feat(gui): dockerized Windows cross-build (win-builder image + one-shot dist script) + GUI/backend scenario docs

README_EN.md

@@ -305,6 +305,78 @@ app, so you HMAC-sign timestamp+URL+body with `meta.app_secret` and add
 `X-App-Sign`-style headers. Configure `sources[].meta.{app_id, app_secret,
 app_agent}`.
 
+## Desktop GUI (Electron)
+
+Optional standalone product for desktop users on your internal network: an
+**embedded ModelRouter core** (Clash Verge-style): one-click start/stop, system
+tray, autostart, silent launch, and a pixel-for-pixel embedded full WebUI
+(Status/Chat/Keys/Priority/Sources/Adapters — no login needed). Server users
+keep using the plain Go binary.
+
+### GUI vs. plain backend
+
+| Scenario | Pick | Why |
+| ---- | ---- | ---- |
+| Server / intranet gateway / Docker / unattended long-running | **plain backend** (single binary) | ~10 MB, ~15 MB RSS, zero GUI deps; systemd/container friendly, remote admin |
+| Personal desktop daily use / multi-device intranet sharing | **GUI** (Electron) | no-login embedded WebUI, tray one-click, autostart, silent background — for non-CLI users |
+| Windows desktop | **GUI** | plain backend needs manual service registration; GUI ships native tray/autostart |
+| CI one-shot 3-platform installers | **GUI packaging scripts** | `make gui-*` emits deb / AppImage / NSIS, drops straight into a release pipeline |
+
+Both share the exact same `llmsproxy` core (LuaJIT build) — configs and
+adapters are fully compatible, freely interchangeable.
+
+### Build & run
+
+```bash
+cd cmd/gui
+npm install
+make gui            # or npm run dev — dev run (needs make build first for bin/llmsproxy)
+make gui-deb        # local deb (share with other Linux users)
+make gui-dist       # deb + AppImage (linux)
+make gui-win        # Windows NSIS (host mingw + wine)
+make gui-win-docker # Windows NSIS, fully dockerized (no host mingw needed)
+```
+
+Artifacts land in `cmd/build/gui-dist/`: `ModelRouter-1.0.0.AppImage`,
+`modelrouter-gui_1.0.0_amd64.deb`, `ModelRouter Setup 1.0.0.exe` (win). rpm
+needs system `rpmbuild`.
+
+#### Windows packaging (dockerized, recommended)
+
+`make gui-win-docker` does cross-compile + NSIS in one step; the host needs
+**no mingw**.
+
+- Image: `cmd/gui/docker/win-builder/Dockerfile` (`golang:1.25` + mingw-w64 +
+  prebuilt LuaJIT for Windows: `lua51.dll` + import lib). LuaJIT source comes
+  from the gitcode mirror (reachable in CN) with github fallback; Go modules go
+  through `https://goproxy.cn`.
+- Core build: `cmd/gui/scripts/win-core-docker.sh` — emits
+  `cmd/gui/bin/{llmsproxy.exe,lua51.dll}` inside the container.
+- One-shot release: `cmd/gui/scripts/dist-win-docker.sh` — after the core,
+  runs electron-builder (host needs `wine` for NSIS).
+- The `modelrouter/win-builder` image is auto-built on first run and reused
+  afterwards.
+
+```bash
+# Full Windows release (rebuild core + NSIS):
+make gui-win-docker
+```
+
+### Features
+
+- **Embedded core**: auto-spawns the bundled `llmsproxy` (LuaJIT build);
+  config/keys/adapters live in `<userData>/profile/`. First run generates a
+  random admin key written into `keys` (not seed) and self-injects it — WebUI
+  needs no login and never nags about changing the initial key. Port changeable
+  in settings (default 8787).
+- **System tray**: core status dot, autostart/silent toggles, start/stop/restart
+  core, quit.
+- **Silent launch**: `--silent` flag or setting — starts to the tray only;
+  first run always shows the window.
+- **Autostart**: `setLoginItemSettings` on Windows/macOS; writes
+  `~/.config/autostart/modelrouter-gui.desktop` on Linux, appending `--silent`
+  when silent mode is on.
+
 ## Layout
 
 ```
@@ -324,4 +396,4 @@ go test -tags luajit ./...
 
 Covers: config validation, adapter load/transform, signature hooks, gateway
 auth, SDK round trip, SSE streaming, model routing, multimodal passthrough and
-disable_thinking.
+disable_thinking.