backend: require confirmation for signed channel updates [CI]

web/admin/src/pages/AgentDetail.tsx

@@ -7,6 +7,7 @@ import { fmtAgo, fmtNum, fmtTime } from '@shared/format'
 import { useQuery } from '@shared/hooks'
 import { Chip, Confirm, Dialog, Empty, ErrorNotice, Field, Spinner, useAction } from '@shared/ui'
 import { AgentStatus } from './Agents'
+import { IPV6_STATES } from '@shared/ipVersions'
 
 function EditDialog({ agent, onClose, onSaved }: { agent: AgentDto; onClose: () => void; onSaved: () => void }) {
   const { busy, run } = useAction()
@@ -221,6 +222,16 @@ export function AgentDetail() {
                 <dd className="mono">{a.ipv6_host || '未配置'}</dd>
                 <dt>IPv6 监听</dt>
                 <dd>{a.ipv6_supported ? '已启用' : '未启用，请升级 Agent 并配置双栈监听'}</dd>
+                <dt>IPv6 诊断</dt>
+                <dd>{IPV6_STATES[a.ipv6?.state ?? 'unknown'] ?? '状态未知'}</dd>
+                <dt>检测网络</dt>
+                <dd>{a.ipv6?.network_scope === 'host' ? '宿主机' : a.ipv6?.network_scope === 'container' ? '容器网络' : '未知'}</dd>
+                <dt>宿主全局 IPv6</dt>
+                <dd>{a.ipv6?.host_has_global_address == null ? '无法读取' : a.ipv6.host_has_global_address ? '已获得' : '未获得'}</dd>
+                <dt>全局 IPv6 地址</dt>
+                <dd>{a.ipv6?.has_global_address == null ? '未知' : a.ipv6.has_global_address ? '已获得' : '未获得'}</dd>
+                <dt>IPv6 默认路由</dt>
+                <dd>{a.ipv6?.has_default_route == null ? '未知' : a.ipv6.has_default_route ? '存在' : '缺失'}</dd>
                 <dt>控制端口</dt>
                 <dd className="mono">{a.probe_tcp_port}/tcp</dd>
                 <dt>数据端口</dt>

web/admin/src/pages/Probes.tsx

@@ -6,6 +6,7 @@ import type { LinkDto, LinkMatrixDto, Page, ProbeDto, ProbeIdentityDto } from '@
 import { fmtAgo, fmtTime } from '@shared/format'
 import { useQuery } from '@shared/hooks'
 import { NodeTag, useNodeInfos } from '@shared/nodes'
+import { IPV6_STATES } from '@shared/ipVersions'
 import { Chip, Confirm, CopyButton, Dialog, downloadText, Empty, ErrorNotice, Field, Spinner, useAction } from '@shared/ui'
 
 /**
@@ -204,6 +205,7 @@ export function Probes() {
             <div className="row wrap">
               <span style={{ fontSize: 18, fontWeight: 700 }}>{p.name}</span>
               <NodeTag info={infos.get(p.id)} />
+              <Chip tone={p.ipv6?.state === 'ready' ? 'ok' : 'warn'}>{p.ipv6 ? IPV6_STATES[p.ipv6.state] ?? 'IPv6 状态未知' : '等待 IPv6 诊断'}</Chip>
               {p.revoked ? (
                 <Chip tone="bad">已吊销</Chip>
               ) : (

web/admin/src/pages/System.tsx

@@ -1,5 +1,5 @@
 import { Download, KeyRound, Plus, Trash2 } from 'lucide-react'
-import { useEffect, useState } from 'react'
+import { useEffect, useState, type ReactNode } from 'react'
 import { api } from '@shared/api/client'
 import type { AgentDto, ApiTokenDto, BuildInfoDto, NodeUpdateDto, ReleaseDto, CreatedApiTokenDto, EventDto, Page, ProbeDto, RawChunkMetaDto, RecomputeDto, SettingDto, UserDto } from '@shared/api/types'
 import { fmtBuiltAt, frontendBuild } from '@shared/buildInfo'
@@ -78,7 +78,7 @@ function Settings() {
 }
 
 /** 一行：名字、类型、版本、tag、提交、构建时间、系统。没有的写「—」。 */
-function BuildRow({ name, kind, version, tag, commit, builtAt, platform }: { name: string; kind: string; version?: string | null; tag?: string | null; commit?: string | null; builtAt?: string | null; platform?: string }) {
+function BuildRow({ name, kind, version, tag, commit, builtAt, platform, update }: { name: string; kind: string; version?: string | null; tag?: string | null; commit?: string | null; builtAt?: string | null; platform?: string; update?: ReactNode }) {
   const dash = <span className="faint">—</span>
   return (
     <tr>
@@ -91,6 +91,7 @@ function BuildRow({ name, kind, version, tag, commit, builtAt, platform }: { nam
       <td className="mono">{commit || dash}</td>
       <td className="muted">{fmtBuiltAt(builtAt) || dash}</td>
       <td className="muted">{platform || dash}</td>
+      <td>{update ?? dash}</td>
     </tr>
   )
 }
@@ -149,8 +150,8 @@ function Versions() {
           {(releases.data?.items ?? []).length === 0
             ? '还没有（CI 构建后会自动登记）'
             : (releases.data?.items ?? []).map((r) => (
-                <span key={r.component} style={{ marginRight: 12 }}>
-                  {r.component} <span className="mono">{r.tag}</span>
+                <span key={`${r.component}:${r.channel}`} style={{ marginRight: 12 }}>
+                  {r.component} <span className="mono">{r.tag}</span> <span className="faint">({r.channel})</span>
                 </span>
               ))}
         </span>
@@ -174,7 +175,7 @@ function Versions() {
           </tr>
         </thead>
         <tbody>
-          {back ? <BuildRow name="后端" kind="backend" version={back.version} tag={back.tag} commit={back.commit} builtAt={back.built_at} /> : null}
+          {back ? <BuildRow name="后端" kind="backend" version={back.version} tag={back.tag} commit={back.commit} builtAt={back.built_at} update={info.data?.backend_update ? <Chip tone={info.data.backend_update.state === 'available' ? 'warn' : ''}>{info.data.backend_update.channel} · {info.data.backend_update.state === 'unavailable' ? '未安装更新器' : UPDATE_STATE[info.data.backend_update.state]?.text ?? info.data.backend_update.state}</Chip> : undefined} /> : null}
           <BuildRow name="前端" kind="web" version={frontendBuild.version} tag={frontendBuild.tag} commit={frontendBuild.commit} builtAt={frontendBuild.builtAt} />
           {nodes.map((n) => (
             <tr key={n.id}>