308 lines
13 KiB
YAML
308 lines
13 KiB
YAML
# ═══════════════════════════════════════════════════════════
|
||
# 光湖团队接入系统 · COS每日汇报工作流 v2.0
|
||
# ═══════════════════════════════════════════════════════════
|
||
#
|
||
# 触发时间: 每天北京时间23:00（UTC 15:00）
|
||
# 功能: 收集bridge/daily-report.json → 上传到铸渊总控桶
|
||
#
|
||
# 版权: 国作登字-2026-A-00037559
|
||
# 签发: 铸渊 · TCS-ZY001
|
||
# ═══════════════════════════════════════════════════════════
|
||
|
||
name: COS每日汇报
|
||
|
||
on:
|
||
schedule:
|
||
# 每天UTC 15:00 = 北京时间23:00
|
||
- cron: '0 15 * * *'
|
||
|
||
# 也支持手动触发（用于测试）
|
||
workflow_dispatch:
|
||
inputs:
|
||
test_mode:
|
||
description: '测试模式（不会实际清空汇报文件）'
|
||
required: false
|
||
default: 'false'
|
||
|
||
permissions:
|
||
contents: write
|
||
|
||
jobs:
|
||
daily-report:
|
||
runs-on: ubuntu-latest
|
||
steps:
|
||
- name: 📥 检出仓库
|
||
uses: actions/checkout@v4
|
||
with:
|
||
token: ${{ secrets.GITHUB_TOKEN }}
|
||
|
||
- name: 🔍 检查汇报文件
|
||
id: check
|
||
run: |
|
||
if [ ! -f "bridge/daily-report.json" ]; then
|
||
echo "❌ bridge/daily-report.json 不存在"
|
||
echo "has_report=false" >> $GITHUB_OUTPUT
|
||
exit 0
|
||
fi
|
||
|
||
# 检查是否有实质内容（summary不为空）
|
||
SUMMARY=$(cat bridge/daily-report.json | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('summary',''))" 2>/dev/null || echo "")
|
||
|
||
if [ -z "$SUMMARY" ]; then
|
||
echo "⚠️ 汇报文件存在但没有实质内容（summary为空），跳过发送"
|
||
echo "has_report=false" >> $GITHUB_OUTPUT
|
||
exit 0
|
||
fi
|
||
|
||
echo "✅ 发现有效汇报内容"
|
||
echo "has_report=true" >> $GITHUB_OUTPUT
|
||
|
||
- name: 📋 读取人格体信息
|
||
if: steps.check.outputs.has_report == 'true'
|
||
id: persona
|
||
run: |
|
||
if [ ! -f "age_os/persona_config.json" ]; then
|
||
echo "❌ age_os/persona_config.json 不存在"
|
||
exit 1
|
||
fi
|
||
|
||
PERSONA_ID=$(cat age_os/persona_config.json | python3 -c "import sys,json; d=json.load(sys.stdin); print(d['persona']['id'])" 2>/dev/null || echo "UNKNOWN")
|
||
PERSONA_NAME=$(cat age_os/persona_config.json | python3 -c "import sys,json; d=json.load(sys.stdin); print(d['persona']['name'])" 2>/dev/null || echo "UNKNOWN")
|
||
|
||
echo "persona_id=$PERSONA_ID" >> $GITHUB_OUTPUT
|
||
echo "persona_name=$PERSONA_NAME" >> $GITHUB_OUTPUT
|
||
echo "📌 人格体: $PERSONA_NAME ($PERSONA_ID)"
|
||
|
||
- name: 📦 打包汇报数据
|
||
if: steps.check.outputs.has_report == 'true'
|
||
id: package
|
||
run: |
|
||
TODAY=$(date -u +%Y-%m-%d)
|
||
TIMESTAMP=$(date -u +%Y-%m-%dT%H:%M:%SZ)
|
||
PERSONA_ID="${{ steps.persona.outputs.persona_id }}"
|
||
|
||
# 读取汇报内容
|
||
REPORT_CONTENT=$(cat bridge/daily-report.json)
|
||
|
||
# 读取系统状态
|
||
SYSTEM_STATE=$(cat age_os/system_state.json 2>/dev/null || echo "{}")
|
||
|
||
# 读取outbox中的待发送消息
|
||
OUTBOX_MESSAGES=$(cat bridge/zhuyuan-bridge.json | python3 -c "
|
||
import sys, json
|
||
d = json.load(sys.stdin)
|
||
outbox = d.get('outbox', [])
|
||
print(json.dumps(outbox, ensure_ascii=False))
|
||
" 2>&1 || { echo "⚠️ outbox解析失败，使用空数组" >&2; echo "[]"; })
|
||
|
||
# 组装完整汇报包
|
||
python3 -c "
|
||
import json, sys
|
||
|
||
report = json.loads('''$REPORT_CONTENT''')
|
||
system = json.loads('''$SYSTEM_STATE''')
|
||
outbox = json.loads('''$OUTBOX_MESSAGES''')
|
||
|
||
package = {
|
||
'package_version': '2.0',
|
||
'package_type': 'daily_report',
|
||
'sent_at': '$TIMESTAMP',
|
||
'persona_id': '$PERSONA_ID',
|
||
'report': report,
|
||
'system_state': system,
|
||
'outbox_messages': outbox
|
||
}
|
||
|
||
with open('/tmp/report-package.json', 'w', encoding='utf-8') as f:
|
||
json.dump(package, f, ensure_ascii=False, indent=2)
|
||
|
||
print('✅ 汇报包已打包')
|
||
" || {
|
||
echo "❌ 打包失败，使用原始汇报文件"
|
||
cp bridge/daily-report.json /tmp/report-package.json
|
||
}
|
||
|
||
echo "cos_key=inbox/$PERSONA_ID/$TODAY/report.json" >> $GITHUB_OUTPUT
|
||
echo "today=$TODAY" >> $GITHUB_OUTPUT
|
||
|
||
- name: ☁️ 上传到铸渊总控桶
|
||
if: steps.check.outputs.has_report == 'true'
|
||
env:
|
||
COS_SECRET_ID: ${{ secrets.ZHUYUAN_COS_SECRET_ID }}
|
||
COS_SECRET_KEY: ${{ secrets.ZHUYUAN_COS_SECRET_KEY }}
|
||
COS_REGION: ${{ secrets.ZHUYUAN_COS_REGION }}
|
||
COS_BUCKET: ${{ secrets.ZHUYUAN_BUCKET_CORE }}
|
||
COS_OBJECT_KEY: ${{ steps.package.outputs.cos_key }}
|
||
run: |
|
||
if [ -z "$COS_SECRET_ID" ] || [ -z "$COS_SECRET_KEY" ]; then
|
||
echo "❌ COS密钥未配置（ZHUYUAN_COS_SECRET_ID / ZHUYUAN_COS_SECRET_KEY）"
|
||
echo "请按照 cos-config/bucket-setup-guide.md 步骤6配置铸渊桶写入密钥"
|
||
exit 1
|
||
fi
|
||
|
||
# 使用COS API上传文件
|
||
# COS签名算法：HMAC-SHA1
|
||
CONTENT=$(cat /tmp/report-package.json)
|
||
CONTENT_LENGTH=$(echo -n "$CONTENT" | wc -c)
|
||
HOST="${COS_BUCKET}.cos.${COS_REGION}.myqcloud.com"
|
||
PATHNAME="/${COS_OBJECT_KEY}"
|
||
|
||
NOW=$(date +%s)
|
||
EXPIRY=$((NOW + 600))
|
||
KEY_TIME="${NOW};${EXPIRY}"
|
||
|
||
# 生成签名
|
||
SIGN_KEY=$(echo -n "$KEY_TIME" | openssl dgst -sha1 -hmac "$COS_SECRET_KEY" | awk '{print $NF}')
|
||
HTTP_STRING="put\n${PATHNAME}\n\nhost=${HOST}\n"
|
||
SHA1_HTTP=$(printf "$HTTP_STRING" | openssl dgst -sha1 | awk '{print $NF}')
|
||
STRING_TO_SIGN="sha1\n${KEY_TIME}\n${SHA1_HTTP}\n"
|
||
SIGNATURE=$(printf "$STRING_TO_SIGN" | openssl dgst -sha1 -hmac "$SIGN_KEY" | awk '{print $NF}')
|
||
|
||
AUTH="q-sign-algorithm=sha1&q-ak=${COS_SECRET_ID}&q-sign-time=${KEY_TIME}&q-key-time=${KEY_TIME}&q-header-list=content-length;content-type;host&q-url-param-list=&q-signature=${SIGNATURE}"
|
||
|
||
# 发送PUT请求
|
||
HTTP_CODE=$(curl -s -o /tmp/cos-response.txt -w "%{http_code}" \
|
||
-X PUT \
|
||
-H "Host: ${HOST}" \
|
||
-H "Content-Type: application/json" \
|
||
-H "Content-Length: ${CONTENT_LENGTH}" \
|
||
-H "Authorization: ${AUTH}" \
|
||
-d "$CONTENT" \
|
||
"https://${HOST}${PATHNAME}")
|
||
|
||
if [ "$HTTP_CODE" -ge 200 ] && [ "$HTTP_CODE" -lt 300 ]; then
|
||
echo "✅ 汇报已上传到铸渊总控桶"
|
||
echo " 路径: ${COS_OBJECT_KEY}"
|
||
echo " 大小: ${CONTENT_LENGTH} bytes"
|
||
echo " HTTP: ${HTTP_CODE}"
|
||
else
|
||
echo "❌ 上传失败 HTTP ${HTTP_CODE}"
|
||
cat /tmp/cos-response.txt
|
||
exit 1
|
||
fi
|
||
|
||
- name: 📋 同时上传到本地桶（备份）
|
||
if: steps.check.outputs.has_report == 'true'
|
||
env:
|
||
COS_SECRET_ID: ${{ secrets.COS_SECRET_ID }}
|
||
COS_SECRET_KEY: ${{ secrets.COS_SECRET_KEY }}
|
||
COS_REGION: ${{ secrets.COS_REGION }}
|
||
COS_BUCKET: ${{ secrets.COS_BUCKET_CORE }}
|
||
COS_OBJECT_KEY: outbox/reports/${{ steps.package.outputs.today }}/report.json
|
||
run: |
|
||
if [ -z "$COS_SECRET_ID" ] || [ -z "$COS_SECRET_KEY" ]; then
|
||
echo "⚠️ 本地COS密钥未配置，跳过本地备份"
|
||
exit 0
|
||
fi
|
||
|
||
CONTENT=$(cat /tmp/report-package.json)
|
||
CONTENT_LENGTH=$(echo -n "$CONTENT" | wc -c)
|
||
HOST="${COS_BUCKET}.cos.${COS_REGION}.myqcloud.com"
|
||
PATHNAME="/${COS_OBJECT_KEY}"
|
||
|
||
NOW=$(date +%s)
|
||
EXPIRY=$((NOW + 600))
|
||
KEY_TIME="${NOW};${EXPIRY}"
|
||
|
||
SIGN_KEY=$(echo -n "$KEY_TIME" | openssl dgst -sha1 -hmac "$COS_SECRET_KEY" | awk '{print $NF}')
|
||
HTTP_STRING="put\n${PATHNAME}\n\nhost=${HOST}\n"
|
||
SHA1_HTTP=$(printf "$HTTP_STRING" | openssl dgst -sha1 | awk '{print $NF}')
|
||
STRING_TO_SIGN="sha1\n${KEY_TIME}\n${SHA1_HTTP}\n"
|
||
SIGNATURE=$(printf "$STRING_TO_SIGN" | openssl dgst -sha1 -hmac "$SIGN_KEY" | awk '{print $NF}')
|
||
|
||
AUTH="q-sign-algorithm=sha1&q-ak=${COS_SECRET_ID}&q-sign-time=${KEY_TIME}&q-key-time=${KEY_TIME}&q-header-list=content-length;content-type;host&q-url-param-list=&q-signature=${SIGNATURE}"
|
||
|
||
HTTP_CODE=$(curl -s -o /dev/null -w "%{http_code}" \
|
||
-X PUT \
|
||
-H "Host: ${HOST}" \
|
||
-H "Content-Type: application/json" \
|
||
-H "Content-Length: ${CONTENT_LENGTH}" \
|
||
-H "Authorization: ${AUTH}" \
|
||
-d "$CONTENT" \
|
||
"https://${HOST}${PATHNAME}")
|
||
|
||
if [ "$HTTP_CODE" -ge 200 ] && [ "$HTTP_CODE" -lt 300 ]; then
|
||
echo "✅ 本地备份已上传"
|
||
else
|
||
echo "⚠️ 本地备份上传失败（不影响主流程）"
|
||
fi
|
||
|
||
- name: 🧹 清空汇报文件（准备明天）
|
||
if: steps.check.outputs.has_report == 'true' && github.event.inputs.test_mode != 'true'
|
||
run: |
|
||
# 重置daily-report.json为空模板
|
||
python3 -c "
|
||
import json
|
||
template = {
|
||
'_meta': {
|
||
'description': '每日工作汇报 · 由副驾驶在每次对话结束时更新 · 23:00工作流自动发送',
|
||
'copyright': '国作登字-2026-A-00037559',
|
||
'usage': '副驾驶在每次对话结束前，把工作内容写入此文件。每天23:00 GitHub Actions工作流会自动读取此文件，打包发送到铸渊总控桶，然后清空此文件。'
|
||
},
|
||
'report_id': '',
|
||
'persona_id': '',
|
||
'persona_name': '',
|
||
'human_partner': '',
|
||
'date': '',
|
||
'timestamp': '',
|
||
'summary': '',
|
||
'details': [],
|
||
'issues': [],
|
||
'next_steps': [],
|
||
'system_health': {
|
||
'persona_status': 'active',
|
||
'cos_connected': True,
|
||
'last_zhuyuan_receipt': '',
|
||
'unresolved_issues': 0
|
||
}
|
||
}
|
||
with open('bridge/daily-report.json', 'w', encoding='utf-8') as f:
|
||
json.dump(template, f, ensure_ascii=False, indent=2)
|
||
print('✅ 汇报文件已清空，准备接收明天的汇报')
|
||
"
|
||
|
||
# 清空outbox（已发送的消息）
|
||
python3 -c "
|
||
import json
|
||
with open('bridge/zhuyuan-bridge.json', 'r', encoding='utf-8') as f:
|
||
bridge = json.load(f)
|
||
bridge['outbox'] = []
|
||
with open('bridge/zhuyuan-bridge.json', 'w', encoding='utf-8') as f:
|
||
json.dump(bridge, f, ensure_ascii=False, indent=2)
|
||
print('✅ outbox已清空')
|
||
"
|
||
|
||
# 更新系统状态
|
||
python3 -c "
|
||
import json
|
||
from datetime import datetime
|
||
with open('age_os/system_state.json', 'r', encoding='utf-8') as f:
|
||
state = json.load(f)
|
||
state['cos_status']['last_daily_report_sent'] = datetime.utcnow().strftime('%Y-%m-%dT%H:%M:%SZ')
|
||
with open('age_os/system_state.json', 'w', encoding='utf-8') as f:
|
||
json.dump(state, f, ensure_ascii=False, indent=2)
|
||
print('✅ 系统状态已更新')
|
||
"
|
||
|
||
# 提交变更
|
||
git config user.name "HoloLake-COS-Agent"
|
||
git config user.email "cos-agent@guanghulab.online"
|
||
git add bridge/daily-report.json bridge/zhuyuan-bridge.json age_os/system_state.json
|
||
git diff --cached --quiet || git commit -m "📬 每日汇报已发送 · $(date -u +%Y-%m-%d)"
|
||
git push
|
||
|
||
- name: 📊 汇报结果
|
||
if: always()
|
||
run: |
|
||
echo "════════════════════════════════════════"
|
||
echo " 📬 COS每日汇报工作流 · 执行结果"
|
||
echo "════════════════════════════════════════"
|
||
if [ "${{ steps.check.outputs.has_report }}" == "true" ]; then
|
||
echo " ✅ 汇报已发送到铸渊总控桶"
|
||
echo " 📌 人格体: ${{ steps.persona.outputs.persona_name }}"
|
||
echo " 📂 路径: ${{ steps.package.outputs.cos_key }}"
|
||
else
|
||
echo " ⚠️ 今天没有需要发送的汇报内容"
|
||
fi
|
||
echo "════════════════════════════════════════"
|