Google Tools — Sunrise Recruit Reference

工具总数Total Tools

当前在用Currently Active

近期 (Phase 2–3)Near-term (Phase 2–3)

未来规划Future / Scale

✦ 当前在用Currently Active

已集成 · 正在运行Integrated · Running Now

12 tools

工具Tool	类别Category	功能说明What It Does	在 Sunrise Recruit 的运用场景How You Use It	上手 TipsGetting Started Tips
🔐 Firebase Auth firebase.google.com/docs/auth	Firebase	身份验证服务，支持 Google OAuth、邮箱/密码、手机号等多种登录方式。管理用户会话和 JWT token。Authentication service supporting Google OAuth, email/password, phone, and more. Manages user sessions and JWT tokens.	SR-Web-AS 全部 5 个角色（Admin/Manager/Recruiter/Freelance/Client）通过 Google OAuth 登录。登录后 Firebase 颁发 JWT，Express.js 后端验证 token 并从 Firestore 解析用户角色。All 5 roles (Admin/Manager/Recruiter/Freelance/Client) log in via Google OAuth. Firebase issues a JWT; Express.js backend verifies the token and resolves role from Firestore.	TIP 1 在 Firebase Console → Authentication → Sign-in method 中只开启 Google Provider，关闭其余所有方式，减少攻击面。 In Firebase Console → Authentication → Sign-in method, enable only Google Provider and disable all others to reduce attack surface. TIP 2 用 `onAuthStateChanged` 监听器管理前端会话状态，避免每次刷新都重新登录。 Use `onAuthStateChanged` listener to manage frontend session state and avoid re-login on refresh.
🗄️ Firestore firebase.google.com/docs/firestore	Firebase	NoSQL 实时文档数据库。支持实时监听、离线缓存、强大的复合查询，以及基于角色的安全规则。NoSQL real-time document database. Supports real-time listeners, offline caching, compound queries, and role-based security rules.	存储所有核心数据：职位单、候选人档案、客户信息、招聘专员笔记、权限映射。安全规则控制各角色的读写边界（Admin 全访问，Freelance 只读分配客户等）。Stores all core data: job orders, candidate profiles, client records, recruiter notes, permission mappings. Security rules enforce role-based read/write boundaries.	TIP 1 用集合路径设计隔离数据：`clients/{clientId}/jobs/{jobId}`，安全规则写起来更简洁。 Design collection paths to isolate data: `clients/{clientId}/jobs/{jobId}` makes security rules cleaner to write. TIP 2 Security Rules 尚未完成（Checklist 待完成项）——优先用 Firebase Rules Playground 测试每个角色的读写场景，上线前必须完成。 Security Rules are still pending (Checklist item). Use Firebase Rules Playground to test each role's read/write scenarios — must complete before going public.
📦 Firebase Storage firebase.google.com/docs/storage	Firebase	对象存储服务，用于上传和提供文件（PDF、图片、文档）。与 Firebase Auth 集成，支持基于 UID 的文件权限控制。Object storage for uploading and serving files (PDFs, images, documents). Integrates with Firebase Auth for UID-based file access control.	候选人简历上传（PDF/DOCX），头像图片，JD 文件存档。路径设计为 `resumes/{uid}/{filename}`，规则确保只有本人和 Admin 可以读取。Candidate CV uploads (PDF/DOCX), avatar images, JD file archives. Path: `resumes/{uid}/{filename}`. Rules ensure only the owner and Admin can read.	TIP 1 设置文件大小限制（建议简历 ≤ 5MB），在 Storage Rules 中加入 `request.resource.size < 5 * 1024 * 1024`。 Set file size limits (5MB max for CVs) in Storage Rules using `request.resource.size < 5 * 1024 * 1024`. TIP 2 用 `getDownloadURL()` 生成带时效的下载链接，而非暴露直接存储路径。 Use `getDownloadURL()` to generate time-limited download links rather than exposing raw storage paths.
⚡ Firebase Functions firebase.google.com/docs/functions	Firebase	无服务器后端函数，由 Firestore 写入、Auth 事件、HTTP 请求等触发。无需管理服务器，按调用次数计费。Serverless backend functions triggered by Firestore writes, Auth events, HTTP requests, and more. No server management, pay-per-invocation.	触发器场景：新用户注册后自动分配默认角色；职位状态变更时发送通知；简历上传后触发 AI 解析管道（n8n Sunrise CV Pipeline 的入口点）。Trigger scenarios: auto-assign default role on new user signup; send notifications on job status change; trigger AI parse pipeline on CV upload (entry point for n8n Sunrise CV Pipeline).	TIP 1 用 `onDocumentWritten`（v2 SDK）替代旧版 `onChange`，性能更好且支持 TypeScript。 Use `onDocumentWritten` (v2 SDK) instead of legacy `onChange` for better performance and TypeScript support. TIP 2 把敏感操作（如角色升级、发票生成）放在 Functions 而非前端代码，防止客户端篡改。 Put sensitive operations (role elevation, invoice generation) in Functions rather than frontend code to prevent client-side tampering.
🔑 Google OAuth 2.0 developers.google.com/identity	Developer	行业标准授权协议，允许用户用 Google 账号安全登录第三方应用，无需新建密码。Firebase Auth 底层就是调用 Google OAuth。Industry-standard auth protocol allowing users to sign in to third-party apps with their Google account. Firebase Auth uses Google OAuth under the hood.	SR-Web-AS 登录入口。登录后 Express.js 用 Firebase Admin SDK 验证 ID Token，解析出用户 uid 和 email，再从 Firestore 查角色，生成 SSO Token 跳转 sunrise-tools。SR-Web-AS login entry point. After login, Express.js verifies the ID Token via Firebase Admin SDK, resolves uid/email, queries Firestore for role, generates SSO Token for sunrise-tools redirect.	TIP 1 在 Google Cloud Console → OAuth consent screen 中填写完整的应用信息（logo、隐私政策链接），避免用户看到"未验证应用"警告，影响客户信任感。 Fill out the OAuth consent screen fully in Google Cloud Console (logo, privacy policy link) to avoid showing users an "unverified app" warning that undermines client trust. TIP 2 将 Authorized redirect URIs 限定为你的 Zeabur 域名，禁止 localhost 出现在生产环境配置中。 Restrict Authorized redirect URIs to your Zeabur domain only. Never leave localhost in production OAuth config.
🤖 Gemini API ai.google.dev	AI	Google 最新多模态大语言模型 API。支持文本生成、结构化输出、长上下文（最高 1M token）、图像理解等能力。Google's latest multimodal LLM API. Supports text generation, structured output, long context (up to 1M tokens), and image understanding.	SR-Web-AS AI 广告生成器的可切换引擎之一（Claude ↔ Gemini）。sr-proxy 的 /proxy/gemini 路由将请求转发至 Gemini API，密钥存于 Zeabur 环境变量。One of the two switchable AI engines in the ad generator (Claude ↔ Gemini). sr-proxy's /proxy/gemini route forwards requests to Gemini API with key stored in Zeabur env vars.	TIP 1 用 `gemini-2.0-flash` 处理广告生成（速度快、成本低），用 `gemini-1.5-pro` 处理 CV 解析（需要长上下文）。 Use `gemini-2.0-flash` for ad generation (fast, low cost) and `gemini-1.5-pro` for CV parsing (needs long context). TIP 2 在 Google AI Studio 里先用可视化界面调好 prompt，再复制到代码里。节省大量调试时间。 Use Google AI Studio's visual interface to tune prompts first, then copy to code. Saves significant debugging time.
📊 Google Sheets sheets.google.com	Workspace	云端电子表格，支持实时协作、公式计算、脚本自动化（Apps Script）、与 n8n 双向集成。Cloud spreadsheet with real-time collaboration, formula calculations, script automation (Apps Script), and two-way n8n integration.	运营合作伙伴的核心工具：客户主列表、候选人池、应收账款追踪、合作伙伴潜在客户列表。n8n 的 SR Job Order Auto Entry 工作流直接写入 Sheets。Phase 3 计划迁移至 Firestore。Ops partner's core tooling: client master list, candidate pool, receivables tracker, partner prospect list. n8n's SR Job Order Auto Entry workflow writes directly to Sheets. Phase 3 plans migration to Firestore.	TIP 1 用命名范围（Named Ranges）而非 A1:Z100 这类硬编码范围，n8n 引用时更稳定，表格结构改动不会破坏自动化。Use Named Ranges instead of hardcoded A1:Z100 references. n8n integrations stay stable even when the sheet structure changes. TIP 2 给每个表格的第一行加上数据验证（Dropdown），防止运营合作伙伴输入不规范的状态值，保证 n8n 能正确过滤。 Add data validation dropdowns to header rows to prevent ops partner from entering non-standard status values that would break n8n filters.
📁 Google Drive drive.google.com	Workspace	云端文件存储和共享平台，支持文件夹权限管理、共享链接、版本历史、API 集成。Cloud file storage and sharing platform with folder permissions, shared links, version history, and API integration.	SOP 文档库、合同模板、报价单存档、运营合作伙伴共享文件夹。sunrise-tools 的 Document Scanner 扫描件存入 Drive。未来可通过 Drive API 让 n8n 自动归档合同。SOP document library, contract templates, quotation archives, ops partner shared folders. sunrise-tools Document Scanner saves scanned files to Drive. Future: Drive API for n8n to auto-archive contracts.	TIP 1 建立清晰的文件夹层级：`SR Internal / Clients / {ClientName} / Contracts`，共享时只授权到具体子文件夹，而不是整个 Drive。Build a clear folder hierarchy: `SR Internal / Clients / {ClientName} / Contracts`. Share only the specific subfolder, never the entire Drive. TIP 2 在 Drive API 集成时，用服务账号（Service Account）而非个人账号，避免因员工离职导致 API 失效。 Use a Service Account (not personal account) for Drive API integrations to avoid API failures when staff leave.
🛡️ Cloud IAM cloud.google.com/iam	GCP	Google Cloud 统一身份与访问管理。控制哪些用户/服务账号可以访问哪些 GCP 资源，以及拥有什么权限。Google Cloud's unified identity and access management. Controls which users/service accounts can access which GCP resources and with what permissions.	管理 Firebase Admin SDK 服务账号密钥（你之前遇到的 Org Policy 阻止创建密钥问题就在这里）。未来 n8n、Vertex AI、BigQuery 等服务都需要通过 IAM 授权。Manages Firebase Admin SDK service account keys (the Org Policy blocker you hit was here). Future services like n8n, Vertex AI, BigQuery all need IAM authorization.	⚠ 待跟进你之前在 Cloud Shell 中启用 `orgpolicy.googleapis.com` 的操作需要确认是否已生效。在 Cloud Shell 执行：`gcloud org-policies list --project=u-executive-dashboard` Follow up on enabling `orgpolicy.googleapis.com` in Cloud Shell. Verify in Cloud Shell: `gcloud org-policies list --project=u-executive-dashboard` TIP 遵循最小权限原则：服务账号只给它实际需要的角色（如 `roles/datastore.user`），不要用 Owner 角色。 Follow least-privilege: give service accounts only the roles they actually need (e.g. `roles/datastore.user`), never Owner.
💻 Cloud Shell cloud.google.com/shell	GCP	浏览器内的命令行环境，预装 gcloud、kubectl、git 等工具，免安装直接操作 GCP 资源。Browser-based command-line environment with gcloud, kubectl, git pre-installed. Operate GCP resources without any local setup.	排查 Org Policy 问题、创建服务账号密钥、运行 gcloud 命令管理 Zeabur 连接的 Firebase 项目。是你临时修复 GCP 配置问题的主要工具。Troubleshoot Org Policy issues, create service account keys, run gcloud commands to manage the Firebase project connected to Zeabur. Your primary tool for ad-hoc GCP config fixes.	TIP 1 Cloud Shell 有 5GB 持久化存储（`$HOME` 目录），把常用脚本保存在那里，不怕会话中断丢失。Cloud Shell has 5GB persistent storage in `$HOME`. Save frequently used scripts there — they survive session restarts. TIP 2 用 `gcloud config set project u-executive-dashboard` 先设定项目，避免每条命令都加 `--project` 参数。 Run `gcloud config set project u-executive-dashboard` first to avoid adding `--project` to every command.
🤖 reCAPTCHA google.com/recaptcha	Security	机器人防护服务。v3 版本无感知（无需用户点击），通过行为分析给每次请求打分（0.0–1.0），低分请求可触发二次验证或拦截。Bot protection service. v3 is invisible (no user click required) — scores each request 0.0–1.0 based on behavior analysis. Low scores trigger additional verification or blocking.	保护 SR-Web-AS 登录、候选人注册、JD 解析等公开入口，防止爬虫批量注册或暴力破解。Firebase App Check 可与 reCAPTCHA 配合使用。Protect SR-Web-AS login, candidate registration, and JD parsing endpoints from bots, mass registration, and brute force attacks. Works with Firebase App Check.	TIP 1 使用 reCAPTCHA v3（隐形），分数 < 0.5 时触发额外验证，对用户体验影响最小。Use reCAPTCHA v3 (invisible). Trigger additional verification when score < 0.5 — minimal impact on user experience. TIP 2 服务端验证 token（`POST https://www.google.com/recaptcha/api/siteverify`），不能只做前端验证。 Always verify the token server-side via `POST https://www.google.com/recaptcha/api/siteverify`. Never rely on frontend-only verification.
🔥 Firebase Hosting firebase.google.com/docs/hosting	Firebase	静态网站和动态内容托管，全球 CDN 分发，自动 SSL，支持自定义域名。与 Firebase Functions 结合可托管动态 Express 应用。Static and dynamic hosting with global CDN, automatic SSL, and custom domains. Combined with Firebase Functions can host dynamic Express apps.	作为 Zeabur 的备用部署选项，或用于托管独立的静态工具页面（如 4U Platform 的 feature.html）。sunrise-static 目前用 Zeabur，未来可迁移至 Firebase Hosting 统一管理。Alternative deployment option to Zeabur, or for hosting standalone static tool pages (e.g. 4U Platform's feature.html). sunrise-static is on Zeabur now; consider consolidating to Firebase Hosting later.	TIP 1 用 `firebase.json` 中的 `rewrites` 配置将所有路由指向 Express Functions，实现单一部署同时托管 API 和前端。Use `rewrites` in `firebase.json` to route all requests to Express Functions — one deployment for both API and frontend.

◈ 近期规划Near-term

Phase 2–3 · 4–12 周内上线Phase 2–3 · Deploy within 4–12 weeks

10 tools

工具Tool	类别Category	功能说明What It Does	在 Sunrise Recruit 的运用场景How You'll Use It	上手 TipsGetting Started Tips
📅 Google Calendar API developers.google.com/calendar	Workspace	以编程方式创建、读取、更新日历事件，管理可用时间段，发送邀请和提醒。Programmatically create, read, update calendar events, manage availability slots, and send invitations and reminders.	Phase 2 面试日程安排功能的核心：招聘专员在平台内选择时间段 → 自动在双方 Google Calendar 创建事件 → 发送候选人和面试官邀请链接 → 24小时前自动提醒，消除人工来回沟通。Core of Phase 2 interview scheduling: recruiter selects time slots in-platform → auto-creates events on both parties' Google Calendar → sends invite links → auto-reminder 24hrs before. Eliminates manual back-and-forth.	TIP 1 用 `freebusy` 查询接口先检查面试官的可用时间，再展示给招聘专员选择，避免冲突。Use the `freebusy` query endpoint to check interviewer availability before showing options to recruiters. TIP 2 让 n8n 的 Interview Coordination 工作流（P1 计划中）直接调用 Calendar API，而不是在 SR-Web-AS 里实现，减少主代码库复杂度。 Have n8n's Interview Coordination workflow (P1 planned) call Calendar API directly rather than implementing in SR-Web-AS — keeps the main codebase simpler.
📹 Google Meet API developers.google.com/meet	Workspace	以编程方式创建 Google Meet 会议链接，管理参与者，获取会议记录（录像/转录）。无需构建视频基础设施。Programmatically create Google Meet links, manage participants, retrieve meeting artifacts (recordings/transcripts). No need to build video infrastructure.	在线招聘会（Career Fair）的视频基础设施：平台创建 Meet 链接 → 分发给候选人和招聘专员 → 会后自动获取录像链接存入 Firestore 候选人档案。比自建视频系统节省数月开发时间。Video infrastructure for online career fairs: platform creates Meet link → distributes to candidates and recruiters → post-meeting, auto-retrieves recording link stored in candidate Firestore profile. Saves months vs building own video.	TIP 1 创建会议时设置 `accessType: TRUSTED`，让候选人无需等候室批准直接进入，减少面试摩擦。Set `accessType: TRUSTED` when creating meetings so candidates enter without waiting room approval — reduces interview friction. TIP 2 Meet API 与 Calendar API 深度集成——创建 Calendar 事件时附加 `conferenceData`，系统自动生成 Meet 链接，无需单独调用 Meet API。 Meet API integrates deeply with Calendar API — attach `conferenceData` when creating a Calendar event and the system auto-generates the Meet link — no separate Meet API call needed.
📧 Gmail API / SMTP developers.google.com/gmail	Workspace	以编程方式发送、读取、管理 Gmail 邮件。支持 HTML 邮件模板、附件、线程管理。SMTP 方式更简单，API 方式更强大（可读取回复）。Programmatically send, read, and manage Gmail messages. Supports HTML templates, attachments, and thread management. SMTP is simpler; API is more powerful (can read replies).	Phase 2 邮件通知系统：候选人注册欢迎邮件、职位状态变更通知、面试提醒、Offer 函发送。n8n 的 Client Status Updates 工作流也通过 Gmail 发送更新邮件给客户。Phase 2 email notification system: candidate welcome emails, job status change notifications, interview reminders, offer letters. n8n's Client Status Updates workflow also sends update emails to clients via Gmail.	TIP 1 用 SendGrid 或 Resend（路线图已有）作为主要发件服务，Gmail API 作为备用。SendGrid 有更好的送达率追踪和退订管理。Use SendGrid or Resend (already in roadmap) as the primary sending service, Gmail API as fallback. SendGrid has better deliverability tracking and unsubscribe management. TIP 2 在 n8n 中建立邮件模板库（HTML 模板存在 Firestore），n8n 从 Firestore 拉取模板 + 填充变量 + Gmail 发送，保持模板统一管理。 Build an email template library in Firestore (HTML templates). n8n pulls template + fills variables + sends via Gmail — centralises template management.
🗺️ Google Maps API developers.google.com/maps	Maps	地图展示、地址自动补全（Places API）、地理编码（地址转坐标）、距离计算。支持嵌入式地图和 JavaScript SDK。Map display, address autocomplete (Places API), geocoding (address to coordinates), distance calculation. Supports embedded maps and JavaScript SDK.	职位卡片中的精准地址展示：客户填写地址时用 Places Autocomplete 确保格式规范（Street / Area / City / Postcode / State），并在职位详情页嵌入小地图，让候选人直观判断通勤可行性。Precise address display on job cards: use Places Autocomplete when client enters address (Street/Area/City/Postcode/State) to ensure standardised format. Embed a mini-map on job detail page so candidates can quickly assess commute viability.	TIP 1 启用 Places API 的地址自动补全时，将 `componentRestrictions` 设为 `country: ['my', 'sg']`，只返回马来西亚和新加坡地址。When enabling Places API autocomplete, set `componentRestrictions: {country: ['my', 'sg']}` to return only Malaysia and Singapore addresses. TIP 2 在 Google Cloud Console 对 Maps API Key 设置 HTTP referrer 限制（只允许你的域名），防止密钥被盗用导致账单暴增。 Set HTTP referrer restrictions on your Maps API Key in Google Cloud Console (your domains only) to prevent key theft and unexpected billing spikes.
🌐 Google Translate API cloud.google.com/translate	AI	神经机器翻译 API，支持 100+ 语言互译，可自动检测语言，支持批量文本翻译和 HTML 内容翻译（保留标签结构）。Neural machine translation API supporting 100+ languages, auto language detection, batch text translation, and HTML content translation (preserving tag structure).	职位描述双语化：客户用英文或中文填写 JD → 系统自动翻译另一种语言 → 双语展示给候选人。招聘广告的双语输出也可作为 Claude/Gemini 生成后的翻译润色工具。Bilingual JD support: client writes JD in English or Chinese → system auto-translates → both displayed to candidates. Also useful for polishing Claude/Gemini-generated bilingual ad output.	TIP 1 先用 Claude 或 Gemini 生成广告文案（质量更高），再用 Translate API 做机器翻译兜底，而非把翻译完全交给 Translate API。Use Claude or Gemini to generate ad copy first (higher quality), use Translate API as a fallback for machine translation rather than as the primary bilingual tool. TIP 2 Translate API v3 支持自定义术语表（Glossary），可以把你行业特定词汇（如"EP申请"、"固定薪资+佣金"）的翻译标准化，确保一致性。 Translate API v3 supports custom Glossaries. Add industry-specific terms (e.g. "EP application", "fixed salary + commission") to standardise translations across all content.
📈 Google Analytics (GA4) analytics.google.com	Analytics	事件驱动的网站/应用分析平台。追踪用户行为、页面浏览、转化路径、留存率，支持自定义事件和受众分群。Event-driven web/app analytics. Tracks user behaviour, page views, conversion funnels, retention, with custom events and audience segmentation.	追踪平台关键指标：招聘专员每日活跃度、职位浏览次数、JD 解析成功率、AI 广告生成次数。帮助你判断哪些功能真正被使用，为 Phase 4 分析仪表板提供数据基础。Track key platform metrics: recruiter daily active usage, job view counts, JD parse success rate, AI ad generation count. Helps you see which features are actually used — data foundation for Phase 4 analytics dashboard.	TIP 1 用 `gtag('event', 'generate_ad', {platform: 'LinkedIn', engine: 'claude'})` 这类自定义事件，而非只追踪页面浏览，才能得到有意义的招聘运营数据。Use custom events like `gtag('event', 'generate_ad', {platform: 'LinkedIn', engine: 'claude'})` rather than just page views to get meaningful recruitment ops data. TIP 2 在 GA4 中为每个角色（Admin/Recruiter/Freelance/Client）创建独立的受众分群，分别追踪各角色的使用行为差异。 Create separate audience segments in GA4 for each role (Admin/Recruiter/Freelance/Client) to track behavioural differences between user types.
🏷️ Google Tag Manager tagmanager.google.com	Analytics	标签管理平台，让非开发人员无需改代码就能添加/修改追踪脚本（GA4、Facebook Pixel、自定义事件等）。Tag management platform allowing non-developers to add/modify tracking scripts (GA4, Facebook Pixel, custom events) without code changes.	将 GA4、未来可能的 Facebook Pixel（招聘广告投放）、以及各种自定义事件追踪统一通过 GTM 管理，SR-Web-AS 代码里只需嵌入一个 GTM 容器代码，所有追踪逻辑在 GTM 界面配置。Manage GA4, future Facebook Pixel (job ad campaigns), and custom event tracking all through GTM. SR-Web-AS only needs one GTM container snippet — all tracking logic configured in the GTM interface.	TIP 1 在 SR-Web-AS 的 `index.html` 的 `<head>` 和 `<body>` 中各放一段 GTM 代码片段，这样就能管理所有后续的追踪需求，不用再改代码。Add GTM snippet to both `<head>` and `<body>` in SR-Web-AS index.html once — then all future tracking needs can be managed without touching code.
🔍 Google Search Console search.google.com/search-console	Analytics	监控网站在 Google 搜索中的表现：关键词排名、点击率、索引状态、技术 SEO 问题诊断。Monitor your site's performance in Google Search: keyword rankings, click-through rates, index status, and technical SEO issue diagnostics.	当 SR-Web-AS 开放公开的职位列表页面（Phase 2+），用 Search Console 监控招聘相关关键词（如"Malaysia IT jobs"、"Singapore recruiter"）的搜索排名，驱动自然流量。Once SR-Web-AS opens public job listing pages (Phase 2+), use Search Console to monitor recruitment-related keyword rankings (e.g. "Malaysia IT jobs", "Singapore recruiter") to drive organic traffic.	TIP 1 提交 sitemap.xml 让 Google 尽快索引新职位页面。用 Firestore 触发器在新职位发布时自动更新 sitemap。Submit a sitemap.xml so Google indexes new job pages quickly. Use a Firestore trigger to auto-update the sitemap when new jobs are published.
📋 Google Forms forms.google.com	Workspace	无代码表单构建工具，支持各类题型（单选、多选、量表、文件上传），回复自动写入 Google Sheets，可通过 n8n 触发后续流程。No-code form builder supporting multiple question types, with responses auto-written to Google Sheets and triggerable via n8n for downstream workflows.	平台正式上线前的轻量替代方案：合作伙伴入职申请表、KYC 信息收集表、客户需求初始摸底表。n8n 监听 Sheets 回复自动触发后续处理（对应 KYC/Employer Verification 工作流）。Lightweight alternative before full platform features: partner onboarding applications, KYC information collection, initial client needs assessment. n8n monitors Sheets responses to auto-trigger downstream processing (KYC/Employer Verification workflow).	TIP 1 用 Google Forms 快速搭建 Grab 式强制入职测验（合作伙伴/自由招聘员上岗前的 100% 正确率测验），无需开发，可立刻上线。Use Google Forms to quickly build the Grab-style mandatory onboarding quiz (100% correct score required for partners/freelancers) — no development needed, deploy immediately.
🤖 Google AI Studio aistudio.google.com	AI	Google 官方的 AI 开发和 prompt 调试平台。可视化测试 Gemini 模型，调整参数，生成 API 代码，支持多模态输入（文本/图像/视频/音频）。Google's official AI development and prompt debugging platform. Visually test Gemini models, adjust parameters, generate API code, with multimodal input support (text/image/video/audio).	在将 Gemini 集成进 sr-proxy 之前，先在 AI Studio 里调好所有 prompt（CV 解析、JD 生成、候选人匹配评分等），确认效果后再复制到代码。大幅减少线上调试成本。Before integrating Gemini into sr-proxy, tune all prompts in AI Studio first (CV parsing, JD generation, candidate match scoring). Confirm quality before copying to code. Dramatically reduces live debugging cost.	TIP 1 AI Studio 右上角的"Get code"按钮直接生成对应语言（JS/Python/curl）的 API 调用代码，复制到 sr-proxy 即可使用。The "Get code" button in AI Studio generates ready-to-use API call code (JS/Python/curl) — copy directly into sr-proxy. TIP 2 用 AI Studio 的"System Instructions"字段测试不同的系统提示，找到最稳定的输出格式后，把最终版本作为 sr-proxy 的 Gemini 路由默认系统提示。 Use AI Studio's "System Instructions" field to test different system prompts and find the most consistent output format. Use the final version as the default system prompt in sr-proxy's Gemini route.

○ 未来规划Future / Scale

Phase 4 · 规模扩张阶段Phase 4 · Scale Stage

15 tools

工具Tool	类别Category	功能说明What It Does	未来运用场景Future Use Case	上手 TipsGetting Started Tips
🧠 Vertex AI cloud.google.com/vertex-ai	AI	企业级 AI/ML 平台，支持模型训练、微调、部署、向量搜索（Matching Engine）、RAG 管道构建，以及 Gemini 企业版 API。Enterprise AI/ML platform for model training, fine-tuning, deployment, vector search (Matching Engine), RAG pipeline building, and Gemini enterprise API access.	Phase 3 AI 候选人匹配功能的升级版：将候选人档案向量化存入 Vertex AI Matching Engine，实现语义级别的候选人-职位匹配（超越关键词搜索）。未来为政府和机构合作伙伴提供企业级 AI 能力。Upgraded Phase 3 AI candidate matching: vectorise candidate profiles in Vertex AI Matching Engine for semantic candidate-job matching (beyond keyword search). Future enterprise AI capability for government and institutional partners.	TIP 1 先用 Gemini API 做 Phase 3 的候选人匹配（成本低、上手快），Vertex AI 留到你有足够的候选人数据量（建议 1000+ 档案）后再迁移，效果才能体现。Use Gemini API for Phase 3 candidate matching first (lower cost, faster to implement). Migrate to Vertex AI only when you have sufficient data volume (1000+ profiles) for the benefits to show.
📊 BigQuery cloud.google.com/bigquery	GCP	全托管无服务器数据仓库，支持 PB 级数据的 SQL 查询，毫秒级响应，与 Looker Studio、GA4 深度集成，支持 ML 建模。Fully managed serverless data warehouse for SQL queries on petabyte-scale data, millisecond response, deep integration with Looker Studio and GA4, with ML modeling support.	Phase 4 分析仪表板的数据基础：Firestore 数据通过 Firebase → BigQuery 导出管道实时同步，用 SQL 计算招聘时效、专员 KPI、客户留存率、收入趋势等指标，供 Looker Studio 可视化。Data foundation for Phase 4 analytics dashboard: Firestore data syncs to BigQuery via Firebase → BigQuery export pipeline. Use SQL to compute time-to-hire, recruiter KPIs, client retention, revenue trends — visualised in Looker Studio.	TIP 1 Firebase 内置 BigQuery 导出功能（Firebase Console → Integrations → BigQuery），一键开启，所有 Firestore 数据实时同步到 BigQuery，无需写导出代码。Firebase has built-in BigQuery export (Firebase Console → Integrations → BigQuery). Enable with one click — all Firestore data syncs to BigQuery in real-time without writing any export code.
📉 Looker Studio lookerstudio.google.com	Analytics	免费的数据可视化和报告工具（原 Google Data Studio）。可连接 BigQuery、Sheets、GA4 等 20+ 数据源，构建交互式仪表板，支持共享和定时报告。Free data visualisation and reporting tool (formerly Google Data Studio). Connects to BigQuery, Sheets, GA4, and 20+ data sources to build interactive dashboards with sharing and scheduled reporting.	替代当前 4U Platform 的手动更新仪表板，实现自动化数据看板：招聘进度实时追踪、各专员业绩对比、客户活跃度、n8n 工作流执行情况。直接连接 BigQuery，数据自动刷新。Replace the current manually-updated 4U Platform dashboard with automated data views: real-time recruitment progress, recruiter performance comparison, client activity, n8n workflow execution status. Direct BigQuery connection for auto-refresh.	TIP 1 Looker Studio 完全免费，先用它替代 4U Platform 的分析层，等真正需要企业级功能（行级权限、嵌入式分析）时再考虑付费版 Looker。Looker Studio is completely free. Use it to replace 4U Platform's analytics layer first. Only consider paid Looker when you genuinely need enterprise features (row-level security, embedded analytics).
🔒 Secret Manager cloud.google.com/secret-manager	Security	集中式密钥管理服务，存储 API 密钥、数据库密码、证书等敏感配置。支持密钥版本管理、自动轮换、访问审计日志、IAM 精细权限控制。Centralised secret management for API keys, database passwords, certificates. Supports version management, automatic rotation, access audit logs, and fine-grained IAM permissions.	替代目前手动管理的 Zeabur 环境变量：将 ANTHROPIC_API_KEY、GEMINI_API_KEY、PROXY_SECRET、SR_SSO_SECRET 等全部迁移到 Secret Manager，在 Cloud Functions 和服务器代码中通过 API 动态读取，支持密钥轮换而无需重新部署。Replace current manual Zeabur env vars: migrate ANTHROPIC_API_KEY, GEMINI_API_KEY, PROXY_SECRET, SR_SSO_SECRET to Secret Manager. Dynamically read in Cloud Functions and server code via API. Supports key rotation without redeployment.	TIP 1 机构合作伙伴（政府/教育机构）合作前，Secret Manager 是必须项——它提供合规所需的密钥访问审计日志，证明你的系统符合数据安全要求。Secret Manager is a must-have before institutional partner (government/education) onboarding — it provides the key access audit logs needed to prove your system meets data security compliance requirements.
🛡️ Firebase App Check firebase.google.com/docs/app-check	Security	验证请求是否来自合法的你的应用（而非脚本或爬虫），防止未授权访问 Firebase 资源（Firestore、Storage、Functions）。与 reCAPTCHA 配合使用。Verifies that requests come from your legitimate app (not scripts or crawlers), preventing unauthorised access to Firebase resources (Firestore, Storage, Functions). Works alongside reCAPTCHA.	平台公开上线后，防止恶意脚本直接调用你的 Firestore 接口批量读取候选人数据或职位数据。在平台向机构合作伙伴开放之前必须启用。After public launch, prevents malicious scripts from directly calling your Firestore endpoints to bulk-read candidate or job data. Must be enabled before opening the platform to institutional partners.	TIP 1 App Check 在 Firebase Console → App Check 中一键启用，配合 reCAPTCHA v3 在 Web 端使用，基本无需改动现有代码，是性价比最高的安全加固措施之一。Enable App Check with one click in Firebase Console → App Check. Works with reCAPTCHA v3 on web with minimal code changes — one of the highest ROI security hardening measures available.
🌐 Cloud CDN cloud.google.com/cdn	GCP	全球内容分发网络，在全球边缘节点缓存静态资源，大幅降低延迟，提升用户加载速度，减少源服务器压力。Global content delivery network that caches static assets at edge nodes worldwide, dramatically reducing latency and improving load speed while reducing origin server load.	当平台扩展到东南亚机构合作伙伴后，Cloud CDN 确保马来西亚、新加坡、印尼、泰国的用户都能快速加载平台资源（JS bundle、图片、PDF）。配合 Firebase Hosting 或 Cloud Storage 使用。When platform expands to SEA institutional partners, Cloud CDN ensures fast loading for users in Malaysia, Singapore, Indonesia, Thailand (JS bundle, images, PDFs). Used with Firebase Hosting or Cloud Storage.	TIP 1 Firebase Hosting 已内置 CDN（覆盖全球），如果你迁移到 Firebase Hosting，Cloud CDN 不需要单独配置。只在使用 Cloud Storage 直接托管大文件时才需要单独开启 CDN。Firebase Hosting already has built-in CDN globally. If you migrate to Firebase Hosting, Cloud CDN is not needed separately. Only configure Cloud CDN independently when using Cloud Storage directly for large file hosting.
🛡️ Cloud Armor cloud.google.com/armor	Security	企业级 DDoS 防护和 Web 应用防火墙（WAF）。保护应用免受大流量攻击、SQL 注入、XSS 等常见 Web 威胁，支持基于 IP 的访问控制。Enterprise DDoS protection and Web Application Firewall (WAF). Protects against volumetric attacks, SQL injection, XSS, and other common web threats with IP-based access control.	平台面向政府和教育机构开放前的必要安全层。当平台处理大量候选人数据和机密招聘信息时，Cloud Armor 防止竞争对手或恶意行为者的攻击。Required security layer before opening to government and educational institutions. When the platform handles large volumes of candidate data and confidential recruitment information, Cloud Armor prevents attacks from competitors or malicious actors.	TIP 1 优先级：先做 reCAPTCHA + App Check + Firestore Security Rules（成本低效果好），等平台日均用户超过 500 且有机构合作后，再投入 Cloud Armor（按流量计费，成本较高）。Priority order: implement reCAPTCHA + App Check + Firestore Security Rules first (low cost, high impact). Add Cloud Armor after daily active users exceed 500 and institutional partnerships begin (Cloud Armor is usage-billed, higher cost).
🔑 Google Workspace (Business) workspace.google.com	Workspace	企业版 Google 服务套件，提供自定义域名邮箱（@sunriserecruitment.com.au）、共享云端硬盘、视频会议、管理控制台、用户生命周期管理。Enterprise Google services suite providing custom domain email (@sunriserecruitment.com.au), shared drives, video conferencing, admin console, and user lifecycle management.	为团队成员配置专业邮箱（如 sean@sunriserecruitment.com.au），统一管理 IT 合作伙伴和运营合作伙伴的 Google 账号权限，确保员工离职后立刻撤销平台访问权限。Set up professional email for team members (e.g. sean@sunriserecruitment.com.au), centrally manage IT partner and ops partner Google account permissions, ensure immediate access revocation when staff leave.	TIP 1 Workspace Business Starter（约 $6/用户/月）就足够你当前团队使用。暂时不需要更高版本，等有 10 人以上团队时再评估升级。Workspace Business Starter (~$6/user/month) is sufficient for your current team size. No need for higher tiers until you have 10+ team members.
📚 Google Classroom classroom.google.com	Education	在线课堂管理平台，支持课程创建、作业分发、测验、评分、学员进度追踪，与 Google Drive 深度集成。Online classroom management platform for course creation, assignment distribution, quizzes, grading, and learner progress tracking, deeply integrated with Google Drive.	Grab 式强制入职培训的正式平台：为合作伙伴和自由招聘员创建结构化课程（平台操作、合规要求、招聘流程），内置测验确保 100% 通过率，测验通过后 n8n 自动触发平台账号开通。Formal platform for Grab-style mandatory onboarding: create structured courses for partners and freelancers (platform operations, compliance, recruitment process). Built-in quiz enforces 100% pass rate. n8n auto-triggers account activation when quiz passes.	TIP 1 Google Classroom 对个人账号免费，如果已有 Google Workspace，直接在管理控制台开启即可。Google Forms 测验可无缝嵌入 Classroom 课程。Google Classroom is free for personal accounts and included with Google Workspace. Google Forms quizzes embed seamlessly into Classroom courses — no extra tools needed.
📊 Google Business Profile business.google.com	Analytics	管理 Google 搜索和地图上的企业信息展示：营业地址、联系方式、营业时间、客户评价、企业动态。提升本地搜索曝光度。Manage your business listing on Google Search and Maps: address, contact info, business hours, customer reviews, and business updates. Improves local search visibility.	提升 Sunrise Recruit 在"马来西亚招聘公司"、"新加坡人力资源顾问"等本地搜索词的曝光，让潜在客户（HR 经理）更容易找到你。客户评价也能建立机构信任度。Boost Sunrise Recruit's visibility for local searches like "Malaysia recruitment agency" and "Singapore HR consultant" so potential clients (HR managers) can find you. Customer reviews also build institutional trust.	TIP 1 完全免费，5 分钟可完成设置。现在就可以做——不需要等平台开发完成。对线下客户开发有直接帮助。Completely free, takes 5 minutes to set up. Do this now — it doesn't require waiting for platform development. Has direct impact on offline client acquisition.
🧪 Google Colab colab.google	Developer	基于浏览器的 Jupyter Notebook 环境，免费使用 GPU/TPU 资源，预装数据科学和 ML 库，支持与 Google Drive 直接集成。Browser-based Jupyter Notebook with free GPU/TPU access, pre-installed data science and ML libraries, and direct Google Drive integration.	在正式部署到 Vertex AI 之前，用 Colab 实验候选人匹配算法：加载 Firestore 导出的候选人数据 → 测试嵌入模型（Embedding）→ 评估匹配精度。零成本、快速迭代。Experiment with candidate matching algorithms before deploying to Vertex AI: load Firestore-exported candidate data → test embedding models → evaluate matching accuracy. Zero cost, fast iteration.	TIP 1 Colab + BigQuery 是强力组合：直接在 Colab 里用 BigQuery Python 客户端查询你的招聘数据，做数据分析和 ML 实验，结果直接写回 BigQuery。Colab + BigQuery is a powerful combo: use the BigQuery Python client directly in Colab to query your recruitment data for analysis and ML experiments, writing results back to BigQuery.
📝 NotebookLM notebooklm.google.com	AI	AI 研究助理，可上传文档/PDF/YouTube 视频/Google Docs 作为知识源，生成摘要、回答问题、创建学习指南和播客音频。AI research assistant — upload documents/PDFs/YouTube videos/Google Docs as knowledge sources to generate summaries, answer questions, create study guides, and generate podcast audio.	构建合作伙伴和自由招聘员的入职培训内容：上传 Recruitment OS 用户手册、平台架构文档、SOP 库 → 让 NotebookLM 生成培训问答、学习指南、甚至播客形式的平台介绍音频。Build onboarding training content for partners and freelancers: upload the Recruitment OS User Guide, Platform Architecture doc, SOP library → let NotebookLM generate training Q&A, study guides, and even podcast-style platform intro audio.	TIP 1 NotebookLM 的"Audio Overview"功能可以把你的文档变成 10-15 分钟的对话式播客——直接用于合作伙伴入职培训的音频教程，质量出乎意料地高。NotebookLM's "Audio Overview" feature converts your documents into a 10-15 minute conversational podcast — use directly as audio tutorials for partner onboarding. The quality is surprisingly high.
🔔 Google Alerts alerts.google.com	Workspace	监控关键词的 Google 搜索结果，有新内容时通过邮件实时提醒。完全免费，无需 API。Monitor Google Search results for keywords and receive email alerts when new content appears. Completely free, no API required.	监控客户公司动态（新闻、融资、裁员）、马来西亚/新加坡招聘市场趋势、竞争对手新动作、行业政策变化（EP/SP 准证要求更新）。帮助运营合作伙伴主动发现商机。Monitor client company news (funding, layoffs), Malaysia/Singapore recruitment market trends, competitor moves, industry policy changes (EP/SP pass requirement updates). Helps ops partner proactively identify business opportunities.	TIP 1 为每个主要客户设置一个 Alert（公司名），为行业关键词设置 Alert（如"Malaysia hiring freeze"、"Singapore MOM policy"），运营合作伙伴每天早上收到一份摘要。Set one Alert per major client (company name) and for industry keywords ("Malaysia hiring freeze", "Singapore MOM policy"). Ops partner gets a daily morning digest with no extra effort.
🏢 Google Sites sites.google.com	Workspace	无代码网站构建工具，可快速创建内部 Wiki、项目门户、客户信息页面，与 Google Workspace 深度集成，支持嵌入 Sheets/Docs/Forms。No-code website builder for internal wikis, project portals, and client info pages, deeply integrated with Google Workspace and supporting embedded Sheets/Docs/Forms.	Phase 4 白标选项的轻量版本：为特定企业客户快速创建定制化招聘门户，嵌入专属的职位列表和申请表。在正式开发白标功能前可作为快速交付的替代方案。Lightweight version of the Phase 4 white-label option: quickly create customised recruitment portals for specific enterprise clients with embedded job listings and application forms. Acts as a quick-delivery alternative before the white-label feature is built.	TIP 1 Google Sites 对 Workspace 用户免费，10 分钟可建一个客户专属页面。在等待 Phase 4 白标功能开发期间，用它先满足有定制门户需求的大客户。Google Sites is free with Workspace. A client-specific page takes 10 minutes to build. Use it to satisfy enterprise clients who need a custom portal while Phase 4 white-label is being developed.
🔍 Google Looker (Enterprise) cloud.google.com/looker	Analytics	企业级商业智能平台（付费版），支持行级数据权限、嵌入式分析（将仪表板嵌入第三方应用）、LookML 语义层、API 驱动的数据交付。Enterprise BI platform (paid) with row-level data permissions, embedded analytics (dashboards in third-party apps), LookML semantic layer, and API-driven data delivery.	当平台扩展到政府和教育机构合作伙伴后，将招聘分析仪表板嵌入合作伙伴的管理系统中，提供定制化的招聘洞察报告。这是高价值的增值服务，支撑白标合作模式的差异化定价。When the platform expands to government and educational institutional partners, embed recruitment analytics dashboards into partner management systems. This is a high-value add-on service supporting differentiated pricing in the white-label partnership model.	TIP 1 先用免费的 Looker Studio 把数据可视化做好，Looker Enterprise 是扩张阶段的事。不要过早投入企业级工具成本。Use free Looker Studio first to get your data visualisation right. Looker Enterprise is a scale-stage investment — don't incur enterprise tool costs prematurely.

Sunrise Recruit — Google 工具详细参考Sunrise Recruit — Google Tools Detailed Reference

V1.0 · May 2026 · 保密 — 仅限内部使用Confidential — Internal Use Only

37 TOOLS · 3 STAGES · seantan338/SR-Web-AS