jishushell 0.4.2 → 0.4.17

package/dist/cli/panel.js

@@ -0,0 +1,734 @@
+/**
+ * src/cli/panel.ts
+ * 面板管理统一模块 — 整合 start/stop/restart/status/serve/onboard/reset/update/config/install/uninstall
+ *
+ * 依赖层次：
+ *   cli/panel.ts  →  services/panel-manager.ts (纯逻辑，无 I/O)
+ *   cli/panel.ts  →  services/update-manager.ts (纯逻辑，无 I/O)
+ *   cli/panel.ts  →  services/job-manager.ts    (纯逻辑，无 I/O)
+ * 所有终端输出/格式化均在本文件完成。
+ */
+import { execSync, execFileSync } from "child_process";
+import { existsSync, unlinkSync } from "fs";
+import { join } from "path";
+import { networkInterfaces } from "os";
+import { parsePort, hasFlag } from "./helpers.js";
+import { detectRunMode, getPanelPort, isPortListening, readAlivePid, systemdStatus, startPanel, stopPanel, restartPanel, } from "../services/panel-manager.js";
+import { checkUpdate, upgradePackage, scheduleRestart, getInstalledGlobalVersion, isVersionAtLeast, markUpdateRestarting, markUpdateFailed, } from "../services/update-manager.js";
+import { getSvc, listInstanceIds, readInstanceMeta } from "../services/job-manager.js";
+import { deleteInstance } from "../services/instance-manager.js";
+import { JISHUSHELL_HOME, getPanelConfig, getNomadToken, getNomadAddr, savePanelConfig } from "../config.js";
+import { loadNomadToken } from "../services/setup-manager.js";
+import { isInitialized, initPassword } from "../auth.js";
+const DEFAULT_PORT = 8090;
+// ── ANSI colours (CLI-only, stripped when not a TTY) ──────────────────────
+const isTTY = process.stdout.isTTY ?? false;
+const c = {
+    bold: (s) => isTTY ? `\x1b[1m${s}\x1b[0m` : s,
+    green: (s) => isTTY ? `\x1b[32m${s}\x1b[0m` : s,
+    yellow: (s) => isTTY ? `\x1b[33m${s}\x1b[0m` : s,
+    red: (s) => isTTY ? `\x1b[31m${s}\x1b[0m` : s,
+    cyan: (s) => isTTY ? `\x1b[36m${s}\x1b[0m` : s,
+    dim: (s) => isTTY ? `\x1b[2m${s}\x1b[0m` : s,
+};
+function log(msg) { process.stdout.write(msg + "\n"); }
+// ── 面板进程生命周期 ─────────────────────────────────────────────────────────
+export async function runStart(rest) {
+    const result = await startPanel(parsePort(rest));
+    if (result.alreadyRunning) {
+        log(c.yellow(`! JishuShell is already running on port ${result.port}`));
+        log(c.dim(`  Run ${c.bold("jishushell stop")} first, or ${c.bold("jishushell restart")}`));
+        return;
+    }
+    log(c.dim(`  run mode: ${result.mode}  |  port: ${result.port}`));
+    log(c.dim("  Waiting for panel to start…"));
+    if (result.started) {
+        log(c.green(`✓ JishuShell started  →  http://localhost:${result.port}`));
+    }
+    else {
+        log(c.yellow(`! Port ${result.port} still not listening after 10s.`));
+        if (result.logFile) {
+            log(c.dim(`  Check logs: ${result.logFile}`));
+        }
+        else {
+            log(c.dim("  Check logs: journalctl -u jishushell -n 50"));
+        }
+    }
+}
+export async function runStop(rest) {
+    const withJobs = hasFlag(rest, "--jobs", "-j");
+    if (withJobs) {
+        loadNomadToken();
+        const instanceIds = listInstanceIds();
+        if (instanceIds.length > 0) {
+            log(c.dim(`  Stopping ${instanceIds.length} Nomad job(s)…`));
+            const svc = await getSvc();
+            await Promise.allSettled(instanceIds.map(async (id) => {
+                const meta = readInstanceMeta(id);
+                const name = meta?.name || id;
+                const result = await svc.stopInstance(id);
+                if (result.ok) {
+                    log(`    ${c.green("✓")} stopped job: ${name}`);
+                }
+                else {
+                    log(`    ${c.dim("–")} ${result.error || "already stopped"}: ${name}`);
+                }
+            }));
+            log("");
+        }
+        log(c.dim("  Stopping JishuShell panel…"));
+    }
+    const result = await stopPanel();
+    log(c.dim(`  run mode: ${result.mode}`));
+    log(c.green("✓ JishuShell stopped"));
+}
+export async function runRestart(rest) {
+    const result = await restartPanel(parsePort(rest));
+    log(c.dim(`  run mode: ${result.mode}  |  port: ${result.port}`));
+    if (result.started) {
+        log(c.green(`✓ JishuShell restarted  →  http://localhost:${result.port}`));
+    }
+    else {
+        log(c.yellow("! Panel did not come back up within 10s."));
+        if (result.logFile) {
+            log(c.dim(`  Check logs: ${result.logFile}`));
+        }
+        else {
+            log(c.dim("  Check: journalctl -u jishushell -n 50"));
+        }
+    }
+}
+// ── status ────────────────────────────────────────────────────────────────
+export async function runStatus() {
+    loadNomadToken();
+    const port = getPanelPort();
+    const mode = detectRunMode();
+    const nomadAddr = getNomadAddr();
+    log("");
+    log(c.bold(c.cyan("  JishuShell Status")));
+    log(c.dim("  ─────────────────────────────────────────────────────"));
+    log("");
+    // ── 1. Panel ──────────────────────────────────────────────────────────
+    log(`  ${c.bold("Panel (CLI)")}`);
+    const panelListening = isPortListening(port);
+    const pid = readAlivePid();
+    if (panelListening) {
+        log(`    ${c.green("●")} ${c.green("running")}  →  port :${port}`);
+    }
+    else {
+        log(`    ${c.red("○")} ${c.red("stopped")}`);
+    }
+    log(`    ${c.dim("run mode:")} ${mode}`);
+    if (mode === "systemd") {
+        const svcStatus = systemdStatus();
+        log(`    ${c.dim("systemd:")} ${svcStatus === "active" ? c.green(svcStatus) : c.yellow(svcStatus)}`);
+    }
+    else if (mode === "process" && pid !== null) {
+        log(`    ${c.dim("pid:")} ${pid}`);
+    }
+    log(`    ${c.dim("url:")} http://localhost:${port}`);
+    log("");
+    // ── 2. Docker ─────────────────────────────────────────────────────────
+    log(`  ${c.bold("Docker")}`);
+    let dockerOk = false;
+    let dockerDetail = "daemon unreachable";
+    try {
+        execFileSync("docker", ["info"], { stdio: "ignore", timeout: 5000 });
+        const ver = execSync("docker --version 2>/dev/null", { encoding: "utf-8", timeout: 3000 }).trim();
+        dockerOk = true;
+        dockerDetail = ver.replace("Docker version ", "").split(",")[0];
+    }
+    catch {
+        try {
+            execFileSync("sudo", ["-n", "docker", "info"], { stdio: "ignore", timeout: 5000 });
+            dockerOk = true;
+            dockerDetail = "running (via sudo — re-login to activate docker group)";
+        }
+        catch { }
+    }
+    if (dockerOk) {
+        log(`    ${c.green("●")} ${c.green("running")}  ${c.dim(dockerDetail)}`);
+    }
+    else {
+        log(`    ${c.red("○")} ${c.red("stopped")}  ${c.dim(dockerDetail)}`);
+    }
+    log("");
+    // ── 3. Nomad ──────────────────────────────────────────────────────────
+    log(`  ${c.bold("Nomad")}`);
+    const token = getNomadToken();
+    const nomadHeaders = token ? { "X-Nomad-Token": token } : {};
+    let nomadAgent = null;
+    try {
+        const res = await fetch(`${nomadAddr}/v1/agent/self`, {
+            headers: nomadHeaders, signal: AbortSignal.timeout(5000),
+        });
+        if (res.ok)
+            nomadAgent = await res.json();
+    }
+    catch { /* unreachable */ }
+    const nomadRunning = nomadAgent !== null;
+    if (nomadRunning) {
+        const version = nomadAgent?.config?.Version?.Version || nomadAgent?.member?.Tags?.version || "";
+        log(`    ${c.green("●")} ${c.green("running")}  →  ${nomadAddr}${version ? "  " + c.dim("v" + version) : ""}`);
+    }
+    else {
+        log(`    ${c.red("○")} ${c.red("stopped")}  ${c.dim("(" + nomadAddr + " unreachable)")}`);
+    }
+    log("");
+    // ── 4. Jobs (instances) ───────────────────────────────────────────────
+    const instanceIds = listInstanceIds();
+    log(`  ${c.bold("Nomad Jobs")}  ${c.dim("(" + instanceIds.length + " instance" + (instanceIds.length !== 1 ? "s" : "") + ")")}`);
+    if (instanceIds.length === 0) {
+        log(`    ${c.dim("(no instances created)")}`);
+    }
+    else if (!nomadRunning) {
+        log(`    ${c.dim("(Nomad not reachable — cannot query job status)")}`);
+        for (const id of instanceIds) {
+            const meta = readInstanceMeta(id);
+            log(`    ${c.dim("??")}  ${(meta?.name || id).padEnd(20)}  ${c.dim(id)}`);
+        }
+    }
+    else {
+        const svc = await getSvc();
+        for (const id of instanceIds) {
+            const meta = readInstanceMeta(id);
+            let statusStr = "unknown";
+            let statusColor = c.dim;
+            try {
+                const st = await svc.getStatus(id);
+                statusStr = st.status;
+                if (st.status === "running")
+                    statusColor = c.green;
+                else if (st.status === "pending")
+                    statusColor = c.yellow;
+                else if (st.status === "failed")
+                    statusColor = c.red;
+            }
+            catch { /* keep unknown */ }
+            const runtime = meta?.runtime;
+            let portInfo = "";
+            if (runtime) {
+                const envPort = runtime.env?.OPENCLAW_GATEWAY_PORT;
+                const args = runtime.args || [];
+                const argsPort = (() => {
+                    for (let i = 0; i < args.length - 1; i++) {
+                        if (args[i] === "--port")
+                            return args[i + 1];
+                    }
+                    return null;
+                })();
+                const gp = envPort || argsPort;
+                if (gp)
+                    portInfo = c.dim(`  gateway :${gp}`);
+            }
+            const dot = statusStr === "running" ? c.green("●")
+                : statusStr === "pending" ? c.yellow("●")
+                    : statusStr === "failed" ? c.red("●")
+                        : c.dim("○");
+            log(`    ${dot}  ${(meta?.name || id).padEnd(20)}  ${statusColor(statusStr.padEnd(14))}${portInfo}`);
+        }
+    }
+    log("");
+}
+// ── onboard ───────────────────────────────────────────────────────────────
+function getLocalIP() {
+    try {
+        for (const list of Object.values(networkInterfaces())) {
+            for (const iface of list ?? []) {
+                if (!iface.internal && iface.family === "IPv4")
+                    return iface.address;
+            }
+        }
+    }
+    catch { }
+    return "127.0.0.1";
+}
+function readPassword(prompt) {
+    return new Promise((resolve, reject) => {
+        process.stdout.write(prompt);
+        if (process.stdin.isTTY) {
+            process.stdin.setRawMode(true);
+            process.stdin.resume();
+            let input = "";
+            const onData = (buf) => {
+                const char = buf.toString("utf-8");
+                if (char === "\r" || char === "\n") {
+                    process.stdin.setRawMode(false);
+                    process.stdin.pause();
+                    process.stdin.off("data", onData);
+                    process.stdout.write("\n");
+                    resolve(input);
+                }
+                else if (char === "\u0003") {
+                    process.stdin.setRawMode(false);
+                    process.stdout.write("\n");
+                    reject(new Error("Interrupted"));
+                }
+                else if (char === "\u007f" || char === "\b") {
+                    if (input.length > 0)
+                        input = input.slice(0, -1);
+                }
+                else if (char >= " ") {
+                    input += char;
+                }
+            };
+            process.stdin.on("data", onData);
+        }
+        else {
+            let input = "";
+            process.stdin.resume();
+            process.stdin.setEncoding("utf-8");
+            const onData = (chunk) => {
+                const nl = chunk.indexOf("\n");
+                if (nl >= 0) {
+                    input += chunk.slice(0, nl);
+                    process.stdin.off("data", onData);
+                    process.stdin.pause();
+                    resolve(input.replace(/\r$/, "").trim());
+                }
+                else {
+                    input += chunk;
+                }
+            };
+            process.stdin.on("data", onData);
+        }
+    });
+}
+export async function runOnboard(rest) {
+    const force = hasFlag(rest, "--force", "-f");
+    log("");
+    log(c.bold(c.cyan("  JishuShell Onboard")));
+    log(c.dim("  ─────────────────────────────────────────"));
+    log("");
+    const cfg = getPanelConfig();
+    if (!cfg.service_manager) {
+        log(c.red("  ✗  JishuShell is not installed yet."));
+        log(c.dim("  Run ") + c.bold("jishushell install") + c.dim(" first."));
+        log("");
+        process.exit(1);
+    }
+    const port = getPanelPort();
+    if (!isPortListening(port)) {
+        log(c.yellow(`  !  Panel is not running on port ${port}.`));
+        log(c.dim("  Start it with: ") + c.bold("jishushell start"));
+        log("");
+        process.exit(1);
+    }
+    const initialized = isInitialized();
+    if (initialized && !force) {
+        const ip = getLocalIP();
+        log(c.green("  ✓  JishuShell is already onboarded."));
+        log("");
+        log(`  Panel:  ${c.bold(c.cyan(`http://${ip}:${port}`))}`);
+        log(`  Local:  ${c.bold(c.cyan(`http://localhost:${port}`))}`);
+        log("");
+        log(c.dim("  Tip: ") + c.bold("jishushell onboard --force") + c.dim(" resets the admin password."));
+        log("");
+        return;
+    }
+    if (initialized) {
+        log(c.yellow("  !  Resetting admin password (--force)."));
+    }
+    else {
+        log("  " + c.bold("Welcome!") + " Set your admin password to start using JishuShell.");
+    }
+    log("");
+    let password = "";
+    for (;;) {
+        try {
+            password = await readPassword("  Password (≥8 chars): ");
+        }
+        catch {
+            log(c.yellow("  Interrupted."));
+            process.exit(1);
+        }
+        if (password.length < 8) {
+            log(c.red("  ✗  Minimum 8 characters. Try again."));
+            continue;
+        }
+        let confirm = "";
+        try {
+            confirm = await readPassword("  Confirm password:    ");
+        }
+        catch {
+            log(c.yellow("  Interrupted."));
+            process.exit(1);
+        }
+        if (password !== confirm) {
+            log(c.red("  ✗  Passwords do not match. Try again."));
+            continue;
+        }
+        break;
+    }
+    await initPassword(password);
+    const ip = getLocalIP();
+    log("");
+    log(c.bold(c.green("  ✓  Onboarding complete!")));
+    log("");
+    log(`  Open your browser:  ${c.bold(c.cyan(`http://${ip}:${port}`))}`);
+    log(`  Or locally:         ${c.bold(c.cyan(`http://localhost:${port}`))}`);
+    log("");
+    log(c.dim("  Log in with your password, then configure your LLM provider in Settings."));
+    log("");
+}
+// ── reset ─────────────────────────────────────────────────────────────────
+export async function runReset(rest) {
+    const yes = hasFlag(rest, "--yes", "-y");
+    loadNomadToken();
+    log("");
+    log(c.bold(c.yellow("  ⚠  JishuShell Reset")));
+    log(c.dim("  ─────────────────────────────────────────────────────"));
+    log("");
+    log("  This will:");
+    log(`    ${c.dim("•")} Stop all instances and purge them from the scheduler`);
+    log(`    ${c.dim("•")} Delete all instance directories (~/.jishushell/instances/)`);
+    log(`    ${c.dim("•")} Stop the JishuShell panel`);
+    log(`    ${c.dim("•")} Reset auth credentials and LLM provider config`);
+    log(`    ${c.dim("•")} Preserve infrastructure config (Docker image, service manager, port)`);
+    log("");
+    log(`  ${c.bold(c.yellow("Custom openclaw_home paths outside ~/.jishushell are NOT removed."))}`);
+    log(`  ${c.dim("After reset: restart the panel and open")} ${c.bold(`http://localhost:${getPanelPort()}`)} ${c.dim("to reconfigure.")}`);
+    log("");
+    if (!yes) {
+        if (!process.stdin.isTTY) {
+            log(c.red("  ✗  Reset requires interactive confirmation. Pass --yes to skip."));
+            log("");
+            process.exit(1);
+        }
+        const answer = await new Promise((resolve) => {
+            process.stdout.write(`  Type ${c.bold("RESET")} to continue, or press Enter to cancel: `);
+            let buf = "";
+            const onData = (chunk) => {
+                const str = chunk.toString("utf-8");
+                const nl = str.indexOf("\n");
+                if (nl >= 0) {
+                    buf += str.slice(0, nl);
+                    process.stdin.off("data", onData);
+                    process.stdin.pause();
+                    process.stdout.write("\n");
+                    resolve(buf.trim());
+                }
+                else {
+                    buf += str;
+                }
+            };
+            process.stdin.resume();
+            process.stdin.on("data", onData);
+        });
+        if (answer !== "RESET") {
+            log(c.dim("  Cancelled."));
+            log("");
+            return;
+        }
+    }
+    log("");
+    // 1. Purge jobs and delete instance directories
+    const instanceIds = listInstanceIds();
+    if (instanceIds.length > 0) {
+        log(c.dim(`  Removing ${instanceIds.length} instance(s)…`));
+        const svc = await getSvc();
+        for (const id of instanceIds) {
+            const meta = readInstanceMeta(id);
+            const name = meta?.name || id;
+            // Stop from scheduler (best-effort — may already be gone if Nomad is down)
+            await svc.stopInstance(id, true).catch(() => { });
+            // Delete local directory
+            const del = await deleteInstance(id);
+            if (del.ok) {
+                log(`    ${c.green("✓")} removed: ${name}`);
+            }
+            else {
+                log(`    ${c.yellow("!")} could not fully remove ${name}`);
+            }
+            if (del.warnings?.length) {
+                for (const w of del.warnings)
+                    log(`      ${c.dim(w)}`);
+            }
+        }
+    }
+    // 2. Stop panel
+    const port = getPanelPort();
+    if (isPortListening(port)) {
+        log(c.dim("  Stopping panel…"));
+        try {
+            await stopPanel();
+        }
+        catch { /* best-effort */ }
+    }
+    // 3. Selectively clear panel.json: preserve infrastructure settings
+    //    (service_manager, nomad_driver, openclaw_image, nomad_token, panel_port,
+    //    npm_registry) so the user does NOT need to reinstall Docker/Nomad/OpenClaw.
+    //    Only user-owned fields (default_provider and related LLM config) are cleared.
+    const PANEL_CONFIG = join(JISHUSHELL_HOME, "panel.json");
+    const INFRA_KEYS = new Set([
+        "service_manager", "nomad_driver", "openclaw_image",
+        "nomad_token", "panel_port", "npm_registry",
+    ]);
+    try {
+        const cfg = getPanelConfig();
+        const preserved = {};
+        for (const key of Object.keys(cfg)) {
+            if (INFRA_KEYS.has(key))
+                preserved[key] = cfg[key];
+        }
+        savePanelConfig(preserved);
+        log(`    ${c.green("✓")} reset panel config (infrastructure settings preserved)`);
+        // Remove panel.json backups (stale, not needed after a clean reset)
+        for (const f of [`${PANEL_CONFIG}.bak`, `${PANEL_CONFIG}.bak.1`, `${PANEL_CONFIG}.bak.2`]) {
+            try {
+                if (existsSync(f)) {
+                    unlinkSync(f);
+                }
+            }
+            catch { /* best-effort */ }
+        }
+    }
+    catch (e) {
+        log(`    ${c.yellow("!")} could not reset panel config: ${e.message}`);
+    }
+    // 4. Delete auth and secret files
+    const AUTH_FILE = join(JISHUSHELL_HOME, "auth.json");
+    const JWT_FILE = join(JISHUSHELL_HOME, "jwt-secret");
+    const ENCRYPT_KEY = join(JISHUSHELL_HOME, "encryption-key");
+    const filesToRemove = [
+        AUTH_FILE,
+        `${AUTH_FILE}.bak`, `${AUTH_FILE}.bak.1`, `${AUTH_FILE}.bak.2`,
+        JWT_FILE,
+        ENCRYPT_KEY,
+    ];
+    for (const f of filesToRemove) {
+        try {
+            if (existsSync(f)) {
+                unlinkSync(f);
+                log(`    ${c.green("✓")} removed: ${f}`);
+            }
+        }
+        catch (e) {
+            log(`    ${c.yellow("!")} could not remove ${f}: ${e.message}`);
+        }
+    }
+    log("");
+    log(c.bold(c.green("  ✓  Reset complete.")));
+    log("");
+    log(`  To reconfigure: restart the panel, then open ${c.bold(`http://localhost:${port}`)}`);
+    log("");
+}
+// ── update ────────────────────────────────────────────────────────────────
+export async function runUpdateCheck() {
+    const info = await checkUpdate();
+    console.log(JSON.stringify(info));
+    process.exit(info.hasUpdate ? 0 : 1);
+}
+export async function runUpdate() {
+    log("");
+    log(c.bold("  Updating JishuShell…"));
+    const { currentVersion, latestVersion } = await checkUpdate();
+    const expectedVersion = process.env.JISHUSHELL_UPDATE_TARGET_VERSION || latestVersion;
+    const trackedCurrentVersion = process.env.JISHUSHELL_UPDATE_CURRENT_VERSION || currentVersion;
+    const trackedWebUpdate = process.env.JISHUSHELL_WEB_UPDATE === "1";
+    log(c.dim(`  current: ${currentVersion}  →  latest: ${expectedVersion}`));
+    log(c.dim("  Running: npm install -g jishushell …"));
+    try {
+        const { output } = await upgradePackage();
+        if (output)
+            log(c.dim(output));
+        const installedVersion = getInstalledGlobalVersion();
+        if (!isVersionAtLeast(installedVersion, expectedVersion)) {
+            throw new Error(`npm -g version is still ${installedVersion}, expected at least ${expectedVersion}`);
+        }
+        if (trackedWebUpdate) {
+            markUpdateRestarting(expectedVersion, trackedCurrentVersion, installedVersion);
+        }
+    }
+    catch (err) {
+        if (trackedWebUpdate) {
+            markUpdateFailed(err.message || "Update failed", trackedCurrentVersion);
+        }
+        log(c.red(`  ✗  npm install failed: ${err.message}`));
+        throw err;
+    }
+    log(c.green("  ✓  Package updated."));
+    log(c.dim("  Scheduling panel restart in 2 s…"));
+    scheduleRestart(2000);
+    log(c.green("  ✓  Restart scheduled — panel will reconnect shortly."));
+}
+// ── serve：前台服务器（systemd/launchd ExecStart）────────────────────────────
+export async function runServe(rest) {
+    const { createServer } = await import("../server.js");
+    const { getPanelConfig } = await import("../config.js");
+    // Priority: --port flag > panel.json panel_port > 8090
+    const config = getPanelConfig();
+    let port = Number(config.panel_port) || DEFAULT_PORT;
+    let host = "0.0.0.0";
+    for (let i = 0; i < rest.length; i++) {
+        let portVal;
+        if (rest[i] === "--port" && rest[i + 1]) {
+            portVal = rest[++i];
+        }
+        else if (rest[i].startsWith("--port=")) {
+            portVal = rest[i].slice("--port=".length);
+        }
+        else if (rest[i] === "--host" && rest[i + 1]) {
+            host = rest[++i];
+        }
+        else if (rest[i].startsWith("--host=")) {
+            host = rest[i].slice("--host=".length);
+        }
+        if (portVal !== undefined) {
+            const parsed = parseInt(portVal, 10);
+            if (isNaN(parsed) || parsed < 0 || parsed > 65535) {
+                console.error(`Invalid port: ${portVal}. Must be 0-65535.`);
+                process.exit(1);
+            }
+            port = parsed;
+        }
+    }
+    await createServer({ port, host });
+}
+// ── config：panel.json 读写 ──────────────────────────────────────────────────
+export async function runConfig(rest) {
+    const cfgCmd = rest[0];
+    if (cfgCmd === "get") {
+        const cfg = getPanelConfig();
+        const key = rest[1];
+        if (key) {
+            const val = cfg[key];
+            if (val === undefined) {
+                process.stdout.write(c.dim("  (not set)") + "\n");
+            }
+            else {
+                console.log(typeof val === "object" ? JSON.stringify(val, null, 2) : String(val));
+            }
+        }
+        else {
+            console.log(JSON.stringify(cfg, null, 2));
+        }
+    }
+    else if (cfgCmd === "set" && rest[1] && rest[2]) {
+        const ALLOWED_KEYS = ["service_manager", "nomad_driver", "openclaw_image", "panel_port", "npm_registry"];
+        const key = rest[1];
+        const value = rest[2];
+        if (!ALLOWED_KEYS.includes(key)) {
+            log(c.red(`  ✗  Unknown config key: ${key}`));
+            log(c.dim(`     Allowed: ${ALLOWED_KEYS.join(", ")}`));
+            process.exitCode = 1;
+            return;
+        }
+        const cfg = getPanelConfig();
+        const numVal = parseInt(value, 10);
+        cfg[key] = !isNaN(numVal) && String(numVal) === value ? numVal : value;
+        savePanelConfig(cfg);
+        log(c.green(`  ✓  ${key} = ${value}`));
+    }
+    else {
+        console.log(`
+Usage: jishushell config <command>
+
+Commands:
+  get [key]           查看配置（不指定 key 则显示全部）
+  set <key> <value>   修改配置项
+
+Allowed keys:
+  service_manager    服务管理器类型（nomad / process）
+  nomad_driver       Nomad driver（docker）
+  openclaw_image     OpenClaw Docker 镜像
+  panel_port         面板端口
+  npm_registry       npm 镜像源
+
+Examples:
+  jishushell config get
+  jishushell config get panel_port
+  jishushell config set panel_port 8090
+`);
+        if (cfgCmd)
+            process.exit(1);
+    }
+}
+// ── install / uninstall ──────────────────────────────────────────────────────
+export function brief() {
+    return "  serve [--port N]                                 前台启动面板服务器（默认端口 8090）\n  start|stop|restart|status|config|onboard         面板生命周期与配置";
+}
+export async function runInstallCmd(rest) {
+    const { runInstall, parseInstallArgs } = await import("../install.js");
+    const opts = parseInstallArgs(rest);
+    await runInstall(opts);
+}
+export async function runUninstall(rest) {
+    const yes = hasFlag(rest, "--yes", "-y");
+    const { spawnSync } = await import("child_process");
+    const uninstallSh = join(JISHUSHELL_HOME, "install", "post-uninstall.sh");
+    if (!existsSync(uninstallSh)) {
+        console.error(`Uninstall script not found: ${uninstallSh}`);
+        console.error("Please run: sudo bash ~/.jishushell/install/jishu-uninstall.sh --data --yes");
+        process.exit(1);
+    }
+    if (!yes) {
+        const { createInterface } = await import("readline");
+        const rl = createInterface({ input: process.stdin, output: process.stdout });
+        await new Promise((resolve) => {
+            rl.question("This will stop all services, remove auto-start and delete ~/.jishushell. Continue? [y/N] ", (ans) => {
+                rl.close();
+                if (ans.toLowerCase() !== "y") {
+                    console.log("Cancelled.");
+                    process.exit(0);
+                }
+                resolve();
+            });
+        });
+    }
+    const cleanResult = spawnSync("bash", [uninstallSh], { stdio: "inherit" });
+    const npmResult = spawnSync("npm", ["uninstall", "-g", "jishushell"], { stdio: "inherit" });
+    process.exit((cleanResult.status ?? 0) || (npmResult.status ?? 0));
+}
+// ── 统一入口 ──────────────────────────────────────────────────────────────────
+export function printHelp() {
+    console.log(`
+Usage: jishushell <command> [options]
+
+Panel commands:
+  start   [--port N]              启动面板
+  stop    [--jobs]                停止面板（--jobs 同时停止所有实例）
+  restart [--port N]              重启面板
+  status                          面板状态总览
+  serve   [--port N] [--host H]   前台运行（适合 Docker 等场景）
+  onboard [--pass P]              初始化密码向导
+  reset                           重置面板数据
+  config  [key] [value]           查看或修改配置项
+  update-check                    检查新版本
+  update                          升级到最新版本
+  install [options]               安装服务（systemd / Docker / 直接运行）
+  uninstall [--yes]               卸载面板及所有数据
+
+Run 'jishushell <command> help' for details.
+`);
+}
+export async function run(rest) {
+    const cmd = rest[0];
+    const args = rest.slice(1);
+    switch (cmd) {
+        case "start": return runStart(args);
+        case "stop": return runStop(args);
+        case "restart": return runRestart(args);
+        case "status": return runStatus();
+        case "serve": return runServe(args);
+        case "onboard": return runOnboard(args);
+        case "reset": return runReset(args);
+        case "update-check": return runUpdateCheck();
+        case "update": return runUpdate();
+        case "config": return runConfig(args);
+        case "install": return runInstallCmd(args);
+        case "uninstall": return runUninstall(args);
+        case "help":
+        case "--help":
+        case "-h":
+            printHelp();
+            return;
+        default:
+            printHelp();
+            if (cmd) {
+                console.error(`Unknown panel command: ${cmd}`);
+                process.exit(1);
+            }
+    }
+}
+//# sourceMappingURL=panel.js.map