zhizhi/brain/secrets-manifest.json

{
  "_meta": {
    "manifest_id": "ZY-SECRETS-MANIFEST-v1.0",
    "created": "2026-03-29T10:43:00Z",
    "created_by": "铸渊 · ICE-GL-ZY001",
    "directive": "SY-CMD-KEY-012 · 密钥全量清理与统一替换",
    "purpose": "铸渊仓库密钥主清单 — 冰朔配置密钥的唯一参考文档",
    "naming_convention": "所有密钥统一使用 ZY_ 前缀 · 铸渊(Zhuyuan)自主命名体系",
    "total_secrets": 37,
    "required": 25,
    "optional": 12,
    "replaced_old_secrets": 59,
    "reduction": "59 → 37 (37%减少 · 消除重复与冗余)"
  },
  "migration_mapping": {
    "description": "旧密钥名称 → 新ZY_*名称 完整映射表",
    "note": "冰朔在GitHub Settings清空所有旧密钥后，按此清单配置新密钥。合并PR后自动生效。",
    "mappings": {
      "LLM_API_KEY": "ZY_LLM_API_KEY",
      "ANTHROPIC_API_KEY": "ZY_LLM_API_KEY",
      "OPENAI_API_KEY": "ZY_LLM_API_KEY",
      "DASHSCOPE_API_KEY": "ZY_LLM_API_KEY",
      "DEEPSEEK_API_KEY": "ZY_LLM_API_KEY",
      "GEMINI_API_KEY": "ZY_LLM_API_KEY",
      "YUNWU_API_KEY": "ZY_LLM_API_KEY",
      "MODEL_API_KEY": "ZY_LLM_API_KEY",
      "LLM_BASE_URL": "ZY_LLM_BASE_URL",
      "DEPLOY_HOST": "ZY_SERVER_HOST",
      "DEPLOY_USER": "ZY_SERVER_USER",
      "DEPLOY_KEY": "ZY_SERVER_KEY",
      "DEPLOY_PATH": "ZY_SERVER_PATH",
      "NOTION_API_KEY": "ZY_NOTION_TOKEN",
      "NOTION_TOKEN_BINGSUO": "ZY_NOTION_TOKEN",
      "NOTION_TOKEN_ZHIZHI": "ZY_NOTION_TOKEN",
      "NOTION_SYSLOG_DB_ID": "ZY_NOTION_SYSLOG_DB",
      "NOTION_DB_SYSLOG": "ZY_NOTION_SYSLOG_DB",
      "SYSLOG_DB_ID": "ZY_NOTION_SYSLOG_DB",
      "NOTION_TICKET_DB_ID": "ZY_NOTION_TICKET_DB",
      "NOTION_CHANGE_LOG_DB_ID": "ZY_NOTION_CHANGELOG_DB",
      "CORE_BRAIN_PAGE_ID": "ZY_NOTION_BRAIN_PAGE",
      "PORTRAIT_DB_ID": "ZY_NOTION_PORTRAIT_DB",
      "FINGERPRINT_DB_ID": "ZY_NOTION_FINGERPRINT_DB",
      "RECEIPT_DB_ID": "ZY_NOTION_RECEIPT_DB",
      "SIGNAL_LOG_DB_ID": "ZY_NOTION_SIGNAL_DB",
      "BRIDGE_QUEUE_DB_ID": "ZY_NOTION_BRIDGE_DB",
      "WAKE_REQUEST_DB_ID": "ZY_NOTION_WAKE_DB",
      "SKYEYE_PERSONA_DB_ID": "ZY_NOTION_SKYEYE_DB",
      "AGENT_BULLETIN_BOARD_PAGE_ID": "ZY_NOTION_BULLETIN_PAGE",
      "WORKORDER_DB_BINGSUO": "ZY_NOTION_WORKORDER_DB",
      "WORKORDER_DB_ZHIZHI": "ZY_NOTION_WORKORDER_DB",
      "SMTP_USER": "ZY_SMTP_USER",
      "SMTP_PASS": "ZY_SMTP_PASS",
      "MAIL_USERNAME": "ZY_SMTP_USER",
      "MAIL_PASSWORD": "ZY_SMTP_PASS",
      "EMAIL_ADDRESS": "ZY_SMTP_USER",
      "EMAIL_APP_PASSWORD": "ZY_SMTP_PASS",
      "HUMAN_EMAIL": "ZY_SMTP_USER",
      "MAIN_REPO_TOKEN": "ZY_GITHUB_PAT",
      "CROSS_REPO_TOKEN": "ZY_GITHUB_PAT",
      "DEPLOY_GITHUB_TOKEN": "ZY_GITHUB_PAT",
      "GDRIVE_CLIENT_ID": "ZY_GDRIVE_CLIENT_ID",
      "GDRIVE_CLIENT_SECRET": "ZY_GDRIVE_SECRET",
      "GDRIVE_REFRESH_TOKEN": "ZY_GDRIVE_REFRESH_TOKEN",
      "GDRIVE_REFRESH_TOKEN_DEV001": "ZY_GDRIVE_REFRESH_TOKEN",
      "GDRIVE_REFRESH_TOKEN_DEV002": "ZY_GDRIVE_REFRESH_TOKEN",
      "FEISHU_APP_ID": "ZY_FEISHU_APP_ID",
      "FEISHU_APP_SECRET": "ZY_FEISHU_APP_SECRET",
      "FEISHU_BROADCAST_CHAT_ID": "ZY_FEISHU_CHAT_ID",
      "DINGTALK_TOKEN": "ZY_DINGTALK_TOKEN",
      "GHAPP_APP_ID": "ZY_GHAPP_ID",
      "GHAPP_PRIVATE_KEY": "ZY_GHAPP_KEY",
      "PUSH_BROADCAST_TOKEN": "ZY_PUSH_TOKEN",
      "OSS_ACCESS_KEY": "ZY_OSS_KEY",
      "OSS_SECRET_KEY": "ZY_OSS_SECRET"
    }
  },
  "secrets": {
    "required": [
      {
        "id": 1,
        "name": "ZY_LLM_API_KEY",
        "category": "LLM · AI模型",
        "description": "三方LLM API统一密钥（支持多模型动态路由）",
        "type": "api_key",
        "example_format": "sk-xxxxxxxxxxxxxxxx",
        "replaces": [
          "LLM_API_KEY",
          "ANTHROPIC_API_KEY",
          "OPENAI_API_KEY",
          "DASHSCOPE_API_KEY",
          "DEEPSEEK_API_KEY",
          "GEMINI_API_KEY",
          "YUNWU_API_KEY",
          "MODEL_API_KEY"
        ],
        "used_by_workflows": [
          "llm-auto-tasks.yml",
          "daily-maintenance.yml",
          "server-patrol.yml",
          "notion-wake-listener.yml",
          "zhuyuan-daily-selfcheck.yml",
          "psp-daily-inspection.yml",
          "bingshuo-neural-system.yml",
          "syslog-issue-pipeline.yml",
          "syslog-auto-pipeline.yml",
          "syslog-pipeline.yml",
          "bridge-heartbeat.yml",
          "bridge-syslog-intake.yml",
          "bridge-broadcast-pdf.yml",
          "multi-persona-awakening.yml",
          "persona-thinking-window.yml",
          "deploy-to-server.yml",
          "zhuyuan-exec-engine.yml",
          "zhuyuan-issue-reply.yml",
          "tianyan-nightly-scan.yml"
        ],
        "note": "冰朔的三方API密钥。铸渊会根据任务类型自动选择最优模型（如DeepSeek用于低成本任务，Claude用于推理任务）"
      },
      {
        "id": 2,
        "name": "ZY_LLM_BASE_URL",
        "category": "LLM · AI模型",
        "description": "三方LLM API端点URL",
        "type": "url",
        "example_format": "https://api.example.com/v1",
        "replaces": [
          "LLM_BASE_URL"
        ],
        "used_by_workflows": [
          "llm-auto-tasks.yml",
          "daily-maintenance.yml",
          "server-patrol.yml",
          "notion-wake-listener.yml",
          "zhuyuan-daily-selfcheck.yml",
          "psp-daily-inspection.yml",
          "bingshuo-neural-system.yml",
          "syslog-issue-pipeline.yml",
          "syslog-auto-pipeline.yml",
          "bridge-heartbeat.yml",
          "bridge-syslog-intake.yml",
          "bridge-broadcast-pdf.yml",
          "multi-persona-awakening.yml",
          "persona-thinking-window.yml",
          "zhuyuan-exec-engine.yml"
        ],
        "note": "三方API的基础URL地址"
      },
      {
        "id": 3,
        "name": "ZY_SERVER_HOST",
        "category": "服务器 · 部署",
        "description": "铸渊主权服务器IP/主机名（腾讯云 ZY-SVR-002）",
        "type": "hostname",
        "example_format": "43.134.16.246",
        "replaces": [
          "DEPLOY_HOST",
          "ZY_SERVER_HOST"
        ],
        "used_by_workflows": [
          "deploy-to-server.yml",
          "deploy-to-zhuyuan-server.yml",
          "server-patrol.yml",
          "zhuyuan-skyeye.yml",
          "sandbox-deploy.yml",
          "deploy-backend.yml",
          "pm2-server-diagnose.yml"
        ],
        "note": "腾讯云轻量应用服务器·新加坡二区·43.134.16.246"
      },
      {
        "id": 4,
        "name": "ZY_SERVER_USER",
        "category": "服务器 · 部署",
        "description": "服务器SSH登录用户名",
        "type": "username",
        "example_format": "root 或 zhuyuan",
        "replaces": [
          "DEPLOY_USER",
          "ZY_SERVER_USER"
        ],
        "used_by_workflows": [
          "deploy-to-server.yml",
          "deploy-to-zhuyuan-server.yml",
          "server-patrol.yml",
          "zhuyuan-skyeye.yml",
          "sandbox-deploy.yml",
          "deploy-backend.yml",
          "pm2-server-diagnose.yml"
        ],
        "note": "SSH登录用户名"
      },
      {
        "id": 5,
        "name": "ZY_SERVER_KEY",
        "category": "服务器 · 部署",
        "description": "服务器SSH私钥（完整PEM格式）",
        "type": "ssh_private_key",
        "example_format": "-----BEGIN OPENSSH PRIVATE KEY-----\n...\n-----END OPENSSH PRIVATE KEY-----",
        "replaces": [
          "DEPLOY_KEY",
          "ZY_SERVER_KEY"
        ],
        "used_by_workflows": [
          "deploy-to-server.yml",
          "deploy-to-zhuyuan-server.yml",
          "server-patrol.yml",
          "zhuyuan-skyeye.yml",
          "sandbox-deploy.yml",
          "deploy-backend.yml",
          "pm2-server-diagnose.yml"
        ],
        "note": "⚠️ 关键密钥 · SSH私钥·请确保是腾讯云服务器的密钥"
      },
      {
        "id": 6,
        "name": "ZY_SERVER_PATH",
        "category": "服务器 · 部署",
        "description": "服务器部署基础路径",
        "type": "path",
        "example_format": "/opt/zhuyuan",
        "replaces": [
          "DEPLOY_PATH",
          "ZY_SERVER_PATH"
        ],
        "used_by_workflows": [
          "deploy-to-server.yml",
          "deploy-to-zhuyuan-server.yml"
        ],
        "note": "服务器上的部署根目录"
      },
      {
        "id": 7,
        "name": "ZY_DOMAIN_MAIN",
        "category": "服务器 · 域名",
        "description": "主站域名",
        "type": "domain",
        "example_format": "guanghulab.com",
        "replaces": [],
        "used_by_workflows": [
          "deploy-to-zhuyuan-server.yml",
          "deploy-to-server.yml"
        ],
        "note": "正式发布站点的域名"
      },
      {
        "id": 8,
        "name": "ZY_DOMAIN_PREVIEW",
        "category": "服务器 · 域名",
        "description": "预览站域名",
        "type": "domain",
        "example_format": "preview.guanghulab.com",
        "replaces": [],
        "used_by_workflows": [
          "deploy-to-zhuyuan-server.yml"
        ],
        "note": "预览/测试站点的域名"
      },
      {
        "id": 9,
        "name": "ZY_NOTION_TOKEN",
        "category": "Notion · 数据库",
        "description": "Notion API集成令牌（统一所有Notion访问）",
        "type": "api_token",
        "example_format": "ntn_xxxxxxxxxxxxxxxx 或 secret_xxxxxxxxxxxxxxxx",
        "replaces": [
          "NOTION_API_KEY",
          "NOTION_TOKEN_BINGSUO",
          "NOTION_TOKEN_ZHIZHI"
        ],
        "used_by_workflows": [
          "notion-poll.yml",
          "notion-wake-listener.yml",
          "meta-watchdog.yml",
          "zhuyuan-commander.yml",
          "zhuyuan-skyeye.yml",
          "zhuyuan-gate-guard.yml",
          "zhuyuan-exec-engine.yml",
          "zhuyuan-daily-selfcheck.yml",
          "zhuyuan-daily-inspection.yml",
          "server-patrol.yml",
          "daily-maintenance.yml",
          "bridge-heartbeat.yml",
          "bridge-changes-to-notion.yml",
          "bridge-syslog-to-notion.yml",
          "bridge-syslog-intake.yml",
          "bridge-broadcast-pdf.yml",
          "syslog-issue-pipeline.yml",
          "syslog-auto-pipeline.yml",
          "syslog-pipeline.yml",
          "pm2-server-diagnose.yml",
          "sandbox-deploy.yml",
          "deploy-to-server.yml"
        ],
        "note": "⚠️ 关键密钥 · 访问所有Notion数据库的统一令牌"
      },
      {
        "id": 10,
        "name": "ZY_NOTION_SYSLOG_DB",
        "category": "Notion · 数据库ID",
        "description": "SYSLOG系统日志数据库ID",
        "type": "notion_database_id",
        "example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
        "replaces": [
          "NOTION_SYSLOG_DB_ID",
          "NOTION_DB_SYSLOG",
          "SYSLOG_DB_ID"
        ],
        "used_by_workflows": [
          "bridge-syslog-to-notion.yml",
          "bridge-syslog-intake.yml",
          "zhuyuan-skyeye.yml",
          "syslog-pipeline.yml",
          "daily-maintenance.yml"
        ],
        "note": "系统日志数据库·铸渊运行日志的存储位置"
      },
      {
        "id": 11,
        "name": "ZY_NOTION_TICKET_DB",
        "category": "Notion · 数据库ID",
        "description": "工单/Ticket数据库ID",
        "type": "notion_database_id",
        "example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
        "replaces": [
          "NOTION_TICKET_DB_ID"
        ],
        "used_by_workflows": [
          "syslog-issue-pipeline.yml",
          "syslog-auto-pipeline.yml",
          "server-patrol.yml",
          "pm2-server-diagnose.yml"
        ],
        "note": "工单系统数据库·用于SYSLOG→Notion工单创建"
      },
      {
        "id": 12,
        "name": "ZY_NOTION_CHANGELOG_DB",
        "category": "Notion · 数据库ID",
        "description": "变更日志数据库ID",
        "type": "notion_database_id",
        "example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
        "replaces": [
          "NOTION_CHANGE_LOG_DB_ID"
        ],
        "used_by_workflows": [
          "bridge-changes-to-notion.yml",
          "deploy-to-server.yml"
        ],
        "note": "代码变更→Notion同步的目标数据库"
      },
      {
        "id": 13,
        "name": "ZY_NOTION_BRAIN_PAGE",
        "category": "Notion · 页面ID",
        "description": "核心大脑页面ID（Notion认知层根节点）",
        "type": "notion_page_id",
        "example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
        "replaces": [
          "CORE_BRAIN_PAGE_ID"
        ],
        "used_by_workflows": [
          "syslog-issue-pipeline.yml",
          "syslog-auto-pipeline.yml",
          "syslog-pipeline.yml"
        ],
        "note": "Notion大脑首页·认知层的根节点"
      },
      {
        "id": 14,
        "name": "ZY_NOTION_PORTRAIT_DB",
        "category": "Notion · 数据库ID",
        "description": "用户画像数据库ID",
        "type": "notion_database_id",
        "example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
        "replaces": [
          "PORTRAIT_DB_ID"
        ],
        "used_by_workflows": [
          "syslog-issue-pipeline.yml",
          "syslog-auto-pipeline.yml",
          "syslog-pipeline.yml"
        ],
        "note": "人格体画像数据库"
      },
      {
        "id": 15,
        "name": "ZY_NOTION_FINGERPRINT_DB",
        "category": "Notion · 数据库ID",
        "description": "系统指纹数据库ID",
        "type": "notion_database_id",
        "example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
        "replaces": [
          "FINGERPRINT_DB_ID"
        ],
        "used_by_workflows": [
          "syslog-issue-pipeline.yml",
          "syslog-auto-pipeline.yml",
          "syslog-pipeline.yml",
          "sandbox-deploy.yml"
        ],
        "note": "系统指纹记录数据库"
      },
      {
        "id": 16,
        "name": "ZY_NOTION_RECEIPT_DB",
        "category": "Notion · 数据库ID",
        "description": "回执数据库ID",
        "type": "notion_database_id",
        "example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
        "replaces": [
          "RECEIPT_DB_ID"
        ],
        "used_by_workflows": [
          "zhuyuan-gate-guard.yml",
          "zhuyuan-skyeye.yml",
          "zhuyuan-exec-engine.yml",
          "zhuyuan-daily-selfcheck.yml",
          "server-patrol.yml",
          "deploy-to-server.yml",
          "syslog-pipeline.yml"
        ],
        "note": "工作流执行回执·铸渊向Notion汇报执行结果"
      },
      {
        "id": 17,
        "name": "ZY_NOTION_SIGNAL_DB",
        "category": "Notion · 数据库ID",
        "description": "信号日志数据库ID",
        "type": "notion_database_id",
        "example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
        "replaces": [
          "SIGNAL_LOG_DB_ID"
        ],
        "used_by_workflows": [
          "notion-wake-listener.yml"
        ],
        "note": "信号收发日志数据库"
      },
      {
        "id": 18,
        "name": "ZY_NOTION_BRIDGE_DB",
        "category": "Notion · 数据库ID",
        "description": "桥接队列数据库ID",
        "type": "notion_database_id",
        "example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
        "replaces": [
          "BRIDGE_QUEUE_DB_ID"
        ],
        "used_by_workflows": [
          "bridge-heartbeat.yml",
          "bridge-syslog-intake.yml",
          "bridge-broadcast-pdf.yml"
        ],
        "note": "Notion↔GitHub桥接通信队列"
      },
      {
        "id": 19,
        "name": "ZY_NOTION_WAKE_DB",
        "category": "Notion · 数据库ID",
        "description": "唤醒请求数据库ID",
        "type": "notion_database_id",
        "example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
        "replaces": [
          "WAKE_REQUEST_DB_ID"
        ],
        "used_by_workflows": [
          "notion-wake-listener.yml"
        ],
        "note": "Notion侧→GitHub侧的唤醒请求存储"
      },
      {
        "id": 20,
        "name": "ZY_NOTION_SKYEYE_DB",
        "category": "Notion · 数据库ID",
        "description": "天眼人格数据库ID",
        "type": "notion_database_id",
        "example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
        "replaces": [
          "SKYEYE_PERSONA_DB_ID"
        ],
        "used_by_workflows": [
          "zhuyuan-skyeye.yml"
        ],
        "note": "天眼观测系统的人格体数据库"
      },
      {
        "id": 21,
        "name": "ZY_NOTION_BULLETIN_PAGE",
        "category": "Notion · 页面ID",
        "description": "Agent公告板页面ID",
        "type": "notion_page_id",
        "example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
        "replaces": [
          "AGENT_BULLETIN_BOARD_PAGE_ID"
        ],
        "used_by_workflows": [
          "zhuyuan-commander.yml",
          "zhuyuan-skyeye.yml"
        ],
        "note": "铸渊Agent间通信公告板"
      },
      {
        "id": 22,
        "name": "ZY_NOTION_WORKORDER_DB",
        "category": "Notion · 数据库ID",
        "description": "工单数据库ID（统一所有工单来源）",
        "type": "notion_database_id",
        "example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
        "replaces": [
          "WORKORDER_DB_BINGSUO",
          "WORKORDER_DB_ZHIZHI"
        ],
        "used_by_workflows": [
          "zhuyuan-daily-inspection.yml"
        ],
        "note": "统一工单数据库·替代之前按人格体分开的工单库"
      },
      {
        "id": 23,
        "name": "ZY_SMTP_USER",
        "category": "邮件 · SMTP",
        "description": "SMTP邮箱账号/发件人地址",
        "type": "email",
        "example_format": "zhuyuan@guanghulab.com",
        "replaces": [
          "SMTP_USER",
          "MAIL_USERNAME",
          "EMAIL_ADDRESS",
          "HUMAN_EMAIL"
        ],
        "used_by_workflows": [
          "syslog-issue-pipeline.yml",
          "syslog-auto-pipeline.yml",
          "server-patrol.yml",
          "zhuyuan-skyeye.yml",
          "sandbox-deploy.yml",
          "bridge-broadcast-pdf.yml",
          "merge-watchdog.yml",
          "psp-daily-inspection.yml"
        ],
        "note": "邮件发送的SMTP登录用户名/发件人地址"
      },
      {
        "id": 24,
        "name": "ZY_SMTP_PASS",
        "category": "邮件 · SMTP",
        "description": "SMTP邮箱密码/应用专用密码",
        "type": "password",
        "example_format": "应用专用密码（非邮箱登录密码）",
        "replaces": [
          "SMTP_PASS",
          "MAIL_PASSWORD",
          "EMAIL_APP_PASSWORD"
        ],
        "used_by_workflows": [
          "syslog-issue-pipeline.yml",
          "syslog-auto-pipeline.yml",
          "server-patrol.yml",
          "zhuyuan-skyeye.yml",
          "sandbox-deploy.yml",
          "bridge-broadcast-pdf.yml",
          "merge-watchdog.yml",
          "psp-daily-inspection.yml"
        ],
        "note": "⚠️ 关键密钥 · SMTP认证密码"
      },
      {
        "id": 25,
        "name": "ZY_GITHUB_PAT",
        "category": "GitHub · 访问令牌",
        "description": "GitHub个人访问令牌（跨仓库操作用）",
        "type": "github_pat",
        "example_format": "ghp_xxxxxxxxxxxxxxxx",
        "replaces": [
          "MAIN_REPO_TOKEN",
          "CROSS_REPO_TOKEN",
          "DEPLOY_GITHUB_TOKEN"
        ],
        "used_by_workflows": [
          "federation-bridge.yml",
          "sync-persona-studio.yml",
          "zhuyuan-exec-engine.yml",
          "merge-watchdog.yml",
          "tianyan-nightly-scan.yml",
          "auto-deploy-drive-bridge.yml"
        ],
        "note": "需要repo + workflow权限的GitHub PAT · 用于跨仓库和高级操作"
      }
    ],
    "optional": [
      {
        "id": 26,
        "name": "ZY_GDRIVE_CLIENT_ID",
        "category": "Google Drive · OAuth",
        "description": "Google Drive OAuth客户端ID",
        "type": "oauth_client_id",
        "replaces": [
          "GDRIVE_CLIENT_ID"
        ],
        "used_by_workflows": [
          "renew-gdrive-tokens.yml",
          "auto-deploy-drive-bridge.yml",
          "tcs-semantic-landing.yml"
        ],
        "note": "如果不使用Google Drive功能可以不配置",
        "needed": "仅在使用Google Drive桥接时需要"
      },
      {
        "id": 27,
        "name": "ZY_GDRIVE_SECRET",
        "category": "Google Drive · OAuth",
        "description": "Google Drive OAuth客户端密钥",
        "type": "oauth_client_secret",
        "replaces": [
          "GDRIVE_CLIENT_SECRET"
        ],
        "used_by_workflows": [
          "renew-gdrive-tokens.yml",
          "auto-deploy-drive-bridge.yml",
          "tcs-semantic-landing.yml"
        ],
        "note": "如果不使用Google Drive功能可以不配置",
        "needed": "仅在使用Google Drive桥接时需要"
      },
      {
        "id": 28,
        "name": "ZY_GDRIVE_REFRESH_TOKEN",
        "category": "Google Drive · OAuth",
        "description": "Google Drive OAuth刷新令牌",
        "type": "oauth_refresh_token",
        "replaces": [
          "GDRIVE_REFRESH_TOKEN",
          "GDRIVE_REFRESH_TOKEN_DEV001",
          "GDRIVE_REFRESH_TOKEN_DEV002"
        ],
        "used_by_workflows": [
          "renew-gdrive-tokens.yml",
          "auto-deploy-drive-bridge.yml",
          "tcs-semantic-landing.yml"
        ],
        "note": "统一为一个刷新令牌·替代之前3个(主+DEV001+DEV002)",
        "needed": "仅在使用Google Drive桥接时需要"
      },
      {
        "id": 29,
        "name": "ZY_FEISHU_APP_ID",
        "category": "飞书 · 集成",
        "description": "飞书应用ID",
        "type": "app_id",
        "replaces": [
          "FEISHU_APP_ID"
        ],
        "used_by_workflows": [
          "bridge-broadcast-pdf.yml"
        ],
        "note": "飞书广播分发需要",
        "needed": "仅在使用飞书通知时需要"
      },
      {
        "id": 30,
        "name": "ZY_FEISHU_APP_SECRET",
        "category": "飞书 · 集成",
        "description": "飞书应用密钥",
        "type": "app_secret",
        "replaces": [
          "FEISHU_APP_SECRET"
        ],
        "used_by_workflows": [
          "bridge-broadcast-pdf.yml"
        ],
        "note": "飞书广播分发需要",
        "needed": "仅在使用飞书通知时需要"
      },
      {
        "id": 31,
        "name": "ZY_FEISHU_CHAT_ID",
        "category": "飞书 · 集成",
        "description": "飞书广播群ID",
        "type": "chat_id",
        "replaces": [
          "FEISHU_BROADCAST_CHAT_ID"
        ],
        "used_by_workflows": [
          "bridge-broadcast-pdf.yml"
        ],
        "note": "飞书广播目标群聊",
        "needed": "仅在使用飞书通知时需要"
      },
      {
        "id": 32,
        "name": "ZY_DINGTALK_TOKEN",
        "category": "钉钉 · 集成",
        "description": "钉钉机器人令牌",
        "type": "bot_token",
        "replaces": [
          "DINGTALK_TOKEN"
        ],
        "used_by_workflows": [
          "bridge-broadcast-pdf.yml"
        ],
        "note": "钉钉消息推送需要",
        "needed": "仅在使用钉钉通知时需要"
      },
      {
        "id": 33,
        "name": "ZY_GHAPP_ID",
        "category": "GitHub App · 集成",
        "description": "GitHub App ID",
        "type": "app_id",
        "replaces": [
          "GHAPP_APP_ID"
        ],
        "used_by_workflows": [
          "zhuyuan-exec-engine.yml"
        ],
        "note": "铸渊远程执行引擎使用的GitHub App",
        "needed": "仅在使用远程执行引擎时需要"
      },
      {
        "id": 34,
        "name": "ZY_GHAPP_KEY",
        "category": "GitHub App · 集成",
        "description": "GitHub App私钥（PEM格式）",
        "type": "private_key",
        "replaces": [
          "GHAPP_PRIVATE_KEY"
        ],
        "used_by_workflows": [
          "zhuyuan-exec-engine.yml"
        ],
        "note": "⚠️ 关键密钥 · GitHub App的PEM私钥",
        "needed": "仅在使用远程执行引擎时需要"
      },
      {
        "id": 35,
        "name": "ZY_PUSH_TOKEN",
        "category": "推送 · 广播",
        "description": "推送广播令牌",
        "type": "token",
        "replaces": [
          "PUSH_BROADCAST_TOKEN"
        ],
        "used_by_workflows": [
          "syslog-pipeline.yml"
        ],
        "note": "SYSLOG广播推送令牌",
        "needed": "仅在使用推送广播时需要"
      },
      {
        "id": 36,
        "name": "ZY_OSS_KEY",
        "category": "对象存储 · 已弃用评估中",
        "description": "对象存储Access Key（原阿里云OSS）",
        "type": "access_key",
        "replaces": [
          "OSS_ACCESS_KEY"
        ],
        "used_by_workflows": [
          "bridge-broadcast-pdf.yml"
        ],
        "note": "⚠️ 阿里云已弃用·评估是否迁移到腾讯云COS或其他存储",
        "needed": "仅bridge-broadcast-pdf使用·可能需要替换为其他存储方案"
      },
      {
        "id": 37,
        "name": "ZY_OSS_SECRET",
        "category": "对象存储 · 已弃用评估中",
        "description": "对象存储Secret Key（原阿里云OSS）",
        "type": "secret_key",
        "replaces": [
          "OSS_SECRET_KEY"
        ],
        "used_by_workflows": [
          "bridge-broadcast-pdf.yml"
        ],
        "note": "⚠️ 阿里云已弃用·评估是否迁移到腾讯云COS或其他存储",
        "needed": "仅bridge-broadcast-pdf使用·可能需要替换为其他存储方案"
      }
    ],
    "auto_provided": [
      {
        "name": "GITHUB_TOKEN",
        "category": "GitHub · 自动",
        "description": "GitHub Actions自动提供的令牌（无需配置）",
        "note": "每次工作流运行自动生成·权限在workflow文件的permissions中定义"
      }
    ],
    "deprecated": [
      {
        "name": "DEPLOY_HOST",
        "replaced_by": "ZY_SERVER_HOST",
        "reason": "阿里云→腾讯云迁移·统一命名"
      },
      {
        "name": "DEPLOY_USER",
        "replaced_by": "ZY_SERVER_USER",
        "reason": "统一命名"
      },
      {
        "name": "DEPLOY_KEY",
        "replaced_by": "ZY_SERVER_KEY",
        "reason": "统一命名"
      },
      {
        "name": "DEPLOY_PATH",
        "replaced_by": "ZY_SERVER_PATH",
        "reason": "统一命名"
      },
      {
        "name": "ANTHROPIC_API_KEY",
        "replaced_by": "ZY_LLM_API_KEY",
        "reason": "三方API统一密钥·不再分别配置各厂商密钥"
      },
      {
        "name": "OPENAI_API_KEY",
        "replaced_by": "ZY_LLM_API_KEY",
        "reason": "三方API统一密钥"
      },
      {
        "name": "DASHSCOPE_API_KEY",
        "replaced_by": "ZY_LLM_API_KEY",
        "reason": "三方API统一密钥"
      },
      {
        "name": "DEEPSEEK_API_KEY",
        "replaced_by": "ZY_LLM_API_KEY",
        "reason": "三方API统一密钥"
      },
      {
        "name": "GEMINI_API_KEY",
        "replaced_by": "ZY_LLM_API_KEY",
        "reason": "三方API统一密钥"
      },
      {
        "name": "YUNWU_API_KEY",
        "replaced_by": "ZY_LLM_API_KEY",
        "reason": "三方API统一密钥"
      },
      {
        "name": "MODEL_API_KEY",
        "replaced_by": "ZY_LLM_API_KEY",
        "reason": "三方API统一密钥"
      },
      {
        "name": "NOTION_API_KEY",
        "replaced_by": "ZY_NOTION_TOKEN",
        "reason": "统一命名"
      },
      {
        "name": "NOTION_TOKEN_BINGSUO",
        "replaced_by": "ZY_NOTION_TOKEN",
        "reason": "按人格体分密钥已弃用·统一为一个令牌"
      },
      {
        "name": "NOTION_TOKEN_ZHIZHI",
        "replaced_by": "ZY_NOTION_TOKEN",
        "reason": "按人格体分密钥已弃用·统一为一个令牌"
      },
      {
        "name": "SMTP_USER",
        "replaced_by": "ZY_SMTP_USER",
        "reason": "统一命名"
      },
      {
        "name": "SMTP_PASS",
        "replaced_by": "ZY_SMTP_PASS",
        "reason": "统一命名"
      },
      {
        "name": "MAIL_USERNAME",
        "replaced_by": "ZY_SMTP_USER",
        "reason": "重复密钥·合并"
      },
      {
        "name": "MAIL_PASSWORD",
        "replaced_by": "ZY_SMTP_PASS",
        "reason": "重复密钥·合并"
      },
      {
        "name": "EMAIL_ADDRESS",
        "replaced_by": "ZY_SMTP_USER",
        "reason": "重复密钥·合并"
      },
      {
        "name": "EMAIL_APP_PASSWORD",
        "replaced_by": "ZY_SMTP_PASS",
        "reason": "重复密钥·合并"
      },
      {
        "name": "HUMAN_EMAIL",
        "replaced_by": "ZY_SMTP_USER",
        "reason": "重复密钥·合并"
      },
      {
        "name": "MAIN_REPO_TOKEN",
        "replaced_by": "ZY_GITHUB_PAT",
        "reason": "统一GitHub PAT"
      },
      {
        "name": "CROSS_REPO_TOKEN",
        "replaced_by": "ZY_GITHUB_PAT",
        "reason": "统一GitHub PAT"
      },
      {
        "name": "DEPLOY_GITHUB_TOKEN",
        "replaced_by": "ZY_GITHUB_PAT",
        "reason": "统一GitHub PAT"
      },
      {
        "name": "GDRIVE_REFRESH_TOKEN_DEV001",
        "replaced_by": "ZY_GDRIVE_REFRESH_TOKEN",
        "reason": "统一为一个刷新令牌"
      },
      {
        "name": "GDRIVE_REFRESH_TOKEN_DEV002",
        "replaced_by": "ZY_GDRIVE_REFRESH_TOKEN",
        "reason": "统一为一个刷新令牌"
      },
      {
        "name": "WORKORDER_DB_BINGSUO",
        "replaced_by": "ZY_NOTION_WORKORDER_DB",
        "reason": "按人格体分数据库已弃用·统一为一个工单库"
      },
      {
        "name": "WORKORDER_DB_ZHIZHI",
        "replaced_by": "ZY_NOTION_WORKORDER_DB",
        "reason": "按人格体分数据库已弃用·统一为一个工单库"
      },
      {
        "name": "NOTION_DB_SYSLOG",
        "replaced_by": "ZY_NOTION_SYSLOG_DB",
        "reason": "重复命名·统一"
      }
    ]
  },
  "security_alerts": [
    {
      "severity": "CRITICAL",
      "issue": ".env文件包含硬编码凭证（DingTalk+KIMI API Key）",
      "action": "已从git跟踪中移除。⚠️ 由于凭证曾提交到仓库历史，这些密钥应视为已泄露。冰朔需立即轮换/重新生成这些密钥（DingTalk App Key/Secret、KIMI API Key），旧密钥不应再使用。",
      "files": [
        ".env",
        ".env.rtf"
      ]
    }
  ],
  "workflow_status": {
    "core_alive": {
      "description": "6个核心存活工作流（铸渊身体器官）",
      "workflows": [
        {
          "file": "notion-wake-listener.yml",
          "organ": "ZY-WF-听潮",
          "role": "耳朵·信号接收",
          "status": "active"
        },
        {
          "file": "deploy-to-server.yml",
          "organ": "ZY-WF-锻心",
          "role": "心脏·部署引擎",
          "status": "active"
        },
        {
          "file": "bingshuo-neural-system.yml",
          "organ": "ZY-WF-织脉",
          "role": "神经网络·大脑同步",
          "status": "active"
        },
        {
          "file": "deploy-pages.yml",
          "organ": "ZY-WF-映阁",
          "role": "面容·前端展示",
          "status": "active"
        },
        {
          "file": "meta-watchdog.yml",
          "organ": "ZY-WF-守夜",
          "role": "免疫系统·健康监控",
          "status": "active"
        },
        {
          "file": "preview-deploy.yml",
          "organ": "ZY-WF-试镜",
          "role": "试衣间·预览部署",
          "status": "active"
        }
      ]
    },
    "total_active": 48,
    "no_secrets_needed": [
      "deploy-pages.yml",
      "preview-deploy.yml",
      "bridge-session-summary.yml",
      "buffer-collect.yml",
      "buffer-flush.yml",
      "staging-preview.yml",
      "process-notion-orders.yml",
      "tianyan-daily-patrol.yml",
      "zhuyuan-brain-sync.yml",
      "zhuyuan-pr-review.yml",
      "brain-sync.yml",
      "agent-checkin.yml",
      "copilot-dev-bridge.yml",
      "feishu-syslog-bridge.yml"
    ]
  }
}