shiyuyun/wyndham-ARR
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: prepare ARR for controlled public deployment

Browse Source
This commit is contained in:
Wyndham ARR
2026-07-29 16:38:05 +08:00
commit a701de9f0e
271 changed files with 48472 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

44
.env.example Normal file
View File

@@ -0,0 +1,44 @@
DEERFLOW_BASE_URL=https://superagent.nianxx.cn
DEERFLOW_OPEN_API_KEY=df_open_replace_me
DEERFLOW_AUTH_MODE=bearer
DEERFLOW_TIMEOUT_SECONDS=60
DEERFLOW_CONNECT_TIMEOUT_SECONDS=10
DEERFLOW_SESSION_DB=runtime/agent_sessions.sqlite3
# Independent bearer used only by the ARR MCP HTTP transport.
ARR_MCP_BEARER_TOKEN=replace_with_independent_random_token
# Independent callback-verification secret shared only by the trusted Agent
# runtime adapter and ARR backend. Do not reuse DEERFLOW_OPEN_API_KEY.
ARR_AGENT_RESULT_HMAC_KEY_ID=arr-callback-key-1
ARR_AGENT_RESULT_HMAC_KEY_B64=base64_of_at_least_32_random_bytes
ARR_AGENT_RESULT_MAX_AGE_SECONDS=600
# Public HTTPS URL reached by the trusted Agent runtime adapter.
ARR_AGENT_CALLBACK_URL=https://arr.example.com/api/integrations/super-agent/results
# ARR backend only. SuperAgent/Agent must never receive this value.
# Use an ARR application role with least privilege before production rollout.
ARR_DATABASE_URL=postgresql://arr_app:replace_me@127.0.0.1:5432/booking_test?sslmode=require
# Optional read/report role override; defaults to ARR_DATABASE_URL when omitted.
MONTHLY_REPORT_DATABASE_URL=postgresql://arr_report:replace_me@127.0.0.1:5432/booking_test?sslmode=require
# Optional least-privilege read-only BI role; defaults to ARR_DATABASE_URL.
DASHBOARD_DATABASE_URL=postgresql://arr_dashboard:replace_me@127.0.0.1:5432/booking_test?sslmode=require
# Non-secret object-store routing only. Credentials belong in platform secret/instance-role configuration.
ARR_OBJECT_PROVIDER=oss
ARR_OBJECT_PREFIX=arr
ARR_OBJECT_BUCKET_ALIAS=arr-private-processing
ARR_OBJECT_GRANT_TTL_SECONDS=300
# Alibaba Cloud OSS SDK V2 routing. Keep the bucket private and unversioned;
# the guarded object workflow rejects Enabled or Suspended versioning.
ARR_OSS_REGION=cn-hangzhou
ARR_OSS_ENDPOINT=https://oss-cn-hangzhou.aliyuncs.com
ARR_OSS_BUCKET=replace-with-private-bucket
ARR_AGENT_OUTPUT_PREFIX=arr-agent-outputs
# OSS SDK credentials are injected by RAM role / STS / deployment Secret.
# They are shown only as variable names; never commit real values.
OSS_ACCESS_KEY_ID=replace_me
OSS_ACCESS_KEY_SECRET=replace_me
# OSS_SESSION_TOKEN=replace_me