shiyuyun/wyndham-ARR
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: sync latest ARR implementation

Browse Source
This commit is contained in:
Wyndham ARR
2026-07-31 15:11:42 +08:00
parent d6f8a747fa
commit bf7939dd1a
185 changed files with 17527 additions and 2260 deletions
Download Patch File Download Diff File Expand all files Collapse all files

43
.env.example
View File

@@ -1,44 +1,25 @@
DEERFLOW_BASE_URL=https://superagent.nianxx.cn
DEERFLOW_OPEN_API_KEY=df_open_replace_me
DEERFLOW_AUTH_MODE=bearer
DEERFLOW_TIMEOUT_SECONDS=60
DEERFLOW_CONNECT_TIMEOUT_SECONDS=10
DEERFLOW_SESSION_DB=runtime/agent_sessions.sqlite3
# ARR 2.0 owns processing, validation and database ingestion. No Agent/MCP
# endpoint, prompt, API key, callback secret or public source URL is required.
# Independent bearer used only by the ARR MCP HTTP transport.
ARR_MCP_BEARER_TOKEN=replace_with_independent_random_token
# Application-owned Finance portal login. Inject real values through the
# runtime secret manager; use a long random password and never commit it.
ARR_WEB_USERNAME=arr-operator
ARR_WEB_PASSWORD=replace_with_a_long_random_secret
# Independent callback-verification secret shared only by the trusted Agent
# runtime adapter and ARR backend. Do not reuse DEERFLOW_OPEN_API_KEY.
ARR_AGENT_RESULT_HMAC_KEY_ID=arr-callback-key-1
ARR_AGENT_RESULT_HMAC_KEY_B64=base64_of_at_least_32_random_bytes
ARR_AGENT_RESULT_MAX_AGE_SECONDS=600
# Public HTTPS URL reached by the trusted Agent runtime adapter.
ARR_AGENT_CALLBACK_URL=https://arr.example.com/api/integrations/super-agent/results
# ARR backend only. SuperAgent/Agent must never receive this value.
# Use an ARR application role with least privilege before production rollout.
# Must target the isolated PostgreSQL database named booking_test.
ARR_DATABASE_URL=postgresql://arr_app:replace_me@127.0.0.1:5432/booking_test?sslmode=require
# Optional read/report role override; defaults to ARR_DATABASE_URL when omitted.
# Optional read/report role overrides; each defaults to ARR_DATABASE_URL.
MONTHLY_REPORT_DATABASE_URL=postgresql://arr_report:replace_me@127.0.0.1:5432/booking_test?sslmode=require
# Optional least-privilege read-only BI role; defaults to ARR_DATABASE_URL.
DASHBOARD_DATABASE_URL=postgresql://arr_dashboard:replace_me@127.0.0.1:5432/booking_test?sslmode=require
# Non-secret object-store routing only. Credentials belong in platform secret/instance-role configuration.
ARR_OBJECT_PROVIDER=oss
# ARR-managed objects are written with private object ACLs. The bucket itself
# may be private or public-read, but public-read-write and versioning are rejected.
ARR_OBJECT_PREFIX=arr
ARR_OBJECT_BUCKET_ALIAS=arr-private-processing
ARR_OBJECT_GRANT_TTL_SECONDS=300
# Alibaba Cloud OSS SDK V2 routing. Keep the bucket private and unversioned;
# the guarded object workflow rejects Enabled or Suspended versioning.
ARR_OSS_REGION=cn-hangzhou
ARR_OSS_ENDPOINT=https://oss-cn-hangzhou.aliyuncs.com
ARR_OSS_BUCKET=replace-with-private-bucket
ARR_AGENT_OUTPUT_PREFIX=arr-agent-outputs
ARR_OSS_BUCKET=replace-with-bucket
# OSS SDK credentials are injected by RAM role / STS / deployment Secret.
# They are shown only as variable names; never commit real values.
# Prefer RAM role / STS injection. Never commit real credentials.
OSS_ACCESS_KEY_ID=replace_me
OSS_ACCESS_KEY_SECRET=replace_me
# OSS_SESSION_TOKEN=replace_me