npm - jishushell - Versions diffs - 0.5.15 → 0.6.5 - Mend

jishushell 0.5.15 → 0.6.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (2949) hide show

package/dist/routes/system.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"system.js","sourceRoot":"","sources":["../../src/routes/system.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAErG,MAAM,aAAa,GAAG,IAAI,QAAQ,CAAS,SAAS,CAAC,CAAC,CAAC,SAAS;AAEhE,SAAS,kBAAkB;IACzB,OAAO,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE;QAC5B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,sBAAsB,EAAE,CAAC;YACrC,OAAO,YAAY,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;QACpG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB;IACzB,MAAM,GAAG,GAA2B,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EAAE,CAAC;IACvE,MAAM,OAAO,GAAG,CAAC,cAAc,EAAE,CAAC,eAAe,IAAI,EAAE,CAGtD,CAAC;IACF,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,GAAG,GAAG,KAAK,CAAC,kBAAkB,IAAI,KAAK,CAAC,YAAY,CAAC;QAC3D,IAAI,GAAG;YAAE,GAAG,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC;IAChC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAoB;IACrD,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC;QACvC,sEAAsE;QACtE,gEAAgE;QAChE,+BAA+B;QAC9B,MAAc,CAAC,gBAAgB,GAAG,kBAAkB,EAAE,CAAC;QACvD,MAAc,CAAC,gBAAgB,GAAG,kBAAkB,EAAE,CAAC;QACvD,MAAc,CAAC,SAAS,GAAG,WAAW,EAAE,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,2BAA2B,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QAC1D,MAAM,SAAS,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACxD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,CAAC,+CAA+C;QAC9D,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,2BAA2B,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACzD,IAAI,CAAC;YACH,OAAO,eAAe,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACnD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpB,OAAO,KAAK,CAAC,IAAI,CAAC;oBAChB,EAAE,EAAE,IAAI;oBACR,MAAM,EAAE,WAAW;oBACnB,cAAc,EAAE,IAAI,CAAC,cAAc;oBACnC,aAAa,EAAE,IAAI,CAAC,cAAc;oBAClC,OAAO,EAAE,qBAAqB;iBAC/B,CAAC,CAAC;YACL,CAAC;YAED,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;YACjC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,IAAI,4BAA4B,EAAE,CAAC,CAAC;YAC5F,CAAC;YAED,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAC7C,OAAO,KAAK,CAAC,IAAI,CAAC;gBAChB,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,OAAO,EAAE,mBAAmB,IAAI,CAAC,cAAc,OAAO,IAAI,CAAC,aAAa,EAAE;aAC3E,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,0BAA0B;IAC1B,4EAA4E;IAC5E,8EAA8E;IAC9E,4EAA4E;IAC5E,mEAAmE;IACnE,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QAC7D,MAAM,EACJ,aAAa,EACb,kBAAkB,EAClB,YAAY,EACZ,aAAa,GACd,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;QACnD,MAAM,EAAE,qBAAqB,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAC;QAErG,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,MAAM,OAAO,GAAwE,EAAE,CAAC;QAExF,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,EAAY,CAAC;YACrC,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;YAE5B,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;gBAChD,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;gBACnE,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;oBACjC,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;oBAC/C,SAAS;gBACX,CAAC;gBAED,MAAM,GAAG,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;gBAC1C,MAAM,OAAO,GAA2B,EAAE,CAAC;gBAE3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC/C,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;wBAAE,SAAS;oBACxC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;oBACtE,IAAI,UAAU,IAAI,SAAS,EAAE,CAAC;wBAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;wBACxC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACrB,CAAC;gBACH,CAAC;gBAED,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpC,aAAa,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;gBAC1C,CAAC;YACH,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;YAED,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;IAC9C,CAAC,CAAC,CAAC;AAEL,CAAC"}
1	+ {"version":3,"file":"system.js","sourceRoot":"","sources":["../../src/routes/system.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACrG,OAAO,EAAE,eAAe,EAAE,yBAAyB,EAAwB,MAAM,kCAAkC,CAAC;AACpH,OAAO,EAAE,8BAA8B,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjH,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAE9D,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,YAAY,EAAE,YAAY,EAAE,oBAAoB,EAAE,qBAAqB;IACvE,IAAI,EAAE,SAAS,EAAE,mBAAmB,EAAE,SAAS;CAChD,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,IAAI,QAAQ,CAAS,SAAS,CAAC,CAAC,CAAC,SAAS;AAChE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAwB,CAAC;AAC7H,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,CAAC;AAEzC;;;;;;;;GAQG;AACH,SAAS,gBAAgB;IACvB,IAAI,CAAC;QACH,qEAAqE;QACrE,0DAA0D;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CACzB,YAAY,CAAC,IAAI,GAAG,CAAC,kDAAkD,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAC5E,CAAC;QAC1B,OAAO,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5G,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AACD,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;AAEzC,SAAS,kBAAkB;IACzB,OAAO,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE;QAC5B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,sBAAsB,EAAE,CAAC;YACrC,OAAO,YAAY,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;QACpG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB;IACzB,MAAM,GAAG,GAA2B,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EAAE,CAAC;IACvE,MAAM,OAAO,GAAG,CAAC,aAAa,EAAE,CAAC,eAAe,IAAI,EAAE,CAGrD,CAAC;IACF,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,GAAG,GAAG,KAAK,CAAC,kBAAkB,IAAI,KAAK,CAAC,YAAY,CAAC;QAC3D,IAAI,GAAG;YAAE,GAAG,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC;IAChC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAoB;IACrD,GAAG,CAAC,GAAG,CAAC,GAAG,wBAAwB,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC5D,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5E,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9C,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,QAAQ,GAAG,OAAQ,GAAG,CAAC,MAAkC,CAAC,GAAG,CAAC,KAAK,QAAQ;YAC/E,CAAC,CAAC,MAAM,CAAE,GAAG,CAAC,MAAkC,CAAC,GAAG,CAAC,CAAC;YACtD,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClG,MAAM,aAAa,GAAG,MAAM,8BAA8B,CAAC,QAAQ,CAAC,CAAC;QACrE,MAAM,SAAS,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,aAAa,GAAG,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1E,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC,CAAC;QAC9E,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACvD,IAAI,KAAK,IAAI,IAAI;gBAAE,SAAS;YAC5B,MAAM,aAAa,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;YACxC,IACE,kBAAkB,CAAC,GAAG,CAAC,aAAa,CAAC;mBAClC,aAAa,KAAK,MAAM;mBACxB,aAAa,KAAK,gBAAgB;mBAClC,aAAa,KAAK,eAAe,EACpC,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,KAAK,MAAM,IAAI,IAAI,KAAK;oBAAE,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACtD,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;QAE3C,IAAI,IAA0B,CAAC;QAC/B,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAClD,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,YAAY,UAAU,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChG,IAAI,GAAG,GAAG,CAAC,IAAgB,CAAC;YAC9B,CAAC;iBAAM,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;gBAC5B,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;QAED,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;gBAChC,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,OAAO;gBACP,IAAI;gBACJ,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,QAAQ,EAAE,QAAQ;aACnB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,IAAI,+BAA+B,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5B,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACtC,MAAM,aAAa,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;YACxC,IACE,kBAAkB,CAAC,GAAG,CAAC,aAAa,CAAC;mBAClC,aAAa,KAAK,gBAAgB;mBAClC,aAAa,KAAK,kBAAkB,EACvC,CAAC;gBACD,OAAO;YACT,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC5C,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAW,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC;QACvC,sEAAsE;QACtE,gEAAgE;QAChE,+BAA+B;QAC9B,MAAc,CAAC,gBAAgB,GAAG,kBAAkB,EAAE,CAAC;QACvD,MAAc,CAAC,gBAAgB,GAAG,kBAAkB,EAAE,CAAC;QACvD,MAAc,CAAC,SAAS,GAAG,WAAW,EAAE,CAAC;QACzC,MAAc,CAAC,YAAY,GAAG,YAAY,CAAC;QAC3C,MAAc,CAAC,aAAa,GAAG,aAAa,CAAC;QAC9C,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,2BAA2B,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QAC1D,MAAM,SAAS,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACxD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,CAAC,+CAA+C;QAC9D,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,2BAA2B,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACzD,IAAI,CAAC;YACH,OAAO,eAAe,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACnD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpB,OAAO,KAAK,CAAC,IAAI,CAAC;oBAChB,EAAE,EAAE,IAAI;oBACR,MAAM,EAAE,WAAW;oBACnB,cAAc,EAAE,IAAI,CAAC,cAAc;oBACnC,aAAa,EAAE,IAAI,CAAC,cAAc;oBAClC,OAAO,EAAE,qBAAqB;iBAC/B,CAAC,CAAC;YACL,CAAC;YAED,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;YACjC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,IAAI,4BAA4B,EAAE,CAAC,CAAC;YAC5F,CAAC;YAED,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAC7C,OAAO,KAAK,CAAC,IAAI,CAAC;gBAChB,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,OAAO,EAAE,mBAAmB,IAAI,CAAC,cAAc,OAAO,IAAI,CAAC,aAAa,EAAE;aAC3E,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,0BAA0B;IAC1B,4EAA4E;IAC5E,8EAA8E;IAC9E,4EAA4E;IAC5E,mEAAmE;IACnE,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QAC7D,MAAM,EACJ,aAAa,EACb,kBAAkB,EAClB,YAAY,EACZ,aAAa,GACd,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;QACnD,MAAM,EAAE,qBAAqB,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAC;QAErG,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,MAAM,OAAO,GAAwE,EAAE,CAAC;QAExF,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,EAAY,CAAC;YACrC,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;YAE5B,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;gBAChD,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;gBACnE,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;oBACjC,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;oBAC/C,SAAS;gBACX,CAAC;gBAED,MAAM,GAAG,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;gBAC1C,MAAM,OAAO,GAA2B,EAAE,CAAC;gBAE3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC/C,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;wBAAE,SAAS;oBACxC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;oBACtE,IAAI,UAAU,IAAI,SAAS,EAAE,CAAC;wBAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;wBACxC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACrB,CAAC;gBACH,CAAC;gBAED,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpC,aAAa,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;gBAC1C,CAAC;YACH,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;YAED,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAiC,6BAA6B,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC3F,IAAI,CAAC;YACH,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;YACjF,OAAO,MAAM,sBAAsB,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,yBAAyB;IACzB,MAAM,oBAAoB,GAAG,IAAI,CAAC,eAAe,EAAE,sBAAsB,CAAC,CAAC;IAE3E,GAAG,CAAC,GAAG,CAAC,8BAA8B,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5D,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,GAAoB,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC,CAAC;YACvF,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,2BAA2B,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QAC1D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC;YACvC,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAkE,8BAA8B,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC7H,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7F,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,CAAC;YACtG,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,YAAY,EAAE;gBAC3D,gBAAgB,EAAE,GAAG,CAAC,IAAI,EAAE,gBAAgB,KAAK,IAAI;aACtD,CAAC,CAAC;YACH,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,CAAC,EAAE,IAAI,KAAK,uBAAuB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAC/D,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAClG,CAAC;IACH,CAAC,CAAC,CAAC;AAEL,CAAC"}

package/dist/server.d.ts CHANGED Viewed

@@ -11,5 +11,7 @@ export declare function selectRefererWebSocketCapability<T extends WebSocketProx
 export declare function createServer(options?: {
     port?: number;
     host?: string;
+    jwtSecret?: string;
+    aesKey?: Buffer;
 }): Promise<Fastify.FastifyInstance<import("http").Server<typeof IncomingMessage, typeof import("http").ServerResponse>, IncomingMessage, import("http").ServerResponse<IncomingMessage>, Fastify.FastifyBaseLogger, Fastify.FastifyTypeProviderDefault>>;
 export {};

package/dist/server.js CHANGED Viewed

@@ -1,14 +1,8 @@
 import Fastify from "fastify";
-import fastifyStatic from "@fastify/static";
 import multipart from "@fastify/multipart";
-import { basename, dirname, join } from "path";
-import { existsSync, realpathSync } from "fs";
-import { fileURLToPath } from "url";
 import { request as httpRequest } from "http";
 import { request as httpsRequest } from "https";
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = dirname(__filename);
-import { ensureDirs, ensurePanelConfig, getPanelConfig, migrateCatalogSchemaIfNeeded, migrateHermesShimOutIfNeeded, migrateOpenclawCatalogIfNeeded, migrateOpenclawImageTagIfNeeded, getInternalMcpToken, } from "./config.js";
+import { ensureDirs, ensureCoreConfig, getCoreConfig, migrateCatalogSchemaIfNeeded, migrateHermesShimOutIfNeeded, migrateOpenclawImageTagIfNeeded, removeFlatOpenclawImageIfNeeded, getInternalMcpToken, } from "./config.js";
 import { timingSafeEqual } from "node:crypto";
 import { runStartupMigrations } from "./services/runtime/index.js";
 import { verifyToken } from "./auth.js";
@@ -24,18 +18,21 @@ import { filesRoutes } from "./routes/files.js";
 import { internalRoutes } from "./routes/internal.js";
 import { organizeRoutes } from "./routes/files-organize.js";
 import { fileMountsRoutes } from "./routes/file-mounts.js";
+import { registerProxyRoutes } from "./routes/llm-proxy.js";
 import { webdavRoutes } from "./routes/webdav.js";
 import { externalMountsRoutes } from "./routes/external-mounts.js";
 import { FilesManager } from "./services/files-manager.js";
 import * as appManager from "./services/app/app-manager.js";
 import * as capabilityRegistry from "./services/capability-registry.js";
+import { getConnectHostForPort, getStoredConfig as getNativeStoredConfig, } from "./services/instance-manager.js";
 import backupRoutes from "./routes/backup.js";
 import * as llmProxy from "./services/llm-proxy/index.js";
 import * as nomadManager from "./services/nomad-manager.js";
 import * as instanceManager from "./services/app/app-manager.js";
 import * as setupManager from "./services/setup-manager.js";
 import { startTmpCleanupScheduler, initAutoBackup } from "./services/backup-manager.js";
-import { checkUpdate } from "./services/panel-manager.js";
+import { checkUpdate, getUpdateStatus, scheduleRestart } from "./services/update-manager.js";
+import { inspectSystemDrift, reconcileSystem } from "./services/system-reconciler.js";
 import { PROXY_IDENTITY_HEADERS } from "./constants.js";
 import { supportsGatewayWebsocket } from "./services/runtime/instance.js";
 const PUBLIC_PATHS = new Set(["/api/auth/status", "/api/auth/init", "/api/auth/login", "/api/setup/status", "/api/apps/validate-sudo-password"]);
@@ -56,7 +53,10 @@ function resolveAppSlugUpstream(slug) {
         const providers = capabilityRegistry.listProviders(cap);
         const running = providers.find((p) => p.status === "running");
         if (running) {
-            return { host: running.host, port: running.hostPort };
+            // Fresh-resolve the host for core's own upstream connection. Do not use
+            // advertised/public host here; that is only for browser-visible URLs.
+            const freshHost = getConnectHostForPort(running.hostPort);
+            return { host: freshHost, port: running.hostPort };
         }
     }
     return null;
@@ -141,7 +141,7 @@ export function selectRefererWebSocketCapability(capabilities, refererCapability
         ?? null;
 }
 export async function createServer(options = {}) {
-    const port = options.port ?? 8090;
+    const port = options.port ?? 8091;
     const host = options.host || "0.0.0.0";
     ensureDirs();
     startTmpCleanupScheduler();
@@ -284,14 +284,9 @@ export async function createServer(options = {}) {
         },
     });
     // Register proxy routes before auth middleware (proxy uses its own token auth)
-    await llmProxy.registerProxyRoutes(app);
+    registerProxyRoutes(app);
     // Register routes
-    // authRoutes needs a rebind callback so /api/auth/init can switch from 127.0.0.1 → 0.0.0.0
-    // without calling process.exit(). We define the callback after listen() and patch it in below.
-    let _rebind = null;
-    await app.register(authRoutes, {
-        getRebind: () => _rebind,
-    });
+    await app.register(authRoutes);
     await app.register(instanceRoutes);
     await app.register(systemRoutes);
     await app.register(setupRoutes);
@@ -304,9 +299,9 @@ export async function createServer(options = {}) {
     // Single FilesManager instance shared across /api/files, /webdav, and
     // /api/files/external-mounts so a mutation on the mount list (PUT
     // /external-mounts) is visible to every layer immediately.
-    const panelCfgForFiles = getPanelConfig();
-    const initialExternalMounts = Array.isArray(panelCfgForFiles.external_mounts)
-        ? panelCfgForFiles.external_mounts
+    const coreCfgForFiles = getCoreConfig();
+    const initialExternalMounts = Array.isArray(coreCfgForFiles.external_mounts)
+        ? coreCfgForFiles.external_mounts
         : [];
     const sharedFilesManager = new FilesManager({
         externalMounts: initialExternalMounts,
@@ -335,7 +330,7 @@ export async function createServer(options = {}) {
     // Resolution order: `<slug>-ui` → `web-<slug>` (first running entry wins).
     // 503 if no running provider found. 400 if slug is malformed.
     //
-    // Registered BEFORE the SPA static fallback so explicit routes win.
+    // Core owns app capability proxying; the Panel package owns SPA serving.
     const appsProxyHandler = async (req, reply) => {
         const rawSlug = req.params.slug ?? "";
         if (!SLUG_RE.test(rawSlug)) {
@@ -349,7 +344,7 @@ export async function createServer(options = {}) {
         // Pass the full original path unchanged (including /apps/<slug> prefix).
         const rawUrl = req.raw.url ?? "/";
         const targetPath = rawUrl;
-        const hostHeader = `${upstreamHost}:${upstreamPort}`;
+        const hostHeader = `${instanceManager.urlHost(upstreamHost)}:${upstreamPort}`;
         // Build forwarded headers: strip cookie and authorization to avoid
         // leaking panel session credentials to third-party apps.
         const forwardHeaders = {};
@@ -416,89 +411,22 @@ export async function createServer(options = {}) {
     };
     app.all("/apps/:slug", appsProxyHandler);
     app.all("/apps/:slug/*", appsProxyHandler);
-    // Serve frontend static files
-    // Look for frontend dist in multiple locations
-    const resolvedDir = existsSync(__dirname) ? realpathSync(__dirname) : __dirname;
-    const frontendCandidates = [
-        join(resolvedDir, "..", "public"), // npm package: dist/ + public/ siblings
-        join(resolvedDir, "..", "frontend", "dist"), // dev: project root legacy path
-    ];
-    let frontendDir = "";
-    for (const candidate of frontendCandidates) {
-        if (existsSync(join(candidate, "index.html"))) {
-            frontendDir = candidate;
-            break;
-        }
-    }
-    if (frontendDir) {
-        // Serve /assets/ directory
-        const assetsDir = join(frontendDir, "assets");
-        if (existsSync(assetsDir)) {
-            await app.register(fastifyStatic, {
-                root: assetsDir,
-                prefix: "/assets/",
-                decorateReply: false,
-                cacheControl: false,
-                setHeaders: (res) => {
-                    res.setHeader("Cache-Control", "public, max-age=31536000, immutable");
-                },
-            });
-        }
-        // Serve other static files and SPA fallback
-        await app.register(fastifyStatic, {
-            root: frontendDir,
-            prefix: "/",
-            decorateReply: true,
-            wildcard: false,
-            globIgnore: ["assets/**"],
-            cacheControl: false,
-            setHeaders: (res, filePath) => {
-                if (basename(filePath) === "index.html") {
-                    res.setHeader("Cache-Control", "no-store");
-                }
-                else {
-                    res.setHeader("Cache-Control", "public, max-age=0");
-                }
-            },
-        });
-        // SPA fallback: serve index.html for non-API, non-asset routes
-        app.setNotFoundHandler(async (request, reply) => {
-            const path = request.url.split("?")[0];
-            if (path.startsWith("/api/")) {
-                return reply.status(404).send({ detail: "Not found" });
-            }
-            if (path.startsWith("/proxy/")) {
-                return reply.status(404).send({
-                    error: { message: "proxy route not found", type: "server_error" },
-                });
-            }
-            if (path.startsWith("/assets/")) {
-                return reply.status(404).type("text/plain").send("Asset not found");
-            }
-            reply.header("Cache-Control", "no-store");
-            return reply.sendFile("index.html");
-        });
-    }
     // Auto-start Nomad-managed instances on startup
     app.addHook("onReady", async () => {
         setTimeout(async () => {
             try {
-                ensurePanelConfig();
-                // One-shot: if panel.json only has the legacy `openclaw_image` field
-                // (older release, OpenClaw pre-runtime-catalog), mirror it into
-                // `runtime_catalog.openclaw` so the unified read path sees it.
-                migrateOpenclawCatalogIfNeeded();
+                ensureCoreConfig();
+                removeFlatOpenclawImageIfNeeded();
                 // One-shot: drop runtime_catalog.hermes.shimPath and delete the
                 // orphaned ~/.jishushell/runtimes/hermes/ dir. The Hermes shim is
-                // now baked into the image (PR3c) and the adapter refuses to
-                // launch without runtime.protocol.version on the image LABEL, so
-                // the host shim is dead weight.
+                // now baked into the image (PR3c) and the adapter verifies the
+                // official image RepoDigest before launch, so the host shim is dead weight.
                 migrateHermesShimOutIfNeeded();
-                // Stamp the runtime_catalog schema version so panel.json carries a
-                // provenance marker. Warns (but doesn't crash) on detected panel
+                // Stamp the runtime_catalog schema version so core.json carries a
+                // provenance marker. Warns (but doesn't crash) on detected core
                 // downgrade where the stored version exceeds what we support.
                 migrateCatalogSchemaIfNeeded();
-                // One-shot: if panel.json still stores a mutable image tag (:latest
+                // One-shot: if core.json still stores a mutable image tag (:latest
                 // or :slim) from an older release, rewrite it to the pinned
                 // :${version} form so Nomad stops re-pulling on each restart.
                 migrateOpenclawImageTagIfNeeded();
@@ -508,7 +436,40 @@ export async function createServer(options = {}) {
                 // registered adapter's migrateStartup() hook so server.ts never
                 // imports a specific adapter (check-adapter-isolation §32.2.1).
                 runStartupMigrations();
-                const config = getPanelConfig();
+                getUpdateStatus();
+                // Reconcile system-level components (systemd units, Docker images,
+                // Nomad config) against the currently installed code. Non-blocking:
+                // failures are logged but do not prevent server startup.
+                try {
+                    const reconcileResult = await reconcileSystem();
+                    const updated = reconcileResult.items.filter(i => i.status === "updated");
+                    const errors = reconcileResult.items.filter(i => i.status === "error");
+                    const needsSudo = reconcileResult.items.filter(i => i.requiresSudo && i.status !== "ok" && i.status !== "updated");
+                    if (updated.length > 0) {
+                        console.log(`[startup] Reconciled ${updated.length} system component(s): ${updated.map(i => i.component).join(", ")}`);
+                    }
+                    if (errors.length > 0) {
+                        console.warn(`[startup] Reconciliation errors: ${errors.map(i => `${i.component}: ${i.message}`).join("; ")}`);
+                    }
+                    if (needsSudo.length > 0) {
+                        console.warn(`[startup] ${needsSudo.length} item(s) need sudo to fix. Run: ${reconcileResult.command}`);
+                    }
+                    else if (reconcileResult.reloadRequired) {
+                        console.warn(`[startup] System files changed and services should be reloaded. Run: ${reconcileResult.command}`);
+                        scheduleRestart(2000);
+                    }
+                    if (errors.length > 0 || reconcileResult.reloadRequired) {
+                        setTimeout(() => {
+                            inspectSystemDrift().catch((e) => {
+                                console.warn(`[startup] Delayed system reconciliation check skipped: ${e.message}`);
+                            });
+                        }, 15_000).unref();
+                    }
+                }
+                catch (e) {
+                    console.warn(`[startup] System reconciliation skipped: ${e.message}`);
+                }
+                const config = getCoreConfig();
                 if (config.service_manager === "nomad") {
                     const nomadResult = await setupManager.startNomad();
                     if (!nomadResult.ok) {
@@ -543,7 +504,7 @@ export async function createServer(options = {}) {
                     // Second migration attempt: the first call above runs before Nomad
                     // auto-starts instances, so for 0.4.2-beta2 upgrades the image is
                     // not yet locally present then. After auto-start (which may have
-                    // triggered the one-time pull), retry the pin so panel.json moves
+                    // triggered the one-time pull), retry the pin so core.json moves
                     // from :latest → :${version} within the same startup cycle.
                     try {
                         migrateOpenclawImageTagIfNeeded();
@@ -556,25 +517,11 @@ export async function createServer(options = {}) {
                     // pinned digest tag rewrite can now succeed.
                     runStartupMigrations();
                 }
-                // Rebuild capability registry from app instances. PR 3 sub-step 3f
-                // of the app-interconnect design drops the legacy `portOverride`
-                // arg — each provide now resolves through `resolveProvideEndpoint`
-                // which reads the actual allocated port from runtime metadata, so
-                // multi-provide apps no longer collapse all entries onto the
-                // gateway port. For instances whose underlying job is currently
-                // not running, we still re-register the entries (so the
-                // Connections UI keeps them as greyed candidates) and immediately
-                // mark them stopped via `setProviderStatus` (§5.4 of the design).
+                // Rebuild capability registry from app instances. For instances whose
+                // underlying job is currently not running, entries stay visible in the
+                // Connections UI as greyed candidates (§5.4 of the design).
                 try {
-                    for (const appData of appManager.listApps()) {
-                        if (!appData.spec.provides?.length)
-                            continue;
-                        appManager.registerCapabilities(appData.manifest.id, appData.spec);
-                        const status = await nomadManager.getStatus(appData.manifest.id);
-                        if (status.status === "stopped") {
-                            capabilityRegistry.setProviderStatus(appData.manifest.id, "stopped");
-                        }
-                    }
+                    await appManager.refreshCapabilityRegistry({ force: true });
                 }
                 catch (e) {
                     console.error("[startup] Capability registry rebuild failed:", e);
@@ -586,27 +533,6 @@ export async function createServer(options = {}) {
         }, 0);
     });
     await app.listen({ port, host });
-    // Assign the rebind implementation now that the server is listening.
-    // Called by /api/auth/init to switch from 127.0.0.1 → 0.0.0.0 in-process.
-    _rebind = async (newHost) => {
-        if (host === newHost)
-            return;
-        const addr = app.server.address();
-        const boundPort = addr && typeof addr === "object" ? addr.port : port;
-        await new Promise((resolve, reject) => {
-            app.server.close((err) => { if (err)
-                reject(err);
-            else
-                resolve(); });
-        });
-        await new Promise((resolve, reject) => {
-            app.server.listen(boundPort, newHost, () => {
-                console.log(`[server] Rebound to http://${newHost}:${boundPort}`);
-                resolve();
-            });
-            app.server.once("error", reject);
-        });
-    };
     // Track active WebSocket proxy sockets for graceful shutdown
     const activeWsSockets = new Set();
     // Handle WebSocket upgrades directly on the HTTP server, bypassing Fastify's
@@ -641,7 +567,7 @@ export async function createServer(options = {}) {
                 return;
             }
             const { host: upstreamHost, port: upstreamPort } = upstream;
-            const hostHeader = `${upstreamHost}:${upstreamPort}`;
+            const hostHeader = `${instanceManager.urlHost(upstreamHost)}:${upstreamPort}`;
             const upstreamOrigin = `http://${hostHeader}`;
             const qs = url.includes("?") ? url.slice(url.indexOf("?")) : "";
             const targetPath = `${path}${qs}`;
@@ -823,8 +749,14 @@ export async function createServer(options = {}) {
             }
             const protocol = String(capability.protocol || "http").toLowerCase();
             const upstreamRequest = protocol === "https" || protocol === "wss" ? httpsRequest : httpRequest;
-            const targetHost = await instanceManager.getHostForAppPort(id, capability.port);
-            const hostHeader = `${instanceManager.urlHost(targetHost)}:${capability.port}`;
+            // Use the runtime-resolved host port: Nomad's dynamic port allocator
+            // may map the container's declared port (e.g. 3000) onto a random host
+            // port (e.g. 18789) when the static port is taken at start-time. The
+            // HTTP capability proxy already does this; the WS proxy must mirror it
+            // or every WS upgrade for reallocated apps lands on a dead host port.
+            const runtimePort = instanceManager.resolveRuntimeCapabilityPort(id, capability.capability) ?? capability.port;
+            const targetHost = await instanceManager.getHostForAppPort(id, runtimePort);
+            const hostHeader = `${instanceManager.urlHost(targetHost)}:${runtimePort}`;
             const upstreamOrigin = `${protocol === "https" || protocol === "wss" ? "https" : "http"}://${hostHeader}`;
             const qs = url.includes("?") ? url.slice(url.indexOf("?")) : "";
             const targetPath = `${joinCapabilityUpstreamPath(capability.path, path.replace(/^\/+/, ""))}${qs}`;
@@ -836,7 +768,7 @@ export async function createServer(options = {}) {
             try {
                 proxyReq = upstreamRequest({
                     hostname: targetHost,
-                    port: capability.port,
+                    port: runtimePort,
                     path: targetPath,
                     method: "GET",
                     timeout: 10_000,
@@ -954,8 +886,9 @@ export async function createServer(options = {}) {
             }
             const protocol = String(capability.protocol || "http").toLowerCase();
             const upstreamRequest = protocol === "https" || protocol === "wss" ? httpsRequest : httpRequest;
-            const targetHost = await instanceManager.getHostForAppPort(id, capability.port);
-            const hostHeader = `${instanceManager.urlHost(targetHost)}:${capability.port}`;
+            const runtimePort = instanceManager.resolveRuntimeCapabilityPort(id, capabilityName) ?? capability.port;
+            const targetHost = await instanceManager.getHostForAppPort(id, runtimePort);
+            const hostHeader = `${instanceManager.urlHost(targetHost)}:${runtimePort}`;
             const upstreamOrigin = `${protocol === "https" || protocol === "wss" ? "https" : "http"}://${hostHeader}`;
             const suffix = capabilityMatch[3] || "";
             const qs = url.includes("?") ? url.slice(url.indexOf("?")) : "";
@@ -968,7 +901,7 @@ export async function createServer(options = {}) {
             try {
                 proxyReq = upstreamRequest({
                     hostname: targetHost,
-                    port: capability.port,
+                    port: runtimePort,
                     path: targetPath,
                     method: "GET",
                     timeout: 10_000,
@@ -1098,6 +1031,17 @@ export async function createServer(options = {}) {
                 continue;
             upstreamHeaders[key] = value;
         }
+        try {
+            const cfg = getNativeStoredConfig(id);
+            const token = cfg?.gateway?.auth?.token;
+            if (typeof token === "string" && token.trim()) {
+                upstreamHeaders["authorization"] = `Bearer ${token.trim()}`;
+            }
+        }
+        catch {
+            // Best effort: if the config is unavailable, OpenClaw will reject the
+            // upgrade with its normal auth error.
+        }
         // Forward the browser's Origin unchanged. The panel auto-adds it to
         // `gateway.controlUi.allowedOrigins` via ensureControlUiAllowedOrigin
         // + restart; rewriting to the upstream host (as cli 94163bc did)
@@ -1205,14 +1149,13 @@ export async function createServer(options = {}) {
         });
         proxyReq.end();
     });
-    llmProxy.setProxyPort(port);
+    llmProxy.setCorePort(port);
     setupManager.setServerPort(port);
-    nomadManager.setPanelPort(port);
+    nomadManager.setCorePort(port);
     console.log(`JishuShell listening on http://${host}:${port}`);
-    // Background update check — runs the update probe (which piggybacks telemetry
-    // heartbeat + activation) so headless deployments report without the frontend.
-    // Safe by design: checkUpdate swallows all errors, has a 30s in-memory cache,
-    // and heartbeat/activation dedupe by UTC date / persisted flag.
+    // Background update check — runs the update probe (which probes the npm registry
+    // for new versions) so headless deployments can detect available updates.
+    // Safe by design: checkUpdate swallows all errors and has a 30s in-memory cache.
     const bgUpdateCheck = () => { checkUpdate().catch(() => { }); };
     const bgInitial = setTimeout(bgUpdateCheck, 30_000);
     const bgInterval = setInterval(bgUpdateCheck, 4 * 60 * 60 * 1000);