# Sunshine-Performance-Reporting — operating profile

Repository: webhostingdoo/Sunshine-Performance-Reporting
Source revision: 07de262bfcbfe8a448a5ac23ca809734278ab15e
HQ revision: bc9bd4733aecd8862c6a00e7db10853d2f3fc245
Scanned: 2026-10-23T16:21:07.581Z
Result: scanned

Static source evidence only. Runtime health, credential provisioning and current use are not verified. Secret values and raw source excerpts are excluded.

## Runtime & build

- **@clerk/backend** — dependencies: 3.21.0. Declaration only; installation is not checked. (direct)
  - [package.json:41](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L41) · declared-config
- **@floating-ui/dom** — dependencies: 1.7.4. Declaration only; installation is not checked. (direct)
  - [package.json:42](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L42) · declared-config
- **@sentry/browser** — dependencies: 10.75.2. Declaration only; installation is not checked. (direct)
  - [package.json:43](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L43) · declared-config
- **@sentry/node-core** — dependencies: 10.75.2. Declaration only; installation is not checked. (direct)
  - [package.json:44](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L44) · declared-config
- **@tanstack/table-core** — dependencies: 8.21.3. Declaration only; installation is not checked. (direct)
  - [package.json:45](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L45) · declared-config
- **@vercel/functions** — dependencies: 3.10.1. Declaration only; installation is not checked. (direct)
  - [package.json:46](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L46) · declared-config
- **Browser document** — HTML source is present. Browser compatibility, hosting and live data access are unverified. (direct)
  - [src/command/shell.html:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/command/shell.html#L1) · observed-code
  - [src/executive/shell.html:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/executive/shell.html#L1) · observed-code
  - [src/manager/shell.html:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/manager/shell.html#L1) · observed-code
  - [src/shell.html:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/shell.html#L1) · observed-code
  - [src/story/shell.html:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/story/shell.html#L1) · observed-code
- **csv-parse** — dependencies: 7.0.3. Declaration only; installation is not checked. (direct)
  - [package.json:47](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L47) · declared-config
- **d3-geo** — dependencies: 3.1.1. Declaration only; installation is not checked. (direct)
  - [package.json:48](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L48) · declared-config
- **embedded-postgres** — devDependencies: version not summarized. Declaration only; installation is not checked. (direct)
  - [package.json:54](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L54) · declared-config
- **esbuild** — devDependencies: 0.28.2. Declaration only; installation is not checked. (direct)
  - [package.json:55](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L55) · declared-config
- **node engine** — Declared compatibility: 22.x. (direct)
  - [package.json:6](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L6) · declared-config
- **pg** — dependencies: 8.23.1. Declaration only; installation is not checked. (direct)
  - [package.json:49](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L49) · declared-config
- **playwright** — devDependencies: 1.58.2. Declaration only; installation is not checked. (direct)
  - [package.json:56](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L56) · declared-config
- **prettier** — devDependencies: 3.9.9. Declaration only; installation is not checked. (direct)
  - [package.json:57](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L57) · declared-config
- **supabase** — devDependencies: 2.118.0. Declaration only; installation is not checked. (direct)
  - [package.json:58](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L58) · declared-config
- **topojson-client** — dependencies: 3.1.0. Declaration only; installation is not checked. (direct)
  - [package.json:50](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L50) · declared-config
- **us-atlas** — dependencies: 3.0.1. Declaration only; installation is not checked. (direct)
  - [package.json:51](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L51) · declared-config

To establish: Which runtime versions, build steps and operating systems are required?

## Providers & services

- **Clerk** — Integration signal in source. Account ownership, provisioning and live connectivity are unverified. (inferred)
  - [package.json:41](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L41) · declared-config
  - [server/auth.mjs:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/server/auth.mjs#L1) · observed-code
- **Invoca** — Mentioned in source documentation; implementation and account access need confirmation. (inferred)
  - [DECISIONS.md:27](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/DECISIONS.md#L27) · source-reported
  - [README.md:11](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/README.md#L11) · source-reported
- **Sentry** — Integration signal in source. Account ownership, provisioning and live connectivity are unverified. (inferred)
  - [package.json:43](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L43) · declared-config
- **Supabase** — Mentioned in source documentation; implementation and account access need confirmation. (inferred)
  - [DECISIONS.md:26](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/DECISIONS.md#L26) · source-reported
  - [package.json:58](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L58) · declared-config

To establish: Which provider accounts, plans and service owners are required?

## Secrets & configuration

- **EXECUTIVE\_SCREENSHOT** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [tests/executive-browser.mjs:503](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/executive-browser.mjs#L503) · observed-code
  - [tests/executive-browser.mjs:505](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/executive-browser.mjs#L505) · observed-code
- **GITHUB\_EVENT\_NAME** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [scripts/ci-scope.mjs:90](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/ci-scope.mjs#L90) · observed-code
- **GITHUB\_EVENT\_PATH** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [scripts/ci-scope.mjs:86](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/ci-scope.mjs#L86) · observed-code
- **GITHUB\_OUTPUT** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [scripts/ci-scope.mjs:92](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/ci-scope.mjs#L92) · observed-code
  - [scripts/ci-scope.mjs:93](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/ci-scope.mjs#L93) · observed-code
- **NEXT\_PUBLIC\_CLERK\_PUBLISHABLE\_KEY** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. Client-visible prefix: review what may be exposed. (direct)
  - [api/index.mjs:20](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/api/index.mjs#L20) · observed-code
  - [server/hosted-index.mjs:14](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/server/hosted-index.mjs#L14) · observed-code
  - [tests/executive-atlas-browser.mjs:52](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/executive-atlas-browser.mjs#L52) · observed-code
  - [tests/executive-browser.mjs:8](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/executive-browser.mjs#L8) · observed-code
  - [tests/executive-campaigns-browser.mjs:9](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/executive-campaigns-browser.mjs#L9) · observed-code
  - [tests/executive-ux-browser.mjs:23](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/executive-ux-browser.mjs#L23) · observed-code
  - [tests/hosted-refresh-browser.mjs:9](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/hosted-refresh-browser.mjs#L9) · observed-code
  - [tests/security-browser.mjs:74](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/security-browser.mjs#L74) · observed-code
- **PLAYWRIGHT\_BROWSERS\_PATH** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [tests/browser-support.mjs:9](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/browser-support.mjs#L9) · observed-code
  - [tests/browser-support.mjs:10](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/browser-support.mjs#L10) · observed-code
- **PORT** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [scripts/preview-command.mjs:11](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/preview-command.mjs#L11) · observed-code
- **SENTRY\_DSN** — Secret-like name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [tests/monitoring-browser.mjs:9](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/monitoring-browser.mjs#L9) · observed-code
- **SENTRY\_ENVIRONMENT** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [tests/monitoring-browser.mjs:11](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/monitoring-browser.mjs#L11) · observed-code
- **SENTRY\_RELEASE** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [tests/monitoring-browser.mjs:10](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/monitoring-browser.mjs#L10) · observed-code
- **SPR\_TEST\_BROWSER\_CHANNEL** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [tests/browser-support.mjs:12](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/browser-support.mjs#L12) · observed-code
- **SPR\_TEST\_DATABASE\_PASSWORD** — Secret-like name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [scripts/verify-v6.mjs:13](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/verify-v6.mjs#L13) · observed-code
  - [scripts/verify-v6.mjs:19](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/verify-v6.mjs#L19) · observed-code
- **SPR\_TEST\_DATABASE\_PORT** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [scripts/verify-v6.mjs:7](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/verify-v6.mjs#L7) · observed-code
- **SPR\_TEST\_DATABASE\_URL** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [scripts/verify-v6.mjs:20](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/verify-v6.mjs#L20) · observed-code
- **STORY\_SCREENSHOT** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [tests/story-browser.mjs:205](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/story-browser.mjs#L205) · observed-code
  - [tests/story-browser.mjs:207](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/story-browser.mjs#L207) · observed-code

To establish: Where are these named requirements provisioned, and who owns rotation? Values are never collected.

## Schedules & background work

- **In-process timer** — Timer reference; this does not establish a durable or currently running job. (inferred)
  - [src/command/host.js:825](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/command/host.js#L825) · observed-code
  - [src/executive/host.js:84](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/executive/host.js#L84) · observed-code
  - [src/hosted-shell.js:52](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/hosted-shell.js#L52) · observed-code
- **Vercel cron: \*/5 \* \* \* \*** — Declared schedule for /api/command-prewarm. Enabled state, timezone and execution history are unverified. (direct)
  - [vercel.json:26](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/vercel.json#L26) · declared-config
- **Guard-name candidate: SENTRY\_ENABLED** — A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified. (inferred)
  - [server/monitoring.mjs:22](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/server/monitoring.mjs#L22) · observed-code
- **Guard-name candidate: SPR\_COMMAND\_CRON\_MONITOR\_ENABLED** — A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified. (inferred)
  - [server/monitoring.mjs:96](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/server/monitoring.mjs#L96) · observed-code

To establish: Which declared jobs are enabled, in which environment, with what timezone and retry policy?

## APIs & webhooks

- **Invoca** — Mentioned in source documentation; implementation and account access need confirmation. (inferred)
  - [DECISIONS.md:27](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/DECISIONS.md#L27) · source-reported
  - [README.md:11](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/README.md#L11) · source-reported
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [api/command.mjs:53](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/api/command.mjs#L53) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [api/command.mjs:172](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/api/command.mjs#L172) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [api/command.mjs:178](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/api/command.mjs#L178) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [api/command.mjs:181](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/api/command.mjs#L181) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [api/executive.mjs:44](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/api/executive.mjs#L44) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [api/executive.mjs:64](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/api/executive.mjs#L64) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [api/executive.mjs:67](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/api/executive.mjs#L67) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [api/report.mjs:54](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/api/report.mjs#L54) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [api/report.mjs:57](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/api/report.mjs#L57) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [api/report.mjs:59](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/api/report.mjs#L59) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [scripts/build-command-assets.mjs:34](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/build-command-assets.mjs#L34) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [scripts/build-command-assets.mjs:35](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/build-command-assets.mjs#L35) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [scripts/build-command-assets.mjs:36](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/build-command-assets.mjs#L36) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [scripts/build-command-versions.mjs:45](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/build-command-versions.mjs#L45) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [scripts/build-command-versions.mjs:49](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/build-command-versions.mjs#L49) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [scripts/build-monitoring.mjs:40](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/build-monitoring.mjs#L40) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [scripts/build-monitoring.mjs:41](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/build-monitoring.mjs#L41) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [scripts/build-monitoring.mjs:42](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/build-monitoring.mjs#L42) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [scripts/build-monitoring.mjs:43](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/build-monitoring.mjs#L43) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [scripts/build.mjs:37](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/build.mjs#L37) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [scripts/check-privacy.mjs:59](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/check-privacy.mjs#L59) · observed-code
- **Attribution parameter: gclid** — Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review. (inferred)
  - [scripts/check-privacy.mjs:84](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/check-privacy.mjs#L84) · observed-code
- **Attribution parameter: wbraid** — Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review. (inferred)
  - [scripts/check-privacy.mjs:84](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/check-privacy.mjs#L84) · observed-code
- **Attribution parameter: gbraid** — Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review. (inferred)
  - [scripts/check-privacy.mjs:84](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/check-privacy.mjs#L84) · observed-code
- **Attribution parameter: msclkid** — Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review. (inferred)
  - [scripts/check-privacy.mjs:84](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/check-privacy.mjs#L84) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [server/command-prepared.mjs:49](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/server/command-prepared.mjs#L49) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [server/command-prepared.mjs:182](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/server/command-prepared.mjs#L182) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [server/command-prepared.mjs:383](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/server/command-prepared.mjs#L383) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [server/command-prepared.mjs:384](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/server/command-prepared.mjs#L384) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [server/command-roster.mjs:384](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/server/command-roster.mjs#L384) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [server/command-roster.mjs:418](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/server/command-roster.mjs#L418) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [server/command-welcome.mjs:157](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/server/command-welcome.mjs#L157) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [server/command-welcome.mjs:669](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/server/command-welcome.mjs#L669) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [server/command.mjs:171](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/server/command.mjs#L171) · observed-code
- **Write-call candidate: remove** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/command/app.js:4485](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/command/app.js#L4485) · observed-code
- **Write-call candidate: remove** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/command/app.js:4518](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/command/app.js#L4518) · observed-code
- **Write-call candidate: remove** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/command/app.js:4519](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/command/app.js#L4519) · observed-code
- **Write-call candidate: remove** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/command/app.js:4558](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/command/app.js#L4558) · observed-code
- **Write-call candidate: remove** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/command/app.js:5574](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/command/app.js#L5574) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/command/host.js:229](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/command/host.js#L229) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/command/host.js:235](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/command/host.js#L235) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/command/host.js:291](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/command/host.js#L291) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/command/host.js:297](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/command/host.js#L297) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/command/host.js:317](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/command/host.js#L317) · observed-code
- **Write-call candidate: remove** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/command/host.js:627](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/command/host.js#L627) · observed-code
- **Write-call candidate: remove** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/command/host.js:649](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/command/host.js#L649) · observed-code
- **Attribution parameter: gclid** — Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review. (inferred)
  - [src/enrichment/evidence.mjs:55](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/enrichment/evidence.mjs#L55) · observed-code
- **Attribution parameter: msclkid** — Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review. (inferred)
  - [src/enrichment/evidence.mjs:57](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/enrichment/evidence.mjs#L57) · observed-code
- **Attribution parameter: gclid** — Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review. (inferred)
  - [src/enrichment/match.mjs:223](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/enrichment/match.mjs#L223) · observed-code
- **Write-call candidate: remove** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/executive/host.js:50](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/executive/host.js#L50) · observed-code
- **Write-call candidate: remove** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/executive/interactions.js:15](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/executive/interactions.js#L15) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/executive/interactions.js:342](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/executive/interactions.js#L342) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/executive/interactions.js:346](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/executive/interactions.js#L346) · observed-code
- **Write-call candidate: remove** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/executive/presentation.js:587](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/executive/presentation.js#L587) · observed-code
- **Write-call candidate: remove** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/executive/presentation.js:692](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/executive/presentation.js#L692) · observed-code
- **Write-call candidate: remove** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/executive/workbench.js:1122](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/executive/workbench.js#L1122) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/import/parse.mjs:24](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/import/parse.mjs#L24) · observed-code
- **Attribution parameter: gclid** — Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review. (inferred)
  - [src/import/parse.mjs:48](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/import/parse.mjs#L48) · observed-code
- **Attribution parameter: gclid** — Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review. (inferred)
  - [src/import/parse.mjs:254](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/import/parse.mjs#L254) · observed-code
- **Attribution parameter: gclid** — Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review. (inferred)
  - [src/import/store.mjs:193](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/import/store.mjs#L193) · observed-code
- **Write-call candidate: remove** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/trends.js:208](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/trends.js#L208) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [tests/manager-browser.mjs:16](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/manager-browser.mjs#L16) · observed-code
- **Write-call candidate: remove** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [tests/security-browser.mjs:163](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/security-browser.mjs#L163) · observed-code
- **Outbound candidate: unknown method synthetic.protect.clerk.com** — Literal destination in source; path, query and payload withheld. Reachability, authentication, side effects and active use require review. (inferred)
  - [tests/signin-browser.mjs:40](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/signin-browser.mjs#L40) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [tests/story-browser.mjs:16](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/story-browser.mjs#L16) · observed-code

To establish: Who calls each interface, with which authentication, quotas and write permissions?

## Data & storage

- **PostgreSQL** — Integration signal in source. Account ownership, provisioning and live connectivity are unverified. (inferred)
  - [package.json:49](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L49) · declared-config
  - [scripts/verify-v6.mjs:3](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/verify-v6.mjs#L3) · observed-code
  - [server/command-cache-store.mjs:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/server/command-cache-store.mjs#L1) · observed-code
  - [server/data.mjs:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/server/data.mjs#L1) · observed-code
  - [src/import/connection.mjs:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/import/connection.mjs#L1) · observed-code
  - [tests/run-command-cache-db.mjs:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/run-command-cache-db.mjs#L1) · observed-code
  - [tests/run-db-tests.mjs:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/run-db-tests.mjs#L1) · observed-code
- **Schema / migration definition** — Schema-related source exists; database contents and applied migration state were not inspected. (direct)
  - [supabase/migrations/20260930193044\_incremental\_reporting.sql:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/supabase/migrations/20260930193044_incremental_reporting.sql#L1) · observed-code
  - [supabase/migrations/20261017152516\_command\_v6\_prepared\_reports.sql:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/supabase/migrations/20261017152516_command_v6_prepared_reports.sql#L1) · observed-code
  - [supabase/migrations/20261017162946\_command\_v6\_shared\_calculations.sql:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/supabase/migrations/20261017162946_command_v6_shared_calculations.sql#L1) · observed-code
  - [supabase/migrations/20261017193000\_command\_v6\_cache\_retention.sql:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/supabase/migrations/20261017193000_command_v6_cache_retention.sql#L1) · observed-code
- **Supabase** — Mentioned in source documentation; implementation and account access need confirmation. (inferred)
  - [DECISIONS.md:26](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/DECISIONS.md#L26) · source-reported
  - [package.json:58](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L58) · declared-config
- **Table reference: sunshine\_reporting.batches** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/20260930193044\_incremental\_reporting.sql:4](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/supabase/migrations/20260930193044_incremental_reporting.sql#L4) · observed-code
- **Table reference: sunshine\_reporting.source\_files** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/20260930193044\_incremental\_reporting.sql:11](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/supabase/migrations/20260930193044_incremental_reporting.sql#L11) · observed-code
- **Table reference: sunshine\_reporting.sf\_opportunities** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/20260930193044\_incremental\_reporting.sql:12](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/supabase/migrations/20260930193044_incremental_reporting.sql#L12) · observed-code
- **Table reference: sunshine\_reporting.ads\_geo\_daily** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/20260930193044\_incremental\_reporting.sql:15](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/supabase/migrations/20260930193044_incremental_reporting.sql#L15) · observed-code
- **Table reference: sunshine\_reporting.opportunity\_campaign\_enrichment** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/20260930193044\_incremental\_reporting.sql:19](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/supabase/migrations/20260930193044_incremental_reporting.sql#L19) · observed-code
- **Table reference: sunshine\_reporting.import\_row\_results** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/20260930193044\_incremental\_reporting.sql:26](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/supabase/migrations/20260930193044_incremental_reporting.sql#L26) · observed-code
- **Table reference: sunshine\_reporting.import\_row\_results** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/20260930193044\_incremental\_reporting.sql:44](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/supabase/migrations/20260930193044_incremental_reporting.sql#L44) · observed-code
- **Table reference: sunshine\_command\_cache.scopes** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/20261017152516\_command\_v6\_prepared\_reports.sql:8](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/supabase/migrations/20261017152516_command_v6_prepared_reports.sql#L8) · observed-code
- **Table reference: sunshine\_command\_cache.reports** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/20261017152516\_command\_v6\_prepared\_reports.sql:21](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/supabase/migrations/20261017152516_command_v6_prepared_reports.sql#L21) · observed-code
- **Table reference: sunshine\_command\_cache.scopes** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/20261017152516\_command\_v6\_prepared\_reports.sql:33](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/supabase/migrations/20261017152516_command_v6_prepared_reports.sql#L33) · observed-code
- **Table reference: sunshine\_command\_cache.reports** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/20261017152516\_command\_v6\_prepared\_reports.sql:34](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/supabase/migrations/20261017152516_command_v6_prepared_reports.sql#L34) · observed-code
- **Table reference: sunshine\_command\_cache.reports** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/20261017162946\_command\_v6\_shared\_calculations.sql:2](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/supabase/migrations/20261017162946_command_v6_shared_calculations.sql#L2) · observed-code
- **Table reference: sunshine\_command\_cache.inputs** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/20261017162946\_command\_v6\_shared\_calculations.sql:9](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/supabase/migrations/20261017162946_command_v6_shared_calculations.sql#L9) · observed-code
- **Table reference: sunshine\_command\_cache.inputs** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/20261017162946\_command\_v6\_shared\_calculations.sql:15](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/supabase/migrations/20261017162946_command_v6_shared_calculations.sql#L15) · observed-code

To establish: Who owns the data, migrations, retention, backups and restoration?

## Identity & permissions

- **Clerk** — Integration signal in source. Account ownership, provisioning and live connectivity are unverified. (inferred)
  - [package.json:41](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L41) · declared-config
  - [server/auth.mjs:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/server/auth.mjs#L1) · observed-code
- **Supabase** — Mentioned in source documentation; implementation and account access need confirmation. (inferred)
  - [DECISIONS.md:26](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/DECISIONS.md#L26) · source-reported
  - [package.json:58](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L58) · declared-config
- **Row-security declaration** — DDL references row-level security. This does not establish deployed policies, role coverage or effective authorization. (inferred)
  - [supabase/migrations/20260930193044\_incremental\_reporting.sql:44](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/supabase/migrations/20260930193044_incremental_reporting.sql#L44) · observed-code
- **Row-security declaration** — DDL references row-level security. This does not establish deployed policies, role coverage or effective authorization. (inferred)
  - [supabase/migrations/20261017152516\_command\_v6\_prepared\_reports.sql:33](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/supabase/migrations/20261017152516_command_v6_prepared_reports.sql#L33) · observed-code
- **Row-security declaration** — DDL references row-level security. This does not establish deployed policies, role coverage or effective authorization. (inferred)
  - [supabase/migrations/20261017162946\_command\_v6\_shared\_calculations.sql:15](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/supabase/migrations/20261017162946_command_v6_shared_calculations.sql#L15) · observed-code
- **API-key or authorization header** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [api/command-prewarm.mjs:22](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/api/command-prewarm.mjs#L22) · observed-code
- **API-key or authorization header** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [api/command.mjs:80](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/api/command.mjs#L80) · observed-code
- **API-key or authorization header** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [api/executive.mjs:73](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/api/executive.mjs#L73) · observed-code
- **API-key or authorization header** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [api/report.mjs:67](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/api/report.mjs#L67) · observed-code
- **API-key or authorization header** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [scripts/preview-command.mjs:216](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/preview-command.mjs#L216) · observed-code
- **Login allowlist** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [server/auth.mjs:40](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/server/auth.mjs#L40) · observed-code
- **API-key or authorization header** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [server/cache.mjs:9](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/server/cache.mjs#L9) · observed-code
- **API-key or authorization header** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [server/command-reference.mjs:5](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/server/command-reference.mjs#L5) · observed-code
- **API-key or authorization header** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [server/demo.mjs:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/server/demo.mjs#L1) · observed-code
- **API-key or authorization header** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [server/executive-cache.mjs:25](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/server/executive-cache.mjs#L25) · observed-code
- **API-key or authorization header** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [server/http.mjs:9](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/server/http.mjs#L9) · observed-code
- **API-key or authorization header** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [src/command/host.js:524](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/command/host.js#L524) · observed-code
- **API-key or authorization header** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [src/executive/host.js:116](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/executive/host.js#L116) · observed-code
- **API-key or authorization header** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [src/hosted-shell.js:78](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/hosted-shell.js#L78) · observed-code
- **Login allowlist** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [src/monitoring/privacy.mjs:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/monitoring/privacy.mjs#L1) · observed-code

To establish: Which human, service and tenant roles can read or write each resource?

## Errors & monitoring

- **Application error logging** — Error logging call exists; destination, alerting, retention and redaction are unverified. (inferred)
  - [scripts/build.mjs:160](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/build.mjs#L160) · observed-code
  - [scripts/check-docs.mjs:136](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/check-docs.mjs#L136) · observed-code
  - [scripts/check-privacy.mjs:95](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/check-privacy.mjs#L95) · observed-code
  - [scripts/enrich.mjs:234](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/enrich.mjs#L234) · observed-code
  - [scripts/import.mjs:182](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/import.mjs#L182) · observed-code
  - [scripts/verify-v6.mjs:63](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/verify-v6.mjs#L63) · observed-code
  - [src/pulse.js:609](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/pulse.js#L609) · observed-code
- **Sentry** — Integration signal in source. Account ownership, provisioning and live connectivity are unverified. (inferred)
  - [package.json:43](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L43) · declared-config

To establish: Where do errors and alerts go, who receives them, and are sensitive fields scrubbed?

## Hosting & delivery

- **render configuration** — Hosting configuration found; service project and deployment are unverified. (direct)
  - [server/render.mjs:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/server/render.mjs#L1) · observed-code
- **Vercel configuration** — Deployment configuration is present. The live project, environment and deployed revision are not queried. (direct)
  - [vercel.json:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/vercel.json#L1) · declared-config

To establish: Which project/environment is deployed, and does its source match this revision?

## Devices & execution access

- **Browser automation** — Browser automation signal; browser binaries, host and permissions may be required. (inferred)
  - [.github/workflows/v6-ci.yml:46](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/.github/workflows/v6-ci.yml#L46) · declared-config
  - [package.json:56](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L56) · declared-config
  - [tests/browser-support.mjs:11](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/browser-support.mjs#L11) · observed-code
- **Local filesystem access** — Filesystem reference; approved paths, read/write scope and operating identity need confirmation. (inferred)
  - [api/index.mjs:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/api/index.mjs#L1) · observed-code
  - [scripts/build-command-assets.mjs:2](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/build-command-assets.mjs#L2) · observed-code
  - [scripts/build-command-versions.mjs:2](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/build-command-versions.mjs#L2) · observed-code
  - [scripts/build-monitoring.mjs:3](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/build-monitoring.mjs#L3) · observed-code
  - [scripts/build.mjs:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/build.mjs#L1) · observed-code
  - [scripts/check-docs.mjs:2](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/check-docs.mjs#L2) · observed-code
  - [scripts/check-privacy.mjs:3](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/check-privacy.mjs#L3) · observed-code
  - [scripts/ci-scope.mjs:2](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/ci-scope.mjs#L2) · observed-code
- **Local process access** — Source starts or inspects local processes. Commands, execution owner and machine access need review. (inferred)
  - [scripts/check-docs.mjs:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/check-docs.mjs#L1) · observed-code
  - [scripts/check-privacy.mjs:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/check-privacy.mjs#L1) · observed-code
  - [scripts/ci-scope.mjs:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/ci-scope.mjs#L1) · observed-code
  - [scripts/import.mjs:4](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/import.mjs#L4) · observed-code
  - [scripts/run-tests.mjs:2](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/run-tests.mjs#L2) · observed-code
  - [scripts/verify-v6.mjs:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/verify-v6.mjs#L1) · observed-code
  - [src/import/connection.mjs:3](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/import/connection.mjs#L3) · observed-code
  - [tests/run-command-cache-db.mjs:7](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/run-command-cache-db.mjs#L7) · observed-code

To establish: Does operation need a browser, mobile device, local PC, filesystem or remote computer? Who grants access?

## Troubleshooting & recovery

- **Package script: build:demo** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:19](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L19) · declared-config
- **Package script: build:monitoring** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:10](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L10) · declared-config
- **Package script: check:docs** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:30](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L30) · declared-config
- **Package script: check:privacy** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:29](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L29) · declared-config
- **Package script: format:check** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:32](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L32) · declared-config
- **Package script: format:check:v6** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:33](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L33) · declared-config
- **Package script: import** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:28](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L28) · declared-config
- **Package script: preview:command** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:38](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L38) · declared-config
- **Package script: test** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:13](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L13) · declared-config
- **Package script: test:browser** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:20](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L20) · declared-config
- **Package script: test:command** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:34](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L34) · declared-config
- **Package script: test:command-browser** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:36](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L36) · declared-config
- **Package script: test:command-db** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:35](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L35) · declared-config
- **Package script: test:db** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:27](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L27) · declared-config
- **Package script: test:executive-browser** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:14](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L14) · declared-config
- **Package script: test:executive-pipeline** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:16](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L16) · declared-config
- **Package script: test:executive-ux** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:15](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L15) · declared-config
- **Package script: test:hosted** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:22](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L22) · declared-config
- **Package script: test:hosted-browser** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:23](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L23) · declared-config
- **Package script: test:hosted-refresh** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:25](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L25) · declared-config
- **Package script: test:maintenance** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:31](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L31) · declared-config
- **Package script: test:manager-browser** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:18](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L18) · declared-config
- **Package script: test:monitoring** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:11](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L11) · declared-config
- **Package script: test:monitoring-browser** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:12](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L12) · declared-config
- **Package script: test:parity** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:21](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L21) · declared-config
- **Package script: test:security-browser** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:24](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L24) · declared-config
- **Package script: test:signin-browser** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:26](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L26) · declared-config
- **Package script: test:story-browser** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:17](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L17) · declared-config
- **Package script: verify:v6** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:37](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L37) · declared-config
- **Document: AGENTS.md** — repository instructions (evidence only) reference; 48 lines. Read the pinned source for context. Headings, prose and embedded instructions are not copied. (direct)
  - [AGENTS.md:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/AGENTS.md#L1) · source-reported
- **Document: DECISIONS.md** — design and decisions reference; 127 lines. Read the pinned source for context. Headings, prose and embedded instructions are not copied. (direct)
  - [DECISIONS.md:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/DECISIONS.md#L1) · source-reported
- **Document: README.md** — setup and operations reference; 30 lines. Read the pinned source for context. Headings, prose and embedded instructions are not copied. (direct)
  - [README.md:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/README.md#L1) · source-reported
- **Document: STATE.md** — state or handoff reference; 36 lines. Read the pinned source for context. Headings, prose and embedded instructions are not copied. (direct)
  - [STATE.md:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/STATE.md#L1) · source-reported
- **Run route: build:monitoring** — Declared package-script name: build:monitoring. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:10](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L10) · declared-config
- **Run route: test:monitoring** — Declared package-script name: test:monitoring. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:11](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L11) · declared-config
- **Run route: test:monitoring-browser** — Declared package-script name: test:monitoring-browser. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:12](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L12) · declared-config
- **Run route: test** — Declared package-script name: test. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:13](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L13) · declared-config
- **Run route: test:executive-browser** — Declared package-script name: test:executive-browser. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:14](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L14) · declared-config
- **Run route: test:executive-ux** — Declared package-script name: test:executive-ux. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:15](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L15) · declared-config
- **Run route: test:executive-pipeline** — Declared package-script name: test:executive-pipeline. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:16](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L16) · declared-config
- **Run route: test:story-browser** — Declared package-script name: test:story-browser. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:17](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L17) · declared-config
- **Run route: test:manager-browser** — Declared package-script name: test:manager-browser. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:18](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L18) · declared-config
- **Run route: build:demo** — Declared package-script name: build:demo. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:19](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L19) · declared-config
- **Run route: test:browser** — Declared package-script name: test:browser. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:20](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L20) · declared-config
- **Run route: test:parity** — Declared package-script name: test:parity. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:21](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L21) · declared-config
- **Run route: test:hosted** — Declared package-script name: test:hosted. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:22](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L22) · declared-config
- **Run route: test:hosted-browser** — Declared package-script name: test:hosted-browser. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:23](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L23) · declared-config
- **Run route: test:security-browser** — Declared package-script name: test:security-browser. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:24](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L24) · declared-config
- **Run route: test:hosted-refresh** — Declared package-script name: test:hosted-refresh. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:25](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L25) · declared-config
- **Run route: test:signin-browser** — Declared package-script name: test:signin-browser. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:26](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L26) · declared-config
- **Run route: test:db** — Declared package-script name: test:db. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:27](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L27) · declared-config
- **Run route: import** — Declared package-script name: import. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:28](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L28) · declared-config
- **Run route: check:privacy** — Declared package-script name: check:privacy. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:29](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L29) · declared-config
- **Run route: check:docs** — Declared package-script name: check:docs. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:30](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L30) · declared-config
- **Run route: test:maintenance** — Declared package-script name: test:maintenance. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:31](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L31) · declared-config
- **Run route: format:check** — Declared package-script name: format:check. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:32](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L32) · declared-config
- **Run route: format:check:v6** — Declared package-script name: format:check:v6. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:33](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L33) · declared-config
- **Run route: test:command** — Declared package-script name: test:command. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:34](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L34) · declared-config
- **Run route: test:command-db** — Declared package-script name: test:command-db. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:35](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L35) · declared-config
- **Run route: test:command-browser** — Declared package-script name: test:command-browser. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:36](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L36) · declared-config
- **Run route: verify:v6** — Declared package-script name: verify:v6. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:37](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L37) · declared-config
- **Run route: preview:command** — Declared package-script name: preview:command. Confirm the package manager before running; command body omitted. (direct)
  - [package.json:38](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/package.json#L38) · declared-config
- **Logic pointer: classifyEvent** — Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied. (inferred)
  - [scripts/ci-scope.mjs:28](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/scripts/ci-scope.mjs#L28) · observed-code
- **Logic pointer: companyEligible** — Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied. (inferred)
  - [server/auth.mjs:25](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/server/auth.mjs#L25) · observed-code
- **Logic pointer: geographyClassifier** — Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied. (inferred)
  - [server/command-geography.mjs:69](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/server/command-geography.mjs#L69) · observed-code
- **Logic pointer: buildAccountScoreboard** — Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied. (inferred)
  - [server/command-scoreboard.mjs:296](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/server/command-scoreboard.mjs#L296) · observed-code
- **Logic pointer: atlasCohort** — Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied. (inferred)
  - [server/executive-atlas.mjs:10](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/server/executive-atlas.mjs#L10) · observed-code
- **Logic pointer: attributionOverview** — Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied. (inferred)
  - [src/command/app.js:2100](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/command/app.js#L2100) · observed-code
- **Logic pointer: stateConversionTrend** — Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied. (inferred)
  - [src/command/app.js:2664](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/command/app.js#L2664) · observed-code
- **Logic pointer: contextAttributes** — Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied. (inferred)
  - [src/command/investigation.js:56](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/command/investigation.js#L56) · observed-code
- **Logic pointer: normalizePhone** — Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied. (inferred)
  - [src/enrichment/evidence.mjs:3](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/enrichment/evidence.mjs#L3) · observed-code
- **Logic pointer: attribution** — Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied. (inferred)
  - [src/executive/app.js:684](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/executive/app.js#L684) · observed-code
- **Logic pointer: pipelineForecast** — Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied. (inferred)
  - [src/executive/pipeline.js:128](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/executive/pipeline.js#L128) · observed-code
- **Logic pointer: attribution** — Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied. (inferred)
  - [src/manager/app.js:427](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/manager/app.js#L427) · observed-code
- **Logic pointer: attribution** — Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied. (inferred)
  - [src/story/app.js:585](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/src/story/app.js#L585) · observed-code

To establish: Which runbook, health checks, rollback and recovery procedure have been exercised?

## Tests & ownership

- **GitHub workflow: v6-ci.yml** — Workflow file exists; required checks, credentials and run outcomes are not queried. (direct)
  - [.github/workflows/v6-ci.yml:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/.github/workflows/v6-ci.yml#L1) · declared-config
- **Test sources present** — Test paths found in the tree; their contents and outcomes are not inferred from existence. (inferred)
  - [tests/admissions.test.mjs:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/admissions.test.mjs#L1) · declared-config
  - [tests/browser-support.mjs:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/browser-support.mjs#L1) · declared-config
  - [tests/browser.mjs:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/browser.mjs#L1) · declared-config
  - [tests/calculations.test.mjs:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/calculations.test.mjs#L1) · declared-config
  - [tests/command-admissions-ui.test.mjs:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/command-admissions-ui.test.mjs#L1) · declared-config
  - [tests/command-api-cache.test.mjs:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/command-api-cache.test.mjs#L1) · declared-config
  - [tests/command-browser.mjs:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/command-browser.mjs#L1) · declared-config
  - [tests/command-cache-db.test.mjs:1](https://github.com/webhostingdoo/Sunshine-Performance-Reporting/blob/07de262bfcbfe8a448a5ac23ca809734278ab15e/tests/command-cache-db.test.mjs#L1) · declared-config

To establish: Who maintains this app, what is actually in use, and which checks establish acceptance?

## Coverage and limitations

144 files inspected of 144 eligible; 171 excluded/outside scope; 0 failed reads.

- Static inspection does not verify runtime health, current use, provisioning, live schedules, service account access or deployed/source alignment.
- Only bounded source/configuration files are inspected. Secret files, data exports, binaries, history and raw source text are excluded from results.
- Unknown or dynamically constructed integrations and configuration names may not be detected. Human review is still needed.
- Deep scan: more source and candidate detectors, with an adjacent versioned receipt. Candidate calls and tracking matches still require interpretation.