feat: ship verified platform upgrade bundles with production dependencies

Preserve supported expression fields instead of stringifying them, and probe individual fields only when whole-expression validation fails. Convert unsupported syntax and weekday ranges ending in 7 while preserving legacy date/weekday rules and valid OR branches.

Add execution regressions for issue #3099 and 64 calendar boundary cases in UTC and Asia/Shanghai. Ensure timezone child tests actually run under the Node test runner.

Validation: 745 tests passed, 8 skipped; final targeted regressions passed; backend compilation passed. Differential calendar checks matched 142,360 execution timestamps.

Fixes #3099

.github/workflows/build-docker-image.yml

@@ -8,6 +8,8 @@ on:
       # CLI is verified separately; its shared Bash upgrade engine ships in images.
       - "!cli/**"
       - "cli/src/internal/maintenance/upgradeArtifacts.cjs"
+      - "cli/src/internal/maintenance/platformBundle.cjs"
+      - "cli/src/internal/maintenance/panelUpgrade.cjs"
       - "!.github/workflows/cli-package.yml"
     branches:
       - "master"
@@ -94,6 +96,12 @@ jobs:
         run: |
           bash scripts/publish-static.sh "https://${{ secrets.API_TOKEN }}@${GITHUB_REPO}.git" "$GITHUB_BRANCH" "$GITHUB_REF_TYPE"
 
+      - name: publish verified upgrade download sizes
+        env:
+          GITHUB_REPO: github.com/${{ github.repository_owner }}/qinglong-static
+          GITHUB_BRANCH: ${{ github.ref_name }}
+        run: node scripts/publish-upgrade-info.cjs "https://${{ secrets.API_TOKEN }}@${GITHUB_REPO}.git" "$GITHUB_BRANCH" "$GITHUB_SHA"
+
   static_gitlab:
     needs: build-static
     runs-on: ubuntu-latest
@@ -197,6 +205,8 @@ jobs:
   build-alpine:
     if: ${{ !startsWith(github.ref, 'refs/tags/') }}
     needs: build-static
+    outputs:
+      image-digest: ${{ steps.image.outputs.digest }}
     runs-on: ubuntu-22.04
     permissions:
       packages: write
@@ -262,6 +272,7 @@ jobs:
         uses: docker/setup-buildx-action@v4
 
       - name: Build and push (Alpine)
+        id: image
         uses: docker/build-push-action@v7
         with:
           build-args: |
@@ -283,6 +294,8 @@ jobs:
   build-debian:
     if: ${{ !startsWith(github.ref, 'refs/tags/') }}
     needs: build-static
+    outputs:
+      image-digest: ${{ steps.image.outputs.digest }}
     runs-on: ubuntu-22.04
     permissions:
       packages: write
@@ -347,6 +360,7 @@ jobs:
         uses: docker/setup-buildx-action@v4
 
       - name: Build and push (Debian)
+        id: image
         uses: docker/build-push-action@v7
         with:
           build-args: |
@@ -557,3 +571,76 @@ jobs:
             echo '::error::Could not check the published npm version; refusing to publish.'
             exit 1
           fi
+
+  build-upgrade-bundles:
+    needs: [build-alpine, build-debian]
+    runs-on: ubuntu-22.04
+    timeout-minutes: 45
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - { platform: linux/amd64, libc: musl, name: x64-musl }
+          - { platform: linux/arm/v6, libc: musl, name: armv6-musl }
+          - { platform: linux/arm/v7, libc: musl, name: armv7-musl }
+          - { platform: linux/arm64, libc: musl, name: arm64-musl }
+          - { platform: linux/ppc64le, libc: musl, name: ppc64-musl }
+          - { platform: linux/s390x, libc: musl, name: s390x-musl }
+          - { platform: linux/386, libc: musl, name: ia32-musl }
+          - { platform: linux/amd64, libc: glibc, name: x64-glibc }
+          - { platform: linux/arm/v7, libc: glibc, name: armv7-glibc }
+          - { platform: linux/arm64, libc: glibc, name: arm64-glibc }
+          - { platform: linux/ppc64le, libc: glibc, name: ppc64-glibc }
+          - { platform: linux/s390x, libc: glibc, name: s390x-glibc }
+    steps:
+      - uses: actions/checkout@v6
+      - uses: docker/setup-qemu-action@v4
+        with:
+          cache-image: false
+      - uses: docker/setup-buildx-action@v4
+      - name: Build and probe the immutable platform package
+        env:
+          ALPINE_DIGEST: ${{ needs.build-alpine.outputs.image-digest }}
+          DEBIAN_DIGEST: ${{ needs.build-debian.outputs.image-digest }}
+          BUNDLE_LIBC: ${{ matrix.libc }}
+          BUNDLE_PLATFORM: ${{ matrix.platform }}
+        run: |
+          set -euo pipefail
+          digest="$ALPINE_DIGEST"
+          if [ "$BUNDLE_LIBC" = glibc ]; then digest="$DEBIAN_DIGEST"; fi
+          test -n "$digest"
+          docker buildx build --platform "$BUNDLE_PLATFORM" --build-arg "BASE_IMAGE=ghcr.io/${GITHUB_REPOSITORY}@${digest}" --file docker/Dockerfile.upgrade-bundle --output type=local,dest=output/upgrade .
+      - uses: actions/upload-artifact@v6
+        with:
+          name: upgrade-${{ matrix.name }}-${{ github.sha }}
+          path: output/upgrade/*
+          if-no-files-found: error
+
+  publish-upgrade-bundles:
+    needs: build-upgrade-bundles
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    concurrency:
+      group: upgrade-channel-${{ github.ref_name }}
+      cancel-in-progress: false
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
+        with:
+          node-version: '20'
+      - uses: pnpm/action-setup@v6
+        with:
+          version: '8.3.1'
+      - run: pnpm install --prod --frozen-lockfile
+      - run: npm --prefix cli ci
+      - uses: actions/download-artifact@v7
+        with:
+          pattern: upgrade-*-${{ github.sha }}
+          path: output/upgrade
+          merge-multiple: true
+      - run: node scripts/build-bundle-installer.cjs output/upgrade/install-bundle.cjs
+      - name: Publish complete packages before advancing the channel
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: node scripts/publish-upgrade-bundles.cjs output/upgrade "$GITHUB_SHA" "$GITHUB_REPOSITORY" "$GITHUB_REF_NAME"

.gitignore

@@ -38,3 +38,12 @@ __pycache__
 
 # Local security audit artifacts
 /audit/
+
+# Local browser tests, screenshots, reports, and temporary test output
+/.playwright-cli/
+/output/
+/playwright-report/
+/test-results/
+/blob-report/
+/coverage/
+/.nyc_output/

back/api/clientIp.ts

@@ -1,5 +1,6 @@
 import { NextFunction, Request, Response, Router } from 'express';
 import { celebrate, Joi } from 'celebrate';
+import { t } from '../shared/i18n';
 import {
   diagnoseClientIp,
   getTrustProxyConfig,
@@ -36,7 +37,7 @@ export default (app: Router) => {
       } catch (error) {
         res.send({
           code: 400,
-          message: error instanceof Error ? error.message : '配置更新失败',
+          message: error instanceof Error ? error.message : t('配置更新失败'),
         });
       }
     },

back/api/system.ts

@@ -205,6 +205,17 @@ export default (app: Router) => {
     },
   );
 
+  route.get(
+    '/update-status',
+    async (req: Request, res: Response, next: NextFunction) => {
+      try {
+        res.send(await Container.get(SystemService).getUpgradeStatus());
+      } catch (e) {
+        return next(e);
+      }
+    },
+  );
+
   route.put(
     '/reload',
     celebrate({
@@ -383,6 +394,19 @@ export default (app: Router) => {
     },
   );
 
+  route.get(
+    '/notify-log',
+    async (req: Request, res: Response, next: NextFunction) => {
+      try {
+        const systemService = Container.get(SystemService);
+        const data = await systemService.getNotifyLog();
+        res.send({ code: 200, data });
+      } catch (e) {
+        return next(e);
+      }
+    },
+  );
+
   route.delete(
     '/log',
     async (req: Request, res: Response, next: NextFunction) => {

back/app.ts

@@ -5,6 +5,7 @@ import { Container } from 'typedi';
 import config from './config';
 import Logger from './loaders/logger';
 import { errStack } from './shared/errors';
+import { initializeLanguageSync } from './shared/languageSync';
 import { type GrpcServerService } from './services/grpc';
 import { type HttpServerService } from './services/http';
 
@@ -27,6 +28,7 @@ class Application {
       if (cluster.isPrimary) {
         await this.initializeDatabase();
       }
+      await initializeLanguageSync();
       if (cluster.isPrimary) {
         this.startMasterProcess();
       } else {

back/config/util.ts

@@ -716,17 +716,20 @@ function isPyprojectToml(name: string): boolean {
   return name.endsWith('pyproject.toml');
 }
 
+export function isPythonSourceDependency(name: string): boolean {
+  const source = name.trim();
+  return (
+    isGitHubUrl(source) || isRequirementsFile(source) || isPyprojectToml(source)
+  );
+}
+
 export function getGetCommand(type: DependenceTypes, name: string): string {
   const trimmedName = name.trim();
 
   // For Python dependencies installed from GitHub or requirements files,
   // we can't reliably check if they're installed, so skip the check
   if (type === DependenceTypes.python3) {
-    if (
+    if (isPythonSourceDependency(trimmedName)) {
-      isGitHubUrl(trimmedName) ||
-      isRequirementsFile(trimmedName) ||
-      isPyprojectToml(trimmedName)
-    ) {
       // Return a command that will always indicate not installed
       // This ensures GitHub URLs and requirements files are always installed
       return 'echo ""';
@@ -736,10 +739,30 @@ export function getGetCommand(type: DependenceTypes, name: string): string {
   const baseCommands = {
     [DependenceTypes.nodejs]: `pnpm ls -g  | grep "${trimmedName}" | head -1`,
     [DependenceTypes.python3]: `${getPythonExecutable()} -c ${shellQuote(
-      `from importlib.metadata import version\nimport importlib.util as u\nname=${JSON.stringify(
+      `from importlib.metadata import version, PackageNotFoundError
-        trimmedName,
+import importlib.util
-      )}\ntry:\n print(version(name))\nexcept Exception:\n print(name if u.find_spec(name) else '')`,
+import sys
-    )}`,
+try:
+ try:
+  from packaging.requirements import Requirement
+ except ImportError:
+  from pip._vendor.packaging.requirements import Requirement
+ requirement = Requirement(sys.argv[1])
+ if requirement.marker and not requirement.marker.evaluate():
+  print('not applicable')
+ else:
+  try:
+   installed = version(requirement.name)
+  except PackageNotFoundError:
+   if not requirement.specifier and not requirement.extras and not requirement.url:
+    if importlib.util.find_spec(requirement.name):
+     print(requirement.name)
+  else:
+   if requirement.specifier.contains(installed, prereleases=True):
+    print(installed)
+except Exception:
+ pass`,
+    )} ${shellQuote(trimmedName)}`,
     [DependenceTypes.linux]:
       getOsTypeSync() === 'Alpine'
         ? `apk info -es ${trimmedName}`
@@ -824,9 +847,13 @@ export function getUninstallCommand(
         'Remove installed Python distributions separately by package name.',
       )}`;
     }
+    const packageName =
+      name.match(
+        /^([A-Za-z0-9][A-Za-z0-9._-]*)(?:\[[^\]]+\])?(?=\s*(?:[<>=!~;@]|$))/,
+      )?.[1] || name;
     return `${getPythonPip()} uninstall --disable-pip-version-check${
       PYTHON_VENV_DIR ? '' : ' --root-user-action=ignore'
-    } -y -- ${shellQuote(name)}`;
+    } -y -- ${shellQuote(packageName)}`;
   }
   const baseCommands = {
     [DependenceTypes.nodejs]: 'pnpm remove -g',
@@ -917,7 +944,7 @@ async function _updateLinuxMirror(
     throw new Error('Unsupported OS type for updating mirrors.');
   const target = mirror || defaults[osType];
   normalizeMirror(target);
-  const S = isInContainer() ? 'sudo ' : '';
+  const S = osType !== 'Alpine' && isInContainer() ? 'sudo ' : '';
   const update =
     osType === 'Alpine' ? 'apk update' : `${S}apt-get update --error-on=any`;
   let file =

back/data/system.ts

@@ -28,8 +28,12 @@ export enum AuthDataType {
   'removeLogFrequency' = 'removeLogFrequency',
   'systemConfig' = 'systemConfig',
   'authConfig' = 'authConfig',
+  'notifyLog' = 'notifyLog',
 }
 
+export const NotifyStatus = LoginStatus;
+export type NotifyStatus = LoginStatus;
+
 export interface SystemConfigInfo {
   lang?: string;
   panelTitle?: string;
@@ -53,6 +57,17 @@ export interface LoginLogInfo {
   status?: LoginStatus;
 }
 
+export interface NotifyLogInfo {
+  timestamp?: number;
+  title?: string;
+  content?: string;
+  status?: NotifyStatus;
+  notifyType?: string;
+  source?: 'system' | 'script';
+  scriptName?: string;
+  taskId?: string;
+}
+
 export interface TokenInfo {
   value: string;
   timestamp: number;
@@ -88,6 +103,7 @@ export interface AuthInfo {
 export type SystemModelInfo = SystemConfigInfo &
   Partial<NotificationInfo> &
   LoginLogInfo &
+  Partial<NotifyLogInfo> &
   Partial<AuthInfo>;
 
 export interface SystemInstance

back/loaders/express.ts

@@ -6,7 +6,7 @@ import config from '../config';
 import { UnauthorizedError, expressjwt } from 'express-jwt';
 import { getPlatform, getToken } from '../config/util';
 import rewrite from 'express-urlrewrite';
-import { errors } from 'celebrate';
+import validationErrors from '../middlewares/validationErrors';
 import { serveEnv } from '../config/serverEnv';
 import { shareStore } from '../shared/store';
 import { isValidToken, isDefaultAuthInfo } from '../shared/auth';
@@ -197,7 +197,7 @@ export default ({ app }: { app: Application }) => {
     });
   });
 
-  app.use(errors());
+  app.use(validationErrors);
   app.use(uniqueConstraintError);
 
   app.use(

back/loaders/initTask.ts

@@ -78,7 +78,7 @@ export default async () => {
       assertSubscriptionAlias(doc.alias);
       await subscriptionService.handleTask(doc, !sub.is_disabled);
     } catch (error) {
-      Logger.warn('跳过订阅 %s 的无效定时配置: %s', sub.id, error);
+      Logger.warn(t('跳过订阅 %s 的无效定时配置: %s'), sub.id, error);
     }
   }
 };

back/middlewares/validationErrors.ts

@@ -0,0 +1,18 @@
+import { errors, isCelebrateError } from 'celebrate';
+import { ErrorRequestHandler } from 'express';
+import { t } from '../shared/i18n';
+
+const respond = errors();
+
+// Schemas are compiled once at startup; resolve their messages per request so
+// changing the system language also changes errors from those existing schemas.
+const validationErrors: ErrorRequestHandler = (error, req, res, next) => {
+  if (isCelebrateError(error)) {
+    for (const detail of error.details.values()) {
+      detail.message = detail.details.map((item) => t(item.message)).join('. ');
+    }
+  }
+  return respond(error, req, res, next);
+};
+
+export default validationErrors;

back/protos/api.proto

@@ -260,6 +260,15 @@ message SystemNotifyRequest {
   optional NotificationInfo notificationInfo = 3;
 }
 
+message RecordNotifyLogRequest {
+  string title = 1;
+  string content = 2;
+  bool success = 3;
+  string notifyType = 4;
+  string scriptName = 5;
+  string taskId = 6;
+}
+
 service Api {
   rpc GetEnvs(GetEnvsRequest) returns (EnvsResponse) {}
   rpc CreateEnv(CreateEnvRequest) returns (EnvsResponse) {}
@@ -271,6 +280,7 @@ service Api {
   rpc UpdateEnvNames(UpdateEnvNamesRequest) returns (Response) {}
   rpc GetEnvById(GetEnvByIdRequest) returns (EnvResponse) {}
   rpc SystemNotify(SystemNotifyRequest) returns (Response) {}
+  rpc RecordNotifyLog(RecordNotifyLogRequest) returns (Response) {}
   rpc GetCronDetail(CronDetailRequest) returns (CronDetailResponse) {}
   rpc CreateCron(CreateCronRequest) returns (CronResponse) {}
   rpc UpdateCron(UpdateCronRequest) returns (CronResponse) {}

back/protos/api.ts

@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-ts_proto. DO NOT EDIT.
 // versions:
 //   protoc-gen-ts_proto  v2.6.1
-//   protoc               v3.17.3
+//   protoc               v6.31.1
 // source: back/protos/api.proto
 
 /* eslint-disable */
@@ -417,6 +417,15 @@ export interface SystemNotifyRequest {
   notificationInfo?: NotificationInfo | undefined;
 }
 
+export interface RecordNotifyLogRequest {
+  title: string;
+  content: string;
+  success: boolean;
+  notifyType: string;
+  scriptName: string;
+  taskId: string;
+}
+
 function createBaseEnvItem(): EnvItem {
   return {
     id: undefined,
@@ -4296,6 +4305,146 @@ export const SystemNotifyRequest: MessageFns<SystemNotifyRequest> = {
   },
 };
 
+function createBaseRecordNotifyLogRequest(): RecordNotifyLogRequest {
+  return { title: "", content: "", success: false, notifyType: "", scriptName: "", taskId: "" };
+}
+
+export const RecordNotifyLogRequest: MessageFns<RecordNotifyLogRequest> = {
+  encode(message: RecordNotifyLogRequest, writer: BinaryWriter = new BinaryWriter()): BinaryWriter {
+    if (message.title !== "") {
+      writer.uint32(10).string(message.title);
+    }
+    if (message.content !== "") {
+      writer.uint32(18).string(message.content);
+    }
+    if (message.success !== false) {
+      writer.uint32(24).bool(message.success);
+    }
+    if (message.notifyType !== "") {
+      writer.uint32(34).string(message.notifyType);
+    }
+    if (message.scriptName !== "") {
+      writer.uint32(42).string(message.scriptName);
+    }
+    if (message.taskId !== "") {
+      writer.uint32(50).string(message.taskId);
+    }
+    return writer;
+  },
+
+  decode(input: BinaryReader | Uint8Array, length?: number): RecordNotifyLogRequest {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    let end = length === undefined ? reader.len : reader.pos + length;
+    const message = createBaseRecordNotifyLogRequest();
+    while (reader.pos < end) {
+      const tag = reader.uint32();
+      switch (tag >>> 3) {
+        case 1: {
+          if (tag !== 10) {
+            break;
+          }
+
+          message.title = reader.string();
+          continue;
+        }
+        case 2: {
+          if (tag !== 18) {
+            break;
+          }
+
+          message.content = reader.string();
+          continue;
+        }
+        case 3: {
+          if (tag !== 24) {
+            break;
+          }
+
+          message.success = reader.bool();
+          continue;
+        }
+        case 4: {
+          if (tag !== 34) {
+            break;
+          }
+
+          message.notifyType = reader.string();
+          continue;
+        }
+        case 5: {
+          if (tag !== 42) {
+            break;
+          }
+
+          message.scriptName = reader.string();
+          continue;
+        }
+        case 6: {
+          if (tag !== 50) {
+            break;
+          }
+
+          message.taskId = reader.string();
+          continue;
+        }
+      }
+      if ((tag & 7) === 4 || tag === 0) {
+        break;
+      }
+      reader.skip(tag & 7);
+    }
+    return message;
+  },
+
+  fromJSON(object: any): RecordNotifyLogRequest {
+    return {
+      title: isSet(object.title) ? globalThis.String(object.title) : "",
+      content: isSet(object.content) ? globalThis.String(object.content) : "",
+      success: isSet(object.success) ? globalThis.Boolean(object.success) : false,
+      notifyType: isSet(object.notifyType) ? globalThis.String(object.notifyType) : "",
+      scriptName: isSet(object.scriptName) ? globalThis.String(object.scriptName) : "",
+      taskId: isSet(object.taskId) ? globalThis.String(object.taskId) : "",
+    };
+  },
+
+  toJSON(message: RecordNotifyLogRequest): unknown {
+    const obj: any = {};
+    if (message.title !== "") {
+      obj.title = message.title;
+    }
+    if (message.content !== "") {
+      obj.content = message.content;
+    }
+    if (message.success !== false) {
+      obj.success = message.success;
+    }
+    if (message.notifyType !== "") {
+      obj.notifyType = message.notifyType;
+    }
+    if (message.scriptName !== "") {
+      obj.scriptName = message.scriptName;
+    }
+    if (message.taskId !== "") {
+      obj.taskId = message.taskId;
+    }
+    return obj;
+  },
+
+  create<I extends Exact<DeepPartial<RecordNotifyLogRequest>, I>>(base?: I): RecordNotifyLogRequest {
+    return RecordNotifyLogRequest.fromPartial(base ?? ({} as any));
+  },
+  fromPartial<I extends Exact<DeepPartial<RecordNotifyLogRequest>, I>>(object: I): RecordNotifyLogRequest {
+    const message = createBaseRecordNotifyLogRequest();
+    message.title = object.title ?? "";
+    message.content = object.content ?? "";
+    message.success = object.success ?? false;
+    message.notifyType = object.notifyType ?? "";
+    message.scriptName = object.scriptName ?? "";
+    message.taskId = object.taskId ?? "";
+    return message;
+  },
+};
+
 export type ApiService = typeof ApiService;
 export const ApiService = {
   getEnvs: {
@@ -4388,6 +4537,15 @@ export const ApiService = {
     responseSerialize: (value: Response) => Buffer.from(Response.encode(value).finish()),
     responseDeserialize: (value: Buffer) => Response.decode(value),
   },
+  recordNotifyLog: {
+    path: "/com.ql.api.Api/RecordNotifyLog",
+    requestStream: false,
+    responseStream: false,
+    requestSerialize: (value: RecordNotifyLogRequest) => Buffer.from(RecordNotifyLogRequest.encode(value).finish()),
+    requestDeserialize: (value: Buffer) => RecordNotifyLogRequest.decode(value),
+    responseSerialize: (value: Response) => Buffer.from(Response.encode(value).finish()),
+    responseDeserialize: (value: Buffer) => Response.decode(value),
+  },
   getCronDetail: {
     path: "/com.ql.api.Api/GetCronDetail",
     requestStream: false,
@@ -4482,6 +4640,7 @@ export interface ApiServer extends UntypedServiceImplementation {
   updateEnvNames: handleUnaryCall<UpdateEnvNamesRequest, Response>;
   getEnvById: handleUnaryCall<GetEnvByIdRequest, EnvResponse>;
   systemNotify: handleUnaryCall<SystemNotifyRequest, Response>;
+  recordNotifyLog: handleUnaryCall<RecordNotifyLogRequest, Response>;
   getCronDetail: handleUnaryCall<CronDetailRequest, CronDetailResponse>;
   createCron: handleUnaryCall<CreateCronRequest, CronResponse>;
   updateCron: handleUnaryCall<UpdateCronRequest, CronResponse>;
@@ -4644,6 +4803,21 @@ export interface ApiClient extends Client {
     options: Partial<CallOptions>,
     callback: (error: ServiceError | null, response: Response) => void,
   ): ClientUnaryCall;
+  recordNotifyLog(
+    request: RecordNotifyLogRequest,
+    callback: (error: ServiceError | null, response: Response) => void,
+  ): ClientUnaryCall;
+  recordNotifyLog(
+    request: RecordNotifyLogRequest,
+    metadata: Metadata,
+    callback: (error: ServiceError | null, response: Response) => void,
+  ): ClientUnaryCall;
+  recordNotifyLog(
+    request: RecordNotifyLogRequest,
+    metadata: Metadata,
+    options: Partial<CallOptions>,
+    callback: (error: ServiceError | null, response: Response) => void,
+  ): ClientUnaryCall;
   getCronDetail(
     request: CronDetailRequest,
     callback: (error: ServiceError | null, response: CronDetailResponse) => void,

back/schedule/addCron.ts

@@ -5,7 +5,7 @@ import { isValidCronSchedule } from '../shared/cronSchedule';
 import { scheduleStacks } from './data';
 import { runCron } from '../shared/runCron';
 import Logger from '../loaders/logger';
-import { tf } from '../shared/i18n';
+import { t, tf } from '../shared/i18n';
 
 // Validate the entire batch before replacing any existing jobs.
 const isValidCronField = (cron: string): boolean => {
@@ -67,7 +67,7 @@ const addCron = (
           createCronJob(
             schedule,
             async () => {
-              Logger.info('[schedule][准备运行任务] 命令: %s', item.command);
+              Logger.info(t('[schedule][准备运行任务] 命令: %s'), item.command);
               await runCron(
                 item.command,
                 item,
@@ -104,7 +104,7 @@ const addCron = (
     scheduleStacks.set(id, jobs);
     jobs.forEach((job) => job.start());
     Logger.info(
-      '[schedule][创建定时任务] 任务ID: %s, 规则数: %s',
+      t('[schedule][创建定时任务] 任务ID: %s, 规则数: %s'),
       id,
       jobs.length,
     );

back/schedule/api.ts

@@ -16,6 +16,7 @@ import {
   MoveEnvRequest,
   Response,
   SystemNotifyRequest,
+  RecordNotifyLogRequest,
   UpdateEnvNamesRequest,
   UpdateEnvRequest,
 } from '../protos/api';
@@ -238,7 +239,8 @@ export const systemNotify = async (
     const data = await systemService.notify({
       title: call.request.title,
       content: call.request.content,
-      notificationInfo: call.request.notificationInfo as unknown as NotificationInfo,
+      notificationInfo: call.request
+        .notificationInfo as unknown as NotificationInfo,
     });
     callback(null, data);
   } catch (e: any) {
@@ -246,10 +248,31 @@ export const systemNotify = async (
   }
 };
 
+export const recordNotifyLog = async (
+  call: ServerUnaryCall<RecordNotifyLogRequest, Response>,
+  callback: sendUnaryData<Response>,
+) => {
+  try {
+    await Container.get(SystemService).recordNotifyLog({
+      title: call.request.title,
+      content: call.request.content,
+      status: call.request.success ? 0 : 1,
+      notifyType: call.request.notifyType,
+      source: 'script',
+      scriptName: call.request.scriptName,
+      taskId: call.request.taskId,
+    });
+    callback(null, { code: 200 });
+  } catch (error: any) {
+    callback(error);
+  }
+};
+
 const normalizeCronData = (data: CronItem | null): CronItem | undefined => {
   if (!data) return undefined;
   // create() returns a Sequelize instance; spreading it omits attribute getters.
-  const cron = data instanceof Model ? (data.get({ plain: true }) as CronItem) : data;
+  const cron =
+    data instanceof Model ? (data.get({ plain: true }) as CronItem) : data;
   return {
     ...cron,
     labels: cron.labels ?? [],

back/schedule/delCron.ts

@@ -1,3 +1,4 @@
+import { t } from '../shared/i18n';
 import { ServerUnaryCall, sendUnaryData } from '@grpc/grpc-js';
 import { DeleteCronRequest, DeleteCronResponse } from '../protos/cron';
 import { scheduleStacks } from './data';
@@ -9,19 +10,19 @@ const delCron = (
 ) => {
   for (const id of call.request.ids) {
     if (scheduleStacks.has(id)) {
-      Logger.info(
+      Logger.info(t('[schedule][取消定时任务] 任务ID: %s'), id);
-        '[schedule][取消定时任务] 任务ID: %s',
-        id,
-      );
       // 防御性过滤历史调度栈中的空任务，
       // 否则对 null 调 cancel() 会让整个取消流程抛出 UNKNOWN 错误，
       // 进而导致 HTTP 端的 remove() 跳过 setCrontab()，造成 crontab.list 残留。
-      scheduleStacks.get(id)?.filter((x) => x != null).forEach((x) => {
+      scheduleStacks
+        .get(id)
+        ?.filter((x) => x != null)
+        .forEach((x) => {
           try {
             x.cancel();
           } catch (error: any) {
             Logger.warn(
-            '[schedule][取消任务失败] 任务ID: %s, 错误: %s',
+              t('[schedule][取消任务失败] 任务ID: %s, 错误: %s'),
               id,
               error?.message || error,
             );

back/services/cron.ts

@@ -641,7 +641,7 @@ export default class CronService {
         stopped.add(pid);
       } catch (error) {
         this.logger.error(
-          '[panel][停止任务失败] PID: %s, 错误: %s',
+          t('[panel][停止任务失败] PID: %s, 错误: %s'),
           pid,
           asError(error).message
         );
@@ -695,7 +695,7 @@ export default class CronService {
         await killTask(instance.pid);
       } catch (error) {
         this.logger.error(
-          `[panel][停止实例失败] 实例ID: ${instanceId}, PID: ${instance.pid}, 错误: ${error}`,
+          t("[panel][停止实例失败] 实例ID: %s, PID: %s, 错误: %s"), instanceId, instance.pid, error,
         );
       }
     }
@@ -791,20 +791,20 @@ export default class CronService {
         const result = await completed;
         if (result.error) {
           this.logger.error(
-            '[panel][执行任务失败] 任务ID: %s, 错误: %s',
+            t('[panel][执行任务失败] 任务ID: %s, 错误: %s'),
             id,
             result.error.message
           );
         }
         this.logger.info(
-          '[panel][执行任务结束] 任务ID: %s, 退出码: %j',
+          t('[panel][执行任务结束] 任务ID: %s, 退出码: %j'),
           id,
           result.code
         );
         return { ...cron, pid: cp.pid, ...result } as any;
       } catch (error) {
         this.logger.error(
-          '[panel][创建任务失败] 任务ID: %s, 错误: %s',
+          t('[panel][创建任务失败] 任务ID: %s, 错误: %s'),
           cronId,
           asError(error).message
         );
@@ -813,7 +813,7 @@ export default class CronService {
           if (absolutePath) await logStreamManager.closeStream(absolutePath);
         } catch (error) {
           this.logger.error(
-            '[panel][关闭任务日志失败] %s',
+            t('[panel][关闭任务日志失败] %s'),
             asError(error).message
           );
         }
@@ -845,7 +845,7 @@ export default class CronService {
           );
         } catch (error) {
           this.logger.error(
-            '[panel][清理任务状态失败] %s',
+            t('[panel][清理任务状态失败] %s'),
             asError(error).message
           );
         }

back/services/dependence.ts

@@ -20,6 +20,7 @@ import {
   getInstallCommand,
   getUninstallCommand,
   getGetCommand,
+  isPythonSourceDependency,
 } from '../config/util';
 import dayjs from 'dayjs';
 import taskLimit from '../shared/pLimit';
@@ -76,21 +77,25 @@ export default class DependenceService {
     for (const doc of docs) {
       taskLimit.removeQueuedDependency(doc);
     }
-    const unInstalledDeps = docs.filter(
-      (x) => x.status !== DependenceStatus.installed,
-    );
     const installedDeps = docs.filter(
-      (x) => x.status === DependenceStatus.installed,
+      (x) =>
+        x.status === DependenceStatus.installed ||
+        // Older list refreshes marked unprobeable sources as failed. They may
+        // still have installed distributions (including partial pip installs).
+        (x.status === DependenceStatus.installFailed &&
+          x.type === DependenceTypes.python3 &&
+          isPythonSourceDependency(x.name)),
     );
+    const unInstalledDeps = docs.filter((x) => !installedDeps.includes(x));
     await this.removeDb(unInstalledDeps.map((x) => x.id!));
 
     if (installedDeps.length) {
       await DependenceModel.update(
         { status: DependenceStatus.queued, log: [] },
-        { where: { id: ids } },
+        { where: { id: installedDeps.map((x) => x.id!) } },
       );
 
-      this.installDependenceOneByOne(docs, false, force);
+      this.installDependenceOneByOne(installedDeps, false, force);
     }
     return docs;
   }
@@ -156,7 +161,13 @@ export default class DependenceService {
       },
     });
     const checks = await concurrentRun(
-      docs.map((doc) => async () => {
+      docs
+        .filter(
+          (doc) =>
+            doc.type !== DependenceTypes.python3 ||
+            !isPythonSourceDependency(doc.name),
+        )
+        .map((doc) => async () => {
           return (await this.isDependenceInstalled(doc)) ? undefined : doc.id;
         }),
       5,
@@ -177,7 +188,10 @@ export default class DependenceService {
     let depName = dependency.name.trim();
     const depVersionStr = versionDependenceCommandTypes[dependency.type];
     let depVersion = '';
-    if (depName.includes(depVersionStr)) {
+    if (
+      dependency.type !== DependenceTypes.python3 &&
+      depName.includes(depVersionStr)
+    ) {
       const symbolRegx = new RegExp(
         `(.*)${depVersionStr}([0-9\\.\\-\\+a-zA-Z]*)`,
       );
@@ -305,6 +319,9 @@ export default class DependenceService {
           : getUninstallCommand(dependency.type, dependency.name.trim());
       } catch (error) {
         taskLimit.removeQueuedDependency(dependency);
+        if (!isInstall && force) {
+          return this.removeDb([dependency.id!]).then(() => null);
+        }
         return DependenceModel.update(
           {
             status: isInstall
@@ -387,7 +404,13 @@ export default class DependenceService {
         this.updateLog(depIds, message);
 
         // 判断是否已经安装过依赖
-        if (isInstall && !force) {
+        // pip must resolve optional dependencies even if the base distribution
+        // is already present; its version alone cannot prove extras are ready.
+        if (
+          isInstall &&
+          !force &&
+          !(isPythonDependence && depName.includes('['))
+        ) {
           let getCommand = getGetCommand(dependency.type, depName);
           const depVersionStr = versionDependenceCommandTypes[dependency.type];
           if (isLinuxDependence) {
@@ -395,7 +418,7 @@ export default class DependenceService {
           }
 
           let depVersion = '';
-          if (depName.includes(depVersionStr)) {
+          if (!isPythonDependence && depName.includes(depVersionStr)) {
             const symbolRegx = new RegExp(
               `(.*)${depVersionStr}([0-9\\.\\-\\+a-zA-Z]*)`,
             );

back/services/health.ts

@@ -2,8 +2,10 @@ import { Service } from 'typedi';
 import Logger from '../loaders/logger';
 import cronClient from '../schedule/client';
 import { HttpServerService } from './http';
+import { runtimeBuild } from '../shared/runtimeBuild';
 
 interface HealthStatus {
+  build: typeof runtimeBuild;
   status: 'ok' | 'error';
   services: {
     http: boolean;
@@ -22,12 +24,11 @@ interface HealthStatus {
 export class HealthService {
   private startTime = Date.now();
 
-  constructor(
+  constructor(private httpServerService: HttpServerService) {}
-    private httpServerService: HttpServerService,
-  ) {}
 
   async check(): Promise<HealthStatus> {
     const status: HealthStatus = {
+      build: runtimeBuild,
       status: 'ok',
       services: {
         http: true,

back/services/metrics.ts

@@ -1,3 +1,4 @@
+import { t } from '../shared/i18n';
 import { performance } from 'perf_hooks';
 import Logger from '../loaders/logger';
 
@@ -126,7 +127,7 @@ export class MetricsService {
       timestamp: Date.now(),
       metrics: this.getMetrics(),
     };
-    Logger.info('性能指标报告:', report);
+    Logger.info(t('性能指标报告:'), report);
     return report;
   }
 }

back/services/notify.ts

@@ -1,3 +1,4 @@
+import { persistNotificationAudit } from '../shared/notificationAudit';
 import crypto from 'crypto';
 import nodemailer from 'nodemailer';
 import { Inject, Service } from 'typedi';
@@ -55,27 +56,33 @@ export default class NotificationService {
     content: string,
     notificationInfo?: NotificationInfo,
   ): Promise<boolean | undefined> {
-    let { type, ...rest } = await this.userService.getNotificationMode();
+    let type: string | undefined;
-    if (notificationInfo?.type) {
+    let success = false;
-      type = notificationInfo?.type;
+    try {
-    }
+      const saved = await this.userService.getNotificationMode();
+      type = notificationInfo?.type || saved.type;
       if (type) {
         this.title = title;
         this.content = content;
-      let params = rest;
+        const { type: _, ...overrides } = notificationInfo || {};
-      if (notificationInfo) {
+        const { type: _saved, ...rest } = saved;
-        const { type: _, ...others } = notificationInfo;
+        this.params = { ...rest, ...overrides };
-        params = { ...rest, ...others };
-      }
-      this.params = params;
-      const notificationModeAction = this.modeMap.get(type);
         try {
-        return await notificationModeAction?.call(this);
+          success = !!(await this.modeMap.get(type)?.call(this));
-      } catch (error: any) {
+        } catch (error) {
           console.error(error);
         }
       }
-    return false;
+      return success;
+    } finally {
+      await persistNotificationAudit({
+        title,
+        content,
+        notifyType: type,
+        source: 'system',
+        status: success ? 0 : 1,
+      });
+    }
   }
 
   public async testNotify(
@@ -84,14 +91,23 @@ export default class NotificationService {
     content: string,
   ) {
     const { type, ...rest } = info;
-    if (type) {
+    if (!type) return true;
+    let success = false;
+    try {
       this.title = title;
       this.content = content;
       this.params = rest;
-      const notificationModeAction = this.modeMap.get(type);
+      success = !!(await this.modeMap.get(type)?.call(this));
-      return await notificationModeAction?.call(this);
+      return success;
+    } finally {
+      await persistNotificationAudit({
+        title,
+        content,
+        notifyType: type,
+        source: 'system',
+        status: success ? 0 : 1,
+      });
     }
-    return true;
   }
 
   private parseMailRecipients(value?: string) {
@@ -921,7 +937,8 @@ export default class NotificationService {
   private async openiLink() {
     const { openiLinkAppToken, openiLinkHubUrl, openiLinkContextToken } =
       this.params;
-    const baseUrl = openiLinkHubUrl?.replace(/\/$/, '') || 'https://hub.openilink.com';
+    const baseUrl =
+      openiLinkHubUrl?.replace(/\/$/, '') || 'https://hub.openilink.com';
     const url = `${baseUrl}/bot/v1/message/send`;
     const body: Record<string, string> = {
       type: 'text',
@@ -974,5 +991,4 @@ export default class NotificationService {
       throw new Error(error.response ? error.response.body : error);
     }
   }
-
 }

back/services/schedule.ts

@@ -1,3 +1,4 @@
+import { t } from '../shared/i18n';
 import { Service, Inject } from 'typedi';
 import winston from 'winston';
 import { createCronJob, CronJob } from '../shared/cronScheduler';
@@ -83,7 +84,7 @@ export default class ScheduleService {
         let cp: ChildProcessWithoutNullStreams | undefined;
         let result: ProcessResult = { code: null, signal: null };
         try {
-          this.logger.info('[panel][开始执行任务] 任务ID: %s', others.id);
+          this.logger.info(t('[panel][开始执行任务] 任务ID: %s'), others.id);
           await callbacks.onBefore?.(startTime);
           cp = spawn(command, { shell: '/bin/bash' });
           const child = cp;
@@ -103,7 +104,7 @@ export default class ScheduleService {
 
         if (result.error) {
           this.logger.error(
-            '[panel][执行任务失败] 任务ID: %s, 错误: %s',
+            t('[panel][执行任务失败] 任务ID: %s, 错误: %s'),
             others.id,
             result.error.message,
           );
@@ -111,7 +112,7 @@ export default class ScheduleService {
             await callbacks.onError?.(result.error.message);
           } catch (error) {
             this.logger.error(
-              '[panel][任务错误回调失败] %s',
+              t('[panel][任务错误回调失败] %s'),
               asError(error).message,
             );
           }
@@ -127,12 +128,12 @@ export default class ScheduleService {
         } catch (error) {
           result.error ??= asError(error);
           this.logger.error(
-            '[panel][任务结束回调失败] %s',
+            t('[panel][任务结束回调失败] %s'),
             asError(error).message,
           );
         }
         this.logger.info(
-          '[panel][执行任务结束] 任务ID: %s, 退出码: %j',
+          t('[panel][执行任务结束] 任务ID: %s, 退出码: %j'),
           others.id,
           result.code,
         );
@@ -141,7 +142,7 @@ export default class ScheduleService {
     ).catch((error) => {
       // Queue/setup failures must not become unhandled rejections in detached callers.
       rejectStart(asError(error));
-      this.logger.error('[panel][任务队列失败] %s', asError(error).message);
+      this.logger.error(t('[panel][任务队列失败] %s'), asError(error).message);
       return { ...others, code: null, signal: null, error: asError(error) };
     });
 
@@ -156,7 +157,7 @@ export default class ScheduleService {
   ) {
     const _id = this.formatId(id);
     this.logger.info(
-      '[panel][创建cron任务] 任务ID: %s, cron: %s, 任务名: %s, 执行命令: %s',
+      t('[panel][创建cron任务] 任务ID: %s, cron: %s, 任务名: %s, 执行命令: %s'),
       _id,
       schedule,
       name,
@@ -183,7 +184,7 @@ export default class ScheduleService {
       } catch (error) {
         // A persisted invalid subscription must not become an unhandled startup rejection.
         this.logger.warn(
-          '[panel][跳过无效定时任务] 任务ID: %s, cron: %s, 错误: %s',
+          t('[panel][跳过无效定时任务] 任务ID: %s, cron: %s, 错误: %s'),
           _id,
           schedule,
           asError(error).message,
@@ -204,7 +205,7 @@ export default class ScheduleService {
 
   async cancelCronTask({ id = 0, name }: ScheduleTaskType) {
     const _id = this.formatId(id);
-    this.logger.info('[panel][取消定时任务] 任务名: %s', name);
+    this.logger.info(t('[panel][取消定时任务] 任务名: %s'), name);
     if (this.scheduleStacks.has(_id)) {
       this.scheduleStacks.get(_id)?.cancel();
       this.scheduleStacks.delete(_id);
@@ -219,7 +220,7 @@ export default class ScheduleService {
   ) {
     const _id = this.formatId(id);
     this.logger.info(
-      '[panel][创建interval任务] 任务ID: %s, 任务名: %s, 执行命令: %s',
+      t('[panel][创建interval任务] 任务ID: %s, 任务名: %s, 执行命令: %s'),
       _id,
       name,
       command,
@@ -236,7 +237,7 @@ export default class ScheduleService {
       },
       (err) => {
         this.logger.error(
-          '[panel][执行任务失败] 命令: %s, 错误信息: %j',
+          t('[panel][执行任务失败] 命令: %s, 错误信息: %j'),
           command,
           err,
         );
@@ -264,7 +265,7 @@ export default class ScheduleService {
   async cancelIntervalTask({ id = 0, name }: ScheduleTaskType) {
     const _id = this.formatId(id);
     this.logger.info(
-      '[panel][取消interval任务] 任务ID: %s, 任务名: %s',
+      t('[panel][取消interval任务] 任务ID: %s, 任务名: %s'),
       _id,
       name,
     );

back/services/sshKey.ts

@@ -1,3 +1,4 @@
+import { t } from '../shared/i18n';
 import { Service, Inject } from 'typedi';
 import winston from 'winston';
 import fs from 'fs/promises';
@@ -61,10 +62,10 @@ export default class SshKeyService {
       const filePath = resolveSubscriptionPath(this.sshPath, alias);
       try {
         await rmPath(filePath);
-      } catch { }
+      } catch {}
       await writeFileWithLock(filePath, `${key}${os.EOL}`, { mode: '400' });
     } catch (error) {
-      this.logger.error('生成私钥文件失败', error);
+      this.logger.error(t('生成私钥文件失败'), error);
     }
   }
 
@@ -73,7 +74,7 @@ export default class SshKeyService {
       const filePath = resolveSubscriptionPath(this.sshPath, alias);
       await rmPath(filePath);
     } catch (error) {
-      this.logger.error('删除私钥文件失败', error);
+      this.logger.error(t('删除私钥文件失败'), error);
     }
   }
 
@@ -82,9 +83,13 @@ export default class SshKeyService {
     host: string,
     proxy?: string,
   ) {
-    if (!/^[a-zA-Z0-9.-]+$/.test(host) ||
+    if (
-        (proxy && !/^[a-zA-Z0-9.:[\]-]+$/.test(proxy))) {
+      !/^[a-zA-Z0-9.-]+$/.test(host) ||
-      throw Object.assign(new Error('Invalid SSH host or proxy'), { status: 400 });
+      (proxy && !/^[a-zA-Z0-9.:[\]-]+$/.test(proxy))
+    ) {
+      throw Object.assign(new Error('Invalid SSH host or proxy'), {
+        status: 400,
+      });
     }
     if (host === 'github.com') {
       host = `ssh.github.com\n    Port 443\n    HostkeyAlgorithms +ssh-rsa`;
@@ -92,7 +97,10 @@ export default class SshKeyService {
     const proxyStr = proxy
       ? `    ProxyCommand nc -v -x ${proxy} %h %p 2>/dev/null\n`
       : '';
-    const config = `Host ${alias}\n    Hostname ${host}\n    IdentityFile ${resolveSubscriptionPath(this.sshPath, alias)}\n    StrictHostKeyChecking no\n${proxyStr}`;
+    const config = `Host ${alias}\n    Hostname ${host}\n    IdentityFile ${resolveSubscriptionPath(
+      this.sshPath,
+      alias,
+    )}\n    StrictHostKeyChecking no\n${proxyStr}`;
     await writeFileWithLock(
       `${resolveSubscriptionPath(this.sshPath, alias, '.config')}`,
       config,
@@ -108,7 +116,7 @@ export default class SshKeyService {
       const filePath = resolveSubscriptionPath(this.sshPath, alias, '.config');
       await rmPath(filePath);
     } catch (error) {
-      this.logger.error(`删除ssh配置文件${alias}失败`, error);
+      this.logger.error(t('删除ssh配置文件%s失败'), alias, error);
     }
   }
 
@@ -147,7 +155,7 @@ export default class SshKeyService {
           );
           await this.generateSingleSshConfig(alias, host, doc.proxy);
         } catch (error) {
-          this.logger.warn('跳过订阅 %s 的无效 SSH 配置: %s', doc.id, error);
+          this.logger.warn(t('跳过订阅 %s 的无效 SSH 配置: %s'), doc.id, error);
         }
       }
     }
@@ -167,7 +175,10 @@ export default class SshKeyService {
 
   private async generateGlobalSshConfig(alias: string) {
     // Create a config that matches all hosts, making this key globally available
-    const config = `Host *\n    IdentityFile ${resolveSubscriptionPath(this.sshPath, alias)}\n    StrictHostKeyChecking no\n`;
+    const config = `Host *\n    IdentityFile ${resolveSubscriptionPath(
+      this.sshPath,
+      alias,
+    )}\n    StrictHostKeyChecking no\n`;
     await writeFileWithLock(
       `${resolveSubscriptionPath(this.sshPath, alias, '.config')}`,
       config,

back/services/system.ts

@@ -1,10 +1,11 @@
+import { persistNotificationAudit } from '../shared/notificationAudit';
 import { spawn } from 'cross-spawn';
 import { execFile } from 'child_process';
 import { promisify } from 'util';
 import { shellQuote } from '../shared/shellQuote';
 import { Response } from 'express';
 import fs from 'fs';
-import { Agent, request } from 'undici';
+import { request } from 'undici';
 import path from 'path';
 import { Inject, Service } from 'typedi';
 import winston from 'winston';
@@ -32,6 +33,8 @@ import {
   SystemInstance,
   SystemModel,
   SystemModelInfo,
+  NotifyStatus,
+  NotifyLogInfo,
 } from '../data/system';
 import taskLimit from '../shared/pLimit';
 import cronClient from '../schedule/client';
@@ -53,7 +56,7 @@ export default class SystemService {
     @Inject('logger') private logger: winston.Logger,
     private scheduleService: ScheduleService,
     private sockService: SockService,
-  ) { }
+  ) {}
 
   public async getSystemConfig() {
     const doc = await this.getDb({ type: AuthDataType.systemConfig });
@@ -158,7 +161,9 @@ export default class SystemService {
     if (info.dependenceProxy) {
       await fs.promises.writeFile(
         config.dependenceProxyFile,
-        `export http_proxy=${shellQuote(info.dependenceProxy)}\nexport https_proxy=${shellQuote(info.dependenceProxy)}`,
+        `export http_proxy=${shellQuote(
+          info.dependenceProxy,
+        )}\nexport https_proxy=${shellQuote(info.dependenceProxy)}`,
       );
     } else {
       await fs.promises.rm(config.dependenceProxyFile);
@@ -277,26 +282,24 @@ export default class SystemService {
   }
 
   public async checkUpdate() {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), 15000);
     try {
       const currentVersionContent = await parseVersion(config.versionFile);
 
-      let lastVersionContent;
+      const { body, statusCode } = await request(
-      try {
-        const { body } = await request(
         `${config.lastVersionFile}?t=${Date.now()}`,
-          {
+        { signal: controller.signal },
-            dispatcher: new Agent({
-              keepAliveTimeout: 30000,
-              keepAliveMaxTimeout: 30000,
-            }),
-          },
       );
       const text = await body.text();
-        lastVersionContent = parseContentVersion(text);
+      if (statusCode !== 200) throw new Error('Version request failed');
-      } catch (error) { }
+      const lastVersionContent = parseContentVersion(text);
-
+      if (
-      if (!lastVersionContent) {
+        !lastVersionContent ||
-        lastVersionContent = currentVersionContent;
+        typeof lastVersionContent.version !== 'string' ||
+        !/^\d+\.\d+\.\d+$/.test(lastVersionContent.version)
+      ) {
+        throw new Error('Invalid version response');
       }
 
       return {
@@ -314,8 +317,10 @@ export default class SystemService {
     } catch (error: any) {
       return {
         code: 400,
-        message: error.message,
+        message: t('检查更新失败，请检查网络后重试'),
       };
+    } finally {
+      clearTimeout(timeout);
     }
   }
 
@@ -339,45 +344,51 @@ export default class SystemService {
   }
 
   public async updateSystem() {
-    const cp = spawn('real_time=true ql update false', { shell: '/bin/bash' });
+    return this.startUpgradeJob('download');
+  }
 
-    cp.stdout.on('data', (data) => {
+  private upgradeJobs() {
-      this.sockService.sendMessage({
+    return require(path.join(
-        type: 'updateSystemVersion',
+      config.rootPath,
-        message: data.toString(),
+      'cli/src/internal/maintenance/panelUpgrade.cjs',
-      });
+    ));
-    });
+  }
 
-    cp.stderr.on('data', (data) => {
+  public async getUpgradeStatus() {
-      this.sockService.sendMessage({
+    return {
-        type: 'updateSystemVersion',
+      code: 200,
-        message: data.toString(),
+      data: await this.upgradeJobs().getStatus(config.tmpPath),
-      });
+    };
-    });
+  }
 
-    cp.on('error', (err) => {
+  private async startUpgradeJob(action: 'download' | 'apply') {
-      this.sockService.sendMessage({
+    try {
-        type: 'updateSystemVersion',
+      const data = await this.upgradeJobs().startJob(
-        message: JSON.stringify(err),
+        {
-        status: 'failed',
+          root: config.rootPath,
-      });
+          tmp: config.tmpPath,
-    });
+          env: {
-
+            ...process.env,
-    cp.on('exit', (code) => {
+            dir_data: config.dataPath,
-      this.sockService.sendMessage({
+            dir_config: config.configPath,
-        type: 'updateSystemVersion',
+            QlPort: String(config.port),
-        message: '',
+            QlBaseUrl: config.baseUrl,
-        status: code === 0 ? 'success' : 'failed',
+          },
-      });
+        },
-    });
+        action,
-
+      );
-    return { code: 200 };
+      return { code: 200, data };
+    } catch (error: any) {
+      this.logger.error('[upgrade] %s', error.message);
+      return { code: 400, message: t('升级任务启动失败，请检查日志后重试') };
+    }
   }
 
   public async reloadSystem(target?: 'system' | 'data') {
     if (target && !['system', 'data'].includes(target)) {
       return { code: 400, message: t('参数错误') };
     }
+    if (target === 'system') return this.startUpgradeJob('apply');
     const cmd = `real_time=true ql reload ${shellQuote(target || '')}`;
     const cp = spawn(cmd, {
       shell: '/bin/bash',
@@ -407,11 +418,13 @@ export default class SystemService {
     if (notificationInfo && typeString) {
       notificationInfo.type = typeString;
     }
+
     const isSuccess = await this.notificationService.notify(
       title,
       content,
       notificationInfo,
     );
+
     if (isSuccess) {
       return { code: 200, message: t('通知发送成功') };
     } else {
@@ -419,16 +432,36 @@ export default class SystemService {
     }
   }
 
-  public async run({ command, logPath }: { command: string; logPath?: string }, callback: TaskCallbacks) {
+  public async recordNotifyLog(info: NotifyLogInfo): Promise<void> {
+    await persistNotificationAudit(info);
+  }
+
+  public async getNotifyLog(): Promise<Array<NotifyLogInfo>> {
+    const docs = await SystemModel.findAll({
+      where: { type: AuthDataType.notifyLog },
+      order: [['id', 'DESC']],
+      limit: 200,
+    });
+    return docs.map((x) => ({ ...x.info, id: x.id }));
+  }
+
+  public async run(
+    { command, logPath }: { command: string; logPath?: string },
+    callback: TaskCallbacks,
+  ) {
     if (!command.startsWith(TASK_COMMAND)) {
       command = `${TASK_COMMAND} ${command}`;
     }
-    const logPathPrefix = logPath ? `real_log_path=${logPath}` : ''
+    const logPathPrefix = logPath ? `real_log_path=${logPath}` : '';
-    this.scheduleService.runTask(`${logPathPrefix} real_time=true ${command}`, callback, {
+    this.scheduleService.runTask(
+      `${logPathPrefix} real_time=true ${command}`,
+      callback,
+      {
         command,
         id: command.replace(/ /g, '-'),
         runOrigin: 'system',
-    });
+      },
+    );
   }
 
   public async stop({ command, pid }: { command: string; pid: number }) {
@@ -459,8 +492,20 @@ export default class SystemService {
       if (type && type.length) {
         dataDirs = dataDirs.concat(type.filter((x) => x !== 'base'));
       }
-      const allowed = new Set(['db', 'upload', 'config', 'scripts', 'log', 'deps',
+      const allowed = new Set([
-        'syslog', 'dep_cache', 'raw', 'repo', 'ssh.d', 'script-history']);
+        'db',
+        'upload',
+        'config',
+        'scripts',
+        'log',
+        'deps',
+        'syslog',
+        'dep_cache',
+        'raw',
+        'repo',
+        'ssh.d',
+        'script-history',
+      ]);
       if (dataDirs.some((dir) => !allowed.has(dir))) {
         return res.status(400).send({ code: 400, message: t('参数错误') });
       }
@@ -470,9 +515,13 @@ export default class SystemService {
         dataDirs = dataDirs.filter((dir) => dir !== 'script-history');
       }
       const dataPaths = [...new Set(dataDirs)].map((dir) => `data/${dir}`);
-      await promisify(execFile)('tar', ['-zcf', config.dataTgzFile, '--', ...dataPaths], {
+      await promisify(execFile)(
+        'tar',
+        ['-zcf', config.dataTgzFile, '--', ...dataPaths],
+        {
           cwd: path.dirname(config.dataPath),
-      });
+        },
+      );
       res.download(config.dataTgzFile);
     } catch (error: any) {
       return res.send({ code: 400, message: error.message });
@@ -563,7 +612,17 @@ export default class SystemService {
     const result = await readDirs(config.systemLogPath, config.systemLogPath);
     const logs = result.reverse().filter((x) => x.title.endsWith('.log'));
     for (const log of logs) {
-      await rmPath(path.join(config.systemLogPath, log.title));
+      // All workers keep append handles open; unlinking strands future writes
+      // in a deleted inode until rotation. Preserve the file while clearing it.
+      const file = await fs.promises.open(
+        path.join(config.systemLogPath, log.title),
+        fs.constants.O_WRONLY | fs.constants.O_NOFOLLOW,
+      );
+      try {
+        await file.truncate(0);
+      } finally {
+        await file.close();
+      }
     }
   }
 

back/services/user.ts

@@ -173,7 +173,7 @@ export default class UserService {
         t('你于') +
           dayjs(timestamp).format('YYYY-MM-DD HH:mm:ss') +
           t('在') +
-          address +
+          t(address) +
           ' ' +
           req.platform +
           t('端') +
@@ -219,7 +219,7 @@ export default class UserService {
         t('你于') +
           dayjs(timestamp).format('YYYY-MM-DD HH:mm:ss') +
           t('在') +
-          address +
+          t(address) +
           ' ' +
           req.platform +
           t('端') +

back/shared/cronSchedule.ts

@@ -22,6 +22,7 @@ export interface CronSchedule {
 // Validation and registration repeatedly see identical rules in large snapshots.
 // Cache only immutable syntax, never dates or running tasks, and bound user input.
 const scheduleCache = new Map<string, CronSchedule>();
+const daysInMonth = [31, 29, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31];
 
 // Canonicalize legacy shorthand, aliases, names and numeric-start steps before
 // node-cron sees them. Extend legacy aliases explicitly; reject H and bare /N.
@@ -58,17 +59,73 @@ export function parseCronSchedule(schedule: unknown): CronSchedule {
   const expression = CronExpressionParser.parse(parts.join(' '));
   if (!expression.hasNext())
     throw new Error('Cron schedule has no next execution');
-  const normalized = expression.stringify(true).replace(/\?/g, '*').split(' ');
+  let normalized = parts.map((part) => part.replace(/\?/g, '*'));
-  const dayCount = expression.fields.dayOfMonth.values.length;
+  // cron-parser includes Sunday in stepped ranges ending in 7 even when the
+  // step does not land on 7. node-cron accepts those ranges with different days.
+  if (/(^|,)(?:\d+|[a-z]{3})-0*7\/\d+(?=,|$)/i.test(normalized[5])) {
+    normalized[5] = expression.fields.dayOfWeek.values.join(',');
+  }
+  // Most rules are already supported; only inspect individual fields on failure.
+  if (!validate(normalized.join(' '))) {
+    const fields = [
+      expression.fields.second,
+      expression.fields.minute,
+      expression.fields.hour,
+      expression.fields.dayOfMonth,
+      expression.fields.month,
+      expression.fields.dayOfWeek,
+    ];
+    normalized = normalized.map((value, index) => {
+      // Preserve supported lists, ranges and names. Expand only fields node-cron
+      // cannot consume, such as numeric/name-start steps; never compress them.
+      const probe = ['0', '0', '0', '*', '*', '*'];
+      probe[index] = value;
+      if (validate(probe.join(' '))) return value;
+      const values = fields[index].values;
+      if (index === 5 && expression.fields.dayOfWeek.nthDay) {
+        // The legacy normalizer treated *#N / ?#N as an unrestricted weekday.
+        if (values.length === 8) return '*';
+        // # applies to a single weekday; normalize its numeric spelling only.
+        return values.length === 1
+          ? `${values[0]}#${expression.fields.dayOfWeek.nthDay}`
+          : value;
+      }
+      return values.join(',');
+    });
+  }
+  const months = expression.fields.month.values;
+  // cron-parser 4 clipped dates outside a single selected month's maximum
+  // before deciding whether the day field covered the whole month.
+  const dayCount = expression.fields.dayOfMonth.values.filter(
+    (day) =>
+      months.length !== 1 ||
+      typeof day !== 'number' ||
+      day <= daysInMonth[months[0] - 1],
+  ).length;
   const weekCount = expression.fields.dayOfWeek.values.length;
+  // Preserve the legacy count-based wildcard rules, including repeated Sunday
+  // and L tokens: an ignored day field must not remain an AND constraint.
+  const weekdayPattern = [
+    ...normalized.slice(0, 3),
+    '*',
+    ...normalized.slice(4),
+  ].join(' ');
   const patterns =
-    dayCount < 31 && weekCount < 8
+    weekCount === 8
-      ? [
+      ? [[...normalized.slice(0, 5), '*'].join(' ')]
-          [...normalized.slice(0, 5), '*'].join(' '),
+      : dayCount < 31
-          [...normalized.slice(0, 3), '*', ...normalized.slice(4)].join(' '),
+      ? [[...normalized.slice(0, 5), '*'].join(' '), weekdayPattern]
-        ]
+      : [weekdayPattern];
-      : [normalized.join(' ')];
+  const valid = patterns.map((pattern) => validate(pattern));
-  if (!patterns.every((pattern) => validate(pattern))) {
+  if (patterns.length === 2 && !valid[0] && valid[1]) {
+    // A date branch can be impossible for all chosen months while the weekday
+    // branch still runs. Drop it only if its syntax is valid with any month.
+    if (validate([...normalized.slice(0, 4), '*', '*'].join(' '))) {
+      patterns.shift();
+      valid.shift();
+    }
+  }
+  if (!valid.every(Boolean)) {
     throw new Error('Unsupported cron schedule');
   }
   const parsed = {

back/shared/cronScheduler.ts

@@ -1,3 +1,4 @@
+import { t } from './i18n';
 import { createTask, ScheduledTask } from 'node-cron';
 import { parseCronSchedule } from './cronSchedule';
 
@@ -36,7 +37,7 @@ export function createCronJob(
     if (cancelled || !started || !accepts(index, date)) return;
     if (missed) {
       options.logger.warn(
-        '[schedule][补执行迟到任务] 任务: %s, 计划时间: %s',
+        t('[schedule][补执行迟到任务] 任务: %s, 计划时间: %s'),
         options.name,
         date.toISOString(),
       );
@@ -45,7 +46,7 @@ export function createCronJob(
       await callback(date);
     } catch (error) {
       options.logger.error(
-        '[schedule][定时回调失败] 任务: %s, 错误: %s',
+        t('[schedule][定时回调失败] 任务: %s, 错误: %s'),
         options.name,
         error instanceof Error ? error.message : String(error),
       );

back/shared/i18n.ts

@@ -1,112 +1,231 @@
-import { shareStore } from './store';
-
 const messages: Record<string, Record<string, string>> = {
   zh: {},
   en: {
-    '资源已存在，请检查重复的名称或值': 'Resource already exists; check for duplicate names or values',
+    '升级任务启动失败，请检查日志后重试':
-    '暂无权限': 'Access denied',
+      'Failed to start the update. Check the logs and try again.',
-    '参数错误': 'Invalid parameter',
+    '[schedule][停止已运行任务] 任务ID: %s, PID: %s':
-    '参数不正确': 'Invalid parameter',
+      '[schedule][Stopping running task] Task ID: %s, PID: %s',
-    '文件无法访问': 'File not accessible',
+
-    '文件不存在': 'File not found',
+    '接口已下线，请使用 /configs/detail 接口':
-    '路径不存在': 'Path does not exist',
+      'This endpoint has been retired. Use /configs/detail instead.',
-    '路径不正确': 'Invalid path',
+    '接口已下线，请使用 /logs/detail 接口':
+      'This endpoint has been retired. Use /logs/detail instead.',
+    '接口已下线，请使用 /scripts/detail 接口':
+      'This endpoint has been retired. Use /scripts/detail instead.',
+    '仅支持 PNG、JPEG、GIF、WebP、AVIF 图片':
+      'Only PNG, JPEG, GIF, WebP and AVIF images are supported',
+    请先初始化: 'Please initialize the panel first',
+    请先关闭两步验证: 'Please disable two-factor authentication first',
+    '失败次数过多，请稍后重试':
+      'Too many failed attempts. Please try again later.',
+    配置更新失败: 'Failed to update configuration',
+    'trust proxy 配置格式无效': 'Invalid trust proxy configuration',
+    '代理层数不能超过 20': 'Proxy hop count cannot exceed 20',
+    '环境变量 QL_TRUST_PROXY 已生效，系统设置不可覆盖':
+      'QL_TRUST_PROXY is active and cannot be overridden by system settings',
+    系统配置不存在: 'System configuration does not exist',
+    '历史版本仅支持不超过 1 MiB 的 UTF-8 文本脚本':
+      'Version history only supports UTF-8 text scripts up to 1 MiB',
+    脚本不存在: 'Script does not exist',
+    请选择脚本文件: 'Please select a script file',
+    '历史版本读取失败，请检查历史文件':
+      'Failed to read version history. Check the history file.',
+    历史版本不存在或已清理:
+      'This history version does not exist or has been removed',
+    '文件已变化，请刷新历史版本后重试':
+      'The file has changed. Refresh version history and try again.',
+    '历史版本容量不足，无法安全保存':
+      'Version history storage is full. The file cannot be saved safely.',
+    '跳过订阅 %s 的无效定时配置: %s':
+      'Skipping invalid schedule for subscription %s: %s',
+    '[schedule][准备运行任务] 命令: %s':
+      '[schedule][Preparing task] Command: %s',
+    '[schedule][创建定时任务] 任务ID: %s, 规则数: %s':
+      '[schedule][Creating scheduled task] Task ID: %s, schedules: %s',
+    '[schedule][取消定时任务] 任务ID: %s':
+      '[schedule][Cancelling scheduled task] Task ID: %s',
+    '[schedule][取消任务失败] 任务ID: %s, 错误: %s':
+      '[schedule][Failed to cancel task] Task ID: %s, error: %s',
+    '[panel][停止任务失败] PID: %s, 错误: %s':
+      '[panel][Failed to stop task] PID: %s, error: %s',
+    '[panel][停止实例失败] 实例ID: %s, PID: %s, 错误: %s':
+      '[panel][Failed to stop instance] Instance ID: %s, PID: %s, error: %s',
+    '[panel][执行任务失败] 任务ID: %s, 错误: %s':
+      '[panel][Task failed] Task ID: %s, error: %s',
+    '[panel][执行任务结束] 任务ID: %s, 退出码: %j':
+      '[panel][Task finished] Task ID: %s, exit code: %j',
+    '[panel][创建任务失败] 任务ID: %s, 错误: %s':
+      '[panel][Failed to create task] Task ID: %s, error: %s',
+    '[panel][关闭任务日志失败] %s': '[panel][Failed to close task log] %s',
+    '[panel][清理任务状态失败] %s': '[panel][Failed to clear task status] %s',
+    '性能指标报告:': 'Performance metrics:',
+    '[panel][开始执行任务] 任务ID: %s': '[panel][Starting task] Task ID: %s',
+    '[panel][任务错误回调失败] %s': '[panel][Task error callback failed] %s',
+    '[panel][任务结束回调失败] %s':
+      '[panel][Task completion callback failed] %s',
+    '[panel][任务队列失败] %s': '[panel][Task queue failed] %s',
+    '[panel][创建cron任务] 任务ID: %s, cron: %s, 任务名: %s, 执行命令: %s':
+      '[panel][Creating cron task] Task ID: %s, cron: %s, name: %s, command: %s',
+    '[panel][跳过无效定时任务] 任务ID: %s, cron: %s, 错误: %s':
+      '[panel][Skipping invalid schedule] Task ID: %s, cron: %s, error: %s',
+    '[panel][取消定时任务] 任务名: %s':
+      '[panel][Cancelling scheduled task] Name: %s',
+    '[panel][创建interval任务] 任务ID: %s, 任务名: %s, 执行命令: %s':
+      '[panel][Creating interval task] Task ID: %s, name: %s, command: %s',
+    '[panel][执行任务失败] 命令: %s, 错误信息: %j':
+      '[panel][Task failed] Command: %s, error: %j',
+    '[panel][取消interval任务] 任务ID: %s, 任务名: %s':
+      '[panel][Cancelling interval task] Task ID: %s, name: %s',
+    生成私钥文件失败: 'Failed to generate private key file',
+    删除私钥文件失败: 'Failed to delete private key file',
+    '删除ssh配置文件%s失败': 'Failed to delete SSH configuration file %s',
+    '跳过订阅 %s 的无效 SSH 配置: %s':
+      'Skipping invalid SSH configuration for subscription %s: %s',
+    '[schedule][补执行迟到任务] 任务: %s, 计划时间: %s':
+      '[schedule][Running late task] Task: %s, scheduled time: %s',
+    '[schedule][定时回调失败] 任务: %s, 错误: %s':
+      '[schedule][Scheduled callback failed] Task: %s, error: %s',
+    '[schedule][任务队列] 空闲中...': '[schedule][Task queue] Idle...',
+    '[schedule][任务加入队列] 运行中任务数: %s, 等待中任务数: %s':
+      '[schedule][Task queued] Running: %s, waiting: %s',
+    '[schedule][开始处理任务] 运行中任务数: %s, 等待中任务数: %s':
+      '[schedule][Processing task] Running: %s, waiting: %s',
+    '[schedule][任务处理成功] 参数 %s':
+      '[schedule][Task succeeded] Arguments: %s',
+    '[schedule][任务处理错误] 参数 %s': '[schedule][Task failed] Arguments: %s',
+    '[schedule][任务处理结束] 运行中任务数: %s, 等待中任务数: %s':
+      '[schedule][Task finished] Running: %s, waiting: %s',
+    '[schedule][任务重复运行] 通知失败 %s':
+      '[schedule][Duplicate task] Notification failed: %s',
+    '[schedule][任务重复运行] 参数 %s':
+      '[schedule][Duplicate task] Arguments: %s',
+    '[schedule][停止已运行任务] 任务ID: %s':
+      '[schedule][Stopping running task] Task ID: %s',
+    '[schedule][检查已运行任务失败] 任务ID: %s, 错误: %s':
+      '[schedule][Failed to check running task] Task ID: %s, error: %s',
+    '[schedule][开始执行任务] 参数 %s':
+      '[schedule][Starting task] Arguments: %s',
+    '[schedule][任务标准错误] 命令: %s, 信息: %s':
+      '[schedule][Task stderr] Command: %s, message: %s',
+    '[schedule][执行任务失败] 命令: %s, 错误: %s':
+      '[schedule][Task failed] Command: %s, error: %s',
+    '[schedule][执行任务结束] 任务ID: %s, 退出码: %j':
+      '[schedule][Task finished] Task ID: %s, exit code: %j',
+    '[schedule][创建任务失败] 命令: %s, 错误: %s':
+      '[schedule][Failed to create task] Command: %s, error: %s',
+
+    '检查更新失败，请检查网络后重试':
+      'Failed to check for updates. Check your network and try again.',
+    '资源已存在，请检查重复的名称或值':
+      'Resource already exists; check for duplicate names or values',
+    暂无权限: 'Access denied',
+    参数错误: 'Invalid parameter',
+    参数不正确: 'Invalid parameter',
+    文件无法访问: 'File not accessible',
+    文件不存在: 'File not found',
+    路径不存在: 'Path does not exist',
+    路径不正确: 'Invalid path',
     '通知发送失败，请检查参数': 'Notification failed, check parameters',
-    '通知发送失败，请检查系统设置/通知配置': 'Notification failed, check system settings',
+    '通知发送失败，请检查系统设置/通知配置':
-    '通知发送成功': 'Notification sent successfully',
+      'Notification failed, check system settings',
-    '设置时区失败': 'Failed to set timezone',
+    通知发送成功: 'Notification sent successfully',
-    '任务未找到': 'Task not found',
+    设置时区失败: 'Failed to set timezone',
-    '密码不能设置为admin': 'Password cannot be admin',
+    任务未找到: 'Task not found',
-    '更新成功': 'Update successful',
+    密码不能设置为admin: 'Password cannot be admin',
-    '未知错误': 'Unknown error',
+    更新成功: 'Update successful',
-    '验证失败': 'Verification failed',
+    未知错误: 'Unknown error',
-    '实例不存在或已停止': 'Instance does not exist or stopped',
+    验证失败: 'Verification failed',
-    '实例已停止': 'Instance stopped',
+    实例不存在或已停止: 'Instance does not exist or stopped',
-    '确认停止实例': 'Confirm to stop instance',
+    实例已停止: 'Instance stopped',
-    '确认停止运行实例': 'Confirm to stop running instance',
+    确认停止实例: 'Confirm to stop instance',
-    '确认停止': 'Confirm to stop',
+    确认停止运行实例: 'Confirm to stop running instance',
-    '确认停止定时任务': 'Confirm to stop scheduled task',
+    确认停止: 'Confirm to stop',
-    '确认删除': 'Confirm to delete',
+    确认停止定时任务: 'Confirm to stop scheduled task',
-    '确认删除定时任务': 'Confirm to delete scheduled task',
+    确认删除: 'Confirm to delete',
-    '确认删除选中的定时任务吗': 'Confirm to delete selected tasks?',
+    确认删除定时任务: 'Confirm to delete scheduled task',
-    '确认运行': 'Confirm to run',
+    确认删除选中的定时任务吗: 'Confirm to delete selected tasks?',
-    '确认运行定时任务': 'Confirm to run scheduled task',
+    确认运行: 'Confirm to run',
-    '确认保存': 'Confirm to save',
+    确认运行定时任务: 'Confirm to run scheduled task',
-    '确认保存文件': 'Confirm to save file',
+    确认保存: 'Confirm to save',
-    '确认重启': 'Confirm restart',
+    确认保存文件: 'Confirm to save file',
-    '确认启用': 'Confirm to enable',
+    确认重启: 'Confirm restart',
-    '确认禁用': 'Confirm to disable',
+    确认启用: 'Confirm to enable',
-    '确认': 'Confirm',
+    确认禁用: 'Confirm to disable',
-    '删除成功': 'Deleted successfully',
+    确认: 'Confirm',
-    '操作成功': 'Operation successful',
+    删除成功: 'Deleted successfully',
-    '参数不完整': 'Incomplete parameters',
+    操作成功: 'Operation successful',
-    '默认路径不支持删除': 'Default path cannot be deleted',
+    参数不完整: 'Incomplete parameters',
-    '必须在日志目录下': 'Must be within log directory',
+    默认路径不支持删除: 'Default path cannot be deleted',
+    必须在日志目录下: 'Must be within log directory',
     '备份数据上传成功，确认覆盖数据': 'Backup uploaded, confirm overwrite',
     '如果恢复失败，可进入容器执行': 'If restore fails, run in container:',
-    '系统将在': 'System will',
+    系统将在: 'System will',
-    '秒后自动刷新': 'refresh in seconds',
+    秒后自动刷新: 'refresh in seconds',
     '生成数据中...': 'Generating data...',
-    '每条数据 name 或者 value 字段不能为空，参考导出文件格式': 'Each entry must have name and value, see export format',
+    '每条数据 name 或者 value 字段不能为空，参考导出文件格式':
-    '不支持当前依赖类型': 'Unsupported dependency type',
+      'Each entry must have name and value, see export format',
-    '依赖已存在': 'Dependency already exists',
+    不支持当前依赖类型: 'Unsupported dependency type',
-    '依赖不存在': 'Dependency does not exist',
+    依赖已存在: 'Dependency already exists',
-    '该脚本正在运行中': 'Script is running',
+    依赖不存在: 'Dependency does not exist',
-    '该脚本未在运行中': 'Script is not running',
+    该脚本正在运行中: 'Script is running',
-    '文件内容为空': 'File content is empty',
+    该脚本未在运行中: 'Script is not running',
-    '文件名不能为空': 'File name cannot be empty',
+    文件内容为空: 'File content is empty',
-    '标签不能为空': 'Label cannot be empty',
+    文件名不能为空: 'File name cannot be empty',
-    '名称不能为空': 'Name cannot be empty',
+    标签不能为空: 'Label cannot be empty',
-    '名称不能为保留关键字': 'Name cannot be reserved keyword',
+    名称不能为空: 'Name cannot be empty',
-    '名称已存在': 'Name already exists',
+    名称不能为保留关键字: 'Name cannot be reserved keyword',
-    '密码错误': 'Incorrect password',
+    名称已存在: 'Name already exists',
-    '用户不存在': 'User does not exist',
+    密码错误: 'Incorrect password',
-    '请输入用户名和密码': 'Please enter username and password',
+    用户不存在: 'User does not exist',
-    '无权访问': 'Access denied',
+    请输入用户名和密码: 'Please enter username and password',
-    '登录成功': 'Login successful',
+    无权访问: 'Access denied',
-    '退出成功': 'Logout successful',
+    登录成功: 'Login successful',
+    退出成功: 'Logout successful',
     'Token 已失效': 'Token expired',
     'Token 无效': 'Invalid token',
-    '两步骤验证已开启': '2FA enabled',
+    两步骤验证已开启: '2FA enabled',
-    '两步骤验证已关闭': '2FA disabled',
+    两步骤验证已关闭: '2FA disabled',
-    '验证码错误': 'Invalid verification code',
+    验证码错误: 'Invalid verification code',
-    '验证码已过期': 'Verification code expired',
+    验证码已过期: 'Verification code expired',
-    '请先开启两步骤验证': 'Please enable 2FA first',
+    请先开启两步骤验证: 'Please enable 2FA first',
-    '两步骤验证密钥不能为空': '2FA secret cannot be empty',
+    两步骤验证密钥不能为空: '2FA secret cannot be empty',
-    '用户已存在': 'User already exists',
+    用户已存在: 'User already exists',
-    '用户名不能为admin': 'Username cannot be admin',
+    用户名不能为admin: 'Username cannot be admin',
-    '不能删除自己': 'Cannot delete yourself',
+    不能删除自己: 'Cannot delete yourself',
-    '不能禁用自己': 'Cannot disable yourself',
+    不能禁用自己: 'Cannot disable yourself',
-    '文件路径无效': 'Invalid file path',
+    文件路径无效: 'Invalid file path',
-    '保存成功': 'Saved successfully',
+    保存成功: 'Saved successfully',
     'client_id 或 client_seret 有误': 'Invalid client_id or client_secret',
-    '订阅执行完成': 'Subscription completed',
+    订阅执行完成: 'Subscription completed',
-    'wxPusher 服务的 TopicIds 和 Uids 至少配置一个才行': 'wxPusher requires at least one of TopicIds or Uids',
+    'wxPusher 服务的 TopicIds 和 Uids 至少配置一个才行':
+      'wxPusher requires at least one of TopicIds or Uids',
     'wxPusher SPT 不能为空': 'wxPusher SPT cannot be empty',
     'wxPusher SPT 最多支持 10 个': 'wxPusher SPT supports at most 10 tokens',
     'Url 或者 Body 中必须包含 $title': 'Url or Body must contain $title',
     '绝对路径必须在日志目录内或使用 /dev/null':
       'Absolute path must be within log directory or use /dev/null',
-    '请先登录': 'Please login first',
+    请先登录: 'Please login first',
     '运行中...': 'Running...',
     '日志不存在...': 'Log does not exist...',
-    '未分类': 'Uncategorized',
+    未分类: 'Uncategorized',
-    '任务重复运行': 'Duplicate task execution',
+    任务重复运行: 'Duplicate task execution',
-    '日志设置为忽略': 'Log set to ignore',
+    日志设置为忽略: 'Log set to ignore',
-    '定时规则不能为空': 'Schedule rule cannot be empty',
+    定时规则不能为空: 'Schedule rule cannot be empty',
-    '无效的定时规则': 'Invalid schedule rule',
+    无效的定时规则: 'Invalid schedule rule',
     '日志名称只能包含中文、字母、数字、下划线、连字符、点和路径分隔符':
       'Log name can only contain Chinese characters, letters, numbers, underscores, hyphens, dots, and path separators',
-    '日志名称不能超过100个字符': 'Log name cannot exceed 100 characters',
+    日志名称不能超过100个字符: 'Log name cannot exceed 100 characters',
-    '错误的用户名密码，请重试': 'Incorrect username or password, please try again',
+    '错误的用户名密码，请重试':
+      'Incorrect username or password, please try again',
     '该 IP 已被列入黑名单': 'This IP address has been blocked',
     '已加入 IP 黑名单': 'IP address added to the blacklist',
     '已移出 IP 黑名单': 'IP address removed from the blacklist',
-    '青龙快讯': 'QingLong',
+    青龙快讯: 'QingLong',
-    '登录通知': 'Login Notification',
+    登录通知: 'Login Notification',
-    '你于': 'You at ',
+    你于: 'You at ',
-    '在': ' in ',
+    在: ' in ',
-    端: '',
+    端: ' client',
+    内网IP: 'Private IP',
     登录失败: 'login failed',
     '，ip地址': ', IP: ',
     '任务#%s': 'Task#%s',
@@ -131,12 +250,13 @@ const messages: Record<string, Record<string, string>> = {
     青龙: 'QingLong',
     '【蛟龙】测试通知 https://t.me/jiao_long':
       '[JiaoLong] Test notification https://t.me/jiao_long',
-    '生成token': 'Generate token',
+    生成token: 'Generate token',
-    '删除日志': 'Delete logs',
+    删除日志: 'Delete logs',
     '## 开始执行... %s\n': '## Start executing... %s\n',
     '执行before命令...': 'Execute before command...',
     '执行after命令...': 'Execute after command...',
-    '## 执行结束... %s  耗时 %s 秒': '## Execution finished... %s  elapsed %s seconds',
+    '## 执行结束... %s  耗时 %s 秒':
+      '## Execution finished... %s  elapsed %s seconds',
     '调度器注册失败，任务创建已回滚':
       'Scheduler registration failed, task creation rolled back',
     '调度器注册失败，任务更新已回滚':
@@ -152,9 +272,18 @@ const messages: Record<string, Record<string, string>> = {
 
 let currentLang: string = 'zh';
 
-export function setLang(lang: string) {
+export function setLang(lang: string, persist = true) {
   currentLang = lang || 'zh';
-  shareStore.setLang(currentLang);
+  if (!persist) return;
+  // Translation is also used by standalone scheduler and CLI helpers. Load
+  // persistent storage only when changing the language, not when reading it.
+  const { shareStore } = require('./store') as typeof import('./store');
+  const language = currentLang;
+  return shareStore.setLang(language).then(() => {
+    if (currentLang === language && process.connected && process.send) {
+      process.send({ type: 'language-changed', lang: language }, () => {});
+    }
+  });
 }
 
 /** 系统默认语言：Intl 检测 → 'zh'（仅返回 zh/en） */

back/shared/languageSync.ts

@@ -0,0 +1,32 @@
+import cluster from 'cluster';
+import { setLang, systemLang } from './i18n';
+
+function languageMessage(
+  message: unknown,
+): message is { type: string; lang: string } {
+  const value = message as { type?: string; lang?: string } | null;
+  return (
+    value?.type === 'language-changed' && ['zh', 'en'].includes(value.lang!)
+  );
+}
+
+// Each worker owns a translation cache. Relay saved settings to live workers;
+// a replacement worker restores the persisted language before serving requests.
+export async function initializeLanguageSync() {
+  if (cluster.isPrimary) {
+    cluster.on('message', (_worker, message) => {
+      if (!languageMessage(message)) return;
+      setLang(message.lang, false);
+      for (const worker of Object.values(cluster.workers || {})) {
+        if (worker?.isConnected()) worker.send(message, () => {});
+      }
+    });
+    return;
+  } else {
+    process.on('message', (message) => {
+      if (languageMessage(message)) setLang(message.lang, false);
+    });
+  }
+  const { shareStore } = await import('./store');
+  setLang((await shareStore.getLang()) || systemLang(), false);
+}

back/shared/notificationAudit.ts

@@ -0,0 +1,48 @@
+import { Op } from 'sequelize';
+import {
+  SystemModel,
+  AuthDataType,
+  NotifyStatus,
+  NotifyLogInfo,
+} from '../data/system';
+
+// Both backend sends and script reports use the same bounded, best-effort sink.
+export async function persistNotificationAudit(
+  info: NotifyLogInfo,
+): Promise<void> {
+  try {
+    await SystemModel.create({
+      type: AuthDataType.notifyLog,
+      info: {
+        timestamp: Date.now(),
+        title: String(info.title || '').slice(0, 512),
+        content: String(info.content || '').slice(0, 8192),
+        status:
+          info.status === NotifyStatus.success
+            ? NotifyStatus.success
+            : NotifyStatus.fail,
+        notifyType: String(info.notifyType || '').slice(0, 64),
+        source: info.source === 'script' ? 'script' : 'system',
+        scriptName: String(info.scriptName || '').slice(0, 512),
+        taskId: /^\d+$/.test(info.taskId || '') ? info.taskId : undefined,
+      },
+    });
+    const oldest = await SystemModel.findAll({
+      where: { type: AuthDataType.notifyLog },
+      attributes: ['id'],
+      order: [['id', 'DESC']],
+      offset: 200,
+      limit: 1,
+    });
+    if (oldest[0]?.id) {
+      await SystemModel.destroy({
+        where: {
+          type: AuthDataType.notifyLog,
+          id: { [Op.lte]: oldest[0].id },
+        },
+      });
+    }
+  } catch (error) {
+    console.error('Failed to persist notification audit log');
+  }
+}

back/shared/pLimit.ts

@@ -79,29 +79,36 @@ class TaskLimit {
   private handleEvents() {
     this.cronLimit.on('add', () => {
       Logger.info(
-        `[schedule][任务加入队列] 运行中任务数: ${this.cronLimitActiveCount}, 等待中任务数: ${this.cronLimitPendingCount}`,
+        t('[schedule][任务加入队列] 运行中任务数: %s, 等待中任务数: %s'),
+        this.cronLimitActiveCount,
+        this.cronLimitPendingCount,
       );
     });
     this.cronLimit.on('active', () => {
       Logger.info(
-        `[schedule][开始处理任务] 运行中任务数: ${
+        t('[schedule][开始处理任务] 运行中任务数: %s, 等待中任务数: %s'),
-          this.cronLimitActiveCount + 1
+        this.cronLimitActiveCount + 1,
-        }, 等待中任务数: ${this.cronLimitPendingCount}`,
+        this.cronLimitPendingCount,
       );
     });
     this.cronLimit.on('completed', (param) => {
-      Logger.info(`[schedule][任务处理成功] 参数 ${JSON.stringify(param)}`);
+      Logger.info(t('[schedule][任务处理成功] 参数 %s'), JSON.stringify(param));
     });
     this.cronLimit.on('error', (error) => {
-      Logger.error(`[schedule][任务处理错误] 参数 ${JSON.stringify(error)}`);
+      Logger.error(
+        t('[schedule][任务处理错误] 参数 %s'),
+        JSON.stringify(error),
+      );
     });
     this.cronLimit.on('next', () => {
       Logger.info(
-        `[schedule][任务处理结束] 运行中任务数: ${this.cronLimitActiveCount}, 等待中任务数: ${this.cronLimitPendingCount}`,
+        t('[schedule][任务处理结束] 运行中任务数: %s, 等待中任务数: %s'),
+        this.cronLimitActiveCount,
+        this.cronLimitPendingCount,
       );
     });
     this.cronLimit.on('idle', () => {
-      Logger.info(`[schedule][任务队列] 空闲中...`);
+      Logger.info(t(`[schedule][任务队列] 空闲中...`));
     });
   }
 
@@ -172,13 +179,14 @@ class TaskLimit {
           (err, res) => {
             if (err) {
               Logger.error(
-                `[schedule][任务重复运行] 通知失败 ${JSON.stringify(err)}`,
+                t('[schedule][任务重复运行] 通知失败 %s'),
+                JSON.stringify(err),
               );
             }
           },
         );
       }
-      Logger.warn(`[schedule][任务重复运行] 参数 ${JSON.stringify(cron)}`);
+      Logger.warn(t('[schedule][任务重复运行] 参数 %s'), JSON.stringify(cron));
       return;
     }
     this.queuedCrons.set(cron.id, result);

back/shared/runCron.ts

@@ -1,3 +1,4 @@
+import { t } from './i18n';
 import { spawn } from 'cross-spawn';
 import taskLimit from './pLimit';
 import Logger from '../loaders/logger';
@@ -37,7 +38,9 @@ export function runCron(
             existingCron.status === CrontabStatus.queued)
         ) {
           Logger.info(
-            `[schedule][停止已运行任务] 任务ID: ${cron.id}, PID: ${existingCron.pid}`,
+            t('[schedule][停止已运行任务] 任务ID: %s, PID: %s'),
+            cron.id,
+            existingCron.pid,
           );
           await killTask(existingCron.pid, true);
           // Mark old running instances as stopped
@@ -59,7 +62,9 @@ export function runCron(
         }
       } catch (error) {
         Logger.error(
-          `[schedule][检查已运行任务失败] 任务ID: ${cron.id}, 错误: ${error}`,
+          t('[schedule][检查已运行任务失败] 任务ID: %s, 错误: %s'),
+          cron.id,
+          error,
         );
         throw error;
       }
@@ -67,17 +72,18 @@ export function runCron(
       // In particular, invalidation can happen while stopping a previous run.
       if (!isCurrent()) return;
       Logger.info(
-        `[schedule][开始执行任务] 参数 ${JSON.stringify({
+        t('[schedule][开始执行任务] 参数 %s'),
+        JSON.stringify({
           ...cron,
           command: cmd,
-        })}`,
+        }),
       );
       const cp = spawn(cmd, { shell: '/bin/bash' });
 
       const { completed } = observeChildProcess(cp, {
         onStderr: async (message) => {
           Logger.info(
-            '[schedule][任务标准错误] 命令: %s, 信息: %s',
+            t('[schedule][任务标准错误] 命令: %s, 信息: %s'),
             cmd,
             message,
           );
@@ -86,20 +92,20 @@ export function runCron(
       const result = await completed;
       if (result.error) {
         Logger.error(
-          '[schedule][执行任务失败] 命令: %s, 错误: %s',
+          t('[schedule][执行任务失败] 命令: %s, 错误: %s'),
           cmd,
           result.error.message,
         );
       }
       Logger.info(
-        '[schedule][执行任务结束] 任务ID: %s, 退出码: %j',
+        t('[schedule][执行任务结束] 任务ID: %s, 退出码: %j'),
         cron.id,
         result.code,
       );
       return { ...cron, command: cmd, pid: cp.pid, ...result } as any;
     } catch (error) {
       Logger.error(
-        '[schedule][创建任务失败] 命令: %s, 错误: %s',
+        t('[schedule][创建任务失败] 命令: %s, 错误: %s'),
         cmd,
         asError(error).message,
       );

back/shared/runtimeBuild.ts

@@ -0,0 +1,41 @@
+import { readFileSync } from 'fs';
+import path from 'path';
+import { createHash, randomUUID } from 'crypto';
+
+function read(filename: string): Buffer | undefined {
+  try {
+    return readFileSync(filename);
+  } catch {
+    return undefined;
+  }
+}
+
+function manifest(): { sourceCommit?: string } {
+  try {
+    const value = JSON.parse(
+      read(path.resolve(__dirname, '../../build-info.json'))?.toString() ||
+        '{}',
+    );
+    return value && typeof value === 'object' ? value : {};
+  } catch {
+    return {};
+  }
+}
+
+// Capture before serving requests. Reading the installed files on each request
+// would let an old process claim the identity of a newly copied build.
+const backend = read(path.resolve(__dirname, '../app.js'));
+const root = process.env.QL_DIR || path.resolve(__dirname, '../../..');
+const version = read(path.join(root, 'version.yaml'))
+  ?.toString()
+  .match(/^\uFEFF?version:\s*["']?(\d+\.\d+\.\d+)/m)?.[1];
+
+export const runtimeBuild = Object.freeze({
+  instanceId: randomUUID(),
+  parentPid: process.ppid,
+  version,
+  sourceCommit: manifest().sourceCommit,
+  backendSha256: backend
+    ? createHash('sha256').update(backend).digest('hex')
+    : undefined,
+});

back/shared/trustProxy.ts

@@ -1,6 +1,7 @@
 import express, { Application, Request } from 'express';
 import { AuthDataType, SystemModel } from '../data/system';
 import { normalizeClientIp } from './clientIp';
+import { t } from './i18n';
 
 const DEFAULT_TRUST_PROXY = 'loopback';
 
@@ -30,10 +31,10 @@ export function resolveTrustProxy(value?: string): TrustProxyValue {
 function validateTrustProxy(value: string): string {
   const setting = normalizeSetting(value);
   if (setting.length > 500 || /[\r\n]/.test(setting)) {
-    throw new Error('trust proxy 配置格式无效');
+    throw new Error(t('trust proxy 配置格式无效'));
   }
   if (/^\d+$/.test(setting) && Number(setting) > 20) {
-    throw new Error('代理层数不能超过 20');
+    throw new Error(t('代理层数不能超过 20'));
   }
 
   const probe = express();
@@ -73,7 +74,7 @@ export async function initializeTrustProxy(app: Application) {
 
 export async function updateTrustProxy(value: string) {
   if (getEnvironmentSetting()) {
-    throw new Error('环境变量 QL_TRUST_PROXY 已生效，系统设置不可覆盖');
+    throw new Error(t('环境变量 QL_TRUST_PROXY 已生效，系统设置不可覆盖'));
   }
 
   const trustProxy = validateTrustProxy(value);
@@ -81,7 +82,7 @@ export async function updateTrustProxy(value: string) {
     where: { type: AuthDataType.systemConfig },
   });
   if (!doc) {
-    throw new Error('系统配置不存在');
+    throw new Error(t('系统配置不存在'));
   }
 
   const plain = doc.get({ plain: true });

cli/scripts/build.cjs

@@ -17,6 +17,10 @@ fs.copyFileSync(
   path.join(root, 'src/internal/maintenance/upgradeArtifacts.cjs'),
   path.join(root, 'dist/internal/maintenance/upgradeArtifacts.cjs'),
 );
+fs.copyFileSync(
+  path.join(root, 'src/internal/maintenance/platformBundle.cjs'),
+  path.join(root, 'dist/internal/maintenance/platformBundle.cjs'),
+);
 require('esbuild').buildSync({
   entryPoints: [path.join(root, 'src/shared/cli/commander.ts')],
   outfile: path.join(root, 'dist/shared/cli/commander.js'),

cli/src/internal/execution/preloadSource.ts

@@ -82,7 +82,7 @@ export const nodePreloadSource: string = [
   '{ if [ -n "$inline" ]; then eval "$inline"; fi; } &&',
   "printf '%s\\\\n' '__sitecustomize__' &&",
   'node -e \'require("fs").writeFileSync(process.argv[1], JSON.stringify(process.env))\' "$output"`;',
-  "    if (task_before) console.log('执行前置命令\\n');",
+  "    if (task_before) console.log(process.env.QL_LANG === 'en' ? 'Executing before command\\n' : '执行前置命令\\n');",
   '    const hookArgs = JSON.parse(process.env.QL_CLI_PRELOAD_ARGS || JSON.stringify([fileName]));',
   "    const res = execFileSync('/bin/bash', ['-c', commands, 'ql-before', file_task_before, tempFile, task_before || '', ...hookArgs], {",
   "      encoding: 'utf-8', maxBuffer: 50 * 1024 * 1024,",
@@ -115,7 +115,7 @@ export const nodePreloadSource: string = [
   '      console.log(output);',
   '    }',
   '    if (task_before) {',
-  "      console.log('执行前置命令结束\\n');",
+  "      console.log(process.env.QL_LANG === 'en' ? 'Before command finished\\n' : '执行前置命令结束\\n');",
   '    }',
   '  } catch (error) {',
   "    if (!error.message.includes('spawnSync /bin/bash E2BIG')) {",
@@ -124,7 +124,7 @@ export const nodePreloadSource: string = [
   '      // environment variable is too large',
   '    }',
   '    if (task_before) {',
-  "      console.log('执行前置命令结束\\n');",
+  "      console.log(process.env.QL_LANG === 'en' ? 'Before command finished\\n' : '执行前置命令结束\\n');",
   '    }',
   '  }',
   '',
@@ -214,7 +214,7 @@ export const pythonPreloadSource: string = [
   '        ',
   '        task_before = os.getenv("task_before", "")',
   '        if task_before:',
-  '            print("执行前置命令\\n")',
+  '            print("Executing before command\\n" if os.environ.get("QL_LANG") == "en" else "执行前置命令\\n")',
   '        command = """file="$1"; output="$2"; inline="$3"; shift 3',
   'source "$file" "$@" &&',
   '{ if [ -n "$inline" ]; then eval "$inline"; fi; } &&',
@@ -244,12 +244,12 @@ export const pythonPreloadSource: string = [
   '        if len(output) > 0:',
   '            print(output)',
   '        if task_before:',
-  '            print("执行前置命令结束\\n")',
+  '            print("Before command finished\\n" if os.environ.get("QL_LANG") == "en" else "执行前置命令结束\\n")',
   '',
   '    except subprocess.CalledProcessError as error:',
   '        print(f"\\ue926 run task before error: {error}")',
   '        if task_before:',
-  '            print("执行前置命令结束\\n")',
+  '            print("Before command finished\\n" if os.environ.get("QL_LANG") == "en" else "执行前置命令结束\\n")',
   '    except OSError as error:',
   '        error_message = str(error)',
   '        if "Argument list too long" not in error_message:',
@@ -257,11 +257,11 @@ export const pythonPreloadSource: string = [
   '        # else:',
   '            # environment variable is too large',
   '        if task_before:',
-  '            print("执行前置命令结束\\n")',
+  '            print("Before command finished\\n" if os.environ.get("QL_LANG") == "en" else "执行前置命令结束\\n")',
   '    except Exception as error:',
   '        print(f"\\ue926 run task before error: {error}")',
   '        if task_before:',
-  '            print("执行前置命令结束\\n")',
+  '            print("Before command finished\\n" if os.environ.get("QL_LANG") == "en" else "执行前置命令结束\\n")',
   '',
   '    import task_before',
   '',

cli/src/internal/maintenance/panelUpgrade.cjs

@@ -0,0 +1,479 @@
+// Persistent panel jobs run independently of HTTP requests and browser sessions.
+const fs = require('node:fs/promises');
+const path = require('node:path');
+const { randomUUID } = require('node:crypto');
+const { spawn } = require('node:child_process');
+const http = require('node:http');
+const { setTimeout: delay } = require('node:timers/promises');
+const artifacts = require('./upgradeArtifacts.cjs');
+
+const active = new Set(['starting', 'running', 'restarting']);
+const stateFile = (tmp) => path.join(tmp, 'panel-upgrade.json');
+const logFile = (tmp) => path.join(tmp, 'panel-upgrade.log');
+const launches = new Map();
+
+async function withPanelLifecycle(root, tmp, env, operation, signal) {
+  if (!env.QL_CLI_ROOT)
+    return artifacts.withLifecycleHooks(root, tmp, env, operation);
+  if (!path.isAbsolute(env.QL_CLI_ROOT))
+    throw new Error('QL_CLI_ROOT must be absolute');
+  const internal = path.join(env.QL_CLI_ROOT, 'dist/internal');
+  // Keep the selected installation's operators loaded across file replacement.
+  const { createContext, sourceEnvironment } = require(path.join(
+    internal,
+    'runtime/context.js',
+  ));
+  const { cancellableOperation } = require(path.join(
+    internal,
+    'runtime/cancellation.js',
+  ));
+  const operator = require(path.join(internal, 'maintenance/operator.js'));
+  const { prepareUpgradeSelection } = require(path.join(
+    internal,
+    'maintenance/upgradeSelection.js',
+  ));
+  const context = createContext(
+    { root, 'data-dir': env.dir_data || env.QL_DATA_DIR },
+    env,
+  );
+  context.env = await sourceEnvironment(
+    context.env,
+    [
+      context.paths.file_config_user,
+      path.join(context.paths.dir_preload, 'lang_env.sh'),
+    ],
+    [],
+    { signal },
+  );
+  const hook = (name, args = [], signal) =>
+    cancellableOperation(signal, () => {
+      if (name === 'install')
+        return operator.installPanelDependencies(context, args[0]);
+      if (name === 'stop') return operator.stopPanel(context);
+      if (name === 'start') return operator.startPanel(context);
+      throw new Error('Invalid lifecycle operation');
+    });
+  return operation(hook, (selected) =>
+    prepareUpgradeSelection(context, selected.source, selected.static),
+  );
+}
+
+async function targetVersion(source) {
+  const text = await fs.readFile(path.join(source, 'version.yaml'), 'utf8');
+  const version = text.match(/^\uFEFF?version:\s*["']?(\d+\.\d+\.\d+)/m)?.[1];
+  if (!version) throw new Error('Invalid update version');
+  return version;
+}
+
+async function readRunningBuild(env) {
+  let base = env.QlBaseUrl || '';
+  if (base && !base.startsWith('/')) base = `/${base}`;
+  base = base.replace(/\/$/, '');
+  return new Promise((resolve, reject) => {
+    const timer = setTimeout(
+      () => request.destroy(new Error('Version check timed out')),
+      5000,
+    );
+    const request = http.get(
+      {
+        hostname: '127.0.0.1',
+        port: Number(env.QlPort || 5700),
+        path: `${base}/api/health`,
+      },
+      (response) => {
+        let body = '';
+        response.on('data', (chunk) => {
+          body += chunk;
+          if (body.length > 65536)
+            request.destroy(new Error('Invalid version response'));
+        });
+        response.on('error', reject);
+        response.on('end', () => {
+          try {
+            const result = JSON.parse(body);
+            if (
+              response.statusCode !== 200 ||
+              result.code !== 200 ||
+              result.data?.status !== 'ok'
+            )
+              throw new Error('后端启动检查失败。');
+            resolve(result.data.build);
+          } catch (error) {
+            reject(error);
+          }
+        });
+      },
+    );
+    request.on('error', reject);
+    request.on('close', () => clearTimeout(timer));
+  });
+}
+
+async function verifyRunningVersion(env, expected, previousBuild) {
+  const build = await readRunningBuild(env);
+  if (
+    !build ||
+    !build.instanceId ||
+    build.instanceId === previousBuild?.instanceId ||
+    (previousBuild?.parentPid !== undefined &&
+      build.parentPid === previousBuild.parentPid) ||
+    build.version !== expected.version ||
+    build.sourceCommit !== expected.sourceCommit ||
+    build.backendSha256 !== expected.backendSha256
+  )
+    throw new Error('启动版本与更新包不一致');
+}
+
+async function stagedMetadata(selected) {
+  const manifest = JSON.parse(
+    await fs.readFile(path.join(selected.static, 'build-info.json'), 'utf8'),
+  );
+  return {
+    version: await targetVersion(selected.source),
+    sourceCommit: manifest.sourceCommit,
+    backendSha256: manifest.files['build/app.js'],
+    stageDirectory: path.basename(path.dirname(selected.source)),
+  };
+}
+
+function assertSelected(expected, actual) {
+  for (const key of [
+    'sourceCommit',
+    'backendSha256',
+    'stageDirectory',
+    'version',
+  ]) {
+    if (expected[key] !== actual[key])
+      throw new Error('暂存更新已变化，请重新下载更新。');
+  }
+}
+
+async function save(tmp, state) {
+  const temporary = `${stateFile(tmp)}.${randomUUID()}`;
+  await fs.writeFile(temporary, JSON.stringify(state), { mode: 0o600 });
+  await fs.rename(temporary, stateFile(tmp));
+}
+
+async function readState(tmp) {
+  try {
+    return JSON.parse(await fs.readFile(stateFile(tmp), 'utf8'));
+  } catch (error) {
+    if (error.code === 'ENOENT') return { status: 'idle' };
+    throw error;
+  }
+}
+
+async function getStatus(tmp) {
+  const state = await readState(tmp);
+  if (active.has(state.status)) {
+    let alive = false;
+    if (Number.isSafeInteger(state.pid) && state.pid > 0) {
+      try {
+        process.kill(state.pid, 0);
+        alive = true;
+      } catch (error) {
+        alive = error.code === 'EPERM';
+      }
+    } else alive = Date.now() - state.startedAt < 10000;
+    if (!alive) {
+      state.status = 'failed';
+      state.error = '升级任务意外中断，请重试';
+    }
+  }
+  // Bound reads even when an installer produces a very large log.
+  const handle = await fs.open(logFile(tmp), 'r').catch(() => undefined);
+  if (handle) {
+    try {
+      const { size } = await handle.stat();
+      const buffer = Buffer.alloc(Math.min(size, 32768));
+      const { bytesRead } = await handle.read(
+        buffer,
+        0,
+        buffer.length,
+        Math.max(0, size - buffer.length),
+      );
+      state.log = buffer.subarray(0, bytesRead).toString();
+    } finally {
+      await handle.close();
+    }
+  }
+  return state;
+}
+
+async function startJob({ root, tmp, env = process.env }, action) {
+  if (!['download', 'apply'].includes(action))
+    throw new Error('Invalid upgrade action');
+  await fs.mkdir(tmp, { recursive: true });
+  const preceding = launches.get(tmp) || Promise.resolve();
+  const launching = preceding
+    .catch(() => {})
+    .then(() =>
+      artifacts.withUpgradeLock(
+        path.join(tmp, 'panel-job-launch'),
+        async () => {
+          const previous = await getStatus(tmp);
+          if (active.has(previous.status)) {
+            if (previous.action !== action)
+              throw new Error('已有更新或重载正在执行。');
+            return previous;
+          }
+          let selected;
+          let metadata;
+          if (action === 'apply') {
+            // Fail before launching a process or stopping the working panel.
+            try {
+              selected = await artifacts.selectedUpgrade(
+                tmp,
+                artifacts.releaseBranch(env),
+                env,
+              );
+              metadata = await stagedMetadata(selected);
+              if (previous.status === 'ready')
+                assertSelected(previous, metadata);
+            } catch (error) {
+              const { log, ...record } = previous;
+              await save(tmp, {
+                ...record,
+                status: 'failed',
+                phase: 'verifying',
+                error: error.message,
+              });
+              throw error;
+            }
+          } else if (previous.status === 'ready') return previous;
+          const state = {
+            id: randomUUID(),
+            action,
+            status: 'starting',
+            phase: action === 'apply' ? 'verifying' : 'downloading',
+            startedAt: Date.now(),
+            ...metadata,
+          };
+          await save(tmp, state);
+          const log = await fs.open(logFile(tmp), 'w', 0o600);
+          try {
+            const child = spawn(
+              process.execPath,
+              [__filename, 'launch', state.id],
+              {
+                env: { ...env, QL_DIR: root, dir_tmp: tmp },
+                detached: true,
+                stdio: ['ignore', log.fd, log.fd],
+              },
+            );
+            await new Promise((resolve, reject) => {
+              child.once('exit', (code, signal) => {
+                if (code === 0) resolve();
+                else
+                  reject(
+                    new Error(`Upgrade launcher exited (${signal || code})`),
+                  );
+              });
+              child.once('error', reject);
+            });
+            child.unref();
+          } catch (error) {
+            await save(tmp, {
+              ...state,
+              status: 'failed',
+              error: error.message,
+            });
+            throw error;
+          } finally {
+            await log.close();
+          }
+          return state;
+        },
+        env,
+      ),
+    );
+  launches.set(tmp, launching);
+  try {
+    return await launching;
+  } finally {
+    if (launches.get(tmp) === launching) launches.delete(tmp);
+  }
+}
+
+async function runJob({ root, tmp, env = process.env }, id) {
+  let state = await readState(tmp);
+  if (state.id !== id || state.status !== 'starting')
+    throw new Error('Stale upgrade job');
+  const controller = new AbortController();
+  const abort = () => controller.abort(new Error('升级任务意外中断，请重试'));
+  process.once('SIGTERM', abort);
+  process.once('SIGINT', abort);
+  // Serialize progress writes so an older tick cannot overwrite ready/completed.
+  let writes = Promise.resolve();
+  const report = (patch) => {
+    state = { ...state, ...patch, pid: process.pid, updatedAt: Date.now() };
+    const snapshot = { ...state };
+    writes = writes.then(() => save(tmp, snapshot));
+    return writes;
+  };
+  try {
+    await report({ status: 'running' });
+    let terminal;
+    await artifacts.withUpgradeLock(
+      tmp,
+      () =>
+        withPanelLifecycle(
+          root,
+          tmp,
+          env,
+          async (hook, prepareSelection) => {
+            const run = (program, args, capture) =>
+              artifacts.runProcess(
+                env,
+                program,
+                args,
+                capture,
+                controller.signal,
+              );
+            if (state.action === 'download') {
+              const selected = await artifacts.stageUpgrade({
+                root,
+                tmp,
+                env,
+                mirror: 'github',
+                fallbackMirror: 'gitee',
+                run,
+                signal: controller.signal,
+                onProgress: report,
+                install: (source) =>
+                  hook('install', [source], controller.signal),
+              });
+              terminal = {
+                status: 'ready',
+                phase: 'ready',
+                ...(await stagedMetadata(selected)),
+              };
+            } else {
+              const selected = await artifacts.selectedUpgrade(
+                tmp,
+                artifacts.releaseBranch(env),
+                env,
+              );
+              assertSelected(state, await stagedMetadata(selected));
+              const previousBuild = await readRunningBuild(env).catch(
+                () => undefined,
+              );
+              const selection = await prepareSelection?.(selected);
+              try {
+                await artifacts.reloadSystem({
+                  root,
+                  tmp,
+                  env,
+                  data:
+                    env.dir_data || env.QL_DATA_DIR || path.join(root, 'data'),
+                  staticRoot: env.dir_static || path.join(root, 'static'),
+                  config:
+                    env.dir_config ||
+                    path.join(
+                      env.QL_DATA_DIR || path.join(root, 'data'),
+                      'config',
+                    ),
+                  lifecycle: {
+                    signal: controller.signal,
+                    stop: async () => {
+                      await report({
+                        status: 'restarting',
+                        phase: 'restarting',
+                      });
+                      await hook('stop');
+                    },
+                    start: async (recover) => {
+                      await hook(
+                        'start',
+                        [],
+                        recover ? undefined : controller.signal,
+                      );
+                      await artifacts.waitForHealth(
+                        env,
+                        60000,
+                        recover ? undefined : controller.signal,
+                      );
+                      if (!recover)
+                        await verifyRunningVersion(env, state, previousBuild);
+                    },
+                  },
+                  additionalReplacements: selection
+                    ? [{ source: selection.source, target: selection.target }]
+                    : [],
+                });
+              } finally {
+                if (selection)
+                  await fs.rm(selection.directory, {
+                    recursive: true,
+                    force: true,
+                  });
+              }
+              terminal = { status: 'completed', phase: 'completed' };
+            }
+          },
+          controller.signal,
+        ),
+      env,
+    );
+    await report(terminal);
+  } catch (error) {
+    console.error(error);
+    // A failed write must not prevent recording the final failure.
+    await writes.catch(() => {});
+    writes = Promise.resolve();
+    await report({ status: 'failed', error: error.message });
+  } finally {
+    process.removeListener('SIGTERM', abort);
+    process.removeListener('SIGINT', abort);
+    await writes;
+  }
+}
+
+module.exports = {
+  getStatus,
+  startJob,
+  runJob,
+  withPanelLifecycle,
+  readRunningBuild,
+  verifyRunningVersion,
+  stagedMetadata,
+};
+async function launchWorker(id) {
+  // detached creates a session but keeps the original parent. PM2 kills the
+  // backend's entire descendant tree, so an intermediate launcher must exit
+  // before the worker is allowed to stop that backend.
+  const child = spawn(process.execPath, [__filename, 'worker', id], {
+    env: { ...process.env, QL_UPGRADE_LAUNCHER_PID: String(process.pid) },
+    detached: true,
+    stdio: 'inherit',
+  });
+  await new Promise((resolve, reject) => {
+    child.once('spawn', resolve);
+    child.once('error', reject);
+  });
+  child.unref();
+}
+
+async function runOrphanedWorker(id) {
+  const launcher = Number(process.env.QL_UPGRADE_LAUNCHER_PID);
+  const deadline = Date.now() + 10000;
+  while (process.platform !== 'win32' && process.ppid === launcher) {
+    if (Date.now() >= deadline)
+      throw new Error('Upgrade launcher did not exit');
+    await delay(10);
+  }
+  const root = process.env.QL_DIR;
+  await runJob(
+    { root, tmp: process.env.dir_tmp || path.join(root, '.tmp') },
+    id,
+  );
+}
+
+if (require.main === module && ['launch', 'worker'].includes(process.argv[2])) {
+  const operation =
+    process.argv[2] === 'launch' ? launchWorker : runOrphanedWorker;
+  operation(process.argv[3]).catch((error) => {
+    console.error(error);
+    process.exitCode = 1;
+  });
+}

cli/src/internal/maintenance/platformBundle.cjs

@@ -0,0 +1,471 @@
+// One installed verifier handles release downloads and local offline archives.
+const fs = require('node:fs/promises');
+const path = require('node:path');
+const crypto = require('node:crypto');
+const os = require('node:os');
+const { execFile } = require('node:child_process');
+const { promisify } = require('node:util');
+const tar = require('tar');
+const execute = promisify(execFile);
+const sha256 = (bytes) =>
+  crypto.createHash('sha256').update(bytes).digest('hex');
+const inside = (root, filename) => {
+  const relative = path.relative(root, filename);
+  return (
+    relative !== '..' &&
+    !relative.startsWith(`..${path.sep}`) &&
+    !path.isAbsolute(relative)
+  );
+};
+const versionParts = (v) => String(v).replace(/^v/, '').split('.').map(Number);
+function atLeast(actual, minimum) {
+  const a = versionParts(actual),
+    b = versionParts(minimum);
+  return (
+    b.every((n) => Number.isFinite(n)) &&
+    a.every((n) => Number.isFinite(n)) &&
+    (a[0] > b[0] ||
+      (a[0] === b[0] &&
+        (a[1] > b[1] || (a[1] === b[1] && (a[2] || 0) >= (b[2] || 0)))))
+  );
+}
+
+async function runtimeTarget() {
+  let libc, libcVersion;
+  if (process.platform === 'linux') {
+    const header = process.report.getReport().header;
+    if (header.glibcVersionRuntime) {
+      libc = 'glibc';
+      libcVersion = header.glibcVersionRuntime;
+    } else {
+      let text = '';
+      try {
+        text = (await execute('ldd', ['--version'])).stdout;
+      } catch (error) {
+        text = `${error.stdout || ''}\n${error.stderr || ''}`;
+      }
+      const match = text.match(/musl[\s\S]*?Version\s+(\d+\.\d+\.\d+)/i);
+      if (!match)
+        throw new Error(
+          'Cannot identify Linux libc; refusing a native dependency bundle',
+        );
+      libc = 'musl';
+      libcVersion = match[1];
+    }
+  }
+  const armVersion =
+    process.arch === 'arm'
+      ? Number(process.config.variables.arm_version)
+      : undefined;
+  if (process.arch === 'arm' && ![6, 7, 8].includes(armVersion))
+    throw new Error('Cannot identify ARM instruction set');
+  const arch =
+    process.arch === 'arm' ? `armv${armVersion >= 7 ? 7 : 6}` : process.arch;
+  const armFloatAbi =
+    process.arch === 'arm' ? process.config.variables.arm_float_abi : undefined;
+  if (
+    process.arch === 'arm' &&
+    !['hard', 'soft', 'softfp'].includes(armFloatAbi)
+  )
+    throw new Error('Cannot identify ARM floating-point ABI');
+  return {
+    platform: process.platform,
+    arch,
+    libc,
+    libcVersion,
+    endianness: os.endianness(),
+    armFloatAbi,
+  };
+}
+
+function targetKey(target) {
+  return [target.platform, target.arch, target.libc].filter(Boolean).join('-');
+}
+
+function assertCompatible(manifest, target, node = process.versions.node) {
+  if (
+    manifest.format !== 2 ||
+    !/^[a-f0-9]{40}$/.test(manifest.sourceCommit) ||
+    !/^[a-f0-9]{64}$/.test(manifest.lockfileSha256) ||
+    !manifest.files ||
+    typeof manifest.files !== 'object' ||
+    Array.isArray(manifest.files) ||
+    !Number.isSafeInteger(manifest.nodeApi) ||
+    manifest.nodeApi < 6
+  )
+    throw new Error('Invalid platform bundle manifest');
+  if (targetKey(manifest.target || {}) !== targetKey(target))
+    throw new Error(`Bundle platform mismatch: need ${targetKey(target)}`);
+  if (
+    !atLeast(node, manifest.nodeMinimum) ||
+    Number(process.versions.napi) < manifest.nodeApi
+  )
+    throw new Error(
+      `Bundle requires Node >= ${manifest.nodeMinimum} and Node-API ${manifest.nodeApi}; the existing Node is retained`,
+    );
+  if (
+    manifest.target.endianness !== target.endianness ||
+    manifest.target.armFloatAbi !== target.armFloatAbi
+  )
+    throw new Error(
+      'Bundle native byte order or ARM floating-point ABI mismatch',
+    );
+  if (target.libc && !atLeast(target.libcVersion, manifest.target.libcMinimum))
+    throw new Error(
+      `Bundle requires ${target.libc} >= ${manifest.target.libcMinimum}`,
+    );
+}
+
+async function inventory(roots) {
+  const files = {};
+  async function visit(directory, prefix) {
+    for (const name of (await fs.readdir(directory)).sort()) {
+      const filename = path.join(directory, name),
+        relative = `${prefix}/${name}`;
+      const stat = await fs.lstat(filename);
+      if (stat.isDirectory()) await visit(filename, relative);
+      else if (stat.isFile())
+        files[relative] = {
+          type: 'file',
+          mode: stat.mode & 0o777,
+          sha256: sha256(await fs.readFile(filename)),
+        };
+      else if (stat.isSymbolicLink()) {
+        const link = await fs.readlink(filename);
+        const boundary = roots[prefix.split('/')[0]];
+        if (
+          path.isAbsolute(link) ||
+          !inside(boundary, path.resolve(path.dirname(filename), link)) ||
+          !inside(await fs.realpath(boundary), await fs.realpath(filename))
+        )
+          throw new Error(`Bundle link escapes its payload: ${relative}`);
+        files[relative] = { type: 'link', link };
+      } else throw new Error(`Unsupported bundle entry: ${relative}`);
+    }
+  }
+  for (const [name, root] of Object.entries(roots)) await visit(root, name);
+  return files;
+}
+
+async function verifyPayload(selected, manifest, target) {
+  assertCompatible(manifest, target);
+  for (const name of ['data', '.tmp', '.git', '.env', 'static']) {
+    if (
+      await fs.lstat(path.join(selected.source, name)).catch((error) => {
+        if (error.code !== 'ENOENT') throw error;
+        return null;
+      })
+    )
+      throw new Error(`Reserved installation path in bundle: ${name}`);
+  }
+  const actual = await inventory({
+    source: selected.source,
+    static: selected.static,
+  });
+  const names = Object.keys(actual).sort(),
+    expected = Object.keys(manifest.files).sort();
+  if (
+    JSON.stringify(names) !== JSON.stringify(expected) ||
+    names.some(
+      (name) =>
+        JSON.stringify(actual[name]) !== JSON.stringify(manifest.files[name]),
+    )
+  )
+    throw new Error(
+      'Platform bundle files or dependency checksums do not match',
+    );
+  if (
+    sha256(await fs.readFile(path.join(selected.source, 'pnpm-lock.yaml'))) !==
+    manifest.lockfileSha256
+  )
+    throw new Error('Platform bundle lockfile mismatch');
+  await fs.access(
+    path.join(selected.source, 'node_modules/sqlite3/package.json'),
+  );
+}
+
+async function smokeDependencies(source, signal) {
+  // This probe is installed verifier code, never a verifier supplied by an archive.
+  const probe = `
+    const path = require('node:path'),fs = require('node:fs');
+    const root = fs.realpathSync(process.cwd());
+    const r = require('node:module').createRequire(path.join(root,'package.json'));
+    for (const name of ['sqlite3','sequelize','cron-parser','@grpc/grpc-js','undici']) {
+      if (!fs.realpathSync(r.resolve(name)).startsWith(root + path.sep)) throw new Error('Dependency outside staged payload: '+name);
+      r(name);
+    }
+    const sqlite=r('sqlite3'), db=new sqlite.Database(':memory:');
+    db.serialize(()=>{db.run('CREATE TABLE verify_bundle(value INTEGER)');db.run('INSERT INTO verify_bundle VALUES(42)');
+      db.get('SELECT value FROM verify_bundle',(err,row)=>{if(err||row.value!==42){console.error(err||'SQLite readback failed');process.exitCode=1;}db.close();});});
+  `;
+  await execute(process.execPath, ['-e', probe], {
+    cwd: source,
+    env: { ...process.env, NODE_PATH: '', NODE_OPTIONS: '' },
+    timeout: 30000,
+    signal,
+  });
+}
+
+async function extractArchive(archive, destination) {
+  const entries = new Map(),
+    links = new Set();
+  let unpacked = 0,
+    invalid;
+  await tar.t({
+    file: archive,
+    strict: true,
+    onReadEntry(entry) {
+      try {
+        const name = entry.path.replace(/\/$/, '');
+        if (
+          !name ||
+          name.includes('\\') ||
+          /[\x00-\x1f\x7f]/.test(name) ||
+          name.split('/').some((p) => !p || p === '.' || p === '..') ||
+          !(name === 'qinglong' || name.startsWith('qinglong/')) ||
+          entries.has(name) ||
+          !['File', 'OldFile', 'Directory', 'SymbolicLink'].includes(entry.type)
+        )
+          throw new Error(`Unsafe bundle archive entry: ${name}`);
+        unpacked += entry.size;
+        if (unpacked > 2 * 1024 ** 3 || entries.size > 200000)
+          throw new Error('Bundle archive exceeds extraction limits');
+        entries.set(name, entry.type);
+        if (entry.type === 'SymbolicLink') {
+          if (
+            path.posix.isAbsolute(entry.linkpath) ||
+            entry.linkpath.includes('\\') ||
+            !inside(
+              '/qinglong',
+              path.posix.resolve('/', path.posix.dirname(name), entry.linkpath),
+            )
+          )
+            throw new Error('Unsafe bundle symlink');
+          links.add(name);
+        }
+      } catch (error) {
+        invalid ||= error;
+      }
+    },
+  });
+  if (invalid) throw invalid;
+  for (const name of entries.keys()) {
+    let parent = path.posix.dirname(name);
+    while (parent !== '.') {
+      if (links.has(parent))
+        throw new Error('Archive writes through a symlink');
+      parent = path.posix.dirname(parent);
+    }
+  }
+  await tar.x({
+    file: archive,
+    cwd: destination,
+    strict: true,
+    preservePaths: false,
+    noChown: true,
+    umask: 0,
+  });
+}
+
+async function stageBundle({
+  root,
+  tmp,
+  env,
+  run,
+  signal,
+  onProgress,
+  verifyStatic,
+  download,
+  probe = smokeDependencies,
+}) {
+  let local = env.QL_UPGRADE_FILE;
+  if (!local) {
+    const current = JSON.parse(
+      await fs
+        .readFile(path.join(root, 'package.json'), 'utf8')
+        .catch((error) => {
+          if (error.code !== 'ENOENT') throw error;
+          return '{}';
+        }),
+    );
+    if (current.qinglongUpgradeFormat !== 2) return null; // One-time compatibility path for older releases.
+  }
+  const target = await runtimeTarget();
+  const branch = ['develop', 'debian-dev'].includes(env.QL_BRANCH)
+    ? 'develop'
+    : 'master';
+  const workspace = await fs.mkdtemp(path.join(tmp, 'upgrade-'));
+  const report = onProgress || (async () => {});
+  try {
+    const archive = path.join(workspace, 'bundle.tar.gz');
+    let expectedCommit;
+    if (local) {
+      if (!path.isAbsolute(local))
+        throw new Error('Offline bundle path must be absolute');
+      // Snapshot the local input so replacing it cannot race validation/extraction.
+      await fs.copyFile(local, archive);
+    } else {
+      const indexUrl =
+        env.QL_UPGRADE_INDEX_URL ||
+        `https://github.com/whyour/qinglong/releases/download/upgrade-${branch}/latest.json`;
+      const checkUrl = (url) => {
+        const parsed = new URL(url);
+        if (
+          parsed.protocol !== 'https:' &&
+          !(
+            parsed.protocol === 'http:' &&
+            ['127.0.0.1', '[::1]'].includes(parsed.hostname)
+          )
+        )
+          throw new Error('Upgrade URLs require HTTPS');
+      };
+      checkUrl(indexUrl);
+      const indexFile = path.join(workspace, 'index.json');
+      await run('curl', [
+        '--fail',
+        '--silent',
+        '--show-error',
+        '--location',
+        '--proto',
+        new URL(indexUrl).protocol === 'http:' ? '=http,https' : '=https',
+        '--proto-redir',
+        '=https',
+        '--header',
+        'Cache-Control: no-cache',
+        '--connect-timeout',
+        '10',
+        '--max-time',
+        '30',
+        '--max-filesize',
+        '1048576',
+        '--output',
+        indexFile,
+        indexUrl,
+      ]);
+      const index = JSON.parse(await fs.readFile(indexFile, 'utf8'));
+      const entry = index.packages?.[targetKey(target)];
+      if (
+        index.format !== 2 ||
+        !/^[a-f0-9]{40}$/.test(index.sourceCommit) ||
+        !entry ||
+        !Number.isSafeInteger(entry.size) ||
+        entry.size <= 0 ||
+        entry.size > 512 * 1024 ** 2 ||
+        !/^[a-f0-9]{64}$/.test(entry.sha256)
+      )
+        throw new Error(`No verified update bundle for ${targetKey(target)}`);
+      checkUrl(entry.url);
+      expectedCommit = index.sourceCommit;
+      await report({
+        phase: 'downloading',
+        artifact: 'qinglong-bundle',
+        downloadedBytes: 0,
+        totalBytes: entry.size,
+        percent: 0,
+      });
+      await download(
+        run,
+        archive,
+        entry.url,
+        'qinglong-bundle',
+        report,
+        true,
+        entry,
+      );
+    }
+    if ((await fs.stat(archive)).size > 512 * 1024 ** 2)
+      throw new Error('Bundle is too large');
+    await report({
+      phase: 'extracting',
+      artifact: 'qinglong-bundle',
+      percent: null,
+    });
+    await extractArchive(archive, workspace);
+    const incoming = path.join(workspace, 'qinglong');
+    const manifest = JSON.parse(
+      await fs.readFile(path.join(incoming, 'bundle.json'), 'utf8'),
+    );
+    if (expectedCommit && manifest.sourceCommit !== expectedCommit)
+      throw new Error('Update index and bundle commit differ');
+    const selected = {
+      source: path.join(workspace, `qinglong-${branch}`),
+      static: path.join(workspace, `qinglong-static-${branch}`),
+    };
+    await fs.rename(path.join(incoming, 'source'), selected.source);
+    await fs.rename(path.join(incoming, 'static'), selected.static);
+    await report({ phase: 'verifying', percent: null });
+    await verifyPayload(selected, manifest, target);
+    const build = await verifyStatic(selected.source, selected.static, env);
+    if (build.sourceCommit !== manifest.sourceCommit)
+      throw new Error('Bundle and build commit differ');
+    await report({ phase: 'dependencies', percent: null });
+    await probe(selected.source, signal);
+    await fs.writeFile(
+      path.join(workspace, 'bundle.json'),
+      JSON.stringify(manifest),
+      { flag: 'wx', mode: 0o600 },
+    );
+    await fs.writeFile(
+      path.join(workspace, 'ready.json'),
+      JSON.stringify({
+        ...selected,
+        root: path.resolve(root),
+        sourceCommit: manifest.sourceCommit,
+        dependenciesChanged: true,
+        bundle: true,
+      }),
+      { flag: 'wx', mode: 0o600 },
+    );
+    const pointer = path.join(workspace, 'pointer.json');
+    await fs.writeFile(
+      pointer,
+      JSON.stringify({ directory: path.basename(workspace) }),
+      { flag: 'wx', mode: 0o600 },
+    );
+    signal?.throwIfAborted();
+    const readyPointer = path.join(tmp, `upgrade-ready-${branch}.json`);
+    const previous = await fs
+      .readFile(readyPointer, 'utf8')
+      .catch(() => 'null');
+    await fs.rename(pointer, readyPointer);
+    try {
+      const old = JSON.parse(previous)?.directory;
+      if (
+        /^upgrade-[A-Za-z0-9_-]+$/.test(old) &&
+        old !== path.basename(workspace)
+      )
+        await fs.rm(path.join(tmp, old), { recursive: true, force: true });
+    } catch {
+      /* Committed readiness must survive cleanup failure. */
+    }
+    return selected;
+  } catch (error) {
+    await fs.rm(workspace, { recursive: true, force: true });
+    throw error;
+  }
+}
+
+async function verifyStagedBundle(selected) {
+  const manifest = JSON.parse(
+    await fs.readFile(
+      path.join(path.dirname(selected.source), 'bundle.json'),
+      'utf8',
+    ),
+  );
+  await verifyPayload(selected, manifest, await runtimeTarget());
+  await smokeDependencies(selected.source);
+}
+
+module.exports = {
+  atLeast,
+  runtimeTarget,
+  targetKey,
+  assertCompatible,
+  inventory,
+  verifyPayload,
+  smokeDependencies,
+  extractArchive,
+  stageBundle,
+  verifyStagedBundle,
+  sha256,
+};

cli/src/internal/maintenance/upgrade.ts

@@ -11,13 +11,21 @@ import { installPanelDependencies, startPanel, stopPanel } from './operator';
 // The Bash image updater and local CLI must enforce the same build provenance.
 const artifacts = require('./upgradeArtifacts.cjs') as {
   releaseBranch(env: NodeJS.ProcessEnv): string;
-  verifyUpgrade(source: string, staticRoot: string): Promise<unknown>;
+  verifyUpgrade(
+    source: string,
+    staticRoot: string,
+    env?: NodeJS.ProcessEnv,
+  ): Promise<unknown>;
   waitForHealth(
     env: NodeJS.ProcessEnv,
     timeout?: number,
     signal?: AbortSignal,
   ): Promise<void>;
-  withUpgradeLock<T>(tmp: string, operation: () => Promise<T>): Promise<T>;
+  withUpgradeLock<T>(
+    tmp: string,
+    operation: () => Promise<T>,
+    env?: NodeJS.ProcessEnv,
+  ): Promise<T>;
   stageUpgrade(options: {
     root: string;
     tmp: string;
@@ -30,6 +38,7 @@ const artifacts = require('./upgradeArtifacts.cjs') as {
   selectedUpgrade(
     tmp: string,
     branch: string,
+    env?: NodeJS.ProcessEnv,
   ): Promise<{ source: string; static: string }>;
 };
 
@@ -69,7 +78,9 @@ export async function stageUpgrade(
   context: LocalContext,
   mirror: 'github' | 'gitee',
 ): Promise<{ source: string; static: string }> {
-  return artifacts.withUpgradeLock(context.paths.dir_tmp!, () =>
+  return artifacts.withUpgradeLock(
+    context.paths.dir_tmp!,
+    () =>
       artifacts.stageUpgrade({
         root: context.root,
         tmp: context.paths.dir_tmp!,
@@ -80,6 +91,7 @@ export async function stageUpgrade(
           checkedProcess(program, args, { env: context.env, capture }),
         install: (source) => installPanelDependencies(context, source),
       }),
+    context.env,
   );
 }
 
@@ -89,6 +101,7 @@ async function selectedUpgrade(
   return artifacts.selectedUpgrade(
     context.paths.dir_tmp!,
     releaseBranch(context),
+    context.env,
   );
 }
 
@@ -259,7 +272,7 @@ export async function reloadPanel(
   const staticRoot = selected.static;
   await validateTree(source, context.env);
   await validateTree(staticRoot, context.env);
-  await artifacts.verifyUpgrade(source, staticRoot);
+  await artifacts.verifyUpgrade(source, staticRoot, context.env);
   const entries = await fs.readdir(source);
   const reserved = new Set(['data', '.tmp', 'static', '.git', '.env']);
   const relativeData = path.relative(context.root, context.data);
@@ -284,7 +297,9 @@ export async function reloadPanel(
   if (selection)
     replacements.push({ source: selection.source, target: selection.target });
   try {
-    return await artifacts.withUpgradeLock(context.paths.dir_tmp!, () =>
+    return await artifacts.withUpgradeLock(
+      context.paths.dir_tmp!,
+      () =>
         replaceAndReload(context, replacements, {
           stop: stopPanel,
           start: async (ctx) => {
@@ -293,6 +308,7 @@ export async function reloadPanel(
             return service;
           },
         }),
+      context.env,
     );
   } finally {
     if (selection)

cli/src/internal/maintenance/upgradeArtifacts.cjs

@@ -7,11 +7,41 @@ const { spawn } = require('node:child_process');
 const http = require('node:http');
 const { setTimeout: delay } = require('node:timers/promises');
 
+const upgradeEnglish = {
+  '更新包下载及校验成功...': 'Update package downloaded and verified...',
+  '更新及启动检查成功...':
+    'Update and startup checks completed successfully...',
+  '更新失败: %s': 'Update failed: %s',
+  '构建清单无效。': 'Invalid or dirty build manifest',
+  '缺少构建产物: %s': 'Missing build output: %s',
+  '源码与构建依赖不一致。': 'Source and build lockfiles differ',
+  '构建包含非法文件: %s': 'Unsupported build entry: %s',
+  '构建文件缺失、损坏或混入旧文件。': 'Build checksum mismatch',
+  '已有更新或重载正在执行。': 'Another upgrade is running',
+  'GitHub 下载失败，切换 Gitee...': 'GitHub download failed; retrying Gitee',
+  '升级归档路径无效。': 'Invalid archive paths',
+  '升级归档包含符号链接。': 'Archive contains symlinks',
+  '暂存升级指针无效。': 'Invalid staged upgrade pointer',
+  '暂存目录无效。': 'Invalid staging directory',
+  '暂存升级就绪记录不匹配。': 'Invalid upgrade readiness',
+  '运行依赖已变化，请重新下载更新。':
+    'Installed dependencies changed; download the update again',
+  '保留备份: %s': 'Retained backup: %s',
+  '后端启动检查失败。': 'Backend failed health check',
+  '保留生命周期快照: %s': 'Retained lifecycle snapshot: %s',
+};
+
+function upgradeMessage(key, env = process.env, ...values) {
+  const template = env.QL_LANG === 'en' ? upgradeEnglish[key] ?? key : key;
+  let index = 0;
+  return template.replace(/%s/g, () => String(values[index++] ?? ''));
+}
+
 const hash = (bytes) => createHash('sha256').update(bytes).digest('hex');
 const releaseBranch = (env) =>
   ['develop', 'debian-dev'].includes(env.QL_BRANCH) ? 'develop' : 'master';
 
-async function manifestAt(staticRoot) {
+async function manifestAt(staticRoot, env = process.env) {
   const manifest = JSON.parse(
     await fs.readFile(path.join(staticRoot, 'build-info.json'), 'utf8'),
   );
@@ -24,22 +54,20 @@ async function manifestAt(staticRoot) {
     typeof manifest.files !== 'object' ||
     Array.isArray(manifest.files)
   )
-    throw new Error('Invalid or dirty build manifest / 构建清单无效。');
+    throw new Error(upgradeMessage('构建清单无效。', env));
   for (const required of ['build/app.js', 'dist/index.html'])
     if (!Object.hasOwn(manifest.files, required))
-      throw new Error(`Missing build output / 缺少构建产物: ${required}`);
+      throw new Error(upgradeMessage('缺少构建产物: %s', env, required));
   return manifest;
 }
 
-async function verifyUpgrade(source, staticRoot) {
+async function verifyUpgrade(source, staticRoot, env = process.env) {
-  const manifest = await manifestAt(staticRoot);
+  const manifest = await manifestAt(staticRoot, env);
   if (
     hash(await fs.readFile(path.join(source, 'pnpm-lock.yaml'))) !==
     manifest.lockfileSha256
   )
-    throw new Error(
+    throw new Error(upgradeMessage('源码与构建依赖不一致。', env));
-      'Source and build lockfiles differ / 源码与构建依赖不一致。',
-    );
   await fs.access(path.join(source, 'package.json'));
   await fs.access(path.join(source, 'sample/config.sample.sh'));
   const files = {};
@@ -50,8 +78,7 @@ async function verifyUpgrade(source, staticRoot) {
       const filename = path.join(directory, entry.name);
       if (entry.isDirectory()) await visit(filename, `${name}/`);
       else if (entry.isFile()) files[name] = hash(await fs.readFile(filename));
-      else
+      else throw new Error(upgradeMessage('构建包含非法文件: %s', env, name));
-        throw new Error(`Unsupported build entry / 构建包含非法文件: ${name}`);
     }
   }
   await visit(staticRoot);
@@ -61,13 +88,11 @@ async function verifyUpgrade(source, staticRoot) {
     JSON.stringify(actual) !== JSON.stringify(expected) ||
     actual.some((name) => files[name] !== manifest.files[name])
   )
-    throw new Error(
+    throw new Error(upgradeMessage('构建文件缺失、损坏或混入旧文件。', env));
-      'Build checksum mismatch / 构建文件缺失、损坏或混入旧文件。',
-    );
   return manifest;
 }
 
-async function withUpgradeLock(tmp, operation) {
+async function withUpgradeLock(tmp, operation, env = process.env) {
   await fs.mkdir(tmp, { recursive: true });
   const lock = path.join(tmp, 'upgrade.lock');
   const token = randomUUID();
@@ -123,9 +148,7 @@ async function withUpgradeLock(tmp, operation) {
         }
       }
       if (!stale)
-        throw new Error(
+        throw new Error(upgradeMessage('已有更新或重载正在执行。', env));
-          'Another upgrade is running / 已有更新或重载正在执行。',
-        );
       // Removing the observed unique marker is a compare-and-delete. A
       // contender cannot unlink the marker belonging to a replacement lock.
       // Legacy pid files are supported; new owners never reuse that filename.
@@ -150,31 +173,219 @@ async function withUpgradeLock(tmp, operation) {
   }
 }
 
-async function stageUpgrade({ root, tmp, env, mirror, run, install, signal }) {
+async function downloadWithProgress(
-  const workspace = await fs.mkdtemp(path.join(tmp, 'upgrade-'));
+  run,
-  const branch = releaseBranch(env);
+  archive,
+  url,
+  artifact,
+  onProgress,
+  quiet = true,
+  expected,
+) {
+  const headers = `${archive}.headers`;
+  await fs.rm(archive, { force: true });
+  await fs.rm(headers, { force: true });
+  let sampling = Promise.resolve();
+  const sample = async (finished = false) => {
+    const bytes = (await fs.stat(archive).catch(() => undefined))?.size || 0;
+    const response = (await fs.readFile(headers, 'utf8').catch(() => ''))
+      .split(/(?=HTTP\/\S+ \d{3})/)
+      .at(-1);
+    const length = response?.match(/^content-length:\s*(\d+)\s*$/im);
+    const total =
+      expected?.size ||
+      (length && Number(length[1]) > 0 ? Number(length[1]) : null);
+    await onProgress({
+      phase: 'downloading',
+      artifact,
+      downloadedBytes: bytes,
+      totalBytes: total,
+      percent: total
+        ? finished
+          ? 100
+          : Math.min(99, Math.floor((bytes * 100) / total))
+        : null,
+    });
+  };
+  const timer = setInterval(() => {
+    sampling = sampling.then(() => sample());
+    // Observe failures immediately; propagate after the transfer has closed.
+    sampling.catch(() => {});
+  }, 1000);
   try {
-    async function extract(repository, ref) {
-      const archive = path.join(workspace, `${repository}.zip`);
-      const url =
-        mirror === 'github'
-          ? `https://github.com/whyour/${repository}/archive/${ref}.zip`
-          : `https://gitee.com/whyour/${repository}/repository/archive/${ref}.zip`;
     await run('curl', [
       '--fail',
       '--location',
+      ...(quiet ? ['--silent', '--show-error'] : []),
       '--proto',
-        '=https',
+      /^http:\/\/(?:127\.0\.0\.1|\[::1\])(?::\d+)?\//.test(url)
+        ? '=http,https'
+        : '=https',
       '--proto-redir',
       '=https',
       '--connect-timeout',
       '30',
       '--max-time',
       '600',
+      '--speed-limit',
+      '1024',
+      '--speed-time',
+      '30',
+      '--dump-header',
+      headers,
       '--output',
       archive,
       url,
     ]);
+    clearInterval(timer);
+    await sampling;
+    if (expected) {
+      const bytes = await fs.readFile(archive);
+      if (bytes.length !== expected.size || hash(bytes) !== expected.sha256)
+        throw new Error('Upgrade archive size or checksum mismatch');
+    }
+    await sample(true);
+  } finally {
+    clearInterval(timer);
+    await sampling;
+  }
+}
+
+async function stageUpgrade({
+  root,
+  tmp,
+  env,
+  mirror,
+  fallbackMirror,
+  run,
+  install,
+  signal,
+  onProgress,
+}) {
+  const currentPackage = JSON.parse(
+    await fs
+      .readFile(path.join(root, 'package.json'), 'utf8')
+      .catch((error) => {
+        if (error.code !== 'ENOENT') throw error;
+        return '{}';
+      }),
+  );
+  if (env.QL_UPGRADE_FILE || currentPackage.qinglongUpgradeFormat === 2) {
+    return require('./platformBundle.cjs').stageBundle({
+      root,
+      tmp,
+      env,
+      run,
+      signal,
+      onProgress,
+      verifyStatic: verifyUpgrade,
+      download: downloadWithProgress,
+    });
+  }
+  const report = onProgress || (async () => {});
+  const workspace = await fs.mkdtemp(path.join(tmp, 'upgrade-'));
+  const branch = releaseBranch(env);
+  try {
+    // Metadata is optional for older releases and unavailable mirrors. Never
+    // invent a percentage when neither metadata nor HTTP supplies a total.
+    let info;
+    if (onProgress && mirror === 'github') {
+      try {
+        const readJson = async (url) => {
+          const filename = path.join(workspace, 'metadata.json');
+          await run('curl', [
+            '--fail',
+            '--silent',
+            '--show-error',
+            '--location',
+            '--proto',
+            '=https',
+            '--proto-redir',
+            '=https',
+            '--connect-timeout',
+            '5',
+            '--max-time',
+            '10',
+            '--max-filesize',
+            '1048576',
+            '--dump-header',
+            `${filename}.headers`,
+            '--output',
+            filename,
+            url,
+          ]);
+          return JSON.parse(await fs.readFile(filename, 'utf8'));
+        };
+        const base = 'https://raw.githubusercontent.com/whyour/qinglong-static';
+        const current = await readJson(
+          `${base}/${branch}/build-info.json?t=${Date.now()}`,
+        );
+        if (!/^[a-f0-9]{40}$/.test(current.sourceCommit))
+          throw new Error('Invalid commit');
+        const candidate = await readJson(
+          `${base}/upgrade-info/${current.sourceCommit}.json`,
+        );
+        if (
+          candidate.version !== 1 ||
+          candidate.sourceCommit !== current.sourceCommit ||
+          !/^[a-f0-9]{40}$/.test(candidate.staticCommit) ||
+          !['qinglong-static', 'qinglong'].every((repo) => {
+            const entry = candidate.archives?.[repo];
+            return (
+              Number.isSafeInteger(entry?.size) &&
+              entry.size > 0 &&
+              /^[a-f0-9]{64}$/.test(entry.sha256)
+            );
+          })
+        )
+          throw new Error('Invalid archive metadata');
+        info = candidate;
+      } catch {
+        signal?.throwIfAborted();
+      }
+    }
+    async function extract(repository, ref) {
+      const archive = path.join(workspace, `${repository}.zip`);
+      const url =
+        mirror === 'github'
+          ? `https://codeload.github.com/whyour/${repository}/zip/${ref}`
+          : `https://gitee.com/whyour/${repository}/repository/archive/${ref}.zip`;
+      const download = async (target, expected) => {
+        await report({
+          phase: 'downloading',
+          artifact: repository,
+          downloadedBytes: 0,
+          totalBytes: expected?.size || null,
+          percent: expected ? 0 : null,
+        });
+        await downloadWithProgress(
+          run,
+          archive,
+          target,
+          repository,
+          report,
+          Boolean(onProgress),
+          expected,
+        );
+      };
+      try {
+        await download(
+          url,
+          mirror === 'github' ? info?.archives[repository] : undefined,
+        );
+      } catch (error) {
+        signal?.throwIfAborted();
+        if (mirror !== 'github' || fallbackMirror !== 'gitee') throw error;
+        console.warn(upgradeMessage('GitHub 下载失败，切换 Gitee...', env));
+        await download(
+          `https://gitee.com/whyour/${repository}/repository/archive/${ref}.zip`,
+        );
+      }
+      await report({
+        phase: 'extracting',
+        artifact: repository,
+        percent: null,
+      });
       const listing = await run('unzip', ['-Z1', archive], true);
       const expected = `${repository}-${ref}`;
       const names = listing.stdout.split('\n').filter(Boolean);
@@ -189,21 +400,30 @@ async function stageUpgrade({ root, tmp, env, mirror, run, install, signal }) {
             name.split('/')[0] !== expected,
         )
       )
-        throw new Error('Invalid archive paths / 升级归档路径无效。');
+        throw new Error(upgradeMessage('升级归档路径无效。', env));
       const modes = await run('unzip', ['-Z', '-l', archive], true);
       if (modes.stdout.split('\n').some((line) => /^l[rwx-]{9}\s/.test(line)))
-        throw new Error('Archive contains symlinks / 升级归档包含符号链接。');
+        throw new Error(upgradeMessage('升级归档包含符号链接。', env));
       await run('unzip', ['-oq', archive, '-d', workspace]);
       return path.join(workspace, expected);
     }
     // Static branches are mutable snapshots. Their manifest pins the exact
     // source revision, avoiding a race between two independent branch reads.
-    const staticRoot = await extract('qinglong-static', branch);
+    const downloadedStatic = await extract(
-    const manifest = await manifestAt(staticRoot);
+      'qinglong-static',
+      info?.staticCommit || branch,
+    );
+    const staticRoot = path.join(workspace, `qinglong-static-${branch}`);
+    if (downloadedStatic !== staticRoot)
+      await fs.rename(downloadedStatic, staticRoot);
+    const manifest = await manifestAt(staticRoot, env);
+    if (info && manifest.sourceCommit !== info.sourceCommit)
+      throw new Error(upgradeMessage('构建清单无效。', env));
     const downloadedSource = await extract('qinglong', manifest.sourceCommit);
     const source = path.join(workspace, `qinglong-${branch}`);
     await fs.rename(downloadedSource, source);
-    await verifyUpgrade(source, staticRoot);
+    await report({ phase: 'verifying', percent: null });
+    await verifyUpgrade(source, staticRoot, env);
     let dependenciesChanged = false;
     for (const name of ['package.json', 'pnpm-lock.yaml']) {
       const current = await fs
@@ -220,9 +440,10 @@ async function stageUpgrade({ root, tmp, env, mirror, run, install, signal }) {
     )
       dependenciesChanged = true;
     if (dependenciesChanged) {
+      await report({ phase: 'dependencies', percent: null });
       await install(source);
       await fs.access(path.join(source, 'node_modules'));
-      await verifyUpgrade(source, staticRoot);
+      await verifyUpgrade(source, staticRoot, env);
     }
     signal?.throwIfAborted();
     const selected = { source, static: staticRoot };
@@ -230,6 +451,7 @@ async function stageUpgrade({ root, tmp, env, mirror, run, install, signal }) {
       path.join(workspace, 'ready.json'),
       JSON.stringify({
         ...selected,
+        root: path.resolve(root),
         sourceCommit: manifest.sourceCommit,
         dependenciesChanged,
       }),
@@ -269,7 +491,7 @@ async function stageUpgrade({ root, tmp, env, mirror, run, install, signal }) {
   }
 }
 
-async function selectedUpgrade(tmp, branch) {
+async function selectedUpgrade(tmp, branch, env = process.env) {
   const pointer = JSON.parse(
     await fs.readFile(path.join(tmp, `upgrade-ready-${branch}.json`), 'utf8'),
   );
@@ -277,7 +499,7 @@ async function selectedUpgrade(tmp, branch) {
     typeof pointer.directory !== 'string' ||
     !/^upgrade-[A-Za-z0-9_-]+$/.test(pointer.directory)
   )
-    throw new Error('Invalid staged upgrade pointer / 暂存升级指针无效。');
+    throw new Error(upgradeMessage('暂存升级指针无效。', env));
   const workspace = path.join(tmp, pointer.directory);
   const selected = {
     source: path.join(workspace, `qinglong-${branch}`),
@@ -286,22 +508,46 @@ async function selectedUpgrade(tmp, branch) {
   for (const directory of [workspace, selected.source, selected.static]) {
     const stat = await fs.lstat(directory);
     if (!stat.isDirectory() || stat.isSymbolicLink())
-      throw new Error('Invalid staging directory / 暂存目录无效。');
+      throw new Error(upgradeMessage('暂存目录无效。', env));
   }
   const ready = JSON.parse(
     await fs.readFile(path.join(workspace, 'ready.json'), 'utf8'),
   );
   if (ready.source !== selected.source || ready.static !== selected.static)
-    throw new Error('Invalid upgrade readiness / 暂存升级就绪记录不匹配。');
+    throw new Error(upgradeMessage('暂存升级就绪记录不匹配。', env));
-  const manifest = await verifyUpgrade(selected.source, selected.static);
+  const manifest = await verifyUpgrade(selected.source, selected.static, env);
   if (ready.sourceCommit !== manifest.sourceCommit)
-    throw new Error('Invalid upgrade readiness / 暂存升级就绪记录不匹配。');
+    throw new Error(upgradeMessage('暂存升级就绪记录不匹配。', env));
+  if (ready.bundle)
+    await require('./platformBundle.cjs').verifyStagedBundle(selected);
   if (ready.dependenciesChanged)
     await fs.access(path.join(selected.source, 'node_modules'));
+  else {
+    const root = ready.root || env.QL_DIR;
+    if (
+      !root ||
+      !(
+        await fs.stat(path.join(root, 'node_modules')).catch(() => undefined)
+      )?.isDirectory()
+    )
+      throw new Error(upgradeMessage('运行依赖已变化，请重新下载更新。', env));
+    for (const name of ['package.json', 'pnpm-lock.yaml']) {
+      const current = await fs
+        .readFile(path.join(root, name))
+        .catch(() => undefined);
+      if (
+        !current ||
+        !(await fs.readFile(path.join(selected.source, name))).equals(current)
+      )
+        throw new Error(
+          upgradeMessage('运行依赖已变化，请重新下载更新。', env),
+        );
+    }
+  }
   return selected;
 }
 
-async function replaceAndReload(replacements, lifecycle) {
+async function replaceAndReload(replacements, lifecycle, env = process.env) {
   const changed = [];
   let attemptedStart = false;
   lifecycle.signal?.throwIfAborted();
@@ -373,7 +619,7 @@ async function replaceAndReload(replacements, lifecycle) {
       await fs
         .rm(item.backup, { recursive: true, force: true })
         .catch(() =>
-          console.error(`Retained backup / 保留备份: ${item.backup}`),
+          console.error(upgradeMessage('保留备份: %s', env, item.backup)),
         );
 }
 
@@ -385,8 +631,9 @@ async function reloadSystem({
   config,
   env,
   lifecycle,
+  additionalReplacements = [],
 }) {
-  const selected = await selectedUpgrade(tmp, releaseBranch(env));
+  const selected = await selectedUpgrade(tmp, releaseBranch(env), env);
   const reserved = new Set(['data', '.tmp', 'static', '.git', '.env']);
   const relative = path.relative(root, data);
   if (relative && !relative.startsWith('..') && !path.isAbsolute(relative))
@@ -404,7 +651,8 @@ async function reloadSystem({
       target: path.join(config, 'config.sample.sh'),
     },
   );
-  await replaceAndReload(replacements, lifecycle);
+  replacements.push(...additionalReplacements);
+  await replaceAndReload(replacements, lifecycle, env);
   // Cleanup after a committed installation must not report a failed update.
   await fs
     .rm(path.join(tmp, `upgrade-ready-${releaseBranch(env)}.json`), {
@@ -472,7 +720,7 @@ async function waitForHealth(env, timeout = 60000, signal) {
       }
     }
   }
-  throw new Error('Backend failed health check / 后端启动检查失败。');
+  throw new Error(upgradeMessage('后端启动检查失败。', env));
 }
 
 function runProcess(env, program, args, capture = false, signal) {
@@ -575,9 +823,7 @@ esac
     await fs
       .rm(directory, { recursive: true, force: true })
       .catch(() =>
-        console.error(
+        console.error(upgradeMessage('保留生命周期快照: %s', env, directory)),
-          `Retained lifecycle snapshot / 保留生命周期快照: ${directory}`,
-        ),
       );
   }
 }
@@ -595,7 +841,9 @@ async function main() {
     );
   const run = (program, args, capture) =>
     runProcess(env, program, args, capture, controller.signal);
-  await withUpgradeLock(tmp, () =>
+  await withUpgradeLock(
+    tmp,
+    () =>
       withLifecycleHooks(root, tmp, env, async (hook) => {
         const lifecycle = {
           signal: controller.signal,
@@ -615,11 +863,14 @@ async function main() {
             tmp,
             env,
             mirror: process.argv[3],
+            // The Bash updater chooses its source automatically. An explicitly
+            // selected CLI mirror does not opt into this network-only failover.
+            fallbackMirror: 'gitee',
             run,
             signal: controller.signal,
             install: (source) => hook('install', [source], controller.signal),
           });
-        console.log('更新包下载及校验成功...');
+          console.log(upgradeMessage('更新包下载及校验成功...', env));
           if (process.argv[4] !== 'true') return;
         } else if (process.argv[2] !== 'reload')
           throw new Error('Unknown upgrade command.');
@@ -632,12 +883,15 @@ async function main() {
           config: env.dir_config || path.join(root, 'data/config'),
           lifecycle,
         });
-      console.log('更新及启动检查成功...');
+        console.log(upgradeMessage('更新及启动检查成功...', env));
       }),
+    env,
   );
 }
 
 module.exports = {
+  downloadWithProgress,
+  upgradeMessage,
   releaseBranch,
   verifyUpgrade,
   withUpgradeLock,
@@ -652,6 +906,6 @@ module.exports = {
 };
 if (require.main === module)
   main().catch((error) => {
-    console.error(`更新失败: ${error.message}`);
+    console.error(upgradeMessage('更新失败: %s', process.env, error.message));
     process.exitCode = 1;
   });

cli/src/internal/subscription/subscriptionRunner.ts

@@ -214,8 +214,13 @@ async function reconcile(
   if (added || removed) {
     try {
       await api.call('system/notify', 'PUT', {
-        title: `${namespace} 订阅同步`,
+        title: translate(context.env, '%s 订阅同步', namespace),
-        content: `新增 ${added} 个任务，删除 ${removed} 个任务`,
+        content: translate(
+          context.env,
+          '新增 %s 个任务，删除 %s 个任务',
+          added,
+          removed,
+        ),
       });
     } catch {
       operationOutput(

cli/src/remote/api/openOperations.ts

@@ -12,6 +12,12 @@ export interface OpenOperation {
   anonymous?: boolean;
 }
 export const openOperations: readonly OpenOperation[] = [
+  {
+    name: 'system notification-logs',
+    method: 'GET',
+    path: 'system/notify-log',
+  },
+
   { name: 'task view-list', method: 'GET', path: 'crons/views' },
   {
     name: 'task view-create',
@@ -410,6 +416,7 @@ export const openOperations: readonly OpenOperation[] = [
     body: 'json',
   },
   { name: 'system update-check', method: 'PUT', path: 'system/update-check' },
+  { name: 'system update-status', method: 'GET', path: 'system/update-status' },
   { name: 'system update', method: 'PUT', path: 'system/update' },
   { name: 'system reload', method: 'PUT', path: 'system/reload', body: 'json' },
   { name: 'system notify', method: 'PUT', path: 'system/notify', body: 'json' },
@@ -478,7 +485,12 @@ export const openOperations: readonly OpenOperation[] = [
     path: 'system/config/dependence-clean',
     body: 'json',
   },
-  { name: 'dashboard record', method: 'POST', path: 'dashboard/record', body: 'json' },
+  {
+    name: 'dashboard record',
+    method: 'POST',
+    path: 'dashboard/record',
+    body: 'json',
+  },
   { name: 'dashboard overview', method: 'GET', path: 'dashboard/overview' },
   { name: 'dashboard trend', method: 'GET', path: 'dashboard/trend' },
   { name: 'dashboard top-time', method: 'GET', path: 'dashboard/top-time' },

cli/src/shared/i18n/en.ts

@@ -1,8 +1,13 @@
 // Migrated from shell/lang/en.sh; the original remains for differential evaluation.
 export const english: Record<string, string> = {
-  '需要双因素验证，请调用 user two-factor-login。': 'Two-factor authentication required; use user two-factor-login.',
+  '%s 订阅同步': '%s subscription sync',
-  'QL_URL 和 QL_ACCESS_TOKEN 必须同时提供。': 'Provide QL_URL and QL_ACCESS_TOKEN together.',
+  '新增 %s 个任务，删除 %s 个任务': 'Added %s tasks, removed %s tasks',
-  '接口返回 JSON，未保存下载文件。': 'The endpoint returned JSON; no download was saved.',
+  '需要双因素验证，请调用 user two-factor-login。':
+    'Two-factor authentication required; use user two-factor-login.',
+  'QL_URL 和 QL_ACCESS_TOKEN 必须同时提供。':
+    'Provide QL_URL and QL_ACCESS_TOKEN together.',
+  '接口返回 JSON，未保存下载文件。':
+    'The endpoint returned JSON; no download was saved.',
   '已选择的 CLI 安装路径必须为绝对路径。':
     'The selected CLI installation path must be absolute.',
   '保留 CLI 入口仅支持已确认的 2.x 升级载荷。':
@@ -152,9 +157,12 @@ export const english: Record<string, string> = {
   '应用凭据和 %s 权限': 'application credentials and %s permission',
   未知: 'unknown',
   '请检查%s。': 'Check %s.',
-  '资源冲突，请检查重复的名称或值。': 'Resource conflict; check for duplicate names or values.',
+  '资源冲突，请检查重复的名称或值。':
-  '服务端错误，请检查服务状态和日志。': 'Server error; check service status and logs.',
+    'Resource conflict; check for duplicate names or values.',
-  '请求未成功，请检查请求参数和服务日志。': 'Request unsuccessful; check request parameters and service logs.',
+  '服务端错误，请检查服务状态和日志。':
+    'Server error; check service status and logs.',
+  '请求未成功，请检查请求参数和服务日志。':
+    'Request unsuccessful; check request parameters and service logs.',
   'API 请求失败（%s %s）。%s%s': 'API request failed (%s %s). %s%s',
 
   ' 执行结果可能未知，请先检查%s状态再考虑重试。':
@@ -169,8 +177,7 @@ export const english: Record<string, string> = {
     'API request rejected (code %s). Check %s.',
   'CLI 配置必须是当前用户拥有的私有普通文件（0600）。':
     'CLI config must be an owned private regular file (0600).',
-  'CLI 配置无效，请运行 ql login。':
+  'CLI 配置无效，请运行 ql login。': 'Invalid CLI config. Run ql login.',
-    'Invalid CLI config. Run ql login.',
   '尚未登录，请运行 ql login。': 'Not logged in. Run ql login.',
   '无法读取 CLI 配置，请检查文件权限并运行 ql login。':
     'Cannot read CLI config. Check file permissions and run ql login.',

cli/test/internal/operator.test.cjs

@@ -276,7 +276,7 @@ test('upgrade staging extracts both archives before publishing readiness and rej
         'utf8',
       ),
     ),
-    { ...staged, sourceCommit, dependenciesChanged: false },
+    { ...staged, root: ctx.root, sourceCommit, dependenciesChanged: false },
   );
   await fs.symlink(
     '../../outside',
@@ -287,7 +287,7 @@ test('upgrade staging extracts both archives before publishing readiness and rej
     ['-qry', path.join(archives, 'qinglong.zip'), `qinglong-${sourceCommit}`],
     { cwd: payloads },
   );
-  await assert.rejects(stageUpgrade(ctx, 'github'), /symlinks/);
+  await assert.rejects(stageUpgrade(ctx, 'github'), /symlinks|符号链接/);
   assert.deepEqual(
     (await fs.readdir(ctx.paths.dir_tmp)).sort(),
     [

cli/test/linux/mounted-data.test.cjs

@@ -23,7 +23,7 @@ test(
     assert.notEqual(before.dev, (await fs.stat(root)).dev);
     const context = createContext(
       { root, 'data-dir': data },
-      { PATH: '/nonexistent' },
+      { PATH: '/nonexistent', QL_LANG: 'en' },
     );
     t.after(async () => {
       await stopPanel(context);

cli/test/linux/preload-paths.test.cjs

@@ -23,7 +23,7 @@ test(
       [
         '--test',
         '--test-reporter=tap',
-        path.resolve(__dirname, '../preload.test.cjs'),
+        path.resolve(__dirname, '../internal/preload.test.cjs'),
       ],
       {
         env,

cli/test/linux/published-archive.test.cjs

@@ -43,6 +43,7 @@ test(
           context.paths.dir_tmp,
         );
         installations.push(directory);
+        await fs.mkdir(path.join(directory, 'node_modules'), { recursive: true });
       },
     );
     const controller = new AbortController();
@@ -70,9 +71,16 @@ test(
       ),
     );
     assert.equal(pointer.directory, path.basename(workspace));
+    const manifest = JSON.parse(
+      await fs.readFile(path.join(staged.static, 'build-info.json'), 'utf8'),
+    );
     assert.deepEqual(
       JSON.parse(await fs.readFile(path.join(workspace, 'ready.json'), 'utf8')),
-      staged,
+      {
+        ...staged,
+        sourceCommit: manifest.sourceCommit,
+        dependenciesChanged: true,
+      },
     );
     assert.equal(
       await fs.readFile(path.join(root, 'package.json'), 'utf8'),

docker/Dockerfile.debian

@@ -11,6 +11,7 @@ RUN set -x && \
   apt-get update && \
   apt-get install --no-install-recommends -y libatomic1 && \
   npm i -g pnpm@8.3.1 && \
+  test "$(pnpm --version)" = "8.3.1" && \
   cd /tmp/build && \
   pnpm install --prod --frozen-lockfile
 
@@ -70,6 +71,7 @@ RUN set -x && \
   git config --global user.name "qinglong" && \
   git config --global http.postBuffer 524288000 && \
   npm install -g pnpm@8.3.1 pm2 ts-node typescript@5 && \
+  test "$(pnpm --version)" = "8.3.1" && \
   npm cache clean --force && \
   rm -rf /root/.cache && \
   rm -rf /root/.npm && \
@@ -114,7 +116,8 @@ USER root
 
 RUN ln -sf ${QL_DIR}/shell/task.sh /usr/local/bin/task \
   && ln -sf ${QL_DIR}/shell/update.sh /usr/local/bin/ql \
-  && chmod +x /usr/local/bin/task /usr/local/bin/ql
+  && chmod +x /usr/local/bin/task /usr/local/bin/ql \
+  && test "$(pnpm --version)" = "8.3.1"
 
 WORKDIR ${QL_DIR}
 

docker/Dockerfile.upgrade-bundle

@@ -0,0 +1,23 @@
+# The image digest is supplied by the same workflow run, never a rolling tag.
+ARG BASE_IMAGE
+FROM ${BASE_IMAGE} AS bundle
+ARG BASE_IMAGE
+ENV QL_BUNDLE_BASE_IMAGE=${BASE_IMAGE}
+ARG TARGETARCH
+ARG TARGETVARIANT
+USER root
+# The generic "arm" sqlite release is ARMv7. ARMv6 must compile its own addon.
+RUN if [ "$TARGETARCH/$TARGETVARIANT" = arm/v6 ]; then \
+      apk add --no-cache --virtual .ql-bundle-build build-base binutils python3 nodejs-dev && \
+      cd "$(readlink -f /ql/node_modules/sqlite3)" && \
+      CFLAGS='-march=armv6 -mfpu=vfp -mfloat-abi=hard' \
+      CXXFLAGS='-march=armv6 -mfpu=vfp -mfloat-abi=hard' \
+      npm_config_nodedir=/usr npm_config_build_from_source=true QEMU_CPU=arm1176 \
+        node -e 'require("node:child_process").execFileSync(process.execPath,[require.resolve("@mapbox/node-pre-gyp/bin/node-pre-gyp"),"rebuild","--napi_build_version=6"],{stdio:"inherit"})' && \
+      readelf -A lib/binding/napi-v6-linux-arm/node_sqlite3.node | grep -E 'Tag_CPU_arch: v6($|K)' && \
+      apk del .ql-bundle-build; \
+    fi
+RUN if [ "$TARGETARCH/$TARGETVARIANT" = arm/v6 ]; then export QEMU_CPU=arm1176; fi; \
+    node /ql/scripts/build-upgrade-bundle.cjs /ql /out
+FROM scratch
+COPY --from=bundle /out/ /

docker/docker-entrypoint.sh

@@ -119,12 +119,12 @@ reload_pm2
 
 if [[ $AutoStartBot == true ]]; then
   log_with_style "INFO" "🤖  3. 启动 bot..."
-  nohup ql bot >$dir_log/bot.log 2>&1 &
+  nohup ql bot >"$dir_log/bot.log" 2>&1 &
 fi
 
 if [[ $EnableExtraShell == true ]]; then
   log_with_style "INFO" "🛠️  4. 执行自定义脚本..."
-  nohup ql extra >$dir_log/extra.log 2>&1 &
+  nohup ql extra >"$dir_log/extra.log" 2>&1 &
 fi
 
 log_with_style "SUCCESS" "🎉  容器启动成功!"

docs/development/node-cron-migration.md

@@ -10,6 +10,10 @@ Node 调度路径使用固定版本 `node-cron@4.6.0`，普通任务（含额外
 - 日期与星期同时指定时保留 OR 语义，不采用 node-cron 默认的 AND。两个原生任务分别处理日期和星期，并按计划时间过滤交集，避免重复执行；保留旧解析器的月份全日期范围及全局 nth-week 限制。
 - 原生任务先暂停创建并验证，再替换旧任务。构造失败时销毁已准备的实例并保留旧快照。
 - 进程内迟到的触发通过 `execution:missed` 加入既有执行队列，记录补执行日志。并发和单任务积压上限仍由青龙队列控制；这不提供进程退出期间的持久化补跑或分布式 exactly-once 保证。
+- 保留 node-cron 已支持的列表、范围和名称，不调用 cron-parser 的 `stringify()` 重写整条表达式。先校验整条表达式，通过则跳过逐字段探测；失败时才检查并展开不支持的字段（如数字/名称起点步长）。保留原有 `?` 和 `#` 兼容处理，避免有效的 `6,12,18` 被压缩为不兼容的 `6/6`；日期/星期拆分后的最终校验仍然保留。
+- 星期步长范围以 `7` 结尾时，先按 cron-parser 的解析值展开。例如 `2-7/4` 在现有解析器中包含星期日，而 node-cron 原样执行会遗漏星期日；仅通过语法校验不足以保证执行含义一致。
+- 单月规则先剔除超出该月最大日期的值再计算日期数量，保留旧版日期/星期的通配计数语义。被判为通配的字段不再作为另一侧的 AND 约束，避免 `2-31 4 MON` 和包含 `L`、重复星期日的边界规则漏执行。
+- 日期与星期按 OR 拆分后，若日期分支在所有指定月份中都不可达，而星期分支有效，则仅保留星期分支；移除前仍检查日期分支在任意月份下语法有效。`31 2,4 MON` 因而可以执行，单独的 `31 2,4 *` 仍拒绝。
 - 标准化结果使用上限 512 条的只读缓存，仅缓存语法，不缓存运行实例或下次执行时间。避免大批相同表达式重复解析导致恢复 RPC 超时。
 - 回调异常记录日志，后续调度继续；取消时调用原生 `destroy()` 释放计时器和注册表。
 - 持久化无效任务在恢复时跳过并记录日志，无效订阅不会产生未处理的启动拒绝。API、导入和执行使用同一套表达式校验。
@@ -31,6 +35,7 @@ Node 调度路径使用固定版本 `node-cron@4.6.0`，普通任务（含额外
 
 - `test/fixtures/legacy-cron.json` 是迁移前使用 node-schedule 2.1.1 / cron-parser 4.9.0 保存的快照：269 条语法判定，18 组日历序列，每组 10 次执行。
 - 真正的 node-cron 实例配合虚拟时钟验证日期/星期 OR、交集去重、闰年、L/#、8 秒迟到补执行、取消释放、回调拒绝和夏令时。
+- `test/fixtures/cron-calendar-boundaries.json` 保存 64 组规则与起点，以独立 cron-parser 4.9.0 / luxon 3.7.2 或公历计算产生预期结果，每组在 UTC、Asia/Shanghai 下各核对 4 次实际执行，包括 2100 年不闰和长周期第五个星期日的边界。时区子测试清理继承的 `NODE_TEST_CONTEXT` 并检查子测试输出，防止嵌套测试入口被跳过而出现假通过。
 - 注册构造失败回滚、无效订阅隔离、空表达式立即运行，以及现有调度恢复/503/子进程测试覆盖接入流程。
 - 隔离的正式 Debian 镜像使用实际编译产物验证 10,000 条有效任务和 2 条错误任务的恢复、300 个同时到期的 Python 脚本、并发上限 16 及 HTTP 健康检查。具体结果见本次测试报告；这是生产镜像隔离验证，不是线上长期运行证明。
 
@@ -47,3 +52,11 @@ Node 调度路径使用固定版本 `node-cron@4.6.0`，普通任务（含额外
 完整回归 267 通过、3 项原有跳过；Node 20 的 10 项修复回归及 Alpine 镜像的 24 项兼容/宏测试通过。
 
 额外使用 9,700 个不同表达式和 300 个同时到期任务验证恢复（另有 2 个无效任务），不再局限于共享两个表达式。300/300 脚本完成，无重复或遗漏，最大并发 16，270 个退出码 0、30 个预设退出码 3 均落库。恢复后健康检查 1,650/1,650 成功、任务列表 33/33 成功；启动恢复阶段另有 260 次健康检查失败，整批脚本耗时 60.27 秒。较大快照恢复仍需等待，不承诺启动阶段始终可用或任意规模都能在时限内恢复。
+
+### 深度兼容性审计（2026-10-17）
+
+保持 cron-parser 5.4.0 和 node-cron 4.6.0，扫描 19,811 个表达式，覆盖六个字段的数字、前导零、列表、范围、起点步长、名称、L/#/? 及日期/星期组合。发现并修复星期步长末尾 7、单月日期裁剪、通配计数边界和不可达日期 OR 分支问题；47 个初始失败样例已保存为回归数据。
+
+UTC 和 Asia/Shanghai 各比较 17,795 条规则的连续 4 次实际触发，共核对 142,360 个触发时刻，修复后无偏差、无构造失败。每个时区另外有 71 个通配 `#` 组合沿用已明确保留的旧适配规则，不与原解析器直接对照；22 个原版拒绝的日期输入仍拒绝，11 个参考迭代器触及搜索上限的长周期规则改用独立公历预期验证。
+
+持久化回归覆盖 64 组规则与起点、两个时区，共 128 组日历用例；还保留 H、裸 `/N`、非标准 L 写法及不可达规则的拒绝行为。完整回归 745 通过、8 跳过，后端编译通过。本次为确定性语法与日历测试，不涉及生产环境压力或长期稳定性验证。

docs/development/notification-audit.md

@@ -0,0 +1,11 @@
+# 通知日志
+
+通知日志记录系统统一通知入口（包括登录通知、配置测试和系统通知 API），以及任务使用内置 `notify.js`、`notify.py` 或 `QLAPI.notify` 发出的通知。脚本通知按实际配置的渠道各记录一条结果，未配置渠道和跳过的标题不记账。
+
+日志包含时间、标题、正文、渠道、结果和来源；脚本来源另包含文件名与任务 ID。成功表示通知渠道返回成功或接受请求，不表示最终收件人已经收到。多目标渠道只在所有目标成功时记为成功。
+
+所有入口共用数据库中的最近 200 条日志。标题最多 512 字符、正文最多 8192 字符；上报字段不包含通知密码、令牌或渠道配置。日志页受系统设置的管理员权限保护。
+
+脚本通过现有的本机 mTLS gRPC 服务上报，独立客户端最多等待 1.5 秒。旧面板、服务不可用或数据库写入失败不会改变通知发送结果。Python 使用 Node 上报子进程，并限制在 3 秒内。
+
+自行保存的旧版通知库需要更新为面板内置版本才能上报。脚本自行调用 HTTP、SMTP 或第三方 SDK 时不经过这些入口，无法自动纳入通知日志。

docs/development/platform-upgrade-bundles.md

@@ -0,0 +1,47 @@
+# 平台完整升级包
+
+CI 从同次构建的不可变镜像摘要导出完整 tar.gz，包含源码中的运行脚本和模板、前后端编译产物、锁文件和已经安装的生产 `node_modules`。不包含 Node 可执行文件、用户数据、`.env`、Git 历史或 npm 缓存。保留现有 Node 和用户脚本依赖。
+
+## 在线升级
+
+`package.json` 中 `qinglongUpgradeFormat: 2` 表示使用完整包。旧版升级器仍可通过原归档路径完成首次迁移；完整包版本不会在平台包缺失、损坏或不兼容时退回设备端 npm 安装。
+
+面板下载任务与本地离线入口共用 `platformBundle.cjs`：平台匹配 → 归档安全检查 → 全文件/链接/权限和锁文件校验 → SQLite/Sequelize/cron-parser/gRPC/undici 加载及 SQLite 内存库读写 → 发布就绪指针。重启前重新验证完整载荷。原有服务停止、文件备份、启动健康检查及失败恢复仍由共享升级引擎处理。
+
+渠道索引为 GitHub prerelease `upgrade-develop` 或 `upgrade-master` 下的 `latest.json`。索引记录准确字节数、SHA256 和不可变 `upgrade-<commit>` release 资产 URL。12 个平台均构建及试运行成功才发布渠道；过期工作流不能覆盖更新提交的渠道。
+
+## 手动离线安装和升级
+
+从同一个 `upgrade-<commit>` release 下载匹配设备的 `.tar.gz` 和独立 `install-bundle.cjs`。独立安装器已内置解析依赖，在目标设备无需 npm、pnpm 或重新安装 SQLite。可对照同 release 的 `latest.json` 核对归档 SHA256。
+
+已有安装（默认应用并重启）：
+
+```sh
+node install-bundle.cjs --root /ql --file /absolute/path/qinglong-<commit>-linux-arm64-musl.tar.gz
+```
+
+只准备，稍后手动重启：
+
+```sh
+node install-bundle.cjs --root /ql --file /absolute/path/package.tar.gz --download-only
+ql reload system
+```
+
+安装到空目录：
+
+```sh
+node install-bundle.cjs --root /opt/qinglong --file /absolute/path/package.tar.gz --install
+QL_DIR=/opt/qinglong bash /opt/qinglong/shell/start-simplify.sh
+```
+
+`--install` 拒绝非空目录，不覆盖既有配置。该包安装青龙及其 Node 生产依赖；首次启动仍需已有 Python、Bash、PM2、nginx 等相应运行环境，不会在线安装或替换它们。服务启动和系统自启按原手动安装流程配置。
+
+## 平台兼容
+
+- 最低 Node 为 20.18.1，Node-API 至少 6；安装器只检查，不替换 Node。
+- 以 Node 实际运行架构、ARM 指令集和 libc 类型/版本选择包；不依据 Docker 架构别名猜测。
+- glibc、musl 分包，并记录构建系统 libc 下限。系统库仍以目标设备加载测试作为最后检查。
+- ARMv6 与 ARMv7 使用不同包名。ARMv6 在目标镜像中从源码编译 SQLite，禁止复用 generic `arm` 的 ARMv7 预编译件；构建需通过加载和内存库读写，失败则不发布渠道。
+- tar 中允许 pnpm 的包内符号链接；拒绝绝对路径、越界路径、包外链接、硬链接、设备条目和经符号链接写入的条目。重启前再次校验依赖，暂存失败保留上一次可用的就绪包。
+
+自托管镜像可设置 `QL_UPGRADE_INDEX_URL` 指向兼容索引；要求 HTTPS，测试时仅放行 loopback HTTP。索引和所有平台归档应部署到同一可访问源，避免依赖额外的 raw 域名。

package.json

@@ -77,7 +77,9 @@
       "@codemirror/state": "6.5.4",
       "@codemirror/view": "6.39.16",
       "proxy-addr": "2.0.8",
-      "websocket-driver": "0.7.5"
+      "websocket-driver": "0.7.5",
+      "brace-expansion@1": "1.1.21",
+      "brace-expansion@2": "2.1.7"
     }
   },
   "dependencies": {
@@ -125,7 +127,8 @@
     "undici": "^7.9.0",
     "uuid": "^11.0.3",
     "winston": "^3.17.0",
-    "winston-daily-rotate-file": "^5.0.0"
+    "winston-daily-rotate-file": "^5.0.0",
+    "tar": "7.5.20"
   },
   "devDependencies": {
     "@ant-design/icons": "^5.0.1",
@@ -172,7 +175,7 @@
     "concurrently": "^7.0.0",
     "file-saver": "2.0.2",
     "lint-staged": "^13.0.3",
-    "moment": "2.30.1",
+    "moment": "2.31.0",
     "monaco-editor": "0.33.0",
     "nodemon": "^3.0.1",
     "prettier": "^2.5.1",
@@ -199,5 +202,6 @@
     "typescript": "5.2.2",
     "vh-check": "^2.0.5",
     "virtualizedtableforantd4": "1.3.0"
-  }
+  },
+  "qinglongUpgradeFormat": 2
 }

pnpm-lock.yaml

@@ -6,6 +6,8 @@ overrides:
   '@codemirror/view': 6.39.16
   proxy-addr: 2.0.8
   websocket-driver: 0.7.5
+  brace-expansion@1: 1.1.21
+  brace-expansion@2: 2.1.7
 
 dependencies:
   '@ant-design/plots':
@@ -125,6 +127,9 @@ dependencies:
   sqlite3:
     specifier: npm:@whyour/sqlite3@1.1.2
     version: /@whyour/sqlite3@1.1.2
+  tar:
+    specifier: 7.5.20
+    version: 7.5.20
   toad-scheduler:
     specifier: ^3.0.1
     version: 3.0.1
@@ -278,8 +283,8 @@ devDependencies:
     specifier: ^13.0.3
     version: 13.3.0
   moment:
-    specifier: 2.30.1
+    specifier: 2.31.0
-    version: 2.30.1
+    version: 2.31.0
   monaco-editor:
     specifier: 0.33.0
     version: 0.33.0
@@ -876,7 +881,7 @@ packages:
       '@babel/runtime': 7.26.0
       antd: 4.24.16(react-dom@18.3.1)(react@18.3.1)
       classnames: 2.5.1
-      moment: 2.30.1
+      moment: 2.31.0
       rc-util: 5.43.0(react-dom@18.3.1)(react@18.3.1)
       react: 18.3.1
       react-dom: 18.3.1(react@18.3.1)
@@ -3051,7 +3056,6 @@ packages:
     dependencies:
       minipass: 7.1.3
     dev: false
-    optional: true
 
   /@istanbuljs/load-nyc-config@1.1.0:
     resolution: {integrity: sha512-VjeHSlIzpv/NyD3N0YuHfXOPDIixcA1q2ZV98wsMqcYlPmv2n3Yb2lYP9XMElnaFVXg5A7YLTeLu6V84uQDjmQ==}
@@ -5369,7 +5373,7 @@ packages:
       fast-deep-equal: 3.1.3
       intl: 1.2.5
       lodash: 4.17.21
-      moment: 2.30.1
+      moment: 2.31.0
       qiankun: 2.10.16
       react-intl: 3.12.1(react@18.3.1)
       react-redux: 8.1.3(@types/react-dom@18.3.1)(@types/react@18.3.12)(react-dom@18.3.1)(react@18.3.1)(redux@4.2.1)
@@ -5866,7 +5870,7 @@ packages:
       classnames: 2.5.1
       copy-to-clipboard: 3.3.3
       lodash: 4.17.21
-      moment: 2.30.1
+      moment: 2.31.0
       rc-cascader: 3.7.3(react-dom@18.3.1)(react@18.3.1)
       rc-checkbox: 3.0.1(react-dom@18.3.1)(react@18.3.1)
       rc-collapse: 3.4.2(react-dom@18.3.1)(react@18.3.1)
@@ -6357,18 +6361,6 @@ packages:
       big-integer: 1.6.52
     dev: true
 
-  /brace-expansion@1.1.12:
-    resolution: {integrity: sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==}
-    dependencies:
-      balanced-match: 1.0.2
-      concat-map: 0.0.1
-
-  /brace-expansion@2.0.2:
-    resolution: {integrity: sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==}
-    dependencies:
-      balanced-match: 1.0.2
-    dev: true
-
   /braces@3.0.3:
     resolution: {integrity: sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==}
     engines: {node: '>=8'}
@@ -6633,7 +6625,6 @@ packages:
     engines: {node: '>=18'}
     requiresBuild: true
     dev: false
-    optional: true
 
   /ci-info@3.9.0:
     resolution: {integrity: sha512-NIxF55hv4nSqQswkAeiOi1r83xy8JldOFDTWiug55KBu9Jnblncd2U6ViHmYgHf01TPZS77NJBhBMKdWj9HQMQ==}
@@ -8662,7 +8653,7 @@ packages:
   /file-stream-rotator@0.6.1:
     resolution: {integrity: sha512-u+dBid4PvZw17PmDeRcNOtCP9CCK/9lRN2w+r1xIS7yOL9JFrIBKTvrYsxT4P0pGtThYTn++QS5ChHaUov3+zQ==}
     dependencies:
-      moment: 2.30.1
+      moment: 2.31.0
     dev: false
 
   /fill-range@7.1.1:
@@ -10711,7 +10702,6 @@ packages:
     dependencies:
       minipass: 7.1.3
     dev: false
-    optional: true
 
   /mkdirp@0.5.6:
     resolution: {integrity: sha512-FP+p8RB8OWpF3YZBCrP5gtADmtXApB5AMLn+vdyA+PyxCjrCs00mjyUozssO33cwDeT3wNGdLxJ5M//YqtHAJw==}
@@ -10733,11 +10723,12 @@ packages:
   /moment-timezone@0.5.46:
     resolution: {integrity: sha512-ZXm9b36esbe7OmdABqIWJuBBiLLwAjrN7CE+7sYdCCx82Nabt1wHDj8TVseS59QIlfFPbOoiBPm6ca9BioG4hw==}
     dependencies:
-      moment: 2.30.1
+      moment: 2.31.0
     dev: false
 
-  /moment@2.30.1:
+  /moment@2.31.0:
-    resolution: {integrity: sha512-uEmtNhbDOrWPFS+hdjFCBfy9f2YoyzRpwcl+DqpC6taX21FzsTLQVbMV/W7PzNSX6x/bhC1zA3c2UQ5NzH6how==}
+    resolution:
+      integrity: sha512-0acOTfMiWOheYS4eoWb80yYMb/JLvVv9SHbs2PehaDzfUG0Bw855SKyk0IKTnPGa5+U2bmi3W68l1+sGLX/pvw==
 
   /monaco-editor@0.33.0:
     resolution: {integrity: sha512-VcRWPSLIUEgQJQIE0pVT8FcGBIgFoxz7jtqctE+IiCxWugD0DwgyQBcZBhdSrdMC84eumoqMZsGl2GTreOzwqw==}
@@ -12724,7 +12715,7 @@ packages:
       classnames: 2.5.1
       date-fns: 2.30.0
       dayjs: 1.11.13
-      moment: 2.30.1
+      moment: 2.31.0
       rc-trigger: 5.3.4(react-dom@18.3.1)(react@18.3.1)
       rc-util: 5.43.0(react-dom@18.3.1)(react@18.3.1)
       react: 18.3.1
@@ -13951,7 +13942,7 @@ packages:
       dottie: 2.0.6
       inflection: 1.13.4
       lodash: 4.17.21
-      moment: 2.30.1
+      moment: 2.31.0
       moment-timezone: 0.5.46
       pg-connection-string: 2.7.0
       retry-as-promised: 7.0.4
@@ -14715,7 +14706,6 @@ packages:
       minizlib: 3.1.0
       yallist: 5.0.0
     dev: false
-    optional: true
 
   /terser@5.36.0:
     resolution: {integrity: sha512-IYV9eNMuFAV4THUspIRXkLakHnV6XO7FEdtKjf/mDyrnqUg9LnlOn6/RwRvM9SZjR4GUq8Nk8zj67FzVARr74w==}
@@ -15736,7 +15726,6 @@ packages:
     engines: {node: '>=18'}
     requiresBuild: true
     dev: false
-    optional: true
 
   /yaml@1.10.2:
     resolution: {integrity: sha512-r3vXyErRCYJ7wg28yvBY5VSoAF8ZvlcW9/BwUzEtUsjvX/DKs24dIkuwjtuprwJJHsbyUbLApepYTR1BN4uHrg==}

sample/notify.py

@@ -10,6 +10,8 @@ import threading
 import time
 import urllib.parse
 import smtplib
+import subprocess
+from typing import Optional
 from email.mime.text import MIMEText
 from email.header import Header
 from email.utils import formataddr
@@ -161,10 +163,11 @@ for k in push_config:
         push_config[k] = v
 
 
-def bark(title: str, content: str) -> None:
+def bark(title: str, content: str) -> Optional[bool]:
     """
     使用 bark 推送消息。
     """
+    audit_results = []
     if not push_config.get("BARK_PUSH"):
         return
     print("bark 服务启动")
@@ -200,22 +203,28 @@ def bark(title: str, content: str) -> None:
     ).json()
 
     if response["code"] == 200:
+        audit_results.append(True)
         print("bark 推送成功！")
     else:
+        audit_results.append(False)
         print("bark 推送失败！")
+    return all(audit_results) if audit_results else None
 
 
-def console(title: str, content: str) -> None:
+def console(title: str, content: str) -> Optional[bool]:
     """
     使用 控制台 推送消息。
     """
+    audit_results = []
     print(f"{title}\n\n{content}")
+    return True
 
 
-def dingding_bot(title: str, content: str) -> None:
+def dingding_bot(title: str, content: str) -> Optional[bool]:
     """
     使用 钉钉机器人 推送消息。
     """
+    audit_results = []
     if not push_config.get("DD_BOT_SECRET") or not push_config.get("DD_BOT_TOKEN"):
         return
     print("钉钉机器人 服务启动")
@@ -236,15 +245,19 @@ def dingding_bot(title: str, content: str) -> None:
     ).json()
 
     if not response["errcode"]:
+        audit_results.append(True)
         print("钉钉机器人 推送成功！")
     else:
+        audit_results.append(False)
         print("钉钉机器人 推送失败！")
+    return all(audit_results) if audit_results else None
 
 
-def feishu_bot(title: str, content: str) -> None:
+def feishu_bot(title: str, content: str) -> Optional[bool]:
     """
     使用 飞书机器人 推送消息。
     """
+    audit_results = []
     if not push_config.get("FSKEY"):
         return
     print("飞书 服务启动")
@@ -268,15 +281,19 @@ def feishu_bot(title: str, content: str) -> None:
     response = requests.post(url, data=json.dumps(data)).json()
 
     if response.get("StatusCode") == 0 or response.get("code") == 0:
+        audit_results.append(True)
         print("飞书 推送成功！")
     else:
+        audit_results.append(False)
         print("飞书 推送失败！错误信息如下：\n", response)
+    return all(audit_results) if audit_results else None
 
 
-def go_cqhttp(title: str, content: str) -> None:
+def go_cqhttp(title: str, content: str) -> Optional[bool]:
     """
     使用 go_cqhttp 推送消息。
     """
+    audit_results = []
     if not push_config.get("GOBOT_URL") or not push_config.get("GOBOT_QQ"):
         return
     print("go-cqhttp 服务启动")
@@ -285,15 +302,19 @@ def go_cqhttp(title: str, content: str) -> None:
     response = requests.get(url).json()
 
     if response["status"] == "ok":
+        audit_results.append(True)
         print("go-cqhttp 推送成功！")
     else:
+        audit_results.append(False)
         print("go-cqhttp 推送失败！")
+    return all(audit_results) if audit_results else None
 
 
-def gotify(title: str, content: str) -> None:
+def gotify(title: str, content: str) -> Optional[bool]:
     """
     使用 gotify 推送消息。
     """
+    audit_results = []
     if not push_config.get("GOTIFY_URL") or not push_config.get("GOTIFY_TOKEN"):
         return
     print("gotify 服务启动")
@@ -307,15 +328,19 @@ def gotify(title: str, content: str) -> None:
     response = requests.post(url, data=data).json()
 
     if response.get("id"):
+        audit_results.append(True)
         print("gotify 推送成功！")
     else:
+        audit_results.append(False)
         print("gotify 推送失败！")
+    return all(audit_results) if audit_results else None
 
 
-def iGot(title: str, content: str) -> None:
+def iGot(title: str, content: str) -> Optional[bool]:
     """
     使用 iGot 推送消息。
     """
+    audit_results = []
     if not push_config.get("IGOT_PUSH_KEY"):
         return
     print("iGot 服务启动")
@@ -326,15 +351,19 @@ def iGot(title: str, content: str) -> None:
     response = requests.post(url, data=data, headers=headers).json()
 
     if response["ret"] == 0:
+        audit_results.append(True)
         print("iGot 推送成功！")
     else:
+        audit_results.append(False)
         print(f'iGot 推送失败！{response["errMsg"]}')
+    return all(audit_results) if audit_results else None
 
 
-def serverJ(title: str, content: str) -> None:
+def serverJ(title: str, content: str) -> Optional[bool]:
     """
     通过 serverJ 推送消息。
     """
+    audit_results = []
     if not push_config.get("PUSH_KEY"):
         return
     print("serverJ 服务启动")
@@ -351,15 +380,19 @@ def serverJ(title: str, content: str) -> None:
     response = requests.post(url, data=data).json()
 
     if response.get("errno") == 0 or response.get("code") == 0:
+        audit_results.append(True)
         print("serverJ 推送成功！")
     else:
+        audit_results.append(False)
         print(f'serverJ 推送失败！错误码：{response["message"]}')
+    return all(audit_results) if audit_results else None
 
 
-def pushdeer(title: str, content: str) -> None:
+def pushdeer(title: str, content: str) -> Optional[bool]:
     """
     通过PushDeer 推送消息
     """
+    audit_results = []
     if not push_config.get("DEER_KEY"):
         return
     print("PushDeer 服务启动")
@@ -376,15 +409,19 @@ def pushdeer(title: str, content: str) -> None:
     response = requests.post(url, data=data).json()
 
     if len(response.get("content").get("result")) > 0:
+        audit_results.append(True)
         print("PushDeer 推送成功！")
     else:
+        audit_results.append(False)
         print("PushDeer 推送失败！错误信息：", response)
+    return all(audit_results) if audit_results else None
 
 
-def chat(title: str, content: str) -> None:
+def chat(title: str, content: str) -> Optional[bool]:
     """
     通过Chat 推送消息
     """
+    audit_results = []
     if not push_config.get("CHAT_URL") or not push_config.get("CHAT_TOKEN"):
         return
     print("chat 服务启动")
@@ -393,15 +430,19 @@ def chat(title: str, content: str) -> None:
     response = requests.post(url, data=data)
 
     if response.status_code == 200:
+        audit_results.append(True)
         print("Chat 推送成功！")
     else:
+        audit_results.append(False)
         print("Chat 推送失败！错误信息：", response)
+    return all(audit_results) if audit_results else None
 
 
-def pushplus_bot(title: str, content: str) -> None:
+def pushplus_bot(title: str, content: str) -> Optional[bool]:
     """
     通过 pushplus 推送消息。
     """
+    audit_results = []
     if not push_config.get("PUSH_PLUS_TOKEN"):
         return
     print("PUSHPLUS 服务启动")
@@ -424,7 +465,9 @@ def pushplus_bot(title: str, content: str) -> None:
 
     code = response["code"]
     if code == 200:
+        audit_results.append(True)
         print("PUSHPLUS 推送请求成功，可根据流水号查询推送结果:" + response["data"])
+        audit_results.append(True)
         print(
             "注意：请求成功并不代表推送成功，如未收到消息，请到pushplus官网使用流水号查询推送最终结果"
         )
@@ -437,16 +480,20 @@ def pushplus_bot(title: str, content: str) -> None:
         response = requests.post(url=url_old, data=body, headers=headers).json()
 
         if response["code"] == 200:
+            audit_results.append(True)
             print("PUSHPLUS(hxtrip) 推送成功！")
 
         else:
+            audit_results.append(False)
             print("PUSHPLUS 推送失败！")
+    return all(audit_results) if audit_results else None
 
 
-def weplus_bot(title: str, content: str) -> None:
+def weplus_bot(title: str, content: str) -> Optional[bool]:
     """
     通过 微加机器人 推送消息。
     """
+    audit_results = []
     if not push_config.get("WE_PLUS_BOT_TOKEN"):
         return
     print("微加机器人 服务启动")
@@ -469,15 +516,19 @@ def weplus_bot(title: str, content: str) -> None:
     response = requests.post(url=url, data=body, headers=headers).json()
 
     if response["code"] == 200:
+        audit_results.append(True)
         print("微加机器人 推送成功！")
     else:
+        audit_results.append(False)
         print("微加机器人 推送失败！")
+    return all(audit_results) if audit_results else None
 
 
-def qmsg_bot(title: str, content: str) -> None:
+def qmsg_bot(title: str, content: str) -> Optional[bool]:
     """
     使用 qmsg 推送消息。
     """
+    audit_results = []
     if not push_config.get("QMSG_KEY") or not push_config.get("QMSG_TYPE"):
         return
     print("qmsg 服务启动")
@@ -487,15 +538,19 @@ def qmsg_bot(title: str, content: str) -> None:
     response = requests.post(url=url, params=payload).json()
 
     if response["code"] == 0:
+        audit_results.append(True)
         print("qmsg 推送成功！")
     else:
+        audit_results.append(False)
         print(f'qmsg 推送失败！{response["reason"]}')
+    return all(audit_results) if audit_results else None
 
 
-def wecom_app(title: str, content: str) -> None:
+def wecom_app(title: str, content: str) -> Optional[bool]:
     """
     通过 企业微信 APP 推送消息。
     """
+    audit_results = []
     if not push_config.get("QYWX_AM"):
         return
     QYWX_AM_AY = re.split(",", push_config.get("QYWX_AM"))
@@ -521,9 +576,12 @@ def wecom_app(title: str, content: str) -> None:
         response = wx.send_mpnews(title, content, media_id, touser)
 
     if response == "ok":
+        audit_results.append(True)
         print("企业微信推送成功！")
     else:
+        audit_results.append(False)
         print("企业微信推送失败！错误信息如下：\n", response)
+    return all(audit_results) if audit_results else None
 
 
 class WeCom:
@@ -588,10 +646,11 @@ class WeCom:
         return respone["errmsg"]
 
 
-def wecom_bot(title: str, content: str) -> None:
+def wecom_bot(title: str, content: str) -> Optional[bool]:
     """
     通过 企业微信机器人 推送消息。
     """
+    audit_results = []
     if not push_config.get("QYWX_KEY"):
         return
     print("企业微信机器人服务启动")
@@ -608,15 +667,19 @@ def wecom_bot(title: str, content: str) -> None:
     ).json()
 
     if response["errcode"] == 0:
+        audit_results.append(True)
         print("企业微信机器人推送成功！")
     else:
+        audit_results.append(False)
         print("企业微信机器人推送失败！")
+    return all(audit_results) if audit_results else None
 
 
-def telegram_bot(title: str, content: str) -> None:
+def telegram_bot(title: str, content: str) -> Optional[bool]:
     """
     使用 telegram 机器人 推送消息。
     """
+    audit_results = []
     if not push_config.get("TG_BOT_TOKEN") or not push_config.get("TG_USER_ID"):
         return
     print("tg 服务启动")
@@ -652,15 +715,19 @@ def telegram_bot(title: str, content: str) -> None:
     ).json()
 
     if response["ok"]:
+        audit_results.append(True)
         print("tg 推送成功！")
     else:
+        audit_results.append(False)
         print("tg 推送失败！")
+    return all(audit_results) if audit_results else None
 
 
-def aibotk(title: str, content: str) -> None:
+def aibotk(title: str, content: str) -> Optional[bool]:
     """
     使用 智能微秘书 推送消息。
     """
+    audit_results = []
     if (
         not push_config.get("AIBOTK_KEY")
         or not push_config.get("AIBOTK_TYPE")
@@ -688,15 +755,19 @@ def aibotk(title: str, content: str) -> None:
     response = requests.post(url=url, data=body, headers=headers).json()
     print(response)
     if response["code"] == 0:
+        audit_results.append(True)
         print("智能微秘书 推送成功！")
     else:
+        audit_results.append(False)
         print(f'智能微秘书 推送失败！{response["error"]}')
+    return all(audit_results) if audit_results else None
 
 
-def smtp(title: str, content: str) -> None:
+def smtp(title: str, content: str) -> Optional[bool]:
     """
     使用 SMTP 邮件 推送消息。
     """
+    audit_results = []
     if (
         not push_config.get("SMTP_SERVER")
         or not push_config.get("SMTP_SSL")
@@ -736,15 +807,19 @@ def smtp(title: str, content: str) -> None:
             message.as_bytes(),
         )
         smtp_server.close()
+        audit_results.append(True)
         print("SMTP 邮件 推送成功！")
     except Exception as e:
+        audit_results.append(False)
         print(f"SMTP 邮件 推送失败！{e}")
+    return all(audit_results) if audit_results else None
 
 
-def pushme(title: str, content: str) -> None:
+def pushme(title: str, content: str) -> Optional[bool]:
     """
     使用 PushMe 推送消息。
     """
+    audit_results = []
     if not push_config.get("PUSHME_KEY"):
         return
     print("PushMe 服务启动")
@@ -764,15 +839,19 @@ def pushme(title: str, content: str) -> None:
     response = requests.post(url, data=data)
 
     if response.status_code == 200 and response.text == "success":
+        audit_results.append(True)
         print("PushMe 推送成功！")
     else:
+        audit_results.append(False)
         print(f"PushMe 推送失败！{response.status_code} {response.text}")
+    return all(audit_results) if audit_results else None
 
 
-def chronocat(title: str, content: str) -> None:
+def chronocat(title: str, content: str) -> Optional[bool]:
     """
     使用 CHRONOCAT 推送消息。
     """
+    audit_results = []
     if (
         not push_config.get("CHRONOCAT_URL")
         or not push_config.get("CHRONOCAT_QQ")
@@ -807,21 +886,27 @@ def chronocat(title: str, content: str) -> None:
             response = requests.post(url, headers=headers, data=json.dumps(data))
             if response.status_code == 200:
                 if chat_type == 1:
+                    audit_results.append(True)
                     print(f"QQ个人消息:{ids}推送成功！")
                 else:
+                    audit_results.append(True)
                     print(f"QQ群消息:{ids}推送成功！")
             else:
                 if chat_type == 1:
+                    audit_results.append(False)
                     print(f"QQ个人消息:{ids}推送失败！")
                 else:
+                    audit_results.append(False)
                     print(f"QQ群消息:{ids}推送失败！")
+    return all(audit_results) if audit_results else None
 
 
-def ntfy(title: str, content: str) -> None:
+def ntfy(title: str, content: str) -> Optional[bool]:
     """
     通过 Ntfy 推送消息
     """
 
+    audit_results = []
     def encode_rfc2047(text: str) -> str:
         """将文本编码为符合 RFC 2047 标准的格式"""
         encoded_bytes = base64.b64encode(text.encode("utf-8"))
@@ -853,12 +938,15 @@ def ntfy(title: str, content: str) -> None:
     url = push_config.get("NTFY_URL") + "/" + push_config.get("NTFY_TOPIC")
     response = requests.post(url, data=data, headers=headers)
     if response.status_code == 200:  # 使用 response.status_code 进行检查
+        audit_results.append(True)
         print("Ntfy 推送成功！")
     else:
+        audit_results.append(False)
         print("Ntfy 推送失败！错误信息：", response.text)
+    return all(audit_results) if audit_results else None
 
 
-def wxpusher_bot(title: str, content: str) -> None:
+def wxpusher_bot(title: str, content: str) -> Optional[bool]:
     """
     通过 wxpusher 推送消息。
     支持的环境变量:
@@ -866,6 +954,7 @@ def wxpusher_bot(title: str, content: str) -> None:
     - WXPUSHER_TOPIC_IDS: 主题ID, 多个用英文分号;分隔
     - WXPUSHER_UIDS: 用户ID, 多个用英文分号;分隔
     """
+    audit_results = []
     if not push_config.get("WXPUSHER_APP_TOKEN"):
         return
 
@@ -909,17 +998,21 @@ def wxpusher_bot(title: str, content: str) -> None:
     response = requests.post(url=url, json=data, headers=headers).json()
 
     if response.get("code") == 1000:
+        audit_results.append(True)
         print("wxpusher 推送成功！")
     else:
+        audit_results.append(False)
         print(f"wxpusher 推送失败！错误信息：{response.get('msg')}")
+    return all(audit_results) if audit_results else None
 
 
-def wxpusher_spt(title: str, content: str) -> None:
+def wxpusher_spt(title: str, content: str) -> Optional[bool]:
     """
     通过 wxpusher 极简推送（SPT）推送消息。
     支持的环境变量:
     - WXPUSHER_SPT_LIST: SPT, 多个用英文逗号,分隔, 最多10个
     """
+    audit_results = []
     if not push_config.get("WXPUSHER_SPT_LIST"):
         return
 
@@ -956,17 +1049,21 @@ def wxpusher_spt(title: str, content: str) -> None:
     response = requests.post(url=url, json=data, headers=headers).json()
 
     if response.get("code") == 1000:
+        audit_results.append(True)
         print("wxpusher SPT 推送成功！")
     else:
+        audit_results.append(False)
         print(f"wxpusher SPT 推送失败！错误信息：{response.get('msg')}")
+    return all(audit_results) if audit_results else None
 
 
 
-def wpush(title: str, content: str) -> None:
+def wpush(title: str, content: str) -> Optional[bool]:
     """
     通过 WPUSH 推送消息。
     官方文档: https://wpush.cn/docs
     """
+    audit_results = []
     if not push_config.get("WPUSH_APIKEY"):
         return
 
@@ -986,12 +1083,15 @@ def wpush(title: str, content: str) -> None:
     response = requests.post(url=url, json=data, headers=headers, timeout=15).json()
 
     if response.get("code") == 0:
+        audit_results.append(True)
         print("WPUSH 推送成功！")
     else:
+        audit_results.append(False)
         print(f'WPUSH 推送失败！错误信息：{response.get("message") or response}')
+    return all(audit_results) if audit_results else None
 
 
-def openilink(title: str, content: str) -> None:
+def openilink(title: str, content: str) -> Optional[bool]:
     """
     通过 OpeniLink 推送消息。
     支持的环境变量:
@@ -999,6 +1099,7 @@ def openilink(title: str, content: str) -> None:
     - OPENILINK_HUB_URL: OpeniLink Hub 地址，默认为 https://hub.openilink.com
     - OPENILINK_CONTEXT_TOKEN: 消息会话上下文 token，可从消息事件中获取
     """
+    audit_results = []
     if not push_config.get("OPENILINK_APP_TOKEN"):
         return
 
@@ -1023,9 +1124,12 @@ def openilink(title: str, content: str) -> None:
     response = requests.post(url=url, json=data, headers=headers).json()
 
     if response.get("ok"):
+        audit_results.append(True)
         print("OpeniLink 推送成功！")
     else:
+        audit_results.append(False)
         print(f'OpeniLink 推送失败！错误信息：{response.get("error")}')
+    return all(audit_results) if audit_results else None
 
 
 def parse_headers(headers):
@@ -1079,10 +1183,11 @@ def parse_body(body, content_type, value_format_fn=None):
     return parsed
 
 
-def custom_notify(title: str, content: str) -> None:
+def custom_notify(title: str, content: str) -> Optional[bool]:
     """
     通过 自定义通知 推送消息。
     """
+    audit_results = []
     if not push_config.get("WEBHOOK_URL") or not push_config.get("WEBHOOK_METHOD"):
         return
 
@@ -1114,9 +1219,12 @@ def custom_notify(title: str, content: str) -> None:
     )
 
     if response.status_code == 200:
+        audit_results.append(True)
         print("自定义通知推送成功！")
     else:
+        audit_results.append(False)
         print(f"自定义通知推送失败！{response.status_code} {response.text}")
+    return all(audit_results) if audit_results else None
 
 
 def one() -> str:
@@ -1204,6 +1312,33 @@ def add_notify_function():
     return notify_function
 
 
+def report_notification(channel, title, content, success):
+    ql_dir = os.getenv("QL_DIR")
+    if not ql_dir:
+        return
+    payload = {"title": str(title or "")[:512], "content": str(content or "")[:8192],
+               "success": success, "notifyType": channel,
+               "scriptName": os.path.basename(__import__("sys").argv[0]), "taskId": os.getenv("ID", "")}
+    code = """const fs=require('node:fs'),path=require('node:path');
+const report=require(path.join(process.env.QL_DIR,'shell/preload/notificationAudit.js'));
+report(JSON.parse(fs.readFileSync(0,'utf8'))).catch(()=>{});"""
+    try:
+        subprocess.run(["node", "-e", code], input=json.dumps(payload), text=True,
+                       capture_output=True, timeout=3)
+    except Exception:
+        pass  # Audit availability never changes notification delivery.
+
+
+def audited_notification(mode, title, content):
+    result = None
+    try:
+        result = mode(title, content)
+    except Exception:
+        result = False
+        print(f"{mode.__name__} 推送失败")
+    report_notification(mode.__name__, title, content, result is True)
+
+
 def send(title: str, content: str, ignore_default_config: bool = False, **kwargs):
     if kwargs:
         global push_config
@@ -1228,7 +1363,7 @@ def send(title: str, content: str, ignore_default_config: bool = False, **kwargs
 
     notify_function = add_notify_function()
     ts = [
-        threading.Thread(target=mode, args=(title, content), name=mode.__name__)
+        threading.Thread(target=audited_notification, args=(mode, title, content), name=mode.__name__)
         for mode in notify_function
     ]
     [t.start() for t in ts]

scripts/build-bundle-installer.cjs

@@ -0,0 +1,22 @@
+const path = require('node:path');
+require('../cli/node_modules/esbuild').buildSync({
+  entryPoints: [path.resolve(__dirname, '../shell/install-bundle.cjs')],
+  outfile: path.resolve(process.argv[2] || 'output/upgrade/install-bundle.cjs'),
+  bundle: true,
+  platform: 'node',
+  format: 'cjs',
+  target: 'node20',
+  minify: true,
+  legalComments: 'inline',
+});
+const { spawnSync } = require('node:child_process');
+const result = spawnSync(
+  process.execPath,
+  [path.resolve(process.argv[2] || 'output/upgrade/install-bundle.cjs')],
+  { encoding: 'utf8' },
+);
+if (
+  result.status !== 1 ||
+  !result.stderr.includes('Usage: node install-bundle.cjs')
+)
+  throw new Error('Standalone offline installer did not start correctly');

scripts/build-upgrade-bundle.cjs

@@ -0,0 +1,112 @@
+const fs = require('node:fs/promises');
+const path = require('node:path');
+const tar = require('tar');
+const bundle = require('../cli/src/internal/maintenance/platformBundle.cjs');
+const {
+  verifyUpgrade,
+} = require('../cli/src/internal/maintenance/upgradeArtifacts.cjs');
+
+async function buildBundle(root, output) {
+  root = path.resolve(root);
+  output = path.resolve(output);
+  const target = await bundle.runtimeTarget();
+  if (process.platform !== 'linux')
+    throw new Error('Release bundles must be built and probed on Linux');
+  const build = await verifyUpgrade(root, path.join(root, 'static'));
+  await bundle.smokeDependencies(root);
+  await fs.mkdir(output, { recursive: true });
+  const workspace = await fs.mkdtemp(path.join(output, '.bundle-'));
+  try {
+    const payload = path.join(workspace, 'qinglong');
+    const source = path.join(payload, 'source'),
+      staticRoot = path.join(payload, 'static');
+    await fs.mkdir(source, { recursive: true });
+    const excluded = new Set([
+      '.git',
+      '.tmp',
+      '.env',
+      'data',
+      'static',
+      'output',
+      'node_modules',
+    ]);
+    for (const name of await fs.readdir(root)) {
+      if (excluded.has(name)) continue;
+      await fs.cp(path.join(root, name), path.join(source, name), {
+        recursive: true,
+        verbatimSymlinks: true,
+      });
+    }
+    await fs.cp(
+      path.join(root, 'node_modules'),
+      path.join(source, 'node_modules'),
+      { recursive: true, verbatimSymlinks: true },
+    );
+    await fs.cp(path.join(root, 'static'), staticRoot, {
+      recursive: true,
+      verbatimSymlinks: true,
+    });
+    const manifest = {
+      format: 2,
+      sourceCommit: build.sourceCommit,
+      version: JSON.parse(
+        await fs.readFile(path.join(root, 'package.json'), 'utf8'),
+      ).version,
+      lockfileSha256: build.lockfileSha256,
+      target: {
+        platform: target.platform,
+        arch: target.arch,
+        libc: target.libc,
+        libcMinimum: target.libcVersion,
+        endianness: target.endianness,
+        armFloatAbi: target.armFloatAbi,
+      },
+      nodeMinimum: '20.18.1',
+      nodeApi: 6,
+      files: await bundle.inventory({ source, static: staticRoot }),
+    };
+    await fs.writeFile(
+      path.join(payload, 'bundle.json'),
+      JSON.stringify(manifest),
+    );
+    const filename = `qinglong-${build.sourceCommit}-${bundle.targetKey(
+      target,
+    )}.tar.gz`;
+    await tar.c(
+      {
+        gzip: true,
+        portable: true,
+        noMtime: true,
+        cwd: workspace,
+        file: path.join(output, filename),
+      },
+      ['qinglong'],
+    );
+    const bytes = await fs.readFile(path.join(output, filename));
+    const record = {
+      format: 2,
+      sourceCommit: build.sourceCommit,
+      target: bundle.targetKey(target),
+      filename,
+      baseImage: process.env.QL_BUNDLE_BASE_IMAGE,
+      size: bytes.length,
+      sha256: bundle.sha256(bytes),
+    };
+    await fs.writeFile(
+      path.join(output, filename + '.json'),
+      JSON.stringify(record) + '\n',
+    );
+    console.log(JSON.stringify(record));
+    return record;
+  } finally {
+    await fs.rm(workspace, { recursive: true, force: true });
+  }
+}
+module.exports = { buildBundle };
+if (require.main === module)
+  buildBundle(process.argv[2] || '/ql', process.argv[3] || '/out').catch(
+    (e) => {
+      console.error(e);
+      process.exitCode = 1;
+    },
+  );

scripts/publish-upgrade-bundles.cjs

@@ -0,0 +1,152 @@
+const fs = require('node:fs');
+const path = require('node:path');
+const { execFileSync } = require('node:child_process');
+const {
+  sha256,
+} = require('../cli/src/internal/maintenance/platformBundle.cjs');
+const platforms = [
+  'linux-x64-musl',
+  'linux-armv6-musl',
+  'linux-armv7-musl',
+  'linux-arm64-musl',
+  'linux-ppc64-musl',
+  'linux-s390x-musl',
+  'linux-ia32-musl',
+  'linux-x64-glibc',
+  'linux-armv7-glibc',
+  'linux-arm64-glibc',
+  'linux-ppc64-glibc',
+  'linux-s390x-glibc',
+];
+function releaseIndex(directory, commit, repository) {
+  if (!/^[a-f0-9]{40}$/.test(commit) || !/^[\w.-]+\/[\w.-]+$/.test(repository))
+    throw new Error('Invalid release source');
+  const packages = {};
+  for (const target of platforms) {
+    const filename = `qinglong-${commit}-${target}.tar.gz`;
+    const record = JSON.parse(
+      fs.readFileSync(path.join(directory, filename + '.json')),
+    );
+    const bytes = fs.readFileSync(path.join(directory, filename));
+    if (
+      record.format !== 2 ||
+      record.sourceCommit !== commit ||
+      record.target !== target ||
+      record.filename !== filename ||
+      record.size !== bytes.length ||
+      record.sha256 !== sha256(bytes)
+    )
+      throw new Error(`Unverified platform bundle: ${target}`);
+    packages[target] = {
+      size: record.size,
+      sha256: record.sha256,
+      url: `https://github.com/${repository}/releases/download/upgrade-${commit}/${filename}`,
+    };
+  }
+  return { format: 2, sourceCommit: commit, packages };
+}
+module.exports = { releaseIndex, platforms };
+if (require.main === module) {
+  const [directory, commit, repository, branch] = process.argv.slice(2);
+  const index = releaseIndex(directory, commit, repository);
+  const installer = fs.readFileSync(path.join(directory, 'install-bundle.cjs'));
+  index.installer = {
+    size: installer.length,
+    sha256: sha256(installer),
+    url: `https://github.com/${repository}/releases/download/upgrade-${commit}/install-bundle.cjs`,
+  };
+  if (!['develop', 'master'].includes(branch))
+    throw new Error('Invalid release channel');
+  fs.writeFileSync(
+    path.join(directory, 'latest.json'),
+    JSON.stringify(index) + '\n',
+  );
+  const gh = (...args) =>
+    execFileSync('gh', args, {
+      encoding: 'utf8',
+      stdio: ['ignore', 'pipe', 'pipe'],
+    });
+  const tag = `upgrade-${commit}`;
+  try {
+    gh('release', 'view', tag, '--repo', repository);
+  } catch {
+    gh(
+      'release',
+      'create',
+      tag,
+      '--repo',
+      repository,
+      '--target',
+      commit,
+      '--prerelease',
+      '--title',
+      `Platform upgrade ${commit.slice(0, 12)}`,
+      '--notes',
+      'Verified platform bundles with production dependencies. Existing Node runtime is retained.',
+    );
+  }
+  const assets = fs
+    .readdirSync(directory)
+    .filter((n) => /\.(?:tar\.gz|cjs|json)$/.test(n) && n !== 'latest.json')
+    .map((n) => path.join(directory, n));
+  const published = JSON.parse(
+    gh('api', `repos/${repository}/releases/tags/${tag}`),
+  );
+  const missing = [];
+  for (const file of [...assets, path.join(directory, 'latest.json')]) {
+    const bytes = fs.readFileSync(file);
+    const previous = published.assets.find(
+      (a) => a.name === path.basename(file),
+    );
+    if (!previous) missing.push(file);
+    else if (
+      previous.size !== bytes.length ||
+      previous.digest !== `sha256:${sha256(bytes)}`
+    )
+      throw new Error(
+        `Immutable release asset differs: ${path.basename(file)}`,
+      );
+  }
+  if (missing.length)
+    gh('release', 'upload', tag, ...missing, '--repo', repository);
+  // An older, slower run may publish immutable assets, but must not regress a channel.
+  if (
+    gh(
+      'api',
+      `repos/${repository}/git/ref/heads/${branch}`,
+      '--jq',
+      '.object.sha',
+    ).trim() !== commit
+  ) {
+    console.log('Newer source exists; leaving channel unchanged');
+  } else {
+    const channel = `upgrade-${branch}`;
+    try {
+      gh('release', 'view', channel, '--repo', repository);
+    } catch {
+      gh(
+        'release',
+        'create',
+        channel,
+        '--repo',
+        repository,
+        '--target',
+        commit,
+        '--prerelease',
+        '--title',
+        `Upgrade channel ${branch}`,
+        '--notes',
+        'The latest.json asset selects immutable, fully verified platform bundles.',
+      );
+    }
+    gh(
+      'release',
+      'upload',
+      channel,
+      path.join(directory, 'latest.json'),
+      '--repo',
+      repository,
+      '--clobber',
+    );
+  }
+}

scripts/publish-upgrade-info.cjs

@@ -0,0 +1,136 @@
+// Publish archive sizes separately: adding them to the archive itself would
+// change its bytes. Immutable commit URLs make both size and checksum stable.
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const { createHash } = require('node:crypto');
+const { execFileSync } = require('node:child_process');
+
+function publishUpgradeInfo(
+  destination,
+  ref,
+  sourceCommit,
+  execute = execFileSync,
+) {
+  const run = (program, args) =>
+    execute(program, args, {
+      encoding: 'utf8',
+      stdio: ['ignore', 'pipe', 'pipe'],
+    });
+  if (!/^[a-f0-9]{40}$/.test(sourceCommit))
+    throw new Error('Invalid source commit');
+  run('git', ['check-ref-format', `refs/heads/${ref}`]);
+  const staticCommit = run('git', [
+    'ls-remote',
+    destination,
+    `refs/heads/${ref}`,
+  ])
+    .trim()
+    .split(/\s/)[0];
+  if (!/^[a-f0-9]{40}$/.test(staticCommit))
+    throw new Error('Missing static commit');
+  const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'ql-upgrade-info-'));
+  try {
+    const archives = {};
+    for (const [repository, commit] of [
+      ['qinglong-static', staticCommit],
+      ['qinglong', sourceCommit],
+    ]) {
+      const filename = path.join(tmp, `${repository}.zip`);
+      run('curl', [
+        '--fail',
+        '--silent',
+        '--show-error',
+        '--location',
+        '--proto',
+        '=https',
+        '--proto-redir',
+        '=https',
+        '--connect-timeout',
+        '30',
+        '--max-time',
+        '600',
+        '--output',
+        filename,
+        `https://codeload.github.com/whyour/${repository}/zip/${commit}`,
+      ]);
+      run('unzip', ['-tq', filename]);
+      if (repository === 'qinglong-static') {
+        const manifest = JSON.parse(
+          run('unzip', [
+            '-p',
+            filename,
+            `${repository}-${commit}/build-info.json`,
+          ]),
+        );
+        if (manifest.sourceCommit !== sourceCommit || manifest.dirty !== false)
+          throw new Error('Static source commit does not match this build');
+      }
+      const bytes = fs.readFileSync(filename);
+      archives[repository] = {
+        size: bytes.length,
+        sha256: createHash('sha256').update(bytes).digest('hex'),
+      };
+    }
+    const info = { version: 1, sourceCommit, staticCommit, archives };
+    for (let attempt = 0; attempt < 3; attempt++) {
+      const checkout = path.join(tmp, `metadata-${attempt}`);
+      const exists = run('git', [
+        'ls-remote',
+        destination,
+        'refs/heads/upgrade-info',
+      ]).trim();
+      if (exists)
+        run('git', [
+          'clone',
+          '--quiet',
+          '--depth',
+          '1',
+          '--branch',
+          'upgrade-info',
+          '--single-branch',
+          destination,
+          checkout,
+        ]);
+      else run('git', ['init', '--quiet', '-b', 'upgrade-info', checkout]);
+      const git = (...args) => run('git', ['-C', checkout, ...args]);
+      git('config', 'user.name', 'github-actions[bot]');
+      git(
+        'config',
+        'user.email',
+        'github-actions[bot]@users.noreply.github.com',
+      );
+      fs.writeFileSync(
+        path.join(checkout, `${sourceCommit}.json`),
+        JSON.stringify(info) + '\n',
+      );
+      git('add', `${sourceCommit}.json`);
+      git(
+        'commit',
+        '--quiet',
+        '--allow-empty',
+        '-m',
+        `Archive metadata for ${sourceCommit}`,
+      );
+      try {
+        git('push', '--quiet', destination, 'HEAD:refs/heads/upgrade-info');
+        return info;
+      } catch (error) {
+        if (attempt === 2) throw error;
+      }
+    }
+  } finally {
+    fs.rmSync(tmp, { recursive: true, force: true });
+  }
+}
+
+module.exports = { publishUpgradeInfo };
+if (require.main === module) {
+  try {
+    publishUpgradeInfo(...process.argv.slice(2));
+  } catch {
+    // Git errors may include a credential-bearing remote URL.
+    console.error('Failed to publish verified upgrade archive metadata');
+    process.exitCode = 1;
+  }
+}

shell/api.sh

@@ -1,12 +1,12 @@
 #!/usr/bin/env bash
 
 create_token() {
-  local token_command="ts-node-transpile-only ${dir_root}/back/token.ts"
   local token_file="${dir_root}/static/build/token.js"
   if [[ -f $token_file ]]; then
-    token_command="node ${token_file}"
+    __ql_token__=$(node "$token_file")
+  else
+    __ql_token__=$(ts-node-transpile-only "${dir_root}/back/token.ts")
   fi
-  __ql_token__=$(eval "$token_command")
 }
 
 get_token() {
@@ -236,7 +236,7 @@ find_cron_api() {
 
 update_auth_config() {
   local body="$1"
-  local tip="$2"
+  local tip=$(t "$2")
   local currentTimeStamp=$(date +%s)
   local api=$(ql_api_request \
     "http://localhost:${ql_port}/open/system/auth/reset?t=$currentTimeStamp" \

shell/install-bundle.cjs

@@ -0,0 +1,193 @@
+#!/usr/bin/env node
+// Also published as a standalone, bundled installer for devices with Node only.
+const fs = require('node:fs/promises');
+const path = require('node:path');
+const os = require('node:os');
+const { promisify } = require('node:util');
+const execute = promisify(require('node:child_process').execFile);
+const { parseArgs } = require('node:util');
+const artifacts = require('../cli/src/internal/maintenance/upgradeArtifacts.cjs');
+const jobs = require('../cli/src/internal/maintenance/panelUpgrade.cjs');
+
+async function installBundle(argv = process.argv.slice(2), env = process.env) {
+  const { values } = parseArgs({
+    args: argv,
+    options: {
+      root: { type: 'string' },
+      file: { type: 'string' },
+      'download-only': { type: 'boolean' },
+      install: { type: 'boolean' },
+    },
+  });
+  if (!values.file || !(values.root || env.QL_DIR))
+    throw new Error(
+      'Usage: node install-bundle.cjs --root /path/to/qinglong --file /path/to/bundle.tar.gz [--download-only | --install]',
+    );
+  if (values.install && values['download-only'])
+    throw new Error('Choose --install or --download-only');
+  const root = path.resolve(values.root || env.QL_DIR);
+  const existing = await fs.readdir(root).catch((error) => {
+    if (error.code !== 'ENOENT') throw error;
+    return [];
+  });
+  if (values.install && existing.length)
+    throw new Error('--install requires an empty installation directory');
+  if (!values.install) await fs.access(path.join(root, 'shell/share.sh'));
+  let environment = {
+    ...env,
+    QL_DIR: root,
+    QL_UPGRADE_FILE: path.resolve(values.file),
+  };
+  if (!values.install) {
+    const captured = await execute(
+      'bash',
+      [
+        '--noprofile',
+        '--norc',
+        '-c',
+        '. "$1/shell/share.sh"\n. "$1/shell/env.sh"\nimport_config\nexport QlPort="${ql_port:-${QlPort:-5700}}" QlBaseUrl="${ql_base_url:-${QlBaseUrl:-/}}"\nenv -0',
+        'ql-offline',
+        root,
+      ],
+      { env: environment, maxBuffer: 1024 * 1024 },
+    );
+    const loaded = Object.fromEntries(
+      captured.stdout.split('\0').flatMap((line) => {
+        const match = /^([A-Za-z_][A-Za-z_0-9]*)=([\s\S]*)$/.exec(line);
+        return match ? [[match[1], match[2]]] : [];
+      }),
+    );
+    environment = {
+      ...environment,
+      ...loaded,
+      QL_DIR: root,
+      QL_UPGRADE_FILE: path.resolve(values.file),
+    };
+  }
+  const freshWorkspace = values.install
+    ? await fs.mkdtemp(path.join(os.tmpdir(), 'ql-offline-install-'))
+    : undefined;
+  const tmp = freshWorkspace || path.join(root, '.tmp');
+  try {
+    return await artifacts.withUpgradeLock(
+      tmp,
+      async () => {
+        const selected = await artifacts.stageUpgrade({
+          root,
+          tmp,
+          env: environment,
+          run: (program, args, capture) =>
+            artifacts.runProcess(environment, program, args, capture),
+          onProgress: async (p) => console.log(p.phase),
+          install: async () => {
+            throw new Error('Offline bundles never install npm dependencies');
+          },
+        });
+        if (values['download-only']) {
+          console.log('更新已就绪；执行 ql reload system 应用更新。');
+          return selected;
+        }
+        if (values.install) {
+          // Build beside the destination, then atomically replace only an empty root.
+          await fs.mkdir(path.dirname(root), { recursive: true });
+          const publication = await fs.mkdtemp(
+            path.join(path.dirname(root), '.qinglong-install-'),
+          );
+          try {
+            await fs.cp(selected.source, publication, {
+              recursive: true,
+              verbatimSymlinks: true,
+            });
+            await fs.cp(selected.static, path.join(publication, 'static'), {
+              recursive: true,
+            });
+            await fs.copyFile(
+              path.join(publication, '.env.example'),
+              path.join(publication, '.env'),
+              require('node:fs').constants.COPYFILE_EXCL,
+            );
+            await fs.chmod(path.join(publication, '.env'), 0o600);
+            await fs.rename(publication, root);
+          } finally {
+            await fs.rm(publication, { recursive: true, force: true });
+          }
+          await fs.rm(path.dirname(selected.source), {
+            recursive: true,
+            force: true,
+          });
+          await fs.rm(
+            path.join(
+              tmp,
+              `upgrade-ready-${artifacts.releaseBranch(environment)}.json`,
+            ),
+            { force: true },
+          );
+          console.log(
+            `离线安装完成，保留现有 Node ${
+              process.version
+            }。启动服务：QL_DIR=${JSON.stringify(root)} bash ${JSON.stringify(
+              path.join(root, 'shell/start-simplify.sh'),
+            )}`,
+          );
+          return;
+        }
+        return jobs.withPanelLifecycle(
+          root,
+          tmp,
+          environment,
+          async (hook, prepareSelection) => {
+            const expected = await jobs.stagedMetadata(selected);
+            const previous = await jobs
+              .readRunningBuild(environment)
+              .catch(() => undefined);
+            const selection = await prepareSelection?.(selected);
+            try {
+              return await artifacts.reloadSystem({
+                root,
+                tmp,
+                env: environment,
+                data: environment.dir_data || path.join(root, 'data'),
+                staticRoot: path.join(root, 'static'),
+                config:
+                  environment.dir_config || path.join(root, 'data/config'),
+                lifecycle: {
+                  stop: () => hook('stop'),
+                  start: async (recover) => {
+                    await hook('start');
+                    await artifacts.waitForHealth(environment);
+                    if (!recover)
+                      await jobs.verifyRunningVersion(
+                        environment,
+                        expected,
+                        previous,
+                      );
+                  },
+                },
+                additionalReplacements: selection
+                  ? [{ source: selection.source, target: selection.target }]
+                  : [],
+              });
+            } finally {
+              if (selection)
+                await fs.rm(selection.directory, {
+                  recursive: true,
+                  force: true,
+                });
+            }
+          },
+        );
+      },
+      environment,
+    );
+  } finally {
+    if (freshWorkspace)
+      await fs.rm(freshWorkspace, { recursive: true, force: true });
+  }
+}
+
+module.exports = { installBundle };
+if (require.main === module)
+  installBundle().catch((error) => {
+    console.error(error.message);
+    process.exitCode = 1;
+  });

shell/lang/en.sh

@@ -108,4 +108,42 @@ declare -gA LANG_MESSAGES=(
   ['暂不支持此系统部署 %s']='Unsupported system for deployment: %s'
   # update.sh
   ['命令输入错误...\n']='Invalid command...\n'
+  ['%s 删除任务%s']='%s removed tasks%s'
+  ['%s 新增任务']='%s added tasks'
+  ['新增任务通知']='New task notification'
+  ['失效']='obsolete'
+  ['新']='new'
+  ['%s 命令使用方法：']='Usage: %s'
+  ['更新并重启青龙']='Update and restart QingLong'
+  ['运行自定义脚本']='Run custom scripts'
+  ['更新单个脚本文件']='Update a script'
+  ['更新单个仓库的脚本']='Update scripts from a repository'
+  ['删除旧日志']='Delete old logs'
+  ['启动tg-bot']='Start tg-bot'
+  ['检测青龙环境并修复']='Check and repair the QingLong environment'
+  ['查看青龙运行日志']='View QingLong service logs'
+  ['重置登录错误次数']='Reset failed login attempts'
+  ['禁用两步登录']='Disable two-factor login'
+  ['修改登录密码']='Change login password'
+  ['修改登录用户名']='Change login username'
+  ['禁用两步验证']='Disable two-factor authentication'
+  ['重置密码']='Reset password'
+  ['重置用户名']='Reset username'
+  [', 任务状态更新失败(%s)']=', task status update failed (%s)'
+  [', 状态更新失败(%s)']=', status update failed (%s)'
+  ['<未识别出活动名称>']='<Unrecognized task name>'
+  ['task命令运行本程序自动添加进crontab的脚本，需要输入脚本的绝对路径或去掉 “%s/” 目录后的相对路径（定时任务中请写作相对路径），用法为：']='task runs scripts registered in crontab. Use an absolute path or a path relative to %s/ (use relative paths in scheduled tasks). Usage:'
+  ['1.%s <file_name>                                             # 依次执行，如果设置了随机延迟，将随机延迟一定秒数']='1.%s <file_name>  # Run sequentially, with the configured random delay'
+  ['2.%s <file_name> now                                         # 依次执行，无论是否设置了随机延迟，均立即运行，前台会输出日志，同时记录在日志文件中']='2.%s <file_name> now  # Run immediately, displaying and saving logs'
+  ['3.%s <file_name> conc <环境变量名称> <账号编号，空格分隔>(可选的)  # 并发执行，无论是否设置了随机延迟，均立即运行，前台不产生日志，直接记录在日志文件中，且可指定账号执行']='3.%s <file_name> conc <variable> [account-numbers...]  # Run selected accounts concurrently, saving logs'
+  ['4.%s <file_name> desi <环境变量名称> <账号编号，空格分隔>         # 指定账号执行，无论是否设置了随机延迟，均立即运行']='4.%s <file_name> desi <variable> <account-numbers...>  # Run selected accounts immediately'
+  ['\n当前有以下脚本可以运行:']='\nAvailable scripts:'
+  ['\n暂无脚本可以执行']='\nNo scripts available'
+  ['🚀  1. 检测配置文件...']='🚀  1. Checking configuration...'
+  ['🔄  2. 启动 nginx...']='🔄  2. Starting nginx...'
+  ['⚙️  3. 启动 pm2 服务...']='⚙️  3. Starting pm2 services...'
+  ['🤖 4. 启动 bot...']='🤖 4. Starting bot...'
+  ['🛠️ 5. 执行自定义脚本...']='🛠️ 5. Running custom scripts...'
+  ['🎉 启动成功!']='🎉 Started successfully!'
+  ['\n## 执行结束... %s  耗时 %s 秒']='\n## Execution finished... %s  elapsed %s seconds'
 )

shell/otask.sh

@@ -39,44 +39,44 @@ random_delay() {
 gen_array_scripts() {
   local dir_current=$(pwd)
   local i="-1"
-  cd $dir_scripts
+  cd "$dir_scripts" || return $?
-  for file in $(ls); do
+  for file in *; do
     if [[ -f $file ]] && [[ $file == *.js && $file != sendNotify.js ]]; then
       let i++
-      array_scripts[i]=$(echo "$file" | perl -pe "s|$dir_scripts/||g")
+      array_scripts[i]=$file
-      array_scripts_name[i]=$(grep "new Env" $file | awk -F "\(" '{print $2}' | awk -F "\)" '{print $1}' | sed 's:.*\('\''\|"\)\([^"'\'']*\)\('\''\|"\).*:\2:' | sed 's:"::g' | sed "s:'::g" | head -1)
+      array_scripts_name[i]=$(grep -- "new Env" "$file" | awk -F '[(]' '{print $2}' | awk -F '[)]' '{print $1}' | sed 's:.*\('\''\|"\)\([^"'\'']*\)\('\''\|"\).*:\2:' | sed 's:"::g' | sed "s:'::g" | head -1)
-      [[ -z ${array_scripts_name[i]} ]] && array_scripts_name[i]="<未识别出活动名称>"
+      [[ -z ${array_scripts_name[i]} ]] && array_scripts_name[i]="$(t '<未识别出活动名称>')"
     fi
   done
-  cd $dir_current
+  cd "$dir_current" || return $?
 }
 
 ## 使用说明
 usage() {
   gen_array_scripts
-  echo -e "task命令运行本程序自动添加进crontab的脚本，需要输入脚本的绝对路径或去掉 “$dir_scripts/” 目录后的相对路径（定时任务中请写作相对路径），用法为："
+  t 'task命令运行本程序自动添加进crontab的脚本，需要输入脚本的绝对路径或去掉 “%s/” 目录后的相对路径（定时任务中请写作相对路径），用法为：' "$dir_scripts"
-  echo -e "1.$cmd_task <file_name>                                             # 依次执行，如果设置了随机延迟，将随机延迟一定秒数"
+  t '1.%s <file_name>                                             # 依次执行，如果设置了随机延迟，将随机延迟一定秒数' "$cmd_task"
-  echo -e "2.$cmd_task <file_name> now                                         # 依次执行，无论是否设置了随机延迟，均立即运行，前台会输出日志，同时记录在日志文件中"
+  t '2.%s <file_name> now                                         # 依次执行，无论是否设置了随机延迟，均立即运行，前台会输出日志，同时记录在日志文件中' "$cmd_task"
-  echo -e "3.$cmd_task <file_name> conc <环境变量名称> <账号编号，空格分隔>(可选的)  # 并发执行，无论是否设置了随机延迟，均立即运行，前台不产生日志，直接记录在日志文件中，且可指定账号执行"
+  t '3.%s <file_name> conc <环境变量名称> <账号编号，空格分隔>(可选的)  # 并发执行，无论是否设置了随机延迟，均立即运行，前台不产生日志，直接记录在日志文件中，且可指定账号执行' "$cmd_task"
-  echo -e "4.$cmd_task <file_name> desi <环境变量名称> <账号编号，空格分隔>         # 指定账号执行，无论是否设置了随机延迟，均立即运行"
+  t '4.%s <file_name> desi <环境变量名称> <账号编号，空格分隔>         # 指定账号执行，无论是否设置了随机延迟，均立即运行' "$cmd_task"
   if [[ ${#array_scripts[*]} -gt 0 ]]; then
-    echo -e "\n当前有以下脚本可以运行:"
+    t '\n当前有以下脚本可以运行:'
     for ((i = 0; i < ${#array_scripts[*]}; i++)); do
       echo -e "$(($i + 1)). ${array_scripts_name[i]}：${array_scripts[i]}"
     done
   else
-    echo -e "\n暂无脚本可以执行"
+    t '\n暂无脚本可以执行'
   fi
 }
 
 ## run nohup，$1：文件名，不含路径，带后缀
 run_nohup() {
   local file_name=$1
-  nohup node $file_name &>$log_path &
+  nohup node "$file_name" &>"$log_path" &
 }
 
 env_str_to_array() {
-  . $file_env
+  . "$file_env"
   local IFS="&"
   read -ra array <<<"${!env_param}"
   array_length=${#array[@]}
@@ -122,7 +122,7 @@ enter_script_workdir() {
       _target_dir="${dir_scripts}/${work_dir}"
     fi
     if [[ -d "${_target_dir}" ]]; then
-      cd "${_target_dir}"
+      cd "${_target_dir}" || return $?
       if [[ ${file_param} =~ "/" ]]; then
         local script_name="${file_param##*/}"
         if [[ "${use_dot_prefix}" == "true" ]]; then
@@ -136,13 +136,13 @@ enter_script_workdir() {
     t '警告：工作目录不存在 %s' "${_target_dir}"
   fi
 
-  cd $dir_scripts
+  cd "$dir_scripts" || return $?
   if [[ ${file_param} =~ "/" ]]; then
     local script_dir="${file_param%/*}"
     local script_name="${file_param##*/}"
 
     if [[ -d ${script_dir} ]]; then
-      cd ${script_dir}
+      cd "$script_dir" || return $?
       if [[ "${use_dot_prefix}" == "true" ]]; then
         file_param="./${script_name}"
       else
@@ -159,12 +159,12 @@ run_normal() {
     random_delay "$file_param"
   fi
 
-  enter_script_workdir
+  enter_script_workdir || return $?
 
   if [[ $isJsOrPythonFile == 'false' ]]; then
     clear_non_sh_env
   fi
-  run_task_command $which_program $file_param "${script_params[@]}"
+  run_task_command ${which_program:+"$which_program"} "$file_param" "${script_params[@]}"
 }
 
 handle_env_split() {
@@ -175,7 +175,7 @@ handle_env_split() {
   env_str_to_array
   local tempArr=$(echo $num_param | sed "s/-max/-${array_length}/g" | sed "s/max-/${array_length}-/g" | perl -pe "s|(\d+)(-\|~\|_)(\d+)|{\1..\3}|g")
   local runArr=($(eval echo $tempArr))
-  array_run=($(awk -v RS=' ' '!a[$1]++' <<<${runArr[@]}))
+  array_run=($(awk -v RS=' ' '!a[$1]++' <<<"${runArr[*]}"))
 }
 
 ## 并发执行时，设定的 RandomDelay 不会生效，即所有任务立即执行
@@ -192,10 +192,10 @@ run_concurrent() {
   time=$(date "+$mtime_format")
   single_log_time=$(format_log_time "$mtime_format" "$time")
 
-  enter_script_workdir
+  enter_script_workdir || return $?
 
   local j=0
-  for i in ${array_run[@]}; do
+  for i in "${array_run[@]}"; do
     single_log_path="$dir_log/$log_dir/${single_log_time}_$((j + 1)).log"
     let j++
 
@@ -203,16 +203,16 @@ run_concurrent() {
       export "${env_param}=${array[$i - 1]}"
       clear_non_sh_env
     fi
-    eval envParam="${env_param}" numParam="${i}" run_task_command $which_program $file_param "${script_params[@]}" &>$single_log_path &
+    envParam="${env_param}" numParam="${i}" run_task_command ${which_program:+"$which_program"} "$file_param" "${script_params[@]}" &>"$single_log_path" &
   done
 
   wait
   local k=0
-  for i in ${array_run[@]}; do
+  for i in "${array_run[@]}"; do
     single_log_path="$dir_log/$log_dir/${single_log_time}_$((k + 1)).log"
     let k++
-    cat $single_log_path
+    cat "$single_log_path"
-    [[ -f $single_log_path ]] && rm -f $single_log_path
+    [[ -f $single_log_path ]] && rm -f "$single_log_path"
   done
 }
 
@@ -229,7 +229,7 @@ run_designated() {
 
   if [[ $isJsOrPythonFile == 'false' ]]; then
     local n=0
-    for i in ${array_run[@]}; do
+    for i in "${array_run[@]}"; do
       array_str[n]=${array[$i - 1]}
       let n++
     done
@@ -241,9 +241,9 @@ run_designated() {
     clear_non_sh_env
   fi
 
-  enter_script_workdir
+  enter_script_workdir || return $?
 
-  envParam="${env_param}" numParam="${num_param}" run_task_command $which_program $file_param "${script_params[@]}"
+  envParam="${env_param}" numParam="${num_param}" run_task_command ${which_program:+"$which_program"} "$file_param" "${script_params[@]}"
 }
 
 ## 运行其他命令
@@ -273,7 +273,7 @@ run_else() {
     if [[ -n "$script_for_dir" ]]; then
       local saved_file_param="$file_param"
       file_param="$script_for_dir"
-      enter_script_workdir true
+      enter_script_workdir true || return $?
       local adjusted_script="$file_param"
       file_param="$saved_file_param"
 
@@ -289,17 +289,17 @@ run_else() {
       set -- "${new_args[@]}"
     else
       # 没有找到脚本参数，只 cd 到 scripts 目录
-      enter_script_workdir true
+      enter_script_workdir true || return $?
       shift
     fi
   else
     # file_param 本身就是脚本，直接用 enter_script_workdir 处理
-    enter_script_workdir true
+    enter_script_workdir true || return $?
     shift
   fi
 
   clear_non_sh_env
-  run_task_command $which_program $file_param "$@"
+  run_task_command ${which_program:+"$which_program"} "$file_param" "$@"
 }
 
 check_file() {
@@ -313,12 +313,14 @@ check_file() {
       export PREV_NODE_OPTIONS="${NODE_OPTIONS:=}"
       export PREV_PYTHONPATH="${PYTHONPATH:=}"
       if [[ $1 == *.js ]] || [[ $1 == *.ts ]] || [[ $1 == *.mjs ]]; then
-        export NODE_OPTIONS="-r ${file_preload_js} ${NODE_OPTIONS}"
+        local preload_path=${file_preload_js//\\/\\\\}
+        preload_path=${preload_path//\"/\\\"}
+        export NODE_OPTIONS="-r \"${preload_path}\" ${NODE_OPTIONS}"
       else
         export PYTHONPATH="${dir_preload}:${dir_config}:${PYTHONPATH}"
       fi
     else
-      . $file_env
+      . "$file_env"
     fi
   fi
 }

shell/preload/client.js

@@ -47,6 +47,7 @@ class GrpcClient {
     'updateEnvNames',
     'getEnvById',
     'systemNotify',
+    'recordNotifyLog',
     'getCronDetail',
     'createCron',
     'updateCron',

shell/preload/notificationAudit.js

@@ -0,0 +1,43 @@
+const path = require('node:path');
+const fs = require('node:fs');
+
+// A reporting failure must never terminate a script or change its send result.
+module.exports = async function reportNotificationAudit(payload) {
+  let client;
+  try {
+    if (!process.env.QL_DIR) return;
+    const grpc = require('@grpc/grpc-js');
+    const loader = require('@grpc/proto-loader');
+    const certDir = path.join(
+      process.env.QL_DATA_DIR || path.join(process.env.QL_DIR, 'data'),
+      'config/grpc',
+    );
+    const credentials = grpc.credentials.createSsl(
+      fs.readFileSync(path.join(certDir, 'ca.crt')),
+      fs.readFileSync(path.join(certDir, 'client.key')),
+      fs.readFileSync(path.join(certDir, 'client.crt')),
+    );
+    const definition = loader.loadSync(
+      path.join(process.env.QL_DIR, 'back/protos/api.proto'),
+      { keepCase: true, defaults: true },
+    );
+    const Api = grpc.loadPackageDefinition(definition).com.ql.api.Api;
+    client = new Api(
+      `localhost:${process.env.GRPC_PORT || '5500'}`,
+      credentials,
+      { 'grpc.enable_http_proxy': 0 },
+    );
+    await new Promise((resolve) => {
+      client.RecordNotifyLog(
+        payload,
+        new grpc.Metadata(),
+        { deadline: new Date(Date.now() + 1500) },
+        () => resolve(),
+      );
+    });
+  } catch (_) {
+    // Missing certificates, old panels and offline services are best effort.
+  } finally {
+    if (client) client.close();
+  }
+};

shell/preload/sitecustomize.js

@@ -82,7 +82,7 @@ function run() {
     ].filter(Boolean);
 
     if (task_before) {
-      console.log('执行前置命令\n');
+      console.log(process.env.QL_LANG === 'en' ? 'Executing before command\n' : '执行前置命令\n');
     }
 
     const res = execSync(commands.join(' && '), {
@@ -122,7 +122,7 @@ function run() {
       console.log(output);
     }
     if (task_before) {
-      console.log('执行前置命令结束\n');
+      console.log(process.env.QL_LANG === 'en' ? 'Before command finished\n' : '执行前置命令结束\n');
     }
   } catch (error) {
     if (!error.message.includes('spawnSync /bin/bash E2BIG')) {
@@ -131,7 +131,7 @@ function run() {
       // environment variable is too large
     }
     if (task_before) {
-      console.log('执行前置命令结束\n');
+      console.log(process.env.QL_LANG === 'en' ? 'Before command finished\n' : '执行前置命令结束\n');
     }
   }
 

shell/preload/sitecustomize.py

@@ -56,7 +56,7 @@ def run():
         if task_before:
             escaped_task_before = task_before.replace('"', '\\"').replace("$", "\\$")
             commands.append(f"eval '{escaped_task_before}'")
-            print("执行前置命令\n")
+            print("Executing before command\n" if os.environ.get("QL_LANG") == "en" else "执行前置命令\n")
             
         commands.append(f"echo -e '{split_str}'")
         
@@ -88,12 +88,12 @@ def run():
         if len(output) > 0:
             print(output)
         if task_before:
-            print("执行前置命令结束\n")
+            print("Before command finished\n" if os.environ.get("QL_LANG") == "en" else "执行前置命令结束\n")
 
     except subprocess.CalledProcessError as error:
         print(f"\ue926 run task before error: {error}")
         if task_before:
-            print("执行前置命令结束\n")
+            print("Before command finished\n" if os.environ.get("QL_LANG") == "en" else "执行前置命令结束\n")
     except OSError as error:
         error_message = str(error)
         if "Argument list too long" not in error_message:
@@ -101,11 +101,11 @@ def run():
         # else:
             # environment variable is too large
         if task_before:
-            print("执行前置命令结束\n")
+            print("Before command finished\n" if os.environ.get("QL_LANG") == "en" else "执行前置命令结束\n")
     except Exception as error:
         print(f"\ue926 run task before error: {error}")
         if task_before:
-            print("执行前置命令结束\n")
+            print("Before command finished\n" if os.environ.get("QL_LANG") == "en" else "执行前置命令结束\n")
 
     import task_before
 

shell/pub.sh

@@ -1,4 +1,12 @@
 #!/usr/bin/env bash
+
+# BSD grep accepts \d as a digit; GNU grep treats it as a literal d.
+string=$(awk '$1 == "version:" { print $2; exit }' version.yaml) || exit 1
+if [[ ! $string =~ ^[0-9]+\.[0-9]+\.[0-9]+(-[[:alnum:].-]+)?(\+[[:alnum:].-]+)?$ ]]; then
+  printf 'Invalid release version: %s\n' "$string" >&2
+  exit 1
+fi
+version="v$string"
 echo -e "开始发布"
 
 echo -e "切换master分支"
@@ -9,8 +17,6 @@ git push --set-upstream origin master -f
 echo -e "更新cdn文件"
 ts-node-transpile-only sample/tool.ts
 
-string=$(cat version.yaml | grep "version" | egrep "[^ ]*" -o | egrep "\d\.*")
-version="v$string"
 echo -e "当前版本$version"
 
 echo -e "删除已经存在的本地tag"

shell/rmlog.sh

@@ -3,42 +3,47 @@
 days=$1
 
 remove_js_log() {
-  local log_full_path_list=$(find $dir_log -name "*.log")
+  local log log_date log_timestamp diff_time log_path encoded_path result
-  local diff_time
+  local now
-  for log in $log_full_path_list; do
+  now=$(date +%s) || return $?
-    local log_date=$(echo $log | awk -F "/" '{print $NF}' | cut -c1-10)
+  while IFS= read -r -d '' log; do
+    log_date=${log##*/}
+    log_date=${log_date:0:10}
     if ! [[ $log_date =~ ^[0-9]{4}-[0-9]{2}-[0-9]{2}$ ]]; then
       if [[ $is_macos -eq 1 ]]; then
-        log_date=$(stat -f %Sm -t "%Y-%m-%d" "$log")
+        log_date=$(stat -f %Sm -t "%Y-%m-%d" "$log") || continue
       else
         log_date=$(stat -c %y "$log" | cut -d ' ' -f 1)
       fi
     fi
     if [[ $is_macos -eq 1 ]]; then
-      diff_time=$(($(date +%s) - $(date -j -f "%Y-%m-%d" "$log_date" +%s)))
+      # BSD date otherwise fills the omitted time from the current clock.
+      log_timestamp=$(date -j -f "%Y-%m-%d %H:%M:%S" "$log_date 00:00:00" +%s) || continue
     else
-      diff_time=$(($(date +%s) - $(date +%s -d "$log_date")))
+      log_timestamp=$(date +%s -d "$log_date") || continue
     fi
+    diff_time=$((now - log_timestamp))
     if [[ $diff_time -gt $((${days} * 86400)) ]]; then
-      local log_path=$(echo "$log" | sed "s,${dir_log}/,,g")
+      log_path=${log#"$dir_log"/}
-      local result=$(find_cron_api "log_path=$log_path")
+      encoded_path=$(printf '%s' "$log_path" | jq -sRr @uri) || continue
+      result=$(find_cron_api "log_path=$encoded_path")
       t '查询文件 %s' "$log_path"
       if [[ -z $result ]]; then
         t '删除中~'
-        rm -vf $log
+        rm -vf -- "$log"
       else
         t '正在被 %s 使用，跳过~' "$result"
       fi
     fi
-  done
+  done < <(find "$dir_log" -type f -name "*.log" -print0)
 }
 
 remove_empty_dir() {
-  cd $dir_log
+  local dir
-  for dir in $(ls); do
+  for dir in "$dir_log"/*/ "$dir_log"/.[!.]*/ "$dir_log"/..?*/; do
-    if [[ -d $dir ]] && [[ -z $(ls $dir) ]]; then
+    [[ -d "$dir" ]] || continue
-      rm -rf $dir
+    # rmdir also protects a directory populated between discovery and removal.
-    fi
+    rmdir -- "$dir" 2>/dev/null || true
   done
 }
 

shell/share.sh

@@ -77,17 +77,20 @@ load_ql_envs() {
 }
 
 import_config() {
-  [[ -f $file_config_user ]] && . $file_config_user
+  [[ -f $file_config_user ]] && . "$file_config_user"
-  [[ -f $dir_preload/lang_env.sh ]] && . $dir_preload/lang_env.sh
+  [[ -f $dir_preload/lang_env.sh ]] && . "$dir_preload/lang_env.sh"
 
-  # 加载语言包（bash 4+ 支持 declare -A，不兼容时回退输出中文 key）
+  # Language packs need global associative arrays (Bash 4.2+). Probe the
+  # capability so Bash 3.2 and 4.0/4.1 retain the Chinese-key fallback.
   local lang=${QL_LANG:-zh}
   local lang_file="$dir_shell/lang/${lang}.sh"
-  if [[ ${BASH_VERSINFO[0]} -ge 4 ]] && [[ -f $lang_file ]]; then
+  if (declare -gA __ql_lang_probe) 2>/dev/null; then
-    . $lang_file
+    if [[ -f $lang_file ]]; then
-  elif [[ ${BASH_VERSINFO[0]} -ge 4 ]]; then
+      . "$lang_file"
+    elif [[ -f "$dir_shell/lang/zh.sh" ]]; then
       . "$dir_shell/lang/zh.sh"
     fi
+  fi
 
   load_ql_envs
   command_timeout_time=${CommandTimeoutTime:-""}
@@ -132,7 +135,7 @@ unset_proxy() {
 make_dir() {
   local dir=$1
   if [[ ! -d $dir ]]; then
-    mkdir -p $dir
+    mkdir -p -- "$dir"
   fi
 }
 
@@ -176,57 +179,57 @@ define_cmd() {
 }
 
 fix_config() {
-  make_dir $dir_tmp
+  make_dir "$dir_tmp"
-  make_dir $dir_static
+  make_dir "$dir_static"
-  make_dir $dir_data
+  make_dir "$dir_data"
-  make_dir $dir_config
+  make_dir "$dir_config"
-  make_dir $dir_log
+  make_dir "$dir_log"
-  make_dir $dir_db
+  make_dir "$dir_db"
-  make_dir $dir_scripts
+  make_dir "$dir_scripts"
-  make_dir $dir_list_tmp
+  make_dir "$dir_list_tmp"
-  make_dir $dir_repo
+  make_dir "$dir_repo"
-  make_dir $dir_raw
+  make_dir "$dir_raw"
-  make_dir $dir_update_log
+  make_dir "$dir_update_log"
-  make_dir $dir_dep
+  make_dir "$dir_dep"
 
   if [[ ! -s $file_config_user ]]; then
-    cp -f $file_config_sample $file_config_user
+    cp -f "$file_config_sample" "$file_config_user"
   fi
 
   if [[ ! -f $file_task_before ]]; then
-    cp -f $file_task_sample $file_task_before
+    cp -f "$file_task_sample" "$file_task_before"
   fi
 
   if [[ ! -f $file_task_after ]]; then
-    cp -f $file_task_sample $file_task_after
+    cp -f "$file_task_sample" "$file_task_after"
   fi
 
   if [[ ! -f $file_extra_shell ]]; then
-    cp -f $file_extra_sample $file_extra_shell
+    cp -f "$file_extra_sample" "$file_extra_shell"
   fi
 
   if [[ ! -s $file_notify_py ]]; then
-    cp -f $file_notify_py_sample $file_notify_py
+    cp -f "$file_notify_py_sample" "$file_notify_py"
   fi
 
   if [[ ! -s $file_notify_js ]]; then
-    cp -f $file_notify_js_sample $file_notify_js
+    cp -f "$file_notify_js_sample" "$file_notify_js"
   fi
 
   if [[ ! -s $file_test_js ]]; then
-    cp -f $file_test_js_sample $file_test_js
+    cp -f "$file_test_js_sample" "$file_test_js"
   fi
 
   if [[ ! -s $file_test_py ]]; then
-    cp -f $file_test_py_sample $file_test_py
+    cp -f "$file_test_py_sample" "$file_test_py"
   fi
 
   if [[ ! -s $dep_notify_js ]]; then
-    cp -f $file_notify_js_sample $dep_notify_js
+    cp -f "$file_notify_js_sample" "$dep_notify_js"
   fi
 
   if [[ ! -s $dep_notify_py ]]; then
-    cp -f $file_notify_py_sample $dep_notify_py
+    cp -f "$file_notify_py_sample" "$dep_notify_py"
   fi
 
 }
@@ -246,17 +249,17 @@ npm_install_2() {
   local dir_current=$(pwd)
   local dir_work=$1
 
-  cd $dir_work
+  cd "$dir_work" || return $?
   t '安装 %s 依赖包...\n' "$dir_work"
   npm_install_sub
-  cd $dir_current
+  cd "$dir_current" || return $?
 }
 
 diff_and_copy() {
   local copy_source=$1
   local copy_to=$2
-  if [[ ! -s $copy_to ]] || [[ $(diff $copy_source $copy_to) ]]; then
+  if [[ ! -s $copy_to ]] || [[ $(diff "$copy_source" "$copy_to") ]]; then
-    cp -f $copy_source $copy_to
+    cp -f "$copy_source" "$copy_to"
   fi
 }
 
@@ -265,12 +268,13 @@ git_clone_scripts() {
   local dir="$2"
   local branch="$3"
   local proxy="$4"
-  [[ $branch ]] && local part_cmd="-b $branch "
+  local branch_args=()
+  [[ $branch ]] && branch_args=(-b "$branch")
   t '开始拉取仓库 %s 到 %s\n' "${uniq_path}" "$dir"
 
   set_proxy "$proxy"
 
-  git clone -q --depth=1 $part_cmd $url $dir
+  git clone -q --depth=1 "${branch_args[@]}" "$url" "$dir"
   exit_status=$?
 
   unset_proxy
@@ -283,7 +287,7 @@ random_range() {
 }
 
 delete_pm2() {
-  cd $dir_root
+  cd "$dir_root" || return $?
   # Try to delete PM2 processes, but don't fail if PM2 is not available
   pm2 delete ecosystem.config.js 2>/dev/null || true
   # Also try to kill any directly spawned node processes
@@ -291,7 +295,7 @@ delete_pm2() {
 }
 
 reload_pm2() {
-  cd $dir_root
+  cd "$dir_root" || return $?
   restore_env_vars
   
   # Try to start PM2, but handle failures gracefully
@@ -310,7 +314,7 @@ reload_pm2() {
     if [[ "$QL_CONTAINER" == "true" ]]; then
       nohup node static/build/app.js >/proc/1/fd/1 2>/proc/1/fd/2 &
     else
-      nohup node static/build/app.js >$dir_log/qinglong.log 2>&1 &
+      nohup node static/build/app.js >"$dir_log/qinglong.log" 2>&1 &
     fi
     local node_pid=$!
 
@@ -391,14 +395,14 @@ handle_task_start() {
   if [[ $ID ]]; then
     local error=$(update_cron "\"$ID\"" "0" "$$" "$log_path" "$begin_timestamp")
     if [[ $error ]]; then
-      error_message=", 任务状态更新失败(${error})"
+      error_message=$(t ', 任务状态更新失败(%s)' "$error")
     fi
   fi
   t '## 开始执行... %s\n' "${begin_time}${error_message}"
 }
 
 run_task_before() {
-  . $file_task_before "$@"
+  . "$file_task_before" "$@"
 
   if [[ ${task_before:=} ]]; then
     t '执行前置命令\n'
@@ -408,7 +412,7 @@ run_task_before() {
 }
 
 run_task_after() {
-  . $file_task_after "$@"
+  . "$file_task_after" "$@"
 
   if [[ ${task_after:=} ]]; then
     t '\n执行后置命令\n'
@@ -433,7 +437,7 @@ handle_task_end() {
   if [[ $ID ]]; then
     local error=$(update_cron "\"$ID\"" "1" "$$" "$log_path" "$begin_timestamp" "$diff_time" "$exit_code")
     if [[ $error ]]; then
-      error_message=", 状态更新失败(${error})"
+      error_message=$(t ', 状态更新失败(%s)' "$error")
     fi
   fi
 

shell/start-simplify.sh

@@ -46,33 +46,33 @@ log_with_style() {
   printf "\n[%s] [%7s]  %s\n" "${timestamp}" "${level}" "${message}"
 }
 
-log_with_style "INFO" "🚀  1. 检测配置文件..."
 import_config "$@"
+log_with_style "INFO" "$(t '🚀  1. 检测配置文件...')"
 make_dir /etc/nginx/conf.d
 make_dir /run/nginx
 fix_config
 
 pm2 l &>/dev/null
 
-log_with_style "INFO" "🔄  2. 启动 nginx..."
+log_with_style "INFO" "$(t '🔄  2. 启动 nginx...')"
 nginx -s reload 2>/dev/null || nginx -c /etc/nginx/nginx.conf
 
-log_with_style "INFO" "⚙️  3. 启动 pm2 服务..."
+log_with_style "INFO" "$(t '⚙️  3. 启动 pm2 服务...')"
 reload_pm2
 
 if [[ $command != "reload" ]]; then
   if [[ $AutoStartBot == true ]]; then
-    log_with_style "INFO" "🤖 4. 启动 bot..."
+    log_with_style "INFO" "$(t '🤖 4. 启动 bot...')"
-    nohup ql bot >$dir_log/bot.log 2>&1 &
+    nohup ql bot >"$dir_log/bot.log" 2>&1 &
   fi
 
   if [[ $EnableExtraShell == true ]]; then
-    log_with_style "INFO" "🛠️ 5. 执行自定义脚本..."
+    log_with_style "INFO" "$(t '🛠️ 5. 执行自定义脚本...')"
-    nohup ql extra >$dir_log/extra.log 2>&1 &
+    nohup ql extra >"$dir_log/extra.log" 2>&1 &
   fi
 
   pm2 startup
   pm2 save
 fi
 
-log_with_style "SUCCESS" "🎉 启动成功!"
+log_with_style "SUCCESS" "$(t '🎉 启动成功!')"

shell/start.sh

@@ -4,31 +4,56 @@
 set -e
 set -x
 
+# Configuration and language helpers are not loaded during bootstrap errors.
+startup_message() {
+  local format="$1"
+  shift
+  if [[ ${QL_LANG:-zh} == en ]]; then
+    case "$format" in
+    '未找到 qinglong 模块，请先执行 npm i -g @whyour/qinglong 安装') format='Module not found. Run: npm i -g @whyour/qinglong' ;;
+    '请先手动设置 export QL_DIR=%s，环境变量，并手动添加到系统环境变量，然后再次执行命令 qinglong 启动服务') format='Set export QL_DIR=%s in your system environment, then run qinglong to start the service' ;;
+    'QL_DIR 必须为绝对路径，例如 /ql') format='QL_DIR must be an absolute path, e.g. /ql' ;;
+    '请先手动设置数据存储目录 export QL_DATA_DIR 环境变量，目录必须以斜杠开头的绝对路径，并且以 /data 结尾，例如 /ql/data 并手动添加到系统环境变量') format='Set QL_DATA_DIR to an absolute path ending in /data, e.g. /ql/data, in your system environment' ;;
+    'QL_DATA_DIR 必须为以 /data 结尾的绝对路径，例如 /ql/data，如果有历史数据，请新建 data 目录，把历史数据放到 data 目录中') format='QL_DATA_DIR must be an absolute path ending in /data, e.g. /ql/data. Move existing data into that directory' ;;
+    '暂不支持此系统部署 %s') format='Unsupported system for deployment: %s' ;;
+    esac
+  fi
+  printf -- "$format\n" "$@" >&2
+}
+
 if [[ ! $QL_DIR ]]; then
-  npm_dir=$(npm root -g)
+  npm_dir=$(npm root -g 2>/dev/null) || npm_dir=""
-  pnpm_dir=$(pnpm root -g)
+  pnpm_dir=""
-  if [[ -d "$npm_dir/@whyour/qinglong" ]]; then
+  if command -v pnpm >/dev/null 2>&1; then
+    pnpm_dir=$(pnpm root -g 2>/dev/null) || pnpm_dir=""
+  fi
+  if [[ -n "$npm_dir" && -d "$npm_dir/@whyour/qinglong" ]]; then
     QL_DIR="$npm_dir/@whyour/qinglong"
-  elif [[ -d "$pnpm_dir/@whyour/qinglong" ]]; then
+  elif [[ -n "$pnpm_dir" && -d "$pnpm_dir/@whyour/qinglong" ]]; then
     QL_DIR="$pnpm_dir/@whyour/qinglong"
   else
-    t '未找到 qinglong 模块，请先执行 npm i -g @whyour/qinglong 安装'
+    startup_message '未找到 qinglong 模块，请先执行 npm i -g @whyour/qinglong 安装'
   fi
 
   if [[ $QL_DIR ]]; then
-    t '请先手动设置 export QL_DIR=%s，环境变量，并手动添加到系统环境变量，然后再次执行命令 qinglong 启动服务' "$QL_DIR"
+    startup_message '请先手动设置 export QL_DIR=%s，环境变量，并手动添加到系统环境变量，然后再次执行命令 qinglong 启动服务' "$QL_DIR"
   fi
 
   exit 1
 fi
 
+if [[ $QL_DIR != /* ]]; then
+  startup_message 'QL_DIR 必须为绝对路径，例如 /ql'
+  exit 1
+fi
+
 if [[ ! $QL_DATA_DIR ]]; then
-  t '请先手动设置数据存储目录 export QL_DATA_DIR 环境变量，目录必须以斜杠开头的绝对路径，并且以 /data 结尾，例如 /ql/data 并手动添加到系统环境变量'
+  startup_message '请先手动设置数据存储目录 export QL_DATA_DIR 环境变量，目录必须以斜杠开头的绝对路径，并且以 /data 结尾，例如 /ql/data 并手动添加到系统环境变量'
   exit 1
 fi
 
-if [[ $QL_DATA_DIR != */data ]]; then
+if [[ $QL_DATA_DIR != /*/data ]]; then
-  t 'QL_DATA_DIR 必须以 /data 结尾，例如 /ql/data，如果有历史数据，请新建 data 目录，把历史数据放到 data 目录中'
+  startup_message 'QL_DATA_DIR 必须为以 /data 结尾的绝对路径，例如 /ql/data，如果有历史数据，请新建 data 目录，把历史数据放到 data 目录中'
   exit 1
 fi
 
@@ -38,7 +63,11 @@ if [[ $command != "reload" ]]; then
   # 安装依赖
   os_name="${QL_OS_TYPE:-}"
   if [ -z "$os_name" ]; then
+    if [[ -r /etc/os-release ]]; then
       os_name=$(source /etc/os-release && echo "$ID")
+    else
+      os_name=$(uname -s)
+    fi
   fi
 
   # 非 root 用户使用 sudo
@@ -69,7 +98,7 @@ if [[ $command != "reload" ]]; then
       $SUDO apt-get install -y git curl wget tzdata perl openssl jq nginx procps netcat-openbsd openssh-client
       ;;
     *)
-      t '暂不支持此系统部署 %s' "$os_name"
+      startup_message '暂不支持此系统部署 %s' "$os_name"
       exit 1
       ;;
   esac

shell/task-timeout.sh

@@ -36,19 +36,31 @@ run_task_command() {
     ) &
     timeout_watcher=$!
     set +m
-    trap 'kill -KILL -- "-$timeout_watcher" 2>/dev/null || :
+    finish_task_timeout() {
+      local code="$1"
+      trap - EXIT
+      {
+        # Bash can report a killed job between any two cleanup commands.
+        # Keep redirection active until the watchdog is fully reaped.
+        kill -KILL -- "-$timeout_watcher" || :
+        wait "$timeout_watcher" || :
+      } 2>/dev/null
       if kill -TERM -- "-$timeout_worker" 2>/dev/null; then sleep 0.1; fi
       kill -KILL -- "-$timeout_worker" 2>/dev/null || :
       wait "$timeout_worker" 2>/dev/null || :
-      wait "$timeout_watcher" 2>/dev/null || :
+      rm -rf -- "$timeout_dir"
-      rm -rf -- "$timeout_dir"' EXIT
+      exit "$code"
-    trap 'exit 130' INT
+    }
-    trap 'exit 143' TERM
+    # Older Bash can omit a subshell's EXIT trap in sourced pipelines. Call
-    trap 'exit 129' HUP
+    # cleanup explicitly on completion/signals, retaining EXIT as a fallback.
-    trap 'exit 131' QUIT
+    trap 'finish_task_timeout "$?"' EXIT
+    trap 'finish_task_timeout 130' INT
+    trap 'finish_task_timeout 143' TERM
+    trap 'finish_task_timeout 129' HUP
+    trap 'finish_task_timeout 131' QUIT
     # Do not clean up a timer whose process group has not initialized yet.
     while [[ ! -f "$timeout_dir/ready" ]]; do
-      kill -0 "$timeout_watcher" 2>/dev/null || exit 125
+      kill -0 "$timeout_watcher" 2>/dev/null || finish_task_timeout 125
       sleep 0.001
     done
     wait "$timeout_worker"
@@ -56,8 +68,8 @@ run_task_command() {
     if [[ -f "$timeout_dir/expired" ]]; then
       # Let the timer finish escalation even if the task leader exited first.
       wait "$timeout_watcher" 2>/dev/null || :
-      exit 124
+      finish_task_timeout 124
     fi
-    exit "$timeout_code"
+    finish_task_timeout "$timeout_code"
   )
 }

shell/task.sh

@@ -1,9 +1,9 @@
 #!/usr/bin/env bash
 
 dir_shell=$QL_DIR/shell
-. $dir_shell/share.sh
+. "$dir_shell/share.sh"
-. $dir_shell/api.sh
+. "$dir_shell/api.sh"
-. $dir_shell/task-timeout.sh
+. "$dir_shell/task-timeout.sh"
 
 trap 'single_hanle SIGINT'  INT
 trap 'single_hanle SIGTERM' TERM
@@ -48,7 +48,7 @@ handle_log_path() {
   fi
 
   if [[ -z ${ID:=} ]]; then
-    ID=$(cat $list_crontab_user | grep -E "$cmd_task.* $file_param" | perl -pe "s|.*ID=(.*) $cmd_task.* $file_param\.*|\1|" | head -1 | awk -F " " '{print $1}')
+    ID=$(cat "$list_crontab_user" | grep -E "$cmd_task.* $file_param" | perl -pe "s|.*ID=(.*) $cmd_task.* $file_param\.*|\1|" | head -1 | awk -F " " '{print $1}')
   fi
   local suffix=""
   if [[ ! -z $ID ]]; then
@@ -89,10 +89,10 @@ handle_log_path() {
     log_path="$real_log_path"
   fi
 
-  cmd="2>&1 | tee -a $dir_log/$log_path"
+  printf -v cmd '2>&1 | tee -a %q' "$dir_log/$log_path"
   make_dir "$dir_log/$log_dir"
   if [[ "${no_tee:=}" == "true" ]]; then
-    cmd=">> $dir_log/$log_path 2>&1"
+    printf -v cmd '>> %q 2>&1' "$dir_log/$log_path"
   fi
 
   if [[ "${real_time:=}" == "true" ]]; then
@@ -162,5 +162,5 @@ define_program "${task_shell_params[@]}"
 handle_log_path "${task_shell_params[@]}"
 init_begin_time
 
-eval . $dir_shell/otask.sh "$cmd"
+eval '. "$dir_shell/otask.sh"' "$cmd"
 exit 0

shell/update.sh

@@ -1,10 +1,10 @@
 #!/usr/bin/env bash
 
 dir_shell=$QL_DIR/shell
-. $dir_shell/share.sh
+. "$dir_shell/share.sh"
-. $dir_shell/api.sh
+. "$dir_shell/api.sh"
 load_ql_envs
-. $dir_shell/env.sh
+. "$dir_shell/env.sh"
 
 send_mark=$dir_shell/send_mark
 
@@ -31,7 +31,7 @@ diff_cron() {
 ## 输出是否有新的或失效的定时任务，$1：新的或失效的任务清单文件路径，$2：新/失效
 output_list_add_drop() {
   local list=$1
-  local type=$2
+  local type=$(t "$2")
   if [[ -s $list ]]; then
     t '检测到有%s的定时任务:' "$type"
     cat $list
@@ -67,7 +67,7 @@ del_cron() {
   done
   if [[ $ids ]]; then
     result=$(del_cron_api "$ids")
-    notify_api "$path 删除任务${result}" "$detail"
+    notify_api "$(t '%s 删除任务%s' "$path" "$result")" "$detail"
   fi
 }
 
@@ -110,7 +110,7 @@ add_cron() {
       fi
     fi
   done
-  notify_api "$path 新增任务" "$detail"
+  notify_api "$(t '%s 新增任务' "$path")" "$detail"
 }
 
 ## 更新仓库
@@ -165,17 +165,20 @@ update_raw() {
   t '开始下载：%s 保存路径：%s\n' "${raw_url}" "$dir_raw/${raw_file_name}"
 
   set_proxy "$proxy"
-  wget -q --no-check-certificate -O "$dir_raw/${raw_file_name}.new" ${raw_url}
+  if wget -q --no-check-certificate -O "$dir_raw/${raw_file_name}.new" "$raw_url"; then
+    exit_status=0
+  else
     exit_status=$?
+  fi
   unset_proxy
 
-  if [[ $? -eq 0 ]]; then
+  if [[ $exit_status -eq 0 ]]; then
-    mv "$dir_raw/${raw_file_name}.new" "$dir_raw/${raw_file_name}"
+    mv "$dir_raw/${raw_file_name}.new" "$dir_raw/${raw_file_name}" || return $?
     t '下载 %s 成功...\n' "${raw_file_name}"
-    cd $dir_raw
+    cd "$dir_raw" || return $?
     local filename="raw_${raw_file_name}"
-    local cron_id=$(cat $list_crontab_user | grep -E "$cmd_task.* $filename" | perl -pe "s|.*ID=(.*) $cmd_task.* $filename\.*|\1|" | head -1 | awk -F " " '{print $1}')
+    local cron_id=$(cat "$list_crontab_user" | grep -E "$cmd_task.* $filename" | perl -pe "s|.*ID=(.*) $cmd_task.* $filename\.*|\1|" | head -1 | awk -F " " '{print $1}')
-    cp -f $raw_file_name $dir_scripts/${filename}
+    cp -f "$raw_file_name" "$dir_scripts/${filename}" || return $?
     if [[ -z $cron_id ]] && [[ ${autoAddCron} == true ]]; then
       cron_line=$(
         perl -ne "{
@@ -196,12 +199,13 @@ update_raw() {
       cron_line=${cron_line//$'\r'/}
       result=$(add_cron_api "$cron_line" "${cmd_task} ${filename}" "$cron_name" "$SUB_ID")
       echo -e "$result\n"
-      notify_api "新增任务通知" "\n$result"
+      notify_api "$(t '新增任务通知')" "\n$result"
       # update_cron_api "$cron_line:$cmd_task $filename:$cron_name:$cron_id"
     fi
   else
     t '下载 %s 失败，保留之前正常下载的版本...\n' "${raw_file_name}"
     [[ -f "$dir_raw/${raw_file_name}.new" ]] && rm -f "$dir_raw/${raw_file_name}.new"
+    return "$exit_status"
   fi
 
 }
@@ -209,7 +213,7 @@ update_raw() {
 ## 调用用户自定义的extra.sh
 run_extra_shell() {
   if [[ -f $file_extra_shell ]]; then
-    . $file_extra_shell
+    . "$file_extra_shell"
   else
     t '%s文件不存在，跳过执行...\n' "$file_extra_shell"
   fi
@@ -266,24 +270,25 @@ show_service_logs() {
   # Winston writes the active runtime log by date. Follow the filename so
   # size-based rotations are handled without involving the PM2 log files.
   local current_system_log="$system_log_dir/$(date +%F).log"
-  tail -n 0 --retry -F "$current_system_log"
+  # GNU and BSD tail both support -F; --retry is GNU-only and implied by -F.
+  tail -n 0 -F "$current_system_log"
 }
 
 ## 脚本用法
 usage() {
-  t "$cmd_update 命令使用方法："
+  t '%s 命令使用方法：' "$cmd_update"
-  echo -e "1.  $cmd_update update                                                                  # 更新并重启青龙"
+  echo -e "1.  $cmd_update update                                                                  # $(t '更新并重启青龙')"
-  echo -e "2.  $cmd_update extra                                                                   # 运行自定义脚本"
+  echo -e "2.  $cmd_update extra                                                                   # $(t '运行自定义脚本')"
-  echo -e "3.  $cmd_update raw <fileurl>                                                           # 更新单个脚本文件"
+  echo -e "3.  $cmd_update raw <fileurl>                                                           # $(t '更新单个脚本文件')"
-  echo -e "4.  $cmd_update repo <repourl> <path> <blacklist> <dependence> <branch> <extensions>    # 更新单个仓库的脚本"
+  echo -e "4.  $cmd_update repo <repourl> <path> <blacklist> <dependence> <branch> <extensions>    # $(t '更新单个仓库的脚本')"
-  echo -e "5.  $cmd_update rmlog <days>                                                            # 删除旧日志"
+  echo -e "5.  $cmd_update rmlog <days>                                                            # $(t '删除旧日志')"
-  echo -e "6.  $cmd_update bot                                                                     # 启动tg-bot"
+  echo -e "6.  $cmd_update bot                                                                     # $(t '启动tg-bot')"
-  echo -e "7.  $cmd_update check                                                                   # 检测青龙环境并修复"
+  echo -e "7.  $cmd_update check                                                                   # $(t '检测青龙环境并修复')"
-  echo -e "8.  $cmd_update log [--lines <n>] [--nostream]                                         # 查看青龙运行日志"
+  echo -e "8.  $cmd_update log [--lines <n>] [--nostream]                                         # $(t '查看青龙运行日志')"
-  echo -e "9.  $cmd_update resetlet                                                                # 重置登录错误次数"
+  echo -e "9.  $cmd_update resetlet                                                                # $(t '重置登录错误次数')"
-  echo -e "10. $cmd_update resettfa                                                                # 禁用两步登录"
+  echo -e "10. $cmd_update resettfa                                                                # $(t '禁用两步登录')"
-  echo -e "11. $cmd_update resetpwd                                                                # 修改登录密码"
+  echo -e "11. $cmd_update resetpwd                                                                # $(t '修改登录密码')"
-  echo -e "12. $cmd_update resetname                                                               # 修改登录用户名"
+  echo -e "12. $cmd_update resetname                                                               # $(t '修改登录用户名')"
 }
 
 reload_qinglong() {
@@ -484,9 +489,9 @@ main() {
   local log_path="${log_dir}/${log_time}.log"
   local file_path="$dir_log/$log_path"
 
-  cmd="2>&1 | tee -a $file_path"
+  printf -v cmd '2>&1 | tee -a %q' "$file_path"
   if [[ "$no_tee" == "true" ]]; then
-    cmd=">> $file_path 2>&1"
+    printf -v cmd '>> %q 2>&1' "$file_path"
   fi
   if [[ "$real_time" == "true" ]]; then
     cmd=""
@@ -499,7 +504,9 @@ main() {
   local begin_time=$(format_time "$time_format" "$time")
 
   if [[ "$p1" != "repo" ]] && [[ "$p1" != "raw" ]]; then
-    eval echo -e "\#\# 开始执行... $begin_time\\\n" $cmd
+    local start_message
+    printf -v start_message '%q' "$(t '## 开始执行... %s\n' "$begin_time")"
+    eval "printf '%s\n' $start_message $cmd"
   fi
 
   [[ $ID ]] && update_cron "\"$ID\"" "0" "$$" "$log_path" "$begin_timestamp"
@@ -532,19 +539,20 @@ main() {
     get_uniq_path "$p2"
     if [[ -n $p2 ]]; then
       update_raw "$p2" "$p3" "$p4" "$p5"
+      command_status=$?
     else
       t '命令输入错误...\n'
       eval usage $cmd
     fi
     ;;
   rmlog)
-    eval . $dir_shell/rmlog.sh "$p2" $cmd
+    eval '. "$dir_shell/rmlog.sh" "$p2"' "$cmd"
     ;;
   bot)
-    eval . $dir_shell/bot.sh $cmd
+    eval '. "$dir_shell/bot.sh"' "$cmd"
     ;;
   check)
-    eval . $dir_shell/check.sh $cmd
+    eval '. "$dir_shell/check.sh"' "$cmd"
     ;;
   resetlet)
     eval update_auth_config "\\\"retries\\\":0" "重置登录错误次数" $cmd
@@ -571,7 +579,9 @@ main() {
   [[ $ID ]] && update_cron "\"$ID\"" "1" "$$" "$log_path" "$begin_timestamp" "$diff_time"
 
   if [[ "$p1" != "repo" ]] && [[ "$p1" != "raw" ]]; then
-    eval echo -e "\\\n\#\# 执行结束... $end_time  耗时 $diff_time 秒　　　　　" $cmd
+    local end_message
+    printf -v end_message '%q' "$(t '\n## 执行结束... %s  耗时 %s 秒' "$end_time" "$diff_time")　　　　　"
+    eval "printf '%s\n' $end_message $cmd"
   fi
   return "$command_status"
 }

shell/upgrade.cjs

@@ -3,6 +3,6 @@ const upgrade = require('../cli/src/internal/maintenance/upgradeArtifacts.cjs');
 module.exports = upgrade;
 if (require.main === module)
   upgrade.main().catch((error) => {
-    console.error(`更新失败: ${error.message}`);
+    console.error(upgrade.upgradeMessage('更新失败: %s', process.env, error.message));
     process.exitCode = 1;
   });

src/components/UpgradeNotice.tsx

@@ -0,0 +1,60 @@
+import { CloudDownloadOutlined } from '@ant-design/icons';
+import { Modal, Tooltip } from 'antd';
+import { useState } from 'react';
+import intl from 'react-intl-universal';
+import useUpgrade, { activeStatuses, phaseLabels } from '@/hooks/useUpgrade';
+import CheckUpdate from '@/pages/setting/checkUpdate';
+
+export default function UpgradeNotice({
+  collapsed,
+  systemInfo,
+}: {
+  collapsed: boolean;
+  systemInfo: any;
+}) {
+  const { job, connected } = useUpgrade();
+  const [open, setOpen] = useState(false);
+  const showNotice =
+    activeStatuses.includes(job.status) ||
+    job.status === 'ready' ||
+    job.status === 'failed';
+  if (!showNotice && !open) return null;
+  const text = !connected
+    ? intl.get('连接已断开，正在重新连接')
+    : job.status === 'failed'
+    ? intl.get('更新失败')
+    : intl.get(phaseLabels[job.phase || ''] || '检查更新');
+  const label =
+    job.phase === 'downloading' && job.percent != null
+      ? `${text} ${job.percent}%`
+      : text;
+  return (
+    <>
+      {showNotice && (
+        <Tooltip title={label} placement="right">
+          <button
+            type="button"
+            className={`upgrade-notice${
+              collapsed ? ' upgrade-notice-collapsed' : ''
+            }`}
+            onClick={() => setOpen(true)}
+            aria-label={label}
+          >
+            <CloudDownloadOutlined />
+            {!collapsed && <span>{label}</span>}
+          </button>
+        </Tooltip>
+      )}
+      <Modal
+        open={open}
+        title={intl.get('更新')}
+        footer={null}
+        onCancel={() => setOpen(false)}
+        width={650}
+        destroyOnClose
+      >
+        <CheckUpdate systemInfo={systemInfo} />
+      </Modal>
+    </>
+  );
+}

src/hooks/useUpgrade.ts

@@ -0,0 +1,138 @@
+import config from '@/utils/config';
+import { notification } from 'antd';
+import intl from 'react-intl-universal';
+import { useSyncExternalStore } from 'react';
+
+export interface UpgradeJob {
+  id?: string;
+  action?: 'download' | 'apply';
+  status: string;
+  phase?: string;
+  artifact?: string;
+  downloadedBytes?: number;
+  totalBytes?: number | null;
+  percent?: number | null;
+  version?: string;
+  error?: string;
+  log?: string;
+}
+
+export const activeStatuses = ['starting', 'running', 'restarting'];
+export const reloadKey = 'qinglong-upgrade-reload';
+export const completionKey = 'qinglong-upgrade-completed';
+export const phaseLabels: Record<string, string> = {
+  downloading: '下载更新中...',
+  extracting: '正在解压更新包',
+  verifying: '正在校验更新包',
+  dependencies: '正在准备依赖',
+  ready: '更新已就绪',
+  restarting: '正在重启并更新',
+  completed: '更新完成',
+};
+
+// The sidebar and settings share one poller and one mutation state.
+export function createUpgradeStore() {
+  let snapshot = {
+    job: { status: 'loading' } as UpgradeJob,
+    busy: false,
+    connected: true,
+  };
+  const listeners = new Set<() => void>();
+  let revision = 0;
+  let timer: ReturnType<typeof setTimeout> | undefined;
+  let controller: AbortController | undefined;
+  const publish = (patch: Partial<typeof snapshot>) => {
+    snapshot = { ...snapshot, ...patch };
+    listeners.forEach((listener) => listener());
+  };
+  const poll = async () => {
+    const current = revision;
+    const attempt = new AbortController();
+    controller = attempt;
+    const timeout = setTimeout(() => attempt.abort(), 5000);
+    try {
+      const token = localStorage.getItem(config.authKey);
+      const response = await fetch(`${config.apiPrefix}system/update-status`, {
+        cache: 'no-store',
+        headers: token ? { Authorization: `Bearer ${token}` } : {},
+        signal: attempt.signal,
+      });
+      if (!response.ok) throw new Error('Upgrade status unavailable');
+      const result = await response.json();
+      if (result.code !== 200 || !result.data)
+        throw new Error('Invalid upgrade status');
+      if (!listeners.size || current !== revision || attempt.signal.aborted)
+        return;
+      publish({ job: result.data, connected: true });
+      if (
+        result.data.status === 'completed' &&
+        result.data.id === sessionStorage.getItem(reloadKey)
+      ) {
+        sessionStorage.setItem(completionKey, result.data.id);
+        sessionStorage.removeItem(reloadKey);
+        window.location.reload();
+        return;
+      }
+      if (
+        result.data.status === 'completed' &&
+        result.data.id === sessionStorage.getItem(completionKey)
+      ) {
+        sessionStorage.removeItem(completionKey);
+        notification.success({
+          message: intl.get('升级成功'),
+          description: intl.get('已重新启动并运行新版本，无需再次重启。'),
+          duration: 8,
+        });
+      }
+    } catch {
+      if (listeners.size && current === revision && controller === attempt)
+        publish({ connected: false });
+    } finally {
+      clearTimeout(timeout);
+      if (listeners.size && controller === attempt)
+        timer = setTimeout(
+          poll,
+          !snapshot.connected || activeStatuses.includes(snapshot.job.status)
+            ? 1000
+            : 15000,
+        );
+    }
+  };
+  return {
+    getSnapshot: () => snapshot,
+    subscribe(listener: () => void) {
+      listeners.add(listener);
+      if (listeners.size === 1) poll();
+      return () => {
+        listeners.delete(listener);
+        if (!listeners.size) {
+          clearTimeout(timer);
+          controller?.abort();
+          revision++;
+        }
+      };
+    },
+    beginMutation() {
+      if (snapshot.busy) return false;
+      revision++;
+      publish({ busy: true });
+      return true;
+    },
+    finishMutation() {
+      revision++;
+      controller?.abort();
+      controller = undefined;
+      clearTimeout(timer);
+      publish({ busy: false });
+      if (listeners.size) timer = setTimeout(poll, 1000);
+    },
+    setJob(job: UpgradeJob) {
+      publish({ job });
+    },
+  };
+}
+
+export const upgradeStore = createUpgradeStore();
+export default function useUpgrade() {
+  return useSyncExternalStore(upgradeStore.subscribe, upgradeStore.getSnapshot);
+}

src/layouts/index.less

@@ -354,20 +354,50 @@ select:-webkit-autofill:focus {
 
 .side-menu-container {
   display: flex;
+  width: 100%;
+  min-width: 0;
+  gap: 8px;
   justify-content: space-between;
   align-items: center;
   color: @text-color;
 
-  .side-menu-collapse-button:hover {
+  .side-menu-collapse-button {
+    flex-shrink: 0;
+
+    &:hover {
       color: #1890ff;
     }
+  }
 
   .side-menu-user-wrapper {
-    display: flex;
+    flex: 1;
-    align-items: center;
+    overflow: hidden;
   }
 }
 
+.side-menu-user-wrapper {
+  display: flex;
+  min-width: 0;
+  max-width: 100%;
+  align-items: center;
+  gap: 5px;
+
+  .ant-avatar {
+    flex-shrink: 0;
+  }
+
+  .side-menu-username {
+    min-width: 0;
+    overflow: hidden;
+    text-overflow: ellipsis;
+    white-space: nowrap;
+  }
+}
+
+body[data-mode='phone'] .side-menu-user-wrapper {
+  max-width: 50vw;
+}
+
 .side-menu-user-drop-menu {
   position: relative;
   text-align: left;
@@ -475,11 +505,105 @@ body[data-mode='phone'] header {
 }
 
 body[data-dark='true'] {
+  .upgrade-notice {
+    background: #3a3214;
+    border-color: #6b5415;
+    color: #ffd666;
+  }
   .ant-popover-arrow-content {
     --antd-arrow-background-color: rgb(24, 26, 27);
   }
 }
 
+.upgrade-notice {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  width: calc(100% - 24px);
+  min-height: 36px;
+  padding: 7px 10px;
+  margin: 8px 12px 12px;
+  border: 1px solid #ffe58f;
+  border-radius: 6px;
+  background: #fffbe6;
+  color: #ad6800;
+  font: inherit;
+  font-size: 12px;
+  line-height: 20px;
+  text-align: left;
+  cursor: pointer;
+
+  > .anticon {
+    display: inline-flex;
+    flex: 0 0 14px;
+    align-items: center;
+    justify-content: center;
+    line-height: 1;
+  }
+
+  > span:not(.anticon) {
+    flex: 1;
+    overflow: hidden;
+    text-overflow: ellipsis;
+    white-space: nowrap;
+  }
+
+  &:focus-visible {
+    outline: 2px solid #d48806;
+    outline-offset: 2px;
+  }
+
+  &.upgrade-notice-collapsed {
+    justify-content: center;
+    padding: 7px 0;
+  }
+}
+
+.upgrade-panel {
+  display: flex;
+  flex-direction: column;
+  gap: 16px;
+  max-width: 600px;
+
+  .upgrade-status-content {
+    display: flex;
+    flex-direction: column;
+    gap: 16px;
+  }
+
+  .upgrade-progress {
+    display: flex;
+    flex-direction: column;
+    gap: 8px;
+
+    .ant-progress {
+      margin: 0;
+    }
+  }
+
+  .upgrade-progress-meta {
+    display: flex;
+    flex-wrap: wrap;
+    align-items: baseline;
+    justify-content: space-between;
+    gap: 4px 12px;
+    font-variant-numeric: tabular-nums;
+  }
+
+  .upgrade-actions {
+    display: flex;
+    flex-wrap: wrap;
+    align-items: center;
+    gap: 12px;
+  }
+
+  .upgrade-log-link {
+    height: auto;
+    padding: 0;
+    line-height: 22px;
+  }
+}
+
 .ant-tabs-content-holder {
   flex: 1;
   overflow-y: auto;

src/layouts/index.tsx

@@ -18,6 +18,9 @@ import defaultProps from './defaultProps';
 import './index.less';
 import { init } from '../utils/init';
 import WebSocketManager from '../utils/websocket';
+import { observePageLoadTiming } from '../utils/navigationTiming';
+import UpgradeNotice from '@/components/UpgradeNotice';
+import { completionKey, reloadKey, upgradeStore } from '@/hooks/useUpgrade';
 
 export interface SharedContext {
   headerStyle: React.CSSProperties;
@@ -48,10 +51,14 @@ export default function () {
   const [loading, setLoading] = useState<boolean>(true);
   const [systemInfo, setSystemInfo] = useState<TSystemInfo>();
   const [siteTitle, setSiteTitle] = useState(
-    () => localStorage.getItem('qinglong_panel_title')?.trim() || intl.get('青龙'),
+    () =>
+      localStorage.getItem('qinglong_panel_title')?.trim() || intl.get('青龙'),
   );
   const [collapsed, setCollapsed] = useState(false);
   const [initLoading, setInitLoading] = useState<boolean>(true);
+  const observeUpgrade =
+    Boolean(user.username) &&
+    !['/login', '/initialization'].includes(location.pathname);
   const {
     enable: enableDarkMode,
     disable: disableDarkMode,
@@ -160,6 +167,18 @@ export default function () {
     getHealthStatus();
   }, []);
 
+  useEffect(() => {
+    // A reload during restart may initially land on the health error page.
+    // Keep recovering the accepted job even before the sidebar can mount.
+    if (
+      observeUpgrade ||
+      sessionStorage.getItem(reloadKey) ||
+      sessionStorage.getItem(completionKey)
+    ) {
+      return upgradeStore.subscribe(() => {});
+    }
+  }, [observeUpgrade]);
+
   useEffect(() => {
     reloadSystemConfig();
   }, []);
@@ -219,19 +238,17 @@ export default function () {
   }, [user]);
 
   useEffect(() => {
-    window.onload = () => {
+    return observePageLoadTiming((durations) => {
-      const timing = performance.timing;
+      const metrics = [
-      console.log(`白屏时间: ${timing.responseStart - timing.navigationStart}`);
+        ['白屏时间', durations.responseTime],
-      console.log(
+        ['请求完毕至DOM加载', durations.domReadyTime],
-        `请求完毕至DOM加载: ${timing.domInteractive - timing.responseEnd}`,
+        ['解释DOM树耗时', durations.domParseTime],
-      );
+        ['从开始至load总耗时', durations.loadTime],
-      console.log(
+      ] as const;
-        `解释dom树耗时: ${timing.domComplete - timing.domInteractive}`,
+      for (const [label, duration] of metrics) {
-      );
+        if (duration !== undefined) console.log(intl.get(label, { duration }));
-      console.log(
+      }
-        `从开始至load总耗时: ${timing.loadEventEnd - timing.navigationStart}`,
+    });
-      );
-    };
   }, []);
 
   if (initLoading) {
@@ -321,6 +338,12 @@ export default function () {
         </>
       }
       title={false}
+      menuFooterRender={(props) => (
+        <UpgradeNotice
+          collapsed={Boolean(props?.collapsed)}
+          systemInfo={systemInfo}
+        />
+      )}
       menuItemRender={(menuItemProps: any, defaultDom: any) => {
         if (
           menuItemProps.isUrl ||
@@ -351,7 +374,9 @@ export default function () {
                   user.avatar ? `${config.apiPrefix}static/${user.avatar}` : ''
                 }
               />
-              <span style={{ marginLeft: 5 }}>{user.username}</span>
+              <span className="side-menu-username" title={user.username}>
+                {user.username}
+              </span>
             </span>
           </Dropdown>
         )
@@ -377,7 +402,9 @@ export default function () {
                       : ''
                   }
                 />
-                <span style={{ marginLeft: 5 }}>{user.username}</span>
+                <span className="side-menu-username" title={user.username}>
+                  {user.username}
+                </span>
               </span>
             </Dropdown>
           )}

src/locales/en-US.json

@@ -1,4 +1,19 @@
 {
+  "选中条数": "Selected {count} items",
+  "登录失败次数": "Failed {count} time(s)",
+  "间隔定时规则": "Every {value} {unit}",
+  "SOCK5代理，例如 IP:PORT": "SOCKS5 proxy, e.g. IP:PORT",
+  "HTTP/SOCK5代理，例如 http://127.0.0.1:1080": "HTTP/SOCKS5 proxy, e.g. http://127.0.0.1:1080",
+  "确认操作对象": "Confirm {operation} {object}",
+  "确认批量操作": "Confirm {operation} selected {object}?",
+  "检查更新失败，请检查网络后重试": "Failed to check for updates. Check your network and try again.",
+  "确认操作": "Confirm {operation}",
+  "分页总数": "{start}-{end} of {total} items",
+  "总条数": "{total} items",
+  "内网IP": "Private IP",
+  "容器更新修复命令": "1. Run on the host: docker run --rm -v /var/run/docker.sock:/var/run/docker.sock containrrr/watchtower -cR <container_name>",
+  "WxPusher(极简推送SPT-推荐)": "WxPusher (Simple Push SPT, recommended)",
+  "新版本可用，当前版本": "Version {version} is available. You are using {current}.",
   "1. 宿主机执行 docker run --rm -v\n                  /var/run/docker.sock:/var/run/docker.sock\n                  containrrr/watchtower -cR <容器名>": "1. Execute 'docker run --rm -v /var/run/docker.sock:/var/run/docker.sock containrrr/watchtower -cR <container_name>' on the host machine",
   "2. 容器内执行 ql check、ql update": "2. Execute 'ql check' and 'ql update' inside the container",
   "24小时未运行": "Idle 24h+",
@@ -323,7 +338,7 @@
   "显示": "Display",
   "智能微秘书": "Smart WeChat Assistant",
   "暂无数据": "No data",
-  "暂无日志": "No logs available",
+  "暂无日志": "No logs yet",
   "暂无脚本": "No scripts available",
   "暂无运行中任务": "No running tasks",
   "暗色": "Dark",
@@ -699,6 +714,47 @@
   "已保存，本次未记录历史版本": "Saved without a history snapshot",
   "已保存，但旧历史清理失败，请检查存储权限和空间": "Saved, but old history could not be removed. Check storage permissions and free space.",
   "保存失败": "Unable to save",
+  "通知日志": "Notification log",
+  "标题": "Title",
+  "内容": "Content",
+  "发送时间": "Sent at",
+  "推送渠道": "Channel",
+  "发送状态": "Delivery status",
+  "通知来源": "Notification source",
+  "脚本通知": "Script notification",
+  "系统通知": "System notification",
   "Python支持多种安装方式：\n1. 包名（如：requests）\n2. GitHub链接（如：git+https://github.com/user/repo.git）\n3. requirements文件路径（如：path/to/requirements.txt）\n4. pyproject.toml文件路径": "Python supports package names, Git URLs, and existing requirements.txt or pyproject.toml files under the scripts or repository directory.",
-  "支持包名、GitHub链接、requirements.txt或pyproject.toml路径": "Package name, Git URL, requirements.txt or pyproject.toml path"
+  "支持包名、GitHub链接、requirements.txt或pyproject.toml路径": "Package name, Git URL, requirements.txt or pyproject.toml path",
+  "控制台诗句": "A rain hat and cloak, a song among the hills. The moon, the breeze and I spend our idle days together.",
+  "运行环境信息": "QingLong runtime:\n\nSystem: {system}\nBrowser: {browser}\nEngine: {engine}",
+  "WebSocket错误": "WebSocket error:",
+  "白屏时间": "Time to first response: {duration} ms",
+  "请求完毕至DOM加载": "Response end to DOM interactive: {duration} ms",
+  "解释DOM树耗时": "DOM completion time: {duration} ms",
+  "从开始至load总耗时": "Total load time: {duration} ms",
+  "正在解压更新包": "Extracting update",
+  "正在校验更新包": "Verifying update",
+  "正在准备依赖": "Preparing dependencies",
+  "更新已就绪": "Update ready",
+  "正在重启并更新": "Restarting and updating",
+  "更新完成": "Update complete",
+  "更新失败": "Update failed",
+  "正在准备更新": "Preparing update",
+  "连接已断开，正在重新连接": "Connection lost. Reconnecting…",
+  "更新已就绪，重启后应用新版本": "Update ready. Restart to apply the new version.",
+  "更新在后台进行，可以继续使用面板": "The update runs in the background. You can keep using the panel.",
+  "下载构建产物": "Downloading application files",
+  "下载源码": "Downloading source files",
+  "正在获取下载大小": "Total size unavailable",
+  "查看更新日志": "View update log",
+  "重启并更新": "Restart and update",
+  "升级任务启动失败，请检查日志后重试": "Failed to start the update. Check the logs and try again.",
+  "升级任务意外中断，请重试": "The update was interrupted. Please try again.",
+  "系统将在30秒后自动刷新": "The page will refresh in 30 seconds.",
+  "运行依赖已变化，请重新下载更新。": "Installed dependencies changed. Download the update again.",
+  "暂存更新已变化，请重新下载更新。": "The staged update changed. Download the update again.",
+  "启动版本与更新包不一致": "The running build does not match the update package.",
+  "下载完成，等待重启": "Download complete, restart to update",
+  "升级成功": "Update successful",
+  "已重新启动并运行新版本，无需再次重启。": "Restarted and running the new version. No further restart is needed."
 }

src/locales/zh-CN.json

@@ -1,4 +1,19 @@
 {
+  "选中条数": "已选择 {count} 项",
+  "登录失败次数": "失败{count}次",
+  "间隔定时规则": "每{value}{unit}",
+  "SOCK5代理，例如 IP:PORT": "SOCK5代理，例如 IP:PORT",
+  "HTTP/SOCK5代理，例如 http://127.0.0.1:1080": "HTTP/SOCK5代理，例如 http://127.0.0.1:1080",
+  "确认操作对象": "确认{operation}{object}",
+  "确认批量操作": "确认{operation}选中的{object}吗",
+  "检查更新失败，请检查网络后重试": "检查更新失败，请检查网络后重试",
+  "确认操作": "确认{operation}",
+  "分页总数": "第 {start}-{end} 条/总共 {total} 条",
+  "总条数": "共 {total} 个",
+  "内网IP": "内网IP",
+  "容器更新修复命令": "1. 宿主机执行 docker run --rm -v /var/run/docker.sock:/var/run/docker.sock containrrr/watchtower -cR <容器名>",
+  "WxPusher(极简推送SPT-推荐)": "WxPusher(极简推送SPT-推荐)",
+  "新版本可用，当前版本": "新版本 {version} 可用，你使用的版本为 {current}。",
   "1. 宿主机执行 docker run --rm -v\n                  /var/run/docker.sock:/var/run/docker.sock\n                  containrrr/watchtower -cR <容器名>": "1. 宿主机执行 docker run --rm -v\n                  /var/run/docker.sock:/var/run/docker.sock\n                  containrrr/watchtower -cR <容器名>",
   "2. 容器内执行 ql check、ql update": "2. 容器内执行 ql check、ql update",
   "24小时未运行": "24小时未运行",
@@ -699,6 +714,47 @@
   "已保存，本次未记录历史版本": "已保存，本次未记录历史版本",
   "已保存，但旧历史清理失败，请检查存储权限和空间": "已保存，但旧历史清理失败，请检查存储权限和空间",
   "保存失败": "保存失败",
+  "通知日志": "通知日志",
+  "标题": "标题",
+  "内容": "内容",
+  "发送时间": "发送时间",
+  "推送渠道": "推送渠道",
+  "发送状态": "发送状态",
+  "通知来源": "通知来源",
+  "脚本通知": "脚本通知",
+  "系统通知": "系统通知",
   "Python支持多种安装方式：\n1. 包名（如：requests）\n2. GitHub链接（如：git+https://github.com/user/repo.git）\n3. requirements文件路径（如：path/to/requirements.txt）\n4. pyproject.toml文件路径": "Python支持多种安装方式：\n1. 包名（如：requests）\n2. GitHub链接（如：git+https://github.com/user/repo.git）\n3. requirements文件路径（如：path/to/requirements.txt）\n4. pyproject.toml文件路径",
-  "支持包名、GitHub链接、requirements.txt或pyproject.toml路径": "支持包名、GitHub链接、requirements.txt或pyproject.toml路径"
+  "支持包名、GitHub链接、requirements.txt或pyproject.toml路径": "支持包名、GitHub链接、requirements.txt或pyproject.toml路径",
+  "控制台诗句": "忘形雨笠烟蓑，知心牧唱樵歌。明月清风共我，闲人三个，从他今古消磨。",
+  "运行环境信息": "青龙运行环境:\n\n系统：{system}\n浏览器：{browser}\n内核：{engine}",
+  "WebSocket错误": "WebSocket错误:",
+  "白屏时间": "白屏时间: {duration} ms",
+  "请求完毕至DOM加载": "请求完毕至DOM加载: {duration} ms",
+  "解释DOM树耗时": "解释 DOM 树耗时: {duration} ms",
+  "从开始至load总耗时": "从开始至 load 总耗时: {duration} ms",
+  "正在解压更新包": "正在解压更新包",
+  "正在校验更新包": "正在校验更新包",
+  "正在准备依赖": "正在准备依赖",
+  "更新已就绪": "更新已就绪",
+  "正在重启并更新": "正在重启并更新",
+  "更新完成": "更新完成",
+  "更新失败": "更新失败",
+  "正在准备更新": "正在准备更新",
+  "连接已断开，正在重新连接": "连接已断开，正在重新连接",
+  "更新已就绪，重启后应用新版本": "更新已就绪，重启后应用新版本",
+  "更新在后台进行，可以继续使用面板": "更新在后台进行，可以继续使用面板",
+  "下载构建产物": "下载构建产物",
+  "下载源码": "下载源码",
+  "正在获取下载大小": "正在获取下载大小",
+  "查看更新日志": "查看更新日志",
+  "重启并更新": "重启并更新",
+  "升级任务启动失败，请检查日志后重试": "升级任务启动失败，请检查日志后重试",
+  "升级任务意外中断，请重试": "升级任务意外中断，请重试",
+  "系统将在30秒后自动刷新": "系统将在30秒后自动刷新",
+  "运行依赖已变化，请重新下载更新。": "运行依赖已变化，请重新下载更新。",
+  "暂存更新已变化，请重新下载更新。": "暂存更新已变化，请重新下载更新。",
+  "启动版本与更新包不一致": "启动版本与更新包不一致",
+  "下载完成，等待重启": "下载完成，等待重启",
+  "升级成功": "升级成功",
+  "已重新启动并运行新版本，无需再次重启。": "已重新启动并运行新版本，无需再次重启。"
 }

src/pages/crontab/detail.tsx

@@ -364,13 +364,10 @@ const CronDetailModal = ({
 
   const enabledOrDisabledCron = () => {
     Modal.confirm({
-      title: `确认${currentCron.isDisabled === 1 ? intl.get('启用') : intl.get('禁用')
+      title: intl.get('确认操作', { operation: currentCron.isDisabled === 1 ? intl.get('启用') : intl.get('禁用') }),
-        }`,
       content: (
         <>
-          {intl.get('确认')}
+          {intl.get('确认操作对象', { operation: currentCron.isDisabled === 1 ? intl.get('启用') : intl.get('禁用'), object: intl.get('定时任务') })}{' '}
-          {currentCron.isDisabled === 1 ? intl.get('启用') : intl.get('禁用')}
-          {intl.get('定时任务')}{' '}
           <Text style={{ wordBreak: 'break-all' }} type="warning">
             {currentCron.name}
           </Text>{' '}
@@ -398,13 +395,10 @@ const CronDetailModal = ({
 
   const pinOrUnPinCron = () => {
     Modal.confirm({
-      title: `确认${currentCron.isPinned === 1 ? intl.get('取消置顶') : intl.get('置顶')
+      title: intl.get('确认操作', { operation: currentCron.isPinned === 1 ? intl.get('取消置顶') : intl.get('置顶') }),
-        }`,
       content: (
         <>
-          {intl.get('确认')}
+          {intl.get('确认操作对象', { operation: currentCron.isPinned === 1 ? intl.get('取消置顶') : intl.get('置顶'), object: intl.get('定时任务') })}{' '}
-          {currentCron.isPinned === 1 ? intl.get('取消置顶') : intl.get('置顶')}
-          {intl.get('定时任务')}{' '}
           <Text style={{ wordBreak: 'break-all' }} type="warning">
             {currentCron.name}
           </Text>{' '}

src/pages/crontab/index.tsx

@@ -544,13 +544,13 @@ const Crontab = () => {
 
   const enabledOrDisabledCron = (record: any, index: number) => {
     Modal.confirm({
-      title: `确认${record.isDisabled === 1 ? intl.get('启用') : intl.get('禁用')
+      title: intl.get('确认操作', {
-        }`,
+        operation:
+          record.isDisabled === 1 ? intl.get('启用') : intl.get('禁用'),
+      }),
       content: (
         <>
-          {intl.get('确认')}
+          {intl.get('确认操作对象', { operation: record.isDisabled === 1 ? intl.get('启用') : intl.get('禁用'), object: intl.get('定时任务') })}{' '}
-          {record.isDisabled === 1 ? intl.get('启用') : intl.get('禁用')}
-          {intl.get('定时任务')}{' '}
           <Text style={{ wordBreak: 'break-all' }} type="warning">
             {record.name}
           </Text>{' '}
@@ -584,13 +584,13 @@ const Crontab = () => {
 
   const pinOrUnPinCron = (record: any, index: number) => {
     Modal.confirm({
-      title: `确认${record.isPinned === 1 ? intl.get('取消置顶') : intl.get('置顶')
+      title: intl.get('确认操作', {
-        }`,
+        operation:
+          record.isPinned === 1 ? intl.get('取消置顶') : intl.get('置顶'),
+      }),
       content: (
         <>
-          {intl.get('确认')}
+          {intl.get('确认操作对象', { operation: record.isPinned === 1 ? intl.get('取消置顶') : intl.get('置顶'), object: intl.get('定时任务') })}{' '}
-          {record.isPinned === 1 ? intl.get('取消置顶') : intl.get('置顶')}
-          {intl.get('定时任务')}{' '}
           <Text style={{ wordBreak: 'break-all' }} type="warning">
             {record.name}
           </Text>{' '}
@@ -745,12 +745,12 @@ const Crontab = () => {
 
   const operateCrons = (operationStatus: number) => {
     Modal.confirm({
-      title: `确认${OperationName[operationStatus]}`,
+      title: intl.get('确认操作', {
+        operation: intl.get(OperationName[operationStatus]),
+      }),
       content: (
         <>
-          {intl.get('确认')}
+          {intl.get('确认批量操作', { operation: intl.get(OperationName[operationStatus]), object: intl.get('定时任务') })}
-          {OperationName[operationStatus]}
-          {intl.get('选中的定时任务吗')}
         </>
       ),
       onOk() {
@@ -1035,9 +1035,7 @@ const Crontab = () => {
               {intl.get('批量修改标签')}
             </Button>
             <span style={{ marginLeft: 8 }}>
-              {intl.get('已选择')}
+              {intl.get('选中条数', { count: selectedRowIds.length })}
-              <a>{selectedRowIds?.length}</a>
-              {intl.get('项')}
             </span>
           </div>
         )}
@@ -1051,7 +1049,7 @@ const Crontab = () => {
             simple: isPhone,
             total,
             showTotal: (total: number, range: number[]) =>
-              `第 ${range[0]}-${range[1]} 条/总共 ${total} 条`,
+              intl.get('分页总数', { start: range[0], end: range[1], total }),
             pageSizeOptions: [10, 20, 50, 100, 200, 500, total || 10000].sort(
               (a, b) => a - b,
             ),

src/pages/dashboard/index.tsx

@@ -167,7 +167,7 @@ const Dashboard = () => {
   const runtimePagination = {
     pageSize: 5,
     showSizeChanger: false,
-    showTotal: (total: number) => `共 ${total} 个`,
+    showTotal: (total: number) => intl.get('总条数', { total }),
   };
 
   if (loading) return <Spin size="large" style={{ display: 'block', marginTop: 100 }} />;
@@ -348,7 +348,7 @@ const Dashboard = () => {
                     data={{
                       target: Number(system.memUsagePercent),
                       total: 100,
-                      name: '内存使用率',
+                      name: intl.get('内存使用'),
                     }}
                     style={{
                       textY: '70%',

src/pages/dependence/index.tsx

@@ -536,9 +536,7 @@ const Dependence = () => {
             {intl.get('批量强制删除')}
           </Button>
           <span style={{ marginLeft: 8 }}>
-            {intl.get('已选择')}
+            {intl.get('选中条数', { count: selectedRowIds.length })}
-            <a>{selectedRowIds?.length}</a>
-            {intl.get('项')}
           </span>
         </div>
       )}

src/pages/env/index.tsx

@@ -279,16 +279,13 @@ const Env = () => {
 
   const enabledOrDisabledEnv = (record: any, index: number) => {
     Modal.confirm({
-      title: `确认${
+      title: intl.get('确认操作', {
-        record.status === Status.已禁用 ? intl.get('启用') : intl.get('禁用')
+        operation:
-      }`,
+          record.status === Status.已禁用 ? intl.get('启用') : intl.get('禁用'),
+      }),
       content: (
         <>
-          {intl.get('确认')}
+          {intl.get('确认操作对象', { operation: record.status === Status.已禁用 ? intl.get('启用') : intl.get('禁用'), object: 'Env' })}{' '}
-          {record.status === Status.已禁用
-            ? intl.get('启用')
-            : intl.get('禁用')}
-          Env{' '}
           <Paragraph
             style={{ wordBreak: 'break-all', display: 'inline' }}
             ellipsis={{ rows: 6, expandable: true }}
@@ -343,14 +340,13 @@ const Env = () => {
 
   const pinOrUnpinEnv = (record: any, index: number) => {
     Modal.confirm({
-      title: `确认${
+      title: intl.get('确认操作', {
-        record.isPinned === 1 ? intl.get('取消置顶') : intl.get('置顶')
+        operation:
-      }`,
+          record.isPinned === 1 ? intl.get('取消置顶') : intl.get('置顶'),
+      }),
       content: (
         <>
-          {intl.get('确认')}
+          {intl.get('确认操作对象', { operation: record.isPinned === 1 ? intl.get('取消置顶') : intl.get('置顶'), object: 'Env' })}{' '}
-          {record.isPinned === 1 ? intl.get('取消置顶') : intl.get('置顶')}
-          Env{' '}
           <Paragraph
             style={{ wordBreak: 'break-all', display: 'inline' }}
             ellipsis={{ rows: 6, expandable: true }}
@@ -543,12 +539,12 @@ const Env = () => {
 
   const operateEnvs = (operationStatus: number) => {
     Modal.confirm({
-      title: `确认${OperationName[operationStatus]}`,
+      title: intl.get('确认操作', {
+        operation: intl.get(OperationName[operationStatus]),
+      }),
       content: (
         <>
-          {intl.get('确认')}
+          {intl.get('确认批量操作', { operation: intl.get(OperationName[operationStatus]), object: intl.get('环境变量') })}
-          {OperationName[operationStatus]}
-          {intl.get('选中的变量吗')}
         </>
       ),
       onOk() {
@@ -603,7 +599,9 @@ const Env = () => {
         );
 
         if (code === 200) {
-          message.success(`${intl.get('成功上传')}${data.length}${intl.get('个环境变量')}`);
+          message.success(
+            `${intl.get('成功上传')}${data.length}${intl.get('个环境变量')}`,
+          );
           getEnvs();
         }
         setImportLoading(false);
@@ -708,9 +706,7 @@ const Env = () => {
               {intl.get('批量取消置顶')}
             </Button>
             <span style={{ marginLeft: 8 }}>
-              {intl.get('已选择')}
+              {intl.get('选中条数', { count: selectedRowIds.length })}
-              <a>{selectedRowIds?.length}</a>
-              {intl.get('项')}
             </span>
           </div>
         )}

src/pages/error/index.tsx

@@ -79,16 +79,10 @@ const Error = () => {
             description={
               <Typography.Text type="danger">
                 <div>{intl.get('请先按如下方式修复：')}</div>
-                <div>
+                <div>{intl.get('容器更新修复命令')}</div>
-                  1. 宿主机执行 docker run --rm -v
-                  /var/run/docker.sock:/var/run/docker.sock
-                  containrrr/watchtower -cR &lt;容器名&gt;
-                </div>
                 <div>{intl.get('2. 容器内执行 ql check、ql update')}</div>
                 <div>
-                  {intl.get(
+                  {intl.get('3. 如果无法解决，容器内执行 ql log，拷贝执行结果')}
-                    '3. 如果无法解决，容器内执行 ql log，拷贝执行结果',
-                  )}
                   <Typography.Link href="https://github.com/whyour/qinglong/issues/new?assignees=&labels=&template=bug_report.yml">
                     {intl.get('提交 issue')}
                   </Typography.Link>

src/pages/initialization/index.tsx

@@ -129,7 +129,7 @@ const Initialization = () => {
             >
               <Input.TextArea
                 autoSize={{ minRows: 1, maxRows: 5 }}
-                placeholder={`请输入${x.label}`}
+                placeholder={`${intl.get('请输入')} ${x.label}`}
               />
             </Form.Item>
           ))}

src/pages/login/index.tsx

@@ -91,7 +91,7 @@ const Login = () => {
             </div>
             <div>
               {intl.get('上次登录地点：')}
-              {lastaddr || '-'}
+              {lastaddr === '内网IP' ? intl.get('内网IP') : lastaddr || '-'}
             </div>
             <div>
               {intl.get('上次登录IP：')}
@@ -103,7 +103,7 @@ const Login = () => {
             </div>
             <div>
               {intl.get('上次登录状态：')}
-              {retries > 0 ? `失败${retries}次` : intl.get('成功')}
+              {retries > 0 ? intl.get('登录失败次数', { count: retries }) : intl.get('成功')}
             </div>
           </>
         ),

src/pages/script/index.tsx

@@ -4,6 +4,7 @@ import { SharedContext } from '@/layouts';
 import { depthFirstSearch, findNode, getEditorMode } from '@/utils';
 import config from '@/utils/config';
 import { request } from '@/utils/http';
+import { getCodeMirrorExtensions } from '@/utils/codemirror/language';
 import { canPreviewInMonaco } from '@/utils/monaco';
 import {
   CloudDownloadOutlined,
@@ -15,7 +16,6 @@ import {
 } from '@ant-design/icons';
 import { PageContainer } from '@ant-design/pro-layout';
 import Editor from '@monaco-editor/react';
-import { langs } from '@uiw/codemirror-extensions-langs';
 import CodeMirror from '@uiw/react-codemirror';
 import { history, useOutletContext } from '@umijs/max';
 import {
@@ -747,9 +747,7 @@ const Script = () => {
         {isPhone && (
           <CodeMirror
             value={value}
-            extensions={
+            extensions={getCodeMirrorExtensions(mode)}
-              mode ? [langs[mode as keyof typeof langs]()] : undefined
-            }
             theme={theme.includes('dark') ? 'dark' : 'light'}
             readOnly={!isEditing || saving}
             onChange={(value) => {

src/pages/setting/checkUpdate.tsx

@@ -1,237 +1,219 @@
-import { disableBody } from "@/utils";
+import config from '@/utils/config';
-import config from "@/utils/config";
+import { request } from '@/utils/http';
-import { request } from "@/utils/http";
+import Ansi from 'ansi-to-react';
-import WebSocketManager from "@/utils/websocket";
+import { Button, Modal, Progress, Space, Typography, message } from 'antd';
-import Ansi from "ansi-to-react";
+import { useState } from 'react';
-import { Button, Modal, Statistic, message } from "antd";
+import useUpgrade, {
-import { useCallback, useEffect, useRef, useState } from "react";
+  activeStatuses,
-import intl from "react-intl-universal";
+  phaseLabels,
+  reloadKey,
+  upgradeStore,
+} from '@/hooks/useUpgrade';
+import intl from 'react-intl-universal';
 
-const { Countdown } = Statistic;
+const sizeLabel = (bytes: number) => `${(bytes / 1024 / 1024).toFixed(1)} MB`;
 
 const CheckUpdate = ({ systemInfo }: any) => {
-  const [updateLoading, setUpdateLoading] = useState(false);
+  const { job, busy, connected } = useUpgrade();
-  const [value, setValue] = useState("");
+  const [details, setDetails] = useState(false);
-  const modalRef = useRef<any>();
+  const active = activeStatuses.includes(job.status);
-  const lastStatusRef = useRef<string | undefined>();
+  const ready = job.status === 'ready';
+  const completed = job.status === 'completed';
 
-  const checkUpgrade = () => {
+  const startUpdate = async () => {
-    if (updateLoading) return;
+    if (busy || active) return;
-    setUpdateLoading(true);
+    if (!upgradeStore.beginMutation()) return;
-    message.loading(intl.get("检查更新中..."), 0);
+    try {
-    request
+      const result = await request.put(`${config.apiPrefix}system/update`);
-      .put(`${config.apiPrefix}system/update-check`)
+      if (result.code !== 200) throw new Error(result.message);
-      .then(({ code, data }) => {
+      upgradeStore.setJob(result.data);
-        message.destroy();
+    } catch {
-        if (code === 200) {
+      message.error(intl.get('更新失败，请检查网络及日志或稍后再试'));
-          if (data.hasNewVersion) {
+    } finally {
-            showConfirmUpdateModal(data);
+      upgradeStore.finishMutation();
+    }
+  };
+
+  const checkUpgrade = async () => {
+    if (!upgradeStore.beginMutation()) return;
+    try {
+      const { code, data } = await request.put(
+        `${config.apiPrefix}system/update-check`,
+      );
+      if (code !== 200) throw new Error('Update check failed');
+      Modal.confirm({
+        width: 500,
+        title: intl.get(data.hasNewVersion ? '更新可用' : '已经是最新版了！'),
+        content: data.hasNewVersion ? (
+          <>
+            <p>
+              {intl.get('新版本可用，当前版本', {
+                version: data.lastVersion,
+                current: systemInfo.version,
+              })}
+            </p>
+            <pre>
+              <Ansi>{data.lastLog}</Ansi>
+            </pre>
+          </>
+        ) : (
+          `${intl.get('青龙')} ${data.lastVersion}`
+        ),
+        okText: intl.get(data.hasNewVersion ? '下载更新' : '重新下载'),
+        cancelText: intl.get('以后再说'),
+        onOk: startUpdate,
+      });
+    } catch {
+      message.error(intl.get('检查更新失败，请检查网络后重试'));
+    } finally {
+      upgradeStore.finishMutation();
+    }
+  };
+
+  const reloadSystem = async (apply: boolean) => {
+    if (!upgradeStore.beginMutation()) return;
+    try {
+      const result = await request.put(
+        `${config.apiPrefix}update/${apply ? 'system' : 'reload'}`,
+      );
+      if (result.code !== 200) throw new Error(result.message);
+      if (apply) {
+        upgradeStore.setJob(result.data);
+        sessionStorage.setItem(reloadKey, result.data.id);
       } else {
-            showForceUpdateModal(data);
+        message.success(intl.get('系统将在30秒后自动刷新'));
+        setTimeout(() => window.location.reload(), 30000);
       }
+    } catch {
+      message.error(intl.get('升级任务启动失败，请检查日志后重试'));
+    } finally {
+      upgradeStore.finishMutation();
     }
-      })
-      .catch((error: any) => {
-        message.destroy();
-        console.log(error);
-      })
-      .finally(() => {
-        setUpdateLoading(false);
-      });
   };
 
-  const showForceUpdateModal = (data: any) => {
+  const showReloadModal = () =>
     Modal.confirm({
-      width: 500,
+      title: intl.get('确认重启'),
-      title: intl.get("更新"),
+      content: intl.get('更新已就绪，重启后应用新版本'),
-      content: (
+      okText: intl.get('重启并更新'),
-        <>
+      cancelText: intl.get('以后再说'),
-          <div>{intl.get("已经是最新版了！")}</div>
+      onOk: () => reloadSystem(true),
-          <div style={{ fontSize: 12, fontWeight: 400, marginTop: 5 }}>
-            {intl.get("青龙")} {data.lastVersion}{" "}
-            {intl.get("是目前检测到的最新可用版本了。")}
-          </div>
-        </>
-      ),
-      okText: intl.get("重新下载"),
-      onOk() {
-        showUpdatingModal();
-        request
-          .put(`${config.apiPrefix}system/update`)
-          .then((_data: any) => { })
-          .catch((error: any) => {
-            console.log(error);
     });
-      },
-    });
-  };
 
-  const showConfirmUpdateModal = (data: any) => {
+  const label =
-    const { lastVersion, lastLog } = data;
+    job.status === 'failed'
-    Modal.confirm({
+      ? intl.get('更新失败')
-      width: 500,
+      : ready
-      title: (
+      ? intl.get('下载完成，等待重启')
-        <>
+      : completed
-          <div>{intl.get("更新可用")}</div>
+      ? intl.get('升级成功')
-          <div style={{ fontSize: 12, fontWeight: 400, marginTop: 5 }}>
+      : intl.get(phaseLabels[job.phase || ''] || '正在准备更新');
-            {intl.get("新版本")} {lastVersion}{" "}
+  const hasJob = job.status !== 'idle' && job.status !== 'loading';
-            {intl.get("可用，你使用的版本为")} {systemInfo.version}。
+  const actions = !active && (
-          </div>
+    <Space wrap>
-        </>
-      ),
-      content: (
-        <pre>
-          <Ansi>{lastLog}</Ansi>
-        </pre>
-      ),
-      okText: intl.get("下载更新"),
-      cancelText: intl.get("以后再说"),
-      onOk() {
-        showUpdatingModal();
-        request
-          .put(`${config.apiPrefix}system/update`)
-          .then((_data: any) => { })
-          .catch((error: any) => {
-            console.log(error);
-          });
-      },
-    });
-  };
-
-  const showUpdatingModal = () => {
-    setValue("");
-    modalRef.current = Modal.info({
-      width: 600,
-      maskClosable: false,
-      closable: false,
-      keyboard: false,
-      okButtonProps: { disabled: true },
-      title: intl.get("下载更新中..."),
-      centered: true,
-      content: (
-        <pre>
-          <Ansi>{value}</Ansi>
-        </pre>
-      ),
-    });
-  };
-
-  const reloadSystem = (type?: string) => {
-    request
-      .put(`${config.apiPrefix}update/${type}`)
-      .then((_data: any) => {
-        message.success({
-          content: (
-            <span>
-              {intl.get("系统将在")}
-              <Countdown
-                className="inline-countdown"
-                format="ss"
-                value={Date.now() + 1000 * 30}
-              />
-              {intl.get("秒后自动刷新")}
-            </span>
-          ),
-          duration: 30,
-        });
-        disableBody();
-        setTimeout(() => {
-          window.location.reload();
-        }, 30000);
-      })
-      .catch((error: any) => {
-        console.log(error);
-      });
-  };
-
-  const showReloadModal = () => {
-    Modal.confirm({
-      width: 600,
-      maskClosable: false,
-      title: intl.get("确认重启"),
-      centered: true,
-      content: intl.get("系统安装包下载成功，确认重启"),
-      okText: intl.get("重启"),
-      onOk() {
-        reloadSystem("system");
-      },
-      onCancel() {
-        modalRef.current.update({
-          maskClosable: true,
-          closable: true,
-          okButtonProps: { disabled: false },
-        });
-      },
-    });
-  };
-
-  useEffect(() => {
-    if (!value) return;
-    const updateFailed = lastStatusRef.current === 'failed';
-
-    modalRef.current.update({
-      maskClosable: updateFailed,
-      closable: updateFailed,
-      okButtonProps: { disabled: !updateFailed },
-      content: (
-        <>
-          <pre>
-            <Ansi>{value}</Ansi>
-          </pre>
-          <div id="log-identifier" style={{ paddingBottom: 5 }}></div>
-        </>
-      ),
-    });
-  }, [value]);
-
-  const handleMessage = useCallback((payload: any) => {
-    const { message: _message, status } = payload;
-
-    if (status === 'failed') {
-      lastStatusRef.current = 'failed';
-      message.error(intl.get("更新失败，请检查网络及日志或稍后再试"));
-    }
-
-    if (status === 'success') {
-      lastStatusRef.current = 'success';
-      setTimeout(() => {
-        showReloadModal();
-      }, 1000);
-    }
-
-    setTimeout(() => {
-      document
-        .querySelector("#log-identifier")
-        ?.scrollIntoView({ behavior: "smooth" });
-    }, 600);
-
-    if (_message) {
-      setValue((p) => `${p}${_message}`);
-    }
-  }, []);
-
-  useEffect(() => {
-    const ws = WebSocketManager.getInstance();
-    ws.subscribe("updateSystemVersion", handleMessage);
-
-    return () => {
-      ws.unsubscribe("updateSystemVersion", handleMessage);
-    };
-  }, []);
-
-  return (
-    <>
-      <Button type="primary" onClick={checkUpgrade}>
-        {intl.get("检查更新")}
-      </Button>
       <Button
         type="primary"
-        onClick={() => reloadSystem("reload")}
+        loading={busy}
-        style={{ marginLeft: 8 }}
+        disabled={!connected || job.status === 'loading'}
+        onClick={ready ? showReloadModal : checkUpgrade}
       >
-        {intl.get("重新启动")}
+        {intl.get(ready ? '重启并更新' : '检查更新')}
       </Button>
-    </>
+      {!ready && !completed && (
+        <Button
+          disabled={busy || !connected || job.status === 'loading'}
+          onClick={() => reloadSystem(false)}
+        >
+          {intl.get('重新启动')}
+        </Button>
+      )}
+    </Space>
+  );
+
+  return (
+    <div className="upgrade-panel">
+      {!connected && (
+        <Typography.Text type="warning" role="status">
+          {intl.get('连接已断开，正在重新连接')}
+        </Typography.Text>
+      )}
+      {!hasJob && actions}
+      {hasJob && (
+        <div
+          className="upgrade-status-content"
+          role="status"
+          aria-live="polite"
+        >
+          <Typography.Text strong>
+            {label}
+            {job.version ? ` · v${job.version}` : ''}
+          </Typography.Text>
+          <Typography.Text
+            type={job.status === 'failed' ? 'danger' : 'secondary'}
+          >
+            {job.status === 'failed'
+              ? intl.get(job.error || '更新失败，请检查网络及日志或稍后再试') ||
+                job.error
+              : intl.get(
+                  completed
+                    ? '已重新启动并运行新版本，无需再次重启。'
+                    : ready
+                    ? '更新已就绪，重启后应用新版本'
+                    : '更新在后台进行，可以继续使用面板',
+                )}
+          </Typography.Text>
+          {job.phase === 'downloading' && active && (
+            <div className="upgrade-progress">
+              <div className="upgrade-progress-meta">
+                <Typography.Text type="secondary">
+                  {intl.get(
+                    job.artifact === 'qinglong-static'
+                      ? '下载构建产物'
+                      : '下载源码',
+                  )}
+                </Typography.Text>
+                <Typography.Text type="secondary">
+                  {sizeLabel(job.downloadedBytes || 0)}
+                  {job.totalBytes ? ` / ${sizeLabel(job.totalBytes)}` : ''}
+                </Typography.Text>
+              </div>
+              <Progress
+                percent={job.percent ?? 0}
+                showInfo={job.percent != null}
+                status="active"
+              />
+            </div>
+          )}
+          <div className="upgrade-actions">
+            {actions}
+            <Button
+              type="link"
+              className="upgrade-log-link"
+              onClick={() => setDetails(true)}
+            >
+              {intl.get('查看更新日志')}
+            </Button>
+          </div>
+        </div>
+      )}
+      <Modal
+        open={details}
+        title={intl.get('更新日志')}
+        footer={null}
+        onCancel={() => setDetails(false)}
+        width={700}
+      >
+        <pre
+          style={{
+            maxHeight: '60vh',
+            overflow: 'auto',
+            whiteSpace: 'pre-wrap',
+          }}
+        >
+          <Ansi>{job.log || intl.get('暂无日志')}</Ansi>
+        </pre>
+      </Modal>
+    </div>
   );
 };
 

src/pages/setting/index.less

@@ -33,6 +33,11 @@
   gap: 40px;
 }
 
+.notify-log-table .ant-table-thead > tr > th,
+.login-log-table .ant-table-thead > tr > th {
+  white-space: nowrap;
+}
+
 .ql-container-wrapper.ql-setting-container {
   .ant-tabs-tabpane > div {
     padding-left: 2px;

src/pages/setting/index.tsx

@@ -26,6 +26,7 @@ import {
 } from '@ant-design/icons';
 import SecuritySettings from './security';
 import LoginLog from './loginLog';
+import NotifyLog from './notifyLog';
 import NotificationSetting from './notification';
 import Other from './other';
 import About from './about';
@@ -126,6 +127,7 @@ const Setting = () => {
   const [editedApp, setEditedApp] = useState<any>();
   const [tabActiveKey, setTabActiveKey] = useState('security');
   const [loginLogData, setLoginLogData] = useState<any[]>([]);
+  const [notifyLogData, setNotifyLogData] = useState<any[]>([]);
   const [notificationInfo, setNotificationInfo] = useState<any>();
   const containergRef = useRef<HTMLDivElement>(null);
   const [height, setHeight] = useState<number>(0);
@@ -254,6 +256,8 @@ const Setting = () => {
       getApps();
     } else if (activeKey === 'login') {
       getLoginLog();
+    } else if (activeKey === 'notifylog') {
+      getNotifyLog();
     } else if (activeKey === 'notification') {
       getNotification();
     }
@@ -272,6 +276,19 @@ const Setting = () => {
       });
   };
 
+  const getNotifyLog = () => {
+    request
+      .get(`${config.apiPrefix}system/notify-log`)
+      .then(({ code, data }) => {
+        if (code === 200) {
+          setNotifyLogData(data);
+        }
+      })
+      .catch((error: any) => {
+        console.log(error);
+      });
+  };
+
   useEffect(() => {
     if (isDemoEnv) {
       getApps();
@@ -345,6 +362,11 @@ const Setting = () => {
               label: intl.get('登录日志'),
               children: <LoginLog height={height} data={loginLogData} />,
             },
+            {
+              key: 'notifylog',
+              label: intl.get('通知日志'),
+              children: <NotifyLog height={height} data={notifyLogData} />,
+            },
             {
               key: 'client-ip',
               label: intl.get('客户端 IP'),

src/pages/setting/loginLog.tsx

@@ -47,7 +47,7 @@ const LoginLog = ({ data, height }: { data: Array<any>; height: number }) => {
   const columns = [
     {
       title: intl.get('序号'),
-      width: 50,
+      width: 90,
       render: (text: string, record: any, index: number) => index + 1,
     },
     {
@@ -63,6 +63,7 @@ const LoginLog = ({ data, height }: { data: Array<any>; height: number }) => {
       dataIndex: 'address',
       width: 120,
       key: 'address',
+      render: (text: string) => (text === '内网IP' ? intl.get('内网IP') : text),
     },
     {
       title: intl.get('登录IP'),
@@ -74,13 +75,13 @@ const LoginLog = ({ data, height }: { data: Array<any>; height: number }) => {
       title: intl.get('登录设备'),
       dataIndex: 'platform',
       key: 'platform',
-      width: 80,
+      width: 140,
     },
     {
       title: intl.get('登录状态'),
       dataIndex: 'status',
       key: 'status',
-      width: 80,
+      width: 140,
       render: (text: string, record: any) => (
         <Tag color={LoginStatusColor[record.status]} style={{ marginRight: 0 }}>
           {intl.get(LoginStatus[record.status])}
@@ -116,12 +117,13 @@ const LoginLog = ({ data, height }: { data: Array<any>; height: number }) => {
   return (
     <>
       <Table
+        className="login-log-table"
         columns={columns}
         pagination={false}
         dataSource={data}
         rowKey={(record) => `${record.ip}-${record.timestamp}`}
         size="middle"
-        scroll={{ x: 1000, y: height }}
+        scroll={{ x: 1120, y: height }}
       />
     </>
   );

src/pages/setting/notifyLog.tsx

@@ -0,0 +1,117 @@
+import intl from 'react-intl-universal';
+import React from 'react';
+import { Table, Tag } from 'antd';
+import dayjs from 'dayjs';
+import './index.less';
+
+interface NotifyLogItem {
+  id?: number;
+  timestamp?: number;
+  title?: string;
+  content?: string;
+  status?: number;
+  notifyType?: string;
+  source?: 'system' | 'script';
+  scriptName?: string;
+  taskId?: string;
+}
+
+const NotifyStatusLabel: Record<number, string> = {
+  0: '成功',
+  1: '失败',
+};
+
+const NotifyStatusColor: Record<number, string> = {
+  0: 'success',
+  1: 'error',
+};
+
+const columns = [
+  {
+    title: intl.get('通知来源'),
+    key: 'source',
+    width: 220,
+    render: (_: unknown, record: NotifyLogItem) => (
+      <span>
+        {intl.get(record.source === 'script' ? '脚本通知' : '系统通知')}
+        {record.scriptName ? ` · ${record.scriptName}` : ''}
+        {record.taskId ? ` (#${record.taskId})` : ''}
+      </span>
+    ),
+  },
+  {
+    title: intl.get('序号'),
+    width: 90,
+    render: (text: string, record: any, index: number) => {
+      return index + 1;
+    },
+  },
+  {
+    title: intl.get('发送时间'),
+    dataIndex: 'timestamp',
+    key: 'timestamp',
+    width: 160,
+    render: (text: string, record: any) => {
+      return dayjs(record.timestamp).format('YYYY-MM-DD HH:mm:ss');
+    },
+  },
+  {
+    title: intl.get('标题'),
+    dataIndex: 'title',
+    key: 'title',
+    width: 200,
+  },
+  {
+    title: intl.get('内容'),
+    dataIndex: 'content',
+    key: 'content',
+    render: (text: string) => {
+      if (!text) return '';
+      return text.length > 100 ? text.slice(0, 100) + '...' : text;
+    },
+  },
+  {
+    title: intl.get('推送渠道'),
+    dataIndex: 'notifyType',
+    key: 'notifyType',
+    width: 120,
+  },
+  {
+    title: intl.get('发送状态'),
+    dataIndex: 'status',
+    key: 'status',
+    width: 140,
+    render: (text: string, record: NotifyLogItem) => {
+      const statusKey = record.status ?? 1;
+      return (
+        <Tag color={NotifyStatusColor[statusKey]} style={{ marginRight: 0 }}>
+          {intl.get(NotifyStatusLabel[statusKey])}
+        </Tag>
+      );
+    },
+  },
+];
+
+const NotifyLog = ({
+  data,
+  height,
+}: {
+  data: Array<NotifyLogItem>;
+  height: number;
+}) => {
+  return (
+    <>
+      <Table
+        className="notify-log-table"
+        columns={columns}
+        pagination={false}
+        dataSource={data}
+        rowKey="id"
+        size="middle"
+        scroll={{ x: 1240, y: height }}
+      />
+    </>
+  );
+};
+
+export default NotifyLog;

src/pages/subscription/index.tsx

@@ -103,7 +103,7 @@ const Subscription = () => {
       key: 'type',
       width: 130,
       render: (text: string, record: any) => {
-        return (SubscriptionType as any)[record.type];
+        return intl.get((SubscriptionType as any)[record.type]);
       },
     },
     {
@@ -121,7 +121,7 @@ const Subscription = () => {
       render: (text: string, record: any) => {
         if (record.schedule_type === 'interval') {
           const { type, value } = record.interval_schedule;
-          return `每${value}${(IntervalSchedule as any)[type]}`;
+          return intl.get('间隔定时规则', { value, unit: intl.get((IntervalSchedule as any)[type]) });
         }
         return record.schedule;
       },
@@ -369,14 +369,13 @@ const Subscription = () => {
 
   const enabledOrDisabledSubscription = (record: any, index: number) => {
     Modal.confirm({
-      title: `确认${
+      title: intl.get('确认操作', {
-        record.is_disabled === 1 ? intl.get('启用') : intl.get('禁用')
+        operation:
-      }`,
+          record.is_disabled === 1 ? intl.get('启用') : intl.get('禁用'),
+      }),
       content: (
         <>
-          {intl.get('确认')}
+          {intl.get('确认操作对象', { operation: record.is_disabled === 1 ? intl.get('启用') : intl.get('禁用'), object: intl.get('定时订阅') })}{' '}
-          {record.is_disabled === 1 ? intl.get('启用') : intl.get('禁用')}
-          {intl.get('定时订阅')}{' '}
           <Text style={{ wordBreak: 'break-all' }} type="warning">
             {record.name}
           </Text>{' '}
@@ -569,7 +568,7 @@ const Subscription = () => {
           simple: isPhone,
           defaultPageSize: 20,
           showTotal: (total: number, range: number[]) =>
-            `第 ${range[0]}-${range[1]} 条/总共 ${total} 条`,
+            intl.get('分页总数', { start: range[0], end: range[1], total }),
           pageSizeOptions: [20, 100, 500, 1000] as any,
         }}
         dataSource={value}

src/pages/subscription/modal.tsx

@@ -150,10 +150,10 @@ const SubscriptionModal = ({
           precision={0}
           min={1}
           value={intervalNumber}
-          style={{ width: 'calc(100% - 58px)' }}
+          style={{ width: 'calc(100% - 100px)' }}
           onChange={numberChange}
         />
-        <Select value={intervalType} onChange={intervalTypeChange}>
+        <Select value={intervalType} onChange={intervalTypeChange} style={{ width: 100 }}>
           <Option value="days">{intl.get('天')}</Option>
           <Option value="hours">{intl.get('时')}</Option>
           <Option value="minutes">{intl.get('分')}</Option>
@@ -527,8 +527,8 @@ const SubscriptionModal = ({
             onPaste={onNamePaste}
             placeholder={
               type === 'private-repo'
-                ? 'SOCK5代理，例如 IP:PORT'
+                ? intl.get('SOCK5代理，例如 IP:PORT')
-                : 'HTTP/SOCK5代理，例如 http://127.0.0.1:1080'
+                : intl.get('HTTP/SOCK5代理，例如 http://127.0.0.1:1080')
             }
           />
         </Form.Item>

src/utils/codemirror/language.ts

@@ -0,0 +1,11 @@
+import { langs } from '@uiw/codemirror-extensions-langs';
+
+export function getCodeMirrorExtensions(mode: string) {
+  // Monaco calls this language "ini"; CodeMirror exposes it as "properties".
+  const language = mode === 'ini' ? 'properties' : mode;
+  if (!Object.prototype.hasOwnProperty.call(langs, language)) {
+    return [];
+  }
+  const factory = langs[language as keyof typeof langs];
+  return typeof factory === 'function' ? [factory()] : [];
+}