diff --git a/install.sh b/install.sh
index 645f600..138b7d9 100755
--- a/install.sh
+++ b/install.sh
@@ -11,17 +11,56 @@ Service_User="${CLASH_SERVICE_USER:-clash}"
 Service_Group="${CLASH_SERVICE_GROUP:-$Service_User}"
 
 # =========================
-# 彩色输出
+# 彩色输出（统一 printf + 自动降级）
 # =========================
-RED='\033[31m'
-GREEN='\033[32m'
-YELLOW='\033[33m'
-NC='\033[0m'
+# 仅在终端输出时启用颜色（避免重定向到文件时出现乱码）
+if [[ -t 1 ]] && command -v tput >/dev/null 2>&1; then
+  # tput 更兼容；若终端不支持也会返回非 0
+  if tput setaf 1 >/dev/null 2>&1; then
+    C_RED="$(tput setaf 1)"
+    C_GREEN="$(tput setaf 2)"
+    C_YELLOW="$(tput setaf 3)"
+    C_BLUE="$(tput setaf 4)"
+    C_CYAN="$(tput setaf 6)"
+    C_GRAY="$(tput setaf 8 2>/dev/null || true)"   # 有些终端不支持 8
+    C_BOLD="$(tput bold)"
+    C_UL="$(tput smul)"
+    C_NC="$(tput sgr0)"
+  fi
+fi
+
+# fallback：tput 不可用 / 不支持时，走 ANSI（同样只在 TTY）
+if [[ -t 1 ]] && [[ -z "${C_NC:-}" ]]; then
+  C_RED=$'\033[31m'
+  C_GREEN=$'\033[32m'
+  C_YELLOW=$'\033[33m'
+  C_BLUE=$'\033[34m'
+  C_CYAN=$'\033[36m'
+  C_GRAY=$'\033[90m'
+  C_BOLD=$'\033[1m'
+  C_UL=$'\033[4m'
+  C_NC=$'\033[0m'
+fi
+
+# 若非 TTY，彻底禁用
+if [[ ! -t 1 ]]; then
+  C_RED='' C_GREEN='' C_YELLOW='' C_BLUE='' C_CYAN='' C_GRAY='' C_BOLD='' C_UL='' C_NC=''
+fi
+
+# 统一输出函数：不用 echo -e，避免兼容性坑
+log()   { printf "%b\n" "$*"; }
+info()  { log "${C_CYAN}[INFO]${C_NC} $*"; }
+ok()    { log "${C_GREEN}[OK]${C_NC} $*"; }
+warn()  { log "${C_YELLOW}[WARN]${C_NC} $*"; }
+err()   { log "${C_RED}[ERROR]${C_NC} $*"; }
+
+# 常用样式
+path()  { printf "%b" "${C_BOLD}$*${C_NC}"; }
+cmd()   { printf "%b" "${C_GRAY}$*${C_NC}"; }
+url()   { printf "%b" "${C_UL}$*${C_NC}"; }
+good()  { printf "%b" "${C_GREEN}$*${C_NC}"; }
+bad()   { printf "%b" "${C_RED}$*${C_NC}"; }
 
-info()  { echo -e "${GREEN}[INFO]${NC} $*"; }
-ok()    { echo -e "${GREEN}[OK]${NC} $*"; }
-warn()  { echo -e "${YELLOW}[WARN]${NC} $*"; }
-err()   { echo -e "${RED}[ERROR]${NC} $*"; }
 
 # =========================
 # 前置校验
@@ -253,68 +292,78 @@ fi
 # =========================
 # 友好收尾输出（闭环）
 # =========================
-echo
-ok "Clash for Linux 已安装至: ${Install_Dir}"
-echo
+log ""
+ok "Clash for Linux 已安装至: $(path "${Install_Dir}")"
+log ""
 
-echo -e "📦 安装目录：${Install_Dir}"
-echo -e "👤 运行用户：${Service_User}:${Service_Group}"
-echo -e "🔧 服务名称：${Service_Name}.service"
+log "📦 安装目录：$(path "${Install_Dir}")"
+log "👤 运行用户：${Service_User}:${Service_Group}"
+log "🔧 服务名称：${Service_Name}.service"
 
 if command -v systemctl >/dev/null 2>&1; then
-  echo -e "🧷 开机自启：${Service_Enabled}"
-  echo -e "🟢 服务状态：${Service_Started}"
-  echo
-  echo -e "常用命令："
-  echo -e "sudo systemctl status ${Service_Name}.service"
-  echo -e "sudo systemctl restart ${Service_Name}.service"
+  # 状态值可做颜色：enabled/active 绿，其它红
+  se="${Service_Enabled:-unknown}"
+  ss="${Service_Started:-unknown}"
+
+  if [[ "$se" == "enabled" ]]; then se_colored="$(good "$se")"; else se_colored="$(bad "$se")"; fi
+  if [[ "$ss" == "active"  ]]; then ss_colored="$(good "$ss")"; else ss_colored="$(bad "$ss")"; fi
+
+  log "🧷 开机自启：${se_colored}"
+  log "🟢 服务状态：${ss_colored}"
+  log ""
+  log "${C_BOLD}常用命令：${C_NC}"
+  log "  $(cmd "sudo systemctl status ${Service_Name}.service")"
+  log "  $(cmd "sudo systemctl restart ${Service_Name}.service")"
 fi
 
-echo
+log ""
 # 面板地址与 secret（尽量从 .env 推导）
 api_port="$(parse_port "${EXTERNAL_CONTROLLER}")"
 api_host="${EXTERNAL_CONTROLLER%:*}"
+
 # 默认只提示本机访问（更安全）
-if [ -z "$api_host" ] || [ "$api_host" = "$EXTERNAL_CONTROLLER" ]; then
+if [[ -z "$api_host" ]] || [[ "$api_host" == "$EXTERNAL_CONTROLLER" ]]; then
   api_host="127.0.0.1"
 fi
 
-# ---- Secret 展示（脱敏）----
 CONF_DIR="$Install_Dir/conf"
 CONF_FILE="$CONF_DIR/config.yaml"
 
-# 读取 secret（如果 clash 还没生成 config，就先不显示）
+# ---- Secret 展示（脱敏）----
 SECRET_VAL=""
 if wait_secret_ready "$CONF_FILE" 6; then
   SECRET_VAL="$(read_secret_from_config "$CONF_FILE" || true)"
 fi
 
-if [ -n "$SECRET_VAL" ]; then
+dash="http://${api_host}:${api_port}/ui"
+log "🌐 Dashboard：$(url "$dash")"
+
+if [[ -n "$SECRET_VAL" ]]; then
   MASKED="${SECRET_VAL:0:4}****${SECRET_VAL: -4}"
-  echo ""
-  echo -e "🌐 Dashboard：http://${api_host}:${api_port}/ui"
-  echo "🔐 Secret：${MASKED}"
-  echo "   查看完整 Secret：sudo sed -nE 's/^[[:space:]]*secret:[[:space:]]*//p' $CONF_FILE | head -n 1"
+  log "🔐 Secret：${C_YELLOW}${MASKED}${C_NC}"
+  log "   查看完整 Secret：$(cmd "sudo sed -nE 's/^[[:space:]]*secret:[[:space:]]*//p' \"$CONF_FILE\" | head -n 1")"
 else
-  echo ""
-  echo -e "🌐 Dashboard：http://${api_host}:${api_port}/ui"
-  echo "🔐 Secret：启动中暂未读到（稍后再试）"
-  echo "   稍后查看：sudo sed -nE 's/^[[:space:]]*secret:[[:space:]]*//p' $CONF_FILE | head -n 1"
+  log "🔐 Secret：${C_YELLOW}启动中暂未读到（稍后再试）${C_NC}"
+  log "   稍后查看：$(cmd "sudo sed -nE 's/^[[:space:]]*secret:[[:space:]]*//p' \"$CONF_FILE\" | head -n 1")"
 fi
 
-echo
-if [ -n "${CLASH_URL:-}" ]; then
+log ""
+if [[ -n "${CLASH_URL:-}" ]]; then
   ok "订阅地址已配置（CLASH_URL 已写入 .env）"
 else
-  warn "订阅地址未配置：请编辑 ${Install_Dir}/.env 设置 CLASH_URL"
+  warn "订阅地址未配置：请编辑 $(path "${Install_Dir}/.env") 设置 CLASH_URL"
 fi
 
-echo
-echo -e "🧭 下一步（可选）："
-echo -e "  source /etc/profile.d/clash-for-linux.sh"
-echo -e "  proxy_on"
-echo
+log ""
+log "🧭 下一步（可选）："
+log "  $(cmd "source /etc/profile.d/clash-for-linux.sh")"
+log "  $(cmd "proxy_on")"
+log ""
+
+# ---- 启动后快速诊断（可选）----
 sleep 1
-if journalctl -u clash-for-linux.service -n 30 --no-pager | grep -q "Clash订阅地址不可访问"; then
-  echo "[WARN] 服务启动失败：订阅不可用，请检查 CLASH_URL（可能过期/404）。"
+if command -v journalctl >/dev/null 2>&1; then
+  if journalctl -u "${Service_Name}.service" -n 50 --no-pager 2>/dev/null | grep -q "Clash订阅地址不可访问"; then
+    warn "服务启动异常：订阅不可用，请检查 CLASH_URL（可能过期/404/被墙）。"
+  fi
 fi