{
  "schemaVersion": 5,
  "kind": "env-inventory",
  "generatedAt": "2026-08-17T22:08:09.481Z",
  "scannedRoots": [
    "lib",
    "config",
    "scripts",
    "tools",
    "packages"
  ],
  "usageCount": 677,
  "uniqueVars": 270,
  "byKind": {
    "ambient": 20,
    "secret": 33,
    "config": 217
  },
  "vault": {
    "templateKeyCount": 24,
    "vaultRefCount": 16,
    "actionableVaultGaps": [
      "OPENAI_API_KEY",
      "SLACK_WEBHOOK_URL"
    ],
    "secretsUsedAndVaulted": [
      "CLOUDFLARE_ACCESS_API_TOKEN",
      "CLOUDFLARE_API_TOKEN",
      "CLOUDFLARE_DNS_API_TOKEN",
      "DOD_PROOF_SECRET",
      "FACTORY_WAGER_TOKEN",
      "PROVISION_ENCRYPTION_KEY",
      "R2_ACCESS_KEY_ID",
      "R2_SECRET_ACCESS_KEY",
      "REGISTRY_SECRET"
    ],
    "secretsUsedButNotInTemplate": [
      "AGENT_DEMO_PASS",
      "ALERT_EMAIL_WEBHOOK",
      "ALERT_WEBHOOK_URL",
      "API_KEY",
      "API_TOKEN",
      "BASELINE_SCRAPE_ALERT_WEBHOOK",
      "CAESARS_WAF_TOKEN",
      "CSRF_SECRET",
      "EVENT_ALERT_WEBHOOK",
      "FACTORYWAGER_API_KEY",
      "FONBET_API_KEY",
      "OPENAI_API_KEY",
      "OPERATOR_API_TOKEN",
      "OPERATOR_RESEARCH_API_KEY",
      "OPERATOR_RESEARCH_CSRF_SECRET",
      "PARTNER_API_TOKEN",
      "PARTNER_LIMITS_API_TOKEN",
      "PROTON_PASS_PERSONAL_ACCESS_TOKEN",
      "PROVISION_PASSWORD",
      "REGISTRY_API_KEY",
      "SLACK_WEBHOOK_URL",
      "SPORTS_TERMINAL_TOKEN",
      "TELEGRAM_BOT_TOKEN",
      "TELEGRAM_CATALOG_RESEARCH_LLM_KEY"
    ],
    "displayMapped": 18,
    "withColor": 18,
    "withIcon": 11
  },
  "topConfig": [
    {
      "var": "OPS_DB_PATH",
      "count": 49,
      "samples": [
        "lib/registry-snapshot.ts:135",
        "lib/monitoring/integrity.ts:37",
        "lib/telegram/ops-bridge.ts:23",
        "lib/telegram/ops-bridge.ts:40"
      ]
    },
    {
      "var": "REDIS_URL",
      "count": 9,
      "samples": [
        "config/ports.ts:28",
        "tools/bun-api-showcase.ts:309",
        "tools/bun-api-showcase.ts:666",
        "tools/bun-api-showcase.ts:670"
      ]
    },
    {
      "var": "CLOUDFLARE_ACCOUNT_ID",
      "count": 6,
      "samples": [
        "lib/dod/verifier.ts:132",
        "lib/verification/cloudflare-access-token.ts:152",
        "tools/cloudflare-token-probe-cli.ts:37",
        "tools/cloudflare-token-probe-cli.ts:52"
      ]
    },
    {
      "var": "HEALTH_URL",
      "count": 5,
      "samples": [
        "lib/verification/networking-channel.ts:155",
        "tools/verify-etag.ts:93",
        "tools/ops-snapshot.ts:691",
        "tools/verify-formdata.ts:23"
      ]
    },
    {
      "var": "PORTAL_SCOPE",
      "count": 5,
      "samples": [
        "tools/snapshot-core.ts:774",
        "tools/portal-probe.ts:208",
        "tools/portal-probe.ts:212",
        "tools/portal-probe.ts:332"
      ]
    },
    {
      "var": "SNAPSHOT_BASE_URL",
      "count": 5,
      "samples": [
        "tools/snapshot-core.ts:782",
        "tools/portal-snapshot-cron-constants.ts:64",
        "tools/snapshot-scopes.ts:22",
        "tools/portal-cli.ts:1433"
      ]
    },
    {
      "var": "BASE_URL",
      "count": 4,
      "samples": [
        "lib/verification/networking-channel.ts:155",
        "tools/verify-etag.ts:93",
        "tools/ops-snapshot.ts:691",
        "tools/verify-networking.ts:130"
      ]
    },
    {
      "var": "COMPLIANCE_URL",
      "count": 4,
      "samples": [
        "lib/operations/state-compliance-http.ts:517",
        "tools/bake-compliance-portal.ts:49",
        "tools/live-enhancement-report.ts:6",
        "tools/enhanced-compliance-report.ts:268"
      ]
    },
    {
      "var": "CONCEPT_REGISTRY_DB",
      "count": 4,
      "samples": [
        "lib/concept-registry/schema.ts:121",
        "scripts/concept-registry-serve.ts:27",
        "scripts/concept-registry-sync.ts:38",
        "scripts/concept-registry-migrate.ts:15"
      ]
    },
    {
      "var": "DOMAIN_REGISTRY_PATH",
      "count": 4,
      "samples": [
        "scripts/domain-registry-status.ts:34",
        "scripts/search-benchmark-dashboard.ts:8634",
        "scripts/search-unified-status.ts:137",
        "scripts/lib/domain-registry.ts:75"
      ]
    },
    {
      "var": "R2_BUCKET_NAME",
      "count": 4,
      "samples": [
        "scripts/ci-r2-version-check.ts:23",
        "scripts/ci-r2-version-check.ts:55",
        "scripts/bun-ci.ts:25",
        "scripts/bun-ci.ts:51"
      ]
    },
    {
      "var": "REGISTRY_URL",
      "count": 4,
      "samples": [
        "lib/registry-snapshot.ts:97",
        "lib/verification/install-env-probes.ts:33",
        "tools/ops-snapshot.ts:184",
        "tools/verify-package-info.ts:25"
      ]
    },
    {
      "var": "SEARCH_BENCH_DOMAIN",
      "count": 4,
      "samples": [
        "scripts/project-online-readiness.ts:19",
        "scripts/search-benchmark-dashboard.ts:159",
        "scripts/search-unified-status.ts:42",
        "scripts/lib/domain-health-read.ts:383"
      ]
    },
    {
      "var": "BUN_TYPES_TIP",
      "count": 3,
      "samples": [
        "tools/bun-types-changelog.ts:280",
        "tools/bun-types-inventory.ts:1097",
        "tools/bun-types-tip-diff.ts:117"
      ]
    },
    {
      "var": "CAESARS_SCRAPE_COOKIE",
      "count": 3,
      "samples": [
        "lib/operations/scrapers/books/caesars.ts:62",
        "tools/baseline-caesars-probe.ts:83",
        "tools/baseline-caesars-probe.ts:174"
      ]
    },
    {
      "var": "DATABASE_URL",
      "count": 3,
      "samples": [
        "lib/operations/postgres-bridge.ts:39",
        "tools/bun-api-showcase.ts:607",
        "tools/bun-api-oneliners.ts:624"
      ]
    },
    {
      "var": "FACTORY_REGISTRY_URL",
      "count": 3,
      "samples": [
        "lib/registry-snapshot.ts:97",
        "lib/verification/install-env-probes.ts:33",
        "tools/ops-snapshot.ts:184"
      ]
    },
    {
      "var": "PROTON_PASS_AGENT_REASON",
      "count": 3,
      "samples": [
        "scripts/vault-gap-close.ts:75",
        "scripts/lib/vault-gap-status.ts:200",
        "tools/portal-secret.ts:362"
      ]
    },
    {
      "var": "SERVER_HOST",
      "count": 3,
      "samples": [
        "lib/core/url-handler.ts:347",
        "config/ports.ts:29",
        "scripts/lib/dashboard-env.ts:28"
      ]
    },
    {
      "var": "USERPROFILE",
      "count": 3,
      "samples": [
        "lib/monitoring/install-cache-slice.ts:28",
        "lib/docs/cache-manager.ts:54",
        "lib/security/mintable-secret.ts:54"
      ]
    },
    {
      "var": "VERSION",
      "count": 3,
      "samples": [
        "lib/routing-proof.ts:737",
        "tools/routing-registry-proof.ts:52",
        "tools/bun-utils-registry-proof.ts:40"
      ]
    },
    {
      "var": "ALLOWED_PROOF_DOMAINS",
      "count": 2,
      "samples": [
        "lib/partner-profile/deposit-import.ts:50",
        "scripts/validate-partner-ledger-schema.ts:36"
      ]
    },
    {
      "var": "AWS_BUCKET_NAME",
      "count": 2,
      "samples": [
        "scripts/ci-r2-version-check.ts:25",
        "scripts/ci-r2-version-check.ts:57"
      ]
    },
    {
      "var": "BUN_CACHE_PRUNE_MAX_MB",
      "count": 2,
      "samples": [
        "lib/monitoring/install-cache-slice.ts:45",
        "scripts/lib/bun-cache-metrics.ts:109"
      ]
    },
    {
      "var": "BUN_PORT",
      "count": 2,
      "samples": [
        "tools/bun-serve-defaults-table.ts:201",
        "tools/bun-serve-defaults-table.ts:206"
      ]
    }
  ],
  "owners": [
    {
      "envKey": "PROTON_PASS_PERSONAL_ACCESS_TOKEN",
      "kind": "secret",
      "disposition": "unknown-secret",
      "count": 1,
      "planes": [
        "packages"
      ],
      "packages": [
        "proton-pass"
      ],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "packages/proton-pass/src/session.ts:164"
      ]
    },
    {
      "envKey": "TMPDIR",
      "kind": "ambient",
      "disposition": "ambient",
      "count": 10,
      "planes": [
        "lib",
        "packages",
        "scripts",
        "tools"
      ],
      "packages": [
        "proton-pass"
      ],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": true,
      "samples": [
        "lib/tmp-probe.ts:15",
        "lib/harness/focused-coverage.ts:224",
        "lib/security/pass-session.ts:217",
        "scripts/bun-test-changed-staged.ts:222"
      ]
    },
    {
      "envKey": "REDIS_URL",
      "kind": "config",
      "disposition": "config",
      "count": 9,
      "planes": [
        "config",
        "packages",
        "tools"
      ],
      "packages": [
        "business",
        "p2p"
      ],
      "inRootTemplate": true,
      "inAnyTemplate": true,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "config/ports.ts:28",
        "tools/bun-api-showcase.ts:309",
        "tools/bun-api-showcase.ts:666",
        "tools/bun-api-showcase.ts:670"
      ]
    },
    {
      "envKey": "PROTONPASS_ENV_FILE",
      "kind": "config",
      "disposition": "config",
      "count": 2,
      "planes": [
        "packages",
        "tools"
      ],
      "packages": [
        "proton-pass"
      ],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "tools/portal-secret.ts:757",
        "packages/proton-pass/bin/proton-pass.ts:126"
      ]
    },
    {
      "envKey": "PROTONPASS_CACHE_PATH",
      "kind": "config",
      "disposition": "config",
      "count": 1,
      "planes": [
        "packages"
      ],
      "packages": [
        "proton-pass"
      ],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "packages/proton-pass/bin/proton-pass.ts:244"
      ]
    },
    {
      "envKey": "API_KEY",
      "kind": "secret",
      "disposition": "alias",
      "count": 7,
      "planes": [
        "config",
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/registry-snapshot.ts:98",
        "lib/operator-research/platform.ts:58",
        "lib/docs/constants/utils.ts:848",
        "config/bun-remediation-catalog.ts:363"
      ]
    },
    {
      "envKey": "FACTORY_WAGER_TOKEN",
      "kind": "secret",
      "disposition": "vaulted",
      "count": 6,
      "planes": [
        "lib",
        "scripts",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": true,
      "inAnyTemplate": true,
      "passRef": "pass://factorywager/FactoryWager Registry Token/password",
      "runtimePresent": false,
      "samples": [
        "lib/factory/server.ts:217",
        "lib/verification/install-env-probes.ts:194",
        "scripts/refresh-sports-terminal-integration-health.ts:70",
        "scripts/lib/domain-registry.ts:141"
      ]
    },
    {
      "envKey": "REGISTRY_SECRET",
      "kind": "secret",
      "disposition": "vaulted",
      "count": 4,
      "planes": [
        "lib",
        "scripts",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": true,
      "inAnyTemplate": true,
      "passRef": "pass://factorywager/Registry Dev Secret/password",
      "runtimePresent": false,
      "samples": [
        "lib/factory/server.ts:218",
        "scripts/serve-public.ts:1701",
        "tools/ops-snapshot.ts:186",
        "tools/verify-formdata.ts:26"
      ]
    },
    {
      "envKey": "CLOUDFLARE_API_TOKEN",
      "kind": "secret",
      "disposition": "vaulted",
      "count": 9,
      "planes": [
        "scripts",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": true,
      "inAnyTemplate": true,
      "passRef": "pass://factorywager/Cloudflare API Token/password",
      "runtimePresent": true,
      "samples": [
        "scripts/bake-surfaces.ts:281",
        "tools/routing-registry-proof.ts:50",
        "tools/bun-utils-registry-proof.ts:37",
        "tools/cloudflare-pages-deploy.ts:27"
      ]
    },
    {
      "envKey": "PARTNER_API_TOKEN",
      "kind": "secret",
      "disposition": "unknown-secret",
      "count": 6,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/operator-research/platform.ts:45",
        "lib/operator-research/platform.ts:54",
        "lib/operator-research/auth/partner-request.ts:20",
        "lib/operator-research/auth/api-key.ts:14"
      ]
    },
    {
      "envKey": "R2_ACCESS_KEY_ID",
      "kind": "secret",
      "disposition": "vaulted",
      "count": 5,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": true,
      "inAnyTemplate": true,
      "passRef": "pass://factorywager/R2 bun-secrets bucket/username",
      "runtimePresent": false,
      "samples": [
        "lib/factory/object-store.ts:129",
        "lib/factory/registry.ts:413",
        "lib/dod/verifier.ts:133",
        "tools/verify-bun-release.ts:692"
      ]
    },
    {
      "envKey": "R2_SECRET_ACCESS_KEY",
      "kind": "secret",
      "disposition": "vaulted",
      "count": 5,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": true,
      "inAnyTemplate": true,
      "passRef": "pass://factorywager/R2 bun-secrets bucket/password",
      "runtimePresent": false,
      "samples": [
        "lib/factory/object-store.ts:130",
        "lib/factory/registry.ts:414",
        "lib/dod/verifier.ts:134",
        "tools/verify-bun-release.ts:692"
      ]
    },
    {
      "envKey": "CAESARS_WAF_TOKEN",
      "kind": "secret",
      "disposition": "unknown-secret",
      "count": 3,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/operations/scrapers/books/caesars.ts:64",
        "tools/baseline-caesars-probe.ts:85",
        "tools/baseline-caesars-probe.ts:175"
      ]
    },
    {
      "envKey": "CLOUDFLARE_DNS_API_TOKEN",
      "kind": "secret",
      "disposition": "vaulted",
      "count": 3,
      "planes": [
        "scripts",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": true,
      "inAnyTemplate": true,
      "passRef": "pass://factorywager/Cloudflare API Token (DNS)/password",
      "runtimePresent": false,
      "samples": [
        "scripts/cloudflare-dns-sync.ts:93",
        "scripts/bake-surfaces.ts:281",
        "tools/brand-status.ts:515"
      ]
    },
    {
      "envKey": "REGISTRY_API_KEY",
      "kind": "secret",
      "disposition": "alias",
      "count": 3,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/registry-snapshot.ts:98",
        "tools/routing-registry-proof.ts:50",
        "tools/bun-utils-registry-proof.ts:37"
      ]
    },
    {
      "envKey": "OPERATOR_RESEARCH_API_KEY",
      "kind": "secret",
      "disposition": "unknown-secret",
      "count": 6,
      "planes": [
        "lib"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/operator-research/platform.ts:47",
        "lib/operator-research/platform.ts:56",
        "lib/operator-research/auth/partner-request.ts:22",
        "lib/operator-research/auth/csrf.ts:21"
      ]
    },
    {
      "envKey": "FACTORYWAGER_API_KEY",
      "kind": "secret",
      "disposition": "unknown-secret",
      "count": 4,
      "planes": [
        "lib"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/operator-research/platform.ts:48",
        "lib/operator-research/platform.ts:57",
        "lib/operator-research/auth/partner-request.ts:23",
        "lib/operator-research/auth/api-key.ts:17"
      ]
    },
    {
      "envKey": "OPERATOR_API_TOKEN",
      "kind": "secret",
      "disposition": "unknown-secret",
      "count": 4,
      "planes": [
        "lib"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/operator-research/platform.ts:46",
        "lib/operator-research/platform.ts:55",
        "lib/operator-research/auth/partner-request.ts:21",
        "lib/operator-research/auth/api-key.ts:15"
      ]
    },
    {
      "envKey": "OPENAI_API_KEY",
      "kind": "secret",
      "disposition": "vault-required",
      "count": 3,
      "planes": [
        "lib"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/telegram/catalog-research/llm-pass.ts:68",
        "lib/telegram/catalog-research/llm-pass.ts:77",
        "lib/telegram/catalog-research/agent.ts:41"
      ]
    },
    {
      "envKey": "SLACK_WEBHOOK_URL",
      "kind": "secret",
      "disposition": "vault-required",
      "count": 3,
      "planes": [
        "lib"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/channels/outbox.ts:438",
        "lib/factory/alerts.ts:32",
        "lib/operations/scrapers/scrape-alert.ts:68"
      ]
    },
    {
      "envKey": "ALERT_EMAIL_WEBHOOK",
      "kind": "secret",
      "disposition": "unknown-secret",
      "count": 2,
      "planes": [
        "lib"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/operator-research/matching/alerts.ts:590",
        "lib/research/event-alert-engine.ts:201"
      ]
    },
    {
      "envKey": "API_TOKEN",
      "kind": "secret",
      "disposition": "demo",
      "count": 2,
      "planes": [
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "tools/bun-docs-guide-examples.ts:356",
        "tools/bun-docs-guide-examples.ts:362"
      ]
    },
    {
      "envKey": "BASELINE_SCRAPE_ALERT_WEBHOOK",
      "kind": "secret",
      "disposition": "unknown-secret",
      "count": 2,
      "planes": [
        "lib"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/operations/scrapers/scrape-alert.ts:68",
        "lib/operations/scrapers/scrape-alert.ts:138"
      ]
    },
    {
      "envKey": "AGENT_DEMO_PASS",
      "kind": "secret",
      "disposition": "unknown-secret",
      "count": 1,
      "planes": [
        "lib"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/operator-research/agent-odds-http.ts:113"
      ]
    },
    {
      "envKey": "ALERT_WEBHOOK_URL",
      "kind": "secret",
      "disposition": "unknown-secret",
      "count": 1,
      "planes": [
        "lib"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/research/event-alert-engine.ts:200"
      ]
    },
    {
      "envKey": "CLOUDFLARE_ACCESS_API_TOKEN",
      "kind": "secret",
      "disposition": "vaulted",
      "count": 1,
      "planes": [
        "lib"
      ],
      "packages": [],
      "inRootTemplate": true,
      "inAnyTemplate": true,
      "passRef": "pass://factorywager/Cloudflare Access API Token/password",
      "runtimePresent": false,
      "samples": [
        "lib/verification/cloudflare-access-token.ts:144"
      ]
    },
    {
      "envKey": "CSRF_SECRET",
      "kind": "secret",
      "disposition": "unknown-secret",
      "count": 1,
      "planes": [
        "lib"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/operator-research/auth/csrf.ts:19"
      ]
    },
    {
      "envKey": "DOD_PROOF_SECRET",
      "kind": "secret",
      "disposition": "vaulted",
      "count": 1,
      "planes": [
        "lib"
      ],
      "packages": [],
      "inRootTemplate": true,
      "inAnyTemplate": true,
      "passRef": "pass://factorywager/DOD Proof Secret/password",
      "runtimePresent": false,
      "samples": [
        "lib/dod/evidence.ts:242"
      ]
    },
    {
      "envKey": "EVENT_ALERT_WEBHOOK",
      "kind": "secret",
      "disposition": "unknown-secret",
      "count": 1,
      "planes": [
        "lib"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/research/event-alert-engine.ts:199"
      ]
    },
    {
      "envKey": "FONBET_API_KEY",
      "kind": "secret",
      "disposition": "unknown-secret",
      "count": 1,
      "planes": [
        "lib"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/research/fetchers/fonbet.ts:146"
      ]
    },
    {
      "envKey": "OPERATOR_RESEARCH_CSRF_SECRET",
      "kind": "secret",
      "disposition": "unknown-secret",
      "count": 1,
      "planes": [
        "lib"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/operator-research/auth/csrf.ts:20"
      ]
    },
    {
      "envKey": "PARTNER_LIMITS_API_TOKEN",
      "kind": "secret",
      "disposition": "unknown-secret",
      "count": 1,
      "planes": [
        "lib"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/operations/baseline-partner-api.ts:33"
      ]
    },
    {
      "envKey": "PROVISION_ENCRYPTION_KEY",
      "kind": "secret",
      "disposition": "vaulted",
      "count": 1,
      "planes": [
        "tools"
      ],
      "packages": [],
      "inRootTemplate": true,
      "inAnyTemplate": true,
      "passRef": "pass://factorywager/Provision Encryption Key/password",
      "runtimePresent": false,
      "samples": [
        "tools/provision-queue.ts:130"
      ]
    },
    {
      "envKey": "PROVISION_PASSWORD",
      "kind": "secret",
      "disposition": "unknown-secret",
      "count": 1,
      "planes": [
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "tools/provision-queue.ts:125"
      ]
    },
    {
      "envKey": "SPORTS_TERMINAL_TOKEN",
      "kind": "secret",
      "disposition": "unknown-secret",
      "count": 1,
      "planes": [
        "scripts"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "scripts/refresh-sports-terminal-integration-health.ts:70"
      ]
    },
    {
      "envKey": "TELEGRAM_BOT_TOKEN",
      "kind": "secret",
      "disposition": "alias",
      "count": 1,
      "planes": [
        "lib"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/operations/account-service.ts:426"
      ]
    },
    {
      "envKey": "TELEGRAM_CATALOG_RESEARCH_LLM_KEY",
      "kind": "secret",
      "disposition": "alias",
      "count": 1,
      "planes": [
        "lib"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/telegram/catalog-research/llm-pass.ts:68"
      ]
    },
    {
      "envKey": "HOME",
      "kind": "ambient",
      "disposition": "ambient",
      "count": 27,
      "planes": [
        "config",
        "lib",
        "scripts",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": true,
      "samples": [
        "lib/gate-map.ts:80",
        "lib/package/package-manager.ts:77",
        "lib/monitoring/install-cache-slice.ts:28",
        "lib/telegram/telegram-env-bind.ts:136"
      ]
    },
    {
      "envKey": "OPS_DB_PATH",
      "kind": "config",
      "disposition": "config",
      "count": 49,
      "planes": [
        "lib",
        "scripts",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/registry-snapshot.ts:135",
        "lib/monitoring/integrity.ts:37",
        "lib/telegram/ops-bridge.ts:23",
        "lib/telegram/ops-bridge.ts:40"
      ]
    },
    {
      "envKey": "TMP",
      "kind": "ambient",
      "disposition": "ambient",
      "count": 8,
      "planes": [
        "lib",
        "scripts",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/tmp-probe.ts:15",
        "lib/harness/focused-coverage.ts:224",
        "scripts/bun-test-changed-staged.ts:222",
        "scripts/bun-test-changed-staged.ts:233"
      ]
    },
    {
      "envKey": "PORT",
      "kind": "ambient",
      "disposition": "ambient",
      "count": 5,
      "planes": [
        "lib",
        "scripts",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/factory/server.ts:449",
        "scripts/lib/dashboard-env.ts:36",
        "tools/bun-serve-defaults-table.ts:202",
        "tools/bun-serve-defaults-table.ts:206"
      ]
    },
    {
      "envKey": "PWD",
      "kind": "ambient",
      "disposition": "ambient",
      "count": 3,
      "planes": [
        "lib",
        "scripts",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": true,
      "samples": [
        "lib/package/package-manager.ts:75",
        "scripts/serve-public.ts:1851",
        "tools/cli/integrated-cli.ts:85"
      ]
    },
    {
      "envKey": "SERVER_HOST",
      "kind": "config",
      "disposition": "config",
      "count": 3,
      "planes": [
        "config",
        "lib",
        "scripts"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/core/url-handler.ts:347",
        "config/ports.ts:29",
        "scripts/lib/dashboard-env.ts:28"
      ]
    },
    {
      "envKey": "CLOUDFLARE_ACCOUNT_ID",
      "kind": "config",
      "disposition": "config",
      "count": 6,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": true,
      "inAnyTemplate": true,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/dod/verifier.ts:132",
        "lib/verification/cloudflare-access-token.ts:152",
        "tools/cloudflare-token-probe-cli.ts:37",
        "tools/cloudflare-token-probe-cli.ts:52"
      ]
    },
    {
      "envKey": "PATH",
      "kind": "ambient",
      "disposition": "ambient",
      "count": 6,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": true,
      "samples": [
        "lib/bun-executable.ts:43",
        "lib/verification/resolve-bun-binary.ts:98",
        "tools/overseer-cli.ts:44",
        "tools/bun-pr-verify.ts:174"
      ]
    },
    {
      "envKey": "HEALTH_URL",
      "kind": "config",
      "disposition": "config",
      "count": 5,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/verification/networking-channel.ts:155",
        "tools/verify-etag.ts:93",
        "tools/ops-snapshot.ts:691",
        "tools/verify-formdata.ts:23"
      ]
    },
    {
      "envKey": "BASE_URL",
      "kind": "config",
      "disposition": "config",
      "count": 4,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/verification/networking-channel.ts:155",
        "tools/verify-etag.ts:93",
        "tools/ops-snapshot.ts:691",
        "tools/verify-networking.ts:130"
      ]
    },
    {
      "envKey": "COMPLIANCE_URL",
      "kind": "config",
      "disposition": "config",
      "count": 4,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/operations/state-compliance-http.ts:517",
        "tools/bake-compliance-portal.ts:49",
        "tools/live-enhancement-report.ts:6",
        "tools/enhanced-compliance-report.ts:268"
      ]
    },
    {
      "envKey": "CONCEPT_REGISTRY_DB",
      "kind": "config",
      "disposition": "config",
      "count": 4,
      "planes": [
        "lib",
        "scripts"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/concept-registry/schema.ts:121",
        "scripts/concept-registry-serve.ts:27",
        "scripts/concept-registry-sync.ts:38",
        "scripts/concept-registry-migrate.ts:15"
      ]
    },
    {
      "envKey": "GITHUB_STEP_SUMMARY",
      "kind": "ambient",
      "disposition": "ambient",
      "count": 4,
      "planes": [
        "scripts",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "scripts/doctor-ci-report.ts:216",
        "scripts/gate-report-monorepo.ts:138",
        "tools/bake-doctor.ts:639",
        "tools/bake-doctor.ts:659"
      ]
    },
    {
      "envKey": "REGISTRY_URL",
      "kind": "config",
      "disposition": "config",
      "count": 4,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/registry-snapshot.ts:97",
        "lib/verification/install-env-probes.ts:33",
        "tools/ops-snapshot.ts:184",
        "tools/verify-package-info.ts:25"
      ]
    },
    {
      "envKey": "CAESARS_SCRAPE_COOKIE",
      "kind": "config",
      "disposition": "config",
      "count": 3,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/operations/scrapers/books/caesars.ts:62",
        "tools/baseline-caesars-probe.ts:83",
        "tools/baseline-caesars-probe.ts:174"
      ]
    },
    {
      "envKey": "DATABASE_URL",
      "kind": "config",
      "disposition": "config",
      "count": 3,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/operations/postgres-bridge.ts:39",
        "tools/bun-api-showcase.ts:607",
        "tools/bun-api-oneliners.ts:624"
      ]
    },
    {
      "envKey": "FACTORY_REGISTRY_URL",
      "kind": "config",
      "disposition": "config",
      "count": 3,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/registry-snapshot.ts:97",
        "lib/verification/install-env-probes.ts:33",
        "tools/ops-snapshot.ts:184"
      ]
    },
    {
      "envKey": "PROTON_PASS_AGENT_REASON",
      "kind": "config",
      "disposition": "config",
      "count": 3,
      "planes": [
        "scripts",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "scripts/vault-gap-close.ts:75",
        "scripts/lib/vault-gap-status.ts:200",
        "tools/portal-secret.ts:362"
      ]
    },
    {
      "envKey": "VERSION",
      "kind": "config",
      "disposition": "config",
      "count": 3,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/routing-proof.ts:737",
        "tools/routing-registry-proof.ts:52",
        "tools/bun-utils-registry-proof.ts:40"
      ]
    },
    {
      "envKey": "ALLOWED_PROOF_DOMAINS",
      "kind": "config",
      "disposition": "config",
      "count": 2,
      "planes": [
        "lib",
        "scripts"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/partner-profile/deposit-import.ts:50",
        "scripts/validate-partner-ledger-schema.ts:36"
      ]
    },
    {
      "envKey": "BUN_CACHE_PRUNE_MAX_MB",
      "kind": "config",
      "disposition": "config",
      "count": 2,
      "planes": [
        "lib",
        "scripts"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/monitoring/install-cache-slice.ts:45",
        "scripts/lib/bun-cache-metrics.ts:109"
      ]
    },
    {
      "envKey": "CAESARS_SCRAPE_LOCATION",
      "kind": "config",
      "disposition": "config",
      "count": 2,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/operations/scrapers/books/caesars.ts:52",
        "tools/baseline-caesars-probe.ts:39"
      ]
    },
    {
      "envKey": "COMPLIANCE_MOCK_URL",
      "kind": "config",
      "disposition": "config",
      "count": 2,
      "planes": [
        "lib",
        "tools"
      ],
      "packages": [],
      "inRootTemplate": false,
      "inAnyTemplate": false,
      "passRef": null,
      "runtimePresent": false,
      "samples": [
        "lib/operations/state-compliance-http.ts:518",
        "tools/show-enhancements.ts:334"
      ]
    }
  ],
  "defaultsIssues": {
    "total": 2,
    "packages": 0,
    "harness": 2,
    "top": [
      {
        "envVar": "REDIS_URL",
        "file": "tools/bun-api-showcase.ts",
        "line": 670
      },
      {
        "envVar": "PORTAL_SNAPSHOT_CRON_MARKER",
        "file": "tools/portal-snapshot-cron-worker.ts",
        "line": 18
      }
    ]
  },
  "packagesPlane": {
    "generatedAt": "2026-08-17T22:08:09.475Z",
    "templateKeys": [
      "R2_ACCOUNT_ID",
      "R2_ACCESS_KEY_ID",
      "R2_SECRET_ACCESS_KEY",
      "R2_BUCKET_NAME",
      "FACTORY_WAGER_TOKEN",
      "REGISTRY_SECRET",
      "CLOUDFLARE_API_TOKEN",
      "CLOUDFLARE_DNS_API_TOKEN",
      "CLOUDFLARE_ACCESS_API_TOKEN",
      "CLOUDFLARE_ACCOUNT_ID",
      "TELEGRAM_BOT_FACTORY",
      "TELEGRAM_WEBHOOK_SECRET",
      "TELEGRAM_OPS_CHAT_ID",
      "PLAY_SIGNING_SECRET",
      "REPORT_SIGNING_SECRET",
      "DOD_PROOF_SECRET",
      "DOD_ID_ENCRYPTION_KEY",
      "PROVISION_ENCRYPTION_KEY",
      "SOCKET_API_KEY",
      "REDIS_URL",
      "NODE_ENV",
      "MCP_LOG_LEVEL"
    ],
    "vaultRefs": [
      {
        "key": "R2_ACCESS_KEY_ID",
        "ref": "pass://factorywager/R2 bun-secrets bucket/username",
        "label": "R2 Access Key",
        "color": "#F38020",
        "icon": "public/portal/icons/vault/r2.svg",
        "type": "token"
      },
      {
        "key": "R2_SECRET_ACCESS_KEY",
        "ref": "pass://factorywager/R2 bun-secrets bucket/password",
        "label": "R2 Secret Key",
        "color": "#F38020",
        "icon": "public/portal/icons/vault/r2.svg",
        "type": "secret"
      },
      {
        "key": "FACTORY_WAGER_TOKEN",
        "ref": "pass://factorywager/FactoryWager Registry Token/password",
        "label": "Registry Token",
        "color": "#6366F1",
        "icon": "public/portal/icons/vault/key.svg",
        "type": "token"
      },
      {
        "key": "REGISTRY_SECRET",
        "ref": "pass://factorywager/Registry Dev Secret/password",
        "label": "Registry Dev Secret",
        "color": "#6366F1",
        "icon": null,
        "type": "secret"
      },
      {
        "key": "CLOUDFLARE_API_TOKEN",
        "ref": "pass://factorywager/Cloudflare API Token/password",
        "label": "Cloudflare API Token",
        "color": "#F38020",
        "icon": "public/portal/icons/vault/cloudflare.svg",
        "type": "token"
      },
      {
        "key": "CLOUDFLARE_DNS_API_TOKEN",
        "ref": "pass://factorywager/Cloudflare API Token (DNS)/password",
        "label": "Cloudflare DNS Token",
        "color": "#F38020",
        "icon": "public/portal/icons/vault/cloudflare.svg",
        "type": "token"
      },
      {
        "key": "CLOUDFLARE_ACCESS_API_TOKEN",
        "ref": "pass://factorywager/Cloudflare Access API Token/password",
        "label": "Cloudflare Access API Token",
        "color": "#F38020",
        "icon": "public/portal/icons/vault/cloudflare.svg",
        "type": "token"
      },
      {
        "key": "TELEGRAM_BOT_FACTORY",
        "ref": "pass://factorywager/Telegram: factorywager_bot/password",
        "label": "Telegram Bot Token",
        "color": "#26A5E4",
        "icon": "public/portal/icons/vault/telegram.svg",
        "type": "token"
      },
      {
        "key": "TELEGRAM_WEBHOOK_SECRET",
        "ref": "pass://factorywager/Telegram Webhook Secret/password",
        "label": "Telegram Webhook Secret",
        "color": "#26A5E4",
        "icon": null,
        "type": "secret"
      },
      {
        "key": "PLAY_SIGNING_SECRET",
        "ref": "pass://factorywager/Play Signing Secret/password",
        "label": "Play Signing Secret",
        "color": "#10B981",
        "icon": null,
        "type": "secret"
      },
      {
        "key": "REPORT_SIGNING_SECRET",
        "ref": "pass://factorywager/Report Signing Secret/password",
        "label": "Report Signing Secret",
        "color": "#10B981",
        "icon": null,
        "type": "secret"
      },
      {
        "key": "DOD_PROOF_SECRET",
        "ref": "pass://factorywager/DOD Proof Secret/password",
        "label": "DOD Proof Secret",
        "color": "#8B5CF6",
        "icon": null,
        "type": "secret"
      },
      {
        "key": "DOD_ID_ENCRYPTION_KEY",
        "ref": "pass://factorywager/DOD ID Encryption Key/password",
        "label": "DOD Encryption Key",
        "color": "#8B5CF6",
        "icon": null,
        "type": "key"
      },
      {
        "key": "PROVISION_ENCRYPTION_KEY",
        "ref": "pass://factorywager/Provision Encryption Key/password",
        "label": "Provision Key",
        "color": "#8B5CF6",
        "icon": null,
        "type": "key"
      },
      {
        "key": "SOCKET_API_KEY",
        "ref": "pass://factorywager/Socket API Key/password",
        "label": "Socket API Key",
        "color": "#7C3AED",
        "icon": "public/portal/icons/vault/key.svg",
        "type": "token"
      }
    ],
    "envHits": [
      {
        "package": "business",
        "envKey": "REDIS_URL",
        "kind": "config",
        "disposition": "config",
        "inTemplate": true,
        "runtimePresent": false,
        "passRef": null,
        "samples": [
          "packages/business/src/habits-classifier.ts:33"
        ]
      },
      {
        "package": "p2p",
        "envKey": "REDIS_URL",
        "kind": "config",
        "disposition": "config",
        "inTemplate": true,
        "runtimePresent": false,
        "passRef": null,
        "samples": [
          "packages/p2p/src/customer-notifier.ts:8",
          "packages/p2p/src/business-continuity.ts:8",
          "packages/p2p/src/migration-workflow.ts:10"
        ]
      },
      {
        "package": "proton-pass",
        "envKey": "PROTON_PASS_PERSONAL_ACCESS_TOKEN",
        "kind": "secret",
        "disposition": "unknown-secret",
        "inTemplate": false,
        "runtimePresent": false,
        "passRef": null,
        "samples": [
          "packages/proton-pass/src/session.ts:164"
        ]
      },
      {
        "package": "proton-pass",
        "envKey": "TMPDIR",
        "kind": "ambient",
        "disposition": "ambient",
        "inTemplate": false,
        "runtimePresent": true,
        "passRef": null,
        "samples": [
          "packages/proton-pass/src/inject.ts:198"
        ]
      }
    ],
    "byPackage": [
      {
        "package": "business",
        "envKeys": [
          "REDIS_URL"
        ],
        "secretKeys": [],
        "vaultedKeys": [],
        "missingTemplateKeys": []
      },
      {
        "package": "p2p",
        "envKeys": [
          "REDIS_URL"
        ],
        "secretKeys": [],
        "vaultedKeys": [],
        "missingTemplateKeys": []
      },
      {
        "package": "proton-pass",
        "envKeys": [
          "PROTON_PASS_PERSONAL_ACCESS_TOKEN",
          "TMPDIR"
        ],
        "secretKeys": [
          "PROTON_PASS_PERSONAL_ACCESS_TOKEN"
        ],
        "vaultedKeys": [],
        "missingTemplateKeys": [
          "PROTON_PASS_PERSONAL_ACCESS_TOKEN"
        ]
      }
    ],
    "actions": [
      {
        "package": "proton-pass",
        "envKey": "PROTON_PASS_PERSONAL_ACCESS_TOKEN",
        "action": "wire-env-template",
        "reason": "PROTON_PASS_PERSONAL_ACCESS_TOKEN used in packages/proton-pass but missing from env.template"
      }
    ],
    "displayMap": [
      {
        "envKey": "CLOUDFLARE_ACCESS_API_TOKEN",
        "vault": "factorywager",
        "item": "Cloudflare Access API Token",
        "field": "password",
        "passRef": "pass://factorywager/Cloudflare Access API Token/password",
        "label": "Cloudflare Access API Token",
        "color": "#F38020",
        "icon": "public/portal/icons/vault/cloudflare.svg",
        "glyph": "🔑",
        "type": "token",
        "inTemplate": true,
        "runtimePresent": false
      },
      {
        "envKey": "CLOUDFLARE_API_TOKEN",
        "vault": "factorywager",
        "item": "Cloudflare API Token",
        "field": "password",
        "passRef": "pass://factorywager/Cloudflare API Token/password",
        "label": "Cloudflare API Token",
        "color": "#F38020",
        "icon": "public/portal/icons/vault/cloudflare.svg",
        "glyph": "🔑",
        "type": "token",
        "inTemplate": true,
        "runtimePresent": true
      },
      {
        "envKey": "CLOUDFLARE_DNS_API_TOKEN",
        "vault": "factorywager",
        "item": "Cloudflare API Token (DNS)",
        "field": "password",
        "passRef": "pass://factorywager/Cloudflare API Token (DNS)/password",
        "label": "Cloudflare DNS Token",
        "color": "#F38020",
        "icon": "public/portal/icons/vault/cloudflare.svg",
        "glyph": "🔑",
        "type": "token",
        "inTemplate": true,
        "runtimePresent": false
      },
      {
        "envKey": "DOD_ID_ENCRYPTION_KEY",
        "vault": "factorywager",
        "item": "DOD ID Encryption Key",
        "field": "password",
        "passRef": "pass://factorywager/DOD ID Encryption Key/password",
        "label": "DOD Encryption Key",
        "color": "#8B5CF6",
        "icon": null,
        "glyph": "🔑",
        "type": "key",
        "inTemplate": true,
        "runtimePresent": false
      },
      {
        "envKey": "DOD_PROOF_SECRET",
        "vault": "factorywager",
        "item": "DOD Proof Secret",
        "field": "password",
        "passRef": "pass://factorywager/DOD Proof Secret/password",
        "label": "DOD Proof Secret",
        "color": "#8B5CF6",
        "icon": null,
        "glyph": "🔏",
        "type": "secret",
        "inTemplate": true,
        "runtimePresent": false
      },
      {
        "envKey": "FACTORY_WAGER_TOKEN",
        "vault": "factorywager",
        "item": "FactoryWager Registry Token",
        "field": "password",
        "passRef": "pass://factorywager/FactoryWager Registry Token/password",
        "label": "Registry Token",
        "color": "#6366F1",
        "icon": "public/portal/icons/vault/key.svg",
        "glyph": "🔑",
        "type": "token",
        "inTemplate": true,
        "runtimePresent": false
      },
      {
        "envKey": "GITHUB_TOKEN",
        "vault": "factorywager",
        "item": "GitHub PAT",
        "field": "note",
        "passRef": "pass://factorywager/GitHub PAT/note",
        "label": "GitHub Personal Access Token",
        "color": "#2DA44E",
        "icon": "public/portal/icons/vault/github.svg",
        "glyph": "🐙",
        "type": "pat",
        "inTemplate": false,
        "runtimePresent": false
      },
      {
        "envKey": "PARTNER_API_TOKEN",
        "vault": "factorywager",
        "item": "Tennis HQ Partner API Token",
        "field": "password",
        "passRef": "pass://factorywager/Tennis HQ Partner API Token/password",
        "label": "Tennis HQ Partner API",
        "color": "#f59e0b",
        "icon": "public/portal/icons/vault/key.svg",
        "glyph": "🔑",
        "type": "token",
        "inTemplate": false,
        "runtimePresent": false
      },
      {
        "envKey": "PLAY_SIGNING_SECRET",
        "vault": "factorywager",
        "item": "Play Signing Secret",
        "field": "password",
        "passRef": "pass://factorywager/Play Signing Secret/password",
        "label": "Play Signing Secret",
        "color": "#10B981",
        "icon": null,
        "glyph": "🔏",
        "type": "secret",
        "inTemplate": true,
        "runtimePresent": false
      },
      {
        "envKey": "PROVISION_ENCRYPTION_KEY",
        "vault": "factorywager",
        "item": "Provision Encryption Key",
        "field": "password",
        "passRef": "pass://factorywager/Provision Encryption Key/password",
        "label": "Provision Key",
        "color": "#8B5CF6",
        "icon": null,
        "glyph": "🔑",
        "type": "key",
        "inTemplate": true,
        "runtimePresent": false
      },
      {
        "envKey": "R2_ACCESS_KEY_ID",
        "vault": "factorywager",
        "item": "R2 bun-secrets bucket",
        "field": "username",
        "passRef": "pass://factorywager/R2 bun-secrets bucket/username",
        "label": "R2 Access Key",
        "color": "#F38020",
        "icon": "public/portal/icons/vault/r2.svg",
        "glyph": "🔑",
        "type": "token",
        "inTemplate": true,
        "runtimePresent": false
      },
      {
        "envKey": "R2_SECRET_ACCESS_KEY",
        "vault": "factorywager",
        "item": "R2 bun-secrets bucket",
        "field": "password",
        "passRef": "pass://factorywager/R2 bun-secrets bucket/password",
        "label": "R2 Secret Key",
        "color": "#F38020",
        "icon": "public/portal/icons/vault/r2.svg",
        "glyph": "🔏",
        "type": "secret",
        "inTemplate": true,
        "runtimePresent": false
      },
      {
        "envKey": "REGISTRY_SECRET",
        "vault": "factorywager",
        "item": "Registry Dev Secret",
        "field": "password",
        "passRef": "pass://factorywager/Registry Dev Secret/password",
        "label": "Registry Dev Secret",
        "color": "#6366F1",
        "icon": null,
        "glyph": "🔏",
        "type": "secret",
        "inTemplate": true,
        "runtimePresent": false
      },
      {
        "envKey": "REPORT_SIGNING_SECRET",
        "vault": "factorywager",
        "item": "Report Signing Secret",
        "field": "password",
        "passRef": "pass://factorywager/Report Signing Secret/password",
        "label": "Report Signing Secret",
        "color": "#10B981",
        "icon": null,
        "glyph": "🔏",
        "type": "secret",
        "inTemplate": true,
        "runtimePresent": false
      },
      {
        "envKey": "SOCKET_API_KEY",
        "vault": "factorywager",
        "item": "Socket API Key",
        "field": "password",
        "passRef": "pass://factorywager/Socket API Key/password",
        "label": "Socket API Key",
        "color": "#7C3AED",
        "icon": "public/portal/icons/vault/key.svg",
        "glyph": "🔑",
        "type": "token",
        "inTemplate": true,
        "runtimePresent": false
      },
      {
        "envKey": "SSH_DEPLOY_KEY",
        "vault": "factorywager",
        "item": "SSH Deploy Key",
        "field": "note",
        "passRef": "pass://factorywager/SSH Deploy Key/note",
        "label": "SSH Deploy Key",
        "color": "#F59E0B",
        "icon": "public/portal/icons/vault/ssh.svg",
        "glyph": "🔐",
        "type": "ssh",
        "inTemplate": false,
        "runtimePresent": false
      },
      {
        "envKey": "TELEGRAM_BOT_FACTORY",
        "vault": "factorywager",
        "item": "Telegram: factorywager_bot",
        "field": "password",
        "passRef": "pass://factorywager/Telegram: factorywager_bot/password",
        "label": "Telegram Bot Token",
        "color": "#26A5E4",
        "icon": "public/portal/icons/vault/telegram.svg",
        "glyph": "🔑",
        "type": "token",
        "inTemplate": true,
        "runtimePresent": false
      },
      {
        "envKey": "TELEGRAM_WEBHOOK_SECRET",
        "vault": "factorywager",
        "item": "Telegram Webhook Secret",
        "field": "password",
        "passRef": "pass://factorywager/Telegram Webhook Secret/password",
        "label": "Telegram Webhook Secret",
        "color": "#26A5E4",
        "icon": null,
        "glyph": "🔏",
        "type": "secret",
        "inTemplate": true,
        "runtimePresent": false
      }
    ],
    "summary": {
      "packagesWithEnv": 3,
      "envKeyCount": 3,
      "vaultedHits": 0,
      "missingTemplate": 1,
      "openVaultActions": 1,
      "inTemplateHits": 2,
      "runtimePresentHits": 1,
      "displayMapped": 18
    }
  },
  "runtime": {
    "root": {
      "templateKeysPresent": 1,
      "templateKeysMissing": 21,
      "missingKeys": [
        "CLOUDFLARE_ACCESS_API_TOKEN",
        "CLOUDFLARE_ACCOUNT_ID",
        "CLOUDFLARE_DNS_API_TOKEN",
        "DOD_ID_ENCRYPTION_KEY",
        "DOD_PROOF_SECRET",
        "FACTORY_WAGER_TOKEN",
        "MCP_LOG_LEVEL",
        "NODE_ENV",
        "PLAY_SIGNING_SECRET",
        "PROVISION_ENCRYPTION_KEY",
        "R2_ACCESS_KEY_ID",
        "R2_ACCOUNT_ID",
        "R2_BUCKET_NAME",
        "R2_SECRET_ACCESS_KEY",
        "REDIS_URL",
        "REGISTRY_SECRET",
        "REPORT_SIGNING_SECRET",
        "SOCKET_API_KEY",
        "TELEGRAM_BOT_FACTORY",
        "TELEGRAM_OPS_CHAT_ID",
        "TELEGRAM_WEBHOOK_SECRET"
      ],
      "missingNeedsInject": [
        "CLOUDFLARE_ACCESS_API_TOKEN",
        "CLOUDFLARE_DNS_API_TOKEN",
        "DOD_ID_ENCRYPTION_KEY",
        "DOD_PROOF_SECRET",
        "FACTORY_WAGER_TOKEN",
        "PLAY_SIGNING_SECRET",
        "PROVISION_ENCRYPTION_KEY",
        "R2_ACCESS_KEY_ID",
        "R2_SECRET_ACCESS_KEY",
        "REGISTRY_SECRET",
        "REPORT_SIGNING_SECRET",
        "SOCKET_API_KEY",
        "TELEGRAM_BOT_FACTORY",
        "TELEGRAM_WEBHOOK_SECRET"
      ],
      "coveredByTemplateDefault": [
        "CLOUDFLARE_ACCOUNT_ID",
        "MCP_LOG_LEVEL",
        "NODE_ENV",
        "R2_ACCOUNT_ID",
        "R2_BUCKET_NAME",
        "REDIS_URL",
        "TELEGRAM_OPS_CHAT_ID"
      ]
    },
    "products": {
      "templateKeysPresent": 1,
      "templateKeysMissing": 1,
      "missingKeys": [
        "SCANNER_PORT"
      ],
      "missingNeedsInject": [],
      "coveredByTemplateDefault": [
        "SCANNER_PORT"
      ]
    },
    "templateKeysPresent": 1,
    "templateKeysMissing": 22,
    "missingKeys": [
      "CLOUDFLARE_ACCESS_API_TOKEN",
      "CLOUDFLARE_ACCOUNT_ID",
      "CLOUDFLARE_DNS_API_TOKEN",
      "DOD_ID_ENCRYPTION_KEY",
      "DOD_PROOF_SECRET",
      "FACTORY_WAGER_TOKEN",
      "MCP_LOG_LEVEL",
      "NODE_ENV",
      "PLAY_SIGNING_SECRET",
      "PROVISION_ENCRYPTION_KEY",
      "R2_ACCESS_KEY_ID",
      "R2_ACCOUNT_ID",
      "R2_BUCKET_NAME",
      "R2_SECRET_ACCESS_KEY",
      "REDIS_URL",
      "REGISTRY_SECRET",
      "REPORT_SIGNING_SECRET",
      "SCANNER_PORT",
      "SOCKET_API_KEY",
      "TELEGRAM_BOT_FACTORY",
      "TELEGRAM_OPS_CHAT_ID",
      "TELEGRAM_WEBHOOK_SECRET"
    ],
    "missingNeedsInject": [
      "CLOUDFLARE_ACCESS_API_TOKEN",
      "CLOUDFLARE_DNS_API_TOKEN",
      "DOD_ID_ENCRYPTION_KEY",
      "DOD_PROOF_SECRET",
      "FACTORY_WAGER_TOKEN",
      "PLAY_SIGNING_SECRET",
      "PROVISION_ENCRYPTION_KEY",
      "R2_ACCESS_KEY_ID",
      "R2_SECRET_ACCESS_KEY",
      "REGISTRY_SECRET",
      "REPORT_SIGNING_SECRET",
      "SOCKET_API_KEY",
      "TELEGRAM_BOT_FACTORY",
      "TELEGRAM_WEBHOOK_SECRET"
    ],
    "coveredByTemplateDefault": [
      "CLOUDFLARE_ACCOUNT_ID",
      "MCP_LOG_LEVEL",
      "NODE_ENV",
      "R2_ACCOUNT_ID",
      "R2_BUCKET_NAME",
      "REDIS_URL",
      "SCANNER_PORT",
      "TELEGRAM_OPS_CHAT_ID"
    ]
  },
  "toml": {
    "totalFiles": 44,
    "totalKeys": 1006,
    "files": [
      {
        "path": "bunfig.toml",
        "keyCount": 22,
        "sampleKeys": [
          "console.depth",
          "run.noOrphans",
          "debug.editor",
          "install.exact",
          "install.saveTextLockfile",
          "install.frozenLockfile",
          "install.scopes.@factorywager.url",
          "install.scopes.@factorywager.token",
          "install.scopes.@factory-wager.url",
          "install.scopes.@factory-wager.token",
          "install.scopes.@factory.url",
          "install.scopes.@factory.token",
          "install.scopes.@factorywager-prod.url",
          "install.scopes.@factorywager-prod.token",
          "test.preload",
          "test.timeout",
          "test.coverageThreshold",
          "test.concurrentTestGlob",
          "test.pathIgnorePatterns",
          "serve.port"
        ],
        "importers": [
          "lib/gate-map.ts:188",
          "lib/console/depth.ts:12",
          "lib/verification/install-env-probes.ts:196",
          "scripts/bun-remove-safe.ts:26",
          "scripts/bake-bunfig.ts:34",
          "scripts/bake-bunfig.ts:166"
        ]
      },
      {
        "path": "config/bun-channels.toml",
        "keyCount": 21,
        "sampleKeys": [
          "schema_version",
          "policy.runtime_channel",
          "policy.mutation",
          "policy.promotion",
          "types.wrapper_package",
          "types.wrapper_channel",
          "types.definitions_package",
          "types.definitions_channel",
          "monitor.os_schedule",
          "monitor.os_timezone",
          "monitor.in_process_timezone",
          "monitor.title",
          "monitor.artifact",
          "monitor.fetch_timeout_ms",
          "sources.stable_api",
          "sources.stable_api_fallback",
          "sources.canary_api",
          "sources.tip_api",
          "sources.rss",
          "sources.atom"
        ],
        "importers": [
          "lib/verification/bun-channel-doctor.ts:231",
          "packages/bun-release-contracts/src/feed.ts:120"
        ]
      },
      {
        "path": "config/images.toml",
        "keyCount": 9,
        "sampleKeys": [
          "images.avatar_size",
          "images.hero_width",
          "images.hero_height",
          "images.hero_quality",
          "images.avatar_format",
          "images.cache_dir",
          "images.source_dir",
          "images.fallback_avatar",
          "images.max_pixels"
        ],
        "importers": [
          "scripts/images-generate.ts:141"
        ]
      },
      {
        "path": "config/onboarding-defaults.toml",
        "keyCount": 6,
        "sampleKeys": [
          "default_expert_sport",
          "default_cut_percentage",
          "default_template_by_source.referral",
          "default_template_by_source.portal",
          "default_template_by_source.telegram",
          "default_template_by_source.promoted"
        ],
        "importers": [
          "lib/operations/onboarding-config.ts:14"
        ]
      },
      {
        "path": "config/operator-research/alerts.toml",
        "keyCount": 5,
        "sampleKeys": [
          "defaults.enabled",
          "defaults.min_arb_edge_pct",
          "defaults.min_move_pct",
          "defaults.min_delay_ms",
          "rules"
        ],
        "importers": [
          "lib/operator-research/matching/alerts.ts:37",
          "lib/operator-research/matching/alerts.ts:385"
        ]
      },
      {
        "path": "config/operator-research/leagues.toml",
        "keyCount": 1,
        "sampleKeys": [
          "leagues"
        ],
        "importers": [
          "lib/operator-research/normalization/seed.ts:53"
        ]
      },
      {
        "path": "config/operator-research/market-types.toml",
        "keyCount": 1,
        "sampleKeys": [
          "market_types"
        ],
        "importers": [
          "lib/operator-research/normalization/seed.ts:120"
        ]
      },
      {
        "path": "config/operator-research/model-harness.toml",
        "keyCount": 6,
        "sampleKeys": [
          "schema_version",
          "flags.circuitOnlyWeights",
          "flags.latencyDiagnosticsOnly",
          "flags.environmentDiagnosticsOnly",
          "flags.rejectSyntheticWeightUpdates",
          "flags.snapshotContracts"
        ],
        "importers": [
          "lib/operator-research/model-contract-files.ts:83",
          "lib/operator-research/model-contract-files.ts:365"
        ]
      },
      {
        "path": "config/operator-research/teams.toml",
        "keyCount": 1,
        "sampleKeys": [
          "teams"
        ],
        "importers": [
          "lib/operator-research/normalization/seed.ts:80"
        ]
      },
      {
        "path": "config/operator-research/tier-weights.toml",
        "keyCount": 6,
        "sampleKeys": [
          "weights.1",
          "weights.2",
          "weights.3",
          "smart_money.min_tier1_move_pct",
          "smart_money.min_lag_ms",
          "smart_money.score_threshold"
        ],
        "importers": [
          "lib/operator-research/matching/smart-money.ts:25"
        ]
      },
      {
        "path": "config/operators/bet365.toml",
        "keyCount": 14,
        "sampleKeys": [
          "operator.id",
          "operator.name",
          "operator.host",
          "operator.url",
          "operator.identity",
          "operator.geo",
          "operator.markets",
          "operator.lifecycle",
          "operator.expected_stack",
          "operator.probe_paths",
          "scrape.agent_id",
          "scrape.live_url",
          "scrape.html",
          "scrape.jurisdiction"
        ],
        "importers": []
      },
      {
        "path": "config/operators/betfair.toml",
        "keyCount": 10,
        "sampleKeys": [
          "operator.id",
          "operator.name",
          "operator.host",
          "operator.url",
          "operator.identity",
          "operator.geo",
          "operator.markets",
          "operator.lifecycle",
          "operator.expected_stack",
          "operator.probe_paths"
        ],
        "importers": []
      },
      {
        "path": "config/operators/betmgm.toml",
        "keyCount": 14,
        "sampleKeys": [
          "operator.id",
          "operator.name",
          "operator.host",
          "operator.url",
          "operator.identity",
          "operator.geo",
          "operator.markets",
          "operator.lifecycle",
          "operator.expected_stack",
          "operator.probe_paths",
          "scrape.agent_id",
          "scrape.live_url",
          "scrape.html",
          "scrape.jurisdiction"
        ],
        "importers": []
      },
      {
        "path": "config/operators/betonline.toml",
        "keyCount": 10,
        "sampleKeys": [
          "operator.id",
          "operator.name",
          "operator.host",
          "operator.url",
          "operator.identity",
          "operator.geo",
          "operator.markets",
          "operator.lifecycle",
          "operator.expected_stack",
          "operator.probe_paths"
        ],
        "importers": []
      },
      {
        "path": "config/operators/betrivers.toml",
        "keyCount": 14,
        "sampleKeys": [
          "operator.id",
          "operator.name",
          "operator.host",
          "operator.url",
          "operator.identity",
          "operator.geo",
          "operator.markets",
          "operator.lifecycle",
          "operator.expected_stack",
          "operator.probe_paths",
          "scrape.agent_id",
          "scrape.live_url",
          "scrape.html",
          "scrape.jurisdiction"
        ],
        "importers": []
      },
      {
        "path": "config/operators/betway.toml",
        "keyCount": 10,
        "sampleKeys": [
          "operator.id",
          "operator.name",
          "operator.host",
          "operator.url",
          "operator.identity",
          "operator.geo",
          "operator.markets",
          "operator.lifecycle",
          "operator.expected_stack",
          "operator.probe_paths"
        ],
        "importers": []
      },
      {
        "path": "config/operators/bovada.toml",
        "keyCount": 10,
        "sampleKeys": [
          "operator.id",
          "operator.name",
          "operator.host",
          "operator.url",
          "operator.identity",
          "operator.geo",
          "operator.markets",
          "operator.lifecycle",
          "operator.expected_stack",
          "operator.probe_paths"
        ],
        "importers": []
      },
      {
        "path": "config/operators/caesars.toml",
        "keyCount": 14,
        "sampleKeys": [
          "operator.id",
          "operator.name",
          "operator.host",
          "operator.url",
          "operator.identity",
          "operator.geo",
          "operator.markets",
          "operator.lifecycle",
          "operator.expected_stack",
          "operator.probe_paths",
          "scrape.agent_id",
          "scrape.live_url",
          "scrape.html",
          "scrape.jurisdiction"
        ],
        "importers": []
      },
      {
        "path": "config/operators/circa.toml",
        "keyCount": 14,
        "sampleKeys": [
          "operator.id",
          "operator.name",
          "operator.host",
          "operator.url",
          "operator.identity",
          "operator.geo",
          "operator.markets",
          "operator.lifecycle",
          "operator.expected_stack",
          "operator.probe_paths",
          "scrape.agent_id",
          "scrape.live_url",
          "scrape.html",
          "scrape.jurisdiction"
        ],
        "importers": []
      },
      {
        "path": "config/operators/cloudbet.toml",
        "keyCount": 10,
        "sampleKeys": [
          "operator.id",
          "operator.name",
          "operator.host",
          "operator.url",
          "operator.identity",
          "operator.geo",
          "operator.markets",
          "operator.lifecycle",
          "operator.expected_stack",
          "operator.probe_paths"
        ],
        "importers": []
      },
      {
        "path": "config/operators/draftkings.toml",
        "keyCount": 16,
        "sampleKeys": [
          "operator.id",
          "operator.name",
          "operator.host",
          "operator.url",
          "operator.identity",
          "operator.geo",
          "operator.markets",
          "operator.lifecycle",
          "operator.expected_stack",
          "operator.probe_paths",
          "scrape.agent_id",
          "scrape.live_url",
          "scrape.html",
          "scrape.html_url",
          "scrape.html_fixture",
          "scrape.jurisdiction"
        ],
        "importers": []
      },
      {
        "path": "config/operators/espnbet.toml",
        "keyCount": 14,
        "sampleKeys": [
          "operator.id",
          "operator.name",
          "operator.host",
          "operator.url",
          "operator.identity",
          "operator.geo",
          "operator.markets",
          "operator.lifecycle",
          "operator.expected_stack",
          "operator.probe_paths",
          "scrape.agent_id",
          "scrape.live_url",
          "scrape.html",
          "scrape.jurisdiction"
        ],
        "importers": []
      },
      {
        "path": "config/operators/fanatics.toml",
        "keyCount": 14,
        "sampleKeys": [
          "operator.id",
          "operator.name",
          "operator.host",
          "operator.url",
          "operator.identity",
          "operator.geo",
          "operator.markets",
          "operator.lifecycle",
          "operator.expected_stack",
          "operator.probe_paths",
          "scrape.agent_id",
          "scrape.live_url",
          "scrape.html",
          "scrape.jurisdiction"
        ],
        "importers": []
      },
      {
        "path": "config/operators/fanduel.toml",
        "keyCount": 16,
        "sampleKeys": [
          "operator.id",
          "operator.name",
          "operator.host",
          "operator.url",
          "operator.identity",
          "operator.geo",
          "operator.markets",
          "operator.lifecycle",
          "operator.expected_stack",
          "operator.probe_paths",
          "scrape.agent_id",
          "scrape.live_url",
          "scrape.html",
          "scrape.html_url",
          "scrape.html_fixture",
          "scrape.jurisdiction"
        ],
        "importers": []
      },
      {
        "path": "config/operators/hardrock.toml",
        "keyCount": 14,
        "sampleKeys": [
          "operator.id",
          "operator.name",
          "operator.host",
          "operator.url",
          "operator.identity",
          "operator.geo",
          "operator.markets",
          "operator.lifecycle",
          "operator.expected_stack",
          "operator.probe_paths",
          "scrape.agent_id",
          "scrape.live_url",
          "scrape.html",
          "scrape.jurisdiction"
        ],
        "importers": []
      },
      {
        "path": "config/operators/pinnacle.toml",
        "keyCount": 10,
        "sampleKeys": [
          "operator.id",
          "operator.name",
          "operator.host",
          "operator.url",
          "operator.identity",
          "operator.geo",
          "operator.markets",
          "operator.lifecycle",
          "operator.expected_stack",
          "operator.probe_paths"
        ],
        "importers": []
      },
      {
        "path": "config/operators/pointsbet.toml",
        "keyCount": 10,
        "sampleKeys": [
          "operator.id",
          "operator.name",
          "operator.host",
          "operator.url",
          "operator.identity",
          "operator.geo",
          "operator.markets",
          "operator.lifecycle",
          "operator.expected_stack",
          "operator.probe_paths"
        ],
        "importers": []
      },
      {
        "path": "config/operators/prizepicks.toml",
        "keyCount": 10,
        "sampleKeys": [
          "operator.id",
          "operator.name",
          "operator.host",
          "operator.url",
          "operator.identity",
          "operator.geo",
          "operator.markets",
          "operator.lifecycle",
          "operator.expected_stack",
          "operator.probe_paths"
        ],
        "importers": []
      },
      {
        "path": "config/operators/smarkets.toml",
        "keyCount": 10,
        "sampleKeys": [
          "operator.id",
          "operator.name",
          "operator.host",
          "operator.url",
          "operator.identity",
          "operator.geo",
          "operator.markets",
          "operator.lifecycle",
          "operator.expected_stack",
          "operator.probe_paths"
        ],
        "importers": []
      },
      {
        "path": "config/operators/stake.toml",
        "keyCount": 10,
        "sampleKeys": [
          "operator.id",
          "operator.name",
          "operator.host",
          "operator.url",
          "operator.identity",
          "operator.geo",
          "operator.markets",
          "operator.lifecycle",
          "operator.expected_stack",
          "operator.probe_paths"
        ],
        "importers": []
      },
      {
        "path": "config/operators/thunderpick.toml",
        "keyCount": 10,
        "sampleKeys": [
          "operator.id",
          "operator.name",
          "operator.host",
          "operator.url",
          "operator.identity",
          "operator.geo",
          "operator.markets",
          "operator.lifecycle",
          "operator.expected_stack",
          "operator.probe_paths"
        ],
        "importers": []
      },
      {
        "path": "config/operators/underdog.toml",
        "keyCount": 10,
        "sampleKeys": [
          "operator.id",
          "operator.name",
          "operator.host",
          "operator.url",
          "operator.identity",
          "operator.geo",
          "operator.markets",
          "operator.lifecycle",
          "operator.expected_stack",
          "operator.probe_paths"
        ],
        "importers": []
      },
      {
        "path": "config/partner-profiles/ASH.toml",
        "keyCount": 78,
        "sampleKeys": [
          "meta.templateId",
          "meta.name",
          "meta.version",
          "meta.source",
          "identity.code",
          "identity.callSign",
          "identity.status",
          "lineage.parent",
          "lineage.expert",
          "lineage.cutPct",
          "lifecycle.status",
          "lifecycle.phase",
          "telegram.chatId",
          "telegram.topics.general",
          "telegram.topics.ops",
          "telegram.topics.alerts",
          "telegram.topics.liquidity",
          "telegram.topics.accounting",
          "jurisdiction.type",
          "jurisdiction.allowedStates"
        ],
        "importers": []
      },
      {
        "path": "config/partner-profiles/BIL.toml",
        "keyCount": 76,
        "sampleKeys": [
          "meta.templateId",
          "meta.name",
          "meta.version",
          "meta.source",
          "identity.code",
          "identity.callSign",
          "identity.status",
          "lineage.parent",
          "lineage.expert",
          "lineage.cutPct",
          "lifecycle.status",
          "lifecycle.phase",
          "telegram.chatId",
          "telegram.topics.general",
          "telegram.topics.ops",
          "telegram.topics.alerts",
          "telegram.topics.liquidity",
          "telegram.topics.accounting",
          "jurisdiction.type",
          "jurisdiction.allowedStates"
        ],
        "importers": []
      },
      {
        "path": "config/partner-profiles/NOV.toml",
        "keyCount": 88,
        "sampleKeys": [
          "meta.templateId",
          "meta.name",
          "meta.version",
          "meta.source",
          "identity.code",
          "identity.callSign",
          "identity.status",
          "lineage.parent",
          "lineage.expert",
          "lineage.cutPct",
          "lifecycle.status",
          "lifecycle.phase",
          "telegram.chatId",
          "telegram.topics.general",
          "telegram.topics.ops",
          "telegram.topics.alerts",
          "telegram.topics.liquidity",
          "telegram.topics.accounting",
          "jurisdiction.type",
          "jurisdiction.allowedStates"
        ],
        "importers": []
      },
      {
        "path": "config/partner-profiles/SPEN.toml",
        "keyCount": 124,
        "sampleKeys": [
          "meta.templateId",
          "meta.name",
          "meta.version",
          "meta.source",
          "identity.code",
          "identity.callSign",
          "identity.status",
          "lineage.parent",
          "lineage.expert",
          "lineage.cutPct",
          "lifecycle.status",
          "lifecycle.phase",
          "telegram.chatId",
          "telegram.topics.general",
          "telegram.topics.ops",
          "telegram.topics.alerts",
          "telegram.topics.liquidity",
          "telegram.topics.accounting",
          "jurisdiction.type",
          "jurisdiction.allowedStates"
        ],
        "importers": []
      },
      {
        "path": "config/partner-templates/default-prospect.toml",
        "keyCount": 15,
        "sampleKeys": [
          "meta.template_id",
          "meta.name",
          "meta.description",
          "meta.version",
          "sor.eligible_tiers",
          "sor.max_exposure_per_signal",
          "sor.max_daily_exposure",
          "sor.max_single_bet",
          "sor.steam_allowed",
          "sor.arb_allowed",
          "sor.clv_allowed",
          "sor.manual_allowed",
          "sor.predictive_allowed",
          "sor.require_opsec_green",
          "sor.opsec_score_max"
        ],
        "importers": [
          "lib/telegram/templates/registry.ts:161",
          "lib/telegram/templates/registry.ts:288",
          "lib/operations/ops-loop-fixture.ts:35",
          "lib/operations/ops-loop-fixture.ts:98",
          "lib/operations/onboarding-config.ts:12",
          "lib/operations/partner-profile-bridge.ts:36"
        ]
      },
      {
        "path": "config/partner-templates/partner-active.toml",
        "keyCount": 15,
        "sampleKeys": [
          "meta.template_id",
          "meta.name",
          "meta.description",
          "meta.version",
          "sor.eligible_tiers",
          "sor.max_exposure_per_signal",
          "sor.max_daily_exposure",
          "sor.max_single_bet",
          "sor.steam_allowed",
          "sor.arb_allowed",
          "sor.clv_allowed",
          "sor.manual_allowed",
          "sor.predictive_allowed",
          "sor.require_opsec_green",
          "sor.opsec_score_max"
        ],
        "importers": [
          "lib/operations/onboarding-config.ts:38",
          "lib/partner-profile/register.ts:134",
          "tools/migrate-seat-partners-to-profiles.ts:124"
        ]
      },
      {
        "path": "config/scrape-agents.toml",
        "keyCount": 9,
        "sampleKeys": [
          "defaults.jurisdiction",
          "defaults.json_timeout_ms",
          "defaults.html_timeout_ms",
          "webview.timeout_ms",
          "webview.settle_ms",
          "webview.width",
          "webview.height",
          "cron.schedule",
          "cron.title"
        ],
        "importers": [
          "lib/operations/scrapers/webview-html.ts:8",
          "lib/operations/scrapers/scrape-agents-config.ts:10",
          "lib/operations/scrapers/scrape-agents-config.ts:36",
          "lib/operations/scrapers/scrape-cron.ts:33"
        ]
      },
      {
        "path": "config/surfaces.toml",
        "keyCount": 117,
        "sampleKeys": [
          "surfaces.apex.host",
          "surfaces.apex.dnsTarget",
          "surfaces.apex.backend",
          "surfaces.apex.status",
          "surfaces.apex.protocol",
          "surfaces.apex.access",
          "surfaces.apex.note",
          "surfaces.www.host",
          "surfaces.www.dnsTarget",
          "surfaces.www.backend",
          "surfaces.www.status",
          "surfaces.www.protocol",
          "surfaces.www.access",
          "surfaces.www.note",
          "surfaces.score.host",
          "surfaces.score.dnsTarget",
          "surfaces.score.backend",
          "surfaces.score.status",
          "surfaces.score.protocol",
          "surfaces.score.access"
        ],
        "importers": [
          "scripts/bake-surfaces.ts:54",
          "tools/domain-sweep.ts:201",
          "tools/brand-status.ts:83"
        ]
      },
      {
        "path": "config/vault-map.toml",
        "keyCount": 130,
        "sampleKeys": [
          "metadata.version",
          "metadata.generated",
          "metadata.description",
          "conventions.naming",
          "conventions.color_api",
          "conventions.icon_path",
          "env.R2_ACCESS_KEY_ID.vault",
          "env.R2_ACCESS_KEY_ID.item",
          "env.R2_ACCESS_KEY_ID.field",
          "env.R2_ACCESS_KEY_ID.label",
          "env.R2_ACCESS_KEY_ID.color",
          "env.R2_ACCESS_KEY_ID.icon",
          "env.R2_ACCESS_KEY_ID.type",
          "env.R2_SECRET_ACCESS_KEY.vault",
          "env.R2_SECRET_ACCESS_KEY.item",
          "env.R2_SECRET_ACCESS_KEY.field",
          "env.R2_SECRET_ACCESS_KEY.label",
          "env.R2_SECRET_ACCESS_KEY.color",
          "env.R2_SECRET_ACCESS_KEY.icon",
          "env.R2_SECRET_ACCESS_KEY.type"
        ],
        "importers": [
          "lib/security/vault-map.ts:95",
          "lib/security/vault-map.ts:343",
          "tools/bake-tennis-agent-auth.ts:17",
          "tools/lib/portal-cli-scanner.ts:57",
          "lib/http/portal-weave.ts:572",
          "lib/security/vault-map.ts:53"
        ]
      },
      {
        "path": "lib/shared/bunfig.toml",
        "keyCount": 7,
        "sampleKeys": [
          "install.scopes.@factorywager.token",
          "install.scopes.@factorywager.url",
          "install.scopes.@duoplus.token",
          "install.scopes.@duoplus.url",
          "install.exact",
          "install.registry",
          "publish.registry"
        ],
        "importers": [
          "lib/gate-map.ts:188",
          "lib/verification/install-env-probes.ts:196",
          "scripts/bun-remove-safe.ts:26",
          "scripts/bake-bunfig.ts:34",
          "scripts/bake-bunfig.ts:166",
          "scripts/pre-commit-harness.ts:116"
        ]
      },
      {
        "path": "reasonix.toml",
        "keyCount": 1,
        "sampleKeys": [
          "config_version"
        ],
        "importers": []
      },
      {
        "path": "wrangler.toml",
        "keyCount": 4,
        "sampleKeys": [
          "name",
          "compatibility_date",
          "vars.REGISTRY_CORS_ORIGINS",
          "r2_buckets"
        ],
        "importers": [
          "scripts/bake-surfaces.ts:205",
          "scripts/repo-hygiene.ts:127"
        ]
      }
    ],
    "orphanFiles": [
      "config/operators/bet365.toml",
      "config/operators/betfair.toml",
      "config/operators/betmgm.toml",
      "config/operators/betonline.toml",
      "config/operators/betrivers.toml",
      "config/operators/betway.toml",
      "config/operators/bovada.toml",
      "config/operators/caesars.toml",
      "config/operators/circa.toml",
      "config/operators/cloudbet.toml",
      "config/operators/draftkings.toml",
      "config/operators/espnbet.toml",
      "config/operators/fanatics.toml",
      "config/operators/fanduel.toml",
      "config/operators/hardrock.toml",
      "config/operators/pinnacle.toml",
      "config/operators/pointsbet.toml",
      "config/operators/prizepicks.toml",
      "config/operators/smarkets.toml",
      "config/operators/stake.toml",
      "config/operators/thunderpick.toml",
      "config/operators/underdog.toml",
      "config/partner-profiles/ASH.toml",
      "config/partner-profiles/BIL.toml",
      "config/partner-profiles/NOV.toml",
      "config/partner-profiles/SPEN.toml",
      "reasonix.toml"
    ],
    "parseErrors": []
  },
  "partnersAccountsPlane": {
    "generatedAt": "2026-08-17T22:08:09.481Z",
    "sources": {
      "partnersOps": "/registry/partners-ops.json",
      "handshake": "/registry/telegram-handshake.json",
      "vaultMap": "/registry/vault-map.json"
    },
    "sharedEnvBindings": [
      {
        "envKey": "PARTNER_API_TOKEN",
        "role": "partner-api",
        "consumers": [
          "tennis-hq",
          "partners-board"
        ],
        "passRef": "pass://factorywager/Tennis HQ Partner API Token/password",
        "inVaultMap": true,
        "inTemplate": false,
        "runtimePresent": false
      },
      {
        "envKey": "TELEGRAM_BOT_FACTORY",
        "role": "telegram-bot",
        "consumers": [
          "partners-board",
          "factory-bot",
          "seat-desk"
        ],
        "passRef": "pass://factorywager/Telegram: factorywager_bot/password",
        "inVaultMap": true,
        "inTemplate": true,
        "runtimePresent": false
      },
      {
        "envKey": "TELEGRAM_WEBHOOK_SECRET",
        "role": "webhook",
        "consumers": [
          "factory-bot",
          "partners-board"
        ],
        "passRef": "pass://factorywager/Telegram Webhook Secret/password",
        "inVaultMap": true,
        "inTemplate": true,
        "runtimePresent": false
      },
      {
        "envKey": "TELEGRAM_BOT_TOKEN",
        "role": "telegram-bot",
        "consumers": [
          "factory-bot"
        ],
        "passRef": null,
        "inVaultMap": false,
        "inTemplate": false,
        "runtimePresent": false
      },
      {
        "envKey": "FACTORY_WAGER_TOKEN",
        "role": "signing",
        "consumers": [
          "tennis-hq",
          "partners-board"
        ],
        "passRef": "pass://factorywager/FactoryWager Registry Token/password",
        "inVaultMap": true,
        "inTemplate": true,
        "runtimePresent": false
      }
    ],
    "partners": [
      {
        "partnerCode": "ASH",
        "callSign": "ASH-001",
        "phase": "operator_ready",
        "handshakeOk": true,
        "telegramChatLinked": true,
        "accountsTotal": 2,
        "accountsReady": 1,
        "accountsDeferred": 1,
        "accountsBlocked": 0,
        "outsReady": 1,
        "outsTotal": 2,
        "outs": [
          {
            "outId": "out-ASH-1",
            "bookSlug": "hard-rock-florida",
            "bookName": "Hard Rock Florida",
            "status": "ready",
            "usernameLabel": "ash1.staging",
            "href": "/portal/account/?partner=ASH"
          },
          {
            "outId": "out-ASH-2",
            "bookSlug": "hard-rock-florida",
            "bookName": "Hard Rock Florida",
            "status": "deferred",
            "usernameLabel": "—",
            "href": "/portal/account/?partner=ASH"
          }
        ],
        "partnersHref": "/portal/partners/",
        "accountHref": "/portal/account/?partner=ASH"
      },
      {
        "partnerCode": "BIL",
        "callSign": "BIL-001",
        "phase": "operator_ready",
        "handshakeOk": true,
        "telegramChatLinked": true,
        "accountsTotal": 1,
        "accountsReady": 1,
        "accountsDeferred": 0,
        "accountsBlocked": 0,
        "outsReady": 1,
        "outsTotal": 1,
        "outs": [
          {
            "outId": "out-BIL-1",
            "bookSlug": "partner-book-tbd",
            "bookName": "Partner book TBD",
            "status": "ready",
            "usernameLabel": "bil1.staging",
            "href": "/portal/account/?partner=BIL"
          }
        ],
        "partnersHref": "/portal/partners/",
        "accountHref": "/portal/account/?partner=BIL"
      },
      {
        "partnerCode": "NOV",
        "callSign": "NOV-001",
        "phase": "operator_ready",
        "handshakeOk": true,
        "telegramChatLinked": true,
        "accountsTotal": 2,
        "accountsReady": 1,
        "accountsDeferred": 1,
        "accountsBlocked": 0,
        "outsReady": 1,
        "outsTotal": 2,
        "outs": [
          {
            "outId": "out-NOV-1",
            "bookSlug": "hard-rock-florida",
            "bookName": "Hard Rock Florida",
            "status": "ready",
            "usernameLabel": "nov1.staging",
            "href": "/portal/account/?partner=NOV"
          },
          {
            "outId": "out-NOV-2",
            "bookSlug": "southfl-pph-desk",
            "bookName": "SouthFL PPH Desk",
            "status": "deferred",
            "usernameLabel": "—",
            "href": "/portal/account/?partner=NOV"
          }
        ],
        "partnersHref": "/portal/partners/",
        "accountHref": "/portal/account/?partner=NOV"
      },
      {
        "partnerCode": "SPEN",
        "callSign": "SPEN-001",
        "phase": "operator_ready",
        "handshakeOk": true,
        "telegramChatLinked": true,
        "accountsTotal": 5,
        "accountsReady": 4,
        "accountsDeferred": 1,
        "accountsBlocked": 0,
        "outsReady": 4,
        "outsTotal": 5,
        "outs": [
          {
            "outId": "out-SPEN-1",
            "bookSlug": "parlay21-com",
            "bookName": "parlay21.com",
            "status": "ready",
            "usernameLabel": "vc2013",
            "href": "/portal/account/?partner=SPEN"
          },
          {
            "outId": "out-SPEN-2",
            "bookSlug": "lonestarwagering-com",
            "bookName": "lonestarwagering.com",
            "status": "ready",
            "usernameLabel": "Yungg1",
            "href": "/portal/account/?partner=SPEN"
          },
          {
            "outId": "out-SPEN-3",
            "bookSlug": "action92-com",
            "bookName": "action92.com",
            "status": "ready",
            "usernameLabel": "action92",
            "href": "/portal/account/?partner=SPEN"
          },
          {
            "outId": "out-SPEN-4",
            "bookSlug": "betvegas23-com",
            "bookName": "betvegas23.com",
            "status": "ready",
            "usernameLabel": "Henry019",
            "href": "/portal/account/?partner=SPEN"
          },
          {
            "outId": "out-SPEN-5",
            "bookSlug": "orange777",
            "bookName": "Orange777",
            "status": "deferred",
            "usernameLabel": "dmk1064",
            "href": "/portal/account/?partner=SPEN"
          }
        ],
        "partnersHref": "/portal/partners/",
        "accountHref": "/portal/account/?partner=SPEN"
      }
    ],
    "summary": {
      "partnerCount": 4,
      "accountsTotal": 10,
      "accountsReady": 7,
      "outsTotal": 10,
      "outsReady": 7,
      "sharedEnvMissing": 5,
      "partnersMissingHandshake": 0,
      "partnersMissingTelegram": 0
    }
  },
  "summary": {
    "ownerCount": 60,
    "packageTouchedKeys": 5,
    "multiPlaneKeys": 36,
    "rootRuntimeMissing": 21,
    "rootRuntimeNeedsInject": 14,
    "rootCoveredByDefault": 7,
    "defaultsIssueCount": 2,
    "partnerCount": 4,
    "partnerAccountsReady": 7,
    "partnerSharedEnvMissing": 5
  }
}
