@sogood360/openpartner 1.5.4

package/bin/openpartner-init-ui.js

@@ -0,0 +1,37 @@
+#!/usr/bin/env node
+// openpartner-init-ui bin shim（OpenTUI init 向导入口，设计 §4.3）
+// 按平台 resolve optionalDependencies 子包内的 bun compile 单文件并 exec
+const { spawn } = require("child_process");
+const os = require("os");
+
+const PLATFORMS = {
+  "win32-x64": "@sogood360/init-ui-win32-x64/bin/openpartner-init-ui.exe",
+  "linux-x64": "@sogood360/init-ui-linux-x64/bin/openpartner-init-ui",
+};
+
+const key = `${os.platform()}-${os.arch()}`;
+const rel = PLATFORMS[key];
+if (!rel) {
+  console.error(`[openpartner-init-ui] 不支持的平台: ${key}（当前仅支持 win32-x64 / linux-x64）`);
+  process.exit(1);
+}
+
+let bin;
+try {
+  bin = require.resolve(rel);
+} catch (e) {
+  console.error(
+    `[openpartner-init-ui] 平台子包未安装: ${rel.split("/bin/")[0]}\n` +
+    `  可能 optionalDependencies 被跳过（--no-optional）。请重新安装：npm i -g @sogood360/openpartner`
+  );
+  process.exit(1);
+}
+
+const child = spawn(bin, process.argv.slice(2), { stdio: "inherit" });
+child.on("exit", (code, signal) => {
+  if (signal) {
+    process.kill(process.pid, signal);
+  } else {
+    process.exit(code ?? 0);
+  }
+});

package/bin/openpartner.js

@@ -0,0 +1,37 @@
+#!/usr/bin/env node
+// openpartner bin shim（esbuild 分发模式，设计 §3.2）
+// 按平台 resolve optionalDependencies 子包内的 Nuitka onefile 二进制并 exec
+const { spawn } = require("child_process");
+const os = require("os");
+
+const PLATFORMS = {
+  "win32-x64": "@sogood360/server-win32-x64/bin/openpartner-server.exe",
+  "linux-x64": "@sogood360/server-linux-x64/bin/openpartner-server",
+};
+
+const key = `${os.platform()}-${os.arch()}`;
+const rel = PLATFORMS[key];
+if (!rel) {
+  console.error(`[openpartner] 不支持的平台: ${key}（当前仅支持 win32-x64 / linux-x64）`);
+  process.exit(1);
+}
+
+let bin;
+try {
+  bin = require.resolve(rel);
+} catch (e) {
+  console.error(
+    `[openpartner] 平台子包未安装: ${rel.split("/bin/")[0]}\n` +
+    `  可能 optionalDependencies 被跳过（--no-optional）。请重新安装：npm i -g @sogood360/openpartner`
+  );
+  process.exit(1);
+}
+
+const child = spawn(bin, process.argv.slice(2), { stdio: "inherit" });
+child.on("exit", (code, signal) => {
+  if (signal) {
+    process.kill(process.pid, signal);
+  } else {
+    process.exit(code ?? 0);
+  }
+});

package/package.json

@@ -0,0 +1,40 @@
+{
+  "name": "@sogood360/openpartner",
+  "version": "1.5.4",
+  "description": "企业级 AI 平台 - 员工工作台 / 协作平台 / 业务沉淀 / 自动化运行 (Windows/Linux)",
+  "license": "UNLICENSED",
+  "private": false,
+  "bin": {
+    "openpartner": "bin/openpartner.js",
+    "openpartner-init-ui": "bin/openpartner-init-ui.js"
+  },
+  "scripts": {
+    "postinstall": "node postinstall.js"
+  },
+  "files": [
+    "bin/openpartner.js",
+    "bin/openpartner-init-ui.js",
+    "postinstall.js",
+    "packages/README.md",
+    "packages/README.zh-CN.md"
+  ],
+  "optionalDependencies": {
+    "@sogood360/server-win32-x64": "1.5.3",
+    "@sogood360/server-linux-x64": "1.5.3",
+    "@sogood360/init-ui-win32-x64": "1.5.3",
+    "@sogood360/init-ui-linux-x64": "1.5.3"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "keywords": [
+    "ai-agent",
+    "agent-platform",
+    "enterprise-ai",
+    "workflow-automation",
+    "collaboration",
+    "internal-tools",
+    "multi-tenant",
+    "openpartner"
+  ]
+}

package/packages/README.md

@@ -0,0 +1,279 @@
+# OpenPartner
+
+**Songguo Technology Co., Ltd.**
+
+OpenPartner is an enterprise-grade AI agent platform built by Songguo. It serves as the daily AI workbench for employees, the collaboration hub for teams, and the platform where business and data assets continuously accumulate and evolve. Every process and output is fully auditable, and all data stays within the enterprise.
+
+---
+
+## Platform support
+
+| Item | Details |
+|---|---|
+| Operating system | Windows x64 ✅ · Linux x64 ✅ |
+| Architecture | x86_64 (Intel / AMD) |
+| Container runtime | Docker (Docker Desktop on Windows, Docker Engine 20.10+ on Linux) |
+| Database | MySQL 8.0+ (including MariaDB 10.6+) |
+| Browser | Chrome / Edge / Firefox / Safari, recent two years |
+| Minimum memory | 4 GB (excluding per-user agent containers) |
+| Network | Single-host install needs no public network; multi-cell deployments require intranet reachability between cells |
+
+> **Not supported:** macOS (any architecture), Linux arm64, 32-bit systems. The platform packages declare `os:["win32"]` / `os:["linux"]` and `cpu:["x64"]`, so an unsupported platform would install an empty wrapper that errors out with "unsupported platform".
+
+
+
+## Installation
+
+### Prerequisites
+
+```bash
+# 1. Docker (required)
+docker version          # confirm both Client and Server are present
+# Windows: install and start Docker Desktop
+# Linux:   sudo apt install docker.io && sudo systemctl enable --now docker
+
+# 2. MySQL 8.0+ (required, can be remote)
+mysql --version
+```
+
+### One-line install
+
+```bash
+npm i -g @sogood360/openpartner@beta      # beta phase private build (UNLICENSED, internal testing only)
+```
+
+> Currently in beta (v1.5.x). The `license` field in package.json is `UNLICENSED`; this is **not a public release**. See `doc/npm发布说明.md` §7 (License roadmap) for the path to MIT.
+
+After installation, two commands are available:
+
+| Command | Description |
+|---|---|
+| `openpartner` | Backend service and CLI (`init` / `start` / `stop` / `status` / `version`) |
+| `openpartner-init-ui` | Guided TUI initializer (**must be run in a real TTY terminal**) |
+
+> ⚠️ `openpartner-init-ui` is a TUI application — run it in Windows Terminal, PowerShell, or a real SSH shell. Git Bash and many IDE integrated terminals exit immediately because `stdio.isTTY === false` is `false`.
+
+### Initialization
+
+**Option A: guided TUI (recommended)**
+
+```bash
+openpartner-init-ui
+```
+
+The wizard walks through: environment probe → Docker connection → MySQL initialization → image pull → frontend container creation → config generation → admin password.
+
+**Option B: command line**
+
+```bash
+openpartner init                          # interactive
+openpartner init --from-json params.json  # driven by a JSON config
+```
+
+### Start
+
+```bash
+openpartner start     # start in the background
+```
+
+### Access
+
+Open the URL shown at the end of initialization in your browser (default: <http://localhost:9620>).
+
+**Default admin account: `admin` / `admin`** — change it immediately under *User Management* on first login.
+
+### File layout
+
+| Platform | Configuration | Data |
+|---|---|---|
+| Linux | `/etc/openpartner/config.yaml` | `<workspace.root>` (default `/var/lib/openpartner/workspace`) |
+| Windows | `%ProgramData%\openpartner\config.yaml` | `D:\openpartner\workspace` |
+
+Each user gets their own subdirectory at `<workspace.root>/user_<id>/`, bind-mounted into the agent container at `/workspace/user_space`.
+
+---
+
+## JSON configuration
+
+Both the TUI wizard and `openpartner init --from-json` accept the same JSON parameter file. It is the recommended way to drive **unattended, automated deployment**.
+
+### Full example
+
+```json
+{
+  "server":   { "port": 3001 },
+  "frontend": { "port": 9620 },
+
+  "docker": {
+    "host": "unix:///var/run/docker.sock",
+    "tls": { "ca": "", "cert": "", "key": "" }
+  },
+
+  "database": {
+    "host": "127.0.0.1",
+    "port": 3306,
+    "user": "root",
+    "password": "your-password",
+    "name": "openpartner"
+  },
+
+  "workspace": { "root": "/var/lib/openpartner/workspace" },
+
+  "images": {
+    "frontend": "sogood360/openpartner-frontend:1.5.1",
+    "agent":    "sogood360/openpartner-agent:1.5.1"
+  },
+
+  "cell": {
+    "id":   "cell_a",
+    "name": "Primary",
+    "cell_url": "http://127.0.0.1:3001",
+    "region": "",
+    "zone": ""
+  },
+
+  "mode": "primary",
+
+  "public_base_url": "http://localhost:9620",
+
+  "secrets": {
+    "jwt_secret":      "",
+    "encryption_key":  "",
+    "encryption_salt": "",
+    "internal_token":  ""
+  },
+
+  "admin": { "password": "change-me-now" },
+
+  "actions": {
+    "pull_images":              true,
+    "create_frontend_container": true,
+    "register_autostart":       true,
+    "reset_db":                 false
+  }
+}
+```
+### Field reference
+
+#### `server` — backend listener
+
+| Key | Type | Default | Description |
+|---|---|---|---|
+| `port` | int | `3001` | Port the backend API listens on |
+
+#### `frontend` — frontend container
+
+| Key | Type | Default | Description |
+|---|---|---|---|
+| `port` | int | `9620` | External port for the frontend container (also used for port mapping and `public_base_url` fallback calculation) |
+
+#### `docker` — container runtime
+
+| Key | Type | Default | Description |
+|---|---|---|---|
+| `host` | string | platform default | Docker endpoint. Linux defaults to `unix:///var/run/docker.sock`; for remote Docker use `tcp://host:2376` |
+| `tls` | object | none | Mutual TLS certificate for remote Docker; enabled only when all three fields are filled |
+
+#### `database` — MySQL
+
+| Key | Type | Default | Description |
+|---|---|---|---|
+| `host` | string | `127.0.0.1` | Database host. In multi-cell deployments, secondary cells use the primary's intranet address |
+| `port` | int | `3306` | Database port |
+| `user` | string | `root` | Database user |
+| `password` | string | empty | Database password. Leave empty to be prompted interactively by the wizard |
+| `name` | string | `openpartner` | Database name. An existing database is preserved (unless `actions.reset_db = true`) |
+
+#### `workspace` — user workspaces
+
+| Key | Type | Default | Description |
+|---|---|---|---|
+| `root` | string | platform default | Root directory for user workspaces. One `user_<id>/` subdirectory per user. **Must reside on a path the Docker host can bind-mount** |
+
+#### `images` — images
+
+| Key | Type | Default | Description |
+|---|---|---|---|
+| `frontend` | string | tag for current version | Full frontend image reference. Empty falls back to the built-in default |
+| `agent` | string | tag for current version | Full agent image reference. Empty falls back to the built-in default |
+
+> These two images are pulled during initialization. **At runtime**, the version of `agent` actually used by user containers is controlled by the per-cell *Agent image version* policy in Node Management (lock to a specific version or *follow latest*) — not by this field.
+
+#### `cell` — node identity
+
+| Key | Type | Default | Description |
+|---|---|---|---|
+| `id` | string | `cell_a` | Node ID, in the form `cell_<short-id>`. **Must be unique within a cluster** |
+| `name` | string | same as `id` | Display name |
+| `cell_url` | string | `http://127.0.0.1:<server.port>` | Address reachable by browsers and other cells. **Never use `0.0.0.0`** |
+| `region` | string | empty | Datacenter tag (optional) |
+| `zone` | string | empty | Availability-zone tag (optional) |
+
+#### `mode` — deployment role
+
+| Value | Description |
+|---|---|
+| `primary` | Primary node: creates the database, the admin user, and writes `jwt_secret` |
+| `secondary` | Secondary node: joins an existing cluster after checking that the cell ID is unique; shares the primary's database and secrets |
+| `auto` (default) | If a node record already exists in the database, treat as `secondary`; otherwise treat as `primary` |
+
+Multi-cell: the primary node uses `primary`, every other node uses `secondary` and points at the same `database` and `secrets`.
+
+#### `public_base_url` / `primary_public_url` / `container_api_url`
+
+| Key | Description |
+|---|---|
+| `public_base_url` | **URL that users type into the browser's address bar**. If empty, derived from `cell_url`'s hostname plus `frontend.port` |
+| `primary_public_url` | Used when a `secondary` cell is initialized; specifies the primary's browser URL so cross-cell WebSocket connections are allowed in `ws_allowed_origins` |
+| `container_api_url` | Address used by user containers to reach the backend. If empty, the platform picks one automatically |
+
+#### `secrets` — secrets
+
+| Key | Description |
+|---|---|
+| `jwt_secret` | Signing key for login tokens. **Empty generates a fresh one**; in multi-cell deployments, every cell must agree on the same value |
+| `encryption_key` | Encryption key for AI provider API keys stored in the database. Empty generates a fresh one |
+| `encryption_salt` | Salt for the same encryption. Empty generates a fresh one |
+| `internal_token` | Token used between the backend and user containers. Empty generates a fresh one |
+
+> ⚠️ Once `encryption_key` + `encryption_salt` are written into the database, they **must not be changed** — changing either will make every stored AI provider key undecryptable and require re-entry. For production, specify them explicitly and back them up.
+
+#### `admin` — administrator
+
+| Key | Description |
+|---|---|
+| `password` | Initial admin password. Empty keeps the built-in default `admin` (**only suitable for local testing**) |
+
+#### `actions` — execution actions
+
+| Key | Default | Description |
+|---|---|---|
+| `pull_images` | `true` | Whether to pull frontend and agent images from the registry. Set `false` for offline installs (after pre-loading images with `docker load`) |
+| `create_frontend_container` | `true` | Whether to create the frontend container |
+| `register_autostart` | `true` | Whether to register the service for autostart on boot |
+| `reset_db` | `false` | ⚠️ **Drops and rebuilds the database**. Deletes all users, sessions, and workspace configuration. Use only when an explicit reset is intended |
+
+### Parameter precedence
+
+From lowest to highest (later overrides earlier):
+
+```
+built-in defaults  <  existing config.yaml  <  --from-json file  <  environment variables
+```
+
+Only keys **explicitly present** in the JSON override the defaults; anything else is inherited from the layer above.
+
+### Usage examples
+
+```bash
+# Initialize from a file
+openpartner init --from-json ./params.json
+
+# Automated deployment (CI / batch rollout)
+openpartner init --from-json ./params.json --non-interactive
+openpartner start
+```
+
+---
+
+Songguo Technology Co., Ltd.

package/packages/README.zh-CN.md

@@ -0,0 +1,279 @@
+# OpenPartner
+
+**深圳市松粿科技有限公司**
+
+OpenPartner 是松粿科技推出的企业级 AI 智能体平台。它是员工的日常 AI 工作台，也是团队的协作平台，企业业务资产与数据资产的沉淀演进平台；所有过程与产出全程留痕，数据不出企业。
+
+---
+
+## 平台支持
+
+| 项 | 支持情况 |
+|---|---|
+| 操作系统 | Windows x64 ✅ · Linux x64 ✅ |
+| 架构 | x86_64（Intel / AMD） |
+| 容器运行时 | Docker（Windows 需 Docker Desktop，Linux 需 Docker Engine 20.10+） |
+| 数据库 | MySQL 8.0+（含 MariaDB 10.6+） |
+| 浏览器 | Chrome / Edge / Firefox / Safari 近两年版本 |
+| 最低内存 | 4 GB（不含用户智能体容器） |
+| 网络 | 单机部署免公网；多节点需节点间内网互通 |
+
+> **不支持：** macOS（任何架构）、Linux arm64、32 位系统。子包声明了 `os:["win32"]` / `os:["linux"]` 与 `cpu:["x64"]`，不匹配的系统会装到空 wrapper，运行时直接报 "unsupported platform"。
+
+
+## 安装说明
+
+### 前置条件
+
+```bash
+# 1. Docker（必需）
+docker version          # 确认 Client + Server 都在
+# Windows: 安装 Docker Desktop 并启动
+# Linux:   sudo apt install docker.io && sudo systemctl enable --now docker
+
+# 2. MySQL 8.0+（必需，可为远程）
+mysql --version
+```
+
+### 一条命令安装
+
+```bash
+npm i -g @sogood360/openpartner@beta      # beta 阶段私有版本（UNLICENSED，仅供内部测试）
+```
+
+> 当前处于 beta 阶段（v1.5.x），package.json `license` 字段为 `UNLICENSED`，**不构成面向公众的正式发布**。详见 `doc/npm发布说明.md` §7 License 路线图。
+
+安装后得到两个命令：
+
+| 命令 | 说明 |
+|---|---|
+| `openpartner` | 后端服务与命令行工具（`init` / `start` / `stop` / `status` / `version`） |
+| `openpartner-init-ui` | 图形化初始化向导（**需在真实终端 TTY 里运行**） |
+
+> ⚠️ `openpartner-init-ui` 是 TUI 界面，请在 Windows Terminal / PowerShell / 真正的 SSH shell 里运行。在 Git Bash 或某些 IDE 内置终端里会因为 `stdio.isTTY === false` 直接退出。
+
+### 初始化
+
+**方式 A：图形化向导（推荐）**
+
+```bash
+openpartner-init-ui
+```
+
+按提示依次完成：环境探测 → Docker 连接 → MySQL 初始化 → 拉取镜像 → 创建前端容器 → 生成配置 → 设置管理员密码。
+
+**方式 B：命令行**
+
+```bash
+openpartner init                          # 交互式
+openpartner init --from-json params.json  # 按 JSON 配置
+```
+
+### 启动
+
+```bash
+openpartner start     # 后台启动
+```
+
+### 访问
+
+浏览器打开初始化时提示的地址（默认 <http://localhost:9620>）。
+
+**默认管理员账号：`admin` / `admin`** —— 首次登录后请立即在「用户管理」中修改密码。
+
+### 目录约定
+
+| 平台 | 配置 | 数据 |
+|---|---|---|
+| Linux | `/etc/openpartner/config.yaml` | `<workspace.root>`（默认 `/var/lib/openpartner/workspace`） |
+| Windows | `%ProgramData%\openpartner\config.yaml` | `D:\openpartner\workspace` |
+
+用户工作空间按 `<workspace.root>/user_<id>/` 划分，用户容器内挂载到 `/workspace/user_space`。
+
+---
+
+## JSON 配置说明
+
+初始化向导和 `openpartner init --from-json` 都接受同一份 JSON 参数文件，用于**无人工干预的自动化部署**。
+
+### 完整示例
+
+```json
+{
+  "server":   { "port": 3001 },
+  "frontend": { "port": 9620 },
+
+  "docker": {
+    "host": "unix:///var/run/docker.sock",
+    "tls": { "ca": "", "cert": "", "key": "" }
+  },
+
+  "database": {
+    "host": "127.0.0.1",
+    "port": 3306,
+    "user": "root",
+    "password": "your-password",
+    "name": "openpartner"
+  },
+
+  "workspace": { "root": "/var/lib/openpartner/workspace" },
+
+  "images": {
+    "frontend": "sogood360/openpartner-frontend:1.5.1",
+    "agent":    "sogood360/openpartner-agent:1.5.1"
+  },
+
+  "cell": {
+    "id":   "cell_a",
+    "name": "主节点",
+    "cell_url": "http://127.0.0.1:3001",
+    "region": "",
+    "zone": ""
+  },
+
+  "mode": "primary",
+
+  "public_base_url": "http://localhost:9620",
+
+  "secrets": {
+    "jwt_secret":      "",
+    "encryption_key":  "",
+    "encryption_salt": "",
+    "internal_token":  ""
+  },
+
+  "admin": { "password": "change-me-now" },
+
+  "actions": {
+    "pull_images":              true,
+    "create_frontend_container": true,
+    "register_autostart":       true,
+    "reset_db":                 false
+  }
+}
+```
+
+### 字段说明
+
+#### `server` —— 后端监听
+
+| 键 | 类型 | 默认 | 说明 |
+|---|---|---|---|
+| `port` | int | `3001` | 后端 API 监听端口 |
+
+#### `frontend` —— 前端容器
+
+| 键 | 类型 | 默认 | 说明 |
+|---|---|---|---|
+| `port` | int | `9620` | 前端容器对外端口（同时用于端口映射与 `public_base_url` 兜底计算） |
+
+#### `docker` —— 容器运行时
+
+| 键 | 类型 | 默认 | 说明 |
+|---|---|---|---|
+| `host` | string | 平台默认 | Docker endpoint。Linux 默认 `unix:///var/run/docker.sock`；远程 Docker 填 `tcp://host:2376` |
+| `tls` | object | 无 | 远程 Docker 的双向 TLS 证书，三项都填才启用 |
+
+#### `database` —— MySQL
+
+| 键 | 类型 | 默认 | 说明 |
+|---|---|---|---|
+| `host` | string | `127.0.0.1` | 数据库地址。多节点部署时子节点填主节点内网地址 |
+| `port` | int | `3306` | 数据库端口 |
+| `user` | string | `root` | 数据库账号 |
+| `password` | string | 空 | 数据库密码。留空时向导会交互询问 |
+| `name` | string | `openpartner` | 库名。已存在的库不会被清空（除非 `actions.reset_db = true`） |
+
+#### `workspace` —— 工作空间
+
+| 键 | 类型 | 默认 | 说明 |
+|---|---|---|---|
+| `root` | string | 平台默认 | 用户工作空间根目录。每个用户一个 `user_<id>/` 子目录。**必须落在 Docker 宿主可 bind mount 的路径上** |
+
+#### `images` —— 镜像
+
+| 键 | 类型 | 默认 | 说明 |
+|---|---|---|---|
+| `frontend` | string | 当前版本对应 tag | 前端镜像完整引用。留空用内置默认 |
+| `agent` | string | 当前版本对应 tag | 智能体镜像完整引用。留空用内置默认 |
+
+> 初始化时拉取这两个镜像。**运行期**用户容器用哪个 agent 版本，由节点管理里的「智能体镜像版本」策略决定（可锁定版本或跟随最新），不由此处决定。
+
+#### `cell` —— 节点标识
+
+| 键 | 类型 | 默认 | 说明 |
+|---|---|---|---|
+| `id` | string | `cell_a` | 节点 ID，格式 `cell_<短标识>`。**同一集群内不可重复** |
+| `name` | string | 同 `id` | 节点显示名 |
+| `cell_url` | string | `http://127.0.0.1:<server.port>` | 浏览器/其它节点可达的地址。**不能用 `0.0.0.0`** |
+| `region` | string | 空 | 机房标签（可选） |
+| `zone` | string | 空 | 可用区标签（可选） |
+
+#### `mode` —— 部署角色
+
+| 值 | 说明 |
+|---|---|
+| `primary` | 主节点：建库、创建管理员、生成并写入 `jwt_secret` |
+| `secondary` | 子节点：校验节点 ID 不冲突后入网，共用主节点的数据库与密钥 |
+| `auto`（默认） | 库中已有节点记录 → 按 `secondary` 处理；否则按 `primary` |
+
+多节点部署：主节点 `primary`，其余节点 `secondary` 并连同一套 `database` 与 `secrets`。
+
+#### `public_base_url` / `primary_public_url` / `container_api_url`
+
+| 键 | 说明 |
+|---|---|
+| `public_base_url` | **浏览器地址栏里输入的地址**（用户视角的入口）。留空时由 `cell_url` 的主机名 + `frontend.port` 兜底推算 |
+| `primary_public_url` | 子节点 `secondary` 部署时填主节点的浏览器入口，用于放行跨节点 WebSocket |
+| `container_api_url` | 用户容器访问后端的地址。留空由平台按平台自动推导 |
+
+#### `secrets` —— 密钥
+
+| 键 | 说明 |
+|---|---|
+| `jwt_secret` | 登录令牌签名密钥。**留空自动生成**；多节点必须显式统一 |
+| `encryption_key` | 供应商 API Key 的加密密钥。留空自动生成 |
+| `encryption_salt` | 加密盐值。留空自动生成 |
+| `internal_token` | 后端与用户容器之间的内部通信令牌。留空自动生成 |
+
+> ⚠️ `encryption_key` + `encryption_salt` 一旦确定并写入数据库，**之后不可更改** —— 改了会导致已存的所有 AI 供应商密钥无法解密，必须重新录入。生产环境请显式指定并妥善备份。
+
+#### `admin` —— 管理员
+
+| 键 | 说明 |
+|---|---|
+| `password` | 管理员初始密码。留空则保留内置默认 `admin`（**仅建议本地测试使用**） |
+
+#### `actions` —— 执行动作
+
+| 键 | 默认 | 说明 |
+|---|---|---|
+| `pull_images` | `true` | 是否从镜像仓库拉取前端与智能体镜像。离线环境设 `false`（需事先 `docker load`） |
+| `create_frontend_container` | `true` | 是否创建前端容器 |
+| `register_autostart` | `true` | 是否注册开机自启 |
+| `reset_db` | `false` | ⚠️ **清空并重建数据库**。会删除所有用户、会话、工作空间配置。仅在明确要重置时使用 |
+
+### 参数优先级
+
+从低到高（后者覆盖前者）：
+
+```
+内置默认值  <  已有 config.yaml  <  --from-json 指定文件  <  环境变量
+```
+
+只有 JSON 中**显式出现**的键才会覆盖默认值，未出现的沿用上层。
+
+### 使用示例
+
+```bash
+# 从文件初始化
+openpartner init --from-json ./params.json
+
+# 自动化部署（CI / 批量装机）
+openpartner init --from-json ./params.json --non-interactive
+openpartner start
+```
+
+---
+
+深圳市松粿科技有限公司

package/postinstall.js

@@ -0,0 +1,60 @@
+#!/usr/bin/env node
+const fs = require("fs");
+const path = require("path");
+
+const PLATFORMS = {
+  "win32-x64": [
+    ["@sogood360/server-win32-x64", "bin/openpartner-server.exe"],
+    ["@sogood360/init-ui-win32-x64", "bin/openpartner-init-ui.exe"],
+  ],
+  "linux-x64": [
+    ["@sogood360/server-linux-x64", "bin/openpartner-server"],
+    ["@sogood360/init-ui-linux-x64", "bin/openpartner-init-ui"],
+  ],
+};
+
+const key = `${process.platform}-${process.arch}`;
+const want = PLATFORMS[key];
+
+if (!want) {
+  console.warn(`[openpartner] 不支持的平台: ${key}（当前仅支持 win32-x64 / linux-x64）`);
+  process.exit(0);
+}
+
+function resolveBin(pkg, rel) {
+  try {
+    const pkgJson = require.resolve(`${pkg}/package.json`, { paths: [__dirname] });
+    const bin = path.join(path.dirname(pkgJson), rel);
+    return fs.existsSync(bin) ? bin : null;
+  } catch {
+    return null;
+  }
+}
+
+const missing = [];
+for (const [pkg, rel] of want) {
+  const bin = resolveBin(pkg, rel);
+  if (!bin) {
+    missing.push(pkg);
+    continue;
+  }
+  if (process.platform !== "win32") {
+    try {
+      fs.chmodSync(bin, 0o755);
+    } catch (e) {
+      console.error(`[openpartner] chmod +x 失败: ${bin} (${e.message})`);
+      process.exit(1);
+    }
+  }
+}
+
+if (missing.length) {
+  console.error(`[openpartner] 平台子包未安装: ${missing.join(", ")}`);
+  console.error("[openpartner] 可能 optionalDependencies 被跳过（--no-optional / omit=optional）");
+  console.error("[openpartner] 请重新安装: npm i -g @sogood360/openpartner --include=optional");
+  process.exit(1);
+}
+
+console.log("[openpartner] 安装完成，可用命令:");
+console.log("  openpartner           后端服务 + CLI");
+console.log("  openpartner-init-ui   初始化向导");