90E8\u7F72\u5F62\u6001\u4E0D\u652F\u6301\u81EA\u66F4\u65B0", form: latest.form };
-        if (!latest.updateAvailable) return { ok: true, upToDate: true, version: this.guardVersion };
-        const target = latest.latest;
-        try {
-          const registry = "https://registry.npmjs.org";
-          const r = await this.dist.runNpmInstall({
-            pkg,
-            version: target,
-            commandTemplate: this.config.installCommandTemplate,
-            registry,
-            onLine: (l) => {
-              if (this.logger && this.logger.info) this.logger.info("[self-update] " + l);
-            }
-          });
-          if (r && r.ok) {
-            let diskVersion = null;
-            try {
-              diskVersion = deploy.detect().runningTarget ? this._readBinarySelfVersion() : null;
-            } catch {
-            }
-            const verified = diskVersion === target;
-            this._selfUpdateExpectedVersion = verified ? target : null;
-            const restartRequired = true;
-            if (this.events) {
-              this.events.append("guard_self_update_applied", { from: this.guardVersion, version: target, pkg, diskVersion, verified });
-            }
-            if (!verified) {
-              return {
-                ok: true,
-                from: this.guardVersion,
-                version: target,
-                diskVersion,
-                verified: false,
-                restartRequired,
-                warn: "\u5DF2\u5B89\u88C5\u4F46\u78C1\u76D8\u7248\u672C\u6821\u9A8C\u672A\u901A\u8FC7\uFF08\u88C5\u5230\u975E\u8FD0\u884C\u4F4D/\u955C\u50CF stale\uFF09\uFF0C\u8BF7\u68C0\u67E5\u90E8\u7F72\u5F62\u6001"
-              };
-            }
-            return { ok: true, from: this.guardVersion, version: target, diskVersion, verified: true, restartRequired };
-          }
-          return { ok: false, error: r && r.error || "npm \u5B89\u88C5\u5931\u8D25" };
-        } catch (e) {
-          return { ok: false, error: e.message };
-        }
-      }
-      /** 自更新「已安装待重启生效」判定（A3）：最近一次 apply 落盘的预期版本存在、
-       *  且进程运行版本仍低于它 → updatePending=true（面板显示重启提示；重启达标后自动清除）。 */
-      _selfUpdatePending() {
-        try {
-          const swDir = path2.dirname(this.config.stateFile);
-          const f = path2.join(swDir, "self-update-expected.json");
-          if (!fs2.existsSync(f)) return false;
-          const j = JSON.parse(fs2.readFileSync(f, "utf8"));
-          const expected = j && j.expectedVersion;
-          if (!expected) return false;
-          if (this.guardVersion === expected) {
-            try {
-              fs2.unlinkSync(f);
-            } catch {
-            }
-            if (this.events) this.events.append("guard_self_update_verified", { version: expected });
-            return false;
-          }
-          return semverCompare(expected, this.guardVersion) > 0;
-        } catch {
-          return false;
-        }
-      }
       /** 读磁盘上**运行位**的自报版本（A1 校验用）：spawn `--version`，解析 guardVersion= 行。
        *
        *  ⚠ 2026-09-12（P0 配套）：条件从 `form === 'sea-binary'` 放宽为「**可更新的标准形态**」
@@ -19642,7 +19554,6 @@ var require_supervisor = __commonJS({
         this.manualRestart = false;
         this._ticking = false;
         this.intents = new IntentLedger();
-        this._selfUpdateExpectedVersion = null;
         this._stopping = false;
         this._sessionState = "starting";
         this._crashHalted = false;
@@ -19952,10 +19863,20 @@ var require_supervisor = __commonJS({
           });
           server.listen(port, this.config.apiHost, () => {
             this.api = server;
-            if (port !== this.config.apiPort) {
+            const prev = this.config.apiPort;
+            if (port !== prev) {
+              try {
+                ports.release(prev, "system:supervisor-api");
+              } catch {
+              }
               this.config.apiPort = port;
               if (this.configPath) this.persistConfigPatch({ apiPort: port });
             }
+            try {
+              ports.register("supervisor-api", port);
+            } catch (e) {
+              this.logger.warn("ports.register(actual) \u5931\u8D25: " + e.message);
+            }
             this.events.append("api_listening", { host: this.config.apiHost, port });
             this.logger.info("api listening on " + this.config.apiHost + ":" + port);
           });
@@ -20210,8 +20131,6 @@ var require_supervisor = __commonJS({
           backoffUntil: this._mBackoffUntil(),
           lastFailure: this._mLastFailure(),
           lastRestartAt: this._mLastRestartAt(),
-          updatePending: this._selfUpdatePending(),
-          // A3：更新已安装待重启生效
           upgradeHold: this._upgradeHold,
           commandMissing: !!(this._mSpawnBlockedUntil() && Date.now() < this._mSpawnBlockedUntil()),
           dshTokenCaptured: !!(this.tokenService && this.tokenService.get("main")),
@@ -20459,6 +20378,10 @@ var require_supervisor = __commonJS({
           server.listen(this.config.apiPort, this.config.apiHost, () => {
             bind._tries = 0;
             this.api = server;
+            try {
+              ports.register("supervisor-api", this.config.apiPort);
+            } catch {
+            }
             this.events.append("api_listening", { host: this.config.apiHost, port: this.config.apiPort });
             this.logger.info("api listening on " + this.config.apiHost + ":" + this.config.apiPort);
           });
@@ -20839,7 +20762,8 @@ function findPackageRoot(start) {
   return path.join(__dirname, "..");
 }
 var ROOT = findPackageRoot(__dirname);
-var SUPERVISOR_DIR = path.join(os.homedir(), ".dsh", "supervisor");
+var stateRoot = require_state_root();
+var SUPERVISOR_DIR = stateRoot.supervisorDir();
 var USER_CONFIG = path.join(SUPERVISOR_DIR, "config.json");
 var DEFAULT_CONFIG = Object.assign(
   {},
@@ -20849,10 +20773,6 @@ var DEFAULT_CONFIG = Object.assign(
 var STATE_FILE = path.join(SUPERVISOR_DIR, "state.json");
 var EVENTS_FILE = path.join(SUPERVISOR_DIR, "events", "guard.events.log");
 var UNIT_PATH = path.join(os.homedir(), ".config", "systemd", "user", "dsh-supervisor.service");
-var UNIT_TEMPLATE = path.join(ROOT, "systemd", "dsh-supervisor.service");
-var DESKTOP_DIR = path.join(os.homedir(), ".local", "share", "applications");
-var ICON_DIR = path.join(os.homedir(), ".local", "share", "icons");
-var DESKTOP_TEMPLATE = path.join(ROOT, "desktop", "dsh-supervisor.desktop");
 var AUTOSTART_TEMPLATE = path.join(ROOT, "desktop", "dsh-supervisor-gui-autostart.desktop");
 var AUTOSTART_FILE = path.join(os.homedir(), ".config", "autostart", "dsh-supervisor-gui-autostart.desktop");
 var IS_WINDOWS = process.platform === "win32";
@@ -20985,6 +20905,8 @@ function releaseLock() {
   }
 }
 function cmdDaemon() {
+  const moved = stateRoot.migrateLegacy();
+  for (const m of moved) console.log("[migrate] \u72B6\u6001\u76EE\u5F55\u8FC1\u79FB: " + m);
   if (!acquireLock()) {
     console.error("[supervisor] \u5DF2\u6709\u5B88\u536B\u5B9E\u4F8B\u5728\u8FD0\u884C\uFF08\u9501 " + LOCK_FILE + "\uFF09\uFF0C\u672C\u8FDB\u7A0B\u9000\u51FA\u3002");
     process.exit(1);
@@ -21101,6 +21023,8 @@ function finishControl(r) {
   }
 }
 function cmdInstall() {
+  const moved = stateRoot.migrateLegacy();
+  for (const m of moved) console.log("[migrate] \u72B6\u6001\u76EE\u5F55\u8FC1\u79FB: " + m);
   fs.mkdirSync(SUPERVISOR_DIR, { recursive: true });
   if (!fs.existsSync(USER_CONFIG)) {
     fs.mkdirSync(SUPERVISOR_DIR, { recursive: true });
@@ -21123,50 +21047,8 @@ function cmdInstall() {
     fs.symlinkSync(path.join(ROOT, "bin", "dsh-supervisor"), BIN_PATH);
     console.log("[install] \u547D\u4EE4\u884C\u94FE\u63A5: " + BIN_PATH + " \u2192 " + __dirname + "/dsh-supervisor");
   }
-  if (!fs.existsSync(UNIT_TEMPLATE)) {
-    console.warn("[install] \u672A\u627E\u5230 systemd \u6A21\u677F\uFF08" + UNIT_TEMPLATE + "\uFF09\u2014\u2014npm \u5185\u6838\u5305\u5F62\u6001\uFF0C\u8DF3\u8FC7\u7CFB\u7EDF\u670D\u52A1\u90E8\u7F72\u3002");
-    console.warn("[install] \u5982\u9700 systemd \u5E38\u9A7B\uFF0C\u8BF7\u4ECE\u6E90\u7801\u4ED3\u5B89\u88C5\uFF08systemd/dsh-supervisor.service\uFF09\u6216\u624B\u52A8\u8FD0\u884C\uFF1Adsh-supervisor daemon");
-  } else {
-    let unit = fs.readFileSync(UNIT_TEMPLATE, "utf8");
-    unit = unit.replace("@BIN@", BIN_PATH);
-    const unitDir = path.dirname(UNIT_PATH);
-    fs.mkdirSync(unitDir, { recursive: true });
-    fs.writeFileSync(UNIT_PATH, unit);
-    console.log("[install] systemd unit: " + UNIT_PATH);
-    try {
-      execInherit("systemctl", ["--user", "daemon-reload"]);
-      execInherit("systemctl", ["--user", "enable", "dsh-supervisor.service"]);
-    } catch (e) {
-      console.warn("[install] systemctl \u6267\u884C\u5931\u8D25\uFF08\u53EF\u80FD\u4E0D\u5728 systemd \u4F1A\u8BDD\u4E2D\uFF09:", e.message);
-    }
-    try {
-      execInherit("loginctl", ["enable-linger", os.userInfo().username]);
-      console.log("[install] loginctl enable-linger \u5DF2\u542F\u7528");
-    } catch {
-      console.warn("[install] enable-linger \u5931\u8D25\uFF0C\u5F00\u673A\u81EA\u542F\u53EF\u80FD\u4E0D\u751F\u6548");
-    }
-    installDesktopEntry();
-    console.log("\n\u5B89\u88C5\u5B8C\u6210\u3002\u542F\u52A8\u5B88\u536B\uFF1A\n  systemctl --user start dsh-supervisor");
-    console.log("\u67E5\u770B\u72B6\u6001\uFF1A\n  dsh-supervisor status");
-  }
-}
-function installDesktopEntry() {
-  try {
-    if (!fs.existsSync(DESKTOP_TEMPLATE)) return;
-    fs.mkdirSync(ICON_DIR, { recursive: true });
-    const shellDir = process.env.DSH_SHELL_DIR || null;
-    const iconSrc = shellDir ? path.join(shellDir, "src-tauri", "icons", "128x128.png") : null;
-    const iconDst = path.join(ICON_DIR, "dsh-supervisor.png");
-    if (iconSrc && fs.existsSync(iconSrc)) fs.copyFileSync(iconSrc, iconDst);
-    else console.warn("[install] \u672A\u627E\u5230\u58F3\u56FE\u6807\uFF08\u53EF\u8BBE DSH_SHELL_DIR \u6307\u5411\u58F3 checkout\uFF09\uFF0C\u684C\u9762\u56FE\u6807\u7F3A\u5931\uFF1B\u4E0D\u5F71\u54CD\u529F\u80FD\u3002");
-    fs.mkdirSync(DESKTOP_DIR, { recursive: true });
-    const entry = fs.readFileSync(DESKTOP_TEMPLATE, "utf8").replace(/@HOME@/g, os.homedir());
-    const dst = path.join(DESKTOP_DIR, "dsh-supervisor.desktop");
-    fs.writeFileSync(dst, entry);
-    console.log("[install] \u684C\u9762\u83DC\u5355\u5165\u53E3: " + dst);
-  } catch (e) {
-    console.warn("[install] \u684C\u9762\u5165\u53E3\u90E8\u7F72\u5931\u8D25:", e.message);
-  }
+  console.log("[install] \u670D\u52A1\u5B9A\u4E49/\u5F00\u673A\u81EA\u542F/\u684C\u9762\u5165\u53E3\u7531\u684C\u9762\u58F3\u8D1F\u8D23\uFF08\u672C\u547D\u4EE4\u4E0D\u518D\u90E8\u7F72\uFF09\u3002");
+  console.log("[install] \u5185\u6838\u672C\u4F53\u5DF2\u5C31\u7EEA\u3002\u542F\u52A8\u7531\u684C\u9762\u58F3\u6216\u670D\u52A1\u7BA1\u7406\u5668\u53D1\u8D77\uFF1Adsh-supervisor daemon");
 }
 function cmdGuiAutostart(onoff) {
   if (onoff === "on") {
@@ -21276,20 +21158,16 @@ function cmdSelfUpdate(action) {
       if (s.ok) {
         console.log("\u5B88\u536B\u5F53\u524D\u7248\u672C: " + s.installed);
         console.log("\u6700\u65B0\u7248\u672C:     " + s.latest);
-        console.log(s.updateAvailable ? "\u2192 \u6709\u53EF\u7528\u66F4\u65B0\uFF01\u6267\u884C: dsh-supervisor self-update apply" : "\u5DF2\u662F\u6700\u65B0\u3002");
+        console.log(s.updateAvailable ? "\u2192 \u6709\u53EF\u7528\u66F4\u65B0\uFF1A\u8BF7\u5728\u684C\u9762\u58F3\u9762\u677F\u300C\u5173\u4E8E\u300D\u4E2D\u70B9\u300C\u66F4\u65B0\u300D" : "\u5DF2\u662F\u6700\u65B0\u3002");
       }
       return;
     }
     if (action === "apply") {
-      const r = await apiOne("POST", "/self-update/apply");
-      if (r.error) return console.log("\u5E94\u7528\u66F4\u65B0\u5931\u8D25: " + r.error);
-      if (r.ok) {
-        console.log("\u5DF2\u66F4\u65B0\u5230 v" + r.version + (r.restartRequired ? "\uFF0C\u9700\u8981\u91CD\u542F\u5B88\u536B\u751F\u6548" : "\uFF08\u65E0\u53D8\u5316\uFF09"));
-        console.log("\u91CD\u542F: systemctl --user restart dsh-supervisor");
-      }
-      return;
+      console.error("\u5185\u6838\u66F4\u65B0\u7531\u684C\u9762\u58F3\u6267\u884C\uFF08\u5355\u5199\u5165\u8005\u5951\u7EA6\uFF09\uFF1A\u8BF7\u5728\u684C\u9762\u58F3\u9762\u677F\u300C\u5173\u4E8E\u300D\u4E2D\u70B9\u300C\u66F4\u65B0\u300D\u3002");
+      console.error("\u672C\u547D\u4EE4\u4E0D\u518D\u5B89\u88C5\u5185\u6838\u3002");
+      process.exit(2);
     }
-    console.log("\u7528\u6CD5: dsh-supervisor self-update [check|apply]");
+    console.log("\u7528\u6CD5: dsh-supervisor self-update [check]");
   })();
 }
 function cmdUpgrade(requested) {