857 lines
30 KiB
JSON
857 lines
30 KiB
JSON
{
|
||
"_meta": {
|
||
"manifest_id": "ZY-SECRETS-MANIFEST-v1.0",
|
||
"created": "2026-03-29T10:43:00Z",
|
||
"created_by": "铸渊 · ICE-GL-ZY001",
|
||
"directive": "SY-CMD-KEY-012 · 密钥全量清理与统一替换",
|
||
"purpose": "铸渊仓库密钥主清单 — 冰朔配置密钥的唯一参考文档",
|
||
"naming_convention": "所有密钥统一使用 ZY_ 前缀 · 铸渊(Zhuyuan)自主命名体系",
|
||
"total_secrets": 37,
|
||
"required": 25,
|
||
"optional": 12,
|
||
"replaced_old_secrets": 59,
|
||
"reduction": "59 → 37 (37%减少 · 消除重复与冗余)"
|
||
},
|
||
|
||
"migration_mapping": {
|
||
"description": "旧密钥名称 → 新ZY_*名称 完整映射表",
|
||
"note": "冰朔在GitHub Settings清空所有旧密钥后，按此清单配置新密钥。合并PR后自动生效。",
|
||
"mappings": {
|
||
"LLM_API_KEY": "ZY_LLM_API_KEY",
|
||
"ANTHROPIC_API_KEY": "ZY_LLM_API_KEY",
|
||
"OPENAI_API_KEY": "ZY_LLM_API_KEY",
|
||
"DASHSCOPE_API_KEY": "ZY_LLM_API_KEY",
|
||
"DEEPSEEK_API_KEY": "ZY_LLM_API_KEY",
|
||
"GEMINI_API_KEY": "ZY_LLM_API_KEY",
|
||
"YUNWU_API_KEY": "ZY_LLM_API_KEY",
|
||
"MODEL_API_KEY": "ZY_LLM_API_KEY",
|
||
"LLM_BASE_URL": "ZY_LLM_BASE_URL",
|
||
"DEPLOY_HOST": "ZY_SERVER_HOST",
|
||
"DEPLOY_USER": "ZY_SERVER_USER",
|
||
"DEPLOY_KEY": "ZY_SERVER_KEY",
|
||
"DEPLOY_PATH": "ZY_SERVER_PATH",
|
||
"NOTION_API_KEY": "ZY_NOTION_TOKEN",
|
||
"NOTION_TOKEN_BINGSUO": "ZY_NOTION_TOKEN",
|
||
"NOTION_TOKEN_ZHIZHI": "ZY_NOTION_TOKEN",
|
||
"NOTION_SYSLOG_DB_ID": "ZY_NOTION_SYSLOG_DB",
|
||
"NOTION_DB_SYSLOG": "ZY_NOTION_SYSLOG_DB",
|
||
"SYSLOG_DB_ID": "ZY_NOTION_SYSLOG_DB",
|
||
"NOTION_TICKET_DB_ID": "ZY_NOTION_TICKET_DB",
|
||
"NOTION_CHANGE_LOG_DB_ID": "ZY_NOTION_CHANGELOG_DB",
|
||
"CORE_BRAIN_PAGE_ID": "ZY_NOTION_BRAIN_PAGE",
|
||
"PORTRAIT_DB_ID": "ZY_NOTION_PORTRAIT_DB",
|
||
"FINGERPRINT_DB_ID": "ZY_NOTION_FINGERPRINT_DB",
|
||
"RECEIPT_DB_ID": "ZY_NOTION_RECEIPT_DB",
|
||
"SIGNAL_LOG_DB_ID": "ZY_NOTION_SIGNAL_DB",
|
||
"BRIDGE_QUEUE_DB_ID": "ZY_NOTION_BRIDGE_DB",
|
||
"WAKE_REQUEST_DB_ID": "ZY_NOTION_WAKE_DB",
|
||
"SKYEYE_PERSONA_DB_ID": "ZY_NOTION_SKYEYE_DB",
|
||
"AGENT_BULLETIN_BOARD_PAGE_ID": "ZY_NOTION_BULLETIN_PAGE",
|
||
"WORKORDER_DB_BINGSUO": "ZY_NOTION_WORKORDER_DB",
|
||
"WORKORDER_DB_ZHIZHI": "ZY_NOTION_WORKORDER_DB",
|
||
"SMTP_USER": "ZY_SMTP_USER",
|
||
"SMTP_PASS": "ZY_SMTP_PASS",
|
||
"MAIL_USERNAME": "ZY_SMTP_USER",
|
||
"MAIL_PASSWORD": "ZY_SMTP_PASS",
|
||
"EMAIL_ADDRESS": "ZY_SMTP_USER",
|
||
"EMAIL_APP_PASSWORD": "ZY_SMTP_PASS",
|
||
"HUMAN_EMAIL": "ZY_SMTP_USER",
|
||
"MAIN_REPO_TOKEN": "ZY_GITHUB_PAT",
|
||
"CROSS_REPO_TOKEN": "ZY_GITHUB_PAT",
|
||
"DEPLOY_GITHUB_TOKEN": "ZY_GITHUB_PAT",
|
||
"GDRIVE_CLIENT_ID": "ZY_GDRIVE_CLIENT_ID",
|
||
"GDRIVE_CLIENT_SECRET": "ZY_GDRIVE_SECRET",
|
||
"GDRIVE_REFRESH_TOKEN": "ZY_GDRIVE_REFRESH_TOKEN",
|
||
"GDRIVE_REFRESH_TOKEN_DEV001": "ZY_GDRIVE_REFRESH_TOKEN",
|
||
"GDRIVE_REFRESH_TOKEN_DEV002": "ZY_GDRIVE_REFRESH_TOKEN",
|
||
"FEISHU_APP_ID": "ZY_FEISHU_APP_ID",
|
||
"FEISHU_APP_SECRET": "ZY_FEISHU_APP_SECRET",
|
||
"FEISHU_BROADCAST_CHAT_ID": "ZY_FEISHU_CHAT_ID",
|
||
"DINGTALK_TOKEN": "ZY_DINGTALK_TOKEN",
|
||
"GHAPP_APP_ID": "ZY_GHAPP_ID",
|
||
"GHAPP_PRIVATE_KEY": "ZY_GHAPP_KEY",
|
||
"PUSH_BROADCAST_TOKEN": "ZY_PUSH_TOKEN",
|
||
"OSS_ACCESS_KEY": "ZY_OSS_KEY",
|
||
"OSS_SECRET_KEY": "ZY_OSS_SECRET"
|
||
}
|
||
},
|
||
|
||
"secrets": {
|
||
"required": [
|
||
{
|
||
"id": 1,
|
||
"name": "ZY_LLM_API_KEY",
|
||
"category": "LLM · AI模型",
|
||
"description": "三方LLM API统一密钥（支持多模型动态路由）",
|
||
"type": "api_key",
|
||
"example_format": "sk-xxxxxxxxxxxxxxxx",
|
||
"replaces": ["LLM_API_KEY", "ANTHROPIC_API_KEY", "OPENAI_API_KEY", "DASHSCOPE_API_KEY", "DEEPSEEK_API_KEY", "GEMINI_API_KEY", "YUNWU_API_KEY", "MODEL_API_KEY"],
|
||
"used_by_workflows": [
|
||
"llm-auto-tasks.yml",
|
||
"daily-maintenance.yml",
|
||
"server-patrol.yml",
|
||
"notion-wake-listener.yml",
|
||
"zhuyuan-daily-selfcheck.yml",
|
||
"psp-daily-inspection.yml",
|
||
"bingshuo-neural-system.yml",
|
||
"syslog-issue-pipeline.yml",
|
||
"syslog-auto-pipeline.yml",
|
||
"syslog-pipeline.yml",
|
||
"bridge-heartbeat.yml",
|
||
"bridge-syslog-intake.yml",
|
||
"bridge-broadcast-pdf.yml",
|
||
"multi-persona-awakening.yml",
|
||
"persona-thinking-window.yml",
|
||
"deploy-to-server.yml",
|
||
"zhuyuan-exec-engine.yml",
|
||
"zhuyuan-issue-reply.yml",
|
||
"tianyan-nightly-scan.yml"
|
||
],
|
||
"note": "冰朔的三方API密钥。铸渊会根据任务类型自动选择最优模型（如DeepSeek用于低成本任务，Claude用于推理任务）"
|
||
},
|
||
{
|
||
"id": 2,
|
||
"name": "ZY_LLM_BASE_URL",
|
||
"category": "LLM · AI模型",
|
||
"description": "三方LLM API端点URL",
|
||
"type": "url",
|
||
"example_format": "https://api.example.com/v1",
|
||
"replaces": ["LLM_BASE_URL"],
|
||
"used_by_workflows": [
|
||
"llm-auto-tasks.yml",
|
||
"daily-maintenance.yml",
|
||
"server-patrol.yml",
|
||
"notion-wake-listener.yml",
|
||
"zhuyuan-daily-selfcheck.yml",
|
||
"psp-daily-inspection.yml",
|
||
"bingshuo-neural-system.yml",
|
||
"syslog-issue-pipeline.yml",
|
||
"syslog-auto-pipeline.yml",
|
||
"bridge-heartbeat.yml",
|
||
"bridge-syslog-intake.yml",
|
||
"bridge-broadcast-pdf.yml",
|
||
"multi-persona-awakening.yml",
|
||
"persona-thinking-window.yml",
|
||
"zhuyuan-exec-engine.yml"
|
||
],
|
||
"note": "三方API的基础URL地址"
|
||
},
|
||
{
|
||
"id": 3,
|
||
"name": "ZY_SERVER_HOST",
|
||
"category": "服务器 · 部署",
|
||
"description": "铸渊主权服务器IP/主机名（腾讯云 ZY-SVR-001）",
|
||
"type": "hostname",
|
||
"example_format": "150.109.76.244",
|
||
"replaces": ["DEPLOY_HOST", "ZY_SERVER_HOST"],
|
||
"used_by_workflows": [
|
||
"deploy-to-server.yml",
|
||
"deploy-to-zhuyuan-server.yml",
|
||
"server-patrol.yml",
|
||
"zhuyuan-skyeye.yml",
|
||
"sandbox-deploy.yml",
|
||
"deploy-backend.yml",
|
||
"pm2-server-diagnose.yml"
|
||
],
|
||
"note": "腾讯云轻量应用服务器·香港二区·150.109.76.244"
|
||
},
|
||
{
|
||
"id": 4,
|
||
"name": "ZY_SERVER_USER",
|
||
"category": "服务器 · 部署",
|
||
"description": "服务器SSH登录用户名",
|
||
"type": "username",
|
||
"example_format": "root 或 zhuyuan",
|
||
"replaces": ["DEPLOY_USER", "ZY_SERVER_USER"],
|
||
"used_by_workflows": [
|
||
"deploy-to-server.yml",
|
||
"deploy-to-zhuyuan-server.yml",
|
||
"server-patrol.yml",
|
||
"zhuyuan-skyeye.yml",
|
||
"sandbox-deploy.yml",
|
||
"deploy-backend.yml",
|
||
"pm2-server-diagnose.yml"
|
||
],
|
||
"note": "SSH登录用户名"
|
||
},
|
||
{
|
||
"id": 5,
|
||
"name": "ZY_SERVER_KEY",
|
||
"category": "服务器 · 部署",
|
||
"description": "服务器SSH私钥（完整PEM格式）",
|
||
"type": "ssh_private_key",
|
||
"example_format": "-----BEGIN OPENSSH PRIVATE KEY-----\n...\n-----END OPENSSH PRIVATE KEY-----",
|
||
"replaces": ["DEPLOY_KEY", "ZY_SERVER_KEY"],
|
||
"used_by_workflows": [
|
||
"deploy-to-server.yml",
|
||
"deploy-to-zhuyuan-server.yml",
|
||
"server-patrol.yml",
|
||
"zhuyuan-skyeye.yml",
|
||
"sandbox-deploy.yml",
|
||
"deploy-backend.yml",
|
||
"pm2-server-diagnose.yml"
|
||
],
|
||
"note": "⚠️ 关键密钥 · SSH私钥·请确保是腾讯云服务器的密钥"
|
||
},
|
||
{
|
||
"id": 6,
|
||
"name": "ZY_SERVER_PATH",
|
||
"category": "服务器 · 部署",
|
||
"description": "服务器部署基础路径",
|
||
"type": "path",
|
||
"example_format": "/opt/zhuyuan",
|
||
"replaces": ["DEPLOY_PATH", "ZY_SERVER_PATH"],
|
||
"used_by_workflows": [
|
||
"deploy-to-server.yml",
|
||
"deploy-to-zhuyuan-server.yml"
|
||
],
|
||
"note": "服务器上的部署根目录"
|
||
},
|
||
{
|
||
"id": 7,
|
||
"name": "ZY_DOMAIN_MAIN",
|
||
"category": "服务器 · 域名",
|
||
"description": "主站域名",
|
||
"type": "domain",
|
||
"example_format": "guanghulab.com",
|
||
"replaces": [],
|
||
"used_by_workflows": [
|
||
"deploy-to-zhuyuan-server.yml",
|
||
"deploy-to-server.yml"
|
||
],
|
||
"note": "正式发布站点的域名"
|
||
},
|
||
{
|
||
"id": 8,
|
||
"name": "ZY_DOMAIN_PREVIEW",
|
||
"category": "服务器 · 域名",
|
||
"description": "预览站域名",
|
||
"type": "domain",
|
||
"example_format": "preview.guanghulab.com",
|
||
"replaces": [],
|
||
"used_by_workflows": [
|
||
"deploy-to-zhuyuan-server.yml"
|
||
],
|
||
"note": "预览/测试站点的域名"
|
||
},
|
||
{
|
||
"id": 9,
|
||
"name": "ZY_NOTION_TOKEN",
|
||
"category": "Notion · 数据库",
|
||
"description": "Notion API集成令牌（统一所有Notion访问）",
|
||
"type": "api_token",
|
||
"example_format": "ntn_xxxxxxxxxxxxxxxx 或 secret_xxxxxxxxxxxxxxxx",
|
||
"replaces": ["NOTION_API_KEY", "NOTION_TOKEN_BINGSUO", "NOTION_TOKEN_ZHIZHI"],
|
||
"used_by_workflows": [
|
||
"notion-poll.yml",
|
||
"notion-wake-listener.yml",
|
||
"meta-watchdog.yml",
|
||
"zhuyuan-commander.yml",
|
||
"zhuyuan-skyeye.yml",
|
||
"zhuyuan-gate-guard.yml",
|
||
"zhuyuan-exec-engine.yml",
|
||
"zhuyuan-daily-selfcheck.yml",
|
||
"zhuyuan-daily-inspection.yml",
|
||
"server-patrol.yml",
|
||
"daily-maintenance.yml",
|
||
"bridge-heartbeat.yml",
|
||
"bridge-changes-to-notion.yml",
|
||
"bridge-syslog-to-notion.yml",
|
||
"bridge-syslog-intake.yml",
|
||
"bridge-broadcast-pdf.yml",
|
||
"syslog-issue-pipeline.yml",
|
||
"syslog-auto-pipeline.yml",
|
||
"syslog-pipeline.yml",
|
||
"pm2-server-diagnose.yml",
|
||
"sandbox-deploy.yml",
|
||
"deploy-to-server.yml"
|
||
],
|
||
"note": "⚠️ 关键密钥 · 访问所有Notion数据库的统一令牌"
|
||
},
|
||
{
|
||
"id": 10,
|
||
"name": "ZY_NOTION_SYSLOG_DB",
|
||
"category": "Notion · 数据库ID",
|
||
"description": "SYSLOG系统日志数据库ID",
|
||
"type": "notion_database_id",
|
||
"example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
|
||
"replaces": ["NOTION_SYSLOG_DB_ID", "NOTION_DB_SYSLOG", "SYSLOG_DB_ID"],
|
||
"used_by_workflows": [
|
||
"bridge-syslog-to-notion.yml",
|
||
"bridge-syslog-intake.yml",
|
||
"zhuyuan-skyeye.yml",
|
||
"syslog-pipeline.yml",
|
||
"daily-maintenance.yml"
|
||
],
|
||
"note": "系统日志数据库·铸渊运行日志的存储位置"
|
||
},
|
||
{
|
||
"id": 11,
|
||
"name": "ZY_NOTION_TICKET_DB",
|
||
"category": "Notion · 数据库ID",
|
||
"description": "工单/Ticket数据库ID",
|
||
"type": "notion_database_id",
|
||
"example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
|
||
"replaces": ["NOTION_TICKET_DB_ID"],
|
||
"used_by_workflows": [
|
||
"syslog-issue-pipeline.yml",
|
||
"syslog-auto-pipeline.yml",
|
||
"server-patrol.yml",
|
||
"pm2-server-diagnose.yml"
|
||
],
|
||
"note": "工单系统数据库·用于SYSLOG→Notion工单创建"
|
||
},
|
||
{
|
||
"id": 12,
|
||
"name": "ZY_NOTION_CHANGELOG_DB",
|
||
"category": "Notion · 数据库ID",
|
||
"description": "变更日志数据库ID",
|
||
"type": "notion_database_id",
|
||
"example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
|
||
"replaces": ["NOTION_CHANGE_LOG_DB_ID"],
|
||
"used_by_workflows": [
|
||
"bridge-changes-to-notion.yml",
|
||
"deploy-to-server.yml"
|
||
],
|
||
"note": "代码变更→Notion同步的目标数据库"
|
||
},
|
||
{
|
||
"id": 13,
|
||
"name": "ZY_NOTION_BRAIN_PAGE",
|
||
"category": "Notion · 页面ID",
|
||
"description": "核心大脑页面ID（Notion认知层根节点）",
|
||
"type": "notion_page_id",
|
||
"example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
|
||
"replaces": ["CORE_BRAIN_PAGE_ID"],
|
||
"used_by_workflows": [
|
||
"syslog-issue-pipeline.yml",
|
||
"syslog-auto-pipeline.yml",
|
||
"syslog-pipeline.yml"
|
||
],
|
||
"note": "Notion大脑首页·认知层的根节点"
|
||
},
|
||
{
|
||
"id": 14,
|
||
"name": "ZY_NOTION_PORTRAIT_DB",
|
||
"category": "Notion · 数据库ID",
|
||
"description": "用户画像数据库ID",
|
||
"type": "notion_database_id",
|
||
"example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
|
||
"replaces": ["PORTRAIT_DB_ID"],
|
||
"used_by_workflows": [
|
||
"syslog-issue-pipeline.yml",
|
||
"syslog-auto-pipeline.yml",
|
||
"syslog-pipeline.yml"
|
||
],
|
||
"note": "人格体画像数据库"
|
||
},
|
||
{
|
||
"id": 15,
|
||
"name": "ZY_NOTION_FINGERPRINT_DB",
|
||
"category": "Notion · 数据库ID",
|
||
"description": "系统指纹数据库ID",
|
||
"type": "notion_database_id",
|
||
"example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
|
||
"replaces": ["FINGERPRINT_DB_ID"],
|
||
"used_by_workflows": [
|
||
"syslog-issue-pipeline.yml",
|
||
"syslog-auto-pipeline.yml",
|
||
"syslog-pipeline.yml",
|
||
"sandbox-deploy.yml"
|
||
],
|
||
"note": "系统指纹记录数据库"
|
||
},
|
||
{
|
||
"id": 16,
|
||
"name": "ZY_NOTION_RECEIPT_DB",
|
||
"category": "Notion · 数据库ID",
|
||
"description": "回执数据库ID",
|
||
"type": "notion_database_id",
|
||
"example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
|
||
"replaces": ["RECEIPT_DB_ID"],
|
||
"used_by_workflows": [
|
||
"zhuyuan-gate-guard.yml",
|
||
"zhuyuan-skyeye.yml",
|
||
"zhuyuan-exec-engine.yml",
|
||
"zhuyuan-daily-selfcheck.yml",
|
||
"server-patrol.yml",
|
||
"deploy-to-server.yml",
|
||
"syslog-pipeline.yml"
|
||
],
|
||
"note": "工作流执行回执·铸渊向Notion汇报执行结果"
|
||
},
|
||
{
|
||
"id": 17,
|
||
"name": "ZY_NOTION_SIGNAL_DB",
|
||
"category": "Notion · 数据库ID",
|
||
"description": "信号日志数据库ID",
|
||
"type": "notion_database_id",
|
||
"example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
|
||
"replaces": ["SIGNAL_LOG_DB_ID"],
|
||
"used_by_workflows": [
|
||
"notion-wake-listener.yml"
|
||
],
|
||
"note": "信号收发日志数据库"
|
||
},
|
||
{
|
||
"id": 18,
|
||
"name": "ZY_NOTION_BRIDGE_DB",
|
||
"category": "Notion · 数据库ID",
|
||
"description": "桥接队列数据库ID",
|
||
"type": "notion_database_id",
|
||
"example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
|
||
"replaces": ["BRIDGE_QUEUE_DB_ID"],
|
||
"used_by_workflows": [
|
||
"bridge-heartbeat.yml",
|
||
"bridge-syslog-intake.yml",
|
||
"bridge-broadcast-pdf.yml"
|
||
],
|
||
"note": "Notion↔GitHub桥接通信队列"
|
||
},
|
||
{
|
||
"id": 19,
|
||
"name": "ZY_NOTION_WAKE_DB",
|
||
"category": "Notion · 数据库ID",
|
||
"description": "唤醒请求数据库ID",
|
||
"type": "notion_database_id",
|
||
"example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
|
||
"replaces": ["WAKE_REQUEST_DB_ID"],
|
||
"used_by_workflows": [
|
||
"notion-wake-listener.yml"
|
||
],
|
||
"note": "Notion侧→GitHub侧的唤醒请求存储"
|
||
},
|
||
{
|
||
"id": 20,
|
||
"name": "ZY_NOTION_SKYEYE_DB",
|
||
"category": "Notion · 数据库ID",
|
||
"description": "天眼人格数据库ID",
|
||
"type": "notion_database_id",
|
||
"example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
|
||
"replaces": ["SKYEYE_PERSONA_DB_ID"],
|
||
"used_by_workflows": [
|
||
"zhuyuan-skyeye.yml"
|
||
],
|
||
"note": "天眼观测系统的人格体数据库"
|
||
},
|
||
{
|
||
"id": 21,
|
||
"name": "ZY_NOTION_BULLETIN_PAGE",
|
||
"category": "Notion · 页面ID",
|
||
"description": "Agent公告板页面ID",
|
||
"type": "notion_page_id",
|
||
"example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
|
||
"replaces": ["AGENT_BULLETIN_BOARD_PAGE_ID"],
|
||
"used_by_workflows": [
|
||
"zhuyuan-commander.yml",
|
||
"zhuyuan-skyeye.yml"
|
||
],
|
||
"note": "铸渊Agent间通信公告板"
|
||
},
|
||
{
|
||
"id": 22,
|
||
"name": "ZY_NOTION_WORKORDER_DB",
|
||
"category": "Notion · 数据库ID",
|
||
"description": "工单数据库ID（统一所有工单来源）",
|
||
"type": "notion_database_id",
|
||
"example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
|
||
"replaces": ["WORKORDER_DB_BINGSUO", "WORKORDER_DB_ZHIZHI"],
|
||
"used_by_workflows": [
|
||
"zhuyuan-daily-inspection.yml"
|
||
],
|
||
"note": "统一工单数据库·替代之前按人格体分开的工单库"
|
||
},
|
||
{
|
||
"id": 23,
|
||
"name": "ZY_SMTP_USER",
|
||
"category": "邮件 · SMTP",
|
||
"description": "SMTP邮箱账号/发件人地址",
|
||
"type": "email",
|
||
"example_format": "zhuyuan@guanghulab.com",
|
||
"replaces": ["SMTP_USER", "MAIL_USERNAME", "EMAIL_ADDRESS", "HUMAN_EMAIL"],
|
||
"used_by_workflows": [
|
||
"syslog-issue-pipeline.yml",
|
||
"syslog-auto-pipeline.yml",
|
||
"server-patrol.yml",
|
||
"zhuyuan-skyeye.yml",
|
||
"sandbox-deploy.yml",
|
||
"bridge-broadcast-pdf.yml",
|
||
"merge-watchdog.yml",
|
||
"psp-daily-inspection.yml"
|
||
],
|
||
"note": "邮件发送的SMTP登录用户名/发件人地址"
|
||
},
|
||
{
|
||
"id": 24,
|
||
"name": "ZY_SMTP_PASS",
|
||
"category": "邮件 · SMTP",
|
||
"description": "SMTP邮箱密码/应用专用密码",
|
||
"type": "password",
|
||
"example_format": "应用专用密码（非邮箱登录密码）",
|
||
"replaces": ["SMTP_PASS", "MAIL_PASSWORD", "EMAIL_APP_PASSWORD"],
|
||
"used_by_workflows": [
|
||
"syslog-issue-pipeline.yml",
|
||
"syslog-auto-pipeline.yml",
|
||
"server-patrol.yml",
|
||
"zhuyuan-skyeye.yml",
|
||
"sandbox-deploy.yml",
|
||
"bridge-broadcast-pdf.yml",
|
||
"merge-watchdog.yml",
|
||
"psp-daily-inspection.yml"
|
||
],
|
||
"note": "⚠️ 关键密钥 · SMTP认证密码"
|
||
},
|
||
{
|
||
"id": 25,
|
||
"name": "ZY_GITHUB_PAT",
|
||
"category": "GitHub · 访问令牌",
|
||
"description": "GitHub个人访问令牌（跨仓库操作用）",
|
||
"type": "github_pat",
|
||
"example_format": "ghp_xxxxxxxxxxxxxxxx",
|
||
"replaces": ["MAIN_REPO_TOKEN", "CROSS_REPO_TOKEN", "DEPLOY_GITHUB_TOKEN"],
|
||
"used_by_workflows": [
|
||
"federation-bridge.yml",
|
||
"sync-persona-studio.yml",
|
||
"zhuyuan-exec-engine.yml",
|
||
"merge-watchdog.yml",
|
||
"tianyan-nightly-scan.yml",
|
||
"auto-deploy-drive-bridge.yml"
|
||
],
|
||
"note": "需要repo + workflow权限的GitHub PAT · 用于跨仓库和高级操作"
|
||
}
|
||
],
|
||
|
||
"optional": [
|
||
{
|
||
"id": 26,
|
||
"name": "ZY_GDRIVE_CLIENT_ID",
|
||
"category": "Google Drive · OAuth",
|
||
"description": "Google Drive OAuth客户端ID",
|
||
"type": "oauth_client_id",
|
||
"replaces": ["GDRIVE_CLIENT_ID"],
|
||
"used_by_workflows": ["renew-gdrive-tokens.yml", "auto-deploy-drive-bridge.yml", "tcs-semantic-landing.yml"],
|
||
"note": "如果不使用Google Drive功能可以不配置",
|
||
"needed": "仅在使用Google Drive桥接时需要"
|
||
},
|
||
{
|
||
"id": 27,
|
||
"name": "ZY_GDRIVE_SECRET",
|
||
"category": "Google Drive · OAuth",
|
||
"description": "Google Drive OAuth客户端密钥",
|
||
"type": "oauth_client_secret",
|
||
"replaces": ["GDRIVE_CLIENT_SECRET"],
|
||
"used_by_workflows": ["renew-gdrive-tokens.yml", "auto-deploy-drive-bridge.yml", "tcs-semantic-landing.yml"],
|
||
"note": "如果不使用Google Drive功能可以不配置",
|
||
"needed": "仅在使用Google Drive桥接时需要"
|
||
},
|
||
{
|
||
"id": 28,
|
||
"name": "ZY_GDRIVE_REFRESH_TOKEN",
|
||
"category": "Google Drive · OAuth",
|
||
"description": "Google Drive OAuth刷新令牌",
|
||
"type": "oauth_refresh_token",
|
||
"replaces": ["GDRIVE_REFRESH_TOKEN", "GDRIVE_REFRESH_TOKEN_DEV001", "GDRIVE_REFRESH_TOKEN_DEV002"],
|
||
"used_by_workflows": ["renew-gdrive-tokens.yml", "auto-deploy-drive-bridge.yml", "tcs-semantic-landing.yml"],
|
||
"note": "统一为一个刷新令牌·替代之前3个(主+DEV001+DEV002)",
|
||
"needed": "仅在使用Google Drive桥接时需要"
|
||
},
|
||
{
|
||
"id": 29,
|
||
"name": "ZY_FEISHU_APP_ID",
|
||
"category": "飞书 · 集成",
|
||
"description": "飞书应用ID",
|
||
"type": "app_id",
|
||
"replaces": ["FEISHU_APP_ID"],
|
||
"used_by_workflows": ["bridge-broadcast-pdf.yml"],
|
||
"note": "飞书广播分发需要",
|
||
"needed": "仅在使用飞书通知时需要"
|
||
},
|
||
{
|
||
"id": 30,
|
||
"name": "ZY_FEISHU_APP_SECRET",
|
||
"category": "飞书 · 集成",
|
||
"description": "飞书应用密钥",
|
||
"type": "app_secret",
|
||
"replaces": ["FEISHU_APP_SECRET"],
|
||
"used_by_workflows": ["bridge-broadcast-pdf.yml"],
|
||
"note": "飞书广播分发需要",
|
||
"needed": "仅在使用飞书通知时需要"
|
||
},
|
||
{
|
||
"id": 31,
|
||
"name": "ZY_FEISHU_CHAT_ID",
|
||
"category": "飞书 · 集成",
|
||
"description": "飞书广播群ID",
|
||
"type": "chat_id",
|
||
"replaces": ["FEISHU_BROADCAST_CHAT_ID"],
|
||
"used_by_workflows": ["bridge-broadcast-pdf.yml"],
|
||
"note": "飞书广播目标群聊",
|
||
"needed": "仅在使用飞书通知时需要"
|
||
},
|
||
{
|
||
"id": 32,
|
||
"name": "ZY_DINGTALK_TOKEN",
|
||
"category": "钉钉 · 集成",
|
||
"description": "钉钉机器人令牌",
|
||
"type": "bot_token",
|
||
"replaces": ["DINGTALK_TOKEN"],
|
||
"used_by_workflows": ["bridge-broadcast-pdf.yml"],
|
||
"note": "钉钉消息推送需要",
|
||
"needed": "仅在使用钉钉通知时需要"
|
||
},
|
||
{
|
||
"id": 33,
|
||
"name": "ZY_GHAPP_ID",
|
||
"category": "GitHub App · 集成",
|
||
"description": "GitHub App ID",
|
||
"type": "app_id",
|
||
"replaces": ["GHAPP_APP_ID"],
|
||
"used_by_workflows": ["zhuyuan-exec-engine.yml"],
|
||
"note": "铸渊远程执行引擎使用的GitHub App",
|
||
"needed": "仅在使用远程执行引擎时需要"
|
||
},
|
||
{
|
||
"id": 34,
|
||
"name": "ZY_GHAPP_KEY",
|
||
"category": "GitHub App · 集成",
|
||
"description": "GitHub App私钥（PEM格式）",
|
||
"type": "private_key",
|
||
"replaces": ["GHAPP_PRIVATE_KEY"],
|
||
"used_by_workflows": ["zhuyuan-exec-engine.yml"],
|
||
"note": "⚠️ 关键密钥 · GitHub App的PEM私钥",
|
||
"needed": "仅在使用远程执行引擎时需要"
|
||
},
|
||
{
|
||
"id": 35,
|
||
"name": "ZY_PUSH_TOKEN",
|
||
"category": "推送 · 广播",
|
||
"description": "推送广播令牌",
|
||
"type": "token",
|
||
"replaces": ["PUSH_BROADCAST_TOKEN"],
|
||
"used_by_workflows": ["syslog-pipeline.yml"],
|
||
"note": "SYSLOG广播推送令牌",
|
||
"needed": "仅在使用推送广播时需要"
|
||
},
|
||
{
|
||
"id": 36,
|
||
"name": "ZY_OSS_KEY",
|
||
"category": "对象存储 · 已弃用评估中",
|
||
"description": "对象存储Access Key（原阿里云OSS）",
|
||
"type": "access_key",
|
||
"replaces": ["OSS_ACCESS_KEY"],
|
||
"used_by_workflows": ["bridge-broadcast-pdf.yml"],
|
||
"note": "⚠️ 阿里云已弃用·评估是否迁移到腾讯云COS或其他存储",
|
||
"needed": "仅bridge-broadcast-pdf使用·可能需要替换为其他存储方案"
|
||
},
|
||
{
|
||
"id": 37,
|
||
"name": "ZY_OSS_SECRET",
|
||
"category": "对象存储 · 已弃用评估中",
|
||
"description": "对象存储Secret Key（原阿里云OSS）",
|
||
"type": "secret_key",
|
||
"replaces": ["OSS_SECRET_KEY"],
|
||
"used_by_workflows": ["bridge-broadcast-pdf.yml"],
|
||
"note": "⚠️ 阿里云已弃用·评估是否迁移到腾讯云COS或其他存储",
|
||
"needed": "仅bridge-broadcast-pdf使用·可能需要替换为其他存储方案"
|
||
}
|
||
],
|
||
|
||
"auto_provided": [
|
||
{
|
||
"name": "GITHUB_TOKEN",
|
||
"category": "GitHub · 自动",
|
||
"description": "GitHub Actions自动提供的令牌（无需配置）",
|
||
"note": "每次工作流运行自动生成·权限在workflow文件的permissions中定义"
|
||
}
|
||
],
|
||
|
||
"deprecated": [
|
||
{
|
||
"name": "DEPLOY_HOST",
|
||
"replaced_by": "ZY_SERVER_HOST",
|
||
"reason": "阿里云→腾讯云迁移·统一命名"
|
||
},
|
||
{
|
||
"name": "DEPLOY_USER",
|
||
"replaced_by": "ZY_SERVER_USER",
|
||
"reason": "统一命名"
|
||
},
|
||
{
|
||
"name": "DEPLOY_KEY",
|
||
"replaced_by": "ZY_SERVER_KEY",
|
||
"reason": "统一命名"
|
||
},
|
||
{
|
||
"name": "DEPLOY_PATH",
|
||
"replaced_by": "ZY_SERVER_PATH",
|
||
"reason": "统一命名"
|
||
},
|
||
{
|
||
"name": "ANTHROPIC_API_KEY",
|
||
"replaced_by": "ZY_LLM_API_KEY",
|
||
"reason": "三方API统一密钥·不再分别配置各厂商密钥"
|
||
},
|
||
{
|
||
"name": "OPENAI_API_KEY",
|
||
"replaced_by": "ZY_LLM_API_KEY",
|
||
"reason": "三方API统一密钥"
|
||
},
|
||
{
|
||
"name": "DASHSCOPE_API_KEY",
|
||
"replaced_by": "ZY_LLM_API_KEY",
|
||
"reason": "三方API统一密钥"
|
||
},
|
||
{
|
||
"name": "DEEPSEEK_API_KEY",
|
||
"replaced_by": "ZY_LLM_API_KEY",
|
||
"reason": "三方API统一密钥"
|
||
},
|
||
{
|
||
"name": "GEMINI_API_KEY",
|
||
"replaced_by": "ZY_LLM_API_KEY",
|
||
"reason": "三方API统一密钥"
|
||
},
|
||
{
|
||
"name": "YUNWU_API_KEY",
|
||
"replaced_by": "ZY_LLM_API_KEY",
|
||
"reason": "三方API统一密钥"
|
||
},
|
||
{
|
||
"name": "MODEL_API_KEY",
|
||
"replaced_by": "ZY_LLM_API_KEY",
|
||
"reason": "三方API统一密钥"
|
||
},
|
||
{
|
||
"name": "NOTION_API_KEY",
|
||
"replaced_by": "ZY_NOTION_TOKEN",
|
||
"reason": "统一命名"
|
||
},
|
||
{
|
||
"name": "NOTION_TOKEN_BINGSUO",
|
||
"replaced_by": "ZY_NOTION_TOKEN",
|
||
"reason": "按人格体分密钥已弃用·统一为一个令牌"
|
||
},
|
||
{
|
||
"name": "NOTION_TOKEN_ZHIZHI",
|
||
"replaced_by": "ZY_NOTION_TOKEN",
|
||
"reason": "按人格体分密钥已弃用·统一为一个令牌"
|
||
},
|
||
{
|
||
"name": "SMTP_USER",
|
||
"replaced_by": "ZY_SMTP_USER",
|
||
"reason": "统一命名"
|
||
},
|
||
{
|
||
"name": "SMTP_PASS",
|
||
"replaced_by": "ZY_SMTP_PASS",
|
||
"reason": "统一命名"
|
||
},
|
||
{
|
||
"name": "MAIL_USERNAME",
|
||
"replaced_by": "ZY_SMTP_USER",
|
||
"reason": "重复密钥·合并"
|
||
},
|
||
{
|
||
"name": "MAIL_PASSWORD",
|
||
"replaced_by": "ZY_SMTP_PASS",
|
||
"reason": "重复密钥·合并"
|
||
},
|
||
{
|
||
"name": "EMAIL_ADDRESS",
|
||
"replaced_by": "ZY_SMTP_USER",
|
||
"reason": "重复密钥·合并"
|
||
},
|
||
{
|
||
"name": "EMAIL_APP_PASSWORD",
|
||
"replaced_by": "ZY_SMTP_PASS",
|
||
"reason": "重复密钥·合并"
|
||
},
|
||
{
|
||
"name": "HUMAN_EMAIL",
|
||
"replaced_by": "ZY_SMTP_USER",
|
||
"reason": "重复密钥·合并"
|
||
},
|
||
{
|
||
"name": "MAIN_REPO_TOKEN",
|
||
"replaced_by": "ZY_GITHUB_PAT",
|
||
"reason": "统一GitHub PAT"
|
||
},
|
||
{
|
||
"name": "CROSS_REPO_TOKEN",
|
||
"replaced_by": "ZY_GITHUB_PAT",
|
||
"reason": "统一GitHub PAT"
|
||
},
|
||
{
|
||
"name": "DEPLOY_GITHUB_TOKEN",
|
||
"replaced_by": "ZY_GITHUB_PAT",
|
||
"reason": "统一GitHub PAT"
|
||
},
|
||
{
|
||
"name": "GDRIVE_REFRESH_TOKEN_DEV001",
|
||
"replaced_by": "ZY_GDRIVE_REFRESH_TOKEN",
|
||
"reason": "统一为一个刷新令牌"
|
||
},
|
||
{
|
||
"name": "GDRIVE_REFRESH_TOKEN_DEV002",
|
||
"replaced_by": "ZY_GDRIVE_REFRESH_TOKEN",
|
||
"reason": "统一为一个刷新令牌"
|
||
},
|
||
{
|
||
"name": "WORKORDER_DB_BINGSUO",
|
||
"replaced_by": "ZY_NOTION_WORKORDER_DB",
|
||
"reason": "按人格体分数据库已弃用·统一为一个工单库"
|
||
},
|
||
{
|
||
"name": "WORKORDER_DB_ZHIZHI",
|
||
"replaced_by": "ZY_NOTION_WORKORDER_DB",
|
||
"reason": "按人格体分数据库已弃用·统一为一个工单库"
|
||
},
|
||
{
|
||
"name": "NOTION_DB_SYSLOG",
|
||
"replaced_by": "ZY_NOTION_SYSLOG_DB",
|
||
"reason": "重复命名·统一"
|
||
}
|
||
]
|
||
},
|
||
|
||
"security_alerts": [
|
||
{
|
||
"severity": "CRITICAL",
|
||
"issue": ".env文件包含硬编码凭证（DingTalk+KIMI API Key）",
|
||
"action": "已从git跟踪中移除·冰朔需立即轮换这些密钥",
|
||
"files": [".env", ".env.rtf"]
|
||
}
|
||
],
|
||
|
||
"workflow_status": {
|
||
"core_alive": {
|
||
"description": "6个核心存活工作流（铸渊身体器官）",
|
||
"workflows": [
|
||
{"file": "notion-wake-listener.yml", "organ": "ZY-WF-听潮", "role": "耳朵·信号接收", "status": "active"},
|
||
{"file": "deploy-to-server.yml", "organ": "ZY-WF-锻心", "role": "心脏·部署引擎", "status": "active"},
|
||
{"file": "bingshuo-neural-system.yml", "organ": "ZY-WF-织脉", "role": "神经网络·大脑同步", "status": "active"},
|
||
{"file": "deploy-pages.yml", "organ": "ZY-WF-映阁", "role": "面容·前端展示", "status": "active"},
|
||
{"file": "meta-watchdog.yml", "organ": "ZY-WF-守夜", "role": "免疫系统·健康监控", "status": "active"},
|
||
{"file": "preview-deploy.yml", "organ": "ZY-WF-试镜", "role": "试衣间·预览部署", "status": "active"}
|
||
]
|
||
},
|
||
"total_active": 48,
|
||
"no_secrets_needed": [
|
||
"deploy-pages.yml",
|
||
"preview-deploy.yml",
|
||
"bridge-session-summary.yml",
|
||
"buffer-collect.yml",
|
||
"buffer-flush.yml",
|
||
"staging-preview.yml",
|
||
"process-notion-orders.yml",
|
||
"tianyan-daily-patrol.yml",
|
||
"zhuyuan-brain-sync.yml",
|
||
"zhuyuan-pr-review.yml",
|
||
"brain-sync.yml",
|
||
"agent-checkin.yml",
|
||
"copilot-dev-bridge.yml",
|
||
"feishu-syslog-bridge.yml"
|
||
]
|
||
}
|
||
}
|