[object Object]

← back to Secrets Manager

secrets-manager scoping: fix 3 contrarian-found defects (TK-10045)

a124191f67dde20997301c6376f89f47ade62842 · 2026-07-29 21:45:28 -0700 · Steve

- Hole1 (CRITICAL): derive now scans .py (os.environ) + .sh ($VAR) — a Python/shell consumer no longer gets its key stripped on --apply (verified: restaurant-directory GOOGLE_PLACES_API_KEY protected)
- Hole2 (HIGH): scopedSkip fails-open on DSN-driving keys (PG_DW_ADMIN_PASSWORD) + env_file per-dest d.dsn — SCOPED_FANOUT rotation can't drop the DATABASE_URL rewrite
- Hole3: auto-prune ~/.claude.json.bak.* to last 5 (135 secret-bearing copies had piled up in $HOME)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Files touched

Diff

commit a124191f67dde20997301c6376f89f47ade62842
Author: Steve <steve@designerwallcoverings.com>
Date:   Wed Jul 29 21:45:28 2026 -0700

    secrets-manager scoping: fix 3 contrarian-found defects (TK-10045)
    
    - Hole1 (CRITICAL): derive now scans .py (os.environ) + .sh ($VAR) — a Python/shell consumer no longer gets its key stripped on --apply (verified: restaurant-directory GOOGLE_PLACES_API_KEY protected)
    - Hole2 (HIGH): scopedSkip fails-open on DSN-driving keys (PG_DW_ADMIN_PASSWORD) + env_file per-dest d.dsn — SCOPED_FANOUT rotation can't drop the DATABASE_URL rewrite
    - Hole3: auto-prune ~/.claude.json.bak.* to last 5 (135 secret-bearing copies had piled up in $HOME)
    
    Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 cli.js              |  15 +-
 derive-manifests.js |  14 ++
 manifests.json      | 626 +++++++++++++++++++++++++++++++++++++++++++++++++++-
 3 files changed, 648 insertions(+), 7 deletions(-)

diff --git a/cli.js b/cli.js
index 576bcb9..8988044 100755
--- a/cli.js
+++ b/cli.js
@@ -69,6 +69,11 @@ function manifestForEnvPath(man, absEnvPath) {
 let _MAN_CACHE = null;
 function scopedSkip(absPath, key) {
   if (process.env.SCOPED_FANOUT !== '1') return false;
+  // NEVER skip a key that drives a DSN (e.g. PG_DW_ADMIN_PASSWORD → DATABASE_URL):
+  // consumers read the DSN, not the bare var, so the manifest won't list the key —
+  // skipping would drop the DSN password rewrite and crash the app on next restart
+  // (contrarian Hole 2, reproduced; the exact 2026-06-03 half-fire shape).
+  if (DSN_REWRITE[key]) return false;
   if (!_MAN_CACHE) _MAN_CACHE = loadManifests();
   const e = manifestForEnvPath(_MAN_CACHE, absPath);
   if (!e || e.review_required || e.missing_dir) return false;   // fail-open
@@ -285,7 +290,7 @@ function fanOut(key, value) {
       // no env_file branch at all → these dests were silently skipped.)
       const p = expand(d.path);
       if (!fs.existsSync(p)) { console.error(`  ⚠ env_file skip (missing): ${p}`); continue; }
-      if (scopedSkip(p, key)) continue;
+      if (!d.dsn && scopedSkip(p, key)) continue;   // never skip a per-dest DSN rewrite
       let text = fs.readFileSync(p, 'utf8');
       let note = '';
       const dsnSpec = d.dsn ? { dsn: d.dsn, user: d.dsnUser || 'dw_admin' } : DSN_REWRITE[key];
@@ -319,6 +324,14 @@ function fanOut(key, value) {
       if (!fs.existsSync(cfgPath)) continue;
       const bak = `${cfgPath}.bak.${Date.now()}`;
       fs.copyFileSync(cfgPath, bak);
+      // Prune stale secret-bearing backups — keep only the last 5. Each is a full
+      // copy of ~/.claude.json (all MCP env secrets); 135 had accumulated in $HOME,
+      // outside any audit/gitignore scope (contrarian Hole 3, reproduced).
+      try {
+        const baks = fs.readdirSync(HOME).filter(f => f.startsWith('.claude.json.bak.'))
+          .sort().reverse();
+        for (const old of baks.slice(5)) { try { fs.unlinkSync(path.join(HOME, old)); } catch {} }
+      } catch {}
       const j = JSON.parse(fs.readFileSync(cfgPath, 'utf8'));
       const sv = (j.mcpServers && j.mcpServers[d.server]) || null;
       if (sv) {
diff --git a/derive-manifests.js b/derive-manifests.js
index 6ee01ab..2c9330f 100644
--- a/derive-manifests.js
+++ b/derive-manifests.js
@@ -74,6 +74,20 @@ function deriveKeys(dir) {
     const k = m[0].replace(/^process\.env\.?/, '').replace(/^\[['"]|['"]\]$/g, '');
     if (/^[A-Z_][A-Z0-9_]*$/.test(k)) keys.add(k);
   }
+  // Python + shell consumers are invisible to the JS grep — a Python enrichment
+  // script reading os.environ['GOOGLE_PLACES_API_KEY'] would otherwise get the key
+  // stripped on --apply (contrarian Hole 1, reproduced). Union those in. Shell
+  // $VAR is noisy but harmless: the master-key filter downstream drops non-secrets.
+  const addFrom = (cmd) => {
+    try {
+      for (const line of execSync(cmd, { encoding: 'utf8', maxBuffer: 64 * 1024 * 1024 }).split('\n')) {
+        const k = line.replace(/[^A-Z0-9_]/g, '');
+        if (/^[A-Z_][A-Z0-9_]*$/.test(k)) keys.add(k);
+      }
+    } catch { /* no matches */ }
+  };
+  addFrom(`grep -rhoE "os\\.environ(\\.get\\()?\\[?['\\"][A-Z_][A-Z0-9_]*['\\"]|os\\.getenv\\(['\\"][A-Z_][A-Z0-9_]*['\\"]" "${dir}" --include='*.py' --exclude-dir=node_modules --exclude-dir=.git 2>/dev/null | grep -oE "[A-Z_][A-Z0-9_]*['\\"]?$"`);
+  addFrom(`grep -rhoE "\\\$\\{?[A-Z_][A-Z0-9_]*\\}?" "${dir}" --include='*.sh' --exclude-dir=node_modules --exclude-dir=.git 2>/dev/null | grep -oE "[A-Z_][A-Z0-9_]+"`);
   // dynamic access: process.env[ <not a quote> ...] — a runtime-computed key.
   // Includes the manual-parse loader loops (process.env[k]=v); conservatively
   // flags the whole project review_required so regen won't narrow it.
diff --git a/manifests.json b/manifests.json
index 6a18e0b..3183ef4 100644
--- a/manifests.json
+++ b/manifests.json
@@ -152,6 +152,7 @@
         "CATALOG_DELAY_MS",
         "CHECK_INTERVAL",
         "CLAUDE_BIN",
+        "CLAUDE_PLUGIN_ROOT",
         "CUSTOM_PROXY_PASSWORD",
         "CUSTOM_PROXY_SERVER",
         "CUSTOM_PROXY_USERNAME",
@@ -159,6 +160,7 @@
         "DATABASE_URL",
         "DRY_RUN",
         "DW_BASIC_AUTH",
+        "ENABLE_SECURITY_REMINDER",
         "ENDPOINTS_TO_CHECK",
         "ENRICH_ON_IMPORT",
         "EXTRACT_PREFER_LOCAL",
@@ -251,6 +253,7 @@
         "CLOUDFLARE_API_TOKEN",
         "ELEVENLABS_API_KEY",
         "GEMINI_API_KEY",
+        "GMAIL_BASIC_AUTH_B64",
         "JWT_SECRET",
         "MAIL_FROM",
         "MP_DESIGNER_SECRET",
@@ -260,6 +263,8 @@
         "SHOPIFY_ADMIN_TOKEN",
         "SHOPIFY_STORE",
         "SHOPIFY_STORE_DOMAIN",
+        "SPOONFLOWER_EMAIL",
+        "SPOONFLOWER_PASSWORD",
         "STRIPE_SECRET_KEY"
       ],
       "other_keys": [
@@ -281,6 +286,7 @@
         "BUTTERFLY_DREAM_SRC",
         "BY_ID_DEBUG",
         "CACTUS_SAMPLE_N",
+        "CAP",
         "CATEGORY_REGEX",
         "CLASSIFIER_CONCURRENCY",
         "CLASSIFIER_MODEL",
@@ -289,6 +295,7 @@
         "CMP_SHARDS",
         "COLOR_CAP",
         "COLOR_PCT",
+        "COMFY_CN_MODEL",
         "COMFY_HEIGHT",
         "COMFY_MODEL",
         "COMFY_POLL_TIMEOUT_SEC",
@@ -316,11 +323,13 @@
         "DRUNK_TEXTURE",
         "DRY_RUN",
         "DW_UNIFIED_PG_PASSWORD",
+        "EDGE_BIAS",
         "ELEVENLABS_VOICE_ID",
         "ETSY_CLIENT_ID",
         "ETSY_OAUTH_ACCESS_TOKEN",
         "ETSY_OAUTH_REFRESH_TOKEN",
         "ETSY_SHOP_ID",
+        "FG",
         "GA4_MEASUREMENT_ID",
         "GEMINI_IMAGE_MODEL",
         "GEMINI_VISION_MODEL",
@@ -329,12 +338,15 @@
         "GENERATOR_VARIATIONS",
         "GEN_BACKEND",
         "GHOST_DETECTOR_MODEL",
+        "GHOST_LUMA_GAP",
         "GOOGLE_API_KEY",
+        "GROUND",
         "ID",
         "IG_AGENT_AUTH",
         "IG_AGENT_URL",
         "INCLUDE_BLOCK_NULL",
         "INSPIRATION_BUDGET_N",
+        "INVERT",
         "KEEP_SOURCE",
         "LIMIT",
         "MAC2_COMFY_URL",
@@ -343,6 +355,7 @@
         "MAX_ROLLS",
         "MP_PUBLIC_BASE",
         "MP_SAMPLE_PRICE",
+        "MURAL_MODE_CUTOFF_EPOCH",
         "N",
         "NEEDSTIF_URL",
         "NEW_BADGE_HOURS",
@@ -368,6 +381,7 @@
         "PGUSER",
         "PILOT_SINCE_TS",
         "PSQL_BIN",
+        "QUANT_COLORS",
         "REGEN_PUBLISH",
         "REPLICATE_HEIGHT",
         "REPLICATE_WIDTH",
@@ -391,6 +405,7 @@
         "SMTP_PASS",
         "SMTP_PORT",
         "SMTP_USER",
+        "SPOONFLOWER_USERNAME",
         "STOP_HOUR",
         "SUBJECT_DETECTOR_MODEL",
         "TICK_MS",
@@ -404,7 +419,10 @@
         "WALLCO_COMFY_FALLBACK",
         "WALLCO_COMP_GATE",
         "WALLCO_DB",
+        "WALLCO_ESRGAN_PASSES",
         "WALLCO_EXTRA_NEGATIVE",
+        "WALLCO_FORCE_SNAPSHOT",
+        "WALLCO_FORCE_SVG",
         "WALLCO_FORCE_TILEABLE",
         "WALLCO_FRAME_GATE",
         "WALLCO_GHOST_GATE",
@@ -412,6 +430,9 @@
         "WALLCO_JWT_SECRET",
         "WALLCO_LICENSE_PRICE_CENTS",
         "WALLCO_LOCK_TIMEOUT_MS",
+        "WALLCO_MURAL_DIR",
+        "WALLCO_MURAL_PRINT_FT",
+        "WALLCO_MURAL_UPSCALE",
         "WALLCO_NO_CIRCULAR",
         "WALLCO_NO_PALETTE_SUFFIX",
         "WALLCO_PORT",
@@ -422,12 +443,15 @@
         "WALLCO_SEAMLESS_TOLERANCE",
         "WALLCO_SEAM_HEAL",
         "WALLCO_SERVER",
+        "WALLCO_SVG_DIR",
         "WALLCO_TEST_REAL",
         "WALLCO_TEST_SLUG",
+        "WALLCO_TIF_DIR",
         "WALLCO_URL",
         "WATERMARK_OWNER",
         "WINNERS",
-        "WORKLIST"
+        "WORKLIST",
+        "_CEU_REEXEC"
       ],
       "dynamic": true,
       "review_required": true,
@@ -468,7 +492,9 @@
     },
     "~/Projects/restaurant-directory": {
       "env_path": "~/Projects/restaurant-directory/.env",
-      "derived": [],
+      "derived": [
+        "GOOGLE_PLACES_API_KEY"
+      ],
       "other_keys": [
         "CRAWL_CONCURRENCY",
         "CRAWL_STALE_DAYS",
@@ -1272,6 +1298,7 @@
     "~/Projects/Designer-Wallcoverings/shopify": {
       "env_path": "~/Projects/Designer-Wallcoverings/shopify/.env",
       "derived": [
+        "ANTHROPIC_API_KEY",
         "BROWSERBASE_API_KEY",
         "BROWSERBASE_PROJECT_ID",
         "GOOGLE_CLIENT_SECRET",
@@ -1283,6 +1310,7 @@
         "SHOPIFY_ORDERS_TOKEN",
         "SHOPIFY_STORE",
         "SHOPIFY_STORE_DOMAIN",
+        "SHOPIFY_THEME_TOKEN",
         "SLACK_BOT_TOKEN"
       ],
       "other_keys": [
@@ -1292,6 +1320,7 @@
         "ADMIN_USER",
         "AF_REDIRECT_TOKEN",
         "AF_REPAIR_TOKEN",
+        "ALLOW_LIVE",
         "APPLY",
         "APPOINTMENTS_DATABASE_URL",
         "APPROVAL_FILE",
@@ -1300,6 +1329,7 @@
         "APPT_TYPE",
         "BASIC_AUTH",
         "BUCKETB_TSV",
+        "CLAUDE_MODEL",
         "COLLECTIONS",
         "CONC",
         "COOLDOWN_MS",
@@ -1308,11 +1338,14 @@
         "DEBUG",
         "DELAY",
         "DEV_THEME",
+        "DR_DEBUG",
         "DWBR_HOUSE_LINE_REMAP",
         "DW_DB_URL",
         "DW_DOUBLE_ROLL_MOQ",
         "DW_SHOWROOM_LOCATION",
         "FILTER_QS",
+        "FRONTEND_PORT",
+        "FRONTEND_URL",
         "GEORGE_BASIC_AUTH_PASS",
         "GEORGE_BASIC_AUTH_USER",
         "GEORGE_SEND_URL",
@@ -1326,6 +1359,9 @@
         "MAHARAM_DRIP",
         "MAXID",
         "MAX_PAGES",
+        "MAX_TOKENS",
+        "MCP_SERVER_HOST",
+        "MCP_SERVER_PORT",
         "PGDATABASE",
         "PGHOST",
         "PGPASSWORD",
@@ -1336,16 +1372,25 @@
         "PREVIEW_URL",
         "QUADRILLE_SAMPLEONLY_DRIP",
         "REGEN",
+        "REQUIRE_CONFIRMATION",
         "ROOM",
         "SCROLL_PASSES",
         "SDG_PW_OVERRIDE",
+        "SECRET_KEY",
+        "SHOPIFY_ACCESS_TOKEN",
         "SHOPIFY_ADMIN_ACCESS_TOKEN",
+        "SHOPIFY_ADMIN_API_ACCESS_TOKEN",
+        "SHOPIFY_ADMIN_API_KEY",
         "SHOPIFY_ADMIN_API_TOKEN",
         "SHOPIFY_ADMIN_API_VERSION",
+        "SHOPIFY_API_TOKEN",
         "SHOPIFY_API_VERSION",
+        "SHOPIFY_SHOP",
         "SHOPIFY_SHOP_URL",
         "SKU",
         "SLACK_WEBHOOK_URL",
+        "THEME_ID",
+        "THEME_TOKEN",
         "TSV",
         "USER",
         "VERIFY_HOST"
@@ -1400,6 +1445,7 @@
         "AGENT_MONITOR_CHANNEL",
         "ALERT_THRESHOLD_CPU",
         "ALERT_THRESHOLD_MEMORY",
+        "ALLOW_LIVE",
         "API_KEY_ADMIN",
         "APPLY",
         "APPOINTMENTS_DATABASE_URL",
@@ -1457,6 +1503,8 @@
         "CHUNK",
         "CLAUDE_BIN",
         "CLAUDE_BOT_PORT",
+        "CLAUDE_MODEL",
+        "CLAUDE_PLUGIN_ROOT",
         "COLLECTION",
         "COLLECTIONS",
         "COLOR_INDEX_MAX",
@@ -1479,6 +1527,7 @@
         "CUSTOM_PROXY_USERNAME",
         "DAILY_CAP",
         "DASH_URL",
+        "DATA",
         "DATABASE_URL",
         "DB_HOST",
         "DB_NAME",
@@ -1497,6 +1546,7 @@
         "DRY",
         "DRYRUN",
         "DRY_RUN",
+        "DR_DEBUG",
         "DWBR_HOUSE_LINE_REMAP",
         "DW_BASIC_AUTH",
         "DW_DB_URL",
@@ -1507,16 +1557,27 @@
         "DW_TZ",
         "EMAIL_ALERTS",
         "ENABLE_ORDER_ANALYTICS",
+        "ENABLE_SECURITY_REMINDER",
         "ENABLE_SMS_ALERTS",
         "ENDPOINTS_TO_CHECK",
         "ENR",
+        "ENRICH_DONE_SEEDS",
+        "ENRICH_HENRY_DIR",
+        "ENRICH_MAX_RETRIES",
+        "ENRICH_OLLAMA_URL",
         "ENRICH_ON_IMPORT",
+        "ENRICH_SANGETSU_DIR",
+        "ENRICH_SHARD_COUNT",
+        "ENRICH_SHARD_INDEX",
+        "ENRICH_VL_MODEL",
         "ERROR_EMAIL_RECIPIENTS",
         "EXPO_OS",
         "EXTRACT_PREFER_LOCAL",
         "EXTRA_IDS",
         "FILTER_QS",
         "FRAUD_RISK_THRESHOLD",
+        "FRONTEND_PORT",
+        "FRONTEND_URL",
         "GB_CSV",
         "GEMINI_KEY",
         "GEMINI_MODEL",
@@ -1575,6 +1636,7 @@
         "INSTAGRAM_APP_ID",
         "INSTAGRAM_APP_SECRET",
         "INSTAGRAM_BUSINESS_ACCOUNT_ID",
+        "IP_SCALE",
         "KRAVET_EXCLUDE_SKUS",
         "LEGAL_TEAM_URL",
         "LIMIT",
@@ -1588,6 +1650,7 @@
         "MAIL_CC",
         "MAIL_TO",
         "MANAGEMENT_EMAILS",
+        "MANIFEST",
         "MARKETING_AGENT_URL",
         "MASTER_HUB_PORT",
         "MAT_PREFIXES",
@@ -1597,6 +1660,9 @@
         "MAX_PAGES",
         "MAX_PRODUCTS",
         "MAX_PUBLISH",
+        "MAX_TOKENS",
+        "MCP_SERVER_HOST",
+        "MCP_SERVER_PORT",
         "MIN_COUNT",
         "MIN_ISSUE_NUMBER",
         "MODE",
@@ -1620,6 +1686,7 @@
         "ORDER_ANALYTICS_LOG",
         "ORDER_EMAIL_RECIPIENTS",
         "OUT",
+        "OUTDIR",
         "OUTF",
         "OUTPUT_DIR",
         "OXYLABS_ENDPOINT",
@@ -1645,6 +1712,8 @@
         "PREFIX",
         "PREVIEW_API",
         "PREVIEW_URL",
+        "PRICE_ONLY",
+        "PROBE_FULLSIZE",
         "PRODUCT_IMPORT_CHANNEL",
         "PRODUCT_TYPE",
         "PROXY_ENABLED",
@@ -1674,6 +1743,7 @@
         "REFRESH_MODE",
         "REGEN",
         "RENUM_DAY",
+        "REQUIRE_CONFIRMATION",
         "RETRY_ATTEMPTS",
         "RETRY_DELAY_MS",
         "RETRY_FAILURES",
@@ -1683,6 +1753,7 @@
         "RINGCENTRAL_PASSWORD",
         "RINGCENTRAL_USERNAME",
         "ROOM",
+        "SA",
         "SALES_SUMMARY_CHANNEL",
         "SALES_TEAM_EMAILS",
         "SAMPLE_PER_VENDOR",
@@ -1696,15 +1767,18 @@
         "SCRAPE_INTERVAL",
         "SCROLL_PASSES",
         "SDG_PW_OVERRIDE",
+        "SECRET_KEY",
         "SESSION_SECRET",
         "SHOPIFY_ACCESS_TOKEN",
         "SHOPIFY_ADMIN_ACCESS_TOKEN",
+        "SHOPIFY_ADMIN_API_ACCESS_TOKEN",
         "SHOPIFY_ADMIN_API_KEY",
         "SHOPIFY_ADMIN_API_TOKEN",
         "SHOPIFY_ADMIN_API_VERSION",
         "SHOPIFY_AGENT_URL",
         "SHOPIFY_API_KEY",
         "SHOPIFY_API_SECRET",
+        "SHOPIFY_API_TOKEN",
         "SHOPIFY_API_VERSION",
         "SHOPIFY_CLIENT_ID",
         "SHOPIFY_CLIENT_SECRET",
@@ -1748,6 +1822,7 @@
         "SOCIALPILOT_TOKEN_URL",
         "SOURCE_TABLE",
         "SRC",
+        "STEPS",
         "STEVE_SLACK_ID",
         "SUPABASE_ANON_KEY",
         "SUPABASE_SERVICE_KEY",
@@ -1755,6 +1830,8 @@
         "SUPABASE_URL",
         "TABLE",
         "TASK_ORCHESTRATOR_URL",
+        "THEME_ID",
+        "THEME_TOKEN",
         "TODO_DB_URL",
         "TO_PHONE_NUMBER",
         "TSV",
@@ -1762,10 +1839,12 @@
         "ULTRATHINK_YOLO_MODE",
         "USER",
         "VENDOR",
+        "VENDORS",
         "VERIFY_HOST",
         "VIEW",
         "VISION_SCAN_CAP",
         "WAITMS",
+        "WALL_MASK",
         "WEBHOOK_TIMEOUT_MS",
         "WHERE",
         "WPW",
@@ -2723,35 +2802,175 @@
         "ADMIN_PASS",
         "ADMIN_TOKEN",
         "ADMIN_USER",
+        "ANDROID_DATA",
+        "ANDROID_ROOT",
+        "ANSI_COLORS_DISABLED",
+        "AOTINDUCTOR_RAISE_ERROR_ON_IGNORED_OPTIMIZATION",
+        "AOTINDUCTOR_REPRO_LEVEL",
+        "AOT_INDUCTOR_DEBUG_COMPILE",
+        "AOT_INDUCTOR_DEBUG_SYMBOLS",
+        "AOT_INDUCTOR_ENABLE_FRAME_POINTER",
+        "AOT_INDUCTOR_ENABLE_LINE_TABLES",
+        "AOT_INDUCTOR_ENABLE_LTO",
+        "AOT_INDUCTOR_WEIGHT_USE_CACHING_ALLOCATOR",
+        "AOT_PARTITIONER_DEBUG",
+        "APPVEYOR",
+        "AR",
+        "ARFLAGS",
+        "ATEN_CPU_CAPABILITY",
         "AUTH_DEV_SECRET",
         "AUTH_MODE",
+        "BACKEND",
         "BASE",
         "BB_MODE",
         "BB_TARGET_URL",
+        "BENCHMARK_USE_DEV_SHM",
         "BUNDLE_EXPIRY_DAYS",
         "BUNDLE_MAX_DOWNLOADS_PER_ORDER",
         "BY_ID_DEBUG",
+        "CC",
+        "CFLAGS",
+        "CI",
+        "COLUMNS",
+        "COMPILE_STROBELIGHT_FRAME_FILTER",
+        "COMPILE_STROBELIGHT_MAX_PROFILE_TIME",
+        "COMPILE_STROBELIGHT_MAX_STACK_LENGTH",
+        "COMPILE_STROBELIGHT_SAMPLE_RATE",
         "COMPLIANCE_KEY",
         "COMPOSITION_DETECTOR_MODEL",
+        "COMP_CWORD",
+        "COMP_WORDS",
+        "CONDA_EXE",
+        "CONDA_PREFIX",
+        "CPLUS_INCLUDE_PATH",
+        "CPP",
+        "CPPFLAGS",
+        "CUBLAS_WORKSPACE_CONFIG",
+        "CUDACXX",
+        "CUDA_HOME",
+        "CUDA_INC_PATH",
+        "CUDA_MODULE_LOADING",
+        "CUDA_PATH",
+        "CUDA_PROFILE",
+        "CUDA_VISIBLE_DEVICES",
+        "CUDNN_HOME",
+        "CUDNN_LIBRARY",
+        "CUDNN_PATH",
+        "CURL_CA_BUNDLE",
+        "CUTEDSL_ENABLE_AUTOTUNING",
+        "CUTLASS_EPILOGUE_FUSION",
+        "CXX",
+        "CXXFLAGS",
         "DATABASE_URL",
+        "DATABRICKS_RUNTIME_VERSION",
+        "DCP_DISABLE_AUTOMATIC_GC",
+        "DCP_DISABLE_MANUAL_GC",
+        "DCP_USE_PREFIX_STORE",
         "DESIGN_REFS_POOL_SIZE",
         "DESIGN_REFS_TTL_SEC",
+        "DISABLED_TESTS_FILE",
+        "DISABLE_CUPTI_LAZY_REINIT",
+        "DISPLAY",
+        "DISTRIBUTED_TESTS_DEFAULT_TIMEOUT",
+        "DISTUTILS_DEBUG",
+        "DISTUTILS_USE_SDK",
+        "DIST_EXTRA_CONFIG",
+        "DOWNLOAD_PATH",
+        "DUMP_AOTI_MINIFIER",
         "DW_UNIFIED_DB",
         "DW_UNIFIED_PG_PASSWORD",
+        "EAGER_IMPORT",
+        "EDITOR",
         "ELEVENLABS_VOICE_ID",
+        "ENABLE_PERSISTENT_TMA_MATMUL",
+        "ENABLE_PYTORCH_EXECUTION_TRACE",
+        "ENABLE_PYTORCH_EXECUTION_TRACE_EXTRAS",
+        "ENABLE_TEMPLATE_TMA_STORE",
+        "ENABLE_TMA_LOAD_FOR_TEMPLATE_EPILOGUE",
+        "ENSUREPIP_OPTIONS",
+        "FAKE_ALLOW_META",
+        "FORCE_COLOR",
+        "FR_TRACE_VERBOSE_OUTPUT",
+        "FSSPEC_CONFIG_DIR",
+        "FX_GRAPH_SHOW_DEVICE",
+        "FX_GRAPH_SHOW_META",
+        "FX_GRAPH_SHOW_STRIDE",
+        "FX_PATCH_GETITEM",
         "GA4_MEASUREMENT_ID",
         "GENERATOR_COOLDOWN",
         "GEN_BACKEND",
         "GEORGE_BASE",
         "GHOST_DETECTOR_MODEL",
         "GOOGLE_API_KEY",
+        "HALIDE_INCLUDE",
+        "HALIDE_LIB",
+        "HALIDE_REPRO",
+        "HIP_VISIBLE_DEVICES",
+        "HOMEPATH",
         "IG_AGENT_AUTH",
         "IG_AGENT_URL",
+        "INDUCTOR_CK_BACKEND_GENERATE_TEST_RUNNER_CODE",
+        "INDUCTOR_CUDA_BACKEND_GENERATE_TEST_RUNNER_CODE",
+        "INDUCTOR_DOT_GRAPH_SHAPE_SVG",
+        "INDUCTOR_LOG_URL_FOR_GRAPH_XFORM",
+        "INDUCTOR_ORIG_FX_GRAPH",
+        "INDUCTOR_ORIG_FX_SVG",
+        "INDUCTOR_POST_FUSION_GRAPH",
+        "INDUCTOR_POST_FUSION_SVG",
+        "INDUCTOR_TEST_DISABLE_FRESH_CACHE",
+        "INDUCTOR_WRITE_SCHEDULER_GRAPH",
+        "INIT_METHOD",
+        "INSIDE_RE_WORKER",
+        "IS_FBCODE",
+        "JSONSCHEMA_DEBUG_CODE_GENERATION",
+        "KINETO_FORCE_OPTIMIZER_HOOK",
+        "KINETO_FORCE_STEP_HOOK",
+        "KINETO_USE_DAEMON",
+        "KMP_DUPLICATE_LIB_OK",
+        "LAMA_MODEL",
+        "LDCXXSHARED",
+        "LDFLAGS",
+        "LDSHARED",
+        "LD_LIBRARY_PATH",
+        "LD_PRELOAD",
+        "LEVEL_ZERO_V1_SDK_PATH",
+        "LINES",
+        "LOCAL_RANK",
+        "LOCAL_WORLD_SIZE",
+        "LOGLEVEL",
+        "LOG_AUTOTUNE_RESULTS",
+        "LTC_MAX_ASYNC_QUEUE",
+        "MACOSX_DEPLOYMENT_TARGET",
         "MARKETPLACE_DB_URL",
+        "MASTER_ADDR",
+        "MASTER_PORT",
+        "MAST_HPC_JOB_NAME",
+        "MAX_JOBS",
         "MICROSITE_ADMIN_ENABLED",
+        "MKL_SERVICE_FORCE_INTEL",
+        "MPMATH_NOGMPY",
+        "MPMATH_STRICT",
         "MP_PUBLIC_BASE",
         "MP_SAMPLE_PRICE",
+        "MSGPACK_PUREPYTHON",
+        "NETRC",
+        "NETWORKX_AUTOMATIC_BACKENDS",
+        "NETWORKX_CACHE_CONVERTED_GRAPHS",
+        "NETWORKX_FALLBACK_TO_NX",
+        "NETWORKX_TEST_BACKEND",
+        "NETWORKX_WARNINGS_TO_IGNORE",
+        "NETWORK_REQUIRED",
         "NEW_BADGE_HOURS",
+        "NO_COLOR",
+        "NO_NETWORK",
+        "NPY_AVAILABLE_MEM",
+        "NPY_PROMOTION_STATE",
+        "NUMPY_EXPERIMENTAL_DTYPE_API",
+        "NUMPY_MADVISE_HUGEPAGE",
+        "NUMPY_TYPING_TEST_CLEAR_CACHE",
+        "NUMPY_WARN_IF_NO_MEM_POLICY",
+        "NUM_PARALLEL_PROCS",
+        "NVSHMEM_LIB_DIR",
         "OLLAMA_HOST",
         "OLLAMA_MODEL",
         "OLLAMA_REVIEW_MODEL",
@@ -2759,16 +2978,100 @@
         "OLLAMA_URL",
         "OLLAMA_VISION_MODEL",
         "OLLAMA_VISION_URL",
+        "OMP_NUM_THREADS",
+        "OMP_PREFIX",
+        "ONEAPI_ROOT",
+        "OPINFO_RESTRICT_TO_DSL",
         "PAIRS_UPSTREAM",
+        "PARTITIONER_MEMORY_BUDGET_PARETO",
+        "PARTITIONER_MEMORY_BUDGET_PARETO_DIR",
+        "PATHEXT",
         "PGDATABASE",
         "PGHOST",
         "PGOPTIONS",
         "PGPASSWORD",
         "PGPORT",
         "PGUSER",
+        "PIP_BUILD_TRACKER",
+        "PIP_CONFIG_FILE",
+        "PIP_CONSTRAINT",
+        "PIP_DISABLE_PIP_VERSION_CHECK",
+        "PIP_EXISTS_ACTION",
+        "PIP_NO_COLOR",
+        "PIP_NO_INPUT",
+        "PIP_USER_AGENT_USER_DATA",
+        "PLAT",
+        "PREFIX",
+        "PRE_BUILT_SETUPTOOLS_SDIST",
+        "PRE_BUILT_SETUPTOOLS_WHEEL",
+        "PRIMA_DEBUGGING",
+        "PROCESSOR_ARCHITECTURE",
+        "PROCESSOR_ARCHITEW6432",
+        "PROGRAMFILES",
+        "PT2_COMPILE_ID_PREFIX",
+        "PYTEST_XDIST_WORKER",
+        "PYTEST_XDIST_WORKER_COUNT",
+        "PYTHONDONTWRITEBYTECODE",
+        "PYTHONHASHSEED",
+        "PYTHONPATH",
+        "PYTHON_EGG_CACHE",
+        "PYTHON_EXEC",
+        "PYTORCH_CUDA_MEMCHECK",
+        "PYTORCH_DDP_USE_SIDE_STREAM",
+        "PYTORCH_DEBUG_FLASH_ATTENTION_GCN_ARCH_OVERRIDE",
+        "PYTORCH_HYPOTHESIS_PROFILE",
+        "PYTORCH_JIT",
+        "PYTORCH_JIT_DISABLE",
+        "PYTORCH_JIT_STATS",
+        "PYTORCH_JIT_TIME",
+        "PYTORCH_KEEP_TMPDIR",
+        "PYTORCH_MATCHER_LOGLEVEL",
+        "PYTORCH_MIOPEN_SUGGEST_NHWC",
+        "PYTORCH_NO_CUDA_MEMORY_CACHING",
+        "PYTORCH_NVCC",
+        "PYTORCH_NVML_BASED_CUDA_CHECK",
+        "PYTORCH_REORDER_COLLECTIVES_LIMIT",
+        "PYTORCH_ROCM_ARCH",
+        "PYTORCH_SINK_WAITS_LIMIT",
+        "PYTORCH_SKIP_CUDNN_COMPATIBILITY_CHECK",
+        "PYTORCH_TESTING_DEVICE_EXCEPT_FOR",
+        "PYTORCH_TESTING_DEVICE_ONLY_FOR",
+        "PYTORCH_TEST_CHECK_VALIDATE_SPARSE_SAMPLES",
+        "PYTORCH_TEST_WITH_TV",
+        "PYTORCH_TUNABLEOP_FILENAME",
+        "QT_QPA_FONTDIR",
+        "QT_QPA_PLATFORM_PLUGIN_PATH",
+        "QUACK_ARCH",
+        "QUACK_CACHE_DIR",
+        "QUACK_CACHE_ENABLED",
+        "QUACK_COMPILE_WORKERS",
+        "QUACK_COMPILE_WORKER_PARENT_PID",
+        "QUACK_DISABLE_MLIR_THREADING_PATCH",
+        "RANK",
+        "RANLIB",
+        "REQUESTS_CA_BUNDLE",
         "RESEND_API_KEY",
+        "ROCM_HOME",
+        "ROCM_PATH",
+        "ROCR_VISIBLE_DEVICES",
+        "ROCSHMEM_LIB_DIR",
+        "ROLE_RANK",
         "ROOM_API",
+        "RPC_INIT_WITH_TCP",
+        "SCIPY_ARRAY_API",
+        "SCIPY_AVAILABLE_MEM",
+        "SCIPY_DEFAULT_DTYPE",
+        "SCIPY_DEVICE",
+        "SCIPY_HYPOTHESIS_PROFILE",
+        "SCIPY_USE_PROPACK",
+        "SCIPY_XFAIL",
+        "SCIPY_XSLOW",
         "SDXL_MODEL_VERSION",
+        "SETUPTOOLS_ENFORCE_DEPRECATION",
+        "SETUPTOOLS_EXT_SUFFIX",
+        "SETUPTOOLS_LAUNCHER",
+        "SETUPTOOLS_USE_DISTUTILS",
+        "SHELL",
         "SHOPIFY_ADMIN_API_TOKEN",
         "SHOPIFY_API_VERSION",
         "SHOPIFY_SHOP_URL",
@@ -2777,20 +3080,287 @@
         "SHOPIFY_WRITE_TOKEN",
         "SITE",
         "SITE_EMAIL",
+        "SLOW_TESTS_FILE",
         "SMTP_HOST",
         "SMTP_PASS",
         "SMTP_PORT",
         "SMTP_USER",
+        "SOURCE_DATE_EPOCH",
+        "SSLKEYLOGFILE",
+        "STRICT_DEFAULT",
         "SUBJECT_DETECTOR_MODEL",
         "SV_VENDOR",
+        "SYMPY_COMPILER_VENDOR",
+        "SYMPY_DEBUG",
+        "SYMPY_GROUND_TYPES",
+        "SYMPY_STRICT_COMPILER_CHECKS",
+        "SYMPY_TEST_CLEAN_TEMP",
+        "SYMPY_TIMINGS",
+        "SYMPY_USE_CACHE",
+        "SYSTEMROOT",
+        "TEARDOWN_CUPTI",
+        "TEMP_DIR",
+        "TENSORIFY_PYTHON_SCALARS",
+        "TERM",
+        "TEST_REPORT_SOURCE_OVERRIDE",
+        "TF_CPP_MIN_LOG_LEVEL",
+        "TIMEOUT_BACKEND_TEST",
+        "TORCHCOMM_RANK",
+        "TORCHCOMM_SIZE",
+        "TORCHCOMM_STORE_PATH",
+        "TORCHDYNAMO_AUTO_FUNCTIONALIZED_V2",
+        "TORCHDYNAMO_CAPTURE_DYNAMIC_OUTPUT_SHAPE_OPS",
+        "TORCHDYNAMO_CAPTURE_SCALAR_OUTPUTS",
+        "TORCHDYNAMO_DEBUG_FUNCTION",
+        "TORCHDYNAMO_DISABLE",
+        "TORCHDYNAMO_ENABLE_P2P_COMPILATION",
+        "TORCHDYNAMO_EXTENDED_ADVICE",
+        "TORCHDYNAMO_EXTENDED_DEBUG_CPP",
+        "TORCHDYNAMO_NO_DATA_DEPENDENT_GRAPH_BREAK",
+        "TORCHDYNAMO_PREPARE_FREEZING",
+        "TORCHDYNAMO_PRINT_MISSING",
+        "TORCHDYNAMO_REPRO_AFTER",
+        "TORCHDYNAMO_REPRO_FORWARD_ONLY",
+        "TORCHDYNAMO_REPRO_IGNORE_NON_FP",
+        "TORCHDYNAMO_REPRO_LEVEL",
+        "TORCHDYNAMO_SUPPRESS_ERRORS",
+        "TORCHDYNAMO_TRANSLATION_NO_BISECT",
+        "TORCHDYNAMO_TRANSLATION_VALIDATION",
+        "TORCHDYNAMO_TRANSLATION_VALIDATION_TIMEOUT",
+        "TORCHDYNAMO_VERBOSE",
+        "TORCHELASTIC_ERROR_FILE",
+        "TORCHELASTIC_LOG_LINE_PREFIX_TEMPLATE",
+        "TORCHELASTIC_RUN_ID",
+        "TORCHELASTIC_SIGNALS_TO_HANDLE",
+        "TORCHELASTIC_USE_AGENT_STORE",
+        "TORCHEXPORT_EXTENDED_DEBUG_CURRENT_LOC",
+        "TORCHINDUCTOR_ALIGNMENT_ASSERTS",
+        "TORCHINDUCTOR_ANNOTATE_TRAINING",
+        "TORCHINDUCTOR_APPLY_GUMBEL_MAX_TRICK",
+        "TORCHINDUCTOR_ASSUME_UNALIGNED_FALLBACK_OUTPUT",
+        "TORCHINDUCTOR_AUTOGRAD_REMOTE_CACHE",
+        "TORCHINDUCTOR_AUTOHEURISTIC_COLLECT",
+        "TORCHINDUCTOR_AUTOHEURISTIC_USE",
+        "TORCHINDUCTOR_AUTOTUNE_IN_SUBPROC",
+        "TORCHINDUCTOR_AUTOTUNE_MULTI_DEVICE",
+        "TORCHINDUCTOR_AUTOTUNE_NUM_CHOICES_DISPLAYED",
+        "TORCHINDUCTOR_AUTOTUNE_POOL_INACTIVITY_TIMEOUT",
+        "TORCHINDUCTOR_AUTO_CHUNKER",
+        "TORCHINDUCTOR_BATCH_INVARIANT",
+        "TORCHINDUCTOR_BENCHMARK_EPILOGUE_FUSION",
+        "TORCHINDUCTOR_BENCHMARK_FUSION",
+        "TORCHINDUCTOR_BENCHMARK_KERNEL",
+        "TORCHINDUCTOR_CACHE_DIR",
+        "TORCHINDUCTOR_CACHE_SDPA_CONSTRAINT",
+        "TORCHINDUCTOR_CHUNKER_NUM_CHUNKS",
+        "TORCHINDUCTOR_CK_DIR",
+        "TORCHINDUCTOR_COLLECTIVE_BENCHMARK_NRUNS",
+        "TORCHINDUCTOR_COLLECTIVE_BENCHMARK_TIMEOUT",
+        "TORCHINDUCTOR_COMPILE_THREADS",
+        "TORCHINDUCTOR_COMPILE_WORKER_WAIT_TIMEOUT",
+        "TORCHINDUCTOR_COMPREHENSIVE_PADDING",
+        "TORCHINDUCTOR_CONV_LOGGING_FILE",
+        "TORCHINDUCTOR_COOPERATIVE_REDUCTIONS",
+        "TORCHINDUCTOR_COORDINATE_DESCENT_CHECK_ALL_DIRECTIONS",
+        "TORCHINDUCTOR_COORDINATE_DESCENT_RADIUS",
+        "TORCHINDUCTOR_COORDINATE_DESCENT_TUNING",
+        "TORCHINDUCTOR_CPP_DYNAMIC_THREADS",
+        "TORCHINDUCTOR_CPP_ENABLE_KERNEL_PROFILE",
+        "TORCHINDUCTOR_CPP_ENABLE_TILING_HEURISTIC",
+        "TORCHINDUCTOR_CPP_ENABLE_UNSAFE_MATH_OPT_FLAG",
+        "TORCHINDUCTOR_CPP_FALLBACK_SCATTER_REDUCE_SUM",
+        "TORCHINDUCTOR_CPP_FORCE_INLINE_KERNEL",
+        "TORCHINDUCTOR_CPP_GEMM_CACHE_BLOCKING",
+        "TORCHINDUCTOR_CPP_GEMM_MAX_K_SLICES",
+        "TORCHINDUCTOR_CPP_GEMM_THREAD_FACTORS",
+        "TORCHINDUCTOR_CPP_MARCH",
+        "TORCHINDUCTOR_CPP_MAX_HORIZONTAL_FUSION_SIZE",
+        "TORCHINDUCTOR_CPP_MIN_CHUNK_SIZE",
+        "TORCHINDUCTOR_CPP_NO_REDUNDANT_LOOPS",
+        "TORCHINDUCTOR_CPP_USE_CONSTEXPR_FOR_INT_ARRAY",
+        "TORCHINDUCTOR_CPP_USE_DECOMPOSE_TANH",
+        "TORCHINDUCTOR_CPP_WEIGHT_PREPACK",
+        "TORCHINDUCTOR_CPP_WRAPPER",
+        "TORCHINDUCTOR_CPP_WRAPPER_BUILD_SEPARATE",
+        "TORCHINDUCTOR_CUDAGRAPHS",
+        "TORCHINDUCTOR_CUTLASS_DIR",
+        "TORCHINDUCTOR_CUTLASS_HASH_WITH_COMPILE_CMD",
+        "TORCHINDUCTOR_CUTLASS_PRESCREENING",
+        "TORCHINDUCTOR_DEBUG_COMPILE",
+        "TORCHINDUCTOR_DEBUG_FUSION",
+        "TORCHINDUCTOR_DEBUG_SYMBOL",
+        "TORCHINDUCTOR_DECOMPOSE_K_THRESHOLD",
+        "TORCHINDUCTOR_DECOMPOSE_SORT_OPS",
+        "TORCHINDUCTOR_DEFAULT_AUTOTUNE_REP",
+        "TORCHINDUCTOR_DEFAULT_AUTOTUNE_WARMUP",
+        "TORCHINDUCTOR_DETERMINISTIC",
+        "TORCHINDUCTOR_DISTRIBUTED_MAX_AUTOTUNE_GEMM",
+        "TORCHINDUCTOR_DIVISIBLE_BY_16",
+        "TORCHINDUCTOR_DUMP_LAUNCH_PARAMS",
+        "TORCHINDUCTOR_DUMP_LAUNCH_TENSORS",
+        "TORCHINDUCTOR_DYNAMIC_SCALE_RBLOCK",
+        "TORCHINDUCTOR_EMIT_POINTER_RANGE_32",
+        "TORCHINDUCTOR_EMULATE_DIVISION_ROUNDING",
+        "TORCHINDUCTOR_EMULATE_PRECISION_CASTS",
+        "TORCHINDUCTOR_EMULATE_PRECISION_CASTS_ON_SAVED_TENSORS",
+        "TORCHINDUCTOR_ENABLED_METRIC_TABLES",
+        "TORCHINDUCTOR_ENABLE_LINEAR_BINARY_FOLDING",
+        "TORCHINDUCTOR_ENABLE_PDL",
+        "TORCHINDUCTOR_FILE_LOCK_TIMEOUT",
+        "TORCHINDUCTOR_FORCE_FILTER_REDUCTION_CONFIGS",
+        "TORCHINDUCTOR_FORCE_LAYOUT_OPT",
+        "TORCHINDUCTOR_FREEZING",
+        "TORCHINDUCTOR_FX_WRAPPER",
+        "TORCHINDUCTOR_GRAPH_PARTITION",
+        "TORCHINDUCTOR_INPLACE_PADDING",
+        "TORCHINDUCTOR_KEEP_OUTPUT_STRIDE",
+        "TORCHINDUCTOR_KEEP_STATIC_CUBIN_RAW",
+        "TORCHINDUCTOR_LAYOUT_OPTIMIZATION",
+        "TORCHINDUCTOR_LOOP_REINDEXING_AFTER_FUSION",
+        "TORCHINDUCTOR_MAX_AUTOTUNE",
+        "TORCHINDUCTOR_MAX_AUTOTUNE_GEMM",
+        "TORCHINDUCTOR_MAX_AUTOTUNE_POINTWISE",
+        "TORCHINDUCTOR_MAX_AUTOTUNE_PRUNE_CHOICES_BASED_ON_SHARED_MEM",
+        "TORCHINDUCTOR_MAX_AUTOTUNE_REPORT_CHOICES_STATS",
+        "TORCHINDUCTOR_MEMORY_PLANNING",
+        "TORCHINDUCTOR_MIN_NUM_SPLIT",
+        "TORCHINDUCTOR_MIX_ORDER_REDUCTION",
+        "TORCHINDUCTOR_MIX_ORDER_REDUCTION_ALLOW_MULTI_STAGES",
+        "TORCHINDUCTOR_MIX_ORDER_REDUCTION_AUTOTUNE_SPLIT_SIZE",
+        "TORCHINDUCTOR_MM_LOGGING_FILE",
+        "TORCHINDUCTOR_MULTI_KERNEL",
+        "TORCHINDUCTOR_NAN_ASSERTS",
+        "TORCHINDUCTOR_NATIVE_MATMUL",
+        "TORCHINDUCTOR_NESTED_REDUCTION",
+        "TORCHINDUCTOR_NVGEMM_MAX_PROFILING_CONFIGS",
+        "TORCHINDUCTOR_NVGEMM_SUPPLEMENT_CONFIGS",
+        "TORCHINDUCTOR_ONLINE_SOFTMAX",
+        "TORCHINDUCTOR_OPTIMIZE_SCATTER_UPON_CONST_TENSOR",
+        "TORCHINDUCTOR_ORIGAMI",
+        "TORCHINDUCTOR_ORIGAMI_TOPK",
+        "TORCHINDUCTOR_PARTITIONED_SCATTER_ENABLED",
+        "TORCHINDUCTOR_PATTERN_MATCH_BACKEND",
+        "TORCHINDUCTOR_PATTERN_MATCH_DEBUG",
+        "TORCHINDUCTOR_PERMUTE_FUSION",
+        "TORCHINDUCTOR_PERSISTENT_REDUCTIONS",
+        "TORCHINDUCTOR_PIPELINE_GEMM_AUTOTUNING",
+        "TORCHINDUCTOR_PRECOMPILATION_TIMEOUT_SECONDS",
+        "TORCHINDUCTOR_PROFILE",
+        "TORCHINDUCTOR_PROFILE_WITH_DO_BENCH_USING_PROFILING",
+        "TORCHINDUCTOR_PROLOGUE_FUSION",
+        "TORCHINDUCTOR_REDIS_HOST",
+        "TORCHINDUCTOR_REDIS_PORT",
+        "TORCHINDUCTOR_REDIS_URL",
+        "TORCHINDUCTOR_RUNTIME_TRITON_NAN_ASSERTS",
+        "TORCHINDUCTOR_RUN_JIT_POST_COMPILE_HOOK",
+        "TORCHINDUCTOR_SAVE_ARGS",
+        "TORCHINDUCTOR_SCALAR_ASSERTS",
+        "TORCHINDUCTOR_SHAPE_PADDING",
+        "TORCHINDUCTOR_SIZE_ASSERTS",
+        "TORCHINDUCTOR_SKIP_L1",
+        "TORCHINDUCTOR_SPLIT_REDUCTIONS",
+        "TORCHINDUCTOR_STRICT_STATIC_CUDA_LAUNCHER",
+        "TORCHINDUCTOR_TRITON_DISABLE_DEVICE_DETECTION",
+        "TORCHINDUCTOR_TRITON_PROTON_GROUP_BY_SM",
+        "TORCHINDUCTOR_TRITON_PROTON_PER_CTA_OCCUPANCY",
+        "TORCHINDUCTOR_TRITON_PROTON_PROFILING",
+        "TORCHINDUCTOR_TRITON_PROTON_SPLIT_INVOCATIONS",
+        "TORCHINDUCTOR_UNIQUE_KERNEL_NAMES",
+        "TORCHINDUCTOR_UNIQUE_USER_KERNEL_NAMES",
+        "TORCHINDUCTOR_USE_FAST_MATH",
+        "TORCHINDUCTOR_USE_FAST_TRITON_LAUNCHER",
+        "TORCHINDUCTOR_USE_LAUNCH_METADATA_SCHEMA",
+        "TORCHINDUCTOR_USE_STATIC_CUDA_LAUNCHER",
+        "TORCHINDUCTOR_VEC_ISA_OK",
+        "TORCHINDUCTOR_WARN_MIX_LAYOUT",
+        "TORCHINDUCTOR_WINDOWS_TESTS",
+        "TORCHINDUCTOR_WORKER_START",
+        "TORCHINDUCTOR_WRITE_ARE_DETERMINISTIC_ALGORITHMS_ENABLED",
+        "TORCHINDUCTOR_WRITE_MISSING_OPS",
+        "TORCHINDUCTOR_XPU_KERNEL_FORMAT",
+        "TORCHVISION_WARN_WHEN_EXTENSION_LOADING_FAILS",
+        "TORCH_CACHING_PRECOMPILE",
+        "TORCH_COMPILER_COLLECTIVES",
+        "TORCH_COMPILE_BACKEND",
+        "TORCH_COMPILE_CPROFILE",
+        "TORCH_COMPILE_DEBUG",
+        "TORCH_COMPILE_DEBUG_SAVE_REAL",
+        "TORCH_COMPILE_DISABLE",
+        "TORCH_COMPILE_DYNAMO_PROFILER",
+        "TORCH_COMPILE_GRAPH_FORMAT",
+        "TORCH_COMPILE_OVERRIDE_BACKENDS",
+        "TORCH_COMPILE_REPLAY_RECORD",
+        "TORCH_COMPILE_STROBELIGHT",
+        "TORCH_COMPILE_USE_LAZY_GRAPH_MODULE",
+        "TORCH_CUDA_ARCH_LIST",
+        "TORCH_DEVICE_BACKEND_AUTOLOAD",
+        "TORCH_DISABLE_NATIVE_JIT",
+        "TORCH_DISABLE_SHARE_RDZV_TCP_STORE",
+        "TORCH_DISTRIBUTED_COMPILE_ON_ONE_RANK",
+        "TORCH_DISTRIBUTED_DEBUG",
+        "TORCH_DISTRIBUTED_USE_TORCHCOMMS",
+        "TORCH_DIST_INIT_BARRIER",
+        "TORCH_DONT_CHECK_COMPILER_ABI",
+        "TORCH_DYNAMO_AUTOMATIC_DYNAMIC_SHAPES",
+        "TORCH_DYNAMO_DO_NOT_EMIT_RUNTIME_ASSERTS",
+        "TORCH_ELASTIC_SHUTDOWN_TIMEOUT",
+        "TORCH_ELASTIC_WORKER_IDENTICAL",
+        "TORCH_EXTENSIONS_DIR",
+        "TORCH_EXTENSION_SKIP_NVCC_GEN_DEPENDENCIES",
+        "TORCH_FAKE_TENSOR_DEBUG",
+        "TORCH_FAKE_TENSOR_DISPATCH_CACHE",
+        "TORCH_FAKE_TENSOR_DISPATCH_CACHE_CROSSCHECK",
+        "TORCH_FORCE_NO_WEIGHTS_ONLY_LOAD",
+        "TORCH_FORCE_WEIGHTS_ONLY_LOAD",
+        "TORCH_HUB",
+        "TORCH_INDUCTOR_INSTALL_GXX",
+        "TORCH_MODEL_ZOO",
+        "TORCH_NATIVE_SKIP_VERSION_CHECK",
+        "TORCH_NCCL_ASYNC_ERROR_HANDLING",
+        "TORCH_NCCL_BLOCKING_WAIT",
+        "TORCH_NCCL_DESYNC_DEBUG",
+        "TORCH_NCCL_DUMP_ON_TIMEOUT",
+        "TORCH_NCCL_TRACE_BUFFER_SIZE",
+        "TORCH_NO_COMPILER_WRAPPER",
+        "TORCH_PYTHON_NATIVE_USER_GRAPH_ORDER_FN",
+        "TORCH_ROCM_AOTRITON_ENABLE_EXPERIMENTAL",
+        "TORCH_SERIALIZATION_DEBUG",
+        "TORCH_SHOW_CPP_STACKTRACES",
+        "TORCH_SPARSE_BSR_SCATTER_MM_LRU_CACHE_SIZE",
+        "TORCH_STRICT_PRECOMPILE",
+        "TORCH_SYMMMEM_IMPLICIT_POOL",
+        "TORCH_TEST_DEVICES",
+        "TORCH_TNT_IN_USE",
+        "TORCH_USE_RTLD_GLOBAL",
+        "TORCH_WARM_POOL",
+        "TORCH_XPU_ARCH_LIST",
         "TRADE_ADMIN_EMAIL",
         "TRADE_ADMIN_PASS",
+        "TRITON_CACHE_DIR",
+        "TRITON_INTERPRET",
+        "TRITON_LIBDEVICE_PATH",
+        "TRITON_PTXAS_PATH",
+        "TRITON_USE_META_WS",
+        "TVM_SCHEDULER",
+        "TW_JOB_USER",
+        "UNIXCONFDIR",
+        "UNIXUSRLIBDIR",
+        "UNSAFE_SKIP_FSDP_MODULE_GUARDS",
         "USER",
+        "USERNAME",
+        "USERPROFILE",
+        "USE_LIBUV",
+        "USE_SYMENGINE",
+        "VALIDATE_PYPROJECT_NO_NETWORK",
+        "VIRTUAL_ENV",
+        "VISUAL",
+        "VSCMD_ARG_TGT_ARCH",
         "WALLCO_ADMIN_EMAILS",
         "WALLCO_BASE_URL",
         "WALLCO_BATCH_PER_RENDER_MS",
         "WALLCO_COMP_GATE",
         "WALLCO_DB",
+        "WALLCO_FORCE_SNAPSHOT",
         "WALLCO_HOST",
         "WALLCO_JWT_SECRET",
         "WALLCO_LICENSE_PRICE_CENTS",
@@ -2799,13 +3369,37 @@
         "WALLCO_TEST_REAL",
         "WALLCO_TEST_SLUG",
         "WATERMARK_OWNER",
+        "WAYLAND_DISPLAY",
+        "WINDIR",
+        "WINDOWS_CUDA_HOME",
+        "WORLD_SIZE",
         "WPB_BUYABLE_VENDORS",
         "WPB_COLLECTION_ID",
         "WPB_PDP_BASE",
         "WPB_SHOPIFY",
         "WPB_SHOPIFY_REFRESH_MIN",
         "WPB_SHOP_DEFAULT",
-        "ZD_WIDGET_KEY"
+        "XDG_CACHE_HOME",
+        "XDG_CONFIG_DIRS",
+        "XDG_CONFIG_HOME",
+        "XDG_DATA_DIRS",
+        "XDG_DATA_HOME",
+        "XDG_RUNTIME_DIR",
+        "XDG_STATE_HOME",
+        "ZD_WIDGET_KEY",
+        "ZE_AFFINITY_MASK",
+        "ZE_FLAT_DEVICE_HIERARCHY",
+        "_NETWORKX_BUILDING_DOCS_",
+        "_PIP_IN_BUILD_IGNORE_CONSTRAINTS",
+        "_PIP_RUNNING_IN_SUBPROCESS",
+        "_PIP_USE_IMPORTLIB_METADATA",
+        "_PYPROJECT_HOOKS_BACKEND_PATH",
+        "_PYPROJECT_HOOKS_BUILD_BACKEND",
+        "_PYTHON_HOST_PLATFORM",
+        "_PYTHON_PROJECT_BASE",
+        "_SPLITTER_MERGE_OVERLAPPING_FUSIONS",
+        "_TORCHINDUCTOR_PYOBJECT_TENSOR_DATA_PTR",
+        "__PYVENV_LAUNCHER__"
       ],
       "dynamic": true,
       "review_required": true,
@@ -3025,8 +3619,16 @@
     },
     "~/.claude/skills/kartiseira": {
       "env_path": "~/.claude/skills/kartiseira/.env",
-      "derived": [],
-      "other_keys": [],
+      "derived": [
+        "ANTHROPIC_API_KEY",
+        "OPENAI_API_KEY",
+        "X_BEARER_TOKEN"
+      ],
+      "other_keys": [
+        "KARTISEIRA_MODEL",
+        "KARTISEIRA_PAID_MODEL",
+        "OLLAMA_URL"
+      ],
       "dynamic": false,
       "review_required": false,
       "missing_dir": false
@@ -3123,6 +3725,8 @@
       "env_path": "~/Projects/designerwallcoverings/.env",
       "derived": [
         "GEMINI_API_KEY",
+        "OSBORNE_PASSWORD",
+        "OSBORNE_USERNAME",
         "SHOPIFY_ADMIN_TOKEN",
         "SHOPIFY_DW_ADMIN_TOKEN_CONTENT",
         "SHOPIFY_STORE",
@@ -3145,6 +3749,7 @@
         "DAILY_CAP",
         "DATABASE_URL",
         "DB_URL",
+        "DRYRUN",
         "DRY_RUN",
         "DW_BACKLOG_CAP",
         "DW_BACKLOG_RECLAIM_HOUR",
@@ -3182,10 +3787,15 @@
         "MURAL_ENV_FILE",
         "OLLAMA_VISION_MODEL",
         "ONLY",
+        "OSBORNE_API",
         "OSBORNE_CANARY_TO",
+        "OSBORNE_ORIGIN",
+        "PATTERNS_PER_VENDOR",
+        "PREFIX",
         "PRICE_CAP",
         "PRICE_CEIL",
         "PUBLISH_CAP",
+        "REDIRECTS",
         "REPRICE_LIMIT",
         "ROLL_CAP",
         "ROLL_PRICE_CAP",
@@ -3200,7 +3810,10 @@
         "STATUS",
         "T",
         "THRESH",
-        "TOK"
+        "TOK",
+        "TOKEN_VAR",
+        "VENDORS",
+        "WIDTH"
       ],
       "dynamic": true,
       "review_required": true,
@@ -3240,6 +3853,7 @@
         "INFILE",
         "LIMIT",
         "OUTFILE",
+        "SCOPED_FANOUT",
         "VERIFY_SKU"
       ],
       "dynamic": true,

← 7795cb8 secrets-manager: least-privilege scoping (TK-10045) — derive  ·  back to Secrets Manager  ·  auto-save: 2026-07-29T22:42:47 (2 files) — registry.json ROT dda3d54 →