{
  "schemaVersion": 4,
  "kind": "env-inventory",
  "generatedAt": "2026-07-30T19:23:45.472Z",
  "scannedRoots": [
    "lib",
    "config",
    "scripts",
    "tools",
    "packages"
  ],
  "usageCount": 463,
  "uniqueVars": 199,
  "byKind": {
    "ambient": 19,
    "secret": 15,
    "config": 165
  },
  "vault": {
    "templateKeyCount": 43,
    "vaultRefCount": 22,
    "actionableVaultGaps": [
      "OPENAI_API_KEY",
      "SLACK_WEBHOOK_URL"
    ],
    "secretsUsedAndVaulted": [
      "CLOUDFLARE_API_TOKEN",
      "CLOUDFLARE_DNS_API_TOKEN",
      "DOD_PROOF_SECRET",
      "FACTORY_WAGER_TOKEN",
      "PROVISION_ENCRYPTION_KEY",
      "R2_ACCESS_KEY_ID",
      "R2_SECRET_ACCESS_KEY",
      "REGISTRY_SECRET"
    ],
    "secretsUsedButNotInTemplate": [
      "API_KEY",
      "API_TOKEN",
      "OPENAI_API_KEY",
      "REGISTRY_API_KEY",
      "SLACK_WEBHOOK_URL",
      "TELEGRAM_BOT_TOKEN",
      "TELEGRAM_CATALOG_RESEARCH_LLM_KEY"
    ],
    "displayMapped": 17,
    "withColor": 17,
    "withIcon": 10
  },
  "topConfig": [
    {
      "var": "OPS_DB_PATH",
      "count": 46,
      "samples": [
        "lib/registry-snapshot.ts:135",
        "lib/monitoring/integrity.ts:37",
        "lib/telegram/ops-bridge.ts:23",
        "lib/telegram/ops-bridge.ts:40"
      ]
    },
    {
      "var": "REDIS_URL",
      "count": 9,
      "samples": [
        "config/ports.ts:27",
        "tools/bun-api-showcase.ts:301",
        "tools/bun-api-showcase.ts:658",
        "tools/bun-api-showcase.ts:662"
      ]
    },
    {
      "var": "HEALTH_URL",
      "count": 5,
      "samples": [
        "lib/verification/networking-channel.ts:155",
        "tools/verify-etag.ts:89",
        "tools/ops-snapshot.ts:601",
        "tools/verify-formdata.ts:18"
      ]
    },
    {
      "var": "PORTAL_SCOPE",
      "count": 5,
      "samples": [
        "tools/snapshot-core.ts:763",
        "tools/portal-probe.ts:201",
        "tools/portal-probe.ts:205",
        "tools/portal-probe.ts:325"
      ]
    },
    {
      "var": "BASE_URL",
      "count": 4,
      "samples": [
        "lib/verification/networking-channel.ts:155",
        "tools/verify-etag.ts:89",
        "tools/ops-snapshot.ts:601",
        "tools/verify-networking.ts:130"
      ]
    },
    {
      "var": "COMPLIANCE_URL",
      "count": 4,
      "samples": [
        "lib/operations/state-compliance-http.ts:517",
        "tools/bake-compliance-portal.ts:48",
        "tools/live-enhancement-report.ts:6",
        "tools/enhanced-compliance-report.ts:262"
      ]
    },
    {
      "var": "DOMAIN_REGISTRY_PATH",
      "count": 4,
      "samples": [
        "scripts/domain-registry-status.ts:33",
        "scripts/search-benchmark-dashboard.ts:8623",
        "scripts/search-unified-status.ts:136",
        "scripts/lib/domain-registry.ts:75"
      ]
    },
    {
      "var": "REGISTRY_URL",
      "count": 4,
      "samples": [
        "lib/registry-snapshot.ts:97",
        "lib/verification/install-env-probes.ts:35",
        "tools/ops-snapshot.ts:112",
        "tools/verify-package-info.ts:20"
      ]
    },
    {
      "var": "SEARCH_BENCH_DOMAIN",
      "count": 4,
      "samples": [
        "scripts/project-online-readiness.ts:18",
        "scripts/search-benchmark-dashboard.ts:157",
        "scripts/search-unified-status.ts:41",
        "scripts/lib/domain-health-read.ts:383"
      ]
    },
    {
      "var": "SNAPSHOT_BASE_URL",
      "count": 4,
      "samples": [
        "tools/snapshot-core.ts:771",
        "tools/portal-snapshot-cron-constants.ts:64",
        "tools/snapshot-scopes.ts:22",
        "tools/portal-cli.ts:1406"
      ]
    },
    {
      "var": "USERPROFILE",
      "count": 4,
      "samples": [
        "lib/monitoring/install-cache-slice.ts:27",
        "lib/docs/cache-manager.ts:54",
        "lib/security/mintable-secret.ts:50",
        "scripts/machine-bun-health.ts:22"
      ]
    },
    {
      "var": "DATABASE_URL",
      "count": 3,
      "samples": [
        "lib/operations/postgres-bridge.ts:34",
        "tools/bun-api-showcase.ts:599",
        "tools/bun-api-showcase/oneliners.ts:506"
      ]
    },
    {
      "var": "FACTORY_REGISTRY_URL",
      "count": 3,
      "samples": [
        "lib/registry-snapshot.ts:97",
        "lib/verification/install-env-probes.ts:35",
        "tools/ops-snapshot.ts:112"
      ]
    },
    {
      "var": "PROTON_PASS_AGENT_REASON",
      "count": 3,
      "samples": [
        "scripts/vault-gap-close.ts:70",
        "scripts/lib/vault-gap-status.ts:203",
        "tools/portal-secret.ts:349"
      ]
    },
    {
      "var": "SERVER_HOST",
      "count": 3,
      "samples": [
        "lib/core/url-handler.ts:347",
        "config/ports.ts:28",
        "scripts/lib/dashboard-env.ts:28"
      ]
    },
    {
      "var": "VERSION",
      "count": 3,
      "samples": [
        "lib/routing-proof.ts:737",
        "tools/routing-registry-proof.ts:44",
        "tools/bun-utils-registry-proof.ts:37"
      ]
    },
    {
      "var": "AWS_BUCKET_NAME",
      "count": 2,
      "samples": [
        "scripts/ci-r2-version-check.ts:25",
        "scripts/ci-r2-version-check.ts:57"
      ]
    },
    {
      "var": "BUN_CACHE_PRUNE_MAX_MB",
      "count": 2,
      "samples": [
        "lib/monitoring/install-cache-slice.ts:44",
        "scripts/lib/bun-cache-metrics.ts:105"
      ]
    },
    {
      "var": "BUN_CONFIG_MAX_HTTP_REQUESTS",
      "count": 2,
      "samples": [
        "tools/verify-networking.ts:602",
        "tools/verify-networking.ts:653"
      ]
    },
    {
      "var": "BUN_CONSOLE_DEPTH",
      "count": 2,
      "samples": [
        "lib/console-depth.ts:104",
        "tools/live-enhancement-report.ts:75"
      ]
    },
    {
      "var": "BUN_PORT",
      "count": 2,
      "samples": [
        "tools/bun-serve-defaults-table.ts:201",
        "tools/bun-serve-defaults-table.ts:206"
      ]
    },
    {
      "var": "CI_RUN_ID",
      "count": 2,
      "samples": [
        "lib/verification/ratchet.ts:141",
        "lib/verification/channels.ts:511"
      ]
    },
    {
      "var": "CLOUDFLARE_ACCOUNT_ID",
      "count": 2,
      "samples": [
        "lib/dod/verifier.ts:119",
        "tools/cloudflare-pages-deploy.ts:34"
      ]
    },
    {
      "var": "COMPLIANCE_MOCK_URL",
      "count": 2,
      "samples": [
        "lib/operations/state-compliance-http.ts:518",
        "tools/show-enhancements.ts:325"
      ]
    },
    {
      "var": "GITHUB_ENTERPRISE_URL",
      "count": 2,
      "samples": [
        "lib/docs/constants/domains.ts:197",
        "lib/docs/constants/domains.ts:198"
      ]
    }
  ],
  "owners": [
    {
      "envKey": "REDIS_URL",
      "kind": "config",
      "disposition": "config",
      "count": 9,
      "planes": [
        "config",
        "packages",
        "tools"
      ],
      "packages": [
        "business",
        "p2p"
      ],
      "inRootTemplate": true,
      "inAnyTemplate": true,
      "passRef": null,
      "runtimePresent": true,
      "samples": [
        "config/ports.ts:27",
        "tools/bun-api-showcase.ts:301",
        "tools/bun-api-showcase.ts:658",
        "tools/bun-api-showcase.ts:662"
      ]
    },
    {
      "envKey": "API_KEY",
      "kind": "secret",
      "disposition": "alias",
      "count": 6,
      "planes": [
        "config",
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/registry-snapshot.ts:98",
        "lib/docs/constants/utils.ts:848",
        "config/bun-dx-catalog.ts:363",
        "tools/routing-registry-proof.ts:42"
      ]
    },
    {
      "envKey": "FACTORY_WAGER_TOKEN",
      "kind": "secret",
      "disposition": "vaulted",
      "count": 5,
      "planes": [
        "lib",
        "scripts",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": true,
      "inAnyTemplate": true,
      "passRef": "pass://factorywager/FactoryWager Registry Token/password",
      "runtimePresent": true,
      "samples": [
        "lib/factory/server.ts:181",
        "lib/verification/install-env-probes.ts:196",
        "scripts/lib/domain-registry.ts:141",
        "tools/ops-snapshot.ts:115"
      ]
    },
    {
      "envKey": "REGISTRY_SECRET",
      "kind": "secret",
      "disposition": "vaulted",
      "count": 4,
      "planes": [
        "lib",
        "scripts",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": true,
      "inAnyTemplate": true,
      "passRef": "pass://factorywager/Registry Dev Secret/password",
      "runtimePresent": true,
      "samples": [
        "lib/factory/server.ts:181",
        "scripts/serve-public.ts:1554",
        "tools/ops-snapshot.ts:114",
        "tools/verify-formdata.ts:21"
      ]
    },
    {
      "envKey": "CLOUDFLARE_API_TOKEN",
      "kind": "secret",
      "disposition": "vaulted",
      "count": 7,
      "planes": [
        "scripts",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": true,
      "inAnyTemplate": true,
      "passRef": "pass://factorywager/Cloudflare API Token/password",
      "runtimePresent": true,
      "samples": [
        "scripts/bake-surfaces.ts:266",
        "tools/routing-registry-proof.ts:42",
        "tools/bun-utils-registry-proof.ts:34",
        "tools/cloudflare-pages-deploy.ts:21"
      ]
    },
    {
      "envKey": "R2_ACCESS_KEY_ID",
      "kind": "secret",
      "disposition": "vaulted",
      "count": 5,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": true,
      "inAnyTemplate": true,
      "passRef": "pass://factorywager/R2 bun-secrets bucket/username",
      "runtimePresent": true,
      "samples": [
        "lib/factory/object-store.ts:129",
        "lib/factory/registry.ts:381",
        "lib/dod/verifier.ts:120",
        "tools/verify-bun-release.ts:601"
      ]
    },
    {
      "envKey": "R2_SECRET_ACCESS_KEY",
      "kind": "secret",
      "disposition": "vaulted",
      "count": 5,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": true,
      "inAnyTemplate": true,
      "passRef": "pass://factorywager/R2 bun-secrets bucket/password",
      "runtimePresent": true,
      "samples": [
        "lib/factory/object-store.ts:130",
        "lib/factory/registry.ts:382",
        "lib/dod/verifier.ts:121",
        "tools/verify-bun-release.ts:601"
      ]
    },
    {
      "envKey": "CLOUDFLARE_DNS_API_TOKEN",
      "kind": "secret",
      "disposition": "vaulted",
      "count": 3,
      "planes": [
        "scripts",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": true,
      "inAnyTemplate": true,
      "passRef": "pass://factorywager/Cloudflare API Token (DNS)/password",
      "runtimePresent": true,
      "samples": [
        "scripts/cloudflare-dns-sync.ts:93",
        "scripts/bake-surfaces.ts:266",
        "tools/brand-status.ts:510"
      ]
    },
    {
      "envKey": "REGISTRY_API_KEY",
      "kind": "secret",
      "disposition": "alias",
      "count": 3,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/registry-snapshot.ts:98",
        "tools/routing-registry-proof.ts:42",
        "tools/bun-utils-registry-proof.ts:34"
      ]
    },
    {
      "envKey": "OPENAI_API_KEY",
      "kind": "secret",
      "disposition": "vault-required",
      "count": 3,
      "planes": [
        "lib"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/telegram/catalog-research/llm-pass.ts:68",
        "lib/telegram/catalog-research/llm-pass.ts:77",
        "lib/telegram/catalog-research/agent.ts:41"
      ]
    },
    {
      "envKey": "API_TOKEN",
      "kind": "secret",
      "disposition": "demo",
      "count": 2,
      "planes": [
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "tools/bun-docs-guide-examples.ts:320",
        "tools/bun-docs-guide-examples.ts:326"
      ]
    },
    {
      "envKey": "SLACK_WEBHOOK_URL",
      "kind": "secret",
      "disposition": "vault-required",
      "count": 2,
      "planes": [
        "lib"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/channels/outbox.ts:437",
        "lib/factory/alerts.ts:31"
      ]
    },
    {
      "envKey": "DOD_PROOF_SECRET",
      "kind": "secret",
      "disposition": "vaulted",
      "count": 1,
      "planes": [
        "lib"
      ],
      "packages": [],
      "inRootTemplate": true,
      "inAnyTemplate": true,
      "passRef": "pass://factorywager/DOD Proof Secret/password",
      "runtimePresent": true,
      "samples": [
        "lib/dod/evidence.ts:231"
      ]
    },
    {
      "envKey": "PROVISION_ENCRYPTION_KEY",
      "kind": "secret",
      "disposition": "vaulted",
      "count": 1,
      "planes": [
        "tools"
      ],
      "packages": [],
      "inRootTemplate": true,
      "inAnyTemplate": true,
      "passRef": "pass://factorywager/Provision Encryption Key/password",
      "runtimePresent": true,
      "samples": [
        "tools/provision-queue.ts:103"
      ]
    },
    {
      "envKey": "TELEGRAM_BOT_TOKEN",
      "kind": "secret",
      "disposition": "alias",
      "count": 1,
      "planes": [
        "lib"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/operations/account-service.ts:425"
      ]
    },
    {
      "envKey": "TELEGRAM_CATALOG_RESEARCH_LLM_KEY",
      "kind": "secret",
      "disposition": "alias",
      "count": 1,
      "planes": [
        "lib"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/telegram/catalog-research/llm-pass.ts:68"
      ]
    },
    {
      "envKey": "HOME",
      "kind": "ambient",
      "disposition": "ambient",
      "count": 21,
      "planes": [
        "config",
        "lib",
        "scripts",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": true,
      "samples": [
        "lib/gate-map.ts:80",
        "lib/package/package-manager.ts:42",
        "lib/monitoring/install-cache-slice.ts:27",
        "lib/telegram/telegram-env-bind.ts:136"
      ]
    },
    {
      "envKey": "OPS_DB_PATH",
      "kind": "config",
      "disposition": "config",
      "count": 46,
      "planes": [
        "lib",
        "scripts",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/registry-snapshot.ts:135",
        "lib/monitoring/integrity.ts:37",
        "lib/telegram/ops-bridge.ts:23",
        "lib/telegram/ops-bridge.ts:40"
      ]
    },
    {
      "envKey": "PORT",
      "kind": "ambient",
      "disposition": "ambient",
      "count": 4,
      "planes": [
        "lib",
        "scripts",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/factory/server.ts:387",
        "scripts/lib/dashboard-env.ts:36",
        "tools/bun-serve-defaults-table.ts:202",
        "tools/bun-serve-defaults-table.ts:206"
      ]
    },
    {
      "envKey": "PWD",
      "kind": "ambient",
      "disposition": "ambient",
      "count": 3,
      "planes": [
        "lib",
        "scripts",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": true,
      "samples": [
        "lib/package/package-manager.ts:40",
        "scripts/serve-public.ts:1666",
        "tools/cli/integrated-cli.ts:83"
      ]
    },
    {
      "envKey": "SERVER_HOST",
      "kind": "config",
      "disposition": "config",
      "count": 3,
      "planes": [
        "config",
        "lib",
        "scripts"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/core/url-handler.ts:347",
        "config/ports.ts:28",
        "scripts/lib/dashboard-env.ts:28"
      ]
    },
    {
      "envKey": "HEALTH_URL",
      "kind": "config",
      "disposition": "config",
      "count": 5,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/verification/networking-channel.ts:155",
        "tools/verify-etag.ts:89",
        "tools/ops-snapshot.ts:601",
        "tools/verify-formdata.ts:18"
      ]
    },
    {
      "envKey": "BASE_URL",
      "kind": "config",
      "disposition": "config",
      "count": 4,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/verification/networking-channel.ts:155",
        "tools/verify-etag.ts:89",
        "tools/ops-snapshot.ts:601",
        "tools/verify-networking.ts:130"
      ]
    },
    {
      "envKey": "COMPLIANCE_URL",
      "kind": "config",
      "disposition": "config",
      "count": 4,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/operations/state-compliance-http.ts:517",
        "tools/bake-compliance-portal.ts:48",
        "tools/live-enhancement-report.ts:6",
        "tools/enhanced-compliance-report.ts:262"
      ]
    },
    {
      "envKey": "GITHUB_STEP_SUMMARY",
      "kind": "ambient",
      "disposition": "ambient",
      "count": 4,
      "planes": [
        "scripts",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "scripts/doctor-ci-report.ts:214",
        "scripts/gate-report-monorepo.ts:135",
        "tools/bake-doctor.ts:631",
        "tools/bake-doctor.ts:651"
      ]
    },
    {
      "envKey": "REGISTRY_URL",
      "kind": "config",
      "disposition": "config",
      "count": 4,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/registry-snapshot.ts:97",
        "lib/verification/install-env-probes.ts:35",
        "tools/ops-snapshot.ts:112",
        "tools/verify-package-info.ts:20"
      ]
    },
    {
      "envKey": "USERPROFILE",
      "kind": "config",
      "disposition": "config",
      "count": 4,
      "planes": [
        "lib",
        "scripts"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/monitoring/install-cache-slice.ts:27",
        "lib/docs/cache-manager.ts:54",
        "lib/security/mintable-secret.ts:50",
        "scripts/machine-bun-health.ts:22"
      ]
    },
    {
      "envKey": "DATABASE_URL",
      "kind": "config",
      "disposition": "config",
      "count": 3,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/operations/postgres-bridge.ts:34",
        "tools/bun-api-showcase.ts:599",
        "tools/bun-api-showcase/oneliners.ts:506"
      ]
    },
    {
      "envKey": "FACTORY_REGISTRY_URL",
      "kind": "config",
      "disposition": "config",
      "count": 3,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/registry-snapshot.ts:97",
        "lib/verification/install-env-probes.ts:35",
        "tools/ops-snapshot.ts:112"
      ]
    },
    {
      "envKey": "PATH",
      "kind": "ambient",
      "disposition": "ambient",
      "count": 3,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": true,
      "samples": [
        "lib/verification/resolve-bun-binary.ts:98",
        "tools/overseer-cli.ts:44",
        "tools/bun-api-showcase.ts:649"
      ]
    },
    {
      "envKey": "PROTON_PASS_AGENT_REASON",
      "kind": "config",
      "disposition": "config",
      "count": 3,
      "planes": [
        "scripts",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "scripts/vault-gap-close.ts:70",
        "scripts/lib/vault-gap-status.ts:203",
        "tools/portal-secret.ts:349"
      ]
    },
    {
      "envKey": "VERSION",
      "kind": "config",
      "disposition": "config",
      "count": 3,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/routing-proof.ts:737",
        "tools/routing-registry-proof.ts:44",
        "tools/bun-utils-registry-proof.ts:37"
      ]
    },
    {
      "envKey": "BUN_CACHE_PRUNE_MAX_MB",
      "kind": "config",
      "disposition": "config",
      "count": 2,
      "planes": [
        "lib",
        "scripts"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/monitoring/install-cache-slice.ts:44",
        "scripts/lib/bun-cache-metrics.ts:105"
      ]
    },
    {
      "envKey": "BUN_CONSOLE_DEPTH",
      "kind": "config",
      "disposition": "config",
      "count": 2,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": true,
      "inAnyTemplate": true,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/console-depth.ts:104",
        "tools/live-enhancement-report.ts:75"
      ]
    },
    {
      "envKey": "CLOUDFLARE_ACCOUNT_ID",
      "kind": "config",
      "disposition": "config",
      "count": 2,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": true,
      "inAnyTemplate": true,
      "passRef": null,
      "runtimePresent": true,
      "samples": [
        "lib/dod/verifier.ts:119",
        "tools/cloudflare-pages-deploy.ts:34"
      ]
    },
    {
      "envKey": "COMPLIANCE_MOCK_URL",
      "kind": "config",
      "disposition": "config",
      "count": 2,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/operations/state-compliance-http.ts:518",
        "tools/show-enhancements.ts:325"
      ]
    },
    {
      "envKey": "HOST",
      "kind": "ambient",
      "disposition": "ambient",
      "count": 2,
      "planes": [
        "lib",
        "scripts"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/core/url-handler.ts:347",
        "scripts/serve-public.ts:146"
      ]
    },
    {
      "envKey": "MONITORING_SNAPSHOT_PATH",
      "kind": "config",
      "disposition": "config",
      "count": 2,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/registry-snapshot.ts:138",
        "tools/ops-snapshot.ts:97"
      ]
    },
    {
      "envKey": "NO_COLOR",
      "kind": "ambient",
      "disposition": "ambient",
      "count": 2,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": true,
      "samples": [
        "lib/console-depth.ts:116",
        "tools/portal-probe.ts:48"
      ]
    },
    {
      "envKey": "OPS_SNAPSHOT_PATH",
      "kind": "config",
      "disposition": "config",
      "count": 2,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/registry-snapshot.ts:136",
        "tools/ops-snapshot.ts:79"
      ]
    },
    {
      "envKey": "PORTAL_SCOPE",
      "kind": "config",
      "disposition": "config",
      "count": 5,
      "planes": [
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "tools/snapshot-core.ts:763",
        "tools/portal-probe.ts:201",
        "tools/portal-probe.ts:205",
        "tools/portal-probe.ts:325"
      ]
    },
    {
      "envKey": "DOMAIN_REGISTRY_PATH",
      "kind": "config",
      "disposition": "config",
      "count": 4,
      "planes": [
        "scripts"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "scripts/domain-registry-status.ts:33",
        "scripts/search-benchmark-dashboard.ts:8623",
        "scripts/search-unified-status.ts:136",
        "scripts/lib/domain-registry.ts:75"
      ]
    },
    {
      "envKey": "SEARCH_BENCH_DOMAIN",
      "kind": "config",
      "disposition": "config",
      "count": 4,
      "planes": [
        "scripts"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "scripts/project-online-readiness.ts:18",
        "scripts/search-benchmark-dashboard.ts:157",
        "scripts/search-unified-status.ts:41",
        "scripts/lib/domain-health-read.ts:383"
      ]
    },
    {
      "envKey": "SNAPSHOT_BASE_URL",
      "kind": "config",
      "disposition": "config",
      "count": 4,
      "planes": [
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "tools/snapshot-core.ts:771",
        "tools/portal-snapshot-cron-constants.ts:64",
        "tools/snapshot-scopes.ts:22",
        "tools/portal-cli.ts:1406"
      ]
    },
    {
      "envKey": "TMP",
      "kind": "ambient",
      "disposition": "ambient",
      "count": 3,
      "planes": [
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "tools/bun-api-showcase.ts:124",
        "tools/run-verified.ts:43",
        "tools/verify-networking.ts:413"
      ]
    },
    {
      "envKey": "TMPDIR",
      "kind": "ambient",
      "disposition": "ambient",
      "count": 3,
      "planes": [
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": true,
      "samples": [
        "tools/bun-api-showcase.ts:124",
        "tools/run-verified.ts:43",
        "tools/verify-networking.ts:413"
      ]
    },
    {
      "envKey": "AWS_BUCKET_NAME",
      "kind": "config",
      "disposition": "config",
      "count": 2,
      "planes": [
        "scripts"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "scripts/ci-r2-version-check.ts:25",
        "scripts/ci-r2-version-check.ts:57"
      ]
    },
    {
      "envKey": "BUN_CONFIG_MAX_HTTP_REQUESTS",
      "kind": "config",
      "disposition": "config",
      "count": 2,
      "planes": [
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "tools/verify-networking.ts:602",
        "tools/verify-networking.ts:653"
      ]
    },
    {
      "envKey": "BUN_PORT",
      "kind": "config",
      "disposition": "config",
      "count": 2,
      "planes": [
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "tools/bun-serve-defaults-table.ts:201",
        "tools/bun-serve-defaults-table.ts:206"
      ]
    },
    {
      "envKey": "CI_RUN_ID",
      "kind": "config",
      "disposition": "config",
      "count": 2,
      "planes": [
        "lib"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/verification/ratchet.ts:141",
        "lib/verification/channels.ts:511"
      ]
    },
    {
      "envKey": "GITHUB_ENTERPRISE_URL",
      "kind": "config",
      "disposition": "config",
      "count": 2,
      "planes": [
        "lib"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/docs/constants/domains.ts:197",
        "lib/docs/constants/domains.ts:198"
      ]
    },
    {
      "envKey": "KIMI_TOOLCHAIN_ROOT",
      "kind": "config",
      "disposition": "config",
      "count": 2,
      "planes": [
        "scripts"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": true,
      "samples": [
        "scripts/machine-bun-health.ts:18",
        "scripts/machine-bun-health.ts:19"
      ]
    },
    {
      "envKey": "NODE_PORT",
      "kind": "ambient",
      "disposition": "ambient",
      "count": 2,
      "planes": [
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "tools/bun-serve-defaults-table.ts:203",
        "tools/bun-serve-defaults-table.ts:206"
      ]
    },
    {
      "envKey": "PORTAL_SNAPSHOT_INPROCESS_SCHEDULE",
      "kind": "config",
      "disposition": "config",
      "count": 2,
      "planes": [
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "tools/portal-snapshot-cron-constants.ts:31",
        "tools/portal-snapshot-cron-constants.ts:45"
      ]
    },
    {
      "envKey": "PORTAL_SNAPSHOT_OS_SCHEDULE",
      "kind": "config",
      "disposition": "config",
      "count": 2,
      "planes": [
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "tools/portal-snapshot-cron-constants.ts:26",
        "tools/portal-snapshot-cron-constants.ts:40"
      ]
    },
    {
      "envKey": "R2_BUCKET_NAME",
      "kind": "config",
      "disposition": "config",
      "count": 2,
      "planes": [
        "scripts"
      ],
      "packages": [],
      "inRootTemplate": true,
      "inAnyTemplate": true,
      "passRef": null,
      "runtimePresent": true,
      "samples": [
        "scripts/ci-r2-version-check.ts:23",
        "scripts/ci-r2-version-check.ts:55"
      ]
    },
    {
      "envKey": "R2_PUBLIC_BASE",
      "kind": "config",
      "disposition": "config",
      "count": 2,
      "planes": [
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "tools/verify-networking.ts:231",
        "tools/verify-networking.ts:660"
      ]
    },
    {
      "envKey": "R2_PUBLIC_URL",
      "kind": "config",
      "disposition": "config",
      "count": 2,
      "planes": [
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "tools/verify-networking.ts:231",
        "tools/verify-networking.ts:660"
      ]
    },
    {
      "envKey": "REGISTRY_PUBLIC_URL",
      "kind": "config",
      "disposition": "config",
      "count": 2,
      "planes": [
        "lib"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/factory/health.ts:72",
        "lib/factory/resolve.ts:22"
      ]
    },
    {
      "envKey": "REGISTRY_SECRETS_SERVICE",
      "kind": "config",
      "disposition": "config",
      "count": 2,
      "planes": [
        "lib"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/security/infra-secrets.ts:33",
        "lib/security/infra-secrets.ts:135"
      ]
    }
  ],
  "defaultsIssues": {
    "total": 2,
    "packages": 0,
    "harness": 2,
    "top": [
      {
        "envVar": "REDIS_URL",
        "file": "tools/bun-api-showcase.ts",
        "line": 662
      },
      {
        "envVar": "PORTAL_SNAPSHOT_CRON_MARKER",
        "file": "tools/portal-snapshot-cron-worker.ts",
        "line": 18
      }
    ]
  },
  "packagesPlane": {
    "generatedAt": "2026-07-30T19:23:45.462Z",
    "templateKeys": [
      "R2_ACCOUNT_ID",
      "R2_ACCESS_KEY_ID",
      "R2_SECRET_ACCESS_KEY",
      "R2_BUCKET_NAME",
      "FACTORY_WAGER_TOKEN",
      "REGISTRY_SECRET",
      "CLOUDFLARE_API_TOKEN",
      "CLOUDFLARE_DNS_API_TOKEN",
      "CLOUDFLARE_ACCESS_API_TOKEN",
      "CLOUDFLARE_ACCOUNT_ID",
      "TELEGRAM_BOT_FACTORY",
      "TELEGRAM_WEBHOOK_SECRET",
      "TELEGRAM_OPS_CHAT_ID",
      "PLAY_SIGNING_SECRET",
      "REPORT_SIGNING_SECRET",
      "DOD_PROOF_SECRET",
      "DOD_ID_ENCRYPTION_KEY",
      "PROVISION_ENCRYPTION_KEY",
      "SOCKET_API_KEY",
      "REDIS_URL",
      "NODE_ENV",
      "MCP_LOG_LEVEL",
      "BUN_CONSOLE_DEPTH"
    ],
    "vaultRefs": [
      {
        "key": "R2_ACCESS_KEY_ID",
        "ref": "pass://factorywager/R2 bun-secrets bucket/username",
        "label": "R2 Access Key",
        "color": "#F38020",
        "icon": "public/portal/icons/vault/r2.svg",
        "type": "token"
      },
      {
        "key": "R2_SECRET_ACCESS_KEY",
        "ref": "pass://factorywager/R2 bun-secrets bucket/password",
        "label": "R2 Secret Key",
        "color": "#F38020",
        "icon": "public/portal/icons/vault/r2.svg",
        "type": "secret"
      },
      {
        "key": "FACTORY_WAGER_TOKEN",
        "ref": "pass://factorywager/FactoryWager Registry Token/password",
        "label": "Registry Token",
        "color": "#6366F1",
        "icon": "public/portal/icons/vault/key.svg",
        "type": "token"
      },
      {
        "key": "REGISTRY_SECRET",
        "ref": "pass://factorywager/Registry Dev Secret/password",
        "label": "Registry Dev Secret",
        "color": "#6366F1",
        "icon": null,
        "type": "secret"
      },
      {
        "key": "CLOUDFLARE_API_TOKEN",
        "ref": "pass://factorywager/Cloudflare API Token/password",
        "label": "Cloudflare API Token",
        "color": "#F38020",
        "icon": "public/portal/icons/vault/cloudflare.svg",
        "type": "token"
      },
      {
        "key": "CLOUDFLARE_DNS_API_TOKEN",
        "ref": "pass://factorywager/Cloudflare API Token (DNS)/password",
        "label": "Cloudflare DNS Token",
        "color": "#F38020",
        "icon": "public/portal/icons/vault/cloudflare.svg",
        "type": "token"
      },
      {
        "key": "CLOUDFLARE_ACCESS_API_TOKEN",
        "ref": "pass://factorywager/Cloudflare Access API Token/password",
        "label": "Cloudflare Access API Token",
        "color": "#F38020",
        "icon": "public/portal/icons/vault/cloudflare.svg",
        "type": "token"
      },
      {
        "key": "TELEGRAM_BOT_FACTORY",
        "ref": "pass://factorywager/Telegram: factorywager_bot/password",
        "label": "Telegram Bot Token",
        "color": "#26A5E4",
        "icon": "public/portal/icons/vault/telegram.svg",
        "type": "token"
      },
      {
        "key": "TELEGRAM_WEBHOOK_SECRET",
        "ref": "pass://factorywager/Telegram Webhook Secret/password",
        "label": "Telegram Webhook Secret",
        "color": "#26A5E4",
        "icon": null,
        "type": "secret"
      },
      {
        "key": "PLAY_SIGNING_SECRET",
        "ref": "pass://factorywager/Play Signing Secret/password",
        "label": "Play Signing Secret",
        "color": "#10B981",
        "icon": null,
        "type": "secret"
      },
      {
        "key": "REPORT_SIGNING_SECRET",
        "ref": "pass://factorywager/Report Signing Secret/password",
        "label": "Report Signing Secret",
        "color": "#10B981",
        "icon": null,
        "type": "secret"
      },
      {
        "key": "DOD_PROOF_SECRET",
        "ref": "pass://factorywager/DOD Proof Secret/password",
        "label": "DOD Proof Secret",
        "color": "#8B5CF6",
        "icon": null,
        "type": "secret"
      },
      {
        "key": "DOD_ID_ENCRYPTION_KEY",
        "ref": "pass://factorywager/DOD ID Encryption Key/password",
        "label": "DOD Encryption Key",
        "color": "#8B5CF6",
        "icon": null,
        "type": "key"
      },
      {
        "key": "PROVISION_ENCRYPTION_KEY",
        "ref": "pass://factorywager/Provision Encryption Key/password",
        "label": "Provision Key",
        "color": "#8B5CF6",
        "icon": null,
        "type": "key"
      },
      {
        "key": "SOCKET_API_KEY",
        "ref": "pass://factorywager/Socket API Key/password",
        "label": "Socket API Key",
        "color": "#7C3AED",
        "icon": "public/portal/icons/vault/key.svg",
        "type": "token"
      }
    ],
    "envHits": [
      {
        "package": "business",
        "envKey": "REDIS_URL",
        "kind": "config",
        "disposition": "config",
        "inTemplate": true,
        "runtimePresent": true,
        "passRef": null,
        "samples": [
          "packages/business/src/habits-classifier.ts:33"
        ]
      },
      {
        "package": "p2p",
        "envKey": "REDIS_URL",
        "kind": "config",
        "disposition": "config",
        "inTemplate": true,
        "runtimePresent": true,
        "passRef": null,
        "samples": [
          "packages/p2p/src/customer-notifier.ts:8",
          "packages/p2p/src/business-continuity.ts:8",
          "packages/p2p/src/migration-workflow.ts:10"
        ]
      }
    ],
    "byPackage": [
      {
        "package": "business",
        "envKeys": [
          "REDIS_URL"
        ],
        "secretKeys": [],
        "vaultedKeys": [],
        "missingTemplateKeys": []
      },
      {
        "package": "p2p",
        "envKeys": [
          "REDIS_URL"
        ],
        "secretKeys": [],
        "vaultedKeys": [],
        "missingTemplateKeys": []
      }
    ],
    "actions": [],
    "displayMap": [
      {
        "envKey": "CLOUDFLARE_ACCESS_API_TOKEN",
        "vault": "factorywager",
        "item": "Cloudflare Access API Token",
        "field": "password",
        "passRef": "pass://factorywager/Cloudflare Access API Token/password",
        "label": "Cloudflare Access API Token",
        "color": "#F38020",
        "icon": "public/portal/icons/vault/cloudflare.svg",
        "glyph": "🔑",
        "type": "token",
        "inTemplate": true,
        "runtimePresent": false
      },
      {
        "envKey": "CLOUDFLARE_API_TOKEN",
        "vault": "factorywager",
        "item": "Cloudflare API Token",
        "field": "password",
        "passRef": "pass://factorywager/Cloudflare API Token/password",
        "label": "Cloudflare API Token",
        "color": "#F38020",
        "icon": "public/portal/icons/vault/cloudflare.svg",
        "glyph": "🔑",
        "type": "token",
        "inTemplate": true,
        "runtimePresent": true
      },
      {
        "envKey": "CLOUDFLARE_DNS_API_TOKEN",
        "vault": "factorywager",
        "item": "Cloudflare API Token (DNS)",
        "field": "password",
        "passRef": "pass://factorywager/Cloudflare API Token (DNS)/password",
        "label": "Cloudflare DNS Token",
        "color": "#F38020",
        "icon": "public/portal/icons/vault/cloudflare.svg",
        "glyph": "🔑",
        "type": "token",
        "inTemplate": true,
        "runtimePresent": true
      },
      {
        "envKey": "DOD_ID_ENCRYPTION_KEY",
        "vault": "factorywager",
        "item": "DOD ID Encryption Key",
        "field": "password",
        "passRef": "pass://factorywager/DOD ID Encryption Key/password",
        "label": "DOD Encryption Key",
        "color": "#8B5CF6",
        "icon": null,
        "glyph": "🔑",
        "type": "key",
        "inTemplate": true,
        "runtimePresent": true
      },
      {
        "envKey": "DOD_PROOF_SECRET",
        "vault": "factorywager",
        "item": "DOD Proof Secret",
        "field": "password",
        "passRef": "pass://factorywager/DOD Proof Secret/password",
        "label": "DOD Proof Secret",
        "color": "#8B5CF6",
        "icon": null,
        "glyph": "🔏",
        "type": "secret",
        "inTemplate": true,
        "runtimePresent": true
      },
      {
        "envKey": "FACTORY_WAGER_TOKEN",
        "vault": "factorywager",
        "item": "FactoryWager Registry Token",
        "field": "password",
        "passRef": "pass://factorywager/FactoryWager Registry Token/password",
        "label": "Registry Token",
        "color": "#6366F1",
        "icon": "public/portal/icons/vault/key.svg",
        "glyph": "🔑",
        "type": "token",
        "inTemplate": true,
        "runtimePresent": true
      },
      {
        "envKey": "GITHUB_TOKEN",
        "vault": "factorywager",
        "item": "GitHub PAT",
        "field": "note",
        "passRef": "pass://factorywager/GitHub PAT/note",
        "label": "GitHub Personal Access Token",
        "color": "#2DA44E",
        "icon": "public/portal/icons/vault/github.svg",
        "glyph": "🐙",
        "type": "pat",
        "inTemplate": false,
        "runtimePresent": false
      },
      {
        "envKey": "PLAY_SIGNING_SECRET",
        "vault": "factorywager",
        "item": "Play Signing Secret",
        "field": "password",
        "passRef": "pass://factorywager/Play Signing Secret/password",
        "label": "Play Signing Secret",
        "color": "#10B981",
        "icon": null,
        "glyph": "🔏",
        "type": "secret",
        "inTemplate": true,
        "runtimePresent": true
      },
      {
        "envKey": "PROVISION_ENCRYPTION_KEY",
        "vault": "factorywager",
        "item": "Provision Encryption Key",
        "field": "password",
        "passRef": "pass://factorywager/Provision Encryption Key/password",
        "label": "Provision Key",
        "color": "#8B5CF6",
        "icon": null,
        "glyph": "🔑",
        "type": "key",
        "inTemplate": true,
        "runtimePresent": true
      },
      {
        "envKey": "R2_ACCESS_KEY_ID",
        "vault": "factorywager",
        "item": "R2 bun-secrets bucket",
        "field": "username",
        "passRef": "pass://factorywager/R2 bun-secrets bucket/username",
        "label": "R2 Access Key",
        "color": "#F38020",
        "icon": "public/portal/icons/vault/r2.svg",
        "glyph": "🔑",
        "type": "token",
        "inTemplate": true,
        "runtimePresent": true
      },
      {
        "envKey": "R2_SECRET_ACCESS_KEY",
        "vault": "factorywager",
        "item": "R2 bun-secrets bucket",
        "field": "password",
        "passRef": "pass://factorywager/R2 bun-secrets bucket/password",
        "label": "R2 Secret Key",
        "color": "#F38020",
        "icon": "public/portal/icons/vault/r2.svg",
        "glyph": "🔏",
        "type": "secret",
        "inTemplate": true,
        "runtimePresent": true
      },
      {
        "envKey": "REGISTRY_SECRET",
        "vault": "factorywager",
        "item": "Registry Dev Secret",
        "field": "password",
        "passRef": "pass://factorywager/Registry Dev Secret/password",
        "label": "Registry Dev Secret",
        "color": "#6366F1",
        "icon": null,
        "glyph": "🔏",
        "type": "secret",
        "inTemplate": true,
        "runtimePresent": true
      },
      {
        "envKey": "REPORT_SIGNING_SECRET",
        "vault": "factorywager",
        "item": "Report Signing Secret",
        "field": "password",
        "passRef": "pass://factorywager/Report Signing Secret/password",
        "label": "Report Signing Secret",
        "color": "#10B981",
        "icon": null,
        "glyph": "🔏",
        "type": "secret",
        "inTemplate": true,
        "runtimePresent": true
      },
      {
        "envKey": "SOCKET_API_KEY",
        "vault": "factorywager",
        "item": "Socket API Key",
        "field": "password",
        "passRef": "pass://factorywager/Socket API Key/password",
        "label": "Socket API Key",
        "color": "#7C3AED",
        "icon": "public/portal/icons/vault/key.svg",
        "glyph": "🔑",
        "type": "token",
        "inTemplate": true,
        "runtimePresent": false
      },
      {
        "envKey": "SSH_DEPLOY_KEY",
        "vault": "factorywager",
        "item": "SSH Deploy Key",
        "field": "note",
        "passRef": "pass://factorywager/SSH Deploy Key/note",
        "label": "SSH Deploy Key",
        "color": "#F59E0B",
        "icon": "public/portal/icons/vault/ssh.svg",
        "glyph": "🔐",
        "type": "ssh",
        "inTemplate": false,
        "runtimePresent": false
      },
      {
        "envKey": "TELEGRAM_BOT_FACTORY",
        "vault": "factorywager",
        "item": "Telegram: factorywager_bot",
        "field": "password",
        "passRef": "pass://factorywager/Telegram: factorywager_bot/password",
        "label": "Telegram Bot Token",
        "color": "#26A5E4",
        "icon": "public/portal/icons/vault/telegram.svg",
        "glyph": "🔑",
        "type": "token",
        "inTemplate": true,
        "runtimePresent": true
      },
      {
        "envKey": "TELEGRAM_WEBHOOK_SECRET",
        "vault": "factorywager",
        "item": "Telegram Webhook Secret",
        "field": "password",
        "passRef": "pass://factorywager/Telegram Webhook Secret/password",
        "label": "Telegram Webhook Secret",
        "color": "#26A5E4",
        "icon": null,
        "glyph": "🔏",
        "type": "secret",
        "inTemplate": true,
        "runtimePresent": true
      }
    ],
    "summary": {
      "packagesWithEnv": 2,
      "envKeyCount": 1,
      "vaultedHits": 0,
      "missingTemplate": 0,
      "openVaultActions": 0,
      "inTemplateHits": 2,
      "runtimePresentHits": 2,
      "displayMapped": 17
    }
  },
  "runtime": {
    "root": {
      "templateKeysPresent": 20,
      "templateKeysMissing": 3,
      "missingKeys": [
        "BUN_CONSOLE_DEPTH",
        "CLOUDFLARE_ACCESS_API_TOKEN",
        "SOCKET_API_KEY"
      ],
      "missingNeedsInject": [
        "CLOUDFLARE_ACCESS_API_TOKEN",
        "SOCKET_API_KEY"
      ],
      "coveredByTemplateDefault": [
        "BUN_CONSOLE_DEPTH"
      ]
    },
    "products": {
      "templateKeysPresent": 4,
      "templateKeysMissing": 16,
      "missingKeys": [
        "ADMIN_PASSWORD",
        "AGENT_ID",
        "BACKUP_DIR",
        "BACKUP_RETENTION_DAYS",
        "BET_TICKER_WORKER_URL",
        "CASCADE_DB_PATH",
        "CASCADE_HOSTNAME",
        "CASCADE_LOG_LEVEL",
        "CASCADE_PORT",
        "CSRF_SECRET",
        "HYGIENE_JWT_SECRET",
        "INITIAL_TOKEN",
        "LOG_LEVEL",
        "OFFICE",
        "R2_S3_ENDPOINT",
        "SCANNER_PORT"
      ],
      "missingNeedsInject": [
        "ADMIN_PASSWORD",
        "CSRF_SECRET",
        "HYGIENE_JWT_SECRET",
        "INITIAL_TOKEN"
      ],
      "coveredByTemplateDefault": [
        "AGENT_ID",
        "BACKUP_DIR",
        "BACKUP_RETENTION_DAYS",
        "BET_TICKER_WORKER_URL",
        "CASCADE_DB_PATH",
        "CASCADE_HOSTNAME",
        "CASCADE_LOG_LEVEL",
        "CASCADE_PORT",
        "LOG_LEVEL",
        "OFFICE",
        "R2_S3_ENDPOINT",
        "SCANNER_PORT"
      ]
    },
    "templateKeysPresent": 20,
    "templateKeysMissing": 19,
    "missingKeys": [
      "ADMIN_PASSWORD",
      "AGENT_ID",
      "BACKUP_DIR",
      "BACKUP_RETENTION_DAYS",
      "BET_TICKER_WORKER_URL",
      "BUN_CONSOLE_DEPTH",
      "CASCADE_DB_PATH",
      "CASCADE_HOSTNAME",
      "CASCADE_LOG_LEVEL",
      "CASCADE_PORT",
      "CLOUDFLARE_ACCESS_API_TOKEN",
      "CSRF_SECRET",
      "HYGIENE_JWT_SECRET",
      "INITIAL_TOKEN",
      "LOG_LEVEL",
      "OFFICE",
      "R2_S3_ENDPOINT",
      "SCANNER_PORT",
      "SOCKET_API_KEY"
    ],
    "missingNeedsInject": [
      "ADMIN_PASSWORD",
      "CLOUDFLARE_ACCESS_API_TOKEN",
      "CSRF_SECRET",
      "HYGIENE_JWT_SECRET",
      "INITIAL_TOKEN",
      "SOCKET_API_KEY"
    ],
    "coveredByTemplateDefault": [
      "AGENT_ID",
      "BACKUP_DIR",
      "BACKUP_RETENTION_DAYS",
      "BET_TICKER_WORKER_URL",
      "BUN_CONSOLE_DEPTH",
      "CASCADE_DB_PATH",
      "CASCADE_HOSTNAME",
      "CASCADE_LOG_LEVEL",
      "CASCADE_PORT",
      "LOG_LEVEL",
      "OFFICE",
      "R2_S3_ENDPOINT",
      "SCANNER_PORT"
    ]
  },
  "toml": {
    "totalFiles": 9,
    "totalKeys": 302,
    "files": [
      {
        "path": "bunfig.toml",
        "keyCount": 22,
        "sampleKeys": [
          "console.depth",
          "run.noOrphans",
          "debug.editor",
          "install.exact",
          "install.saveTextLockfile",
          "install.frozenLockfile",
          "install.scopes.@factorywager.url",
          "install.scopes.@factorywager.token",
          "install.scopes.@factory-wager.url",
          "install.scopes.@factory-wager.token",
          "install.scopes.@factory.url",
          "install.scopes.@factory.token",
          "install.scopes.@factorywager-prod.url",
          "install.scopes.@factorywager-prod.token",
          "test.preload",
          "test.timeout",
          "test.coverageThreshold",
          "test.concurrentTestGlob",
          "test.pathIgnorePatterns",
          "serve.port"
        ],
        "importers": [
          "lib/gate-map.ts:188",
          "lib/console-depth.ts:55",
          "lib/verification/install-env-probes.ts:198",
          "scripts/bake-bunfig.ts:29",
          "scripts/bake-bunfig.ts:161",
          "scripts/dx-mcp.ts:814"
        ]
      },
      {
        "path": "config/onboarding-defaults.toml",
        "keyCount": 6,
        "sampleKeys": [
          "default_expert_sport",
          "default_cut_percentage",
          "default_template_by_source.referral",
          "default_template_by_source.portal",
          "default_template_by_source.telegram",
          "default_template_by_source.promoted"
        ],
        "importers": [
          "lib/operations/onboarding-config.ts:14"
        ]
      },
      {
        "path": "config/partner-templates/default-prospect.toml",
        "keyCount": 15,
        "sampleKeys": [
          "meta.template_id",
          "meta.name",
          "meta.description",
          "meta.version",
          "sor.eligible_tiers",
          "sor.max_exposure_per_signal",
          "sor.max_daily_exposure",
          "sor.max_single_bet",
          "sor.steam_allowed",
          "sor.arb_allowed",
          "sor.clv_allowed",
          "sor.manual_allowed",
          "sor.predictive_allowed",
          "sor.require_opsec_green",
          "sor.opsec_score_max"
        ],
        "importers": [
          "lib/telegram/templates/registry.ts:161",
          "lib/telegram/templates/registry.ts:288",
          "lib/operations/ops-loop-fixture.ts:35",
          "lib/operations/ops-loop-fixture.ts:98",
          "lib/operations/onboarding-config.ts:12",
          "lib/operations/partner-profile-bridge.ts:27"
        ]
      },
      {
        "path": "config/partner-templates/partner-active.toml",
        "keyCount": 15,
        "sampleKeys": [
          "meta.template_id",
          "meta.name",
          "meta.description",
          "meta.version",
          "sor.eligible_tiers",
          "sor.max_exposure_per_signal",
          "sor.max_daily_exposure",
          "sor.max_single_bet",
          "sor.steam_allowed",
          "sor.arb_allowed",
          "sor.clv_allowed",
          "sor.manual_allowed",
          "sor.predictive_allowed",
          "sor.require_opsec_green",
          "sor.opsec_score_max"
        ],
        "importers": [
          "lib/operations/onboarding-config.ts:38"
        ]
      },
      {
        "path": "config/serve-public.toml",
        "keyCount": 2,
        "sampleKeys": [
          "metadata.version",
          "metadata.description"
        ],
        "importers": [
          "lib/http/serve-public-config.ts:7",
          "lib/http/serve-public-config.ts:12",
          "lib/http/serve-public-config.ts:58"
        ]
      },
      {
        "path": "config/surfaces.toml",
        "keyCount": 110,
        "sampleKeys": [
          "surfaces.apex.host",
          "surfaces.apex.dnsTarget",
          "surfaces.apex.backend",
          "surfaces.apex.status",
          "surfaces.apex.protocol",
          "surfaces.apex.access",
          "surfaces.apex.note",
          "surfaces.www.host",
          "surfaces.www.dnsTarget",
          "surfaces.www.backend",
          "surfaces.www.status",
          "surfaces.www.protocol",
          "surfaces.www.access",
          "surfaces.www.note",
          "surfaces.score.host",
          "surfaces.score.dnsTarget",
          "surfaces.score.backend",
          "surfaces.score.status",
          "surfaces.score.protocol",
          "surfaces.score.access"
        ],
        "importers": [
          "scripts/bake-surfaces.ts:49",
          "tools/brand-status.ts:78"
        ]
      },
      {
        "path": "config/vault-map.toml",
        "keyCount": 121,
        "sampleKeys": [
          "metadata.version",
          "metadata.generated",
          "metadata.description",
          "conventions.naming",
          "conventions.color_api",
          "conventions.icon_path",
          "env.R2_ACCESS_KEY_ID.vault",
          "env.R2_ACCESS_KEY_ID.item",
          "env.R2_ACCESS_KEY_ID.field",
          "env.R2_ACCESS_KEY_ID.label",
          "env.R2_ACCESS_KEY_ID.color",
          "env.R2_ACCESS_KEY_ID.icon",
          "env.R2_ACCESS_KEY_ID.type",
          "env.R2_SECRET_ACCESS_KEY.vault",
          "env.R2_SECRET_ACCESS_KEY.item",
          "env.R2_SECRET_ACCESS_KEY.field",
          "env.R2_SECRET_ACCESS_KEY.label",
          "env.R2_SECRET_ACCESS_KEY.color",
          "env.R2_SECRET_ACCESS_KEY.icon",
          "env.R2_SECRET_ACCESS_KEY.type"
        ],
        "importers": [
          "lib/security/vault-map.ts:95",
          "lib/security/vault-map.ts:343",
          "tools/lib/portal-cli-scanner.ts:55",
          "lib/http/portal-weave.ts:326",
          "lib/security/vault-map.ts:53",
          "lib/security/vault-map.ts:111"
        ]
      },
      {
        "path": "lib/shared/bunfig.toml",
        "keyCount": 7,
        "sampleKeys": [
          "install.scopes.@factorywager.token",
          "install.scopes.@factorywager.url",
          "install.scopes.@duoplus.token",
          "install.scopes.@duoplus.url",
          "install.exact",
          "install.registry",
          "publish.registry"
        ],
        "importers": [
          "lib/gate-map.ts:188",
          "lib/verification/install-env-probes.ts:198",
          "scripts/bake-bunfig.ts:29",
          "scripts/bake-bunfig.ts:161",
          "scripts/dx-mcp.ts:814",
          "scripts/pre-commit-harness.ts:82"
        ]
      },
      {
        "path": "wrangler.toml",
        "keyCount": 4,
        "sampleKeys": [
          "name",
          "compatibility_date",
          "vars.REGISTRY_CORS_ORIGINS",
          "r2_buckets"
        ],
        "importers": [
          "scripts/dx-mcp.ts:143",
          "scripts/dx-mcp.ts:144",
          "scripts/dx-mcp.ts:439",
          "scripts/dx-mcp.ts:814",
          "scripts/bake-surfaces.ts:190"
        ]
      }
    ],
    "orphanFiles": [],
    "parseErrors": []
  },
  "summary": {
    "ownerCount": 60,
    "packageTouchedKeys": 1,
    "multiPlaneKeys": 33,
    "rootRuntimeMissing": 3,
    "rootRuntimeNeedsInject": 2,
    "rootCoveredByDefault": 1,
    "defaultsIssueCount": 2
  }
}
