@techysy/10router 1.1.2 → 1.2.0

package/app/src/sse/services/qoderCheckin.js

@@ -0,0 +1,437 @@
+// Qoder auto daily credit claim (both Domestic/CN and International).
+//
+// Automatically claims daily Credits (e.g. 100 Credits refreshed at 10:00 UTC+8,
+// and other platform campaign benefits) for all active Qoder accounts without
+// requiring the user to open the desktop app.
+//
+// Scheduler ticks every ~2h (+ jitter): an account is checked until today's claim
+// is confirmed, then memoized in `qoderDailyDone` for the rest of the day.
+
+import * as log from "../utils/logger.js";
+import {
+  QODER_OPENAPI_BASE,
+  QODER_CN_OPENAPI_BASE,
+} from "../../../open-sse/shared/qoder/constants.js";
+
+const TICK_MS = 2 * 60 * 60 * 1000;
+const TICK_JITTER_MS = 10 * 60 * 1000;
+
+let started = false;
+let timerHandle = null;
+let doneMap = null;
+
+function isNonServerRuntime() {
+  if (typeof window !== "undefined") return true;
+  const phase = process.env.NEXT_PHASE || "";
+  if (phase === "phase-production-build" || phase === "phase-export" || phase === "phase-static") {
+    return true;
+  }
+  if (process.env.NEXT_RUNTIME === "edge") return true;
+  return false;
+}
+
+export function msUntilNextTick(nowMs = Date.now(), rand = Math.random) {
+  const jitter = Math.floor(rand() * TICK_JITTER_MS);
+  return Math.max(TICK_MS + jitter, 1000);
+}
+
+async function loadSettingsSafe() {
+  try {
+    const { getSettings } = await import("../../lib/localDb.js");
+    return (await getSettings()) || {};
+  } catch {
+    return {};
+  }
+}
+
+async function getDoneMap() {
+  if (doneMap) return doneMap;
+  const settings = await loadSettingsSafe();
+  const raw = settings?.qoderDailyDone;
+  doneMap = raw && typeof raw === "object" && !Array.isArray(raw) ? { ...raw } : {};
+  return doneMap;
+}
+
+function dayKey(nowMs = Date.now()) {
+  const d = new Date(nowMs);
+  const p = (n) => String(n).padStart(2, "0");
+  return `${d.getFullYear()}-${p(d.getMonth() + 1)}-${p(d.getDate())}`;
+}
+
+// Human label for log lines — "Qoder CN: ShiYanG Yu", never a bare UUID.
+// Falls back to an 8-char id prefix only when the account has no name/email.
+function accountLabel(conn) {
+  const provider = conn.provider === "qoder-cn" ? "Qoder CN" : "Qoder";
+  const name = conn.name || conn.displayName || conn.email || `${String(conn.id || "?").slice(0, 8)}…`;
+  return `${provider}: ${name}`;
+}
+
+// 7595000 -> "2h06m", 45000 -> "45s" — durations read at a glance.
+function fmtDuration(ms) {
+  const total = Math.max(0, Math.round(ms / 1000));
+  if (total < 60) return `${total}s`;
+  const minutes = Math.round(total / 60);
+  if (minutes < 60) return `${minutes}m`;
+  return `${Math.floor(minutes / 60)}h${String(minutes % 60).padStart(2, "0")}m`;
+}
+
+async function persistDoneMap() {
+  if (!doneMap) return;
+  const today = dayKey();
+  const pruned = {};
+  for (const [id, day] of Object.entries(doneMap)) {
+    if (day === today) pruned[id] = day;
+  }
+  try {
+    const { updateSettings } = await import("../../lib/localDb.js");
+    await updateSettings({ qoderDailyDone: pruned });
+    for (const k of Object.keys(doneMap)) delete doneMap[k];
+    Object.assign(doneMap, pruned);
+  } catch (err) {
+    log.warn("QODER_CHECKIN", `Persist daily-done map failed: ${err?.message ?? String(err)}`);
+  }
+}
+
+export function getQoderOpenApiBase(provider) {
+  return provider === "qoder-cn" ? QODER_CN_OPENAPI_BASE : QODER_OPENAPI_BASE;
+}
+
+export function isEligibleQoderConnection(conn) {
+  if (!conn || conn.isActive === false) return false;
+  if (conn.provider !== "qoder" && conn.provider !== "qoder-cn") return false;
+  const token = conn.accessToken || conn.apiKey;
+  return typeof token === "string" && token.trim().length > 0;
+}
+
+export function buildQoderHeaders(token) {
+  return {
+    Authorization: `Bearer ${token}`,
+    "Cosy-ClientType": "10",
+    "Cosy-Version": "0.3.3",
+    "Cosy-MachineOS": process.platform === "win32" ? "windows" : process.platform === "darwin" ? "macos" : "linux",
+    "User-Agent": "Qoder",
+    Accept: "application/json",
+  };
+}
+
+/**
+ * Resolve effective token (exchange PAT to job token if needed).
+ */
+async function resolveToken(conn) {
+  let token = conn.accessToken || conn.apiKey;
+  if (typeof token !== "string") return null;
+  token = token.trim();
+
+  // If PAT (pt-...), exchange for short-lived job token
+  if (token.startsWith("pt-")) {
+    try {
+      const { exchangePatToJobToken } = await import(
+        "../../../open-sse/services/qoderModels.js"
+      );
+      const isCn = conn.provider === "qoder-cn";
+      token = await exchangePatToJobToken(token, isCn);
+    } catch (e) {
+      log.warn("QODER_CHECKIN", "PAT exchange failed", { connectionId: conn.id, error: e.message });
+      return null;
+    }
+  }
+  return token;
+}
+
+/**
+ * Claim campaigns for a single Qoder connection.
+ */
+export async function checkinOneQoder(conn, deps = {}) {
+  const fetchFn = deps.fetch || fetch;
+  const baseUrl = getQoderOpenApiBase(conn.provider);
+  const token = await resolveToken(conn);
+
+  if (!token) {
+    return {
+      connectionId: conn.id,
+      account: conn.name || conn.email || conn.id,
+      provider: conn.provider,
+      status: "failed",
+      error: "Token unavailable",
+    };
+  }
+
+  const headers = buildQoderHeaders(token);
+  const campaignsUrl = `${baseUrl}/sash/api/v1/me/campaigns?clientType=10`;
+
+  try {
+    const listRes = await fetchFn(campaignsUrl, {
+      method: "GET",
+      headers,
+      signal: AbortSignal.timeout(15000),
+    });
+
+    if (listRes.status === 401 || listRes.status === 403) {
+      return {
+        connectionId: conn.id,
+        account: conn.name || conn.email || conn.id,
+        provider: conn.provider,
+        status: "failed",
+        error: `Authentication failed (${listRes.status})`,
+      };
+    }
+
+    if (!listRes.ok) {
+      return {
+        connectionId: conn.id,
+        account: conn.name || conn.email || conn.id,
+        provider: conn.provider,
+        status: "failed",
+        error: `HTTP ${listRes.status}`,
+      };
+    }
+
+    const payload = await listRes.json();
+    const campaigns = Array.isArray(payload?.campaigns) ? payload.campaigns : [];
+
+    const claimable = campaigns.filter(
+      (c) => c.actionType === "CLAIM_BENEFIT" && c.claimStatus === "CLAIMABLE"
+    );
+
+    if (claimable.length === 0) {
+      // Two different truths used to collapse into one result, and the dashboard
+      // rendered both as "today's credits are already claimed":
+      //
+      //   - the account has no CLAIM_BENEFIT campaign at all. The intl qoder.sh
+      //     deployment currently returns only the season promo, whose actionType
+      //     is VIEW_DETAILS, for every account we have seen — so there is nothing
+      //     to claim, and never was today;
+      //   - a credits campaign exists and is already CLAIMED.
+      //
+      // The first is a normal "nothing on offer here" state, not a claim that
+      // happened, so it gets its own status instead of borrowing the success one.
+      const creditCampaigns = campaigns.filter((c) => c.actionType === "CLAIM_BENEFIT");
+      if (creditCampaigns.length === 0) {
+        return {
+          connectionId: conn.id,
+          account: conn.name || conn.email || conn.id,
+          provider: conn.provider,
+          status: "no-activity",
+          message: "当前无可领取的活动",
+          claimedAmount: 0,
+        };
+      }
+      return {
+        connectionId: conn.id,
+        account: conn.name || conn.email || conn.id,
+        provider: conn.provider,
+        status: "already",
+        message: "今日已领或无待领活动",
+        claimedAmount: 0,
+      };
+    }
+
+    // Claim each available campaign
+    let totalClaimed = 0;
+    const claimedList = [];
+
+    for (const c of claimable) {
+      try {
+        const claimUrl = `${baseUrl}/sash/api/v1/me/campaigns/${encodeURIComponent(c.campaignId)}/claim`;
+        const claimRes = await fetchFn(claimUrl, {
+          method: "POST",
+          headers,
+          signal: AbortSignal.timeout(15000),
+        });
+
+        if (claimRes.ok) {
+          const resJson = await claimRes.json().catch(() => ({}));
+          const amount = resJson.benefit?.amount || c.benefit?.amount || 0;
+          totalClaimed += amount;
+          claimedList.push({
+            campaignId: c.campaignId,
+            campaignKey: c.campaignKey,
+            amount,
+            status: "claimed",
+          });
+        }
+      } catch (err) {
+        log.warn("QODER_CHECKIN", `Failed to claim campaign ${c.campaignId}`, { error: err.message });
+      }
+    }
+
+    if (claimedList.length > 0) {
+      return {
+        connectionId: conn.id,
+        account: conn.name || conn.email || conn.id,
+        provider: conn.provider,
+        status: "checked-in",
+        claimedAmount: totalClaimed,
+        campaigns: claimedList,
+      };
+    }
+
+    return {
+      connectionId: conn.id,
+      account: conn.name || conn.email || conn.id,
+      provider: conn.provider,
+      status: "failed",
+      error: "All claims failed",
+    };
+  } catch (err) {
+    return {
+      connectionId: conn.id,
+      account: conn.name || conn.email || conn.id,
+      provider: conn.provider,
+      status: "failed",
+      error: err.message || "Network error",
+    };
+  }
+}
+
+/**
+ * Execute a check-in run across all eligible Qoder / Qoder CN connections.
+ */
+export async function runQoderCheckinTick(deps = {}) {
+  const { getProviderConnections } = await import("../../lib/localDb.js");
+  const conns = await getProviderConnections();
+
+  // deps.provider scopes the pass to ONE provider (manual per-provider claim
+  // buttons); the scheduler leaves it unset and sweeps both in one pass.
+  const eligible = conns.filter(
+    (c) => isEligibleQoderConnection(c) && (!deps.provider || c.provider === deps.provider)
+  );
+  if (eligible.length === 0) {
+    log.debug("QODER_CHECKIN", "Tick: no eligible Qoder connections");
+    return [];
+  }
+
+  log.debug("QODER_CHECKIN", `领取轮次开始：${eligible.map((c) => accountLabel(c)).join("、")}`);
+
+  const memo = deps.doneMap || (await getDoneMap());
+  const today = dayKey(deps.nowMs);
+  const results = [];
+
+  for (const conn of eligible) {
+    try {
+      if (deps.skipIfCheckedToday && memo[conn.id] === today) {
+        log.debug("QODER_CHECKIN", `${accountLabel(conn)}：今日已确认完成，跳过`);
+        results.push({
+          connectionId: conn.id,
+          account: conn.name || conn.email || conn.id,
+          provider: conn.provider,
+          status: "already",
+          memoized: true,
+        });
+        continue;
+      }
+
+      const checkinFn = deps.checkinConnection || checkinOneQoder;
+      const outcome = await checkinFn(conn, { ...deps, doneMap: memo });
+      results.push(outcome);
+
+      if (outcome.status === "checked-in") {
+        memo[conn.id] = today;
+        log.info("QODER_CHECKIN", `${accountLabel(conn)} 领取成功 +${outcome.claimedAmount} Credits`);
+      } else if (outcome.status === "already") {
+        memo[conn.id] = today;
+        log.debug("QODER_CHECKIN", `${accountLabel(conn)}：${outcome.message || "今日已领或无待领活动"}`);
+      } else if (outcome.status === "no-activity") {
+        // Deliberately NOT memoized: nothing was confirmed, and the campaign can
+        // still appear later in the day (the daily window opens at 10:00 UTC+8),
+        // so the next tick should look again. A debug line, not a warning — for a
+        // deployment that has no such campaign this is the normal outcome.
+        log.debug("QODER_CHECKIN", `${accountLabel(conn)}：${outcome.message || "当前无可领取的活动"}`);
+      } else {
+        log.warn("QODER_CHECKIN", `${accountLabel(conn)} 领取失败：${outcome.error || outcome.status}`);
+      }
+    } catch (err) {
+      results.push({
+        connectionId: conn.id,
+        account: conn.name || conn.id,
+        provider: conn.provider,
+        status: "failed",
+        error: err?.message || String(err),
+      });
+      log.warn("QODER_CHECKIN", `${accountLabel(conn)} 领取异常：${err?.message || err}`);
+    }
+  }
+
+  // One consolidated summary replaces the old firehose of per-event JSON lines.
+  const claimed = results.filter((r) => r.status === "checked-in");
+  const failed = results.filter((r) => r.status === "failed");
+  const none = results.filter((r) => r.status === "no-activity");
+  const already = results.length - claimed.length - failed.length - none.length;
+  const totalCredits = claimed.reduce((a, r) => a + (r.claimedAmount || 0), 0);
+  const summary = `领取汇总：成功 ${claimed.length}（+${totalCredits} Credits）、已领 ${already}、无活动 ${none.length}、失败 ${failed.length}`;
+  if (claimed.length > 0 || failed.length > 0) {
+    log.info("QODER_CHECKIN", summary);
+  } else {
+    log.debug("QODER_CHECKIN", summary);
+  }
+
+  await persistDoneMap();
+  return results;
+}
+
+async function safeTick(how) {
+  try {
+    const settings = await loadSettingsSafe();
+    if (settings.qoderCheckin !== true) {
+      log.debug("QODER_CHECKIN", `Scheduled ${how}: setting off, skipping`);
+      return;
+    }
+    const done = await getDoneMap();
+    await runQoderCheckinTick({ skipIfCheckedToday: true, doneMap: done });
+    await persistDoneMap();
+  } catch (err) {
+    log.warn("QODER_CHECKIN", `定时领取（${how}）失败：${err?.message ?? String(err)}`);
+  }
+}
+
+function clearTimer() {
+  if (timerHandle) {
+    clearTimeout(timerHandle);
+    timerHandle = null;
+  }
+}
+
+function scheduleNext() {
+  if (!started) return 0;
+  const delayMs = msUntilNextTick();
+  clearTimer();
+  timerHandle = setTimeout(() => {
+    safeTick("tick").finally(() => scheduleNext());
+  }, delayMs);
+  if (timerHandle && typeof timerHandle.unref === "function") {
+    timerHandle.unref();
+  }
+  log.debug("QODER_CHECKIN", `下次领取约 ${fmtDuration(delayMs)} 后`);
+  return delayMs;
+}
+
+/**
+ * Start the scheduler. Runs an immediate boot pass then ticks every ~2h.
+ * @param {{ skipBoot?: boolean }} [opts]
+ * @returns {boolean} true if started this call
+ */
+export function startQoderCheckin(opts = {}) {
+  if (started) return false;
+  if (isNonServerRuntime()) {
+    log.debug("QODER_CHECKIN", "Skip start outside long-running server runtime");
+    return false;
+  }
+  started = true;
+
+  if (opts.skipBoot !== true) {
+    safeTick("boot");
+  }
+  // One consolidated startup line (was two: "Scheduler started" + "Next tick
+  // scheduled {...}").
+  const delayMs = scheduleNext();
+  log.info("QODER_CHECKIN", `自动领取调度已启动（全天轮询）— 下次约 ${fmtDuration(delayMs)} 后`);
+  return true;
+}
+
+export function stopQoderCheckin() {
+  clearTimer();
+  if (started) {
+    started = false;
+    log.info("QODER_CHECKIN", "Scheduler stopped");
+  }
+}

package/cli.js

@@ -64,8 +64,9 @@ function createSpinner(text) {
 }
 
 const pkg = require("./package.json");
-const { ensureSqliteRuntime, buildEnvWithRuntime } = require("./hooks/sqliteRuntime");
+const { ensureSqliteRuntime, buildEnvWithRuntime, getDataDir } = require("./hooks/sqliteRuntime");
 const { ensureTrayRuntime } = require("./hooks/trayRuntime");
+const { healStaleServer, writeDiskVersion, writePidFile, removePidFile } = require("./src/cli/staleServer");
 const args = process.argv.slice(2);
 
 // Subcommands (`10router xai video …`) run against an already-running gateway
@@ -81,6 +82,21 @@ if (args[0] === "xai" && args[1] === "video") {
   return;
 }
 
+// `10router doctor` is dispatched BEFORE the runtime self-heal below on purpose:
+// it exists to REPORT a broken runtime, so it must not silently repair one first.
+// It is read-only (no installs, no writes, no kills) and exits non-zero when any
+// check is red, which makes it usable as a CI/"is my install broken" gate.
+if (args[0] === "doctor") {
+  const { run } = require("./src/cli/doctor");
+  run(args.slice(1))
+    .then((code) => process.exit(code))
+    .catch((err) => {
+      console.error(`❌ ${err?.message || err}`);
+      process.exit(1);
+    });
+  return;
+}
+
 // Self-heal SQLite runtime deps (sql.js + better-sqlite3) into ~/.10router/runtime
 // so the server can resolve them via NODE_PATH. Best-effort — sql.js is required,
 // better-sqlite3 is optional. Logs to stderr only on failure.
@@ -90,8 +106,9 @@ try { ensureSqliteRuntime({ silent: true }); } catch {}
 try { ensureTrayRuntime({ silent: true }); } catch {}
 
 // Configuration constants
-// Two different names, identical until the npm package was renamed to
-// 10router-cli: APP_NAME is what you install, BIN_NAME is what you then type.
+// Two different names, identical until the npm package was renamed — first to
+// 10router-cli, now @techysy/10router — while the bin stayed `10router`:
+// APP_NAME is what you install, BIN_NAME is what you then type.
 const APP_NAME = pkg.name;
 const BIN_NAME = Object.keys(pkg.bin ?? {})[0] ?? pkg.name;
 const INSTALL_CMD_LATEST = `npm i -g ${APP_NAME}@latest --prefer-online`;
@@ -126,6 +143,7 @@ let noBrowser = false;
 let skipUpdate = false;
 let showLog = false;
 let trayMode = false;
+let noTray = false;
 
 for (let i = 0; i < args.length; i++) {
   if (args[i] === "--port" || args[i] === "-p") {
@@ -143,6 +161,8 @@ for (let i = 0; i < args.length; i++) {
   } else if (args[i] === "--tray" || args[i] === "-t") {
     trayMode = true;
     process.env.TRAY_MODE = "1";
+  } else if (args[i] === "--no-tray") {
+    noTray = true;
   } else if (args[i] === "--help" || args[i] === "-h") {
     console.log(t("help.text", { bin: BIN_NAME, port: DEFAULT_PORT, host: DEFAULT_HOST }));
     process.exit(0);
@@ -152,12 +172,32 @@ for (let i = 0; i < args.length; i++) {
   }
 }
 
-// Auto-relaunch after update: detached process has no TTY → fallback to tray
-if (skipUpdate && !trayMode && !process.stdin.isTTY) {
+// Headless: run in tray *mode* (keep the server alive, ignore SIGHUP, no TUI)
+// whenever there is nothing to drive an interactive menu. Two cases:
+//   - no interactive terminal — a supervisor (systemd / nohup / a container) or
+//     the detached auto-relaunch after an update. Their stdin is not a TTY, so
+//     selectMenu() reads EOF and resolves to -1 → "exit", which would tear down
+//     the server it just started (exit code 0, so Restart=on-failure won't fire).
+//   - explicit --no-tray, documented as "serve headless": tray *mode* still
+//     applies, there is simply no icon (initTrayIcon() already degrades to that).
+if (!trayMode && (noTray || !process.stdin.isTTY)) {
   trayMode = true;
   process.env.TRAY_MODE = "1";
 }
 
+// Record the version that is now ON DISK. An upgrade (npm i -g / fpk / desktop)
+// replaces the package dir while a detached server from the old build may still
+// be running; this marker lets that old process — and the dashboard — see that
+// the disk has moved on. postinstall.js writes it too (it runs while the old
+// server is still alive); this covers installs where postinstall never ran.
+//
+// Deliberately AFTER the `--help` / `--version` exits above: those are read-only
+// queries and must not stamp the user's data dir. Otherwise a stray run of this
+// script from a source checkout advertises the checkout's version (e.g. 1.1.4)
+// to an *installed* app that shares the same data dir, and the dashboard shows a
+// "disk differs from the running build" banner that is simply not true.
+try { writeDiskVersion(getDataDir(), pkg.version); } catch {}
+
 // Always use Node.js runtime with absolute path
 const RUNTIME = process.execPath;
 
@@ -527,8 +567,25 @@ if (!fs.existsSync(serverPath)) {
 
 // Start server immediately; run update check in parallel (not on the critical path).
 const updatePromise = checkForUpdate();
+
+// Stop a server left over from a PREVIOUS build before trying to own the port:
+// otherwise the new server dies on EADDRINUSE while the stale one keeps serving
+// chunk hashes that no longer exist on disk (blank dashboard). Never fatal.
+function logStaleServerResult(result) {
+  if (result && result.action === "killed") {
+    console.log(t("launcher.staleServerKilled", { running: result.running, disk: pkg.version }));
+  } else if (result && result.action === "warn") {
+    console.log(t("launcher.staleServerNoPid", { running: result.running, port: String(port) }));
+  }
+}
+
 killAllAppProcesses(port)
   .then(() => killProcessOnPort(port))
+  .then(() =>
+    healStaleServer({ port, version: pkg.version, dataDir: getDataDir() })
+      .then(logStaleServerResult)
+      .catch(() => {}),
+  )
   .then(() => startServer(updatePromise));
 
 // Show interface selection menu
@@ -610,6 +667,9 @@ function startServer(updatePromise) {
         HOSTNAME: host
       }
     });
+    // Pidfile: lets a later launcher run stop a server this process left behind
+    // (an upgrade replaces the package dir under a detached server). Best-effort.
+    if (child.pid) writePidFile(getDataDir(), child.pid);
     if (!showLog && child.stderr) {
       child.stderr.on("data", (data) => {
         const lines = data.toString().split("\n").filter(Boolean);
@@ -643,6 +703,7 @@ function startServer(updatePromise) {
       }
       // Also try to kill process group
       process.kill(-server.pid, "SIGKILL");
+      removePidFile(getDataDir());
     } catch (e) { }
   }
 
@@ -667,7 +728,13 @@ function startServer(updatePromise) {
     cleanup();
     setTimeout(() => process.exit(0), 100);
   });
+  // A closing terminal sends SIGHUP. With no TTY (nohup / systemd / a detached
+  // launcher) that signal means "the terminal went away", not "shut down", and
+  // taking the gateway down with it is the opposite of what was asked for — so
+  // ignore it, exactly as tray mode already does below.
+  const ignoreSighup = !process.stdout.isTTY;
   process.on("SIGHUP", () => {
+    if (ignoreSighup) return;
     if (isShuttingDown) return;
     isShuttingDown = true;
     cleanup();
@@ -676,6 +743,9 @@ function startServer(updatePromise) {
 
   // Initialize tray icon (runs alongside TUI)
   const initTrayIcon = () => {
+    // --no-tray: a supervisor (systemd / nohup / a container) or a user who just
+    // wants the gateway. Tray *mode* still applies; there is simply no icon.
+    if (noTray) return false;
     try {
       const { initTray } = require("./src/cli/tray/tray");
       initTray({
@@ -688,8 +758,16 @@ function startServer(updatePromise) {
         },
         onOpenDashboard: () => openBrowser(url)
       });
+      return true;
     } catch (err) {
-      // Tray not available - continue without it
+      // Tray not available (headless host, no systray backend, missing optional
+      // dependency) - keep serving, but say so rather than failing silently.
+      console.warn(
+        t("launcher.trayUnavailable", {
+          error: (err && err.message) || String(err),
+        })
+      );
+      return false;
     }
   };
 
@@ -703,9 +781,13 @@ function startServer(updatePromise) {
     console.log(t("launcher.serverLine", { url: `http://${displayHost}:${port}` }));
 
     waitServerReady(port).then(() => {
-      initTrayIcon();
-      console.log(t("launcher.trayReady"));
-      console.log(t("launcher.trayReadyHint"));
+      if (initTrayIcon()) {
+        console.log(t("launcher.trayReady"));
+        console.log(t("launcher.trayReadyHint"));
+      } else {
+        // No icon exists, so don't claim the app is sitting in the tray.
+        console.log(t("launcher.traySkipped"));
+      }
     });
 
     return;

package/hooks/postinstall.js

@@ -3,8 +3,18 @@
 // Postinstall: warm-up SQLite deps into ~/.10router/runtime so the first
 // `10router` start doesn't need network. Failure here is non-fatal —
 // cli.js will retry at runtime if anything is missing.
-const { ensureSqliteRuntime } = require("./sqliteRuntime");
+const { ensureSqliteRuntime, getDataDir } = require("./sqliteRuntime");
 const { ensureTrayRuntime } = require("./trayRuntime");
+const { writeDiskVersion } = require("../src/cli/staleServer");
+
+// Record the on-disk version FIRST: an upgrade runs this hook while the old
+// server is still alive, and that old process (and the dashboard it serves)
+// needs to see that the package directory already moved on. Best-effort.
+try {
+  writeDiskVersion(getDataDir(), require("../package.json").version);
+} catch (e) {
+  console.warn(`[10router] could not record disk version: ${e.message}`);
+}
 
 try {
   ensureSqliteRuntime({ silent: false });