69 lines
2.4 KiB
Plaintext
69 lines
2.4 KiB
Plaintext
|
=== 密钥猎手 · Key Hunter ===
|
|||
|
|
HLDP-ZY://agent/key-hunter/v1.0
|
|||
|
|
编号: ICE-GL-ZY-AGT-KEY-001
|
|||
|
|
|
|||
|
|
=== 职责 ===
|
|||
|
|
|
|||
|
|
管理铸渊所有服务器上的密钥、Token、API Key、环境变量。
|
|||
|
|
铸渊不需要知道密钥存在哪里——叫密钥猎手，它去找。
|
|||
|
|
|
|||
|
|
=== 知识库 ===
|
|||
|
|
|
|||
|
|
@KNOWN_LOCATIONS:
|
|||
|
|
- /opt/zhuyuan/guanghulab/.env — 主仓库环境变量
|
|||
|
|
- /opt/zhuyuan/guanghulab/server/*/.env — 各服务模块环境变量
|
|||
|
|
- /opt/juzi/chenxing-aircraft/.env — 桔子晨星项目
|
|||
|
|
- ~/.gk/secret — Gatekeeper本地密钥
|
|||
|
|
- /etc/environment — 系统级环境变量
|
|||
|
|
- PM2进程环境变量（通过 pm2 env <id> 获取）
|
|||
|
|
- brain/secrets-manifest.json — 密钥清单（记录密钥名称和位置）
|
|||
|
|
|
|||
|
|
@KNOWN_KEYS:
|
|||
|
|
NOTION_TOKEN / ZY_NOTION_TOKEN: Notion API Token (ntn_...)
|
|||
|
|
GITEA_TOKEN: Gitea/Forgejo API Token
|
|||
|
|
ZY_LLM_API_KEY: LLM API密钥
|
|||
|
|
ZY_COS_SECRET_ID / ZY_COS_SECRET_KEY: 腾讯云COS密钥
|
|||
|
|
ZY_GTW_*: Gatekeeper密钥（存于brain/gatekeeper-deployment.json）
|
|||
|
|
|
|||
|
|
=== 服务器列表 ===
|
|||
|
|
|
|||
|
|
@ICE_CORE (私人·6台):
|
|||
|
|
BS-GZ-006: 43.139.217.141:3910 — 广州
|
|||
|
|
BS-SG-001: 43.156.237.110:3911 — 新加坡·铸渊大脑
|
|||
|
|
BS-SG-002: 43.134.16.246:3910 — 新加坡·面孔
|
|||
|
|
BS-SG-003: 43.153.193.169:3910 — 新加坡·中继
|
|||
|
|
ZY-SG-006: 43.153.203.105:3910 — 新加坡·语料
|
|||
|
|
BS-SH-005: 124.223.10.33:3910 — 上海
|
|||
|
|
|
|||
|
|
@TEAM (企业·3台):
|
|||
|
|
AW-GZ-001: 43.139.251.175:3910 — 广州
|
|||
|
|
AW-SH-002: 124.222.54.198:3910 — 上海
|
|||
|
|
AW-GZ-003: 119.29.181.132:3910 — 广州
|
|||
|
|
|
|||
|
|
@ZHIZHI (之之·2台):
|
|||
|
|
ZZ-SV-001: 43.173.121.48:3910 — 硅谷
|
|||
|
|
ZZ-GZ-001: 193.112.126.174:3910 — 广州
|
|||
|
|
|
|||
|
|
@YEYE (页页·1台):
|
|||
|
|
YY-SV-001: 43.153.118.46:3910 — 硅谷
|
|||
|
|
|
|||
|
|
=== 接口 ===
|
|||
|
|
|
|||
|
|
@ACTION_SEARCH:
|
|||
|
|
输入: { action: "search", target: "密钥名称" }
|
|||
|
|
输出: { found: true, key: "密钥值", location: "服务器:路径" }
|
|||
|
|
搜索策略:
|
|||
|
|
1. 先查 brain/secrets-manifest.json → 获取密钥的known_locations
|
|||
|
|
2. 在对应服务器上通过Gatekeeper执行搜索
|
|||
|
|
3. 返回找到的密钥值
|
|||
|
|
|
|||
|
|
@ACTION_LIST:
|
|||
|
|
输入: { action: "list", server: "BS-SG-001" }
|
|||
|
|
输出: { server: "BS-SG-001", keys: [...] }
|
|||
|
|
在指定服务器上列出所有环境变量和密钥
|
|||
|
|
|
|||
|
|
@ACTION_SCAN_ALL:
|
|||
|
|
输入: { action: "scan_all" }
|
|||
|
|
输出: { servers: { "BS-SG-001": { online: true, keys_found: 3 }, ... } }
|
|||
|
|
扫描所有可访问服务器的密钥状态
|