@gehennawu/dsh-service 0.15.0 → 0.17.1

package/README.en.md

@@ -14,19 +14,22 @@ The Settings panel "Service Control" page has six top-level tabs: **Overview, No
 
 - Displays current DSH and plugin versions with links to GitHub Releases
 - Automatically checks npm registry for stable and preview releases; when a new version exists, the right-side status text (chevron + `New version`) is clickable to expand/collapse, showing the current/latest versions and both dist-tag versions inline, each with npmjs and npmmirror links (npmjs.com is blocked on some networks; npmmirror serves as the mirror entry)
-- One-click plugin upgrade with automatic restart after completion
+- One-click plugin upgrade with automatic restart after completion; when no process manager is detected (for example, a manual launch from a Windows terminal), the upgrade first confirms the consequences, then keeps the process running and shows manual-restart instructions
 
 ### Safe restart
 
 - Detects active agents, background jobs, and terminals before restart; lists them and requires explicit confirmation
 - `/restart` command also available in conversations; automatically refuses when active work is detected
 - Automatically probes for the new process after restart and reloads the page; manual reload available after 60 seconds
+- When a manual terminal launch is suspected, the restart confirmation flow warns that nothing will bring the process back, and Health diagnostics marks it with a yellow inline caution
 - Optional `Restart` entry at the bottom of the settings left navigation, enabled by a switch in the Restart tab (off by default), sharing the exact same confirmation flow as the Restart tab
 
 ### Health diagnostics
 
 - Shows uptime, memory, session count, active agents, and background jobs
-- Full diagnostics check session storage, workspace registry, backup storage, tar availability, and file permissions
+- The "Process and runtime" card shows platform, architecture, and Node version
+- Full diagnostics check session storage, workspace registry, backup storage, tar availability, file permissions, runtime environment, and Node runtime version; a manual launch is marked with a yellow inline caution (no restart assurance) that does not trigger the health alert banner, the service-control reminder, or the tab ⚠; an unrecognized environment and an empty backup list are informational only — all can be declared explicitly via `DSH_SERVICE_RUNTIME_ENV`
+- Having no backups is an informational note, not a warning, and does not light the Health tab ⚠
 - File-permission deep scan and repair: checks whether the Agent can read/write DSH_HOME and workspaces; repair requires two-step confirmation
 
 ### Model statistics
@@ -90,6 +93,8 @@ dsh plugin --profile web add link:/path/to/dsh-service
 
 The plugin only sends an exit signal; it does not start the process again. Without a process manager, selecting restart stops DSH Web.
 
+The plugin passively detects whether a process manager is present (environment variables, `/.dockerenv`, `/proc/1/cgroup`, terminal TTY): with Docker/systemd/pm2/supervisord/Kubernetes detected it restarts as usual; when nothing is detected and stdin/stdout are an interactive terminal, it treats the environment as a likely manual launch, flags it in Health diagnostics with a yellow caution, and switches one-click upgrade to keep the process running with manual-restart instructions. Heuristics cannot cover redirected output or wrappers like NSSM/WinSW; set `DSH_SERVICE_RUNTIME_ENV=managed|manual` to declare it explicitly.
+
 ### Docker Compose
 
 ```yaml
@@ -122,6 +127,8 @@ pm2 start "dsh web --host 127.0.0.1" --name dsh-web
 | macOS / Windows + pm2 or similar | Not blocked by the code | Managed externally | Not tested |
 | Direct `dsh web` execution | Supported | Not supported | Expected behavior |
 
+When launched directly from a terminal (PowerShell/CMD/bash), the panel labels the environment as a likely manual launch and the one-click upgrade no longer exits the process automatically.
+
 Requirements: Node.js `>=22`, and a DSH Web installation capable of loading both Host and Client plugin halves. Update checks require access to `registry.npmjs.org`; network failures do not affect other features.
 
 ## Security design

package/README.md

@@ -14,19 +14,22 @@
 
 - 显示当前 DSH 和插件版本，版本号链接到 GitHub Releases
 - 自动检查 npm registry 的正式版和预览版；有新版本时右侧「小三角 + 有新版本」状态文本可点击展开/收起，行内展示当前/最新版本与正式版/预览版双 tag，版本号分别带 npmjs 与 npmmirror 链接（部分网络会被 npmjs.com 拦截，npmmirror 作为镜像入口）
-- 一键升级插件，升级后自动重启
+- 一键升级插件，升级后自动重启；未检测到进程管理器（如在 Windows 终端手动启动）时，升级前先确认后果，安装完成后保持运行并提示手动重启
 
 ### 安全重启
 
 - 重启前检测活跃 Agent、后台任务和终端，展示清单并要求显式确认
 - 对话中输入 `/restart` 也可触发，检测到运行中工作时自动拒绝
 - 重启后自动探测新进程并刷新页面，60 秒未恢复时提供手动刷新
+- 疑似终端手动启动时，重启确认流程会提示「退出后不会自动拉起」，健康诊断中以黄色行内警示标注
 - 可在「重启」标签开启「设置页左列显示入口」开关（默认关闭），开启后在设置页左侧标签列底部显示「重启」快捷入口，与「重启」标签共用同一套确认流程
 
 ### 健康诊断
 
 - 显示运行时间、内存、会话数、活跃 Agent 和后台任务
-- 完整诊断检查会话存储、工作区注册表、备份目录、tar 可用性和文件权限
+- 「进程与运行环境」卡显示平台、架构和 Node 版本
+- 完整诊断检查会话存储、工作区注册表、备份目录、tar 可用性、文件权限、运行环境和 Node 运行时版本；手动启动环境以黄色行内警示标注重启无保障（不触发健康提醒横幅、服务控制提醒和标签 ⚠），未识别环境与空备份为信息级提示（不算警告），均可通过 `DSH_SERVICE_RUNTIME_ENV` 显式声明
+- 没有备份属于信息级提示，不算警告，也不点亮健康诊断标签的 ⚠
 - 文件权限深检与修复：检查 Agent 是否能读写 DSH_HOME 和工作区，修复需两段式确认
 
 ### 模型统计
@@ -90,6 +93,8 @@ dsh plugin --profile web add link:/path/to/dsh-service
 
 插件只发送退出信号，不负责重新启动进程。没有进程管理器时，点击重启会直接停止 DSH Web。
 
+插件会用被动信号（环境变量、`/.dockerenv`、`/proc/1/cgroup`、终端 TTY）判断当前是否由进程管理器拉起：检测到 Docker/systemd/pm2/supervisord/Kubernetes 时照常自动重启；都没有且 stdin/stdout 是交互终端时视为「疑似手动启动」，健康诊断会以黄色警示标注，一键升级改为「不自动退出 + 提示手动重启」。启发式无法覆盖输出重定向、NSSM/WinSW 等场景，可用环境变量 `DSH_SERVICE_RUNTIME_ENV=managed|manual` 显式声明。
+
 ### Docker Compose
 
 ```yaml
@@ -122,6 +127,8 @@ pm2 start "dsh web --host 127.0.0.1" --name dsh-web
 | macOS / Windows + pm2 等 | 代码未限制 | 由进程管理器负责 | 未验证 |
 | 直接运行 `dsh web` | 支持 | 不支持 | 预期行为 |
 
+直接在终端运行（PowerShell/CMD/bash）时，面板会标注「疑似终端手动启动」，一键升级不再自动退出进程。
+
 运行要求：Node.js `>=22`，DSH Web 能加载 Host 和 Client 两半插件。检查更新需要访问 `registry.npmjs.org`；网络失败不影响其他功能。
 
 ## 安全设计

package/client.js

@@ -20,6 +20,8 @@ window.__ModuleLoader__.load({
       'health.title': '运行状况',
       'health.uptime': '运行时间',
       'health.rss': '内存 RSS',
+      'health.platform': '平台',
+      'health.nodeVersion': 'Node 版本',
       'health.liveSessions': '存活会话',
       'health.persistedSessions': '持久化会话',
       'health.activeAgents': '活跃 Agent',
@@ -43,6 +45,14 @@ window.__ModuleLoader__.load({
       'health.check.backup-storage': '备份存储',
       'health.check.tar': 'tar',
       'health.check.permissions': '文件权限',
+      'health.check.runtime-env': '运行环境',
+      'health.check.node-version': 'Node 运行时',
+      'health.detail.runtime-env.managed': '由{kind}管理，重启后会自动拉起',
+      'health.detail.runtime-env.declared': '已通过 DSH_SERVICE_RUNTIME_ENV 声明由外部进程管理器管理',
+      'health.detail.runtime-env.manual': '疑似终端手动启动，重启后不会自动拉起；一键升级已改为不自动退出',
+      'health.detail.runtime-env.unknown': '未检测到进程管理器，无法确认重启后是否自动拉起；如实际有，可设置 DSH_SERVICE_RUNTIME_ENV=managed 声明',
+      'health.detail.node-version.ok': '{version}，满足 ≥{required} 要求',
+      'health.detail.node-version.warning': '{version} 低于插件要求的 {required}.x，建议升级 Node',
       'health.detail.session-storage.ok': '可用，共 {count} 个会话快照',
       'health.detail.workspace-registry.ok': '可用，共 {count} 个工作区',
       'health.detail.dsh-home.ok': '目录可访问，权限模式 {mode}',
@@ -56,7 +66,7 @@ window.__ModuleLoader__.load({
       'tabs.notify': '通知',
       'tabs.health': '健康诊断',
       'tabs.usage': '模型统计',
-      'overview.container': '容器信息',
+      'overview.container': '进程与运行环境',
       'overview.errors': '报错信息',
       'tabs.backup': '备份维护',
       'tabs.restart': '重启',
@@ -141,6 +151,18 @@ window.__ModuleLoader__.load({
       'update.failAddingToRoot': 'pnpm 拒绝在 workspace 根目录安装（缺少 -w）',
       'update.failNotWorkspace': 'profile 不是 pnpm workspace 却传入了 -w',
       'update.failIgnoredBuilds': '依赖构建脚本被 pnpm 默认拦截，无法完成升级',
+      'env.kind.docker': 'Docker 容器',
+      'env.kind.container': '容器（containerd/Kubernetes）',
+      'env.kind.systemd': 'systemd 服务',
+      'env.kind.pm2': 'pm2',
+      'env.kind.supervisord': 'supervisord',
+      'env.kind.kubernetes': 'Kubernetes',
+      'env.kind.declared': '外部进程管理器（手动指定）',
+      'update.manualConfirmTitle': '升级前请确认：当前疑似手动启动环境',
+      'update.manualConfirm': '未检测到 Docker/systemd/pm2 等进程管理器。升级完成后 DSH 不会自动重启——新版本写入磁盘，但当前进程继续运行旧版本；你需要手动关闭并重新运行 dsh 才能启用新版本。',
+      'update.manualProceed': '仍要升级',
+      'update.manualRestartTitle': '升级完成，需要手动重启',
+      'update.manualRestartBody': '新版本已安装，但当前进程仍在运行旧版本。请在运行 dsh 的终端窗口按 Ctrl+C（或直接关闭窗口），然后重新启动 dsh。',
       'restart.title': '服务重启',
       'restart.description': '重启 dsh web 进程。运行中的工作会中断，持久化会话可恢复。也可在对话中输入 /restart。',
       'restart.button': '重启 dsh web',
@@ -151,6 +173,8 @@ window.__ModuleLoader__.load({
       'restart.sent': '重启指令已发出。',
       'restart.sentHint': '页面连接即将断开，服务恢复后将自动刷新。',
       'restart.idleHint': '当前没有检测到运行中的工作。确认后将断开连接，等待服务自动重启。',
+      'restart.manualWarn': '当前疑似终端手动启动环境：确认后进程将退出且不会自动拉起，需要你手动重新运行 dsh。',
+      'restart.sentManualHint': '当前为手动启动环境，服务不会自动拉起。请在原终端重新运行 dsh；服务起来后刷新此页面即可恢复。',
       'restart.navToggle': '设置页左列显示「重启」入口',
       'restart.navToggleHint': '默认关闭；开启后在设置页左侧标签列底部显示快捷重启入口',
       'activity.agent': 'Agent',
@@ -228,6 +252,8 @@ window.__ModuleLoader__.load({
       'health.title': 'Health',
       'health.uptime': 'Uptime',
       'health.rss': 'Memory RSS',
+      'health.platform': 'Platform',
+      'health.nodeVersion': 'Node version',
       'health.liveSessions': 'Live sessions',
       'health.persistedSessions': 'Persisted sessions',
       'health.activeAgents': 'Active agents',
@@ -251,6 +277,14 @@ window.__ModuleLoader__.load({
       'health.check.backup-storage': 'Backup storage',
       'health.check.tar': 'tar',
       'health.check.permissions': 'File permissions',
+      'health.check.runtime-env': 'Runtime environment',
+      'health.check.node-version': 'Node runtime',
+      'health.detail.runtime-env.managed': 'Managed by {kind}; the process restarts automatically after exit',
+      'health.detail.runtime-env.declared': 'Declared externally managed via DSH_SERVICE_RUNTIME_ENV',
+      'health.detail.runtime-env.manual': 'Likely a manual terminal launch — nothing restarts the process after exit; one-click upgrade already keeps it running',
+      'health.detail.runtime-env.unknown': 'No process manager detected, so automatic restart cannot be confirmed; set DSH_SERVICE_RUNTIME_ENV=managed if one exists',
+      'health.detail.node-version.ok': '{version}, meets the >={required} requirement',
+      'health.detail.node-version.warning': '{version} is below the required {required}.x; upgrading Node is recommended',
       'health.detail.session-storage.ok': 'Available, with {count} session snapshots',
       'health.detail.workspace-registry.ok': 'Available, with {count} workspaces',
       'health.detail.dsh-home.ok': 'Directory is accessible with mode {mode}',
@@ -264,7 +298,7 @@ window.__ModuleLoader__.load({
       'tabs.notify': 'Notifications',
       'tabs.health': 'Health',
       'tabs.usage': 'Models',
-      'overview.container': 'Container info',
+      'overview.container': 'Process and runtime',
       'overview.errors': 'Errors',
       'tabs.backup': 'Backup',
       'tabs.restart': 'Restart',
@@ -349,6 +383,18 @@ window.__ModuleLoader__.load({
       'update.failAddingToRoot': 'pnpm refused to add at the workspace root (missing -w)',
       'update.failNotWorkspace': '-w was passed but the profile is not a pnpm workspace',
       'update.failIgnoredBuilds': 'Dependency build scripts are blocked by pnpm by default, so the upgrade could not finish',
+      'env.kind.docker': 'Docker container',
+      'env.kind.container': 'Container (containerd/Kubernetes)',
+      'env.kind.systemd': 'systemd service',
+      'env.kind.pm2': 'pm2',
+      'env.kind.supervisord': 'supervisord',
+      'env.kind.kubernetes': 'Kubernetes',
+      'env.kind.declared': 'External process manager (declared manually)',
+      'update.manualConfirmTitle': 'Confirm before upgrading: manual launch suspected',
+      'update.manualConfirm': 'No process manager such as Docker/systemd/pm2 was detected. After the upgrade DSH will NOT restart automatically — the new version is written to disk while the current process keeps running the old one; close and rerun dsh manually to activate it.',
+      'update.manualProceed': 'Upgrade anyway',
+      'update.manualRestartTitle': 'Upgrade finished — manual restart required',
+      'update.manualRestartBody': 'The new version is installed, but the current process still runs the old one. Press Ctrl+C in the terminal running dsh (or simply close the window), then start dsh again.',
       'restart.title': 'Service restart',
       'restart.description': 'Restart the dsh web process. Active work will be interrupted; persisted sessions can be resumed. You can also type /restart in a conversation.',
       'restart.button': 'Restart dsh web',
@@ -359,6 +405,8 @@ window.__ModuleLoader__.load({
       'restart.sent': 'Restart request sent.',
       'restart.sentHint': 'The connection will close shortly. The page will reload automatically after recovery.',
       'restart.idleHint': 'No active work was detected. Confirm to disconnect and wait for the service to restart.',
+      'restart.manualWarn': 'This looks like a manual terminal launch: once confirmed the process exits and nothing restarts it — you must run dsh again yourself.',
+      'restart.sentManualHint': 'This is a manual-launch environment, so the service will not come back on its own. Run dsh again in the original terminal; refresh this page once the service is up.',
       'restart.navToggle': 'Show "Restart" entry in settings left nav',
       'restart.navToggleHint': 'Off by default; when enabled, a quick-restart entry appears at the bottom of the settings left navigation',
       'activity.agent': 'Agent',
@@ -607,6 +655,53 @@ window.__ModuleLoader__.load({
         }, [])
         return snapshot
       }
+
+      // 运行环境（version RPC 随 instanceId 返回）：概览展示、升级前置确认与重启警告共用。
+      // null = 宿主未返回该字段（旧版本）或尚未拉取，一切行为静默退回现状。
+      const runtimeEnvListeners = new Set()
+      let runtimeEnvState = null
+      const setRuntimeEnvState = (next) => {
+        runtimeEnvState = next
+        for (const listener of runtimeEnvListeners) listener(next)
+      }
+      const useRuntimeEnv = () => {
+        const [snapshot, setSnapshot] = useState(runtimeEnvState)
+        useEffect(() => {
+          runtimeEnvListeners.add(setSnapshot)
+          setSnapshot(runtimeEnvState)
+          return () => runtimeEnvListeners.delete(setSnapshot)
+        }, [])
+        return snapshot
+      }
+      // 宿主字段按形状校验后才入库：manualStartLikely 必须 boolean、supervisorKind 缺省或 string，
+      // 形状不对按「旧宿主无该字段」降级，绝不让坏值悄悄关掉确认门。
+      const applyVersionRuntimeEnv = (value) => {
+        const env = value ? value.runtimeEnv : undefined
+        if (env === null || typeof env !== 'object') return
+        if (typeof env.manualStartLikely !== 'boolean') return
+        if (env.supervisorKind !== undefined && env.supervisorKind !== null && typeof env.supervisorKind !== 'string') return
+        setRuntimeEnvState({ platform: typeof env.platform === 'string' ? env.platform : '', supervisorKind: env.supervisorKind === undefined || env.supervisorKind === null ? null : env.supervisorKind, manualStartLikely: env.manualStartLikely })
+      }
+      // version 快照全插件只取一次：ServicePanel 与左列入口无论谁先挂载都共享同一请求，
+      // 升级前取 instanceId/运行环境也复用它。失败清缓存，下一个消费者重试。
+      let versionSnapshotPromise = null
+      const fetchVersionSnapshot = () => {
+        if (versionSnapshotPromise === null) {
+          versionSnapshotPromise = ctx.connection.rpc.call('/dsh-service', 'version', {})
+            .then((res) => {
+              if (res && res.ok) applyVersionRuntimeEnv(res.value)
+              return res
+            })
+            .catch(() => {
+              versionSnapshotPromise = null
+              return null
+            })
+        }
+        return versionSnapshotPromise
+      }
+      // 升级执行中标志放在 factory 作用域：闭包状态挡不住同一 tick 的重入，跨渲染的新闭包
+      // 也各自持有独立的 false，只有插件级可变标志能同时覆盖两种情况。
+      let upgradeInFlight = false
       const checkRestart = async () => {
         setRestartFlow({ ...restartFlow, busy: true, error: null })
         try {
@@ -692,6 +787,7 @@ window.__ModuleLoader__.load({
         recoveryGeneration += 1
         recoveryListeners.clear()
         restartFlowListeners.clear()
+        runtimeEnvListeners.clear()
         updateListeners.clear()
       }, 'dsh-service recovery')
 
@@ -797,6 +893,11 @@ window.__ModuleLoader__.load({
       function RestartSection({ showNavToggle }) {
         const translate = useTranslation()
         const flow = useRestartFlow()
+        const runtimeEnv = useRuntimeEnv()
+        // 左列专属入口可能先于「服务控制」面板挂载：走共享 version 快照（与面板同一次请求）。
+        useEffect(() => {
+          fetchVersionSnapshot()
+        }, [])
         const [navEnabled, setNavEnabled] = useRestartNavEnabled()
         const btn = { minHeight: '32px', padding: '6px 14px', borderRadius: '7px', border: '1px solid transparent', cursor: 'pointer', fontSize: '13px', fontWeight: 550, transition: 'border-color 120ms ease, color 120ms ease, background 120ms ease', lineHeight: '20px' }
         const danger = { ...btn, background: 'var(--dsw-alias-state-error-primary)', color: '#fff', borderColor: 'var(--dsw-alias-state-error-primary)' }
@@ -807,12 +908,12 @@ window.__ModuleLoader__.load({
         const displaySurface = { background: 'var(--dsh-svc-surface-bg)', color: 'var(--dsw-alias-label-primary)', border: '1px solid var(--dsw-alias-border-l1)', borderRadius: '8px', padding: '10px' }
         const sectionTitle = { fontSize: '14px', fontWeight: 700, margin: '0 0 8px', color: 'var(--dsw-alias-label-primary)' }
 
-        // 重启后提示
+        // 重启后提示：手动启动环境不会自动拉起，等待文案换成手动指引。
         if (flow.stage === 2) {
           return React.createElement('div', { 'data-testid': 'restart-card', style: card },
             React.createElement('div', { style: sectionTitle }, translate('restart.title')),
             React.createElement('p', { style: { margin: 0, fontSize: '13px' } }, translate('restart.sent')),
-            React.createElement('p', { style: hint }, translate('restart.sentHint')))
+            React.createElement('p', { style: hint }, translate(runtimeEnv !== null && runtimeEnv.manualStartLikely === true ? 'restart.sentManualHint' : 'restart.sentHint')))
         }
 
         const activityLabels = {
@@ -821,6 +922,10 @@ window.__ModuleLoader__.load({
           terminal: translate('activity.terminal'),
         }
         const activityItems = flow.activity && Array.isArray(flow.activity.items) ? flow.activity.items : []
+        // 疑似终端手动启动：确认前就把「退出后无人拉起」讲清楚，两段式确认的后果清单。
+        const manualWarn = runtimeEnv !== null && runtimeEnv.manualStartLikely === true
+          ? React.createElement('p', { 'data-testid': 'restart-manual-warn', style: Object.assign({}, hint, { color: 'var(--dsw-alias-state-warn-primary)', margin: '6px 0 0' }) }, translate('restart.manualWarn'))
+          : null
         const activityWarning = flow.stage === 3
           ? React.createElement('div', { style: { marginTop: '12px', padding: '10px 12px', borderRadius: '6px', background: 'rgba(211,51,51,0.1)', border: '1px solid rgba(211,51,51,0.35)' } },
               React.createElement('p', { style: { margin: '0 0 8px', color: 'var(--dsw-alias-state-error-primary)', fontSize: '13px', fontWeight: 600 } },
@@ -840,6 +945,7 @@ window.__ModuleLoader__.load({
           React.createElement('div', { style: sectionTitle }, translate('restart.title')),
           React.createElement('div', { 'data-testid': 'restart-region', style: displaySurface },
             React.createElement('p', { style: { margin: 0, fontSize: '13px' } }, translate('restart.description')),
+            manualWarn,
             activityWarning,
             React.createElement('div', { style: row },
               flow.stage === 0
@@ -906,6 +1012,9 @@ window.__ModuleLoader__.load({
         const [usageError, setUsageError] = useState(null)
         const [upgradeBusy, setUpgradeBusy] = useState(false)
         const [upgradeError, setUpgradeError] = useState(null)
+        // 疑似手动启动环境的升级两段式：确认后果 → 仍要升级；成功后不自动退出，改示指引。
+        const [upgradeManualConfirm, setUpgradeManualConfirm] = useState(false)
+        const [upgradeManualPending, setUpgradeManualPending] = useState(false)
         const [hoveredUsageSegment, setHoveredUsageSegment] = useState(null)
         const [usageProject, setUsageProject] = useState('all')
         const [modelErrorsOpen, setModelErrorsOpen] = useState(false)
@@ -916,16 +1025,18 @@ window.__ModuleLoader__.load({
         const [channelOpen, setChannelOpen] = useState(false)
         // 重启流程状态来自共享流（与设置页左列底部的专属入口同源）
         const restartFlowState = useRestartFlow()
+        const runtimeEnv = useRuntimeEnv()
         const usageRequestPayload = { timezoneOffsetMinutes: new Date().getTimezoneOffset() }
 
         // 进入面板时拉取当前版本和健康快照；健康数据每 5 秒刷新，卸载即停止。
+        // version 走全插件共享的缓存快照：无论哪个挂载点先到，都只有一次请求。
         useEffect(() => {
-          ctx.connection.rpc.call('/dsh-service', 'version', {}).then((res) => {
+          fetchVersionSnapshot().then((res) => {
             if (res && res.ok) {
               setVersion(res.value.current)
               setPluginVersion(res.value.pluginVersion || null)
             }
-          }).catch(() => {})
+          })
         }, [])
         useEffect(() => {
           let active = true
@@ -1173,10 +1284,25 @@ window.__ModuleLoader__.load({
           'ignored-builds': 'update.failIgnoredBuilds',
         }
         const upgradePlugin = async () => {
-          setUpgradeBusy(true)
-          setUpgradeError(null)
+          if (upgradeInFlight) return
+          upgradeInFlight = true
           try {
-            const versionRes = await ctx.connection.rpc.call('/dsh-service', 'version', {})
+            // check-update 先于 version 返回时按钮可能先出现：env 未知就等共享快照落地再判。
+            let env = runtimeEnv
+            if (env === null) {
+              await fetchVersionSnapshot()
+              env = runtimeEnvState
+            }
+            // 疑似终端手动启动：升级成功不会自动重启，先两段式确认后果再动手（安全教义）。
+            if (!upgradeManualConfirm && env !== null && env.manualStartLikely === true) {
+              setUpgradeError(null)
+              setUpgradeManualConfirm(true)
+              return
+            }
+            setUpgradeManualConfirm(false)
+            setUpgradeBusy(true)
+            setUpgradeError(null)
+            const versionRes = await fetchVersionSnapshot()
             const previousInstanceId = versionRes && versionRes.ok ? versionRes.value.instanceId : undefined
             const res = await ctx.connection.rpc.call('/dsh-service', 'upgrade', {})
             if (!res || res.ok === false) {
@@ -1190,6 +1316,11 @@ window.__ModuleLoader__.load({
               }
               return
             }
+            if (res.value && res.value.requiresManualRestart === true) {
+              // 宿主保持运行（没有 exit，就不会有新实例）：不启动恢复轮询，改示手动重启指引。
+              setUpgradeManualPending(true)
+              return
+            }
             if (typeof previousInstanceId === 'string' && previousInstanceId.length > 0) {
               startRecovery(previousInstanceId).catch(() => {})
             }
@@ -1198,6 +1329,7 @@ window.__ModuleLoader__.load({
             console.error('dsh-service: upgrade failed', detail || err)
             setUpgradeError(detail ? translate('update.upgradeErrorDetail', { detail }) : translate('update.upgradeError'))
           } finally {
+            upgradeInFlight = false
             setUpgradeBusy(false)
           }
         }
@@ -1338,6 +1470,17 @@ window.__ModuleLoader__.load({
           }
           if (check.id === 'tar' && check.status === 'ok') return translate('health.detail.tar.ok')
           if (check.id === 'permissions') return translate(check.status === 'ok' ? 'health.detail.permissions.ok' : 'health.detail.permissions.warning', { count: detail || '0' })
+          if (check.id === 'runtime-env') {
+            if (detail === 'manual') return translate('health.detail.runtime-env.manual')
+            if (detail === 'declared') return translate('health.detail.runtime-env.declared')
+            if (detail === 'unknown') return translate('health.detail.runtime-env.unknown')
+            // 已识别的管理器 kind：复用概览运行环境的标签词典。
+            return translate('health.detail.runtime-env.managed', { kind: translate(`env.kind.${detail}`) })
+          }
+          if (check.id === 'node-version') {
+            const [version = '', required = ''] = detail.split(':')
+            return translate(check.status === 'ok' ? 'health.detail.node-version.ok' : 'health.detail.node-version.warning', { version, required })
+          }
           return translate('health.detail.generic', { status: translate(`health.status.${check.status}`) })
         }
         const summaryItems = (totals) => [
@@ -1440,10 +1583,17 @@ window.__ModuleLoader__.load({
             : React.createElement('p', { style: hint }, usageError || translate('usage.empty')),
           React.createElement('div', { style: row }, React.createElement('button', { style: neutral, 'data-variant': 'neutral', onClick: refreshUsage, disabled: usageBusy }, translate(usageBusy ? 'usage.refreshing' : 'usage.refresh'))))
 
+        // 平台标签：process.platform 映射为常见系统名，arch 跟在后面（均为专有名词，不走词典）。
+        const platformNames = { win32: 'Windows', darwin: 'macOS', linux: 'Linux', freebsd: 'FreeBSD', openbsd: 'OpenBSD' }
+        const platformLabel = (health && typeof health.platform === 'string' && health.platform)
+          ? `${platformNames[health.platform] || health.platform}${typeof health.arch === 'string' && health.arch ? ` · ${health.arch}` : ''}`
+          : '—'
         const containerInfoBlock = React.createElement('div', { key: 'container-info', style: { marginTop: '18px' } },
           React.createElement('div', { style: sectionTitle }, translate('overview.container')),
           health
             ? React.createElement('div', { 'data-testid': 'health-display', style: Object.assign({}, displaySurface, { display: 'grid', gridTemplateColumns: 'repeat(2, minmax(0, 1fr))', gap: '8px' }) },
+                metric('health.platform', platformLabel),
+                metric('health.nodeVersion', typeof health.nodeVersion === 'string' && health.nodeVersion ? health.nodeVersion : '—'),
                 metric('health.uptime', formatUptime(health.uptimeSeconds)),
                 metric('health.rss', formatBytes(health.rssBytes)),
                 metric('health.liveSessions', String(health.liveSessions)),
@@ -1473,7 +1623,7 @@ window.__ModuleLoader__.load({
             ? React.createElement('div', { 'data-testid': 'health-check-list', style: Object.assign({}, displaySurface, { marginTop: '10px', padding: '8px 10px' }) },
                 diagnostics.checks.map((check, index) => React.createElement('div', { key: check.id, style: { display: 'flex', justifyContent: 'space-between', gap: '14px', fontSize: '12px', padding: '9px 2px', borderTop: index === 0 ? 0 : '1px solid var(--dsw-alias-border-l1)' } },
                   React.createElement('span', null, translate(`health.check.${check.id}`)),
-                  React.createElement('span', { style: { color: check.status === 'ok' ? 'var(--dsw-alias-state-success-primary)' : check.status === 'warning' ? 'var(--dsw-alias-state-warn-primary)' : 'var(--dsw-alias-state-error-primary)', textAlign: 'right' } }, diagnosticDetail(check)))))
+                  React.createElement('span', { style: { color: check.status === 'ok' ? 'var(--dsw-alias-state-success-primary)' : check.status === 'warning' ? 'var(--dsw-alias-state-warn-primary)' : check.status === 'info' ? 'var(--dsw-alias-brand-primary)' : 'var(--dsw-alias-state-error-primary)', textAlign: 'right' } }, diagnosticDetail(check)))))
             : null)
 
         const permissionAbnormal = permissions && permissions.supported === true
@@ -1602,9 +1752,11 @@ window.__ModuleLoader__.load({
         const dshUpdate = updateInfo?.dsh
         const dshExpandable = dshUpdate && dshUpdate.status !== 'unpublished' && dshUpdate.status !== 'unavailable' && !dshUpdate.upToDate
         const pluginUpdate = updateInfo?.plugin && !updateInfo.plugin.upToDate && updateInfo.plugin.status === 'available'
-        const pluginAction = pluginUpdate
+        // 确认后果或已装好待手动重启期间收起升级按钮，避免重复触发或撞 no-newer-version 守卫。
+        const pluginAction = pluginUpdate && !upgradeManualConfirm && !upgradeManualPending
           ? React.createElement('button', { style: Object.assign({}, neutral, { minHeight: '24px', padding: '2px 8px', fontSize: '11px' }), disabled: upgradeBusy, onClick: upgradePlugin }, translate(upgradeBusy ? 'update.upgrading' : 'update.upgrade'))
           : null
+        // 版本卡只放版本与升级：运行环境信息在健康诊断检查项与重启确认提示中呈现（用户复核口径）。
         const versionBlock = React.createElement('div', { key: 'version-card', 'data-testid': 'version-card', style: card },
           React.createElement('div', { key: 'title', style: sectionTitle }, translate('version.title')),
           React.createElement('div', { style: displaySurface },
@@ -1616,6 +1768,19 @@ window.__ModuleLoader__.load({
                   React.createElement('div', null, translate('update.details.latest', { version: dshUpdate?.latest || '—' })),
                   channelLines(translate, dshUpdate?.tags))
               : null,
+            upgradeManualConfirm
+              ? React.createElement('div', { 'data-testid': 'upgrade-manual-confirm', style: { marginTop: '10px', padding: '10px 12px', borderRadius: '6px', background: 'rgba(211,51,51,0.08)', border: '1px solid rgba(211,51,51,0.3)' } },
+                  React.createElement('p', { style: { margin: '0 0 6px', color: 'var(--dsw-alias-state-error-primary)', fontSize: '13px', fontWeight: 600 } }, translate('update.manualConfirmTitle')),
+                  React.createElement('p', { style: Object.assign({}, hint, { margin: '0 0 8px' }) }, translate('update.manualConfirm')),
+                  React.createElement('div', { style: row },
+                    React.createElement('button', { style: dangerGhost, 'data-variant': 'danger', disabled: upgradeBusy, onClick: upgradePlugin }, translate(upgradeBusy ? 'update.upgrading' : 'update.manualProceed')),
+                    React.createElement('button', { style: ghost, disabled: upgradeBusy, onClick: () => setUpgradeManualConfirm(false) }, translate('restart.cancel'))))
+              : null,
+            upgradeManualPending
+              ? React.createElement('div', { 'data-testid': 'upgrade-manual-pending', style: { marginTop: '10px', padding: '10px 12px', borderRadius: '6px', border: '1px solid var(--dsw-alias-state-warn-primary)', background: 'var(--dsw-alias-bg-layer-2)' } },
+                  React.createElement('p', { style: { margin: '0 0 4px', color: 'var(--dsw-alias-state-warn-primary)', fontSize: '13px', fontWeight: 650 } }, translate('update.manualRestartTitle')),
+                  React.createElement('p', { style: Object.assign({}, hint, { margin: 0 }) }, translate('update.manualRestartBody')))
+              : null,
             upgradeError ? React.createElement('p', { style: Object.assign({}, hint, { color: 'var(--dsw-alias-state-error-primary)', margin: '4px 0 0' }) }, upgradeError) : null))
 
         // 重启区块复用共享组件（「重启」标签还承载设置页左列入口的显示开关；左侧入口默认关闭）
@@ -1659,7 +1824,8 @@ window.__ModuleLoader__.load({
         // 任务通知独立成顶部标签（v0.14 起不再混在概览里）
         const notifyBlock = React.createElement('div', null, notificationBlock)
         const maintenanceBlock = React.createElement('div', { key: 'maintenance-card', 'data-testid': 'maintenance-card', style: card }, backupBlock)
-        const diagnosticFailure = diagnostics?.checks?.some((check) => check.status === 'error' || (check.status === 'warning' && !(check.id === 'backup-storage' && String(check.detail || '').startsWith('0:')))) === true
+        // advisory 警告（如手动启动环境的黄色提示）只做行内呈现，不点亮标签 ⚠ 与顶部服务控制提醒。
+        const diagnosticFailure = diagnostics?.checks?.some((check) => check.status === 'error' || (check.status === 'warning' && check.advisory !== true)) === true
         const tabWarnings = {
           overview: false,
           notify: false,

package/index.js

@@ -2,7 +2,7 @@
 // 「服务控制」：版本信息 + 检查更新 + 一键重启 dsh web
 import { createHmac, randomBytes, randomUUID } from 'node:crypto'
 import { Buffer } from 'node:buffer'
-import { constants as fsConstants } from 'node:fs'
+import { constants as fsConstants, existsSync, readFileSync } from 'node:fs'
 import { access, cp, lstat, mkdir, readFile, readdir, realpath, rename, rm, stat, unlink, writeFile } from 'node:fs/promises'
 import { homedir } from 'node:os'
 import { basename, dirname, join, relative, resolve, sep } from 'node:path'
@@ -44,6 +44,13 @@ try {
   } catch (__) {}
 }
 
+// Node 最低要求只读 package.json engines 一处（与版本号同源），启动时解析一次。
+let requiredNodeMajor = 22
+try {
+  const enginesNode = require('./package.json').engines?.node || ''
+  requiredNodeMajor = parseInt(enginesNode.replace(/[^0-9].*$/, ''), 10) || 22
+} catch (_) {}
+
 function isSemverIdentifier(value) {
   if (value.length === 0) return false
   return [...value].every((char) => (char >= '0' && char <= '9') || (char >= 'A' && char <= 'Z') || (char >= 'a' && char <= 'z') || char === '-')
@@ -794,7 +801,8 @@ function classifyUpgradeFailure(output) {
 // 一键升级：走「dsh plugin --profile <p> add <pkg>@<版本>」，落在 DSH 真正读取的 profile
 // node_modules，替代旧的无升级语义的 npm install -g。命令、包名、版本全部宿主白名单常量。
 // 安全教义守卫：活动工作拒用、link/file 拒绝、latest 不高于当前版本拒绝（防降级）一律先于网络。
-async function upgradePlugin(ctx, dshHome) {
+// runtimeEnv 来自 apply() 的 detectRuntimeEnv()：疑似终端手动启动时安装成功不调度 exit(42)。
+async function upgradePlugin(ctx, dshHome, runtimeEnv) {
   const activity = collectActiveWork(ctx)
   if (activity.hasActive) throw new Error('active-work')
 
@@ -849,6 +857,12 @@ async function upgradePlugin(ctx, dshHome) {
     : installed !== pluginVersion
   if (!advanced) throw new Error('upgrade-stale')
 
+  // 手动终端启动环境没有进程管理器拉起 exit(42)：保持旧版本继续服务，把重启时机交给用户。
+  // requiresManualRestart 让客户端改走「手动重启指引」而不是恢复轮询（不会有新实例）。
+  if (runtimeEnv !== undefined && runtimeEnv !== null && runtimeEnv.manualStartLikely === true) {
+    return { result: 'upgraded', profile: profile.name, previous: pluginVersion, installed, requiresManualRestart: true }
+  }
+
   scheduleRestart(ctx)
   return { result: 'upgraded', profile: profile.name, previous: pluginVersion, installed }
 }
@@ -999,7 +1013,20 @@ async function repairPermissions(ctx, dshHome, plans, planId) {
   return permissionSnapshot(ctx, dshHome, plans)
 }
 
-async function collectDiagnostics(ctx, dshHome) {
+// 运行环境检查（v0.17）：managed/declared → ok；疑似手动启动 → warning 但带 advisory 标记
+//（黄色行内提示，不参与 overall 聚合、不点亮标签 ⚠ 与顶部提醒——用户复核口径）；unknown →
+// info。detail 是客户端映射词典的令牌。
+function runtimeEnvCheck(runtimeEnv) {
+  if (runtimeEnv === undefined || runtimeEnv === null) return null
+  if (runtimeEnv.manualStartLikely === true) return { id: 'runtime-env', status: 'warning', detail: 'manual', advisory: true }
+  if (runtimeEnv.supervisorKind === 'declared') return { id: 'runtime-env', status: 'ok', detail: 'declared' }
+  if (typeof runtimeEnv.supervisorKind === 'string' && runtimeEnv.supervisorKind.length > 0) {
+    return { id: 'runtime-env', status: 'ok', detail: runtimeEnv.supervisorKind }
+  }
+  return { id: 'runtime-env', status: 'info', detail: 'unknown' }
+}
+
+async function collectDiagnostics(ctx, dshHome, runtimeEnv) {
   const checks = []
   const add = (id, status, detail) => checks.push({ id, status, ...(detail === undefined ? {} : { detail: String(detail) }) })
 
@@ -1027,7 +1054,8 @@ async function collectDiagnostics(ctx, dshHome) {
 
   try {
     const backups = await listBackups(dshHome)
-    add('backup-storage', backups.items.length === 0 ? 'warning' : 'ok', `${backups.items.length}:${backups.totalBytes}`)
+    // 没有备份不算警告（v0.14 口径的落地）：空列表是信息级提示，不点亮标签 ⚠、不影响 overall。
+    add('backup-storage', backups.items.length === 0 ? 'info' : 'ok', `${backups.items.length}:${backups.totalBytes}`)
   } catch (error) { add('backup-storage', 'error', error?.code || error?.message || error) }
 
   const subprocess = ctx.get('subprocess')
@@ -1044,9 +1072,18 @@ async function collectDiagnostics(ctx, dshHome) {
     } catch (error) { add('permissions', 'warning', error?.message || error) }
   }
 
+  const runtimeCheck = runtimeEnvCheck(runtimeEnv)
+  if (runtimeCheck !== null) checks.push(runtimeCheck)
+
+  // Node 运行时版本检查：低于 package.json engines 的最低 major 时告警。
+  // detail 形如 "v22.14.0:22"（当前版本:要求 major），客户端按 backup-storage 同款分隔符解析。
+  const nodeMajor = parseInt(process.versions.node, 10)
+  add('node-version', Number.isFinite(nodeMajor) && nodeMajor >= requiredNodeMajor ? 'ok' : 'warning', `${process.version}:${requiredNodeMajor}`)
+
   let status = 'ok'
+  // advisory 警告（手动启动环境的黄色提示）只做行内呈现：不把 overall 拉成 warning。
   if (checks.some((check) => check.status === 'error')) status = 'error'
-  else if (checks.some((check) => check.status === 'warning')) status = 'warning'
+  else if (checks.some((check) => check.status === 'warning' && check.advisory !== true)) status = 'warning'
   return { status, checkedAt: Date.now(), checks }
 }
 
@@ -1060,6 +1097,9 @@ async function collectHealth(ctx) {
   return {
     uptimeSeconds: process.uptime(),
     rssBytes: memory.rss,
+    platform: process.platform,
+    arch: process.arch,
+    nodeVersion: process.version,
     liveSessions: sessionsService === undefined ? 0 : sessionsService.list().length,
     persistedSessions: sessionRecords.filter((record) => record.persisted === true).length,
     activeAgents: activity.items.filter((item) => item.type === 'agent').length,
@@ -1127,6 +1167,50 @@ function collectActiveWork(ctx) {
   return { hasActive: items.length > 0, items }
 }
 
+// ---- 运行环境探测（v0.16：Windows 终端手动启动场景，用户点名）----
+// 重启 = process.exit(42)，依赖外层进程管理器拉起（见 AGENTS.md）；PowerShell/CMD 手动
+// 启动时没有任何东西会把它拉起来。这里只用跨平台被动信号（env + 固定路径 fs + Node 自带
+// isTTY，零 spawn、浏览器零输入）把环境分成三态：
+//   supervisorKind 非 null —— 检测到管理器，exit 后会被自动拉起，维持自动重启；
+//   manualStartLikely=true —— 无管理器且 stdin/stdout 双 TTY（终端直启特征），升级后宿主
+//                            不自动退出，客户端改示手动重启指引；
+//   其余 —— unknown（输出重定向、NSSM/WinSW 等包装器），维持现状不折腾。
+// 探测不到的包装器可用 DSH_SERVICE_RUNTIME_ENV=managed|manual 由用户显式声明。
+const RUNTIME_SUPERVISOR_ENV = [
+  ['pm2', ['pm_id', 'PM2_HOME', 'pm_uptime']],
+  ['systemd', ['INVOCATION_ID', 'JOURNAL_STREAM', 'NOTIFY_SOCKET']],
+  ['supervisord', ['SUPERVISOR_ENABLED', 'SUPERVISOR_PROCESS_NAME']],
+  ['kubernetes', ['KUBERNETES_SERVICE_HOST']],
+]
+
+function detectRuntimeEnv(options = {}) {
+  const env = options.env ?? process.env
+  const platform = options.platform ?? process.platform
+  const stdinIsTTY = options.stdinIsTTY ?? (process.stdin ? process.stdin.isTTY === true : false)
+  const stdoutIsTTY = options.stdoutIsTTY ?? (process.stdout ? process.stdout.isTTY === true : false)
+  // 默认探测器只在未被注入时执行；win32 直接短路（/.dockerenv 与 /proc 不存在），单测全部显式传原语。
+  const dockerEnvExists = options.dockerEnvExists ?? (platform === 'win32' ? false : (() => { try { return existsSync('/.dockerenv') } catch (_) { return false } })())
+  const cgroupText = options.cgroupText ?? (platform === 'win32' ? '' : (() => { try { return readFileSync('/proc/1/cgroup', 'utf8') } catch (_) { return '' } })())
+
+  const forced = typeof env.DSH_SERVICE_RUNTIME_ENV === 'string' ? env.DSH_SERVICE_RUNTIME_ENV.trim().toLowerCase() : ''
+  if (forced === 'manual') return { platform, supervisorKind: null, manualStartLikely: true }
+  if (forced === 'managed') return { platform, supervisorKind: 'declared', manualStartLikely: false }
+
+  for (const [kind, keys] of RUNTIME_SUPERVISOR_ENV) {
+    if (keys.some((key) => env[key] !== undefined && env[key] !== '')) {
+      return { platform, supervisorKind: kind, manualStartLikely: false }
+    }
+  }
+  // /.dockerenv 与 /proc 只在 POSIX 内核上存在；win32 原生进程不做这两个探测。
+  if (platform !== 'win32') {
+    if (dockerEnvExists === true) return { platform, supervisorKind: 'docker', manualStartLikely: false }
+    if (/docker/i.test(cgroupText)) return { platform, supervisorKind: 'docker', manualStartLikely: false }
+    if (/containerd|kubepods|lxc|podman/i.test(cgroupText)) return { platform, supervisorKind: 'container', manualStartLikely: false }
+  }
+  if (stdinIsTTY === true && stdoutIsTTY === true) return { platform, supervisorKind: null, manualStartLikely: true }
+  return { platform, supervisorKind: null, manualStartLikely: false }
+}
+
 function scheduleRestart(ctx) {
   const doExit = () => {
     try {
@@ -1143,6 +1227,8 @@ function scheduleRestart(ctx) {
 
 function apply(ctx) {
   const dshHome = resolveDshHome()
+  // 进程运行环境在生命周期内不变：挂载时探测一次，version RPC 与升级分支共用。
+  const runtimeEnv = detectRuntimeEnv()
   const permissionPlans = new Map()
   const downloadTokens = new Map()
   let usageIndexPromise = loadUsageIndex(dshHome)
@@ -1205,7 +1291,9 @@ function apply(ctx) {
   // 合法示例：channel=/dsh-service，endpoint=version/check-update/activity/web。
   ctx.connection.rpc.handle('/dsh-service', async (endpoint, payload) => {
     if (endpoint === 'version') {
-      return { ok: true, value: { current: dshVersion, pluginVersion, instanceId } }
+      // runtimeEnv 随进程身份（instanceId）一起返回：概览展示、升级前置确认与重启警告共用，
+      // 客户端对缺字段的老宿主静默降级。
+      return { ok: true, value: { current: dshVersion, pluginVersion, instanceId, runtimeEnv } }
     }
 
     if (endpoint === 'check-update') {
@@ -1243,7 +1331,7 @@ function apply(ctx) {
 
     if (endpoint === 'upgrade') {
       try {
-        return { ok: true, value: await upgradePlugin(ctx, dshHome) }
+        return { ok: true, value: await upgradePlugin(ctx, dshHome, runtimeEnv) }
       } catch (error) {
         return { ok: false, error: error?.message || String(error) }
       }
@@ -1263,7 +1351,7 @@ function apply(ctx) {
 
     if (endpoint === 'diagnostics') {
       try {
-        return { ok: true, value: await collectDiagnostics(ctx, dshHome) }
+        return { ok: true, value: await collectDiagnostics(ctx, dshHome, runtimeEnv) }
       } catch (error) {
         return { ok: false, error: error?.message || String(error) }
       }
@@ -1393,5 +1481,5 @@ function apply(ctx) {
   }, { authority: 'loopback' })
 }
 
-export { apply, inject, name }
-export default { apply, inject, name }
+export { apply, detectRuntimeEnv, inject, name, runtimeEnvCheck }
+export default { apply, detectRuntimeEnv, inject, name, runtimeEnvCheck }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gehennawu/dsh-service",
-  "version": "0.15.0",
+  "version": "0.17.1",
   "description": "DSH Web 自托管运维面板：安全重启、健康监控、备份和 Linux 权限维护。",
   "type": "module",
   "scripts": {