From ce99542a8fc3ee76b7a23d71c9e2328efa982dfc Mon Sep 17 00:00:00 2001
From: dofastted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 15:03:53 +0800
Subject: [PATCH 01/12] feat(seed): add editable claude.setting to seed policy

---
 docs/PANEL_API.md                        |  2 +-
 src/lib/admin/panel-routes.mjs           | 19 ++++++++++--
 src/lib/cluster/remote-slot-files.mjs    |  7 ++++-
 src/lib/protocol/seed-policy.mjs         | 11 +++++++
 src/lib/vm/slot-seed.mjs                 | 11 ++++++-
 test/unit/seed-policy.test.mjs           |  6 ++++
 test/unit/slot-seed.test.mjs             | 17 +++++++++++
 web/src/features/vm/seed-policy-card.tsx | 37 ++++++++++++++++++++++--
 web/src/types/panel-vm.ts                |  1 +
 9 files changed, 104 insertions(+), 7 deletions(-)

diff --git a/docs/PANEL_API.md b/docs/PANEL_API.md
index 2390218dc..a073c2041 100644
--- a/docs/PANEL_API.md
+++ b/docs/PANEL_API.md
@@ -83,7 +83,7 @@
 | POST | `/vms/:id/oauth/generate-auth-url` | PKCE 授权链接；无 SOCKS5 拒绝。`{ flavor: "claude_code" }` 为官方 Claude Code 授权页。`{ flavor: "setup_token" }` 为 inference-only PKCE，不启槽内 CLI |
 | POST | `/vms/:id/oauth/exchange-code` | 粘贴授权码，经槽代理换票。完整 OAuth 才排队初装。flavor 以 session 为准 |
 | GET/POST | `/vms/:id/official-cc-bootstrap` | 初装进度 / `{ manual:true }` 再跑 |
-| GET/PUT | `/vms/:id/seed-settings` | 播种；强制保留 telemetry/bedrock/vertex 等 env |
+| GET/PUT | `/vms/:id/seed-settings` | 播种；强制保留 telemetry/bedrock/vertex 等 env；`claude_setting` 可编辑并写入槽内 `.claude/claude.setting` |
 | POST | `/vms/:id/collect-identity` | guest 采集（locale/tz/`guest_machine_id`） |
 | POST | `/vms/:id/reload` | 重载该槽 worker |
 | GET | `/wrap-cli` | kernel / wrap 样本 inspect：`ok, dir, kernel_bin, glibc_shim, wrapper, meta, kernel`。`kernel.source` 为 `configured`（仓内 `KIN_KERNEL_BIN` / `bin/kin-kernel`）或 `sample` |
diff --git a/src/lib/admin/panel-routes.mjs b/src/lib/admin/panel-routes.mjs
index 36bbfb877..2278ceafd 100644
--- a/src/lib/admin/panel-routes.mjs
+++ b/src/lib/admin/panel-routes.mjs
@@ -3524,21 +3524,33 @@ export function createPanelHandler(ctx) {
         if (!vm) return json(res, 404, { ok: false, error: { message: 'vm not found' } })
         const homeDir = path.join(cfg.paths.project, 'vms', id, 'cli-home')
         let settings_json = null
+        let claude_setting = null
         let kin_seed = null
         try {
           settings_json = JSON.parse(fs.readFileSync(path.join(homeDir, '.claude', 'settings.json'), 'utf8'))
         } catch {}
+        try {
+          claude_setting = fs
+            .readFileSync(path.join(homeDir, '.claude', 'claude.setting'), 'utf8')
+            .replace(/\r\n?/g, '\n')
+            .replace(/\n+$/g, '')
+        } catch {
+          claude_setting = defaultSeedPolicy(vm.seed_policy || {}).claude_setting
+        }
         try {
           kin_seed = JSON.parse(fs.readFileSync(path.join(homeDir, '.claude', 'kin-seed.json'), 'utf8'))
         } catch {}
+        const seed_policy = defaultSeedPolicy(vm.seed_policy || {})
+        if (claude_setting !== null) seed_policy.claude_setting = claude_setting
         return json(
           res,
           200,
           panel.ok({
             vm_id: id,
-            seed_policy: defaultSeedPolicy(vm.seed_policy || {}),
-            ...seedTelemetryContract(defaultSeedPolicy(vm.seed_policy || {})),
+            seed_policy,
+            ...seedTelemetryContract(seed_policy),
             settings_json,
+            claude_setting,
             kin_seed,
             cli_home: homeDir,
           }),
@@ -3559,6 +3571,8 @@ export function createPanelHandler(ctx) {
         if (body.theme !== undefined) merged.theme = body.theme
         if (body.extra_env !== undefined) merged.extra_env = body.extra_env
         if (body.settings_json_override !== undefined) merged.settings_json_override = body.settings_json_override
+        if (body.claude_setting !== undefined) merged.claude_setting = body.claude_setting
+        if (body['claude.setting'] !== undefined) merged.claude_setting = body['claude.setting']
         const next = defaultSeedPolicy(merged)
         if (body.settings_json_override !== undefined) next.settings_json_override = body.settings_json_override
         if (body.extra_env !== undefined) next.extra_env = body.extra_env || {}
@@ -3579,6 +3593,7 @@ export function createPanelHandler(ctx) {
             seed_policy: next,
             ...seedTelemetryContract(next),
             settings_json: written.settings || null,
+            claude_setting: written.claude_setting || '',
             kin_seed: written.kin_seed || null,
           }),
         )
diff --git a/src/lib/cluster/remote-slot-files.mjs b/src/lib/cluster/remote-slot-files.mjs
index de427cd4a..7d64cf3fd 100644
--- a/src/lib/cluster/remote-slot-files.mjs
+++ b/src/lib/cluster/remote-slot-files.mjs
@@ -31,7 +31,12 @@ import {
 
 export const SLOT_FILE_SETS = Object.freeze({
   run: ['run/kernel.json', 'run/worker.json', 'run/internal.token'],
-  seed: ['cli-home/.claude/settings.json', 'cli-home/.claude/kin-seed.json', 'machine-id'],
+  seed: [
+    'cli-home/.claude/settings.json',
+    'cli-home/.claude/claude.setting',
+    'cli-home/.claude/kin-seed.json',
+    'machine-id',
+  ],
   touch: ['run/telemetry.touch'],
 })
 const CREDENTIALS = 'cli-home/.claude/credentials.json'
diff --git a/src/lib/protocol/seed-policy.mjs b/src/lib/protocol/seed-policy.mjs
index 6b60f9d0c..4d8de1743 100644
--- a/src/lib/protocol/seed-policy.mjs
+++ b/src/lib/protocol/seed-policy.mjs
@@ -30,6 +30,16 @@ export function isTelemetryEnabled(pol = {}) {
  */
 export const NONESSENTIAL_TRAFFIC_ENV_KEY = 'CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC'
 
+// Keep a visible, editable copy of the Claude opt-out setting next to the
+// generated settings.json. The file is intentionally plain text so operators
+// can inspect or replace it without having to edit JSON.
+export const DEFAULT_CLAUDE_SETTING = `${NONESSENTIAL_TRAFFIC_ENV_KEY}=1`
+
+export function normalizeClaudeSetting(value) {
+  if (typeof value !== 'string') return DEFAULT_CLAUDE_SETTING
+  return value.replace(/\r\n?/g, '\n').replace(/\n+$/g, '')
+}
+
 export const TELEMETRY_KILL_ENV = Object.freeze({
   DISABLE_TELEMETRY: '1',
 })
@@ -141,6 +151,7 @@ export function defaultSeedPolicy(partial = {}) {
     reject_client_metadata_identity: partial.reject_client_metadata_identity !== false,
     theme: partial.theme || 'dark',
     extra_env: partial.extra_env && typeof partial.extra_env === 'object' ? partial.extra_env : {},
+    claude_setting: normalizeClaudeSetting(partial.claude_setting),
     settings_json_override:
       partial.settings_json_override && typeof partial.settings_json_override === 'object'
         ? partial.settings_json_override
diff --git a/src/lib/vm/slot-seed.mjs b/src/lib/vm/slot-seed.mjs
index bcf43d304..f4cd28e70 100644
--- a/src/lib/vm/slot-seed.mjs
+++ b/src/lib/vm/slot-seed.mjs
@@ -46,10 +46,19 @@ export function writeSlotSeedFiles(projectRoot, vm, seedPolicy = null) {
     cli_version: OFFICIAL_CLI_VERSION,
   })
   fs.writeFileSync(path.join(claudeDir, 'settings.json'), JSON.stringify(settings, null, 2))
+  fs.writeFileSync(path.join(claudeDir, 'claude.setting'), `${pol.claude_setting}\n`, { mode: 0o600 })
   fs.writeFileSync(path.join(claudeDir, 'kin-seed.json'), JSON.stringify(seedDoc, null, 2))
   let telemetry = { wrote: false }
   try {
     telemetry = syncWorkerTelemetry({ ...vm, seed_policy: pol }, projectRoot)
   } catch {}
-  return { wrote: true, homeDir, seed_policy: pol, settings, kin_seed: seedDoc, telemetry }
+  return {
+    wrote: true,
+    homeDir,
+    seed_policy: pol,
+    settings,
+    claude_setting: pol.claude_setting,
+    kin_seed: seedDoc,
+    telemetry,
+  }
 }
diff --git a/test/unit/seed-policy.test.mjs b/test/unit/seed-policy.test.mjs
index 692e6a791..390110c1d 100644
--- a/test/unit/seed-policy.test.mjs
+++ b/test/unit/seed-policy.test.mjs
@@ -7,8 +7,14 @@ import {
   buildSeedSettingsEnv,
   stripLegacyScriptEnv,
   LEGACY_SCRIPT_ENV_KEYS,
+  DEFAULT_CLAUDE_SETTING,
 } from '../../src/lib/protocol/seed-policy.mjs'
 
+test('default seed policy includes the editable claude setting', () => {
+  assert.equal(defaultSeedPolicy().claude_setting, DEFAULT_CLAUDE_SETTING)
+  assert.equal(defaultSeedPolicy({ claude_setting: 'FOO=bar\r\n' }).claude_setting, 'FOO=bar')
+})
+
 test('explicit opt-in removes telemetry kill switches; omitted policy retains them', () => {
   assert.equal(buildSlotSettingsEnv(standardSeedPolicy()).DISABLE_TELEMETRY, '1')
   assert.equal(buildSlotSettingsEnv(standardSeedPolicy({ telemetry_disabled: false })).DISABLE_TELEMETRY, undefined)
diff --git a/test/unit/slot-seed.test.mjs b/test/unit/slot-seed.test.mjs
index 7fa801ac8..0dbcacb3c 100644
--- a/test/unit/slot-seed.test.mjs
+++ b/test/unit/slot-seed.test.mjs
@@ -42,6 +42,7 @@ test('writeSlotSeedFiles writes latest settings and workstation kin-seed', () =>
   const out = writeSlotSeedFiles(root, vm)
   assert.equal(out.wrote, true)
   const settings = JSON.parse(fs.readFileSync(path.join(leftover, 'settings.json'), 'utf8'))
+  const claudeSetting = fs.readFileSync(path.join(leftover, 'claude.setting'), 'utf8')
   const seed = JSON.parse(fs.readFileSync(path.join(leftover, 'kin-seed.json'), 'utf8'))
   assert.equal(settings.env.DISABLE_TELEMETRY, undefined)
   assert.equal(settings.env.CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC, '1')
@@ -52,6 +53,8 @@ test('writeSlotSeedFiles writes latest settings and workstation kin-seed', () =>
   assert.equal(settings.env.TZ, 'America/Los_Angeles')
   assert.equal(settings.autoUpdates, false)
   assert.equal(settings.grove_enabled, false)
+  assert.equal(claudeSetting, 'CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1\n')
+  assert.equal(out.claude_setting, 'CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1')
   assert.equal(seed.seed_policy.grove_enabled, false)
   assert.equal(seed.seed_policy.disable_nonessential_traffic, true)
   assert.equal(seed.schema, KIN_SEED_SCHEMA)
@@ -63,6 +66,20 @@ test('writeSlotSeedFiles writes latest settings and workstation kin-seed', () =>
   fs.rmSync(root, { recursive: true, force: true })
 })
 
+test('writeSlotSeedFiles preserves an editable claude.setting', () => {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'kin-slot-setting-'))
+  const vm = {
+    id: 'vm-setting',
+    seed_policy: standardSeedPolicy({ claude_setting: 'FOO=bar\r\nBAZ=qux\n' }),
+  }
+  writeSlotSeedFiles(root, vm)
+  assert.equal(
+    fs.readFileSync(path.join(root, 'vms', vm.id, 'cli-home', '.claude', 'claude.setting'), 'utf8'),
+    'FOO=bar\nBAZ=qux\n',
+  )
+  fs.rmSync(root, { recursive: true, force: true })
+})
+
 test('applySeedAfterOfficialInit uses the same writer', () => {
   const root = fs.mkdtempSync(path.join(os.tmpdir(), 'kin-init-seed-'))
   const vm = {
diff --git a/web/src/features/vm/seed-policy-card.tsx b/web/src/features/vm/seed-policy-card.tsx
index fd9175b54..2ff1573f9 100644
--- a/web/src/features/vm/seed-policy-card.tsx
+++ b/web/src/features/vm/seed-policy-card.tsx
@@ -3,31 +3,38 @@ import { Button } from '@/components/ui/button'
 import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/card'
 import { Label } from '@/components/ui/label'
 import { Switch } from '@/components/ui/switch'
+import { Textarea } from '@/components/ui/textarea'
 import {
   telemetryEnabled,
   telemetrySeedFlags,
 } from '@/features/vm/telemetry-policy'
 
+export const DEFAULT_CLAUDE_SETTING =
+  'CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1'
+
 const REJECT_FLAGS: [string, string][] = [
   ['reject_client_settings', '拒客户端 settings'],
   ['reject_client_metadata_identity', '拒客户端身份'],
 ]
 
-type SeedPolicy = Record<string, boolean>
+type SeedPolicy = Record<string, boolean | string>
 
 export const SEED_PRESETS: Record<string, SeedPolicy> = {
   standard: {
     ...telemetrySeedFlags(false),
+    claude_setting: DEFAULT_CLAUDE_SETTING,
     reject_client_settings: true,
     reject_client_metadata_identity: true,
   },
   open: {
     ...telemetrySeedFlags(true),
+    claude_setting: DEFAULT_CLAUDE_SETTING,
     reject_client_settings: false,
     reject_client_metadata_identity: false,
   },
   strict: {
     ...telemetrySeedFlags(false),
+    claude_setting: DEFAULT_CLAUDE_SETTING,
     reject_client_settings: true,
     reject_client_metadata_identity: true,
   },
@@ -62,6 +69,10 @@ export function matchSeedPreset(policy: Record<string, unknown>): string {
 
 function normalize(policy: Record<string, unknown>): SeedPolicy {
   const out: SeedPolicy = { ...telemetrySeedFlags(telemetryEnabled(policy)) }
+  out.claude_setting =
+    typeof policy.claude_setting === 'string'
+      ? policy.claude_setting
+      : DEFAULT_CLAUDE_SETTING
   for (const [k] of REJECT_FLAGS) {
     out[k] = k in policy ? !!policy[k] : !!SEED_PRESETS.standard[k]
   }
@@ -91,7 +102,8 @@ export function SeedPolicyCard({
   const saved = normalize(policy)
   const dirty =
     telemetryEnabled(draft) !== telemetryEnabled(saved) ||
-    REJECT_FLAGS.some(([k]) => !!draft[k] !== !!saved[k])
+    REJECT_FLAGS.some(([k]) => !!draft[k] !== !!saved[k]) ||
+    draft.claude_setting !== saved.claude_setting
   const on = telemetryEnabled(draft)
 
   return (
@@ -169,6 +181,27 @@ export function SeedPolicyCard({
             : ' 外部初装「同步遥测」关着，换票不会改写这里的遥测开关。'}
         </p>
 
+        <div className='space-y-2 border-t pt-3'>
+          <Label htmlFor='seed-claude-setting' className='text-sm font-normal'>
+            claude.setting
+          </Label>
+          <Textarea
+            id='seed-claude-setting'
+            value={String(draft.claude_setting || '')}
+            disabled={saving}
+            onChange={(e) =>
+              setDraft({ ...draft, claude_setting: e.target.value })
+            }
+            className='min-h-24 font-mono text-xs'
+            spellCheck={false}
+            placeholder={DEFAULT_CLAUDE_SETTING}
+          />
+          <p className='text-xs text-muted-foreground'>
+            每行一个 Claude 设置。默认写入 <code>{DEFAULT_CLAUDE_SETTING}</code>
+            。
+          </p>
+        </div>
+
         <div className='flex gap-2 border-t pt-3'>
           <Button
             size='sm'
diff --git a/web/src/types/panel-vm.ts b/web/src/types/panel-vm.ts
index 93fb8f463..eff7ca62f 100644
--- a/web/src/types/panel-vm.ts
+++ b/web/src/types/panel-vm.ts
@@ -570,6 +570,7 @@ export type VmSeedSettings = {
   required_env?: Record<string, string>
   note?: string
   settings_json?: Record<string, unknown> | null
+  claude_setting?: string | null
   kin_seed?: Record<string, unknown> | null
   [key: string]: unknown
 }

From a7c3dfb091639d1e2766102977ae2e2de56d848b Mon Sep 17 00:00:00 2001
From: dofastted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 16:34:04 +0800
Subject: [PATCH 02/12] feat(vm): update Go slot services without VM rebuild

---
 deploy/install.sh                     | 11 ++++
 docker/kin-kvm/guest/kin-guest-setup  |  3 +
 docs/PANEL_API.md                     |  2 +-
 docs/TELEMETRY.md                     | 33 ++++++++++
 scripts/fleet-services.mjs            | 10 +++
 scripts/panel-upgrade.sh              |  5 ++
 src/lib/admin/panel-routes.mjs        | 17 +++--
 src/lib/cluster/remote-slot-files.mjs | 29 ++++++++-
 src/lib/cluster/remote-slot.mjs       | 93 +++++++++++++++++++++++----
 src/lib/cluster/slot-image.mjs        |  3 +-
 src/lib/vm/fleet-update.mjs           | 51 ++++++++++++++-
 src/lib/vm/slot-process-status.mjs    | 35 +++++++++-
 12 files changed, 270 insertions(+), 22 deletions(-)
 create mode 100644 docs/TELEMETRY.md
 create mode 100644 scripts/fleet-services.mjs

diff --git a/deploy/install.sh b/deploy/install.sh
index 07f55e41c..5c9761a66 100644
--- a/deploy/install.sh
+++ b/deploy/install.sh
@@ -643,6 +643,7 @@ start_stack() {
     fi
     if KIN_AUTO_SYNC_WRAP="$auto_sync_wrap" compose up -d; then
       wait_health || true
+      refresh_slot_services
       return
     fi
     err "docker compose 失败。日志: docker logs ${SERVICE_NAME}"
@@ -655,6 +656,7 @@ start_stack() {
     cat "$log"
     rm -f "$log"
     wait_health || true
+    refresh_slot_services
     return
   fi
   cat "$log"
@@ -664,6 +666,7 @@ start_stack() {
     if KIN_AUTO_SYNC_WRAP="$auto_sync_wrap" compose up -d --build; then
       rm -f "$log"
       wait_health || true
+      refresh_slot_services
       return
     fi
     guide_changelog_error
@@ -676,6 +679,14 @@ start_stack() {
   exit 1
 }
 
+refresh_slot_services() {
+  # The control-plane image carries the freshly built Go binaries. Publish them
+  # into persistent slot-bin mounts and restart only kin-worker/kin-egress.
+  if ! docker exec "$SERVICE_NAME" node /opt/vm2api/scripts/fleet-services.mjs; then
+    warn "Go slot service refresh failed; VM containers were left untouched"
+  fi
+}
+
 print_banner() {
   echo ""
   echo -e "${CYAN}==============================================${NC}"
diff --git a/docker/kin-kvm/guest/kin-guest-setup b/docker/kin-kvm/guest/kin-guest-setup
index 9f1790df8..441df0c05 100644
--- a/docker/kin-kvm/guest/kin-guest-setup
+++ b/docker/kin-kvm/guest/kin-guest-setup
@@ -93,6 +93,9 @@ link_payload() {
   if [ -e /opt/kin-payload/opt/kin ] || [ -d /opt/kin-payload/opt/kin ]; then
     ln -sfn /opt/kin-payload/opt/kin /opt/kin
   fi
+  if [ -e /opt/kin-payload/opt/kin-live ] || [ -d /opt/kin-payload/opt/kin-live ]; then
+    ln -sfn /opt/kin-payload/opt/kin-live /opt/kin-live
+  fi
 }
 
 apply_identity() {
diff --git a/docs/PANEL_API.md b/docs/PANEL_API.md
index a073c2041..aa031469a 100644
--- a/docs/PANEL_API.md
+++ b/docs/PANEL_API.md
@@ -103,7 +103,7 @@
 | POST | `/vms/create` | 种子 VM + Claude Code home；依赖私有 `kin-computer`。未安装返回 400 `computer_service_missing`，身份生成失败返回 400 `computer_create_failed`。Docker 槽可在 `machine` 里可选传 `docker_cpus`（见下） |
 | POST | `/vms/import` | sessionKey 导入（必须已有 VM+代理） |
 | GET | `/vms/fleet-status` | 全槽更新状态 |
-| POST | `/vms/fleet-update` | 全槽 roll / 采集 |
+| POST | `/vms/fleet-update` | 全槽 roll / 采集；`action=telemetry` 只更新 Go telemetry/egress 服务，不重建 VM |
 | POST | `/vms/reconcile-fingerprints` | 用官方 `~/.claude.json` 对齐指纹 |
 | POST | `/probe` | 全量额度探测 |
 | GET/POST | `/health-probe` | 读/跑官方 hello 健康探测缓存 |
diff --git a/docs/TELEMETRY.md b/docs/TELEMETRY.md
new file mode 100644
index 000000000..4920ccdb0
--- /dev/null
+++ b/docs/TELEMETRY.md
@@ -0,0 +1,33 @@
+# VM telemetry service
+
+Telemetry is an explicit seed-policy opt-in. A newly created VM is disabled;
+setting `telemetry_disabled` to `false` writes the VM's `worker.json` identity
+and starts the Go `kin-worker telemetry` service. Setting it back to `true`
+stops that child process and leaves the VM and its Rust kernel running.
+
+The service reads credentials only from the VM's own Claude home. Its feature
+payload uses facts collected from that VM (including its timezone, OS,
+hardware, shell and runtime versions), never controller-host defaults or a
+synthetic fingerprint. Requests leave through the VM's bound egress, so the
+service observes the VM's actual network address. Uploads are periodic and are idle-gated
+by `run/telemetry.touch`.
+
+`claude.setting` is a plain, editable seed file beside `settings.json` and is
+initialized with:
+
+```text
+CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1
+```
+
+## Service-only updates
+
+Go payloads are copied atomically into each slot's persistent `slot-bin`
+directory. Cluster containers bind that directory at `/opt/kin-live` (and the
+KVM guest payload at `/opt/kin-live`). The panel/fleet `telemetry` action
+restarts only the telemetry child and the `kin-egress` helper; it does not
+rebuild a VM, replace `vms/`, rotate credentials, or restart the Rust kernel.
+
+An update must verify the new binary hash and the replacement process before
+reporting success. A failed service restart is reported per slot so the old VM
+identity remains intact and can be rolled back by republishing the previous
+binary.
diff --git a/scripts/fleet-services.mjs b/scripts/fleet-services.mjs
new file mode 100644
index 000000000..adcfa2128
--- /dev/null
+++ b/scripts/fleet-services.mjs
@@ -0,0 +1,10 @@
+import { runFleetUpdate } from '../src/lib/vm/fleet-update.mjs'
+
+const root = process.argv[2] || process.env.KIN_PROJECT_ROOT || '/opt/vm2api'
+const concurrency = Number(process.argv[3] || 4)
+const report = await runFleetUpdate(root, {
+  action: 'telemetry',
+  concurrency,
+})
+console.log(JSON.stringify(report))
+if (report.failed_count) process.exit(1)
diff --git a/scripts/panel-upgrade.sh b/scripts/panel-upgrade.sh
index 4d2225df7..69c538793 100755
--- a/scripts/panel-upgrade.sh
+++ b/scripts/panel-upgrade.sh
@@ -138,6 +138,11 @@ attempt=0
 while [ "$attempt" -lt 45 ]; do
   if probe verify "$TAG" "$BASELINE"; then
     [ -d .git ] || printf '%s\n' "${TAG#v}" > VERSION
+    # Replace the Go worker/egress payloads in-place; no VM/container rebuild.
+    if ! docker exec "$CONTAINER" node /opt/vm2api/scripts/fleet-services.mjs; then
+      echo "Go service-only update failed; inspect the per-slot report" >&2
+      exit 1
+    fi
     echo "Control plane restarted and verified at $TAG"
     echo "Previously healthy slot kernels verified: $BASELINE"
     exit 0
diff --git a/src/lib/admin/panel-routes.mjs b/src/lib/admin/panel-routes.mjs
index 2278ceafd..80b67bd18 100644
--- a/src/lib/admin/panel-routes.mjs
+++ b/src/lib/admin/panel-routes.mjs
@@ -3580,10 +3580,18 @@ export function createPanelHandler(ctx) {
         vm.updated_at = new Date().toISOString()
         atomicWriteJson(vmPath, vm, { mode: 0o600 })
         const written = writeSlotSeedFiles(cfg.paths.project, vm, next)
-        if (next.telemetry_disabled === false && telemetryWasOff) {
-          try {
-            await reloadSlotReady(vm, cfg.paths.project, { routing: ctx.routingConfig })
-          } catch {}
+        let service = null
+        if (
+          vm.status === 'running' &&
+          (next.telemetry_disabled !== telemetryWasOff || body.telemetry_service_restart === true)
+        ) {
+          const report = await runFleetUpdate(cfg.paths.project, {
+            action: 'telemetry',
+            ids: [id],
+            concurrency: 1,
+            routing: ctx.routingConfig,
+          })
+          service = report.items?.[0] || report
         }
         return json(
           res,
@@ -3595,6 +3603,7 @@ export function createPanelHandler(ctx) {
             settings_json: written.settings || null,
             claude_setting: written.claude_setting || '',
             kin_seed: written.kin_seed || null,
+            service,
           }),
         )
       }
diff --git a/src/lib/cluster/remote-slot-files.mjs b/src/lib/cluster/remote-slot-files.mjs
index 7276601bd..1fc357f5c 100644
--- a/src/lib/cluster/remote-slot-files.mjs
+++ b/src/lib/cluster/remote-slot-files.mjs
@@ -18,6 +18,7 @@
  */
 
 import fs from 'node:fs'
+import crypto from 'node:crypto'
 import path from 'node:path'
 import { nodeSession, remoteSlotDir, remoteSlotOwner, vmNodeId } from './placement.mjs'
 import { hasCredentialPresence, mirrorWorkerCredentialsToVm } from '../oauth/oauth-credentials.mjs'
@@ -43,6 +44,7 @@ export const SLOT_FILE_SETS = Object.freeze({
 })
 const CREDENTIALS = 'cli-home/.claude/credentials.json'
 const TOUCH_PUSH_MS = 30_000
+const SLOT_BINARIES = Object.freeze(['kin-worker', 'kin-egress'])
 
 /** Local vms/<id>/ path → node path: the home's `.claude` lives in the host-owned `claude/` mount. */
 export function remoteSlotPath(rel) {
@@ -62,7 +64,7 @@ async function prepareRemoteDir(session, vm) {
   const dir = remoteSlotDir(session.host, vm.id)
   const owner = remoteSlotOwner(session.host, vm)
   // Mount roots only: nothing here resolves through a path the guest can rewrite.
-  const roots = [`${dir}/run`, `${dir}/claude`, `${dir}/cli-home`].map(shellQuote).join(' ')
+  const roots = [`${dir}/run`, `${dir}/claude`, `${dir}/cli-home`, `${dir}/slot-bin`].map(shellQuote).join(' ')
   // Docker creates a missing bind source as root:root, which the slot uid cannot write.
   const chown = session.host.uid === 0 ? ` && chown ${owner.uid}:${owner.gid} ${shellQuote(dir)} ${roots}` : ''
   await runRemote(session.client, `umask 077 && mkdir -p ${roots} && chmod 700 ${shellQuote(dir)} ${roots}${chown}`, {
@@ -87,6 +89,7 @@ export async function pushSlotFiles(vm, slotDir, sets = ['run', 'seed'], session
   const remote = remoteSlotDir(s.host, vm.id)
   const owner = ownerFor(s, vm)
   const pushed = []
+  const digest = crypto.createHash('sha256')
   for (const rel of sets.flatMap((name) => SLOT_FILE_SETS[name] || [])) {
     const local = path.join(slotDir, rel)
     let data
@@ -102,6 +105,30 @@ export async function pushSlotFiles(vm, slotDir, sets = ['run', 'seed'], session
   return { pushed }
 }
 
+/** Publish Go service payloads into the persistent per-slot mount. */
+export async function pushSlotBinaries(vm, projectRoot, session = null) {
+  const s = session || (await nodeSession(vmNodeId(vm)))
+  await prepareRemoteDir(s, vm)
+  const sftp = await openSftp(s.client)
+  const remote = `${remoteSlotDir(s.host, vm.id)}/slot-bin`
+  const owner = ownerFor(s, vm)
+  const pushed = []
+  for (const name of SLOT_BINARIES) {
+    const local =
+      process.env[name === 'kin-worker' ? 'KIN_WORKER_BIN' : 'KIN_EGRESS_BIN'] || path.join(projectRoot, 'bin', name)
+    let data
+    try {
+      data = fs.readFileSync(local)
+    } catch {
+      continue
+    }
+    await writeRemoteFile(sftp, `${remote}/${name}`, data, { mode: 0o755, owner })
+    digest.update(name).update(data)
+    pushed.push(name)
+  }
+  return { pushed, digest: digest.digest('hex') }
+}
+
 /** Explicit import only: replace the remote credential with the local one. */
 export async function pushSlotCredentials(vm, slotDir, session = null) {
   const s = session || (await nodeSession(vmNodeId(vm)))
diff --git a/src/lib/cluster/remote-slot.mjs b/src/lib/cluster/remote-slot.mjs
index 92cce7e87..24bbd9f21 100644
--- a/src/lib/cluster/remote-slot.mjs
+++ b/src/lib/cluster/remote-slot.mjs
@@ -66,11 +66,18 @@ import {
   vmNodeId,
 } from './placement.mjs'
 import { openSftp, readRemoteFileNoFollow, runRemote, shellQuote, writeRemoteFile } from './remote-fs.mjs'
-import { pushSlotFiles, reconcileSlotCredentials, remoteSlotPath, removeRemoteSlotDir } from './remote-slot-files.mjs'
+import {
+  pushSlotBinaries,
+  pushSlotFiles,
+  reconcileSlotCredentials,
+  remoteSlotPath,
+  removeRemoteSlotDir,
+} from './remote-slot-files.mjs'
 import { REMOTE_WORKER_BIN, slotImageSpec } from './slot-image.mjs'
 
 /** Bump when the slot's mount layout changes; a running container with an older label is recreated. */
-const SLOT_LAYOUT = '2'
+const SLOT_LAYOUT = '3'
+const LIVE_BIN = '/opt/kin-live'
 
 function failure(err, fallbackCode = 'remote_slot_failed') {
   return { ok: false, code: err?.code || fallbackCode, error: String(err?.message || err) }
@@ -164,15 +171,22 @@ export function slotEgressNames(vmId) {
  * (kincli) could not open the root-owned file and crash-looped on EACCES. The
  * user is part of the digest so a helper created under the old spec is rebuilt.
  */
-export function remoteEgressContainer({ vmId, proxyId, dir, imageRef, body, host }) {
+export function remoteEgressContainer({ vmId, proxyId, dir, imageRef, body, host, binaryDigest = '' }) {
   const user = `${host.uid}:${host.gid}`
-  const digest = crypto.createHash('sha256').update(body).update(imageRef).update(user).digest('hex').slice(0, 16)
+  const digest = crypto
+    .createHash('sha256')
+    .update(body)
+    .update(imageRef)
+    .update(user)
+    .update(binaryDigest)
+    .digest('hex')
+    .slice(0, 16)
   return {
     digest,
     spec: {
       Image: imageRef,
       User: user,
-      Cmd: ['/usr/local/bin/kin-egress', '-config', '/etc/kin-egress/egress.json'],
+      Cmd: [`${LIVE_BIN}/kin-egress`, '-config', '/etc/kin-egress/egress.json'],
       Labels: {
         'kin.egress': '1',
         'kin.egress.vm': vmId,
@@ -182,7 +196,7 @@ export function remoteEgressContainer({ vmId, proxyId, dir, imageRef, body, host
       },
       HostConfig: {
         NetworkMode: 'host',
-        Binds: [`${dir}:/etc/kin-egress:ro`],
+        Binds: [`${dir}:/etc/kin-egress:ro`, `${path.posix.join(dir, '..', 'slot-bin')}:${LIVE_BIN}:ro`],
         RestartPolicy: { Name: 'unless-stopped' },
         ReadonlyRootfs: true,
         CapDrop: ['ALL'],
@@ -207,7 +221,7 @@ export function canReuseRemoteEgress(existing, digest) {
  * kin-egress (host-network container from the slot image) + iptables REDIRECT,
  * exactly like egress.mjs does on the control plane.
  */
-export async function ensureRemoteEgress(session, vm, { imageRef }) {
+export async function ensureRemoteEgress(session, vm, { imageRef, binaryDigest = '' }) {
   const proxy = vm.proxy
   const blocked = proxyBlockedReason(proxy)
   if (blocked) return { ok: false, code: blocked, error: blocked }
@@ -229,6 +243,12 @@ export async function ensureRemoteEgress(session, vm, { imageRef }) {
     return { ok: false, code: 'egress_sudo_required', error: '节点需要 root 或免密 sudo 才能为 SOCKS5 出口写 iptables' }
   }
   const names = slotEgressNames(vm.id)
+  // Keep the helper's executable on the persistent mount even when egress is
+  // enabled independently of a slot start/update.
+  await runRemote(
+    session.client,
+    `umask 077 && mkdir -p ${shellQuote(`${remoteSlotDir(session.host, vm.id)}/slot-bin`)}`,
+  )
   const net = await ensureRemoteNetwork(session.docker, {
     name: names.network,
     bridge: names.bridge,
@@ -248,7 +268,15 @@ export async function ensureRemoteEgress(session, vm, { imageRef }) {
   const body = `${JSON.stringify(cfg, null, 2)}\n`
   // Beside the slot tree, outside every guest bind: the guest never sees the proxy password.
   const dir = `${remoteSlotDir(session.host, vm.id)}/egress`
-  const { digest, spec } = remoteEgressContainer({ vmId: vm.id, proxyId, dir, imageRef, body, host: session.host })
+  const { digest, spec } = remoteEgressContainer({
+    vmId: vm.id,
+    proxyId,
+    dir,
+    imageRef,
+    body,
+    host: session.host,
+    binaryDigest,
+  })
   const existing = await inspectContainerOrNull(session.docker, names.egress)
   if (!canReuseRemoteEgress(existing, digest)) {
     await runRemote(session.client, `umask 077 && mkdir -p ${shellQuote(dir)} && chmod 700 ${shellQuote(dir)}`)
@@ -289,7 +317,8 @@ export async function setRemoteProxyEgressEnabled(vm, projectRoot, enabled) {
         return { ok: true }
       }
       const image = slotImageSpec(projectRoot, vm.kernel || 'ubuntu-24.04')
-      return ensureRemoteEgress(session, vm, { imageRef: image.ref })
+      const binaries = await pushSlotBinaries(vm, projectRoot, session)
+      return ensureRemoteEgress(session, vm, { imageRef: image.ref, binaryDigest: binaries.digest })
     }
     for (const name of new Set([current, legacy])) {
       const existing = await inspectContainerOrNull(session.docker, name)
@@ -448,6 +477,7 @@ function kvmSlotContainerBody(vm, { image, network, remoteDir, routing, accel, s
         `${remoteDir}/claude:/slot/claude`,
         `${remoteDir}/run:/slot/run`,
         `${remoteDir}/kvm:/slot/kvm`,
+        `${remoteDir}/slot-bin:/opt/kin-guest/opt/kin-live:ro`,
       ],
       NetworkMode: network,
       RestartPolicy: { Name: 'unless-stopped' },
@@ -508,6 +538,7 @@ export function slotContainerBody(vm, { image, network, remoteDir, user, routing
         `${remoteDir}/run:/run/kin`,
         `${remoteDir}/machine-id:/etc/machine-id:ro`,
         `${remoteDir}/machine-id:/var/lib/dbus/machine-id:ro`,
+        `${remoteDir}/slot-bin:${LIVE_BIN}:ro`,
       ],
       NetworkMode: network,
       RestartPolicy: { Name: 'unless-stopped' },
@@ -741,7 +772,8 @@ export function codexRoleMatches(info, vm) {
 
 async function startRemoteTelemetry(docker, vm, name) {
   const target = { ...vm, runtime: { ...(vm.runtime || {}), container: name, type: runtimeKind(vm) } }
-  const { Cmd, User } = slotExecCmd(target, [REMOTE_WORKER_BIN, 'telemetry', '--config', '/run/kin/worker.json'], {
+  const worker = isKvmRuntime(vm) ? '/opt/kin-payload/opt/kin-live/kin-worker' : REMOTE_WORKER_BIN
+  const { Cmd, User } = slotExecCmd(target, [worker, 'telemetry', '--config', '/run/kin/worker.json'], {
     detach: true,
   })
   await execDetached(docker, name, Cmd, { user: User }).catch(() => {})
@@ -766,7 +798,9 @@ export async function startRemoteSlot(vm, projectRoot, { recreate = false, routi
       if (!probe.ok) return { ok: false, code: 'kvm_unavailable', error: probe.error }
       accel = probe.accel
     }
-    const eg = await ensureRemoteEgress(session, vm, { imageRef: egressImage || image })
+    const binaries =
+      typeof pushSlotBinaries === 'function' ? await pushSlotBinaries(vm, projectRoot, session) : { digest: '' }
+    const eg = await ensureRemoteEgress(session, vm, { imageRef: egressImage || image, binaryDigest: binaries.digest })
     if (!eg.ok) return eg
     const name = containerName(vm.id)
     const relays = await clusterManager().ensureSlotRelays(nodeId, vm.id)
@@ -844,7 +878,12 @@ export async function reloadRemoteSlot(vm, projectRoot, { routing } = {}) {
     const p = await prepare(vm, projectRoot, routing)
     if (p.fail) return p.fail
     const { nodeId, session, image, user, remoteDir, slotDir } = p
-    const eg = await ensureRemoteEgress(session, vm, { imageRef: p.egressImage || image })
+    const binaries =
+      typeof pushSlotBinaries === 'function' ? await pushSlotBinaries(vm, projectRoot, session) : { digest: '' }
+    const eg = await ensureRemoteEgress(session, vm, {
+      imageRef: p.egressImage || image,
+      binaryDigest: binaries.digest,
+    })
     if (!eg.ok) return eg
     const name = containerName(vm.id)
     const existing = await inspectContainerOrNull(session.docker, name)
@@ -896,6 +935,36 @@ export async function reloadRemoteSlot(vm, projectRoot, { routing } = {}) {
   }
 }
 
+/** Update a node slot's Go services without recreating its VM/container. */
+export async function restartRemoteServices(vm, projectRoot, { telemetryEnabled } = {}) {
+  try {
+    const session = await nodeSession(vmNodeId(vm))
+    const remoteDir = remoteSlotDir(session.host, vm.id)
+    const slotDir = path.join(projectRoot, 'vms', vm.id)
+    const name = vm.runtime?.container || containerName(vm.id)
+    const binaries = await pushSlotBinaries(vm, projectRoot, session)
+    await pushSlotFiles(vm, slotDir, ['run', 'seed'], session)
+    const target = { ...vm, runtime: { ...(vm.runtime || {}), container: name, type: runtimeKind(vm) } }
+    const stop = 'pkill -TERM -x kin-worker 2>/dev/null || true'
+    await execDetached(session.docker, name, slotExecCmd(target, ['sh', '-c', stop]).Cmd, {
+      user: slotExecCmd(target, ['sh', '-c', stop]).User,
+    })
+    await new Promise((resolve) => setTimeout(resolve, 150))
+    if (telemetryEnabled === true) await startRemoteTelemetry(session.docker, vm, name)
+    const egress = slotEgressNames(vm.id).egress
+    const egressInfo = await inspectContainerOrNull(session.docker, egress)
+    if (egressInfo?.State?.Running) await containerAction(session.docker, egress, 'restart')
+    return {
+      ok: true,
+      action: telemetryEnabled === true ? 'restarted' : 'stopped',
+      remote_dir: remoteDir,
+      binary_digest: binaries.digest || null,
+    }
+  } catch (err) {
+    return failure(err, 'service_update_failed')
+  }
+}
+
 export async function stopRemoteSlot(vm) {
   try {
     const session = await nodeSession(vmNodeId(vm))
diff --git a/src/lib/cluster/slot-image.mjs b/src/lib/cluster/slot-image.mjs
index 9f0d42255..d5cf0d088 100644
--- a/src/lib/cluster/slot-image.mjs
+++ b/src/lib/cluster/slot-image.mjs
@@ -27,7 +27,8 @@ import { codexKernelBinPath } from '../transport/codex-kernel-supervisor.mjs'
 import { ClusterError } from './ssh-link.mjs'
 import { tarStream } from './tar.mjs'
 
-export const REMOTE_WORKER_BIN = '/usr/local/bin/kin-worker'
+// Service binaries are supplied by the persistent per-slot slot-bin mount.
+export const REMOTE_WORKER_BIN = '/opt/kin-live/kin-worker'
 
 function binOr(envKey, fallback) {
   const env = String(process.env[envKey] || '').trim()
diff --git a/src/lib/vm/fleet-update.mjs b/src/lib/vm/fleet-update.mjs
index afdd70fea..52b255c4d 100644
--- a/src/lib/vm/fleet-update.mjs
+++ b/src/lib/vm/fleet-update.mjs
@@ -8,8 +8,24 @@ import { runtimeKind } from './runtime-kind.mjs'
 import { reloadSlotReady, slotExec } from './slot-runtime.mjs'
 import { collectSlotIdentity } from './guest-identity.mjs'
 import { rustKernelHealth } from '../transport/rust-kernel-client.mjs'
+import { restartTelemetrySidecar } from './slot-process-status.mjs'
+import { vmNodeId } from '../cluster/placement.mjs'
+import { restartRemoteServices } from '../cluster/remote-slot.mjs'
+import { ensureProxyEgress, isLocalEgressProxy, stopEgressProcess } from './egress.mjs'
 
-const ACTIONS = new Set(['collect', 'reload', 'roll'])
+const ACTIONS = new Set(['collect', 'reload', 'roll', 'telemetry'])
+
+async function restartLocalServices({ projectRoot, vm, enabled }) {
+  const telemetry = await restartTelemetrySidecar({ projectRoot, vm, enabled })
+  if (!telemetry.ok) return telemetry
+  if (!isLocalEgressProxy(vm.proxy)) {
+    const stopped = stopEgressProcess(projectRoot, vm.proxy?.id)
+    if (!stopped.ok) return { ok: false, action: 'egress_stop_failed', error: stopped.error }
+    const started = await ensureProxyEgress(projectRoot, vm.proxy)
+    if (!started?.ok) return { ok: false, action: 'egress_start_failed', error: started?.error || 'kin-egress failed' }
+  }
+  return { ...telemetry, egress: 'restarted' }
+}
 
 function sleep(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms))
@@ -64,6 +80,8 @@ export async function updateOneSlot(
     reloadFn = reloadSlotReady,
     collectFn = collectSlotIdentity,
     healthFn = rustKernelHealth,
+    telemetryFn,
+    telemetryEnabled,
     readyTimeoutMs = 15000,
   } = {},
 ) {
@@ -89,6 +107,22 @@ export async function updateOneSlot(
         return result
       }
     }
+    if (action === 'telemetry') {
+      const enabled =
+        telemetryEnabled === undefined ? vm.seed_policy?.telemetry_disabled === false : telemetryEnabled === true
+      const changed = await (telemetryFn || (vmNodeId(vm) ? restartRemoteServices : restartLocalServices))({
+        projectRoot,
+        vm: getVm(projectRoot, id) || vm,
+        telemetryEnabled: enabled,
+        enabled,
+      })
+      result.telemetry = changed
+      if (!changed?.ok) {
+        result.error = changed?.error || 'telemetry service update failed'
+        result.code = changed?.code || 'telemetry_update_failed'
+        return result
+      }
+    }
     if (action === 'collect' || action === 'roll') {
       const collected = await collectFn(projectRoot, getVm(projectRoot, id) || vm)
       result.collect = collected
@@ -108,7 +142,18 @@ export async function updateOneSlot(
 
 export async function runFleetUpdate(
   projectRoot,
-  { action = 'roll', ids = null, concurrency = 4, routing = {}, reloadFn, collectFn, healthFn, readyTimeoutMs } = {},
+  {
+    action = 'roll',
+    ids = null,
+    concurrency = 4,
+    routing = {},
+    reloadFn,
+    collectFn,
+    healthFn,
+    telemetryFn,
+    telemetryEnabled,
+    readyTimeoutMs,
+  } = {},
 ) {
   const nextAction = ACTIONS.has(action) ? action : 'roll'
   const conc = Math.max(1, Math.min(8, Number(concurrency) || 4))
@@ -120,6 +165,8 @@ export async function runFleetUpdate(
       reloadFn,
       collectFn,
       healthFn,
+      telemetryFn,
+      telemetryEnabled,
       readyTimeoutMs,
     }),
   )
diff --git a/src/lib/vm/slot-process-status.mjs b/src/lib/vm/slot-process-status.mjs
index 3e48b2173..f3c27882d 100644
--- a/src/lib/vm/slot-process-status.mjs
+++ b/src/lib/vm/slot-process-status.mjs
@@ -9,6 +9,7 @@ import { runtimeKind } from './runtime-kind.mjs'
 import { slotExecArgv } from './slot-exec.mjs'
 
 const exec = promisify(execFile)
+export const SLOT_WORKER_BIN = '/usr/local/bin/kin-worker'
 const PROBE = String.raw`
 set -eu
 main=$(tr '\000' '\n' < /proc/1/cmdline | sed -n '1p')
@@ -86,7 +87,7 @@ export async function ensureTelemetrySidecar({ projectRoot, vm, run = exec, time
     const target = { ...vm, runtime: { ...(vm.runtime || {}), container: slotContainerName({ vm }), type: kind } }
     await run(
       'docker',
-      slotExecArgv(target, ['/usr/local/bin/kin-worker', 'telemetry', '--config', '/run/kin/worker.json'], {
+      slotExecArgv(target, [SLOT_WORKER_BIN, 'telemetry', '--config', '/run/kin/worker.json'], {
         detach: true,
       }),
       { timeout: timeoutMs, maxBuffer: 4096, encoding: 'utf8', ...(env ? { env } : {}) },
@@ -96,3 +97,35 @@ export async function ensureTelemetrySidecar({ projectRoot, vm, run = exec, time
     return { ok: false, action: 'start_failed', error: String(error?.message || error) }
   }
 }
+
+/** Replace only the Go telemetry child; the slot container and Rust process stay up. */
+export async function restartTelemetrySidecar({ projectRoot, vm, enabled, run = exec, timeoutMs = 15_000 } = {}) {
+  if (!projectRoot || !isSafeSlotId(vm?.id)) return { ok: false, action: 'invalid_vm' }
+  const kind = runtimeKind(vm)
+  if (kind !== 'docker' && kind !== 'kvm') return { ok: false, action: 'unsupported_runtime' }
+  const env = slotHost(vm).dockerEnv()
+  const target = { ...vm, runtime: { ...(vm.runtime || {}), container: slotContainerName({ vm }), type: kind } }
+  const stop = 'pkill -TERM -x kin-worker 2>/dev/null || true'
+  try {
+    await run('docker', slotExecArgv(target, ['sh', '-c', stop]), {
+      timeout: timeoutMs,
+      maxBuffer: 4096,
+      encoding: 'utf8',
+      ...(env ? { env } : {}),
+    })
+    if (enabled !== true) return { ok: true, action: 'stopped' }
+    await run(
+      'docker',
+      slotExecArgv(target, [SLOT_WORKER_BIN, 'telemetry', '--config', '/run/kin/worker.json'], { detach: true }),
+      {
+        timeout: timeoutMs,
+        maxBuffer: 4096,
+        encoding: 'utf8',
+        ...(env ? { env } : {}),
+      },
+    )
+    return { ok: true, action: 'restarted' }
+  } catch (error) {
+    return { ok: false, action: 'restart_failed', error: String(error?.message || error) }
+  }
+}

From 8997953d7ee6c7f660aa5759cd56d94adeea8c6e Mon Sep 17 00:00:00 2001
From: ted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 17:18:08 +0800
Subject: [PATCH 03/12] =?UTF-8?q?feat(protocol):=20=E6=8C=89=E6=A8=A1?=
 =?UTF-8?q?=E5=9E=8B=E5=92=8C=E8=AF=B7=E6=B1=82=E4=BF=9D=E7=95=99=20auto?=
 =?UTF-8?q?=20compact=20=E7=AA=97=E5=8F=A3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

默认跟随请求模型，调用方窗口经内部字段送到当前 job，面板值可热配置。
---
 src/lib/admin/panel-api.mjs                  |  9 +++++
 src/lib/protocol/outbound-attempt.mjs        |  3 ++
 src/lib/protocol/seed-policy.mjs             | 10 ++++++
 src/lib/transport/rust-kernel-supervisor.mjs | 13 +++++++
 test/unit/go-worker-client.test.mjs          | 20 +++++++++++
 test/unit/kernel-router.test.mjs             |  2 ++
 web/src/features/settings/protocol-pane.tsx  | 37 ++++++++++++++++++--
 7 files changed, 92 insertions(+), 2 deletions(-)

diff --git a/src/lib/admin/panel-api.mjs b/src/lib/admin/panel-api.mjs
index 1351ee257..4a622e112 100644
--- a/src/lib/admin/panel-api.mjs
+++ b/src/lib/admin/panel-api.mjs
@@ -475,6 +475,12 @@ export function validatePersonaRoutingPatch(body = {}) {
   if (Object.prototype.hasOwnProperty.call(compat, 'cch_enabled') && typeof compat.cch_enabled !== 'boolean') {
     problems.push('cch_enabled 必须是布尔')
   }
+  if (Object.prototype.hasOwnProperty.call(compat, 'auto_compact_window') && compat.auto_compact_window != null) {
+    const windowTokens = Number(compat.auto_compact_window)
+    if (!Number.isInteger(windowTokens) || windowTokens < 100_000 || windowTokens > 1_000_000) {
+      problems.push('auto_compact_window 必须是 100000–1000000 的整数')
+    }
+  }
   if (
     compat.thinking_display != null &&
     compat.thinking_display !== '' &&
@@ -1406,6 +1412,9 @@ function presentCompatibility(compat) {
     .trim()
     .toLowerCase()
   out.thinking_display = display === 'passthrough' ? 'passthrough' : 'summarized'
+  const windowTokens = Number(out.auto_compact_window)
+  out.auto_compact_window =
+    Number.isInteger(windowTokens) && windowTokens >= 100_000 && windowTokens <= 1_000_000 ? windowTokens : null
   return out
 }
 
diff --git a/src/lib/protocol/outbound-attempt.mjs b/src/lib/protocol/outbound-attempt.mjs
index 95326c71b..48388bded 100644
--- a/src/lib/protocol/outbound-attempt.mjs
+++ b/src/lib/protocol/outbound-attempt.mjs
@@ -3,6 +3,7 @@
  * Tests compare envelopes from this module so admin paths cannot drift.
  */
 import { officialMessagesBody } from './anthropic-messages.mjs'
+import { callerAutoCompactWindow } from './seed-policy.mjs'
 import {
   prepareAnthropicRequest,
   rewriteToolNames,
@@ -195,6 +196,8 @@ export function prepareCliHopBody(
   if (requestContext?.purpose === 'auto_mode_classifier') return prepareClassifierBody(canonicalBody, { stream })
   if (preserveSystem) validateCacheBreakpoints(canonicalBody)
   let body = officialMessagesBody(canonicalBody, { stream })
+  const autoCompactWindow = callerAutoCompactWindow(canonicalBody)
+  if (autoCompactWindow != null) body.auto_compact_window = autoCompactWindow
   delete body.metadata
   if (!preserveSystem) {
     const leftover = stripCliOwnedSystem(body.system, { preserveCallerEnvironment })
diff --git a/src/lib/protocol/seed-policy.mjs b/src/lib/protocol/seed-policy.mjs
index 4d8de1743..d3b82dde5 100644
--- a/src/lib/protocol/seed-policy.mjs
+++ b/src/lib/protocol/seed-policy.mjs
@@ -117,6 +117,16 @@ export function buildSlotSettingsEnv(pol = {}, { timezone, locale, extra } = {})
   return out
 }
 
+export function callerAutoCompactWindow(body = {}) {
+  const sources = [body?.settings?.env, body?.claude_settings?.env, body?.env]
+  for (const source of sources) {
+    if (!source || typeof source !== 'object' || Array.isArray(source)) continue
+    const value = Number(source.CLAUDE_CODE_AUTO_COMPACT_WINDOW)
+    if (Number.isInteger(value) && value >= 100_000 && value <= 1_000_000) return value
+  }
+  return null
+}
+
 export function buildSeedSettingsEnv(pol = {}, extra = {}) {
   return buildSlotSettingsEnv(pol, { extra })
 }
diff --git a/src/lib/transport/rust-kernel-supervisor.mjs b/src/lib/transport/rust-kernel-supervisor.mjs
index 3c70bf3e4..4dd986d56 100644
--- a/src/lib/transport/rust-kernel-supervisor.mjs
+++ b/src/lib/transport/rust-kernel-supervisor.mjs
@@ -37,6 +37,11 @@ import {
 } from '../oauth/oauth-credentials.mjs'
 import { slotHost } from '../vm/slot-host.mjs'
 
+function normalizeAutoCompactWindow(value) {
+  const windowTokens = Number(value)
+  return Number.isInteger(windowTokens) && windowTokens >= 100_000 && windowTokens <= 1_000_000 ? windowTokens : null
+}
+
 const starts = new Map()
 const KVM_HEALTH_MS = { kvm: 120_000, tcg: 480_000 }
 
@@ -693,6 +698,13 @@ export function writeKernelConfig(
   const previousMax = Number(previous.max_request_bytes)
   const requestBytes = routing == null && previousMax > 0 ? previousMax : maxRequestBytes(routing)
   const cchEnabled = routing == null ? previous.cch_enabled !== false : routing?.compatibility?.cch_enabled !== false
+  const previousWindow = Number(previous.auto_compact_window)
+  const autoCompactWindow =
+    routing == null
+      ? Number.isInteger(previousWindow) && previousWindow >= 100_000 && previousWindow <= 1_000_000
+        ? previousWindow
+        : null
+      : normalizeAutoCompactWindow(routing?.compatibility?.auto_compact_window)
   const sessionIdleTtlSeconds =
     routing == null
       ? normalizeSessionIdleTtlSeconds(previous.session_idle_ttl_seconds)
@@ -726,6 +738,7 @@ export function writeKernelConfig(
     cli_version: OFFICIAL_CLI_VERSION,
     default_cache_ttl: defaultCacheTtl,
     cch_enabled: cchEnabled,
+    auto_compact_window: autoCompactWindow,
   }
 
   if (tz) config.timezone = tz
diff --git a/test/unit/go-worker-client.test.mjs b/test/unit/go-worker-client.test.mjs
index 43a1a32e1..98024a15a 100644
--- a/test/unit/go-worker-client.test.mjs
+++ b/test/unit/go-worker-client.test.mjs
@@ -14,6 +14,7 @@ import {
   restoreUncommittedHop,
   semanticStatusForStreamError,
 } from '../../src/lib/transport/go-worker-client.mjs'
+import { prepareCliHopBody } from '../../src/lib/protocol/outbound-attempt.mjs'
 import { extractOpenaiUsage } from '../../src/lib/protocol/openai-usage.mjs'
 import { callRustKernel, rustKernelHealth } from '../../src/lib/transport/rust-kernel-client.mjs'
 import { forwardApi, readApiJson } from '../../src/lib/transport/api-kernel-client.mjs'
@@ -164,6 +165,25 @@ test('cli-hop envelope keeps role=system turns that the VM betas do not declare'
   assert.deepEqual(out.body.system, body.system)
 })
 
+test('cli-hop keeps the caller compact window outside settings', () => {
+  const prepared = prepareCliHopBody({
+    model: 'claude-opus-5-5',
+    messages: [{ role: 'user', content: 'hi' }],
+    settings: { theme: 'light', env: { CLAUDE_CODE_AUTO_COMPACT_WINDOW: '1000000', TZ: 'UTC' } },
+  })
+  const out = finalizeWorkerPayload({
+    body: prepared,
+    reqHeaders: {},
+    exec: { homeDir: '', vm: { claude: { mode: 'setup-token', scope: 'user:inference' } } },
+    identity: null,
+    cliHop: true,
+  })
+  assert.equal(prepared.settings, undefined)
+  assert.equal(out.body.settings, undefined)
+  assert.equal(out.body.env, undefined)
+  assert.equal(out.body.auto_compact_window, 1000000)
+})
+
 test('setup-token cli-hop summarizes hidden thinking by default and keeps updates when passthrough', () => {
   const exec = { homeDir: '', vm: { claude: { mode: 'setup-token', scope: 'user:inference' } } }
   const updates = finalizeWorkerPayload({
diff --git a/test/unit/kernel-router.test.mjs b/test/unit/kernel-router.test.mjs
index cc7d880c9..4d6706486 100644
--- a/test/unit/kernel-router.test.mjs
+++ b/test/unit/kernel-router.test.mjs
@@ -631,6 +631,7 @@ test('writeKernelConfig separates container paths from host socket paths', () =>
   assert.equal(doc.https_proxy, undefined)
   assert.equal(doc.slots_per_worker, WRAP_SLOT_MAX)
   assert.equal(doc.default_cache_ttl, '1h')
+  assert.equal(doc.auto_compact_window, null)
   assert.match(written.socketPath.replace(/\\/g, '/'), /vms\/vm-09\/run\/kernel\.sock$/)
   assert.equal(fs.readFileSync(written.tokenPath, 'utf8').trim(), 'tok')
   const exec = { vmId: 'vm-09', homeDir: path.join(root, 'vms', 'vm-09', 'cli-home'), vm: { id: 'vm-09' } }
@@ -702,6 +703,7 @@ test('writeKernelConfig cli-hop writes local_cli without secrets', () => {
   assert.equal(doc.system_layout, 'identity')
   assert.equal(doc.cli_version, OFFICIAL_CLI_VERSION)
   assert.equal(doc.default_cache_ttl, '5m')
+  assert.equal(doc.auto_compact_window, null)
   assert.equal(doc.timezone, 'America/New_York')
   assert.equal(doc.proxy_url, '')
   assert.equal(doc.proxy_required, false)
diff --git a/web/src/features/settings/protocol-pane.tsx b/web/src/features/settings/protocol-pane.tsx
index 1e38d8cf7..1ccbcdd26 100644
--- a/web/src/features/settings/protocol-pane.tsx
+++ b/web/src/features/settings/protocol-pane.tsx
@@ -3,7 +3,7 @@ import {
   SESSION_IDLE_TTL_SECONDS_MAX,
   SESSION_IDLE_TTL_SECONDS_MIN,
 } from '@/types/panel-routing'
-import { Brain, Check, Clock3, Database, Hash, ShieldCheck } from 'lucide-react'
+import { Brain, Check, Clock3, Database, Hash, Scaling, ShieldCheck } from 'lucide-react'
 import {
   cacheTtlFromCompat,
   detectProxiedOfficialCcFromCompat,
@@ -32,6 +32,12 @@ const CLAUDE_CODE_FINGERPRINT: [string, string][] = [
   ['计费块', 'cc_version = UA 版本'],
 ]
 
+function autoCompactWindowValue(value: unknown) {
+  const tokens = Number(value)
+  if (tokens === 200_000 || tokens === 500_000 || tokens === 1_000_000) return String(tokens)
+  return 'model'
+}
+
 export function ProtocolPane({
   compat,
   inference,
@@ -188,7 +194,34 @@ export function ProtocolPane({
         </SettingRow>
       </PaneSection>
       <PaneSection
-        icon={Hash}
+        icon={Scaling}
+        title='Auto compact 窗口'
+        desc='默认跟随请求模型。显式值替换模型窗口，请求里的 CLAUDE_CODE_AUTO_COMPACT_WINDOW 仍优先。'
+      >
+        <SettingRow
+          label='窗口'
+          desc='跟随模型时，Opus / Sonnet / Haiku 5.x 使用 1M，其余模型使用 200K。'
+        >
+          <ChipGroup
+            label='Auto compact 窗口'
+            value={autoCompactWindowValue(compat.auto_compact_window)}
+            options={[
+              ['model', '跟随模型'],
+              ['200000', '200K'],
+              ['500000', '500K'],
+              ['1000000', '1M'],
+            ]}
+            onChange={(value) =>
+              onCompatChange({
+                ...compat,
+                auto_compact_window: value === 'model' ? null : Number(value),
+              })
+            }
+          />
+        </SettingRow>
+      </PaneSection>
+      <PaneSection
+        icon={Clock3}
         title='CCH 统一附加'
         desc='出站 billing 的 cch。开启后缺失也补，不区分试用或订阅。'
       >

From bb0a63c2f165e00f05ad2ea3c1699ea96fcbf6d3 Mon Sep 17 00:00:00 2001
From: ted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 17:21:41 +0800
Subject: [PATCH 04/12] =?UTF-8?q?fix(protocol):=20=E6=B8=85=E7=90=86=20set?=
 =?UTF-8?q?tings=20=E5=89=8D=E4=BF=9D=E7=95=99=20auto=20compact=20?=
 =?UTF-8?q?=E7=AA=97=E5=8F=A3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

窗口在入站清理前提取，再经内部字段进入 native body。
---
 src/lib/protocol/handle-protocol.mjs  |  5 ++++-
 src/lib/protocol/outbound-attempt.mjs |  8 +++++---
 test/unit/go-worker-client.test.mjs   | 10 +++++++---
 3 files changed, 16 insertions(+), 7 deletions(-)

diff --git a/src/lib/protocol/handle-protocol.mjs b/src/lib/protocol/handle-protocol.mjs
index 68e698084..8a3689db7 100644
--- a/src/lib/protocol/handle-protocol.mjs
+++ b/src/lib/protocol/handle-protocol.mjs
@@ -35,7 +35,7 @@ import {
   createClaudeMessageAssembler,
   applyClaudeSSELineToMessage,
 } from './convert.mjs'
-import { sanitizeInboundBody, defaultSeedPolicy } from './seed-policy.mjs'
+import { sanitizeInboundBody, defaultSeedPolicy, callerAutoCompactWindow } from './seed-policy.mjs'
 import { fingerprintRequest } from './client-fingerprint.mjs'
 import { validateOfficialModel } from './models.mjs'
 import { handleCodexProtocol, handleCodexSearch } from './handle-codex.mjs'
@@ -618,11 +618,13 @@ export function createHandleProtocol(deps) {
       )
     }
 
+    const autoCompactWindow = callerAutoCompactWindow(inbound)
     let ctx = {
       path: pathName,
       protocol,
       body: sanitizeInboundBody(inbound, defaultSeedPolicy()),
       headers: { ...req.headers },
+      autoCompactWindow,
     }
     ctx = applyIntercept(cfg.intercept.rules, 'before_convert', ctx)
     const bodyCheck = validateRequestBody(protocol, ctx.body)
@@ -1272,6 +1274,7 @@ export function createHandleProtocol(deps) {
               preserveSystem: officialPassthrough,
               preserveThinkingBlocks: preserveCliHopThinkingBlocks,
               preserveCallerEnvironment,
+              autoCompactWindow: ctx.autoCompactWindow,
             })
             hopBody = await materializeRemoteImageSources(hopBody)
             if (panelRewrite) {
diff --git a/src/lib/protocol/outbound-attempt.mjs b/src/lib/protocol/outbound-attempt.mjs
index 48388bded..7e9be7668 100644
--- a/src/lib/protocol/outbound-attempt.mjs
+++ b/src/lib/protocol/outbound-attempt.mjs
@@ -3,7 +3,6 @@
  * Tests compare envelopes from this module so admin paths cannot drift.
  */
 import { officialMessagesBody } from './anthropic-messages.mjs'
-import { callerAutoCompactWindow } from './seed-policy.mjs'
 import {
   prepareAnthropicRequest,
   rewriteToolNames,
@@ -191,13 +190,16 @@ export function prepareCliHopBody(
     preserveSystem = false,
     preserveThinkingBlocks = false,
     preserveCallerEnvironment = false,
+    autoCompactWindow = null,
   } = {},
 ) {
   if (requestContext?.purpose === 'auto_mode_classifier') return prepareClassifierBody(canonicalBody, { stream })
   if (preserveSystem) validateCacheBreakpoints(canonicalBody)
   let body = officialMessagesBody(canonicalBody, { stream })
-  const autoCompactWindow = callerAutoCompactWindow(canonicalBody)
-  if (autoCompactWindow != null) body.auto_compact_window = autoCompactWindow
+  const windowTokens = Number(autoCompactWindow)
+  if (Number.isInteger(windowTokens) && windowTokens >= 100_000 && windowTokens <= 1_000_000) {
+    body.auto_compact_window = windowTokens
+  }
   delete body.metadata
   if (!preserveSystem) {
     const leftover = stripCliOwnedSystem(body.system, { preserveCallerEnvironment })
diff --git a/test/unit/go-worker-client.test.mjs b/test/unit/go-worker-client.test.mjs
index 98024a15a..f82cf787b 100644
--- a/test/unit/go-worker-client.test.mjs
+++ b/test/unit/go-worker-client.test.mjs
@@ -15,6 +15,7 @@ import {
   semanticStatusForStreamError,
 } from '../../src/lib/transport/go-worker-client.mjs'
 import { prepareCliHopBody } from '../../src/lib/protocol/outbound-attempt.mjs'
+import { callerAutoCompactWindow, defaultSeedPolicy, sanitizeInboundBody } from '../../src/lib/protocol/seed-policy.mjs'
 import { extractOpenaiUsage } from '../../src/lib/protocol/openai-usage.mjs'
 import { callRustKernel, rustKernelHealth } from '../../src/lib/transport/rust-kernel-client.mjs'
 import { forwardApi, readApiJson } from '../../src/lib/transport/api-kernel-client.mjs'
@@ -166,11 +167,14 @@ test('cli-hop envelope keeps role=system turns that the VM betas do not declare'
 })
 
 test('cli-hop keeps the caller compact window outside settings', () => {
-  const prepared = prepareCliHopBody({
+  const inbound = {
     model: 'claude-opus-5-5',
     messages: [{ role: 'user', content: 'hi' }],
     settings: { theme: 'light', env: { CLAUDE_CODE_AUTO_COMPACT_WINDOW: '1000000', TZ: 'UTC' } },
-  })
+  }
+  const autoCompactWindow = callerAutoCompactWindow(inbound)
+  const sanitized = sanitizeInboundBody(inbound, defaultSeedPolicy())
+  const prepared = prepareCliHopBody(sanitized, { autoCompactWindow })
   const out = finalizeWorkerPayload({
     body: prepared,
     reqHeaders: {},
@@ -178,7 +182,7 @@ test('cli-hop keeps the caller compact window outside settings', () => {
     identity: null,
     cliHop: true,
   })
-  assert.equal(prepared.settings, undefined)
+  assert.equal(sanitized.settings, undefined)
   assert.equal(out.body.settings, undefined)
   assert.equal(out.body.env, undefined)
   assert.equal(out.body.auto_compact_window, 1000000)

From a467c45c2cf96500765949be34543a731e51224a Mon Sep 17 00:00:00 2001
From: ted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 17:27:10 +0800
Subject: [PATCH 05/12] =?UTF-8?q?fix(web):=20=E5=8E=BB=E6=8E=89=E5=8D=8F?=
 =?UTF-8?q?=E8=AE=AE=E9=A1=B5=E6=9C=AA=E4=BD=BF=E7=94=A8=E7=9A=84=E5=9B=BE?=
 =?UTF-8?q?=E6=A0=87=E5=AF=BC=E5=85=A5?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 web/src/features/settings/protocol-pane.tsx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/src/features/settings/protocol-pane.tsx b/web/src/features/settings/protocol-pane.tsx
index 1ccbcdd26..4a2b13e4f 100644
--- a/web/src/features/settings/protocol-pane.tsx
+++ b/web/src/features/settings/protocol-pane.tsx
@@ -3,7 +3,7 @@ import {
   SESSION_IDLE_TTL_SECONDS_MAX,
   SESSION_IDLE_TTL_SECONDS_MIN,
 } from '@/types/panel-routing'
-import { Brain, Check, Clock3, Database, Hash, Scaling, ShieldCheck } from 'lucide-react'
+import { Brain, Check, Clock3, Database, Scaling, ShieldCheck } from 'lucide-react'
 import {
   cacheTtlFromCompat,
   detectProxiedOfficialCcFromCompat,

From acb82f4b5191308b43133063b8117a5bf710a6fd Mon Sep 17 00:00:00 2001
From: ted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 17:38:34 +0800
Subject: [PATCH 06/12] =?UTF-8?q?test(protocol):=20=E7=A1=AE=E8=AE=A4?=
 =?UTF-8?q?=E6=B8=85=E7=90=86=E5=90=8E=E7=9A=84=20body=20=E4=B8=8D?=
 =?UTF-8?q?=E5=86=8D=E6=90=BA=E5=B8=A6=20compact=20=E7=AA=97=E5=8F=A3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

窗口必须在 settings 删除前提取，再传给 native body。
---
 test/unit/go-worker-client.test.mjs | 1 +
 1 file changed, 1 insertion(+)

diff --git a/test/unit/go-worker-client.test.mjs b/test/unit/go-worker-client.test.mjs
index f82cf787b..388d601a8 100644
--- a/test/unit/go-worker-client.test.mjs
+++ b/test/unit/go-worker-client.test.mjs
@@ -174,6 +174,7 @@ test('cli-hop keeps the caller compact window outside settings', () => {
   }
   const autoCompactWindow = callerAutoCompactWindow(inbound)
   const sanitized = sanitizeInboundBody(inbound, defaultSeedPolicy())
+  assert.equal(callerAutoCompactWindow(sanitized), null)
   const prepared = prepareCliHopBody(sanitized, { autoCompactWindow })
   const out = finalizeWorkerPayload({
     body: prepared,

From ef9a7309e99e63b4ca1f4cf2e542ee2b95bb5942 Mon Sep 17 00:00:00 2001
From: ted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 19:12:23 +0800
Subject: [PATCH 07/12] feat(vm): migrate legacy containers for service updates

---
 deploy/install.sh                        |   4 +-
 docs/TELEMETRY.md                        |  10 ++
 scripts/migrate-legacy-cluster-slots.mjs |  24 ++++
 scripts/panel-upgrade.sh                 |   6 +-
 src/lib/cluster/docker-remote.mjs        |  10 ++
 src/lib/cluster/remote-slot-files.mjs    |   1 +
 src/lib/cluster/remote-slot.mjs          | 154 ++++++++++++++++++++++-
 test/unit/remote-slot-migration.test.mjs |  80 ++++++++++++
 8 files changed, 285 insertions(+), 4 deletions(-)
 create mode 100644 scripts/migrate-legacy-cluster-slots.mjs
 create mode 100644 test/unit/remote-slot-migration.test.mjs

diff --git a/deploy/install.sh b/deploy/install.sh
index 5c9761a66..0f3175070 100644
--- a/deploy/install.sh
+++ b/deploy/install.sh
@@ -682,7 +682,9 @@ start_stack() {
 refresh_slot_services() {
   # The control-plane image carries the freshly built Go binaries. Publish them
   # into persistent slot-bin mounts and restart only kin-worker/kin-egress.
-  if ! docker exec "$SERVICE_NAME" node /opt/vm2api/scripts/fleet-services.mjs; then
+  if ! docker exec "$SERVICE_NAME" test -f /opt/vm2api/scripts/fleet-services.mjs >/dev/null 2>&1; then
+    warn "控制面尚未包含 Go 服务刷新脚本；下次更新将重试服务刷新"
+  elif ! docker exec "$SERVICE_NAME" node /opt/vm2api/scripts/fleet-services.mjs; then
     warn "Go slot service refresh failed; VM containers were left untouched"
   fi
 }
diff --git a/docs/TELEMETRY.md b/docs/TELEMETRY.md
index 4920ccdb0..f9bdf716c 100644
--- a/docs/TELEMETRY.md
+++ b/docs/TELEMETRY.md
@@ -31,3 +31,13 @@ An update must verify the new binary hash and the replacement process before
 reporting success. A failed service restart is reported per slot so the old VM
 identity remains intact and can be rolled back by republishing the previous
 binary.
+
+For a controlled rollout, run `scripts/migrate-legacy-cluster-slots.mjs` in
+the control-plane container. Pass VM IDs after the root and concurrency
+arguments to limit the rollout. It performs the same migration used by the
+one-click installer: legacy slot and egress containers are stopped, renamed to
+`*-legacy-<timestamp>`, and kept as stopped rollback copies; replacement
+containers use the persistent `/opt/kin-live` mount. Container IDs therefore
+change, but the VM, credentials, `vms/`, routing, and network identity do not.
+After this one-time migration, subsequent updates atomically replace only the
+Go binaries in `slot-bin` and restart the service processes.
diff --git a/scripts/migrate-legacy-cluster-slots.mjs b/scripts/migrate-legacy-cluster-slots.mjs
new file mode 100644
index 000000000..3f5a275de
--- /dev/null
+++ b/scripts/migrate-legacy-cluster-slots.mjs
@@ -0,0 +1,24 @@
+#!/usr/bin/env node
+
+/**
+ * Migrate legacy cluster slot containers to the persistent Go-service mount.
+ * This never rebuilds a VM: the old container is renamed and retained as a
+ * stopped rollback copy, while the replacement reuses its image and settings.
+ */
+import { runFleetUpdate } from '../src/lib/vm/fleet-update.mjs'
+
+const root = process.argv[2] || process.env.KIN_PROJECT_ROOT || '/opt/vm2api'
+const concurrency = Number(process.argv[3] || process.env.KIN_FLEET_CONCURRENCY || 4)
+const ids = process.argv
+  .slice(4)
+  .flatMap((value) => String(value).split(','))
+  .map((value) => value.trim())
+  .filter(Boolean)
+
+const report = await runFleetUpdate(root, {
+  action: 'telemetry',
+  concurrency,
+  ids: ids.length ? ids : null,
+})
+console.log(JSON.stringify(report))
+if (report.failed_count) process.exitCode = 1
diff --git a/scripts/panel-upgrade.sh b/scripts/panel-upgrade.sh
index 69c538793..65fa1bb1c 100755
--- a/scripts/panel-upgrade.sh
+++ b/scripts/panel-upgrade.sh
@@ -139,7 +139,11 @@ while [ "$attempt" -lt 45 ]; do
   if probe verify "$TAG" "$BASELINE"; then
     [ -d .git ] || printf '%s\n' "${TAG#v}" > VERSION
     # Replace the Go worker/egress payloads in-place; no VM/container rebuild.
-    if ! docker exec "$CONTAINER" node /opt/vm2api/scripts/fleet-services.mjs; then
+    # Older control-plane images may not carry the helper yet; retry on the
+    # next image update instead of invalidating an otherwise verified upgrade.
+    if ! docker exec "$CONTAINER" test -f /opt/vm2api/scripts/fleet-services.mjs >/dev/null 2>&1; then
+      echo "Go service refresh helper is not present in the control plane; retry after the next image update" >&2
+    elif ! docker exec "$CONTAINER" node /opt/vm2api/scripts/fleet-services.mjs; then
       echo "Go service-only update failed; inspect the per-slot report" >&2
       exit 1
     fi
diff --git a/src/lib/cluster/docker-remote.mjs b/src/lib/cluster/docker-remote.mjs
index c53849a51..3c52116a0 100644
--- a/src/lib/cluster/docker-remote.mjs
+++ b/src/lib/cluster/docker-remote.mjs
@@ -328,6 +328,16 @@ export async function removeContainer(connect, id) {
   await dockerJson(connect, { method: 'DELETE', path: `${containerPath(id)}?force=1&v=1`, timeoutMs: 60_000 }, [204])
 }
 
+/** Preserve the container object for a rollback instead of deleting it. */
+export async function renameContainer(connect, id, name) {
+  if (!NAME_RE.test(String(name || ''))) throw new ClusterError(400, 'invalid_name', '容器名不合法')
+  await dockerJson(
+    connect,
+    { method: 'POST', path: `${containerPath(id)}/rename?name=${encodeURIComponent(name)}`, timeoutMs: 30_000 },
+    [204],
+  )
+}
+
 export async function containerLogs(connect, id, { tail = 200 } = {}) {
   const n = Math.min(5000, Math.max(1, Number.parseInt(tail, 10) || 200))
   const inspect = await dockerJson(connect, { path: `${containerPath(id)}/json` })
diff --git a/src/lib/cluster/remote-slot-files.mjs b/src/lib/cluster/remote-slot-files.mjs
index 1fc357f5c..6cd44e702 100644
--- a/src/lib/cluster/remote-slot-files.mjs
+++ b/src/lib/cluster/remote-slot-files.mjs
@@ -113,6 +113,7 @@ export async function pushSlotBinaries(vm, projectRoot, session = null) {
   const remote = `${remoteSlotDir(s.host, vm.id)}/slot-bin`
   const owner = ownerFor(s, vm)
   const pushed = []
+  const digest = crypto.createHash('sha256')
   for (const name of SLOT_BINARIES) {
     const local =
       process.env[name === 'kin-worker' ? 'KIN_WORKER_BIN' : 'KIN_EGRESS_BIN'] || path.join(projectRoot, 'bin', name)
diff --git a/src/lib/cluster/remote-slot.mjs b/src/lib/cluster/remote-slot.mjs
index 24bbd9f21..9ca2b9387 100644
--- a/src/lib/cluster/remote-slot.mjs
+++ b/src/lib/cluster/remote-slot.mjs
@@ -54,6 +54,7 @@ import {
   inspectNetworkOrNull,
   removeContainer,
   removeNetwork,
+  renameContainer,
 } from './docker-remote.mjs'
 import {
   awaitSlotImageBuild,
@@ -83,6 +84,110 @@ function failure(err, fallbackCode = 'remote_slot_failed') {
   return { ok: false, code: err?.code || fallbackCode, error: String(err?.message || err) }
 }
 
+const MIGRATION_CONFIG_KEYS = Object.freeze([
+  'Hostname', 'Domainname', 'User', 'AttachStdin', 'AttachStdout', 'AttachStderr', 'Tty', 'OpenStdin',
+  'StdinOnce', 'Env', 'Cmd', 'Image', 'Volumes', 'WorkingDir', 'Entrypoint', 'Labels', 'StopSignal',
+  'StopTimeout', 'Shell', 'ExposedPorts',
+])
+const MIGRATION_HOST_CONFIG_KEYS = Object.freeze([
+  'Binds', 'LogConfig', 'NetworkMode', 'PortBindings', 'PublishAllPorts', 'Privileged', 'ReadonlyRootfs',
+  'Dns', 'DnsOptions', 'DnsSearch', 'ExtraHosts', 'GroupAdd', 'IpcMode', 'Links', 'Memory', 'MemorySwap',
+  'MemoryReservation', 'MemorySwappiness', 'NanoCpus', 'CpuShares', 'CpuQuota', 'CpuPeriod', 'CpusetCpus',
+  'CpusetMems', 'PidsLimit', 'RestartPolicy', 'SecurityOpt', 'ShmSize', 'UTSMode', 'UsernsMode', 'PidMode',
+  'Devices', 'DeviceCgroupRules', 'Init', 'OomKillDisable', 'OomScoreAdj', 'Runtime', 'Sysctls', 'Tmpfs',
+  'VolumesFrom', 'CgroupnsMode',
+])
+
+function bindDestination(bind) {
+  const parts = String(bind || '').split(':')
+  return parts.length >= 2 ? parts[1] : ''
+}
+
+function replaceBindMount(binds, source, destination, removeDestinations = []) {
+  const remove = new Set([destination, ...removeDestinations])
+  const next = (binds || []).filter((bind) => !remove.has(bindDestination(bind)))
+  next.push(`${source}:${destination}:ro`)
+  return next
+}
+
+/** Build a replacement body from inspect data without changing VM-owned state. */
+export function legacyServiceContainerBody(
+  info,
+  { name, sourceDir, destination = LIVE_BIN, removeDestinations = [], command, layout } = {},
+) {
+  const body = {}
+  for (const key of MIGRATION_CONFIG_KEYS) {
+    if (info?.Config && info.Config[key] !== undefined) body[key] = structuredClone(info.Config[key])
+  }
+  body.Image = info?.Config?.Image
+  body.Labels = { ...(info?.Config?.Labels || {}) }
+  if (layout) body.Labels['kin.vm.layout'] = SLOT_LAYOUT
+  if (command) body.Cmd = command
+  const host = info?.HostConfig || {}
+  body.HostConfig = {}
+  for (const key of MIGRATION_HOST_CONFIG_KEYS) {
+    if (host[key] !== undefined) body.HostConfig[key] = structuredClone(host[key])
+  }
+  body.HostConfig.Binds = replaceBindMount(host.Binds, sourceDir, destination, removeDestinations)
+  const networkMode = String(host.NetworkMode || '')
+  const endpoint = info?.NetworkSettings?.Networks?.[networkMode]
+  if (endpoint && networkMode && !['host', 'none', 'bridge', 'default'].includes(networkMode)) {
+    body.NetworkingConfig = {
+      EndpointsConfig: {
+        [networkMode]: {
+          ...(endpoint.IPAddress ? { IPAMConfig: { IPv4Address: endpoint.IPAddress } } : {}),
+          ...(endpoint.Aliases ? { Aliases: endpoint.Aliases } : {}),
+        },
+      },
+    }
+  }
+  return body
+}
+
+function migrationBackupName(name, stamp = Date.now()) {
+  const suffix = `-legacy-${stamp}`
+  return `${String(name).slice(0, Math.max(1, 63 - suffix.length))}${suffix}`
+}
+
+function hasBindDestination(info, destination, source = '') {
+  return (info?.Mounts || []).some(
+    (mount) => mount.Destination === destination && mount.RW === false && (!source || mount.Source === source),
+  )
+}
+
+export function needsLegacyServiceMigration(info, { sourceDir = '' } = {}) {
+  return !!info && !hasBindDestination(info, LIVE_BIN, sourceDir)
+}
+
+export async function migrateRemoteContainer(docker, name, body, { wasRunning, ops = {} } = {}) {
+  const inspect = ops.inspect || inspectContainerOrNull
+  const action = ops.action || containerAction
+  const rename = ops.rename || renameContainer
+  const create = ops.create || createContainerRaw
+  const existing = await inspect(docker, name)
+  if (!existing) return { ok: true, action: 'absent', name }
+  const backup = migrationBackupName(name)
+  if (await inspect(docker, backup)) throw new Error(`legacy migration backup already exists: ${backup}`)
+  const oldId = existing.Id
+  if (wasRunning) await action(docker, name, 'stop', { t: 30 })
+  await rename(docker, name, backup)
+  let createdId = null
+  try {
+    createdId = await create(docker, name, body)
+    if (wasRunning) await action(docker, createdId, 'start')
+    const next = await inspect(docker, name)
+    if (!next || (wasRunning && !next.State?.Running) || (!wasRunning && next.State?.Running)) {
+      throw new Error(`migrated container did not preserve state: ${name}`)
+    }
+    return { ok: true, action: 'migrated', name, old_id: oldId, new_id: next.Id, backup, was_running: wasRunning }
+  } catch (error) {
+    if (createdId) await rename(docker, createdId, migrationBackupName(`${name}-failed`)).catch(() => {})
+    await rename(docker, backup, name).catch(() => {})
+    if (wasRunning) await action(docker, name, 'start').catch(() => {})
+    throw error
+  }
+}
+
 /**
  * Layout 1 kept `.claude` inside the guest-writable home. Carry its credential into
  * the host-owned `claude/` mount once, unless the new location already has one.
@@ -936,13 +1041,57 @@ export async function reloadRemoteSlot(vm, projectRoot, { routing } = {}) {
 }
 
 /** Update a node slot's Go services without recreating its VM/container. */
+export async function migrateRemoteServiceContainers(vm, projectRoot) {
+  try {
+    const session = await nodeSession(vmNodeId(vm))
+    const remoteDir = remoteSlotDir(session.host, vm.id)
+    const slotBin = `${remoteDir}/slot-bin`
+    const binaries = await pushSlotBinaries(vm, projectRoot, session)
+    const migrated = []
+    const slotName = vm.runtime?.container || containerName(vm.id)
+    const slot = await inspectContainerOrNull(session.docker, slotName)
+    if (needsLegacyServiceMigration(slot, { sourceDir: slotBin })) {
+      const body = legacyServiceContainerBody(slot, {
+        name: slotName,
+        sourceDir: slotBin,
+        removeDestinations: ['/usr/local/bin/kin-worker'],
+        layout: true,
+      })
+      migrated.push(
+        await migrateRemoteContainer(session.docker, slotName, body, {
+          wasRunning: !!slot.State?.Running,
+        }),
+      )
+    }
+    const egressName = slotEgressNames(vm.id).egress
+    const egress = await inspectContainerOrNull(session.docker, egressName)
+    if (needsLegacyServiceMigration(egress, { sourceDir: slotBin })) {
+      const body = legacyServiceContainerBody(egress, {
+        name: egressName,
+        sourceDir: slotBin,
+        removeDestinations: ['/usr/local/bin/kin-egress'],
+        command: [`${LIVE_BIN}/kin-egress`, '-config', '/etc/kin-egress/egress.json'],
+      })
+      migrated.push(
+        await migrateRemoteContainer(session.docker, egressName, body, {
+          wasRunning: !!egress.State?.Running,
+        }),
+      )
+    }
+    return { ok: true, action: migrated.length ? 'migrated' : 'unchanged', migrated, binary_digest: binaries.digest || null }
+  } catch (err) {
+    return failure(err, 'legacy_service_migration_failed')
+  }
+}
+
 export async function restartRemoteServices(vm, projectRoot, { telemetryEnabled } = {}) {
   try {
     const session = await nodeSession(vmNodeId(vm))
     const remoteDir = remoteSlotDir(session.host, vm.id)
     const slotDir = path.join(projectRoot, 'vms', vm.id)
     const name = vm.runtime?.container || containerName(vm.id)
-    const binaries = await pushSlotBinaries(vm, projectRoot, session)
+    const migration = await migrateRemoteServiceContainers(vm, projectRoot)
+    if (!migration.ok) return migration
     await pushSlotFiles(vm, slotDir, ['run', 'seed'], session)
     const target = { ...vm, runtime: { ...(vm.runtime || {}), container: name, type: runtimeKind(vm) } }
     const stop = 'pkill -TERM -x kin-worker 2>/dev/null || true'
@@ -958,7 +1107,8 @@ export async function restartRemoteServices(vm, projectRoot, { telemetryEnabled
       ok: true,
       action: telemetryEnabled === true ? 'restarted' : 'stopped',
       remote_dir: remoteDir,
-      binary_digest: binaries.digest || null,
+      binary_digest: migration.binary_digest,
+      migration: migration.migrated,
     }
   } catch (err) {
     return failure(err, 'service_update_failed')
diff --git a/test/unit/remote-slot-migration.test.mjs b/test/unit/remote-slot-migration.test.mjs
new file mode 100644
index 000000000..ed9861419
--- /dev/null
+++ b/test/unit/remote-slot-migration.test.mjs
@@ -0,0 +1,80 @@
+import test from 'node:test'
+import assert from 'node:assert/strict'
+import {
+  legacyServiceContainerBody,
+  migrateRemoteContainer,
+  needsLegacyServiceMigration,
+} from '../../src/lib/cluster/remote-slot.mjs'
+
+const oldSlot = {
+  Id: 'old-slot-id',
+  State: { Running: true },
+  Config: {
+    Image: 'vm2api/kin-slot-ubuntu:old',
+    User: '1000:1000',
+    Cmd: ['/opt/kin/kin-kernel', '--gateway-worker', '--config', '/run/kin/kernel.json'],
+    Labels: { 'kin.vm': '1', 'kin.vm.layout': '2' },
+  },
+  HostConfig: {
+    Binds: ['/srv/vm-05/run:/run/kin', '/srv/vm-05/old-worker:/usr/local/bin/kin-worker'],
+    NetworkMode: 'kin-05-net',
+    ReadonlyRootfs: true,
+    RestartPolicy: { Name: 'unless-stopped' },
+  },
+  NetworkSettings: { Networks: { 'kin-05-net': { IPAddress: '172.20.0.2', Aliases: ['kin-05'] } } },
+  Mounts: [{ Destination: '/run/kin', Source: '/srv/vm-05/run', RW: true }],
+}
+
+test('legacy container body replaces old service bind and preserves slot settings', () => {
+  const body = legacyServiceContainerBody(oldSlot, {
+    sourceDir: '/srv/vm-05/slot-bin',
+    removeDestinations: ['/usr/local/bin/kin-worker'],
+    layout: true,
+  })
+  assert.equal(body.Image, oldSlot.Config.Image)
+  assert.equal(body.User, oldSlot.Config.User)
+  assert.equal(body.Labels['kin.vm.layout'], '3')
+  assert.deepEqual(body.HostConfig.Binds, ['/srv/vm-05/run:/run/kin', '/srv/vm-05/slot-bin:/opt/kin-live:ro'])
+  assert.deepEqual(body.NetworkingConfig.EndpointsConfig['kin-05-net'].IPAMConfig, { IPv4Address: '172.20.0.2' })
+  assert.equal(needsLegacyServiceMigration(oldSlot, { sourceDir: '/srv/vm-05/slot-bin' }), true)
+})
+
+test('legacy egress command points at the persistent service mount', () => {
+  const body = legacyServiceContainerBody(oldSlot, {
+    sourceDir: '/srv/vm-05/slot-bin',
+    removeDestinations: ['/usr/local/bin/kin-egress'],
+    command: ['/opt/kin-live/kin-egress', '-config', '/etc/kin-egress/egress.json'],
+  })
+  assert.deepEqual(body.Cmd, ['/opt/kin-live/kin-egress', '-config', '/etc/kin-egress/egress.json'])
+})
+
+test('migration keeps the old container as a stopped rollback copy', async () => {
+  const state = new Map([['kin-05', structuredClone(oldSlot)]])
+  let sequence = 0
+  const inspect = async (_docker, name) => state.get(name) || null
+  const action = async (_docker, name, operation) => {
+    const value = [...state.values()].find((item) => item.Id === name) || state.get(name)
+    if (operation === 'stop') value.State.Running = false
+    if (operation === 'start') value.State.Running = true
+  }
+  const rename = async (_docker, from, to) => {
+    const value = state.get(from)
+    state.delete(from)
+    state.set(to, value)
+  }
+  const create = async (_docker, name, body) => {
+    const id = `new-${++sequence}`
+    state.set(name, { Id: id, State: { Running: false }, Config: body, Mounts: [{ Destination: '/opt/kin-live', RW: false }] })
+    return id
+  }
+  const result = await migrateRemoteContainer(
+    {},
+    'kin-05',
+    legacyServiceContainerBody(oldSlot, { sourceDir: '/srv/vm-05/slot-bin', layout: true }),
+    { wasRunning: true, ops: { inspect, action, rename, create } },
+  )
+  assert.equal(result.ok, true)
+  assert.equal(result.action, 'migrated')
+  assert.equal(state.get('kin-05').State.Running, true)
+  assert.equal(state.get(result.backup).State.Running, false)
+})

From 09a125fc8ba55baab1ed1d273d91062036e26f83 Mon Sep 17 00:00:00 2001
From: dofastted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 19:15:51 +0800
Subject: [PATCH 08/12] fix(vm): restart kin-egress after its binary is
 replaced

A replaced helper keeps the old inode and the listen port. Ownership now
treats that process as down and the next start or fleet refresh stops every
helper bound to the proxy config, including one the pidfile no longer names.
---
 src/lib/vm/egress.mjs     | 121 ++++++++++++++++++++++++++++----------
 test/unit/egress.test.mjs |  71 +++++++++++++++++-----
 2 files changed, 146 insertions(+), 46 deletions(-)

diff --git a/src/lib/vm/egress.mjs b/src/lib/vm/egress.mjs
index 8068cd158..01ba5a609 100644
--- a/src/lib/vm/egress.mjs
+++ b/src/lib/vm/egress.mjs
@@ -243,24 +243,64 @@ function readPid(file) {
   }
 }
 
-function ownsEgressProcess(pid, configPath) {
+function processExe(pid) {
+  const exe = fs.readlinkSync(`/proc/${pid}/exe`)
+  const deleted = exe.endsWith(' (deleted)')
+  return { path: deleted ? exe.slice(0, -' (deleted)'.length) : exe, deleted }
+}
+
+function ownsEgressProcess(pid, configPath, { allowDeleted = false } = {}) {
   if (!pidAlive(pid)) return false
   try {
     // PID files survive container restarts; a live PID may belong to another
     // process or another proxy. Verify both before reusing or signaling it.
-    const exe = fs.readlinkSync(`/proc/${pid}/exe`).replace(/ \(deleted\)$/, '')
+    // A replaced binary keeps the old inode in this process. Reusing it leaves
+    // the new file unrun and its listen port permanently busy.
+    const exe = processExe(pid)
+    if (exe.deleted && !allowDeleted) return false
     const args = fs.readFileSync(`/proc/${pid}/cmdline`, 'utf8').split('\0')
     const configIndex = args.indexOf('-config')
-    if (path.basename(exe) !== 'kin-egress' || configIndex <= 0 || !args[configIndex + 1]) return false
+    if (path.basename(exe.path) !== 'kin-egress' || configIndex <= 0 || !args[configIndex + 1]) return false
     const argument = args[configIndex + 1]
     const actualConfig = path.isAbsolute(argument)
       ? path.resolve(argument)
       : path.resolve(fs.readlinkSync(`/proc/${pid}/cwd`), argument)
-    return actualConfig === path.resolve(configPath)
+    return path.normalize(actualConfig) === path.normalize(path.resolve(configPath))
   } catch {
     return false
   }
 }
+
+function egressProcessPids() {
+  if (process.platform !== 'linux') return []
+  const marker = Buffer.from('/kin-egress')
+  const deleted = Buffer.from(' (deleted)')
+  const pids = []
+  for (const name of fs.readdirSync('/proc')) {
+    if (!/^[1-9][0-9]*$/.test(name)) continue
+    let exe
+    try {
+      exe = fs.readlinkSync(`/proc/${name}/exe`)
+    } catch {
+      continue
+    }
+    const bytes = Buffer.from(exe)
+    if (!bytes.includes(marker)) continue
+    const end = bytes.subarray(bytes.length - deleted.length).equals(deleted)
+      ? bytes.length - deleted.length
+      : bytes.length
+    if (path.basename(bytes.subarray(0, end).toString('utf8')) !== 'kin-egress') continue
+    pids.push(Number(name))
+  }
+  return pids
+}
+
+function staleEgressPids(configPath, exceptPid = 0) {
+  const wanted = path.resolve(configPath)
+  return egressProcessPids().filter(
+    (pid) => pid !== exceptPid && ownsEgressProcess(pid, wanted, { allowDeleted: true }),
+  )
+}
 export function inspectEgressNetwork(proxyId, run = docker) {
   const name = networkName(proxyId)
   if (!name) return null
@@ -421,7 +461,8 @@ export async function startEgressProcess({
   const listenTcp = `${listenHost}:${tcpPort}`
   const listenDns = `${listenHost}:${dnsPort}`
   const existing = readPid(pidFile)
-  if (ownsEgressProcess(existing, cfgPath)) {
+  const configMatches = ownsEgressProcess(existing, cfgPath)
+  if (configMatches) {
     try {
       const old = JSON.parse(fs.readFileSync(cfgPath, 'utf8'))
       if (
@@ -430,24 +471,25 @@ export async function startEgressProcess({
         old.proxy_url === proxyUrl &&
         (old.dns_upstream || '') === dnsUpstream &&
         JSON.stringify(old.dns_empty_types || []) === JSON.stringify(dnsEmptyTypes) &&
-        !!old.domain_forward === !!domainForward
+        !!old.domain_forward === !!domainForward &&
+        staleEgressPids(cfgPath, existing).length === 0
       ) {
         return { ok: true, pid: existing, reused: true, configPath: cfgPath }
       }
     } catch {}
-    try {
-      process.kill(existing, 'SIGTERM')
-    } catch {}
-    const stopped = await waitEgressExit(existing)
-    if (!stopped.ok) return { ok: false, error: stopped.error, pid: existing }
-    if (tcpPort > 0) {
-      const portFree = await waitPortReleased(listenHost, tcpPort)
-      if (!portFree.ok) return { ok: false, error: portFree.error, pid: existing }
-    }
-    if (dnsPort > 0) {
-      const dnsFree = await waitPortReleased(listenHost, dnsPort)
-      if (!dnsFree.ok) return { ok: false, error: dnsFree.error, pid: existing }
-    }
+  }
+  const superseded = [...new Set([...(configMatches ? [existing] : []), ...staleEgressPids(cfgPath)])]
+  for (const pid of superseded) {
+    const stopped = await stopOwnedEgress(pid)
+    if (!stopped.ok) return { ok: false, error: stopped.error, pid }
+  }
+  if (tcpPort > 0) {
+    const portFree = await waitPortReleased(listenHost, tcpPort)
+    if (!portFree.ok) return { ok: false, error: portFree.error, pid: superseded[0] || existing }
+  }
+  if (dnsPort > 0) {
+    const dnsFree = await waitPortReleased(listenHost, dnsPort)
+    if (!dnsFree.ok) return { ok: false, error: dnsFree.error, pid: superseded[0] || existing }
   }
   if (!fs.existsSync(bin)) {
     return { ok: false, error: `kin-egress binary not found: ${bin}` }
@@ -471,15 +513,17 @@ export async function startEgressProcess({
 export function stopEgressProcess(projectRoot, proxyId) {
   const dir = egressRunDir(projectRoot, proxyId)
   const pidFile = path.join(dir, 'egress.pid')
-  const pid = readPid(pidFile)
-  if (ownsEgressProcess(pid, path.join(dir, 'egress.json'))) {
+  const cfgPath = path.join(dir, 'egress.json')
+  const recorded = readPid(pidFile)
+  const pids = [...new Set([...staleEgressPids(cfgPath), ...(ownsEgressProcess(recorded, cfgPath) ? [recorded] : [])])]
+  for (const pid of pids) {
     try {
       process.kill(pid, 'SIGTERM')
     } catch (error) {
       if (error.code !== 'ESRCH') return { ok: false, error: `egress_stop_failed: ${error.code || error.message}` }
     }
     // Keep the PID while termination is pending so policy reconciliation can verify/retry it.
-    if (ownsEgressProcess(pid, path.join(dir, 'egress.json'))) return { ok: true }
+    if (ownsEgressProcess(pid, cfgPath, { allowDeleted: true })) return { ok: true }
   }
   try {
     fs.rmSync(pidFile, { force: true })
@@ -489,6 +533,15 @@ export function stopEgressProcess(projectRoot, proxyId) {
   return { ok: true }
 }
 
+async function stopOwnedEgress(pid) {
+  try {
+    process.kill(pid, 'SIGTERM')
+  } catch (error) {
+    if (error.code !== 'ESRCH') return { ok: false, error: `egress_stop_failed: ${error.code || error.message}` }
+  }
+  return waitEgressExit(pid)
+}
+
 export function inspectEgressProcess(projectRoot, proxyId) {
   const dir = egressRunDir(projectRoot, proxyId)
   const pid = readPid(path.join(dir, 'egress.pid'))
@@ -606,26 +659,32 @@ function spawnDetachedEgress(bin, cfgPath) {
   })
 }
 
-function portListening(host, port) {
+function portListening(host, port, ownerPid = 0) {
   const h = host || '127.0.0.1'
   // A TCP connect is traffic to the transparent forwarder, not a passive
   // readiness check. Inspect LISTEN sockets without entering its data path.
-  const r = sh(['ss', '-H', '-ltn', `sport = :${Number(port)}`], { timeout: 2000 })
+  const probe = ownerPid
+    ? ['ss', '-H', '-ltnp', `sport = :${Number(port)}`]
+    : ['ss', '-H', '-ltn', `sport = :${Number(port)}`]
+  const r = sh(probe, { timeout: 2000 })
   return (
     r.ok &&
     r.stdout.split('\n').some((line) => {
-      const local = line.trim().split(/\s+/)[3]
-      return (
+      const fields = line.trim().split(/\s+/)
+      const local = fields[3]
+      const addressMatches =
         local === `${h}:${port}` || local === `0.0.0.0:${port}` || local === `*:${port}` || local === `[::]:${port}`
-      )
+      if (!addressMatches) return false
+      if (!ownerPid) return true
+      return new RegExp(`pid=${ownerPid}(?:\\D|$)`).test(fields.at(-1) || '')
     })
   )
 }
 
-function waitListen(host, port, timeoutMs = 8000) {
+function waitListen(host, port, timeoutMs = 8000, ownerPid = 0) {
   const start = Date.now()
   while (Date.now() - start < timeoutMs) {
-    if (portListening(host, port)) return true
+    if (portListening(host, port, ownerPid)) return true
     sleepMsSync(100)
   }
   return false
@@ -719,8 +778,8 @@ async function startProxyEgress(
     ...(bin ? { bin } : {}),
   })
   if (!started.ok) return started
-  if (!waitListen(listenHost, ports.tcp))
-    return { ok: false, error: `kin-egress ${listenHost}:${ports.tcp} did not listen` }
+  if (!waitListen(listenHost, ports.tcp, 8000, ports.tcp > 0 ? started.pid : 0))
+    return { ok: false, error: `kin-egress ${listenHost}:${ports.tcp} did not listen`, pid: started.pid }
   const rules = applyIptables(plan, runIptables)
   if (!rules.ok) {
     stopEgressProcess(projectRoot, proxyId)
diff --git a/test/unit/egress.test.mjs b/test/unit/egress.test.mjs
index d6e26c9a8..5cd66da5e 100644
--- a/test/unit/egress.test.mjs
+++ b/test/unit/egress.test.mjs
@@ -39,14 +39,22 @@ import { hostProxyUrlForVm } from '../../src/lib/vm/slot-host.mjs'
 // Process-ownership tests need the native helper so /proc/<pid>/exe identifies it.
 const egressBin = process.env.KIN_EGRESS_BIN || path.resolve(import.meta.dirname, '../../bin/kin-egress')
 
-async function waitForProcess(predicate) {
-  for (let i = 0; i < 100; i++) {
+async function waitForProcess(predicate, attempts = 100) {
+  for (let i = 0; i < attempts; i++) {
     if (predicate()) return
-    await new Promise((resolve) => setTimeout(resolve, 10))
+    await new Promise((resolve) => setTimeout(resolve, 50))
   }
   assert.fail('process state did not converge')
 }
 
+async function reservePort() {
+  const listener = net.createServer()
+  await new Promise((resolve) => listener.listen(0, '127.0.0.1', resolve))
+  const port = listener.address().port
+  await new Promise((resolve) => listener.close(resolve))
+  return port
+}
+
 function egressFixture(t, proxyId = 'px-process') {
   const root = fs.mkdtempSync(path.join(os.tmpdir(), 'kin-eg-process-'))
   const dir = egressRunDir(root, proxyId)
@@ -224,27 +232,60 @@ test('an egress helper can be reused, replaced and stopped only by its own proxy
   assert.equal(fs.existsSync(fx.pidFile), false)
 })
 
-test('a running egress remains identifiable after its binary was replaced', {
+test('a replaced egress binary is restarted onto the new file', {
   skip: process.platform !== 'linux',
 }, async (t) => {
   const fx = egressFixture(t)
   const bin = path.join(fx.root, 'kin-egress')
+  const replacement = path.join(fx.root, 'kin-egress-next')
   fs.copyFileSync(egressBin, bin)
+  fs.copyFileSync(egressBin, replacement)
   fs.chmodSync(bin, 0o755)
+  fs.chmodSync(replacement, 0o755)
   const started = await fx.start({ bin })
-  await waitForProcess(() => {
-    try {
-      return fs.readlinkSync(`/proc/${started.pid}/exe`) === bin
-    } catch {
-      return false
-    }
-  })
+  await waitForProcess(() => inspectEgressProcess(fx.root, fx.base.proxyId).ok)
   fs.unlinkSync(bin)
   assert.match(fs.readlinkSync(`/proc/${started.pid}/exe`), / \(deleted\)$/)
-  assert.equal(inspectEgressProcess(fx.root, fx.base.proxyId).ok, true)
-  assert.equal((await fx.start({ bin })).reused, true)
-  assert.equal(stopEgressProcess(fx.root, fx.base.proxyId).ok, true)
+  assert.equal(inspectEgressProcess(fx.root, fx.base.proxyId).ok, false)
+  const restarted = await fx.start({ bin: replacement })
+  assert.equal(restarted.ok, true, restarted.error)
+  assert.equal(restarted.reused, false)
+  assert.notEqual(restarted.pid, started.pid)
   await waitForProcess(() => !fs.existsSync(`/proc/${started.pid}`))
+  let exe = 'missing'
+  try {
+    exe = fs.readlinkSync(`/proc/${restarted.pid}/exe`)
+  } catch (error) {
+    exe = error.code || 'gone'
+  }
+  assert.equal(exe, replacement, JSON.stringify({ old: started.pid, next: restarted.pid, exe }))
+  assert.equal(stopEgressProcess(fx.root, fx.base.proxyId).ok, true)
+})
+
+test('a stale pidfile does not hide an egress process still holding its port', {
+  skip: process.platform !== 'linux',
+}, async (t) => {
+  const fx = egressFixture(t)
+  const orphanBin = path.join(fx.root, 'kin-egress')
+  fs.copyFileSync(egressBin, orphanBin)
+  fs.chmodSync(orphanBin, 0o755)
+  const port = await reservePort()
+  const orphan = await fx.start({ bin: orphanBin, tcpPort: port, dnsPort: 0 })
+  assert.equal(orphan.ok, true, orphan.error)
+  await waitForProcess(() => inspectEgressProcess(fx.root, fx.base.proxyId).ok)
+  fs.unlinkSync(orphanBin)
+  fs.writeFileSync(fx.pidFile, '999999999\n')
+  assert.match(fs.readlinkSync(`/proc/${orphan.pid}/exe`), / \(deleted\)$/)
+  assert.equal(inspectEgressProcess(fx.root, fx.base.proxyId).ok, false)
+  const recovered = await fx.start({ tcpPort: port, dnsPort: 0 })
+  assert.equal(recovered.ok, true, recovered.error)
+  assert.equal(recovered.reused, false)
+  assert.notEqual(recovered.pid, orphan.pid)
+  await waitForProcess(() => !fs.existsSync(`/proc/${orphan.pid}`))
+  assert.equal(inspectEgressProcess(fx.root, fx.base.proxyId).pid, recovered.pid)
+  assert.equal(Number(fs.readFileSync(fx.pidFile, 'utf8')), recovered.pid)
+  assert.equal(JSON.parse(fs.readFileSync(fx.configPath, 'utf8')).listen_tcp, `127.0.0.1:${port}`)
+  assert.equal(stopEgressProcess(fx.root, fx.base.proxyId).ok, true)
 })
 
 test('redundant separators in an egress config path do not change its owner', {
@@ -264,7 +305,7 @@ test('redundant separators in an egress config path do not change its owner', {
   await once(child, 'spawn')
   fs.writeFileSync(fx.pidFile, String(child.pid))
   assert.equal(inspectEgressProcess(fx.root, fx.base.proxyId).ok, true)
-  const reused = await fx.start()
+  const reused = await fx.start({ listenHost: '127.0.0.1', tcpPort: 0, dnsPort: 0 })
   assert.equal(reused.reused, true)
   assert.equal(reused.pid, child.pid)
   assert.equal(stopEgressProcess(fx.root, fx.base.proxyId).ok, true)

From 03028922e24ac2d6c3d284e804a2c44a7b49aa12 Mon Sep 17 00:00:00 2001
From: dofastted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 19:28:43 +0800
Subject: [PATCH 09/12] fix(vm): fail upgrade until a replaced kin-egress is
 restarted

Fleet refresh now waits for every helper bound to the proxy config to exit
before binding the new one. install.sh no longer treats a failed refresh as
a successful upgrade.
---
 deploy/install.sh               |  9 ++++-
 src/lib/vm/egress.mjs           | 49 ++++++++++++------------
 src/lib/vm/fleet-update.mjs     | 27 +++++++++-----
 test/unit/fleet-update.test.mjs | 66 ++++++++++++++++++++++++++++++++-
 4 files changed, 115 insertions(+), 36 deletions(-)

diff --git a/deploy/install.sh b/deploy/install.sh
index 0f3175070..571661b45 100644
--- a/deploy/install.sh
+++ b/deploy/install.sh
@@ -682,10 +682,15 @@ start_stack() {
 refresh_slot_services() {
   # The control-plane image carries the freshly built Go binaries. Publish them
   # into persistent slot-bin mounts and restart only kin-worker/kin-egress.
+  # A stale kin-egress can keep the old binary and its listen port after this
+  # refresh. Leaving that as a warning reports the upgrade done while the old
+  # exit is still serving traffic.
   if ! docker exec "$SERVICE_NAME" test -f /opt/vm2api/scripts/fleet-services.mjs >/dev/null 2>&1; then
-    warn "控制面尚未包含 Go 服务刷新脚本；下次更新将重试服务刷新"
+    err "控制面缺少 Go 服务刷新脚本，不能确认 kin-egress 已换到当前二进制"
+    exit 1
   elif ! docker exec "$SERVICE_NAME" node /opt/vm2api/scripts/fleet-services.mjs; then
-    warn "Go slot service refresh failed; VM containers were left untouched"
+    err "Go slot service refresh failed; VM containers were left untouched, but kin-egress may still be the previous binary"
+    exit 1
   fi
 }
 
diff --git a/src/lib/vm/egress.mjs b/src/lib/vm/egress.mjs
index 01ba5a609..aac230a1c 100644
--- a/src/lib/vm/egress.mjs
+++ b/src/lib/vm/egress.mjs
@@ -260,7 +260,12 @@ function ownsEgressProcess(pid, configPath, { allowDeleted = false } = {}) {
     if (exe.deleted && !allowDeleted) return false
     const args = fs.readFileSync(`/proc/${pid}/cmdline`, 'utf8').split('\0')
     const configIndex = args.indexOf('-config')
-    if (path.basename(exe.path) !== 'kin-egress' || configIndex <= 0 || !args[configIndex + 1]) return false
+    if (
+      !args.some((arg) => path.basename(String(arg || '').replace(/ \(deleted\)$/, '')).startsWith('kin-egress')) ||
+      configIndex <= 0 ||
+      !args[configIndex + 1]
+    )
+      return false
     const argument = args[configIndex + 1]
     const actualConfig = path.isAbsolute(argument)
       ? path.resolve(argument)
@@ -273,24 +278,16 @@ function ownsEgressProcess(pid, configPath, { allowDeleted = false } = {}) {
 
 function egressProcessPids() {
   if (process.platform !== 'linux') return []
-  const marker = Buffer.from('/kin-egress')
-  const deleted = Buffer.from(' (deleted)')
   const pids = []
   for (const name of fs.readdirSync('/proc')) {
     if (!/^[1-9][0-9]*$/.test(name)) continue
-    let exe
     try {
-      exe = fs.readlinkSync(`/proc/${name}/exe`)
+      const args = fs.readFileSync(`/proc/${name}/cmdline`).toString('utf8').split('\0')
+      if (args.some((arg) => path.basename(arg.replace(/ \(deleted\)$/, '')).startsWith('kin-egress')))
+        pids.push(Number(name))
     } catch {
-      continue
+      // Raced with exit, or a process whose /proc we cannot read.
     }
-    const bytes = Buffer.from(exe)
-    if (!bytes.includes(marker)) continue
-    const end = bytes.subarray(bytes.length - deleted.length).equals(deleted)
-      ? bytes.length - deleted.length
-      : bytes.length
-    if (path.basename(bytes.subarray(0, end).toString('utf8')) !== 'kin-egress') continue
-    pids.push(Number(name))
   }
   return pids
 }
@@ -516,6 +513,7 @@ export function stopEgressProcess(projectRoot, proxyId) {
   const cfgPath = path.join(dir, 'egress.json')
   const recorded = readPid(pidFile)
   const pids = [...new Set([...staleEgressPids(cfgPath), ...(ownsEgressProcess(recorded, cfgPath) ? [recorded] : [])])]
+  const pending = []
   for (const pid of pids) {
     try {
       process.kill(pid, 'SIGTERM')
@@ -523,14 +521,15 @@ export function stopEgressProcess(projectRoot, proxyId) {
       if (error.code !== 'ESRCH') return { ok: false, error: `egress_stop_failed: ${error.code || error.message}` }
     }
     // Keep the PID while termination is pending so policy reconciliation can verify/retry it.
-    if (ownsEgressProcess(pid, cfgPath, { allowDeleted: true })) return { ok: true }
+    if (ownsEgressProcess(pid, cfgPath, { allowDeleted: true })) pending.push(pid)
   }
+  if (pending.length) return { ok: true, pending }
   try {
     fs.rmSync(pidFile, { force: true })
   } catch (error) {
     return { ok: false, error: `egress_pid_cleanup_failed: ${error.code || error.message}` }
   }
-  return { ok: true }
+  return { ok: true, pending }
 }
 
 async function stopOwnedEgress(pid) {
@@ -745,6 +744,8 @@ async function startProxyEgress(
     dnsUpstream = configuredDnsUpstream(),
     dnsEmptyTypes = configuredDnsEmptyTypes(),
     bin,
+    ports,
+    listenHost: listenHostOverride,
   } = {},
 ) {
   const blocked = proxyBlockedReason(proxy)
@@ -754,23 +755,23 @@ async function startProxyEgress(
   if (!proxyId || !proxyUrl) return { ok: false, error: 'bound SOCKS5 id and url required; refusing fallback' }
   const net = ensureEgressNetwork(proxyId, runDocker)
   if (!net.ok) return net
-  const listenHost = net.gateway || gatewayFromSubnet(net.subnet)
+  const listenHost = listenHostOverride || net.gateway || gatewayFromSubnet(net.subnet)
   if (!listenHost) return { ok: false, error: 'egress network gateway missing' }
-  const ports = portsForProxy(proxyId)
+  const selectedPorts = ports || portsForProxy(proxyId)
   const chain = chainName(proxyId)
   const plan = iptablesPlan({
     chain,
     bridge: net.bridge,
     subnet: net.subnet,
-    tcpPort: ports.tcp,
-    dnsPort: ports.dns,
+    tcpPort: selectedPorts.tcp,
+    dnsPort: selectedPorts.dns,
   })
   const started = await startEgressProcess({
     projectRoot,
     proxyId,
     proxyUrl,
-    tcpPort: ports.tcp,
-    dnsPort: ports.dns,
+    tcpPort: selectedPorts.tcp,
+    dnsPort: selectedPorts.dns,
     listenHost,
     dnsUpstream,
     dnsEmptyTypes,
@@ -778,8 +779,8 @@ async function startProxyEgress(
     ...(bin ? { bin } : {}),
   })
   if (!started.ok) return started
-  if (!waitListen(listenHost, ports.tcp, 8000, ports.tcp > 0 ? started.pid : 0))
-    return { ok: false, error: `kin-egress ${listenHost}:${ports.tcp} did not listen`, pid: started.pid }
+  if (!waitListen(listenHost, selectedPorts.tcp, 8000, selectedPorts.tcp > 0 ? started.pid : 0))
+    return { ok: false, error: `kin-egress ${listenHost}:${selectedPorts.tcp} did not listen`, pid: started.pid }
   const rules = applyIptables(plan, runIptables)
   if (!rules.ok) {
     stopEgressProcess(projectRoot, proxyId)
@@ -791,7 +792,7 @@ async function startProxyEgress(
     bridge: net.bridge,
     subnet: net.subnet,
     gateway: listenHost,
-    ports,
+    ports: selectedPorts,
     pid: started.pid,
     proxy_id: proxyId,
   }
diff --git a/src/lib/vm/fleet-update.mjs b/src/lib/vm/fleet-update.mjs
index 52b255c4d..0333dc1a0 100644
--- a/src/lib/vm/fleet-update.mjs
+++ b/src/lib/vm/fleet-update.mjs
@@ -11,20 +11,29 @@ import { rustKernelHealth } from '../transport/rust-kernel-client.mjs'
 import { restartTelemetrySidecar } from './slot-process-status.mjs'
 import { vmNodeId } from '../cluster/placement.mjs'
 import { restartRemoteServices } from '../cluster/remote-slot.mjs'
-import { ensureProxyEgress, isLocalEgressProxy, stopEgressProcess } from './egress.mjs'
+import { ensureProxyEgress, isLocalEgressProxy, stopEgressProcess, waitEgressExit } from './egress.mjs'
 
 const ACTIONS = new Set(['collect', 'reload', 'roll', 'telemetry'])
 
-async function restartLocalServices({ projectRoot, vm, enabled }) {
+export async function restartLocalEgress(projectRoot, vm, opts = {}) {
+  if (isLocalEgressProxy(vm.proxy)) return { ok: true, egress: 'local' }
+  const stopped = stopEgressProcess(projectRoot, vm.proxy?.id)
+  if (!stopped.ok) return { ok: false, action: 'egress_stop_failed', error: stopped.error }
+  for (const pid of stopped.pending || []) {
+    const exited = await waitEgressExit(pid)
+    if (!exited.ok) return { ok: false, action: 'egress_stop_failed', error: exited.error, pid }
+  }
+  const started = await ensureProxyEgress(projectRoot, vm.proxy, opts)
+  if (!started?.ok) return { ok: false, action: 'egress_start_failed', error: started?.error || 'kin-egress failed' }
+  return { ok: true, egress: 'restarted', pid: started.pid }
+}
+
+async function restartLocalServices({ projectRoot, vm, enabled, egressOpts = {} }) {
   const telemetry = await restartTelemetrySidecar({ projectRoot, vm, enabled })
   if (!telemetry.ok) return telemetry
-  if (!isLocalEgressProxy(vm.proxy)) {
-    const stopped = stopEgressProcess(projectRoot, vm.proxy?.id)
-    if (!stopped.ok) return { ok: false, action: 'egress_stop_failed', error: stopped.error }
-    const started = await ensureProxyEgress(projectRoot, vm.proxy)
-    if (!started?.ok) return { ok: false, action: 'egress_start_failed', error: started?.error || 'kin-egress failed' }
-  }
-  return { ...telemetry, egress: 'restarted' }
+  const egress = await restartLocalEgress(projectRoot, vm, egressOpts)
+  if (!egress.ok) return egress
+  return { ...telemetry, egress: egress.egress }
 }
 
 function sleep(ms) {
diff --git a/test/unit/fleet-update.test.mjs b/test/unit/fleet-update.test.mjs
index 9a1e4d97e..451099f67 100644
--- a/test/unit/fleet-update.test.mjs
+++ b/test/unit/fleet-update.test.mjs
@@ -2,8 +2,10 @@ import test from 'node:test'
 import assert from 'node:assert/strict'
 import fs from 'node:fs'
 import os from 'node:os'
+import net from 'node:net'
 import path from 'node:path'
-import { runFleetUpdate, fleetStatus, isWorkerProcessUp } from '../../src/lib/vm/fleet-update.mjs'
+import { runFleetUpdate, fleetStatus, isWorkerProcessUp, restartLocalEgress } from '../../src/lib/vm/fleet-update.mjs'
+import { startEgressProcess, inspectEgressProcess } from '../../src/lib/vm/egress.mjs'
 
 function writeSlot(root, id, extra = {}) {
   const dir = path.join(root, 'vms')
@@ -99,3 +101,65 @@ test('fleet collect skips reload', async () => {
   assert.equal(fleetStatus(root)[0].id, 'vm-01')
   fs.rmSync(root, { recursive: true, force: true })
 })
+
+test('fleet refresh replaces an egress process whose binary was deleted', {
+  skip: process.platform !== 'linux',
+}, async () => {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'kin-fleet-egress-'))
+  const oldBin = path.join(root, 'kin-egress-old')
+  const newBin = path.join(root, 'kin-egress')
+  const source = process.env.KIN_EGRESS_BIN || path.resolve(import.meta.dirname, '../../bin/kin-egress')
+  fs.copyFileSync(source, oldBin)
+  fs.copyFileSync(source, newBin)
+  fs.chmodSync(oldBin, 0o755)
+  fs.chmodSync(newBin, 0o755)
+  const proxy = { id: 'px-fleet', scheme: 'socks5', host: '192.0.2.1', port: 1080, url: 'socks5://192.0.2.1:1080' }
+  writeSlot(root, 'vm-01', { proxy })
+  const probe = net.createServer()
+  const port = await new Promise((resolve) => probe.listen(0, '127.0.0.1', () => resolve(probe.address().port)))
+  await new Promise((resolve) => probe.close(resolve))
+  const previous = process.env.KIN_EGRESS_BIN
+  process.env.KIN_EGRESS_BIN = newBin
+  const orphan = await startEgressProcess({
+    projectRoot: root,
+    proxyId: proxy.id,
+    proxyUrl: 'socks5h://192.0.2.1:1080',
+    listenHost: '127.0.0.1',
+    tcpPort: port,
+    dnsPort: 0,
+    bin: oldBin,
+  })
+  assert.equal(orphan.ok, true, orphan.error)
+  fs.unlinkSync(oldBin)
+  fs.writeFileSync(path.join(root, 'data/run/egress/px-fleet/egress.pid'), '999999999\n')
+  const egressOpts = {
+    runDocker: (args) =>
+      args[0] === 'network' && args[1] === 'inspect' ? { ok: true, stdout: '127.0.0.0/8|127.0.0.1' } : { ok: true },
+    runIptables: () => ({ ok: true }),
+    listenHost: '127.0.0.1',
+    ports: { tcp: port, dns: 0 },
+    bin: newBin,
+  }
+  try {
+    const report = await runFleetUpdate(root, {
+      action: 'telemetry',
+      telemetryFn: async ({ projectRoot, vm }) => restartLocalEgress(projectRoot, vm, egressOpts),
+      healthFn: async () => ({ ok: true }),
+    })
+    assert.equal(report.failed_count, 0, JSON.stringify(report.items))
+    const current = inspectEgressProcess(root, proxy.id)
+    assert.equal(current.ok, true, JSON.stringify(current))
+    assert.notEqual(current.pid, orphan.pid)
+    assert.equal(fs.readlinkSync(`/proc/${current.pid}/exe`), newBin)
+    assert.equal(fs.existsSync(`/proc/${orphan.pid}`), false)
+    assert.equal(
+      JSON.parse(fs.readFileSync(path.join(root, 'data/run/egress/px-fleet/egress.json'), 'utf8')).listen_tcp,
+      `127.0.0.1:${port}`,
+    )
+    process.kill(current.pid, 'SIGTERM')
+  } finally {
+    if (previous === undefined) delete process.env.KIN_EGRESS_BIN
+    else process.env.KIN_EGRESS_BIN = previous
+    fs.rmSync(root, { recursive: true, force: true })
+  }
+})

From e615b2f4691cd7aa6e8833056283ca75513b1670 Mon Sep 17 00:00:00 2001
From: dofastted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 20:36:56 +0800
Subject: [PATCH 10/12] =?UTF-8?q?feat(web):=20=E7=A7=8D=E5=AD=90=E9=A1=B5?=
 =?UTF-8?q?=E6=8C=89=E5=BD=93=E5=89=8D=E6=A7=BD=20settings.json=20?=
 =?UTF-8?q?=E6=98=BE=E7=A4=BA?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

账本列出文件里的真实配置项，claude.setting 可编辑后播种。遥测开/关与进程状态分开，种子页打开时 2 秒刷新。
---
 PRODUCT.md                                   |  38 ++
 web/src/features/vm/detail-page.tsx          |  21 +-
 web/src/features/vm/queries.ts               |   4 +-
 web/src/features/vm/seed-policy-card.test.ts |  13 +-
 web/src/features/vm/seed-policy-card.tsx     | 367 +++++++++++--------
 web/src/features/vm/seed-settings.test.ts    | 124 +++++++
 web/src/features/vm/seed-settings.ts         | 159 ++++++++
 7 files changed, 548 insertions(+), 178 deletions(-)
 create mode 100644 PRODUCT.md
 create mode 100644 web/src/features/vm/seed-settings.test.ts
 create mode 100644 web/src/features/vm/seed-settings.ts

diff --git a/PRODUCT.md b/PRODUCT.md
new file mode 100644
index 000000000..629754c59
--- /dev/null
+++ b/PRODUCT.md
@@ -0,0 +1,38 @@
+# Product
+
+<!-- impeccable:product-schema 1 -->
+
+## Platform
+
+web
+
+## Users
+
+本机管理员。在深色运维控制台里打开某个虚拟机槽位，核对并改写该槽 Claude Code 的种子配置。
+
+## Product Purpose
+
+vm2api 把 Claude / Codex 账号做成可调度的虚拟机槽，并对外提供兼容上游的 API。种子页的成功标准：管理员不用进容器，就能看见当前槽 `settings.json` 里实际生效的配置项，改完能播种，并实时看到遥测开或关。
+
+## Positioning
+
+种子不是一份预设表单。它读当前槽家目录里已经写好的 Claude 配置，按文件内容逐项显示，再把改动写回同一份文件。
+
+## Operating Context
+
+管理员在 `/vm/$id` 的「种子」页签工作。数据来自该槽 `cli-home/.claude/settings.json`、`claude.setting` 和种子策略。遥测进程状态来自槽详情里的实时观测。
+
+## Capabilities and Constraints
+
+- 显示当前槽 `settings.json` 的真实键值，而不是只显示种子策略里的默认串。
+- `claude.setting` 以可编辑文本提供，保存时写回并重新播种。
+- 遥测开、关状态实时刷新；配置开关和进程是否在跑是两件事。
+- 「拒客户端 settings」和「拒客户端身份」按当前策略准确显示，并可切换。
+- 平台是现有 React 面板，不另起一套视觉系统。
+
+## Product Principles
+
+- 槽内文件是事实，表单默认值不是。
+- 开和关都要能被看见，未知不能伪装成关闭。
+- 能改的项和只读观测分开。
+- 播种是显式动作，不在切换开关时偷偷写盘。
diff --git a/web/src/features/vm/detail-page.tsx b/web/src/features/vm/detail-page.tsx
index 2a82fd87b..c8b5fc32b 100644
--- a/web/src/features/vm/detail-page.tsx
+++ b/web/src/features/vm/detail-page.tsx
@@ -129,8 +129,15 @@ function VmDetailBody({
     enabled: perms.known && !perms.dashboard,
   })
   const proxies = useQuery({ ...proxiesQueryOptions(), enabled: perms.admin })
-  const detail = useQuery(vmQueryOptions(id))
-  const seed = useQuery({ ...vmSeedQueryOptions(id), enabled: perms.admin })
+  const detail = useQuery({
+    ...vmQueryOptions(id),
+    refetchInterval: wantedTab === 'seed' ? 2000 : false,
+  })
+  const seed = useQuery({
+    ...vmSeedQueryOptions(id),
+    enabled: perms.admin && wantedTab === 'seed',
+    refetchInterval: wantedTab === 'seed' ? 2000 : false,
+  })
   const routing = useQuery({ ...routingQueryOptions(), enabled: perms.admin })
   usePoolSeatStream()
 
@@ -260,8 +267,6 @@ function VmDetailBody({
   // 本地代理固定第一。已绑到本槽的留在下拉里，否则正在用它时列表里没有。
   const free = proxiesForVmBind(pool, id, 5, vm.node_id ?? null)
   const bindTarget = pickBindTarget(bindId, free)
-  const pol =
-    (seed.data?.seed_policy as Record<string, unknown> | undefined) || {}
   const syncTelemetry =
     (routing.data?.official_cc as { sync_telemetry?: boolean } | undefined)
       ?.sync_telemetry === true
@@ -564,13 +569,11 @@ function VmDetailBody({
                 }}
                 onDelete={() => setConfirmDel(true)}
               />
-              <TabsContent value='seed' className='space-y-3 pt-4'>
-                <p className='text-sm text-muted-foreground'>
-                  官方 Claude Code 初装之后的后置覆写。遥测只看这一只开关。
-                </p>
+              <TabsContent value='seed' className='pt-4'>
                 {seed.data ? (
                   <SeedPolicyCard
-                    policy={pol}
+                    seed={seed.data}
+                    telemetry={kernel?.telemetry}
                     saving={saveSeed.isPending}
                     syncTelemetry={syncTelemetry}
                     onSave={(next) => saveSeed.mutate(next)}
diff --git a/web/src/features/vm/queries.ts b/web/src/features/vm/queries.ts
index 8acc260b1..c8a917ed9 100644
--- a/web/src/features/vm/queries.ts
+++ b/web/src/features/vm/queries.ts
@@ -6,6 +6,7 @@ import type {
   VmCreateOptions,
   VmCredentialResponse,
   VmDetailPayload,
+  VmSeedSettings,
   VmsListResponse,
 } from '@/types/panel-vm'
 import { api } from '@/lib/api'
@@ -46,9 +47,10 @@ export function vmSeedQueryOptions(id: string) {
   return queryOptions({
     queryKey: ['panel', 'vm', id, 'seed'] as const,
     queryFn: () =>
-      api<Record<string, unknown>>(
+      api<VmSeedSettings>(
         `/api/panel/vms/${encodeURIComponent(id)}/seed-settings`
       ),
+    refetchInterval: false,
   })
 }
 
diff --git a/web/src/features/vm/seed-policy-card.test.ts b/web/src/features/vm/seed-policy-card.test.ts
index f6ac473ff..69a3333c1 100644
--- a/web/src/features/vm/seed-policy-card.test.ts
+++ b/web/src/features/vm/seed-policy-card.test.ts
@@ -1,18 +1,19 @@
 import { describe, expect, it } from 'vitest'
-import { alignTelemetryDraft } from './seed-policy-card'
+import { seedSaveBody } from './seed-settings'
 import { telemetryEnabled } from './telemetry-policy'
 
-describe('seed card follows the telemetry bit', () => {
+describe('seed save follows the telemetry bit', () => {
   it('drops contradictory mirrors so the switch stays on', () => {
-    const draft = alignTelemetryDraft({
+    const body = seedSaveBody({
       telemetry_disabled: false,
       disable_nonessential_traffic: false,
       do_not_track: true,
       reject_client_settings: true,
       reject_client_metadata_identity: true,
+      claude_setting: 'A=1',
     })
-    expect(telemetryEnabled(draft)).toBe(true)
-    expect(draft.disable_nonessential_traffic).toBe(true)
-    expect(draft.do_not_track).toBe(false)
+    expect(telemetryEnabled(body)).toBe(true)
+    expect(body.disable_nonessential_traffic).toBe(true)
+    expect(body.do_not_track).toBe(false)
   })
 })
diff --git a/web/src/features/vm/seed-policy-card.tsx b/web/src/features/vm/seed-policy-card.tsx
index 2ff1573f9..77715cd1a 100644
--- a/web/src/features/vm/seed-policy-card.tsx
+++ b/web/src/features/vm/seed-policy-card.tsx
@@ -1,212 +1,255 @@
 import { useEffect, useState } from 'react'
+import type { VmKernelSnapshot, VmSeedSettings } from '@/types/panel-vm'
+import { cn } from '@/lib/utils'
 import { Button } from '@/components/ui/button'
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/card'
 import { Label } from '@/components/ui/label'
 import { Switch } from '@/components/ui/switch'
 import { Textarea } from '@/components/ui/textarea'
 import {
-  telemetryEnabled,
-  telemetrySeedFlags,
-} from '@/features/vm/telemetry-policy'
+  DEFAULT_CLAUDE_SETTING,
+  REJECT_FLAGS,
+  seedDraftOf,
+  seedSaveBody,
+  settingsRows,
+  sameDraft,
+  telemetryLive,
+  type SeedDraft,
+} from '@/features/vm/seed-settings'
+import { telemetryEnabled } from '@/features/vm/telemetry-policy'
 
-export const DEFAULT_CLAUDE_SETTING =
-  'CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1'
+export { DEFAULT_CLAUDE_SETTING }
 
-const REJECT_FLAGS: [string, string][] = [
-  ['reject_client_settings', '拒客户端 settings'],
-  ['reject_client_metadata_identity', '拒客户端身份'],
-]
+type ObservedTelemetry = NonNullable<VmKernelSnapshot['telemetry']>
 
-type SeedPolicy = Record<string, boolean | string>
-
-export const SEED_PRESETS: Record<string, SeedPolicy> = {
-  standard: {
-    ...telemetrySeedFlags(false),
-    claude_setting: DEFAULT_CLAUDE_SETTING,
-    reject_client_settings: true,
-    reject_client_metadata_identity: true,
-  },
-  open: {
-    ...telemetrySeedFlags(true),
-    claude_setting: DEFAULT_CLAUDE_SETTING,
-    reject_client_settings: false,
-    reject_client_metadata_identity: false,
-  },
-  strict: {
-    ...telemetrySeedFlags(false),
-    claude_setting: DEFAULT_CLAUDE_SETTING,
-    reject_client_settings: true,
-    reject_client_metadata_identity: true,
-  },
-}
-
-const PRESET_LABELS: [string, string, string][] = [
-  ['standard', '标准', '拒客户端覆写，遥测关；需手动开启'],
-  ['open', '开放', '不拒客户端；遥测开，非必要流量=1'],
-  ['strict', '关闭遥测', '关遥测 + DNT；非必要流量=0'],
-]
-
-/** Mirrors follow the telemetry bit. Reject flags are left alone. */
-export function alignTelemetryDraft(draft: SeedPolicy): SeedPolicy {
-  return { ...draft, ...telemetrySeedFlags(telemetryEnabled(draft)) }
-}
-
-/**
- * 预设名 → 提交给后端的种子策略。`theme: 'dark'` 是固定值（非用户可选项）。
- */
-export function seedPolicyOf(name: string): Record<string, boolean | string> {
-  return { ...(SEED_PRESETS[name] || SEED_PRESETS.standard), theme: 'dark' }
-}
-
-export function matchSeedPreset(policy: Record<string, unknown>): string {
-  const on = telemetryEnabled(policy)
-  for (const [name, preset] of Object.entries(SEED_PRESETS)) {
-    if (telemetryEnabled(preset) !== on) continue
-    if (REJECT_FLAGS.every(([k]) => !!preset[k] === !!policy[k])) return name
-  }
-  return 'custom'
+function Lamp({ tone }: { tone: 'on' | 'off' | 'unknown' }) {
+  return (
+    <span
+      aria-hidden
+      className={cn(
+        'relative inline-flex size-2.5 shrink-0 rounded-full',
+        tone === 'on' && 'bg-primary',
+        tone === 'off' && 'bg-[var(--status-warn)]',
+        tone === 'unknown' && 'bg-muted-foreground/50'
+      )}
+    >
+      {tone !== 'unknown' ? (
+        <span
+          className={cn(
+            'absolute inset-0 rounded-full motion-safe:animate-ping',
+            tone === 'on' ? 'bg-primary/70' : 'bg-[var(--status-warn)]/70'
+          )}
+        />
+      ) : null}
+    </span>
+  )
 }
 
-function normalize(policy: Record<string, unknown>): SeedPolicy {
-  const out: SeedPolicy = { ...telemetrySeedFlags(telemetryEnabled(policy)) }
-  out.claude_setting =
-    typeof policy.claude_setting === 'string'
-      ? policy.claude_setting
-      : DEFAULT_CLAUDE_SETTING
-  for (const [k] of REJECT_FLAGS) {
-    out[k] = k in policy ? !!policy[k] : !!SEED_PRESETS.standard[k]
-  }
-  return out
+function ToggleRow({
+  id,
+  label,
+  detail,
+  checked,
+  disabled,
+  onCheckedChange,
+}: {
+  id: string
+  label: string
+  detail: string
+  checked: boolean
+  disabled: boolean
+  onCheckedChange: (next: boolean) => void
+}) {
+  return (
+    <div className='flex items-center justify-between gap-3 py-2.5'>
+      <div className='min-w-0'>
+        <Label htmlFor={id} className='text-sm font-medium'>
+          {label}
+        </Label>
+        <p className='text-xs text-muted-foreground'>{detail}</p>
+      </div>
+      <div className='flex items-center gap-2'>
+        <span
+          className={cn(
+            'font-mono text-[11px] tracking-wide',
+            checked ? 'text-primary' : 'text-muted-foreground'
+          )}
+        >
+          {checked ? '开' : '关'}
+        </span>
+        <Switch
+          id={id}
+          checked={checked}
+          disabled={disabled}
+          onCheckedChange={onCheckedChange}
+        />
+      </div>
+    </div>
+  )
 }
 
 export function SeedPolicyCard({
-  policy,
+  seed,
+  telemetry,
   onSave,
   saving,
   syncTelemetry = false,
 }: {
-  policy: Record<string, unknown>
-  onSave: (next: SeedPolicy) => void
+  seed: VmSeedSettings
+  telemetry?: ObservedTelemetry | null
+  onSave: (next: Record<string, boolean | string>) => void
   saving: boolean
   /** External official_cc.sync_telemetry. True means the next init turns telemetry back on. */
   syncTelemetry?: boolean
 }) {
-  const [draft, setDraft] = useState<SeedPolicy>(() =>
-    alignTelemetryDraft(normalize(policy))
-  )
+  const saved = seedDraftOf(seed)
+  const [draft, setDraft] = useState<SeedDraft>(saved)
   useEffect(() => {
-    setDraft(alignTelemetryDraft(normalize(policy)))
-  }, [policy])
+    setDraft(seedDraftOf(seed))
+  }, [seed])
 
-  const current = matchSeedPreset(draft)
-  const saved = normalize(policy)
-  const dirty =
-    telemetryEnabled(draft) !== telemetryEnabled(saved) ||
-    REJECT_FLAGS.some(([k]) => !!draft[k] !== !!saved[k]) ||
-    draft.claude_setting !== saved.claude_setting
+  const dirty = !sameDraft(draft, saved)
   const on = telemetryEnabled(draft)
+  const live = telemetryLive(seed, telemetry)
+  const fileSetting =
+    typeof seed.claude_setting === 'string' ? seed.claude_setting : ''
+  const rows = settingsRows(seed.settings_json, fileSetting)
+  const fileMissing = seed.settings_json == null
+
+  const patch = (next: Partial<SeedDraft>) =>
+    setDraft((current) => ({ ...current, ...next }))
 
   return (
-    <Card>
-      <CardHeader className='pb-2'>
-        <CardTitle className='text-sm'>种子策略</CardTitle>
-      </CardHeader>
-      <CardContent className='space-y-4 pt-0'>
-        <div className='space-y-2'>
-          <div className='flex flex-wrap gap-2'>
-            {PRESET_LABELS.map(([key, label, desc]) => (
-              <Button
-                key={key}
-                size='sm'
-                variant={current === key ? 'default' : 'outline'}
-                aria-pressed={current === key}
-                title={desc}
-                disabled={saving}
-                onClick={() =>
-                  setDraft(alignTelemetryDraft({ ...SEED_PRESETS[key] }))
-                }
-              >
-                {label}
-              </Button>
-            ))}
-            {current === 'custom' ? (
-              <Button size='sm' variant='secondary' disabled aria-pressed>
-                自定义
-              </Button>
-            ) : null}
-          </div>
-          <p className='text-xs text-muted-foreground'>
-            {current === 'custom'
-              ? '当前组合不匹配任何预设。'
-              : PRESET_LABELS.find(([k]) => k === current)?.[2]}
+    <div className='grid items-start gap-4 xl:grid-cols-[minmax(0,1.4fr)_minmax(18rem,0.8fr)]'>
+      <section className='min-w-0 overflow-hidden rounded-xl border bg-card'>
+        <header className='flex items-baseline justify-between gap-3 border-b px-4 py-3'>
+          <h2 className='text-sm font-semibold'>当前槽 settings.json</h2>
+          <p className='font-mono text-[11px] text-muted-foreground'>
+            {fileMissing ? '文件未写入' : `${rows.length} 项`}
+          </p>
+        </header>
+        {fileMissing ? (
+          <p className='px-4 py-8 text-sm text-muted-foreground'>
+            这槽还没有 settings.json。播种之后，这里显示写进文件的项。
+          </p>
+        ) : rows.length === 0 ? (
+          <p className='px-4 py-8 text-sm text-muted-foreground'>
+            文件在，但没有 env 项。
           </p>
+        ) : (
+          <div className='overflow-x-auto'>
+            <table className='w-full border-collapse text-left'>
+              <tbody>
+                {rows.map((row) => (
+                  <tr key={row.key} className='border-b last:border-b-0'>
+                    <th
+                      scope='row'
+                      className='px-4 py-2 align-top font-mono text-xs font-medium text-foreground'
+                    >
+                      <span className='inline-flex items-center gap-2'>
+                        {row.inClaudeSetting ? (
+                          <span
+                            className='size-1.5 shrink-0 rounded-full bg-primary'
+                            title='也写在 claude.setting'
+                          />
+                        ) : (
+                          <span className='size-1.5 shrink-0' />
+                        )}
+                        {row.key}
+                      </span>
+                    </th>
+                    <td className='px-4 py-2 text-end font-mono text-xs break-all text-muted-foreground'>
+                      {row.value === '' ? '空' : row.value}
+                    </td>
+                  </tr>
+                ))}
+              </tbody>
+            </table>
+          </div>
+        )}
+      </section>
+
+      <aside className='min-w-0 rounded-xl border bg-card'>
+        <div
+          className='flex items-center gap-3 border-b px-4 py-3'
+          role='status'
+          aria-live='polite'
+        >
+          <Lamp tone={live.tone} />
+          <div className='min-w-0'>
+            <p className='text-sm font-semibold'>
+              遥测 {live.on === true ? '开' : live.on === false ? '关' : '未知'}
+            </p>
+            <p className='text-xs text-muted-foreground'>
+              {live.label}
+              {live.running === true
+                ? ' · 进程在跑'
+                : live.running === false
+                  ? ' · 进程未跑'
+                  : ' · 进程未知'}
+            </p>
+          </div>
         </div>
 
-        <div className='space-y-2 border-t pt-3'>
-          <div className='flex items-center justify-between gap-3'>
-            <Label htmlFor='seed-telemetry' className='text-sm font-normal'>
-              遥测
-            </Label>
-            <Switch
-              id='seed-telemetry'
-              checked={on}
-              disabled={saving}
-              onCheckedChange={(v) =>
-                setDraft(
-                  alignTelemetryDraft({ ...draft, telemetry_disabled: !v })
-                )
+        <div className='divide-y px-4'>
+          <ToggleRow
+            id='seed-telemetry'
+            label='遥测'
+            detail={
+              on
+                ? '非必要流量=1，DNT 关。这两项跟着开关走。'
+                : '非必要流量=0，DNT 开。这两项跟着开关走。'
+            }
+            checked={on}
+            disabled={saving}
+            onCheckedChange={(value) => patch({ telemetry_disabled: !value })}
+          />
+          {REJECT_FLAGS.map(([key, label]) => (
+            <ToggleRow
+              key={key}
+              id={`seed-${key}`}
+              label={label}
+              detail={
+                key === 'reject_client_settings'
+                  ? draft.reject_client_settings
+                    ? '入站 settings / env 会被丢掉。'
+                    : '入站 settings 会留下来。'
+                  : draft.reject_client_metadata_identity
+                    ? '入站 user / machine 身份会被丢掉。'
+                    : '入站身份会留下来。'
               }
+              checked={!!draft[key]}
+              disabled={saving}
+              onCheckedChange={(value) => patch({ [key]: value })}
             />
-          </div>
-          {REJECT_FLAGS.map(([key, label]) => (
-            <div key={key} className='flex items-center justify-between gap-3'>
-              <Label htmlFor={`seed-${key}`} className='text-sm font-normal'>
-                {label}
-              </Label>
-              <Switch
-                id={`seed-${key}`}
-                checked={!!draft[key]}
-                disabled={saving}
-                onCheckedChange={(v) => setDraft({ ...draft, [key]: v })}
-              />
-            </div>
           ))}
         </div>
-        <p className='text-xs text-muted-foreground'>
-          {on
-            ? '遥测开：非必要流量=1，DNT 关。这两项跟着遥测走，不能单独拨。'
-            : '遥测关：非必要流量=0，DNT 开。这两项跟着遥测走，不能单独拨。'}
-          {syncTelemetry
-            ? ' 外部初装「同步遥测」开着，下次换票会按那份配置把本槽遥测重新打开。'
-            : ' 外部初装「同步遥测」关着，换票不会改写这里的遥测开关。'}
-        </p>
 
-        <div className='space-y-2 border-t pt-3'>
-          <Label htmlFor='seed-claude-setting' className='text-sm font-normal'>
+        <div className='space-y-2 border-t px-4 py-3'>
+          <Label htmlFor='seed-claude-setting' className='text-sm font-medium'>
             claude.setting
           </Label>
           <Textarea
             id='seed-claude-setting'
-            value={String(draft.claude_setting || '')}
+            value={draft.claude_setting}
             disabled={saving}
-            onChange={(e) =>
-              setDraft({ ...draft, claude_setting: e.target.value })
-            }
-            className='min-h-24 font-mono text-xs'
+            onChange={(event) => patch({ claude_setting: event.target.value })}
+            className='min-h-28 font-mono text-xs'
             spellCheck={false}
             placeholder={DEFAULT_CLAUDE_SETTING}
           />
           <p className='text-xs text-muted-foreground'>
-            每行一个 Claude 设置。默认写入 <code>{DEFAULT_CLAUDE_SETTING}</code>
-            。
+            {syncTelemetry
+              ? '下次换票会按外部初装把遥测重新打开。'
+              : '换票不会改这里的遥测开关。'}
+            {dirty ? ' 有未播种的改动。' : ' 与当前策略一致。'}
           </p>
         </div>
 
-        <div className='flex gap-2 border-t pt-3'>
+        <div className='flex gap-2 border-t px-4 py-3'>
           <Button
             size='sm'
             disabled={saving || !dirty}
-            onClick={() => onSave(alignTelemetryDraft(draft))}
+            onClick={() => onSave(seedSaveBody(draft))}
           >
             {saving ? '写入中…' : '播种'}
           </Button>
@@ -214,12 +257,12 @@ export function SeedPolicyCard({
             size='sm'
             variant='ghost'
             disabled={saving || !dirty}
-            onClick={() => setDraft(normalize(policy))}
+            onClick={() => setDraft(saved)}
           >
             重置
           </Button>
         </div>
-      </CardContent>
-    </Card>
+      </aside>
+    </div>
   )
 }
diff --git a/web/src/features/vm/seed-settings.test.ts b/web/src/features/vm/seed-settings.test.ts
new file mode 100644
index 000000000..4897c174e
--- /dev/null
+++ b/web/src/features/vm/seed-settings.test.ts
@@ -0,0 +1,124 @@
+import { describe, expect, it } from 'vitest'
+import {
+  claudeSettingKeys,
+  seedDraftOf,
+  seedSaveBody,
+  settingsRows,
+  telemetryLive,
+} from './seed-settings'
+
+const settings = {
+  env: {
+    TZ: 'Asia/Shanghai',
+    LANG: 'en_US.UTF-8',
+    CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: '0',
+    CLAUDE_CODE_USE_BEDROCK: '0',
+    DISABLE_TELEMETRY: '1',
+    DO_NOT_TRACK: '1',
+    CUSTOM_FLAG: 'kept',
+  },
+  theme: 'dark',
+  autoUpdates: false,
+}
+
+describe('current slot settings', () => {
+  it('lists the file env, marking lines also named in claude.setting', () => {
+    const rows = settingsRows(
+      settings,
+      'CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1\n# note\n'
+    )
+    expect(
+      rows.map((row) => [row.key, row.value, row.inClaudeSetting])
+    ).toEqual([
+      ['TZ', 'Asia/Shanghai', false],
+      ['LANG', 'en_US.UTF-8', false],
+      ['CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC', '0', true],
+      ['CLAUDE_CODE_USE_BEDROCK', '0', false],
+      ['DISABLE_TELEMETRY', '1', false],
+      ['DO_NOT_TRACK', '1', false],
+      ['CUSTOM_FLAG', 'kept', false],
+      ['theme', 'dark', false],
+      ['autoUpdates', 'false', false],
+    ])
+  })
+
+  it('does not invent rows when the file is missing', () => {
+    expect(settingsRows(null, 'TZ=UTC')).toEqual([])
+    expect(claudeSettingKeys('# only\n\nNOT A KEY\nOK=1')).toEqual(
+      new Set(['OK'])
+    )
+  })
+})
+
+describe('seed draft', () => {
+  it('shows reject flags from the current policy, not a preset', () => {
+    const draft = seedDraftOf({
+      seed_policy: {
+        telemetry_disabled: false,
+        reject_client_settings: false,
+        reject_client_metadata_identity: true,
+      },
+      claude_setting: 'A=1\r\nB=2\r\n',
+    })
+    expect(draft.reject_client_settings).toBe(false)
+    expect(draft.reject_client_metadata_identity).toBe(true)
+    expect(draft.telemetry_disabled).toBe(false)
+    expect(draft.claude_setting).toBe('A=1\nB=2\n')
+    expect(seedSaveBody(draft)).toMatchObject({
+      telemetry_disabled: false,
+      disable_nonessential_traffic: true,
+      do_not_track: false,
+      reject_client_settings: false,
+      reject_client_metadata_identity: true,
+      claude_setting: 'A=1\nB=2',
+    })
+  })
+
+  it('keeps an explicit false identity flag instead of defaulting it on', () => {
+    const draft = seedDraftOf({
+      seed_policy: { reject_client_metadata_identity: false },
+    })
+    expect(draft.reject_client_metadata_identity).toBe(false)
+    expect(draft.reject_client_settings).toBe(true)
+  })
+
+  it('keeps an empty claude.setting file empty', () => {
+    const draft = seedDraftOf({
+      seed_policy: { claude_setting: 'FROM_POLICY=1' },
+      claude_setting: '',
+    })
+    expect(draft.claude_setting).toBe('')
+  })
+})
+
+describe('telemetry lamp', () => {
+  it('stays off while a process is still running', () => {
+    const live = telemetryLive(
+      { seed_policy: { telemetry_disabled: true } },
+      { enabled: true, running: true }
+    )
+    expect(live).toMatchObject({ on: false, running: true, tone: 'off' })
+    expect(live.label).toBe('未启用')
+  })
+
+  it('stays on when the process has not started', () => {
+    const live = telemetryLive(
+      { seed_policy: { telemetry_disabled: false } },
+      { enabled: false, running: false }
+    )
+    expect(live).toMatchObject({
+      on: true,
+      running: false,
+      tone: 'on',
+      label: '已开启 · 进程未运行',
+    })
+  })
+
+  it('does not call a missing observation off', () => {
+    expect(telemetryLive({}, null)).toMatchObject({
+      on: null,
+      running: null,
+      tone: 'unknown',
+    })
+  })
+})
diff --git a/web/src/features/vm/seed-settings.ts b/web/src/features/vm/seed-settings.ts
new file mode 100644
index 000000000..434934fe6
--- /dev/null
+++ b/web/src/features/vm/seed-settings.ts
@@ -0,0 +1,159 @@
+import type { VmKernelSnapshot, VmSeedSettings } from '@/types/panel-vm'
+import {
+  telemetryEnabled,
+  telemetrySeedFlags,
+  telemetryView,
+  type TelemetrySeedFlags,
+} from '@/features/vm/telemetry-policy'
+import { telemetryStatusLabel } from '@/features/vm/telemetry-status'
+
+export const DEFAULT_CLAUDE_SETTING =
+  'CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1'
+
+export const REJECT_FLAGS = [
+  ['reject_client_settings', '拒客户端 settings'],
+  ['reject_client_metadata_identity', '拒客户端身份'],
+] as const
+
+const TOP_KEYS = ['theme', 'autoUpdates', 'grove_enabled'] as const
+
+export type SettingRow = {
+  key: string
+  value: string
+  /** True when this env key is also named in the editable claude.setting text. */
+  inClaudeSetting: boolean
+}
+
+export type SeedDraft = TelemetrySeedFlags & {
+  claude_setting: string
+  reject_client_settings: boolean
+  reject_client_metadata_identity: boolean
+}
+
+type ObservedTelemetry = NonNullable<VmKernelSnapshot['telemetry']>
+
+function asRecord(value: unknown): Record<string, unknown> | null {
+  if (!value || typeof value !== 'object' || Array.isArray(value)) return null
+  return value as Record<string, unknown>
+}
+
+function settingText(value: unknown, fallback = ''): string {
+  return typeof value === 'string' ? value.replace(/\r\n?/g, '\n') : fallback
+}
+
+/** Keys named by `KEY=value` lines. Comments and blanks do not count. */
+export function claudeSettingKeys(text: string): Set<string> {
+  const keys = new Set<string>()
+  for (const line of text.split('\n')) {
+    const trimmed = line.trim()
+    if (!trimmed || trimmed.startsWith('#')) continue
+    const eq = trimmed.indexOf('=')
+    const key = (eq === -1 ? trimmed : trimmed.slice(0, eq)).trim()
+    if (/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) keys.add(key)
+  }
+  return keys
+}
+
+/**
+ * Rows from the slot file `settings.json`. Missing file yields no rows —
+ * the policy default string is not a substitute for the file.
+ */
+export function settingsRows(
+  settings: Record<string, unknown> | null | undefined,
+  claudeSetting: string
+): SettingRow[] {
+  const root = asRecord(settings)
+  if (!root) return []
+  const env = asRecord(root.env) || {}
+  const named = claudeSettingKeys(claudeSetting)
+  const keys = Object.keys(env)
+  const rows: SettingRow[] = keys.map((key) => ({
+    key,
+    value: env[key] == null ? '' : String(env[key]),
+    inClaudeSetting: named.has(key),
+  }))
+  for (const key of TOP_KEYS) {
+    if (!(key in root)) continue
+    rows.push({
+      key,
+      value: root[key] == null ? '' : String(root[key]),
+      inClaudeSetting: false,
+    })
+  }
+  return rows
+}
+
+export function seedDraftOf(
+  seed: VmSeedSettings | null | undefined
+): SeedDraft {
+  const policy = asRecord(seed?.seed_policy) || {}
+  const enabled = telemetryEnabled(policy)
+  // null/undefined: the file was not read, so the policy text is the only copy.
+  // An empty string is a real file and stays empty.
+  const fileSetting = settingText(seed?.claude_setting)
+  const policySetting = settingText(policy.claude_setting, '')
+  return {
+    ...telemetrySeedFlags(enabled),
+    claude_setting:
+      seed?.claude_setting == null
+        ? policySetting || DEFAULT_CLAUDE_SETTING
+        : fileSetting,
+    reject_client_settings:
+      'reject_client_settings' in policy
+        ? policy.reject_client_settings !== false
+        : true,
+    reject_client_metadata_identity:
+      'reject_client_metadata_identity' in policy
+        ? policy.reject_client_metadata_identity !== false
+        : true,
+  }
+}
+
+export function sameDraft(a: SeedDraft, b: SeedDraft): boolean {
+  return (
+    telemetryEnabled(a) === telemetryEnabled(b) &&
+    a.claude_setting === b.claude_setting &&
+    a.reject_client_settings === b.reject_client_settings &&
+    a.reject_client_metadata_identity === b.reject_client_metadata_identity
+  )
+}
+
+/** Body for PUT /seed-settings. Mirrors follow the telemetry bit. */
+export function seedSaveBody(
+  draft: SeedDraft
+): Record<string, boolean | string> {
+  return {
+    ...telemetrySeedFlags(telemetryEnabled(draft)),
+    claude_setting: draft.claude_setting.replace(/\n+$/g, ''),
+    reject_client_settings: draft.reject_client_settings,
+    reject_client_metadata_identity: draft.reject_client_metadata_identity,
+  }
+}
+
+export type TelemetryLive = {
+  on: boolean | null
+  running: boolean | null
+  label: string
+  tone: 'on' | 'off' | 'unknown'
+}
+
+/**
+ * Live lamp. `running` is the process probe and is never rewritten into
+ * on/off. Configured on/off comes from the seed bit when a policy exists.
+ */
+export function telemetryLive(
+  seed: VmSeedSettings | null | undefined,
+  observed: ObservedTelemetry | null | undefined
+): TelemetryLive {
+  const policy = asRecord(seed?.seed_policy)
+  const view = telemetryView(policy, observed)
+  const enabled = view?.enabled
+  const running = observed?.running
+  const on = enabled === true ? true : enabled === false ? false : null
+  return {
+    on,
+    running: typeof running === 'boolean' ? running : null,
+    label: telemetryStatusLabel(view),
+    tone: on === true ? 'on' : on === false ? 'off' : 'unknown',
+  }
+}

From 85db55990d07e80bc2edeb70f8510c17c1cd2c0f Mon Sep 17 00:00:00 2001
From: dofastted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 20:40:32 +0800
Subject: [PATCH 11/12] =?UTF-8?q?fix(web):=20=E7=A9=BA=E7=9A=84=20claude.s?=
 =?UTF-8?q?etting=20=E4=B8=8D=E5=86=8D=E6=98=BE=E7=A4=BA=E6=88=90=E9=BB=98?=
 =?UTF-8?q?=E8=AE=A4=E9=85=8D=E7=BD=AE?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

编辑框只显示当前槽文件的原文。文件缺失或为空都保持空白，不再回退到策略文本或默认串。
---
 web/src/features/vm/seed-policy-card.tsx  |  5 +----
 web/src/features/vm/seed-settings.test.ts | 17 +++++++++++------
 web/src/features/vm/seed-settings.ts      | 12 +-----------
 3 files changed, 13 insertions(+), 21 deletions(-)

diff --git a/web/src/features/vm/seed-policy-card.tsx b/web/src/features/vm/seed-policy-card.tsx
index 77715cd1a..561e01544 100644
--- a/web/src/features/vm/seed-policy-card.tsx
+++ b/web/src/features/vm/seed-policy-card.tsx
@@ -6,7 +6,6 @@ import { Label } from '@/components/ui/label'
 import { Switch } from '@/components/ui/switch'
 import { Textarea } from '@/components/ui/textarea'
 import {
-  DEFAULT_CLAUDE_SETTING,
   REJECT_FLAGS,
   seedDraftOf,
   seedSaveBody,
@@ -17,8 +16,6 @@ import {
 } from '@/features/vm/seed-settings'
 import { telemetryEnabled } from '@/features/vm/telemetry-policy'
 
-export { DEFAULT_CLAUDE_SETTING }
-
 type ObservedTelemetry = NonNullable<VmKernelSnapshot['telemetry']>
 
 function Lamp({ tone }: { tone: 'on' | 'off' | 'unknown' }) {
@@ -235,7 +232,7 @@ export function SeedPolicyCard({
             onChange={(event) => patch({ claude_setting: event.target.value })}
             className='min-h-28 font-mono text-xs'
             spellCheck={false}
-            placeholder={DEFAULT_CLAUDE_SETTING}
+            placeholder='每行 KEY=value'
           />
           <p className='text-xs text-muted-foreground'>
             {syncTelemetry
diff --git a/web/src/features/vm/seed-settings.test.ts b/web/src/features/vm/seed-settings.test.ts
index 4897c174e..535f7674f 100644
--- a/web/src/features/vm/seed-settings.test.ts
+++ b/web/src/features/vm/seed-settings.test.ts
@@ -82,12 +82,17 @@ describe('seed draft', () => {
     expect(draft.reject_client_settings).toBe(true)
   })
 
-  it('keeps an empty claude.setting file empty', () => {
-    const draft = seedDraftOf({
-      seed_policy: { claude_setting: 'FROM_POLICY=1' },
-      claude_setting: '',
-    })
-    expect(draft.claude_setting).toBe('')
+  it('keeps a missing or empty claude.setting empty', () => {
+    expect(
+      seedDraftOf({
+        seed_policy: { claude_setting: 'FROM_POLICY=1' },
+        claude_setting: '',
+      }).claude_setting
+    ).toBe('')
+    expect(
+      seedDraftOf({ seed_policy: { claude_setting: 'FROM_POLICY=1' } })
+        .claude_setting
+    ).toBe('')
   })
 })
 
diff --git a/web/src/features/vm/seed-settings.ts b/web/src/features/vm/seed-settings.ts
index 434934fe6..e16b290ef 100644
--- a/web/src/features/vm/seed-settings.ts
+++ b/web/src/features/vm/seed-settings.ts
@@ -7,9 +7,6 @@ import {
 } from '@/features/vm/telemetry-policy'
 import { telemetryStatusLabel } from '@/features/vm/telemetry-status'
 
-export const DEFAULT_CLAUDE_SETTING =
-  'CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1'
-
 export const REJECT_FLAGS = [
   ['reject_client_settings', '拒客户端 settings'],
   ['reject_client_metadata_identity', '拒客户端身份'],
@@ -88,16 +85,9 @@ export function seedDraftOf(
 ): SeedDraft {
   const policy = asRecord(seed?.seed_policy) || {}
   const enabled = telemetryEnabled(policy)
-  // null/undefined: the file was not read, so the policy text is the only copy.
-  // An empty string is a real file and stays empty.
-  const fileSetting = settingText(seed?.claude_setting)
-  const policySetting = settingText(policy.claude_setting, '')
   return {
     ...telemetrySeedFlags(enabled),
-    claude_setting:
-      seed?.claude_setting == null
-        ? policySetting || DEFAULT_CLAUDE_SETTING
-        : fileSetting,
+    claude_setting: settingText(seed?.claude_setting),
     reject_client_settings:
       'reject_client_settings' in policy
         ? policy.reject_client_settings !== false

From 2c62e8e0534e88042238a0f38ccd2845690baac9 Mon Sep 17 00:00:00 2001
From: dofastted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 20:43:19 +0800
Subject: [PATCH 12/12] =?UTF-8?q?fix(panel):=20=E7=BC=BA=E5=A4=B1=E7=9A=84?=
 =?UTF-8?q?=20claude.setting=20=E8=BF=94=E5=9B=9E=20null?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

GET /seed-settings 不再用策略默认串填补不存在的文件。空文件仍返回空串，策略字段保持独立。
---
 src/lib/admin/panel-routes.mjs            |  2 +-
 test/unit/panel-vm-seed-settings.test.mjs | 75 +++++++++++++++++++++++
 2 files changed, 76 insertions(+), 1 deletion(-)
 create mode 100644 test/unit/panel-vm-seed-settings.test.mjs

diff --git a/src/lib/admin/panel-routes.mjs b/src/lib/admin/panel-routes.mjs
index 80b67bd18..e2fb1027f 100644
--- a/src/lib/admin/panel-routes.mjs
+++ b/src/lib/admin/panel-routes.mjs
@@ -3535,7 +3535,7 @@ export function createPanelHandler(ctx) {
             .replace(/\r\n?/g, '\n')
             .replace(/\n+$/g, '')
         } catch {
-          claude_setting = defaultSeedPolicy(vm.seed_policy || {}).claude_setting
+          // Missing file stays null. The policy default is not this slot's file.
         }
         try {
           kin_seed = JSON.parse(fs.readFileSync(path.join(homeDir, '.claude', 'kin-seed.json'), 'utf8'))
diff --git a/test/unit/panel-vm-seed-settings.test.mjs b/test/unit/panel-vm-seed-settings.test.mjs
new file mode 100644
index 000000000..5926df0bb
--- /dev/null
+++ b/test/unit/panel-vm-seed-settings.test.mjs
@@ -0,0 +1,75 @@
+import test from 'node:test'
+import assert from 'node:assert/strict'
+import fs from 'node:fs'
+import os from 'node:os'
+import path from 'node:path'
+import { createPanelHandler } from '../../src/lib/admin/panel-routes.mjs'
+import { DEFAULT_CLAUDE_SETTING } from '../../src/lib/protocol/seed-policy.mjs'
+
+function seed(root, id) {
+  const dir = path.join(root, 'vms')
+  fs.mkdirSync(dir, { recursive: true })
+  fs.writeFileSync(
+    path.join(dir, `${id}.json`),
+    JSON.stringify({
+      id,
+      name: id,
+      status: 'stopped',
+      seed_policy: { claude_setting: 'FROM_POLICY=1' },
+    }),
+  )
+}
+
+function handler(project) {
+  const response = {}
+  const handlePanel = createPanelHandler({
+    cfg: { paths: { project }, vm: { id: null } },
+    requireAuth(req) {
+      req.apiKeyKind = 'master'
+      req.panelRole = 'admin'
+      return true
+    },
+    json(_res, status, payload) {
+      response.status = status
+      response.body = payload
+      return true
+    },
+    readBody: async () => ({}),
+    proxyPool: { unbindVm() {} },
+  })
+  return { handlePanel, response }
+}
+
+test('GET seed-settings keeps a missing claude.setting null', async () => {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'kin-seed-get-'))
+  try {
+    seed(root, 'vm-01')
+    const { handlePanel, response } = handler(root)
+    await handlePanel({ method: 'GET' }, {}, new URL('http://localhost/api/panel/vms/vm-01/seed-settings'))
+    assert.equal(response.status, 200, JSON.stringify(response.body).slice(0, 400))
+    assert.equal(response.body.data.claude_setting, null)
+    assert.equal(response.body.data.settings_json, null)
+    assert.equal(response.body.data.seed_policy.claude_setting, 'FROM_POLICY=1')
+  } finally {
+    fs.rmSync(root, { recursive: true, force: true })
+  }
+})
+
+test('GET seed-settings returns an empty claude.setting file as empty', async () => {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'kin-seed-empty-'))
+  try {
+    seed(root, 'vm-01')
+    const dir = path.join(root, 'vms', 'vm-01', 'cli-home', '.claude')
+    fs.mkdirSync(dir, { recursive: true })
+    fs.writeFileSync(path.join(dir, 'claude.setting'), '\n')
+    fs.writeFileSync(path.join(dir, 'settings.json'), JSON.stringify({ env: { TZ: 'UTC' } }))
+    const { handlePanel, response } = handler(root)
+    await handlePanel({ method: 'GET' }, {}, new URL('http://localhost/api/panel/vms/vm-01/seed-settings'))
+    assert.equal(response.status, 200, JSON.stringify(response.body).slice(0, 400))
+    assert.equal(response.body.data.claude_setting, '')
+    assert.equal(response.body.data.seed_policy.claude_setting, '')
+    assert.equal(response.body.data.settings_json.env.TZ, 'UTC')
+  } finally {
+    fs.rmSync(root, { recursive: true, force: true })
+  }
+})