chore: stop tracking opinion doc and one-click deploy scripts

Co-authored-by: Cursor <cursoragent@cursor.com>

scripts/lib-aijz-deploy.sh

@@ -1,441 +0,0 @@
-# shellcheck shell=bash
-# AI 建站 Linux 部署公共函数。由 start/restart/stop/pull-and-restart 在 ROOT 下 source。
-
-run_sudo() {
-  if [ "$(id -u)" -eq 0 ]; then
-    "$@"
-  else
-    sudo "$@"
-  fi
-}
-
-ensure_runtime_dirs() {
-  mkdir -p "$ROOT/.runtime/pgdata" "$ROOT/.runtime/uploads" "$ROOT/.runtime/logs" \
-    "$ROOT/.runtime/logs/generate" "$ROOT/web/dist"
-}
-
-ensure_env_file() {
-  if [ ! -f "$ROOT/.env" ]; then
-    if [ -f "$ROOT/.env.example" ]; then
-      cp "$ROOT/.env.example" "$ROOT/.env"
-      echo "已从 .env.example 创建 .env，请按需填写 API Key。"
-    else
-      cat >"$ROOT/.env" <<'EOF'
-LLM_PROVIDER=deepseek
-DEEPSEEK_API_KEY=
-MINIMAX_API_KEY=
-EOF
-      echo "已创建默认 .env"
-    fi
-  fi
-  sed -i 's/\r$//' "$ROOT/.env" 2>/dev/null || true
-  # 供 compose 变量替换与本脚本健康检查使用
-  set -a
-  # shellcheck disable=SC1091
-  [ -f "$ROOT/.env" ] && . "$ROOT/.env"
-  set +a
-  export AIJZ_WEB_PUBLISH="${AIJZ_WEB_PUBLISH:-127.0.0.1:5173}"
-  export AIJZ_GATEWAY_PUBLISH="${AIJZ_GATEWAY_PUBLISH:-127.0.0.1:8180}"
-  export AIJZ_PLATFORM_PUBLISH="${AIJZ_PLATFORM_PUBLISH:-127.0.0.1:8888}"
-  export AIJZ_AI_PUBLISH="${AIJZ_AI_PUBLISH:-127.0.0.1:8001}"
-  export AIJZ_PG_PUBLISH="${AIJZ_PG_PUBLISH:-127.0.0.1:5432}"
-  export AIJZ_ENABLE_HOST_NGINX="${AIJZ_ENABLE_HOST_NGINX:-0}"
-  export AIJZ_DOMAIN="${AIJZ_DOMAIN:-}"
-  export AIJZ_PUBLIC_BASE_URL="${AIJZ_PUBLIC_BASE_URL:-}"
-}
-
-# 若 .env 设了 AIJZ_PUBLIC_BASE_URL，同步到 platform.docker.yaml（挂载文件，restart platform 即生效）
-apply_public_base_url() {
-  local base="${AIJZ_PUBLIC_BASE_URL:-}"
-  local pf="$ROOT/platform/etc/platform.docker.yaml"
-  [ -n "$base" ] || return 0
-  [ -f "$pf" ] || return 0
-  base="${base%/}"
-  local storage_base="${base}/api/v1/storage"
-  if grep -q '^PublicBaseURL:' "$pf"; then
-    sed -i "s|^PublicBaseURL:.*|PublicBaseURL: \"${base}\"|" "$pf"
-  fi
-  if grep -q '^  PublicBase:' "$pf"; then
-    sed -i "s|^  PublicBase:.*|  PublicBase: \"${storage_base}\"|" "$pf"
-  fi
-  echo "已同步 PublicBaseURL -> ${base}（platform/etc/platform.docker.yaml）"
-}
-
-sync_ssl_certs() {
-  local domain="${AIJZ_DOMAIN:-}"
-  [ -n "$domain" ] || return 0
-  local ssl_dir="/etc/ssl/aijianzhan/$domain"
-  run_sudo mkdir -p "$ssl_dir"
-  if [ -f "$ROOT/nginx/$domain.pem" ] && [ -f "$ROOT/nginx/$domain.key" ]; then
-    run_sudo cp -f "$ROOT/nginx/$domain.pem" "$ssl_dir/fullchain.pem"
-    run_sudo cp -f "$ROOT/nginx/$domain.key" "$ssl_dir/privkey.pem"
-  elif [ -f "$ROOT/nginx/fullchain.pem" ] && [ -f "$ROOT/nginx/privkey.pem" ]; then
-    run_sudo cp -f "$ROOT/nginx/fullchain.pem" "$ROOT/nginx/privkey.pem" "$ssl_dir/"
-  elif [ -f "$ROOT/nginx/$domain/fullchain.pem" ] && [ -f "$ROOT/nginx/$domain/privkey.pem" ]; then
-    run_sudo cp -f "$ROOT/nginx/$domain/fullchain.pem" "$ROOT/nginx/$domain/privkey.pem" "$ssl_dir/"
-  else
-    echo "提示: 未找到 nginx/ 下证书，宿主机 HTTPS 需手动放入 $ssl_dir" >&2
-    return 0
-  fi
-  run_sudo chmod 644 "$ssl_dir/fullchain.pem" 2>/dev/null || true
-  run_sudo chmod 600 "$ssl_dir/privkey.pem" 2>/dev/null || true
-  echo "证书已同步 -> $ssl_dir"
-}
-
-host_nginx_online() {
-  command -v systemctl >/dev/null 2>&1 || return 1
-  systemctl is-active nginx >/dev/null 2>&1 && return 0
-  systemctl is-active nginx.service >/dev/null 2>&1 && return 0
-  return 1
-}
-
-ensure_host_nginx_started() {
-  command -v nginx >/dev/null 2>&1 || {
-    echo "错误: 未安装 nginx，无法启用 AIJZ_ENABLE_HOST_NGINX" >&2
-    exit 1
-  }
-  if host_nginx_online; then
-    return 0
-  fi
-  echo "宿主机 Nginx 未在线，尝试启动..."
-  run_sudo systemctl start nginx 2>/dev/null || run_sudo systemctl start nginx.service
-  run_sudo systemctl enable nginx 2>/dev/null || true
-  host_nginx_online || {
-    echo "错误: 无法启动宿主机 nginx" >&2
-    exit 1
-  }
-}
-
-install_host_nginx_site_conf() {
-  local domain="${AIJZ_DOMAIN:-}"
-  [ -n "$domain" ] || return 0
-  [ "${AIJZ_ENABLE_HOST_NGINX:-0}" = "1" ] || return 0
-  local tpl="$ROOT/nginx/aijz.host.conf"
-  local out="/etc/nginx/conf.d/aijz_${domain}.conf"
-  local web_port
-  web_port="$(publish_host_port "${AIJZ_WEB_PUBLISH:-127.0.0.1:5173}")"
-  [ -f "$tpl" ] || {
-    echo "未找到 $tpl，跳过宿主机 Nginx 配置" >&2
-    return 0
-  }
-  mkdir -p "$ROOT/verify-root"
-  sync_ssl_certs
-  sed -e "s|__DOMAIN__|${domain}|g" \
-      -e "s|__WEB_PORT__|${web_port}|g" \
-      -e "s|__VERIFY_ROOT__|${ROOT}/verify-root|g" \
-      "$tpl" | run_sudo tee "$out" >/dev/null
-  if ! run_sudo nginx -t 2>/dev/null; then
-    echo "错误: nginx -t 失败，请检查 $out" >&2
-    exit 1
-  fi
-  if host_nginx_online; then
-    run_sudo systemctl reload nginx 2>/dev/null && echo "宿主机 Nginx 已重载（$out）"
-  else
-    ensure_host_nginx_started
-  fi
-}
-
-reload_web_nginx() {
-  local cid
-  cid="$(compose_cmd ps -q web 2>/dev/null | head -1)"
-  if [ -z "$cid" ]; then
-    echo "web 容器未运行，跳过 reload" >&2
-    return 1
-  fi
-  run_sudo docker exec "$cid" nginx -t >/dev/null 2>&1 || {
-    echo "错误: 容器内 nginx -t 失败" >&2
-    return 1
-  }
-  run_sudo docker exec "$cid" nginx -s reload
-  echo "web 容器 nginx 已 reload（web/nginx.conf）"
-}
-
-restart_service() {
-  local svc="$1"
-  compose_cmd restart "$svc"
-  echo "已 restart $svc"
-}
-
-reload_host_nginx() {
-  [ "${AIJZ_ENABLE_HOST_NGINX:-0}" = "1" ] || {
-    echo "AIJZ_ENABLE_HOST_NGINX 未启用，跳过宿主机 Nginx" >&2
-    return 0
-  }
-  install_host_nginx_site_conf
-}
-
-reload_all_config() {
-  ensure_env_file
-  apply_public_base_url
-  reload_host_nginx || true
-  reload_web_nginx || true
-  restart_service platform
-  restart_service gateway
-  compose_cmd up -d --force-recreate ai >/dev/null 2>&1 || compose_cmd restart ai
-  echo "配置重载完成（未 rebuild 镜像、未重建 web/dist）"
-}
-
-ensure_docker() {
-  if command -v docker >/dev/null 2>&1 && run_sudo docker info >/dev/null 2>&1; then
-    echo "Docker 已就绪."
-    return 0
-  fi
-  if command -v docker >/dev/null 2>&1; then
-    echo "Docker 守护进程未连接，尝试启动..."
-    run_sudo systemctl start docker 2>/dev/null || run_sudo systemctl start podman 2>/dev/null || true
-    if run_sudo docker info >/dev/null 2>&1; then
-      echo "Docker 已就绪."
-      return 0
-    fi
-  fi
-  echo "错误: Docker 不可用。请先安装并启动 docker 后再执行。" >&2
-  exit 1
-}
-
-resolve_compose_cmd() {
-  if run_sudo docker compose version >/dev/null 2>&1; then
-    echo "docker compose"
-    return
-  fi
-  if command -v docker-compose >/dev/null 2>&1; then
-    echo "docker-compose"
-    return
-  fi
-  if [ -x /usr/local/bin/docker-compose ]; then
-    echo "/usr/local/bin/docker-compose"
-    return
-  fi
-  echo ""
-}
-
-COMPOSE_CMD=""
-compose_cmd() {
-  if [ -z "$COMPOSE_CMD" ]; then
-    COMPOSE_CMD="$(resolve_compose_cmd)"
-  fi
-  if [ -z "$COMPOSE_CMD" ]; then
-    echo "错误: 找不到 docker compose / docker-compose" >&2
-    exit 1
-  fi
-  # shellcheck disable=SC2086
-  run_sudo env \
-    DOCKER_BASE_REGISTRY="${DOCKER_BASE_REGISTRY}" \
-    GOPROXY="${GOPROXY}" \
-    AIJZ_WEB_PUBLISH="${AIJZ_WEB_PUBLISH}" \
-    AIJZ_GATEWAY_PUBLISH="${AIJZ_GATEWAY_PUBLISH}" \
-    AIJZ_PLATFORM_PUBLISH="${AIJZ_PLATFORM_PUBLISH}" \
-    AIJZ_AI_PUBLISH="${AIJZ_AI_PUBLISH}" \
-    AIJZ_PG_PUBLISH="${AIJZ_PG_PUBLISH}" \
-    $COMPOSE_CMD "$@"
-}
-
-export_defaults() {
-  export DOCKER_BASE_REGISTRY="${DOCKER_BASE_REGISTRY:-docker.m.daocloud.io/library}"
-  export GOPROXY="${GOPROXY:-https://goproxy.cn,direct}"
-  export REGISTRY_MIRROR="${REGISTRY_MIRROR:-docker.m.daocloud.io/library/}"
-}
-
-# 从 "127.0.0.1:5173" 或 "5173" 取出宿主机端口号
-publish_host_port() {
-  local pub="$1"
-  echo "$pub" | awk -F: '{print $NF}'
-}
-
-port_in_use() {
-  local port="$1"
-  if command -v ss >/dev/null 2>&1; then
-    run_sudo ss -tlnH "sport = :$port" 2>/dev/null | grep -q . && return 0
-    ss -tlnH "sport = :$port" 2>/dev/null | grep -q . && return 0
-    return 1
-  fi
-  if command -v lsof >/dev/null 2>&1; then
-    lsof -iTCP:"$port" -sTCP:LISTEN >/dev/null 2>&1 && return 0
-    return 1
-  fi
-  return 1
-}
-
-# 检查 AI 建站将占用的宿主机端口；若已被本项目容器占用则放行
-check_aijz_ports() {
-  local pairs=(
-    "web:$AIJZ_WEB_PUBLISH"
-    "gateway:$AIJZ_GATEWAY_PUBLISH"
-    "platform:$AIJZ_PLATFORM_PUBLISH"
-    "ai:$AIJZ_AI_PUBLISH"
-    "postgres:$AIJZ_PG_PUBLISH"
-  )
-  echo "端口规划核对（相对 yh_web）：AI建站 5173/8180/8888/8001/5432；宇恒 8088/9080/9081 + 宿主机 80/443。"
-  local name pub port conflict=0
-  local self_running=0
-  if compose_cmd ps -q 2>/dev/null | grep -q .; then
-    self_running=1
-  fi
-  for item in "${pairs[@]}"; do
-    name="${item%%:*}"
-    pub="${item#*:}"
-    port="$(publish_host_port "$pub")"
-    [ -z "$port" ] && continue
-    if port_in_use "$port"; then
-      if [ "$self_running" -eq 1 ]; then
-        echo "  提示: 端口 $port（$name）已占用，疑为本栈，继续。"
-      else
-        echo "  错误: 宿主机端口 $port 已被占用（服务 $name ← $pub）。" >&2
-        echo "         请改 .env 中对应 AIJZ_*_PUBLISH，或停掉占用进程。" >&2
-        conflict=1
-      fi
-    else
-      echo "  OK  $name → $pub"
-    fi
-  done
-  [ "$conflict" -eq 0 ] || exit 1
-}
-
-# 构建 web/dist：优先本机 npm；否则用 Docker node 镜像
-build_web_dist() {
-  echo "构建 web dist ..."
-  if command -v npm >/dev/null 2>&1; then
-    (
-      cd "$ROOT/web"
-      if [ -f package-lock.json ]; then
-        npm ci --legacy-peer-deps 2>/dev/null || npm install --legacy-peer-deps
-      else
-        npm install --legacy-peer-deps
-      fi
-      npm run build
-    )
-  else
-    echo "本机无 npm，使用 Docker node 构建..."
-    run_sudo docker run --rm \
-      -v "$ROOT/web:/app" \
-      -v "$ROOT/web/dist:/app/dist" \
-      -w /app \
-      "${REGISTRY_MIRROR}node:20-alpine" \
-      sh -c "(npm ci --legacy-peer-deps 2>/dev/null || npm install --legacy-peer-deps) && npm run build"
-  fi
-  if [ ! -f "$ROOT/web/dist/index.html" ]; then
-    echo "错误: web/dist/index.html 不存在，构建失败。" >&2
-    exit 1
-  fi
-  echo "web/dist 就绪."
-}
-
-stack_up() {
-  local rebuild="${1:-0}"
-  export_defaults
-  ensure_runtime_dirs
-  ensure_env_file
-  apply_public_base_url
-  check_aijz_ports
-  build_web_dist
-  if [ "$rebuild" = "1" ]; then
-    compose_cmd up -d --build --force-recreate
-  else
-    if ! compose_cmd up -d; then
-      echo "compose up 失败，尝试 --build ..."
-      compose_cmd up -d --build
-    fi
-  fi
-  install_host_nginx_site_conf || true
-}
-
-stack_down() {
-  compose_cmd down --remove-orphans 2>/dev/null || true
-}
-
-healthcheck() {
-  local ok=0 i
-  local gw_port web_port
-  gw_port="$(publish_host_port "${AIJZ_GATEWAY_PUBLISH:-127.0.0.1:8180}")"
-  web_port="$(publish_host_port "${AIJZ_WEB_PUBLISH:-127.0.0.1:5173}")"
-  echo "等待 gateway(:$gw_port) / web(:$web_port) ..."
-  for i in $(seq 1 60); do
-    if curl -fsS --max-time 2 "http://127.0.0.1:${gw_port}/gateway/health" >/dev/null 2>&1 \
-      && curl -fsS --max-time 2 "http://127.0.0.1:${web_port}/" >/dev/null 2>&1; then
-      ok=1
-      break
-    fi
-    sleep 2
-  done
-  if [ "$ok" -eq 1 ]; then
-    echo "健康检查通过."
-  else
-    echo "警告: 健康检查超时，请查看: docker compose -f $ROOT/docker-compose.yml logs" >&2
-  fi
-  compose_cmd exec -T postgres psql -U platform -d platform -c 'ALTER USER platform CREATEDB;' >/dev/null 2>&1 || true
-}
-
-print_endpoints() {
-  local pub_line=""
-  if [ -n "${AIJZ_DOMAIN:-}" ] && [ "${AIJZ_ENABLE_HOST_NGINX:-0}" = "1" ]; then
-    pub_line="  Public   https://${AIJZ_DOMAIN}"
-  fi
-  cat <<EOF
-
-========================================
-  Web      http://127.0.0.1:$(publish_host_port "${AIJZ_WEB_PUBLISH:-127.0.0.1:5173}")
-  Gateway  http://127.0.0.1:$(publish_host_port "${AIJZ_GATEWAY_PUBLISH:-127.0.0.1:8180}")
-${pub_line}
-  Account  demo / demo123
-  Data     $ROOT/.runtime
-  Stop     ./stop.sh
-  重载配置 ./reload-config.sh（不整栈 rebuild）
-  绑定     默认 127.0.0.1（与 yh_web 同机不抢 80/443/8088）
-========================================
-EOF
-}
-
-# 默认代码源（可用 AIJZ_GIT_URL / GIT_BRANCH 覆盖）
-AIJZ_GIT_URL_DEFAULT="https://gitea.yuxindazhineng.com/whm/ai_site.git"
-
-ensure_git_origin() {
-  local url="${1:-${AIJZ_GIT_URL:-$AIJZ_GIT_URL_DEFAULT}}"
-  if ! command -v git >/dev/null 2>&1; then
-    echo "错误: 未安装 git，无法拉取代码。请先安装 git。" >&2
-    return 1
-  fi
-  if ! git rev-parse --is-inside-work-tree >/dev/null 2>&1; then
-    echo "当前目录不是 git 仓库，初始化并关联 origin -> $url"
-    git init
-    git remote add origin "$url"
-    return 0
-  fi
-  if git remote get-url origin >/dev/null 2>&1; then
-    local cur
-    cur="$(git remote get-url origin)"
-    if [ "$cur" != "$url" ]; then
-      echo "更新 origin: $cur -> $url"
-      git remote set-url origin "$url"
-    fi
-  else
-    echo "添加 origin -> $url"
-    git remote add origin "$url"
-  fi
-}
-
-# 从 Gitea ai_site 拉取并与远程对齐（默认硬重置，保留未跟踪文件如 .env）
-# 环境变量：
-#   AIJZ_GIT_URL     仓库地址（默认 https://gitea.yuxindazhineng.com/whm/ai_site.git）
-#   GIT_BRANCH       分支（默认 main）
-#   FORCE_GIT_RESET  1=reset --hard 对齐远程（默认 1）；0=仅快进合并
-git_pull_hard() {
-  local url="${AIJZ_GIT_URL:-$AIJZ_GIT_URL_DEFAULT}"
-  local branch="${GIT_BRANCH:-main}"
-  echo "拉取代码（$url  branch=$branch）..."
-  ensure_git_origin "$url" || return 1
-  if ! git fetch origin --progress; then
-    echo "错误: git fetch 失败。私有仓库请配置凭据，或设置 AIJZ_GIT_URL 为带 token 的地址。" >&2
-    return 1
-  fi
-  if ! git rev-parse --verify "origin/$branch" >/dev/null 2>&1; then
-    echo "错误: 远程不存在分支 origin/$branch" >&2
-    return 1
-  fi
-  if [ "${FORCE_GIT_RESET:-1}" = "1" ]; then
-    git checkout -B "$branch" "origin/$branch"
-    git reset --hard "origin/$branch"
-  else
-    git checkout "$branch" 2>/dev/null || git checkout -b "$branch" "origin/$branch"
-    git merge --ff-only "origin/$branch"
-  fi
-  echo "当前: $(git rev-parse --short HEAD) $(git log -1 --pretty=%s)"
-}

scripts/linux/common.sh

@@ -1,96 +0,0 @@
-#!/usr/bin/env bash
-# 宇信达智建 — Linux 公共函数（宿主机物理目录模式，不依赖 Docker）
-# shellcheck disable=SC2034
-
-set -euo pipefail
-
-ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
-RUNTIME="$ROOT/.runtime"
-LOG_DIR="$RUNTIME/logs"
-PID_DIR="$RUNTIME/pids"
-VENV_DIR="$RUNTIME/venv"
-PGDATA="$RUNTIME/postgres"
-UPLOAD_DIR="$ROOT/platform/data/uploads"
-PG_PORT="${AJZ_PG_PORT:-5432}"
-PG_USER="${AJZ_PG_USER:-platform}"
-PG_PASS="${AJZ_PG_PASS:-platform}"
-PG_DB="${AJZ_PG_DB:-platform}"
-
-mkdir -p "$LOG_DIR" "$PID_DIR" "$UPLOAD_DIR"
-
-c_info()  { printf '\033[36m==> %s\033[0m\n' "$*"; }
-c_ok()    { printf '\033[32m  OK  %s\033[0m\n' "$*"; }
-c_warn()  { printf '\033[33m  !!  %s\033[0m\n' "$*"; }
-c_err()   { printf '\033[31m  ERR %s\033[0m\n' "$*" >&2; }
-
-have_cmd() { command -v "$1" >/dev/null 2>&1; }
-
-docker_ready() {
-  have_cmd docker || return 1
-  docker info >/dev/null 2>&1
-}
-
-port_listen() {
-  local port="$1"
-  if have_cmd ss; then
-    ss -ltn "( sport = :$port )" 2>/dev/null | grep -q ":$port"
-  elif have_cmd netstat; then
-    netstat -ltn 2>/dev/null | grep -q "[.:]$port "
-  else
-    (echo >/dev/tcp/127.0.0.1/"$port") >/dev/null 2>&1
-  fi
-}
-
-wait_port() {
-  local port="$1" name="$2" sec="${3:-40}"
-  local i=0
-  while (( i < sec * 2 )); do
-    if port_listen "$port"; then
-      c_ok "$name 端口 $port 已监听"
-      return 0
-    fi
-    sleep 0.5
-    ((i++)) || true
-  done
-  c_warn "$name 端口 $port 未在 ${sec}s 内就绪"
-  return 1
-}
-
-wait_http() {
-  local url="$1" name="$2" sec="${3:-40}"
-  local i=0
-  while (( i < sec * 2 )); do
-    if curl -fsS --max-time 2 "$url" >/dev/null 2>&1; then
-      c_ok "$name 就绪  $url"
-      return 0
-    fi
-    sleep 0.5
-    ((i++)) || true
-  done
-  c_warn "$name 未在 ${sec}s 内就绪: $url"
-  return 1
-}
-
-detect_os() {
-  if [[ -f /etc/os-release ]]; then
-    # shellcheck source=/dev/null
-    . /etc/os-release
-    echo "${ID:-unknown}"
-  else
-    echo "unknown"
-  fi
-}
-
-sudo_run() {
-  if [[ "$(id -u)" -eq 0 ]]; then
-    "$@"
-  elif have_cmd sudo; then
-    sudo "$@"
-  else
-    c_err "需要 root 或 sudo 才能安装系统包: $*"
-    return 1
-  fi
-}
-
-export ROOT RUNTIME LOG_DIR PID_DIR VENV_DIR PGDATA UPLOAD_DIR
-export PG_PORT PG_USER PG_PASS PG_DB

scripts/linux/setup-host.sh

@@ -1,224 +0,0 @@
-#!/usr/bin/env bash
-# 在宿主机物理目录自动配置环境（无 Docker）
-# 数据落盘：$ROOT/.runtime/{postgres,venv,logs,pids} 与 platform/data/uploads
-# shellcheck disable=SC1091
-
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-# shellcheck source=common.sh
-source "$SCRIPT_DIR/common.sh"
-
-c_info "根目录(物理): $ROOT"
-c_info "运行时目录:   $RUNTIME"
-c_info "上传目录:     $UPLOAD_DIR"
-
-need_pkgs=()
-have_cmd curl || need_pkgs+=(curl)
-have_cmd git || need_pkgs+=(git)
-have_cmd go || need_pkgs+=(golang-go)
-have_cmd python3 || need_pkgs+=(python3)
-have_cmd pip3 || need_pkgs+=(python3-pip)
-python3 -c "import venv" 2>/dev/null || need_pkgs+=(python3-venv)
-have_cmd node || need_pkgs+=(nodejs)
-have_cmd npm || need_pkgs+=(npm)
-have_cmd psql || need_pkgs+=(postgresql-client)
-have_cmd initdb || have_cmd pg_ctl || need_pkgs+=(postgresql)
-
-install_pkgs() {
-  local os
-  os="$(detect_os)"
-  c_info "安装系统包 (OS=$os): ${need_pkgs[*]}"
-  case "$os" in
-    ubuntu|debian|linuxmint|pop)
-      sudo_run apt-get update -y
-      local pkgs=()
-      for p in "${need_pkgs[@]}"; do
-        case "$p" in
-          golang-go) pkgs+=(golang-go) ;;
-          python3) pkgs+=(python3 python3-venv python3-dev) ;;
-          python3-pip) pkgs+=(python3-pip) ;;
-          python3-venv) pkgs+=(python3-venv) ;;
-          nodejs) pkgs+=(nodejs) ;;
-          npm) pkgs+=(npm) ;;
-          postgresql) pkgs+=(postgresql postgresql-contrib) ;;
-          postgresql-client) pkgs+=(postgresql-client) ;;
-          *) pkgs+=("$p") ;;
-        esac
-      done
-      sudo_run apt-get install -y "${pkgs[@]}"
-      ;;
-    fedora|rhel|centos|rocky|almalinux)
-      local pkgs=()
-      for p in "${need_pkgs[@]}"; do
-        case "$p" in
-          golang-go) pkgs+=(golang) ;;
-          python3-pip) pkgs+=(python3-pip) ;;
-          python3-venv) pkgs+=(python3) ;;
-          postgresql) pkgs+=(postgresql-server postgresql) ;;
-          postgresql-client) pkgs+=(postgresql) ;;
-          *) pkgs+=("$p") ;;
-        esac
-      done
-      if have_cmd dnf; then sudo_run dnf install -y "${pkgs[@]}"
-      else sudo_run yum install -y "${pkgs[@]}"; fi
-      ;;
-    arch|manjaro)
-      local pkgs=()
-      for p in "${need_pkgs[@]}"; do
-        case "$p" in
-          golang-go) pkgs+=(go) ;;
-          python3) pkgs+=(python) ;;
-          python3-pip) pkgs+=(python-pip) ;;
-          python3-venv) ;;
-          postgresql-client) pkgs+=(postgresql) ;;
-          *) pkgs+=("$p") ;;
-        esac
-      done
-      sudo_run pacman -Sy --noconfirm "${pkgs[@]}"
-      ;;
-    *)
-      c_err "未识别发行版 $os，请手动安装: go python3 node npm postgresql curl"
-      return 1
-      ;;
-  esac
-}
-
-if ((${#need_pkgs[@]} > 0)); then
-  install_pkgs
-else
-  c_ok "系统依赖已满足"
-fi
-
-missing=()
-for c in go python3 curl; do have_cmd "$c" || missing+=("$c"); done
-have_cmd node || have_cmd nodejs || missing+=("node")
-have_cmd npm || missing+=("npm")
-if ((${#missing[@]} > 0)); then
-  c_err "仍缺少命令: ${missing[*]}"
-  exit 1
-fi
-c_ok "$(go version)"
-
-c_info "配置 Python venv → $VENV_DIR"
-if [[ ! -d "$VENV_DIR" ]]; then
-  python3 -m venv "$VENV_DIR"
-fi
-# shellcheck source=/dev/null
-source "$VENV_DIR/bin/activate"
-pip install -U pip wheel >/dev/null
-pip install -r "$ROOT/ai-service/requirements.txt"
-pip install -r "$ROOT/agent_sdk/requirements.txt"
-c_ok "venv 依赖已安装"
-
-c_info "安装前端依赖 → $ROOT/web/node_modules"
-if [[ ! -d "$ROOT/web/node_modules" ]]; then
-  (cd "$ROOT/web" && npm install)
-else
-  c_ok "web/node_modules 已存在"
-fi
-
-find_pg_bin() {
-  local name="$1"
-  if have_cmd "$name"; then command -v "$name"; return; fi
-  local d
-  for d in /usr/lib/postgresql/*/bin /usr/pgsql-*/bin; do
-    if [[ -x "$d/$name" ]]; then echo "$d/$name"; return; fi
-  done
-  return 1
-}
-
-INITDB="$(find_pg_bin initdb || true)"
-PG_CTL="$(find_pg_bin pg_ctl || true)"
-PSQL="$(find_pg_bin psql || true)"
-
-ensure_local_postgres() {
-  if [[ -z "$INITDB" || -z "$PG_CTL" || -z "$PSQL" ]]; then
-    c_warn "未找到 initdb/pg_ctl/psql，跳过本地库初始化（请自备 Postgres）"
-    return 0
-  fi
-
-  # 已有可连库则复用
-  if PGPASSWORD="$PG_PASS" "$PSQL" -h 127.0.0.1 -p "$PG_PORT" -U "$PG_USER" -d "$PG_DB" -c "SELECT 1" >/dev/null 2>&1; then
-    c_ok "复用已有 Postgres $PG_USER@$PG_DB:$PG_PORT"
-    PGPASSWORD="$PG_PASS" "$PSQL" -h 127.0.0.1 -p "$PG_PORT" -U "$PG_USER" -d "$PG_DB" \
-      -c "ALTER USER $PG_USER CREATEDB;" >/dev/null 2>&1 || true
-    return 0
-  fi
-
-  mkdir -p "$PGDATA" "$RUNTIME/pg_sockets"
-  if [[ ! -f "$PGDATA/PG_VERSION" ]]; then
-    c_info "initdb → $PGDATA （物理目录）"
-    "$INITDB" -D "$PGDATA" --auth=trust -U postgres
-    {
-      echo ""
-      echo "listen_addresses = '127.0.0.1'"
-      echo "port = $PG_PORT"
-      echo "unix_socket_directories = '$RUNTIME/pg_sockets'"
-    } >> "$PGDATA/postgresql.conf"
-  fi
-
-  if ! "$PG_CTL" -D "$PGDATA" status >/dev/null 2>&1; then
-    c_info "启动本地 Postgres"
-    "$PG_CTL" -D "$PGDATA" -l "$LOG_DIR/postgres.log" -o "-k $RUNTIME/pg_sockets" start
-    sleep 1
-  fi
-
-  local sock="$RUNTIME/pg_sockets"
-  "$PSQL" -h "$sock" -U postgres -d postgres -v ON_ERROR_STOP=1 <<SQL
-DO \$\$
-BEGIN
-  IF NOT EXISTS (SELECT FROM pg_roles WHERE rolname = '$PG_USER') THEN
-    CREATE ROLE $PG_USER LOGIN PASSWORD '$PG_PASS' CREATEDB;
-  ELSE
-    ALTER ROLE $PG_USER WITH LOGIN PASSWORD '$PG_PASS' CREATEDB;
-  END IF;
-END
-\$\$;
-SELECT 'ok' FROM pg_database WHERE datname = '$PG_DB';
-SQL
-  if ! "$PSQL" -h "$sock" -U postgres -d postgres -tc "SELECT 1 FROM pg_database WHERE datname='$PG_DB'" | grep -q 1; then
-    "$PSQL" -h "$sock" -U postgres -d postgres -c "CREATE DATABASE $PG_DB OWNER $PG_USER;"
-  fi
-
-  # 校验 TCP
-  if ! PGPASSWORD="$PG_PASS" "$PSQL" -h 127.0.0.1 -p "$PG_PORT" -U "$PG_USER" -d "$PG_DB" -c "SELECT 1" >/dev/null 2>&1; then
-    # 补充密码认证
-    cat > "$PGDATA/pg_hba.conf" <<EOF
-local   all             all                                     trust
-host    all             all             127.0.0.1/32            trust
-host    all             all             ::1/128                 trust
-EOF
-    "$PG_CTL" -D "$PGDATA" reload || "$PG_CTL" -D "$PGDATA" restart -m fast
-    sleep 1
-  fi
-  PGPASSWORD="$PG_PASS" "$PSQL" -h 127.0.0.1 -p "$PG_PORT" -U "$PG_USER" -d "$PG_DB" -c "SELECT 1" >/dev/null
-  c_ok "Postgres 就绪 (物理 data=$PGDATA)"
-}
-
-ensure_local_postgres
-
-c_info "编译 platform / gateway"
-(cd "$ROOT/platform" && go build -o platform .)
-(cd "$ROOT/gateway" && go build -o gateway .)
-c_ok "二进制已生成"
-
-if [[ ! -f "$ROOT/ai-service/sample_inventory.xlsx" ]]; then
-  (cd "$ROOT/ai-service" && "$VENV_DIR/bin/python" make_sample_excel.py) || true
-fi
-
-date -Iseconds > "$RUNTIME/setup.ok"
-cat > "$RUNTIME/env.sh" <<EOF
-# 由 setup-host.sh 生成 — 物理目录运行时
-export AJZ_ROOT="$ROOT"
-export AJZ_RUNTIME="$RUNTIME"
-export PATH="$VENV_DIR/bin:\$PATH"
-export PGHOST=127.0.0.1
-export PGPORT=$PG_PORT
-export PGUSER=$PG_USER
-export PGPASSWORD=$PG_PASS
-export PGDATABASE=$PG_DB
-EOF
-
-c_info "环境配置完成（无 Docker，全部落在物理目录）"
-c_ok "下一步: ./start.sh"

scripts/linux/start-host.sh

@@ -1,100 +0,0 @@
-#!/usr/bin/env bash
-# 宿主机物理目录模式（Docker 不可用或 ./start.sh --host）
-# shellcheck disable=SC1091
-
-set -euo pipefail
-
-ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-# shellcheck source=common.sh
-source "$SCRIPT_DIR/common.sh"
-
-REBUILD=0
-NO_BROWSER=0
-for arg in "$@"; do
-  case "$arg" in
-    --rebuild|-Rebuild) REBUILD=1 ;;
-    --no-browser) NO_BROWSER=1 ;;
-  esac
-done
-
-start_bg() {
-  local name="$1" logfile="$2"
-  shift 2
-  local pidfile="$PID_DIR/$name.pid"
-  if [[ -f "$pidfile" ]] && kill -0 "$(cat "$pidfile")" 2>/dev/null; then
-    c_warn "$name 已在运行 pid=$(cat "$pidfile")"
-    return 0
-  fi
-  c_info "启动 $name"
-  nohup "$@" >>"$logfile" 2>&1 &
-  echo $! >"$pidfile"
-  c_ok "$name pid=$(cat "$pidfile") 日志 $logfile"
-}
-
-ensure_postgres_running() {
-  local pg_ctl=""
-  pg_ctl="$(command -v pg_ctl 2>/dev/null || true)"
-  if [[ -z "$pg_ctl" ]]; then
-    for d in /usr/lib/postgresql/*/bin /usr/pgsql-*/bin; do
-      [[ -x "$d/pg_ctl" ]] && pg_ctl="$d/pg_ctl" && break
-    done
-  fi
-  if [[ -n "$pg_ctl" && -f "$PGDATA/PG_VERSION" ]]; then
-    if ! "$pg_ctl" -D "$PGDATA" status >/dev/null 2>&1; then
-      c_info "启动物理目录 Postgres → $PGDATA"
-      mkdir -p "$RUNTIME/pg_sockets"
-      "$pg_ctl" -D "$PGDATA" -l "$LOG_DIR/postgres.log" -o "-k $RUNTIME/pg_sockets" start
-      sleep 1
-    fi
-  fi
-}
-
-c_warn "宿主机模式：数据落在 $RUNTIME"
-if [[ ! -f "$RUNTIME/setup.ok" || "$REBUILD" -eq 1 ]]; then
-  bash "$SCRIPT_DIR/setup-host.sh"
-fi
-# shellcheck source=/dev/null
-[[ -f "$RUNTIME/env.sh" ]] && source "$RUNTIME/env.sh"
-
-ensure_postgres_running
-
-if [[ "$REBUILD" -eq 1 || ! -x "$ROOT/platform/platform" ]]; then
-  (cd "$ROOT/platform" && go build -o platform .)
-fi
-if [[ "$REBUILD" -eq 1 || ! -x "$ROOT/gateway/gateway" ]]; then
-  (cd "$ROOT/gateway" && go build -o gateway .)
-fi
-
-PY="$VENV_DIR/bin/python"
-[[ -x "$PY" ]] || PY="$(command -v python3)"
-
-start_bg platform "$LOG_DIR/platform.log" \
-  bash -c "cd '$ROOT/platform' && exec ./platform -f etc/platform.yaml"
-start_bg ai "$LOG_DIR/ai.log" \
-  bash -c "cd '$ROOT/ai-service' && exec '$PY' -m uvicorn app:app --host 127.0.0.1 --port 8001"
-start_bg gateway "$LOG_DIR/gateway.log" \
-  bash -c "cd '$ROOT/gateway' && exec ./gateway -f etc/gateway.yaml"
-start_bg web "$LOG_DIR/web.log" \
-  bash -c "cd '$ROOT/web' && exec npm run dev -- --host 127.0.0.1 --port 5173"
-
-wait_port 8888 platform 45 || true
-wait_http "http://127.0.0.1:8001/health" ai-service 45 || true
-wait_http "http://127.0.0.1:8180/gateway/health" gateway 45 || true
-wait_port 5173 web 60 || true
-
-cat <<EOF
-
-========================================
-  前端    http://127.0.0.1:5173
-  网关    http://127.0.0.1:8180
-  账号    demo / demo123
-  模式    宿主机物理目录
-  停止    ./stop.sh
-========================================
-
-EOF
-
-if [[ "$NO_BROWSER" -eq 0 ]] && have_cmd xdg-open; then
-  xdg-open "http://127.0.0.1:5173" >/dev/null 2>&1 || true
-fi

scripts/linux/stop-host.sh

@@ -1,52 +0,0 @@
-#!/usr/bin/env bash
-# 停止宿主机模式进程
-# shellcheck disable=SC1091
-set -euo pipefail
-
-ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
-# shellcheck source=common.sh
-source "$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)/common.sh"
-
-c_info "停止宿主机模式服务..."
-
-stop_pidfile() {
-  local name="$1"
-  local f="$PID_DIR/$name.pid"
-  if [[ -f "$f" ]]; then
-    local pid
-    pid="$(cat "$f")"
-    if kill -0 "$pid" 2>/dev/null; then
-      kill "$pid" 2>/dev/null || true
-      sleep 0.3
-      kill -9 "$pid" 2>/dev/null || true
-    fi
-    rm -f "$f"
-  fi
-}
-
-for n in web gateway ai platform; do
-  stop_pidfile "$n"
-done
-
-for port in 5173 8180 8001 8888; do
-  if have_cmd fuser; then
-    fuser -k "${port}/tcp" >/dev/null 2>&1 || true
-  elif have_cmd lsof; then
-    pids="$(lsof -t -iTCP:"$port" -sTCP:LISTEN 2>/dev/null || true)"
-    [[ -n "$pids" ]] && kill $pids 2>/dev/null || true
-  fi
-done
-
-if [[ "${1:-}" == "--with-db" ]]; then
-  pg_ctl_bin="$(command -v pg_ctl 2>/dev/null || true)"
-  if [[ -z "$pg_ctl_bin" ]]; then
-    for d in /usr/lib/postgresql/*/bin /usr/pgsql-*/bin; do
-      [[ -x "$d/pg_ctl" ]] && pg_ctl_bin="$d/pg_ctl" && break
-    done
-  fi
-  if [[ -n "$pg_ctl_bin" && -f "$PGDATA/PG_VERSION" ]]; then
-    "$pg_ctl_bin" -D "$PGDATA" stop -m fast || true
-  fi
-fi
-
-c_ok "已停止。数据仍在: $RUNTIME"