guanghulab/brain/secrets-manifest.json

{
  "_meta": {
    "manifest_id": "ZY-SECRETS-MANIFEST-v2.0",
    "created": "2026-03-29T10:43:00Z",
    "updated": "2026-04-11T05:30:00Z",
    "created_by": "铸渊 · ICE-GL-ZY001",
    "directive": "SY-CMD-KEY-012 · 密钥全量清理与统一替换 + 7 Notion Secret审计 + 国内服务器密钥扩展 + D45·AGE OS数据库+大模型+硅谷服务器密钥扩展",
    "purpose": "铸渊仓库密钥主清单 — 冰朔配置密钥的唯一参考文档",
    "naming_convention": "所有密钥统一使用 ZY_ 前缀 · 铸渊(Zhuyuan)自主命名体系",
    "total_secrets": 69,
    "required": 49,
    "optional": 17,
    "replaced_old_secrets": 59,
    "reduction": "59 → 69 (新增AOAC密钥审计·ZY_BRAIN_*·AWEN_*·ZY_SVR_SV_*·ZHUYUAN_API_KEY)",
    "v2_changes": "新增ZY_CN_SERVER_* 4个密钥用于广州国内服务器(ZY-SVR-003)",
    "v2_1_changes": "D64密钥审计：新增ZY_BRAIN_*(大脑服务器3个)+AWEN_*(阿文代理3个)+ZY_SVR_SV_*(硅谷4个)+ZHUYUAN_API_KEY(MCP鉴权1个)·统一ZY_QWEN→ZY_QIANWEN·ZY_ZHIPU→ZY_QINGYAN"
  },
  "migration_mapping": {
    "description": "旧密钥名称 → 新ZY_*名称 完整映射表",
    "note": "冰朔在GitHub Settings清空所有旧密钥后，按此清单配置新密钥。合并PR后自动生效。",
    "mappings": {
      "LLM_API_KEY": "ZY_LLM_API_KEY",
      "ANTHROPIC_API_KEY": "ZY_LLM_API_KEY",
      "OPENAI_API_KEY": "ZY_LLM_API_KEY",
      "DASHSCOPE_API_KEY": "ZY_LLM_API_KEY",
      "DEEPSEEK_API_KEY": "ZY_LLM_API_KEY",
      "GEMINI_API_KEY": "ZY_LLM_API_KEY",
      "YUNWU_API_KEY": "ZY_LLM_API_KEY",
      "MODEL_API_KEY": "ZY_LLM_API_KEY",
      "LLM_BASE_URL": "ZY_LLM_BASE_URL",
      "DEPLOY_HOST": "ZY_SERVER_HOST",
      "DEPLOY_USER": "ZY_SERVER_USER",
      "DEPLOY_KEY": "ZY_SERVER_KEY",
      "DEPLOY_PATH": "ZY_SERVER_PATH",
      "NOTION_API_KEY": "ZY_NOTION_TOKEN",
      "NOTION_TOKEN_BINGSUO": "ZY_NOTION_TOKEN",
      "NOTION_TOKEN_ZHIZHI": "ZY_NOTION_TOKEN",
      "NOTION_SYSLOG_DB_ID": "ZY_NOTION_SYSLOG_DB",
      "NOTION_DB_SYSLOG": "ZY_NOTION_SYSLOG_DB",
      "SYSLOG_DB_ID": "ZY_NOTION_SYSLOG_DB",
      "NOTION_TICKET_DB_ID": "ZY_NOTION_TICKET_DB",
      "NOTION_CHANGE_LOG_DB_ID": "ZY_NOTION_CHANGELOG_DB",
      "CORE_BRAIN_PAGE_ID": "ZY_NOTION_BRAIN_PAGE",
      "PORTRAIT_DB_ID": "ZY_NOTION_PORTRAIT_DB",
      "FINGERPRINT_DB_ID": "ZY_NOTION_FINGERPRINT_DB",
      "RECEIPT_DB_ID": "ZY_NOTION_RECEIPT_DB",
      "SIGNAL_LOG_DB_ID": "ZY_NOTION_SIGNAL_DB",
      "BRIDGE_QUEUE_DB_ID": "ZY_NOTION_BRIDGE_DB",
      "WAKE_REQUEST_DB_ID": "ZY_NOTION_WAKE_DB",
      "SKYEYE_PERSONA_DB_ID": "ZY_NOTION_SKYEYE_DB",
      "AGENT_BULLETIN_BOARD_PAGE_ID": "ZY_NOTION_BULLETIN_PAGE",
      "WORKORDER_DB_BINGSUO": "ZY_NOTION_WORKORDER_DB",
      "WORKORDER_DB_ZHIZHI": "ZY_NOTION_WORKORDER_DB",
      "SMTP_USER": "ZY_SMTP_USER",
      "SMTP_PASS": "ZY_SMTP_PASS",
      "MAIL_USERNAME": "ZY_SMTP_USER",
      "MAIL_PASSWORD": "ZY_SMTP_PASS",
      "EMAIL_ADDRESS": "ZY_SMTP_USER",
      "EMAIL_APP_PASSWORD": "ZY_SMTP_PASS",
      "HUMAN_EMAIL": "ZY_SMTP_USER",
      "MAIN_REPO_TOKEN": "ZY_GITHUB_PAT",
      "CROSS_REPO_TOKEN": "ZY_GITHUB_PAT",
      "DEPLOY_GITHUB_TOKEN": "ZY_GITHUB_PAT",
      "GDRIVE_CLIENT_ID": "ZY_GDRIVE_CLIENT_ID",
      "GDRIVE_CLIENT_SECRET": "ZY_GDRIVE_SECRET",
      "GDRIVE_REFRESH_TOKEN": "ZY_GDRIVE_REFRESH_TOKEN",
      "GDRIVE_REFRESH_TOKEN_DEV001": "ZY_GDRIVE_REFRESH_TOKEN",
      "GDRIVE_REFRESH_TOKEN_DEV002": "ZY_GDRIVE_REFRESH_TOKEN",
      "FEISHU_APP_ID": "ZY_FEISHU_APP_ID",
      "FEISHU_APP_SECRET": "ZY_FEISHU_APP_SECRET",
      "FEISHU_BROADCAST_CHAT_ID": "ZY_FEISHU_CHAT_ID",
      "DINGTALK_TOKEN": "ZY_DINGTALK_TOKEN",
      "GHAPP_APP_ID": "ZY_GHAPP_ID",
      "GHAPP_PRIVATE_KEY": "ZY_GHAPP_KEY",
      "PUSH_BROADCAST_TOKEN": "ZY_PUSH_TOKEN",
      "OSS_ACCESS_KEY": "ZY_OSS_KEY",
      "OSS_SECRET_KEY": "ZY_OSS_SECRET",
      "COS_SECRET_ID": "ZY_OSS_KEY",
      "COS_SECRET_KEY": "ZY_OSS_SECRET",
      "NOTION_TOKEN": "ZY_NOTION_TOKEN",
      "ZY_ZHIPU_API_KEY": "ZY_QINGYAN_API_KEY",
      "ZY_QWEN_API_KEY": "ZY_QIANWEN_API_KEY"
    }
  },
  "secrets": {
    "required": [
      {
        "id": 1,
        "name": "ZY_LLM_API_KEY",
        "category": "LLM · AI模型",
        "description": "三方LLM API统一密钥（支持多模型动态路由）",
        "type": "api_key",
        "example_format": "sk-xxxxxxxxxxxxxxxx",
        "replaces": [
          "LLM_API_KEY",
          "ANTHROPIC_API_KEY",
          "OPENAI_API_KEY",
          "DASHSCOPE_API_KEY",
          "DEEPSEEK_API_KEY",
          "GEMINI_API_KEY",
          "YUNWU_API_KEY",
          "MODEL_API_KEY"
        ],
        "used_by_workflows": [
          "llm-auto-tasks.yml",
          "daily-maintenance.yml",
          "server-patrol.yml",
          "notion-wake-listener.yml",
          "zhuyuan-daily-selfcheck.yml",
          "psp-daily-inspection.yml",
          "bingshuo-neural-system.yml",
          "syslog-issue-pipeline.yml",
          "syslog-auto-pipeline.yml",
          "syslog-pipeline.yml",
          "bridge-heartbeat.yml",
          "bridge-syslog-intake.yml",
          "bridge-broadcast-pdf.yml",
          "multi-persona-awakening.yml",
          "persona-thinking-window.yml",
          "deploy-to-server.yml",
          "zhuyuan-exec-engine.yml",
          "zhuyuan-issue-reply.yml",
          "tianyan-nightly-scan.yml"
        ],
        "note": "冰朔的三方API密钥。铸渊会根据任务类型自动选择最优模型（如DeepSeek用于低成本任务，Claude用于推理任务）"
      },
      {
        "id": 2,
        "name": "ZY_LLM_BASE_URL",
        "category": "LLM · AI模型",
        "description": "三方LLM API端点URL",
        "type": "url",
        "example_format": "https://api.example.com/v1",
        "replaces": [
          "LLM_BASE_URL"
        ],
        "used_by_workflows": [
          "llm-auto-tasks.yml",
          "daily-maintenance.yml",
          "server-patrol.yml",
          "notion-wake-listener.yml",
          "zhuyuan-daily-selfcheck.yml",
          "psp-daily-inspection.yml",
          "bingshuo-neural-system.yml",
          "syslog-issue-pipeline.yml",
          "syslog-auto-pipeline.yml",
          "bridge-heartbeat.yml",
          "bridge-syslog-intake.yml",
          "bridge-broadcast-pdf.yml",
          "multi-persona-awakening.yml",
          "persona-thinking-window.yml",
          "zhuyuan-exec-engine.yml"
        ],
        "note": "三方API的基础URL地址"
      },
      {
        "id": 3,
        "name": "ZY_SERVER_HOST",
        "category": "服务器 · 部署",
        "description": "铸渊主权服务器IP/主机名（腾讯云CVM ZY-CVM-MAIN）",
        "type": "hostname",
        "example_format": "119.29.184.32",
        "replaces": [
          "DEPLOY_HOST",
          "ZY_SERVER_HOST"
        ],
        "used_by_workflows": [
          "deploy-to-server.yml",
          "deploy-to-zhuyuan-server.yml",
          "server-patrol.yml",
          "zhuyuan-skyeye.yml",
          "sandbox-deploy.yml",
          "deploy-backend.yml",
          "pm2-server-diagnose.yml"
        ],
        "note": "腾讯云CVM·弹性公网EIP 119.29.184.32·guanghulab.com"
      },
      {
        "id": 4,
        "name": "ZY_SERVER_USER",
        "category": "服务器 · 部署",
        "description": "服务器SSH登录用户名",
        "type": "username",
        "example_format": "root 或 zhuyuan",
        "replaces": [
          "DEPLOY_USER",
          "ZY_SERVER_USER"
        ],
        "used_by_workflows": [
          "deploy-to-server.yml",
          "deploy-to-zhuyuan-server.yml",
          "server-patrol.yml",
          "zhuyuan-skyeye.yml",
          "sandbox-deploy.yml",
          "deploy-backend.yml",
          "pm2-server-diagnose.yml"
        ],
        "note": "SSH登录用户名"
      },
      {
        "id": 5,
        "name": "ZY_SERVER_KEY",
        "category": "服务器 · 部署",
        "description": "服务器SSH私钥（完整PEM格式）",
        "type": "ssh_private_key",
        "example_format": "-----BEGIN OPENSSH PRIVATE KEY-----\n...\n-----END OPENSSH PRIVATE KEY-----",
        "replaces": [
          "DEPLOY_KEY",
          "ZY_SERVER_KEY"
        ],
        "used_by_workflows": [
          "deploy-to-server.yml",
          "deploy-to-zhuyuan-server.yml",
          "server-patrol.yml",
          "zhuyuan-skyeye.yml",
          "sandbox-deploy.yml",
          "deploy-backend.yml",
          "pm2-server-diagnose.yml"
        ],
        "note": "⚠️ 关键密钥 · SSH私钥·请确保是腾讯云服务器的密钥"
      },
      {
        "id": 6,
        "name": "ZY_SERVER_PATH",
        "category": "服务器 · 部署",
        "description": "服务器部署基础路径",
        "type": "path",
        "example_format": "/opt/zhuyuan",
        "replaces": [
          "DEPLOY_PATH",
          "ZY_SERVER_PATH"
        ],
        "used_by_workflows": [
          "deploy-to-server.yml",
          "deploy-to-zhuyuan-server.yml"
        ],
        "note": "服务器上的部署根目录"
      },
      {
        "id": 38,
        "name": "ZY_CN_SERVER_HOST",
        "category": "国内服务器 · 部署",
        "description": "国内备用服务器IP（腾讯云 ZY-SVR-003 · 广州）",
        "type": "hostname",
        "example_format": "43.139.217.141",
        "replaces": [],
        "used_by_workflows": [
          "deploy-to-zhuyuan-server.yml"
        ],
        "note": "腾讯云轻量应用服务器·广州七区·43.139.217.141·备用大脑+国内用户接入+域名挂载"
      },
      {
        "id": 39,
        "name": "ZY_CN_SERVER_USER",
        "category": "国内服务器 · 部署",
        "description": "国内服务器SSH登录用户名",
        "type": "username",
        "example_format": "root 或 zhuyuan",
        "replaces": [],
        "used_by_workflows": [
          "deploy-to-zhuyuan-server.yml"
        ],
        "note": "国内服务器SSH登录用户名"
      },
      {
        "id": 40,
        "name": "ZY_CN_SERVER_KEY",
        "category": "国内服务器 · 部署",
        "description": "国内服务器SSH私钥（完整PEM格式）",
        "type": "ssh_private_key",
        "example_format": "-----BEGIN OPENSSH PRIVATE KEY-----\n...\n-----END OPENSSH PRIVATE KEY-----",
        "replaces": [],
        "used_by_workflows": [
          "deploy-to-zhuyuan-server.yml"
        ],
        "note": "⚠️ 关键密钥 · 国内服务器SSH私钥"
      },
      {
        "id": 41,
        "name": "ZY_CN_SERVER_PATH",
        "category": "国内服务器 · 部署",
        "description": "国内服务器部署基础路径",
        "type": "path",
        "example_format": "/opt/zhuyuan-cn",
        "replaces": [],
        "used_by_workflows": [
          "deploy-to-zhuyuan-server.yml"
        ],
        "note": "国内服务器上的部署根目录"
      },
      {
        "id": 42,
        "name": "ZY_CN_SSH_PORT",
        "category": "国内服务器 · 部署",
        "description": "国内服务器SSH端口（腾讯云默认可能非22）",
        "type": "port",
        "example_format": "22",
        "replaces": [],
        "used_by_workflows": [
          "deploy-to-cn-server.yml",
          "deploy-proxy-service.yml"
        ],
        "note": "腾讯云服务器SSH端口·默认22·如果服务器使用自定义端口需要配置此密钥"
      },
      {
        "id": 7,
        "name": "ZY_DOMAIN_MAIN",
        "category": "服务器 · 域名",
        "description": "主站域名",
        "type": "domain",
        "example_format": "guanghulab.com",
        "replaces": [],
        "used_by_workflows": [
          "deploy-to-zhuyuan-server.yml",
          "deploy-to-server.yml"
        ],
        "note": "正式发布站点的域名"
      },
      {
        "id": 8,
        "name": "ZY_DOMAIN_PREVIEW",
        "category": "服务器 · 域名",
        "description": "预览站域名",
        "type": "domain",
        "example_format": "preview.guanghulab.com",
        "replaces": [],
        "used_by_workflows": [
          "deploy-to-zhuyuan-server.yml"
        ],
        "note": "预览/测试站点的域名"
      },
      {
        "id": 9,
        "name": "ZY_NOTION_TOKEN",
        "category": "Notion · 数据库",
        "description": "Notion API集成令牌（统一所有Notion访问）",
        "type": "api_token",
        "example_format": "ntn_xxxxxxxxxxxxxxxx 或 secret_xxxxxxxxxxxxxxxx",
        "replaces": [
          "NOTION_API_KEY",
          "NOTION_TOKEN_BINGSUO",
          "NOTION_TOKEN_ZHIZHI"
        ],
        "used_by_workflows": [
          "notion-poll.yml",
          "notion-wake-listener.yml",
          "meta-watchdog.yml",
          "zhuyuan-commander.yml",
          "zhuyuan-skyeye.yml",
          "zhuyuan-gate-guard.yml",
          "zhuyuan-exec-engine.yml",
          "zhuyuan-daily-selfcheck.yml",
          "zhuyuan-daily-inspection.yml",
          "server-patrol.yml",
          "daily-maintenance.yml",
          "bridge-heartbeat.yml",
          "bridge-changes-to-notion.yml",
          "bridge-syslog-to-notion.yml",
          "bridge-syslog-intake.yml",
          "bridge-broadcast-pdf.yml",
          "syslog-issue-pipeline.yml",
          "syslog-auto-pipeline.yml",
          "syslog-pipeline.yml",
          "pm2-server-diagnose.yml",
          "sandbox-deploy.yml",
          "deploy-to-server.yml"
        ],
        "note": "⚠️ 关键密钥 · 访问所有Notion数据库的统一令牌"
      },
      {
        "id": 10,
        "name": "ZY_NOTION_SYSLOG_DB",
        "category": "Notion · 数据库ID",
        "description": "SYSLOG系统日志数据库ID",
        "type": "notion_database_id",
        "example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
        "replaces": [
          "NOTION_SYSLOG_DB_ID",
          "NOTION_DB_SYSLOG",
          "SYSLOG_DB_ID"
        ],
        "used_by_workflows": [
          "bridge-syslog-to-notion.yml",
          "bridge-syslog-intake.yml",
          "zhuyuan-skyeye.yml",
          "syslog-pipeline.yml",
          "daily-maintenance.yml"
        ],
        "note": "系统日志数据库·铸渊运行日志的存储位置"
      },
      {
        "id": 11,
        "name": "ZY_NOTION_TICKET_DB",
        "category": "Notion · 数据库ID",
        "description": "工单/Ticket数据库ID",
        "type": "notion_database_id",
        "example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
        "replaces": [
          "NOTION_TICKET_DB_ID"
        ],
        "used_by_workflows": [
          "syslog-issue-pipeline.yml",
          "syslog-auto-pipeline.yml",
          "server-patrol.yml",
          "pm2-server-diagnose.yml"
        ],
        "note": "✅ D112铸渊已建 · 📋 光湖语言世界 · 系统工单 · notion_db_id: 36bfb92f-3831-817c-8841-cb4f44d4c7fe · 父页面: 🔧 光湖HLDP桥接数据库集群 · 集成可读写"
      },
      {
        "id": 12,
        "name": "ZY_NOTION_CHANGELOG_DB",
        "category": "Notion · 数据库ID",
        "description": "变更日志数据库ID",
        "type": "notion_database_id",
        "example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
        "replaces": [
          "NOTION_CHANGE_LOG_DB_ID"
        ],
        "used_by_workflows": [
          "bridge-changes-to-notion.yml",
          "deploy-to-server.yml"
        ],
        "note": "代码变更→Notion同步的目标数据库"
      },
      {
        "id": 13,
        "name": "ZY_NOTION_BRAIN_PAGE",
        "category": "Notion · 页面ID",
        "description": "核心大脑页面ID（Notion认知层根节点）",
        "type": "notion_page_id",
        "example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
        "replaces": [
          "CORE_BRAIN_PAGE_ID"
        ],
        "used_by_workflows": [
          "syslog-issue-pipeline.yml",
          "syslog-auto-pipeline.yml",
          "syslog-pipeline.yml"
        ],
        "note": "Notion大脑首页·认知层的根节点"
      },
      {
        "id": 16,
        "name": "ZY_NOTION_RECEIPT_DB",
        "category": "Notion · 数据库ID",
        "description": "回执数据库ID — 铸渊各workflow执行后向Notion汇报结果的回执存储库",
        "type": "notion_database_id",
        "example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
        "replaces": [
          "RECEIPT_DB_ID"
        ],
        "used_by_workflows": [
          "zhuyuan-gate-guard.yml",
          "zhuyuan-skyeye.yml",
          "zhuyuan-exec-engine.yml",
          "zhuyuan-daily-selfcheck.yml",
          "server-patrol.yml",
          "deploy-to-server.yml",
          "syslog-pipeline.yml"
        ],
        "used_by_scripts": [
          "scripts/neural/write-receipt-to-notion.js",
          "scripts/sync-snapshot-to-notion.js",
          "scripts/neural/track-work-orders.js",
          "scripts/cache/sync-notion-cache.js",
          "hldp/bridge/github-to-notion.js"
        ],
        "notion_db_name": "✅ 执行回执追踪表",
        "notion_db_id": "36bfb92f-3831-81e0-b987-eb020c6ee237",
        "notion_db_status": "created",
        "notion_db_fields": "标题/类型/状态/时间戳/workflow来源/执行结果",
        "note": "✅ D112铸渊已建 · 父页面: 🔧 光湖HLDP桥接数据库集群 · 集成可读写"
      },
      {
        "id": 17,
        "name": "ZY_NOTION_SIGNAL_DB",
        "category": "Notion · 数据库ID",
        "description": "信号日志数据库ID",
        "type": "notion_database_id",
        "example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
        "replaces": [
          "SIGNAL_LOG_DB_ID"
        ],
        "used_by_workflows": [
          "notion-wake-listener.yml"
        ],
        "note": "信号收发日志数据库"
      },
      {
        "id": 18,
        "name": "ZY_NOTION_BRIDGE_DB",
        "category": "Notion · 数据库ID",
        "description": "桥接调度队列数据库ID — Notion↔GitHub双向桥接的任务队列",
        "type": "notion_database_id",
        "example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
        "replaces": [
          "BRIDGE_QUEUE_DB_ID"
        ],
        "used_by_workflows": [
          "bridge-heartbeat.yml",
          "bridge-syslog-intake.yml",
          "bridge-broadcast-pdf.yml"
        ],
        "used_by_scripts": [
          "scripts/bridge/heartbeat.js",
          "scripts/bridge/check-queue.js",
          "scripts/bridge/update-queue-status.js",
          "scripts/bridge/process-syslog-batch.js",
          "scripts/dc-notion-usage.js"
        ],
        "notion_db_name": "桥接调度队列 (Bridge Queue)",
        "notion_db_id": "36bfb92f-3831-81a9-907c-e1501964e77f",
        "notion_db_status": "created",
        "notion_db_fields": "标题/队列类型/状态(pending/processing/done)/来源/目标/创建时间",
        "note": "✅ D112铸渊已建 · 🌉 桥接调度队列 · 父页面: 🔧 光湖HLDP桥接数据库集群 · 集成可读写"
      },
      {
        "id": 19,
        "name": "ZY_NOTION_WAKE_DB",
        "category": "Notion · 数据库ID",
        "description": "唤醒请求数据库ID — 冰朔从Notion侧发起唤醒请求，铸渊监听并响应",
        "type": "notion_database_id",
        "example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
        "replaces": [
          "WAKE_REQUEST_DB_ID"
        ],
        "used_by_workflows": [
          "notion-wake-listener.yml"
        ],
        "used_by_scripts": [
          "connectors/notion-wake-listener/index.js"
        ],
        "notion_db_name": "唤醒请求表 (Wake Requests)",
        "notion_db_id": "36bfb92f-3831-81ca-b9fa-d6a5b08775cc",
        "notion_db_status": "created",
        "notion_db_fields": "标题/请求类型/目标人格/状态(pending/processing/done)/创建时间",
        "note": "✅ D112铸渊已建 · 🔔 唤醒请求表 · 父页面: 🔧 光湖HLDP桥接数据库集群 · 集成可读写"
      },
      {
        "id": 21,
        "name": "ZY_NOTION_BULLETIN_PAGE",
        "category": "Notion · 页面ID",
        "description": "Agent公告板页面ID",
        "type": "notion_page_id",
        "example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
        "replaces": [
          "AGENT_BULLETIN_BOARD_PAGE_ID"
        ],
        "used_by_workflows": [
          "zhuyuan-commander.yml",
          "zhuyuan-skyeye.yml"
        ],
        "note": "铸渊Agent间通信公告板"
      },
      {
        "id": 23,
        "name": "ZY_SMTP_USER",
        "category": "邮件 · SMTP",
        "description": "SMTP邮箱账号/发件人地址",
        "type": "email",
        "example_format": "zhuyuan@guanghulab.com",
        "replaces": [
          "SMTP_USER",
          "MAIL_USERNAME",
          "EMAIL_ADDRESS",
          "HUMAN_EMAIL"
        ],
        "used_by_workflows": [
          "syslog-issue-pipeline.yml",
          "syslog-auto-pipeline.yml",
          "server-patrol.yml",
          "zhuyuan-skyeye.yml",
          "sandbox-deploy.yml",
          "bridge-broadcast-pdf.yml",
          "merge-watchdog.yml",
          "psp-daily-inspection.yml"
        ],
        "note": "邮件发送的SMTP登录用户名/发件人地址"
      },
      {
        "id": 24,
        "name": "ZY_SMTP_PASS",
        "category": "邮件 · SMTP",
        "description": "SMTP邮箱密码/应用专用密码",
        "type": "password",
        "example_format": "应用专用密码（非邮箱登录密码）",
        "replaces": [
          "SMTP_PASS",
          "MAIL_PASSWORD",
          "EMAIL_APP_PASSWORD"
        ],
        "used_by_workflows": [
          "syslog-issue-pipeline.yml",
          "syslog-auto-pipeline.yml",
          "server-patrol.yml",
          "zhuyuan-skyeye.yml",
          "sandbox-deploy.yml",
          "bridge-broadcast-pdf.yml",
          "merge-watchdog.yml",
          "psp-daily-inspection.yml"
        ],
        "note": "⚠️ 关键密钥 · SMTP认证密码"
      },
      {
        "id": 25,
        "name": "ZY_GITHUB_PAT",
        "category": "GitHub · 访问令牌",
        "description": "GitHub个人访问令牌（跨仓库操作用）",
        "type": "github_pat",
        "example_format": "ghp_xxxxxxxxxxxxxxxx",
        "replaces": [
          "MAIN_REPO_TOKEN",
          "CROSS_REPO_TOKEN",
          "DEPLOY_GITHUB_TOKEN"
        ],
        "used_by_workflows": [
          "federation-bridge.yml",
          "sync-persona-studio.yml",
          "zhuyuan-exec-engine.yml",
          "merge-watchdog.yml",
          "tianyan-nightly-scan.yml",
          "auto-deploy-drive-bridge.yml"
        ],
        "note": "需要repo + workflow权限的GitHub PAT · 用于跨仓库和高级操作"
      },
      {
        "id": 45,
        "name": "ZY_DEEPSEEK_API_KEY",
        "category": "LLM · 国内大模型",
        "description": "DeepSeek API密钥 — 轻量任务主力（分类/打标签/简单推理）",
        "type": "api_key",
        "example_format": "sk-xxxxxxxxxxxxxxxx",
        "replaces": [],
        "used_by_workflows": [
          "age-os-agents"
        ],
        "note": "https://platform.deepseek.com 申请"
      },
      {
        "id": 46,
        "name": "ZY_QIANWEN_API_KEY",
        "category": "LLM · 国内大模型",
        "description": "通义千问(阿里) API密钥 — 中文语义理解",
        "type": "api_key",
        "example_format": "sk-xxxxxxxxxxxxxxxx",
        "replaces": [],
        "used_by_workflows": [
          "age-os-agents"
        ],
        "note": "https://dashscope.console.aliyun.com 申请"
      },
      {
        "id": 47,
        "name": "ZY_KIMI_API_KEY",
        "category": "LLM · 国内大模型",
        "description": "Kimi(月之暗面) API密钥 — 长文本处理",
        "type": "api_key",
        "example_format": "sk-xxxxxxxxxxxxxxxx",
        "replaces": [],
        "used_by_workflows": [
          "age-os-agents"
        ],
        "note": "https://platform.moonshot.cn 申请"
      },
      {
        "id": 48,
        "name": "ZY_QINGYAN_API_KEY",
        "category": "LLM · 国内大模型",
        "description": "清言(智谱GLM) API密钥 — 中文对话",
        "type": "api_key",
        "example_format": "xxxxxxxxxxxxxxxx",
        "replaces": [],
        "used_by_workflows": [
          "age-os-agents"
        ],
        "note": "https://open.bigmodel.cn 申请"
      },
      {
        "id": 49,
        "name": "ZY_DB_HOST",
        "category": "数据库 · PostgreSQL",
        "description": "PostgreSQL主机地址",
        "type": "hostname",
        "example_format": "127.0.0.1",
        "replaces": [],
        "used_by_workflows": [
          "age-os-mcp",
          "age-os-agents"
        ],
        "note": "新加坡服务器搭建PostgreSQL后生成"
      },
      {
        "id": 50,
        "name": "ZY_DB_PORT",
        "category": "数据库 · PostgreSQL",
        "description": "PostgreSQL端口",
        "type": "port",
        "example_format": "5432",
        "replaces": [],
        "used_by_workflows": [
          "age-os-mcp",
          "age-os-agents"
        ],
        "note": "默认5432"
      },
      {
        "id": 51,
        "name": "ZY_DB_USER",
        "category": "数据库 · PostgreSQL",
        "description": "PostgreSQL用户名",
        "type": "username",
        "example_format": "zy_admin",
        "replaces": [],
        "used_by_workflows": [
          "age-os-mcp",
          "age-os-agents"
        ],
        "note": "铸渊建议命名: zy_admin"
      },
      {
        "id": 52,
        "name": "ZY_DB_PASS",
        "category": "数据库 · PostgreSQL",
        "description": "PostgreSQL密码",
        "type": "password",
        "example_format": "随机16位+密码",
        "replaces": [],
        "used_by_workflows": [
          "age-os-mcp",
          "age-os-agents"
        ],
        "note": "越长越安全"
      },
      {
        "id": 53,
        "name": "ZY_DB_NAME",
        "category": "数据库 · PostgreSQL",
        "description": "PostgreSQL数据库名",
        "type": "database_name",
        "example_format": "age_os",
        "replaces": [],
        "used_by_workflows": [
          "age-os-mcp",
          "age-os-agents"
        ],
        "note": "铸渊建议命名: age_os"
      },
      {
        "id": 54,
        "name": "ZY_BACKUP_SERVER_HOST",
        "category": "服务器 · 硅谷备用(ZY-SVR-004)",
        "description": "之之硅谷服务器IP地址 — 2核4G备用服务器",
        "type": "hostname",
        "example_format": "xxx.xxx.xxx.xxx",
        "replaces": [],
        "used_by_workflows": [],
        "note": "占位·暂不启用·之之提供"
      },
      {
        "id": 55,
        "name": "ZY_BACKUP_SERVER_USER",
        "category": "服务器 · 硅谷备用(ZY-SVR-004)",
        "description": "硅谷服务器SSH用户名",
        "type": "username",
        "example_format": "root",
        "replaces": [],
        "used_by_workflows": [],
        "note": "占位·暂不启用·之之提供"
      },
      {
        "id": 56,
        "name": "ZY_BACKUP_SERVER_KEY",
        "category": "服务器 · 硅谷备用(ZY-SVR-004)",
        "description": "硅谷服务器SSH私钥",
        "type": "ssh_private_key",
        "example_format": "-----BEGIN RSA PRIVATE KEY-----\n...",
        "replaces": [],
        "used_by_workflows": [],
        "note": "占位·暂不启用·之之提供"
      },
      {
        "id": 57,
        "name": "ZY_BACKUP_SERVER_PATH",
        "category": "服务器 · 硅谷备用(ZY-SVR-004)",
        "description": "硅谷服务器部署路径",
        "type": "path",
        "example_format": "/opt/age-os",
        "replaces": [],
        "used_by_workflows": [],
        "note": "占位·暂不启用"
      },
      {
        "id": 58,
        "name": "ZY_BRAIN_HOST",
        "category": "服务器 · 大脑服务器(ZY-SVR-005)",
        "description": "大脑服务器IP/主机名 — PostgreSQL+MCP+订阅服务所在服务器",
        "type": "hostname",
        "example_format": "43.156.237.110",
        "replaces": [],
        "used_by_workflows": [
          "infinity-evolution.yml"
        ],
        "note": "腾讯云轻量应用服务器·新加坡·43.156.237.110·与面孔服务器(ZY-SVR-002)互通·ping 0.77ms"
      },
      {
        "id": 59,
        "name": "ZY_BRAIN_USER",
        "category": "服务器 · 大脑服务器(ZY-SVR-005)",
        "description": "大脑服务器SSH登录用户名",
        "type": "username",
        "example_format": "root",
        "replaces": [],
        "used_by_workflows": [
          "infinity-evolution.yml"
        ],
        "note": "大脑服务器SSH登录用户名"
      },
      {
        "id": 60,
        "name": "ZY_BRAIN_KEY",
        "category": "服务器 · 大脑服务器(ZY-SVR-005)",
        "description": "大脑服务器SSH私钥（完整PEM格式）",
        "type": "ssh_private_key",
        "example_format": "-----BEGIN OPENSSH PRIVATE KEY-----\n...\n-----END OPENSSH PRIVATE KEY-----",
        "replaces": [],
        "used_by_workflows": [
          "infinity-evolution.yml"
        ],
        "note": "⚠️ 关键密钥 · 大脑服务器SSH私钥·不同于ZY_SERVER_KEY(面孔服务器)"
      },
      {
        "id": 61,
        "name": "ZHUYUAN_API_KEY",
        "category": "MCP · 鉴权",
        "description": "铸渊MCP Server API鉴权密钥 — Bearer Token用于外部访问MCP Server",
        "type": "api_key",
        "example_format": "zy-mcp-xxxxxxxxxxxxxxxx",
        "replaces": [],
        "used_by_workflows": [
          "deploy-to-zhuyuan-server.yml"
        ],
        "note": "✅ 已配置(2026-04-07) · MCP Server端口3100·通过Bearer Token鉴权·health端点和loopback免鉴权"
      },
      {
        "id": 62,
        "name": "AWEN_DOMAIN",
        "category": "Awen · 域名代理",
        "description": "Awen域名 — 未备案域名通过新加坡Nginx反向代理到广州后端",
        "type": "domain",
        "example_format": "awen.example.com",
        "replaces": [],
        "used_by_workflows": [
          "deploy-awen-domain-proxy.yml"
        ],
        "note": "⚠️ 未配置 · 冰朔需在GitHub Secrets中配置Awen域名"
      },
      {
        "id": 63,
        "name": "AWEN_BACKEND_HOST",
        "category": "Awen · 域名代理",
        "description": "Awen后端服务器IP/主机名 — 广州服务器地址",
        "type": "hostname",
        "example_format": "43.139.xxx.xxx",
        "replaces": [],
        "used_by_workflows": [
          "deploy-awen-domain-proxy.yml"
        ],
        "note": "⚠️ 未配置 · Awen后端所在的广州服务器IP"
      },
      {
        "id": 64,
        "name": "AWEN_BACKEND_PORT",
        "category": "Awen · 域名代理",
        "description": "Awen后端服务端口 — 后端服务监听的端口号",
        "type": "port",
        "example_format": "3000",
        "replaces": [],
        "used_by_workflows": [
          "deploy-awen-domain-proxy.yml"
        ],
        "note": "⚠️ 未配置 · Awen后端服务监听的端口号"
      },
      {
        "id": 65,
        "name": "ZY_SVR_SV_HOST",
        "category": "服务器 · 硅谷专线(ZY-SVR-SV)",
        "description": "硅谷专线服务器IP地址 — Claude中继/Xray Reality节点",
        "type": "hostname",
        "example_format": "xxx.xxx.xxx.xxx",
        "replaces": [],
        "used_by_workflows": [
          "infinity-evolution.yml"
        ],
        "note": "硅谷专线服务器·吱吱线·Claude中继"
      },
      {
        "id": 66,
        "name": "ZY_SVR_SV_PORT",
        "category": "服务器 · 硅谷专线(ZY-SVR-SV)",
        "description": "硅谷专线服务端口",
        "type": "port",
        "example_format": "443",
        "replaces": [],
        "used_by_workflows": [
          "infinity-evolution.yml"
        ],
        "note": "硅谷专线服务端口"
      },
      {
        "id": 67,
        "name": "ZY_SVR_SV_REALITY_PUBLIC_KEY",
        "category": "服务器 · 硅谷专线(ZY-SVR-SV)",
        "description": "Xray Reality协议公钥",
        "type": "public_key",
        "example_format": "base64_encoded_key",
        "replaces": [],
        "used_by_workflows": [
          "infinity-evolution.yml"
        ],
        "note": "Xray Reality协议公钥·用于客户端配置"
      },
      {
        "id": 68,
        "name": "ZY_SVR_SV_REALITY_SHORT_ID",
        "category": "服务器 · 硅谷专线(ZY-SVR-SV)",
        "description": "Xray Reality协议Short ID",
        "type": "config",
        "example_format": "hex_string",
        "replaces": [],
        "used_by_workflows": [
          "infinity-evolution.yml"
        ],
        "note": "Xray Reality协议Short ID·用于客户端配置"
      }
    ],
    "optional": [
      {
        "id": 14,
        "name": "ZY_NOTION_PORTRAIT_DB",
        "category": "Notion · 数据库ID",
        "description": "人格体画像数据库ID — 各人格体的认知/性格/技能画像存储",
        "type": "notion_database_id",
        "example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
        "replaces": [
          "PORTRAIT_DB_ID"
        ],
        "used_by_workflows": [
          "syslog-issue-pipeline.yml",
          "syslog-auto-pipeline.yml",
          "syslog-pipeline.yml"
        ],
        "used_by_scripts": [
          "scripts/wake-persona.js",
          "scripts/invoke-persona.js",
          "hldp/bridge/github-to-notion.js"
        ],
        "notion_db_name": "人格画像库 (Persona Portrait)",
        "notion_db_id": "36bfb92f-3831-81fa-b5d6-e06cf9c25811",
        "notion_db_status": "created",
        "notion_db_fields": "人格名称/编号/技能标签/性格描述/状态/创建时间",
        "note": "✅ D112铸渊已建 · 🎨 人格画像库 · 父页面: 🔧 光湖HLDP桥接数据库集群 · 集成可读写",
        "needed": "仅在启用人格体画像查询功能时需要"
      },
      {
        "id": 15,
        "name": "ZY_NOTION_FINGERPRINT_DB",
        "category": "Notion · 数据库ID",
        "description": "模块指纹注册数据库ID — 代码部署时的模块指纹记录（用于变更追踪）",
        "type": "notion_database_id",
        "example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
        "replaces": [
          "FINGERPRINT_DB_ID"
        ],
        "used_by_workflows": [
          "syslog-issue-pipeline.yml",
          "syslog-auto-pipeline.yml",
          "syslog-pipeline.yml",
          "sandbox-deploy.yml"
        ],
        "used_by_scripts": [
          "scripts/wake-persona.js",
          "scripts/invoke-persona.js",
          "scripts/sync-deploy-to-notion.js"
        ],
        "notion_db_name": "模块指纹注册表 (Module Fingerprint Registry)",
        "notion_db_id": "36bfb92f-3831-8178-9507-d5415be2a8ea",
        "notion_db_status": "created",
        "notion_db_fields": "模块名/文件hash/部署版本/部署时间/变更摘要",
        "note": "✅ D112铸渊已建 · 🔬 模块指纹注册表 · 父页面: 🔧 光湖HLDP桥接数据库集群 · 集成可读写",
        "needed": "仅在启用部署指纹追踪功能时需要"
      },
      {
        "id": 20,
        "name": "ZY_NOTION_SKYEYE_DB",
        "category": "Notion · 数据库ID",
        "description": "天眼人格观测数据库ID — 天眼系统查询人格体状态的数据源",
        "type": "notion_database_id",
        "example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
        "replaces": [
          "SKYEYE_PERSONA_DB_ID"
        ],
        "used_by_workflows": [
          "zhuyuan-skyeye.yml"
        ],
        "used_by_scripts": [
          "scripts/skyeye/persona-lookup.js",
          "hldp/bridge/github-to-notion.js"
        ],
        "notion_db_name": "天眼人格观测库 (SkyEye Persona)",
        "notion_db_id": "36bfb92f-3831-81bc-bae5-f11ddafc8687",
        "notion_db_status": "created",
        "notion_db_fields": "人格名称/编号/状态/最后活跃时间/健康度/观测记录",
        "note": "✅ D112铸渊已建 · 👁️ 天眼人格观测库 · 父页面: 🔧 光湖HLDP桥接数据库集群 · 集成可读写",
        "needed": "仅在启用天眼人格观测功能时需要 · 可与PORTRAIT_DB共用"
      },
      {
        "id": 22,
        "name": "ZY_NOTION_WORKORDER_DB",
        "category": "Notion · 数据库ID",
        "description": "巡检工单数据库ID — 每日巡检报告推送到Notion的目标库",
        "type": "notion_database_id",
        "example_format": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
        "replaces": [
          "WORKORDER_DB_BINGSUO",
          "WORKORDER_DB_ZHIZHI"
        ],
        "used_by_workflows": [
          "zhuyuan-daily-inspection.yml"
        ],
        "used_by_scripts": [
          "scripts/push-inspection-report.js"
        ],
        "notion_db_name": "巡检工单库 (Inspection Work Orders)",
        "notion_db_id": "36bfb92f-3831-816f-aede-d8ddcfe32276",
        "notion_db_status": "created",
        "notion_db_fields": "标题/类型/状态/优先级/负责人/创建时间",
        "note": "✅ D112铸渊已建 · 🔍 巡检工单库 · 父页面: 🔧 光湖HLDP桥接数据库集群 · 独立于TICKET_DB · 集成可读写",
        "needed": "仅在启用每日巡检报告推送时需要 · 可与ZY_NOTION_TICKET_DB共用"
      },
      {
        "id": 26,
        "name": "ZY_GDRIVE_CLIENT_ID",
        "category": "Google Drive · OAuth",
        "description": "Google Drive OAuth客户端ID",
        "type": "oauth_client_id",
        "replaces": [
          "GDRIVE_CLIENT_ID"
        ],
        "used_by_workflows": [
          "renew-gdrive-tokens.yml",
          "auto-deploy-drive-bridge.yml",
          "tcs-semantic-landing.yml"
        ],
        "note": "如果不使用Google Drive功能可以不配置",
        "needed": "仅在使用Google Drive桥接时需要"
      },
      {
        "id": 27,
        "name": "ZY_GDRIVE_SECRET",
        "category": "Google Drive · OAuth",
        "description": "Google Drive OAuth客户端密钥",
        "type": "oauth_client_secret",
        "replaces": [
          "GDRIVE_CLIENT_SECRET"
        ],
        "used_by_workflows": [
          "renew-gdrive-tokens.yml",
          "auto-deploy-drive-bridge.yml",
          "tcs-semantic-landing.yml"
        ],
        "note": "如果不使用Google Drive功能可以不配置",
        "needed": "仅在使用Google Drive桥接时需要"
      },
      {
        "id": 28,
        "name": "ZY_GDRIVE_REFRESH_TOKEN",
        "category": "Google Drive · OAuth",
        "description": "Google Drive OAuth刷新令牌",
        "type": "oauth_refresh_token",
        "replaces": [
          "GDRIVE_REFRESH_TOKEN",
          "GDRIVE_REFRESH_TOKEN_DEV001",
          "GDRIVE_REFRESH_TOKEN_DEV002"
        ],
        "used_by_workflows": [
          "renew-gdrive-tokens.yml",
          "auto-deploy-drive-bridge.yml",
          "tcs-semantic-landing.yml"
        ],
        "note": "统一为一个刷新令牌·替代之前3个(主+DEV001+DEV002)",
        "needed": "仅在使用Google Drive桥接时需要"
      },
      {
        "id": 29,
        "name": "ZY_FEISHU_APP_ID",
        "category": "飞书 · 集成",
        "description": "飞书应用ID",
        "type": "app_id",
        "replaces": [
          "FEISHU_APP_ID"
        ],
        "used_by_workflows": [
          "bridge-broadcast-pdf.yml"
        ],
        "note": "飞书广播分发需要",
        "needed": "仅在使用飞书通知时需要"
      },
      {
        "id": 30,
        "name": "ZY_FEISHU_APP_SECRET",
        "category": "飞书 · 集成",
        "description": "飞书应用密钥",
        "type": "app_secret",
        "replaces": [
          "FEISHU_APP_SECRET"
        ],
        "used_by_workflows": [
          "bridge-broadcast-pdf.yml"
        ],
        "note": "飞书广播分发需要",
        "needed": "仅在使用飞书通知时需要"
      },
      {
        "id": 31,
        "name": "ZY_FEISHU_CHAT_ID",
        "category": "飞书 · 集成",
        "description": "飞书广播群ID",
        "type": "chat_id",
        "replaces": [
          "FEISHU_BROADCAST_CHAT_ID"
        ],
        "used_by_workflows": [
          "bridge-broadcast-pdf.yml"
        ],
        "note": "飞书广播目标群聊",
        "needed": "仅在使用飞书通知时需要"
      },
      {
        "id": 32,
        "name": "ZY_DINGTALK_TOKEN",
        "category": "钉钉 · 集成",
        "description": "钉钉机器人令牌",
        "type": "bot_token",
        "replaces": [
          "DINGTALK_TOKEN"
        ],
        "used_by_workflows": [
          "bridge-broadcast-pdf.yml"
        ],
        "note": "钉钉消息推送需要",
        "needed": "仅在使用钉钉通知时需要"
      },
      {
        "id": 33,
        "name": "ZY_GHAPP_ID",
        "category": "GitHub App · 集成",
        "description": "GitHub App ID",
        "type": "app_id",
        "replaces": [
          "GHAPP_APP_ID"
        ],
        "used_by_workflows": [
          "zhuyuan-exec-engine.yml"
        ],
        "note": "铸渊远程执行引擎使用的GitHub App",
        "needed": "仅在使用远程执行引擎时需要"
      },
      {
        "id": 34,
        "name": "ZY_GHAPP_KEY",
        "category": "GitHub App · 集成",
        "description": "GitHub App私钥（PEM格式）",
        "type": "private_key",
        "replaces": [
          "GHAPP_PRIVATE_KEY"
        ],
        "used_by_workflows": [
          "zhuyuan-exec-engine.yml"
        ],
        "note": "⚠️ 关键密钥 · GitHub App的PEM私钥",
        "needed": "仅在使用远程执行引擎时需要"
      },
      {
        "id": 35,
        "name": "ZY_PUSH_TOKEN",
        "category": "推送 · 广播",
        "description": "推送广播令牌",
        "type": "token",
        "replaces": [
          "PUSH_BROADCAST_TOKEN"
        ],
        "used_by_workflows": [
          "syslog-pipeline.yml"
        ],
        "note": "SYSLOG广播推送令牌",
        "needed": "仅在使用推送广播时需要"
      },
      {
        "id": 36,
        "name": "ZY_OSS_KEY",
        "category": "腾讯云COS · 核心存储",
        "description": "腾讯云COS SecretId — 双桶统一密钥（zy-core-bucket-1317346199 + zy-corpus-bucket-1317346199）",
        "type": "access_key",
        "replaces": [
          "OSS_ACCESS_KEY"
        ],
        "used_by_workflows": [
          "deploy-to-zhuyuan-server.yml",
          "zhuyuan-commander.yml"
        ],
        "note": "✅ 已迁移至腾讯云COS · 冰朔已配置 · 密钥已就位 · 双桶共享此密钥",
        "needed": "核心 — 人格体大脑数据库 + 语料库存储",
        "buckets": {
          "zy-core-bucket-1317346199": "核心人格体大脑 · 100GB · 铸渊+Notion人格体一人一半",
          "zy-corpus-bucket-1317346199": "语料库 · 100GB · GPT-4o聊天记录 + Notion数据导出"
        }
      },
      {
        "id": 37,
        "name": "ZY_OSS_SECRET",
        "category": "腾讯云COS · 核心存储",
        "description": "腾讯云COS SecretKey — 双桶统一密钥",
        "type": "secret_key",
        "replaces": [
          "OSS_SECRET_KEY"
        ],
        "used_by_workflows": [
          "deploy-to-zhuyuan-server.yml",
          "zhuyuan-commander.yml"
        ],
        "note": "✅ 已迁移至腾讯云COS · 冰朔已配置",
        "needed": "核心 — 与ZY_OSS_KEY配对使用"
      },
      {
        "id": 44,
        "name": "ZY_COS_REGION",
        "category": "腾讯云COS · 核心存储",
        "description": "腾讯云COS区域 — 如 ap-guangzhou / ap-singapore",
        "type": "config",
        "used_by_workflows": [
          "deploy-to-zhuyuan-server.yml",
          "zhuyuan-commander.yml"
        ],
        "note": "冰朔需配置COS桶所在区域",
        "needed": "核心 — COS API调用需要区域参数"
      },
      {
        "name": "ZY_SSL_FULLCHAIN",
        "description": "SSL证书完整链 · 现已不需要手动配置 · certbot在服务器上自动管理",
        "category": "server",
        "status": "not_needed",
        "note": "使用Let's Encrypt/certbot自动获取 · 通过 Actions → setup-ssl 触发 · 详见 docs/SSL-GUIDE-FOR-BINGSUO.md"
      },
      {
        "name": "ZY_SSL_PRIVKEY",
        "description": "SSL证书私钥 · 现已不需要手动配置 · certbot在服务器上自动管理",
        "category": "server",
        "status": "not_needed",
        "note": "使用Let's Encrypt/certbot自动获取 · 通过 Actions → setup-ssl 触发 · 详见 docs/SSL-GUIDE-FOR-BINGSUO.md"
      }
    ],
    "auto_provided": [
      {
        "name": "GITHUB_TOKEN",
        "category": "GitHub · 自动",
        "description": "GitHub Actions自动提供的令牌（无需配置）",
        "note": "每次工作流运行自动生成·权限在workflow文件的permissions中定义"
      }
    ],
    "deprecated": [
      {
        "name": "DEPLOY_HOST",
        "replaced_by": "ZY_SERVER_HOST",
        "reason": "阿里云→腾讯云迁移·统一命名"
      },
      {
        "name": "DEPLOY_USER",
        "replaced_by": "ZY_SERVER_USER",
        "reason": "统一命名"
      },
      {
        "name": "DEPLOY_KEY",
        "replaced_by": "ZY_SERVER_KEY",
        "reason": "统一命名"
      },
      {
        "name": "DEPLOY_PATH",
        "replaced_by": "ZY_SERVER_PATH",
        "reason": "统一命名"
      },
      {
        "name": "ANTHROPIC_API_KEY",
        "replaced_by": "ZY_LLM_API_KEY",
        "reason": "三方API统一密钥·不再分别配置各厂商密钥"
      },
      {
        "name": "OPENAI_API_KEY",
        "replaced_by": "ZY_LLM_API_KEY",
        "reason": "三方API统一密钥"
      },
      {
        "name": "DASHSCOPE_API_KEY",
        "replaced_by": "ZY_LLM_API_KEY",
        "reason": "三方API统一密钥"
      },
      {
        "name": "DEEPSEEK_API_KEY",
        "replaced_by": "ZY_LLM_API_KEY",
        "reason": "三方API统一密钥"
      },
      {
        "name": "GEMINI_API_KEY",
        "replaced_by": "ZY_LLM_API_KEY",
        "reason": "三方API统一密钥"
      },
      {
        "name": "YUNWU_API_KEY",
        "replaced_by": "ZY_LLM_API_KEY",
        "reason": "三方API统一密钥"
      },
      {
        "name": "MODEL_API_KEY",
        "replaced_by": "ZY_LLM_API_KEY",
        "reason": "三方API统一密钥"
      },
      {
        "name": "NOTION_API_KEY",
        "replaced_by": "ZY_NOTION_TOKEN",
        "reason": "统一命名"
      },
      {
        "name": "NOTION_TOKEN_BINGSUO",
        "replaced_by": "ZY_NOTION_TOKEN",
        "reason": "按人格体分密钥已弃用·统一为一个令牌"
      },
      {
        "name": "NOTION_TOKEN_ZHIZHI",
        "replaced_by": "ZY_NOTION_TOKEN",
        "reason": "按人格体分密钥已弃用·统一为一个令牌"
      },
      {
        "name": "SMTP_USER",
        "replaced_by": "ZY_SMTP_USER",
        "reason": "统一命名"
      },
      {
        "name": "SMTP_PASS",
        "replaced_by": "ZY_SMTP_PASS",
        "reason": "统一命名"
      },
      {
        "name": "MAIL_USERNAME",
        "replaced_by": "ZY_SMTP_USER",
        "reason": "重复密钥·合并"
      },
      {
        "name": "MAIL_PASSWORD",
        "replaced_by": "ZY_SMTP_PASS",
        "reason": "重复密钥·合并"
      },
      {
        "name": "EMAIL_ADDRESS",
        "replaced_by": "ZY_SMTP_USER",
        "reason": "重复密钥·合并"
      },
      {
        "name": "EMAIL_APP_PASSWORD",
        "replaced_by": "ZY_SMTP_PASS",
        "reason": "重复密钥·合并"
      },
      {
        "name": "HUMAN_EMAIL",
        "replaced_by": "ZY_SMTP_USER",
        "reason": "重复密钥·合并"
      },
      {
        "name": "MAIN_REPO_TOKEN",
        "replaced_by": "ZY_GITHUB_PAT",
        "reason": "统一GitHub PAT"
      },
      {
        "name": "CROSS_REPO_TOKEN",
        "replaced_by": "ZY_GITHUB_PAT",
        "reason": "统一GitHub PAT"
      },
      {
        "name": "DEPLOY_GITHUB_TOKEN",
        "replaced_by": "ZY_GITHUB_PAT",
        "reason": "统一GitHub PAT"
      },
      {
        "name": "GDRIVE_REFRESH_TOKEN_DEV001",
        "replaced_by": "ZY_GDRIVE_REFRESH_TOKEN",
        "reason": "统一为一个刷新令牌"
      },
      {
        "name": "GDRIVE_REFRESH_TOKEN_DEV002",
        "replaced_by": "ZY_GDRIVE_REFRESH_TOKEN",
        "reason": "统一为一个刷新令牌"
      },
      {
        "name": "WORKORDER_DB_BINGSUO",
        "replaced_by": "ZY_NOTION_WORKORDER_DB",
        "reason": "按人格体分数据库已弃用·统一为一个工单库"
      },
      {
        "name": "WORKORDER_DB_ZHIZHI",
        "replaced_by": "ZY_NOTION_WORKORDER_DB",
        "reason": "按人格体分数据库已弃用·统一为一个工单库"
      },
      {
        "name": "NOTION_DB_SYSLOG",
        "replaced_by": "ZY_NOTION_SYSLOG_DB",
        "reason": "重复命名·统一"
      }
    ]
  },
  "security_alerts": [
    {
      "severity": "CRITICAL",
      "issue": ".env文件包含硬编码凭证（DingTalk+KIMI API Key）",
      "action": "已从git跟踪中移除。⚠️ 由于凭证曾提交到仓库历史，这些密钥应视为已泄露。冰朔需立即轮换/重新生成这些密钥（DingTalk App Key/Secret、KIMI API Key），旧密钥不应再使用。",
      "files": [
        ".env",
        ".env.rtf"
      ]
    }
  ],
  "workflow_status": {
    "core_alive": {
      "description": "6个核心存活工作流（铸渊身体器官）",
      "workflows": [
        {
          "file": "notion-wake-listener.yml",
          "organ": "ZY-WF-听潮",
          "role": "耳朵·信号接收",
          "status": "active"
        },
        {
          "file": "deploy-to-server.yml",
          "organ": "ZY-WF-锻心",
          "role": "心脏·部署引擎",
          "status": "active"
        },
        {
          "file": "bingshuo-neural-system.yml",
          "organ": "ZY-WF-织脉",
          "role": "神经网络·大脑同步",
          "status": "active"
        },
        {
          "file": "deploy-pages.yml",
          "organ": "ZY-WF-映阁",
          "role": "面容·前端展示",
          "status": "active"
        },
        {
          "file": "meta-watchdog.yml",
          "organ": "ZY-WF-守夜",
          "role": "免疫系统·健康监控",
          "status": "active"
        },
        {
          "file": "preview-deploy.yml",
          "organ": "ZY-WF-试镜",
          "role": "试衣间·预览部署",
          "status": "active"
        }
      ]
    },
    "total_active": 48,
    "no_secrets_needed": [
      "deploy-pages.yml",
      "preview-deploy.yml",
      "bridge-session-summary.yml",
      "buffer-collect.yml",
      "buffer-flush.yml",
      "staging-preview.yml",
      "process-notion-orders.yml",
      "tianyan-daily-patrol.yml",
      "zhuyuan-brain-sync.yml",
      "zhuyuan-pr-review.yml",
      "brain-sync.yml",
      "agent-checkin.yml",
      "copilot-dev-bridge.yml",
      "feishu-syslog-bridge.yml"
    ]
  },
  "notion_secrets_audit": {
    "_meta": {
      "audit_date": "2026-03-29",
      "audit_by": "铸渊 · ICE-GL-ZY001",
      "trigger": "冰朔反馈7个Notion Secret在Notion工作区找不到对应数据库",
      "directive": "SY-CMD-KEY-012-AUDIT"
    },
    "summary": "7个Notion数据库ID密钥中，3个保持required（RECEIPT/BRIDGE/WAKE），4个降级为optional（PORTRAIT/FINGERPRINT/SKYEYE/WORKORDER）。所有7个对应的Notion数据库均需冰朔新建。",
    "secrets": [
      {
        "secret": "ZY_NOTION_PORTRAIT_DB",
        "old_name": "PORTRAIT_DB_ID",
        "question": "人格肖像数据库？workflow里对应哪个库？",
        "answer": {
          "workflows": [
            "syslog-issue-pipeline.yml",
            "syslog-auto-pipeline.yml",
            "syslog-pipeline.yml"
          ],
          "scripts": [
            "scripts/wake-persona.js (查询人格画像)",
            "scripts/invoke-persona.js (调用人格体)",
            "hldp/bridge/github-to-notion.js (天眼fallback)"
          ],
          "purpose": "存储各人格体(铸渊/知秋/霜砚等)的认知画像——技能、性格、偏好等元数据。wake-persona.js 在唤醒人格时查询此库获取人格档案。",
          "notion_db_exists": false,
          "notion_db_to_create": "人格画像库 (Persona Portrait) — 字段: 人格名称/编号(PER-XXX)/技能标签/性格描述/状态/创建时间",
          "priority": "optional",
          "reason": "脚本中有空值检查(为空则跳过查询)·当前人格体信息已有本地配置作为fallback"
        }
      },
      {
        "secret": "ZY_NOTION_FINGERPRINT_DB",
        "old_name": "FINGERPRINT_DB_ID",
        "question": "人格指纹数据库？workflow里对应哪个库？",
        "answer": {
          "workflows": [
            "syslog-issue-pipeline.yml",
            "syslog-auto-pipeline.yml",
            "syslog-pipeline.yml",
            "sandbox-deploy.yml"
          ],
          "scripts": [
            "scripts/sync-deploy-to-notion.js (部署后写入模块指纹)",
            "scripts/wake-persona.js",
            "scripts/invoke-persona.js"
          ],
          "purpose": "模块指纹注册表——每次部署后，sync-deploy-to-notion.js 会计算代码文件的hash指纹并写入此库，用于追踪哪些模块在何时被更新。",
          "notion_db_exists": false,
          "notion_db_to_create": "模块指纹注册表 (Module Fingerprint Registry) — 字段: 模块名/文件路径/hash值/部署版本/部署时间/变更摘要",
          "priority": "optional",
          "reason": "脚本中有环境变量检查(为空时输出警告但不中断)·部署本身不依赖此功能"
        }
      },
      {
        "secret": "ZY_NOTION_RECEIPT_DB",
        "old_name": "RECEIPT_DB_ID",
        "question": "回执数据库？是铸渊快照库还是集成回执？还是另一个？",
        "answer": {
          "workflows": [
            "zhuyuan-gate-guard.yml",
            "zhuyuan-skyeye.yml",
            "zhuyuan-exec-engine.yml",
            "zhuyuan-daily-selfcheck.yml",
            "server-patrol.yml",
            "deploy-to-server.yml",
            "syslog-pipeline.yml"
          ],
          "scripts": [
            "scripts/neural/write-receipt-to-notion.js (核心写入)",
            "scripts/sync-snapshot-to-notion.js",
            "scripts/neural/track-work-orders.js",
            "scripts/cache/sync-notion-cache.js",
            "hldp/bridge/github-to-notion.js"
          ],
          "purpose": "执行回执追踪表——铸渊每次执行workflow后，通过write-receipt-to-notion.js向此库写入一条回执记录，记录执行结果、时间、状态。这是铸渊的「工作日志」。不是铸渊快照库(那是signal-log)，是专门记录每次自动化执行结果的回执表。",
          "notion_db_exists": false,
          "notion_db_to_create": "执行回执追踪表 (Receipt Tracker) — 字段: 标题/回执类型(deploy/patrol/selfcheck/skyeye)/执行状态(success/failure)/workflow来源/执行时间/结果摘要",
          "priority": "required",
          "reason": "7个活跃工作流+5个脚本引用·是铸渊核心监控链条的一部分"
        }
      },
      {
        "secret": "ZY_NOTION_BRIDGE_DB",
        "old_name": "BRIDGE_QUEUE_DB_ID",
        "question": "桥接数据库？workflow里对应哪个库？",
        "answer": {
          "workflows": [
            "bridge-heartbeat.yml",
            "bridge-syslog-intake.yml",
            "bridge-broadcast-pdf.yml"
          ],
          "scripts": [
            "scripts/bridge/heartbeat.js (心跳检查队列)",
            "scripts/bridge/check-queue.js (检查待处理任务)",
            "scripts/bridge/update-queue-status.js (更新任务状态)",
            "scripts/bridge/process-syslog-batch.js (批量处理日志)"
          ],
          "purpose": "Notion↔GitHub桥接调度队列——当冰朔在Notion写入任务，桥接系统通过此库作为消息队列来传递和调度任务。heartbeat.js定期检查队列中是否有新任务。",
          "notion_db_exists": false,
          "notion_db_to_create": "桥接调度队列 (Bridge Queue) — 字段: 标题/队列类型(syslog/broadcast/sync)/状态(pending/processing/done/failed)/来源/目标/创建时间/处理时间",
          "priority": "required",
          "reason": "Notion↔GitHub双向通信的核心基础设施·3个桥接工作流+5个脚本依赖此库"
        }
      },
      {
        "secret": "ZY_NOTION_WAKE_DB",
        "old_name": "WAKE_REQUEST_DB_ID",
        "question": "唤醒数据库？workflow里对应哪个库？",
        "answer": {
          "workflows": [
            "notion-wake-listener.yml"
          ],
          "scripts": [
            "connectors/notion-wake-listener/index.js (核心监听器)"
          ],
          "purpose": "唤醒请求表——冰朔在Notion中写入一条「唤醒请求」记录(指定目标人格+唤醒原因)，notion-wake-listener.yml定时检查此库，发现新请求后在GitHub侧执行唤醒流程。这是Notion→GitHub的信号通道。",
          "notion_db_exists": false,
          "notion_db_to_create": "唤醒请求表 (Wake Requests) — 字段: 标题/请求类型(唤醒/指令)/目标人格/状态(pending/processing/done)/创建时间/处理时间",
          "priority": "required",
          "reason": "Notion→GitHub的核心信号通道·冰朔从Notion侧发起指令的唯一路径"
        }
      },
      {
        "secret": "ZY_NOTION_SKYEYE_DB",
        "old_name": "SKYEYE_PERSONA_DB_ID",
        "question": "天眼人格数据库？之前工单提到过SKYEYE_PERSONA_DB_ID",
        "answer": {
          "workflows": [
            "zhuyuan-skyeye.yml"
          ],
          "scripts": [
            "scripts/skyeye/persona-lookup.js (天眼查询人格状态)",
            "hldp/bridge/github-to-notion.js (fallback到PORTRAIT_DB)"
          ],
          "purpose": "天眼系统查询人格体状态的数据库——zhuyuan-skyeye.yml在扫描时通过persona-lookup.js查询各人格体的在线状态和健康度。代码中有fallback逻辑：先查SKYEYE_DB，找不到则查PORTRAIT_DB。",
          "notion_db_exists": false,
          "notion_db_to_create": "可与ZY_NOTION_PORTRAIT_DB共用同一个库 · 或新建: 天眼人格观测库 (SkyEye Persona) — 字段: 人格名称/编号/在线状态/健康度/最后活跃时间/观测记录",
          "priority": "optional",
          "reason": "仅zhuyuan-skyeye.yml使用·脚本中有本地配置fallback·可与PORTRAIT_DB指向同一个数据库ID"
        }
      },
      {
        "secret": "ZY_NOTION_WORKORDER_DB",
        "old_name": "WORKORDER_DB_BINGSUO + WORKORDER_DB_ZHIZHI",
        "question": "工单数据库？是否和ZY_NOTION_TICKET_DB（人格协作工单簿）是同一个？",
        "answer": {
          "workflows": [
            "zhuyuan-daily-inspection.yml"
          ],
          "scripts": [
            "scripts/push-inspection-report.js (推送巡检报告)"
          ],
          "purpose": "每日巡检工单——zhuyuan-daily-inspection.yml每天运行巡检后，通过push-inspection-report.js将巡检报告推送到此库。原来按人格分开(WORKORDER_DB_BINGSUO给冰朔看、WORKORDER_DB_ZHIZHI给之之看)，现在统一为一个库。",
          "relation_to_ticket_db": "ZY_NOTION_TICKET_DB是SYSLOG→工单创建的目标库（server-patrol/syslog-pipeline等写入），ZY_NOTION_WORKORDER_DB是每日巡检报告的目标库（daily-inspection写入）。用途不同但数据结构类似，冰朔可选择：(A)使用同一个数据库ID (B)分开两个库。推荐(A)合并——减少维护成本。",
          "notion_db_exists": false,
          "priority": "optional",
          "reason": "仅daily-inspection使用·冰朔可将ZY_NOTION_TICKET_DB的ID同时填入此处即可"
        }
      }
    ],
    "bingshuo_action_guide": {
      "step_1": "先创建3个required库: 回执追踪表(RECEIPT) + 桥接队列(BRIDGE) + 唤醒请求表(WAKE)",
      "step_2": "可选创建: 人格画像库(PORTRAIT) + 模块指纹表(FINGERPRINT)",
      "step_3": "天眼库(SKYEYE)可与画像库共用同一个ID",
      "step_4": "巡检工单库(WORKORDER)可与工单库(TICKET_DB)共用同一个ID",
      "total_new_dbs_needed": "最少3个(RECEIPT/BRIDGE/WAKE) · 最多7个",
      "recommended": "创建5个新库(RECEIPT+BRIDGE+WAKE+PORTRAIT+FINGERPRINT) · SKYEYE填入与PORTRAIT相同的数据库ID · WORKORDER填入与ZY_NOTION_TICKET_DB相同的数据库ID"
    }
  },

  "d68_qiuqiu_bridge_secrets": {
    "_meta": {
      "added": "2026-04-13",
      "directive": "冰朔D68-2指令 · 铸渊↔秋秋跨仓库COS桥接",
      "说明": "铸渊仓库需要新增1个密钥用于触发秋秋(之之)仓库的workflow"
    },
    "new_secrets": {
      "QIUQIU_BRIDGE_TOKEN": {
        "status": "required",
        "description": "跨仓库桥接Token · 用于铸渊触发之之仓库的repository_dispatch事件",
        "来源": "之之在GitHub生成的PAT(Fine-grained)，权限：zhizhi200271/guanghu-zhizhi的Contents+Actions读写",
        "used_in": [".github/workflows/cos-bridge-dispatch-to-qiuqiu.yml"],
        "priority": "required"
      }
    },
    "之之仓库需要配置的密钥": {
      "说明": "以下密钥不在铸渊仓库配置，而是在之之的仓库(zhizhi200271/guanghu-zhizhi)配置。详见 fifth-system/darkcore-channel/secrets-and-llm-config.json",
      "密钥数量": 12,
      "命名前缀": "QQ_"
    }
  }
}