← back to Secrets Manager
Route SHOPIFY_THEME_TOKEN to DW-Agents env files (token scrubbed from source)
e6940f51f3d217d60ca0575d5a180387ae92e6ce · 2026-06-25 16:41:42 -0700 · Steve Abrams
Files touched
Diff
commit e6940f51f3d217d60ca0575d5a180387ae92e6ce
Author: Steve Abrams <steve@designerwallcoverings.com>
Date: Thu Jun 25 16:41:42 2026 -0700
Route SHOPIFY_THEME_TOKEN to DW-Agents env files (token scrubbed from source)
---
routes.json | 95 ++++++++++++++++++++++++++++++++++++++++---------------------
1 file changed, 62 insertions(+), 33 deletions(-)
diff --git a/routes.json b/routes.json
index dc0b8d5..51aee1e 100644
--- a/routes.json
+++ b/routes.json
@@ -4,14 +4,26 @@
"PG_DW_ADMIN_PASSWORD": {
"label": "Postgres dw_admin role password (local Mac2 + prod via prestage 3b). DSN_REWRITE rewrites DATABASE_URL pw in each env_file dest.",
"destinations": [
- { "type": "env_file", "path": "~/Projects/Norma/.env.local" },
- { "type": "env_file", "path": "~/Projects/StudentLoanTracker/.env.local" },
- { "type": "env_file", "path": "~/Projects/ClawCoder/.env.local" },
- { "type": "env_file", "path": "~/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local" }
+ {
+ "type": "env_file",
+ "path": "~/Projects/Norma/.env.local"
+ },
+ {
+ "type": "env_file",
+ "path": "~/Projects/StudentLoanTracker/.env.local"
+ },
+ {
+ "type": "env_file",
+ "path": "~/Projects/ClawCoder/.env.local"
+ },
+ {
+ "type": "env_file",
+ "path": "~/Projects/Designer-Wallcoverings/DW-Programming/ImportNewSkufromURL/.env.local"
+ }
]
},
"REPLICATE_API_TOKEN": {
- "label": "Replicate API Token — wallco.ai SDXL gen fallback (WALLCO_COMFY_FALLBACK=replicate floor) + animate-museum-posts",
+ "label": "Replicate API Token \u2014 wallco.ai SDXL gen fallback (WALLCO_COMFY_FALLBACK=replicate floor) + animate-museum-posts",
"verify": {
"method": "GET",
"url": "https://api.replicate.com/v1/account",
@@ -255,7 +267,7 @@
]
},
"STRIPE_VCL_WEBHOOK_SECRET": {
- "label": "Stripe webhook signing secret — VCL endpoint we_1TUF1Y63uNmiRsMbNr1kLu52",
+ "label": "Stripe webhook signing secret \u2014 VCL endpoint we_1TUF1Y63uNmiRsMbNr1kLu52",
"destinations": [
{
"type": "project",
@@ -270,7 +282,7 @@
]
},
"STRIPE_PRICE_VCL_STARTER_MONTH": {
- "label": "Stripe Price ID — VCL Starter $49/mo",
+ "label": "Stripe Price ID \u2014 VCL Starter $49/mo",
"destinations": [
{
"type": "project",
@@ -285,7 +297,7 @@
]
},
"STRIPE_PRICE_VCL_STANDARD_MONTH": {
- "label": "Stripe Price ID — VCL Standard $99/mo",
+ "label": "Stripe Price ID \u2014 VCL Standard $99/mo",
"destinations": [
{
"type": "project",
@@ -300,7 +312,7 @@
]
},
"STRIPE_PRICE_VCL_PREMIER_MONTH": {
- "label": "Stripe Price ID — VCL Premier $199/mo",
+ "label": "Stripe Price ID \u2014 VCL Premier $199/mo",
"destinations": [
{
"type": "project",
@@ -315,7 +327,7 @@
]
},
"HEYGEN_API_KEY": {
- "label": "HeyGen API key — talking-head avatar video render (used by session-debrief skill)",
+ "label": "HeyGen API key \u2014 talking-head avatar video render (used by session-debrief skill)",
"verify": {
"method": "GET",
"url": "https://api.heygen.com/v1/voice.list",
@@ -334,7 +346,7 @@
]
},
"INFO_VENTURACLAW_COM_PASSWORD": {
- "label": "Purelymail mailbox password — info@venturaclaw.com (used by Ventura Claw Leads + the existing ventura-claw app)",
+ "label": "Purelymail mailbox password \u2014 info@venturaclaw.com (used by Ventura Claw Leads + the existing ventura-claw app)",
"destinations": [
{
"type": "project",
@@ -359,7 +371,7 @@
]
},
"INFO_NATIONALPAPERHANGERS_COM_PASSWORD": {
- "label": "Purelymail mailbox password — info@nationalpaperhangers.com",
+ "label": "Purelymail mailbox password \u2014 info@nationalpaperhangers.com",
"destinations": [
{
"type": "project",
@@ -374,7 +386,7 @@
]
},
"STRIPE_NPH_WEBHOOK_SECRET": {
- "label": "Stripe Webhook Signing Secret — NPH endpoint we_1TUDHV63uNmiRsMbRJea7EqU",
+ "label": "Stripe Webhook Signing Secret \u2014 NPH endpoint we_1TUDHV63uNmiRsMbRJea7EqU",
"destinations": [
{
"type": "project",
@@ -389,7 +401,7 @@
]
},
"STRIPE_PRICE_PRO_MONTH": {
- "label": "Stripe Price ID — NPH Pro $39/mo",
+ "label": "Stripe Price ID \u2014 NPH Pro $39/mo",
"destinations": [
{
"type": "project",
@@ -404,7 +416,7 @@
]
},
"STRIPE_PRICE_PRO_YEAR": {
- "label": "Stripe Price ID — NPH Pro $399/yr",
+ "label": "Stripe Price ID \u2014 NPH Pro $399/yr",
"destinations": [
{
"type": "project",
@@ -419,7 +431,7 @@
]
},
"STRIPE_PRICE_SIGNATURE_MONTH": {
- "label": "Stripe Price ID — NPH Signature $149/mo",
+ "label": "Stripe Price ID \u2014 NPH Signature $149/mo",
"destinations": [
{
"type": "project",
@@ -434,7 +446,7 @@
]
},
"STRIPE_PRICE_SIGNATURE_YEAR": {
- "label": "Stripe Price ID — NPH Signature $1500/yr",
+ "label": "Stripe Price ID \u2014 NPH Signature $1500/yr",
"destinations": [
{
"type": "project",
@@ -449,7 +461,7 @@
]
},
"STRIPE_PRICE_ENTERPRISE_MONTH": {
- "label": "Stripe Price ID — NPH Enterprise $399/mo",
+ "label": "Stripe Price ID \u2014 NPH Enterprise $399/mo",
"destinations": [
{
"type": "project",
@@ -636,7 +648,7 @@
]
},
"GEMINI_API_KEY_DW_ENRICH": {
- "label": "Google Gemini API Key — DEDICATED to DW image-enrichment / vendor-command-center. Created 2026-06-23 by vp-security as the rotation target for the leaked orphan keys (last-4 ejMo and S2ic, never registry-managed). Pre-staged EMPTY so that the moment Steve issues a fresh key at Google AI Studio, `add GEMINI_API_KEY_DW_ENRICH <new-key>` verifies it against Gemini and fans it (remapped to the bare var GEMINI_API_KEY) to the consumers below. Distinct from the master GEMINI_API_KEY (Letsbegin/Bertha/skills) and GEMINI_API_KEY_WALLCO (k720). If Steve prefers enrichment to ride the master key instead, he can skip this alias and update GEMINI_API_KEY directly — the env-ified consumers read GEMINI_API_KEY first.",
+ "label": "Google Gemini API Key \u2014 DEDICATED to DW image-enrichment / vendor-command-center. Created 2026-06-23 by vp-security as the rotation target for the leaked orphan keys (last-4 ejMo and S2ic, never registry-managed). Pre-staged EMPTY so that the moment Steve issues a fresh key at Google AI Studio, `add GEMINI_API_KEY_DW_ENRICH <new-key>` verifies it against Gemini and fans it (remapped to the bare var GEMINI_API_KEY) to the consumers below. Distinct from the master GEMINI_API_KEY (Letsbegin/Bertha/skills) and GEMINI_API_KEY_WALLCO (k720). If Steve prefers enrichment to ride the master key instead, he can skip this alias and update GEMINI_API_KEY directly \u2014 the env-ified consumers read GEMINI_API_KEY first.",
"verify": {
"method": "GET",
"url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
@@ -659,7 +671,7 @@
]
},
"GEMINI_API_KEY_WALLCO": {
- "label": "Google Gemini API Key — DEDICATED to wallco.ai gen pipeline (nano-banana / gemini-2.5-flash-image fallback). Distinct from the master GEMINI_API_KEY (Letsbegin/Bertha/skills). Same dedicated-alias pattern as GEMINI_API_KEY_RALPH.",
+ "label": "Google Gemini API Key \u2014 DEDICATED to wallco.ai gen pipeline (nano-banana / gemini-2.5-flash-image fallback). Distinct from the master GEMINI_API_KEY (Letsbegin/Bertha/skills). Same dedicated-alias pattern as GEMINI_API_KEY_RALPH.",
"verify": {
"method": "GET",
"url": "https://generativelanguage.googleapis.com/v1beta/models?key={value}",
@@ -863,8 +875,8 @@
]
},
"LINKEDIN_CLIENT_ID": {
- "label": "LinkedIn OAuth Client ID — \"For Claude - 5-6-26\" app, bound to Designer Wallcoverings Page",
- "_note": "No verify endpoint — LinkedIn requires the ID+SECRET pair to validate, and the CLI verifies one key at a time. Manual probe via POST /oauth/v2/accessToken with a fake code expects 'invalid_request: authorization code not found' = creds OK.",
+ "label": "LinkedIn OAuth Client ID \u2014 \"For Claude - 5-6-26\" app, bound to Designer Wallcoverings Page",
+ "_note": "No verify endpoint \u2014 LinkedIn requires the ID+SECRET pair to validate, and the CLI verifies one key at a time. Manual probe via POST /oauth/v2/accessToken with a fake code expects 'invalid_request: authorization code not found' = creds OK.",
"destinations": [
{
"type": "project",
@@ -878,7 +890,7 @@
]
},
"LINKEDIN_CLIENT_SECRET": {
- "label": "LinkedIn OAuth Client Secret — \"For Claude - 5-6-26\" app, bound to Designer Wallcoverings Page",
+ "label": "LinkedIn OAuth Client Secret \u2014 \"For Claude - 5-6-26\" app, bound to Designer Wallcoverings Page",
"destinations": [
{
"type": "project",
@@ -892,7 +904,7 @@
]
},
"GOOGLE_OAUTH_CLIENT_ID": {
- "label": "Google OAuth Client ID — DW Activation Calendar (shared DW Google Calendar, local :9765)",
+ "label": "Google OAuth Client ID \u2014 DW Activation Calendar (shared DW Google Calendar, local :9765)",
"destinations": [
{
"type": "project",
@@ -901,7 +913,7 @@
]
},
"GOOGLE_OAUTH_CLIENT_SECRET": {
- "label": "Google OAuth Client Secret — DW Activation Calendar (shared DW Google Calendar, local :9765)",
+ "label": "Google OAuth Client Secret \u2014 DW Activation Calendar (shared DW Google Calendar, local :9765)",
"destinations": [
{
"type": "project",
@@ -910,7 +922,7 @@
]
},
"NPH_GOOGLE_OAUTH_CLIENT_ID": {
- "label": "Google OAuth Client ID — buyer sign-in on National Paper Hangers",
+ "label": "Google OAuth Client ID \u2014 buyer sign-in on National Paper Hangers",
"destinations": [
{
"type": "project",
@@ -924,7 +936,7 @@
]
},
"NPH_GOOGLE_OAUTH_CLIENT_SECRET": {
- "label": "Google OAuth Client Secret — buyer sign-in on National Paper Hangers",
+ "label": "Google OAuth Client Secret \u2014 buyer sign-in on National Paper Hangers",
"destinations": [
{
"type": "project",
@@ -1163,6 +1175,23 @@
"path": "~/Projects/coming-soon-template/.env"
}
]
+ },
+ "SHOPIFY_THEME_TOKEN": {
+ "label": "Shopify full-access theme/files token (read_themes+files; scrubbed from DW-Agents JS 2026-06-25)",
+ "destinations": [
+ {
+ "type": "env_file",
+ "path": "/Users/stevestudio2/Projects/Designer-Wallcoverings/.env"
+ },
+ {
+ "type": "env_file",
+ "path": "/Users/stevestudio2/Projects/Designer-Wallcoverings/DW-Agents/dw-agents/.env"
+ },
+ {
+ "type": "env_file",
+ "path": "/Users/stevestudio2/Projects/Designer-Wallcoverings/DW-Agents/dw-agents/agent-task-orchestrator/.env"
+ }
+ ]
}
},
"leak_patterns": [
@@ -1259,7 +1288,7 @@
]
},
"GOOGLE_DRIVE_CLIENT_ID": {
- "description": "Google Drive OAuth Client ID — TSD photo-import-cli desktop app",
+ "description": "Google Drive OAuth Client ID \u2014 TSD photo-import-cli desktop app",
"destinations": [
{
"type": "env-file",
@@ -1268,7 +1297,7 @@
]
},
"GOOGLE_DRIVE_CLIENT_SECRET": {
- "description": "Google Drive OAuth Client Secret — TSD photo-import-cli",
+ "description": "Google Drive OAuth Client Secret \u2014 TSD photo-import-cli",
"destinations": [
{
"type": "env-file",
@@ -1277,7 +1306,7 @@
]
},
"GOOGLE_DRIVE_REFRESH_TOKEN": {
- "description": "Google Drive OAuth refresh token — read-only scope, owned by steveabramsdesigns@gmail.com",
+ "description": "Google Drive OAuth refresh token \u2014 read-only scope, owned by steveabramsdesigns@gmail.com",
"destinations": [
{
"type": "env-file",
@@ -1316,7 +1345,7 @@
]
},
"TMDB_API_KEY": {
- "label": "TMDB v3 API key — asseeninmovies Phase B drain (6.46M-stub queue)",
+ "label": "TMDB v3 API key \u2014 asseeninmovies Phase B drain (6.46M-stub queue)",
"verify": {
"method": "GET",
"url": "https://api.themoviedb.org/3/authentication?api_key=__VALUE__",
@@ -1328,7 +1357,7 @@
]
},
"TMDB_READ_ACCESS_TOKEN": {
- "label": "TMDB v4 read-access token (bearer) — alt to v3 api_key",
+ "label": "TMDB v4 read-access token (bearer) \u2014 alt to v3 api_key",
"verify": {
"method": "GET",
"url": "https://api.themoviedb.org/3/authentication",
@@ -1390,7 +1419,7 @@
]
},
"SHOPIFY_DRAFT_TOKEN": {
- "label": "Shopify Admin token (full access incl. write_draft_orders) — DW mural PDP custom-size checkout",
+ "label": "Shopify Admin token (full access incl. write_draft_orders) \u2014 DW mural PDP custom-size checkout",
"destinations": [
{
"type": "project",
← 5355d14 Pre-wire GOOGLE_OAUTH_CLIENT_ID/SECRET routes to dw-activati
·
back to Secrets Manager
·
auto-save: 2026-06-26T11:45:25 (1 files) — registry.json bac2bac →