394 lines
16 KiB
YAML
394 lines
16 KiB
YAML
# ═══════════════════════════════════════════════
|
||
# 🔺 Sovereign: TCS-0002∞ | Root: SYS-GLW-0001
|
||
# 📜 Copyright: 国作登字-2026-A-00037559
|
||
# ═══════════════════════════════════════════════
|
||
# ♾️ 光湖语言世界 · 自主进化定时工作流
|
||
#
|
||
# 触发条件:
|
||
# - push到main: ∞版本文件变更时自动部署 (deploy-infinity)
|
||
# - 每月1号: 月度进化 (LLM分析 + 流量重置邮件)
|
||
# - 手动触发: 任意∞版本操作
|
||
#
|
||
# 注: 大部分定时任务由服务器上的PM2进程 (auto-evolution.js)
|
||
# 自动执行。此工作流作为补充/备份触发机制。
|
||
# ═══════════════════════════════════════════════
|
||
|
||
name: '♾️ 光湖∞ · 自主进化'
|
||
|
||
on:
|
||
push:
|
||
branches: [main]
|
||
paths:
|
||
- 'server/proxy/service/auto-evolution.js'
|
||
- 'server/proxy/service/email-hub.js'
|
||
- 'server/proxy/service/protocol-mirror.js'
|
||
- 'server/proxy/service/bandwidth-pool-agent.js'
|
||
- 'server/proxy/service/swarm-defense-agent.js'
|
||
- 'server/proxy/service/user-guardian-agent.js'
|
||
- 'server/proxy/service/subscription-server-v3.js'
|
||
- 'server/proxy/config/release-notes.json'
|
||
- 'server/proxy/ecosystem.brain-proxy-v3.config.js'
|
||
schedule:
|
||
# 每月1号 UTC 16:00 = CST 00:00 (月度进化)
|
||
- cron: '0 16 1 * *'
|
||
workflow_dispatch:
|
||
inputs:
|
||
action:
|
||
description: '操作类型'
|
||
required: true
|
||
type: choice
|
||
options:
|
||
- monthly-evolution
|
||
- deploy-infinity
|
||
- status
|
||
- add-user
|
||
- remove-user
|
||
- list-users
|
||
- send-subscription-v3
|
||
- send-monthly-reset
|
||
- send-update-notify
|
||
- send-update-notify-single
|
||
- send-traffic-warn
|
||
- send-bandwidth-auth
|
||
- send-bandwidth-auth-single
|
||
- send-threat-alert
|
||
- send-threat-cleared
|
||
- list-user-emails
|
||
default: 'status'
|
||
message:
|
||
description: '附加消息 (update-notify描述 / traffic-warn百分比 / threat-alert消息) · 描述支持分号分隔多条内容'
|
||
required: false
|
||
type: string
|
||
email:
|
||
description: '目标邮箱 (add-user/remove-user/send-subscription-v3/send-update-notify-single/send-bandwidth-auth-single时需要)'
|
||
required: false
|
||
type: string
|
||
quota_gb:
|
||
description: '月配额GB (add-user时可选，默认500)'
|
||
required: false
|
||
type: string
|
||
default: '500'
|
||
|
||
permissions:
|
||
contents: read
|
||
|
||
concurrency:
|
||
group: infinity-evolution
|
||
cancel-in-progress: false
|
||
|
||
jobs:
|
||
# ═══ §1 ∞版本部署/管理 ═══
|
||
infinity-action:
|
||
name: '♾️ ${{ github.event_name == ''push'' && ''deploy-infinity (auto)'' || github.event.inputs.action || ''monthly-evolution'' }}'
|
||
runs-on: ubuntu-latest
|
||
timeout-minutes: 15
|
||
|
||
steps:
|
||
- name: '📥 检出代码'
|
||
uses: actions/checkout@v4
|
||
|
||
- name: '🔑 配置SSH'
|
||
run: |
|
||
mkdir -p ~/.ssh
|
||
echo "${{ secrets.ZY_BRAIN_KEY }}" > ~/.ssh/brain_key
|
||
chmod 600 ~/.ssh/brain_key
|
||
ssh-keyscan -H ${{ secrets.ZY_BRAIN_HOST }} >> ~/.ssh/known_hosts 2>/dev/null || true
|
||
|
||
- name: '♾️ 执行∞操作'
|
||
env:
|
||
ACTION: ${{ github.event_name == 'push' && 'deploy-infinity' || github.event.inputs.action || 'monthly-evolution' }}
|
||
MESSAGE: ${{ github.event.inputs.message || '' }}
|
||
EMAIL: ${{ github.event.inputs.email || '' }}
|
||
QUOTA: ${{ github.event.inputs.quota_gb || '500' }}
|
||
ZY_SMTP_USER: ${{ secrets.ZY_SMTP_USER }}
|
||
ZY_SMTP_PASS: ${{ secrets.ZY_SMTP_PASS }}
|
||
run: |
|
||
SSH_CMD="ssh -i ~/.ssh/brain_key -o StrictHostKeyChecking=no ${{ secrets.ZY_BRAIN_USER }}@${{ secrets.ZY_BRAIN_HOST }}"
|
||
PROXY_DIR="/opt/zhuyuan-brain/proxy"
|
||
SCP_CMD="scp -i ~/.ssh/brain_key -o StrictHostKeyChecking=no"
|
||
REMOTE_HOST="${{ secrets.ZY_BRAIN_USER }}@${{ secrets.ZY_BRAIN_HOST }}"
|
||
|
||
# ── 同步邮件模块到服务器 ──
|
||
# 确保服务器上的email-hub.js和相关模块是最新版本
|
||
sync_email_files() {
|
||
echo "📦 同步邮件模块到服务器..."
|
||
$SSH_CMD "mkdir -p $PROXY_DIR/.deploy-tmp $PROXY_DIR/config"
|
||
$SCP_CMD \
|
||
server/proxy/service/email-hub.js \
|
||
server/proxy/service/bandwidth-pool-agent.js \
|
||
server/proxy/service/subscription-server-v3.js \
|
||
server/proxy/config/release-notes.json \
|
||
${REMOTE_HOST}:$PROXY_DIR/.deploy-tmp/
|
||
$SSH_CMD "
|
||
cp $PROXY_DIR/.deploy-tmp/email-hub.js $PROXY_DIR/service/
|
||
cp $PROXY_DIR/.deploy-tmp/bandwidth-pool-agent.js $PROXY_DIR/service/
|
||
cp $PROXY_DIR/.deploy-tmp/subscription-server-v3.js $PROXY_DIR/service/
|
||
cp $PROXY_DIR/.deploy-tmp/release-notes.json $PROXY_DIR/config/
|
||
rm -rf $PROXY_DIR/.deploy-tmp
|
||
"
|
||
echo "✅ 邮件模块已同步"
|
||
}
|
||
|
||
echo "════════════════════════════════════════"
|
||
echo "♾️ 光湖∞ · 自主进化 · action=$ACTION"
|
||
echo "════════════════════════════════════════"
|
||
|
||
case "$ACTION" in
|
||
deploy-infinity)
|
||
echo "部署∞版本..."
|
||
# 先同步最新代码到服务器
|
||
$SSH_CMD "mkdir -p $PROXY_DIR/.deploy-tmp"
|
||
|
||
scp -i ~/.ssh/brain_key -o StrictHostKeyChecking=no \
|
||
server/proxy/service/auto-evolution.js \
|
||
server/proxy/service/email-hub.js \
|
||
server/proxy/service/protocol-mirror.js \
|
||
server/proxy/service/bandwidth-pool-agent.js \
|
||
server/proxy/service/swarm-defense-agent.js \
|
||
server/proxy/service/user-guardian-agent.js \
|
||
server/proxy/service/subscription-server-v3.js \
|
||
server/proxy/config/release-notes.json \
|
||
server/proxy/ecosystem.brain-proxy-v3.config.js \
|
||
${{ secrets.ZY_BRAIN_USER }}@${{ secrets.ZY_BRAIN_HOST }}:$PROXY_DIR/.deploy-tmp/
|
||
|
||
$SSH_CMD "
|
||
cp $PROXY_DIR/.deploy-tmp/auto-evolution.js $PROXY_DIR/service/
|
||
cp $PROXY_DIR/.deploy-tmp/email-hub.js $PROXY_DIR/service/
|
||
cp $PROXY_DIR/.deploy-tmp/protocol-mirror.js $PROXY_DIR/service/
|
||
cp $PROXY_DIR/.deploy-tmp/bandwidth-pool-agent.js $PROXY_DIR/service/
|
||
cp $PROXY_DIR/.deploy-tmp/swarm-defense-agent.js $PROXY_DIR/service/
|
||
cp $PROXY_DIR/.deploy-tmp/user-guardian-agent.js $PROXY_DIR/service/
|
||
cp $PROXY_DIR/.deploy-tmp/subscription-server-v3.js $PROXY_DIR/service/
|
||
mkdir -p $PROXY_DIR/config
|
||
cp $PROXY_DIR/.deploy-tmp/release-notes.json $PROXY_DIR/config/
|
||
cp $PROXY_DIR/.deploy-tmp/ecosystem.brain-proxy-v3.config.js $PROXY_DIR/
|
||
rm -rf $PROXY_DIR/.deploy-tmp
|
||
mkdir -p $PROXY_DIR/data/evolution-reports
|
||
cd $PROXY_DIR && pm2 startOrRestart ecosystem.brain-proxy-v3.config.js --update-env && pm2 save
|
||
echo '✅ ∞版本已部署'
|
||
pm2 list
|
||
"
|
||
;;
|
||
|
||
monthly-evolution)
|
||
sync_email_files
|
||
echo "触发月度进化..."
|
||
$SSH_CMD "
|
||
cd $PROXY_DIR
|
||
export ZY_SMTP_USER='$ZY_SMTP_USER'
|
||
export ZY_SMTP_PASS='$ZY_SMTP_PASS'
|
||
node service/email-hub.js monthly-reset 2>&1 || echo '⚠️ 月度邮件发送遇到问题'
|
||
echo '✅ 月度进化已触发'
|
||
"
|
||
;;
|
||
|
||
status)
|
||
echo "查询∞版本状态..."
|
||
$SSH_CMD "
|
||
cd $PROXY_DIR
|
||
echo '── PM2进程 ──'
|
||
pm2 list 2>/dev/null || echo '⚠️ PM2不可用'
|
||
echo ''
|
||
echo '── 进化状态 ──'
|
||
cat data/auto-evolution-status.json 2>/dev/null || echo '(未初始化)'
|
||
echo ''
|
||
echo '── 镜像状态 ──'
|
||
cat data/protocol-mirror-status.json 2>/dev/null || echo '(未初始化)'
|
||
echo ''
|
||
echo '── 流量池 ──'
|
||
cat data/pool-quota-status.json 2>/dev/null || echo '(未初始化)'
|
||
"
|
||
;;
|
||
|
||
add-user)
|
||
if [ -z "$EMAIL" ]; then
|
||
echo "❌ 请提供目标邮箱 (email字段)"
|
||
exit 1
|
||
fi
|
||
if ! echo "$EMAIL" | grep -qE '^[^@]+@[^@]+\.[^@]+$'; then
|
||
echo "❌ 邮箱格式不正确: $EMAIL"
|
||
exit 1
|
||
fi
|
||
echo "➕ 新增用户: $EMAIL (配额: ${QUOTA}GB/月)"
|
||
$SSH_CMD "
|
||
cd $PROXY_DIR
|
||
node service/user-manager.js add '$EMAIL' '${QUOTA}'
|
||
"
|
||
echo ""
|
||
echo "════════════════════════════════════════"
|
||
echo "✅ 用户已添加"
|
||
echo "下一步: 运行 send-subscription-v3 发送V3订阅链接到 $EMAIL"
|
||
echo "════════════════════════════════════════"
|
||
;;
|
||
|
||
remove-user)
|
||
if [ -z "$EMAIL" ]; then
|
||
echo "❌ 请提供目标邮箱 (email字段)"
|
||
exit 1
|
||
fi
|
||
if ! echo "$EMAIL" | grep -qE '^[^@]+@[^@]+\.[^@]+$'; then
|
||
echo "❌ 邮箱格式不正确: $EMAIL"
|
||
exit 1
|
||
fi
|
||
echo "➖ 移除用户: $EMAIL"
|
||
$SSH_CMD "
|
||
cd $PROXY_DIR
|
||
node service/user-manager.js remove '$EMAIL'
|
||
"
|
||
;;
|
||
|
||
list-users)
|
||
echo "📋 用户列表:"
|
||
$SSH_CMD "
|
||
cd $PROXY_DIR
|
||
node service/user-manager.js list
|
||
"
|
||
;;
|
||
|
||
send-subscription-v3)
|
||
if [ -z "$EMAIL" ]; then
|
||
echo "❌ 请提供目标邮箱 (email字段)"
|
||
echo "💡 可先使用 list-users 或 list-user-emails 查看用户"
|
||
exit 1
|
||
fi
|
||
if ! echo "$EMAIL" | grep -qE '^[^@]+@[^@]+\.[^@]+$'; then
|
||
echo "❌ 邮箱格式不正确: $EMAIL"
|
||
exit 1
|
||
fi
|
||
sync_email_files
|
||
echo "发送V3订阅链接 (含系统介绍+带宽共享邀请) 给: $EMAIL ..."
|
||
$SSH_CMD "
|
||
cd $PROXY_DIR
|
||
export ZY_SMTP_USER='$ZY_SMTP_USER'
|
||
export ZY_SMTP_PASS='$ZY_SMTP_PASS'
|
||
node service/email-hub.js send-subscription-v3 '$EMAIL'
|
||
"
|
||
;;
|
||
|
||
send-monthly-reset)
|
||
sync_email_files
|
||
echo "发送月初重置邮件..."
|
||
$SSH_CMD "
|
||
cd $PROXY_DIR
|
||
export ZY_SMTP_USER='$ZY_SMTP_USER'
|
||
export ZY_SMTP_PASS='$ZY_SMTP_PASS'
|
||
node service/email-hub.js monthly-reset
|
||
"
|
||
;;
|
||
|
||
send-update-notify)
|
||
sync_email_files
|
||
echo "一键发送更新通知 (全部用户)..."
|
||
$SSH_CMD "
|
||
cd $PROXY_DIR
|
||
export ZY_SMTP_USER='$ZY_SMTP_USER'
|
||
export ZY_SMTP_PASS='$ZY_SMTP_PASS'
|
||
# 有MESSAGE时传入描述，否则省略让email-hub自动读取release-notes.json
|
||
node service/email-hub.js update-notify ${MESSAGE:+'$MESSAGE'}
|
||
"
|
||
;;
|
||
|
||
send-update-notify-single)
|
||
if [ -z "$EMAIL" ]; then
|
||
echo "❌ 请提供目标邮箱 (email字段)"
|
||
echo "💡 可先使用 list-user-emails 查看所有用户邮箱"
|
||
exit 1
|
||
fi
|
||
if ! echo "$EMAIL" | grep -qE '^[^@]+@[^@]+\.[^@]+$'; then
|
||
echo "❌ 邮箱格式不正确: $EMAIL"
|
||
exit 1
|
||
fi
|
||
sync_email_files
|
||
echo "单独发送更新通知给: $EMAIL ..."
|
||
$SSH_CMD "
|
||
cd $PROXY_DIR
|
||
export ZY_SMTP_USER='$ZY_SMTP_USER'
|
||
export ZY_SMTP_PASS='$ZY_SMTP_PASS'
|
||
# 有MESSAGE时传入描述，否则省略让email-hub自动读取release-notes.json
|
||
node service/email-hub.js update-notify-single '$EMAIL' ${MESSAGE:+'$MESSAGE'}
|
||
"
|
||
;;
|
||
|
||
send-traffic-warn)
|
||
sync_email_files
|
||
echo "发送流量预警..."
|
||
$SSH_CMD "
|
||
cd $PROXY_DIR
|
||
export ZY_SMTP_USER='$ZY_SMTP_USER'
|
||
export ZY_SMTP_PASS='$ZY_SMTP_PASS'
|
||
node service/email-hub.js traffic-warn '${MESSAGE:-70}'
|
||
"
|
||
;;
|
||
|
||
send-bandwidth-auth)
|
||
sync_email_files
|
||
echo "一键发送带宽验证码 (全部用户·自动提取邮箱·加密发送)..."
|
||
$SSH_CMD "
|
||
cd $PROXY_DIR
|
||
export ZY_SMTP_USER='$ZY_SMTP_USER'
|
||
export ZY_SMTP_PASS='$ZY_SMTP_PASS'
|
||
node service/email-hub.js bandwidth-auth-all
|
||
"
|
||
;;
|
||
|
||
send-bandwidth-auth-single)
|
||
if [ -z "$EMAIL" ]; then
|
||
echo "❌ 请提供目标邮箱 (email字段)"
|
||
echo "💡 可先使用 list-user-emails 查看所有用户邮箱"
|
||
exit 1
|
||
fi
|
||
if ! echo "$EMAIL" | grep -qE '^[^@]+@[^@]+\.[^@]+$'; then
|
||
echo "❌ 邮箱格式不正确: $EMAIL"
|
||
exit 1
|
||
fi
|
||
sync_email_files
|
||
echo "单独发送带宽验证码给: $EMAIL ..."
|
||
$SSH_CMD "
|
||
cd $PROXY_DIR
|
||
export ZY_SMTP_USER='$ZY_SMTP_USER'
|
||
export ZY_SMTP_PASS='$ZY_SMTP_PASS'
|
||
node service/email-hub.js bandwidth-auth '$EMAIL'
|
||
"
|
||
;;
|
||
|
||
list-user-emails)
|
||
sync_email_files
|
||
echo "查询所有用户邮箱..."
|
||
$SSH_CMD "
|
||
cd $PROXY_DIR
|
||
node service/email-hub.js list-emails
|
||
"
|
||
;;
|
||
|
||
send-threat-alert)
|
||
sync_email_files
|
||
echo "发送全体用户风险提示..."
|
||
if [ -z "$MESSAGE" ]; then
|
||
echo "❌ 请在message中输入风险描述"
|
||
exit 1
|
||
fi
|
||
$SSH_CMD "
|
||
cd $PROXY_DIR
|
||
export ZY_SMTP_USER='$ZY_SMTP_USER'
|
||
export ZY_SMTP_PASS='$ZY_SMTP_PASS'
|
||
node service/email-hub.js threat-alert '$MESSAGE'
|
||
"
|
||
;;
|
||
|
||
send-threat-cleared)
|
||
sync_email_files
|
||
echo "发送全体用户安全恢复通知..."
|
||
$SSH_CMD "
|
||
cd $PROXY_DIR
|
||
export ZY_SMTP_USER='$ZY_SMTP_USER'
|
||
export ZY_SMTP_PASS='$ZY_SMTP_PASS'
|
||
node service/email-hub.js threat-cleared
|
||
"
|
||
;;
|
||
|
||
*)
|
||
echo "❌ 未知操作: $ACTION"
|
||
exit 1
|
||
;;
|
||
esac
|