fix: Fix the endless looping problem

Dockerfile

@@ -1,19 +1,18 @@
 FROM alpine:3.21
 
 ENV TZ=Asia/Shanghai
+ENV APP_BINARY_PATH=/app/app
 ENV RUNTIME_DIR=/tmp/runtime
 ENV SUPERVISOR_CONF=/etc/supervisord.conf
 ENV SUPERVISOR_CONF_TEMPLATE=/etc/supervisord.conf.template
 ENV STOP_WAIT_SECS=60
 
-RUN apk add --no-cache ca-certificates curl supervisor tzdata \
+RUN apk add --no-cache ca-certificates supervisor tzdata \
     && ln -snf /usr/share/zoneinfo/$TZ /etc/localtime \
     && echo $TZ > /etc/timezone
 
 COPY entrypoint.sh /usr/local/bin/entrypoint.sh
-COPY scripts/release-common.sh /usr/local/bin/release-common.sh
-COPY scripts/update-loop.sh /usr/local/bin/update-loop.sh
 COPY supervisord.conf /etc/supervisord.conf.template
-RUN chmod +x /usr/local/bin/entrypoint.sh /usr/local/bin/release-common.sh /usr/local/bin/update-loop.sh
+RUN chmod +x /usr/local/bin/entrypoint.sh
 
 ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]

README.md

@@ -8,4 +8,11 @@ pinned: false
 app_port: 8317
 ---
 
-Check out the configuration reference at https://huggingface.co/docs/hub/spaces-config-reference
+这个镜像不再包含任何自动更新逻辑。
+
+运行前需要显式提供应用二进制，默认路径是 `APP_BINARY_PATH=/app/app`，也可以通过环境变量覆盖。
+
+最简单的用法是基于这个镜像继续构建，并把你的可执行文件复制到 `/app/app`。
+
+Hugging Face Spaces 配置参考：
+https://huggingface.co/docs/hub/spaces-config-reference

entrypoint.sh

@@ -1,15 +1,15 @@
 #!/bin/sh
 set -eu
 
-: "${RELEASE_COMMON_SH:=/usr/local/bin/release-common.sh}"
 : "${SUPERVISORD_BIN:=/usr/bin/supervisord}"
 : "${SUPERVISOR_CONF_TEMPLATE:=/etc/supervisord.conf.template}"
+: "${APP_BINARY_PATH:=/app/app}"
+: "${RUNTIME_DIR:=/tmp/runtime}"
+: "${SUPERVISOR_CONF:=/etc/supervisord.conf}"
+: "${SUPERVISOR_PROGRAM_NAME:=app}"
 : "${OPEN_FILE_LIMIT:=65535}"
 
-. "$RELEASE_COMMON_SH"
-
 export RUNTIME_DIR
-export SUPERVISOR_CONF
 
 shell_quote() {
   printf "'%s'" "$(printf '%s' "$1" | sed "s/'/'\"'\"'/g")"
@@ -22,11 +22,9 @@ escape_sed_replacement() {
 write_supervisord_conf() {
   mkdir -p "$(dirname "$SUPERVISOR_CONF")"
   app_program_name=$(escape_sed_replacement "$SUPERVISOR_PROGRAM_NAME")
-  updater_program_name=$(escape_sed_replacement "$SUPERVISOR_UPDATER_PROGRAM_NAME")
 
   sed \
     -e "s/__APP_PROGRAM__/$app_program_name/g" \
-    -e "s/__UPDATER_PROGRAM__/$updater_program_name/g" \
     "$SUPERVISOR_CONF_TEMPLATE" > "$SUPERVISOR_CONF"
 }
 
@@ -36,7 +34,7 @@ write_run_app_script() {
   {
     printf '#!/bin/sh\n'
     printf 'set -eu\n'
-    printf 'exec "%s"' "$(current_binary_path)"
+    printf 'exec "%s"' "$APP_BINARY_PATH"
     for arg in "$@"; do
       printf ' %s' "$(shell_quote "$arg")"
     done
@@ -48,13 +46,13 @@ write_run_app_script() {
 
 prepare_runtime_environment() {
   ulimit -n "$OPEN_FILE_LIMIT"
-  ensure_runtime_dirs
+  mkdir -p "$RUNTIME_DIR"
   rm -f "$RUNTIME_DIR/supervisor.sock" "$RUNTIME_DIR/supervisord.pid"
 }
 
-bootstrap_release_or_exit() {
-  if ! ensure_initial_release; then
-    echo "错误: 初次启动时无法准备可运行版本" >&2
+validate_app_binary_or_exit() {
+  if [ ! -x "$APP_BINARY_PATH" ]; then
+    echo "错误: APP_BINARY_PATH 指向的文件不存在或不可执行: $APP_BINARY_PATH" >&2
     exit 1
   fi
 }
@@ -65,8 +63,8 @@ start_supervisord() {
 
 main() {
   prepare_runtime_environment
+  validate_app_binary_or_exit
   write_supervisord_conf
-  bootstrap_release_or_exit
   write_run_app_script "$@"
   start_supervisord
 }

release-common.sh

@@ -1,240 +0,0 @@
-#!/bin/sh
-
-: "${REPO_API_URL:=https://api.github.com/repos/caidaoli/CLIProxyAPI/releases/latest}"
-: "${RUNTIME_DIR:=/tmp/runtime}"
-: "${RELEASES_DIR:=$RUNTIME_DIR/releases}"
-: "${CURRENT_LINK:=$RUNTIME_DIR/current}"
-: "${CURRENT_TAG_FILE:=$RUNTIME_DIR/current.tag}"
-: "${DOWNLOADS_DIR:=$RUNTIME_DIR/downloads}"
-: "${SUPERVISOR_CONF:=/etc/supervisord.conf}"
-: "${SUPERVISOR_PROGRAM_NAME:=app}"
-: "${SUPERVISOR_UPDATER_PROGRAM_NAME:=${SUPERVISOR_PROGRAM_NAME}-updater}"
-: "${CURRENT_BINARY_NAME:=app}"
-: "${APP_BINARY_NAMES:=}"
-
-log() {
-  timestamp=$(date '+%Y-%m-%d %H:%M:%S %z')
-  printf '[%s] %s\n' "$timestamp" "$*" >&2
-}
-
-tag_to_dir_name() {
-  printf '%s\n' "$1" | tr '/:' '__'
-}
-
-release_dir_for_tag() {
-  printf '%s/%s\n' "$RELEASES_DIR" "$(tag_to_dir_name "$1")"
-}
-
-ensure_runtime_dirs() {
-  mkdir -p "$RUNTIME_DIR" "$RELEASES_DIR" "$DOWNLOADS_DIR"
-}
-
-current_tag() {
-  if [ -f "$CURRENT_TAG_FILE" ]; then
-    tr -d '\n' < "$CURRENT_TAG_FILE"
-  fi
-}
-
-current_binary_path() {
-  printf '%s/%s\n' "$CURRENT_LINK" "$CURRENT_BINARY_NAME"
-}
-
-fetch_latest_release_info() {
-  response=$(curl -fsSL "$REPO_API_URL") || return 1
-
-  tag_name=$(
-    printf '%s\n' "$response" \
-      | grep -Eo '"tag_name"[[:space:]]*:[[:space:]]*"[^"]+"' \
-      | head -n 1 \
-      | cut -d '"' -f 4 \
-      || true
-  )
-  asset_url=$(
-    printf '%s\n' "$response" \
-      | grep -Eo '"browser_download_url"[[:space:]]*:[[:space:]]*"[^"]*"' \
-      | cut -d '"' -f 4 \
-      | grep -E '/[^/]*linux[-_]amd64(\.tar\.gz)?$' \
-      | head -n 1 \
-      || true
-  )
-
-  if [ -z "$tag_name" ] || [ -z "$asset_url" ]; then
-    return 1
-  fi
-
-  printf '%s|%s\n' "$tag_name" "$asset_url"
-}
-
-load_latest_release() {
-  release_info=$(fetch_latest_release_info) || return 1
-  LATEST_TAG=${release_info%%|*}
-  LATEST_ASSET_URL=${release_info#*|}
-}
-
-find_release_binary() {
-  release_dir=$1
-
-  for name in $APP_BINARY_NAMES; do
-    if [ -f "$release_dir/$name" ]; then
-      printf '%s\n' "$release_dir/$name"
-      return 0
-    fi
-  done
-
-  for name in $APP_BINARY_NAMES; do
-    binary_path=$(find "$release_dir" -maxdepth 3 -type f -name "$name" | head -n 1)
-    if [ -n "$binary_path" ]; then
-      printf '%s\n' "$binary_path"
-      return 0
-    fi
-  done
-
-  file_list=$(find "$release_dir" -maxdepth 3 -type f ! -name '._*' ! -path '*/__MACOSX/*' | sort)
-  first_file=$(printf '%s\n' "$file_list" | sed -n '1p')
-  second_file=$(printf '%s\n' "$file_list" | sed -n '2p')
-  if [ -n "$first_file" ] && [ -z "$second_file" ]; then
-    printf '%s\n' "$first_file"
-    return 0
-  fi
-
-  return 1
-}
-
-activate_release() {
-  tag_name=$1
-  release_dir=$2
-
-  rm -f "$CURRENT_LINK"
-  ln -s "$release_dir" "$CURRENT_LINK"
-  printf '%s\n' "$tag_name" > "$CURRENT_TAG_FILE"
-}
-
-extract_release_binary() {
-  source_dir=$1
-  target_path=$2
-  binary_path=$(find_release_binary "$source_dir" || true)
-
-  if [ -z "$binary_path" ]; then
-    return 1
-  fi
-
-  if [ "$binary_path" != "$target_path" ]; then
-    cp "$binary_path" "$target_path"
-  fi
-  chmod +x "$target_path"
-}
-
-cleanup_workspace() {
-  workspace=$1
-  if [ -n "$workspace" ] && [ -d "$workspace" ]; then
-    rm -rf "$workspace"
-  fi
-}
-
-install_release() {
-  tag_name=$1
-  asset_url=$2
-
-  ensure_runtime_dirs
-  release_dir=$(release_dir_for_tag "$tag_name")
-  release_binary="$release_dir/$CURRENT_BINARY_NAME"
-
-  if [ -x "$release_binary" ]; then
-    activate_release "$tag_name" "$release_dir"
-    return 0
-  fi
-
-  workspace=$(mktemp -d "$RUNTIME_DIR/install.XXXXXX") || return 1
-  download_name=$(basename "$asset_url")
-  if [ -z "$download_name" ] || [ "$download_name" = "/" ] || [ "$download_name" = "." ]; then
-    download_name="release.asset"
-  fi
-  download_path="$DOWNLOADS_DIR/$download_name"
-  stage_dir="$workspace/stage"
-
-  rm -f "$download_path" || {
-    cleanup_workspace "$workspace"
-    return 1
-  }
-  mkdir -p "$stage_dir" || {
-    cleanup_workspace "$workspace"
-    return 1
-  }
-  curl -fsSL "$asset_url" -o "$download_path" || {
-    cleanup_workspace "$workspace"
-    return 1
-  }
-
-  case "$download_path" in
-    *.tar.gz)
-      tar -xzf "$download_path" -C "$stage_dir" || {
-        cleanup_workspace "$workspace"
-        return 1
-      }
-      extract_release_binary "$stage_dir" "$stage_dir/$CURRENT_BINARY_NAME" || {
-        cleanup_workspace "$workspace"
-        return 1
-      }
-      ;;
-    *)
-      cp "$download_path" "$stage_dir/$CURRENT_BINARY_NAME" || {
-        cleanup_workspace "$workspace"
-        return 1
-      }
-      chmod +x "$stage_dir/$CURRENT_BINARY_NAME" || {
-        cleanup_workspace "$workspace"
-        return 1
-      }
-      ;;
-  esac
-
-  rm -rf "$release_dir" || {
-    cleanup_workspace "$workspace"
-    return 1
-  }
-  mv "$stage_dir" "$release_dir" || {
-    cleanup_workspace "$workspace"
-    return 1
-  }
-  cleanup_workspace "$workspace"
-
-  activate_release "$tag_name" "$release_dir"
-}
-
-ensure_initial_release() {
-  if load_latest_release; then
-    if install_release "$LATEST_TAG" "$LATEST_ASSET_URL"; then
-      return 0
-    fi
-    log "警告: 安装最新版本失败，尝试使用已有版本继续启动"
-  fi
-
-  [ -x "$(current_binary_path)" ]
-}
-
-restart_managed_service() {
-  supervisorctl -c "$SUPERVISOR_CONF" restart "$SUPERVISOR_PROGRAM_NAME"
-}
-
-update_if_needed() {
-  load_latest_release || {
-    log "检查最新版本失败"
-    return 1
-  }
-
-  installed_tag=$(current_tag)
-  if [ "$LATEST_TAG" = "$installed_tag" ]; then
-    log "当前已是最新版本: $LATEST_TAG"
-    return 0
-  fi
-
-  log "发现新版本: ${installed_tag:-<none>} -> $LATEST_TAG"
-  install_release "$LATEST_TAG" "$LATEST_ASSET_URL" || {
-    log "安装新版本失败: $LATEST_TAG"
-    return 1
-  }
-
-  if [ -n "$installed_tag" ]; then
-    restart_managed_service
-  fi
-}

scripts/release-common.sh

@@ -1,240 +0,0 @@
-#!/bin/sh
-
-: "${REPO_API_URL:=https://api.github.com/repos/caidaoli/CLIProxyAPI/releases/latest}"
-: "${RUNTIME_DIR:=/tmp/runtime}"
-: "${RELEASES_DIR:=$RUNTIME_DIR/releases}"
-: "${CURRENT_LINK:=$RUNTIME_DIR/current}"
-: "${CURRENT_TAG_FILE:=$RUNTIME_DIR/current.tag}"
-: "${DOWNLOADS_DIR:=$RUNTIME_DIR/downloads}"
-: "${SUPERVISOR_CONF:=/etc/supervisord.conf}"
-: "${SUPERVISOR_PROGRAM_NAME:=app}"
-: "${SUPERVISOR_UPDATER_PROGRAM_NAME:=${SUPERVISOR_PROGRAM_NAME}-updater}"
-: "${CURRENT_BINARY_NAME:=app}"
-: "${APP_BINARY_NAMES:=}"
-
-log() {
-  timestamp=$(date '+%Y-%m-%d %H:%M:%S %z')
-  printf '[%s] %s\n' "$timestamp" "$*" >&2
-}
-
-tag_to_dir_name() {
-  printf '%s\n' "$1" | tr '/:' '__'
-}
-
-release_dir_for_tag() {
-  printf '%s/%s\n' "$RELEASES_DIR" "$(tag_to_dir_name "$1")"
-}
-
-ensure_runtime_dirs() {
-  mkdir -p "$RUNTIME_DIR" "$RELEASES_DIR" "$DOWNLOADS_DIR"
-}
-
-current_tag() {
-  if [ -f "$CURRENT_TAG_FILE" ]; then
-    tr -d '\n' < "$CURRENT_TAG_FILE"
-  fi
-}
-
-current_binary_path() {
-  printf '%s/%s\n' "$CURRENT_LINK" "$CURRENT_BINARY_NAME"
-}
-
-fetch_latest_release_info() {
-  response=$(curl -fsSL "$REPO_API_URL") || return 1
-
-  tag_name=$(
-    printf '%s\n' "$response" \
-      | grep -Eo '"tag_name"[[:space:]]*:[[:space:]]*"[^"]+"' \
-      | head -n 1 \
-      | cut -d '"' -f 4 \
-      || true
-  )
-  asset_url=$(
-    printf '%s\n' "$response" \
-      | grep -Eo '"browser_download_url"[[:space:]]*:[[:space:]]*"[^"]*"' \
-      | cut -d '"' -f 4 \
-      | grep -E '/[^/]*linux[-_]amd64(\.tar\.gz)?$' \
-      | head -n 1 \
-      || true
-  )
-
-  if [ -z "$tag_name" ] || [ -z "$asset_url" ]; then
-    return 1
-  fi
-
-  printf '%s|%s\n' "$tag_name" "$asset_url"
-}
-
-load_latest_release() {
-  release_info=$(fetch_latest_release_info) || return 1
-  LATEST_TAG=${release_info%%|*}
-  LATEST_ASSET_URL=${release_info#*|}
-}
-
-find_release_binary() {
-  release_dir=$1
-
-  for name in $APP_BINARY_NAMES; do
-    if [ -f "$release_dir/$name" ]; then
-      printf '%s\n' "$release_dir/$name"
-      return 0
-    fi
-  done
-
-  for name in $APP_BINARY_NAMES; do
-    binary_path=$(find "$release_dir" -maxdepth 3 -type f -name "$name" | head -n 1)
-    if [ -n "$binary_path" ]; then
-      printf '%s\n' "$binary_path"
-      return 0
-    fi
-  done
-
-  file_list=$(find "$release_dir" -maxdepth 3 -type f ! -name '._*' ! -path '*/__MACOSX/*' | sort)
-  first_file=$(printf '%s\n' "$file_list" | sed -n '1p')
-  second_file=$(printf '%s\n' "$file_list" | sed -n '2p')
-  if [ -n "$first_file" ] && [ -z "$second_file" ]; then
-    printf '%s\n' "$first_file"
-    return 0
-  fi
-
-  return 1
-}
-
-activate_release() {
-  tag_name=$1
-  release_dir=$2
-
-  rm -f "$CURRENT_LINK"
-  ln -s "$release_dir" "$CURRENT_LINK"
-  printf '%s\n' "$tag_name" > "$CURRENT_TAG_FILE"
-}
-
-extract_release_binary() {
-  source_dir=$1
-  target_path=$2
-  binary_path=$(find_release_binary "$source_dir" || true)
-
-  if [ -z "$binary_path" ]; then
-    return 1
-  fi
-
-  if [ "$binary_path" != "$target_path" ]; then
-    cp "$binary_path" "$target_path"
-  fi
-  chmod +x "$target_path"
-}
-
-cleanup_workspace() {
-  workspace=$1
-  if [ -n "$workspace" ] && [ -d "$workspace" ]; then
-    rm -rf "$workspace"
-  fi
-}
-
-install_release() {
-  tag_name=$1
-  asset_url=$2
-
-  ensure_runtime_dirs
-  release_dir=$(release_dir_for_tag "$tag_name")
-  release_binary="$release_dir/$CURRENT_BINARY_NAME"
-
-  if [ -x "$release_binary" ]; then
-    activate_release "$tag_name" "$release_dir"
-    return 0
-  fi
-
-  workspace=$(mktemp -d "$RUNTIME_DIR/install.XXXXXX") || return 1
-  download_name=$(basename "$asset_url")
-  if [ -z "$download_name" ] || [ "$download_name" = "/" ] || [ "$download_name" = "." ]; then
-    download_name="release.asset"
-  fi
-  download_path="$DOWNLOADS_DIR/$download_name"
-  stage_dir="$workspace/stage"
-
-  rm -f "$download_path" || {
-    cleanup_workspace "$workspace"
-    return 1
-  }
-  mkdir -p "$stage_dir" || {
-    cleanup_workspace "$workspace"
-    return 1
-  }
-  curl -fsSL "$asset_url" -o "$download_path" || {
-    cleanup_workspace "$workspace"
-    return 1
-  }
-
-  case "$download_path" in
-    *.tar.gz)
-      tar -xzf "$download_path" -C "$stage_dir" || {
-        cleanup_workspace "$workspace"
-        return 1
-      }
-      extract_release_binary "$stage_dir" "$stage_dir/$CURRENT_BINARY_NAME" || {
-        cleanup_workspace "$workspace"
-        return 1
-      }
-      ;;
-    *)
-      cp "$download_path" "$stage_dir/$CURRENT_BINARY_NAME" || {
-        cleanup_workspace "$workspace"
-        return 1
-      }
-      chmod +x "$stage_dir/$CURRENT_BINARY_NAME" || {
-        cleanup_workspace "$workspace"
-        return 1
-      }
-      ;;
-  esac
-
-  rm -rf "$release_dir" || {
-    cleanup_workspace "$workspace"
-    return 1
-  }
-  mv "$stage_dir" "$release_dir" || {
-    cleanup_workspace "$workspace"
-    return 1
-  }
-  cleanup_workspace "$workspace"
-
-  activate_release "$tag_name" "$release_dir"
-}
-
-ensure_initial_release() {
-  if load_latest_release; then
-    if install_release "$LATEST_TAG" "$LATEST_ASSET_URL"; then
-      return 0
-    fi
-    log "警告: 安装最新版本失败，尝试使用已有版本继续启动"
-  fi
-
-  [ -x "$(current_binary_path)" ]
-}
-
-restart_managed_service() {
-  supervisorctl -c "$SUPERVISOR_CONF" restart "$SUPERVISOR_PROGRAM_NAME"
-}
-
-update_if_needed() {
-  load_latest_release || {
-    log "检查最新版本失败"
-    return 1
-  }
-
-  installed_tag=$(current_tag)
-  if [ "$LATEST_TAG" = "$installed_tag" ]; then
-    log "当前已是最新版本: $LATEST_TAG"
-    return 0
-  fi
-
-  log "发现新版本: ${installed_tag:-<none>} -> $LATEST_TAG"
-  install_release "$LATEST_TAG" "$LATEST_ASSET_URL" || {
-    log "安装新版本失败: $LATEST_TAG"
-    return 1
-  }
-
-  if [ -n "$installed_tag" ]; then
-    restart_managed_service
-  fi
-}

scripts/update-loop.sh

@@ -1,15 +0,0 @@
-#!/bin/sh
-set -eu
-
-: "${UPDATE_INTERVAL_SECONDS:=3600}"
-: "${RELEASE_COMMON_SH:=/usr/local/bin/release-common.sh}"
-
-. "$RELEASE_COMMON_SH"
-
-while true; do
-  sleep "$UPDATE_INTERVAL_SECONDS"
-  log "开始定时版本检查"
-  if ! update_if_needed; then
-    log "警告: 自动更新检查失败，继续运行当前版本"
-  fi
-done

supervisord.conf

@@ -27,15 +27,3 @@ stdout_logfile=/dev/fd/1
 stdout_logfile_maxbytes=0
 stderr_logfile=/dev/fd/2
 stderr_logfile_maxbytes=0
-
-[program:__UPDATER_PROGRAM__]
-command=/usr/local/bin/update-loop.sh
-autostart=true
-autorestart=true
-startsecs=0
-stopasgroup=true
-killasgroup=true
-stdout_logfile=/dev/fd/1
-stdout_logfile_maxbytes=0
-stderr_logfile=/dev/fd/2
-stderr_logfile_maxbytes=0

tests/no-auto-update.sh

@@ -0,0 +1,62 @@
+#!/bin/sh
+set -eu
+
+REPO_ROOT=$(CDPATH= cd -- "$(dirname "$0")/.." && pwd)
+TMPDIR=$(mktemp -d)
+trap 'rm -rf "$TMPDIR"' EXIT
+
+RUNTIME_DIR="$TMPDIR/runtime"
+SUPERVISOR_CONF="$TMPDIR/supervisord.conf"
+APP_BINARY_PATH="$TMPDIR/app"
+STUB_RELEASE_COMMON="$TMPDIR/release-common.sh"
+TRUE_BIN=$(command -v true)
+
+cat > "$APP_BINARY_PATH" <<'EOF'
+#!/bin/sh
+exit 0
+EOF
+chmod +x "$APP_BINARY_PATH"
+
+cat > "$STUB_RELEASE_COMMON" <<'EOF'
+#!/bin/sh
+
+ensure_runtime_dirs() {
+  mkdir -p "$RUNTIME_DIR"
+}
+
+current_binary_path() {
+  printf '%s\n' "$APP_BINARY_PATH"
+}
+
+ensure_initial_release() {
+  mkdir -p "$RUNTIME_DIR"
+  : > "$RUNTIME_DIR/bootstrap-called"
+  return 0
+}
+EOF
+chmod +x "$STUB_RELEASE_COMMON"
+
+RELEASE_COMMON_SH="$STUB_RELEASE_COMMON" \
+SUPERVISORD_BIN="$TRUE_BIN" \
+SUPERVISOR_CONF_TEMPLATE="$REPO_ROOT/supervisord.conf" \
+SUPERVISOR_CONF="$SUPERVISOR_CONF" \
+RUNTIME_DIR="$RUNTIME_DIR" \
+APP_BINARY_PATH="$APP_BINARY_PATH" \
+SUPERVISOR_PROGRAM_NAME=app \
+SUPERVISOR_UPDATER_PROGRAM_NAME=app-updater \
+sh "$REPO_ROOT/entrypoint.sh" --probe
+
+if [ -e "$RUNTIME_DIR/bootstrap-called" ]; then
+  echo "失败: entrypoint 仍然触发了启动时自动拉取逻辑" >&2
+  exit 1
+fi
+
+if grep -Eq '^\[program:.*-updater\]$' "$SUPERVISOR_CONF"; then
+  echo "失败: supervisord 配置仍然包含 updater 进程" >&2
+  exit 1
+fi
+
+if ! grep -F "exec \"$APP_BINARY_PATH\" '--probe'" "$RUNTIME_DIR/run-app.sh" >/dev/null; then
+  echo "失败: run-app.sh 没有直接执行显式提供的二进制" >&2
+  exit 1
+fi

update-loop.sh

@@ -1,15 +0,0 @@
-#!/bin/sh
-set -eu
-
-: "${UPDATE_INTERVAL_SECONDS:=3600}"
-: "${RELEASE_COMMON_SH:=/usr/local/bin/release-common.sh}"
-
-. "$RELEASE_COMMON_SH"
-
-while true; do
-  sleep "$UPDATE_INTERVAL_SECONDS"
-  log "开始定时版本检查"
-  if ! update_if_needed; then
-    log "警告: 自动更新检查失败，继续运行当前版本"
-  fi
-done