From ce99542a8fc3ee76b7a23d71c9e2328efa982dfc Mon Sep 17 00:00:00 2001
From: dofastted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 15:03:53 +0800
Subject: [PATCH 01/19] feat(seed): add editable claude.setting to seed policy

---
 docs/PANEL_API.md                        |  2 +-
 src/lib/admin/panel-routes.mjs           | 19 ++++++++++--
 src/lib/cluster/remote-slot-files.mjs    |  7 ++++-
 src/lib/protocol/seed-policy.mjs         | 11 +++++++
 src/lib/vm/slot-seed.mjs                 | 11 ++++++-
 test/unit/seed-policy.test.mjs           |  6 ++++
 test/unit/slot-seed.test.mjs             | 17 +++++++++++
 web/src/features/vm/seed-policy-card.tsx | 37 ++++++++++++++++++++++--
 web/src/types/panel-vm.ts                |  1 +
 9 files changed, 104 insertions(+), 7 deletions(-)

diff --git a/docs/PANEL_API.md b/docs/PANEL_API.md
index 2390218dc..a073c2041 100644
--- a/docs/PANEL_API.md
+++ b/docs/PANEL_API.md
@@ -83,7 +83,7 @@
 | POST | `/vms/:id/oauth/generate-auth-url` | PKCE 授权链接；无 SOCKS5 拒绝。`{ flavor: "claude_code" }` 为官方 Claude Code 授权页。`{ flavor: "setup_token" }` 为 inference-only PKCE，不启槽内 CLI |
 | POST | `/vms/:id/oauth/exchange-code` | 粘贴授权码，经槽代理换票。完整 OAuth 才排队初装。flavor 以 session 为准 |
 | GET/POST | `/vms/:id/official-cc-bootstrap` | 初装进度 / `{ manual:true }` 再跑 |
-| GET/PUT | `/vms/:id/seed-settings` | 播种；强制保留 telemetry/bedrock/vertex 等 env |
+| GET/PUT | `/vms/:id/seed-settings` | 播种；强制保留 telemetry/bedrock/vertex 等 env；`claude_setting` 可编辑并写入槽内 `.claude/claude.setting` |
 | POST | `/vms/:id/collect-identity` | guest 采集（locale/tz/`guest_machine_id`） |
 | POST | `/vms/:id/reload` | 重载该槽 worker |
 | GET | `/wrap-cli` | kernel / wrap 样本 inspect：`ok, dir, kernel_bin, glibc_shim, wrapper, meta, kernel`。`kernel.source` 为 `configured`（仓内 `KIN_KERNEL_BIN` / `bin/kin-kernel`）或 `sample` |
diff --git a/src/lib/admin/panel-routes.mjs b/src/lib/admin/panel-routes.mjs
index 36bbfb877..2278ceafd 100644
--- a/src/lib/admin/panel-routes.mjs
+++ b/src/lib/admin/panel-routes.mjs
@@ -3524,21 +3524,33 @@ export function createPanelHandler(ctx) {
         if (!vm) return json(res, 404, { ok: false, error: { message: 'vm not found' } })
         const homeDir = path.join(cfg.paths.project, 'vms', id, 'cli-home')
         let settings_json = null
+        let claude_setting = null
         let kin_seed = null
         try {
           settings_json = JSON.parse(fs.readFileSync(path.join(homeDir, '.claude', 'settings.json'), 'utf8'))
         } catch {}
+        try {
+          claude_setting = fs
+            .readFileSync(path.join(homeDir, '.claude', 'claude.setting'), 'utf8')
+            .replace(/\r\n?/g, '\n')
+            .replace(/\n+$/g, '')
+        } catch {
+          claude_setting = defaultSeedPolicy(vm.seed_policy || {}).claude_setting
+        }
         try {
           kin_seed = JSON.parse(fs.readFileSync(path.join(homeDir, '.claude', 'kin-seed.json'), 'utf8'))
         } catch {}
+        const seed_policy = defaultSeedPolicy(vm.seed_policy || {})
+        if (claude_setting !== null) seed_policy.claude_setting = claude_setting
         return json(
           res,
           200,
           panel.ok({
             vm_id: id,
-            seed_policy: defaultSeedPolicy(vm.seed_policy || {}),
-            ...seedTelemetryContract(defaultSeedPolicy(vm.seed_policy || {})),
+            seed_policy,
+            ...seedTelemetryContract(seed_policy),
             settings_json,
+            claude_setting,
             kin_seed,
             cli_home: homeDir,
           }),
@@ -3559,6 +3571,8 @@ export function createPanelHandler(ctx) {
         if (body.theme !== undefined) merged.theme = body.theme
         if (body.extra_env !== undefined) merged.extra_env = body.extra_env
         if (body.settings_json_override !== undefined) merged.settings_json_override = body.settings_json_override
+        if (body.claude_setting !== undefined) merged.claude_setting = body.claude_setting
+        if (body['claude.setting'] !== undefined) merged.claude_setting = body['claude.setting']
         const next = defaultSeedPolicy(merged)
         if (body.settings_json_override !== undefined) next.settings_json_override = body.settings_json_override
         if (body.extra_env !== undefined) next.extra_env = body.extra_env || {}
@@ -3579,6 +3593,7 @@ export function createPanelHandler(ctx) {
             seed_policy: next,
             ...seedTelemetryContract(next),
             settings_json: written.settings || null,
+            claude_setting: written.claude_setting || '',
             kin_seed: written.kin_seed || null,
           }),
         )
diff --git a/src/lib/cluster/remote-slot-files.mjs b/src/lib/cluster/remote-slot-files.mjs
index de427cd4a..7d64cf3fd 100644
--- a/src/lib/cluster/remote-slot-files.mjs
+++ b/src/lib/cluster/remote-slot-files.mjs
@@ -31,7 +31,12 @@ import {
 
 export const SLOT_FILE_SETS = Object.freeze({
   run: ['run/kernel.json', 'run/worker.json', 'run/internal.token'],
-  seed: ['cli-home/.claude/settings.json', 'cli-home/.claude/kin-seed.json', 'machine-id'],
+  seed: [
+    'cli-home/.claude/settings.json',
+    'cli-home/.claude/claude.setting',
+    'cli-home/.claude/kin-seed.json',
+    'machine-id',
+  ],
   touch: ['run/telemetry.touch'],
 })
 const CREDENTIALS = 'cli-home/.claude/credentials.json'
diff --git a/src/lib/protocol/seed-policy.mjs b/src/lib/protocol/seed-policy.mjs
index 6b60f9d0c..4d8de1743 100644
--- a/src/lib/protocol/seed-policy.mjs
+++ b/src/lib/protocol/seed-policy.mjs
@@ -30,6 +30,16 @@ export function isTelemetryEnabled(pol = {}) {
  */
 export const NONESSENTIAL_TRAFFIC_ENV_KEY = 'CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC'
 
+// Keep a visible, editable copy of the Claude opt-out setting next to the
+// generated settings.json. The file is intentionally plain text so operators
+// can inspect or replace it without having to edit JSON.
+export const DEFAULT_CLAUDE_SETTING = `${NONESSENTIAL_TRAFFIC_ENV_KEY}=1`
+
+export function normalizeClaudeSetting(value) {
+  if (typeof value !== 'string') return DEFAULT_CLAUDE_SETTING
+  return value.replace(/\r\n?/g, '\n').replace(/\n+$/g, '')
+}
+
 export const TELEMETRY_KILL_ENV = Object.freeze({
   DISABLE_TELEMETRY: '1',
 })
@@ -141,6 +151,7 @@ export function defaultSeedPolicy(partial = {}) {
     reject_client_metadata_identity: partial.reject_client_metadata_identity !== false,
     theme: partial.theme || 'dark',
     extra_env: partial.extra_env && typeof partial.extra_env === 'object' ? partial.extra_env : {},
+    claude_setting: normalizeClaudeSetting(partial.claude_setting),
     settings_json_override:
       partial.settings_json_override && typeof partial.settings_json_override === 'object'
         ? partial.settings_json_override
diff --git a/src/lib/vm/slot-seed.mjs b/src/lib/vm/slot-seed.mjs
index bcf43d304..f4cd28e70 100644
--- a/src/lib/vm/slot-seed.mjs
+++ b/src/lib/vm/slot-seed.mjs
@@ -46,10 +46,19 @@ export function writeSlotSeedFiles(projectRoot, vm, seedPolicy = null) {
     cli_version: OFFICIAL_CLI_VERSION,
   })
   fs.writeFileSync(path.join(claudeDir, 'settings.json'), JSON.stringify(settings, null, 2))
+  fs.writeFileSync(path.join(claudeDir, 'claude.setting'), `${pol.claude_setting}\n`, { mode: 0o600 })
   fs.writeFileSync(path.join(claudeDir, 'kin-seed.json'), JSON.stringify(seedDoc, null, 2))
   let telemetry = { wrote: false }
   try {
     telemetry = syncWorkerTelemetry({ ...vm, seed_policy: pol }, projectRoot)
   } catch {}
-  return { wrote: true, homeDir, seed_policy: pol, settings, kin_seed: seedDoc, telemetry }
+  return {
+    wrote: true,
+    homeDir,
+    seed_policy: pol,
+    settings,
+    claude_setting: pol.claude_setting,
+    kin_seed: seedDoc,
+    telemetry,
+  }
 }
diff --git a/test/unit/seed-policy.test.mjs b/test/unit/seed-policy.test.mjs
index 692e6a791..390110c1d 100644
--- a/test/unit/seed-policy.test.mjs
+++ b/test/unit/seed-policy.test.mjs
@@ -7,8 +7,14 @@ import {
   buildSeedSettingsEnv,
   stripLegacyScriptEnv,
   LEGACY_SCRIPT_ENV_KEYS,
+  DEFAULT_CLAUDE_SETTING,
 } from '../../src/lib/protocol/seed-policy.mjs'
 
+test('default seed policy includes the editable claude setting', () => {
+  assert.equal(defaultSeedPolicy().claude_setting, DEFAULT_CLAUDE_SETTING)
+  assert.equal(defaultSeedPolicy({ claude_setting: 'FOO=bar\r\n' }).claude_setting, 'FOO=bar')
+})
+
 test('explicit opt-in removes telemetry kill switches; omitted policy retains them', () => {
   assert.equal(buildSlotSettingsEnv(standardSeedPolicy()).DISABLE_TELEMETRY, '1')
   assert.equal(buildSlotSettingsEnv(standardSeedPolicy({ telemetry_disabled: false })).DISABLE_TELEMETRY, undefined)
diff --git a/test/unit/slot-seed.test.mjs b/test/unit/slot-seed.test.mjs
index 7fa801ac8..0dbcacb3c 100644
--- a/test/unit/slot-seed.test.mjs
+++ b/test/unit/slot-seed.test.mjs
@@ -42,6 +42,7 @@ test('writeSlotSeedFiles writes latest settings and workstation kin-seed', () =>
   const out = writeSlotSeedFiles(root, vm)
   assert.equal(out.wrote, true)
   const settings = JSON.parse(fs.readFileSync(path.join(leftover, 'settings.json'), 'utf8'))
+  const claudeSetting = fs.readFileSync(path.join(leftover, 'claude.setting'), 'utf8')
   const seed = JSON.parse(fs.readFileSync(path.join(leftover, 'kin-seed.json'), 'utf8'))
   assert.equal(settings.env.DISABLE_TELEMETRY, undefined)
   assert.equal(settings.env.CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC, '1')
@@ -52,6 +53,8 @@ test('writeSlotSeedFiles writes latest settings and workstation kin-seed', () =>
   assert.equal(settings.env.TZ, 'America/Los_Angeles')
   assert.equal(settings.autoUpdates, false)
   assert.equal(settings.grove_enabled, false)
+  assert.equal(claudeSetting, 'CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1\n')
+  assert.equal(out.claude_setting, 'CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1')
   assert.equal(seed.seed_policy.grove_enabled, false)
   assert.equal(seed.seed_policy.disable_nonessential_traffic, true)
   assert.equal(seed.schema, KIN_SEED_SCHEMA)
@@ -63,6 +66,20 @@ test('writeSlotSeedFiles writes latest settings and workstation kin-seed', () =>
   fs.rmSync(root, { recursive: true, force: true })
 })
 
+test('writeSlotSeedFiles preserves an editable claude.setting', () => {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'kin-slot-setting-'))
+  const vm = {
+    id: 'vm-setting',
+    seed_policy: standardSeedPolicy({ claude_setting: 'FOO=bar\r\nBAZ=qux\n' }),
+  }
+  writeSlotSeedFiles(root, vm)
+  assert.equal(
+    fs.readFileSync(path.join(root, 'vms', vm.id, 'cli-home', '.claude', 'claude.setting'), 'utf8'),
+    'FOO=bar\nBAZ=qux\n',
+  )
+  fs.rmSync(root, { recursive: true, force: true })
+})
+
 test('applySeedAfterOfficialInit uses the same writer', () => {
   const root = fs.mkdtempSync(path.join(os.tmpdir(), 'kin-init-seed-'))
   const vm = {
diff --git a/web/src/features/vm/seed-policy-card.tsx b/web/src/features/vm/seed-policy-card.tsx
index fd9175b54..2ff1573f9 100644
--- a/web/src/features/vm/seed-policy-card.tsx
+++ b/web/src/features/vm/seed-policy-card.tsx
@@ -3,31 +3,38 @@ import { Button } from '@/components/ui/button'
 import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/card'
 import { Label } from '@/components/ui/label'
 import { Switch } from '@/components/ui/switch'
+import { Textarea } from '@/components/ui/textarea'
 import {
   telemetryEnabled,
   telemetrySeedFlags,
 } from '@/features/vm/telemetry-policy'
 
+export const DEFAULT_CLAUDE_SETTING =
+  'CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1'
+
 const REJECT_FLAGS: [string, string][] = [
   ['reject_client_settings', '拒客户端 settings'],
   ['reject_client_metadata_identity', '拒客户端身份'],
 ]
 
-type SeedPolicy = Record<string, boolean>
+type SeedPolicy = Record<string, boolean | string>
 
 export const SEED_PRESETS: Record<string, SeedPolicy> = {
   standard: {
     ...telemetrySeedFlags(false),
+    claude_setting: DEFAULT_CLAUDE_SETTING,
     reject_client_settings: true,
     reject_client_metadata_identity: true,
   },
   open: {
     ...telemetrySeedFlags(true),
+    claude_setting: DEFAULT_CLAUDE_SETTING,
     reject_client_settings: false,
     reject_client_metadata_identity: false,
   },
   strict: {
     ...telemetrySeedFlags(false),
+    claude_setting: DEFAULT_CLAUDE_SETTING,
     reject_client_settings: true,
     reject_client_metadata_identity: true,
   },
@@ -62,6 +69,10 @@ export function matchSeedPreset(policy: Record<string, unknown>): string {
 
 function normalize(policy: Record<string, unknown>): SeedPolicy {
   const out: SeedPolicy = { ...telemetrySeedFlags(telemetryEnabled(policy)) }
+  out.claude_setting =
+    typeof policy.claude_setting === 'string'
+      ? policy.claude_setting
+      : DEFAULT_CLAUDE_SETTING
   for (const [k] of REJECT_FLAGS) {
     out[k] = k in policy ? !!policy[k] : !!SEED_PRESETS.standard[k]
   }
@@ -91,7 +102,8 @@ export function SeedPolicyCard({
   const saved = normalize(policy)
   const dirty =
     telemetryEnabled(draft) !== telemetryEnabled(saved) ||
-    REJECT_FLAGS.some(([k]) => !!draft[k] !== !!saved[k])
+    REJECT_FLAGS.some(([k]) => !!draft[k] !== !!saved[k]) ||
+    draft.claude_setting !== saved.claude_setting
   const on = telemetryEnabled(draft)
 
   return (
@@ -169,6 +181,27 @@ export function SeedPolicyCard({
             : ' 外部初装「同步遥测」关着，换票不会改写这里的遥测开关。'}
         </p>
 
+        <div className='space-y-2 border-t pt-3'>
+          <Label htmlFor='seed-claude-setting' className='text-sm font-normal'>
+            claude.setting
+          </Label>
+          <Textarea
+            id='seed-claude-setting'
+            value={String(draft.claude_setting || '')}
+            disabled={saving}
+            onChange={(e) =>
+              setDraft({ ...draft, claude_setting: e.target.value })
+            }
+            className='min-h-24 font-mono text-xs'
+            spellCheck={false}
+            placeholder={DEFAULT_CLAUDE_SETTING}
+          />
+          <p className='text-xs text-muted-foreground'>
+            每行一个 Claude 设置。默认写入 <code>{DEFAULT_CLAUDE_SETTING}</code>
+            。
+          </p>
+        </div>
+
         <div className='flex gap-2 border-t pt-3'>
           <Button
             size='sm'
diff --git a/web/src/types/panel-vm.ts b/web/src/types/panel-vm.ts
index 93fb8f463..eff7ca62f 100644
--- a/web/src/types/panel-vm.ts
+++ b/web/src/types/panel-vm.ts
@@ -570,6 +570,7 @@ export type VmSeedSettings = {
   required_env?: Record<string, string>
   note?: string
   settings_json?: Record<string, unknown> | null
+  claude_setting?: string | null
   kin_seed?: Record<string, unknown> | null
   [key: string]: unknown
 }

From a7c3dfb091639d1e2766102977ae2e2de56d848b Mon Sep 17 00:00:00 2001
From: dofastted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 16:34:04 +0800
Subject: [PATCH 02/19] feat(vm): update Go slot services without VM rebuild

---
 deploy/install.sh                     | 11 ++++
 docker/kin-kvm/guest/kin-guest-setup  |  3 +
 docs/PANEL_API.md                     |  2 +-
 docs/TELEMETRY.md                     | 33 ++++++++++
 scripts/fleet-services.mjs            | 10 +++
 scripts/panel-upgrade.sh              |  5 ++
 src/lib/admin/panel-routes.mjs        | 17 +++--
 src/lib/cluster/remote-slot-files.mjs | 29 ++++++++-
 src/lib/cluster/remote-slot.mjs       | 93 +++++++++++++++++++++++----
 src/lib/cluster/slot-image.mjs        |  3 +-
 src/lib/vm/fleet-update.mjs           | 51 ++++++++++++++-
 src/lib/vm/slot-process-status.mjs    | 35 +++++++++-
 12 files changed, 270 insertions(+), 22 deletions(-)
 create mode 100644 docs/TELEMETRY.md
 create mode 100644 scripts/fleet-services.mjs

diff --git a/deploy/install.sh b/deploy/install.sh
index 07f55e41c..5c9761a66 100644
--- a/deploy/install.sh
+++ b/deploy/install.sh
@@ -643,6 +643,7 @@ start_stack() {
     fi
     if KIN_AUTO_SYNC_WRAP="$auto_sync_wrap" compose up -d; then
       wait_health || true
+      refresh_slot_services
       return
     fi
     err "docker compose 失败。日志: docker logs ${SERVICE_NAME}"
@@ -655,6 +656,7 @@ start_stack() {
     cat "$log"
     rm -f "$log"
     wait_health || true
+    refresh_slot_services
     return
   fi
   cat "$log"
@@ -664,6 +666,7 @@ start_stack() {
     if KIN_AUTO_SYNC_WRAP="$auto_sync_wrap" compose up -d --build; then
       rm -f "$log"
       wait_health || true
+      refresh_slot_services
       return
     fi
     guide_changelog_error
@@ -676,6 +679,14 @@ start_stack() {
   exit 1
 }
 
+refresh_slot_services() {
+  # The control-plane image carries the freshly built Go binaries. Publish them
+  # into persistent slot-bin mounts and restart only kin-worker/kin-egress.
+  if ! docker exec "$SERVICE_NAME" node /opt/vm2api/scripts/fleet-services.mjs; then
+    warn "Go slot service refresh failed; VM containers were left untouched"
+  fi
+}
+
 print_banner() {
   echo ""
   echo -e "${CYAN}==============================================${NC}"
diff --git a/docker/kin-kvm/guest/kin-guest-setup b/docker/kin-kvm/guest/kin-guest-setup
index 9f1790df8..441df0c05 100644
--- a/docker/kin-kvm/guest/kin-guest-setup
+++ b/docker/kin-kvm/guest/kin-guest-setup
@@ -93,6 +93,9 @@ link_payload() {
   if [ -e /opt/kin-payload/opt/kin ] || [ -d /opt/kin-payload/opt/kin ]; then
     ln -sfn /opt/kin-payload/opt/kin /opt/kin
   fi
+  if [ -e /opt/kin-payload/opt/kin-live ] || [ -d /opt/kin-payload/opt/kin-live ]; then
+    ln -sfn /opt/kin-payload/opt/kin-live /opt/kin-live
+  fi
 }
 
 apply_identity() {
diff --git a/docs/PANEL_API.md b/docs/PANEL_API.md
index a073c2041..aa031469a 100644
--- a/docs/PANEL_API.md
+++ b/docs/PANEL_API.md
@@ -103,7 +103,7 @@
 | POST | `/vms/create` | 种子 VM + Claude Code home；依赖私有 `kin-computer`。未安装返回 400 `computer_service_missing`，身份生成失败返回 400 `computer_create_failed`。Docker 槽可在 `machine` 里可选传 `docker_cpus`（见下） |
 | POST | `/vms/import` | sessionKey 导入（必须已有 VM+代理） |
 | GET | `/vms/fleet-status` | 全槽更新状态 |
-| POST | `/vms/fleet-update` | 全槽 roll / 采集 |
+| POST | `/vms/fleet-update` | 全槽 roll / 采集；`action=telemetry` 只更新 Go telemetry/egress 服务，不重建 VM |
 | POST | `/vms/reconcile-fingerprints` | 用官方 `~/.claude.json` 对齐指纹 |
 | POST | `/probe` | 全量额度探测 |
 | GET/POST | `/health-probe` | 读/跑官方 hello 健康探测缓存 |
diff --git a/docs/TELEMETRY.md b/docs/TELEMETRY.md
new file mode 100644
index 000000000..4920ccdb0
--- /dev/null
+++ b/docs/TELEMETRY.md
@@ -0,0 +1,33 @@
+# VM telemetry service
+
+Telemetry is an explicit seed-policy opt-in. A newly created VM is disabled;
+setting `telemetry_disabled` to `false` writes the VM's `worker.json` identity
+and starts the Go `kin-worker telemetry` service. Setting it back to `true`
+stops that child process and leaves the VM and its Rust kernel running.
+
+The service reads credentials only from the VM's own Claude home. Its feature
+payload uses facts collected from that VM (including its timezone, OS,
+hardware, shell and runtime versions), never controller-host defaults or a
+synthetic fingerprint. Requests leave through the VM's bound egress, so the
+service observes the VM's actual network address. Uploads are periodic and are idle-gated
+by `run/telemetry.touch`.
+
+`claude.setting` is a plain, editable seed file beside `settings.json` and is
+initialized with:
+
+```text
+CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1
+```
+
+## Service-only updates
+
+Go payloads are copied atomically into each slot's persistent `slot-bin`
+directory. Cluster containers bind that directory at `/opt/kin-live` (and the
+KVM guest payload at `/opt/kin-live`). The panel/fleet `telemetry` action
+restarts only the telemetry child and the `kin-egress` helper; it does not
+rebuild a VM, replace `vms/`, rotate credentials, or restart the Rust kernel.
+
+An update must verify the new binary hash and the replacement process before
+reporting success. A failed service restart is reported per slot so the old VM
+identity remains intact and can be rolled back by republishing the previous
+binary.
diff --git a/scripts/fleet-services.mjs b/scripts/fleet-services.mjs
new file mode 100644
index 000000000..adcfa2128
--- /dev/null
+++ b/scripts/fleet-services.mjs
@@ -0,0 +1,10 @@
+import { runFleetUpdate } from '../src/lib/vm/fleet-update.mjs'
+
+const root = process.argv[2] || process.env.KIN_PROJECT_ROOT || '/opt/vm2api'
+const concurrency = Number(process.argv[3] || 4)
+const report = await runFleetUpdate(root, {
+  action: 'telemetry',
+  concurrency,
+})
+console.log(JSON.stringify(report))
+if (report.failed_count) process.exit(1)
diff --git a/scripts/panel-upgrade.sh b/scripts/panel-upgrade.sh
index 4d2225df7..69c538793 100755
--- a/scripts/panel-upgrade.sh
+++ b/scripts/panel-upgrade.sh
@@ -138,6 +138,11 @@ attempt=0
 while [ "$attempt" -lt 45 ]; do
   if probe verify "$TAG" "$BASELINE"; then
     [ -d .git ] || printf '%s\n' "${TAG#v}" > VERSION
+    # Replace the Go worker/egress payloads in-place; no VM/container rebuild.
+    if ! docker exec "$CONTAINER" node /opt/vm2api/scripts/fleet-services.mjs; then
+      echo "Go service-only update failed; inspect the per-slot report" >&2
+      exit 1
+    fi
     echo "Control plane restarted and verified at $TAG"
     echo "Previously healthy slot kernels verified: $BASELINE"
     exit 0
diff --git a/src/lib/admin/panel-routes.mjs b/src/lib/admin/panel-routes.mjs
index 2278ceafd..80b67bd18 100644
--- a/src/lib/admin/panel-routes.mjs
+++ b/src/lib/admin/panel-routes.mjs
@@ -3580,10 +3580,18 @@ export function createPanelHandler(ctx) {
         vm.updated_at = new Date().toISOString()
         atomicWriteJson(vmPath, vm, { mode: 0o600 })
         const written = writeSlotSeedFiles(cfg.paths.project, vm, next)
-        if (next.telemetry_disabled === false && telemetryWasOff) {
-          try {
-            await reloadSlotReady(vm, cfg.paths.project, { routing: ctx.routingConfig })
-          } catch {}
+        let service = null
+        if (
+          vm.status === 'running' &&
+          (next.telemetry_disabled !== telemetryWasOff || body.telemetry_service_restart === true)
+        ) {
+          const report = await runFleetUpdate(cfg.paths.project, {
+            action: 'telemetry',
+            ids: [id],
+            concurrency: 1,
+            routing: ctx.routingConfig,
+          })
+          service = report.items?.[0] || report
         }
         return json(
           res,
@@ -3595,6 +3603,7 @@ export function createPanelHandler(ctx) {
             settings_json: written.settings || null,
             claude_setting: written.claude_setting || '',
             kin_seed: written.kin_seed || null,
+            service,
           }),
         )
       }
diff --git a/src/lib/cluster/remote-slot-files.mjs b/src/lib/cluster/remote-slot-files.mjs
index 7276601bd..1fc357f5c 100644
--- a/src/lib/cluster/remote-slot-files.mjs
+++ b/src/lib/cluster/remote-slot-files.mjs
@@ -18,6 +18,7 @@
  */
 
 import fs from 'node:fs'
+import crypto from 'node:crypto'
 import path from 'node:path'
 import { nodeSession, remoteSlotDir, remoteSlotOwner, vmNodeId } from './placement.mjs'
 import { hasCredentialPresence, mirrorWorkerCredentialsToVm } from '../oauth/oauth-credentials.mjs'
@@ -43,6 +44,7 @@ export const SLOT_FILE_SETS = Object.freeze({
 })
 const CREDENTIALS = 'cli-home/.claude/credentials.json'
 const TOUCH_PUSH_MS = 30_000
+const SLOT_BINARIES = Object.freeze(['kin-worker', 'kin-egress'])
 
 /** Local vms/<id>/ path → node path: the home's `.claude` lives in the host-owned `claude/` mount. */
 export function remoteSlotPath(rel) {
@@ -62,7 +64,7 @@ async function prepareRemoteDir(session, vm) {
   const dir = remoteSlotDir(session.host, vm.id)
   const owner = remoteSlotOwner(session.host, vm)
   // Mount roots only: nothing here resolves through a path the guest can rewrite.
-  const roots = [`${dir}/run`, `${dir}/claude`, `${dir}/cli-home`].map(shellQuote).join(' ')
+  const roots = [`${dir}/run`, `${dir}/claude`, `${dir}/cli-home`, `${dir}/slot-bin`].map(shellQuote).join(' ')
   // Docker creates a missing bind source as root:root, which the slot uid cannot write.
   const chown = session.host.uid === 0 ? ` && chown ${owner.uid}:${owner.gid} ${shellQuote(dir)} ${roots}` : ''
   await runRemote(session.client, `umask 077 && mkdir -p ${roots} && chmod 700 ${shellQuote(dir)} ${roots}${chown}`, {
@@ -87,6 +89,7 @@ export async function pushSlotFiles(vm, slotDir, sets = ['run', 'seed'], session
   const remote = remoteSlotDir(s.host, vm.id)
   const owner = ownerFor(s, vm)
   const pushed = []
+  const digest = crypto.createHash('sha256')
   for (const rel of sets.flatMap((name) => SLOT_FILE_SETS[name] || [])) {
     const local = path.join(slotDir, rel)
     let data
@@ -102,6 +105,30 @@ export async function pushSlotFiles(vm, slotDir, sets = ['run', 'seed'], session
   return { pushed }
 }
 
+/** Publish Go service payloads into the persistent per-slot mount. */
+export async function pushSlotBinaries(vm, projectRoot, session = null) {
+  const s = session || (await nodeSession(vmNodeId(vm)))
+  await prepareRemoteDir(s, vm)
+  const sftp = await openSftp(s.client)
+  const remote = `${remoteSlotDir(s.host, vm.id)}/slot-bin`
+  const owner = ownerFor(s, vm)
+  const pushed = []
+  for (const name of SLOT_BINARIES) {
+    const local =
+      process.env[name === 'kin-worker' ? 'KIN_WORKER_BIN' : 'KIN_EGRESS_BIN'] || path.join(projectRoot, 'bin', name)
+    let data
+    try {
+      data = fs.readFileSync(local)
+    } catch {
+      continue
+    }
+    await writeRemoteFile(sftp, `${remote}/${name}`, data, { mode: 0o755, owner })
+    digest.update(name).update(data)
+    pushed.push(name)
+  }
+  return { pushed, digest: digest.digest('hex') }
+}
+
 /** Explicit import only: replace the remote credential with the local one. */
 export async function pushSlotCredentials(vm, slotDir, session = null) {
   const s = session || (await nodeSession(vmNodeId(vm)))
diff --git a/src/lib/cluster/remote-slot.mjs b/src/lib/cluster/remote-slot.mjs
index 92cce7e87..24bbd9f21 100644
--- a/src/lib/cluster/remote-slot.mjs
+++ b/src/lib/cluster/remote-slot.mjs
@@ -66,11 +66,18 @@ import {
   vmNodeId,
 } from './placement.mjs'
 import { openSftp, readRemoteFileNoFollow, runRemote, shellQuote, writeRemoteFile } from './remote-fs.mjs'
-import { pushSlotFiles, reconcileSlotCredentials, remoteSlotPath, removeRemoteSlotDir } from './remote-slot-files.mjs'
+import {
+  pushSlotBinaries,
+  pushSlotFiles,
+  reconcileSlotCredentials,
+  remoteSlotPath,
+  removeRemoteSlotDir,
+} from './remote-slot-files.mjs'
 import { REMOTE_WORKER_BIN, slotImageSpec } from './slot-image.mjs'
 
 /** Bump when the slot's mount layout changes; a running container with an older label is recreated. */
-const SLOT_LAYOUT = '2'
+const SLOT_LAYOUT = '3'
+const LIVE_BIN = '/opt/kin-live'
 
 function failure(err, fallbackCode = 'remote_slot_failed') {
   return { ok: false, code: err?.code || fallbackCode, error: String(err?.message || err) }
@@ -164,15 +171,22 @@ export function slotEgressNames(vmId) {
  * (kincli) could not open the root-owned file and crash-looped on EACCES. The
  * user is part of the digest so a helper created under the old spec is rebuilt.
  */
-export function remoteEgressContainer({ vmId, proxyId, dir, imageRef, body, host }) {
+export function remoteEgressContainer({ vmId, proxyId, dir, imageRef, body, host, binaryDigest = '' }) {
   const user = `${host.uid}:${host.gid}`
-  const digest = crypto.createHash('sha256').update(body).update(imageRef).update(user).digest('hex').slice(0, 16)
+  const digest = crypto
+    .createHash('sha256')
+    .update(body)
+    .update(imageRef)
+    .update(user)
+    .update(binaryDigest)
+    .digest('hex')
+    .slice(0, 16)
   return {
     digest,
     spec: {
       Image: imageRef,
       User: user,
-      Cmd: ['/usr/local/bin/kin-egress', '-config', '/etc/kin-egress/egress.json'],
+      Cmd: [`${LIVE_BIN}/kin-egress`, '-config', '/etc/kin-egress/egress.json'],
       Labels: {
         'kin.egress': '1',
         'kin.egress.vm': vmId,
@@ -182,7 +196,7 @@ export function remoteEgressContainer({ vmId, proxyId, dir, imageRef, body, host
       },
       HostConfig: {
         NetworkMode: 'host',
-        Binds: [`${dir}:/etc/kin-egress:ro`],
+        Binds: [`${dir}:/etc/kin-egress:ro`, `${path.posix.join(dir, '..', 'slot-bin')}:${LIVE_BIN}:ro`],
         RestartPolicy: { Name: 'unless-stopped' },
         ReadonlyRootfs: true,
         CapDrop: ['ALL'],
@@ -207,7 +221,7 @@ export function canReuseRemoteEgress(existing, digest) {
  * kin-egress (host-network container from the slot image) + iptables REDIRECT,
  * exactly like egress.mjs does on the control plane.
  */
-export async function ensureRemoteEgress(session, vm, { imageRef }) {
+export async function ensureRemoteEgress(session, vm, { imageRef, binaryDigest = '' }) {
   const proxy = vm.proxy
   const blocked = proxyBlockedReason(proxy)
   if (blocked) return { ok: false, code: blocked, error: blocked }
@@ -229,6 +243,12 @@ export async function ensureRemoteEgress(session, vm, { imageRef }) {
     return { ok: false, code: 'egress_sudo_required', error: '节点需要 root 或免密 sudo 才能为 SOCKS5 出口写 iptables' }
   }
   const names = slotEgressNames(vm.id)
+  // Keep the helper's executable on the persistent mount even when egress is
+  // enabled independently of a slot start/update.
+  await runRemote(
+    session.client,
+    `umask 077 && mkdir -p ${shellQuote(`${remoteSlotDir(session.host, vm.id)}/slot-bin`)}`,
+  )
   const net = await ensureRemoteNetwork(session.docker, {
     name: names.network,
     bridge: names.bridge,
@@ -248,7 +268,15 @@ export async function ensureRemoteEgress(session, vm, { imageRef }) {
   const body = `${JSON.stringify(cfg, null, 2)}\n`
   // Beside the slot tree, outside every guest bind: the guest never sees the proxy password.
   const dir = `${remoteSlotDir(session.host, vm.id)}/egress`
-  const { digest, spec } = remoteEgressContainer({ vmId: vm.id, proxyId, dir, imageRef, body, host: session.host })
+  const { digest, spec } = remoteEgressContainer({
+    vmId: vm.id,
+    proxyId,
+    dir,
+    imageRef,
+    body,
+    host: session.host,
+    binaryDigest,
+  })
   const existing = await inspectContainerOrNull(session.docker, names.egress)
   if (!canReuseRemoteEgress(existing, digest)) {
     await runRemote(session.client, `umask 077 && mkdir -p ${shellQuote(dir)} && chmod 700 ${shellQuote(dir)}`)
@@ -289,7 +317,8 @@ export async function setRemoteProxyEgressEnabled(vm, projectRoot, enabled) {
         return { ok: true }
       }
       const image = slotImageSpec(projectRoot, vm.kernel || 'ubuntu-24.04')
-      return ensureRemoteEgress(session, vm, { imageRef: image.ref })
+      const binaries = await pushSlotBinaries(vm, projectRoot, session)
+      return ensureRemoteEgress(session, vm, { imageRef: image.ref, binaryDigest: binaries.digest })
     }
     for (const name of new Set([current, legacy])) {
       const existing = await inspectContainerOrNull(session.docker, name)
@@ -448,6 +477,7 @@ function kvmSlotContainerBody(vm, { image, network, remoteDir, routing, accel, s
         `${remoteDir}/claude:/slot/claude`,
         `${remoteDir}/run:/slot/run`,
         `${remoteDir}/kvm:/slot/kvm`,
+        `${remoteDir}/slot-bin:/opt/kin-guest/opt/kin-live:ro`,
       ],
       NetworkMode: network,
       RestartPolicy: { Name: 'unless-stopped' },
@@ -508,6 +538,7 @@ export function slotContainerBody(vm, { image, network, remoteDir, user, routing
         `${remoteDir}/run:/run/kin`,
         `${remoteDir}/machine-id:/etc/machine-id:ro`,
         `${remoteDir}/machine-id:/var/lib/dbus/machine-id:ro`,
+        `${remoteDir}/slot-bin:${LIVE_BIN}:ro`,
       ],
       NetworkMode: network,
       RestartPolicy: { Name: 'unless-stopped' },
@@ -741,7 +772,8 @@ export function codexRoleMatches(info, vm) {
 
 async function startRemoteTelemetry(docker, vm, name) {
   const target = { ...vm, runtime: { ...(vm.runtime || {}), container: name, type: runtimeKind(vm) } }
-  const { Cmd, User } = slotExecCmd(target, [REMOTE_WORKER_BIN, 'telemetry', '--config', '/run/kin/worker.json'], {
+  const worker = isKvmRuntime(vm) ? '/opt/kin-payload/opt/kin-live/kin-worker' : REMOTE_WORKER_BIN
+  const { Cmd, User } = slotExecCmd(target, [worker, 'telemetry', '--config', '/run/kin/worker.json'], {
     detach: true,
   })
   await execDetached(docker, name, Cmd, { user: User }).catch(() => {})
@@ -766,7 +798,9 @@ export async function startRemoteSlot(vm, projectRoot, { recreate = false, routi
       if (!probe.ok) return { ok: false, code: 'kvm_unavailable', error: probe.error }
       accel = probe.accel
     }
-    const eg = await ensureRemoteEgress(session, vm, { imageRef: egressImage || image })
+    const binaries =
+      typeof pushSlotBinaries === 'function' ? await pushSlotBinaries(vm, projectRoot, session) : { digest: '' }
+    const eg = await ensureRemoteEgress(session, vm, { imageRef: egressImage || image, binaryDigest: binaries.digest })
     if (!eg.ok) return eg
     const name = containerName(vm.id)
     const relays = await clusterManager().ensureSlotRelays(nodeId, vm.id)
@@ -844,7 +878,12 @@ export async function reloadRemoteSlot(vm, projectRoot, { routing } = {}) {
     const p = await prepare(vm, projectRoot, routing)
     if (p.fail) return p.fail
     const { nodeId, session, image, user, remoteDir, slotDir } = p
-    const eg = await ensureRemoteEgress(session, vm, { imageRef: p.egressImage || image })
+    const binaries =
+      typeof pushSlotBinaries === 'function' ? await pushSlotBinaries(vm, projectRoot, session) : { digest: '' }
+    const eg = await ensureRemoteEgress(session, vm, {
+      imageRef: p.egressImage || image,
+      binaryDigest: binaries.digest,
+    })
     if (!eg.ok) return eg
     const name = containerName(vm.id)
     const existing = await inspectContainerOrNull(session.docker, name)
@@ -896,6 +935,36 @@ export async function reloadRemoteSlot(vm, projectRoot, { routing } = {}) {
   }
 }
 
+/** Update a node slot's Go services without recreating its VM/container. */
+export async function restartRemoteServices(vm, projectRoot, { telemetryEnabled } = {}) {
+  try {
+    const session = await nodeSession(vmNodeId(vm))
+    const remoteDir = remoteSlotDir(session.host, vm.id)
+    const slotDir = path.join(projectRoot, 'vms', vm.id)
+    const name = vm.runtime?.container || containerName(vm.id)
+    const binaries = await pushSlotBinaries(vm, projectRoot, session)
+    await pushSlotFiles(vm, slotDir, ['run', 'seed'], session)
+    const target = { ...vm, runtime: { ...(vm.runtime || {}), container: name, type: runtimeKind(vm) } }
+    const stop = 'pkill -TERM -x kin-worker 2>/dev/null || true'
+    await execDetached(session.docker, name, slotExecCmd(target, ['sh', '-c', stop]).Cmd, {
+      user: slotExecCmd(target, ['sh', '-c', stop]).User,
+    })
+    await new Promise((resolve) => setTimeout(resolve, 150))
+    if (telemetryEnabled === true) await startRemoteTelemetry(session.docker, vm, name)
+    const egress = slotEgressNames(vm.id).egress
+    const egressInfo = await inspectContainerOrNull(session.docker, egress)
+    if (egressInfo?.State?.Running) await containerAction(session.docker, egress, 'restart')
+    return {
+      ok: true,
+      action: telemetryEnabled === true ? 'restarted' : 'stopped',
+      remote_dir: remoteDir,
+      binary_digest: binaries.digest || null,
+    }
+  } catch (err) {
+    return failure(err, 'service_update_failed')
+  }
+}
+
 export async function stopRemoteSlot(vm) {
   try {
     const session = await nodeSession(vmNodeId(vm))
diff --git a/src/lib/cluster/slot-image.mjs b/src/lib/cluster/slot-image.mjs
index 9f0d42255..d5cf0d088 100644
--- a/src/lib/cluster/slot-image.mjs
+++ b/src/lib/cluster/slot-image.mjs
@@ -27,7 +27,8 @@ import { codexKernelBinPath } from '../transport/codex-kernel-supervisor.mjs'
 import { ClusterError } from './ssh-link.mjs'
 import { tarStream } from './tar.mjs'
 
-export const REMOTE_WORKER_BIN = '/usr/local/bin/kin-worker'
+// Service binaries are supplied by the persistent per-slot slot-bin mount.
+export const REMOTE_WORKER_BIN = '/opt/kin-live/kin-worker'
 
 function binOr(envKey, fallback) {
   const env = String(process.env[envKey] || '').trim()
diff --git a/src/lib/vm/fleet-update.mjs b/src/lib/vm/fleet-update.mjs
index afdd70fea..52b255c4d 100644
--- a/src/lib/vm/fleet-update.mjs
+++ b/src/lib/vm/fleet-update.mjs
@@ -8,8 +8,24 @@ import { runtimeKind } from './runtime-kind.mjs'
 import { reloadSlotReady, slotExec } from './slot-runtime.mjs'
 import { collectSlotIdentity } from './guest-identity.mjs'
 import { rustKernelHealth } from '../transport/rust-kernel-client.mjs'
+import { restartTelemetrySidecar } from './slot-process-status.mjs'
+import { vmNodeId } from '../cluster/placement.mjs'
+import { restartRemoteServices } from '../cluster/remote-slot.mjs'
+import { ensureProxyEgress, isLocalEgressProxy, stopEgressProcess } from './egress.mjs'
 
-const ACTIONS = new Set(['collect', 'reload', 'roll'])
+const ACTIONS = new Set(['collect', 'reload', 'roll', 'telemetry'])
+
+async function restartLocalServices({ projectRoot, vm, enabled }) {
+  const telemetry = await restartTelemetrySidecar({ projectRoot, vm, enabled })
+  if (!telemetry.ok) return telemetry
+  if (!isLocalEgressProxy(vm.proxy)) {
+    const stopped = stopEgressProcess(projectRoot, vm.proxy?.id)
+    if (!stopped.ok) return { ok: false, action: 'egress_stop_failed', error: stopped.error }
+    const started = await ensureProxyEgress(projectRoot, vm.proxy)
+    if (!started?.ok) return { ok: false, action: 'egress_start_failed', error: started?.error || 'kin-egress failed' }
+  }
+  return { ...telemetry, egress: 'restarted' }
+}
 
 function sleep(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms))
@@ -64,6 +80,8 @@ export async function updateOneSlot(
     reloadFn = reloadSlotReady,
     collectFn = collectSlotIdentity,
     healthFn = rustKernelHealth,
+    telemetryFn,
+    telemetryEnabled,
     readyTimeoutMs = 15000,
   } = {},
 ) {
@@ -89,6 +107,22 @@ export async function updateOneSlot(
         return result
       }
     }
+    if (action === 'telemetry') {
+      const enabled =
+        telemetryEnabled === undefined ? vm.seed_policy?.telemetry_disabled === false : telemetryEnabled === true
+      const changed = await (telemetryFn || (vmNodeId(vm) ? restartRemoteServices : restartLocalServices))({
+        projectRoot,
+        vm: getVm(projectRoot, id) || vm,
+        telemetryEnabled: enabled,
+        enabled,
+      })
+      result.telemetry = changed
+      if (!changed?.ok) {
+        result.error = changed?.error || 'telemetry service update failed'
+        result.code = changed?.code || 'telemetry_update_failed'
+        return result
+      }
+    }
     if (action === 'collect' || action === 'roll') {
       const collected = await collectFn(projectRoot, getVm(projectRoot, id) || vm)
       result.collect = collected
@@ -108,7 +142,18 @@ export async function updateOneSlot(
 
 export async function runFleetUpdate(
   projectRoot,
-  { action = 'roll', ids = null, concurrency = 4, routing = {}, reloadFn, collectFn, healthFn, readyTimeoutMs } = {},
+  {
+    action = 'roll',
+    ids = null,
+    concurrency = 4,
+    routing = {},
+    reloadFn,
+    collectFn,
+    healthFn,
+    telemetryFn,
+    telemetryEnabled,
+    readyTimeoutMs,
+  } = {},
 ) {
   const nextAction = ACTIONS.has(action) ? action : 'roll'
   const conc = Math.max(1, Math.min(8, Number(concurrency) || 4))
@@ -120,6 +165,8 @@ export async function runFleetUpdate(
       reloadFn,
       collectFn,
       healthFn,
+      telemetryFn,
+      telemetryEnabled,
       readyTimeoutMs,
     }),
   )
diff --git a/src/lib/vm/slot-process-status.mjs b/src/lib/vm/slot-process-status.mjs
index 3e48b2173..f3c27882d 100644
--- a/src/lib/vm/slot-process-status.mjs
+++ b/src/lib/vm/slot-process-status.mjs
@@ -9,6 +9,7 @@ import { runtimeKind } from './runtime-kind.mjs'
 import { slotExecArgv } from './slot-exec.mjs'
 
 const exec = promisify(execFile)
+export const SLOT_WORKER_BIN = '/usr/local/bin/kin-worker'
 const PROBE = String.raw`
 set -eu
 main=$(tr '\000' '\n' < /proc/1/cmdline | sed -n '1p')
@@ -86,7 +87,7 @@ export async function ensureTelemetrySidecar({ projectRoot, vm, run = exec, time
     const target = { ...vm, runtime: { ...(vm.runtime || {}), container: slotContainerName({ vm }), type: kind } }
     await run(
       'docker',
-      slotExecArgv(target, ['/usr/local/bin/kin-worker', 'telemetry', '--config', '/run/kin/worker.json'], {
+      slotExecArgv(target, [SLOT_WORKER_BIN, 'telemetry', '--config', '/run/kin/worker.json'], {
         detach: true,
       }),
       { timeout: timeoutMs, maxBuffer: 4096, encoding: 'utf8', ...(env ? { env } : {}) },
@@ -96,3 +97,35 @@ export async function ensureTelemetrySidecar({ projectRoot, vm, run = exec, time
     return { ok: false, action: 'start_failed', error: String(error?.message || error) }
   }
 }
+
+/** Replace only the Go telemetry child; the slot container and Rust process stay up. */
+export async function restartTelemetrySidecar({ projectRoot, vm, enabled, run = exec, timeoutMs = 15_000 } = {}) {
+  if (!projectRoot || !isSafeSlotId(vm?.id)) return { ok: false, action: 'invalid_vm' }
+  const kind = runtimeKind(vm)
+  if (kind !== 'docker' && kind !== 'kvm') return { ok: false, action: 'unsupported_runtime' }
+  const env = slotHost(vm).dockerEnv()
+  const target = { ...vm, runtime: { ...(vm.runtime || {}), container: slotContainerName({ vm }), type: kind } }
+  const stop = 'pkill -TERM -x kin-worker 2>/dev/null || true'
+  try {
+    await run('docker', slotExecArgv(target, ['sh', '-c', stop]), {
+      timeout: timeoutMs,
+      maxBuffer: 4096,
+      encoding: 'utf8',
+      ...(env ? { env } : {}),
+    })
+    if (enabled !== true) return { ok: true, action: 'stopped' }
+    await run(
+      'docker',
+      slotExecArgv(target, [SLOT_WORKER_BIN, 'telemetry', '--config', '/run/kin/worker.json'], { detach: true }),
+      {
+        timeout: timeoutMs,
+        maxBuffer: 4096,
+        encoding: 'utf8',
+        ...(env ? { env } : {}),
+      },
+    )
+    return { ok: true, action: 'restarted' }
+  } catch (error) {
+    return { ok: false, action: 'restart_failed', error: String(error?.message || error) }
+  }
+}

From 8997953d7ee6c7f660aa5759cd56d94adeea8c6e Mon Sep 17 00:00:00 2001
From: ted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 17:18:08 +0800
Subject: [PATCH 03/19] =?UTF-8?q?feat(protocol):=20=E6=8C=89=E6=A8=A1?=
 =?UTF-8?q?=E5=9E=8B=E5=92=8C=E8=AF=B7=E6=B1=82=E4=BF=9D=E7=95=99=20auto?=
 =?UTF-8?q?=20compact=20=E7=AA=97=E5=8F=A3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

默认跟随请求模型，调用方窗口经内部字段送到当前 job，面板值可热配置。
---
 src/lib/admin/panel-api.mjs                  |  9 +++++
 src/lib/protocol/outbound-attempt.mjs        |  3 ++
 src/lib/protocol/seed-policy.mjs             | 10 ++++++
 src/lib/transport/rust-kernel-supervisor.mjs | 13 +++++++
 test/unit/go-worker-client.test.mjs          | 20 +++++++++++
 test/unit/kernel-router.test.mjs             |  2 ++
 web/src/features/settings/protocol-pane.tsx  | 37 ++++++++++++++++++--
 7 files changed, 92 insertions(+), 2 deletions(-)

diff --git a/src/lib/admin/panel-api.mjs b/src/lib/admin/panel-api.mjs
index 1351ee257..4a622e112 100644
--- a/src/lib/admin/panel-api.mjs
+++ b/src/lib/admin/panel-api.mjs
@@ -475,6 +475,12 @@ export function validatePersonaRoutingPatch(body = {}) {
   if (Object.prototype.hasOwnProperty.call(compat, 'cch_enabled') && typeof compat.cch_enabled !== 'boolean') {
     problems.push('cch_enabled 必须是布尔')
   }
+  if (Object.prototype.hasOwnProperty.call(compat, 'auto_compact_window') && compat.auto_compact_window != null) {
+    const windowTokens = Number(compat.auto_compact_window)
+    if (!Number.isInteger(windowTokens) || windowTokens < 100_000 || windowTokens > 1_000_000) {
+      problems.push('auto_compact_window 必须是 100000–1000000 的整数')
+    }
+  }
   if (
     compat.thinking_display != null &&
     compat.thinking_display !== '' &&
@@ -1406,6 +1412,9 @@ function presentCompatibility(compat) {
     .trim()
     .toLowerCase()
   out.thinking_display = display === 'passthrough' ? 'passthrough' : 'summarized'
+  const windowTokens = Number(out.auto_compact_window)
+  out.auto_compact_window =
+    Number.isInteger(windowTokens) && windowTokens >= 100_000 && windowTokens <= 1_000_000 ? windowTokens : null
   return out
 }
 
diff --git a/src/lib/protocol/outbound-attempt.mjs b/src/lib/protocol/outbound-attempt.mjs
index 95326c71b..48388bded 100644
--- a/src/lib/protocol/outbound-attempt.mjs
+++ b/src/lib/protocol/outbound-attempt.mjs
@@ -3,6 +3,7 @@
  * Tests compare envelopes from this module so admin paths cannot drift.
  */
 import { officialMessagesBody } from './anthropic-messages.mjs'
+import { callerAutoCompactWindow } from './seed-policy.mjs'
 import {
   prepareAnthropicRequest,
   rewriteToolNames,
@@ -195,6 +196,8 @@ export function prepareCliHopBody(
   if (requestContext?.purpose === 'auto_mode_classifier') return prepareClassifierBody(canonicalBody, { stream })
   if (preserveSystem) validateCacheBreakpoints(canonicalBody)
   let body = officialMessagesBody(canonicalBody, { stream })
+  const autoCompactWindow = callerAutoCompactWindow(canonicalBody)
+  if (autoCompactWindow != null) body.auto_compact_window = autoCompactWindow
   delete body.metadata
   if (!preserveSystem) {
     const leftover = stripCliOwnedSystem(body.system, { preserveCallerEnvironment })
diff --git a/src/lib/protocol/seed-policy.mjs b/src/lib/protocol/seed-policy.mjs
index 4d8de1743..d3b82dde5 100644
--- a/src/lib/protocol/seed-policy.mjs
+++ b/src/lib/protocol/seed-policy.mjs
@@ -117,6 +117,16 @@ export function buildSlotSettingsEnv(pol = {}, { timezone, locale, extra } = {})
   return out
 }
 
+export function callerAutoCompactWindow(body = {}) {
+  const sources = [body?.settings?.env, body?.claude_settings?.env, body?.env]
+  for (const source of sources) {
+    if (!source || typeof source !== 'object' || Array.isArray(source)) continue
+    const value = Number(source.CLAUDE_CODE_AUTO_COMPACT_WINDOW)
+    if (Number.isInteger(value) && value >= 100_000 && value <= 1_000_000) return value
+  }
+  return null
+}
+
 export function buildSeedSettingsEnv(pol = {}, extra = {}) {
   return buildSlotSettingsEnv(pol, { extra })
 }
diff --git a/src/lib/transport/rust-kernel-supervisor.mjs b/src/lib/transport/rust-kernel-supervisor.mjs
index 3c70bf3e4..4dd986d56 100644
--- a/src/lib/transport/rust-kernel-supervisor.mjs
+++ b/src/lib/transport/rust-kernel-supervisor.mjs
@@ -37,6 +37,11 @@ import {
 } from '../oauth/oauth-credentials.mjs'
 import { slotHost } from '../vm/slot-host.mjs'
 
+function normalizeAutoCompactWindow(value) {
+  const windowTokens = Number(value)
+  return Number.isInteger(windowTokens) && windowTokens >= 100_000 && windowTokens <= 1_000_000 ? windowTokens : null
+}
+
 const starts = new Map()
 const KVM_HEALTH_MS = { kvm: 120_000, tcg: 480_000 }
 
@@ -693,6 +698,13 @@ export function writeKernelConfig(
   const previousMax = Number(previous.max_request_bytes)
   const requestBytes = routing == null && previousMax > 0 ? previousMax : maxRequestBytes(routing)
   const cchEnabled = routing == null ? previous.cch_enabled !== false : routing?.compatibility?.cch_enabled !== false
+  const previousWindow = Number(previous.auto_compact_window)
+  const autoCompactWindow =
+    routing == null
+      ? Number.isInteger(previousWindow) && previousWindow >= 100_000 && previousWindow <= 1_000_000
+        ? previousWindow
+        : null
+      : normalizeAutoCompactWindow(routing?.compatibility?.auto_compact_window)
   const sessionIdleTtlSeconds =
     routing == null
       ? normalizeSessionIdleTtlSeconds(previous.session_idle_ttl_seconds)
@@ -726,6 +738,7 @@ export function writeKernelConfig(
     cli_version: OFFICIAL_CLI_VERSION,
     default_cache_ttl: defaultCacheTtl,
     cch_enabled: cchEnabled,
+    auto_compact_window: autoCompactWindow,
   }
 
   if (tz) config.timezone = tz
diff --git a/test/unit/go-worker-client.test.mjs b/test/unit/go-worker-client.test.mjs
index 43a1a32e1..98024a15a 100644
--- a/test/unit/go-worker-client.test.mjs
+++ b/test/unit/go-worker-client.test.mjs
@@ -14,6 +14,7 @@ import {
   restoreUncommittedHop,
   semanticStatusForStreamError,
 } from '../../src/lib/transport/go-worker-client.mjs'
+import { prepareCliHopBody } from '../../src/lib/protocol/outbound-attempt.mjs'
 import { extractOpenaiUsage } from '../../src/lib/protocol/openai-usage.mjs'
 import { callRustKernel, rustKernelHealth } from '../../src/lib/transport/rust-kernel-client.mjs'
 import { forwardApi, readApiJson } from '../../src/lib/transport/api-kernel-client.mjs'
@@ -164,6 +165,25 @@ test('cli-hop envelope keeps role=system turns that the VM betas do not declare'
   assert.deepEqual(out.body.system, body.system)
 })
 
+test('cli-hop keeps the caller compact window outside settings', () => {
+  const prepared = prepareCliHopBody({
+    model: 'claude-opus-5-5',
+    messages: [{ role: 'user', content: 'hi' }],
+    settings: { theme: 'light', env: { CLAUDE_CODE_AUTO_COMPACT_WINDOW: '1000000', TZ: 'UTC' } },
+  })
+  const out = finalizeWorkerPayload({
+    body: prepared,
+    reqHeaders: {},
+    exec: { homeDir: '', vm: { claude: { mode: 'setup-token', scope: 'user:inference' } } },
+    identity: null,
+    cliHop: true,
+  })
+  assert.equal(prepared.settings, undefined)
+  assert.equal(out.body.settings, undefined)
+  assert.equal(out.body.env, undefined)
+  assert.equal(out.body.auto_compact_window, 1000000)
+})
+
 test('setup-token cli-hop summarizes hidden thinking by default and keeps updates when passthrough', () => {
   const exec = { homeDir: '', vm: { claude: { mode: 'setup-token', scope: 'user:inference' } } }
   const updates = finalizeWorkerPayload({
diff --git a/test/unit/kernel-router.test.mjs b/test/unit/kernel-router.test.mjs
index cc7d880c9..4d6706486 100644
--- a/test/unit/kernel-router.test.mjs
+++ b/test/unit/kernel-router.test.mjs
@@ -631,6 +631,7 @@ test('writeKernelConfig separates container paths from host socket paths', () =>
   assert.equal(doc.https_proxy, undefined)
   assert.equal(doc.slots_per_worker, WRAP_SLOT_MAX)
   assert.equal(doc.default_cache_ttl, '1h')
+  assert.equal(doc.auto_compact_window, null)
   assert.match(written.socketPath.replace(/\\/g, '/'), /vms\/vm-09\/run\/kernel\.sock$/)
   assert.equal(fs.readFileSync(written.tokenPath, 'utf8').trim(), 'tok')
   const exec = { vmId: 'vm-09', homeDir: path.join(root, 'vms', 'vm-09', 'cli-home'), vm: { id: 'vm-09' } }
@@ -702,6 +703,7 @@ test('writeKernelConfig cli-hop writes local_cli without secrets', () => {
   assert.equal(doc.system_layout, 'identity')
   assert.equal(doc.cli_version, OFFICIAL_CLI_VERSION)
   assert.equal(doc.default_cache_ttl, '5m')
+  assert.equal(doc.auto_compact_window, null)
   assert.equal(doc.timezone, 'America/New_York')
   assert.equal(doc.proxy_url, '')
   assert.equal(doc.proxy_required, false)
diff --git a/web/src/features/settings/protocol-pane.tsx b/web/src/features/settings/protocol-pane.tsx
index 1e38d8cf7..1ccbcdd26 100644
--- a/web/src/features/settings/protocol-pane.tsx
+++ b/web/src/features/settings/protocol-pane.tsx
@@ -3,7 +3,7 @@ import {
   SESSION_IDLE_TTL_SECONDS_MAX,
   SESSION_IDLE_TTL_SECONDS_MIN,
 } from '@/types/panel-routing'
-import { Brain, Check, Clock3, Database, Hash, ShieldCheck } from 'lucide-react'
+import { Brain, Check, Clock3, Database, Hash, Scaling, ShieldCheck } from 'lucide-react'
 import {
   cacheTtlFromCompat,
   detectProxiedOfficialCcFromCompat,
@@ -32,6 +32,12 @@ const CLAUDE_CODE_FINGERPRINT: [string, string][] = [
   ['计费块', 'cc_version = UA 版本'],
 ]
 
+function autoCompactWindowValue(value: unknown) {
+  const tokens = Number(value)
+  if (tokens === 200_000 || tokens === 500_000 || tokens === 1_000_000) return String(tokens)
+  return 'model'
+}
+
 export function ProtocolPane({
   compat,
   inference,
@@ -188,7 +194,34 @@ export function ProtocolPane({
         </SettingRow>
       </PaneSection>
       <PaneSection
-        icon={Hash}
+        icon={Scaling}
+        title='Auto compact 窗口'
+        desc='默认跟随请求模型。显式值替换模型窗口，请求里的 CLAUDE_CODE_AUTO_COMPACT_WINDOW 仍优先。'
+      >
+        <SettingRow
+          label='窗口'
+          desc='跟随模型时，Opus / Sonnet / Haiku 5.x 使用 1M，其余模型使用 200K。'
+        >
+          <ChipGroup
+            label='Auto compact 窗口'
+            value={autoCompactWindowValue(compat.auto_compact_window)}
+            options={[
+              ['model', '跟随模型'],
+              ['200000', '200K'],
+              ['500000', '500K'],
+              ['1000000', '1M'],
+            ]}
+            onChange={(value) =>
+              onCompatChange({
+                ...compat,
+                auto_compact_window: value === 'model' ? null : Number(value),
+              })
+            }
+          />
+        </SettingRow>
+      </PaneSection>
+      <PaneSection
+        icon={Clock3}
         title='CCH 统一附加'
         desc='出站 billing 的 cch。开启后缺失也补，不区分试用或订阅。'
       >

From bb0a63c2f165e00f05ad2ea3c1699ea96fcbf6d3 Mon Sep 17 00:00:00 2001
From: ted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 17:21:41 +0800
Subject: [PATCH 04/19] =?UTF-8?q?fix(protocol):=20=E6=B8=85=E7=90=86=20set?=
 =?UTF-8?q?tings=20=E5=89=8D=E4=BF=9D=E7=95=99=20auto=20compact=20?=
 =?UTF-8?q?=E7=AA=97=E5=8F=A3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

窗口在入站清理前提取，再经内部字段进入 native body。
---
 src/lib/protocol/handle-protocol.mjs  |  5 ++++-
 src/lib/protocol/outbound-attempt.mjs |  8 +++++---
 test/unit/go-worker-client.test.mjs   | 10 +++++++---
 3 files changed, 16 insertions(+), 7 deletions(-)

diff --git a/src/lib/protocol/handle-protocol.mjs b/src/lib/protocol/handle-protocol.mjs
index 68e698084..8a3689db7 100644
--- a/src/lib/protocol/handle-protocol.mjs
+++ b/src/lib/protocol/handle-protocol.mjs
@@ -35,7 +35,7 @@ import {
   createClaudeMessageAssembler,
   applyClaudeSSELineToMessage,
 } from './convert.mjs'
-import { sanitizeInboundBody, defaultSeedPolicy } from './seed-policy.mjs'
+import { sanitizeInboundBody, defaultSeedPolicy, callerAutoCompactWindow } from './seed-policy.mjs'
 import { fingerprintRequest } from './client-fingerprint.mjs'
 import { validateOfficialModel } from './models.mjs'
 import { handleCodexProtocol, handleCodexSearch } from './handle-codex.mjs'
@@ -618,11 +618,13 @@ export function createHandleProtocol(deps) {
       )
     }
 
+    const autoCompactWindow = callerAutoCompactWindow(inbound)
     let ctx = {
       path: pathName,
       protocol,
       body: sanitizeInboundBody(inbound, defaultSeedPolicy()),
       headers: { ...req.headers },
+      autoCompactWindow,
     }
     ctx = applyIntercept(cfg.intercept.rules, 'before_convert', ctx)
     const bodyCheck = validateRequestBody(protocol, ctx.body)
@@ -1272,6 +1274,7 @@ export function createHandleProtocol(deps) {
               preserveSystem: officialPassthrough,
               preserveThinkingBlocks: preserveCliHopThinkingBlocks,
               preserveCallerEnvironment,
+              autoCompactWindow: ctx.autoCompactWindow,
             })
             hopBody = await materializeRemoteImageSources(hopBody)
             if (panelRewrite) {
diff --git a/src/lib/protocol/outbound-attempt.mjs b/src/lib/protocol/outbound-attempt.mjs
index 48388bded..7e9be7668 100644
--- a/src/lib/protocol/outbound-attempt.mjs
+++ b/src/lib/protocol/outbound-attempt.mjs
@@ -3,7 +3,6 @@
  * Tests compare envelopes from this module so admin paths cannot drift.
  */
 import { officialMessagesBody } from './anthropic-messages.mjs'
-import { callerAutoCompactWindow } from './seed-policy.mjs'
 import {
   prepareAnthropicRequest,
   rewriteToolNames,
@@ -191,13 +190,16 @@ export function prepareCliHopBody(
     preserveSystem = false,
     preserveThinkingBlocks = false,
     preserveCallerEnvironment = false,
+    autoCompactWindow = null,
   } = {},
 ) {
   if (requestContext?.purpose === 'auto_mode_classifier') return prepareClassifierBody(canonicalBody, { stream })
   if (preserveSystem) validateCacheBreakpoints(canonicalBody)
   let body = officialMessagesBody(canonicalBody, { stream })
-  const autoCompactWindow = callerAutoCompactWindow(canonicalBody)
-  if (autoCompactWindow != null) body.auto_compact_window = autoCompactWindow
+  const windowTokens = Number(autoCompactWindow)
+  if (Number.isInteger(windowTokens) && windowTokens >= 100_000 && windowTokens <= 1_000_000) {
+    body.auto_compact_window = windowTokens
+  }
   delete body.metadata
   if (!preserveSystem) {
     const leftover = stripCliOwnedSystem(body.system, { preserveCallerEnvironment })
diff --git a/test/unit/go-worker-client.test.mjs b/test/unit/go-worker-client.test.mjs
index 98024a15a..f82cf787b 100644
--- a/test/unit/go-worker-client.test.mjs
+++ b/test/unit/go-worker-client.test.mjs
@@ -15,6 +15,7 @@ import {
   semanticStatusForStreamError,
 } from '../../src/lib/transport/go-worker-client.mjs'
 import { prepareCliHopBody } from '../../src/lib/protocol/outbound-attempt.mjs'
+import { callerAutoCompactWindow, defaultSeedPolicy, sanitizeInboundBody } from '../../src/lib/protocol/seed-policy.mjs'
 import { extractOpenaiUsage } from '../../src/lib/protocol/openai-usage.mjs'
 import { callRustKernel, rustKernelHealth } from '../../src/lib/transport/rust-kernel-client.mjs'
 import { forwardApi, readApiJson } from '../../src/lib/transport/api-kernel-client.mjs'
@@ -166,11 +167,14 @@ test('cli-hop envelope keeps role=system turns that the VM betas do not declare'
 })
 
 test('cli-hop keeps the caller compact window outside settings', () => {
-  const prepared = prepareCliHopBody({
+  const inbound = {
     model: 'claude-opus-5-5',
     messages: [{ role: 'user', content: 'hi' }],
     settings: { theme: 'light', env: { CLAUDE_CODE_AUTO_COMPACT_WINDOW: '1000000', TZ: 'UTC' } },
-  })
+  }
+  const autoCompactWindow = callerAutoCompactWindow(inbound)
+  const sanitized = sanitizeInboundBody(inbound, defaultSeedPolicy())
+  const prepared = prepareCliHopBody(sanitized, { autoCompactWindow })
   const out = finalizeWorkerPayload({
     body: prepared,
     reqHeaders: {},
@@ -178,7 +182,7 @@ test('cli-hop keeps the caller compact window outside settings', () => {
     identity: null,
     cliHop: true,
   })
-  assert.equal(prepared.settings, undefined)
+  assert.equal(sanitized.settings, undefined)
   assert.equal(out.body.settings, undefined)
   assert.equal(out.body.env, undefined)
   assert.equal(out.body.auto_compact_window, 1000000)

From a467c45c2cf96500765949be34543a731e51224a Mon Sep 17 00:00:00 2001
From: ted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 17:27:10 +0800
Subject: [PATCH 05/19] =?UTF-8?q?fix(web):=20=E5=8E=BB=E6=8E=89=E5=8D=8F?=
 =?UTF-8?q?=E8=AE=AE=E9=A1=B5=E6=9C=AA=E4=BD=BF=E7=94=A8=E7=9A=84=E5=9B=BE?=
 =?UTF-8?q?=E6=A0=87=E5=AF=BC=E5=85=A5?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 web/src/features/settings/protocol-pane.tsx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/src/features/settings/protocol-pane.tsx b/web/src/features/settings/protocol-pane.tsx
index 1ccbcdd26..4a2b13e4f 100644
--- a/web/src/features/settings/protocol-pane.tsx
+++ b/web/src/features/settings/protocol-pane.tsx
@@ -3,7 +3,7 @@ import {
   SESSION_IDLE_TTL_SECONDS_MAX,
   SESSION_IDLE_TTL_SECONDS_MIN,
 } from '@/types/panel-routing'
-import { Brain, Check, Clock3, Database, Hash, Scaling, ShieldCheck } from 'lucide-react'
+import { Brain, Check, Clock3, Database, Scaling, ShieldCheck } from 'lucide-react'
 import {
   cacheTtlFromCompat,
   detectProxiedOfficialCcFromCompat,

From acb82f4b5191308b43133063b8117a5bf710a6fd Mon Sep 17 00:00:00 2001
From: ted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 17:38:34 +0800
Subject: [PATCH 06/19] =?UTF-8?q?test(protocol):=20=E7=A1=AE=E8=AE=A4?=
 =?UTF-8?q?=E6=B8=85=E7=90=86=E5=90=8E=E7=9A=84=20body=20=E4=B8=8D?=
 =?UTF-8?q?=E5=86=8D=E6=90=BA=E5=B8=A6=20compact=20=E7=AA=97=E5=8F=A3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

窗口必须在 settings 删除前提取，再传给 native body。
---
 test/unit/go-worker-client.test.mjs | 1 +
 1 file changed, 1 insertion(+)

diff --git a/test/unit/go-worker-client.test.mjs b/test/unit/go-worker-client.test.mjs
index f82cf787b..388d601a8 100644
--- a/test/unit/go-worker-client.test.mjs
+++ b/test/unit/go-worker-client.test.mjs
@@ -174,6 +174,7 @@ test('cli-hop keeps the caller compact window outside settings', () => {
   }
   const autoCompactWindow = callerAutoCompactWindow(inbound)
   const sanitized = sanitizeInboundBody(inbound, defaultSeedPolicy())
+  assert.equal(callerAutoCompactWindow(sanitized), null)
   const prepared = prepareCliHopBody(sanitized, { autoCompactWindow })
   const out = finalizeWorkerPayload({
     body: prepared,

From ef9a7309e99e63b4ca1f4cf2e542ee2b95bb5942 Mon Sep 17 00:00:00 2001
From: ted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 19:12:23 +0800
Subject: [PATCH 07/19] feat(vm): migrate legacy containers for service updates

---
 deploy/install.sh                        |   4 +-
 docs/TELEMETRY.md                        |  10 ++
 scripts/migrate-legacy-cluster-slots.mjs |  24 ++++
 scripts/panel-upgrade.sh                 |   6 +-
 src/lib/cluster/docker-remote.mjs        |  10 ++
 src/lib/cluster/remote-slot-files.mjs    |   1 +
 src/lib/cluster/remote-slot.mjs          | 154 ++++++++++++++++++++++-
 test/unit/remote-slot-migration.test.mjs |  80 ++++++++++++
 8 files changed, 285 insertions(+), 4 deletions(-)
 create mode 100644 scripts/migrate-legacy-cluster-slots.mjs
 create mode 100644 test/unit/remote-slot-migration.test.mjs

diff --git a/deploy/install.sh b/deploy/install.sh
index 5c9761a66..0f3175070 100644
--- a/deploy/install.sh
+++ b/deploy/install.sh
@@ -682,7 +682,9 @@ start_stack() {
 refresh_slot_services() {
   # The control-plane image carries the freshly built Go binaries. Publish them
   # into persistent slot-bin mounts and restart only kin-worker/kin-egress.
-  if ! docker exec "$SERVICE_NAME" node /opt/vm2api/scripts/fleet-services.mjs; then
+  if ! docker exec "$SERVICE_NAME" test -f /opt/vm2api/scripts/fleet-services.mjs >/dev/null 2>&1; then
+    warn "控制面尚未包含 Go 服务刷新脚本；下次更新将重试服务刷新"
+  elif ! docker exec "$SERVICE_NAME" node /opt/vm2api/scripts/fleet-services.mjs; then
     warn "Go slot service refresh failed; VM containers were left untouched"
   fi
 }
diff --git a/docs/TELEMETRY.md b/docs/TELEMETRY.md
index 4920ccdb0..f9bdf716c 100644
--- a/docs/TELEMETRY.md
+++ b/docs/TELEMETRY.md
@@ -31,3 +31,13 @@ An update must verify the new binary hash and the replacement process before
 reporting success. A failed service restart is reported per slot so the old VM
 identity remains intact and can be rolled back by republishing the previous
 binary.
+
+For a controlled rollout, run `scripts/migrate-legacy-cluster-slots.mjs` in
+the control-plane container. Pass VM IDs after the root and concurrency
+arguments to limit the rollout. It performs the same migration used by the
+one-click installer: legacy slot and egress containers are stopped, renamed to
+`*-legacy-<timestamp>`, and kept as stopped rollback copies; replacement
+containers use the persistent `/opt/kin-live` mount. Container IDs therefore
+change, but the VM, credentials, `vms/`, routing, and network identity do not.
+After this one-time migration, subsequent updates atomically replace only the
+Go binaries in `slot-bin` and restart the service processes.
diff --git a/scripts/migrate-legacy-cluster-slots.mjs b/scripts/migrate-legacy-cluster-slots.mjs
new file mode 100644
index 000000000..3f5a275de
--- /dev/null
+++ b/scripts/migrate-legacy-cluster-slots.mjs
@@ -0,0 +1,24 @@
+#!/usr/bin/env node
+
+/**
+ * Migrate legacy cluster slot containers to the persistent Go-service mount.
+ * This never rebuilds a VM: the old container is renamed and retained as a
+ * stopped rollback copy, while the replacement reuses its image and settings.
+ */
+import { runFleetUpdate } from '../src/lib/vm/fleet-update.mjs'
+
+const root = process.argv[2] || process.env.KIN_PROJECT_ROOT || '/opt/vm2api'
+const concurrency = Number(process.argv[3] || process.env.KIN_FLEET_CONCURRENCY || 4)
+const ids = process.argv
+  .slice(4)
+  .flatMap((value) => String(value).split(','))
+  .map((value) => value.trim())
+  .filter(Boolean)
+
+const report = await runFleetUpdate(root, {
+  action: 'telemetry',
+  concurrency,
+  ids: ids.length ? ids : null,
+})
+console.log(JSON.stringify(report))
+if (report.failed_count) process.exitCode = 1
diff --git a/scripts/panel-upgrade.sh b/scripts/panel-upgrade.sh
index 69c538793..65fa1bb1c 100755
--- a/scripts/panel-upgrade.sh
+++ b/scripts/panel-upgrade.sh
@@ -139,7 +139,11 @@ while [ "$attempt" -lt 45 ]; do
   if probe verify "$TAG" "$BASELINE"; then
     [ -d .git ] || printf '%s\n' "${TAG#v}" > VERSION
     # Replace the Go worker/egress payloads in-place; no VM/container rebuild.
-    if ! docker exec "$CONTAINER" node /opt/vm2api/scripts/fleet-services.mjs; then
+    # Older control-plane images may not carry the helper yet; retry on the
+    # next image update instead of invalidating an otherwise verified upgrade.
+    if ! docker exec "$CONTAINER" test -f /opt/vm2api/scripts/fleet-services.mjs >/dev/null 2>&1; then
+      echo "Go service refresh helper is not present in the control plane; retry after the next image update" >&2
+    elif ! docker exec "$CONTAINER" node /opt/vm2api/scripts/fleet-services.mjs; then
       echo "Go service-only update failed; inspect the per-slot report" >&2
       exit 1
     fi
diff --git a/src/lib/cluster/docker-remote.mjs b/src/lib/cluster/docker-remote.mjs
index c53849a51..3c52116a0 100644
--- a/src/lib/cluster/docker-remote.mjs
+++ b/src/lib/cluster/docker-remote.mjs
@@ -328,6 +328,16 @@ export async function removeContainer(connect, id) {
   await dockerJson(connect, { method: 'DELETE', path: `${containerPath(id)}?force=1&v=1`, timeoutMs: 60_000 }, [204])
 }
 
+/** Preserve the container object for a rollback instead of deleting it. */
+export async function renameContainer(connect, id, name) {
+  if (!NAME_RE.test(String(name || ''))) throw new ClusterError(400, 'invalid_name', '容器名不合法')
+  await dockerJson(
+    connect,
+    { method: 'POST', path: `${containerPath(id)}/rename?name=${encodeURIComponent(name)}`, timeoutMs: 30_000 },
+    [204],
+  )
+}
+
 export async function containerLogs(connect, id, { tail = 200 } = {}) {
   const n = Math.min(5000, Math.max(1, Number.parseInt(tail, 10) || 200))
   const inspect = await dockerJson(connect, { path: `${containerPath(id)}/json` })
diff --git a/src/lib/cluster/remote-slot-files.mjs b/src/lib/cluster/remote-slot-files.mjs
index 1fc357f5c..6cd44e702 100644
--- a/src/lib/cluster/remote-slot-files.mjs
+++ b/src/lib/cluster/remote-slot-files.mjs
@@ -113,6 +113,7 @@ export async function pushSlotBinaries(vm, projectRoot, session = null) {
   const remote = `${remoteSlotDir(s.host, vm.id)}/slot-bin`
   const owner = ownerFor(s, vm)
   const pushed = []
+  const digest = crypto.createHash('sha256')
   for (const name of SLOT_BINARIES) {
     const local =
       process.env[name === 'kin-worker' ? 'KIN_WORKER_BIN' : 'KIN_EGRESS_BIN'] || path.join(projectRoot, 'bin', name)
diff --git a/src/lib/cluster/remote-slot.mjs b/src/lib/cluster/remote-slot.mjs
index 24bbd9f21..9ca2b9387 100644
--- a/src/lib/cluster/remote-slot.mjs
+++ b/src/lib/cluster/remote-slot.mjs
@@ -54,6 +54,7 @@ import {
   inspectNetworkOrNull,
   removeContainer,
   removeNetwork,
+  renameContainer,
 } from './docker-remote.mjs'
 import {
   awaitSlotImageBuild,
@@ -83,6 +84,110 @@ function failure(err, fallbackCode = 'remote_slot_failed') {
   return { ok: false, code: err?.code || fallbackCode, error: String(err?.message || err) }
 }
 
+const MIGRATION_CONFIG_KEYS = Object.freeze([
+  'Hostname', 'Domainname', 'User', 'AttachStdin', 'AttachStdout', 'AttachStderr', 'Tty', 'OpenStdin',
+  'StdinOnce', 'Env', 'Cmd', 'Image', 'Volumes', 'WorkingDir', 'Entrypoint', 'Labels', 'StopSignal',
+  'StopTimeout', 'Shell', 'ExposedPorts',
+])
+const MIGRATION_HOST_CONFIG_KEYS = Object.freeze([
+  'Binds', 'LogConfig', 'NetworkMode', 'PortBindings', 'PublishAllPorts', 'Privileged', 'ReadonlyRootfs',
+  'Dns', 'DnsOptions', 'DnsSearch', 'ExtraHosts', 'GroupAdd', 'IpcMode', 'Links', 'Memory', 'MemorySwap',
+  'MemoryReservation', 'MemorySwappiness', 'NanoCpus', 'CpuShares', 'CpuQuota', 'CpuPeriod', 'CpusetCpus',
+  'CpusetMems', 'PidsLimit', 'RestartPolicy', 'SecurityOpt', 'ShmSize', 'UTSMode', 'UsernsMode', 'PidMode',
+  'Devices', 'DeviceCgroupRules', 'Init', 'OomKillDisable', 'OomScoreAdj', 'Runtime', 'Sysctls', 'Tmpfs',
+  'VolumesFrom', 'CgroupnsMode',
+])
+
+function bindDestination(bind) {
+  const parts = String(bind || '').split(':')
+  return parts.length >= 2 ? parts[1] : ''
+}
+
+function replaceBindMount(binds, source, destination, removeDestinations = []) {
+  const remove = new Set([destination, ...removeDestinations])
+  const next = (binds || []).filter((bind) => !remove.has(bindDestination(bind)))
+  next.push(`${source}:${destination}:ro`)
+  return next
+}
+
+/** Build a replacement body from inspect data without changing VM-owned state. */
+export function legacyServiceContainerBody(
+  info,
+  { name, sourceDir, destination = LIVE_BIN, removeDestinations = [], command, layout } = {},
+) {
+  const body = {}
+  for (const key of MIGRATION_CONFIG_KEYS) {
+    if (info?.Config && info.Config[key] !== undefined) body[key] = structuredClone(info.Config[key])
+  }
+  body.Image = info?.Config?.Image
+  body.Labels = { ...(info?.Config?.Labels || {}) }
+  if (layout) body.Labels['kin.vm.layout'] = SLOT_LAYOUT
+  if (command) body.Cmd = command
+  const host = info?.HostConfig || {}
+  body.HostConfig = {}
+  for (const key of MIGRATION_HOST_CONFIG_KEYS) {
+    if (host[key] !== undefined) body.HostConfig[key] = structuredClone(host[key])
+  }
+  body.HostConfig.Binds = replaceBindMount(host.Binds, sourceDir, destination, removeDestinations)
+  const networkMode = String(host.NetworkMode || '')
+  const endpoint = info?.NetworkSettings?.Networks?.[networkMode]
+  if (endpoint && networkMode && !['host', 'none', 'bridge', 'default'].includes(networkMode)) {
+    body.NetworkingConfig = {
+      EndpointsConfig: {
+        [networkMode]: {
+          ...(endpoint.IPAddress ? { IPAMConfig: { IPv4Address: endpoint.IPAddress } } : {}),
+          ...(endpoint.Aliases ? { Aliases: endpoint.Aliases } : {}),
+        },
+      },
+    }
+  }
+  return body
+}
+
+function migrationBackupName(name, stamp = Date.now()) {
+  const suffix = `-legacy-${stamp}`
+  return `${String(name).slice(0, Math.max(1, 63 - suffix.length))}${suffix}`
+}
+
+function hasBindDestination(info, destination, source = '') {
+  return (info?.Mounts || []).some(
+    (mount) => mount.Destination === destination && mount.RW === false && (!source || mount.Source === source),
+  )
+}
+
+export function needsLegacyServiceMigration(info, { sourceDir = '' } = {}) {
+  return !!info && !hasBindDestination(info, LIVE_BIN, sourceDir)
+}
+
+export async function migrateRemoteContainer(docker, name, body, { wasRunning, ops = {} } = {}) {
+  const inspect = ops.inspect || inspectContainerOrNull
+  const action = ops.action || containerAction
+  const rename = ops.rename || renameContainer
+  const create = ops.create || createContainerRaw
+  const existing = await inspect(docker, name)
+  if (!existing) return { ok: true, action: 'absent', name }
+  const backup = migrationBackupName(name)
+  if (await inspect(docker, backup)) throw new Error(`legacy migration backup already exists: ${backup}`)
+  const oldId = existing.Id
+  if (wasRunning) await action(docker, name, 'stop', { t: 30 })
+  await rename(docker, name, backup)
+  let createdId = null
+  try {
+    createdId = await create(docker, name, body)
+    if (wasRunning) await action(docker, createdId, 'start')
+    const next = await inspect(docker, name)
+    if (!next || (wasRunning && !next.State?.Running) || (!wasRunning && next.State?.Running)) {
+      throw new Error(`migrated container did not preserve state: ${name}`)
+    }
+    return { ok: true, action: 'migrated', name, old_id: oldId, new_id: next.Id, backup, was_running: wasRunning }
+  } catch (error) {
+    if (createdId) await rename(docker, createdId, migrationBackupName(`${name}-failed`)).catch(() => {})
+    await rename(docker, backup, name).catch(() => {})
+    if (wasRunning) await action(docker, name, 'start').catch(() => {})
+    throw error
+  }
+}
+
 /**
  * Layout 1 kept `.claude` inside the guest-writable home. Carry its credential into
  * the host-owned `claude/` mount once, unless the new location already has one.
@@ -936,13 +1041,57 @@ export async function reloadRemoteSlot(vm, projectRoot, { routing } = {}) {
 }
 
 /** Update a node slot's Go services without recreating its VM/container. */
+export async function migrateRemoteServiceContainers(vm, projectRoot) {
+  try {
+    const session = await nodeSession(vmNodeId(vm))
+    const remoteDir = remoteSlotDir(session.host, vm.id)
+    const slotBin = `${remoteDir}/slot-bin`
+    const binaries = await pushSlotBinaries(vm, projectRoot, session)
+    const migrated = []
+    const slotName = vm.runtime?.container || containerName(vm.id)
+    const slot = await inspectContainerOrNull(session.docker, slotName)
+    if (needsLegacyServiceMigration(slot, { sourceDir: slotBin })) {
+      const body = legacyServiceContainerBody(slot, {
+        name: slotName,
+        sourceDir: slotBin,
+        removeDestinations: ['/usr/local/bin/kin-worker'],
+        layout: true,
+      })
+      migrated.push(
+        await migrateRemoteContainer(session.docker, slotName, body, {
+          wasRunning: !!slot.State?.Running,
+        }),
+      )
+    }
+    const egressName = slotEgressNames(vm.id).egress
+    const egress = await inspectContainerOrNull(session.docker, egressName)
+    if (needsLegacyServiceMigration(egress, { sourceDir: slotBin })) {
+      const body = legacyServiceContainerBody(egress, {
+        name: egressName,
+        sourceDir: slotBin,
+        removeDestinations: ['/usr/local/bin/kin-egress'],
+        command: [`${LIVE_BIN}/kin-egress`, '-config', '/etc/kin-egress/egress.json'],
+      })
+      migrated.push(
+        await migrateRemoteContainer(session.docker, egressName, body, {
+          wasRunning: !!egress.State?.Running,
+        }),
+      )
+    }
+    return { ok: true, action: migrated.length ? 'migrated' : 'unchanged', migrated, binary_digest: binaries.digest || null }
+  } catch (err) {
+    return failure(err, 'legacy_service_migration_failed')
+  }
+}
+
 export async function restartRemoteServices(vm, projectRoot, { telemetryEnabled } = {}) {
   try {
     const session = await nodeSession(vmNodeId(vm))
     const remoteDir = remoteSlotDir(session.host, vm.id)
     const slotDir = path.join(projectRoot, 'vms', vm.id)
     const name = vm.runtime?.container || containerName(vm.id)
-    const binaries = await pushSlotBinaries(vm, projectRoot, session)
+    const migration = await migrateRemoteServiceContainers(vm, projectRoot)
+    if (!migration.ok) return migration
     await pushSlotFiles(vm, slotDir, ['run', 'seed'], session)
     const target = { ...vm, runtime: { ...(vm.runtime || {}), container: name, type: runtimeKind(vm) } }
     const stop = 'pkill -TERM -x kin-worker 2>/dev/null || true'
@@ -958,7 +1107,8 @@ export async function restartRemoteServices(vm, projectRoot, { telemetryEnabled
       ok: true,
       action: telemetryEnabled === true ? 'restarted' : 'stopped',
       remote_dir: remoteDir,
-      binary_digest: binaries.digest || null,
+      binary_digest: migration.binary_digest,
+      migration: migration.migrated,
     }
   } catch (err) {
     return failure(err, 'service_update_failed')
diff --git a/test/unit/remote-slot-migration.test.mjs b/test/unit/remote-slot-migration.test.mjs
new file mode 100644
index 000000000..ed9861419
--- /dev/null
+++ b/test/unit/remote-slot-migration.test.mjs
@@ -0,0 +1,80 @@
+import test from 'node:test'
+import assert from 'node:assert/strict'
+import {
+  legacyServiceContainerBody,
+  migrateRemoteContainer,
+  needsLegacyServiceMigration,
+} from '../../src/lib/cluster/remote-slot.mjs'
+
+const oldSlot = {
+  Id: 'old-slot-id',
+  State: { Running: true },
+  Config: {
+    Image: 'vm2api/kin-slot-ubuntu:old',
+    User: '1000:1000',
+    Cmd: ['/opt/kin/kin-kernel', '--gateway-worker', '--config', '/run/kin/kernel.json'],
+    Labels: { 'kin.vm': '1', 'kin.vm.layout': '2' },
+  },
+  HostConfig: {
+    Binds: ['/srv/vm-05/run:/run/kin', '/srv/vm-05/old-worker:/usr/local/bin/kin-worker'],
+    NetworkMode: 'kin-05-net',
+    ReadonlyRootfs: true,
+    RestartPolicy: { Name: 'unless-stopped' },
+  },
+  NetworkSettings: { Networks: { 'kin-05-net': { IPAddress: '172.20.0.2', Aliases: ['kin-05'] } } },
+  Mounts: [{ Destination: '/run/kin', Source: '/srv/vm-05/run', RW: true }],
+}
+
+test('legacy container body replaces old service bind and preserves slot settings', () => {
+  const body = legacyServiceContainerBody(oldSlot, {
+    sourceDir: '/srv/vm-05/slot-bin',
+    removeDestinations: ['/usr/local/bin/kin-worker'],
+    layout: true,
+  })
+  assert.equal(body.Image, oldSlot.Config.Image)
+  assert.equal(body.User, oldSlot.Config.User)
+  assert.equal(body.Labels['kin.vm.layout'], '3')
+  assert.deepEqual(body.HostConfig.Binds, ['/srv/vm-05/run:/run/kin', '/srv/vm-05/slot-bin:/opt/kin-live:ro'])
+  assert.deepEqual(body.NetworkingConfig.EndpointsConfig['kin-05-net'].IPAMConfig, { IPv4Address: '172.20.0.2' })
+  assert.equal(needsLegacyServiceMigration(oldSlot, { sourceDir: '/srv/vm-05/slot-bin' }), true)
+})
+
+test('legacy egress command points at the persistent service mount', () => {
+  const body = legacyServiceContainerBody(oldSlot, {
+    sourceDir: '/srv/vm-05/slot-bin',
+    removeDestinations: ['/usr/local/bin/kin-egress'],
+    command: ['/opt/kin-live/kin-egress', '-config', '/etc/kin-egress/egress.json'],
+  })
+  assert.deepEqual(body.Cmd, ['/opt/kin-live/kin-egress', '-config', '/etc/kin-egress/egress.json'])
+})
+
+test('migration keeps the old container as a stopped rollback copy', async () => {
+  const state = new Map([['kin-05', structuredClone(oldSlot)]])
+  let sequence = 0
+  const inspect = async (_docker, name) => state.get(name) || null
+  const action = async (_docker, name, operation) => {
+    const value = [...state.values()].find((item) => item.Id === name) || state.get(name)
+    if (operation === 'stop') value.State.Running = false
+    if (operation === 'start') value.State.Running = true
+  }
+  const rename = async (_docker, from, to) => {
+    const value = state.get(from)
+    state.delete(from)
+    state.set(to, value)
+  }
+  const create = async (_docker, name, body) => {
+    const id = `new-${++sequence}`
+    state.set(name, { Id: id, State: { Running: false }, Config: body, Mounts: [{ Destination: '/opt/kin-live', RW: false }] })
+    return id
+  }
+  const result = await migrateRemoteContainer(
+    {},
+    'kin-05',
+    legacyServiceContainerBody(oldSlot, { sourceDir: '/srv/vm-05/slot-bin', layout: true }),
+    { wasRunning: true, ops: { inspect, action, rename, create } },
+  )
+  assert.equal(result.ok, true)
+  assert.equal(result.action, 'migrated')
+  assert.equal(state.get('kin-05').State.Running, true)
+  assert.equal(state.get(result.backup).State.Running, false)
+})

From 09a125fc8ba55baab1ed1d273d91062036e26f83 Mon Sep 17 00:00:00 2001
From: dofastted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 19:15:51 +0800
Subject: [PATCH 08/19] fix(vm): restart kin-egress after its binary is
 replaced

A replaced helper keeps the old inode and the listen port. Ownership now
treats that process as down and the next start or fleet refresh stops every
helper bound to the proxy config, including one the pidfile no longer names.
---
 src/lib/vm/egress.mjs     | 121 ++++++++++++++++++++++++++++----------
 test/unit/egress.test.mjs |  71 +++++++++++++++++-----
 2 files changed, 146 insertions(+), 46 deletions(-)

diff --git a/src/lib/vm/egress.mjs b/src/lib/vm/egress.mjs
index 8068cd158..01ba5a609 100644
--- a/src/lib/vm/egress.mjs
+++ b/src/lib/vm/egress.mjs
@@ -243,24 +243,64 @@ function readPid(file) {
   }
 }
 
-function ownsEgressProcess(pid, configPath) {
+function processExe(pid) {
+  const exe = fs.readlinkSync(`/proc/${pid}/exe`)
+  const deleted = exe.endsWith(' (deleted)')
+  return { path: deleted ? exe.slice(0, -' (deleted)'.length) : exe, deleted }
+}
+
+function ownsEgressProcess(pid, configPath, { allowDeleted = false } = {}) {
   if (!pidAlive(pid)) return false
   try {
     // PID files survive container restarts; a live PID may belong to another
     // process or another proxy. Verify both before reusing or signaling it.
-    const exe = fs.readlinkSync(`/proc/${pid}/exe`).replace(/ \(deleted\)$/, '')
+    // A replaced binary keeps the old inode in this process. Reusing it leaves
+    // the new file unrun and its listen port permanently busy.
+    const exe = processExe(pid)
+    if (exe.deleted && !allowDeleted) return false
     const args = fs.readFileSync(`/proc/${pid}/cmdline`, 'utf8').split('\0')
     const configIndex = args.indexOf('-config')
-    if (path.basename(exe) !== 'kin-egress' || configIndex <= 0 || !args[configIndex + 1]) return false
+    if (path.basename(exe.path) !== 'kin-egress' || configIndex <= 0 || !args[configIndex + 1]) return false
     const argument = args[configIndex + 1]
     const actualConfig = path.isAbsolute(argument)
       ? path.resolve(argument)
       : path.resolve(fs.readlinkSync(`/proc/${pid}/cwd`), argument)
-    return actualConfig === path.resolve(configPath)
+    return path.normalize(actualConfig) === path.normalize(path.resolve(configPath))
   } catch {
     return false
   }
 }
+
+function egressProcessPids() {
+  if (process.platform !== 'linux') return []
+  const marker = Buffer.from('/kin-egress')
+  const deleted = Buffer.from(' (deleted)')
+  const pids = []
+  for (const name of fs.readdirSync('/proc')) {
+    if (!/^[1-9][0-9]*$/.test(name)) continue
+    let exe
+    try {
+      exe = fs.readlinkSync(`/proc/${name}/exe`)
+    } catch {
+      continue
+    }
+    const bytes = Buffer.from(exe)
+    if (!bytes.includes(marker)) continue
+    const end = bytes.subarray(bytes.length - deleted.length).equals(deleted)
+      ? bytes.length - deleted.length
+      : bytes.length
+    if (path.basename(bytes.subarray(0, end).toString('utf8')) !== 'kin-egress') continue
+    pids.push(Number(name))
+  }
+  return pids
+}
+
+function staleEgressPids(configPath, exceptPid = 0) {
+  const wanted = path.resolve(configPath)
+  return egressProcessPids().filter(
+    (pid) => pid !== exceptPid && ownsEgressProcess(pid, wanted, { allowDeleted: true }),
+  )
+}
 export function inspectEgressNetwork(proxyId, run = docker) {
   const name = networkName(proxyId)
   if (!name) return null
@@ -421,7 +461,8 @@ export async function startEgressProcess({
   const listenTcp = `${listenHost}:${tcpPort}`
   const listenDns = `${listenHost}:${dnsPort}`
   const existing = readPid(pidFile)
-  if (ownsEgressProcess(existing, cfgPath)) {
+  const configMatches = ownsEgressProcess(existing, cfgPath)
+  if (configMatches) {
     try {
       const old = JSON.parse(fs.readFileSync(cfgPath, 'utf8'))
       if (
@@ -430,24 +471,25 @@ export async function startEgressProcess({
         old.proxy_url === proxyUrl &&
         (old.dns_upstream || '') === dnsUpstream &&
         JSON.stringify(old.dns_empty_types || []) === JSON.stringify(dnsEmptyTypes) &&
-        !!old.domain_forward === !!domainForward
+        !!old.domain_forward === !!domainForward &&
+        staleEgressPids(cfgPath, existing).length === 0
       ) {
         return { ok: true, pid: existing, reused: true, configPath: cfgPath }
       }
     } catch {}
-    try {
-      process.kill(existing, 'SIGTERM')
-    } catch {}
-    const stopped = await waitEgressExit(existing)
-    if (!stopped.ok) return { ok: false, error: stopped.error, pid: existing }
-    if (tcpPort > 0) {
-      const portFree = await waitPortReleased(listenHost, tcpPort)
-      if (!portFree.ok) return { ok: false, error: portFree.error, pid: existing }
-    }
-    if (dnsPort > 0) {
-      const dnsFree = await waitPortReleased(listenHost, dnsPort)
-      if (!dnsFree.ok) return { ok: false, error: dnsFree.error, pid: existing }
-    }
+  }
+  const superseded = [...new Set([...(configMatches ? [existing] : []), ...staleEgressPids(cfgPath)])]
+  for (const pid of superseded) {
+    const stopped = await stopOwnedEgress(pid)
+    if (!stopped.ok) return { ok: false, error: stopped.error, pid }
+  }
+  if (tcpPort > 0) {
+    const portFree = await waitPortReleased(listenHost, tcpPort)
+    if (!portFree.ok) return { ok: false, error: portFree.error, pid: superseded[0] || existing }
+  }
+  if (dnsPort > 0) {
+    const dnsFree = await waitPortReleased(listenHost, dnsPort)
+    if (!dnsFree.ok) return { ok: false, error: dnsFree.error, pid: superseded[0] || existing }
   }
   if (!fs.existsSync(bin)) {
     return { ok: false, error: `kin-egress binary not found: ${bin}` }
@@ -471,15 +513,17 @@ export async function startEgressProcess({
 export function stopEgressProcess(projectRoot, proxyId) {
   const dir = egressRunDir(projectRoot, proxyId)
   const pidFile = path.join(dir, 'egress.pid')
-  const pid = readPid(pidFile)
-  if (ownsEgressProcess(pid, path.join(dir, 'egress.json'))) {
+  const cfgPath = path.join(dir, 'egress.json')
+  const recorded = readPid(pidFile)
+  const pids = [...new Set([...staleEgressPids(cfgPath), ...(ownsEgressProcess(recorded, cfgPath) ? [recorded] : [])])]
+  for (const pid of pids) {
     try {
       process.kill(pid, 'SIGTERM')
     } catch (error) {
       if (error.code !== 'ESRCH') return { ok: false, error: `egress_stop_failed: ${error.code || error.message}` }
     }
     // Keep the PID while termination is pending so policy reconciliation can verify/retry it.
-    if (ownsEgressProcess(pid, path.join(dir, 'egress.json'))) return { ok: true }
+    if (ownsEgressProcess(pid, cfgPath, { allowDeleted: true })) return { ok: true }
   }
   try {
     fs.rmSync(pidFile, { force: true })
@@ -489,6 +533,15 @@ export function stopEgressProcess(projectRoot, proxyId) {
   return { ok: true }
 }
 
+async function stopOwnedEgress(pid) {
+  try {
+    process.kill(pid, 'SIGTERM')
+  } catch (error) {
+    if (error.code !== 'ESRCH') return { ok: false, error: `egress_stop_failed: ${error.code || error.message}` }
+  }
+  return waitEgressExit(pid)
+}
+
 export function inspectEgressProcess(projectRoot, proxyId) {
   const dir = egressRunDir(projectRoot, proxyId)
   const pid = readPid(path.join(dir, 'egress.pid'))
@@ -606,26 +659,32 @@ function spawnDetachedEgress(bin, cfgPath) {
   })
 }
 
-function portListening(host, port) {
+function portListening(host, port, ownerPid = 0) {
   const h = host || '127.0.0.1'
   // A TCP connect is traffic to the transparent forwarder, not a passive
   // readiness check. Inspect LISTEN sockets without entering its data path.
-  const r = sh(['ss', '-H', '-ltn', `sport = :${Number(port)}`], { timeout: 2000 })
+  const probe = ownerPid
+    ? ['ss', '-H', '-ltnp', `sport = :${Number(port)}`]
+    : ['ss', '-H', '-ltn', `sport = :${Number(port)}`]
+  const r = sh(probe, { timeout: 2000 })
   return (
     r.ok &&
     r.stdout.split('\n').some((line) => {
-      const local = line.trim().split(/\s+/)[3]
-      return (
+      const fields = line.trim().split(/\s+/)
+      const local = fields[3]
+      const addressMatches =
         local === `${h}:${port}` || local === `0.0.0.0:${port}` || local === `*:${port}` || local === `[::]:${port}`
-      )
+      if (!addressMatches) return false
+      if (!ownerPid) return true
+      return new RegExp(`pid=${ownerPid}(?:\\D|$)`).test(fields.at(-1) || '')
     })
   )
 }
 
-function waitListen(host, port, timeoutMs = 8000) {
+function waitListen(host, port, timeoutMs = 8000, ownerPid = 0) {
   const start = Date.now()
   while (Date.now() - start < timeoutMs) {
-    if (portListening(host, port)) return true
+    if (portListening(host, port, ownerPid)) return true
     sleepMsSync(100)
   }
   return false
@@ -719,8 +778,8 @@ async function startProxyEgress(
     ...(bin ? { bin } : {}),
   })
   if (!started.ok) return started
-  if (!waitListen(listenHost, ports.tcp))
-    return { ok: false, error: `kin-egress ${listenHost}:${ports.tcp} did not listen` }
+  if (!waitListen(listenHost, ports.tcp, 8000, ports.tcp > 0 ? started.pid : 0))
+    return { ok: false, error: `kin-egress ${listenHost}:${ports.tcp} did not listen`, pid: started.pid }
   const rules = applyIptables(plan, runIptables)
   if (!rules.ok) {
     stopEgressProcess(projectRoot, proxyId)
diff --git a/test/unit/egress.test.mjs b/test/unit/egress.test.mjs
index d6e26c9a8..5cd66da5e 100644
--- a/test/unit/egress.test.mjs
+++ b/test/unit/egress.test.mjs
@@ -39,14 +39,22 @@ import { hostProxyUrlForVm } from '../../src/lib/vm/slot-host.mjs'
 // Process-ownership tests need the native helper so /proc/<pid>/exe identifies it.
 const egressBin = process.env.KIN_EGRESS_BIN || path.resolve(import.meta.dirname, '../../bin/kin-egress')
 
-async function waitForProcess(predicate) {
-  for (let i = 0; i < 100; i++) {
+async function waitForProcess(predicate, attempts = 100) {
+  for (let i = 0; i < attempts; i++) {
     if (predicate()) return
-    await new Promise((resolve) => setTimeout(resolve, 10))
+    await new Promise((resolve) => setTimeout(resolve, 50))
   }
   assert.fail('process state did not converge')
 }
 
+async function reservePort() {
+  const listener = net.createServer()
+  await new Promise((resolve) => listener.listen(0, '127.0.0.1', resolve))
+  const port = listener.address().port
+  await new Promise((resolve) => listener.close(resolve))
+  return port
+}
+
 function egressFixture(t, proxyId = 'px-process') {
   const root = fs.mkdtempSync(path.join(os.tmpdir(), 'kin-eg-process-'))
   const dir = egressRunDir(root, proxyId)
@@ -224,27 +232,60 @@ test('an egress helper can be reused, replaced and stopped only by its own proxy
   assert.equal(fs.existsSync(fx.pidFile), false)
 })
 
-test('a running egress remains identifiable after its binary was replaced', {
+test('a replaced egress binary is restarted onto the new file', {
   skip: process.platform !== 'linux',
 }, async (t) => {
   const fx = egressFixture(t)
   const bin = path.join(fx.root, 'kin-egress')
+  const replacement = path.join(fx.root, 'kin-egress-next')
   fs.copyFileSync(egressBin, bin)
+  fs.copyFileSync(egressBin, replacement)
   fs.chmodSync(bin, 0o755)
+  fs.chmodSync(replacement, 0o755)
   const started = await fx.start({ bin })
-  await waitForProcess(() => {
-    try {
-      return fs.readlinkSync(`/proc/${started.pid}/exe`) === bin
-    } catch {
-      return false
-    }
-  })
+  await waitForProcess(() => inspectEgressProcess(fx.root, fx.base.proxyId).ok)
   fs.unlinkSync(bin)
   assert.match(fs.readlinkSync(`/proc/${started.pid}/exe`), / \(deleted\)$/)
-  assert.equal(inspectEgressProcess(fx.root, fx.base.proxyId).ok, true)
-  assert.equal((await fx.start({ bin })).reused, true)
-  assert.equal(stopEgressProcess(fx.root, fx.base.proxyId).ok, true)
+  assert.equal(inspectEgressProcess(fx.root, fx.base.proxyId).ok, false)
+  const restarted = await fx.start({ bin: replacement })
+  assert.equal(restarted.ok, true, restarted.error)
+  assert.equal(restarted.reused, false)
+  assert.notEqual(restarted.pid, started.pid)
   await waitForProcess(() => !fs.existsSync(`/proc/${started.pid}`))
+  let exe = 'missing'
+  try {
+    exe = fs.readlinkSync(`/proc/${restarted.pid}/exe`)
+  } catch (error) {
+    exe = error.code || 'gone'
+  }
+  assert.equal(exe, replacement, JSON.stringify({ old: started.pid, next: restarted.pid, exe }))
+  assert.equal(stopEgressProcess(fx.root, fx.base.proxyId).ok, true)
+})
+
+test('a stale pidfile does not hide an egress process still holding its port', {
+  skip: process.platform !== 'linux',
+}, async (t) => {
+  const fx = egressFixture(t)
+  const orphanBin = path.join(fx.root, 'kin-egress')
+  fs.copyFileSync(egressBin, orphanBin)
+  fs.chmodSync(orphanBin, 0o755)
+  const port = await reservePort()
+  const orphan = await fx.start({ bin: orphanBin, tcpPort: port, dnsPort: 0 })
+  assert.equal(orphan.ok, true, orphan.error)
+  await waitForProcess(() => inspectEgressProcess(fx.root, fx.base.proxyId).ok)
+  fs.unlinkSync(orphanBin)
+  fs.writeFileSync(fx.pidFile, '999999999\n')
+  assert.match(fs.readlinkSync(`/proc/${orphan.pid}/exe`), / \(deleted\)$/)
+  assert.equal(inspectEgressProcess(fx.root, fx.base.proxyId).ok, false)
+  const recovered = await fx.start({ tcpPort: port, dnsPort: 0 })
+  assert.equal(recovered.ok, true, recovered.error)
+  assert.equal(recovered.reused, false)
+  assert.notEqual(recovered.pid, orphan.pid)
+  await waitForProcess(() => !fs.existsSync(`/proc/${orphan.pid}`))
+  assert.equal(inspectEgressProcess(fx.root, fx.base.proxyId).pid, recovered.pid)
+  assert.equal(Number(fs.readFileSync(fx.pidFile, 'utf8')), recovered.pid)
+  assert.equal(JSON.parse(fs.readFileSync(fx.configPath, 'utf8')).listen_tcp, `127.0.0.1:${port}`)
+  assert.equal(stopEgressProcess(fx.root, fx.base.proxyId).ok, true)
 })
 
 test('redundant separators in an egress config path do not change its owner', {
@@ -264,7 +305,7 @@ test('redundant separators in an egress config path do not change its owner', {
   await once(child, 'spawn')
   fs.writeFileSync(fx.pidFile, String(child.pid))
   assert.equal(inspectEgressProcess(fx.root, fx.base.proxyId).ok, true)
-  const reused = await fx.start()
+  const reused = await fx.start({ listenHost: '127.0.0.1', tcpPort: 0, dnsPort: 0 })
   assert.equal(reused.reused, true)
   assert.equal(reused.pid, child.pid)
   assert.equal(stopEgressProcess(fx.root, fx.base.proxyId).ok, true)

From 03028922e24ac2d6c3d284e804a2c44a7b49aa12 Mon Sep 17 00:00:00 2001
From: dofastted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 19:28:43 +0800
Subject: [PATCH 09/19] fix(vm): fail upgrade until a replaced kin-egress is
 restarted

Fleet refresh now waits for every helper bound to the proxy config to exit
before binding the new one. install.sh no longer treats a failed refresh as
a successful upgrade.
---
 deploy/install.sh               |  9 ++++-
 src/lib/vm/egress.mjs           | 49 ++++++++++++------------
 src/lib/vm/fleet-update.mjs     | 27 +++++++++-----
 test/unit/fleet-update.test.mjs | 66 ++++++++++++++++++++++++++++++++-
 4 files changed, 115 insertions(+), 36 deletions(-)

diff --git a/deploy/install.sh b/deploy/install.sh
index 0f3175070..571661b45 100644
--- a/deploy/install.sh
+++ b/deploy/install.sh
@@ -682,10 +682,15 @@ start_stack() {
 refresh_slot_services() {
   # The control-plane image carries the freshly built Go binaries. Publish them
   # into persistent slot-bin mounts and restart only kin-worker/kin-egress.
+  # A stale kin-egress can keep the old binary and its listen port after this
+  # refresh. Leaving that as a warning reports the upgrade done while the old
+  # exit is still serving traffic.
   if ! docker exec "$SERVICE_NAME" test -f /opt/vm2api/scripts/fleet-services.mjs >/dev/null 2>&1; then
-    warn "控制面尚未包含 Go 服务刷新脚本；下次更新将重试服务刷新"
+    err "控制面缺少 Go 服务刷新脚本，不能确认 kin-egress 已换到当前二进制"
+    exit 1
   elif ! docker exec "$SERVICE_NAME" node /opt/vm2api/scripts/fleet-services.mjs; then
-    warn "Go slot service refresh failed; VM containers were left untouched"
+    err "Go slot service refresh failed; VM containers were left untouched, but kin-egress may still be the previous binary"
+    exit 1
   fi
 }
 
diff --git a/src/lib/vm/egress.mjs b/src/lib/vm/egress.mjs
index 01ba5a609..aac230a1c 100644
--- a/src/lib/vm/egress.mjs
+++ b/src/lib/vm/egress.mjs
@@ -260,7 +260,12 @@ function ownsEgressProcess(pid, configPath, { allowDeleted = false } = {}) {
     if (exe.deleted && !allowDeleted) return false
     const args = fs.readFileSync(`/proc/${pid}/cmdline`, 'utf8').split('\0')
     const configIndex = args.indexOf('-config')
-    if (path.basename(exe.path) !== 'kin-egress' || configIndex <= 0 || !args[configIndex + 1]) return false
+    if (
+      !args.some((arg) => path.basename(String(arg || '').replace(/ \(deleted\)$/, '')).startsWith('kin-egress')) ||
+      configIndex <= 0 ||
+      !args[configIndex + 1]
+    )
+      return false
     const argument = args[configIndex + 1]
     const actualConfig = path.isAbsolute(argument)
       ? path.resolve(argument)
@@ -273,24 +278,16 @@ function ownsEgressProcess(pid, configPath, { allowDeleted = false } = {}) {
 
 function egressProcessPids() {
   if (process.platform !== 'linux') return []
-  const marker = Buffer.from('/kin-egress')
-  const deleted = Buffer.from(' (deleted)')
   const pids = []
   for (const name of fs.readdirSync('/proc')) {
     if (!/^[1-9][0-9]*$/.test(name)) continue
-    let exe
     try {
-      exe = fs.readlinkSync(`/proc/${name}/exe`)
+      const args = fs.readFileSync(`/proc/${name}/cmdline`).toString('utf8').split('\0')
+      if (args.some((arg) => path.basename(arg.replace(/ \(deleted\)$/, '')).startsWith('kin-egress')))
+        pids.push(Number(name))
     } catch {
-      continue
+      // Raced with exit, or a process whose /proc we cannot read.
     }
-    const bytes = Buffer.from(exe)
-    if (!bytes.includes(marker)) continue
-    const end = bytes.subarray(bytes.length - deleted.length).equals(deleted)
-      ? bytes.length - deleted.length
-      : bytes.length
-    if (path.basename(bytes.subarray(0, end).toString('utf8')) !== 'kin-egress') continue
-    pids.push(Number(name))
   }
   return pids
 }
@@ -516,6 +513,7 @@ export function stopEgressProcess(projectRoot, proxyId) {
   const cfgPath = path.join(dir, 'egress.json')
   const recorded = readPid(pidFile)
   const pids = [...new Set([...staleEgressPids(cfgPath), ...(ownsEgressProcess(recorded, cfgPath) ? [recorded] : [])])]
+  const pending = []
   for (const pid of pids) {
     try {
       process.kill(pid, 'SIGTERM')
@@ -523,14 +521,15 @@ export function stopEgressProcess(projectRoot, proxyId) {
       if (error.code !== 'ESRCH') return { ok: false, error: `egress_stop_failed: ${error.code || error.message}` }
     }
     // Keep the PID while termination is pending so policy reconciliation can verify/retry it.
-    if (ownsEgressProcess(pid, cfgPath, { allowDeleted: true })) return { ok: true }
+    if (ownsEgressProcess(pid, cfgPath, { allowDeleted: true })) pending.push(pid)
   }
+  if (pending.length) return { ok: true, pending }
   try {
     fs.rmSync(pidFile, { force: true })
   } catch (error) {
     return { ok: false, error: `egress_pid_cleanup_failed: ${error.code || error.message}` }
   }
-  return { ok: true }
+  return { ok: true, pending }
 }
 
 async function stopOwnedEgress(pid) {
@@ -745,6 +744,8 @@ async function startProxyEgress(
     dnsUpstream = configuredDnsUpstream(),
     dnsEmptyTypes = configuredDnsEmptyTypes(),
     bin,
+    ports,
+    listenHost: listenHostOverride,
   } = {},
 ) {
   const blocked = proxyBlockedReason(proxy)
@@ -754,23 +755,23 @@ async function startProxyEgress(
   if (!proxyId || !proxyUrl) return { ok: false, error: 'bound SOCKS5 id and url required; refusing fallback' }
   const net = ensureEgressNetwork(proxyId, runDocker)
   if (!net.ok) return net
-  const listenHost = net.gateway || gatewayFromSubnet(net.subnet)
+  const listenHost = listenHostOverride || net.gateway || gatewayFromSubnet(net.subnet)
   if (!listenHost) return { ok: false, error: 'egress network gateway missing' }
-  const ports = portsForProxy(proxyId)
+  const selectedPorts = ports || portsForProxy(proxyId)
   const chain = chainName(proxyId)
   const plan = iptablesPlan({
     chain,
     bridge: net.bridge,
     subnet: net.subnet,
-    tcpPort: ports.tcp,
-    dnsPort: ports.dns,
+    tcpPort: selectedPorts.tcp,
+    dnsPort: selectedPorts.dns,
   })
   const started = await startEgressProcess({
     projectRoot,
     proxyId,
     proxyUrl,
-    tcpPort: ports.tcp,
-    dnsPort: ports.dns,
+    tcpPort: selectedPorts.tcp,
+    dnsPort: selectedPorts.dns,
     listenHost,
     dnsUpstream,
     dnsEmptyTypes,
@@ -778,8 +779,8 @@ async function startProxyEgress(
     ...(bin ? { bin } : {}),
   })
   if (!started.ok) return started
-  if (!waitListen(listenHost, ports.tcp, 8000, ports.tcp > 0 ? started.pid : 0))
-    return { ok: false, error: `kin-egress ${listenHost}:${ports.tcp} did not listen`, pid: started.pid }
+  if (!waitListen(listenHost, selectedPorts.tcp, 8000, selectedPorts.tcp > 0 ? started.pid : 0))
+    return { ok: false, error: `kin-egress ${listenHost}:${selectedPorts.tcp} did not listen`, pid: started.pid }
   const rules = applyIptables(plan, runIptables)
   if (!rules.ok) {
     stopEgressProcess(projectRoot, proxyId)
@@ -791,7 +792,7 @@ async function startProxyEgress(
     bridge: net.bridge,
     subnet: net.subnet,
     gateway: listenHost,
-    ports,
+    ports: selectedPorts,
     pid: started.pid,
     proxy_id: proxyId,
   }
diff --git a/src/lib/vm/fleet-update.mjs b/src/lib/vm/fleet-update.mjs
index 52b255c4d..0333dc1a0 100644
--- a/src/lib/vm/fleet-update.mjs
+++ b/src/lib/vm/fleet-update.mjs
@@ -11,20 +11,29 @@ import { rustKernelHealth } from '../transport/rust-kernel-client.mjs'
 import { restartTelemetrySidecar } from './slot-process-status.mjs'
 import { vmNodeId } from '../cluster/placement.mjs'
 import { restartRemoteServices } from '../cluster/remote-slot.mjs'
-import { ensureProxyEgress, isLocalEgressProxy, stopEgressProcess } from './egress.mjs'
+import { ensureProxyEgress, isLocalEgressProxy, stopEgressProcess, waitEgressExit } from './egress.mjs'
 
 const ACTIONS = new Set(['collect', 'reload', 'roll', 'telemetry'])
 
-async function restartLocalServices({ projectRoot, vm, enabled }) {
+export async function restartLocalEgress(projectRoot, vm, opts = {}) {
+  if (isLocalEgressProxy(vm.proxy)) return { ok: true, egress: 'local' }
+  const stopped = stopEgressProcess(projectRoot, vm.proxy?.id)
+  if (!stopped.ok) return { ok: false, action: 'egress_stop_failed', error: stopped.error }
+  for (const pid of stopped.pending || []) {
+    const exited = await waitEgressExit(pid)
+    if (!exited.ok) return { ok: false, action: 'egress_stop_failed', error: exited.error, pid }
+  }
+  const started = await ensureProxyEgress(projectRoot, vm.proxy, opts)
+  if (!started?.ok) return { ok: false, action: 'egress_start_failed', error: started?.error || 'kin-egress failed' }
+  return { ok: true, egress: 'restarted', pid: started.pid }
+}
+
+async function restartLocalServices({ projectRoot, vm, enabled, egressOpts = {} }) {
   const telemetry = await restartTelemetrySidecar({ projectRoot, vm, enabled })
   if (!telemetry.ok) return telemetry
-  if (!isLocalEgressProxy(vm.proxy)) {
-    const stopped = stopEgressProcess(projectRoot, vm.proxy?.id)
-    if (!stopped.ok) return { ok: false, action: 'egress_stop_failed', error: stopped.error }
-    const started = await ensureProxyEgress(projectRoot, vm.proxy)
-    if (!started?.ok) return { ok: false, action: 'egress_start_failed', error: started?.error || 'kin-egress failed' }
-  }
-  return { ...telemetry, egress: 'restarted' }
+  const egress = await restartLocalEgress(projectRoot, vm, egressOpts)
+  if (!egress.ok) return egress
+  return { ...telemetry, egress: egress.egress }
 }
 
 function sleep(ms) {
diff --git a/test/unit/fleet-update.test.mjs b/test/unit/fleet-update.test.mjs
index 9a1e4d97e..451099f67 100644
--- a/test/unit/fleet-update.test.mjs
+++ b/test/unit/fleet-update.test.mjs
@@ -2,8 +2,10 @@ import test from 'node:test'
 import assert from 'node:assert/strict'
 import fs from 'node:fs'
 import os from 'node:os'
+import net from 'node:net'
 import path from 'node:path'
-import { runFleetUpdate, fleetStatus, isWorkerProcessUp } from '../../src/lib/vm/fleet-update.mjs'
+import { runFleetUpdate, fleetStatus, isWorkerProcessUp, restartLocalEgress } from '../../src/lib/vm/fleet-update.mjs'
+import { startEgressProcess, inspectEgressProcess } from '../../src/lib/vm/egress.mjs'
 
 function writeSlot(root, id, extra = {}) {
   const dir = path.join(root, 'vms')
@@ -99,3 +101,65 @@ test('fleet collect skips reload', async () => {
   assert.equal(fleetStatus(root)[0].id, 'vm-01')
   fs.rmSync(root, { recursive: true, force: true })
 })
+
+test('fleet refresh replaces an egress process whose binary was deleted', {
+  skip: process.platform !== 'linux',
+}, async () => {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'kin-fleet-egress-'))
+  const oldBin = path.join(root, 'kin-egress-old')
+  const newBin = path.join(root, 'kin-egress')
+  const source = process.env.KIN_EGRESS_BIN || path.resolve(import.meta.dirname, '../../bin/kin-egress')
+  fs.copyFileSync(source, oldBin)
+  fs.copyFileSync(source, newBin)
+  fs.chmodSync(oldBin, 0o755)
+  fs.chmodSync(newBin, 0o755)
+  const proxy = { id: 'px-fleet', scheme: 'socks5', host: '192.0.2.1', port: 1080, url: 'socks5://192.0.2.1:1080' }
+  writeSlot(root, 'vm-01', { proxy })
+  const probe = net.createServer()
+  const port = await new Promise((resolve) => probe.listen(0, '127.0.0.1', () => resolve(probe.address().port)))
+  await new Promise((resolve) => probe.close(resolve))
+  const previous = process.env.KIN_EGRESS_BIN
+  process.env.KIN_EGRESS_BIN = newBin
+  const orphan = await startEgressProcess({
+    projectRoot: root,
+    proxyId: proxy.id,
+    proxyUrl: 'socks5h://192.0.2.1:1080',
+    listenHost: '127.0.0.1',
+    tcpPort: port,
+    dnsPort: 0,
+    bin: oldBin,
+  })
+  assert.equal(orphan.ok, true, orphan.error)
+  fs.unlinkSync(oldBin)
+  fs.writeFileSync(path.join(root, 'data/run/egress/px-fleet/egress.pid'), '999999999\n')
+  const egressOpts = {
+    runDocker: (args) =>
+      args[0] === 'network' && args[1] === 'inspect' ? { ok: true, stdout: '127.0.0.0/8|127.0.0.1' } : { ok: true },
+    runIptables: () => ({ ok: true }),
+    listenHost: '127.0.0.1',
+    ports: { tcp: port, dns: 0 },
+    bin: newBin,
+  }
+  try {
+    const report = await runFleetUpdate(root, {
+      action: 'telemetry',
+      telemetryFn: async ({ projectRoot, vm }) => restartLocalEgress(projectRoot, vm, egressOpts),
+      healthFn: async () => ({ ok: true }),
+    })
+    assert.equal(report.failed_count, 0, JSON.stringify(report.items))
+    const current = inspectEgressProcess(root, proxy.id)
+    assert.equal(current.ok, true, JSON.stringify(current))
+    assert.notEqual(current.pid, orphan.pid)
+    assert.equal(fs.readlinkSync(`/proc/${current.pid}/exe`), newBin)
+    assert.equal(fs.existsSync(`/proc/${orphan.pid}`), false)
+    assert.equal(
+      JSON.parse(fs.readFileSync(path.join(root, 'data/run/egress/px-fleet/egress.json'), 'utf8')).listen_tcp,
+      `127.0.0.1:${port}`,
+    )
+    process.kill(current.pid, 'SIGTERM')
+  } finally {
+    if (previous === undefined) delete process.env.KIN_EGRESS_BIN
+    else process.env.KIN_EGRESS_BIN = previous
+    fs.rmSync(root, { recursive: true, force: true })
+  }
+})

From e615b2f4691cd7aa6e8833056283ca75513b1670 Mon Sep 17 00:00:00 2001
From: dofastted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 20:36:56 +0800
Subject: [PATCH 10/19] =?UTF-8?q?feat(web):=20=E7=A7=8D=E5=AD=90=E9=A1=B5?=
 =?UTF-8?q?=E6=8C=89=E5=BD=93=E5=89=8D=E6=A7=BD=20settings.json=20?=
 =?UTF-8?q?=E6=98=BE=E7=A4=BA?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

账本列出文件里的真实配置项，claude.setting 可编辑后播种。遥测开/关与进程状态分开，种子页打开时 2 秒刷新。
---
 PRODUCT.md                                   |  38 ++
 web/src/features/vm/detail-page.tsx          |  21 +-
 web/src/features/vm/queries.ts               |   4 +-
 web/src/features/vm/seed-policy-card.test.ts |  13 +-
 web/src/features/vm/seed-policy-card.tsx     | 367 +++++++++++--------
 web/src/features/vm/seed-settings.test.ts    | 124 +++++++
 web/src/features/vm/seed-settings.ts         | 159 ++++++++
 7 files changed, 548 insertions(+), 178 deletions(-)
 create mode 100644 PRODUCT.md
 create mode 100644 web/src/features/vm/seed-settings.test.ts
 create mode 100644 web/src/features/vm/seed-settings.ts

diff --git a/PRODUCT.md b/PRODUCT.md
new file mode 100644
index 000000000..629754c59
--- /dev/null
+++ b/PRODUCT.md
@@ -0,0 +1,38 @@
+# Product
+
+<!-- impeccable:product-schema 1 -->
+
+## Platform
+
+web
+
+## Users
+
+本机管理员。在深色运维控制台里打开某个虚拟机槽位，核对并改写该槽 Claude Code 的种子配置。
+
+## Product Purpose
+
+vm2api 把 Claude / Codex 账号做成可调度的虚拟机槽，并对外提供兼容上游的 API。种子页的成功标准：管理员不用进容器，就能看见当前槽 `settings.json` 里实际生效的配置项，改完能播种，并实时看到遥测开或关。
+
+## Positioning
+
+种子不是一份预设表单。它读当前槽家目录里已经写好的 Claude 配置，按文件内容逐项显示，再把改动写回同一份文件。
+
+## Operating Context
+
+管理员在 `/vm/$id` 的「种子」页签工作。数据来自该槽 `cli-home/.claude/settings.json`、`claude.setting` 和种子策略。遥测进程状态来自槽详情里的实时观测。
+
+## Capabilities and Constraints
+
+- 显示当前槽 `settings.json` 的真实键值，而不是只显示种子策略里的默认串。
+- `claude.setting` 以可编辑文本提供，保存时写回并重新播种。
+- 遥测开、关状态实时刷新；配置开关和进程是否在跑是两件事。
+- 「拒客户端 settings」和「拒客户端身份」按当前策略准确显示，并可切换。
+- 平台是现有 React 面板，不另起一套视觉系统。
+
+## Product Principles
+
+- 槽内文件是事实，表单默认值不是。
+- 开和关都要能被看见，未知不能伪装成关闭。
+- 能改的项和只读观测分开。
+- 播种是显式动作，不在切换开关时偷偷写盘。
diff --git a/web/src/features/vm/detail-page.tsx b/web/src/features/vm/detail-page.tsx
index 2a82fd87b..c8b5fc32b 100644
--- a/web/src/features/vm/detail-page.tsx
+++ b/web/src/features/vm/detail-page.tsx
@@ -129,8 +129,15 @@ function VmDetailBody({
     enabled: perms.known && !perms.dashboard,
   })
   const proxies = useQuery({ ...proxiesQueryOptions(), enabled: perms.admin })
-  const detail = useQuery(vmQueryOptions(id))
-  const seed = useQuery({ ...vmSeedQueryOptions(id), enabled: perms.admin })
+  const detail = useQuery({
+    ...vmQueryOptions(id),
+    refetchInterval: wantedTab === 'seed' ? 2000 : false,
+  })
+  const seed = useQuery({
+    ...vmSeedQueryOptions(id),
+    enabled: perms.admin && wantedTab === 'seed',
+    refetchInterval: wantedTab === 'seed' ? 2000 : false,
+  })
   const routing = useQuery({ ...routingQueryOptions(), enabled: perms.admin })
   usePoolSeatStream()
 
@@ -260,8 +267,6 @@ function VmDetailBody({
   // 本地代理固定第一。已绑到本槽的留在下拉里，否则正在用它时列表里没有。
   const free = proxiesForVmBind(pool, id, 5, vm.node_id ?? null)
   const bindTarget = pickBindTarget(bindId, free)
-  const pol =
-    (seed.data?.seed_policy as Record<string, unknown> | undefined) || {}
   const syncTelemetry =
     (routing.data?.official_cc as { sync_telemetry?: boolean } | undefined)
       ?.sync_telemetry === true
@@ -564,13 +569,11 @@ function VmDetailBody({
                 }}
                 onDelete={() => setConfirmDel(true)}
               />
-              <TabsContent value='seed' className='space-y-3 pt-4'>
-                <p className='text-sm text-muted-foreground'>
-                  官方 Claude Code 初装之后的后置覆写。遥测只看这一只开关。
-                </p>
+              <TabsContent value='seed' className='pt-4'>
                 {seed.data ? (
                   <SeedPolicyCard
-                    policy={pol}
+                    seed={seed.data}
+                    telemetry={kernel?.telemetry}
                     saving={saveSeed.isPending}
                     syncTelemetry={syncTelemetry}
                     onSave={(next) => saveSeed.mutate(next)}
diff --git a/web/src/features/vm/queries.ts b/web/src/features/vm/queries.ts
index 8acc260b1..c8a917ed9 100644
--- a/web/src/features/vm/queries.ts
+++ b/web/src/features/vm/queries.ts
@@ -6,6 +6,7 @@ import type {
   VmCreateOptions,
   VmCredentialResponse,
   VmDetailPayload,
+  VmSeedSettings,
   VmsListResponse,
 } from '@/types/panel-vm'
 import { api } from '@/lib/api'
@@ -46,9 +47,10 @@ export function vmSeedQueryOptions(id: string) {
   return queryOptions({
     queryKey: ['panel', 'vm', id, 'seed'] as const,
     queryFn: () =>
-      api<Record<string, unknown>>(
+      api<VmSeedSettings>(
         `/api/panel/vms/${encodeURIComponent(id)}/seed-settings`
       ),
+    refetchInterval: false,
   })
 }
 
diff --git a/web/src/features/vm/seed-policy-card.test.ts b/web/src/features/vm/seed-policy-card.test.ts
index f6ac473ff..69a3333c1 100644
--- a/web/src/features/vm/seed-policy-card.test.ts
+++ b/web/src/features/vm/seed-policy-card.test.ts
@@ -1,18 +1,19 @@
 import { describe, expect, it } from 'vitest'
-import { alignTelemetryDraft } from './seed-policy-card'
+import { seedSaveBody } from './seed-settings'
 import { telemetryEnabled } from './telemetry-policy'
 
-describe('seed card follows the telemetry bit', () => {
+describe('seed save follows the telemetry bit', () => {
   it('drops contradictory mirrors so the switch stays on', () => {
-    const draft = alignTelemetryDraft({
+    const body = seedSaveBody({
       telemetry_disabled: false,
       disable_nonessential_traffic: false,
       do_not_track: true,
       reject_client_settings: true,
       reject_client_metadata_identity: true,
+      claude_setting: 'A=1',
     })
-    expect(telemetryEnabled(draft)).toBe(true)
-    expect(draft.disable_nonessential_traffic).toBe(true)
-    expect(draft.do_not_track).toBe(false)
+    expect(telemetryEnabled(body)).toBe(true)
+    expect(body.disable_nonessential_traffic).toBe(true)
+    expect(body.do_not_track).toBe(false)
   })
 })
diff --git a/web/src/features/vm/seed-policy-card.tsx b/web/src/features/vm/seed-policy-card.tsx
index 2ff1573f9..77715cd1a 100644
--- a/web/src/features/vm/seed-policy-card.tsx
+++ b/web/src/features/vm/seed-policy-card.tsx
@@ -1,212 +1,255 @@
 import { useEffect, useState } from 'react'
+import type { VmKernelSnapshot, VmSeedSettings } from '@/types/panel-vm'
+import { cn } from '@/lib/utils'
 import { Button } from '@/components/ui/button'
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/card'
 import { Label } from '@/components/ui/label'
 import { Switch } from '@/components/ui/switch'
 import { Textarea } from '@/components/ui/textarea'
 import {
-  telemetryEnabled,
-  telemetrySeedFlags,
-} from '@/features/vm/telemetry-policy'
+  DEFAULT_CLAUDE_SETTING,
+  REJECT_FLAGS,
+  seedDraftOf,
+  seedSaveBody,
+  settingsRows,
+  sameDraft,
+  telemetryLive,
+  type SeedDraft,
+} from '@/features/vm/seed-settings'
+import { telemetryEnabled } from '@/features/vm/telemetry-policy'
 
-export const DEFAULT_CLAUDE_SETTING =
-  'CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1'
+export { DEFAULT_CLAUDE_SETTING }
 
-const REJECT_FLAGS: [string, string][] = [
-  ['reject_client_settings', '拒客户端 settings'],
-  ['reject_client_metadata_identity', '拒客户端身份'],
-]
+type ObservedTelemetry = NonNullable<VmKernelSnapshot['telemetry']>
 
-type SeedPolicy = Record<string, boolean | string>
-
-export const SEED_PRESETS: Record<string, SeedPolicy> = {
-  standard: {
-    ...telemetrySeedFlags(false),
-    claude_setting: DEFAULT_CLAUDE_SETTING,
-    reject_client_settings: true,
-    reject_client_metadata_identity: true,
-  },
-  open: {
-    ...telemetrySeedFlags(true),
-    claude_setting: DEFAULT_CLAUDE_SETTING,
-    reject_client_settings: false,
-    reject_client_metadata_identity: false,
-  },
-  strict: {
-    ...telemetrySeedFlags(false),
-    claude_setting: DEFAULT_CLAUDE_SETTING,
-    reject_client_settings: true,
-    reject_client_metadata_identity: true,
-  },
-}
-
-const PRESET_LABELS: [string, string, string][] = [
-  ['standard', '标准', '拒客户端覆写，遥测关；需手动开启'],
-  ['open', '开放', '不拒客户端；遥测开，非必要流量=1'],
-  ['strict', '关闭遥测', '关遥测 + DNT；非必要流量=0'],
-]
-
-/** Mirrors follow the telemetry bit. Reject flags are left alone. */
-export function alignTelemetryDraft(draft: SeedPolicy): SeedPolicy {
-  return { ...draft, ...telemetrySeedFlags(telemetryEnabled(draft)) }
-}
-
-/**
- * 预设名 → 提交给后端的种子策略。`theme: 'dark'` 是固定值（非用户可选项）。
- */
-export function seedPolicyOf(name: string): Record<string, boolean | string> {
-  return { ...(SEED_PRESETS[name] || SEED_PRESETS.standard), theme: 'dark' }
-}
-
-export function matchSeedPreset(policy: Record<string, unknown>): string {
-  const on = telemetryEnabled(policy)
-  for (const [name, preset] of Object.entries(SEED_PRESETS)) {
-    if (telemetryEnabled(preset) !== on) continue
-    if (REJECT_FLAGS.every(([k]) => !!preset[k] === !!policy[k])) return name
-  }
-  return 'custom'
+function Lamp({ tone }: { tone: 'on' | 'off' | 'unknown' }) {
+  return (
+    <span
+      aria-hidden
+      className={cn(
+        'relative inline-flex size-2.5 shrink-0 rounded-full',
+        tone === 'on' && 'bg-primary',
+        tone === 'off' && 'bg-[var(--status-warn)]',
+        tone === 'unknown' && 'bg-muted-foreground/50'
+      )}
+    >
+      {tone !== 'unknown' ? (
+        <span
+          className={cn(
+            'absolute inset-0 rounded-full motion-safe:animate-ping',
+            tone === 'on' ? 'bg-primary/70' : 'bg-[var(--status-warn)]/70'
+          )}
+        />
+      ) : null}
+    </span>
+  )
 }
 
-function normalize(policy: Record<string, unknown>): SeedPolicy {
-  const out: SeedPolicy = { ...telemetrySeedFlags(telemetryEnabled(policy)) }
-  out.claude_setting =
-    typeof policy.claude_setting === 'string'
-      ? policy.claude_setting
-      : DEFAULT_CLAUDE_SETTING
-  for (const [k] of REJECT_FLAGS) {
-    out[k] = k in policy ? !!policy[k] : !!SEED_PRESETS.standard[k]
-  }
-  return out
+function ToggleRow({
+  id,
+  label,
+  detail,
+  checked,
+  disabled,
+  onCheckedChange,
+}: {
+  id: string
+  label: string
+  detail: string
+  checked: boolean
+  disabled: boolean
+  onCheckedChange: (next: boolean) => void
+}) {
+  return (
+    <div className='flex items-center justify-between gap-3 py-2.5'>
+      <div className='min-w-0'>
+        <Label htmlFor={id} className='text-sm font-medium'>
+          {label}
+        </Label>
+        <p className='text-xs text-muted-foreground'>{detail}</p>
+      </div>
+      <div className='flex items-center gap-2'>
+        <span
+          className={cn(
+            'font-mono text-[11px] tracking-wide',
+            checked ? 'text-primary' : 'text-muted-foreground'
+          )}
+        >
+          {checked ? '开' : '关'}
+        </span>
+        <Switch
+          id={id}
+          checked={checked}
+          disabled={disabled}
+          onCheckedChange={onCheckedChange}
+        />
+      </div>
+    </div>
+  )
 }
 
 export function SeedPolicyCard({
-  policy,
+  seed,
+  telemetry,
   onSave,
   saving,
   syncTelemetry = false,
 }: {
-  policy: Record<string, unknown>
-  onSave: (next: SeedPolicy) => void
+  seed: VmSeedSettings
+  telemetry?: ObservedTelemetry | null
+  onSave: (next: Record<string, boolean | string>) => void
   saving: boolean
   /** External official_cc.sync_telemetry. True means the next init turns telemetry back on. */
   syncTelemetry?: boolean
 }) {
-  const [draft, setDraft] = useState<SeedPolicy>(() =>
-    alignTelemetryDraft(normalize(policy))
-  )
+  const saved = seedDraftOf(seed)
+  const [draft, setDraft] = useState<SeedDraft>(saved)
   useEffect(() => {
-    setDraft(alignTelemetryDraft(normalize(policy)))
-  }, [policy])
+    setDraft(seedDraftOf(seed))
+  }, [seed])
 
-  const current = matchSeedPreset(draft)
-  const saved = normalize(policy)
-  const dirty =
-    telemetryEnabled(draft) !== telemetryEnabled(saved) ||
-    REJECT_FLAGS.some(([k]) => !!draft[k] !== !!saved[k]) ||
-    draft.claude_setting !== saved.claude_setting
+  const dirty = !sameDraft(draft, saved)
   const on = telemetryEnabled(draft)
+  const live = telemetryLive(seed, telemetry)
+  const fileSetting =
+    typeof seed.claude_setting === 'string' ? seed.claude_setting : ''
+  const rows = settingsRows(seed.settings_json, fileSetting)
+  const fileMissing = seed.settings_json == null
+
+  const patch = (next: Partial<SeedDraft>) =>
+    setDraft((current) => ({ ...current, ...next }))
 
   return (
-    <Card>
-      <CardHeader className='pb-2'>
-        <CardTitle className='text-sm'>种子策略</CardTitle>
-      </CardHeader>
-      <CardContent className='space-y-4 pt-0'>
-        <div className='space-y-2'>
-          <div className='flex flex-wrap gap-2'>
-            {PRESET_LABELS.map(([key, label, desc]) => (
-              <Button
-                key={key}
-                size='sm'
-                variant={current === key ? 'default' : 'outline'}
-                aria-pressed={current === key}
-                title={desc}
-                disabled={saving}
-                onClick={() =>
-                  setDraft(alignTelemetryDraft({ ...SEED_PRESETS[key] }))
-                }
-              >
-                {label}
-              </Button>
-            ))}
-            {current === 'custom' ? (
-              <Button size='sm' variant='secondary' disabled aria-pressed>
-                自定义
-              </Button>
-            ) : null}
-          </div>
-          <p className='text-xs text-muted-foreground'>
-            {current === 'custom'
-              ? '当前组合不匹配任何预设。'
-              : PRESET_LABELS.find(([k]) => k === current)?.[2]}
+    <div className='grid items-start gap-4 xl:grid-cols-[minmax(0,1.4fr)_minmax(18rem,0.8fr)]'>
+      <section className='min-w-0 overflow-hidden rounded-xl border bg-card'>
+        <header className='flex items-baseline justify-between gap-3 border-b px-4 py-3'>
+          <h2 className='text-sm font-semibold'>当前槽 settings.json</h2>
+          <p className='font-mono text-[11px] text-muted-foreground'>
+            {fileMissing ? '文件未写入' : `${rows.length} 项`}
+          </p>
+        </header>
+        {fileMissing ? (
+          <p className='px-4 py-8 text-sm text-muted-foreground'>
+            这槽还没有 settings.json。播种之后，这里显示写进文件的项。
+          </p>
+        ) : rows.length === 0 ? (
+          <p className='px-4 py-8 text-sm text-muted-foreground'>
+            文件在，但没有 env 项。
           </p>
+        ) : (
+          <div className='overflow-x-auto'>
+            <table className='w-full border-collapse text-left'>
+              <tbody>
+                {rows.map((row) => (
+                  <tr key={row.key} className='border-b last:border-b-0'>
+                    <th
+                      scope='row'
+                      className='px-4 py-2 align-top font-mono text-xs font-medium text-foreground'
+                    >
+                      <span className='inline-flex items-center gap-2'>
+                        {row.inClaudeSetting ? (
+                          <span
+                            className='size-1.5 shrink-0 rounded-full bg-primary'
+                            title='也写在 claude.setting'
+                          />
+                        ) : (
+                          <span className='size-1.5 shrink-0' />
+                        )}
+                        {row.key}
+                      </span>
+                    </th>
+                    <td className='px-4 py-2 text-end font-mono text-xs break-all text-muted-foreground'>
+                      {row.value === '' ? '空' : row.value}
+                    </td>
+                  </tr>
+                ))}
+              </tbody>
+            </table>
+          </div>
+        )}
+      </section>
+
+      <aside className='min-w-0 rounded-xl border bg-card'>
+        <div
+          className='flex items-center gap-3 border-b px-4 py-3'
+          role='status'
+          aria-live='polite'
+        >
+          <Lamp tone={live.tone} />
+          <div className='min-w-0'>
+            <p className='text-sm font-semibold'>
+              遥测 {live.on === true ? '开' : live.on === false ? '关' : '未知'}
+            </p>
+            <p className='text-xs text-muted-foreground'>
+              {live.label}
+              {live.running === true
+                ? ' · 进程在跑'
+                : live.running === false
+                  ? ' · 进程未跑'
+                  : ' · 进程未知'}
+            </p>
+          </div>
         </div>
 
-        <div className='space-y-2 border-t pt-3'>
-          <div className='flex items-center justify-between gap-3'>
-            <Label htmlFor='seed-telemetry' className='text-sm font-normal'>
-              遥测
-            </Label>
-            <Switch
-              id='seed-telemetry'
-              checked={on}
-              disabled={saving}
-              onCheckedChange={(v) =>
-                setDraft(
-                  alignTelemetryDraft({ ...draft, telemetry_disabled: !v })
-                )
+        <div className='divide-y px-4'>
+          <ToggleRow
+            id='seed-telemetry'
+            label='遥测'
+            detail={
+              on
+                ? '非必要流量=1，DNT 关。这两项跟着开关走。'
+                : '非必要流量=0，DNT 开。这两项跟着开关走。'
+            }
+            checked={on}
+            disabled={saving}
+            onCheckedChange={(value) => patch({ telemetry_disabled: !value })}
+          />
+          {REJECT_FLAGS.map(([key, label]) => (
+            <ToggleRow
+              key={key}
+              id={`seed-${key}`}
+              label={label}
+              detail={
+                key === 'reject_client_settings'
+                  ? draft.reject_client_settings
+                    ? '入站 settings / env 会被丢掉。'
+                    : '入站 settings 会留下来。'
+                  : draft.reject_client_metadata_identity
+                    ? '入站 user / machine 身份会被丢掉。'
+                    : '入站身份会留下来。'
               }
+              checked={!!draft[key]}
+              disabled={saving}
+              onCheckedChange={(value) => patch({ [key]: value })}
             />
-          </div>
-          {REJECT_FLAGS.map(([key, label]) => (
-            <div key={key} className='flex items-center justify-between gap-3'>
-              <Label htmlFor={`seed-${key}`} className='text-sm font-normal'>
-                {label}
-              </Label>
-              <Switch
-                id={`seed-${key}`}
-                checked={!!draft[key]}
-                disabled={saving}
-                onCheckedChange={(v) => setDraft({ ...draft, [key]: v })}
-              />
-            </div>
           ))}
         </div>
-        <p className='text-xs text-muted-foreground'>
-          {on
-            ? '遥测开：非必要流量=1，DNT 关。这两项跟着遥测走，不能单独拨。'
-            : '遥测关：非必要流量=0，DNT 开。这两项跟着遥测走，不能单独拨。'}
-          {syncTelemetry
-            ? ' 外部初装「同步遥测」开着，下次换票会按那份配置把本槽遥测重新打开。'
-            : ' 外部初装「同步遥测」关着，换票不会改写这里的遥测开关。'}
-        </p>
 
-        <div className='space-y-2 border-t pt-3'>
-          <Label htmlFor='seed-claude-setting' className='text-sm font-normal'>
+        <div className='space-y-2 border-t px-4 py-3'>
+          <Label htmlFor='seed-claude-setting' className='text-sm font-medium'>
             claude.setting
           </Label>
           <Textarea
             id='seed-claude-setting'
-            value={String(draft.claude_setting || '')}
+            value={draft.claude_setting}
             disabled={saving}
-            onChange={(e) =>
-              setDraft({ ...draft, claude_setting: e.target.value })
-            }
-            className='min-h-24 font-mono text-xs'
+            onChange={(event) => patch({ claude_setting: event.target.value })}
+            className='min-h-28 font-mono text-xs'
             spellCheck={false}
             placeholder={DEFAULT_CLAUDE_SETTING}
           />
           <p className='text-xs text-muted-foreground'>
-            每行一个 Claude 设置。默认写入 <code>{DEFAULT_CLAUDE_SETTING}</code>
-            。
+            {syncTelemetry
+              ? '下次换票会按外部初装把遥测重新打开。'
+              : '换票不会改这里的遥测开关。'}
+            {dirty ? ' 有未播种的改动。' : ' 与当前策略一致。'}
           </p>
         </div>
 
-        <div className='flex gap-2 border-t pt-3'>
+        <div className='flex gap-2 border-t px-4 py-3'>
           <Button
             size='sm'
             disabled={saving || !dirty}
-            onClick={() => onSave(alignTelemetryDraft(draft))}
+            onClick={() => onSave(seedSaveBody(draft))}
           >
             {saving ? '写入中…' : '播种'}
           </Button>
@@ -214,12 +257,12 @@ export function SeedPolicyCard({
             size='sm'
             variant='ghost'
             disabled={saving || !dirty}
-            onClick={() => setDraft(normalize(policy))}
+            onClick={() => setDraft(saved)}
           >
             重置
           </Button>
         </div>
-      </CardContent>
-    </Card>
+      </aside>
+    </div>
   )
 }
diff --git a/web/src/features/vm/seed-settings.test.ts b/web/src/features/vm/seed-settings.test.ts
new file mode 100644
index 000000000..4897c174e
--- /dev/null
+++ b/web/src/features/vm/seed-settings.test.ts
@@ -0,0 +1,124 @@
+import { describe, expect, it } from 'vitest'
+import {
+  claudeSettingKeys,
+  seedDraftOf,
+  seedSaveBody,
+  settingsRows,
+  telemetryLive,
+} from './seed-settings'
+
+const settings = {
+  env: {
+    TZ: 'Asia/Shanghai',
+    LANG: 'en_US.UTF-8',
+    CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: '0',
+    CLAUDE_CODE_USE_BEDROCK: '0',
+    DISABLE_TELEMETRY: '1',
+    DO_NOT_TRACK: '1',
+    CUSTOM_FLAG: 'kept',
+  },
+  theme: 'dark',
+  autoUpdates: false,
+}
+
+describe('current slot settings', () => {
+  it('lists the file env, marking lines also named in claude.setting', () => {
+    const rows = settingsRows(
+      settings,
+      'CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1\n# note\n'
+    )
+    expect(
+      rows.map((row) => [row.key, row.value, row.inClaudeSetting])
+    ).toEqual([
+      ['TZ', 'Asia/Shanghai', false],
+      ['LANG', 'en_US.UTF-8', false],
+      ['CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC', '0', true],
+      ['CLAUDE_CODE_USE_BEDROCK', '0', false],
+      ['DISABLE_TELEMETRY', '1', false],
+      ['DO_NOT_TRACK', '1', false],
+      ['CUSTOM_FLAG', 'kept', false],
+      ['theme', 'dark', false],
+      ['autoUpdates', 'false', false],
+    ])
+  })
+
+  it('does not invent rows when the file is missing', () => {
+    expect(settingsRows(null, 'TZ=UTC')).toEqual([])
+    expect(claudeSettingKeys('# only\n\nNOT A KEY\nOK=1')).toEqual(
+      new Set(['OK'])
+    )
+  })
+})
+
+describe('seed draft', () => {
+  it('shows reject flags from the current policy, not a preset', () => {
+    const draft = seedDraftOf({
+      seed_policy: {
+        telemetry_disabled: false,
+        reject_client_settings: false,
+        reject_client_metadata_identity: true,
+      },
+      claude_setting: 'A=1\r\nB=2\r\n',
+    })
+    expect(draft.reject_client_settings).toBe(false)
+    expect(draft.reject_client_metadata_identity).toBe(true)
+    expect(draft.telemetry_disabled).toBe(false)
+    expect(draft.claude_setting).toBe('A=1\nB=2\n')
+    expect(seedSaveBody(draft)).toMatchObject({
+      telemetry_disabled: false,
+      disable_nonessential_traffic: true,
+      do_not_track: false,
+      reject_client_settings: false,
+      reject_client_metadata_identity: true,
+      claude_setting: 'A=1\nB=2',
+    })
+  })
+
+  it('keeps an explicit false identity flag instead of defaulting it on', () => {
+    const draft = seedDraftOf({
+      seed_policy: { reject_client_metadata_identity: false },
+    })
+    expect(draft.reject_client_metadata_identity).toBe(false)
+    expect(draft.reject_client_settings).toBe(true)
+  })
+
+  it('keeps an empty claude.setting file empty', () => {
+    const draft = seedDraftOf({
+      seed_policy: { claude_setting: 'FROM_POLICY=1' },
+      claude_setting: '',
+    })
+    expect(draft.claude_setting).toBe('')
+  })
+})
+
+describe('telemetry lamp', () => {
+  it('stays off while a process is still running', () => {
+    const live = telemetryLive(
+      { seed_policy: { telemetry_disabled: true } },
+      { enabled: true, running: true }
+    )
+    expect(live).toMatchObject({ on: false, running: true, tone: 'off' })
+    expect(live.label).toBe('未启用')
+  })
+
+  it('stays on when the process has not started', () => {
+    const live = telemetryLive(
+      { seed_policy: { telemetry_disabled: false } },
+      { enabled: false, running: false }
+    )
+    expect(live).toMatchObject({
+      on: true,
+      running: false,
+      tone: 'on',
+      label: '已开启 · 进程未运行',
+    })
+  })
+
+  it('does not call a missing observation off', () => {
+    expect(telemetryLive({}, null)).toMatchObject({
+      on: null,
+      running: null,
+      tone: 'unknown',
+    })
+  })
+})
diff --git a/web/src/features/vm/seed-settings.ts b/web/src/features/vm/seed-settings.ts
new file mode 100644
index 000000000..434934fe6
--- /dev/null
+++ b/web/src/features/vm/seed-settings.ts
@@ -0,0 +1,159 @@
+import type { VmKernelSnapshot, VmSeedSettings } from '@/types/panel-vm'
+import {
+  telemetryEnabled,
+  telemetrySeedFlags,
+  telemetryView,
+  type TelemetrySeedFlags,
+} from '@/features/vm/telemetry-policy'
+import { telemetryStatusLabel } from '@/features/vm/telemetry-status'
+
+export const DEFAULT_CLAUDE_SETTING =
+  'CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1'
+
+export const REJECT_FLAGS = [
+  ['reject_client_settings', '拒客户端 settings'],
+  ['reject_client_metadata_identity', '拒客户端身份'],
+] as const
+
+const TOP_KEYS = ['theme', 'autoUpdates', 'grove_enabled'] as const
+
+export type SettingRow = {
+  key: string
+  value: string
+  /** True when this env key is also named in the editable claude.setting text. */
+  inClaudeSetting: boolean
+}
+
+export type SeedDraft = TelemetrySeedFlags & {
+  claude_setting: string
+  reject_client_settings: boolean
+  reject_client_metadata_identity: boolean
+}
+
+type ObservedTelemetry = NonNullable<VmKernelSnapshot['telemetry']>
+
+function asRecord(value: unknown): Record<string, unknown> | null {
+  if (!value || typeof value !== 'object' || Array.isArray(value)) return null
+  return value as Record<string, unknown>
+}
+
+function settingText(value: unknown, fallback = ''): string {
+  return typeof value === 'string' ? value.replace(/\r\n?/g, '\n') : fallback
+}
+
+/** Keys named by `KEY=value` lines. Comments and blanks do not count. */
+export function claudeSettingKeys(text: string): Set<string> {
+  const keys = new Set<string>()
+  for (const line of text.split('\n')) {
+    const trimmed = line.trim()
+    if (!trimmed || trimmed.startsWith('#')) continue
+    const eq = trimmed.indexOf('=')
+    const key = (eq === -1 ? trimmed : trimmed.slice(0, eq)).trim()
+    if (/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) keys.add(key)
+  }
+  return keys
+}
+
+/**
+ * Rows from the slot file `settings.json`. Missing file yields no rows —
+ * the policy default string is not a substitute for the file.
+ */
+export function settingsRows(
+  settings: Record<string, unknown> | null | undefined,
+  claudeSetting: string
+): SettingRow[] {
+  const root = asRecord(settings)
+  if (!root) return []
+  const env = asRecord(root.env) || {}
+  const named = claudeSettingKeys(claudeSetting)
+  const keys = Object.keys(env)
+  const rows: SettingRow[] = keys.map((key) => ({
+    key,
+    value: env[key] == null ? '' : String(env[key]),
+    inClaudeSetting: named.has(key),
+  }))
+  for (const key of TOP_KEYS) {
+    if (!(key in root)) continue
+    rows.push({
+      key,
+      value: root[key] == null ? '' : String(root[key]),
+      inClaudeSetting: false,
+    })
+  }
+  return rows
+}
+
+export function seedDraftOf(
+  seed: VmSeedSettings | null | undefined
+): SeedDraft {
+  const policy = asRecord(seed?.seed_policy) || {}
+  const enabled = telemetryEnabled(policy)
+  // null/undefined: the file was not read, so the policy text is the only copy.
+  // An empty string is a real file and stays empty.
+  const fileSetting = settingText(seed?.claude_setting)
+  const policySetting = settingText(policy.claude_setting, '')
+  return {
+    ...telemetrySeedFlags(enabled),
+    claude_setting:
+      seed?.claude_setting == null
+        ? policySetting || DEFAULT_CLAUDE_SETTING
+        : fileSetting,
+    reject_client_settings:
+      'reject_client_settings' in policy
+        ? policy.reject_client_settings !== false
+        : true,
+    reject_client_metadata_identity:
+      'reject_client_metadata_identity' in policy
+        ? policy.reject_client_metadata_identity !== false
+        : true,
+  }
+}
+
+export function sameDraft(a: SeedDraft, b: SeedDraft): boolean {
+  return (
+    telemetryEnabled(a) === telemetryEnabled(b) &&
+    a.claude_setting === b.claude_setting &&
+    a.reject_client_settings === b.reject_client_settings &&
+    a.reject_client_metadata_identity === b.reject_client_metadata_identity
+  )
+}
+
+/** Body for PUT /seed-settings. Mirrors follow the telemetry bit. */
+export function seedSaveBody(
+  draft: SeedDraft
+): Record<string, boolean | string> {
+  return {
+    ...telemetrySeedFlags(telemetryEnabled(draft)),
+    claude_setting: draft.claude_setting.replace(/\n+$/g, ''),
+    reject_client_settings: draft.reject_client_settings,
+    reject_client_metadata_identity: draft.reject_client_metadata_identity,
+  }
+}
+
+export type TelemetryLive = {
+  on: boolean | null
+  running: boolean | null
+  label: string
+  tone: 'on' | 'off' | 'unknown'
+}
+
+/**
+ * Live lamp. `running` is the process probe and is never rewritten into
+ * on/off. Configured on/off comes from the seed bit when a policy exists.
+ */
+export function telemetryLive(
+  seed: VmSeedSettings | null | undefined,
+  observed: ObservedTelemetry | null | undefined
+): TelemetryLive {
+  const policy = asRecord(seed?.seed_policy)
+  const view = telemetryView(policy, observed)
+  const enabled = view?.enabled
+  const running = observed?.running
+  const on = enabled === true ? true : enabled === false ? false : null
+  return {
+    on,
+    running: typeof running === 'boolean' ? running : null,
+    label: telemetryStatusLabel(view),
+    tone: on === true ? 'on' : on === false ? 'off' : 'unknown',
+  }
+}

From 85db55990d07e80bc2edeb70f8510c17c1cd2c0f Mon Sep 17 00:00:00 2001
From: dofastted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 20:40:32 +0800
Subject: [PATCH 11/19] =?UTF-8?q?fix(web):=20=E7=A9=BA=E7=9A=84=20claude.s?=
 =?UTF-8?q?etting=20=E4=B8=8D=E5=86=8D=E6=98=BE=E7=A4=BA=E6=88=90=E9=BB=98?=
 =?UTF-8?q?=E8=AE=A4=E9=85=8D=E7=BD=AE?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

编辑框只显示当前槽文件的原文。文件缺失或为空都保持空白，不再回退到策略文本或默认串。
---
 web/src/features/vm/seed-policy-card.tsx  |  5 +----
 web/src/features/vm/seed-settings.test.ts | 17 +++++++++++------
 web/src/features/vm/seed-settings.ts      | 12 +-----------
 3 files changed, 13 insertions(+), 21 deletions(-)

diff --git a/web/src/features/vm/seed-policy-card.tsx b/web/src/features/vm/seed-policy-card.tsx
index 77715cd1a..561e01544 100644
--- a/web/src/features/vm/seed-policy-card.tsx
+++ b/web/src/features/vm/seed-policy-card.tsx
@@ -6,7 +6,6 @@ import { Label } from '@/components/ui/label'
 import { Switch } from '@/components/ui/switch'
 import { Textarea } from '@/components/ui/textarea'
 import {
-  DEFAULT_CLAUDE_SETTING,
   REJECT_FLAGS,
   seedDraftOf,
   seedSaveBody,
@@ -17,8 +16,6 @@ import {
 } from '@/features/vm/seed-settings'
 import { telemetryEnabled } from '@/features/vm/telemetry-policy'
 
-export { DEFAULT_CLAUDE_SETTING }
-
 type ObservedTelemetry = NonNullable<VmKernelSnapshot['telemetry']>
 
 function Lamp({ tone }: { tone: 'on' | 'off' | 'unknown' }) {
@@ -235,7 +232,7 @@ export function SeedPolicyCard({
             onChange={(event) => patch({ claude_setting: event.target.value })}
             className='min-h-28 font-mono text-xs'
             spellCheck={false}
-            placeholder={DEFAULT_CLAUDE_SETTING}
+            placeholder='每行 KEY=value'
           />
           <p className='text-xs text-muted-foreground'>
             {syncTelemetry
diff --git a/web/src/features/vm/seed-settings.test.ts b/web/src/features/vm/seed-settings.test.ts
index 4897c174e..535f7674f 100644
--- a/web/src/features/vm/seed-settings.test.ts
+++ b/web/src/features/vm/seed-settings.test.ts
@@ -82,12 +82,17 @@ describe('seed draft', () => {
     expect(draft.reject_client_settings).toBe(true)
   })
 
-  it('keeps an empty claude.setting file empty', () => {
-    const draft = seedDraftOf({
-      seed_policy: { claude_setting: 'FROM_POLICY=1' },
-      claude_setting: '',
-    })
-    expect(draft.claude_setting).toBe('')
+  it('keeps a missing or empty claude.setting empty', () => {
+    expect(
+      seedDraftOf({
+        seed_policy: { claude_setting: 'FROM_POLICY=1' },
+        claude_setting: '',
+      }).claude_setting
+    ).toBe('')
+    expect(
+      seedDraftOf({ seed_policy: { claude_setting: 'FROM_POLICY=1' } })
+        .claude_setting
+    ).toBe('')
   })
 })
 
diff --git a/web/src/features/vm/seed-settings.ts b/web/src/features/vm/seed-settings.ts
index 434934fe6..e16b290ef 100644
--- a/web/src/features/vm/seed-settings.ts
+++ b/web/src/features/vm/seed-settings.ts
@@ -7,9 +7,6 @@ import {
 } from '@/features/vm/telemetry-policy'
 import { telemetryStatusLabel } from '@/features/vm/telemetry-status'
 
-export const DEFAULT_CLAUDE_SETTING =
-  'CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1'
-
 export const REJECT_FLAGS = [
   ['reject_client_settings', '拒客户端 settings'],
   ['reject_client_metadata_identity', '拒客户端身份'],
@@ -88,16 +85,9 @@ export function seedDraftOf(
 ): SeedDraft {
   const policy = asRecord(seed?.seed_policy) || {}
   const enabled = telemetryEnabled(policy)
-  // null/undefined: the file was not read, so the policy text is the only copy.
-  // An empty string is a real file and stays empty.
-  const fileSetting = settingText(seed?.claude_setting)
-  const policySetting = settingText(policy.claude_setting, '')
   return {
     ...telemetrySeedFlags(enabled),
-    claude_setting:
-      seed?.claude_setting == null
-        ? policySetting || DEFAULT_CLAUDE_SETTING
-        : fileSetting,
+    claude_setting: settingText(seed?.claude_setting),
     reject_client_settings:
       'reject_client_settings' in policy
         ? policy.reject_client_settings !== false

From 2c62e8e0534e88042238a0f38ccd2845690baac9 Mon Sep 17 00:00:00 2001
From: dofastted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 20:43:19 +0800
Subject: [PATCH 12/19] =?UTF-8?q?fix(panel):=20=E7=BC=BA=E5=A4=B1=E7=9A=84?=
 =?UTF-8?q?=20claude.setting=20=E8=BF=94=E5=9B=9E=20null?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

GET /seed-settings 不再用策略默认串填补不存在的文件。空文件仍返回空串，策略字段保持独立。
---
 src/lib/admin/panel-routes.mjs            |  2 +-
 test/unit/panel-vm-seed-settings.test.mjs | 75 +++++++++++++++++++++++
 2 files changed, 76 insertions(+), 1 deletion(-)
 create mode 100644 test/unit/panel-vm-seed-settings.test.mjs

diff --git a/src/lib/admin/panel-routes.mjs b/src/lib/admin/panel-routes.mjs
index 80b67bd18..e2fb1027f 100644
--- a/src/lib/admin/panel-routes.mjs
+++ b/src/lib/admin/panel-routes.mjs
@@ -3535,7 +3535,7 @@ export function createPanelHandler(ctx) {
             .replace(/\r\n?/g, '\n')
             .replace(/\n+$/g, '')
         } catch {
-          claude_setting = defaultSeedPolicy(vm.seed_policy || {}).claude_setting
+          // Missing file stays null. The policy default is not this slot's file.
         }
         try {
           kin_seed = JSON.parse(fs.readFileSync(path.join(homeDir, '.claude', 'kin-seed.json'), 'utf8'))
diff --git a/test/unit/panel-vm-seed-settings.test.mjs b/test/unit/panel-vm-seed-settings.test.mjs
new file mode 100644
index 000000000..5926df0bb
--- /dev/null
+++ b/test/unit/panel-vm-seed-settings.test.mjs
@@ -0,0 +1,75 @@
+import test from 'node:test'
+import assert from 'node:assert/strict'
+import fs from 'node:fs'
+import os from 'node:os'
+import path from 'node:path'
+import { createPanelHandler } from '../../src/lib/admin/panel-routes.mjs'
+import { DEFAULT_CLAUDE_SETTING } from '../../src/lib/protocol/seed-policy.mjs'
+
+function seed(root, id) {
+  const dir = path.join(root, 'vms')
+  fs.mkdirSync(dir, { recursive: true })
+  fs.writeFileSync(
+    path.join(dir, `${id}.json`),
+    JSON.stringify({
+      id,
+      name: id,
+      status: 'stopped',
+      seed_policy: { claude_setting: 'FROM_POLICY=1' },
+    }),
+  )
+}
+
+function handler(project) {
+  const response = {}
+  const handlePanel = createPanelHandler({
+    cfg: { paths: { project }, vm: { id: null } },
+    requireAuth(req) {
+      req.apiKeyKind = 'master'
+      req.panelRole = 'admin'
+      return true
+    },
+    json(_res, status, payload) {
+      response.status = status
+      response.body = payload
+      return true
+    },
+    readBody: async () => ({}),
+    proxyPool: { unbindVm() {} },
+  })
+  return { handlePanel, response }
+}
+
+test('GET seed-settings keeps a missing claude.setting null', async () => {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'kin-seed-get-'))
+  try {
+    seed(root, 'vm-01')
+    const { handlePanel, response } = handler(root)
+    await handlePanel({ method: 'GET' }, {}, new URL('http://localhost/api/panel/vms/vm-01/seed-settings'))
+    assert.equal(response.status, 200, JSON.stringify(response.body).slice(0, 400))
+    assert.equal(response.body.data.claude_setting, null)
+    assert.equal(response.body.data.settings_json, null)
+    assert.equal(response.body.data.seed_policy.claude_setting, 'FROM_POLICY=1')
+  } finally {
+    fs.rmSync(root, { recursive: true, force: true })
+  }
+})
+
+test('GET seed-settings returns an empty claude.setting file as empty', async () => {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'kin-seed-empty-'))
+  try {
+    seed(root, 'vm-01')
+    const dir = path.join(root, 'vms', 'vm-01', 'cli-home', '.claude')
+    fs.mkdirSync(dir, { recursive: true })
+    fs.writeFileSync(path.join(dir, 'claude.setting'), '\n')
+    fs.writeFileSync(path.join(dir, 'settings.json'), JSON.stringify({ env: { TZ: 'UTC' } }))
+    const { handlePanel, response } = handler(root)
+    await handlePanel({ method: 'GET' }, {}, new URL('http://localhost/api/panel/vms/vm-01/seed-settings'))
+    assert.equal(response.status, 200, JSON.stringify(response.body).slice(0, 400))
+    assert.equal(response.body.data.claude_setting, '')
+    assert.equal(response.body.data.seed_policy.claude_setting, '')
+    assert.equal(response.body.data.settings_json.env.TZ, 'UTC')
+  } finally {
+    fs.rmSync(root, { recursive: true, force: true })
+  }
+})

From 7776c557b5317a7fbe729fd6a9d81d8de9018ed0 Mon Sep 17 00:00:00 2001
From: dofastted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 21:06:33 +0800
Subject: [PATCH 13/19] fix(protocol): pin message thread betas across turns

---
 src/lib/protocol/claude-code-betas.mjs |   9 ++
 src/lib/protocol/handle-protocol.mjs   |   1 +
 src/lib/protocol/thread-betas.mjs      |  38 +++++++
 src/lib/transport/go-worker-client.mjs |  86 ++++++++-------
 test/unit/go-worker-client.test.mjs    | 141 +++++++++++++++++++++++++
 test/unit/mid-convo-effort.test.mjs    |  31 ++++++
 test/unit/thread-betas.test.mjs        |  63 +++++++++++
 7 files changed, 331 insertions(+), 38 deletions(-)
 create mode 100644 src/lib/protocol/thread-betas.mjs
 create mode 100644 test/unit/thread-betas.test.mjs

diff --git a/src/lib/protocol/claude-code-betas.mjs b/src/lib/protocol/claude-code-betas.mjs
index aec4b1e39..477f90237 100644
--- a/src/lib/protocol/claude-code-betas.mjs
+++ b/src/lib/protocol/claude-code-betas.mjs
@@ -49,6 +49,14 @@ const FAST_MODE_MODELS = {
   'claude-opus-5': true,
   'claude-opus-5-5': true,
 }
+const MID_OUTPUT_CONFIG_MODELS = {
+  'claude-haiku-5-5': true,
+  'claude-sonnet-5-5': true,
+  'claude-opus-5': true,
+  'claude-opus-5-5': true,
+  'claude-fable-5-1': true,
+  'claude-mythos-5-1': true,
+}
 
 function hasHourCache(node) {
   if (Array.isArray(node)) return node.some(hasHourCache)
@@ -69,6 +77,7 @@ export function withRequestProtocolBetas(tokens = [], body = {}) {
     .replace(/-\d{8}$/, '')
   if (Object.hasOwn(PER_TURN_MODELS, model)) add('per-turn-control-2026-07-01')
   if (Object.hasOwn(MID_TOOL_CHANGE_MODELS, model)) add(BETA_MID_CONVERSATION_TOOL_CHANGES)
+  if (body.thread != null && Object.hasOwn(MID_OUTPUT_CONFIG_MODELS, model)) add(BETA_MID_CONVERSATION_OUTPUT_CONFIG)
   if (body.output_config?.effort != null) add(BETA_EFFORT)
   if (body.thinking?.display === 'updates') add(BETA_THINKING_DISPLAY_UPDATES)
   if (Array.isArray(body.safeguards) && body.safeguards.some((item) => item?.type === 'dangerous_tool_use'))
diff --git a/src/lib/protocol/handle-protocol.mjs b/src/lib/protocol/handle-protocol.mjs
index 8a3689db7..8222a9bb8 100644
--- a/src/lib/protocol/handle-protocol.mjs
+++ b/src/lib/protocol/handle-protocol.mjs
@@ -1537,6 +1537,7 @@ export function createHandleProtocol(deps) {
     logBag.vm_id = result?.vmId || null
     logBag.account_id = result?.accountId || null
     logBag.final_account_id = result?.accountId || null
+    if (result?.threadBetas) logBag.hop_meta = { ...logBag.hop_meta, thread_betas: result.threadBetas }
     // Zero executions is a real 0, not unknown; the VM is the last one that ran.
     logBag.attempt_count = result?.attemptCount ?? 0
     logBag.final_state = result?.finalState || result?.terminalState || null
diff --git a/src/lib/protocol/thread-betas.mjs b/src/lib/protocol/thread-betas.mjs
new file mode 100644
index 000000000..d3f8b4112
--- /dev/null
+++ b/src/lib/protocol/thread-betas.mjs
@@ -0,0 +1,38 @@
+const TTL_MS = 24 * 60 * 60 * 1000
+const MAX_ENTRIES = 10_000
+
+const pins = new Map()
+
+function sweep(now) {
+  for (const [id, pin] of pins) {
+    if (pins.size <= MAX_ENTRIES && pin.expiresAt > now) break
+    pins.delete(id)
+  }
+}
+
+export function pinThreadBetas(body, betas, { now = Date.now() } = {}) {
+  const thread = body?.thread
+  if (!thread || typeof thread !== 'object') return { betas, turn: null }
+  const turn = { type: String(thread.type || ''), model: String(body.model || ''), betas }
+  if (turn.type !== 'continue') return { betas, turn }
+  const from = String(thread.previous_message_id || '')
+  const pin = from ? pins.get(from) : null
+  if (!pin || pin.expiresAt <= now) return { betas, turn: { ...turn, pin: 'miss', from } }
+  if (pin.model !== turn.model) return { betas, turn: { ...turn, pin: 'model_changed', from } }
+  const added = pin.betas.filter((token) => !betas.includes(token))
+  const extra = betas.filter((token) => !pin.betas.includes(token))
+  const pinned = [...pin.betas, ...extra]
+  return { betas: pinned, turn: { ...turn, betas: pinned, pin: 'pinned', from, added, extra } }
+}
+
+export function rememberThreadTurn(messageId, turn, { now = Date.now() } = {}) {
+  const id = String(messageId || '')
+  if (!id || !turn) return
+  pins.delete(id)
+  pins.set(id, { betas: [...turn.betas], model: turn.model, expiresAt: now + TTL_MS })
+  sweep(now)
+}
+
+export function resetThreadBetasForTest() {
+  pins.clear()
+}
diff --git a/src/lib/transport/go-worker-client.mjs b/src/lib/transport/go-worker-client.mjs
index 5e90a7ea0..e80937ab6 100644
--- a/src/lib/transport/go-worker-client.mjs
+++ b/src/lib/transport/go-worker-client.mjs
@@ -5,6 +5,7 @@ import path from 'node:path'
 import { prepareOutboundHeaders } from '../protocol/outbound-attempt.mjs'
 import { sanitizeAnthropicBodyForBetaTokens } from '../protocol/anthropic-policy.mjs'
 import { withRequestProtocolBetas } from '../protocol/claude-code-betas.mjs'
+import { pinThreadBetas, rememberThreadTurn } from '../protocol/thread-betas.mjs'
 import { applyThinkingDisplay, thinkingDisplayMode } from '../protocol/thinking.mjs'
 import { sealClaudeCodeCch } from '../identity/cch.mjs'
 import { credentialModeFromOauth } from '../oauth/credential-mode.mjs'
@@ -448,7 +449,11 @@ export function finalizeWorkerPayload({
   })
   const displayed =
     requestContext?.purpose === 'auto_mode_classifier' ? body : applyThinkingDisplay(body, thinkingDisplayMode(routing))
-  const betas = withRequestProtocolBetas(String(headers?.['anthropic-beta'] || '').split(','), displayed)
+  const thread = pinThreadBetas(
+    displayed,
+    withRequestProtocolBetas(String(headers?.['anthropic-beta'] || '').split(','), displayed),
+  )
+  const betas = thread.betas
   headers['anthropic-beta'] = betas.join(',')
   // Envelope headers are discarded; the existing MessageRequest.betas channel
   // carries request gates to the native CLI, which builds the actual HTTP wire.
@@ -458,6 +463,7 @@ export function finalizeWorkerPayload({
   return {
     headers,
     body: sealClaudeCodeCch(gated, { enabled: routing?.compatibility?.cch_enabled !== false, seal: !cliHop }),
+    thread: thread.turn,
   }
 }
 
@@ -495,7 +501,7 @@ function workerEnvelope({
     cache_ttl: cacheTtl == null ? null : String(cacheTtl),
   }
   dumpSessionEnvelope(envelope)
-  return envelope
+  return { envelope, thread: finalized.thread }
 }
 
 function mockScenario(exec) {
@@ -548,34 +554,35 @@ export async function callGoWorker({
   const requestId = randomUUID()
   const stopCancel = cancelOnAbort(exec, signal, requestId)
   try {
+    const prepared = envelope
+      ? { envelope, thread: null }
+      : workerEnvelope({
+          body,
+          reqHeaders,
+          exec,
+          identity,
+          routing,
+          stream: false,
+          want1m,
+          cacheTtl,
+          preserveCacheBreakpoints,
+          cliHop,
+          requestContext,
+        })
     const response = await workerRequest(exec, {
       method: 'POST',
       requestPath,
-      body: {
-        ...(envelope ||
-          workerEnvelope({
-            body,
-            reqHeaders,
-            exec,
-            identity,
-            routing,
-            stream: false,
-            want1m,
-            cacheTtl,
-            preserveCacheBreakpoints,
-            cliHop,
-            requestContext,
-          })),
-        request_id: requestId,
-      },
+      body: { ...prepared.envelope, request_id: requestId },
       signal,
       timeoutMs,
     })
     const data = await readAll(response)
     const parsed = parseJson(data)
     const headers = mergeRateLimitHeaders(publicHeaders(response.headers))
+    const ok = response.statusCode >= 200 && response.statusCode < 300 && parsed?.type !== 'error'
+    if (ok) rememberThreadTurn(parsed?.id, prepared.thread)
     return restoreKernelErrorStatus({
-      ok: response.statusCode >= 200 && response.statusCode < 300 && parsed?.type !== 'error',
+      ok,
       status: response.statusCode || 0,
       via: 'go-worker',
       body: parsed,
@@ -585,6 +592,7 @@ export async function callGoWorker({
       stopReason: parsed?.stop_reason || null,
       terminalState: headers['x-terminal-state'] || null,
       transportError: false,
+      threadBetas: prepared.thread,
     })
   } catch (error) {
     return {
@@ -715,27 +723,26 @@ export async function streamGoWorker({
   const requestId = randomUUID()
   const stopCancel = cancelOnAbort(exec, signal, requestId)
   try {
+    const prepared = envelope
+      ? { envelope, thread: null }
+      : workerEnvelope({
+          body,
+          reqHeaders,
+          exec,
+          identity,
+          routing,
+          stream: true,
+          deliveryMode,
+          want1m,
+          cacheTtl,
+          preserveCacheBreakpoints,
+          cliHop,
+          requestContext,
+        })
     const response = await workerRequest(exec, {
       method: 'POST',
       requestPath,
-      body: {
-        ...(envelope ||
-          workerEnvelope({
-            body,
-            reqHeaders,
-            exec,
-            identity,
-            routing,
-            stream: true,
-            deliveryMode,
-            want1m,
-            cacheTtl,
-            preserveCacheBreakpoints,
-            cliHop,
-            requestContext,
-          })),
-        request_id: requestId,
-      },
+      body: { ...prepared.envelope, request_id: requestId },
       signal,
       timeoutMs,
       timeoutMode: 'first-byte',
@@ -753,6 +760,7 @@ export async function streamGoWorker({
         committed: false,
         terminalState: headers['x-terminal-state'] || 'error',
         transportError: false,
+        threadBetas: prepared.thread,
       })
     }
     let buffer = ''
@@ -797,6 +805,7 @@ export async function streamGoWorker({
       }
       if (event.type === 'error') lastError = event
       if (event.type === 'message_stop') sawMessageStop = true
+      if (event.type === 'message_start') rememberThreadTurn(event.message?.id, prepared.thread)
       const evUsage = usageFromSseEvent(event)
       if (evUsage) sseUsage = mergeUsage(sseUsage, evUsage)
       if (event.message?.model) sseModel = event.message.model
@@ -891,6 +900,7 @@ export async function streamGoWorker({
         committed,
         terminalState,
         transportError: false,
+        threadBetas: prepared.thread,
       })
     } finally {
       if (idleTimer) clearInterval(idleTimer)
diff --git a/test/unit/go-worker-client.test.mjs b/test/unit/go-worker-client.test.mjs
index 388d601a8..7a040a84b 100644
--- a/test/unit/go-worker-client.test.mjs
+++ b/test/unit/go-worker-client.test.mjs
@@ -17,6 +17,7 @@ import {
 import { prepareCliHopBody } from '../../src/lib/protocol/outbound-attempt.mjs'
 import { callerAutoCompactWindow, defaultSeedPolicy, sanitizeInboundBody } from '../../src/lib/protocol/seed-policy.mjs'
 import { extractOpenaiUsage } from '../../src/lib/protocol/openai-usage.mjs'
+import { rememberThreadTurn, resetThreadBetasForTest } from '../../src/lib/protocol/thread-betas.mjs'
 import { callRustKernel, rustKernelHealth } from '../../src/lib/transport/rust-kernel-client.mjs'
 import { forwardApi, readApiJson } from '../../src/lib/transport/api-kernel-client.mjs'
 
@@ -166,6 +167,33 @@ test('cli-hop envelope keeps role=system turns that the VM betas do not declare'
   assert.deepEqual(out.body.system, body.system)
 })
 
+test('cli-hop continue reuses the beta list sent by its create turn', () => {
+  resetThreadBetasForTest()
+  const exec = { homeDir: '', vm: { claude: { mode: 'setup-token', scope: 'user:inference' } } }
+  const send = (body) => finalizeWorkerPayload({ body, reqHeaders: {}, exec, identity: null, cliHop: true })
+  const created = send({
+    model: 'claude-opus-5-5',
+    thread: { type: 'create' },
+    messages: [
+      { role: 'user', content: 'go' },
+      { role: 'system', content: 'reminder' },
+    ],
+  })
+  assert.ok(created.body.betas.includes('mid-conversation-system-2026-04-07'))
+  assert.equal(created.thread.type, 'create')
+  rememberThreadTurn('msg_create', created.thread)
+  const continued = send({
+    model: 'claude-opus-5-5',
+    thread: { type: 'continue', previous_message_id: 'msg_create' },
+    messages: [{ role: 'user', content: 'next' }],
+  })
+  assert.deepEqual(continued.body.betas, created.body.betas)
+  assert.equal(continued.headers['anthropic-beta'], created.headers['anthropic-beta'])
+  assert.equal(continued.thread.pin, 'pinned')
+  assert.deepEqual(continued.thread.added, ['mid-conversation-system-2026-04-07'])
+  assert.equal(send({ model: 'claude-opus-5-5', messages: [{ role: 'user', content: 'hi' }] }).thread, null)
+})
+
 test('cli-hop keeps the caller compact window outside settings', () => {
   const inbound = {
     model: 'claude-opus-5-5',
@@ -392,6 +420,70 @@ unixTest('callGoWorker marks null TTL as client-owned cache breakpoints', async
   }
 })
 
+unixTest('callGoWorker records thread betas only after a successful JSON response', async () => {
+  resetThreadBetasForTest()
+  const sent = []
+  const fx = await fixture(async (req, res) => {
+    const chunks = []
+    for await (const chunk of req) chunks.push(chunk)
+    const payload = JSON.parse(Buffer.concat(chunks).toString('utf8'))
+    sent.push(payload.body.betas)
+    res.setHeader('content-type', 'application/json')
+    if (sent.length === 1) {
+      res.statusCode = 400
+      res.end(JSON.stringify({ type: 'error', id: 'msg_failed', error: { message: 'rejected' } }))
+      return
+    }
+    res.end(
+      JSON.stringify({
+        type: 'message',
+        id: `msg_turn${sent.length}`,
+        role: 'assistant',
+        content: [{ type: 'text', text: 'ok' }],
+      }),
+    )
+  })
+  try {
+    const exec = { ...fx.exec, vm: { ...fx.exec.vm, claude: { mode: 'setup-token', scope: 'user:inference' } } }
+    const create = {
+      model: 'claude-opus-5-5',
+      thread: { type: 'create' },
+      messages: [
+        { role: 'user', content: 'go' },
+        { role: 'system', content: 'reminder' },
+      ],
+    }
+    const failed = await callGoWorker({ exec, cliHop: true, body: create })
+    assert.equal(failed.ok, false)
+    const afterFailure = finalizeWorkerPayload({
+      body: {
+        model: 'claude-opus-5-5',
+        thread: { type: 'continue', previous_message_id: 'msg_failed' },
+        messages: [{ role: 'user', content: 'next' }],
+      },
+      exec,
+      cliHop: true,
+    })
+    assert.equal(afterFailure.thread.pin, 'miss')
+    const created = await callGoWorker({ exec, cliHop: true, body: create })
+    assert.equal(created.ok, true)
+    const resumed = await callGoWorker({
+      exec,
+      cliHop: true,
+      body: {
+        model: 'claude-opus-5-5',
+        thread: { type: 'continue', previous_message_id: 'msg_turn2' },
+        messages: [{ role: 'user', content: 'next' }],
+      },
+    })
+    assert.equal(resumed.ok, true)
+    assert.equal(resumed.threadBetas.pin, 'pinned')
+    assert.deepEqual(sent[2], sent[1])
+  } finally {
+    await fx.close()
+  }
+})
+
 unixTest('streamGoWorker accepts message_stop before delayed EOF', async () => {
   const fx = await fixture((req, res) => {
     res.setHeader('content-type', 'text/event-stream')
@@ -417,6 +509,55 @@ unixTest('streamGoWorker accepts message_stop before delayed EOF', async () => {
   }
 })
 
+unixTest('streamGoWorker pins continue betas using the streamed response message id', async () => {
+  resetThreadBetasForTest()
+  const sent = []
+  const fx = await fixture(async (req, res) => {
+    const chunks = []
+    for await (const chunk of req) chunks.push(chunk)
+    sent.push(JSON.parse(Buffer.concat(chunks).toString('utf8')).body.betas)
+    res.setHeader('content-type', 'text/event-stream')
+    writeData(res, {
+      type: 'message_start',
+      message: {
+        type: 'message',
+        id: `msg_turn${sent.length}`,
+        role: 'assistant',
+        model: 'claude-opus-5-5',
+        content: [],
+      },
+    })
+    writeData(res, { type: 'content_block_start', index: 0, content_block: { type: 'text', text: 'ok' } })
+    writeData(res, { type: 'message_delta', delta: { stop_reason: 'end_turn' }, usage: { output_tokens: 1 } })
+    writeData(res, { type: 'message_stop' })
+    res.end()
+  })
+  try {
+    const exec = { ...fx.exec, vm: { ...fx.exec.vm, claude: { mode: 'setup-token', scope: 'user:inference' } } }
+    const hop = (thread, messages) =>
+      streamGoWorker({
+        exec,
+        cliHop: true,
+        body: { model: 'claude-opus-5-5', stream: true, thread, messages },
+      })
+    const created = await hop({ type: 'create' }, [
+      { role: 'user', content: 'go' },
+      { role: 'system', content: 'reminder' },
+    ])
+    assert.equal(created.ok, true)
+    assert.equal(created.threadBetas.type, 'create')
+    const resumed = await hop({ type: 'continue', previous_message_id: 'msg_turn1' }, [
+      { role: 'user', content: 'next' },
+    ])
+    assert.equal(resumed.ok, true)
+    assert.equal(resumed.threadBetas.pin, 'pinned')
+    assert.deepEqual(resumed.threadBetas.added, ['mid-conversation-system-2026-04-07'])
+    assert.deepEqual(sent[1], sent[0])
+  } finally {
+    await fx.close()
+  }
+})
+
 unixTest('streamGoWorker names the aborted hop to the kernel cancel route', async () => {
   let hopId = null
   let cancelled = null
diff --git a/test/unit/mid-convo-effort.test.mjs b/test/unit/mid-convo-effort.test.mjs
index 0f7d508d2..9920a7d49 100644
--- a/test/unit/mid-convo-effort.test.mjs
+++ b/test/unit/mid-convo-effort.test.mjs
@@ -271,6 +271,37 @@ test('withRequestProtocolBetas derives mid-conversation-output-config from messa
   assert.deepEqual(withRequestProtocolBetas(['caller-beta'], { model: 'claude-sonnet-4-6' }), ['caller-beta'])
 })
 
+test('thread create and continue derive the same output-config beta without replayed effort controls', () => {
+  const create = {
+    model: 'claude-opus-5-5',
+    output_config: { effort: 'high' },
+    thread: { type: 'create' },
+    messages: [
+      { role: 'user', content: 'go' },
+      { role: 'system', content: [], output_config: { effort: 'max' } },
+    ],
+  }
+  const resume = {
+    model: 'claude-opus-5-5',
+    output_config: { effort: 'high' },
+    thread: { type: 'continue', previous_message_id: 'msg_create' },
+    messages: [{ role: 'user', content: 'next' }],
+  }
+  const created = withRequestProtocolBetas(['caller-beta'], create)
+  assert.ok(created.includes(BETA_MID_CONVERSATION_OUTPUT_CONFIG))
+  const continued = withRequestProtocolBetas(['caller-beta'], resume)
+  assert.ok(continued.includes(BETA_MID_CONVERSATION_OUTPUT_CONFIG))
+  assert.ok(!continued.includes(BETA_MID_CONVERSATION_SYSTEM))
+  assert.ok(created.includes(BETA_MID_CONVERSATION_SYSTEM))
+  const { thread: _thread, ...plain } = resume
+  assert.ok(!withRequestProtocolBetas(['caller-beta'], plain).includes(BETA_MID_CONVERSATION_OUTPUT_CONFIG))
+  assert.ok(
+    !withRequestProtocolBetas([], { ...resume, model: 'claude-sonnet-5' }).includes(
+      BETA_MID_CONVERSATION_OUTPUT_CONFIG,
+    ),
+  )
+})
+
 test('thinking strip keeps empty system effort controls and a valid short signature on Opus 5.5', () => {
   const body = stripInvalidThinkingBlocks({
     model: 'claude-opus-5-5',
diff --git a/test/unit/thread-betas.test.mjs b/test/unit/thread-betas.test.mjs
new file mode 100644
index 000000000..908d4b164
--- /dev/null
+++ b/test/unit/thread-betas.test.mjs
@@ -0,0 +1,63 @@
+import test from 'node:test'
+import assert from 'node:assert/strict'
+import { pinThreadBetas, rememberThreadTurn, resetThreadBetasForTest } from '../../src/lib/protocol/thread-betas.mjs'
+
+const MODEL = 'claude-opus-5-5'
+const OUTPUT_CONFIG = 'mid-conversation-output-config-2026-07-01'
+const CREATED = ['oauth-2025-04-20', 'message-threads-2026-08-12', OUTPUT_CONFIG]
+const create = { model: MODEL, thread: { type: 'create' }, messages: [] }
+
+function resume(from, model = MODEL) {
+  return { model, thread: { type: 'continue', previous_message_id: from }, messages: [] }
+}
+
+test('requests outside a thread keep their betas', () => {
+  resetThreadBetasForTest()
+  const betas = ['oauth-2025-04-20']
+  assert.deepEqual(pinThreadBetas({ model: MODEL, messages: [] }, betas), { betas, turn: null })
+})
+
+test('a continue turn carries forward the create turn betas', () => {
+  resetThreadBetasForTest()
+  const created = pinThreadBetas(create, CREATED)
+  rememberThreadTurn('msg_create', created.turn)
+  const computed = CREATED.filter((token) => token !== OUTPUT_CONFIG)
+  const resumed = pinThreadBetas(resume('msg_create'), computed)
+  assert.deepEqual(resumed.betas, CREATED)
+  assert.equal(resumed.turn.pin, 'pinned')
+  assert.deepEqual(resumed.turn.added, [OUTPUT_CONFIG])
+  assert.deepEqual(resumed.turn.extra, [])
+  rememberThreadTurn('msg_turn2', resumed.turn)
+  assert.deepEqual(pinThreadBetas(resume('msg_turn2'), computed).betas, CREATED)
+})
+
+test('newly derived betas remain present on continue turns', () => {
+  resetThreadBetasForTest()
+  rememberThreadTurn('msg_create', pinThreadBetas(create, CREATED).turn)
+  const clearAt = 'mid-conversation-system-clear-at-2026-08-21'
+  const resumed = pinThreadBetas(resume('msg_create'), [...CREATED, clearAt])
+  assert.deepEqual(resumed.betas, [...CREATED, clearAt])
+  assert.deepEqual(resumed.turn.extra, [clearAt])
+})
+
+test('unknown, expired and changed-model turns use their computed betas', () => {
+  resetThreadBetasForTest()
+  const computed = ['oauth-2025-04-20']
+  assert.equal(pinThreadBetas(resume('msg_unknown'), computed).turn.pin, 'miss')
+  rememberThreadTurn('msg_create', pinThreadBetas(create, CREATED).turn, { now: 0 })
+  const expired = pinThreadBetas(resume('msg_create'), computed, { now: 24 * 60 * 60 * 1000 })
+  assert.equal(expired.turn.pin, 'miss')
+  assert.deepEqual(expired.betas, computed)
+  rememberThreadTurn('msg_create', pinThreadBetas(create, CREATED).turn)
+  const switched = pinThreadBetas(resume('msg_create', 'claude-sonnet-5-5'), computed)
+  assert.equal(switched.turn.pin, 'model_changed')
+  assert.deepEqual(switched.betas, computed)
+})
+
+test('pins stay bounded to the newest 10000 message ids', () => {
+  resetThreadBetasForTest()
+  const { turn } = pinThreadBetas(create, CREATED)
+  for (let index = 0; index <= 10_000; index++) rememberThreadTurn(`msg_${index}`, turn)
+  assert.equal(pinThreadBetas(resume('msg_0'), CREATED).turn.pin, 'miss')
+  assert.equal(pinThreadBetas(resume('msg_10000'), CREATED).turn.pin, 'pinned')
+})

From c399c2daf98429e1cf2dcd2fd995625b252e2db1 Mon Sep 17 00:00:00 2001
From: dofastted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 21:12:04 +0800
Subject: [PATCH 14/19] =?UTF-8?q?feat(web):=20=E7=A7=8D=E5=AD=90=E9=85=8D?=
 =?UTF-8?q?=E7=BD=AE=E9=A1=B9=E5=8F=AF=E7=9B=B4=E6=8E=A5=E7=BC=96=E8=BE=91?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

settings.json 的 env 改成输入框，播种时写回。缺少 CLAUDE_CODE_ATTRIBUTION_HEADER 时默认 0。
---
 src/lib/protocol/seed-policy.mjs             |  1 +
 test/unit/seed-policy.test.mjs               |  1 +
 web/src/features/vm/seed-policy-card.test.ts |  1 +
 web/src/features/vm/seed-policy-card.tsx     | 96 ++++++++++++++------
 web/src/features/vm/seed-settings.test.ts    | 14 +++
 web/src/features/vm/seed-settings.ts         | 32 +++++--
 6 files changed, 108 insertions(+), 37 deletions(-)

diff --git a/src/lib/protocol/seed-policy.mjs b/src/lib/protocol/seed-policy.mjs
index d3b82dde5..6b51a34c5 100644
--- a/src/lib/protocol/seed-policy.mjs
+++ b/src/lib/protocol/seed-policy.mjs
@@ -114,6 +114,7 @@ export function buildSlotSettingsEnv(pol = {}, { timezone, locale, extra } = {})
   const out = applyRequiredSeedEnv(env, pol)
   // 2.1.283+ sends x-claude-code-prompt-id only when this is set. Default on.
   out.CLAUDE_CODE_GATEWAY_HINT_HEADERS = '1'
+  if (out.CLAUDE_CODE_ATTRIBUTION_HEADER == null) out.CLAUDE_CODE_ATTRIBUTION_HEADER = '0'
   return out
 }
 
diff --git a/test/unit/seed-policy.test.mjs b/test/unit/seed-policy.test.mjs
index 390110c1d..b7f5ec166 100644
--- a/test/unit/seed-policy.test.mjs
+++ b/test/unit/seed-policy.test.mjs
@@ -69,6 +69,7 @@ test('buildSlotSettingsEnv is TZ/LANG plus contract, leftover extra cannot win',
   assert.equal(env.LC_ALL, 'en_US.UTF-8')
   assert.equal(env.CUSTOM, 'ok')
   assert.equal(env.CLAUDE_CODE_GATEWAY_HINT_HEADERS, '1')
+  assert.equal(env.CLAUDE_CODE_ATTRIBUTION_HEADER, '0')
 })
 
 test('buildSeedSettingsEnv delegates to slot env', () => {
diff --git a/web/src/features/vm/seed-policy-card.test.ts b/web/src/features/vm/seed-policy-card.test.ts
index 69a3333c1..445e96f99 100644
--- a/web/src/features/vm/seed-policy-card.test.ts
+++ b/web/src/features/vm/seed-policy-card.test.ts
@@ -11,6 +11,7 @@ describe('seed save follows the telemetry bit', () => {
       reject_client_settings: true,
       reject_client_metadata_identity: true,
       claude_setting: 'A=1',
+      env: {},
     })
     expect(telemetryEnabled(body)).toBe(true)
     expect(body.disable_nonessential_traffic).toBe(true)
diff --git a/web/src/features/vm/seed-policy-card.tsx b/web/src/features/vm/seed-policy-card.tsx
index 561e01544..c3c294791 100644
--- a/web/src/features/vm/seed-policy-card.tsx
+++ b/web/src/features/vm/seed-policy-card.tsx
@@ -2,6 +2,7 @@ import { useEffect, useState } from 'react'
 import type { VmKernelSnapshot, VmSeedSettings } from '@/types/panel-vm'
 import { cn } from '@/lib/utils'
 import { Button } from '@/components/ui/button'
+import { Input } from '@/components/ui/input'
 import { Label } from '@/components/ui/label'
 import { Switch } from '@/components/ui/switch'
 import { Textarea } from '@/components/ui/textarea'
@@ -40,6 +41,20 @@ function Lamp({ tone }: { tone: 'on' | 'off' | 'unknown' }) {
     </span>
   )
 }
+function TelemetryUploadLog({ lines }: { lines: unknown }) {
+  const rows = Array.isArray(lines)
+    ? lines.filter(
+        (line): line is string => typeof line === 'string' && line !== ''
+      )
+    : []
+  return (
+    <pre className='mt-2 max-h-72 overflow-auto rounded-md bg-muted px-3 py-2 font-mono text-[11px] leading-5 text-foreground'>
+      {rows.length
+        ? rows.join('\n')
+        : '还没有上传记录。遥测开着并完成一次上传后会出现。'}
+    </pre>
+  )
+}
 
 function ToggleRow({
   id,
@@ -90,13 +105,16 @@ export function SeedPolicyCard({
   onSave,
   saving,
   syncTelemetry = false,
+  debug,
+  onDebug,
 }: {
   seed: VmSeedSettings
   telemetry?: ObservedTelemetry | null
-  onSave: (next: Record<string, boolean | string>) => void
+  onSave: (next: Record<string, unknown>) => void
   saving: boolean
-  /** External official_cc.sync_telemetry. True means the next init turns telemetry back on. */
   syncTelemetry?: boolean
+  debug: boolean
+  onDebug: (next: boolean) => void
 }) {
   const saved = seedDraftOf(seed)
   const [draft, setDraft] = useState<SeedDraft>(saved)
@@ -133,34 +151,39 @@ export function SeedPolicyCard({
             文件在，但没有 env 项。
           </p>
         ) : (
-          <div className='overflow-x-auto'>
-            <table className='w-full border-collapse text-left'>
-              <tbody>
-                {rows.map((row) => (
-                  <tr key={row.key} className='border-b last:border-b-0'>
-                    <th
-                      scope='row'
-                      className='px-4 py-2 align-top font-mono text-xs font-medium text-foreground'
-                    >
-                      <span className='inline-flex items-center gap-2'>
-                        {row.inClaudeSetting ? (
-                          <span
-                            className='size-1.5 shrink-0 rounded-full bg-primary'
-                            title='也写在 claude.setting'
-                          />
-                        ) : (
-                          <span className='size-1.5 shrink-0' />
-                        )}
-                        {row.key}
-                      </span>
-                    </th>
-                    <td className='px-4 py-2 text-end font-mono text-xs break-all text-muted-foreground'>
-                      {row.value === '' ? '空' : row.value}
-                    </td>
-                  </tr>
-                ))}
-              </tbody>
-            </table>
+          <div className='divide-y'>
+            {rows
+              .filter((row) => row.key in draft.env)
+              .map((row) => (
+                <label
+                  key={row.key}
+                  className='grid items-center gap-2 px-4 py-2 sm:grid-cols-[minmax(0,1fr)_minmax(8rem,16rem)]'
+                >
+                  <span className='inline-flex min-w-0 items-center gap-2 font-mono text-xs font-medium break-all'>
+                    {row.inClaudeSetting ? (
+                      <span
+                        className='size-1.5 shrink-0 rounded-full bg-primary'
+                        title='也写在 claude.setting'
+                      />
+                    ) : (
+                      <span className='size-1.5 shrink-0' />
+                    )}
+                    {row.key}
+                  </span>
+                  <Input
+                    aria-label={row.key}
+                    value={draft.env[row.key] ?? ''}
+                    disabled={saving}
+                    spellCheck={false}
+                    onChange={(event) =>
+                      patch({
+                        env: { ...draft.env, [row.key]: event.target.value },
+                      })
+                    }
+                    className='h-8 font-mono text-xs'
+                  />
+                </label>
+              ))}
           </div>
         )}
       </section>
@@ -259,6 +282,19 @@ export function SeedPolicyCard({
             重置
           </Button>
         </div>
+        <div className='border-t px-4 py-3'>
+          <ToggleRow
+            id='seed-telemetry-debug'
+            label='调试上传'
+            detail={
+              debug ? '显示这槽实际上传的遥测。' : '默认关闭，不拉上传记录。'
+            }
+            checked={debug}
+            disabled={saving}
+            onCheckedChange={onDebug}
+          />
+          {debug ? <TelemetryUploadLog lines={seed.telemetry_log} /> : null}
+        </div>
       </aside>
     </div>
   )
diff --git a/web/src/features/vm/seed-settings.test.ts b/web/src/features/vm/seed-settings.test.ts
index 535f7674f..d643b00a0 100644
--- a/web/src/features/vm/seed-settings.test.ts
+++ b/web/src/features/vm/seed-settings.test.ts
@@ -37,6 +37,7 @@ describe('current slot settings', () => {
       ['DISABLE_TELEMETRY', '1', false],
       ['DO_NOT_TRACK', '1', false],
       ['CUSTOM_FLAG', 'kept', false],
+      ['CLAUDE_CODE_ATTRIBUTION_HEADER', '0', false],
       ['theme', 'dark', false],
       ['autoUpdates', 'false', false],
     ])
@@ -94,6 +95,19 @@ describe('seed draft', () => {
         .claude_setting
     ).toBe('')
   })
+
+  it('saves edited settings env, including the attribution default', () => {
+    const draft = seedDraftOf({
+      settings_json: { env: { TZ: 'UTC' } },
+      claude_setting: '',
+    })
+    expect(draft.env.CLAUDE_CODE_ATTRIBUTION_HEADER).toBe('0')
+    draft.env.TZ = 'Asia/Shanghai'
+    expect(seedSaveBody(draft).extra_env).toMatchObject({
+      TZ: 'Asia/Shanghai',
+      CLAUDE_CODE_ATTRIBUTION_HEADER: '0',
+    })
+  })
 })
 
 describe('telemetry lamp', () => {
diff --git a/web/src/features/vm/seed-settings.ts b/web/src/features/vm/seed-settings.ts
index e16b290ef..b93b07c0c 100644
--- a/web/src/features/vm/seed-settings.ts
+++ b/web/src/features/vm/seed-settings.ts
@@ -25,6 +25,7 @@ export type SeedDraft = TelemetrySeedFlags & {
   claude_setting: string
   reject_client_settings: boolean
   reject_client_metadata_identity: boolean
+  env: Record<string, string>
 }
 
 type ObservedTelemetry = NonNullable<VmKernelSnapshot['telemetry']>
@@ -51,6 +52,20 @@ export function claudeSettingKeys(text: string): Set<string> {
   return keys
 }
 
+export function settingsEnv(
+  settings: Record<string, unknown> | null | undefined
+): Record<string, string> {
+  const env = asRecord(asRecord(settings)?.env) || {}
+  const out: Record<string, string> = {}
+  for (const [key, value] of Object.entries(env)) {
+    out[key] = value == null ? '' : String(value)
+  }
+  if (!('CLAUDE_CODE_ATTRIBUTION_HEADER' in out)) {
+    out.CLAUDE_CODE_ATTRIBUTION_HEADER = '0'
+  }
+  return out
+}
+
 /**
  * Rows from the slot file `settings.json`. Missing file yields no rows —
  * the policy default string is not a substitute for the file.
@@ -61,12 +76,11 @@ export function settingsRows(
 ): SettingRow[] {
   const root = asRecord(settings)
   if (!root) return []
-  const env = asRecord(root.env) || {}
+  const env = settingsEnv(root)
   const named = claudeSettingKeys(claudeSetting)
-  const keys = Object.keys(env)
-  const rows: SettingRow[] = keys.map((key) => ({
+  const rows: SettingRow[] = Object.keys(env).map((key) => ({
     key,
-    value: env[key] == null ? '' : String(env[key]),
+    value: env[key],
     inClaudeSetting: named.has(key),
   }))
   for (const key of TOP_KEYS) {
@@ -96,10 +110,15 @@ export function seedDraftOf(
       'reject_client_metadata_identity' in policy
         ? policy.reject_client_metadata_identity !== false
         : true,
+    env: settingsEnv(seed?.settings_json),
   }
 }
 
 export function sameDraft(a: SeedDraft, b: SeedDraft): boolean {
+  const keys = new Set([...Object.keys(a.env), ...Object.keys(b.env)])
+  for (const key of keys) {
+    if ((a.env[key] ?? '') !== (b.env[key] ?? '')) return false
+  }
   return (
     telemetryEnabled(a) === telemetryEnabled(b) &&
     a.claude_setting === b.claude_setting &&
@@ -109,14 +128,13 @@ export function sameDraft(a: SeedDraft, b: SeedDraft): boolean {
 }
 
 /** Body for PUT /seed-settings. Mirrors follow the telemetry bit. */
-export function seedSaveBody(
-  draft: SeedDraft
-): Record<string, boolean | string> {
+export function seedSaveBody(draft: SeedDraft): Record<string, unknown> {
   return {
     ...telemetrySeedFlags(telemetryEnabled(draft)),
     claude_setting: draft.claude_setting.replace(/\n+$/g, ''),
     reject_client_settings: draft.reject_client_settings,
     reject_client_metadata_identity: draft.reject_client_metadata_identity,
+    extra_env: draft.env,
   }
 }
 

From f8c0246a6121f86b3ce963b1d07aa337badab393 Mon Sep 17 00:00:00 2001
From: dofastted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 21:12:05 +0800
Subject: [PATCH 15/19] =?UTF-8?q?feat(vm):=20=E8=B0=83=E8=AF=95=E5=BC=80?=
 =?UTF-8?q?=E5=85=B3=E6=98=BE=E7=A4=BA=E9=81=A5=E6=B5=8B=E5=AE=9E=E9=99=85?=
 =?UTF-8?q?=E4=B8=8A=E4=BC=A0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

默认不拉取。打开后读取本槽 telemetry-upload.log，sidecar 在每次上传后追加正文。
---
 src/lib/admin/panel-routes.mjs            | 35 ++++++++++++--------
 test/unit/panel-vm-seed-settings.test.mjs | 32 ++++++++++++++++++
 web/src/features/vm/detail-page.tsx       |  5 ++-
 web/src/features/vm/queries.ts            |  7 ++--
 worker/internal/telemetry/run.go          | 40 +++++++++++++++++++----
 5 files changed, 96 insertions(+), 23 deletions(-)

diff --git a/src/lib/admin/panel-routes.mjs b/src/lib/admin/panel-routes.mjs
index e2fb1027f..1a277da9f 100644
--- a/src/lib/admin/panel-routes.mjs
+++ b/src/lib/admin/panel-routes.mjs
@@ -3542,19 +3542,18 @@ export function createPanelHandler(ctx) {
         } catch {}
         const seed_policy = defaultSeedPolicy(vm.seed_policy || {})
         if (claude_setting !== null) seed_policy.claude_setting = claude_setting
-        return json(
-          res,
-          200,
-          panel.ok({
-            vm_id: id,
-            seed_policy,
-            ...seedTelemetryContract(seed_policy),
-            settings_json,
-            claude_setting,
-            kin_seed,
-            cli_home: homeDir,
-          }),
-        )
+        const debug = new URL(req.url || '/', 'http://localhost').searchParams.get('debug') === '1'
+        const payload = {
+          vm_id: id,
+          seed_policy,
+          ...seedTelemetryContract(seed_policy),
+          settings_json,
+          claude_setting,
+          kin_seed,
+          cli_home: homeDir,
+        }
+        if (debug) payload.telemetry_log = readTelemetryUploadLog(cfg.paths.project, id)
+        return json(res, 200, panel.ok(payload))
       }
       // PUT /api/panel/vms/:id/seed-settings
       if (req.method === 'PUT' && /^\/api\/panel\/vms\/[^/]+\/seed-settings$/.test(p)) {
@@ -5778,3 +5777,13 @@ export function createPanelHandler(ctx) {
     return false
   }
 }
+
+function readTelemetryUploadLog(projectRoot, id) {
+  if (!/^[A-Za-z0-9][A-Za-z0-9_-]{0,80}$/.test(String(id || ''))) return []
+  try {
+    const text = fs.readFileSync(path.join(projectRoot, 'vms', id, 'run', 'telemetry-upload.log'), 'utf8')
+    return text.split(/\r?\n/).filter(Boolean).slice(-40)
+  } catch {
+    return []
+  }
+}
diff --git a/test/unit/panel-vm-seed-settings.test.mjs b/test/unit/panel-vm-seed-settings.test.mjs
index 5926df0bb..1c53c907d 100644
--- a/test/unit/panel-vm-seed-settings.test.mjs
+++ b/test/unit/panel-vm-seed-settings.test.mjs
@@ -73,3 +73,35 @@ test('GET seed-settings returns an empty claude.setting file as empty', async ()
     fs.rmSync(root, { recursive: true, force: true })
   }
 })
+
+test('GET seed-settings returns the upload log only when debug is on', async () => {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'kin-seed-log-'))
+  try {
+    seed(root, 'vm-01')
+    const run = path.join(root, 'vms', 'vm-01', 'run')
+    fs.mkdirSync(run, { recursive: true })
+    fs.writeFileSync(
+      path.join(run, 'telemetry-upload.log'),
+      'old\n2026-10-19T00:00:00Z batch tengu_init ok {"event_type":"x"}\n',
+    )
+    const hidden = handler(root)
+    await hidden.handlePanel(
+      { method: 'GET', url: '/api/panel/vms/vm-01/seed-settings' },
+      {},
+      new URL('http://localhost/api/panel/vms/vm-01/seed-settings'),
+    )
+    assert.equal(hidden.response.body.data.telemetry_log, undefined)
+    const shown = handler(root)
+    await shown.handlePanel(
+      { method: 'GET', url: '/api/panel/vms/vm-01/seed-settings?debug=1' },
+      {},
+      new URL('http://localhost/api/panel/vms/vm-01/seed-settings?debug=1'),
+    )
+    assert.deepEqual(shown.response.body.data.telemetry_log, [
+      'old',
+      '2026-10-19T00:00:00Z batch tengu_init ok {"event_type":"x"}',
+    ])
+  } finally {
+    fs.rmSync(root, { recursive: true, force: true })
+  }
+})
diff --git a/web/src/features/vm/detail-page.tsx b/web/src/features/vm/detail-page.tsx
index c8b5fc32b..c3a0dc25e 100644
--- a/web/src/features/vm/detail-page.tsx
+++ b/web/src/features/vm/detail-page.tsx
@@ -117,6 +117,7 @@ function VmDetailBody({
   onTabChange: (tab: string) => void
 }) {
   const navigate = useNavigate()
+  const [seedDebug, setSeedDebug] = useState(false)
   const qc = useQueryClient()
   const perms = useVmPerms()
   const dash = useQuery({
@@ -134,7 +135,7 @@ function VmDetailBody({
     refetchInterval: wantedTab === 'seed' ? 2000 : false,
   })
   const seed = useQuery({
-    ...vmSeedQueryOptions(id),
+    ...vmSeedQueryOptions(id, seedDebug),
     enabled: perms.admin && wantedTab === 'seed',
     refetchInterval: wantedTab === 'seed' ? 2000 : false,
   })
@@ -576,6 +577,8 @@ function VmDetailBody({
                     telemetry={kernel?.telemetry}
                     saving={saveSeed.isPending}
                     syncTelemetry={syncTelemetry}
+                    debug={seedDebug}
+                    onDebug={setSeedDebug}
                     onSave={(next) => saveSeed.mutate(next)}
                   />
                 ) : (
diff --git a/web/src/features/vm/queries.ts b/web/src/features/vm/queries.ts
index c8a917ed9..0c255c790 100644
--- a/web/src/features/vm/queries.ts
+++ b/web/src/features/vm/queries.ts
@@ -43,12 +43,13 @@ export function vmQueryOptions(id: string) {
   })
 }
 
-export function vmSeedQueryOptions(id: string) {
+export function vmSeedQueryOptions(id: string, debug = false) {
+  const q = debug ? '?debug=1' : ''
   return queryOptions({
-    queryKey: ['panel', 'vm', id, 'seed'] as const,
+    queryKey: ['panel', 'vm', id, 'seed', debug] as const,
     queryFn: () =>
       api<VmSeedSettings>(
-        `/api/panel/vms/${encodeURIComponent(id)}/seed-settings`
+        `/api/panel/vms/${encodeURIComponent(id)}/seed-settings${q}`
       ),
     refetchInterval: false,
   })
diff --git a/worker/internal/telemetry/run.go b/worker/internal/telemetry/run.go
index 37368c657..4281036d8 100644
--- a/worker/internal/telemetry/run.go
+++ b/worker/internal/telemetry/run.go
@@ -2,6 +2,7 @@ package telemetry
 
 import (
 	"context"
+	"encoding/json"
 	"log"
 	"os"
 	"path/filepath"
@@ -244,10 +245,7 @@ func postBatch(ctx context.Context, deps Deps, cfg config.Config, token string,
 		return nil
 	}
 	err := deps.HTTP.PostBatch(ctx, token, cfg.Telemetry.Headers, []Event{ev})
-	if err != nil {
-		class, status := ClassifyBatchErr(err)
-		log.Printf("telemetry sidecar: batch failed class=%s status=%d", class, status)
-	}
+	recordUpload(cfg, "batch", ev.EventData["event_name"], err, ev)
 	return err
 }
 
@@ -256,11 +254,41 @@ func postEval(ctx context.Context, deps Deps, cfg config.Config, token string, b
 		return nil
 	}
 	err := deps.HTTP.PostEval(ctx, token, cfg.Telemetry.Headers, body)
+	recordUpload(cfg, "eval", "growthbook", err, body)
+	return err
+}
+
+func recordUpload(cfg config.Config, kind string, name any, err error, payload any) {
+	if strings.TrimSpace(cfg.ConfigPath) == "" {
+		return
+	}
+	body, marshalErr := json.Marshal(payload)
+	if marshalErr != nil {
+		body = []byte("{}")
+	}
+	state := "ok"
 	if err != nil {
 		class, status := ClassifyBatchErr(err)
-		log.Printf("telemetry sidecar: eval failed class=%s status=%d", class, status)
+		state = class
+		log.Printf("telemetry sidecar: %s failed class=%s status=%d", kind, class, status)
+		_ = status
 	}
-	return err
+	line := time.Now().UTC().Format(time.RFC3339) + " " + kind + " " + strings.TrimSpace(fmtName(name)) + " " + state + " " + string(body) + "\n"
+	path := filepath.Join(filepath.Dir(cfg.ConfigPath), "telemetry-upload.log")
+	f, openErr := os.OpenFile(path, os.O_CREATE|os.O_APPEND|os.O_WRONLY, 0o600)
+	if openErr != nil {
+		return
+	}
+	defer f.Close()
+	_, _ = f.WriteString(line)
+}
+
+func fmtName(name any) string {
+	text, _ := name.(string)
+	if text == "" {
+		return "-"
+	}
+	return text
 }
 
 func stopOn4xx(err error) bool {

From 635008b59831a03662dfa5412e494436a841f5d3 Mon Sep 17 00:00:00 2001
From: dofastted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 21:15:30 +0800
Subject: [PATCH 16/19] =?UTF-8?q?fix(web):=20=E7=A7=8D=E5=AD=90=E8=B4=A6?=
 =?UTF-8?q?=E6=9C=AC=E4=BF=9D=E7=95=99=E9=A1=B6=E5=B1=82=E9=85=8D=E7=BD=AE?=
 =?UTF-8?q?=E9=A1=B9?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

theme 可编辑并随播种写回。autoUpdates 与 grove_enabled 由播种固定，只读显示，不再被环境项过滤掉。
---
 web/src/features/vm/seed-policy-card.test.ts |  1 +
 web/src/features/vm/seed-policy-card.tsx     | 75 +++++++++++++-------
 web/src/features/vm/seed-settings.test.ts    | 25 +++++++
 web/src/features/vm/seed-settings.ts         |  9 +++
 4 files changed, 86 insertions(+), 24 deletions(-)

diff --git a/web/src/features/vm/seed-policy-card.test.ts b/web/src/features/vm/seed-policy-card.test.ts
index 445e96f99..4f281b08d 100644
--- a/web/src/features/vm/seed-policy-card.test.ts
+++ b/web/src/features/vm/seed-policy-card.test.ts
@@ -12,6 +12,7 @@ describe('seed save follows the telemetry bit', () => {
       reject_client_metadata_identity: true,
       claude_setting: 'A=1',
       env: {},
+      theme: 'dark',
     })
     expect(telemetryEnabled(body)).toBe(true)
     expect(body.disable_nonessential_traffic).toBe(true)
diff --git a/web/src/features/vm/seed-policy-card.tsx b/web/src/features/vm/seed-policy-card.tsx
index c3c294791..4172eacba 100644
--- a/web/src/features/vm/seed-policy-card.tsx
+++ b/web/src/features/vm/seed-policy-card.tsx
@@ -8,6 +8,7 @@ import { Switch } from '@/components/ui/switch'
 import { Textarea } from '@/components/ui/textarea'
 import {
   REJECT_FLAGS,
+  claudeSettingKeys,
   seedDraftOf,
   seedSaveBody,
   settingsRows,
@@ -128,6 +129,7 @@ export function SeedPolicyCard({
   const fileSetting =
     typeof seed.claude_setting === 'string' ? seed.claude_setting : ''
   const rows = settingsRows(seed.settings_json, fileSetting)
+  const claudeNamed = claudeSettingKeys(fileSetting)
   const fileMissing = seed.settings_json == null
 
   const patch = (next: Partial<SeedDraft>) =>
@@ -152,37 +154,62 @@ export function SeedPolicyCard({
           </p>
         ) : (
           <div className='divide-y'>
+            {Object.keys(draft.env).map((key) => (
+              <label
+                key={key}
+                className='grid items-center gap-2 px-4 py-2 sm:grid-cols-[minmax(0,1fr)_minmax(8rem,16rem)]'
+              >
+                <span className='inline-flex min-w-0 items-center gap-2 font-mono text-xs font-medium break-all'>
+                  {claudeNamed.has(key) ? (
+                    <span
+                      className='size-1.5 shrink-0 rounded-full bg-primary'
+                      title='也写在 claude.setting'
+                    />
+                  ) : (
+                    <span className='size-1.5 shrink-0' />
+                  )}
+                  {key}
+                </span>
+                <Input
+                  aria-label={key}
+                  value={draft.env[key] ?? ''}
+                  disabled={saving}
+                  spellCheck={false}
+                  onChange={(event) =>
+                    patch({ env: { ...draft.env, [key]: event.target.value } })
+                  }
+                  className='h-8 font-mono text-xs'
+                />
+              </label>
+            ))}
+            <label className='grid items-center gap-2 px-4 py-2 sm:grid-cols-[minmax(0,1fr)_minmax(8rem,16rem)]'>
+              <span className='font-mono text-xs font-medium'>theme</span>
+              <Input
+                aria-label='theme'
+                value={draft.theme}
+                disabled={saving}
+                spellCheck={false}
+                onChange={(event) => patch({ theme: event.target.value })}
+                className='h-8 font-mono text-xs'
+              />
+            </label>
             {rows
-              .filter((row) => row.key in draft.env)
+              .filter(
+                (row) =>
+                  row.key === 'autoUpdates' || row.key === 'grove_enabled'
+              )
               .map((row) => (
-                <label
+                <div
                   key={row.key}
                   className='grid items-center gap-2 px-4 py-2 sm:grid-cols-[minmax(0,1fr)_minmax(8rem,16rem)]'
                 >
-                  <span className='inline-flex min-w-0 items-center gap-2 font-mono text-xs font-medium break-all'>
-                    {row.inClaudeSetting ? (
-                      <span
-                        className='size-1.5 shrink-0 rounded-full bg-primary'
-                        title='也写在 claude.setting'
-                      />
-                    ) : (
-                      <span className='size-1.5 shrink-0' />
-                    )}
+                  <span className='font-mono text-xs font-medium'>
                     {row.key}
                   </span>
-                  <Input
-                    aria-label={row.key}
-                    value={draft.env[row.key] ?? ''}
-                    disabled={saving}
-                    spellCheck={false}
-                    onChange={(event) =>
-                      patch({
-                        env: { ...draft.env, [row.key]: event.target.value },
-                      })
-                    }
-                    className='h-8 font-mono text-xs'
-                  />
-                </label>
+                  <span className='font-mono text-xs text-muted-foreground'>
+                    {row.value} · 播种时固定
+                  </span>
+                </div>
               ))}
           </div>
         )}
diff --git a/web/src/features/vm/seed-settings.test.ts b/web/src/features/vm/seed-settings.test.ts
index d643b00a0..9be2ec8d1 100644
--- a/web/src/features/vm/seed-settings.test.ts
+++ b/web/src/features/vm/seed-settings.test.ts
@@ -108,6 +108,31 @@ describe('seed draft', () => {
       CLAUDE_CODE_ATTRIBUTION_HEADER: '0',
     })
   })
+
+  it('keeps theme editable and leaves fixed settings visible', () => {
+    const draft = seedDraftOf({
+      settings_json: {
+        env: {},
+        theme: 'light',
+        autoUpdates: false,
+        grove_enabled: false,
+      },
+      claude_setting: '',
+    })
+    expect(draft.theme).toBe('light')
+    expect(
+      settingsRows(
+        draft.env && {
+          env: draft.env,
+          theme: 'light',
+          autoUpdates: false,
+          grove_enabled: false,
+        },
+        ''
+      ).map((row) => row.key)
+    ).toContain('autoUpdates')
+    expect(seedSaveBody({ ...draft, theme: 'dark' }).theme).toBe('dark')
+  })
 })
 
 describe('telemetry lamp', () => {
diff --git a/web/src/features/vm/seed-settings.ts b/web/src/features/vm/seed-settings.ts
index b93b07c0c..d1f2466b3 100644
--- a/web/src/features/vm/seed-settings.ts
+++ b/web/src/features/vm/seed-settings.ts
@@ -26,6 +26,7 @@ export type SeedDraft = TelemetrySeedFlags & {
   reject_client_settings: boolean
   reject_client_metadata_identity: boolean
   env: Record<string, string>
+  theme: string
 }
 
 type ObservedTelemetry = NonNullable<VmKernelSnapshot['telemetry']>
@@ -111,6 +112,12 @@ export function seedDraftOf(
         ? policy.reject_client_metadata_identity !== false
         : true,
     env: settingsEnv(seed?.settings_json),
+    theme:
+      typeof asRecord(seed?.settings_json)?.theme === 'string'
+        ? String(asRecord(seed?.settings_json)?.theme)
+        : typeof policy.theme === 'string'
+          ? policy.theme
+          : 'dark',
   }
 }
 
@@ -120,6 +127,7 @@ export function sameDraft(a: SeedDraft, b: SeedDraft): boolean {
     if ((a.env[key] ?? '') !== (b.env[key] ?? '')) return false
   }
   return (
+    a.theme === b.theme &&
     telemetryEnabled(a) === telemetryEnabled(b) &&
     a.claude_setting === b.claude_setting &&
     a.reject_client_settings === b.reject_client_settings &&
@@ -135,6 +143,7 @@ export function seedSaveBody(draft: SeedDraft): Record<string, unknown> {
     reject_client_settings: draft.reject_client_settings,
     reject_client_metadata_identity: draft.reject_client_metadata_identity,
     extra_env: draft.env,
+    theme: draft.theme,
   }
 }
 

From 9e61a36332edfc2da327679487d45315f4a7915c Mon Sep 17 00:00:00 2001
From: dofastted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 21:17:49 +0800
Subject: [PATCH 17/19] =?UTF-8?q?fix(vm):=20=E9=81=A5=E6=B5=8B=E4=B8=8A?=
 =?UTF-8?q?=E4=BC=A0=E6=97=A5=E5=BF=97=E5=8F=AA=E4=BF=9D=E7=95=99=E6=9C=80?=
 =?UTF-8?q?=E8=BF=91=E5=9B=9B=E5=8D=81=E8=A1=8C?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

落盘前去掉邮箱、账号、组织和设备标识。超过四十行时原子替换，不再无限追加。
---
 worker/internal/telemetry/run.go      | 59 +++++++++++++++++++++++----
 worker/internal/telemetry/run_test.go | 32 +++++++++++++++
 2 files changed, 84 insertions(+), 7 deletions(-)

diff --git a/worker/internal/telemetry/run.go b/worker/internal/telemetry/run.go
index 4281036d8..da550f461 100644
--- a/worker/internal/telemetry/run.go
+++ b/worker/internal/telemetry/run.go
@@ -258,11 +258,20 @@ func postEval(ctx context.Context, deps Deps, cfg config.Config, token string, b
 	return err
 }
 
+const uploadLogLines = 40
+
+var redactedUploadKeys = map[string]struct{}{
+	"email": {}, "account_uuid": {}, "accountuuid": {},
+	"organization_uuid": {}, "organizationuuid": {},
+	"device_id": {}, "deviceid": {}, "session_id": {}, "sessionid": {},
+	"user_id": {}, "userid": {}, "id": {},
+}
+
 func recordUpload(cfg config.Config, kind string, name any, err error, payload any) {
 	if strings.TrimSpace(cfg.ConfigPath) == "" {
 		return
 	}
-	body, marshalErr := json.Marshal(payload)
+	body, marshalErr := json.Marshal(redactUpload(payload))
 	if marshalErr != nil {
 		body = []byte("{}")
 	}
@@ -273,14 +282,50 @@ func recordUpload(cfg config.Config, kind string, name any, err error, payload a
 		log.Printf("telemetry sidecar: %s failed class=%s status=%d", kind, class, status)
 		_ = status
 	}
-	line := time.Now().UTC().Format(time.RFC3339) + " " + kind + " " + strings.TrimSpace(fmtName(name)) + " " + state + " " + string(body) + "\n"
+	line := time.Now().UTC().Format(time.RFC3339) + " " + kind + " " + strings.TrimSpace(fmtName(name)) + " " + state + " " + string(body)
 	path := filepath.Join(filepath.Dir(cfg.ConfigPath), "telemetry-upload.log")
-	f, openErr := os.OpenFile(path, os.O_CREATE|os.O_APPEND|os.O_WRONLY, 0o600)
-	if openErr != nil {
-		return
+	_ = rewriteUploadLog(path, line)
+}
+
+func redactUpload(value any) any {
+	switch item := value.(type) {
+	case map[string]any:
+		out := make(map[string]any, len(item))
+		for key, child := range item {
+			if _, drop := redactedUploadKeys[strings.ToLower(key)]; drop {
+				continue
+			}
+			out[key] = redactUpload(child)
+		}
+		return out
+	case []any:
+		out := make([]any, len(item))
+		for i, child := range item {
+			out[i] = redactUpload(child)
+		}
+		return out
+	case Event:
+		return redactUpload(map[string]any{"event_type": item.EventType, "event_data": item.EventData})
+	default:
+		return value
+	}
+}
+
+func rewriteUploadLog(path, line string) error {
+	previous, _ := os.ReadFile(path)
+	lines := strings.Split(strings.TrimRight(string(previous), "\n"), "\n")
+	if len(previous) == 0 {
+		lines = nil
+	}
+	lines = append(lines, line)
+	if len(lines) > uploadLogLines {
+		lines = lines[len(lines)-uploadLogLines:]
+	}
+	next := path + ".next"
+	if err := os.WriteFile(next, []byte(strings.Join(lines, "\n")+"\n"), 0o600); err != nil {
+		return err
 	}
-	defer f.Close()
-	_, _ = f.WriteString(line)
+	return os.Rename(next, path)
 }
 
 func fmtName(name any) string {
diff --git a/worker/internal/telemetry/run_test.go b/worker/internal/telemetry/run_test.go
index b58386e61..28dc16491 100644
--- a/worker/internal/telemetry/run_test.go
+++ b/worker/internal/telemetry/run_test.go
@@ -216,3 +216,35 @@ func TestRunReloadsTelemetryWithoutRestart(t *testing.T) {
 		t.Fatalf("reloaded body missing hardware: %s", got)
 	}
 }
+
+func TestUploadLogKeepsFortyLinesAndDropsIdentity(t *testing.T) {
+	dir := t.TempDir()
+	cfg := config.Config{ConfigPath: filepath.Join(dir, "worker.json")}
+	payload := Event{EventType: "ClaudeCodeInternalEvent", EventData: map[string]any{
+		"event_name": "tengu_init",
+		"email":      "person@example.com",
+		"device_id":  "abc",
+		"auth":       map[string]any{"account_uuid": "acct", "organization_uuid": "org"},
+		"env":        map[string]any{"platform": "linux"},
+	}}
+	for range 45 {
+		recordUpload(cfg, "batch", "tengu_init", nil, payload)
+	}
+	raw, err := os.ReadFile(filepath.Join(dir, "telemetry-upload.log"))
+	if err != nil {
+		t.Fatal(err)
+	}
+	text := string(raw)
+	lines := strings.Split(strings.TrimRight(text, "\n"), "\n")
+	if len(lines) != uploadLogLines {
+		t.Fatalf("lines=%d", len(lines))
+	}
+	for _, secret := range []string{"person@example.com", "account_uuid", "organization_uuid", "device_id"} {
+		if strings.Contains(text, secret) {
+			t.Fatalf("log kept %s", secret)
+		}
+	}
+	if !strings.Contains(text, `"platform":"linux"`) || !strings.Contains(text, "batch tengu_init ok") {
+		t.Fatalf("log lost the upload shape: %s", text)
+	}
+}

From 309969973ae19f28d24113c0984bd5cc67d7de9e Mon Sep 17 00:00:00 2001
From: dofastted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 21:19:36 +0800
Subject: [PATCH 18/19] =?UTF-8?q?fix(web):=20=E6=92=AD=E7=A7=8D=E5=90=8E?=
 =?UTF-8?q?=E5=90=8C=E6=97=B6=E5=88=B7=E6=96=B0=E8=B0=83=E8=AF=95=E4=B8=AD?=
 =?UTF-8?q?=E7=9A=84=E7=A7=8D=E5=AD=90=E6=9F=A5=E8=AF=A2?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

调试开关会改变查询键。保存成功按种子前缀失效，避免日志继续显示旧记录。
---
 web/src/features/vm/detail-page.tsx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/src/features/vm/detail-page.tsx b/web/src/features/vm/detail-page.tsx
index c3a0dc25e..78c79a8de 100644
--- a/web/src/features/vm/detail-page.tsx
+++ b/web/src/features/vm/detail-page.tsx
@@ -236,7 +236,7 @@ function VmDetailBody({
     onSuccess: async () => {
       toast.success('已播种')
       await qc.invalidateQueries({
-        queryKey: vmSeedQueryOptions(id).queryKey,
+        queryKey: ['panel', 'vm', id, 'seed'],
       })
     },
     onError: (error: Error) => toast.error(error.message),

From fb2bd5f0f0c6f67077a6201f43b3d580f57c25f3 Mon Sep 17 00:00:00 2001
From: dofastted <kuhlmangarry24@gmail.com>
Date: Mon, 19 Oct 2026 21:21:28 +0800
Subject: [PATCH 19/19] =?UTF-8?q?fix(vm):=20=E8=B0=83=E8=AF=95=E6=97=A5?=
 =?UTF-8?q?=E5=BF=97=E8=AE=B0=E5=BD=95=E5=AE=9E=E9=99=85=E4=B8=8A=E4=BC=A0?=
 =?UTF-8?q?=E7=9A=84=20events=20=E5=8C=85=E8=A3=85?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

batch 日志改为 PostBatch 发出的 BatchRequest。身份字段仍在包装内删除。
---
 worker/internal/telemetry/run.go      | 10 +++++++++-
 worker/internal/telemetry/run_test.go |  4 ++--
 2 files changed, 11 insertions(+), 3 deletions(-)

diff --git a/worker/internal/telemetry/run.go b/worker/internal/telemetry/run.go
index da550f461..bba90dd04 100644
--- a/worker/internal/telemetry/run.go
+++ b/worker/internal/telemetry/run.go
@@ -245,7 +245,7 @@ func postBatch(ctx context.Context, deps Deps, cfg config.Config, token string,
 		return nil
 	}
 	err := deps.HTTP.PostBatch(ctx, token, cfg.Telemetry.Headers, []Event{ev})
-	recordUpload(cfg, "batch", ev.EventData["event_name"], err, ev)
+	recordUpload(cfg, "batch", ev.EventData["event_name"], err, BatchRequest{Events: []Event{ev}})
 	return err
 }
 
@@ -304,6 +304,14 @@ func redactUpload(value any) any {
 			out[i] = redactUpload(child)
 		}
 		return out
+	case []Event:
+		out := make([]any, len(item))
+		for i, child := range item {
+			out[i] = redactUpload(child)
+		}
+		return out
+	case BatchRequest:
+		return map[string]any{"events": redactUpload(item.Events)}
 	case Event:
 		return redactUpload(map[string]any{"event_type": item.EventType, "event_data": item.EventData})
 	default:
diff --git a/worker/internal/telemetry/run_test.go b/worker/internal/telemetry/run_test.go
index 28dc16491..f72c8439b 100644
--- a/worker/internal/telemetry/run_test.go
+++ b/worker/internal/telemetry/run_test.go
@@ -228,7 +228,7 @@ func TestUploadLogKeepsFortyLinesAndDropsIdentity(t *testing.T) {
 		"env":        map[string]any{"platform": "linux"},
 	}}
 	for range 45 {
-		recordUpload(cfg, "batch", "tengu_init", nil, payload)
+		recordUpload(cfg, "batch", "tengu_init", nil, BatchRequest{Events: []Event{payload}})
 	}
 	raw, err := os.ReadFile(filepath.Join(dir, "telemetry-upload.log"))
 	if err != nil {
@@ -244,7 +244,7 @@ func TestUploadLogKeepsFortyLinesAndDropsIdentity(t *testing.T) {
 			t.Fatalf("log kept %s", secret)
 		}
 	}
-	if !strings.Contains(text, `"platform":"linux"`) || !strings.Contains(text, "batch tengu_init ok") {
+	if !strings.Contains(text, `"events":[`) || !strings.Contains(text, `"platform":"linux"`) || !strings.Contains(text, "batch tengu_init ok") {
 		t.Fatalf("log lost the upload shape: %s", text)
 	}
 }