TK-11745: stage collision-safe Stripe live-key routes for professional-directory rotation fan-out

0a2ee5b90026cc24217bc73e26034f190c2ff22f · 2026-09-14 16:14:28 -0700 · Steve Abrams

Files touched

M routes.json

Diff

commit 0a2ee5b90026cc24217bc73e26034f190c2ff22f
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Mon Sep 14 16:14:28 2026 -0700

    TK-11745: stage collision-safe Stripe live-key routes for professional-directory rotation fan-out
---
 routes.json | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/routes.json b/routes.json
index b3f6ac7..698aada 100644
--- a/routes.json
+++ b/routes.json
@@ -2134,5 +2134,24 @@
         "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local"
       }
     ]
+  },
+  "STRIPE_SECRET_KEY": {
+    "label": "professional-directory live Stripe secret key (rotated TK-11745)",
+    "destinations": [
+      "/Users/macstudio3/Projects/professional-directory/.env"
+    ],
+    "verify": {
+      "method": "GET",
+      "url": "https://api.stripe.com/v1/account",
+      "auth": "basic-sk"
+    },
+    "note": "App-scoped: professional-directory only. Generic var name \u2014 do NOT register a second app's Stripe key here without scoping (would misroute). Verify hits Stripe /v1/account (basic-sk); a sk_live_ key returns 200 with the live account."
+  },
+  "STRIPE_PUBLISHABLE_KEY": {
+    "label": "professional-directory live Stripe publishable key (rotated TK-11745)",
+    "destinations": [
+      "/Users/macstudio3/Projects/professional-directory/.env"
+    ],
+    "note": "pk_live_ is a client-side publishable key (not secret); no verify endpoint. Routed so it lands beside the secret key on rotation."
   }
 }
\ No newline at end of file

← 9bbbe67 TK-11683: reversible dry-run redactor for Claude session tra · back to Secrets Manager · auto-data-snapshot: 2026-09-16T10:07:35 (1 data files) — reg 7c0d555 →