[object Object]

← back to Secrets Manager

auto-save: 2026-07-27T09:19:22 (2 files) — registry.json routes.json

9c94c8a5581eb795ee3b20788b16f57577716ee2 · 2026-07-27 09:19:23 -0700 · Steve Abrams

Files touched

Diff

commit 9c94c8a5581eb795ee3b20788b16f57577716ee2
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Mon Jul 27 09:19:23 2026 -0700

    auto-save: 2026-07-27T09:19:22 (2 files) — registry.json routes.json
---
 registry.json |   10 +
 routes.json   | 3634 +++++++++++++++++++++++++++++----------------------------
 2 files changed, 1830 insertions(+), 1814 deletions(-)

diff --git a/registry.json b/registry.json
index b9059ae..8b951d8 100644
--- a/registry.json
+++ b/registry.json
@@ -1658,6 +1658,16 @@
       "written_to": [
         "/Users/macstudio3/Projects/secrets-manager/.env"
       ]
+    },
+    "OPENROUTER_API_KEY": {
+      "digest": "7a96:7fe51126",
+      "label": "OPENROUTER_API_KEY",
+      "last_updated": "2026-07-27T16:00:26.772Z",
+      "validated": false,
+      "verify_status": null,
+      "written_to": [
+        "/Users/macstudio3/Projects/secrets-manager/.env"
+      ]
     }
   }
 }
\ No newline at end of file
diff --git a/routes.json b/routes.json
index 124caab..c329a6c 100644
--- a/routes.json
+++ b/routes.json
@@ -1,1826 +1,1832 @@
 {
- "_comment": "Per-secret routing table. Each entry: master + extra destinations. Master is implicit at ~/Projects/secrets-manager/.env. (Desktop mirror ~/Desktop/site-factory.env retired 2026-06-11, DTD verdict A.)",
- "services": {
-  "PG_DW_ADMIN_PASSWORD": {
-   "label": "Postgres dw_admin role password (local Mac2 + prod via prestage 3b). DSN_REWRITE rewrites DATABASE_URL pw in each env_file dest.",
-   "destinations": [
-    {
-     "type": "env_file",
-     "path": "~/Projects/Norma/.env.local"
-    },
-    {
-     "type": "env_file",
-     "path": "~/Projects/StudentLoanTracker/.env.local"
-    },
-    {
-     "type": "env_file",
-     "path": "~/Projects/ClawCoder/.env.local"
-    },
-    {
-     "type": "env_file",
-     "path": "~/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local"
-    }
-   ]
+  "_comment": "Per-secret routing table. Each entry: master + extra destinations. Master is implicit at ~/Projects/secrets-manager/.env. (Desktop mirror ~/Desktop/site-factory.env retired 2026-06-11, DTD verdict A.)",
+  "services": {
+    "PG_DW_ADMIN_PASSWORD": {
+      "label": "Postgres dw_admin role password (local Mac2 + prod via prestage 3b). DSN_REWRITE rewrites DATABASE_URL pw in each env_file dest.",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/Norma/.env.local"
+        },
+        {
+          "type": "env_file",
+          "path": "~/Projects/StudentLoanTracker/.env.local"
+        },
+        {
+          "type": "env_file",
+          "path": "~/Projects/ClawCoder/.env.local"
+        },
+        {
+          "type": "env_file",
+          "path": "~/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local"
+        }
+      ]
+    },
+    "REPLICATE_API_TOKEN": {
+      "label": "Replicate API Token — wallco.ai SDXL gen fallback (WALLCO_COMFY_FALLBACK=replicate floor) + animate-museum-posts",
+      "verify": {
+        "method": "GET",
+        "url": "https://api.replicate.com/v1/account",
+        "auth": "bearer"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/wallco-ai/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/animate-museum-posts/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/public-projects/wallco-ai/.env",
+          "_note": "PROD wallco.ai gen pipeline (Replicate SDXL fallback). Verified prod value matches registry digest 560V:70c85c06 (2026-06-21). Remote-fan via cli.js IS automated for this dest (type=project + host); a plain `cli.js sync` will SSH-write it. Do not auto-rotate this on a live app without surfacing."
+        }
+      ]
+    },
+    "GOOGLE_PLACES_API_KEY": {
+      "label": "Google Places API Key",
+      "verify": {
+        "method": "GET",
+        "url": "https://maps.googleapis.com/maps/api/place/findplacefromtext/json?input=Tito%27s+Tacos+Culver+City&inputtype=textquery&fields=place_id&key=__VALUE__",
+        "auth": "querystring"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/restaurant-directory/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/professional-directory/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/animals/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/lawyer-directory-builder/.env"
+        }
+      ]
+    },
+    "BRAVE_SEARCH_API_KEY": {
+      "label": "Brave Search API (Web)",
+      "verify": {
+        "method": "GET",
+        "url": "https://api.search.brave.com/res/v1/web/search?q=test&count=1",
+        "auth": "header",
+        "headerName": "X-Subscription-Token"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/_ventura-recon/.env"
+        }
+      ]
+    },
+    "MOONSHOT_API_KEY": {
+      "label": "Moonshot AI / Kimi K2 API Key",
+      "verify": {
+        "method": "GET",
+        "url": "https://api.moonshot.ai/v1/models",
+        "auth": "bearer"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/claude-codex-meeting/.env"
+        },
+        {
+          "type": "skill",
+          "name": "claude-codex"
+        }
+      ]
+    },
+    "CLOUDFLARE_API_TOKEN": {
+      "label": "Cloudflare API Token",
+      "verify": {
+        "method": "GET",
+        "url": "https://api.cloudflare.com/client/v4/user/tokens/verify",
+        "auth": "bearer"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/site-factory/.env"
+        },
+        {
+          "type": "skill",
+          "name": "cloudflare-manager"
+        },
+        {
+          "type": "skill",
+          "name": "setup-domains"
+        },
+        {
+          "type": "skill",
+          "name": "domain-setup"
+        }
+      ]
+    },
+    "STRIPE_SECRET_KEY": {
+      "label": "Stripe Secret Key",
+      "verify": {
+        "method": "GET",
+        "url": "https://api.stripe.com/v1/balance",
+        "auth": "basic-sk"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/site-factory/.env"
+        },
+        {
+          "type": "site_local",
+          "domains": [
+            "wholivedthere.com",
+            "bubbesblock.com",
+            "claimmyaddress.com"
+          ]
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/lawyer-directory-builder/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/professional-directory/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/ventura-claw-leads/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/ventura-claw-leads/.env"
+        }
+      ]
+    },
+    "STRIPE_PUBLISHABLE_KEY": {
+      "label": "Stripe Publishable Key",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/site-factory/.env"
+        },
+        {
+          "type": "site_local",
+          "domains": [
+            "wholivedthere.com",
+            "bubbesblock.com",
+            "claimmyaddress.com"
+          ]
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/lawyer-directory-builder/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/professional-directory/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/ventura-claw-leads/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/ventura-claw-leads/.env"
+        }
+      ]
+    },
+    "STRIPE_WEBHOOK_SECRET": {
+      "label": "Stripe Webhook Signing Secret",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/site-factory/.env"
+        },
+        {
+          "type": "site_local",
+          "domains": [
+            "wholivedthere.com",
+            "bubbesblock.com",
+            "claimmyaddress.com"
+          ]
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/lawyer-directory-builder/.env"
+        }
+      ]
+    },
+    "STRIPE_TIER_WEBHOOK_SECRET": {
+      "label": "Stripe Tier-Subscription Webhook Signing Secret (Counsel & Bar Lawyer Pro $29/mo)",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/lawyer-directory-builder/.env"
+        }
+      ]
+    },
+    "STRIPE_PRICE_LAWYER_PRO_MONTHLY": {
+      "label": "Stripe Price ID (public): Counsel & Bar Lawyer Pro $29/mo recurring",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/lawyer-directory-builder/.env"
+        }
+      ]
+    },
+    "STRIPE_VCL_WEBHOOK_SECRET": {
+      "label": "Stripe webhook signing secret — VCL endpoint we_1TUF1Y63uNmiRsMbNr1kLu52",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/ventura-claw-leads/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/ventura-claw-leads/.env"
+        }
+      ]
+    },
+    "STRIPE_PRICE_VCL_STARTER_MONTH": {
+      "label": "Stripe Price ID — VCL Starter $49/mo",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/ventura-claw-leads/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/ventura-claw-leads/.env"
+        }
+      ]
+    },
+    "STRIPE_PRICE_VCL_STANDARD_MONTH": {
+      "label": "Stripe Price ID — VCL Standard $99/mo",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/ventura-claw-leads/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/ventura-claw-leads/.env"
+        }
+      ]
+    },
+    "STRIPE_PRICE_VCL_PREMIER_MONTH": {
+      "label": "Stripe Price ID — VCL Premier $199/mo",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/ventura-claw-leads/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/ventura-claw-leads/.env"
+        }
+      ]
+    },
+    "HEYGEN_API_KEY": {
+      "label": "HeyGen API key — talking-head avatar video render (used by session-debrief skill)",
+      "verify": {
+        "method": "GET",
+        "url": "https://api.heygen.com/v1/voice.list",
+        "auth": "header",
+        "headerName": "x-api-key"
+      },
+      "destinations": [
+        {
+          "type": "skill",
+          "name": "session-debrief"
+        },
+        {
+          "type": "skill",
+          "name": "reviewed-demo-video"
+        },
+        {
+          "type": "skill",
+          "name": "heygen-video"
+        },
+        {
+          "type": "skill",
+          "name": "heygen-avatar"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/crcp-pitch-video/.env"
+        }
+      ]
+    },
+    "INFO_VENTURACLAW_COM_PASSWORD": {
+      "label": "Purelymail mailbox password — info@venturaclaw.com (used by Ventura Claw Leads + the existing ventura-claw app)",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/ventura-claw-leads/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/ventura-claw-leads/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/ventura-claw/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/ventura-claw/.env"
+        }
+      ]
+    },
+    "INFO_NATIONALPAPERHANGERS_COM_PASSWORD": {
+      "label": "Purelymail mailbox password — info@nationalpaperhangers.com",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/NationalPaperHangers/.env"
+        }
+      ]
+    },
+    "STRIPE_NPH_WEBHOOK_SECRET": {
+      "label": "Stripe Webhook Signing Secret — NPH endpoint we_1TUDHV63uNmiRsMbRJea7EqU",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/NationalPaperHangers/.env"
+        }
+      ]
+    },
+    "STRIPE_PRICE_PRO_MONTH": {
+      "label": "Stripe Price ID — NPH Pro $39/mo",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/NationalPaperHangers/.env"
+        }
+      ]
+    },
+    "STRIPE_PRICE_PRO_YEAR": {
+      "label": "Stripe Price ID — NPH Pro $399/yr",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/NationalPaperHangers/.env"
+        }
+      ]
+    },
+    "STRIPE_PRICE_SIGNATURE_MONTH": {
+      "label": "Stripe Price ID — NPH Signature $149/mo",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/NationalPaperHangers/.env"
+        }
+      ]
+    },
+    "STRIPE_PRICE_SIGNATURE_YEAR": {
+      "label": "Stripe Price ID — NPH Signature $1500/yr",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/NationalPaperHangers/.env"
+        }
+      ]
+    },
+    "STRIPE_PRICE_ENTERPRISE_MONTH": {
+      "label": "Stripe Price ID — NPH Enterprise $399/mo",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/NationalPaperHangers/.env"
+        }
+      ]
+    },
+    "VERCEL_TOKEN": {
+      "label": "Vercel API Token",
+      "verify": {
+        "method": "GET",
+        "url": "https://api.vercel.com/v2/user",
+        "auth": "bearer"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/site-factory/.env"
+        }
+      ]
+    },
+    "PURELYMAIL_API_TOKEN": {
+      "label": "PurelyMail API Token",
+      "verify": {
+        "method": "POST",
+        "url": "https://purelymail.com/api/v0/listDomains",
+        "auth": "header",
+        "headerName": "Purelymail-Api-Token",
+        "body": "{}",
+        "bodyMustContain": "^\\s*\\{\\s*\"type\"\\s*:\\s*\"success\"",
+        "bodyMustNotContain": "\"type\"\\s*:\\s*\"error\""
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/site-factory/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/ventura-corridor/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/purelymail-mcp/.env"
+        },
+        {
+          "type": "mcp",
+          "server": "purelymail",
+          "key": "PURELYMAIL_API_TOKEN"
+        }
+      ]
+    },
+    "GODADDY_API_KEY": {
+      "label": "GoDaddy API Key",
+      "destinations": [
+        {
+          "type": "mcp",
+          "server": "domain-suite",
+          "key": "GODADDY_API_KEY"
+        }
+      ]
+    },
+    "GODADDY_API_SECRET": {
+      "label": "GoDaddy API Secret",
+      "destinations": [
+        {
+          "type": "mcp",
+          "server": "domain-suite",
+          "key": "GODADDY_API_SECRET"
+        }
+      ]
+    },
+    "BROWSERBASE_API_KEY": {
+      "label": "Browserbase API Key",
+      "destinations": [
+        {
+          "type": "skill",
+          "name": "browserbase"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/Designer-Wallcoverings/DW-Websites/abrams-report/.env"
+        },
+        {
+          "type": "project",
+          "path": "/Users/macstudio3/Projects/abrams-report/.env"
+        },
+        {
+          "type": "project",
+          "path": "/Users/macstudio3/Projects/all-designerwallcoverings/.env"
+        }
+      ],
+      "_prod_note": "Kamatera PROD all-designerwallcoverings uses a DEDICATED Browserbase project/key set OUT-OF-BAND (dashboard-created, isolated blast radius + own spend cap). Do NOT re-add the prod all-dw ssh destination here or sync will clobber the dedicated key with the shared fleet key."
+    },
+    "BROWSERBASE_PROJECT_ID": {
+      "label": "Browserbase Project ID",
+      "destinations": [
+        {
+          "type": "skill",
+          "name": "browserbase"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/Designer-Wallcoverings/DW-Websites/abrams-report/.env"
+        },
+        {
+          "type": "project",
+          "path": "/Users/macstudio3/Projects/abrams-report/.env"
+        },
+        {
+          "type": "project",
+          "path": "/Users/macstudio3/Projects/all-designerwallcoverings/.env"
+        }
+      ],
+      "_prod_note": "Kamatera PROD all-designerwallcoverings uses a DEDICATED Browserbase project/key set OUT-OF-BAND (dashboard-created, isolated blast radius + own spend cap). Do NOT re-add the prod all-dw ssh destination here or sync will clobber the dedicated key with the shared fleet key."
+    },
+    "ANTHROPIC_API_KEY": {
+      "label": "Anthropic API Key",
+      "verify": {
+        "method": "POST",
+        "url": "https://api.anthropic.com/v1/messages",
+        "auth": "x-api-key",
+        "body": "{\"model\":\"claude-haiku-4-5\",\"max_tokens\":1,\"messages\":[{\"role\":\"user\",\"content\":\"hi\"}]}"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/Letsbegin/.env.local"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/dear-bubbe-nextjs/.env"
+        }
+      ]
+    },
+    "OPENAI_API_KEY": {
+      "label": "OpenAI API Key",
+      "verify": {
+        "method": "GET",
+        "url": "https://api.openai.com/v1/models",
+        "auth": "bearer"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/dear-bubbe-nextjs/.env.local"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/dear-bubbe-nextjs/.env.local"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/animals/.env"
+        }
+      ]
+    },
+    "GEMINI_API_KEY": {
+      "label": "Google Gemini API Key",
+      "verify": {
+        "method": "GET",
+        "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
+        "auth": "url"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/Letsbegin/.env.local"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/Bertha/kalshi-dash/.env"
+        },
+        {
+          "type": "skill",
+          "name": "ai-analyzer"
+        },
+        {
+          "type": "skill",
+          "name": "enrich-ai-tags"
+        }
+      ]
+    },
+    "GEMINI_API_KEY_DW_ENRICH": {
+      "label": "Google Gemini API Key — DEDICATED to DW image-enrichment / vendor-command-center. Created 2026-06-23 by vp-security as the rotation target for the leaked orphan keys (last-4 ejMo and S2ic, never registry-managed). Pre-staged EMPTY so that the moment Steve issues a fresh key at Google AI Studio, `add GEMINI_API_KEY_DW_ENRICH <new-key>` verifies it against Gemini and fans it (remapped to the bare var GEMINI_API_KEY) to the consumers below. Distinct from the master GEMINI_API_KEY (Letsbegin/Bertha/skills) and GEMINI_API_KEY_WALLCO (k720). If Steve prefers enrichment to ride the master key instead, he can skip this alias and update GEMINI_API_KEY directly — the env-ified consumers read GEMINI_API_KEY first.",
+      "verify": {
+        "method": "GET",
+        "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
+        "auth": "url"
+      },
+      "_note": "The 3 DW vendor-command-center files (logo-cropper.js, website-scorer.js, standardization-worker.js) read process.env.GEMINI_API_KEY (master) with GEMINI_KEY fallback, loaded from /root/.env on Kamatera. The goodquestion-ai/scripts/generate-hero-images.cjs reads process.env.GEMINI_API_KEY from ~/Projects/goodquestion-ai/.env. Each destination remaps this alias to the bare key name GEMINI_API_KEY so the env-ified code picks it up with no further change.",
+      "destinations": [
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/.env",
+          "key": "GEMINI_API_KEY"
+        },
+        {
+          "type": "env_file",
+          "path": "~/Projects/goodquestion-ai/.env",
+          "key": "GEMINI_API_KEY"
+        }
+      ]
+    },
+    "GEMINI_API_KEY_WALLCO": {
+      "label": "Google Gemini API Key — DEDICATED to wallco.ai gen pipeline (nano-banana / gemini-2.5-flash-image fallback). Distinct from the master GEMINI_API_KEY (Letsbegin/Bertha/skills). Same dedicated-alias pattern as GEMINI_API_KEY_RALPH.",
+      "verify": {
+        "method": "GET",
+        "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
+        "auth": "url"
+      },
+      "_note": "The wallco.ai app (local Mac2 AND prod Kamatera) reads the bare var GEMINI_API_KEY in its OWN .env, but that value differs from the master registry GEMINI_API_KEY. To avoid clobbering either consumer, this dedicated alias tracks the wallco-specific value by digest. The fan writes the bare key name GEMINI_API_KEY into the wallco .env files (per-dest key remap), NOT GEMINI_API_KEY_WALLCO. Prod value verified LIVE + matching local 2026-06-21 (k720:4295091b). Remote-fan to prod IS automated via cli.js sync (type=project+host); leave it documented-but-not-fanned unless a rotation is intended.",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/wallco-ai/.env",
+          "key": "GEMINI_API_KEY"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/public-projects/wallco-ai/.env",
+          "key": "GEMINI_API_KEY"
+        },
+        {
+          "type": "env_file",
+          "path": "~/Projects/model-arena/.env"
+        }
+      ]
+    },
+    "GOOGLE_GENERATIVE_AI_API_KEY": {
+      "label": "Google Generative AI API Key (alias of GEMINI_API_KEY)",
+      "verify": {
+        "method": "GET",
+        "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
+        "auth": "url"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/Letsbegin/.env.local"
+        }
+      ]
+    },
+    "SHOPIFY_ADMIN_TOKEN": {
+      "label": "Shopify Admin API Access Token",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/shopify/.env"
+        },
+        {
+          "type": "project",
+          "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/.env"
+        },
+        {
+          "type": "project",
+          "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Websites/LosAngelesFabrics/.env"
+        },
+        {
+          "type": "env_file",
+          "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local",
+          "key": "SHOPIFY_ADMIN_ACCESS_TOKEN"
+        },
+        {
+          "type": "env_file",
+          "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local",
+          "key": "SHOPIFY_ADMIN_TOKEN"
+        }
+      ]
+    },
+    "SHOPIFY_API_KEY": {
+      "label": "Shopify API Key",
+      "destinations": []
+    },
+    "RESEND_API_KEY": {
+      "label": "Resend API Key",
+      "verify": {
+        "method": "GET",
+        "url": "https://api.resend.com/domains",
+        "auth": "bearer"
+      },
+      "destinations": []
+    },
+    "STRIPE_RESTRICTED_KEY": {
+      "label": "Stripe Restricted Key (site-factory)",
+      "verify": {
+        "method": "GET",
+        "url": "https://api.stripe.com/v1/balance",
+        "auth": "basic-sk"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/site-factory/.env"
+        }
+      ]
+    },
+    "DPLA_API_KEY": {
+      "label": "Digital Public Library of America API Key",
+      "verify": {
+        "method": "GET",
+        "url": "https://api.dp.la/v2/items?api_key={value}&q=test&page_size=1",
+        "auth": "url"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/wholivedthere/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/claimmyaddress/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/bubbesblock/.env"
+        },
+        {
+          "type": "skill",
+          "name": "la-research-agent"
+        }
+      ]
+    },
+    "GEMINI_API_KEY_RALPH": {
+      "label": "Google Gemini API Key (dedicated to Letsbegin Ralph runner)",
+      "verify": {
+        "method": "GET",
+        "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
+        "auth": "url"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/Letsbegin/.env.local"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/Letsbegin/.env.local"
+        }
+      ]
+    },
+    "ELEVENLABS_API_KEY": {
+      "label": "ElevenLabs Voice Synthesis API Key",
+      "verify": {
+        "method": "GET",
+        "url": "https://api.elevenlabs.io/v1/user",
+        "auth": "header",
+        "headerName": "xi-api-key"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/dear-bubbe-nextjs/.env.local"
+        },
+        {
+          "type": "project",
+          "host": "45.61.58.125",
+          "user": "root",
+          "path": "/root/Projects/dear-bubbe-nextjs/.env.local"
+        }
+      ]
+    },
+    "NEXT_PUBLIC_GOOGLE_MAPS_API_KEY": {
+      "label": "Google Maps JavaScript API Key (browser-exposed; needs HTTP-referrer restrictions)",
+      "verify": {
+        "method": "GET",
+        "url": "https://maps.googleapis.com/maps/api/streetview/metadata?location=34.05,-118.25&key={value}",
+        "success": "json.status === \"OK\" || json.status === \"ZERO_RESULTS\"",
+        "note": "Validates by hitting Street View Static API metadata endpoint; OK or ZERO_RESULTS both prove the key is enabled and unexpired."
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/stayclaim/.env.local"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/wholivedthere/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/claimmyaddress/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/bubbesblock/.env"
+        },
+        {
+          "type": "remote",
+          "host": "root@45.61.58.125",
+          "path": "/root/public-projects/pastdoor/.env.local"
+        },
+        {
+          "type": "remote",
+          "host": "root@45.61.58.125",
+          "path": "/root/public-projects/pastdoor/.env.production"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/jill-website/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/ventura-bus-3d/.env",
+          "alias": "GOOGLE_MAPS_API_KEY"
+        }
+      ]
+    },
+    "LINKEDIN_CLIENT_ID": {
+      "label": "LinkedIn OAuth Client ID — \"For Claude - 5-6-26\" app, bound to Designer Wallcoverings Page",
+      "_note": "No verify endpoint — LinkedIn requires the ID+SECRET pair to validate, and the CLI verifies one key at a time. Manual probe via POST /oauth/v2/accessToken with a fake code expects 'invalid_request: authorization code not found' = creds OK.",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "remote",
+          "host": "root@45.61.58.125",
+          "path": "/root/Projects/NationalPaperHangers/.env"
+        }
+      ]
+    },
+    "LINKEDIN_CLIENT_SECRET": {
+      "label": "LinkedIn OAuth Client Secret — \"For Claude - 5-6-26\" app, bound to Designer Wallcoverings Page",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "remote",
+          "host": "root@45.61.58.125",
+          "path": "/root/Projects/NationalPaperHangers/.env"
+        }
+      ]
+    },
+    "GOOGLE_OAUTH_CLIENT_ID": {
+      "label": "Google OAuth Client ID — DW Activation Calendar (shared DW Google Calendar, local :9765)",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/dw-activation-calendar/.env"
+        }
+      ]
+    },
+    "GOOGLE_OAUTH_CLIENT_SECRET": {
+      "label": "Google OAuth Client Secret — DW Activation Calendar (shared DW Google Calendar, local :9765)",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/dw-activation-calendar/.env"
+        }
+      ]
+    },
+    "NPH_GOOGLE_OAUTH_CLIENT_ID": {
+      "label": "Google OAuth Client ID — buyer sign-in on National Paper Hangers",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "remote",
+          "host": "root@45.61.58.125",
+          "path": "/root/Projects/NationalPaperHangers/.env"
+        }
+      ]
+    },
+    "NPH_GOOGLE_OAUTH_CLIENT_SECRET": {
+      "label": "Google OAuth Client Secret — buyer sign-in on National Paper Hangers",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/NationalPaperHangers/.env"
+        },
+        {
+          "type": "remote",
+          "host": "root@45.61.58.125",
+          "path": "/root/Projects/NationalPaperHangers/.env"
+        }
+      ]
+    },
+    "GEORGE_AUTH": {
+      "label": "George Gmail Basic Auth (DW microsite leads)",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/1800swallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/1890swallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/1900swallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/1920swallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/1930swallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/1940swallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/1950swallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/1960swallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/1970swallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/1980swallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/agedwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/apartmentwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/architecturalwallcoverings/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/blockprintedwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/contractwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/corkwallcovering/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/embroideredwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/fabricwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/glitterwalls/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/greenwallcoverings/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/handcraftedwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/healthcarewallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/hospitalitywallcoverings/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/hospitalitywallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/hotelwallcoverings/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/jutewallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/linenwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/madagascarwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/metallicwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/micawallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/museumwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/mylarwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/naturalwallcoverings/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/pastelwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/raffiawallcoverings/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/raffiawalls/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/recycledwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/restaurantwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/restorationwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/retrowalls/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/saloonwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/screenprintedwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/selfadhesivewallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/silkwallcoverings/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/silkwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/silverleafwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/stringwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/suedewallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/textilewallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/vinylwallpaper/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/wallpapersback/.env"
+        },
+        {
+          "type": "project",
+          "path": "~/Projects/wallsandfabrics/.env"
+        }
+      ]
+    },
+    "CLOUDFLARE_PAGES_TOKEN": {
+      "label": "Cloudflare Pages API Token",
+      "verify": {
+        "method": "GET",
+        "url": "https://api.cloudflare.com/client/v4/user/tokens/verify",
+        "auth": "bearer"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/coming-soon-template/.env"
+        }
+      ]
+    },
+    "SHOPIFY_THEME_TOKEN": {
+      "label": "Shopify full-access theme/files token (read_themes+files; scrubbed from DW-Agents JS 2026-06-25)",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/.env"
+        },
+        {
+          "type": "env_file",
+          "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Agents/dw-agents/.env"
+        },
+        {
+          "type": "env_file",
+          "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Agents/dw-agents/agent-task-orchestrator/.env"
+        }
+      ]
+    },
+    "SLACK_APP_ID": {
+      "label": "Slack app \"Claude Access to Slack\" — App ID (A0BDER23QRK). Not secret but registered for completeness.",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/claude-slack/.env"
+        }
+      ]
+    },
+    "SLACK_CLIENT_ID": {
+      "label": "Slack app Client ID — used with Client Secret in oauth.v2.access requests.",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/claude-slack/.env"
+        }
+      ]
+    },
+    "SLACK_CLIENT_SECRET": {
+      "label": "Slack app Client Secret — OAuth token exchange (oauth.v2.access). NOT the bot token.",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/claude-slack/.env"
+        }
+      ]
+    },
+    "SLACK_SIGNING_SECRET": {
+      "label": "Slack app Signing Secret — verifies inbound request signatures from Slack (events/interactivity).",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/claude-slack/.env"
+        }
+      ]
+    },
+    "SLACK_VERIFICATION_TOKEN": {
+      "label": "Slack DEPRECATED verification token — legacy request verification. Prefer SLACK_SIGNING_SECRET.",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/claude-slack/.env"
+        }
+      ]
+    },
+    "SLACK_APP_TOKEN": {
+      "label": "Slack app-level token (xapp-1-…) for Socket Mode — connections:write. Routes events over WebSocket. NOT the bot token (xoxb-).",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/claude-slack/.env"
+        }
+      ]
+    },
+    "CENSUS_API_KEY": {
+      "label": "US Census Bureau Data API key — demographics fetcher for commercialrealestate (ACS5 by ZCTA). NOTE: Census API returns 302-redirect on a valid data query so the secrets verifier cannot probe it; verify manually via an ACS5 curl.",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/commercialrealestate/.env"
+        }
+      ]
+    },
+    "POSTIZ_API_KEY": {
+      "label": "Postiz public API key (raw Authorization header) — DW marketing slideshow engine (post/integrations) + Postiz MCP",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/Projects/dw-slideshow-gen/.env"
+        }
+      ]
+    },
+    "X_API_KEY": {
+      "label": "X (Twitter) API v2 — Consumer/API key (app auth). Pairs with X_API_SECRET to mint app-only bearers.",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/.claude/skills/kartiseira/.env"
+        }
+      ]
+    },
+    "X_API_SECRET": {
+      "label": "X (Twitter) API v2 — Consumer/API secret. With X_API_KEY mints app-only bearer via oauth2/token.",
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/.claude/skills/kartiseira/.env"
+        }
+      ]
+    },
+    "X_BEARER_TOKEN": {
+      "label": "X (Twitter) API v2 — app-only Bearer token (use RAW/as-issued; contains %-encoded chars).",
+      "verify": {
+        "method": "GET",
+        "url": "https://api.twitter.com/2/tweets?ids=20",
+        "auth": "bearer",
+        "bodyMustContain": "data"
+      },
+      "destinations": [
+        {
+          "type": "project",
+          "path": "~/.claude/skills/kartiseira/.env"
+        }
+      ]
+    },
+    "MAGIC_API_KEY": {
+      "label": "21st.dev Magic (Four Horsemen) API Key",
+      "destinations": [
+        {
+          "type": "mcp",
+          "server": "magic",
+          "key": "API_KEY"
+        }
+      ]
+    },
+    "ADOBE_CLIENT_ID": {
+      "label": "Adobe Firefly Services / Photoshop API client id (model-arena photoshop design tool)",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/model-arena/.env"
+        }
+      ]
+    },
+    "ADOBE_CLIENT_SECRET": {
+      "label": "Adobe Firefly Services / Photoshop API client secret (model-arena photoshop design tool)",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/model-arena/.env"
+        }
+      ]
+    },
+    "FIGMA_TOKEN": {
+      "label": "Figma personal access token, read-only scopes (model-arena figma design tool + hyperframes figma imports)",
+      "destinations": [
+        {
+          "type": "env_file",
+          "path": "~/Projects/model-arena/.env"
+        }
+      ]
+    }
+  },
+  "leak_patterns": [
+    {
+      "name": "stripe-live-secret",
+      "regex": "sk_live_[A-Za-z0-9]{20,}"
+    },
+    {
+      "name": "purelymail-token",
+      "regex": "PURELYMAIL_API_TOKEN\\s*=\\s*[A-Za-z0-9_-]{20,}"
+    },
+    {
+      "name": "stripe-test-secret",
+      "regex": "sk_test_[A-Za-z0-9]{20,}"
+    },
+    {
+      "name": "stripe-publishable",
+      "regex": "pk_live_[A-Za-z0-9]{20,}"
+    },
+    {
+      "name": "browserbase",
+      "regex": "bb_live_[A-Za-z0-9]+"
+    },
+    {
+      "name": "google-api-key",
+      "regex": "AIza[0-9A-Za-z_-]{35}"
+    },
+    {
+      "name": "google-oauth-access",
+      "regex": "ya29\\.[A-Za-z0-9_-]{20,}"
+    },
+    {
+      "name": "github-pat",
+      "regex": "ghp_[A-Za-z0-9]{36}"
+    },
+    {
+      "name": "github-fine-grained",
+      "regex": "github_pat_[A-Za-z0-9_]{60,}"
+    },
+    {
+      "name": "slack-bot",
+      "regex": "xox[baprs]-[A-Za-z0-9-]{10,}"
+    },
+    {
+      "name": "openai-key",
+      "regex": "sk-[A-Za-z0-9]{40,}"
+    },
+    {
+      "name": "anthropic-key",
+      "regex": "sk-ant-[A-Za-z0-9_-]{50,}"
+    },
+    {
+      "name": "cf-token-40hex",
+      "regex": "(?:cloudflare|cf_token|dns_cloudflare_api_token)[^A-Za-z0-9]+([A-Za-z0-9_-]{40})"
+    }
+  ],
+  "CLOUDFLARE_ACCOUNT_ID": [
+    "/Users/macstudio3/.claude/skills/domain-check/.env",
+    "/Users/macstudio3/.claude/skills/domain-dns-setup/.env",
+    "/Users/macstudio3/.claude/skills/domain-email-setup/.env",
+    "/Users/macstudio3/.claude/skills/domain-full-setup/.env",
+    "/Users/macstudio3/.claude/skills/domain-register/.env",
+    "/Users/macstudio3/.claude/skills/domain-setup/.env",
+    "/Users/macstudio3/.claude/skills/setup-domains/.env"
+  ],
+  "CLOUDFLARE_API_TOKEN": [
+    "/Users/macstudio3/Projects/all-designerwallcoverings/.env",
+    "/Users/macstudio3/.claude/skills/cloudflare-manager/.env",
+    "/Users/macstudio3/.claude/skills/domain-dns-setup/.env",
+    "/Users/macstudio3/.claude/skills/domain-full-setup/.env",
+    "/Users/macstudio3/.claude/skills/domain-setup/.env",
+    "/Users/macstudio3/.claude/skills/setup-domains/.env"
+  ],
+  "SMB_BUILDER_ADMIN_TOKEN": {
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "/Users/macstudio3/Projects/small-business-builder/.env",
+        "key": "ADMIN_TOKEN"
+      }
+    ]
   },
-  "REPLICATE_API_TOKEN": {
-   "label": "Replicate API Token — wallco.ai SDXL gen fallback (WALLCO_COMFY_FALLBACK=replicate floor) + animate-museum-posts",
-   "verify": {
-    "method": "GET",
-    "url": "https://api.replicate.com/v1/account",
-    "auth": "bearer"
-   },
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/wallco-ai/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/animate-museum-posts/.env"
-    },
-    {
-     "type": "project",
-     "host": "45.61.58.125",
-     "user": "root",
-     "path": "/root/public-projects/wallco-ai/.env",
-     "_note": "PROD wallco.ai gen pipeline (Replicate SDXL fallback). Verified prod value matches registry digest 560V:70c85c06 (2026-06-21). Remote-fan via cli.js IS automated for this dest (type=project + host); a plain `cli.js sync` will SSH-write it. Do not auto-rotate this on a live app without surfacing."
-    }
-   ]
+  "SHOPIFY_ORDERS_TOKEN": {
+    "label": "Shopify Admin token (orders+products scope, weekend-report1-1 Partner app)",
+    "destinations": [
+      {
+        "type": "skill",
+        "path": "/Users/macstudio3/.claude/skills/weekend-csv-products/.env"
+      }
+    ]
   },
-  "GOOGLE_PLACES_API_KEY": {
-   "label": "Google Places API Key",
-   "verify": {
-    "method": "GET",
-    "url": "https://maps.googleapis.com/maps/api/place/findplacefromtext/json?input=Tito%27s+Tacos+Culver+City&inputtype=textquery&fields=place_id&key=__VALUE__",
-    "auth": "querystring"
-   },
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/restaurant-directory/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/professional-directory/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/animals/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/lawyer-directory-builder/.env"
-    }
-   ]
+  "SPOONFLOWER_EMAIL": {
+    "env_files": [
+      "/Users/macstudio3/Projects/resize-it/.env",
+      "/Users/macstudio3/Projects/wallco-ai/.env"
+    ]
   },
-  "BRAVE_SEARCH_API_KEY": {
-   "label": "Brave Search API (Web)",
-   "verify": {
-    "method": "GET",
-    "url": "https://api.search.brave.com/res/v1/web/search?q=test&count=1",
-    "auth": "header",
-    "headerName": "X-Subscription-Token"
-   },
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/_ventura-recon/.env"
-    }
-   ]
+  "SPOONFLOWER_PASSWORD": {
+    "env_files": [
+      "/Users/macstudio3/Projects/resize-it/.env",
+      "/Users/macstudio3/Projects/wallco-ai/.env"
+    ]
   },
-  "MOONSHOT_API_KEY": {
-   "label": "Moonshot AI / Kimi K2 API Key",
-   "verify": {
-    "method": "GET",
-    "url": "https://api.moonshot.ai/v1/models",
-    "auth": "bearer"
-   },
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/claude-codex-meeting/.env"
-    },
-    {
-     "type": "skill",
-     "name": "claude-codex"
-    }
-   ]
+  "GOOGLE_DRIVE_CLIENT_ID": {
+    "description": "Google Drive OAuth Client ID — TSD photo-import-cli desktop app",
+    "destinations": [
+      {
+        "type": "env-file",
+        "path": "/Users/macstudio3/Projects/thesetdecorator/.env"
+      }
+    ]
   },
-  "CLOUDFLARE_API_TOKEN": {
-   "label": "Cloudflare API Token",
-   "verify": {
-    "method": "GET",
-    "url": "https://api.cloudflare.com/client/v4/user/tokens/verify",
-    "auth": "bearer"
-   },
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/site-factory/.env"
-    },
-    {
-     "type": "skill",
-     "name": "cloudflare-manager"
-    },
-    {
-     "type": "skill",
-     "name": "setup-domains"
-    },
-    {
-     "type": "skill",
-     "name": "domain-setup"
-    }
-   ]
-  },
-  "STRIPE_SECRET_KEY": {
-   "label": "Stripe Secret Key",
-   "verify": {
-    "method": "GET",
-    "url": "https://api.stripe.com/v1/balance",
-    "auth": "basic-sk"
-   },
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/site-factory/.env"
-    },
-    {
-     "type": "site_local",
-     "domains": [
-      "wholivedthere.com",
-      "bubbesblock.com",
-      "claimmyaddress.com"
-     ]
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/lawyer-directory-builder/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/professional-directory/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/NationalPaperHangers/.env"
-    },
-    {
-     "type": "project",
-     "host": "45.61.58.125",
-     "user": "root",
-     "path": "/root/Projects/NationalPaperHangers/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/ventura-claw-leads/.env"
-    },
-    {
-     "type": "project",
-     "host": "45.61.58.125",
-     "user": "root",
-     "path": "/root/Projects/ventura-claw-leads/.env"
-    }
-   ]
-  },
-  "STRIPE_PUBLISHABLE_KEY": {
-   "label": "Stripe Publishable Key",
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/site-factory/.env"
-    },
-    {
-     "type": "site_local",
-     "domains": [
-      "wholivedthere.com",
-      "bubbesblock.com",
-      "claimmyaddress.com"
-     ]
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/lawyer-directory-builder/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/professional-directory/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/NationalPaperHangers/.env"
-    },
-    {
-     "type": "project",
-     "host": "45.61.58.125",
-     "user": "root",
-     "path": "/root/Projects/NationalPaperHangers/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/ventura-claw-leads/.env"
-    },
-    {
-     "type": "project",
-     "host": "45.61.58.125",
-     "user": "root",
-     "path": "/root/Projects/ventura-claw-leads/.env"
-    }
-   ]
-  },
-  "STRIPE_WEBHOOK_SECRET": {
-   "label": "Stripe Webhook Signing Secret",
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/site-factory/.env"
-    },
-    {
-     "type": "site_local",
-     "domains": [
-      "wholivedthere.com",
-      "bubbesblock.com",
-      "claimmyaddress.com"
-     ]
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/lawyer-directory-builder/.env"
-    }
-   ]
-  },
-  "STRIPE_TIER_WEBHOOK_SECRET": {
-   "label": "Stripe Tier-Subscription Webhook Signing Secret (Counsel & Bar Lawyer Pro $29/mo)",
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/lawyer-directory-builder/.env"
-    }
-   ]
-  },
-  "STRIPE_PRICE_LAWYER_PRO_MONTHLY": {
-   "label": "Stripe Price ID (public): Counsel & Bar Lawyer Pro $29/mo recurring",
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/lawyer-directory-builder/.env"
-    }
-   ]
-  },
-  "STRIPE_VCL_WEBHOOK_SECRET": {
-   "label": "Stripe webhook signing secret — VCL endpoint we_1TUF1Y63uNmiRsMbNr1kLu52",
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/ventura-claw-leads/.env"
-    },
-    {
-     "type": "project",
-     "host": "45.61.58.125",
-     "user": "root",
-     "path": "/root/Projects/ventura-claw-leads/.env"
-    }
-   ]
-  },
-  "STRIPE_PRICE_VCL_STARTER_MONTH": {
-   "label": "Stripe Price ID — VCL Starter $49/mo",
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/ventura-claw-leads/.env"
-    },
-    {
-     "type": "project",
-     "host": "45.61.58.125",
-     "user": "root",
-     "path": "/root/Projects/ventura-claw-leads/.env"
-    }
-   ]
-  },
-  "STRIPE_PRICE_VCL_STANDARD_MONTH": {
-   "label": "Stripe Price ID — VCL Standard $99/mo",
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/ventura-claw-leads/.env"
-    },
-    {
-     "type": "project",
-     "host": "45.61.58.125",
-     "user": "root",
-     "path": "/root/Projects/ventura-claw-leads/.env"
-    }
-   ]
-  },
-  "STRIPE_PRICE_VCL_PREMIER_MONTH": {
-   "label": "Stripe Price ID — VCL Premier $199/mo",
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/ventura-claw-leads/.env"
-    },
-    {
-     "type": "project",
-     "host": "45.61.58.125",
-     "user": "root",
-     "path": "/root/Projects/ventura-claw-leads/.env"
-    }
-   ]
-  },
-  "HEYGEN_API_KEY": {
-   "label": "HeyGen API key — talking-head avatar video render (used by session-debrief skill)",
-   "verify": {
-    "method": "GET",
-    "url": "https://api.heygen.com/v1/voice.list",
-    "auth": "header",
-    "headerName": "x-api-key"
-   },
-   "destinations": [
-    {
-     "type": "skill",
-     "name": "session-debrief"
-    },
-    {
-     "type": "skill",
-     "name": "reviewed-demo-video"
-    },
-    {
-     "type": "skill",
-     "name": "heygen-video"
-    },
-    {
-     "type": "skill",
-     "name": "heygen-avatar"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/crcp-pitch-video/.env"
-    }
-   ]
-  },
-  "INFO_VENTURACLAW_COM_PASSWORD": {
-   "label": "Purelymail mailbox password — info@venturaclaw.com (used by Ventura Claw Leads + the existing ventura-claw app)",
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/ventura-claw-leads/.env"
-    },
-    {
-     "type": "project",
-     "host": "45.61.58.125",
-     "user": "root",
-     "path": "/root/Projects/ventura-claw-leads/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/ventura-claw/.env"
-    },
-    {
-     "type": "project",
-     "host": "45.61.58.125",
-     "user": "root",
-     "path": "/root/Projects/ventura-claw/.env"
-    }
-   ]
-  },
-  "INFO_NATIONALPAPERHANGERS_COM_PASSWORD": {
-   "label": "Purelymail mailbox password — info@nationalpaperhangers.com",
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/NationalPaperHangers/.env"
-    },
-    {
-     "type": "project",
-     "host": "45.61.58.125",
-     "user": "root",
-     "path": "/root/Projects/NationalPaperHangers/.env"
-    }
-   ]
-  },
-  "STRIPE_NPH_WEBHOOK_SECRET": {
-   "label": "Stripe Webhook Signing Secret — NPH endpoint we_1TUDHV63uNmiRsMbRJea7EqU",
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/NationalPaperHangers/.env"
-    },
-    {
-     "type": "project",
-     "host": "45.61.58.125",
-     "user": "root",
-     "path": "/root/Projects/NationalPaperHangers/.env"
-    }
-   ]
-  },
-  "STRIPE_PRICE_PRO_MONTH": {
-   "label": "Stripe Price ID — NPH Pro $39/mo",
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/NationalPaperHangers/.env"
-    },
-    {
-     "type": "project",
-     "host": "45.61.58.125",
-     "user": "root",
-     "path": "/root/Projects/NationalPaperHangers/.env"
-    }
-   ]
-  },
-  "STRIPE_PRICE_PRO_YEAR": {
-   "label": "Stripe Price ID — NPH Pro $399/yr",
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/NationalPaperHangers/.env"
-    },
-    {
-     "type": "project",
-     "host": "45.61.58.125",
-     "user": "root",
-     "path": "/root/Projects/NationalPaperHangers/.env"
-    }
-   ]
-  },
-  "STRIPE_PRICE_SIGNATURE_MONTH": {
-   "label": "Stripe Price ID — NPH Signature $149/mo",
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/NationalPaperHangers/.env"
-    },
-    {
-     "type": "project",
-     "host": "45.61.58.125",
-     "user": "root",
-     "path": "/root/Projects/NationalPaperHangers/.env"
-    }
-   ]
-  },
-  "STRIPE_PRICE_SIGNATURE_YEAR": {
-   "label": "Stripe Price ID — NPH Signature $1500/yr",
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/NationalPaperHangers/.env"
-    },
-    {
-     "type": "project",
-     "host": "45.61.58.125",
-     "user": "root",
-     "path": "/root/Projects/NationalPaperHangers/.env"
-    }
-   ]
-  },
-  "STRIPE_PRICE_ENTERPRISE_MONTH": {
-   "label": "Stripe Price ID — NPH Enterprise $399/mo",
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/NationalPaperHangers/.env"
-    },
-    {
-     "type": "project",
-     "host": "45.61.58.125",
-     "user": "root",
-     "path": "/root/Projects/NationalPaperHangers/.env"
-    }
-   ]
-  },
-  "VERCEL_TOKEN": {
-   "label": "Vercel API Token",
-   "verify": {
-    "method": "GET",
-    "url": "https://api.vercel.com/v2/user",
-    "auth": "bearer"
-   },
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/site-factory/.env"
-    }
-   ]
-  },
-  "PURELYMAIL_API_TOKEN": {
-   "label": "PurelyMail API Token",
-   "verify": {
-    "method": "POST",
-    "url": "https://purelymail.com/api/v0/listDomains",
-    "auth": "header",
-    "headerName": "Purelymail-Api-Token",
-    "body": "{}",
-    "bodyMustContain": "^\\s*\\{\\s*\"type\"\\s*:\\s*\"success\"",
-    "bodyMustNotContain": "\"type\"\\s*:\\s*\"error\""
-   },
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/site-factory/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/ventura-corridor/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/purelymail-mcp/.env"
-    },
-    {
-     "type": "mcp",
-     "server": "purelymail",
-     "key": "PURELYMAIL_API_TOKEN"
-    }
-   ]
-  },
-  "GODADDY_API_KEY": {
-   "label": "GoDaddy API Key",
-   "destinations": [
-    {
-     "type": "mcp",
-     "server": "domain-suite",
-     "key": "GODADDY_API_KEY"
-    }
-   ]
-  },
-  "GODADDY_API_SECRET": {
-   "label": "GoDaddy API Secret",
-   "destinations": [
-    {
-     "type": "mcp",
-     "server": "domain-suite",
-     "key": "GODADDY_API_SECRET"
-    }
-   ]
-  },
-  "BROWSERBASE_API_KEY": {
-   "label": "Browserbase API Key",
-   "destinations": [
-    {
-     "type": "skill",
-     "name": "browserbase"
-    },
-    {
-     "type": "project",
-     "host": "45.61.58.125",
-     "user": "root",
-     "path": "/root/Projects/Designer-Wallcoverings/DW-Websites/abrams-report/.env"
-    },
-    {
-     "type": "project",
-     "path": "/Users/macstudio3/Projects/abrams-report/.env"
-    },
-    {
-     "type": "project",
-     "path": "/Users/macstudio3/Projects/all-designerwallcoverings/.env"
-    }
-   ],
-   "_prod_note": "Kamatera PROD all-designerwallcoverings uses a DEDICATED Browserbase project/key set OUT-OF-BAND (dashboard-created, isolated blast radius + own spend cap). Do NOT re-add the prod all-dw ssh destination here or sync will clobber the dedicated key with the shared fleet key."
-  },
-  "BROWSERBASE_PROJECT_ID": {
-   "label": "Browserbase Project ID",
-   "destinations": [
-    {
-     "type": "skill",
-     "name": "browserbase"
-    },
-    {
-     "type": "project",
-     "host": "45.61.58.125",
-     "user": "root",
-     "path": "/root/Projects/Designer-Wallcoverings/DW-Websites/abrams-report/.env"
-    },
-    {
-     "type": "project",
-     "path": "/Users/macstudio3/Projects/abrams-report/.env"
-    },
-    {
-     "type": "project",
-     "path": "/Users/macstudio3/Projects/all-designerwallcoverings/.env"
-    }
-   ],
-   "_prod_note": "Kamatera PROD all-designerwallcoverings uses a DEDICATED Browserbase project/key set OUT-OF-BAND (dashboard-created, isolated blast radius + own spend cap). Do NOT re-add the prod all-dw ssh destination here or sync will clobber the dedicated key with the shared fleet key."
-  },
-  "ANTHROPIC_API_KEY": {
-   "label": "Anthropic API Key",
-   "verify": {
-    "method": "POST",
-    "url": "https://api.anthropic.com/v1/messages",
-    "auth": "x-api-key",
-    "body": "{\"model\":\"claude-haiku-4-5\",\"max_tokens\":1,\"messages\":[{\"role\":\"user\",\"content\":\"hi\"}]}"
-   },
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/Letsbegin/.env.local"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/dear-bubbe-nextjs/.env"
-    }
-   ]
+  "GOOGLE_DRIVE_CLIENT_SECRET": {
+    "description": "Google Drive OAuth Client Secret — TSD photo-import-cli",
+    "destinations": [
+      {
+        "type": "env-file",
+        "path": "/Users/macstudio3/Projects/thesetdecorator/.env"
+      }
+    ]
+  },
+  "GOOGLE_DRIVE_REFRESH_TOKEN": {
+    "description": "Google Drive OAuth refresh token — read-only scope, owned by steveabramsdesigns@gmail.com",
+    "destinations": [
+      {
+        "type": "env-file",
+        "path": "/Users/macstudio3/Projects/thesetdecorator/.env"
+      }
+    ]
   },
   "OPENAI_API_KEY": {
-   "label": "OpenAI API Key",
-   "verify": {
-    "method": "GET",
-    "url": "https://api.openai.com/v1/models",
-    "auth": "bearer"
-   },
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/dear-bubbe-nextjs/.env.local"
-    },
-    {
-     "type": "project",
-     "host": "45.61.58.125",
-     "user": "root",
-     "path": "/root/Projects/dear-bubbe-nextjs/.env.local"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/animals/.env"
-    }
-   ]
-  },
-  "GEMINI_API_KEY": {
-   "label": "Google Gemini API Key",
-   "verify": {
-    "method": "GET",
-    "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
-    "auth": "url"
-   },
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/Letsbegin/.env.local"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/Bertha/kalshi-dash/.env"
-    },
-    {
-     "type": "skill",
-     "name": "ai-analyzer"
-    },
-    {
-     "type": "skill",
-     "name": "enrich-ai-tags"
-    }
-   ]
-  },
-  "GEMINI_API_KEY_DW_ENRICH": {
-   "label": "Google Gemini API Key — DEDICATED to DW image-enrichment / vendor-command-center. Created 2026-06-23 by vp-security as the rotation target for the leaked orphan keys (last-4 ejMo and S2ic, never registry-managed). Pre-staged EMPTY so that the moment Steve issues a fresh key at Google AI Studio, `add GEMINI_API_KEY_DW_ENRICH <new-key>` verifies it against Gemini and fans it (remapped to the bare var GEMINI_API_KEY) to the consumers below. Distinct from the master GEMINI_API_KEY (Letsbegin/Bertha/skills) and GEMINI_API_KEY_WALLCO (k720). If Steve prefers enrichment to ride the master key instead, he can skip this alias and update GEMINI_API_KEY directly — the env-ified consumers read GEMINI_API_KEY first.",
-   "verify": {
-    "method": "GET",
-    "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
-    "auth": "url"
-   },
-   "_note": "The 3 DW vendor-command-center files (logo-cropper.js, website-scorer.js, standardization-worker.js) read process.env.GEMINI_API_KEY (master) with GEMINI_KEY fallback, loaded from /root/.env on Kamatera. The goodquestion-ai/scripts/generate-hero-images.cjs reads process.env.GEMINI_API_KEY from ~/Projects/goodquestion-ai/.env. Each destination remaps this alias to the bare key name GEMINI_API_KEY so the env-ified code picks it up with no further change.",
-   "destinations": [
-    {
-     "type": "project",
-     "host": "45.61.58.125",
-     "user": "root",
-     "path": "/root/.env",
-     "key": "GEMINI_API_KEY"
-    },
-    {
-     "type": "env_file",
-     "path": "~/Projects/goodquestion-ai/.env",
-     "key": "GEMINI_API_KEY"
-    }
-   ]
-  },
-  "GEMINI_API_KEY_WALLCO": {
-   "label": "Google Gemini API Key — DEDICATED to wallco.ai gen pipeline (nano-banana / gemini-2.5-flash-image fallback). Distinct from the master GEMINI_API_KEY (Letsbegin/Bertha/skills). Same dedicated-alias pattern as GEMINI_API_KEY_RALPH.",
-   "verify": {
-    "method": "GET",
-    "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
-    "auth": "url"
-   },
-   "_note": "The wallco.ai app (local Mac2 AND prod Kamatera) reads the bare var GEMINI_API_KEY in its OWN .env, but that value differs from the master registry GEMINI_API_KEY. To avoid clobbering either consumer, this dedicated alias tracks the wallco-specific value by digest. The fan writes the bare key name GEMINI_API_KEY into the wallco .env files (per-dest key remap), NOT GEMINI_API_KEY_WALLCO. Prod value verified LIVE + matching local 2026-06-21 (k720:4295091b). Remote-fan to prod IS automated via cli.js sync (type=project+host); leave it documented-but-not-fanned unless a rotation is intended.",
-   "destinations": [
-    {
-     "type": "env_file",
-     "path": "~/Projects/wallco-ai/.env",
-     "key": "GEMINI_API_KEY"
-    },
-    {
-     "type": "project",
-     "host": "45.61.58.125",
-     "user": "root",
-     "path": "/root/public-projects/wallco-ai/.env",
-     "key": "GEMINI_API_KEY"
-    },
-    {
-     "type": "env_file",
-     "path": "~/Projects/model-arena/.env"
-    }
-   ]
-  },
-  "GOOGLE_GENERATIVE_AI_API_KEY": {
-   "label": "Google Generative AI API Key (alias of GEMINI_API_KEY)",
-   "verify": {
-    "method": "GET",
-    "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
-    "auth": "url"
-   },
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/Letsbegin/.env.local"
-    }
-   ]
-  },
-  "SHOPIFY_ADMIN_TOKEN": {
-   "label": "Shopify Admin API Access Token",
-   "destinations": [
-    {
-     "type": "project",
-     "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/shopify/.env"
-    },
-    {
-     "type": "project",
-     "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/.env"
-    },
-    {
-     "type": "project",
-     "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Websites/LosAngelesFabrics/.env"
-    },
-    {
-     "type": "env_file",
-     "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local",
-     "key": "SHOPIFY_ADMIN_ACCESS_TOKEN"
-    },
-    {
-     "type": "env_file",
-     "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local",
-     "key": "SHOPIFY_ADMIN_TOKEN"
-    }
-   ]
-  },
-  "SHOPIFY_API_KEY": {
-   "label": "Shopify API Key",
-   "destinations": []
-  },
-  "RESEND_API_KEY": {
-   "label": "Resend API Key",
-   "verify": {
-    "method": "GET",
-    "url": "https://api.resend.com/domains",
-    "auth": "bearer"
-   },
-   "destinations": []
-  },
-  "STRIPE_RESTRICTED_KEY": {
-   "label": "Stripe Restricted Key (site-factory)",
-   "verify": {
-    "method": "GET",
-    "url": "https://api.stripe.com/v1/balance",
-    "auth": "basic-sk"
-   },
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/site-factory/.env"
-    }
-   ]
-  },
-  "DPLA_API_KEY": {
-   "label": "Digital Public Library of America API Key",
-   "verify": {
-    "method": "GET",
-    "url": "https://api.dp.la/v2/items?api_key={value}&q=test&page_size=1",
-    "auth": "url"
-   },
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/wholivedthere/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/claimmyaddress/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/bubbesblock/.env"
-    },
-    {
-     "type": "skill",
-     "name": "la-research-agent"
-    }
-   ]
-  },
-  "GEMINI_API_KEY_RALPH": {
-   "label": "Google Gemini API Key (dedicated to Letsbegin Ralph runner)",
-   "verify": {
-    "method": "GET",
-    "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
-    "auth": "url"
-   },
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/Letsbegin/.env.local"
-    },
-    {
-     "type": "project",
-     "host": "45.61.58.125",
-     "user": "root",
-     "path": "/root/Projects/Letsbegin/.env.local"
-    }
-   ]
+    "label": "OPENAI_API_KEY",
+    "destinations": [
+      "/Users/macstudio3/Projects/holdforme/.env"
+    ]
   },
   "ELEVENLABS_API_KEY": {
-   "label": "ElevenLabs Voice Synthesis API Key",
-   "verify": {
-    "method": "GET",
-    "url": "https://api.elevenlabs.io/v1/user",
-    "auth": "header",
-    "headerName": "xi-api-key"
-   },
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/dear-bubbe-nextjs/.env.local"
-    },
-    {
-     "type": "project",
-     "host": "45.61.58.125",
-     "user": "root",
-     "path": "/root/Projects/dear-bubbe-nextjs/.env.local"
-    }
-   ]
-  },
-  "NEXT_PUBLIC_GOOGLE_MAPS_API_KEY": {
-   "label": "Google Maps JavaScript API Key (browser-exposed; needs HTTP-referrer restrictions)",
-   "verify": {
-    "method": "GET",
-    "url": "https://maps.googleapis.com/maps/api/streetview/metadata?location=34.05,-118.25&key={value}",
-    "success": "json.status === \"OK\" || json.status === \"ZERO_RESULTS\"",
-    "note": "Validates by hitting Street View Static API metadata endpoint; OK or ZERO_RESULTS both prove the key is enabled and unexpired."
-   },
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/stayclaim/.env.local"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/wholivedthere/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/claimmyaddress/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/bubbesblock/.env"
-    },
-    {
-     "type": "remote",
-     "host": "root@45.61.58.125",
-     "path": "/root/public-projects/pastdoor/.env.local"
-    },
-    {
-     "type": "remote",
-     "host": "root@45.61.58.125",
-     "path": "/root/public-projects/pastdoor/.env.production"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/jill-website/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/ventura-bus-3d/.env",
-     "alias": "GOOGLE_MAPS_API_KEY"
-    }
-   ]
-  },
-  "LINKEDIN_CLIENT_ID": {
-   "label": "LinkedIn OAuth Client ID — \"For Claude - 5-6-26\" app, bound to Designer Wallcoverings Page",
-   "_note": "No verify endpoint — LinkedIn requires the ID+SECRET pair to validate, and the CLI verifies one key at a time. Manual probe via POST /oauth/v2/accessToken with a fake code expects 'invalid_request: authorization code not found' = creds OK.",
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/NationalPaperHangers/.env"
-    },
-    {
-     "type": "remote",
-     "host": "root@45.61.58.125",
-     "path": "/root/Projects/NationalPaperHangers/.env"
-    }
-   ]
-  },
-  "LINKEDIN_CLIENT_SECRET": {
-   "label": "LinkedIn OAuth Client Secret — \"For Claude - 5-6-26\" app, bound to Designer Wallcoverings Page",
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/NationalPaperHangers/.env"
-    },
-    {
-     "type": "remote",
-     "host": "root@45.61.58.125",
-     "path": "/root/Projects/NationalPaperHangers/.env"
-    }
-   ]
-  },
-  "GOOGLE_OAUTH_CLIENT_ID": {
-   "label": "Google OAuth Client ID — DW Activation Calendar (shared DW Google Calendar, local :9765)",
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/dw-activation-calendar/.env"
-    }
-   ]
-  },
-  "GOOGLE_OAUTH_CLIENT_SECRET": {
-   "label": "Google OAuth Client Secret — DW Activation Calendar (shared DW Google Calendar, local :9765)",
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/dw-activation-calendar/.env"
-    }
-   ]
-  },
-  "NPH_GOOGLE_OAUTH_CLIENT_ID": {
-   "label": "Google OAuth Client ID — buyer sign-in on National Paper Hangers",
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/NationalPaperHangers/.env"
-    },
-    {
-     "type": "remote",
-     "host": "root@45.61.58.125",
-     "path": "/root/Projects/NationalPaperHangers/.env"
-    }
-   ]
-  },
-  "NPH_GOOGLE_OAUTH_CLIENT_SECRET": {
-   "label": "Google OAuth Client Secret — buyer sign-in on National Paper Hangers",
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/NationalPaperHangers/.env"
-    },
-    {
-     "type": "remote",
-     "host": "root@45.61.58.125",
-     "path": "/root/Projects/NationalPaperHangers/.env"
-    }
-   ]
-  },
-  "GEORGE_AUTH": {
-   "label": "George Gmail Basic Auth (DW microsite leads)",
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/1800swallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/1890swallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/1900swallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/1920swallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/1930swallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/1940swallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/1950swallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/1960swallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/1970swallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/1980swallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/agedwallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/apartmentwallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/architecturalwallcoverings/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/blockprintedwallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/contractwallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/corkwallcovering/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/embroideredwallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/fabricwallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/glitterwalls/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/greenwallcoverings/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/handcraftedwallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/healthcarewallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/hospitalitywallcoverings/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/hospitalitywallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/hotelwallcoverings/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/jutewallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/linenwallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/madagascarwallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/metallicwallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/micawallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/museumwallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/mylarwallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/naturalwallcoverings/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/pastelwallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/raffiawallcoverings/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/raffiawalls/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/recycledwallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/restaurantwallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/restorationwallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/retrowalls/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/saloonwallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/screenprintedwallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/selfadhesivewallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/silkwallcoverings/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/silkwallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/silverleafwallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/stringwallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/suedewallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/textilewallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/vinylwallpaper/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/wallpapersback/.env"
-    },
-    {
-     "type": "project",
-     "path": "~/Projects/wallsandfabrics/.env"
-    }
-   ]
-  },
-  "CLOUDFLARE_PAGES_TOKEN": {
-   "label": "Cloudflare Pages API Token",
-   "verify": {
-    "method": "GET",
-    "url": "https://api.cloudflare.com/client/v4/user/tokens/verify",
-    "auth": "bearer"
-   },
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/coming-soon-template/.env"
-    }
-   ]
-  },
-  "SHOPIFY_THEME_TOKEN": {
-   "label": "Shopify full-access theme/files token (read_themes+files; scrubbed from DW-Agents JS 2026-06-25)",
-   "destinations": [
-    {
-     "type": "env_file",
-     "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/.env"
-    },
-    {
-     "type": "env_file",
-     "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Agents/dw-agents/.env"
-    },
-    {
-     "type": "env_file",
-     "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Agents/dw-agents/agent-task-orchestrator/.env"
-    }
-   ]
-  },
-  "SLACK_APP_ID": {
-   "label": "Slack app \"Claude Access to Slack\" — App ID (A0BDER23QRK). Not secret but registered for completeness.",
-   "destinations": [
-    {
-     "type": "env_file",
-     "path": "~/Projects/claude-slack/.env"
-    }
-   ]
-  },
-  "SLACK_CLIENT_ID": {
-   "label": "Slack app Client ID — used with Client Secret in oauth.v2.access requests.",
-   "destinations": [
-    {
-     "type": "env_file",
-     "path": "~/Projects/claude-slack/.env"
-    }
-   ]
-  },
-  "SLACK_CLIENT_SECRET": {
-   "label": "Slack app Client Secret — OAuth token exchange (oauth.v2.access). NOT the bot token.",
-   "destinations": [
-    {
-     "type": "env_file",
-     "path": "~/Projects/claude-slack/.env"
-    }
-   ]
-  },
-  "SLACK_SIGNING_SECRET": {
-   "label": "Slack app Signing Secret — verifies inbound request signatures from Slack (events/interactivity).",
-   "destinations": [
-    {
-     "type": "env_file",
-     "path": "~/Projects/claude-slack/.env"
-    }
-   ]
-  },
-  "SLACK_VERIFICATION_TOKEN": {
-   "label": "Slack DEPRECATED verification token — legacy request verification. Prefer SLACK_SIGNING_SECRET.",
-   "destinations": [
-    {
-     "type": "env_file",
-     "path": "~/Projects/claude-slack/.env"
-    }
-   ]
-  },
-  "SLACK_APP_TOKEN": {
-   "label": "Slack app-level token (xapp-1-…) for Socket Mode — connections:write. Routes events over WebSocket. NOT the bot token (xoxb-).",
-   "destinations": [
-    {
-     "type": "env_file",
-     "path": "~/Projects/claude-slack/.env"
-    }
-   ]
-  },
-  "CENSUS_API_KEY": {
-   "label": "US Census Bureau Data API key — demographics fetcher for commercialrealestate (ACS5 by ZCTA). NOTE: Census API returns 302-redirect on a valid data query so the secrets verifier cannot probe it; verify manually via an ACS5 curl.",
-   "destinations": [
-    {
-     "type": "env_file",
-     "path": "~/Projects/commercialrealestate/.env"
-    }
-   ]
-  },
-  "POSTIZ_API_KEY": {
-   "label": "Postiz public API key (raw Authorization header) — DW marketing slideshow engine (post/integrations) + Postiz MCP",
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/Projects/dw-slideshow-gen/.env"
-    }
-   ]
-  },
-  "X_API_KEY": {
-   "label": "X (Twitter) API v2 — Consumer/API key (app auth). Pairs with X_API_SECRET to mint app-only bearers.",
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/.claude/skills/kartiseira/.env"
-    }
-   ]
-  },
-  "X_API_SECRET": {
-   "label": "X (Twitter) API v2 — Consumer/API secret. With X_API_KEY mints app-only bearer via oauth2/token.",
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/.claude/skills/kartiseira/.env"
-    }
-   ]
-  },
-  "X_BEARER_TOKEN": {
-   "label": "X (Twitter) API v2 — app-only Bearer token (use RAW/as-issued; contains %-encoded chars).",
-   "verify": {
-    "method": "GET",
-    "url": "https://api.twitter.com/2/tweets?ids=20",
-    "auth": "bearer",
-    "bodyMustContain": "data"
-   },
-   "destinations": [
-    {
-     "type": "project",
-     "path": "~/.claude/skills/kartiseira/.env"
-    }
-   ]
-  },
-  "MAGIC_API_KEY": {
-   "label": "21st.dev Magic (Four Horsemen) API Key",
-   "destinations": [
-    {
-     "type": "mcp",
-     "server": "magic",
-     "key": "API_KEY"
-    }
-   ]
-  },
-  "ADOBE_CLIENT_ID": {
-   "label": "Adobe Firefly Services / Photoshop API client id (model-arena photoshop design tool)",
-   "destinations": [
-    {
-     "type": "env_file",
-     "path": "~/Projects/model-arena/.env"
-    }
-   ]
-  },
-  "ADOBE_CLIENT_SECRET": {
-   "label": "Adobe Firefly Services / Photoshop API client secret (model-arena photoshop design tool)",
-   "destinations": [
-    {
-     "type": "env_file",
-     "path": "~/Projects/model-arena/.env"
-    }
-   ]
-  },
-  "FIGMA_TOKEN": {
-   "label": "Figma personal access token, read-only scopes (model-arena figma design tool + hyperframes figma imports)",
-   "destinations": [
-    {
-     "type": "env_file",
-     "path": "~/Projects/model-arena/.env"
-    }
-   ]
+    "label": "ELEVENLABS_API_KEY",
+    "destinations": [
+      "/Users/macstudio3/Projects/holdforme/.env"
+    ]
+  },
+  "TWILIO_ACCOUNT_SID": {
+    "label": "TWILIO_ACCOUNT_SID",
+    "destinations": [
+      "/Users/macstudio3/Projects/holdforme/.env"
+    ]
+  },
+  "TWILIO_AUTH_TOKEN": {
+    "label": "TWILIO_AUTH_TOKEN",
+    "destinations": [
+      "/Users/macstudio3/Projects/holdforme/.env"
+    ]
+  },
+  "TWILIO_PHONE_NUMBER": {
+    "label": "TWILIO_PHONE_NUMBER",
+    "destinations": [
+      "/Users/macstudio3/Projects/holdforme/.env"
+    ]
+  },
+  "TMDB_API_KEY": {
+    "label": "TMDB v3 API key — asseeninmovies Phase B drain (6.46M-stub queue)",
+    "verify": {
+      "method": "GET",
+      "url": "https://api.themoviedb.org/3/authentication?api_key=__VALUE__",
+      "auth": "querystring",
+      "expect": "success"
+    },
+    "destinations": [
+      "/Users/macstudio3/Projects/asseeninmovies/.env"
+    ]
+  },
+  "TMDB_READ_ACCESS_TOKEN": {
+    "label": "TMDB v4 read-access token (bearer) — alt to v3 api_key",
+    "verify": {
+      "method": "GET",
+      "url": "https://api.themoviedb.org/3/authentication",
+      "auth": "bearer",
+      "expect": "success"
+    },
+    "destinations": [
+      "/Users/macstudio3/Projects/asseeninmovies/.env"
+    ]
+  },
+  "VAPI_API_KEY": {
+    "label": "VAPI_API_KEY",
+    "destinations": [
+      "/Users/macstudio3/Projects/holdforme/.env",
+      "remote:kamatera:/root/public-projects/butlr/.env"
+    ]
+  },
+  "VAPI_PUBLIC_KEY": {
+    "label": "VAPI_PUBLIC_KEY",
+    "destinations": [
+      "/Users/macstudio3/Projects/holdforme/.env",
+      "remote:kamatera:/root/public-projects/butlr/.env"
+    ]
+  },
+  "AYRSHARE_API_KEY": {
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+        "key": "AYRSHARE_API_KEY"
+      }
+    ]
+  },
+  "META_ACCESS_TOKEN": {
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+        "key": "META_ACCESS_TOKEN"
+      }
+    ]
+  },
+  "META_IG_USER_ID": {
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+        "key": "META_IG_USER_ID"
+      }
+    ]
+  },
+  "META_FB_PAGE_ID": {
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+        "key": "META_FB_PAGE_ID"
+      }
+    ]
+  },
+  "SHOPIFY_DRAFT_TOKEN": {
+    "label": "Shopify Admin token (full access incl. write_draft_orders) — DW mural PDP custom-size checkout",
+    "destinations": [
+      {
+        "type": "project",
+        "path": "/Users/macstudio3/Projects/designerwallcoverings/.env"
+      }
+    ]
+  },
+  "SHOPIFY_STORE_DOMAIN": {
+    "label": "Shopify store domain for DW vendor microsites Memo-Sample checkout",
+    "destinations": [
+      {
+        "type": "project",
+        "path": "~/Projects/dw-vendor-microsites/.env"
+      },
+      {
+        "type": "project",
+        "host": "45.61.58.125",
+        "user": "root",
+        "path": "/root/Projects/dw-vendor-microsites/.env"
+      }
+    ]
+  },
+  "SHOPIFY_SAMPLE_VARIANT_ID": {
+    "label": "Shopify Memo Sample variant id (DW vendor microsites sample fee $4.25)",
+    "destinations": [
+      {
+        "type": "project",
+        "path": "~/Projects/dw-vendor-microsites/.env"
+      },
+      {
+        "type": "project",
+        "host": "45.61.58.125",
+        "user": "root",
+        "path": "/root/Projects/dw-vendor-microsites/.env"
+      }
+    ]
+  },
+  "SHOPIFY_STOREFRONT_TOKEN": {
+    "label": "Shopify Storefront API token for DW vendor microsites (unauthenticated checkout)",
+    "destinations": [
+      {
+        "type": "project",
+        "path": "~/Projects/dw-vendor-microsites/.env"
+      },
+      {
+        "type": "project",
+        "host": "45.61.58.125",
+        "user": "root",
+        "path": "/root/Projects/dw-vendor-microsites/.env"
+      }
+    ]
+  },
+  "TWOCAPTCHA_API_KEY": {
+    "destinations": [
+      {
+        "type": "skill",
+        "name": "2captcha"
+      },
+      {
+        "type": "skill",
+        "name": "browserbase"
+      }
+    ]
+  },
+  "DEDAR_LOGIN_URL": {
+    "label": "Dedar trade-portal login_url (pulled from Kamatera dw-price-stock 2026-07-06, supervised outbound-tier)",
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "~/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local"
+      },
+      {
+        "type": "env_file",
+        "path": "~/Projects/secrets-manager/.env"
+      }
+    ]
+  },
+  "DEDAR_USERNAME": {
+    "label": "Dedar trade-portal username (pulled from Kamatera dw-price-stock 2026-07-06, supervised outbound-tier)",
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "~/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local"
+      },
+      {
+        "type": "env_file",
+        "path": "~/Projects/secrets-manager/.env"
+      }
+    ]
+  },
+  "DEDAR_PASSWORD": {
+    "label": "Dedar trade-portal password (pulled from Kamatera dw-price-stock 2026-07-06, supervised outbound-tier)",
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "~/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local"
+      },
+      {
+        "type": "env_file",
+        "path": "~/Projects/secrets-manager/.env"
+      }
+    ]
+  },
+  "YORKWALL_USER": {
+    "env_files": [
+      "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env",
+      "/Users/macstudio3/.claude/skills/brewster-scraper-manager/.env"
+    ]
+  },
+  "YORKWALL_PASS": {
+    "env_files": [
+      "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env",
+      "/Users/macstudio3/.claude/skills/brewster-scraper-manager/.env"
+    ]
+  },
+  "GOVAUCTIONS_API_KEY": [
+    "/Users/macstudio3/Projects/govarbitrage/.env"
+  ],
+  "APIFY_TOKEN": [
+    "/Users/macstudio3/Projects/govarbitrage/.env"
+  ],
+  "HEYGEN_API_KEY": [
+    "/Users/macstudio3/.claude/skills/heygen-video/.env",
+    "/Users/macstudio3/.claude/skills/heygen-avatar/.env",
+    "/Users/macstudio3/.claude/skills/heygen-translate/.env"
+  ],
+  "IG_USER_ID": {
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "/Users/macstudio3/Projects/Norma/agents/instagram-agent/.env",
+        "key": "IG_USER_ID"
+      }
+    ]
+  },
+  "TIKTOK_CLIENT_KEY": {
+    "label": "TIKTOK_CLIENT_KEY",
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+        "key": "TIKTOK_CLIENT_KEY"
+      },
+      {
+        "type": "project",
+        "host": "45.61.58.125",
+        "user": "root",
+        "path": "/root/DW-Agents/marketing-command-center/.env"
+      }
+    ]
+  },
+  "TIKTOK_CLIENT_SECRET": {
+    "label": "TIKTOK_CLIENT_SECRET",
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+        "key": "TIKTOK_CLIENT_SECRET"
+      },
+      {
+        "type": "project",
+        "host": "45.61.58.125",
+        "user": "root",
+        "path": "/root/DW-Agents/marketing-command-center/.env"
+      }
+    ]
+  },
+  "THREADS_APP_ID": {
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+        "key": "THREADS_APP_ID"
+      }
+    ]
+  },
+  "THREADS_APP_SECRET": {
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+        "key": "THREADS_APP_SECRET"
+      }
+    ]
+  },
+  "THREADS_ACCESS_TOKEN": {
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+        "key": "THREADS_ACCESS_TOKEN"
+      }
+    ]
+  },
+  "THREADS_USER_ID": {
+    "destinations": [
+      {
+        "type": "env_file",
+        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+        "key": "THREADS_USER_ID"
+      }
+    ]
+  },
+  "DATAFORSEO_API_KEY": {
+    "label": "DataForSEO API key (base64 of login:api-password) — OpenSEO self-hosted backend for keyword/SERP/backlink/domain tools. Login steve@designerwallcoverings.com.",
+    "destinations": [
+      "/Users/macstudio3/Projects/open-seo/.env.local"
+    ]
+  },
+  "OSBORNE_USERNAME": {
+    "label": "Osborne & Little trade portal (tradenew.osborneandlittle.com) login — also used for Matthew Williamson (O&L-distributed) US pricing",
+    "destinations": [
+      {
+        "type": "skill",
+        "name": "osborne-scraper-manager"
+      }
+    ]
+  },
+  "OSBORNE_PASSWORD": {
+    "label": "Osborne & Little trade portal password",
+    "destinations": [
+      {
+        "type": "skill",
+        "name": "osborne-scraper-manager"
+      }
+    ]
+  },
+  "OPENROUTER_API_KEY": {
+    "label": "OPENROUTER_API_KEY",
+    "destinations": [
+      "/Users/macstudio3/Projects/open-seo/.env.local"
+    ]
   }
- },
- "leak_patterns": [
-  {
-   "name": "stripe-live-secret",
-   "regex": "sk_live_[A-Za-z0-9]{20,}"
-  },
-  {
-   "name": "purelymail-token",
-   "regex": "PURELYMAIL_API_TOKEN\\s*=\\s*[A-Za-z0-9_-]{20,}"
-  },
-  {
-   "name": "stripe-test-secret",
-   "regex": "sk_test_[A-Za-z0-9]{20,}"
-  },
-  {
-   "name": "stripe-publishable",
-   "regex": "pk_live_[A-Za-z0-9]{20,}"
-  },
-  {
-   "name": "browserbase",
-   "regex": "bb_live_[A-Za-z0-9]+"
-  },
-  {
-   "name": "google-api-key",
-   "regex": "AIza[0-9A-Za-z_-]{35}"
-  },
-  {
-   "name": "google-oauth-access",
-   "regex": "ya29\\.[A-Za-z0-9_-]{20,}"
-  },
-  {
-   "name": "github-pat",
-   "regex": "ghp_[A-Za-z0-9]{36}"
-  },
-  {
-   "name": "github-fine-grained",
-   "regex": "github_pat_[A-Za-z0-9_]{60,}"
-  },
-  {
-   "name": "slack-bot",
-   "regex": "xox[baprs]-[A-Za-z0-9-]{10,}"
-  },
-  {
-   "name": "openai-key",
-   "regex": "sk-[A-Za-z0-9]{40,}"
-  },
-  {
-   "name": "anthropic-key",
-   "regex": "sk-ant-[A-Za-z0-9_-]{50,}"
-  },
-  {
-   "name": "cf-token-40hex",
-   "regex": "(?:cloudflare|cf_token|dns_cloudflare_api_token)[^A-Za-z0-9]+([A-Za-z0-9_-]{40})"
-  }
- ],
- "CLOUDFLARE_ACCOUNT_ID": [
-  "/Users/macstudio3/.claude/skills/domain-check/.env",
-  "/Users/macstudio3/.claude/skills/domain-dns-setup/.env",
-  "/Users/macstudio3/.claude/skills/domain-email-setup/.env",
-  "/Users/macstudio3/.claude/skills/domain-full-setup/.env",
-  "/Users/macstudio3/.claude/skills/domain-register/.env",
-  "/Users/macstudio3/.claude/skills/domain-setup/.env",
-  "/Users/macstudio3/.claude/skills/setup-domains/.env"
- ],
- "CLOUDFLARE_API_TOKEN": [
-  "/Users/macstudio3/Projects/all-designerwallcoverings/.env",
-  "/Users/macstudio3/.claude/skills/cloudflare-manager/.env",
-  "/Users/macstudio3/.claude/skills/domain-dns-setup/.env",
-  "/Users/macstudio3/.claude/skills/domain-full-setup/.env",
-  "/Users/macstudio3/.claude/skills/domain-setup/.env",
-  "/Users/macstudio3/.claude/skills/setup-domains/.env"
- ],
- "SMB_BUILDER_ADMIN_TOKEN": {
-  "destinations": [
-   {
-    "type": "env_file",
-    "path": "/Users/macstudio3/Projects/small-business-builder/.env",
-    "key": "ADMIN_TOKEN"
-   }
-  ]
- },
- "SHOPIFY_ORDERS_TOKEN": {
-  "label": "Shopify Admin token (orders+products scope, weekend-report1-1 Partner app)",
-  "destinations": [
-   {
-    "type": "skill",
-    "path": "/Users/macstudio3/.claude/skills/weekend-csv-products/.env"
-   }
-  ]
- },
- "SPOONFLOWER_EMAIL": {
-  "env_files": [
-   "/Users/macstudio3/Projects/resize-it/.env",
-   "/Users/macstudio3/Projects/wallco-ai/.env"
-  ]
- },
- "SPOONFLOWER_PASSWORD": {
-  "env_files": [
-   "/Users/macstudio3/Projects/resize-it/.env",
-   "/Users/macstudio3/Projects/wallco-ai/.env"
-  ]
- },
- "GOOGLE_DRIVE_CLIENT_ID": {
-  "description": "Google Drive OAuth Client ID — TSD photo-import-cli desktop app",
-  "destinations": [
-   {
-    "type": "env-file",
-    "path": "/Users/macstudio3/Projects/thesetdecorator/.env"
-   }
-  ]
- },
- "GOOGLE_DRIVE_CLIENT_SECRET": {
-  "description": "Google Drive OAuth Client Secret — TSD photo-import-cli",
-  "destinations": [
-   {
-    "type": "env-file",
-    "path": "/Users/macstudio3/Projects/thesetdecorator/.env"
-   }
-  ]
- },
- "GOOGLE_DRIVE_REFRESH_TOKEN": {
-  "description": "Google Drive OAuth refresh token — read-only scope, owned by steveabramsdesigns@gmail.com",
-  "destinations": [
-   {
-    "type": "env-file",
-    "path": "/Users/macstudio3/Projects/thesetdecorator/.env"
-   }
-  ]
- },
- "OPENAI_API_KEY": {
-  "label": "OPENAI_API_KEY",
-  "destinations": [
-   "/Users/macstudio3/Projects/holdforme/.env"
-  ]
- },
- "ELEVENLABS_API_KEY": {
-  "label": "ELEVENLABS_API_KEY",
-  "destinations": [
-   "/Users/macstudio3/Projects/holdforme/.env"
-  ]
- },
- "TWILIO_ACCOUNT_SID": {
-  "label": "TWILIO_ACCOUNT_SID",
-  "destinations": [
-   "/Users/macstudio3/Projects/holdforme/.env"
-  ]
- },
- "TWILIO_AUTH_TOKEN": {
-  "label": "TWILIO_AUTH_TOKEN",
-  "destinations": [
-   "/Users/macstudio3/Projects/holdforme/.env"
-  ]
- },
- "TWILIO_PHONE_NUMBER": {
-  "label": "TWILIO_PHONE_NUMBER",
-  "destinations": [
-   "/Users/macstudio3/Projects/holdforme/.env"
-  ]
- },
- "TMDB_API_KEY": {
-  "label": "TMDB v3 API key — asseeninmovies Phase B drain (6.46M-stub queue)",
-  "verify": {
-   "method": "GET",
-   "url": "https://api.themoviedb.org/3/authentication?api_key=__VALUE__",
-   "auth": "querystring",
-   "expect": "success"
-  },
-  "destinations": [
-   "/Users/macstudio3/Projects/asseeninmovies/.env"
-  ]
- },
- "TMDB_READ_ACCESS_TOKEN": {
-  "label": "TMDB v4 read-access token (bearer) — alt to v3 api_key",
-  "verify": {
-   "method": "GET",
-   "url": "https://api.themoviedb.org/3/authentication",
-   "auth": "bearer",
-   "expect": "success"
-  },
-  "destinations": [
-   "/Users/macstudio3/Projects/asseeninmovies/.env"
-  ]
- },
- "VAPI_API_KEY": {
-  "label": "VAPI_API_KEY",
-  "destinations": [
-   "/Users/macstudio3/Projects/holdforme/.env",
-   "remote:kamatera:/root/public-projects/butlr/.env"
-  ]
- },
- "VAPI_PUBLIC_KEY": {
-  "label": "VAPI_PUBLIC_KEY",
-  "destinations": [
-   "/Users/macstudio3/Projects/holdforme/.env",
-   "remote:kamatera:/root/public-projects/butlr/.env"
-  ]
- },
- "AYRSHARE_API_KEY": {
-  "destinations": [
-   {
-    "type": "env_file",
-    "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
-    "key": "AYRSHARE_API_KEY"
-   }
-  ]
- },
- "META_ACCESS_TOKEN": {
-  "destinations": [
-   {
-    "type": "env_file",
-    "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
-    "key": "META_ACCESS_TOKEN"
-   }
-  ]
- },
- "META_IG_USER_ID": {
-  "destinations": [
-   {
-    "type": "env_file",
-    "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
-    "key": "META_IG_USER_ID"
-   }
-  ]
- },
- "META_FB_PAGE_ID": {
-  "destinations": [
-   {
-    "type": "env_file",
-    "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
-    "key": "META_FB_PAGE_ID"
-   }
-  ]
- },
- "SHOPIFY_DRAFT_TOKEN": {
-  "label": "Shopify Admin token (full access incl. write_draft_orders) — DW mural PDP custom-size checkout",
-  "destinations": [
-   {
-    "type": "project",
-    "path": "/Users/macstudio3/Projects/designerwallcoverings/.env"
-   }
-  ]
- },
- "SHOPIFY_STORE_DOMAIN": {
-  "label": "Shopify store domain for DW vendor microsites Memo-Sample checkout",
-  "destinations": [
-   {
-    "type": "project",
-    "path": "~/Projects/dw-vendor-microsites/.env"
-   },
-   {
-    "type": "project",
-    "host": "45.61.58.125",
-    "user": "root",
-    "path": "/root/Projects/dw-vendor-microsites/.env"
-   }
-  ]
- },
- "SHOPIFY_SAMPLE_VARIANT_ID": {
-  "label": "Shopify Memo Sample variant id (DW vendor microsites sample fee $4.25)",
-  "destinations": [
-   {
-    "type": "project",
-    "path": "~/Projects/dw-vendor-microsites/.env"
-   },
-   {
-    "type": "project",
-    "host": "45.61.58.125",
-    "user": "root",
-    "path": "/root/Projects/dw-vendor-microsites/.env"
-   }
-  ]
- },
- "SHOPIFY_STOREFRONT_TOKEN": {
-  "label": "Shopify Storefront API token for DW vendor microsites (unauthenticated checkout)",
-  "destinations": [
-   {
-    "type": "project",
-    "path": "~/Projects/dw-vendor-microsites/.env"
-   },
-   {
-    "type": "project",
-    "host": "45.61.58.125",
-    "user": "root",
-    "path": "/root/Projects/dw-vendor-microsites/.env"
-   }
-  ]
- },
- "TWOCAPTCHA_API_KEY": {
-  "destinations": [
-   {
-    "type": "skill",
-    "name": "2captcha"
-   },
-   {
-    "type": "skill",
-    "name": "browserbase"
-   }
-  ]
- },
- "DEDAR_LOGIN_URL": {
-  "label": "Dedar trade-portal login_url (pulled from Kamatera dw-price-stock 2026-07-06, supervised outbound-tier)",
-  "destinations": [
-   {
-    "type": "env_file",
-    "path": "~/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local"
-   },
-   {
-    "type": "env_file",
-    "path": "~/Projects/secrets-manager/.env"
-   }
-  ]
- },
- "DEDAR_USERNAME": {
-  "label": "Dedar trade-portal username (pulled from Kamatera dw-price-stock 2026-07-06, supervised outbound-tier)",
-  "destinations": [
-   {
-    "type": "env_file",
-    "path": "~/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local"
-   },
-   {
-    "type": "env_file",
-    "path": "~/Projects/secrets-manager/.env"
-   }
-  ]
- },
- "DEDAR_PASSWORD": {
-  "label": "Dedar trade-portal password (pulled from Kamatera dw-price-stock 2026-07-06, supervised outbound-tier)",
-  "destinations": [
-   {
-    "type": "env_file",
-    "path": "~/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local"
-   },
-   {
-    "type": "env_file",
-    "path": "~/Projects/secrets-manager/.env"
-   }
-  ]
- },
- "YORKWALL_USER": {
-  "env_files": [
-   "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env",
-   "/Users/macstudio3/.claude/skills/brewster-scraper-manager/.env"
-  ]
- },
- "YORKWALL_PASS": {
-  "env_files": [
-   "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env",
-   "/Users/macstudio3/.claude/skills/brewster-scraper-manager/.env"
-  ]
- },
- "GOVAUCTIONS_API_KEY": [
-  "/Users/macstudio3/Projects/govarbitrage/.env"
- ],
- "APIFY_TOKEN": [
-  "/Users/macstudio3/Projects/govarbitrage/.env"
- ],
- "HEYGEN_API_KEY": [
-  "/Users/macstudio3/.claude/skills/heygen-video/.env",
-  "/Users/macstudio3/.claude/skills/heygen-avatar/.env",
-  "/Users/macstudio3/.claude/skills/heygen-translate/.env"
- ],
- "IG_USER_ID": {
-  "destinations": [
-   {
-    "type": "env_file",
-    "path": "/Users/macstudio3/Projects/Norma/agents/instagram-agent/.env",
-    "key": "IG_USER_ID"
-   }
-  ]
- },
- "TIKTOK_CLIENT_KEY": {
-  "label": "TIKTOK_CLIENT_KEY",
-  "destinations": [
-   {
-    "type": "env_file",
-    "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
-    "key": "TIKTOK_CLIENT_KEY"
-   },
-   {
-    "type": "project",
-    "host": "45.61.58.125",
-    "user": "root",
-    "path": "/root/DW-Agents/marketing-command-center/.env"
-   }
-  ]
- },
- "TIKTOK_CLIENT_SECRET": {
-  "label": "TIKTOK_CLIENT_SECRET",
-  "destinations": [
-   {
-    "type": "env_file",
-    "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
-    "key": "TIKTOK_CLIENT_SECRET"
-   },
-   {
-    "type": "project",
-    "host": "45.61.58.125",
-    "user": "root",
-    "path": "/root/DW-Agents/marketing-command-center/.env"
-   }
-  ]
- },
- "THREADS_APP_ID": {
-  "destinations": [
-   {
-    "type": "env_file",
-    "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
-    "key": "THREADS_APP_ID"
-   }
-  ]
- },
- "THREADS_APP_SECRET": {
-  "destinations": [
-   {
-    "type": "env_file",
-    "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
-    "key": "THREADS_APP_SECRET"
-   }
-  ]
- },
- "THREADS_ACCESS_TOKEN": {
-  "destinations": [
-   {
-    "type": "env_file",
-    "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
-    "key": "THREADS_ACCESS_TOKEN"
-   }
-  ]
- },
- "THREADS_USER_ID": {
-  "destinations": [
-   {
-    "type": "env_file",
-    "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
-    "key": "THREADS_USER_ID"
-   }
-  ]
- },
- "DATAFORSEO_API_KEY": {
-  "label": "DataForSEO API key (base64 of login:api-password) — OpenSEO self-hosted backend for keyword/SERP/backlink/domain tools. Login steve@designerwallcoverings.com.",
-  "destinations": [
-   "/Users/macstudio3/Projects/open-seo/.env.local"
-  ]
- },
- "OSBORNE_USERNAME": {
-  "label": "Osborne & Little trade portal (tradenew.osborneandlittle.com) login — also used for Matthew Williamson (O&L-distributed) US pricing",
-  "destinations": [
-   {
-    "type": "skill",
-    "name": "osborne-scraper-manager"
-   }
-  ]
- },
- "OSBORNE_PASSWORD": {
-  "label": "Osborne & Little trade portal password",
-  "destinations": [
-   {
-    "type": "skill",
-    "name": "osborne-scraper-manager"
-   }
-  ]
- }
 }
\ No newline at end of file

← 9309659 auto-save: 2026-07-26T16:14:26 (1 files) — registry.json  ·  back to Secrets Manager  ·  (newest)