[object Object]

← back to Secrets Manager

auto-data-snapshot: 2026-08-09T09:46:33 (3 data files) — registry.json routes.json routes.json.bak.1786292832

0d61dd5262e955bd44485fcf677dff6cf16b9023 · 2026-08-09 09:46:59 -0700 · auto-commit-fleet

Files touched

Diff

commit 0d61dd5262e955bd44485fcf677dff6cf16b9023
Author: auto-commit-fleet <steve@designerwallcoverings.com>
Date:   Sun Aug 9 09:46:59 2026 -0700

    auto-data-snapshot: 2026-08-09T09:46:33 (3 data files) — registry.json routes.json routes.json.bak.1786292832
---
 registry.json              |    5 +-
 routes.json                |   95 ++-
 routes.json.bak.1786292832 | 1870 ++++++++++++++++++++++++++++++++++++++++++++
 3 files changed, 1924 insertions(+), 46 deletions(-)

diff --git a/registry.json b/registry.json
index e2aac9a..10030f5 100644
--- a/registry.json
+++ b/registry.json
@@ -702,12 +702,11 @@
     "BUTLR_OWNER_TOKEN": {
       "digest": "da8c:693bb5f9",
       "label": "BUTLR_OWNER_TOKEN",
-      "last_updated": "2026-05-12T23:03:48.872Z",
+      "last_updated": "2026-08-09T16:27:12.322Z",
       "validated": false,
       "verify_status": null,
       "written_to": [
-        "/Users/macstudio3/Projects/secrets-manager/.env",
-        "/Users/macstudio3/Desktop/site-factory.env"
+        "/Users/macstudio3/Projects/secrets-manager/.env"
       ]
     },
     "VAPI_API_KEY": {
diff --git a/routes.json b/routes.json
index edeb836..8c6ff0e 100644
--- a/routes.json
+++ b/routes.json
@@ -2,7 +2,7 @@
   "_comment": "Per-secret routing table. Each entry: master + extra destinations. Master is implicit at ~/Projects/secrets-manager/.env. (Desktop mirror ~/Desktop/site-factory.env retired 2026-06-11, DTD verdict A.)",
   "services": {
     "SI_API_KEY": {
-      "label": "api.data.gov key (Smithsonian Open Access + other data.gov APIs) — CelebritySignatures artists harvest; account steve@designerwallcoverings.com, created 2025-08-25",
+      "label": "api.data.gov key (Smithsonian Open Access + other data.gov APIs) \u2014 CelebritySignatures artists harvest; account steve@designerwallcoverings.com, created 2025-08-25",
       "verify": {
         "method": "GET",
         "auth": "query",
@@ -37,7 +37,7 @@
       ]
     },
     "REPLICATE_API_TOKEN": {
-      "label": "Replicate API Token — wallco.ai SDXL gen fallback (WALLCO_COMFY_FALLBACK=replicate floor) + animate-museum-posts",
+      "label": "Replicate API Token \u2014 wallco.ai SDXL gen fallback (WALLCO_COMFY_FALLBACK=replicate floor) + animate-museum-posts",
       "verify": {
         "method": "GET",
         "url": "https://api.replicate.com/v1/account",
@@ -285,7 +285,7 @@
       ]
     },
     "STRIPE_VCL_WEBHOOK_SECRET": {
-      "label": "Stripe webhook signing secret — VCL endpoint we_1TUF1Y63uNmiRsMbNr1kLu52",
+      "label": "Stripe webhook signing secret \u2014 VCL endpoint we_1TUF1Y63uNmiRsMbNr1kLu52",
       "destinations": [
         {
           "type": "project",
@@ -300,7 +300,7 @@
       ]
     },
     "STRIPE_PRICE_VCL_STARTER_MONTH": {
-      "label": "Stripe Price ID — VCL Starter $49/mo",
+      "label": "Stripe Price ID \u2014 VCL Starter $49/mo",
       "destinations": [
         {
           "type": "project",
@@ -315,7 +315,7 @@
       ]
     },
     "STRIPE_PRICE_VCL_STANDARD_MONTH": {
-      "label": "Stripe Price ID — VCL Standard $99/mo",
+      "label": "Stripe Price ID \u2014 VCL Standard $99/mo",
       "destinations": [
         {
           "type": "project",
@@ -330,7 +330,7 @@
       ]
     },
     "STRIPE_PRICE_VCL_PREMIER_MONTH": {
-      "label": "Stripe Price ID — VCL Premier $199/mo",
+      "label": "Stripe Price ID \u2014 VCL Premier $199/mo",
       "destinations": [
         {
           "type": "project",
@@ -345,7 +345,7 @@
       ]
     },
     "HEYGEN_API_KEY": {
-      "label": "HeyGen API key — talking-head avatar video render (used by session-debrief skill)",
+      "label": "HeyGen API key \u2014 talking-head avatar video render (used by session-debrief skill)",
       "verify": {
         "method": "GET",
         "url": "https://api.heygen.com/v1/voice.list",
@@ -376,7 +376,7 @@
       ]
     },
     "INFO_VENTURACLAW_COM_PASSWORD": {
-      "label": "Purelymail mailbox password — info@venturaclaw.com (used by Ventura Claw Leads + the existing ventura-claw app)",
+      "label": "Purelymail mailbox password \u2014 info@venturaclaw.com (used by Ventura Claw Leads + the existing ventura-claw app)",
       "destinations": [
         {
           "type": "project",
@@ -401,7 +401,7 @@
       ]
     },
     "INFO_NATIONALPAPERHANGERS_COM_PASSWORD": {
-      "label": "Purelymail mailbox password — info@nationalpaperhangers.com",
+      "label": "Purelymail mailbox password \u2014 info@nationalpaperhangers.com",
       "destinations": [
         {
           "type": "project",
@@ -416,7 +416,7 @@
       ]
     },
     "STRIPE_NPH_WEBHOOK_SECRET": {
-      "label": "Stripe Webhook Signing Secret — NPH endpoint we_1TUDHV63uNmiRsMbRJea7EqU",
+      "label": "Stripe Webhook Signing Secret \u2014 NPH endpoint we_1TUDHV63uNmiRsMbRJea7EqU",
       "destinations": [
         {
           "type": "project",
@@ -431,7 +431,7 @@
       ]
     },
     "STRIPE_PRICE_PRO_MONTH": {
-      "label": "Stripe Price ID — NPH Pro $39/mo",
+      "label": "Stripe Price ID \u2014 NPH Pro $39/mo",
       "destinations": [
         {
           "type": "project",
@@ -446,7 +446,7 @@
       ]
     },
     "STRIPE_PRICE_PRO_YEAR": {
-      "label": "Stripe Price ID — NPH Pro $399/yr",
+      "label": "Stripe Price ID \u2014 NPH Pro $399/yr",
       "destinations": [
         {
           "type": "project",
@@ -461,7 +461,7 @@
       ]
     },
     "STRIPE_PRICE_SIGNATURE_MONTH": {
-      "label": "Stripe Price ID — NPH Signature $149/mo",
+      "label": "Stripe Price ID \u2014 NPH Signature $149/mo",
       "destinations": [
         {
           "type": "project",
@@ -476,7 +476,7 @@
       ]
     },
     "STRIPE_PRICE_SIGNATURE_YEAR": {
-      "label": "Stripe Price ID — NPH Signature $1500/yr",
+      "label": "Stripe Price ID \u2014 NPH Signature $1500/yr",
       "destinations": [
         {
           "type": "project",
@@ -491,7 +491,7 @@
       ]
     },
     "STRIPE_PRICE_ENTERPRISE_MONTH": {
-      "label": "Stripe Price ID — NPH Enterprise $399/mo",
+      "label": "Stripe Price ID \u2014 NPH Enterprise $399/mo",
       "destinations": [
         {
           "type": "project",
@@ -708,7 +708,7 @@
       ]
     },
     "GEMINI_API_KEY_DW_ENRICH": {
-      "label": "Google Gemini API Key — DEDICATED to DW image-enrichment / vendor-command-center. Created 2026-06-23 by vp-security as the rotation target for the leaked orphan keys (last-4 ejMo and S2ic, never registry-managed). Pre-staged EMPTY so that the moment Steve issues a fresh key at Google AI Studio, `add GEMINI_API_KEY_DW_ENRICH <new-key>` verifies it against Gemini and fans it (remapped to the bare var GEMINI_API_KEY) to the consumers below. Distinct from the master GEMINI_API_KEY (Letsbegin/Bertha/skills) and GEMINI_API_KEY_WALLCO (k720). If Steve prefers enrichment to ride the master key instead, he can skip this alias and update GEMINI_API_KEY directly — the env-ified consumers read GEMINI_API_KEY first.",
+      "label": "Google Gemini API Key \u2014 DEDICATED to DW image-enrichment / vendor-command-center. Created 2026-06-23 by vp-security as the rotation target for the leaked orphan keys (last-4 ejMo and S2ic, never registry-managed). Pre-staged EMPTY so that the moment Steve issues a fresh key at Google AI Studio, `add GEMINI_API_KEY_DW_ENRICH <new-key>` verifies it against Gemini and fans it (remapped to the bare var GEMINI_API_KEY) to the consumers below. Distinct from the master GEMINI_API_KEY (Letsbegin/Bertha/skills) and GEMINI_API_KEY_WALLCO (k720). If Steve prefers enrichment to ride the master key instead, he can skip this alias and update GEMINI_API_KEY directly \u2014 the env-ified consumers read GEMINI_API_KEY first.",
       "verify": {
         "method": "GET",
         "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
@@ -731,7 +731,7 @@
       ]
     },
     "GEMINI_API_KEY_WALLCO": {
-      "label": "Google Gemini API Key — DEDICATED to wallco.ai gen pipeline (nano-banana / gemini-2.5-flash-image fallback). Distinct from the master GEMINI_API_KEY (Letsbegin/Bertha/skills). Same dedicated-alias pattern as GEMINI_API_KEY_RALPH.",
+      "label": "Google Gemini API Key \u2014 DEDICATED to wallco.ai gen pipeline (nano-banana / gemini-2.5-flash-image fallback). Distinct from the master GEMINI_API_KEY (Letsbegin/Bertha/skills). Same dedicated-alias pattern as GEMINI_API_KEY_RALPH.",
       "verify": {
         "method": "GET",
         "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
@@ -939,8 +939,8 @@
       ]
     },
     "LINKEDIN_CLIENT_ID": {
-      "label": "LinkedIn OAuth Client ID — \"For Claude - 5-6-26\" app, bound to Designer Wallcoverings Page",
-      "_note": "No verify endpoint — LinkedIn requires the ID+SECRET pair to validate, and the CLI verifies one key at a time. Manual probe via POST /oauth/v2/accessToken with a fake code expects 'invalid_request: authorization code not found' = creds OK.",
+      "label": "LinkedIn OAuth Client ID \u2014 \"For Claude - 5-6-26\" app, bound to Designer Wallcoverings Page",
+      "_note": "No verify endpoint \u2014 LinkedIn requires the ID+SECRET pair to validate, and the CLI verifies one key at a time. Manual probe via POST /oauth/v2/accessToken with a fake code expects 'invalid_request: authorization code not found' = creds OK.",
       "destinations": [
         {
           "type": "project",
@@ -954,7 +954,7 @@
       ]
     },
     "LINKEDIN_CLIENT_SECRET": {
-      "label": "LinkedIn OAuth Client Secret — \"For Claude - 5-6-26\" app, bound to Designer Wallcoverings Page",
+      "label": "LinkedIn OAuth Client Secret \u2014 \"For Claude - 5-6-26\" app, bound to Designer Wallcoverings Page",
       "destinations": [
         {
           "type": "project",
@@ -968,7 +968,7 @@
       ]
     },
     "GOOGLE_OAUTH_CLIENT_ID": {
-      "label": "Google OAuth Client ID — DW Activation Calendar (shared DW Google Calendar, local :9765)",
+      "label": "Google OAuth Client ID \u2014 DW Activation Calendar (shared DW Google Calendar, local :9765)",
       "destinations": [
         {
           "type": "project",
@@ -977,7 +977,7 @@
       ]
     },
     "GOOGLE_OAUTH_CLIENT_SECRET": {
-      "label": "Google OAuth Client Secret — DW Activation Calendar (shared DW Google Calendar, local :9765)",
+      "label": "Google OAuth Client Secret \u2014 DW Activation Calendar (shared DW Google Calendar, local :9765)",
       "destinations": [
         {
           "type": "project",
@@ -986,7 +986,7 @@
       ]
     },
     "NPH_GOOGLE_OAUTH_CLIENT_ID": {
-      "label": "Google OAuth Client ID — buyer sign-in on National Paper Hangers",
+      "label": "Google OAuth Client ID \u2014 buyer sign-in on National Paper Hangers",
       "destinations": [
         {
           "type": "project",
@@ -1000,7 +1000,7 @@
       ]
     },
     "NPH_GOOGLE_OAUTH_CLIENT_SECRET": {
-      "label": "Google OAuth Client Secret — buyer sign-in on National Paper Hangers",
+      "label": "Google OAuth Client Secret \u2014 buyer sign-in on National Paper Hangers",
       "destinations": [
         {
           "type": "project",
@@ -1258,7 +1258,7 @@
       ]
     },
     "SLACK_APP_ID": {
-      "label": "Slack app \"Claude Access to Slack\" — App ID (A0BDER23QRK). Not secret but registered for completeness.",
+      "label": "Slack app \"Claude Access to Slack\" \u2014 App ID (A0BDER23QRK). Not secret but registered for completeness.",
       "destinations": [
         {
           "type": "env_file",
@@ -1267,7 +1267,7 @@
       ]
     },
     "SLACK_CLIENT_ID": {
-      "label": "Slack app Client ID — used with Client Secret in oauth.v2.access requests.",
+      "label": "Slack app Client ID \u2014 used with Client Secret in oauth.v2.access requests.",
       "destinations": [
         {
           "type": "env_file",
@@ -1276,7 +1276,7 @@
       ]
     },
     "SLACK_CLIENT_SECRET": {
-      "label": "Slack app Client Secret — OAuth token exchange (oauth.v2.access). NOT the bot token.",
+      "label": "Slack app Client Secret \u2014 OAuth token exchange (oauth.v2.access). NOT the bot token.",
       "destinations": [
         {
           "type": "env_file",
@@ -1285,7 +1285,7 @@
       ]
     },
     "SLACK_SIGNING_SECRET": {
-      "label": "Slack app Signing Secret — verifies inbound request signatures from Slack (events/interactivity).",
+      "label": "Slack app Signing Secret \u2014 verifies inbound request signatures from Slack (events/interactivity).",
       "destinations": [
         {
           "type": "env_file",
@@ -1294,7 +1294,7 @@
       ]
     },
     "SLACK_VERIFICATION_TOKEN": {
-      "label": "Slack DEPRECATED verification token — legacy request verification. Prefer SLACK_SIGNING_SECRET.",
+      "label": "Slack DEPRECATED verification token \u2014 legacy request verification. Prefer SLACK_SIGNING_SECRET.",
       "destinations": [
         {
           "type": "env_file",
@@ -1303,7 +1303,7 @@
       ]
     },
     "SLACK_APP_TOKEN": {
-      "label": "Slack app-level token (xapp-1-…) for Socket Mode — connections:write. Routes events over WebSocket. NOT the bot token (xoxb-).",
+      "label": "Slack app-level token (xapp-1-\u2026) for Socket Mode \u2014 connections:write. Routes events over WebSocket. NOT the bot token (xoxb-).",
       "destinations": [
         {
           "type": "env_file",
@@ -1312,7 +1312,7 @@
       ]
     },
     "CENSUS_API_KEY": {
-      "label": "US Census Bureau Data API key — demographics fetcher for commercialrealestate (ACS5 by ZCTA). NOTE: Census API returns 302-redirect on a valid data query so the secrets verifier cannot probe it; verify manually via an ACS5 curl.",
+      "label": "US Census Bureau Data API key \u2014 demographics fetcher for commercialrealestate (ACS5 by ZCTA). NOTE: Census API returns 302-redirect on a valid data query so the secrets verifier cannot probe it; verify manually via an ACS5 curl.",
       "destinations": [
         {
           "type": "env_file",
@@ -1321,7 +1321,7 @@
       ]
     },
     "POSTIZ_API_KEY": {
-      "label": "Postiz public API key (raw Authorization header) — DW marketing slideshow engine (post/integrations) + Postiz MCP",
+      "label": "Postiz public API key (raw Authorization header) \u2014 DW marketing slideshow engine (post/integrations) + Postiz MCP",
       "destinations": [
         {
           "type": "project",
@@ -1330,7 +1330,7 @@
       ]
     },
     "X_API_KEY": {
-      "label": "X (Twitter) API v2 — Consumer/API key (app auth). Pairs with X_API_SECRET to mint app-only bearers.",
+      "label": "X (Twitter) API v2 \u2014 Consumer/API key (app auth). Pairs with X_API_SECRET to mint app-only bearers.",
       "destinations": [
         {
           "type": "project",
@@ -1339,7 +1339,7 @@
       ]
     },
     "X_API_SECRET": {
-      "label": "X (Twitter) API v2 — Consumer/API secret. With X_API_KEY mints app-only bearer via oauth2/token.",
+      "label": "X (Twitter) API v2 \u2014 Consumer/API secret. With X_API_KEY mints app-only bearer via oauth2/token.",
       "destinations": [
         {
           "type": "project",
@@ -1348,7 +1348,7 @@
       ]
     },
     "X_BEARER_TOKEN": {
-      "label": "X (Twitter) API v2 — app-only Bearer token (use RAW/as-issued; contains %-encoded chars).",
+      "label": "X (Twitter) API v2 \u2014 app-only Bearer token (use RAW/as-issued; contains %-encoded chars).",
       "verify": {
         "method": "GET",
         "url": "https://api.twitter.com/2/tweets?ids=20",
@@ -1398,6 +1398,15 @@
           "path": "~/Projects/model-arena/.env"
         }
       ]
+    },
+    "BUTLR_OWNER_TOKEN": {
+      "label": "BUTLR_OWNER_TOKEN",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "/Users/macstudio3/.claude/skills/butlr/.env"
+        }
+      ]
     }
   },
   "leak_patterns": [
@@ -1502,7 +1511,7 @@
     ]
   },
   "GOOGLE_DRIVE_CLIENT_ID": {
-    "description": "Google Drive OAuth Client ID — TSD photo-import-cli desktop app",
+    "description": "Google Drive OAuth Client ID \u2014 TSD photo-import-cli desktop app",
     "destinations": [
       {
         "type": "env-file",
@@ -1511,7 +1520,7 @@
     ]
   },
   "GOOGLE_DRIVE_CLIENT_SECRET": {
-    "description": "Google Drive OAuth Client Secret — TSD photo-import-cli",
+    "description": "Google Drive OAuth Client Secret \u2014 TSD photo-import-cli",
     "destinations": [
       {
         "type": "env-file",
@@ -1520,7 +1529,7 @@
     ]
   },
   "GOOGLE_DRIVE_REFRESH_TOKEN": {
-    "description": "Google Drive OAuth refresh token — read-only scope, owned by steveabramsdesigns@gmail.com",
+    "description": "Google Drive OAuth refresh token \u2014 read-only scope, owned by steveabramsdesigns@gmail.com",
     "destinations": [
       {
         "type": "env-file",
@@ -1559,7 +1568,7 @@
     ]
   },
   "TMDB_API_KEY": {
-    "label": "TMDB v3 API key — asseeninmovies Phase B drain (6.46M-stub queue)",
+    "label": "TMDB v3 API key \u2014 asseeninmovies Phase B drain (6.46M-stub queue)",
     "verify": {
       "method": "GET",
       "url": "https://api.themoviedb.org/3/authentication?api_key=__VALUE__",
@@ -1571,7 +1580,7 @@
     ]
   },
   "TMDB_READ_ACCESS_TOKEN": {
-    "label": "TMDB v4 read-access token (bearer) — alt to v3 api_key",
+    "label": "TMDB v4 read-access token (bearer) \u2014 alt to v3 api_key",
     "verify": {
       "method": "GET",
       "url": "https://api.themoviedb.org/3/authentication",
@@ -1633,7 +1642,7 @@
     ]
   },
   "SHOPIFY_DRAFT_TOKEN": {
-    "label": "Shopify Admin token (full access incl. write_draft_orders) — DW mural PDP custom-size checkout",
+    "label": "Shopify Admin token (full access incl. write_draft_orders) \u2014 DW mural PDP custom-size checkout",
     "destinations": [
       {
         "type": "project",
@@ -1838,13 +1847,13 @@
     ]
   },
   "DATAFORSEO_API_KEY": {
-    "label": "DataForSEO API key (base64 of login:api-password) — OpenSEO self-hosted backend for keyword/SERP/backlink/domain tools. Login steve@designerwallcoverings.com.",
+    "label": "DataForSEO API key (base64 of login:api-password) \u2014 OpenSEO self-hosted backend for keyword/SERP/backlink/domain tools. Login steve@designerwallcoverings.com.",
     "destinations": [
       "/Users/macstudio3/Projects/open-seo/.env.local"
     ]
   },
   "OSBORNE_USERNAME": {
-    "label": "Osborne & Little trade portal (tradenew.osborneandlittle.com) login — also used for Matthew Williamson (O&L-distributed) US pricing",
+    "label": "Osborne & Little trade portal (tradenew.osborneandlittle.com) login \u2014 also used for Matthew Williamson (O&L-distributed) US pricing",
     "destinations": [
       {
         "type": "skill",
diff --git a/routes.json.bak.1786292832 b/routes.json.bak.1786292832
new file mode 100644
index 0000000..edeb836
--- /dev/null
+++ b/routes.json.bak.1786292832
@@ -0,0 +1,1870 @@
+{
+  "_comment": "Per-secret routing table. Each entry: master + extra destinations. Master is implicit at ~/Projects/secrets-manager/.env. (Desktop mirror ~/Desktop/site-factory.env retired 2026-06-11, DTD verdict A.)",
+  "services": {
+    "SI_API_KEY": {
+      "label": "api.data.gov key (Smithsonian Open Access + other data.gov APIs) — CelebritySignatures artists harvest; account steve@designerwallcoverings.com, created 2025-08-25",
+      "verify": {
+        "method": "GET",
+        "auth": "query",
+        "url": "https://api.si.edu/openaccess/api/v1.0/search?q=test&rows=1&api_key={value}"
+      },
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/CelebritySignatures/.env"
+        }
+      ]
+    },
+    "PG_DW_ADMIN_PASSWORD": {
+      "label": "Postgres dw_admin role password (local Mac2 + prod via prestage 3b). DSN_REWRITE rewrites DATABASE_URL pw in each env_file dest.",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/Norma/.env.local"
+        },
+        {
+          "type": "env_file",
+          "path": "~/Projects/StudentLoanTracker/.env.local"
+        },
+        {
+          "type": "env_file",
+          "path": "~/Projects/ClawCoder/.env.local"
+        },
+        {
+          "type": "env_file",
+          "path": "~/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local"
+        }
+      ]
+    },
+    "REPLICATE_API_TOKEN": {
+      "label": "Replicate API Token — wallco.ai SDXL gen fallback (WALLCO_COMFY_FALLBACK=replicate floor) + animate-museum-posts",
+      "verify": {
+        "method": "GET",
+        "url": "https://api.replicate.com/v1/account",
+        "auth": "bearer"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/wallco-ai/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/animate-museum-posts/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/public-projects/wallco-ai/.env",
+          "_note": "PROD wallco.ai gen pipeline (Replicate SDXL fallback). Verified prod value matches registry digest 560V:70c85c06 (2026-06-21). Remote-fan via cli.js IS automated for this dest (type=project + host); a plain `cli.js sync` will SSH-write it. Do not auto-rotate this on a live app without surfacing."
+        }
+      ]
+    },
+    "GOOGLE_PLACES_API_KEY": {
+      "label": "Google Places API Key",
+      "verify": {
+        "method": "GET",
+        "url": "https://maps.googleapis.com/maps/api/place/findplacefromtext/json?input=Tito%27s+Tacos+Culver+City&inputtype=textquery&fields=place_id&key=__VALUE__",
+        "auth": "querystring"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/restaurant-directory/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/professional-directory/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/animals/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/lawyer-directory-builder/.env"
+        }
+      ]
+    },
+    "BRAVE_SEARCH_API_KEY": {
+      "label": "Brave Search API (Web)",
+      "verify": {
+        "method": "GET",
+        "url": "https://api.search.brave.com/res/v1/web/search?q=test&count=1",
+        "auth": "header",
+        "headerName": "X-Subscription-Token"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/_ventura-recon/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/rentv/.env"
+        }
+      ]
+    },
+    "MOONSHOT_API_KEY": {
+      "label": "Moonshot AI / Kimi K2 API Key",
+      "verify": {
+        "method": "GET",
+        "url": "https://api.moonshot.ai/v1/models",
+        "auth": "bearer"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/claude-codex-meeting/.env"
+        },
+        {
+          "type": "skill",
+          "name": "claude-codex"
+        }
+      ]
+    },
+    "CLOUDFLARE_API_TOKEN": {
+      "label": "Cloudflare API Token",
+      "verify": {
+        "method": "GET",
+        "url": "https://api.cloudflare.com/client/v4/user/tokens/verify",
+        "auth": "bearer"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/site-factory/.env"
+        },
+        {
+          "type": "skill",
+          "name": "cloudflare-manager"
+        },
+        {
+          "type": "skill",
+          "name": "setup-domains"
+        },
+        {
+          "type": "skill",
+          "name": "domain-setup"
+        }
+      ]
+    },
+    "STRIPE_SECRET_KEY": {
+      "label": "Stripe Secret Key",
+      "verify": {
+        "method": "GET",
+        "url": "https://api.stripe.com/v1/balance",
+        "auth": "basic-sk"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/site-factory/.env"
+        },
+        {
+          "type": "site_local",
+          "domains": [
+            "wholivedthere.com",
+            "bubbesblock.com",
+            "claimmyaddress.com"
+          ]
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/lawyer-directory-builder/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/professional-directory/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/ventura-claw-leads/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/ventura-claw-leads/.env"
+        }
+      ]
+    },
+    "STRIPE_PUBLISHABLE_KEY": {
+      "label": "Stripe Publishable Key",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/site-factory/.env"
+        },
+        {
+          "type": "site_local",
+          "domains": [
+            "wholivedthere.com",
+            "bubbesblock.com",
+            "claimmyaddress.com"
+          ]
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/lawyer-directory-builder/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/professional-directory/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/ventura-claw-leads/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/ventura-claw-leads/.env"
+        }
+      ]
+    },
+    "STRIPE_WEBHOOK_SECRET": {
+      "label": "Stripe Webhook Signing Secret",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/site-factory/.env"
+        },
+        {
+          "type": "site_local",
+          "domains": [
+            "wholivedthere.com",
+            "bubbesblock.com",
+            "claimmyaddress.com"
+          ]
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/lawyer-directory-builder/.env"
+        }
+      ]
+    },
+    "STRIPE_TIER_WEBHOOK_SECRET": {
+      "label": "Stripe Tier-Subscription Webhook Signing Secret (Counsel & Bar Lawyer Pro $29/mo)",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/lawyer-directory-builder/.env"
+        }
+      ]
+    },
+    "STRIPE_PRICE_LAWYER_PRO_MONTHLY": {
+      "label": "Stripe Price ID (public): Counsel & Bar Lawyer Pro $29/mo recurring",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/lawyer-directory-builder/.env"
+        }
+      ]
+    },
+    "STRIPE_VCL_WEBHOOK_SECRET": {
+      "label": "Stripe webhook signing secret — VCL endpoint we_1TUF1Y63uNmiRsMbNr1kLu52",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/ventura-claw-leads/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/ventura-claw-leads/.env"
+        }
+      ]
+    },
+    "STRIPE_PRICE_VCL_STARTER_MONTH": {
+      "label": "Stripe Price ID — VCL Starter $49/mo",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/ventura-claw-leads/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/ventura-claw-leads/.env"
+        }
+      ]
+    },
+    "STRIPE_PRICE_VCL_STANDARD_MONTH": {
+      "label": "Stripe Price ID — VCL Standard $99/mo",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/ventura-claw-leads/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/ventura-claw-leads/.env"
+        }
+      ]
+    },
+    "STRIPE_PRICE_VCL_PREMIER_MONTH": {
+      "label": "Stripe Price ID — VCL Premier $199/mo",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/ventura-claw-leads/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/ventura-claw-leads/.env"
+        }
+      ]
+    },
+    "HEYGEN_API_KEY": {
+      "label": "HeyGen API key — talking-head avatar video render (used by session-debrief skill)",
+      "verify": {
+        "method": "GET",
+        "url": "https://api.heygen.com/v1/voice.list",
+        "auth": "header",
+        "headerName": "x-api-key"
+      },
+      "destinations": [
+        {
+          "type": "skill",
+          "name": "session-debrief"
+        },
+        {
+          "type": "skill",
+          "name": "reviewed-demo-video"
+        },
+        {
+          "type": "skill",
+          "name": "heygen-video"
+        },
+        {
+          "type": "skill",
+          "name": "heygen-avatar"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/crcp-pitch-video/.env"
+        }
+      ]
+    },
+    "INFO_VENTURACLAW_COM_PASSWORD": {
+      "label": "Purelymail mailbox password — info@venturaclaw.com (used by Ventura Claw Leads + the existing ventura-claw app)",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/ventura-claw-leads/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/ventura-claw-leads/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/ventura-claw/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/ventura-claw/.env"
+        }
+      ]
+    },
+    "INFO_NATIONALPAPERHANGERS_COM_PASSWORD": {
+      "label": "Purelymail mailbox password — info@nationalpaperhangers.com",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/NationalPaperHangers/.env"
+        }
+      ]
+    },
+    "STRIPE_NPH_WEBHOOK_SECRET": {
+      "label": "Stripe Webhook Signing Secret — NPH endpoint we_1TUDHV63uNmiRsMbRJea7EqU",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/NationalPaperHangers/.env"
+        }
+      ]
+    },
+    "STRIPE_PRICE_PRO_MONTH": {
+      "label": "Stripe Price ID — NPH Pro $39/mo",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/NationalPaperHangers/.env"
+        }
+      ]
+    },
+    "STRIPE_PRICE_PRO_YEAR": {
+      "label": "Stripe Price ID — NPH Pro $399/yr",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/NationalPaperHangers/.env"
+        }
+      ]
+    },
+    "STRIPE_PRICE_SIGNATURE_MONTH": {
+      "label": "Stripe Price ID — NPH Signature $149/mo",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/NationalPaperHangers/.env"
+        }
+      ]
+    },
+    "STRIPE_PRICE_SIGNATURE_YEAR": {
+      "label": "Stripe Price ID — NPH Signature $1500/yr",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/NationalPaperHangers/.env"
+        }
+      ]
+    },
+    "STRIPE_PRICE_ENTERPRISE_MONTH": {
+      "label": "Stripe Price ID — NPH Enterprise $399/mo",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/NationalPaperHangers/.env"
+        }
+      ]
+    },
+    "VERCEL_TOKEN": {
+      "label": "Vercel API Token",
+      "verify": {
+        "method": "GET",
+        "url": "https://api.vercel.com/v2/user",
+        "auth": "bearer"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/site-factory/.env"
+        }
+      ]
+    },
+    "PURELYMAIL_API_TOKEN": {
+      "label": "PurelyMail API Token",
+      "verify": {
+        "method": "POST",
+        "url": "https://purelymail.com/api/v0/listDomains",
+        "auth": "header",
+        "headerName": "Purelymail-Api-Token",
+        "body": "{}",
+        "bodyMustContain": "^\\s*\\{\\s*\"type\"\\s*:\\s*\"success\"",
+        "bodyMustNotContain": "\"type\"\\s*:\\s*\"error\""
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/site-factory/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/ventura-corridor/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/purelymail-mcp/.env"
+        },
+        {
+          "type": "mcp",
+          "server": "purelymail",
+          "key": "PURELYMAIL_API_TOKEN"
+        }
+      ]
+    },
+    "GODADDY_API_KEY": {
+      "label": "GoDaddy API Key",
+      "destinations": [
+        {
+          "type": "mcp",
+          "server": "domain-suite",
+          "key": "GODADDY_API_KEY"
+        }
+      ]
+    },
+    "GODADDY_API_SECRET": {
+      "label": "GoDaddy API Secret",
+      "destinations": [
+        {
+          "type": "mcp",
+          "server": "domain-suite",
+          "key": "GODADDY_API_SECRET"
+        }
+      ]
+    },
+    "BROWSERBASE_API_KEY": {
+      "label": "Browserbase API Key",
+      "destinations": [
+        {
+          "type": "skill",
+          "name": "browserbase"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/Designer-Wallcoverings/DW-Websites/abrams-report/.env"
+        },
+        {
+          "type": "project",
+          "path": "/Users/macstudio3/Projects/abrams-report/.env"
+        },
+        {
+          "type": "project",
+          "path": "/Users/macstudio3/Projects/all-designerwallcoverings/.env"
+        }
+      ],
+      "_prod_note": "Kamatera PROD all-designerwallcoverings uses a DEDICATED Browserbase project/key set OUT-OF-BAND (dashboard-created, isolated blast radius + own spend cap). Do NOT re-add the prod all-dw ssh destination here or sync will clobber the dedicated key with the shared fleet key."
+    },
+    "BROWSERBASE_PROJECT_ID": {
+      "label": "Browserbase Project ID",
+      "destinations": [
+        {
+          "type": "skill",
+          "name": "browserbase"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/Designer-Wallcoverings/DW-Websites/abrams-report/.env"
+        },
+        {
+          "type": "project",
+          "path": "/Users/macstudio3/Projects/abrams-report/.env"
+        },
+        {
+          "type": "project",
+          "path": "/Users/macstudio3/Projects/all-designerwallcoverings/.env"
+        }
+      ],
+      "_prod_note": "Kamatera PROD all-designerwallcoverings uses a DEDICATED Browserbase project/key set OUT-OF-BAND (dashboard-created, isolated blast radius + own spend cap). Do NOT re-add the prod all-dw ssh destination here or sync will clobber the dedicated key with the shared fleet key."
+    },
+    "ANTHROPIC_API_KEY": {
+      "label": "Anthropic API Key",
+      "verify": {
+        "method": "POST",
+        "url": "https://api.anthropic.com/v1/messages",
+        "auth": "x-api-key",
+        "body": "{\"model\":\"claude-haiku-4-5\",\"max_tokens\":1,\"messages\":[{\"role\":\"user\",\"content\":\"hi\"}]}"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/Letsbegin/.env.local"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/dear-bubbe-nextjs/.env"
+        }
+      ]
+    },
+    "OPENAI_API_KEY": {
+      "label": "OpenAI API Key",
+      "verify": {
+        "method": "GET",
+        "url": "https://api.openai.com/v1/models",
+        "auth": "bearer"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/dear-bubbe-nextjs/.env.local"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/dear-bubbe-nextjs/.env.local"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/animals/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/holdforme/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/model-arena/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/wallco-ai/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/whatsmystyle/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/B_Version_1/.env"
+        }
+      ]
+    },
+    "GEMINI_API_KEY": {
+      "label": "Google Gemini API Key",
+      "verify": {
+        "method": "GET",
+        "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
+        "auth": "url"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/Letsbegin/.env.local"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/Bertha/kalshi-dash/.env"
+        },
+        {
+          "type": "skill",
+          "name": "ai-analyzer"
+        },
+        {
+          "type": "skill",
+          "name": "enrich-ai-tags"
+        }
+      ]
+    },
+    "GEMINI_API_KEY_DW_ENRICH": {
+      "label": "Google Gemini API Key — DEDICATED to DW image-enrichment / vendor-command-center. Created 2026-06-23 by vp-security as the rotation target for the leaked orphan keys (last-4 ejMo and S2ic, never registry-managed). Pre-staged EMPTY so that the moment Steve issues a fresh key at Google AI Studio, `add GEMINI_API_KEY_DW_ENRICH <new-key>` verifies it against Gemini and fans it (remapped to the bare var GEMINI_API_KEY) to the consumers below. Distinct from the master GEMINI_API_KEY (Letsbegin/Bertha/skills) and GEMINI_API_KEY_WALLCO (k720). If Steve prefers enrichment to ride the master key instead, he can skip this alias and update GEMINI_API_KEY directly — the env-ified consumers read GEMINI_API_KEY first.",
+      "verify": {
+        "method": "GET",
+        "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
+        "auth": "url"
+      },
+      "_note": "The 3 DW vendor-command-center files (logo-cropper.js, website-scorer.js, standardization-worker.js) read process.env.GEMINI_API_KEY (master) with GEMINI_KEY fallback, loaded from /root/.env on Kamatera. The goodquestion-ai/scripts/generate-hero-images.cjs reads process.env.GEMINI_API_KEY from ~/Projects/goodquestion-ai/.env. Each destination remaps this alias to the bare key name GEMINI_API_KEY so the env-ified code picks it up with no further change.",
+      "destinations": [
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/.env",
+          "key": "GEMINI_API_KEY"
+        },
+        {
+          "type": "env_file",
+          "path": "~/Projects/goodquestion-ai/.env",
+          "key": "GEMINI_API_KEY"
+        }
+      ]
+    },
+    "GEMINI_API_KEY_WALLCO": {
+      "label": "Google Gemini API Key — DEDICATED to wallco.ai gen pipeline (nano-banana / gemini-2.5-flash-image fallback). Distinct from the master GEMINI_API_KEY (Letsbegin/Bertha/skills). Same dedicated-alias pattern as GEMINI_API_KEY_RALPH.",
+      "verify": {
+        "method": "GET",
+        "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
+        "auth": "url"
+      },
+      "_note": "The wallco.ai app (local Mac2 AND prod Kamatera) reads the bare var GEMINI_API_KEY in its OWN .env, but that value differs from the master registry GEMINI_API_KEY. To avoid clobbering either consumer, this dedicated alias tracks the wallco-specific value by digest. The fan writes the bare key name GEMINI_API_KEY into the wallco .env files (per-dest key remap), NOT GEMINI_API_KEY_WALLCO. Prod value verified LIVE + matching local 2026-06-21 (k720:4295091b). Remote-fan to prod IS automated via cli.js sync (type=project+host); leave it documented-but-not-fanned unless a rotation is intended.",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/wallco-ai/.env",
+          "key": "GEMINI_API_KEY"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/public-projects/wallco-ai/.env",
+          "key": "GEMINI_API_KEY"
+        },
+        {
+          "type": "env_file",
+          "path": "~/Projects/model-arena/.env"
+        }
+      ]
+    },
+    "GOOGLE_GENERATIVE_AI_API_KEY": {
+      "label": "Google Generative AI API Key (alias of GEMINI_API_KEY)",
+      "verify": {
+        "method": "GET",
+        "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
+        "auth": "url"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/Letsbegin/.env.local"
+        }
+      ]
+    },
+    "SHOPIFY_ADMIN_TOKEN": {
+      "label": "Shopify Admin API Access Token",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/shopify/.env"
+        },
+        {
+          "type": "project",
+          "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/.env"
+        },
+        {
+          "type": "project",
+          "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Websites/LosAngelesFabrics/.env"
+        },
+        {
+          "type": "env_file",
+          "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local",
+          "key": "SHOPIFY_ADMIN_ACCESS_TOKEN"
+        },
+        {
+          "type": "env_file",
+          "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local",
+          "key": "SHOPIFY_ADMIN_TOKEN"
+        }
+      ]
+    },
+    "SHOPIFY_API_KEY": {
+      "label": "Shopify API Key",
+      "destinations": []
+    },
+    "RESEND_API_KEY": {
+      "label": "Resend API Key",
+      "verify": {
+        "method": "GET",
+        "url": "https://api.resend.com/domains",
+        "auth": "bearer"
+      },
+      "destinations": []
+    },
+    "STRIPE_RESTRICTED_KEY": {
+      "label": "Stripe Restricted Key (site-factory)",
+      "verify": {
+        "method": "GET",
+        "url": "https://api.stripe.com/v1/balance",
+        "auth": "basic-sk"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/site-factory/.env"
+        }
+      ]
+    },
+    "DPLA_API_KEY": {
+      "label": "Digital Public Library of America API Key",
+      "verify": {
+        "method": "GET",
+        "url": "https://api.dp.la/v2/items?api_key={value}&q=test&page_size=1",
+        "auth": "url"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/wholivedthere/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/claimmyaddress/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/bubbesblock/.env"
+        },
+        {
+          "type": "skill",
+          "name": "la-research-agent"
+        }
+      ]
+    },
+    "GEMINI_API_KEY_RALPH": {
+      "label": "Google Gemini API Key (dedicated to Letsbegin Ralph runner)",
+      "verify": {
+        "method": "GET",
+        "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
+        "auth": "url"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/Letsbegin/.env.local"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/Letsbegin/.env.local"
+        }
+      ]
+    },
+    "ELEVENLABS_API_KEY": {
+      "label": "ElevenLabs Voice Synthesis API Key",
+      "verify": {
+        "method": "GET",
+        "url": "https://api.elevenlabs.io/v1/user",
+        "auth": "header",
+        "headerName": "xi-api-key"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/dear-bubbe-nextjs/.env.local"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/dear-bubbe-nextjs/.env.local"
+        }
+      ]
+    },
+    "NEXT_PUBLIC_GOOGLE_MAPS_API_KEY": {
+      "label": "Google Maps JavaScript API Key (browser-exposed; needs HTTP-referrer restrictions)",
+      "verify": {
+        "method": "GET",
+        "url": "https://maps.googleapis.com/maps/api/streetview/metadata?location=34.05,-118.25&key={value}",
+        "success": "json.status === \"OK\" || json.status === \"ZERO_RESULTS\"",
+        "note": "Validates by hitting Street View Static API metadata endpoint; OK or ZERO_RESULTS both prove the key is enabled and unexpired."
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/stayclaim/.env.local"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/wholivedthere/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/claimmyaddress/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/bubbesblock/.env"
+        },
+        {
+          "type": "remote",
+          "host": "root@45.61.58.125",
+          "path": "/root/public-projects/pastdoor/.env.local"
+        },
+        {
+          "type": "remote",
+          "host": "root@45.61.58.125",
+          "path": "/root/public-projects/pastdoor/.env.production"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/jill-website/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/ventura-bus-3d/.env",
+          "alias": "GOOGLE_MAPS_API_KEY"
+        }
+      ]
+    },
+    "LINKEDIN_CLIENT_ID": {
+      "label": "LinkedIn OAuth Client ID — \"For Claude - 5-6-26\" app, bound to Designer Wallcoverings Page",
+      "_note": "No verify endpoint — LinkedIn requires the ID+SECRET pair to validate, and the CLI verifies one key at a time. Manual probe via POST /oauth/v2/accessToken with a fake code expects 'invalid_request: authorization code not found' = creds OK.",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "remote",
+          "host": "root@45.61.58.125",
+          "path": "/root/Projects/NationalPaperHangers/.env"
+        }
+      ]
+    },
+    "LINKEDIN_CLIENT_SECRET": {
+      "label": "LinkedIn OAuth Client Secret — \"For Claude - 5-6-26\" app, bound to Designer Wallcoverings Page",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "remote",
+          "host": "root@45.61.58.125",
+          "path": "/root/Projects/NationalPaperHangers/.env"
+        }
+      ]
+    },
+    "GOOGLE_OAUTH_CLIENT_ID": {
+      "label": "Google OAuth Client ID — DW Activation Calendar (shared DW Google Calendar, local :9765)",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/dw-activation-calendar/.env"
+        }
+      ]
+    },
+    "GOOGLE_OAUTH_CLIENT_SECRET": {
+      "label": "Google OAuth Client Secret — DW Activation Calendar (shared DW Google Calendar, local :9765)",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/dw-activation-calendar/.env"
+        }
+      ]
+    },
+    "NPH_GOOGLE_OAUTH_CLIENT_ID": {
+      "label": "Google OAuth Client ID — buyer sign-in on National Paper Hangers",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "remote",
+          "host": "root@45.61.58.125",
+          "path": "/root/Projects/NationalPaperHangers/.env"
+        }
+      ]
+    },
+    "NPH_GOOGLE_OAUTH_CLIENT_SECRET": {
+      "label": "Google OAuth Client Secret — buyer sign-in on National Paper Hangers",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "remote",
+          "host": "root@45.61.58.125",
+          "path": "/root/Projects/NationalPaperHangers/.env"
+        }
+      ]
+    },
+    "GEORGE_AUTH": {
+      "label": "George Gmail Basic Auth (DW microsite leads)",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/1800swallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/1890swallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/1900swallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/1920swallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/1930swallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/1940swallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/1950swallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/1960swallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/1970swallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/1980swallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/agedwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/apartmentwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/architecturalwallcoverings/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/blockprintedwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/contractwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/corkwallcovering/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/embroideredwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/fabricwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/glitterwalls/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/greenwallcoverings/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/handcraftedwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/healthcarewallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/hospitalitywallcoverings/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/hospitalitywallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/hotelwallcoverings/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/jutewallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/linenwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/madagascarwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/metallicwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/micawallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/museumwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/mylarwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/naturalwallcoverings/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/pastelwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/raffiawallcoverings/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/raffiawalls/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/recycledwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/restaurantwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/restorationwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/retrowalls/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/saloonwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/screenprintedwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/selfadhesivewallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/silkwallcoverings/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/silkwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/silverleafwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/stringwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/suedewallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/textilewallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/vinylwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/wallpapersback/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/wallsandfabrics/.env"
+        }
+      ]
+    },
+    "CLOUDFLARE_PAGES_TOKEN": {
+      "label": "Cloudflare Pages API Token",
+      "verify": {
+        "method": "GET",
+        "url": "https://api.cloudflare.com/client/v4/user/tokens/verify",
+        "auth": "bearer"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/coming-soon-template/.env"
+        }
+      ]
+    },
+    "SHOPIFY_THEME_TOKEN": {
+      "label": "Shopify full-access theme/files token (read_themes+files; scrubbed from DW-Agents JS 2026-06-25)",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/.env"
+        },
+        {
+          "type": "env_file",
+          "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Agents/dw-agents/.env"
+        },
+        {
+          "type": "env_file",
+          "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Agents/dw-agents/agent-task-orchestrator/.env"
+        }
+      ]
+    },
+    "SLACK_APP_ID": {
+      "label": "Slack app \"Claude Access to Slack\" — App ID (A0BDER23QRK). Not secret but registered for completeness.",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/claude-slack/.env"
+        }
+      ]
+    },
+    "SLACK_CLIENT_ID": {
+      "label": "Slack app Client ID — used with Client Secret in oauth.v2.access requests.",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/claude-slack/.env"
+        }
+      ]
+    },
+    "SLACK_CLIENT_SECRET": {
+      "label": "Slack app Client Secret — OAuth token exchange (oauth.v2.access). NOT the bot token.",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/claude-slack/.env"
+        }
+      ]
+    },
+    "SLACK_SIGNING_SECRET": {
+      "label": "Slack app Signing Secret — verifies inbound request signatures from Slack (events/interactivity).",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/claude-slack/.env"
+        }
+      ]
+    },
+    "SLACK_VERIFICATION_TOKEN": {
+      "label": "Slack DEPRECATED verification token — legacy request verification. Prefer SLACK_SIGNING_SECRET.",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/claude-slack/.env"
+        }
+      ]
+    },
+    "SLACK_APP_TOKEN": {
+      "label": "Slack app-level token (xapp-1-…) for Socket Mode — connections:write. Routes events over WebSocket. NOT the bot token (xoxb-).",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/claude-slack/.env"
+        }
+      ]
+    },
+    "CENSUS_API_KEY": {
+      "label": "US Census Bureau Data API key — demographics fetcher for commercialrealestate (ACS5 by ZCTA). NOTE: Census API returns 302-redirect on a valid data query so the secrets verifier cannot probe it; verify manually via an ACS5 curl.",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/commercialrealestate/.env"
+        }
+      ]
+    },
+    "POSTIZ_API_KEY": {
+      "label": "Postiz public API key (raw Authorization header) — DW marketing slideshow engine (post/integrations) + Postiz MCP",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/dw-slideshow-gen/.env"
+        }
+      ]
+    },
+    "X_API_KEY": {
+      "label": "X (Twitter) API v2 — Consumer/API key (app auth). Pairs with X_API_SECRET to mint app-only bearers.",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/.claude/skills/kartiseira/.env"
+        }
+      ]
+    },
+    "X_API_SECRET": {
+      "label": "X (Twitter) API v2 — Consumer/API secret. With X_API_KEY mints app-only bearer via oauth2/token.",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/.claude/skills/kartiseira/.env"
+        }
+      ]
+    },
+    "X_BEARER_TOKEN": {
+      "label": "X (Twitter) API v2 — app-only Bearer token (use RAW/as-issued; contains %-encoded chars).",
+      "verify": {
+        "method": "GET",
+        "url": "https://api.twitter.com/2/tweets?ids=20",
+        "auth": "bearer",
+        "bodyMustContain": "data"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/.claude/skills/kartiseira/.env"
+        }
+      ]
+    },
+    "MAGIC_API_KEY": {
+      "label": "21st.dev Magic (Four Horsemen) API Key",
+      "destinations": [
+        {
+          "type": "mcp",
+          "server": "magic",
+          "key": "API_KEY"
+        }
+      ]
+    },
+    "ADOBE_CLIENT_ID": {
+      "label": "Adobe Firefly Services / Photoshop API client id (model-arena photoshop design tool)",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/model-arena/.env"
+        }
+      ]
+    },
+    "ADOBE_CLIENT_SECRET": {
+      "label": "Adobe Firefly Services / Photoshop API client secret (model-arena photoshop design tool)",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/model-arena/.env"
+        }
+      ]
+    },
+    "FIGMA_TOKEN": {
+      "label": "Figma personal access token, read-only scopes (model-arena figma design tool + hyperframes figma imports)",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/model-arena/.env"
+        }
+      ]
+    }
+  },
+  "leak_patterns": [
+    {
+      "name": "stripe-live-secret",
+      "regex": "sk_live_[A-Za-z0-9]{20,}"
+    },
+    {
+      "name": "purelymail-token",
+      "regex": "PURELYMAIL_API_TOKEN\\s*=\\s*[A-Za-z0-9_-]{20,}"
+    },
+    {
+      "name": "stripe-test-secret",
+      "regex": "sk_test_[A-Za-z0-9]{20,}"
+    },
+    {
+      "name": "stripe-publishable",
+      "regex": "pk_live_[A-Za-z0-9]{20,}"
+    },
+    {
+      "name": "browserbase",
+      "regex": "bb_live_[A-Za-z0-9]+"
+    },
+    {
+      "name": "google-api-key",
+      "regex": "AIza[0-9A-Za-z_-]{35}"
+    },
+    {
+      "name": "google-oauth-access",
+      "regex": "ya29\\.[A-Za-z0-9_-]{20,}"
+    },
+    {
+      "name": "github-pat",
+      "regex": "ghp_[A-Za-z0-9]{36}"
+    },
+    {
+      "name": "github-fine-grained",
+      "regex": "github_pat_[A-Za-z0-9_]{60,}"
+    },
+    {
+      "name": "slack-bot",
+      "regex": "xox[baprs]-[A-Za-z0-9-]{10,}"
+    },
+    {
+      "name": "openai-key",
+      "regex": "sk-[A-Za-z0-9]{40,}"
+    },
+    {
+      "name": "anthropic-key",
+      "regex": "sk-ant-[A-Za-z0-9_-]{50,}"
+    },
+    {
+      "name": "cf-token-40hex",
+      "regex": "(?:cloudflare|cf_token|dns_cloudflare_api_token)[^A-Za-z0-9]+([A-Za-z0-9_-]{40})"
+    }
+  ],
+  "CLOUDFLARE_ACCOUNT_ID": [
+    "/Users/macstudio3/.claude/skills/domain-check/.env",
+    "/Users/macstudio3/.claude/skills/domain-dns-setup/.env",
+    "/Users/macstudio3/.claude/skills/domain-email-setup/.env",
+    "/Users/macstudio3/.claude/skills/domain-full-setup/.env",
+    "/Users/macstudio3/.claude/skills/domain-register/.env",
+    "/Users/macstudio3/.claude/skills/domain-setup/.env",
+    "/Users/macstudio3/.claude/skills/setup-domains/.env"
+  ],
+  "CLOUDFLARE_API_TOKEN": [
+    "/Users/macstudio3/Projects/all-designerwallcoverings/.env",
+    "/Users/macstudio3/.claude/skills/cloudflare-manager/.env",
+    "/Users/macstudio3/.claude/skills/domain-dns-setup/.env",
+    "/Users/macstudio3/.claude/skills/domain-full-setup/.env",
+    "/Users/macstudio3/.claude/skills/domain-setup/.env",
+    "/Users/macstudio3/.claude/skills/setup-domains/.env"
+  ],
+  "SMB_BUILDER_ADMIN_TOKEN": {
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "/Users/macstudio3/Projects/small-business-builder/.env",
+        "key": "ADMIN_TOKEN"
+      }
+    ]
+  },
+  "SHOPIFY_ORDERS_TOKEN": {
+    "label": "Shopify Admin token (orders+products scope, weekend-report1-1 Partner app)",
+    "destinations": [
+      {
+        "type": "skill",
+        "name": "weekend-csv-products"
+      }
+    ]
+  },
+  "SPOONFLOWER_EMAIL": {
+    "env_files": [
+      "/Users/macstudio3/Projects/resize-it/.env",
+      "/Users/macstudio3/Projects/wallco-ai/.env"
+    ]
+  },
+  "SPOONFLOWER_PASSWORD": {
+    "env_files": [
+      "/Users/macstudio3/Projects/resize-it/.env",
+      "/Users/macstudio3/Projects/wallco-ai/.env"
+    ]
+  },
+  "GOOGLE_DRIVE_CLIENT_ID": {
+    "description": "Google Drive OAuth Client ID — TSD photo-import-cli desktop app",
+    "destinations": [
+      {
+        "type": "env-file",
+        "path": "/Users/macstudio3/Projects/thesetdecorator/.env"
+      }
+    ]
+  },
+  "GOOGLE_DRIVE_CLIENT_SECRET": {
+    "description": "Google Drive OAuth Client Secret — TSD photo-import-cli",
+    "destinations": [
+      {
+        "type": "env-file",
+        "path": "/Users/macstudio3/Projects/thesetdecorator/.env"
+      }
+    ]
+  },
+  "GOOGLE_DRIVE_REFRESH_TOKEN": {
+    "description": "Google Drive OAuth refresh token — read-only scope, owned by steveabramsdesigns@gmail.com",
+    "destinations": [
+      {
+        "type": "env-file",
+        "path": "/Users/macstudio3/Projects/thesetdecorator/.env"
+      }
+    ]
+  },
+  "OPENAI_API_KEY": {
+    "label": "OPENAI_API_KEY",
+    "destinations": [
+      "/Users/macstudio3/Projects/holdforme/.env"
+    ]
+  },
+  "ELEVENLABS_API_KEY": {
+    "label": "ELEVENLABS_API_KEY",
+    "destinations": [
+      "/Users/macstudio3/Projects/holdforme/.env"
+    ]
+  },
+  "TWILIO_ACCOUNT_SID": {
+    "label": "TWILIO_ACCOUNT_SID",
+    "destinations": [
+      "/Users/macstudio3/Projects/holdforme/.env"
+    ]
+  },
+  "TWILIO_AUTH_TOKEN": {
+    "label": "TWILIO_AUTH_TOKEN",
+    "destinations": [
+      "/Users/macstudio3/Projects/holdforme/.env"
+    ]
+  },
+  "TWILIO_PHONE_NUMBER": {
+    "label": "TWILIO_PHONE_NUMBER",
+    "destinations": [
+      "/Users/macstudio3/Projects/holdforme/.env"
+    ]
+  },
+  "TMDB_API_KEY": {
+    "label": "TMDB v3 API key — asseeninmovies Phase B drain (6.46M-stub queue)",
+    "verify": {
+      "method": "GET",
+      "url": "https://api.themoviedb.org/3/authentication?api_key=__VALUE__",
+      "auth": "querystring",
+      "expect": "success"
+    },
+    "destinations": [
+      "/Users/macstudio3/Projects/asseeninmovies/.env"
+    ]
+  },
+  "TMDB_READ_ACCESS_TOKEN": {
+    "label": "TMDB v4 read-access token (bearer) — alt to v3 api_key",
+    "verify": {
+      "method": "GET",
+      "url": "https://api.themoviedb.org/3/authentication",
+      "auth": "bearer",
+      "expect": "success"
+    },
+    "destinations": [
+      "/Users/macstudio3/Projects/asseeninmovies/.env"
+    ]
+  },
+  "VAPI_API_KEY": {
+    "label": "VAPI_API_KEY",
+    "destinations": [
+      "/Users/macstudio3/Projects/holdforme/.env",
+      "remote:kamatera:/root/public-projects/butlr/.env"
+    ]
+  },
+  "VAPI_PUBLIC_KEY": {
+    "label": "VAPI_PUBLIC_KEY",
+    "destinations": [
+      "/Users/macstudio3/Projects/holdforme/.env",
+      "remote:kamatera:/root/public-projects/butlr/.env"
+    ]
+  },
+  "AYRSHARE_API_KEY": {
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+        "key": "AYRSHARE_API_KEY"
+      }
+    ]
+  },
+  "META_ACCESS_TOKEN": {
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+        "key": "META_ACCESS_TOKEN"
+      }
+    ]
+  },
+  "META_IG_USER_ID": {
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+        "key": "META_IG_USER_ID"
+      }
+    ]
+  },
+  "META_FB_PAGE_ID": {
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+        "key": "META_FB_PAGE_ID"
+      }
+    ]
+  },
+  "SHOPIFY_DRAFT_TOKEN": {
+    "label": "Shopify Admin token (full access incl. write_draft_orders) — DW mural PDP custom-size checkout",
+    "destinations": [
+      {
+        "type": "project",
+        "path": "/Users/macstudio3/Projects/designerwallcoverings/.env"
+      }
+    ]
+  },
+  "SHOPIFY_STORE_DOMAIN": {
+    "label": "Shopify store domain for DW vendor microsites Memo-Sample checkout",
+    "destinations": [
+      {
+        "type": "project",
+        "path": "~/Projects/dw-vendor-microsites/.env"
+      },
+      {
+        "type": "project",
+        "host": "45.61.58.125",
+        "user": "root",
+        "path": "/root/Projects/dw-vendor-microsites/.env"
+      }
+    ]
+  },
+  "SHOPIFY_SAMPLE_VARIANT_ID": {
+    "label": "Shopify Memo Sample variant id (DW vendor microsites sample fee $4.25)",
+    "destinations": [
+      {
+        "type": "project",
+        "path": "~/Projects/dw-vendor-microsites/.env"
+      },
+      {
+        "type": "project",
+        "host": "45.61.58.125",
+        "user": "root",
+        "path": "/root/Projects/dw-vendor-microsites/.env"
+      }
+    ]
+  },
+  "SHOPIFY_STOREFRONT_TOKEN": {
+    "label": "Shopify Storefront API token for DW vendor microsites (unauthenticated checkout)",
+    "destinations": [
+      {
+        "type": "project",
+        "path": "~/Projects/dw-vendor-microsites/.env"
+      },
+      {
+        "type": "project",
+        "host": "45.61.58.125",
+        "user": "root",
+        "path": "/root/Projects/dw-vendor-microsites/.env"
+      }
+    ]
+  },
+  "TWOCAPTCHA_API_KEY": {
+    "destinations": [
+      {
+        "type": "skill",
+        "name": "2captcha"
+      },
+      {
+        "type": "skill",
+        "name": "browserbase"
+      }
+    ]
+  },
+  "DEDAR_LOGIN_URL": {
+    "label": "Dedar trade-portal login_url (pulled from Kamatera dw-price-stock 2026-07-06, supervised outbound-tier)",
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "~/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local"
+      },
+      {
+        "type": "env_file",
+        "path": "~/Projects/secrets-manager/.env"
+      }
+    ]
+  },
+  "DEDAR_USERNAME": {
+    "label": "Dedar trade-portal username (pulled from Kamatera dw-price-stock 2026-07-06, supervised outbound-tier)",
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "~/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local"
+      },
+      {
+        "type": "env_file",
+        "path": "~/Projects/secrets-manager/.env"
+      }
+    ]
+  },
+  "DEDAR_PASSWORD": {
+    "label": "Dedar trade-portal password (pulled from Kamatera dw-price-stock 2026-07-06, supervised outbound-tier)",
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "~/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local"
+      },
+      {
+        "type": "env_file",
+        "path": "~/Projects/secrets-manager/.env"
+      }
+    ]
+  },
+  "YORKWALL_USER": {
+    "env_files": [
+      "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env",
+      "/Users/macstudio3/.claude/skills/brewster-scraper-manager/.env"
+    ]
+  },
+  "YORKWALL_PASS": {
+    "env_files": [
+      "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env",
+      "/Users/macstudio3/.claude/skills/brewster-scraper-manager/.env"
+    ]
+  },
+  "GOVAUCTIONS_API_KEY": [
+    "/Users/macstudio3/Projects/govarbitrage/.env"
+  ],
+  "APIFY_TOKEN": [
+    "/Users/macstudio3/Projects/govarbitrage/.env"
+  ],
+  "HEYGEN_API_KEY": [
+    "/Users/macstudio3/.claude/skills/heygen-video/.env",
+    "/Users/macstudio3/.claude/skills/heygen-avatar/.env",
+    "/Users/macstudio3/.claude/skills/heygen-translate/.env"
+  ],
+  "IG_USER_ID": {
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "/Users/macstudio3/Projects/Norma/agents/instagram-agent/.env",
+        "key": "IG_USER_ID"
+      }
+    ]
+  },
+  "TIKTOK_CLIENT_KEY": {
+    "label": "TIKTOK_CLIENT_KEY",
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+        "key": "TIKTOK_CLIENT_KEY"
+      },
+      {
+        "type": "project",
+        "host": "45.61.58.125",
+        "user": "root",
+        "path": "/root/DW-Agents/marketing-command-center/.env"
+      }
+    ]
+  },
+  "TIKTOK_CLIENT_SECRET": {
+    "label": "TIKTOK_CLIENT_SECRET",
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+        "key": "TIKTOK_CLIENT_SECRET"
+      },
+      {
+        "type": "project",
+        "host": "45.61.58.125",
+        "user": "root",
+        "path": "/root/DW-Agents/marketing-command-center/.env"
+      }
+    ]
+  },
+  "THREADS_APP_ID": {
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+        "key": "THREADS_APP_ID"
+      }
+    ]
+  },
+  "THREADS_APP_SECRET": {
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+        "key": "THREADS_APP_SECRET"
+      }
+    ]
+  },
+  "THREADS_ACCESS_TOKEN": {
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+        "key": "THREADS_ACCESS_TOKEN"
+      }
+    ]
+  },
+  "THREADS_USER_ID": {
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+        "key": "THREADS_USER_ID"
+      }
+    ]
+  },
+  "DATAFORSEO_API_KEY": {
+    "label": "DataForSEO API key (base64 of login:api-password) — OpenSEO self-hosted backend for keyword/SERP/backlink/domain tools. Login steve@designerwallcoverings.com.",
+    "destinations": [
+      "/Users/macstudio3/Projects/open-seo/.env.local"
+    ]
+  },
+  "OSBORNE_USERNAME": {
+    "label": "Osborne & Little trade portal (tradenew.osborneandlittle.com) login — also used for Matthew Williamson (O&L-distributed) US pricing",
+    "destinations": [
+      {
+        "type": "skill",
+        "name": "osborne-scraper-manager"
+      }
+    ]
+  },
+  "OSBORNE_PASSWORD": {
+    "label": "Osborne & Little trade portal password",
+    "destinations": [
+      {
+        "type": "skill",
+        "name": "osborne-scraper-manager"
+      }
+    ]
+  },
+  "OPENROUTER_API_KEY": {
+    "label": "OPENROUTER_API_KEY",
+    "destinations": [
+      "/Users/macstudio3/Projects/open-seo/.env.local"
+    ]
+  }
+}
\ No newline at end of file

← 3ec1257 auto-data-snapshot: 2026-08-07T10:09:04 (1 data files) — reg  ·  back to Secrets Manager  ·  auto-data-snapshot: 2026-08-10T09:25:36 (1 data files) — reg 7de1947 →