[object Object]

← back to Secrets Manager

auto-save: 2026-06-26T15:04:14 (2 files) — registry.json routes.json

1679ff209c03a84a1d6eedc55cc88231e3067986 · 2026-06-26 15:04:14 -0700 · Steve Abrams

Files touched

Diff

commit 1679ff209c03a84a1d6eedc55cc88231e3067986
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Fri Jun 26 15:04:14 2026 -0700

    auto-save: 2026-06-26T15:04:14 (2 files) — registry.json routes.json
---
 registry.json |  61 +++++++++++++++++++++++++++++++
 routes.json   | 114 ++++++++++++++++++++++++++++++++++++++++++----------------
 2 files changed, 145 insertions(+), 30 deletions(-)

diff --git a/registry.json b/registry.json
index cf77fe6..5ac0283 100644
--- a/registry.json
+++ b/registry.json
@@ -1071,6 +1071,67 @@
       "written_to": [
         "/Users/stevestudio2/Projects/secrets-manager/.env"
       ]
+    },
+    "SLACK_APP_ID": {
+      "digest": "3QRK:f7aa18ae",
+      "label": "SLACK_APP_ID",
+      "last_updated": "2026-06-26T21:34:50.450Z",
+      "validated": false,
+      "verify_status": null,
+      "written_to": [
+        "/Users/stevestudio2/Projects/secrets-manager/.env"
+      ]
+    },
+    "SLACK_CLIENT_ID": {
+      "digest": "6869:ea8712d4",
+      "label": "SLACK_CLIENT_ID",
+      "last_updated": "2026-06-26T21:34:50.454Z",
+      "validated": false,
+      "verify_status": null,
+      "written_to": [
+        "/Users/stevestudio2/Projects/secrets-manager/.env"
+      ]
+    },
+    "SLACK_CLIENT_SECRET": {
+      "digest": "910d:4585f7f6",
+      "label": "SLACK_CLIENT_SECRET",
+      "last_updated": "2026-06-26T21:34:50.458Z",
+      "validated": false,
+      "verify_status": null,
+      "written_to": [
+        "/Users/stevestudio2/Projects/secrets-manager/.env"
+      ]
+    },
+    "SLACK_SIGNING_SECRET": {
+      "digest": "99cd:8ac3025c",
+      "label": "SLACK_SIGNING_SECRET",
+      "last_updated": "2026-06-26T21:34:50.458Z",
+      "validated": false,
+      "verify_status": null,
+      "written_to": [
+        "/Users/stevestudio2/Projects/secrets-manager/.env"
+      ]
+    },
+    "SLACK_VERIFICATION_TOKEN": {
+      "digest": "nxKI:6563d4f0",
+      "label": "SLACK_VERIFICATION_TOKEN",
+      "last_updated": "2026-06-26T21:34:50.460Z",
+      "validated": false,
+      "verify_status": null,
+      "written_to": [
+        "/Users/stevestudio2/Projects/secrets-manager/.env"
+      ]
+    },
+    "SLACK_APP_TOKEN": {
+      "digest": "c7cf:f3bd1d7e",
+      "label": "Slack app-level token (xapp-1-…) for Socket Mode — connections:write. Routes events over WebSocket. NOT the bot token (xoxb-).",
+      "last_updated": "2026-06-26T21:37:33.209Z",
+      "validated": false,
+      "verify_status": null,
+      "written_to": [
+        "/Users/stevestudio2/Projects/secrets-manager/.env",
+        "/Users/stevestudio2/Projects/claude-slack/.env"
+      ]
     }
   }
 }
\ No newline at end of file
diff --git a/routes.json b/routes.json
index 51aee1e..be7a2e2 100644
--- a/routes.json
+++ b/routes.json
@@ -23,7 +23,7 @@
       ]
     },
     "REPLICATE_API_TOKEN": {
-      "label": "Replicate API Token \u2014 wallco.ai SDXL gen fallback (WALLCO_COMFY_FALLBACK=replicate floor) + animate-museum-posts",
+      "label": "Replicate API Token — wallco.ai SDXL gen fallback (WALLCO_COMFY_FALLBACK=replicate floor) + animate-museum-posts",
       "verify": {
         "method": "GET",
         "url": "https://api.replicate.com/v1/account",
@@ -267,7 +267,7 @@
       ]
     },
     "STRIPE_VCL_WEBHOOK_SECRET": {
-      "label": "Stripe webhook signing secret \u2014 VCL endpoint we_1TUF1Y63uNmiRsMbNr1kLu52",
+      "label": "Stripe webhook signing secret — VCL endpoint we_1TUF1Y63uNmiRsMbNr1kLu52",
       "destinations": [
         {
           "type": "project",
@@ -282,7 +282,7 @@
       ]
     },
     "STRIPE_PRICE_VCL_STARTER_MONTH": {
-      "label": "Stripe Price ID \u2014 VCL Starter $49/mo",
+      "label": "Stripe Price ID — VCL Starter $49/mo",
       "destinations": [
         {
           "type": "project",
@@ -297,7 +297,7 @@
       ]
     },
     "STRIPE_PRICE_VCL_STANDARD_MONTH": {
-      "label": "Stripe Price ID \u2014 VCL Standard $99/mo",
+      "label": "Stripe Price ID — VCL Standard $99/mo",
       "destinations": [
         {
           "type": "project",
@@ -312,7 +312,7 @@
       ]
     },
     "STRIPE_PRICE_VCL_PREMIER_MONTH": {
-      "label": "Stripe Price ID \u2014 VCL Premier $199/mo",
+      "label": "Stripe Price ID — VCL Premier $199/mo",
       "destinations": [
         {
           "type": "project",
@@ -327,7 +327,7 @@
       ]
     },
     "HEYGEN_API_KEY": {
-      "label": "HeyGen API key \u2014 talking-head avatar video render (used by session-debrief skill)",
+      "label": "HeyGen API key — talking-head avatar video render (used by session-debrief skill)",
       "verify": {
         "method": "GET",
         "url": "https://api.heygen.com/v1/voice.list",
@@ -346,7 +346,7 @@
       ]
     },
     "INFO_VENTURACLAW_COM_PASSWORD": {
-      "label": "Purelymail mailbox password \u2014 info@venturaclaw.com (used by Ventura Claw Leads + the existing ventura-claw app)",
+      "label": "Purelymail mailbox password — info@venturaclaw.com (used by Ventura Claw Leads + the existing ventura-claw app)",
       "destinations": [
         {
           "type": "project",
@@ -371,7 +371,7 @@
       ]
     },
     "INFO_NATIONALPAPERHANGERS_COM_PASSWORD": {
-      "label": "Purelymail mailbox password \u2014 info@nationalpaperhangers.com",
+      "label": "Purelymail mailbox password — info@nationalpaperhangers.com",
       "destinations": [
         {
           "type": "project",
@@ -386,7 +386,7 @@
       ]
     },
     "STRIPE_NPH_WEBHOOK_SECRET": {
-      "label": "Stripe Webhook Signing Secret \u2014 NPH endpoint we_1TUDHV63uNmiRsMbRJea7EqU",
+      "label": "Stripe Webhook Signing Secret — NPH endpoint we_1TUDHV63uNmiRsMbRJea7EqU",
       "destinations": [
         {
           "type": "project",
@@ -401,7 +401,7 @@
       ]
     },
     "STRIPE_PRICE_PRO_MONTH": {
-      "label": "Stripe Price ID \u2014 NPH Pro $39/mo",
+      "label": "Stripe Price ID — NPH Pro $39/mo",
       "destinations": [
         {
           "type": "project",
@@ -416,7 +416,7 @@
       ]
     },
     "STRIPE_PRICE_PRO_YEAR": {
-      "label": "Stripe Price ID \u2014 NPH Pro $399/yr",
+      "label": "Stripe Price ID — NPH Pro $399/yr",
       "destinations": [
         {
           "type": "project",
@@ -431,7 +431,7 @@
       ]
     },
     "STRIPE_PRICE_SIGNATURE_MONTH": {
-      "label": "Stripe Price ID \u2014 NPH Signature $149/mo",
+      "label": "Stripe Price ID — NPH Signature $149/mo",
       "destinations": [
         {
           "type": "project",
@@ -446,7 +446,7 @@
       ]
     },
     "STRIPE_PRICE_SIGNATURE_YEAR": {
-      "label": "Stripe Price ID \u2014 NPH Signature $1500/yr",
+      "label": "Stripe Price ID — NPH Signature $1500/yr",
       "destinations": [
         {
           "type": "project",
@@ -461,7 +461,7 @@
       ]
     },
     "STRIPE_PRICE_ENTERPRISE_MONTH": {
-      "label": "Stripe Price ID \u2014 NPH Enterprise $399/mo",
+      "label": "Stripe Price ID — NPH Enterprise $399/mo",
       "destinations": [
         {
           "type": "project",
@@ -648,7 +648,7 @@
       ]
     },
     "GEMINI_API_KEY_DW_ENRICH": {
-      "label": "Google Gemini API Key \u2014 DEDICATED to DW image-enrichment / vendor-command-center. Created 2026-06-23 by vp-security as the rotation target for the leaked orphan keys (last-4 ejMo and S2ic, never registry-managed). Pre-staged EMPTY so that the moment Steve issues a fresh key at Google AI Studio, `add GEMINI_API_KEY_DW_ENRICH <new-key>` verifies it against Gemini and fans it (remapped to the bare var GEMINI_API_KEY) to the consumers below. Distinct from the master GEMINI_API_KEY (Letsbegin/Bertha/skills) and GEMINI_API_KEY_WALLCO (k720). If Steve prefers enrichment to ride the master key instead, he can skip this alias and update GEMINI_API_KEY directly \u2014 the env-ified consumers read GEMINI_API_KEY first.",
+      "label": "Google Gemini API Key — DEDICATED to DW image-enrichment / vendor-command-center. Created 2026-06-23 by vp-security as the rotation target for the leaked orphan keys (last-4 ejMo and S2ic, never registry-managed). Pre-staged EMPTY so that the moment Steve issues a fresh key at Google AI Studio, `add GEMINI_API_KEY_DW_ENRICH <new-key>` verifies it against Gemini and fans it (remapped to the bare var GEMINI_API_KEY) to the consumers below. Distinct from the master GEMINI_API_KEY (Letsbegin/Bertha/skills) and GEMINI_API_KEY_WALLCO (k720). If Steve prefers enrichment to ride the master key instead, he can skip this alias and update GEMINI_API_KEY directly — the env-ified consumers read GEMINI_API_KEY first.",
       "verify": {
         "method": "GET",
         "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
@@ -671,7 +671,7 @@
       ]
     },
     "GEMINI_API_KEY_WALLCO": {
-      "label": "Google Gemini API Key \u2014 DEDICATED to wallco.ai gen pipeline (nano-banana / gemini-2.5-flash-image fallback). Distinct from the master GEMINI_API_KEY (Letsbegin/Bertha/skills). Same dedicated-alias pattern as GEMINI_API_KEY_RALPH.",
+      "label": "Google Gemini API Key — DEDICATED to wallco.ai gen pipeline (nano-banana / gemini-2.5-flash-image fallback). Distinct from the master GEMINI_API_KEY (Letsbegin/Bertha/skills). Same dedicated-alias pattern as GEMINI_API_KEY_RALPH.",
       "verify": {
         "method": "GET",
         "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
@@ -875,8 +875,8 @@
       ]
     },
     "LINKEDIN_CLIENT_ID": {
-      "label": "LinkedIn OAuth Client ID \u2014 \"For Claude - 5-6-26\" app, bound to Designer Wallcoverings Page",
-      "_note": "No verify endpoint \u2014 LinkedIn requires the ID+SECRET pair to validate, and the CLI verifies one key at a time. Manual probe via POST /oauth/v2/accessToken with a fake code expects 'invalid_request: authorization code not found' = creds OK.",
+      "label": "LinkedIn OAuth Client ID — \"For Claude - 5-6-26\" app, bound to Designer Wallcoverings Page",
+      "_note": "No verify endpoint — LinkedIn requires the ID+SECRET pair to validate, and the CLI verifies one key at a time. Manual probe via POST /oauth/v2/accessToken with a fake code expects 'invalid_request: authorization code not found' = creds OK.",
       "destinations": [
         {
           "type": "project",
@@ -890,7 +890,7 @@
       ]
     },
     "LINKEDIN_CLIENT_SECRET": {
-      "label": "LinkedIn OAuth Client Secret \u2014 \"For Claude - 5-6-26\" app, bound to Designer Wallcoverings Page",
+      "label": "LinkedIn OAuth Client Secret — \"For Claude - 5-6-26\" app, bound to Designer Wallcoverings Page",
       "destinations": [
         {
           "type": "project",
@@ -904,7 +904,7 @@
       ]
     },
     "GOOGLE_OAUTH_CLIENT_ID": {
-      "label": "Google OAuth Client ID \u2014 DW Activation Calendar (shared DW Google Calendar, local :9765)",
+      "label": "Google OAuth Client ID — DW Activation Calendar (shared DW Google Calendar, local :9765)",
       "destinations": [
         {
           "type": "project",
@@ -913,7 +913,7 @@
       ]
     },
     "GOOGLE_OAUTH_CLIENT_SECRET": {
-      "label": "Google OAuth Client Secret \u2014 DW Activation Calendar (shared DW Google Calendar, local :9765)",
+      "label": "Google OAuth Client Secret — DW Activation Calendar (shared DW Google Calendar, local :9765)",
       "destinations": [
         {
           "type": "project",
@@ -922,7 +922,7 @@
       ]
     },
     "NPH_GOOGLE_OAUTH_CLIENT_ID": {
-      "label": "Google OAuth Client ID \u2014 buyer sign-in on National Paper Hangers",
+      "label": "Google OAuth Client ID — buyer sign-in on National Paper Hangers",
       "destinations": [
         {
           "type": "project",
@@ -936,7 +936,7 @@
       ]
     },
     "NPH_GOOGLE_OAUTH_CLIENT_SECRET": {
-      "label": "Google OAuth Client Secret \u2014 buyer sign-in on National Paper Hangers",
+      "label": "Google OAuth Client Secret — buyer sign-in on National Paper Hangers",
       "destinations": [
         {
           "type": "project",
@@ -1192,6 +1192,60 @@
           "path": "/Users/stevestudio2/Projects/Designer-Wallcoverings/DW-Agents/dw-agents/agent-task-orchestrator/.env"
         }
       ]
+    },
+    "SLACK_APP_ID": {
+      "label": "Slack app \"Claude Access to Slack\" — App ID (A0BDER23QRK). Not secret but registered for completeness.",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/claude-slack/.env"
+        }
+      ]
+    },
+    "SLACK_CLIENT_ID": {
+      "label": "Slack app Client ID — used with Client Secret in oauth.v2.access requests.",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/claude-slack/.env"
+        }
+      ]
+    },
+    "SLACK_CLIENT_SECRET": {
+      "label": "Slack app Client Secret — OAuth token exchange (oauth.v2.access). NOT the bot token.",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/claude-slack/.env"
+        }
+      ]
+    },
+    "SLACK_SIGNING_SECRET": {
+      "label": "Slack app Signing Secret — verifies inbound request signatures from Slack (events/interactivity).",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/claude-slack/.env"
+        }
+      ]
+    },
+    "SLACK_VERIFICATION_TOKEN": {
+      "label": "Slack DEPRECATED verification token — legacy request verification. Prefer SLACK_SIGNING_SECRET.",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/claude-slack/.env"
+        }
+      ]
+    },
+    "SLACK_APP_TOKEN": {
+      "label": "Slack app-level token (xapp-1-…) for Socket Mode — connections:write. Routes events over WebSocket. NOT the bot token (xoxb-).",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/claude-slack/.env"
+        }
+      ]
     }
   },
   "leak_patterns": [
@@ -1288,7 +1342,7 @@
     ]
   },
   "GOOGLE_DRIVE_CLIENT_ID": {
-    "description": "Google Drive OAuth Client ID \u2014 TSD photo-import-cli desktop app",
+    "description": "Google Drive OAuth Client ID — TSD photo-import-cli desktop app",
     "destinations": [
       {
         "type": "env-file",
@@ -1297,7 +1351,7 @@
     ]
   },
   "GOOGLE_DRIVE_CLIENT_SECRET": {
-    "description": "Google Drive OAuth Client Secret \u2014 TSD photo-import-cli",
+    "description": "Google Drive OAuth Client Secret — TSD photo-import-cli",
     "destinations": [
       {
         "type": "env-file",
@@ -1306,7 +1360,7 @@
     ]
   },
   "GOOGLE_DRIVE_REFRESH_TOKEN": {
-    "description": "Google Drive OAuth refresh token \u2014 read-only scope, owned by steveabramsdesigns@gmail.com",
+    "description": "Google Drive OAuth refresh token — read-only scope, owned by steveabramsdesigns@gmail.com",
     "destinations": [
       {
         "type": "env-file",
@@ -1345,7 +1399,7 @@
     ]
   },
   "TMDB_API_KEY": {
-    "label": "TMDB v3 API key \u2014 asseeninmovies Phase B drain (6.46M-stub queue)",
+    "label": "TMDB v3 API key — asseeninmovies Phase B drain (6.46M-stub queue)",
     "verify": {
       "method": "GET",
       "url": "https://api.themoviedb.org/3/authentication?api_key=__VALUE__",
@@ -1357,7 +1411,7 @@
     ]
   },
   "TMDB_READ_ACCESS_TOKEN": {
-    "label": "TMDB v4 read-access token (bearer) \u2014 alt to v3 api_key",
+    "label": "TMDB v4 read-access token (bearer) — alt to v3 api_key",
     "verify": {
       "method": "GET",
       "url": "https://api.themoviedb.org/3/authentication",
@@ -1419,7 +1473,7 @@
     ]
   },
   "SHOPIFY_DRAFT_TOKEN": {
-    "label": "Shopify Admin token (full access incl. write_draft_orders) \u2014 DW mural PDP custom-size checkout",
+    "label": "Shopify Admin token (full access incl. write_draft_orders) — DW mural PDP custom-size checkout",
     "destinations": [
       {
         "type": "project",
@@ -1427,4 +1481,4 @@
       }
     ]
   }
-}
\ No newline at end of file
+}

← bac2bac auto-save: 2026-06-26T11:45:25 (1 files) — registry.json  ·  back to Secrets Manager  ·  auto-save: 2026-06-27T01:06:38 (2 files) — registry.json rou 307a2a6 →