Merge branch 'main' into release/v1.8.0.2

Author: WMC001

.github/workflows/codeql_main.yml

@@ -0,0 +1,103 @@
+# For most projects, this workflow file will not need changing; you simply need
+# to commit it to your repository.
+#
+# You may wish to alter this file to override the set of languages analyzed,
+# or to provide custom queries or build logic.
+#
+# ******** NOTE ********
+# We have attempted to detect the languages in your repository. Please check
+# the `language` matrix defined below to confirm you have the correct set of
+# supported CodeQL languages.
+#
+name: "CodeQL Advanced"
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+  schedule:
+    - cron: '40 13 * * 6'
+
+jobs:
+  analyze:
+    name: Analyze (${{ matrix.language }})
+    # Runner size impacts CodeQL analysis time. To learn more, please see:
+    #   - https://gh.io/recommended-hardware-resources-for-running-codeql
+    #   - https://gh.io/supported-runners-and-hardware-resources
+    #   - https://gh.io/using-larger-runners (GitHub.com only)
+    # Consider using larger runners or machines with greater resources for possible analysis time improvements.
+    runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
+    permissions:
+      # required for all workflows
+      security-events: write
+
+      # required to fetch internal or private CodeQL packs
+      packages: read
+
+      # only required for workflows in private repositories
+      actions: read
+      contents: read
+
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+        - language: actions
+          build-mode: none
+        - language: javascript-typescript
+          build-mode: none
+        - language: python
+          build-mode: none
+        # CodeQL supports the following values keywords for 'language': 'actions', 'c-cpp', 'csharp', 'go', 'java-kotlin', 'javascript-typescript', 'python', 'ruby', 'rust', 'swift'
+        # Use `c-cpp` to analyze code written in C, C++ or both
+        # Use 'java-kotlin' to analyze code written in Java, Kotlin or both
+        # Use 'javascript-typescript' to analyze code written in JavaScript, TypeScript or both
+        # To learn more about changing the languages that are analyzed or customizing the build mode for your analysis,
+        # see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning.
+        # If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how
+        # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+
+    # Add any setup steps before running the `github/codeql-action/init` action.
+    # This includes steps like installing compilers or runtimes (`actions/setup-node`
+    # or others). This is typically only required for manual builds.
+    # - name: Setup runtime (example)
+    #   uses: actions/setup-example@v1
+
+    # Initializes the CodeQL tools for scanning.
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v4
+      with:
+        languages: ${{ matrix.language }}
+        build-mode: ${{ matrix.build-mode }}
+        # If you wish to specify custom queries, you can do so here or in a config file.
+        # By default, queries listed here will override any specified in a config file.
+        # Prefix the list here with "+" to use these queries and those in the config file.
+
+        # For more details on CodeQL's query packs, refer to: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
+        # queries: security-extended,security-and-quality
+
+    # If the analyze step fails for one of the languages you are analyzing with
+    # "We were unable to automatically build your code", modify the matrix above
+    # to set the build mode to "manual" for that language. Then modify this step
+    # to build your code.
+    # ℹ️ Command-line programs to run using the OS shell.
+    # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
+    - name: Run manual build steps
+      if: matrix.build-mode == 'manual'
+      shell: bash
+      run: |
+        echo 'If you are using a "manual" build mode for one or more of the' \
+          'languages you are analyzing, replace this with the commands to build' \
+          'your code, for example:'
+        echo '  make bootstrap'
+        echo '  make release'
+        exit 1
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v4
+      with:
+        category: "/language:${{matrix.language}}"

doc/docs/en/quick-start/installation.md

@@ -44,13 +44,35 @@ After executing this command, the system will provide two different versions for
 - **Terminal Tool**: Enables openssh-server for AI agent shell command execution
 - **Regional optimization**: Mainland China users can use optimized image sources
 
->⚠️ **Important Note**: When deploying v1.8.0 or later for the first time, please pay special attention to the `suadmin` super administrator account information output in the Docker logs. This account has the highest system privileges, and the password is only displayed upon first generation. It cannot be viewed again later, so please be sure to save it securely.
+### ⚠️ Important Notes
+1️⃣ **When deploying v1.8.0 or later for the first time**, please pay special attention to the `suadmin` super administrator account information output in the Docker logs. This account has the highest system privileges, and the password is only displayed upon first generation. It cannot be viewed again later, so please be sure to save it securely.
+
+2️⃣ Forgot to note the `suadmin` account password? Follow these steps:
+```bash
+# Step1: Delete su account record in supabase container
+docker exec -it supabase-db-mini bash
+psql -U postgres
+select id, email from auth.users;
+# Get the user_id of [email protected] account
+delete from auth.users where id = 'your_user_id';
+delete from auth.identities where user_id = 'your_user_id';
+
+# Step2: Delete su account record in nexent database
+docker exec -it nexent-postgresql bash
+psql -U root -d nexent
+delete from nexent.user_tenant_t where user_id = 'your_user_id';
+
+# Step3: Redeploy and record the su account password
+```
 
 ### 3. Access Your Installation
 
 When deployment completes successfully:
 1. Open **http://localhost:3000** in your browser
-2. Refer to the [User Guide](../user-guide/home-page) to develop agents
+2. Log in with the super administrator account
+3. Access tenant resources → Create tenant and tenant administrator
+4. Log in with the tenant administrator account
+5. Refer to the [User Guide](../user-guide/home-page) to develop agents
 
 
 ## 🏗️ Service Architecture

doc/docs/zh/opensource-memorial-wall.md

@@ -704,6 +704,10 @@ Nexent 加油！希望能达成所愿！
 探索个人智能体平台，从小红书发现Nexent是个非常值得一试的好产品，祝Nexent发展越来越好！
 :::
 
+::: info SZShowmaker - 2026-3-3
+Happy to find a easy-to-use AI Agent Platform
+:::
+
 ::: info Passion - 2026-3-4
 华为开发者大会接触到Nexent，祝越来越好！
 :::

doc/docs/zh/quick-start/installation.md

@@ -45,12 +45,34 @@ bash deploy.sh
 - **区域优化**: 中国大陆用户可使用优化的镜像源
 
 
->⚠️ **重要提示**：首次部署 v1.8.0 及以上版本时，需特别留意 Docker 日志中输出的 `suadmin` 超级管理员账号信息。该账号为系统最高权限账户，密码仅在首次生成时显示，后续无法再次查看，请务必妥善保存。
+### ⚠️ 重要提示
+1️⃣ **首次部署 v1.8.0 及以上版本时**，需特别留意 Docker 日志中输出的 `suadmin` 超级管理员账号信息。该账号为系统最高权限账户，密码仅在首次生成时显示，后续无法再次查看，请务必妥善保存。
+> 该账号仅用于权限管理，无权开发智能体或创建知识库。请登录该账号，依次完成：访问租户资源→创建租户→创建租户管理员，然后使用租户管理员账号登录,即可使用全部功能。角色权限详情参见 [用户管理](../user-guide/user-management)
 
+2️⃣ 忘记留意 `suadmin` 账号密码？请按照以下步骤操作：
+```bash
+# Step1: 在supabase容器中删除su账号记录
+docker exec -it supabase-db-mini bash
+psql -U postgres
+select id, email from auth.users;
+#获取到[email protected]账号的user_id
+delete from auth.users where id = '你的user_id';
+delete from auth.identities where user_id = '你的user_id';
+
+#Step2：在nexent的数据库中删除su账号记录
+docker exec -it nexent-postgresql bash
+psql -U root -d nexent
+delete from nexent.user_tenant_t where user_id = '你的user_id';
+
+#Step3：重新部署并记录su账号密码
+```
 ### 3. 访问您的安装
 
 部署成功完成后：
 1. 在浏览器中打开 **http://localhost:3000**
+2. 登录超级管理员账号
+3. 访问租户资源 → 创建租户及租户管理员
+4. 登录租户管理员账号
 2. 参考 [用户指南](../user-guide/home-page) 进行智能体的开发