jishushell 0.4.10 → 0.4.17

package/install/jishu-install.sh

@@ -118,7 +118,11 @@ is_promptable() {
     if [[ "${NO_PROMPT:-0}" == "1" ]]; then
         return 1
     fi
-    if [[ -r /dev/tty && -w /dev/tty ]]; then
+    # Web-triggered upgrades never have an interactive TTY
+    if [[ "${JISHUSHELL_WEB_UPDATE:-0}" == "1" ]]; then
+        return 1
+    fi
+    if ( : <> /dev/tty ) 2>/dev/null; then
         return 0
     fi
     return 1
@@ -161,7 +165,7 @@ JISHU_SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]:-$0}")" && pwd 2>/dev/null |
 # ──── BEGIN VERSIONS ────
 NODE_VERSION="${JISHU_NODE_VERSION:-22}"
 NVM_VERSION="${JISHU_NVM_VERSION:-0.40.4}"
-NOMAD_VERSION="${JISHU_NOMAD_VERSION:-1.11.3}"
+NOMAD_VERSION="${JISHU_NOMAD_VERSION:-1.6.5}"
 JISHUSHELL_PORT="${JISHUSHELL_PORT:-8090}"
 
 # ──── NPM Registry Configuration ────
@@ -223,6 +227,11 @@ SKIP_NOMAD="${SKIP_NOMAD:-0}"
 SKIP_OPENCLAW="${SKIP_OPENCLAW:-0}"  # default=0 (install); use --skip 4 or --skip-openclaw to skip
 SKIP_JISHUSHELL="${SKIP_JISHUSHELL:-0}"          # 1=skip install_jishushell
 SKIP_JISHUSHELL_SERVICE="${SKIP_JISHUSHELL_SERVICE:-0}"  # 1=skip service registration
+JISHUSHELL_NPM_VERSION="${JISHUSHELL_NPM_VERSION:-latest}"  # jishushell npm package version
+JISHUSHELL_VERSION_OVERRIDE=0
+if [[ "${JISHUSHELL_NPM_VERSION}" != "latest" ]]; then
+    JISHUSHELL_VERSION_OVERRIDE=1
+fi
 OPENCLAW_NPM_VERSION="${OPENCLAW_NPM_VERSION:-latest}"   # openclaw npm package version
 OPENCLAW_DOCKER_TAG="${OPENCLAW_DOCKER_TAG:-ghcr.io/x-aijishu/openclaw-runtime:latest}"  # pre-built image from registry
 OPENCLAW_IMAGE=""                                        # set dynamically after pull/build
@@ -448,6 +457,10 @@ check_sudo() {
 
     if ! sudo -n true 2>/dev/null; then
         ui_info "Some steps require sudo — you may be prompted for your password."
+        if ! is_promptable; then
+            ui_error "Failed to obtain sudo privileges (no interactive TTY available)"
+            exit 1
+        fi
         if ! sudo -v </dev/tty; then
             ui_error "Failed to obtain sudo privileges"
             exit 1
@@ -1413,12 +1426,24 @@ install_nomad() {
             if [[ -z "$current_version" ]]; then
                 ui_warn "Nomad at ${local_bin} is not functional (wrong arch or corrupt) — reinstalling..."
                 rm -f "$local_bin"
+            elif [[ "$current_version" == "$NOMAD_VERSION" ]]; then
+                ui_success "Nomad already at target version: v${current_version} → ${local_bin}"
+                _ensure_jishushell_bin_in_path
+                return 0
             elif version_gte "$current_version" "$NOMAD_VERSION"; then
-                ui_success "Nomad already installed: v${current_version} → ${local_bin}"
+                # current > target (the == case was handled above). JishuShell
+                # pins Nomad to a specific version on purpose (license downgrade
+                # from BSL 1.1 to MPL 2.0). Raft state is not backward compatible
+                # across the jump, so we auto-migrate: download + verify the new
+                # binary first (safe-first), then stop services, back up the old
+                # data_dir, wipe it, clean orphaned containers, and swap the
+                # binary. JishuShell re-bootstraps ACL and resubmits jobs from
+                # on-disk instance configs on the next start.
+                _migrate_nomad_to_target "$current_version" || return 1
                 _ensure_jishushell_bin_in_path
                 return 0
             else
-                ui_warn "Nomad version too old: v${current_version} (need >= v${NOMAD_VERSION}) — upgrading..."
+                ui_warn "Nomad version too old: v${current_version} (need v${NOMAD_VERSION}) — upgrading..."
                 rm -f "$local_bin"
             fi
         fi
@@ -1504,6 +1529,180 @@ REPO
     return 1
 }
 
+# Auto-migrate from a higher Nomad version (e.g. 1.11.3 BSL) back to the
+# jishushell target (1.6.5 MPL). Called when install_nomad detects a local
+# binary whose semver is > NOMAD_VERSION. The migration is destructive to
+# Nomad's raft state (schema is not backward compatible) but preserves
+# instance configs under ~/.jishushell/instances/*, which is what jishushell
+# uses to resubmit jobs after reboot. A single tar.gz snapshot of the old
+# data_dir is kept under ~/.jishushell/nomad/backups/ for forensic inspection
+# — it is not a user-recovery mechanism (the schema can't be replayed).
+_migrate_nomad_to_target() {
+    local current_version="$1"
+    local local_bin="${JISHUSHELL_BIN_DIR}/nomad"
+
+    if [[ "$DRY_RUN" == "1" ]]; then
+        ui_info "[dry-run] Would migrate Nomad v${current_version} → v${NOMAD_VERSION}:"
+        ui_info "[dry-run]   1. Stage + verify new binary in /tmp"
+        ui_info "[dry-run]   2. Stop jishushell + nomad services"
+        ui_info "[dry-run]   3. Tar backup ${JISHUSHELL_HOME}/nomad/data → nomad/backups/data-<ts>.tar.gz"
+        ui_info "[dry-run]   4. Wipe raft state + nomad.env files (schema incompatible)"
+        ui_info "[dry-run]   5. Remove orphaned gateway-<alloc> containers"
+        ui_info "[dry-run]   6. Swap binary into ${local_bin}"
+        return 0
+    fi
+
+    ui_warn "Nomad v${current_version} > target v${NOMAD_VERSION} — auto-migrating (BSL → MPL)..."
+    ui_info "  Raft state is not backward-compatible; allocation history will be reset."
+    ui_info "  Instance configs under ${JISHUSHELL_HOME}/instances/ are preserved."
+
+    # ── Stage 1: download + verify new binary before touching anything ────
+    local stage_dir
+    stage_dir="$(mktemp -d)" || { ui_error "mktemp failed"; return 1; }
+    # shellcheck disable=SC2064
+    trap "rm -rf '$stage_dir'" RETURN
+
+    local platform
+    platform="$(uname -s | tr '[:upper:]' '[:lower:]')"
+    local download_url="https://releases.hashicorp.com/nomad/${NOMAD_VERSION}/nomad_${NOMAD_VERSION}_${platform}_${ARCH}.zip"
+    local sums_url="https://releases.hashicorp.com/nomad/${NOMAD_VERSION}/nomad_${NOMAD_VERSION}_SHA256SUMS"
+
+    ui_info "Staging Nomad v${NOMAD_VERSION} (${platform}/${ARCH})..."
+    if ! retry_net "Download Nomad binary" 3 curl -fsSL "$download_url" -o "${stage_dir}/nomad.zip"; then
+        ui_error "Failed to download Nomad v${NOMAD_VERSION} — keeping existing v${current_version}"
+        return 1
+    fi
+    if ! retry_net "Download Nomad checksums" 3 curl -fsSL "$sums_url" -o "${stage_dir}/SHA256SUMS"; then
+        ui_error "Failed to download Nomad checksum file — aborting migration for security"
+        return 1
+    fi
+
+    local expected_hash actual_hash
+    expected_hash="$(grep "nomad_${NOMAD_VERSION}_${platform}_${ARCH}.zip" "${stage_dir}/SHA256SUMS" | awk '{print $1}')"
+    if [[ -z "$expected_hash" ]]; then
+        ui_error "No checksum entry for nomad_${NOMAD_VERSION}_${platform}_${ARCH}.zip — aborting"
+        return 1
+    fi
+    if command -v sha256sum &>/dev/null; then
+        actual_hash="$(sha256sum "${stage_dir}/nomad.zip" | awk '{print $1}')"
+    else
+        actual_hash="$(shasum -a 256 "${stage_dir}/nomad.zip" | awk '{print $1}')"
+    fi
+    if [[ "$expected_hash" != "$actual_hash" ]]; then
+        ui_error "Nomad checksum mismatch — download may have been tampered with!"
+        ui_error "  Expected: $expected_hash"
+        ui_error "  Got:      $actual_hash"
+        return 1
+    fi
+    ui_info "Checksum verified ✓"
+
+    if ! command -v unzip &>/dev/null; then
+        ui_info "Installing unzip..."
+        pkg_install unzip >/dev/null 2>&1
+    fi
+    if ! unzip -o "${stage_dir}/nomad.zip" nomad -d "${stage_dir}" >/dev/null 2>&1; then
+        if ! unzip -o "${stage_dir}/nomad.zip" -d "${stage_dir}" >/dev/null 2>&1; then
+            ui_error "Failed to extract staged Nomad archive"
+            return 1
+        fi
+    fi
+    chmod 755 "${stage_dir}/nomad" 2>/dev/null
+
+    local staged_version
+    staged_version="$("${stage_dir}/nomad" version 2>/dev/null | head -n1 | extract_semver || echo "")"
+    if [[ "$staged_version" != "$NOMAD_VERSION" ]]; then
+        ui_error "Staged binary reports v${staged_version:-unknown}, expected v${NOMAD_VERSION} — aborting"
+        return 1
+    fi
+    ui_success "Staged new Nomad binary v${staged_version}"
+
+    # ── Stage 2: destructive state changes begin ──────────────────────────
+    ui_info "Stopping services..."
+    ${SUDO} systemctl stop jishushell 2>/dev/null || true
+    ${SUDO} systemctl stop nomad 2>/dev/null || true
+    # pkill -f 'nomad agent' matches its own cmdline ("pkill -f nomad agent"
+    # literally contains the pattern) and self-terminates before reaching the
+    # real nomad process. Use pgrep -x nomad instead (exact proc-name match,
+    # pgrep's own comm is "pgrep" not "nomad").
+    local nomad_pids
+    nomad_pids="$(pgrep -x nomad 2>/dev/null | tr '\n' ' ')"
+    if [[ -n "$nomad_pids" ]]; then
+        # shellcheck disable=SC2086
+        ${SUDO} kill -TERM $nomad_pids 2>/dev/null || kill -TERM $nomad_pids 2>/dev/null || true
+        sleep 2
+        nomad_pids="$(pgrep -x nomad 2>/dev/null | tr '\n' ' ')"
+        if [[ -n "$nomad_pids" ]]; then
+            # shellcheck disable=SC2086
+            ${SUDO} kill -KILL $nomad_pids 2>/dev/null || kill -KILL $nomad_pids 2>/dev/null || true
+        fi
+    fi
+
+    # ── Stage 3: tar backup (single snapshot, overwrite any previous) ─────
+    local backup_file=""
+    local backup_dir="${JISHUSHELL_HOME}/nomad/backups"
+    if [[ -d "${JISHUSHELL_HOME}/nomad/data" ]]; then
+        mkdir -p "$backup_dir"
+        local ts
+        ts="$(date +%Y%m%d-%H%M%S)"
+        backup_file="${backup_dir}/data-${ts}.tar.gz"
+        ui_info "Backing up raft state → ${backup_file}"
+        if ! tar czf "$backup_file" -C "${JISHUSHELL_HOME}/nomad" data 2>/dev/null; then
+            ui_warn "Backup tar failed — continuing (raft state will still be wiped)"
+            backup_file=""
+        else
+            # Keep only the most recent snapshot to avoid unbounded disk growth
+            ls -t "${backup_dir}"/data-*.tar.gz 2>/dev/null | tail -n +2 | xargs -r rm -f
+        fi
+    fi
+
+    # ── Stage 4: wipe raft state + env files ─────────────────────────────
+    ${SUDO} rm -rf "${JISHUSHELL_HOME}/nomad/data"
+    rm -f "${JISHUSHELL_HOME}/nomad.env"
+    ${SUDO} rm -f /etc/jishushell/nomad.env
+
+    # ── Stage 5: orphaned gateway containers (alloc ids gone with raft) ──
+    # sudo npm install -g runs postinstall as the invoking user (typically pi),
+    # whose login shell may not have docker group access — the legacy install
+    # only granted docker to the nomad.service via SupplementaryGroups, not to
+    # the login shell. Try unprivileged first, fall back to sudo docker so this
+    # step works regardless of group membership.
+    if command -v docker &>/dev/null; then
+        local _docker="docker"
+        if ! docker ps >/dev/null 2>&1; then
+            _docker="${SUDO} docker"
+        fi
+        local gw_containers
+        gw_containers="$($_docker ps -a --format '{{.Names}}' 2>/dev/null | grep '^gateway-' || true)"
+        if [[ -n "$gw_containers" ]]; then
+            local gw_count
+            gw_count="$(echo "$gw_containers" | wc -l)"
+            echo "$gw_containers" | xargs -r $_docker rm -f >/dev/null 2>&1 || true
+            ui_info "Removed ${gw_count} orphaned gateway container(s)"
+        fi
+    fi
+
+    # ── Stage 6: swap binary into place (atomic via temp name + rename) ──
+    mkdir -p "${JISHUSHELL_BIN_DIR}"
+    local dest_tmp="${local_bin}.tmp.$$"
+    if ! cp "${stage_dir}/nomad" "$dest_tmp"; then
+        ui_error "Failed to copy new Nomad binary into place"
+        [[ -n "$backup_file" ]] && ui_error "  Backup preserved at: ${backup_file}"
+        return 1
+    fi
+    chmod 755 "$dest_tmp"
+    if ! mv -f "$dest_tmp" "$local_bin"; then
+        ui_error "Failed to swap Nomad binary"
+        [[ -n "$backup_file" ]] && ui_error "  Backup preserved at: ${backup_file}"
+        rm -f "$dest_tmp"
+        return 1
+    fi
+
+    ui_success "Nomad migrated to v${NOMAD_VERSION}"
+    [[ -n "$backup_file" ]] && ui_info "  Backup (forensic, not self-recovery): ${backup_file}"
+    ui_info "  JishuShell will re-bootstrap ACL and resubmit jobs from instance configs on next start."
+    return 0
+}
+
 _install_nomad_binary() {
     local dest="${JISHUSHELL_BIN_DIR}/nomad"
 
@@ -1849,14 +2048,17 @@ install_nomad_systemd() {
 
     _ensure_nomad_hcl
 
+    # Nomad 1.6.5's docker driver fingerprint requires euid==0 (PR #18197 lifted
+    # the root requirement only in 1.7+, which is BSL). The panel stays as the
+    # installing user via a separate unit; it talks to this agent over HTTP so
+    # ~/.jishushell/nomad/data/ can be root-owned without breaking anything.
     local service_content="[Unit]
 Description=Nomad Agent
 After=network-online.target docker.service
 Wants=network-online.target
 
 [Service]
-User=${REAL_USER}
-SupplementaryGroups=docker
+User=root
 Type=simple
 EnvironmentFile=-/etc/jishushell/nomad.env
 ExecStart=${nomad_bin} agent -config=${config_file}
@@ -1879,8 +2081,12 @@ WantedBy=multi-user.target"
         need_reload=1
     fi
 
-    # Ensure Nomad data dirs are owned by the real user before the service starts
+    # Keep the real user owning ~/.jishushell except for Nomad's own state,
+    # which must be root-owned because the agent runs as root for driver fingerprinting.
     chown -R "${REAL_USER}:${REAL_GID:-${REAL_USER}}" "${JISHUSHELL_HOME}" 2>/dev/null || true
+    if [[ -d "${nomad_config_dir}/data" ]]; then
+        ${SUDO} chown -R root:root "${nomad_config_dir}/data" 2>/dev/null || true
+    fi
 
     if [[ $need_reload -eq 1 ]]; then
         ${SUDO} systemctl daemon-reload
@@ -2211,6 +2417,14 @@ _prompt_openclaw_skip() {
     esac
 }
 
+jishushell_package_spec() {
+    if [[ "${JISHUSHELL_VERSION_OVERRIDE}" == "1" || "${JISHUSHELL_NPM_VERSION}" != "latest" ]]; then
+        printf 'jishushell@%s' "${JISHUSHELL_NPM_VERSION}"
+        return 0
+    fi
+    printf 'jishushell'
+}
+
 # show_install_plan [--with-jishushell]
 show_install_plan() {
     local with_jishushell=0
@@ -2226,17 +2440,19 @@ show_install_plan() {
     ui_kv "Node.js"     "$(if [[ $SKIP_NODE   -eq 1 ]]; then echo 'skip'; else echo "v${NODE_VERSION} via nvm v${NVM_VERSION}"; fi)"
     ui_kv "Docker"      "$(if [[ $SKIP_DOCKER -eq 1 ]]; then echo 'skip'; else echo 'latest stable'; fi)"
     ui_kv "Nomad"       "$(if [[ $SKIP_NOMAD  -eq 1 ]]; then echo 'skip'; else echo "v${NOMAD_VERSION}"; fi)"
-    ui_kv "OpenClaw"    "$(if [[ \"${SKIP_OPENCLAW}\" == \"1\" ]]; then echo 'skip'; else echo \"docker pull ${OPENCLAW_DOCKER_TAG}\"; fi)"
+    ui_kv "OpenClaw"    "$(if [[ "${SKIP_OPENCLAW}" == "1" ]]; then echo 'skip'; else echo "docker pull ${OPENCLAW_DOCKER_TAG}"; fi)"
     if [[ $with_jishushell -eq 1 ]]; then
         local _plan_jishu
         if [[ $SKIP_JISHUSHELL -eq 1 ]]; then
             _plan_jishu="skip"
         else
             local _plan_tgz=""
-            for _c in "${JISHU_SCRIPT_DIR}"/jishushell-*.tgz; do
-                [[ -f "$_c" ]] && { _plan_tgz="$(basename "$_c")"; break; }
-            done
-            _plan_jishu="${_plan_tgz:+npm install -g ${_plan_tgz} (local)}${_plan_tgz:-npm install -g jishushell}"
+            if [[ "${JISHUSHELL_VERSION_OVERRIDE}" != "1" && "${JISHUSHELL_NPM_VERSION}" == "latest" ]]; then
+                for _c in "${JISHU_SCRIPT_DIR}"/jishushell-*.tgz; do
+                    [[ -f "$_c" ]] && { _plan_tgz="$(basename "$_c")"; break; }
+                done
+            fi
+            _plan_jishu="${_plan_tgz:+npm install -g ${_plan_tgz} (local)}${_plan_tgz:-npm install -g $(jishushell_package_spec)}"
         fi
         ui_kv "JishuShell"         "$_plan_jishu"
         ui_kv "JishuShell service" "$(if [[ $SKIP_JISHUSHELL_SERVICE -eq 1 ]]; then echo 'skip'; else echo 'register autostart'; fi)"
@@ -2401,16 +2617,20 @@ install_jishushell() {
     fi
 
     if [[ "$DRY_RUN" == "1" ]]; then
+        local jishushell_pkg_spec
+        jishushell_pkg_spec="$(jishushell_package_spec)"
         local _dry_reg=""
         [[ -n "${NPM_REGISTRY:-}" ]] && _dry_reg=" --registry ${NPM_REGISTRY}"
         local _dry_tgz=""
-        for _c in "${JISHU_SCRIPT_DIR}"/jishushell-*.tgz; do
-            [[ -f "$_c" ]] && { _dry_tgz="$_c"; break; }
-        done
+        if [[ "${JISHUSHELL_VERSION_OVERRIDE}" != "1" && "${JISHUSHELL_NPM_VERSION}" == "latest" ]]; then
+            for _c in "${JISHU_SCRIPT_DIR}"/jishushell-*.tgz; do
+                [[ -f "$_c" ]] && { _dry_tgz="$_c"; break; }
+            done
+        fi
         if [[ -n "$_dry_tgz" ]]; then
             ui_info "[dry-run] Would: npm install -g ${_dry_tgz}  (local package)"
         else
-            ui_info "[dry-run] Would: npm install -g jishushell${_dry_reg}"
+            ui_info "[dry-run] Would: npm install -g ${jishushell_pkg_spec}${_dry_reg}"
         fi
         ui_info "[dry-run] Would write wrapper: ${JISHUSHELL_BIN_DIR}/jishushell-panel-start"
         return 0
@@ -2441,6 +2661,8 @@ install_jishushell() {
         return 1
     fi
 
+    local jishushell_pkg_spec
+    jishushell_pkg_spec="$(jishushell_package_spec)"
     local npm_registry_args=()
     if [[ -n "${NPM_REGISTRY:-}" ]]; then
         if [[ ! "$NPM_REGISTRY" =~ ^https?:// ]]; then
@@ -2448,9 +2670,9 @@ install_jishushell() {
             return 1
         fi
         npm_registry_args=("--registry" "${NPM_REGISTRY}")
-        ui_info "Installing jishushell from ${NPM_REGISTRY}..."
+        ui_info "Installing ${jishushell_pkg_spec} from ${NPM_REGISTRY}..."
     else
-        ui_info "Installing jishushell from public npm registry..."
+        ui_info "Installing ${jishushell_pkg_spec} from public npm registry..."
     fi
 
     # When jishushell is already installed (e.g. running as npm postinstall hook),
@@ -2459,12 +2681,14 @@ install_jishushell() {
         # Prefer a local .tgz package in the same directory as this script.
         local tgz_path=""
         local _tgz_candidate
-        for _tgz_candidate in "${JISHU_SCRIPT_DIR}"/jishushell-*.tgz; do
-            if [[ -f "$_tgz_candidate" ]]; then
-                tgz_path="$_tgz_candidate"
-                break
-            fi
-        done
+        if [[ "${JISHUSHELL_VERSION_OVERRIDE}" != "1" && "${JISHUSHELL_NPM_VERSION}" == "latest" ]]; then
+            for _tgz_candidate in "${JISHU_SCRIPT_DIR}"/jishushell-*.tgz; do
+                if [[ -f "$_tgz_candidate" ]]; then
+                    tgz_path="$_tgz_candidate"
+                    break
+                fi
+            done
+        fi
 
         # Export a sentinel so post-install.sh (triggered by npm's postinstall
         # lifecycle hook) knows it was launched from inside jishu-install.sh and
@@ -2480,10 +2704,10 @@ install_jishushell() {
                 return 1
             fi
         else
-            log_detail "[$(date '+%H:%M:%S')] ${npm_bin} install -g jishushell ${npm_registry_args[*]:-}"
-            if ! log_cmd "$npm_bin" install -g jishushell ${npm_registry_args[@]+"${npm_registry_args[@]}"}; then
+            log_detail "[$(date '+%H:%M:%S')] ${npm_bin} install -g ${jishushell_pkg_spec} ${npm_registry_args[*]:-}"
+            if ! log_cmd "$npm_bin" install -g "${jishushell_pkg_spec}" "${npm_registry_args[@]}"; then
                 unset JISHU_RUNNING_IN_INSTALLER
-                ui_error "npm install -g jishushell failed"
+                ui_error "npm install -g ${jishushell_pkg_spec} failed"
                 return 1
             fi
         fi
@@ -2787,8 +3011,17 @@ parse_args() {
                 shift
                 OPENCLAW_NPM_VERSION="${1:?--openclaw-version requires a version argument (e.g. 3.24)}"
                 ;;
+            --openclaw-docker-tag)
+                shift
+                OPENCLAW_DOCKER_TAG="${1:?--openclaw-docker-tag requires a tag argument (e.g. ghcr.io/x-aijishu/openclaw-runtime:2026.4.9)}"
+                ;;
             --skip-jishushell)         SKIP_JISHUSHELL=1 ;;
             --skip-jishushell-service) SKIP_JISHUSHELL_SERVICE=1 ;;
+            --jishushell-version)
+                shift
+                JISHUSHELL_NPM_VERSION="${1:?--jishushell-version requires a version argument (e.g. 0.4.9)}"
+                JISHUSHELL_VERSION_OVERRIDE=1
+                ;;
             --skip)
                 shift
                 IFS=',' read -ra _steps <<< "${1:-}"
@@ -2854,10 +3087,16 @@ Options:
   --skip-docker              Skip step 2: Docker installation
   --skip-nomad               Skip step 3: Nomad installation
   --skip-openclaw            Skip step 4: OpenClaw installation
+    --openclaw-docker-tag <tag>
+                                                         Pull a specific OpenClaw image tag
+                                                         (e.g. --openclaw-docker-tag ghcr.io/x-aijishu/openclaw-runtime:2026.4.9)
   --skip-jishushell          Skip step 5: JishuShell installation
   --skip-jishushell-service  Skip step 6: JishuShell service registration
+    --jishushell-version <ver>
+                                                         Install a specific jishushell version
+                                                         (e.g. --jishushell-version 0.4.9)
   --registry <url>           Use a custom npm registry for all installs
-                             (e.g. --registry http://10.188.0.22:4873/)
+                             (e.g. --registry http://127.0.0.1:4873/)
   --yes, -y                  Skip all confirmation prompts
   --help, -h                 Show this help message
 
@@ -2873,12 +3112,16 @@ Environment variables:
   JISHU_NODE_VERSION    Specify Node.js major version (default: ${NODE_VERSION})
   JISHU_NVM_VERSION     Specify nvm version         (default: ${NVM_VERSION})
   JISHU_NOMAD_VERSION   Specify Nomad version       (default: ${NOMAD_VERSION})
+    JISHUSHELL_NPM_VERSION
+                                                 Specify jishushell npm package version (default: latest)
   OPENCLAW_NPM_VERSION  Specify openclaw npm package version (default: latest)
-  OPENCLAW_DOCKER_TAG   Override built Docker image tag      (default: jishushell-base:v1)
+    OPENCLAW_DOCKER_TAG   Override OpenClaw Docker image tag   (default: ${OPENCLAW_DOCKER_TAG})
   NPM_REGISTRY          Custom npm registry URL (same as --registry flag)
 
-OpenClaw version flag (equivalent to OPENCLAW_NPM_VERSION env var):
-  --openclaw-version <ver>   Install a specific openclaw version, e.g. --openclaw-version 3.24
+Version flags:
+    --jishushell-version <ver>  Install a specific jishushell version, e.g. --jishushell-version 0.4.9
+    --openclaw-version <ver>    Install a specific openclaw version, e.g. --openclaw-version 3.24
+    --openclaw-docker-tag <tag> Pull a specific OpenClaw image tag, e.g. --openclaw-docker-tag ghcr.io/x-aijishu/openclaw-runtime:2026.4.9
   NO_PROMPT             Set to 1 to skip interactive prompts
   VERBOSE               Set to 1 for verbose output
 
@@ -2948,12 +3191,11 @@ _prompt_install_confirm() {
         fi
         if [[ $SKIP_NOMAD -eq 0 ]]; then
             echo -e "  ${BOLD}Nomad${NC}"
-            echo -e "  ${MUTED}  Nomad v${NOMAD_VERSION}+ (>= 1.7.0)${NC}"
-            echo -e "  ${MUTED}    URL     : https://github.com/hashicorp/nomad${NC}"
-            echo -e "  ${MUTED}    License : Business Source License 1.1 (BSL 1.1)${NC}"
-            echo -e "  ${MUTED}              https://github.com/hashicorp/nomad/blob/main/LICENSE${NC}"
-            echo -e "  ${MUTED}    Licensor: International Business Machines Corporation (IBM)${NC}"
-            echo -e "  ${MUTED}    Work    : Nomad Version 1.7.0 or later. (c) 2024 IBM Corp.${NC}"
+            echo -e "  ${MUTED}  Nomad v${NOMAD_VERSION} (last MPL 2.0 release in the 1.6.x line)${NC}"
+            echo -e "  ${MUTED}    URL     : https://github.com/hashicorp/nomad/tree/v${NOMAD_VERSION}${NC}"
+            echo -e "  ${MUTED}    License : Mozilla Public License 2.0${NC}"
+            echo -e "  ${MUTED}              https://github.com/hashicorp/nomad/blob/v${NOMAD_VERSION}/LICENSE${NC}"
+            echo -e "  ${MUTED}    Author  : HashiCorp, Inc.${NC}"
             echo ""
         fi
         echo -e "  ${ACCENT}─────────────────────────────────────────────────────────${NC}"

package/install/post-install.sh

@@ -6,11 +6,17 @@ if [[ "${CI:-}" == "true" || -n "${CI_PIPELINE_ID:-}" ]]; then
     exit 0
 fi
 
+_post_install_has_tty() {
+    ( : > /dev/tty ) 2>/dev/null
+}
+
 # Only run when installed globally via `npm install -g jishushell`.
 # Local installs (npm install, npm run build) skip post-install entirely.
 if [[ -n "${npm_lifecycle_event:-}" && "${npm_config_global:-false}" != "true" ]]; then
-    _tty=/dev/tty
-    [[ -w "$_tty" ]] || _tty=/dev/stderr
+    _tty=/dev/stderr
+    if _post_install_has_tty; then
+        _tty=/dev/tty
+    fi
     {
         echo ""
         echo "  JishuShell requires global installation."
@@ -90,13 +96,60 @@ export JISHUSHELL_SKIP_NPM_INSTALL=1
 # Parse any extra args forwarded via npm (e.g. --dry-run, --yes, --skip-docker)
 parse_args "$@"
 
+# ── Non-interactive upgrade mode ──────────────────────────────────────────────
+# Web-triggered `npm install -g jishushell` runs without a controlling TTY, so
+# postinstall must not block on sudo prompts or fail the package upgrade solely
+# because privileged refresh steps cannot be confirmed interactively.
+POST_INSTALL_BEST_EFFORT=0
+configure_postinstall_mode() {
+    # Web-triggered upgrade: npm was spawned by the panel backend without a
+    # controlling TTY.  Skip all privileged steps so npm can exit cleanly.
+    if [[ "${JISHUSHELL_WEB_UPDATE:-0}" == "1" ]]; then
+        POST_INSTALL_BEST_EFFORT=1
+        NO_PROMPT=1
+        SUDO=""
+        SKIP_DOCKER=1
+        SKIP_NOMAD=1
+        SKIP_OPENCLAW=1
+        SKIP_JISHUSHELL_SERVICE=1
+        return 0
+    fi
+
+    if [[ $EUID -eq 0 ]]; then
+        SUDO=""
+        return 0
+    fi
+
+    if ! command -v sudo &>/dev/null; then
+        return 0
+    fi
+
+    if sudo -n true 2>/dev/null; then
+        SUDO="sudo"
+        NO_PROMPT=1
+        return 0
+    fi
+
+    if _post_install_has_tty; then
+        return 0
+    fi
+
+    POST_INSTALL_BEST_EFFORT=1
+    NO_PROMPT=1
+    SUDO=""
+    SKIP_DOCKER=1
+    SKIP_NOMAD=1
+    SKIP_OPENCLAW=1
+    SKIP_JISHUSHELL_SERVICE=1
+}
+
 # ── Log setup ─────────────────────────────────────────────────────────────────
 # npm captures lifecycle script stdout/stderr and only shows it on error.
 # Writing to /dev/tty bypasses that capture so progress is visible in real time.
 # The log file is always written regardless of tty availability.
 mkdir -p "${REAL_HOME}/.jishushell"
 LOG_FILE="${REAL_HOME}/.jishushell/post-install-$(date +%Y-%m-%d-%H-%M-%S)-$$.log"
-if [[ -w /dev/tty ]] && echo -n '' > /dev/tty 2>/dev/null; then
+if _post_install_has_tty; then
     # tee writes to $LOG_FILE; its stdout (>/dev/tty) goes straight to the terminal,
     # bypassing npm's stdout capture entirely.
     exec > >(tee -a "$LOG_FILE" >/dev/tty) 2>&1
@@ -112,8 +165,14 @@ echo ""
 # ── Run install steps ─────────────────────────────────────────────────────────
 detect_os
 detect_arch
-check_sudo
-ensure_prerequisites
+configure_postinstall_mode
+if [[ "$POST_INSTALL_BEST_EFFORT" == "1" ]]; then
+    ui_warn "No interactive sudo is available during npm post-install — skipping privileged runtime checks and service refresh."
+    ui_info "The JishuShell package files were updated. If you need to reconcile system components later, run: jishushell install --yes"
+else
+    check_sudo
+    ensure_prerequisites
+fi
 run_install_components --with-jishushell || true
 _rc=$?
 show_summary --with-jishushell

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jishushell",
-  "version": "0.4.10",
+  "version": "0.4.17",
   "description": "JishuShell - Multi-Agent Framework Management",
   "type": "module",
   "bin": {
@@ -25,9 +25,12 @@
     "test": "vitest run",
     "test:unit:backend": "vitest run tests/unit",
     "test:integration": "vitest run tests/integration",
+    "test:e2e:real": "npm run build:backend && vitest run --config vitest.e2e-real.config.ts",
+    "test:e2e:real:verbose": "npm run build:backend && vitest run --config vitest.e2e-real.config.ts --reporter=verbose",
     "test:watch": "vitest",
     "test:coverage": "vitest run --coverage",
     "test:ci": "npm run build:backend && vitest run --coverage && cd frontend && npm install && npm run test",
+    "test:ci:full": "npm run test:ci && vitest run --config vitest.e2e-real.config.ts",
     "prepublishOnly": "npm run build && chmod +x dist/cli.js",
     "postinstall": "bash install/post-install.sh",
     "preuninstall": "bash install/post-uninstall.sh",
@@ -51,7 +54,8 @@
     "bcryptjs": "^2.4.3",
     "fastify": "^5.2.0",
     "jsonwebtoken": "^9.0.2",
-    "systeminformation": "^5.23.0"
+    "systeminformation": "^5.23.0",
+    "yaml": "^2.8.3"
   },
   "devDependencies": {
     "@types/bcryptjs": "^2.4.6",

package/public/assets/Dashboard-CQsp1Mr9.js

@@ -0,0 +1 @@
+import{h as B,j as e,L as E,k,l as M,m as R,n as K,o as L,q as A,t as I,v as T,w as W}from"./index-BuTQtuNy.js";import{r as m,u as D}from"./vendor-react-B1-3Yrt-.js";import{u as P}from"./usePolling-CK0DfI4h.js";import{u as C}from"./vendor-i18n-CfW0RvgE.js";function q(t){if(!t)return"-";const l=Math.floor(t/86400),d=Math.floor(t%86400/3600),r=Math.floor(t%3600/60);return l>0?`${l}d ${d}h`:d>0?`${d}h ${r}m`:`${r}m`}function G({status:t}){const{t:l}=C(),r={running:{cls:"bg-emerald-500/10 text-emerald-400 border border-emerald-500/20",labelKey:"status.running"},pending:{cls:"bg-amber-500/10 text-amber-400 border border-amber-500/20",labelKey:"status.starting"},failed:{cls:"bg-red-500/10 text-red-400 border border-red-500/20",labelKey:"status.failed"},dead:{cls:"bg-red-500/10 text-red-400 border border-red-500/20",labelKey:"status.crashed"}}[t]||{cls:"bg-[var(--card)] text-muted border border-[var(--border)]",labelKey:"status.stopped"};return e.jsx("span",{className:`inline-flex items-center text-xs px-2 py-0.5 rounded-full font-medium ${r.cls}`,children:l(r.labelKey)})}function z(){const{t}=C(["dashboard","common"]),[l,d]=m.useState([]),[r,$]=m.useState(null),[h,v]=m.useState(""),[y,j]=m.useState(""),[p,N]=m.useState(!1),g=D(),{showToast:c}=B(),u=()=>{K().then(s=>{d(s),j("")}).catch(s=>j(s.message||t("common:error.loadFailed"))),L().then($).catch(()=>{})};P(u,1e4);const _=async()=>{if(window.confirm(t("engine.restartConfirm"))){N(!0);try{await A(),c(t("engine.restarted"),"success"),setTimeout(u,2e3)}catch(s){c(s.message||t("engine.restartFailed"),"error")}finally{N(!1)}}},f=async(s,a,i)=>{s.stopPropagation(),v(`${i}-${a}`);try{let n=null;a==="start"&&(n=await I(i)),a==="stop"&&(n=await T(i)),a==="restart"&&(n=await W(i)),c(t(`common:action.${a}Done`),"success");const o=n==null?void 0:n.port_allocation;o&&typeof o.from=="number"&&typeof o.to=="number"&&o.from!==o.to&&c(t("common:toast.portReallocated",{defaultValue:"端口 {{from}} 被占用,已自动切换到 {{to}}",from:o.from,to:o.to}),"info"),setTimeout(u,1e3)}catch(n){c(n.message||t("common:error.operationFailed"),"error")}finally{v("")}},F=l.filter(s=>{var a;return((a=s.service)==null?void 0:a.status)==="running"}).length,b=!!r&&r.disk.percent>90,S=r?[{label:t("stats.runningInstances"),value:`${F} / ${l.length}`,sub:r.nomad_running?t("stats.engineRunning"):t("stats.engineStopped"),subColor:r.nomad_running?"text-emerald-400":"text-red-400",icon:e.jsxs("svg",{className:"w-4 h-4",viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:1.5,children:[e.jsx("rect",{x:"2",y:"3",width:"20",height:"14",rx:"2"}),e.jsx("line",{x1:"8",y1:"21",x2:"16",y2:"21"}),e.jsx("line",{x1:"12",y1:"17",x2:"12",y2:"21"})]}),iconColor:"text-[#0066FF]",glowColor:"rgba(0,102,255,0.12)",accent:"border-l-2 border-l-[#0066FF]"},{label:t("stats.cpu"),value:`${r.cpu_percent}%`,sub:r.temperature?`${r.temperature}°C`:null,icon:e.jsxs("svg",{className:"w-4 h-4",viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:1.5,children:[e.jsx("rect",{x:"4",y:"4",width:"16",height:"16",rx:"2"}),e.jsx("rect",{x:"9",y:"9",width:"6",height:"6"}),e.jsx("line",{x1:"9",y1:"2",x2:"9",y2:"4"}),e.jsx("line",{x1:"15",y1:"2",x2:"15",y2:"4"}),e.jsx("line",{x1:"9",y1:"20",x2:"9",y2:"22"}),e.jsx("line",{x1:"15",y1:"20",x2:"15",y2:"22"}),e.jsx("line",{x1:"20",y1:"9",x2:"22",y2:"9"}),e.jsx("line",{x1:"20",y1:"15",x2:"22",y2:"15"}),e.jsx("line",{x1:"2",y1:"9",x2:"4",y2:"9"}),e.jsx("line",{x1:"2",y1:"15",x2:"4",y2:"15"})]}),iconColor:"text-[#0066FF]",glowColor:"rgba(0,102,255,0.12)",accent:"border-l-2 border-l-[#0066FF]",warn:r.cpu_percent>90},{label:t("stats.memory"),value:`${r.memory.percent}%`,sub:`${r.memory.used_mb}MB / ${r.memory.total_mb}MB`,icon:e.jsx("svg",{className:"w-4 h-4",viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:1.5,children:e.jsx("path",{d:"M6 19v-8m4 8v-4m4 4v-6m4 6v-2"})}),iconColor:"text-[#00D4AA]",glowColor:"rgba(0,212,170,0.12)",accent:"border-l-2 border-l-[#00D4AA]"},{label:t("stats.disk"),value:`${r.disk.percent}%`,sub:`${r.disk.used_gb}GB / ${r.disk.total_gb}GB`,icon:e.jsxs("svg",{className:"w-4 h-4",viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:1.5,children:[e.jsx("ellipse",{cx:"12",cy:"5",rx:"9",ry:"3"}),e.jsx("path",{d:"M3 5v14a9 3 0 0018 0V5"}),e.jsx("line",{x1:"12",y1:"8",x2:"12",y2:"22"})]}),iconColor:b?"text-red-400":"text-[#0066FF]",glowColor:b?"rgba(239,68,68,0.12)":"rgba(0,102,255,0.12)",accent:b?"border-l-2 border-l-red-400":"border-l-2 border-l-[#0066FF]",warn:b}]:[];return e.jsxs("div",{className:"p-4 max-w-5xl mx-auto",children:[e.jsxs("div",{className:"mb-4 flex items-center justify-between",children:[e.jsxs("div",{children:[e.jsx("h1",{className:"text-base font-semibold text-foreground",children:t("title")}),e.jsx("p",{className:"text-xs text-muted mt-0.5",children:t("subtitle")})]}),e.jsx(E,{})]}),r&&e.jsx("div",{className:"grid grid-cols-2 lg:grid-cols-4 gap-3 mb-4",children:S.map(s=>e.jsxs("div",{className:`bg-[var(--card)] border border-[var(--border)] rounded-lg p-3 relative overflow-hidden hover:border-[var(--border-hover)] hover:bg-[var(--card-hover)] transition-all duration-200 ${s.accent}`,children:[e.jsx("div",{className:"absolute top-0 right-0 w-16 h-16 rounded-full opacity-60 pointer-events-none",style:{background:`radial-gradient(circle, ${s.glowColor} 0%, transparent 70%)`}}),e.jsxs("div",{className:"flex items-center justify-between mb-1.5",children:[e.jsx("span",{className:"text-[11px] text-muted",children:s.label}),e.jsx("span",{className:`${s.iconColor} opacity-80`,children:s.icon})]}),e.jsx("div",{className:`text-lg font-semibold ${s.warn?"text-red-400":"text-foreground"}`,children:s.value}),s.sub&&e.jsx("div",{className:`text-[11px] mt-0.5 truncate ${s.subColor??"text-muted"}`,children:s.sub})]},s.label))}),e.jsxs("div",{className:"bg-[var(--card)] border border-[var(--border)] rounded-xl overflow-hidden",children:[e.jsxs("div",{className:"px-4 py-2.5 border-b border-[var(--border)] flex items-center justify-between",children:[e.jsx("h2",{className:"text-sm font-medium text-foreground",children:t("instances.title")}),e.jsxs("div",{className:"flex items-center gap-2",children:[e.jsx("button",{onClick:()=>g("/instances/new"),className:"bg-[#0066FF] text-white px-3 py-1.5 rounded-md text-xs font-medium hover:bg-[#0066FF]/90 transition-all duration-200 shadow-[0_0_12px_rgba(0,102,255,0.3)]",children:t("instances.new")}),e.jsx("button",{onClick:()=>g("/instances/new?import=true"),className:"px-3 py-1.5 rounded-md text-xs font-medium text-muted border border-[var(--border)] bg-[var(--card)] hover:bg-[var(--card-hover)] hover:text-foreground transition-all duration-200",children:t("instances.import")}),e.jsxs("button",{onClick:_,disabled:p,title:t("instances.restartEngineTitle"),className:"flex items-center gap-1.5 px-2.5 py-1.5 rounded-md text-xs font-medium text-red-400 border border-red-500/20 bg-red-500/5 hover:bg-red-500/15 disabled:opacity-40 disabled:cursor-not-allowed transition-all duration-200",children:[e.jsx(k,{className:`w-3 h-3 ${p?"animate-spin":""}`}),t(p?"instances.restarting":"instances.restartEngine")]})]})]}),y?e.jsxs("div",{className:"text-center py-12 px-4",children:[e.jsx("p",{className:"text-sm text-red-400 mb-2",children:t("instances.loadError",{error:y})}),e.jsx("button",{onClick:u,className:"text-xs text-muted hover:text-foreground underline",children:t("common:action.retry")})]}):l.length===0?e.jsxs("div",{className:"text-center py-12 px-4",children:[e.jsx("div",{className:"text-muted opacity-40 mb-3",children:e.jsxs("svg",{className:"w-8 h-8 mx-auto",viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:1,strokeLinecap:"round",strokeLinejoin:"round",children:[e.jsx("rect",{x:"2",y:"3",width:"20",height:"14",rx:"2"}),e.jsx("line",{x1:"8",y1:"21",x2:"16",y2:"21"}),e.jsx("line",{x1:"12",y1:"17",x2:"12",y2:"21"})]})}),e.jsx("p",{className:"text-sm text-muted mb-1",children:t("instances.empty")}),e.jsx("p",{className:"text-xs text-muted opacity-60",children:t("instances.emptyHint")})]}):e.jsxs("table",{className:"w-full text-sm",children:[e.jsx("thead",{children:e.jsxs("tr",{className:"text-xs text-muted border-b border-[var(--border)]",children:[e.jsx("th",{className:"text-left font-medium px-4 py-2",children:t("table.name")}),e.jsx("th",{className:"text-left font-medium px-4 py-2",children:t("table.status")}),e.jsx("th",{className:"text-left font-medium px-4 py-2 hidden sm:table-cell",children:t("table.uptime")}),e.jsx("th",{className:"text-left font-medium px-4 py-2 hidden md:table-cell",children:t("table.memory")}),e.jsx("th",{className:"text-right font-medium px-4 py-2",children:t("table.actions")})]})}),e.jsx("tbody",{className:"divide-y divide-[var(--border)]",children:l.map(s=>{var n,o,w;const a=((n=s.service)==null?void 0:n.status)||"stopped",i=a==="running";return e.jsxs("tr",{className:"hover:bg-[var(--card-hover)] cursor-pointer transition-colors duration-150",onClick:()=>g(`/instances/${s.id}`),children:[e.jsxs("td",{className:"px-4 py-2.5",children:[e.jsx("div",{className:"font-medium text-foreground",children:s.name}),e.jsx("div",{className:"text-xs text-muted font-mono",children:s.id})]}),e.jsx("td",{className:"px-4 py-2.5",children:e.jsxs("div",{className:"flex items-center gap-1.5",children:[e.jsx(G,{status:a}),((o=s.auto_backup)==null?void 0:o.enabled)&&e.jsx("span",{className:`text-xs leading-none ${s.auto_backup.last_backup_ok===!1?"text-red-400":"text-green-400"}`,title:s.auto_backup.last_backup_ok===!1?"Backup failed":"Backup OK",children:s.auto_backup.last_backup_ok===!1?"⚠":"●"})]})}),e.jsx("td",{className:"px-4 py-2.5 text-muted hidden sm:table-cell font-mono text-xs",children:i?q(s.service.uptime):"-"}),e.jsx("td",{className:"px-4 py-2.5 text-muted hidden md:table-cell font-mono text-xs",children:(w=s.service)!=null&&w.memory_mb?`${s.service.memory_mb} MB`:"-"}),e.jsx("td",{className:"px-4 py-2.5 text-right",children:e.jsx("div",{className:"inline-flex items-center gap-1",children:i||a==="pending"?e.jsxs(e.Fragment,{children:[e.jsx("button",{title:t("common:action.restart"),onClick:x=>f(x,"restart",s.id),disabled:!!h,className:"p-1.5 rounded-md text-muted hover:text-foreground hover:bg-[var(--card-hover)] disabled:opacity-30 transition-colors duration-150",children:e.jsx(k,{className:"w-3.5 h-3.5"})}),e.jsx("button",{title:t("common:action.stop"),onClick:x=>f(x,"stop",s.id),disabled:!!h,className:"p-1.5 rounded-md text-muted hover:text-red-400 hover:bg-red-500/10 disabled:opacity-30 transition-colors duration-150",children:e.jsx(M,{className:"w-3.5 h-3.5"})})]}):e.jsx("button",{title:t("common:action.start"),onClick:x=>f(x,"start",s.id),disabled:!!h,className:"p-1.5 rounded-md text-muted hover:text-emerald-400 hover:bg-emerald-500/10 disabled:opacity-30 transition-colors duration-150",children:e.jsx(R,{className:"w-3.5 h-3.5"})})})})]},s.id)})})]})]})]})}export{z as default};

package/public/assets/InitPassword-BEC8SE4A.js

@@ -0,0 +1 @@
+import{j as e,L as j,T as v,I as w,a as N,c as y,s as F}from"./index-BuTQtuNy.js";import{r}from"./vendor-react-B1-3Yrt-.js";import{u as S}from"./vendor-i18n-CfW0RvgE.js";const x="w-full bg-[var(--input-bg)] border border-[var(--border)] rounded-md px-3 py-2.5 text-sm text-foreground placeholder-[var(--muted)] focus:outline-none focus:ring-1 focus:ring-[#0066FF]/60 focus:border-[#0066FF]/60 transition-colors duration-200";function C({onDone:h}){const{t}=S("auth"),[s,p]=r.useState(""),[n,b]=r.useState(""),[o,f]=r.useState(!1),[l,d]=r.useState(""),[c,m]=r.useState(!1),u=s.length>=8&&s===n,g=async a=>{if(a.preventDefault(),!!u){d(""),m(!0);try{const i=await y(s);F(i.token),h()}catch(i){d(i.message||t("init.failed"))}finally{m(!1)}}};return e.jsxs("div",{className:"min-h-screen flex items-center justify-center p-4 bg-background relative overflow-hidden",children:[e.jsx("div",{className:"grid-bg absolute inset-0 pointer-events-none"}),e.jsx("div",{className:"absolute top-1/3 left-1/2 -translate-x-1/2 -translate-y-1/2 w-[500px] h-[300px] rounded-full bg-[#0066FF]/[0.07] blur-[90px] pointer-events-none"}),e.jsx("div",{className:"absolute top-4 right-4 z-20",children:e.jsx(j,{})}),e.jsxs("div",{className:"w-full max-w-sm relative z-10",children:[e.jsxs("div",{className:"text-center mb-8",children:[e.jsx(v,{className:"w-40 h-40 mx-auto mb-4 object-contain"}),e.jsx("p",{className:"text-sm text-muted mt-1",children:t("init.title")})]}),e.jsxs("form",{onSubmit:g,className:"space-y-4",children:[l&&e.jsx("div",{className:"bg-red-500/10 border border-red-500/20 text-red-400 text-sm rounded-lg px-3 py-2.5",children:l}),e.jsxs("div",{children:[e.jsx("label",{className:"block text-sm font-medium text-muted mb-1.5",children:t("init.password")}),e.jsxs("div",{className:"relative",children:[e.jsx("input",{type:o?"text":"password",value:s,onChange:a=>p(a.target.value),placeholder:t("init.passwordPlaceholder"),className:`${x} pr-10`,autoFocus:!0}),e.jsx("button",{type:"button",onClick:()=>f(!o),className:"absolute right-3 top-1/2 -translate-y-1/2 text-muted hover:text-foreground transition-colors duration-200",children:o?e.jsx(w,{}):e.jsx(N,{})})]})]}),e.jsxs("div",{children:[e.jsx("label",{className:"block text-sm font-medium text-muted mb-1.5",children:t("init.confirm")}),e.jsx("input",{type:o?"text":"password",value:n,onChange:a=>b(a.target.value),placeholder:t("init.confirmPlaceholder"),className:x}),s&&n&&s!==n&&e.jsx("p",{className:"text-red-400 text-xs mt-1.5",children:t("init.mismatch")})]}),e.jsx("button",{type:"submit",disabled:c||!u,className:"w-full bg-[#0066FF] text-white rounded-md py-2.5 text-sm font-medium hover:bg-[#0066FF]/90 disabled:opacity-40 disabled:cursor-not-allowed transition-all duration-200 shadow-[0_0_20px_rgba(0,102,255,0.3)] hover:shadow-[0_0_28px_rgba(0,102,255,0.45)]",children:c?e.jsxs("span",{className:"inline-flex items-center gap-2",children:[e.jsx("span",{className:"w-3.5 h-3.5 border-2 border-white/30 border-t-white rounded-full animate-spin"}),t("init.loading")]}):t("init.submit")})]})]})]})}export{C as default};