[object Object]

← back to Secrets Manager

auto-save: 2026-07-22T10:13:11 (2 files) — registry.json routes.json

d27dd687be45ebb8f0653d6288cd19e66660e455 · 2026-07-22 10:13:11 -0700 · Steve Abrams

Files touched

Diff

commit d27dd687be45ebb8f0653d6288cd19e66660e455
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Wed Jul 22 10:13:11 2026 -0700

    auto-save: 2026-07-22T10:13:11 (2 files) — registry.json routes.json
---
 registry.json |   22 +
 routes.json   | 3484 +++++++++++++++++++++++++++++----------------------------
 2 files changed, 1773 insertions(+), 1733 deletions(-)

diff --git a/registry.json b/registry.json
index 46f0fbb..b049205 100644
--- a/registry.json
+++ b/registry.json
@@ -1585,6 +1585,28 @@
       "written_to": [
         "/Users/macstudio3/Projects/secrets-manager/.env"
       ]
+    },
+    "OSBORNE_USERNAME": {
+      "digest": "3803:f33c266c",
+      "label": "Osborne & Little trade portal (tradenew.osborneandlittle.com) login — also used for Matthew Williamson (O&L-distributed) US pricing",
+      "last_updated": "2026-07-22T16:47:11.775Z",
+      "validated": false,
+      "verify_status": null,
+      "written_to": [
+        "/Users/macstudio3/Projects/secrets-manager/.env",
+        "/Users/macstudio3/.claude/skills/osborne-scraper-manager/.env"
+      ]
+    },
+    "OSBORNE_PASSWORD": {
+      "digest": "99b):4ad6878d",
+      "label": "Osborne & Little trade portal password",
+      "last_updated": "2026-07-22T16:47:11.819Z",
+      "validated": false,
+      "verify_status": null,
+      "written_to": [
+        "/Users/macstudio3/Projects/secrets-manager/.env",
+        "/Users/macstudio3/.claude/skills/osborne-scraper-manager/.env"
+      ]
     }
   }
 }
\ No newline at end of file
diff --git a/routes.json b/routes.json
index c5ab3a8..6b20e7a 100644
--- a/routes.json
+++ b/routes.json
@@ -1,1767 +1,1785 @@
 {
-  "_comment": "Per-secret routing table. Each entry: master + extra destinations. Master is implicit at ~/Projects/secrets-manager/.env. (Desktop mirror ~/Desktop/site-factory.env retired 2026-06-11, DTD verdict A.)",
-  "services": {
-    "PG_DW_ADMIN_PASSWORD": {
-      "label": "Postgres dw_admin role password (local Mac2 + prod via prestage 3b). DSN_REWRITE rewrites DATABASE_URL pw in each env_file dest.",
-      "destinations": [
-        {
-          "type": "env_file",
-          "path": "~/Projects/Norma/.env.local"
-        },
-        {
-          "type": "env_file",
-          "path": "~/Projects/StudentLoanTracker/.env.local"
-        },
-        {
-          "type": "env_file",
-          "path": "~/Projects/ClawCoder/.env.local"
-        },
-        {
-          "type": "env_file",
-          "path": "~/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local"
-        }
-      ]
-    },
-    "REPLICATE_API_TOKEN": {
-      "label": "Replicate API Token — wallco.ai SDXL gen fallback (WALLCO_COMFY_FALLBACK=replicate floor) + animate-museum-posts",
-      "verify": {
-        "method": "GET",
-        "url": "https://api.replicate.com/v1/account",
-        "auth": "bearer"
-      },
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/wallco-ai/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/animate-museum-posts/.env"
-        },
-        {
-          "type": "project",
-          "host": "45.61.58.125",
-          "user": "root",
-          "path": "/root/public-projects/wallco-ai/.env",
-          "_note": "PROD wallco.ai gen pipeline (Replicate SDXL fallback). Verified prod value matches registry digest 560V:70c85c06 (2026-06-21). Remote-fan via cli.js IS automated for this dest (type=project + host); a plain `cli.js sync` will SSH-write it. Do not auto-rotate this on a live app without surfacing."
-        }
-      ]
-    },
-    "GOOGLE_PLACES_API_KEY": {
-      "label": "Google Places API Key",
-      "verify": {
-        "method": "GET",
-        "url": "https://maps.googleapis.com/maps/api/place/findplacefromtext/json?input=Tito%27s+Tacos+Culver+City&inputtype=textquery&fields=place_id&key=__VALUE__",
-        "auth": "querystring"
-      },
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/restaurant-directory/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/professional-directory/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/animals/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/lawyer-directory-builder/.env"
-        }
-      ]
-    },
-    "BRAVE_SEARCH_API_KEY": {
-      "label": "Brave Search API (Web)",
-      "verify": {
-        "method": "GET",
-        "url": "https://api.search.brave.com/res/v1/web/search?q=test&count=1",
-        "auth": "header",
-        "headerName": "X-Subscription-Token"
-      },
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/_ventura-recon/.env"
-        }
-      ]
-    },
-    "MOONSHOT_API_KEY": {
-      "label": "Moonshot AI / Kimi K2 API Key",
-      "verify": {
-        "method": "GET",
-        "url": "https://api.moonshot.ai/v1/models",
-        "auth": "bearer"
-      },
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/claude-codex-meeting/.env"
-        },
-        {
-          "type": "skill",
-          "name": "claude-codex"
-        }
-      ]
-    },
-    "CLOUDFLARE_API_TOKEN": {
-      "label": "Cloudflare API Token",
-      "verify": {
-        "method": "GET",
-        "url": "https://api.cloudflare.com/client/v4/user/tokens/verify",
-        "auth": "bearer"
-      },
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/site-factory/.env"
-        },
-        {
-          "type": "skill",
-          "name": "cloudflare-manager"
-        },
-        {
-          "type": "skill",
-          "name": "setup-domains"
-        },
-        {
-          "type": "skill",
-          "name": "domain-setup"
-        }
-      ]
-    },
-    "STRIPE_SECRET_KEY": {
-      "label": "Stripe Secret Key",
-      "verify": {
-        "method": "GET",
-        "url": "https://api.stripe.com/v1/balance",
-        "auth": "basic-sk"
-      },
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/site-factory/.env"
-        },
-        {
-          "type": "site_local",
-          "domains": [
-            "wholivedthere.com",
-            "bubbesblock.com",
-            "claimmyaddress.com"
-          ]
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/lawyer-directory-builder/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/professional-directory/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/NationalPaperHangers/.env"
-        },
-        {
-          "type": "project",
-          "host": "45.61.58.125",
-          "user": "root",
-          "path": "/root/Projects/NationalPaperHangers/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/ventura-claw-leads/.env"
-        },
-        {
-          "type": "project",
-          "host": "45.61.58.125",
-          "user": "root",
-          "path": "/root/Projects/ventura-claw-leads/.env"
-        }
-      ]
-    },
-    "STRIPE_PUBLISHABLE_KEY": {
-      "label": "Stripe Publishable Key",
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/site-factory/.env"
-        },
-        {
-          "type": "site_local",
-          "domains": [
-            "wholivedthere.com",
-            "bubbesblock.com",
-            "claimmyaddress.com"
-          ]
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/lawyer-directory-builder/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/professional-directory/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/NationalPaperHangers/.env"
-        },
-        {
-          "type": "project",
-          "host": "45.61.58.125",
-          "user": "root",
-          "path": "/root/Projects/NationalPaperHangers/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/ventura-claw-leads/.env"
-        },
-        {
-          "type": "project",
-          "host": "45.61.58.125",
-          "user": "root",
-          "path": "/root/Projects/ventura-claw-leads/.env"
-        }
-      ]
-    },
-    "STRIPE_WEBHOOK_SECRET": {
-      "label": "Stripe Webhook Signing Secret",
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/site-factory/.env"
-        },
-        {
-          "type": "site_local",
-          "domains": [
-            "wholivedthere.com",
-            "bubbesblock.com",
-            "claimmyaddress.com"
-          ]
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/lawyer-directory-builder/.env"
-        }
-      ]
-    },
-    "STRIPE_TIER_WEBHOOK_SECRET": {
-      "label": "Stripe Tier-Subscription Webhook Signing Secret (Counsel & Bar Lawyer Pro $29/mo)",
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/lawyer-directory-builder/.env"
-        }
-      ]
-    },
-    "STRIPE_PRICE_LAWYER_PRO_MONTHLY": {
-      "label": "Stripe Price ID (public): Counsel & Bar Lawyer Pro $29/mo recurring",
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/lawyer-directory-builder/.env"
-        }
-      ]
-    },
-    "STRIPE_VCL_WEBHOOK_SECRET": {
-      "label": "Stripe webhook signing secret — VCL endpoint we_1TUF1Y63uNmiRsMbNr1kLu52",
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/ventura-claw-leads/.env"
-        },
-        {
-          "type": "project",
-          "host": "45.61.58.125",
-          "user": "root",
-          "path": "/root/Projects/ventura-claw-leads/.env"
-        }
-      ]
-    },
-    "STRIPE_PRICE_VCL_STARTER_MONTH": {
-      "label": "Stripe Price ID — VCL Starter $49/mo",
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/ventura-claw-leads/.env"
-        },
-        {
-          "type": "project",
-          "host": "45.61.58.125",
-          "user": "root",
-          "path": "/root/Projects/ventura-claw-leads/.env"
-        }
-      ]
-    },
-    "STRIPE_PRICE_VCL_STANDARD_MONTH": {
-      "label": "Stripe Price ID — VCL Standard $99/mo",
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/ventura-claw-leads/.env"
-        },
-        {
-          "type": "project",
-          "host": "45.61.58.125",
-          "user": "root",
-          "path": "/root/Projects/ventura-claw-leads/.env"
-        }
-      ]
-    },
-    "STRIPE_PRICE_VCL_PREMIER_MONTH": {
-      "label": "Stripe Price ID — VCL Premier $199/mo",
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/ventura-claw-leads/.env"
-        },
-        {
-          "type": "project",
-          "host": "45.61.58.125",
-          "user": "root",
-          "path": "/root/Projects/ventura-claw-leads/.env"
-        }
-      ]
-    },
-    "HEYGEN_API_KEY": {
-      "label": "HeyGen API key — talking-head avatar video render (used by session-debrief skill)",
-      "verify": {
-        "method": "GET",
-        "url": "https://api.heygen.com/v1/voice.list",
-        "auth": "header",
-        "headerName": "x-api-key"
-      },
-      "destinations": [
-        {
-          "type": "skill",
-          "name": "session-debrief"
-        },
-        {
-          "type": "skill",
-          "name": "reviewed-demo-video"
-        },
-        {
-          "type": "skill",
-          "name": "heygen-video"
-        },
-        {
-          "type": "skill",
-          "name": "heygen-avatar"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/crcp-pitch-video/.env"
-        }
-      ]
-    },
-    "INFO_VENTURACLAW_COM_PASSWORD": {
-      "label": "Purelymail mailbox password — info@venturaclaw.com (used by Ventura Claw Leads + the existing ventura-claw app)",
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/ventura-claw-leads/.env"
-        },
-        {
-          "type": "project",
-          "host": "45.61.58.125",
-          "user": "root",
-          "path": "/root/Projects/ventura-claw-leads/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/ventura-claw/.env"
-        },
-        {
-          "type": "project",
-          "host": "45.61.58.125",
-          "user": "root",
-          "path": "/root/Projects/ventura-claw/.env"
-        }
-      ]
-    },
-    "INFO_NATIONALPAPERHANGERS_COM_PASSWORD": {
-      "label": "Purelymail mailbox password — info@nationalpaperhangers.com",
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/NationalPaperHangers/.env"
-        },
-        {
-          "type": "project",
-          "host": "45.61.58.125",
-          "user": "root",
-          "path": "/root/Projects/NationalPaperHangers/.env"
-        }
-      ]
-    },
-    "STRIPE_NPH_WEBHOOK_SECRET": {
-      "label": "Stripe Webhook Signing Secret — NPH endpoint we_1TUDHV63uNmiRsMbRJea7EqU",
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/NationalPaperHangers/.env"
-        },
-        {
-          "type": "project",
-          "host": "45.61.58.125",
-          "user": "root",
-          "path": "/root/Projects/NationalPaperHangers/.env"
-        }
-      ]
-    },
-    "STRIPE_PRICE_PRO_MONTH": {
-      "label": "Stripe Price ID — NPH Pro $39/mo",
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/NationalPaperHangers/.env"
-        },
-        {
-          "type": "project",
-          "host": "45.61.58.125",
-          "user": "root",
-          "path": "/root/Projects/NationalPaperHangers/.env"
-        }
-      ]
-    },
-    "STRIPE_PRICE_PRO_YEAR": {
-      "label": "Stripe Price ID — NPH Pro $399/yr",
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/NationalPaperHangers/.env"
-        },
-        {
-          "type": "project",
-          "host": "45.61.58.125",
-          "user": "root",
-          "path": "/root/Projects/NationalPaperHangers/.env"
-        }
-      ]
-    },
-    "STRIPE_PRICE_SIGNATURE_MONTH": {
-      "label": "Stripe Price ID — NPH Signature $149/mo",
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/NationalPaperHangers/.env"
-        },
-        {
-          "type": "project",
-          "host": "45.61.58.125",
-          "user": "root",
-          "path": "/root/Projects/NationalPaperHangers/.env"
-        }
-      ]
-    },
-    "STRIPE_PRICE_SIGNATURE_YEAR": {
-      "label": "Stripe Price ID — NPH Signature $1500/yr",
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/NationalPaperHangers/.env"
-        },
-        {
-          "type": "project",
-          "host": "45.61.58.125",
-          "user": "root",
-          "path": "/root/Projects/NationalPaperHangers/.env"
-        }
-      ]
-    },
-    "STRIPE_PRICE_ENTERPRISE_MONTH": {
-      "label": "Stripe Price ID — NPH Enterprise $399/mo",
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/NationalPaperHangers/.env"
-        },
-        {
-          "type": "project",
-          "host": "45.61.58.125",
-          "user": "root",
-          "path": "/root/Projects/NationalPaperHangers/.env"
-        }
-      ]
-    },
-    "VERCEL_TOKEN": {
-      "label": "Vercel API Token",
-      "verify": {
-        "method": "GET",
-        "url": "https://api.vercel.com/v2/user",
-        "auth": "bearer"
-      },
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/site-factory/.env"
-        }
-      ]
-    },
-    "PURELYMAIL_API_TOKEN": {
-      "label": "PurelyMail API Token",
-      "verify": {
-        "method": "POST",
-        "url": "https://purelymail.com/api/v0/listDomains",
-        "auth": "header",
-        "headerName": "Purelymail-Api-Token",
-        "body": "{}",
-        "bodyMustContain": "^\\s*\\{\\s*\"type\"\\s*:\\s*\"success\"",
-        "bodyMustNotContain": "\"type\"\\s*:\\s*\"error\""
-      },
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/site-factory/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/ventura-corridor/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/purelymail-mcp/.env"
-        },
-        {
-          "type": "mcp",
-          "server": "purelymail",
-          "key": "PURELYMAIL_API_TOKEN"
-        }
-      ]
-    },
-    "GODADDY_API_KEY": {
-      "label": "GoDaddy API Key",
-      "destinations": [
-        {
-          "type": "mcp",
-          "server": "domain-suite",
-          "key": "GODADDY_API_KEY"
-        }
-      ]
-    },
-    "GODADDY_API_SECRET": {
-      "label": "GoDaddy API Secret",
-      "destinations": [
-        {
-          "type": "mcp",
-          "server": "domain-suite",
-          "key": "GODADDY_API_SECRET"
-        }
-      ]
-    },
-    "BROWSERBASE_API_KEY": {
-      "label": "Browserbase API Key",
-      "destinations": [
-        {
-          "type": "skill",
-          "name": "browserbase"
-        },
-        {
-          "type": "project",
-          "host": "45.61.58.125",
-          "user": "root",
-          "path": "/root/Projects/Designer-Wallcoverings/DW-Websites/abrams-report/.env"
-        },
-        {
-          "type": "project",
-          "path": "/Users/macstudio3/Projects/abrams-report/.env"
-        },
-        {
-          "type": "project",
-          "path": "/Users/macstudio3/Projects/all-designerwallcoverings/.env"
-        }
-      ],
-      "_prod_note": "Kamatera PROD all-designerwallcoverings uses a DEDICATED Browserbase project/key set OUT-OF-BAND (dashboard-created, isolated blast radius + own spend cap). Do NOT re-add the prod all-dw ssh destination here or sync will clobber the dedicated key with the shared fleet key."
-    },
-    "BROWSERBASE_PROJECT_ID": {
-      "label": "Browserbase Project ID",
-      "destinations": [
-        {
-          "type": "skill",
-          "name": "browserbase"
-        },
-        {
-          "type": "project",
-          "host": "45.61.58.125",
-          "user": "root",
-          "path": "/root/Projects/Designer-Wallcoverings/DW-Websites/abrams-report/.env"
-        },
-        {
-          "type": "project",
-          "path": "/Users/macstudio3/Projects/abrams-report/.env"
-        },
-        {
-          "type": "project",
-          "path": "/Users/macstudio3/Projects/all-designerwallcoverings/.env"
-        }
-      ],
-      "_prod_note": "Kamatera PROD all-designerwallcoverings uses a DEDICATED Browserbase project/key set OUT-OF-BAND (dashboard-created, isolated blast radius + own spend cap). Do NOT re-add the prod all-dw ssh destination here or sync will clobber the dedicated key with the shared fleet key."
-    },
-    "ANTHROPIC_API_KEY": {
-      "label": "Anthropic API Key",
-      "verify": {
-        "method": "POST",
-        "url": "https://api.anthropic.com/v1/messages",
-        "auth": "x-api-key",
-        "body": "{\"model\":\"claude-haiku-4-5\",\"max_tokens\":1,\"messages\":[{\"role\":\"user\",\"content\":\"hi\"}]}"
-      },
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/Letsbegin/.env.local"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/dear-bubbe-nextjs/.env"
-        }
-      ]
-    },
-    "OPENAI_API_KEY": {
-      "label": "OpenAI API Key",
-      "verify": {
-        "method": "GET",
-        "url": "https://api.openai.com/v1/models",
-        "auth": "bearer"
-      },
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/dear-bubbe-nextjs/.env.local"
-        },
-        {
-          "type": "project",
-          "host": "45.61.58.125",
-          "user": "root",
-          "path": "/root/Projects/dear-bubbe-nextjs/.env.local"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/animals/.env"
-        }
-      ]
-    },
-    "GEMINI_API_KEY": {
-      "label": "Google Gemini API Key",
-      "verify": {
-        "method": "GET",
-        "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
-        "auth": "url"
-      },
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/Letsbegin/.env.local"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/Bertha/kalshi-dash/.env"
-        },
-        {
-          "type": "skill",
-          "name": "ai-analyzer"
-        },
-        {
-          "type": "skill",
-          "name": "enrich-ai-tags"
-        }
-      ]
-    },
-    "GEMINI_API_KEY_DW_ENRICH": {
-      "label": "Google Gemini API Key — DEDICATED to DW image-enrichment / vendor-command-center. Created 2026-06-23 by vp-security as the rotation target for the leaked orphan keys (last-4 ejMo and S2ic, never registry-managed). Pre-staged EMPTY so that the moment Steve issues a fresh key at Google AI Studio, `add GEMINI_API_KEY_DW_ENRICH <new-key>` verifies it against Gemini and fans it (remapped to the bare var GEMINI_API_KEY) to the consumers below. Distinct from the master GEMINI_API_KEY (Letsbegin/Bertha/skills) and GEMINI_API_KEY_WALLCO (k720). If Steve prefers enrichment to ride the master key instead, he can skip this alias and update GEMINI_API_KEY directly — the env-ified consumers read GEMINI_API_KEY first.",
-      "verify": {
-        "method": "GET",
-        "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
-        "auth": "url"
-      },
-      "_note": "The 3 DW vendor-command-center files (logo-cropper.js, website-scorer.js, standardization-worker.js) read process.env.GEMINI_API_KEY (master) with GEMINI_KEY fallback, loaded from /root/.env on Kamatera. The goodquestion-ai/scripts/generate-hero-images.cjs reads process.env.GEMINI_API_KEY from ~/Projects/goodquestion-ai/.env. Each destination remaps this alias to the bare key name GEMINI_API_KEY so the env-ified code picks it up with no further change.",
-      "destinations": [
-        {
-          "type": "project",
-          "host": "45.61.58.125",
-          "user": "root",
-          "path": "/root/.env",
-          "key": "GEMINI_API_KEY"
-        },
-        {
-          "type": "env_file",
-          "path": "~/Projects/goodquestion-ai/.env",
-          "key": "GEMINI_API_KEY"
-        }
-      ]
-    },
-    "GEMINI_API_KEY_WALLCO": {
-      "label": "Google Gemini API Key — DEDICATED to wallco.ai gen pipeline (nano-banana / gemini-2.5-flash-image fallback). Distinct from the master GEMINI_API_KEY (Letsbegin/Bertha/skills). Same dedicated-alias pattern as GEMINI_API_KEY_RALPH.",
-      "verify": {
-        "method": "GET",
-        "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
-        "auth": "url"
-      },
-      "_note": "The wallco.ai app (local Mac2 AND prod Kamatera) reads the bare var GEMINI_API_KEY in its OWN .env, but that value differs from the master registry GEMINI_API_KEY. To avoid clobbering either consumer, this dedicated alias tracks the wallco-specific value by digest. The fan writes the bare key name GEMINI_API_KEY into the wallco .env files (per-dest key remap), NOT GEMINI_API_KEY_WALLCO. Prod value verified LIVE + matching local 2026-06-21 (k720:4295091b). Remote-fan to prod IS automated via cli.js sync (type=project+host); leave it documented-but-not-fanned unless a rotation is intended.",
-      "destinations": [
-        {
-          "type": "env_file",
-          "path": "~/Projects/wallco-ai/.env",
-          "key": "GEMINI_API_KEY"
-        },
-        {
-          "type": "project",
-          "host": "45.61.58.125",
-          "user": "root",
-          "path": "/root/public-projects/wallco-ai/.env",
-          "key": "GEMINI_API_KEY"
-        }
-      ]
-    },
-    "GOOGLE_GENERATIVE_AI_API_KEY": {
-      "label": "Google Generative AI API Key (alias of GEMINI_API_KEY)",
-      "verify": {
-        "method": "GET",
-        "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
-        "auth": "url"
-      },
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/Letsbegin/.env.local"
-        }
-      ]
-    },
-    "SHOPIFY_ADMIN_TOKEN": {
-      "label": "Shopify Admin API Access Token",
-      "destinations": [
-        {
-          "type": "project",
-          "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/shopify/.env"
-        },
-        {
-          "type": "project",
-          "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/.env"
-        },
-        {
-          "type": "project",
-          "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Websites/LosAngelesFabrics/.env"
-        },
-        {
-          "type": "env_file",
-          "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local",
-          "key": "SHOPIFY_ADMIN_ACCESS_TOKEN"
-        },
-        {
-          "type": "env_file",
-          "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local",
-          "key": "SHOPIFY_ADMIN_TOKEN"
-        }
-      ]
-    },
-    "SHOPIFY_API_KEY": {
-      "label": "Shopify API Key",
-      "destinations": []
-    },
-    "RESEND_API_KEY": {
-      "label": "Resend API Key",
-      "verify": {
-        "method": "GET",
-        "url": "https://api.resend.com/domains",
-        "auth": "bearer"
-      },
-      "destinations": []
-    },
-    "STRIPE_RESTRICTED_KEY": {
-      "label": "Stripe Restricted Key (site-factory)",
-      "verify": {
-        "method": "GET",
-        "url": "https://api.stripe.com/v1/balance",
-        "auth": "basic-sk"
-      },
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/site-factory/.env"
-        }
-      ]
-    },
-    "DPLA_API_KEY": {
-      "label": "Digital Public Library of America API Key",
-      "verify": {
-        "method": "GET",
-        "url": "https://api.dp.la/v2/items?api_key={value}&q=test&page_size=1",
-        "auth": "url"
-      },
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/wholivedthere/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/claimmyaddress/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/bubbesblock/.env"
-        },
-        {
-          "type": "skill",
-          "name": "la-research-agent"
-        }
-      ]
-    },
-    "GEMINI_API_KEY_RALPH": {
-      "label": "Google Gemini API Key (dedicated to Letsbegin Ralph runner)",
-      "verify": {
-        "method": "GET",
-        "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
-        "auth": "url"
-      },
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/Letsbegin/.env.local"
-        },
-        {
-          "type": "project",
-          "host": "45.61.58.125",
-          "user": "root",
-          "path": "/root/Projects/Letsbegin/.env.local"
-        }
-      ]
-    },
-    "ELEVENLABS_API_KEY": {
-      "label": "ElevenLabs Voice Synthesis API Key",
-      "verify": {
-        "method": "GET",
-        "url": "https://api.elevenlabs.io/v1/user",
-        "auth": "header",
-        "headerName": "xi-api-key"
-      },
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/dear-bubbe-nextjs/.env.local"
-        },
-        {
-          "type": "project",
-          "host": "45.61.58.125",
-          "user": "root",
-          "path": "/root/Projects/dear-bubbe-nextjs/.env.local"
-        }
-      ]
-    },
-    "NEXT_PUBLIC_GOOGLE_MAPS_API_KEY": {
-      "label": "Google Maps JavaScript API Key (browser-exposed; needs HTTP-referrer restrictions)",
-      "verify": {
-        "method": "GET",
-        "url": "https://maps.googleapis.com/maps/api/streetview/metadata?location=34.05,-118.25&key={value}",
-        "success": "json.status === \"OK\" || json.status === \"ZERO_RESULTS\"",
-        "note": "Validates by hitting Street View Static API metadata endpoint; OK or ZERO_RESULTS both prove the key is enabled and unexpired."
-      },
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/stayclaim/.env.local"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/wholivedthere/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/claimmyaddress/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/bubbesblock/.env"
-        },
-        {
-          "type": "remote",
-          "host": "root@45.61.58.125",
-          "path": "/root/public-projects/pastdoor/.env.local"
-        },
-        {
-          "type": "remote",
-          "host": "root@45.61.58.125",
-          "path": "/root/public-projects/pastdoor/.env.production"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/jill-website/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/ventura-bus-3d/.env",
-          "alias": "GOOGLE_MAPS_API_KEY"
-        }
-      ]
-    },
-    "LINKEDIN_CLIENT_ID": {
-      "label": "LinkedIn OAuth Client ID — \"For Claude - 5-6-26\" app, bound to Designer Wallcoverings Page",
-      "_note": "No verify endpoint — LinkedIn requires the ID+SECRET pair to validate, and the CLI verifies one key at a time. Manual probe via POST /oauth/v2/accessToken with a fake code expects 'invalid_request: authorization code not found' = creds OK.",
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/NationalPaperHangers/.env"
-        },
-        {
-          "type": "remote",
-          "host": "root@45.61.58.125",
-          "path": "/root/Projects/NationalPaperHangers/.env"
-        }
-      ]
-    },
-    "LINKEDIN_CLIENT_SECRET": {
-      "label": "LinkedIn OAuth Client Secret — \"For Claude - 5-6-26\" app, bound to Designer Wallcoverings Page",
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/NationalPaperHangers/.env"
-        },
-        {
-          "type": "remote",
-          "host": "root@45.61.58.125",
-          "path": "/root/Projects/NationalPaperHangers/.env"
-        }
-      ]
-    },
-    "GOOGLE_OAUTH_CLIENT_ID": {
-      "label": "Google OAuth Client ID — DW Activation Calendar (shared DW Google Calendar, local :9765)",
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/dw-activation-calendar/.env"
-        }
-      ]
-    },
-    "GOOGLE_OAUTH_CLIENT_SECRET": {
-      "label": "Google OAuth Client Secret — DW Activation Calendar (shared DW Google Calendar, local :9765)",
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/dw-activation-calendar/.env"
-        }
-      ]
-    },
-    "NPH_GOOGLE_OAUTH_CLIENT_ID": {
-      "label": "Google OAuth Client ID — buyer sign-in on National Paper Hangers",
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/NationalPaperHangers/.env"
-        },
-        {
-          "type": "remote",
-          "host": "root@45.61.58.125",
-          "path": "/root/Projects/NationalPaperHangers/.env"
-        }
-      ]
-    },
-    "NPH_GOOGLE_OAUTH_CLIENT_SECRET": {
-      "label": "Google OAuth Client Secret — buyer sign-in on National Paper Hangers",
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/NationalPaperHangers/.env"
-        },
-        {
-          "type": "remote",
-          "host": "root@45.61.58.125",
-          "path": "/root/Projects/NationalPaperHangers/.env"
-        }
-      ]
-    },
-    "GEORGE_AUTH": {
-      "label": "George Gmail Basic Auth (DW microsite leads)",
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/1800swallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/1890swallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/1900swallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/1920swallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/1930swallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/1940swallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/1950swallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/1960swallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/1970swallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/1980swallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/agedwallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/apartmentwallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/architecturalwallcoverings/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/blockprintedwallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/contractwallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/corkwallcovering/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/embroideredwallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/fabricwallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/glitterwalls/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/greenwallcoverings/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/handcraftedwallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/healthcarewallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/hospitalitywallcoverings/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/hospitalitywallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/hotelwallcoverings/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/jutewallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/linenwallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/madagascarwallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/metallicwallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/micawallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/museumwallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/mylarwallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/naturalwallcoverings/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/pastelwallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/raffiawallcoverings/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/raffiawalls/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/recycledwallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/restaurantwallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/restorationwallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/retrowalls/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/saloonwallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/screenprintedwallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/selfadhesivewallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/silkwallcoverings/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/silkwallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/silverleafwallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/stringwallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/suedewallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/textilewallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/vinylwallpaper/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/wallpapersback/.env"
-        },
-        {
-          "type": "project",
-          "path": "~/Projects/wallsandfabrics/.env"
-        }
-      ]
-    },
-    "CLOUDFLARE_PAGES_TOKEN": {
-      "label": "Cloudflare Pages API Token",
-      "verify": {
-        "method": "GET",
-        "url": "https://api.cloudflare.com/client/v4/user/tokens/verify",
-        "auth": "bearer"
-      },
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/coming-soon-template/.env"
-        }
-      ]
-    },
-    "SHOPIFY_THEME_TOKEN": {
-      "label": "Shopify full-access theme/files token (read_themes+files; scrubbed from DW-Agents JS 2026-06-25)",
-      "destinations": [
-        {
-          "type": "env_file",
-          "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/.env"
-        },
-        {
-          "type": "env_file",
-          "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Agents/dw-agents/.env"
-        },
-        {
-          "type": "env_file",
-          "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Agents/dw-agents/agent-task-orchestrator/.env"
-        }
-      ]
-    },
-    "SLACK_APP_ID": {
-      "label": "Slack app \"Claude Access to Slack\" — App ID (A0BDER23QRK). Not secret but registered for completeness.",
-      "destinations": [
-        {
-          "type": "env_file",
-          "path": "~/Projects/claude-slack/.env"
-        }
-      ]
-    },
-    "SLACK_CLIENT_ID": {
-      "label": "Slack app Client ID — used with Client Secret in oauth.v2.access requests.",
-      "destinations": [
-        {
-          "type": "env_file",
-          "path": "~/Projects/claude-slack/.env"
-        }
-      ]
-    },
-    "SLACK_CLIENT_SECRET": {
-      "label": "Slack app Client Secret — OAuth token exchange (oauth.v2.access). NOT the bot token.",
-      "destinations": [
-        {
-          "type": "env_file",
-          "path": "~/Projects/claude-slack/.env"
-        }
-      ]
-    },
-    "SLACK_SIGNING_SECRET": {
-      "label": "Slack app Signing Secret — verifies inbound request signatures from Slack (events/interactivity).",
-      "destinations": [
-        {
-          "type": "env_file",
-          "path": "~/Projects/claude-slack/.env"
-        }
-      ]
-    },
-    "SLACK_VERIFICATION_TOKEN": {
-      "label": "Slack DEPRECATED verification token — legacy request verification. Prefer SLACK_SIGNING_SECRET.",
-      "destinations": [
-        {
-          "type": "env_file",
-          "path": "~/Projects/claude-slack/.env"
-        }
-      ]
-    },
-    "SLACK_APP_TOKEN": {
-      "label": "Slack app-level token (xapp-1-…) for Socket Mode — connections:write. Routes events over WebSocket. NOT the bot token (xoxb-).",
-      "destinations": [
-        {
-          "type": "env_file",
-          "path": "~/Projects/claude-slack/.env"
-        }
-      ]
-    },
-    "CENSUS_API_KEY": {
-      "label": "US Census Bureau Data API key — demographics fetcher for commercialrealestate (ACS5 by ZCTA). NOTE: Census API returns 302-redirect on a valid data query so the secrets verifier cannot probe it; verify manually via an ACS5 curl.",
-      "destinations": [
-        {
-          "type": "env_file",
-          "path": "~/Projects/commercialrealestate/.env"
-        }
-      ]
-    },
-    "POSTIZ_API_KEY": {
-      "label": "Postiz public API key (raw Authorization header) — DW marketing slideshow engine (post/integrations) + Postiz MCP",
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/Projects/dw-slideshow-gen/.env"
-        }
-      ]
-    },
-    "X_API_KEY": {
-      "label": "X (Twitter) API v2 — Consumer/API key (app auth). Pairs with X_API_SECRET to mint app-only bearers.",
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/.claude/skills/kartiseira/.env"
-        }
-      ]
-    },
-    "X_API_SECRET": {
-      "label": "X (Twitter) API v2 — Consumer/API secret. With X_API_KEY mints app-only bearer via oauth2/token.",
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/.claude/skills/kartiseira/.env"
-        }
-      ]
-    },
-    "X_BEARER_TOKEN": {
-      "label": "X (Twitter) API v2 — app-only Bearer token (use RAW/as-issued; contains %-encoded chars).",
-      "verify": {
-        "method": "GET",
-        "url": "https://api.twitter.com/2/tweets?ids=20",
-        "auth": "bearer",
-        "bodyMustContain": "data"
-      },
-      "destinations": [
-        {
-          "type": "project",
-          "path": "~/.claude/skills/kartiseira/.env"
-        }
-      ]
+ "_comment": "Per-secret routing table. Each entry: master + extra destinations. Master is implicit at ~/Projects/secrets-manager/.env. (Desktop mirror ~/Desktop/site-factory.env retired 2026-06-11, DTD verdict A.)",
+ "services": {
+  "PG_DW_ADMIN_PASSWORD": {
+   "label": "Postgres dw_admin role password (local Mac2 + prod via prestage 3b). DSN_REWRITE rewrites DATABASE_URL pw in each env_file dest.",
+   "destinations": [
+    {
+     "type": "env_file",
+     "path": "~/Projects/Norma/.env.local"
+    },
+    {
+     "type": "env_file",
+     "path": "~/Projects/StudentLoanTracker/.env.local"
+    },
+    {
+     "type": "env_file",
+     "path": "~/Projects/ClawCoder/.env.local"
+    },
+    {
+     "type": "env_file",
+     "path": "~/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local"
+    }
+   ]
+  },
+  "REPLICATE_API_TOKEN": {
+   "label": "Replicate API Token \u2014 wallco.ai SDXL gen fallback (WALLCO_COMFY_FALLBACK=replicate floor) + animate-museum-posts",
+   "verify": {
+    "method": "GET",
+    "url": "https://api.replicate.com/v1/account",
+    "auth": "bearer"
+   },
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/wallco-ai/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/animate-museum-posts/.env"
+    },
+    {
+     "type": "project",
+     "host": "45.61.58.125",
+     "user": "root",
+     "path": "/root/public-projects/wallco-ai/.env",
+     "_note": "PROD wallco.ai gen pipeline (Replicate SDXL fallback). Verified prod value matches registry digest 560V:70c85c06 (2026-06-21). Remote-fan via cli.js IS automated for this dest (type=project + host); a plain `cli.js sync` will SSH-write it. Do not auto-rotate this on a live app without surfacing."
+    }
+   ]
+  },
+  "GOOGLE_PLACES_API_KEY": {
+   "label": "Google Places API Key",
+   "verify": {
+    "method": "GET",
+    "url": "https://maps.googleapis.com/maps/api/place/findplacefromtext/json?input=Tito%27s+Tacos+Culver+City&inputtype=textquery&fields=place_id&key=__VALUE__",
+    "auth": "querystring"
+   },
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/restaurant-directory/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/professional-directory/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/animals/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/lawyer-directory-builder/.env"
+    }
+   ]
+  },
+  "BRAVE_SEARCH_API_KEY": {
+   "label": "Brave Search API (Web)",
+   "verify": {
+    "method": "GET",
+    "url": "https://api.search.brave.com/res/v1/web/search?q=test&count=1",
+    "auth": "header",
+    "headerName": "X-Subscription-Token"
+   },
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/_ventura-recon/.env"
+    }
+   ]
+  },
+  "MOONSHOT_API_KEY": {
+   "label": "Moonshot AI / Kimi K2 API Key",
+   "verify": {
+    "method": "GET",
+    "url": "https://api.moonshot.ai/v1/models",
+    "auth": "bearer"
+   },
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/claude-codex-meeting/.env"
+    },
+    {
+     "type": "skill",
+     "name": "claude-codex"
+    }
+   ]
+  },
+  "CLOUDFLARE_API_TOKEN": {
+   "label": "Cloudflare API Token",
+   "verify": {
+    "method": "GET",
+    "url": "https://api.cloudflare.com/client/v4/user/tokens/verify",
+    "auth": "bearer"
+   },
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/site-factory/.env"
+    },
+    {
+     "type": "skill",
+     "name": "cloudflare-manager"
+    },
+    {
+     "type": "skill",
+     "name": "setup-domains"
+    },
+    {
+     "type": "skill",
+     "name": "domain-setup"
+    }
+   ]
+  },
+  "STRIPE_SECRET_KEY": {
+   "label": "Stripe Secret Key",
+   "verify": {
+    "method": "GET",
+    "url": "https://api.stripe.com/v1/balance",
+    "auth": "basic-sk"
+   },
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/site-factory/.env"
+    },
+    {
+     "type": "site_local",
+     "domains": [
+      "wholivedthere.com",
+      "bubbesblock.com",
+      "claimmyaddress.com"
+     ]
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/lawyer-directory-builder/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/professional-directory/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/NationalPaperHangers/.env"
+    },
+    {
+     "type": "project",
+     "host": "45.61.58.125",
+     "user": "root",
+     "path": "/root/Projects/NationalPaperHangers/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/ventura-claw-leads/.env"
+    },
+    {
+     "type": "project",
+     "host": "45.61.58.125",
+     "user": "root",
+     "path": "/root/Projects/ventura-claw-leads/.env"
+    }
+   ]
+  },
+  "STRIPE_PUBLISHABLE_KEY": {
+   "label": "Stripe Publishable Key",
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/site-factory/.env"
+    },
+    {
+     "type": "site_local",
+     "domains": [
+      "wholivedthere.com",
+      "bubbesblock.com",
+      "claimmyaddress.com"
+     ]
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/lawyer-directory-builder/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/professional-directory/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/NationalPaperHangers/.env"
+    },
+    {
+     "type": "project",
+     "host": "45.61.58.125",
+     "user": "root",
+     "path": "/root/Projects/NationalPaperHangers/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/ventura-claw-leads/.env"
+    },
+    {
+     "type": "project",
+     "host": "45.61.58.125",
+     "user": "root",
+     "path": "/root/Projects/ventura-claw-leads/.env"
+    }
+   ]
+  },
+  "STRIPE_WEBHOOK_SECRET": {
+   "label": "Stripe Webhook Signing Secret",
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/site-factory/.env"
+    },
+    {
+     "type": "site_local",
+     "domains": [
+      "wholivedthere.com",
+      "bubbesblock.com",
+      "claimmyaddress.com"
+     ]
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/lawyer-directory-builder/.env"
+    }
+   ]
+  },
+  "STRIPE_TIER_WEBHOOK_SECRET": {
+   "label": "Stripe Tier-Subscription Webhook Signing Secret (Counsel & Bar Lawyer Pro $29/mo)",
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/lawyer-directory-builder/.env"
+    }
+   ]
+  },
+  "STRIPE_PRICE_LAWYER_PRO_MONTHLY": {
+   "label": "Stripe Price ID (public): Counsel & Bar Lawyer Pro $29/mo recurring",
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/lawyer-directory-builder/.env"
+    }
+   ]
+  },
+  "STRIPE_VCL_WEBHOOK_SECRET": {
+   "label": "Stripe webhook signing secret \u2014 VCL endpoint we_1TUF1Y63uNmiRsMbNr1kLu52",
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/ventura-claw-leads/.env"
+    },
+    {
+     "type": "project",
+     "host": "45.61.58.125",
+     "user": "root",
+     "path": "/root/Projects/ventura-claw-leads/.env"
+    }
+   ]
+  },
+  "STRIPE_PRICE_VCL_STARTER_MONTH": {
+   "label": "Stripe Price ID \u2014 VCL Starter $49/mo",
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/ventura-claw-leads/.env"
+    },
+    {
+     "type": "project",
+     "host": "45.61.58.125",
+     "user": "root",
+     "path": "/root/Projects/ventura-claw-leads/.env"
+    }
+   ]
+  },
+  "STRIPE_PRICE_VCL_STANDARD_MONTH": {
+   "label": "Stripe Price ID \u2014 VCL Standard $99/mo",
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/ventura-claw-leads/.env"
+    },
+    {
+     "type": "project",
+     "host": "45.61.58.125",
+     "user": "root",
+     "path": "/root/Projects/ventura-claw-leads/.env"
+    }
+   ]
+  },
+  "STRIPE_PRICE_VCL_PREMIER_MONTH": {
+   "label": "Stripe Price ID \u2014 VCL Premier $199/mo",
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/ventura-claw-leads/.env"
+    },
+    {
+     "type": "project",
+     "host": "45.61.58.125",
+     "user": "root",
+     "path": "/root/Projects/ventura-claw-leads/.env"
+    }
+   ]
+  },
+  "HEYGEN_API_KEY": {
+   "label": "HeyGen API key \u2014 talking-head avatar video render (used by session-debrief skill)",
+   "verify": {
+    "method": "GET",
+    "url": "https://api.heygen.com/v1/voice.list",
+    "auth": "header",
+    "headerName": "x-api-key"
+   },
+   "destinations": [
+    {
+     "type": "skill",
+     "name": "session-debrief"
+    },
+    {
+     "type": "skill",
+     "name": "reviewed-demo-video"
+    },
+    {
+     "type": "skill",
+     "name": "heygen-video"
+    },
+    {
+     "type": "skill",
+     "name": "heygen-avatar"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/crcp-pitch-video/.env"
+    }
+   ]
+  },
+  "INFO_VENTURACLAW_COM_PASSWORD": {
+   "label": "Purelymail mailbox password \u2014 info@venturaclaw.com (used by Ventura Claw Leads + the existing ventura-claw app)",
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/ventura-claw-leads/.env"
+    },
+    {
+     "type": "project",
+     "host": "45.61.58.125",
+     "user": "root",
+     "path": "/root/Projects/ventura-claw-leads/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/ventura-claw/.env"
+    },
+    {
+     "type": "project",
+     "host": "45.61.58.125",
+     "user": "root",
+     "path": "/root/Projects/ventura-claw/.env"
+    }
+   ]
+  },
+  "INFO_NATIONALPAPERHANGERS_COM_PASSWORD": {
+   "label": "Purelymail mailbox password \u2014 info@nationalpaperhangers.com",
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/NationalPaperHangers/.env"
+    },
+    {
+     "type": "project",
+     "host": "45.61.58.125",
+     "user": "root",
+     "path": "/root/Projects/NationalPaperHangers/.env"
     }
+   ]
   },
-  "leak_patterns": [
+  "STRIPE_NPH_WEBHOOK_SECRET": {
+   "label": "Stripe Webhook Signing Secret \u2014 NPH endpoint we_1TUDHV63uNmiRsMbRJea7EqU",
+   "destinations": [
     {
-      "name": "stripe-live-secret",
-      "regex": "sk_live_[A-Za-z0-9]{20,}"
+     "type": "project",
+     "path": "~/Projects/NationalPaperHangers/.env"
     },
     {
-      "name": "purelymail-token",
-      "regex": "PURELYMAIL_API_TOKEN\\s*=\\s*[A-Za-z0-9_-]{20,}"
+     "type": "project",
+     "host": "45.61.58.125",
+     "user": "root",
+     "path": "/root/Projects/NationalPaperHangers/.env"
+    }
+   ]
+  },
+  "STRIPE_PRICE_PRO_MONTH": {
+   "label": "Stripe Price ID \u2014 NPH Pro $39/mo",
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/NationalPaperHangers/.env"
     },
     {
-      "name": "stripe-test-secret",
-      "regex": "sk_test_[A-Za-z0-9]{20,}"
+     "type": "project",
+     "host": "45.61.58.125",
+     "user": "root",
+     "path": "/root/Projects/NationalPaperHangers/.env"
+    }
+   ]
+  },
+  "STRIPE_PRICE_PRO_YEAR": {
+   "label": "Stripe Price ID \u2014 NPH Pro $399/yr",
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/NationalPaperHangers/.env"
     },
     {
-      "name": "stripe-publishable",
-      "regex": "pk_live_[A-Za-z0-9]{20,}"
+     "type": "project",
+     "host": "45.61.58.125",
+     "user": "root",
+     "path": "/root/Projects/NationalPaperHangers/.env"
+    }
+   ]
+  },
+  "STRIPE_PRICE_SIGNATURE_MONTH": {
+   "label": "Stripe Price ID \u2014 NPH Signature $149/mo",
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/NationalPaperHangers/.env"
     },
     {
-      "name": "browserbase",
-      "regex": "bb_live_[A-Za-z0-9]+"
+     "type": "project",
+     "host": "45.61.58.125",
+     "user": "root",
+     "path": "/root/Projects/NationalPaperHangers/.env"
+    }
+   ]
+  },
+  "STRIPE_PRICE_SIGNATURE_YEAR": {
+   "label": "Stripe Price ID \u2014 NPH Signature $1500/yr",
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/NationalPaperHangers/.env"
     },
     {
-      "name": "google-api-key",
-      "regex": "AIza[0-9A-Za-z_-]{35}"
+     "type": "project",
+     "host": "45.61.58.125",
+     "user": "root",
+     "path": "/root/Projects/NationalPaperHangers/.env"
+    }
+   ]
+  },
+  "STRIPE_PRICE_ENTERPRISE_MONTH": {
+   "label": "Stripe Price ID \u2014 NPH Enterprise $399/mo",
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/NationalPaperHangers/.env"
     },
     {
-      "name": "google-oauth-access",
-      "regex": "ya29\\.[A-Za-z0-9_-]{20,}"
+     "type": "project",
+     "host": "45.61.58.125",
+     "user": "root",
+     "path": "/root/Projects/NationalPaperHangers/.env"
+    }
+   ]
+  },
+  "VERCEL_TOKEN": {
+   "label": "Vercel API Token",
+   "verify": {
+    "method": "GET",
+    "url": "https://api.vercel.com/v2/user",
+    "auth": "bearer"
+   },
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/site-factory/.env"
+    }
+   ]
+  },
+  "PURELYMAIL_API_TOKEN": {
+   "label": "PurelyMail API Token",
+   "verify": {
+    "method": "POST",
+    "url": "https://purelymail.com/api/v0/listDomains",
+    "auth": "header",
+    "headerName": "Purelymail-Api-Token",
+    "body": "{}",
+    "bodyMustContain": "^\\s*\\{\\s*\"type\"\\s*:\\s*\"success\"",
+    "bodyMustNotContain": "\"type\"\\s*:\\s*\"error\""
+   },
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/site-factory/.env"
     },
     {
-      "name": "github-pat",
-      "regex": "ghp_[A-Za-z0-9]{36}"
+     "type": "project",
+     "path": "~/Projects/ventura-corridor/.env"
     },
     {
-      "name": "github-fine-grained",
-      "regex": "github_pat_[A-Za-z0-9_]{60,}"
+     "type": "project",
+     "path": "~/Projects/purelymail-mcp/.env"
     },
     {
-      "name": "slack-bot",
-      "regex": "xox[baprs]-[A-Za-z0-9-]{10,}"
+     "type": "mcp",
+     "server": "purelymail",
+     "key": "PURELYMAIL_API_TOKEN"
+    }
+   ]
+  },
+  "GODADDY_API_KEY": {
+   "label": "GoDaddy API Key",
+   "destinations": [
+    {
+     "type": "mcp",
+     "server": "domain-suite",
+     "key": "GODADDY_API_KEY"
+    }
+   ]
+  },
+  "GODADDY_API_SECRET": {
+   "label": "GoDaddy API Secret",
+   "destinations": [
+    {
+     "type": "mcp",
+     "server": "domain-suite",
+     "key": "GODADDY_API_SECRET"
+    }
+   ]
+  },
+  "BROWSERBASE_API_KEY": {
+   "label": "Browserbase API Key",
+   "destinations": [
+    {
+     "type": "skill",
+     "name": "browserbase"
     },
     {
-      "name": "openai-key",
-      "regex": "sk-[A-Za-z0-9]{40,}"
+     "type": "project",
+     "host": "45.61.58.125",
+     "user": "root",
+     "path": "/root/Projects/Designer-Wallcoverings/DW-Websites/abrams-report/.env"
     },
     {
-      "name": "anthropic-key",
-      "regex": "sk-ant-[A-Za-z0-9_-]{50,}"
+     "type": "project",
+     "path": "/Users/macstudio3/Projects/abrams-report/.env"
     },
     {
-      "name": "cf-token-40hex",
-      "regex": "(?:cloudflare|cf_token|dns_cloudflare_api_token)[^A-Za-z0-9]+([A-Za-z0-9_-]{40})"
+     "type": "project",
+     "path": "/Users/macstudio3/Projects/all-designerwallcoverings/.env"
     }
-  ],
-  "CLOUDFLARE_ACCOUNT_ID": [
-    "/Users/macstudio3/.claude/skills/domain-check/.env",
-    "/Users/macstudio3/.claude/skills/domain-dns-setup/.env",
-    "/Users/macstudio3/.claude/skills/domain-email-setup/.env",
-    "/Users/macstudio3/.claude/skills/domain-full-setup/.env",
-    "/Users/macstudio3/.claude/skills/domain-register/.env",
-    "/Users/macstudio3/.claude/skills/domain-setup/.env",
-    "/Users/macstudio3/.claude/skills/setup-domains/.env"
-  ],
-  "CLOUDFLARE_API_TOKEN": [
-    "/Users/macstudio3/Projects/all-designerwallcoverings/.env",
-    "/Users/macstudio3/.claude/skills/cloudflare-manager/.env",
-    "/Users/macstudio3/.claude/skills/domain-dns-setup/.env",
-    "/Users/macstudio3/.claude/skills/domain-full-setup/.env",
-    "/Users/macstudio3/.claude/skills/domain-setup/.env",
-    "/Users/macstudio3/.claude/skills/setup-domains/.env"
-  ],
-  "SMB_BUILDER_ADMIN_TOKEN": {
-    "destinations": [
-      {
-        "type": "env_file",
-        "path": "/Users/macstudio3/Projects/small-business-builder/.env",
-        "key": "ADMIN_TOKEN"
-      }
-    ]
-  },
-  "SHOPIFY_ORDERS_TOKEN": {
-    "label": "Shopify Admin token (orders+products scope, weekend-report1-1 Partner app)",
-    "destinations": [
-      {
-        "type": "skill",
-        "path": "/Users/macstudio3/.claude/skills/weekend-csv-products/.env"
-      }
-    ]
-  },
-  "SPOONFLOWER_EMAIL": {
-    "env_files": [
-      "/Users/macstudio3/Projects/resize-it/.env",
-      "/Users/macstudio3/Projects/wallco-ai/.env"
-    ]
-  },
-  "SPOONFLOWER_PASSWORD": {
-    "env_files": [
-      "/Users/macstudio3/Projects/resize-it/.env",
-      "/Users/macstudio3/Projects/wallco-ai/.env"
-    ]
-  },
-  "GOOGLE_DRIVE_CLIENT_ID": {
-    "description": "Google Drive OAuth Client ID — TSD photo-import-cli desktop app",
-    "destinations": [
-      {
-        "type": "env-file",
-        "path": "/Users/macstudio3/Projects/thesetdecorator/.env"
-      }
-    ]
-  },
-  "GOOGLE_DRIVE_CLIENT_SECRET": {
-    "description": "Google Drive OAuth Client Secret — TSD photo-import-cli",
-    "destinations": [
-      {
-        "type": "env-file",
-        "path": "/Users/macstudio3/Projects/thesetdecorator/.env"
-      }
-    ]
-  },
-  "GOOGLE_DRIVE_REFRESH_TOKEN": {
-    "description": "Google Drive OAuth refresh token — read-only scope, owned by steveabramsdesigns@gmail.com",
-    "destinations": [
-      {
-        "type": "env-file",
-        "path": "/Users/macstudio3/Projects/thesetdecorator/.env"
-      }
-    ]
+   ],
+   "_prod_note": "Kamatera PROD all-designerwallcoverings uses a DEDICATED Browserbase project/key set OUT-OF-BAND (dashboard-created, isolated blast radius + own spend cap). Do NOT re-add the prod all-dw ssh destination here or sync will clobber the dedicated key with the shared fleet key."
+  },
+  "BROWSERBASE_PROJECT_ID": {
+   "label": "Browserbase Project ID",
+   "destinations": [
+    {
+     "type": "skill",
+     "name": "browserbase"
+    },
+    {
+     "type": "project",
+     "host": "45.61.58.125",
+     "user": "root",
+     "path": "/root/Projects/Designer-Wallcoverings/DW-Websites/abrams-report/.env"
+    },
+    {
+     "type": "project",
+     "path": "/Users/macstudio3/Projects/abrams-report/.env"
+    },
+    {
+     "type": "project",
+     "path": "/Users/macstudio3/Projects/all-designerwallcoverings/.env"
+    }
+   ],
+   "_prod_note": "Kamatera PROD all-designerwallcoverings uses a DEDICATED Browserbase project/key set OUT-OF-BAND (dashboard-created, isolated blast radius + own spend cap). Do NOT re-add the prod all-dw ssh destination here or sync will clobber the dedicated key with the shared fleet key."
+  },
+  "ANTHROPIC_API_KEY": {
+   "label": "Anthropic API Key",
+   "verify": {
+    "method": "POST",
+    "url": "https://api.anthropic.com/v1/messages",
+    "auth": "x-api-key",
+    "body": "{\"model\":\"claude-haiku-4-5\",\"max_tokens\":1,\"messages\":[{\"role\":\"user\",\"content\":\"hi\"}]}"
+   },
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/Letsbegin/.env.local"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/dear-bubbe-nextjs/.env"
+    }
+   ]
   },
   "OPENAI_API_KEY": {
-    "label": "OPENAI_API_KEY",
-    "destinations": [
-      "/Users/macstudio3/Projects/holdforme/.env"
-    ]
+   "label": "OpenAI API Key",
+   "verify": {
+    "method": "GET",
+    "url": "https://api.openai.com/v1/models",
+    "auth": "bearer"
+   },
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/dear-bubbe-nextjs/.env.local"
+    },
+    {
+     "type": "project",
+     "host": "45.61.58.125",
+     "user": "root",
+     "path": "/root/Projects/dear-bubbe-nextjs/.env.local"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/animals/.env"
+    }
+   ]
+  },
+  "GEMINI_API_KEY": {
+   "label": "Google Gemini API Key",
+   "verify": {
+    "method": "GET",
+    "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
+    "auth": "url"
+   },
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/Letsbegin/.env.local"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/Bertha/kalshi-dash/.env"
+    },
+    {
+     "type": "skill",
+     "name": "ai-analyzer"
+    },
+    {
+     "type": "skill",
+     "name": "enrich-ai-tags"
+    }
+   ]
+  },
+  "GEMINI_API_KEY_DW_ENRICH": {
+   "label": "Google Gemini API Key \u2014 DEDICATED to DW image-enrichment / vendor-command-center. Created 2026-06-23 by vp-security as the rotation target for the leaked orphan keys (last-4 ejMo and S2ic, never registry-managed). Pre-staged EMPTY so that the moment Steve issues a fresh key at Google AI Studio, `add GEMINI_API_KEY_DW_ENRICH <new-key>` verifies it against Gemini and fans it (remapped to the bare var GEMINI_API_KEY) to the consumers below. Distinct from the master GEMINI_API_KEY (Letsbegin/Bertha/skills) and GEMINI_API_KEY_WALLCO (k720). If Steve prefers enrichment to ride the master key instead, he can skip this alias and update GEMINI_API_KEY directly \u2014 the env-ified consumers read GEMINI_API_KEY first.",
+   "verify": {
+    "method": "GET",
+    "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
+    "auth": "url"
+   },
+   "_note": "The 3 DW vendor-command-center files (logo-cropper.js, website-scorer.js, standardization-worker.js) read process.env.GEMINI_API_KEY (master) with GEMINI_KEY fallback, loaded from /root/.env on Kamatera. The goodquestion-ai/scripts/generate-hero-images.cjs reads process.env.GEMINI_API_KEY from ~/Projects/goodquestion-ai/.env. Each destination remaps this alias to the bare key name GEMINI_API_KEY so the env-ified code picks it up with no further change.",
+   "destinations": [
+    {
+     "type": "project",
+     "host": "45.61.58.125",
+     "user": "root",
+     "path": "/root/.env",
+     "key": "GEMINI_API_KEY"
+    },
+    {
+     "type": "env_file",
+     "path": "~/Projects/goodquestion-ai/.env",
+     "key": "GEMINI_API_KEY"
+    }
+   ]
+  },
+  "GEMINI_API_KEY_WALLCO": {
+   "label": "Google Gemini API Key \u2014 DEDICATED to wallco.ai gen pipeline (nano-banana / gemini-2.5-flash-image fallback). Distinct from the master GEMINI_API_KEY (Letsbegin/Bertha/skills). Same dedicated-alias pattern as GEMINI_API_KEY_RALPH.",
+   "verify": {
+    "method": "GET",
+    "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
+    "auth": "url"
+   },
+   "_note": "The wallco.ai app (local Mac2 AND prod Kamatera) reads the bare var GEMINI_API_KEY in its OWN .env, but that value differs from the master registry GEMINI_API_KEY. To avoid clobbering either consumer, this dedicated alias tracks the wallco-specific value by digest. The fan writes the bare key name GEMINI_API_KEY into the wallco .env files (per-dest key remap), NOT GEMINI_API_KEY_WALLCO. Prod value verified LIVE + matching local 2026-06-21 (k720:4295091b). Remote-fan to prod IS automated via cli.js sync (type=project+host); leave it documented-but-not-fanned unless a rotation is intended.",
+   "destinations": [
+    {
+     "type": "env_file",
+     "path": "~/Projects/wallco-ai/.env",
+     "key": "GEMINI_API_KEY"
+    },
+    {
+     "type": "project",
+     "host": "45.61.58.125",
+     "user": "root",
+     "path": "/root/public-projects/wallco-ai/.env",
+     "key": "GEMINI_API_KEY"
+    }
+   ]
+  },
+  "GOOGLE_GENERATIVE_AI_API_KEY": {
+   "label": "Google Generative AI API Key (alias of GEMINI_API_KEY)",
+   "verify": {
+    "method": "GET",
+    "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
+    "auth": "url"
+   },
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/Letsbegin/.env.local"
+    }
+   ]
+  },
+  "SHOPIFY_ADMIN_TOKEN": {
+   "label": "Shopify Admin API Access Token",
+   "destinations": [
+    {
+     "type": "project",
+     "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/shopify/.env"
+    },
+    {
+     "type": "project",
+     "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/.env"
+    },
+    {
+     "type": "project",
+     "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Websites/LosAngelesFabrics/.env"
+    },
+    {
+     "type": "env_file",
+     "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local",
+     "key": "SHOPIFY_ADMIN_ACCESS_TOKEN"
+    },
+    {
+     "type": "env_file",
+     "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local",
+     "key": "SHOPIFY_ADMIN_TOKEN"
+    }
+   ]
+  },
+  "SHOPIFY_API_KEY": {
+   "label": "Shopify API Key",
+   "destinations": []
+  },
+  "RESEND_API_KEY": {
+   "label": "Resend API Key",
+   "verify": {
+    "method": "GET",
+    "url": "https://api.resend.com/domains",
+    "auth": "bearer"
+   },
+   "destinations": []
+  },
+  "STRIPE_RESTRICTED_KEY": {
+   "label": "Stripe Restricted Key (site-factory)",
+   "verify": {
+    "method": "GET",
+    "url": "https://api.stripe.com/v1/balance",
+    "auth": "basic-sk"
+   },
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/site-factory/.env"
+    }
+   ]
+  },
+  "DPLA_API_KEY": {
+   "label": "Digital Public Library of America API Key",
+   "verify": {
+    "method": "GET",
+    "url": "https://api.dp.la/v2/items?api_key={value}&q=test&page_size=1",
+    "auth": "url"
+   },
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/wholivedthere/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/claimmyaddress/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/bubbesblock/.env"
+    },
+    {
+     "type": "skill",
+     "name": "la-research-agent"
+    }
+   ]
+  },
+  "GEMINI_API_KEY_RALPH": {
+   "label": "Google Gemini API Key (dedicated to Letsbegin Ralph runner)",
+   "verify": {
+    "method": "GET",
+    "url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
+    "auth": "url"
+   },
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/Letsbegin/.env.local"
+    },
+    {
+     "type": "project",
+     "host": "45.61.58.125",
+     "user": "root",
+     "path": "/root/Projects/Letsbegin/.env.local"
+    }
+   ]
   },
   "ELEVENLABS_API_KEY": {
-    "label": "ELEVENLABS_API_KEY",
-    "destinations": [
-      "/Users/macstudio3/Projects/holdforme/.env"
-    ]
-  },
-  "TWILIO_ACCOUNT_SID": {
-    "label": "TWILIO_ACCOUNT_SID",
-    "destinations": [
-      "/Users/macstudio3/Projects/holdforme/.env"
-    ]
-  },
-  "TWILIO_AUTH_TOKEN": {
-    "label": "TWILIO_AUTH_TOKEN",
-    "destinations": [
-      "/Users/macstudio3/Projects/holdforme/.env"
-    ]
-  },
-  "TWILIO_PHONE_NUMBER": {
-    "label": "TWILIO_PHONE_NUMBER",
-    "destinations": [
-      "/Users/macstudio3/Projects/holdforme/.env"
-    ]
-  },
-  "TMDB_API_KEY": {
-    "label": "TMDB v3 API key — asseeninmovies Phase B drain (6.46M-stub queue)",
-    "verify": {
-      "method": "GET",
-      "url": "https://api.themoviedb.org/3/authentication?api_key=__VALUE__",
-      "auth": "querystring",
-      "expect": "success"
-    },
-    "destinations": [
-      "/Users/macstudio3/Projects/asseeninmovies/.env"
-    ]
-  },
-  "TMDB_READ_ACCESS_TOKEN": {
-    "label": "TMDB v4 read-access token (bearer) — alt to v3 api_key",
-    "verify": {
-      "method": "GET",
-      "url": "https://api.themoviedb.org/3/authentication",
-      "auth": "bearer",
-      "expect": "success"
-    },
-    "destinations": [
-      "/Users/macstudio3/Projects/asseeninmovies/.env"
-    ]
-  },
-  "VAPI_API_KEY": {
-    "label": "VAPI_API_KEY",
-    "destinations": [
-      "/Users/macstudio3/Projects/holdforme/.env",
-      "remote:kamatera:/root/public-projects/butlr/.env"
-    ]
-  },
-  "VAPI_PUBLIC_KEY": {
-    "label": "VAPI_PUBLIC_KEY",
-    "destinations": [
-      "/Users/macstudio3/Projects/holdforme/.env",
-      "remote:kamatera:/root/public-projects/butlr/.env"
-    ]
-  },
-  "AYRSHARE_API_KEY": {
-    "destinations": [
-      {
-        "type": "env_file",
-        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
-        "key": "AYRSHARE_API_KEY"
-      }
-    ]
-  },
-  "META_ACCESS_TOKEN": {
-    "destinations": [
-      {
-        "type": "env_file",
-        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
-        "key": "META_ACCESS_TOKEN"
-      }
-    ]
-  },
-  "META_IG_USER_ID": {
-    "destinations": [
-      {
-        "type": "env_file",
-        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
-        "key": "META_IG_USER_ID"
-      }
-    ]
-  },
-  "META_FB_PAGE_ID": {
-    "destinations": [
-      {
-        "type": "env_file",
-        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
-        "key": "META_FB_PAGE_ID"
-      }
-    ]
-  },
-  "SHOPIFY_DRAFT_TOKEN": {
-    "label": "Shopify Admin token (full access incl. write_draft_orders) — DW mural PDP custom-size checkout",
-    "destinations": [
-      {
-        "type": "project",
-        "path": "/Users/macstudio3/Projects/designerwallcoverings/.env"
-      }
-    ]
-  },
-  "SHOPIFY_STORE_DOMAIN": {
-    "label": "Shopify store domain for DW vendor microsites Memo-Sample checkout",
-    "destinations": [
-      {
-        "type": "project",
-        "path": "~/Projects/dw-vendor-microsites/.env"
-      },
-      {
-        "type": "project",
-        "host": "45.61.58.125",
-        "user": "root",
-        "path": "/root/Projects/dw-vendor-microsites/.env"
-      }
-    ]
-  },
-  "SHOPIFY_SAMPLE_VARIANT_ID": {
-    "label": "Shopify Memo Sample variant id (DW vendor microsites sample fee $4.25)",
-    "destinations": [
-      {
-        "type": "project",
-        "path": "~/Projects/dw-vendor-microsites/.env"
-      },
-      {
-        "type": "project",
-        "host": "45.61.58.125",
-        "user": "root",
-        "path": "/root/Projects/dw-vendor-microsites/.env"
-      }
-    ]
-  },
-  "SHOPIFY_STOREFRONT_TOKEN": {
-    "label": "Shopify Storefront API token for DW vendor microsites (unauthenticated checkout)",
-    "destinations": [
-      {
-        "type": "project",
-        "path": "~/Projects/dw-vendor-microsites/.env"
-      },
-      {
-        "type": "project",
-        "host": "45.61.58.125",
-        "user": "root",
-        "path": "/root/Projects/dw-vendor-microsites/.env"
-      }
-    ]
-  },
-  "TWOCAPTCHA_API_KEY": {
-    "destinations": [
-      {
-        "type": "skill",
-        "name": "2captcha"
-      },
-      {
-        "type": "skill",
-        "name": "browserbase"
-      }
-    ]
-  },
-  "DEDAR_LOGIN_URL": {
-    "label": "Dedar trade-portal login_url (pulled from Kamatera dw-price-stock 2026-07-06, supervised outbound-tier)",
-    "destinations": [
-      {
-        "type": "env_file",
-        "path": "~/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local"
-      },
-      {
-        "type": "env_file",
-        "path": "~/Projects/secrets-manager/.env"
-      }
-    ]
-  },
-  "DEDAR_USERNAME": {
-    "label": "Dedar trade-portal username (pulled from Kamatera dw-price-stock 2026-07-06, supervised outbound-tier)",
-    "destinations": [
-      {
-        "type": "env_file",
-        "path": "~/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local"
-      },
-      {
-        "type": "env_file",
-        "path": "~/Projects/secrets-manager/.env"
-      }
-    ]
-  },
-  "DEDAR_PASSWORD": {
-    "label": "Dedar trade-portal password (pulled from Kamatera dw-price-stock 2026-07-06, supervised outbound-tier)",
-    "destinations": [
-      {
-        "type": "env_file",
-        "path": "~/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local"
-      },
-      {
-        "type": "env_file",
-        "path": "~/Projects/secrets-manager/.env"
-      }
-    ]
-  },
-  "YORKWALL_USER": {
-    "env_files": [
-      "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env",
-      "/Users/macstudio3/.claude/skills/brewster-scraper-manager/.env"
-    ]
-  },
-  "YORKWALL_PASS": {
-    "env_files": [
-      "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env",
-      "/Users/macstudio3/.claude/skills/brewster-scraper-manager/.env"
-    ]
-  },
-  "GOVAUCTIONS_API_KEY": [
-    "/Users/macstudio3/Projects/govarbitrage/.env"
-  ],
-  "APIFY_TOKEN": [
-    "/Users/macstudio3/Projects/govarbitrage/.env"
-  ],
-  "HEYGEN_API_KEY": [
-    "/Users/macstudio3/.claude/skills/heygen-video/.env",
-    "/Users/macstudio3/.claude/skills/heygen-avatar/.env",
-    "/Users/macstudio3/.claude/skills/heygen-translate/.env"
-  ],
-  "IG_USER_ID": {
-    "destinations": [
-      {
-        "type": "env_file",
-        "path": "/Users/macstudio3/Projects/Norma/agents/instagram-agent/.env",
-        "key": "IG_USER_ID"
-      }
-    ]
-  },
-  "TIKTOK_CLIENT_KEY": {
-    "label": "TIKTOK_CLIENT_KEY",
-    "destinations": [
-      {
-        "type": "env_file",
-        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
-        "key": "TIKTOK_CLIENT_KEY"
-      },
-      {
-        "type": "project",
-        "host": "45.61.58.125",
-        "user": "root",
-        "path": "/root/DW-Agents/marketing-command-center/.env"
-      }
-    ]
-  },
-  "TIKTOK_CLIENT_SECRET": {
-    "label": "TIKTOK_CLIENT_SECRET",
-    "destinations": [
-      {
-        "type": "env_file",
-        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
-        "key": "TIKTOK_CLIENT_SECRET"
-      },
-      {
-        "type": "project",
-        "host": "45.61.58.125",
-        "user": "root",
-        "path": "/root/DW-Agents/marketing-command-center/.env"
-      }
-    ]
-  },
-  "THREADS_APP_ID": {
-    "destinations": [
-      {
-        "type": "env_file",
-        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
-        "key": "THREADS_APP_ID"
-      }
-    ]
-  },
-  "THREADS_APP_SECRET": {
-    "destinations": [
-      {
-        "type": "env_file",
-        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
-        "key": "THREADS_APP_SECRET"
-      }
-    ]
-  },
-  "THREADS_ACCESS_TOKEN": {
-    "destinations": [
-      {
-        "type": "env_file",
-        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
-        "key": "THREADS_ACCESS_TOKEN"
-      }
-    ]
-  },
-  "THREADS_USER_ID": {
-    "destinations": [
-      {
-        "type": "env_file",
-        "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
-        "key": "THREADS_USER_ID"
-      }
-    ]
-  },
-  "DATAFORSEO_API_KEY": {
-    "label": "DataForSEO API key (base64 of login:api-password) — OpenSEO self-hosted backend for keyword/SERP/backlink/domain tools. Login steve@designerwallcoverings.com.",
-    "destinations": [
-      "/Users/macstudio3/Projects/open-seo/.env.local"
-    ]
+   "label": "ElevenLabs Voice Synthesis API Key",
+   "verify": {
+    "method": "GET",
+    "url": "https://api.elevenlabs.io/v1/user",
+    "auth": "header",
+    "headerName": "xi-api-key"
+   },
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/dear-bubbe-nextjs/.env.local"
+    },
+    {
+     "type": "project",
+     "host": "45.61.58.125",
+     "user": "root",
+     "path": "/root/Projects/dear-bubbe-nextjs/.env.local"
+    }
+   ]
+  },
+  "NEXT_PUBLIC_GOOGLE_MAPS_API_KEY": {
+   "label": "Google Maps JavaScript API Key (browser-exposed; needs HTTP-referrer restrictions)",
+   "verify": {
+    "method": "GET",
+    "url": "https://maps.googleapis.com/maps/api/streetview/metadata?location=34.05,-118.25&key={value}",
+    "success": "json.status === \"OK\" || json.status === \"ZERO_RESULTS\"",
+    "note": "Validates by hitting Street View Static API metadata endpoint; OK or ZERO_RESULTS both prove the key is enabled and unexpired."
+   },
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/stayclaim/.env.local"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/wholivedthere/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/claimmyaddress/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/bubbesblock/.env"
+    },
+    {
+     "type": "remote",
+     "host": "root@45.61.58.125",
+     "path": "/root/public-projects/pastdoor/.env.local"
+    },
+    {
+     "type": "remote",
+     "host": "root@45.61.58.125",
+     "path": "/root/public-projects/pastdoor/.env.production"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/jill-website/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/ventura-bus-3d/.env",
+     "alias": "GOOGLE_MAPS_API_KEY"
+    }
+   ]
+  },
+  "LINKEDIN_CLIENT_ID": {
+   "label": "LinkedIn OAuth Client ID \u2014 \"For Claude - 5-6-26\" app, bound to Designer Wallcoverings Page",
+   "_note": "No verify endpoint \u2014 LinkedIn requires the ID+SECRET pair to validate, and the CLI verifies one key at a time. Manual probe via POST /oauth/v2/accessToken with a fake code expects 'invalid_request: authorization code not found' = creds OK.",
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/NationalPaperHangers/.env"
+    },
+    {
+     "type": "remote",
+     "host": "root@45.61.58.125",
+     "path": "/root/Projects/NationalPaperHangers/.env"
+    }
+   ]
+  },
+  "LINKEDIN_CLIENT_SECRET": {
+   "label": "LinkedIn OAuth Client Secret \u2014 \"For Claude - 5-6-26\" app, bound to Designer Wallcoverings Page",
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/NationalPaperHangers/.env"
+    },
+    {
+     "type": "remote",
+     "host": "root@45.61.58.125",
+     "path": "/root/Projects/NationalPaperHangers/.env"
+    }
+   ]
+  },
+  "GOOGLE_OAUTH_CLIENT_ID": {
+   "label": "Google OAuth Client ID \u2014 DW Activation Calendar (shared DW Google Calendar, local :9765)",
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/dw-activation-calendar/.env"
+    }
+   ]
+  },
+  "GOOGLE_OAUTH_CLIENT_SECRET": {
+   "label": "Google OAuth Client Secret \u2014 DW Activation Calendar (shared DW Google Calendar, local :9765)",
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/dw-activation-calendar/.env"
+    }
+   ]
+  },
+  "NPH_GOOGLE_OAUTH_CLIENT_ID": {
+   "label": "Google OAuth Client ID \u2014 buyer sign-in on National Paper Hangers",
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/NationalPaperHangers/.env"
+    },
+    {
+     "type": "remote",
+     "host": "root@45.61.58.125",
+     "path": "/root/Projects/NationalPaperHangers/.env"
+    }
+   ]
+  },
+  "NPH_GOOGLE_OAUTH_CLIENT_SECRET": {
+   "label": "Google OAuth Client Secret \u2014 buyer sign-in on National Paper Hangers",
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/NationalPaperHangers/.env"
+    },
+    {
+     "type": "remote",
+     "host": "root@45.61.58.125",
+     "path": "/root/Projects/NationalPaperHangers/.env"
+    }
+   ]
+  },
+  "GEORGE_AUTH": {
+   "label": "George Gmail Basic Auth (DW microsite leads)",
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/1800swallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/1890swallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/1900swallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/1920swallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/1930swallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/1940swallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/1950swallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/1960swallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/1970swallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/1980swallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/agedwallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/apartmentwallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/architecturalwallcoverings/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/blockprintedwallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/contractwallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/corkwallcovering/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/embroideredwallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/fabricwallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/glitterwalls/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/greenwallcoverings/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/handcraftedwallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/healthcarewallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/hospitalitywallcoverings/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/hospitalitywallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/hotelwallcoverings/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/jutewallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/linenwallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/madagascarwallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/metallicwallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/micawallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/museumwallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/mylarwallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/naturalwallcoverings/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/pastelwallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/raffiawallcoverings/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/raffiawalls/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/recycledwallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/restaurantwallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/restorationwallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/retrowalls/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/saloonwallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/screenprintedwallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/selfadhesivewallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/silkwallcoverings/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/silkwallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/silverleafwallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/stringwallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/suedewallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/textilewallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/vinylwallpaper/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/wallpapersback/.env"
+    },
+    {
+     "type": "project",
+     "path": "~/Projects/wallsandfabrics/.env"
+    }
+   ]
+  },
+  "CLOUDFLARE_PAGES_TOKEN": {
+   "label": "Cloudflare Pages API Token",
+   "verify": {
+    "method": "GET",
+    "url": "https://api.cloudflare.com/client/v4/user/tokens/verify",
+    "auth": "bearer"
+   },
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/coming-soon-template/.env"
+    }
+   ]
+  },
+  "SHOPIFY_THEME_TOKEN": {
+   "label": "Shopify full-access theme/files token (read_themes+files; scrubbed from DW-Agents JS 2026-06-25)",
+   "destinations": [
+    {
+     "type": "env_file",
+     "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/.env"
+    },
+    {
+     "type": "env_file",
+     "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Agents/dw-agents/.env"
+    },
+    {
+     "type": "env_file",
+     "path": "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Agents/dw-agents/agent-task-orchestrator/.env"
+    }
+   ]
+  },
+  "SLACK_APP_ID": {
+   "label": "Slack app \"Claude Access to Slack\" \u2014 App ID (A0BDER23QRK). Not secret but registered for completeness.",
+   "destinations": [
+    {
+     "type": "env_file",
+     "path": "~/Projects/claude-slack/.env"
+    }
+   ]
+  },
+  "SLACK_CLIENT_ID": {
+   "label": "Slack app Client ID \u2014 used with Client Secret in oauth.v2.access requests.",
+   "destinations": [
+    {
+     "type": "env_file",
+     "path": "~/Projects/claude-slack/.env"
+    }
+   ]
+  },
+  "SLACK_CLIENT_SECRET": {
+   "label": "Slack app Client Secret \u2014 OAuth token exchange (oauth.v2.access). NOT the bot token.",
+   "destinations": [
+    {
+     "type": "env_file",
+     "path": "~/Projects/claude-slack/.env"
+    }
+   ]
+  },
+  "SLACK_SIGNING_SECRET": {
+   "label": "Slack app Signing Secret \u2014 verifies inbound request signatures from Slack (events/interactivity).",
+   "destinations": [
+    {
+     "type": "env_file",
+     "path": "~/Projects/claude-slack/.env"
+    }
+   ]
+  },
+  "SLACK_VERIFICATION_TOKEN": {
+   "label": "Slack DEPRECATED verification token \u2014 legacy request verification. Prefer SLACK_SIGNING_SECRET.",
+   "destinations": [
+    {
+     "type": "env_file",
+     "path": "~/Projects/claude-slack/.env"
+    }
+   ]
+  },
+  "SLACK_APP_TOKEN": {
+   "label": "Slack app-level token (xapp-1-\u2026) for Socket Mode \u2014 connections:write. Routes events over WebSocket. NOT the bot token (xoxb-).",
+   "destinations": [
+    {
+     "type": "env_file",
+     "path": "~/Projects/claude-slack/.env"
+    }
+   ]
+  },
+  "CENSUS_API_KEY": {
+   "label": "US Census Bureau Data API key \u2014 demographics fetcher for commercialrealestate (ACS5 by ZCTA). NOTE: Census API returns 302-redirect on a valid data query so the secrets verifier cannot probe it; verify manually via an ACS5 curl.",
+   "destinations": [
+    {
+     "type": "env_file",
+     "path": "~/Projects/commercialrealestate/.env"
+    }
+   ]
+  },
+  "POSTIZ_API_KEY": {
+   "label": "Postiz public API key (raw Authorization header) \u2014 DW marketing slideshow engine (post/integrations) + Postiz MCP",
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/Projects/dw-slideshow-gen/.env"
+    }
+   ]
+  },
+  "X_API_KEY": {
+   "label": "X (Twitter) API v2 \u2014 Consumer/API key (app auth). Pairs with X_API_SECRET to mint app-only bearers.",
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/.claude/skills/kartiseira/.env"
+    }
+   ]
+  },
+  "X_API_SECRET": {
+   "label": "X (Twitter) API v2 \u2014 Consumer/API secret. With X_API_KEY mints app-only bearer via oauth2/token.",
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/.claude/skills/kartiseira/.env"
+    }
+   ]
+  },
+  "X_BEARER_TOKEN": {
+   "label": "X (Twitter) API v2 \u2014 app-only Bearer token (use RAW/as-issued; contains %-encoded chars).",
+   "verify": {
+    "method": "GET",
+    "url": "https://api.twitter.com/2/tweets?ids=20",
+    "auth": "bearer",
+    "bodyMustContain": "data"
+   },
+   "destinations": [
+    {
+     "type": "project",
+     "path": "~/.claude/skills/kartiseira/.env"
+    }
+   ]
   }
-}
+ },
+ "leak_patterns": [
+  {
+   "name": "stripe-live-secret",
+   "regex": "sk_live_[A-Za-z0-9]{20,}"
+  },
+  {
+   "name": "purelymail-token",
+   "regex": "PURELYMAIL_API_TOKEN\\s*=\\s*[A-Za-z0-9_-]{20,}"
+  },
+  {
+   "name": "stripe-test-secret",
+   "regex": "sk_test_[A-Za-z0-9]{20,}"
+  },
+  {
+   "name": "stripe-publishable",
+   "regex": "pk_live_[A-Za-z0-9]{20,}"
+  },
+  {
+   "name": "browserbase",
+   "regex": "bb_live_[A-Za-z0-9]+"
+  },
+  {
+   "name": "google-api-key",
+   "regex": "AIza[0-9A-Za-z_-]{35}"
+  },
+  {
+   "name": "google-oauth-access",
+   "regex": "ya29\\.[A-Za-z0-9_-]{20,}"
+  },
+  {
+   "name": "github-pat",
+   "regex": "ghp_[A-Za-z0-9]{36}"
+  },
+  {
+   "name": "github-fine-grained",
+   "regex": "github_pat_[A-Za-z0-9_]{60,}"
+  },
+  {
+   "name": "slack-bot",
+   "regex": "xox[baprs]-[A-Za-z0-9-]{10,}"
+  },
+  {
+   "name": "openai-key",
+   "regex": "sk-[A-Za-z0-9]{40,}"
+  },
+  {
+   "name": "anthropic-key",
+   "regex": "sk-ant-[A-Za-z0-9_-]{50,}"
+  },
+  {
+   "name": "cf-token-40hex",
+   "regex": "(?:cloudflare|cf_token|dns_cloudflare_api_token)[^A-Za-z0-9]+([A-Za-z0-9_-]{40})"
+  }
+ ],
+ "CLOUDFLARE_ACCOUNT_ID": [
+  "/Users/macstudio3/.claude/skills/domain-check/.env",
+  "/Users/macstudio3/.claude/skills/domain-dns-setup/.env",
+  "/Users/macstudio3/.claude/skills/domain-email-setup/.env",
+  "/Users/macstudio3/.claude/skills/domain-full-setup/.env",
+  "/Users/macstudio3/.claude/skills/domain-register/.env",
+  "/Users/macstudio3/.claude/skills/domain-setup/.env",
+  "/Users/macstudio3/.claude/skills/setup-domains/.env"
+ ],
+ "CLOUDFLARE_API_TOKEN": [
+  "/Users/macstudio3/Projects/all-designerwallcoverings/.env",
+  "/Users/macstudio3/.claude/skills/cloudflare-manager/.env",
+  "/Users/macstudio3/.claude/skills/domain-dns-setup/.env",
+  "/Users/macstudio3/.claude/skills/domain-full-setup/.env",
+  "/Users/macstudio3/.claude/skills/domain-setup/.env",
+  "/Users/macstudio3/.claude/skills/setup-domains/.env"
+ ],
+ "SMB_BUILDER_ADMIN_TOKEN": {
+  "destinations": [
+   {
+    "type": "env_file",
+    "path": "/Users/macstudio3/Projects/small-business-builder/.env",
+    "key": "ADMIN_TOKEN"
+   }
+  ]
+ },
+ "SHOPIFY_ORDERS_TOKEN": {
+  "label": "Shopify Admin token (orders+products scope, weekend-report1-1 Partner app)",
+  "destinations": [
+   {
+    "type": "skill",
+    "path": "/Users/macstudio3/.claude/skills/weekend-csv-products/.env"
+   }
+  ]
+ },
+ "SPOONFLOWER_EMAIL": {
+  "env_files": [
+   "/Users/macstudio3/Projects/resize-it/.env",
+   "/Users/macstudio3/Projects/wallco-ai/.env"
+  ]
+ },
+ "SPOONFLOWER_PASSWORD": {
+  "env_files": [
+   "/Users/macstudio3/Projects/resize-it/.env",
+   "/Users/macstudio3/Projects/wallco-ai/.env"
+  ]
+ },
+ "GOOGLE_DRIVE_CLIENT_ID": {
+  "description": "Google Drive OAuth Client ID \u2014 TSD photo-import-cli desktop app",
+  "destinations": [
+   {
+    "type": "env-file",
+    "path": "/Users/macstudio3/Projects/thesetdecorator/.env"
+   }
+  ]
+ },
+ "GOOGLE_DRIVE_CLIENT_SECRET": {
+  "description": "Google Drive OAuth Client Secret \u2014 TSD photo-import-cli",
+  "destinations": [
+   {
+    "type": "env-file",
+    "path": "/Users/macstudio3/Projects/thesetdecorator/.env"
+   }
+  ]
+ },
+ "GOOGLE_DRIVE_REFRESH_TOKEN": {
+  "description": "Google Drive OAuth refresh token \u2014 read-only scope, owned by steveabramsdesigns@gmail.com",
+  "destinations": [
+   {
+    "type": "env-file",
+    "path": "/Users/macstudio3/Projects/thesetdecorator/.env"
+   }
+  ]
+ },
+ "OPENAI_API_KEY": {
+  "label": "OPENAI_API_KEY",
+  "destinations": [
+   "/Users/macstudio3/Projects/holdforme/.env"
+  ]
+ },
+ "ELEVENLABS_API_KEY": {
+  "label": "ELEVENLABS_API_KEY",
+  "destinations": [
+   "/Users/macstudio3/Projects/holdforme/.env"
+  ]
+ },
+ "TWILIO_ACCOUNT_SID": {
+  "label": "TWILIO_ACCOUNT_SID",
+  "destinations": [
+   "/Users/macstudio3/Projects/holdforme/.env"
+  ]
+ },
+ "TWILIO_AUTH_TOKEN": {
+  "label": "TWILIO_AUTH_TOKEN",
+  "destinations": [
+   "/Users/macstudio3/Projects/holdforme/.env"
+  ]
+ },
+ "TWILIO_PHONE_NUMBER": {
+  "label": "TWILIO_PHONE_NUMBER",
+  "destinations": [
+   "/Users/macstudio3/Projects/holdforme/.env"
+  ]
+ },
+ "TMDB_API_KEY": {
+  "label": "TMDB v3 API key \u2014 asseeninmovies Phase B drain (6.46M-stub queue)",
+  "verify": {
+   "method": "GET",
+   "url": "https://api.themoviedb.org/3/authentication?api_key=__VALUE__",
+   "auth": "querystring",
+   "expect": "success"
+  },
+  "destinations": [
+   "/Users/macstudio3/Projects/asseeninmovies/.env"
+  ]
+ },
+ "TMDB_READ_ACCESS_TOKEN": {
+  "label": "TMDB v4 read-access token (bearer) \u2014 alt to v3 api_key",
+  "verify": {
+   "method": "GET",
+   "url": "https://api.themoviedb.org/3/authentication",
+   "auth": "bearer",
+   "expect": "success"
+  },
+  "destinations": [
+   "/Users/macstudio3/Projects/asseeninmovies/.env"
+  ]
+ },
+ "VAPI_API_KEY": {
+  "label": "VAPI_API_KEY",
+  "destinations": [
+   "/Users/macstudio3/Projects/holdforme/.env",
+   "remote:kamatera:/root/public-projects/butlr/.env"
+  ]
+ },
+ "VAPI_PUBLIC_KEY": {
+  "label": "VAPI_PUBLIC_KEY",
+  "destinations": [
+   "/Users/macstudio3/Projects/holdforme/.env",
+   "remote:kamatera:/root/public-projects/butlr/.env"
+  ]
+ },
+ "AYRSHARE_API_KEY": {
+  "destinations": [
+   {
+    "type": "env_file",
+    "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+    "key": "AYRSHARE_API_KEY"
+   }
+  ]
+ },
+ "META_ACCESS_TOKEN": {
+  "destinations": [
+   {
+    "type": "env_file",
+    "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+    "key": "META_ACCESS_TOKEN"
+   }
+  ]
+ },
+ "META_IG_USER_ID": {
+  "destinations": [
+   {
+    "type": "env_file",
+    "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+    "key": "META_IG_USER_ID"
+   }
+  ]
+ },
+ "META_FB_PAGE_ID": {
+  "destinations": [
+   {
+    "type": "env_file",
+    "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+    "key": "META_FB_PAGE_ID"
+   }
+  ]
+ },
+ "SHOPIFY_DRAFT_TOKEN": {
+  "label": "Shopify Admin token (full access incl. write_draft_orders) \u2014 DW mural PDP custom-size checkout",
+  "destinations": [
+   {
+    "type": "project",
+    "path": "/Users/macstudio3/Projects/designerwallcoverings/.env"
+   }
+  ]
+ },
+ "SHOPIFY_STORE_DOMAIN": {
+  "label": "Shopify store domain for DW vendor microsites Memo-Sample checkout",
+  "destinations": [
+   {
+    "type": "project",
+    "path": "~/Projects/dw-vendor-microsites/.env"
+   },
+   {
+    "type": "project",
+    "host": "45.61.58.125",
+    "user": "root",
+    "path": "/root/Projects/dw-vendor-microsites/.env"
+   }
+  ]
+ },
+ "SHOPIFY_SAMPLE_VARIANT_ID": {
+  "label": "Shopify Memo Sample variant id (DW vendor microsites sample fee $4.25)",
+  "destinations": [
+   {
+    "type": "project",
+    "path": "~/Projects/dw-vendor-microsites/.env"
+   },
+   {
+    "type": "project",
+    "host": "45.61.58.125",
+    "user": "root",
+    "path": "/root/Projects/dw-vendor-microsites/.env"
+   }
+  ]
+ },
+ "SHOPIFY_STOREFRONT_TOKEN": {
+  "label": "Shopify Storefront API token for DW vendor microsites (unauthenticated checkout)",
+  "destinations": [
+   {
+    "type": "project",
+    "path": "~/Projects/dw-vendor-microsites/.env"
+   },
+   {
+    "type": "project",
+    "host": "45.61.58.125",
+    "user": "root",
+    "path": "/root/Projects/dw-vendor-microsites/.env"
+   }
+  ]
+ },
+ "TWOCAPTCHA_API_KEY": {
+  "destinations": [
+   {
+    "type": "skill",
+    "name": "2captcha"
+   },
+   {
+    "type": "skill",
+    "name": "browserbase"
+   }
+  ]
+ },
+ "DEDAR_LOGIN_URL": {
+  "label": "Dedar trade-portal login_url (pulled from Kamatera dw-price-stock 2026-07-06, supervised outbound-tier)",
+  "destinations": [
+   {
+    "type": "env_file",
+    "path": "~/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local"
+   },
+   {
+    "type": "env_file",
+    "path": "~/Projects/secrets-manager/.env"
+   }
+  ]
+ },
+ "DEDAR_USERNAME": {
+  "label": "Dedar trade-portal username (pulled from Kamatera dw-price-stock 2026-07-06, supervised outbound-tier)",
+  "destinations": [
+   {
+    "type": "env_file",
+    "path": "~/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local"
+   },
+   {
+    "type": "env_file",
+    "path": "~/Projects/secrets-manager/.env"
+   }
+  ]
+ },
+ "DEDAR_PASSWORD": {
+  "label": "Dedar trade-portal password (pulled from Kamatera dw-price-stock 2026-07-06, supervised outbound-tier)",
+  "destinations": [
+   {
+    "type": "env_file",
+    "path": "~/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local"
+   },
+   {
+    "type": "env_file",
+    "path": "~/Projects/secrets-manager/.env"
+   }
+  ]
+ },
+ "YORKWALL_USER": {
+  "env_files": [
+   "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env",
+   "/Users/macstudio3/.claude/skills/brewster-scraper-manager/.env"
+  ]
+ },
+ "YORKWALL_PASS": {
+  "env_files": [
+   "/Users/macstudio3/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env",
+   "/Users/macstudio3/.claude/skills/brewster-scraper-manager/.env"
+  ]
+ },
+ "GOVAUCTIONS_API_KEY": [
+  "/Users/macstudio3/Projects/govarbitrage/.env"
+ ],
+ "APIFY_TOKEN": [
+  "/Users/macstudio3/Projects/govarbitrage/.env"
+ ],
+ "HEYGEN_API_KEY": [
+  "/Users/macstudio3/.claude/skills/heygen-video/.env",
+  "/Users/macstudio3/.claude/skills/heygen-avatar/.env",
+  "/Users/macstudio3/.claude/skills/heygen-translate/.env"
+ ],
+ "IG_USER_ID": {
+  "destinations": [
+   {
+    "type": "env_file",
+    "path": "/Users/macstudio3/Projects/Norma/agents/instagram-agent/.env",
+    "key": "IG_USER_ID"
+   }
+  ]
+ },
+ "TIKTOK_CLIENT_KEY": {
+  "label": "TIKTOK_CLIENT_KEY",
+  "destinations": [
+   {
+    "type": "env_file",
+    "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+    "key": "TIKTOK_CLIENT_KEY"
+   },
+   {
+    "type": "project",
+    "host": "45.61.58.125",
+    "user": "root",
+    "path": "/root/DW-Agents/marketing-command-center/.env"
+   }
+  ]
+ },
+ "TIKTOK_CLIENT_SECRET": {
+  "label": "TIKTOK_CLIENT_SECRET",
+  "destinations": [
+   {
+    "type": "env_file",
+    "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+    "key": "TIKTOK_CLIENT_SECRET"
+   },
+   {
+    "type": "project",
+    "host": "45.61.58.125",
+    "user": "root",
+    "path": "/root/DW-Agents/marketing-command-center/.env"
+   }
+  ]
+ },
+ "THREADS_APP_ID": {
+  "destinations": [
+   {
+    "type": "env_file",
+    "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+    "key": "THREADS_APP_ID"
+   }
+  ]
+ },
+ "THREADS_APP_SECRET": {
+  "destinations": [
+   {
+    "type": "env_file",
+    "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+    "key": "THREADS_APP_SECRET"
+   }
+  ]
+ },
+ "THREADS_ACCESS_TOKEN": {
+  "destinations": [
+   {
+    "type": "env_file",
+    "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+    "key": "THREADS_ACCESS_TOKEN"
+   }
+  ]
+ },
+ "THREADS_USER_ID": {
+  "destinations": [
+   {
+    "type": "env_file",
+    "path": "/Users/macstudio3/Projects/marketing-command-center/.env",
+    "key": "THREADS_USER_ID"
+   }
+  ]
+ },
+ "DATAFORSEO_API_KEY": {
+  "label": "DataForSEO API key (base64 of login:api-password) \u2014 OpenSEO self-hosted backend for keyword/SERP/backlink/domain tools. Login steve@designerwallcoverings.com.",
+  "destinations": [
+   "/Users/macstudio3/Projects/open-seo/.env.local"
+  ]
+ },
+ "OSBORNE_USERNAME": {
+  "label": "Osborne & Little trade portal (tradenew.osborneandlittle.com) login \u2014 also used for Matthew Williamson (O&L-distributed) US pricing",
+  "destinations": [
+   {
+    "type": "skill",
+    "name": "osborne-scraper-manager"
+   }
+  ]
+ },
+ "OSBORNE_PASSWORD": {
+  "label": "Osborne & Little trade portal password",
+  "destinations": [
+   {
+    "type": "skill",
+    "name": "osborne-scraper-manager"
+   }
+  ]
+ }
+}
\ No newline at end of file

← aaa98bd Coordonné Cotswolds: activate 29 wallcoverings LIVE (ACTIVE  ·  back to Secrets Manager  ·  chore: refactor — rename GOOGLE→GOOGLE_YOUTUBE for clarity ( 2b76a66 →