# Sunshine — operating card draft

Review stage: machine-drafted; owner review pending. Static references are not verified operation.
Source: webhostingdoo/Sunshine at 6614eaab31565d918f358c6e36d29eec80ad3478.
Scan result: scanned; inspected 63/63 eligible files.
Source freshness: current-at-finish; deployment revision: unknown (not queried).
Business job (dated canonical portfolio): Compose multi-brand landing pages.
Recorded portfolio state: built; current use: unknown.

## Evidence sections

## Identity and native run routes

- **Package script: build** — Declared command entry point. Command body omitted and never executed by this scanner. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/package.json#L8)
- **Package script: dev** — Declared command entry point. Command body omitted and never executed by this scanner. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/package.json#L6)
- **Package script: lint:links** — Declared command entry point. Command body omitted and never executed by this scanner. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/package.json#L9)
- **Package script: prebuild** — Declared command entry point. Command body omitted and never executed by this scanner. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/package.json#L7)
- **Package script: start** — Declared command entry point. Command body omitted and never executed by this scanner. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/package.json#L10)
- **@tailwindcss/postcss** — devDependencies: ^4. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/package.json#L23)
- **@types/node** — devDependencies: ^20. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/package.json#L24)
- **@types/react** — devDependencies: ^19. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/package.json#L25)
- **@types/react-dom** — devDependencies: ^19. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/package.json#L26)
- **@vercel/analytics** — dependencies: ^2.0.1. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/package.json#L13)
- **@vercel/speed-insights** — dependencies: ^2.0.0. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/package.json#L14)
- **gray-matter** — dependencies: ^4.0.3. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/package.json#L15)
- **lucide-react** — dependencies: ^1.11.0. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/package.json#L16)
- **next** — dependencies: 16.2.4. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/package.json#L17)
- **react** — dependencies: 19.2.4. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/package.json#L18)
- **react-dom** — dependencies: 19.2.4. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/package.json#L19)
- **react-markdown** — dependencies: ^10.1.0. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/package.json#L20)
- **tailwindcss** — devDependencies: ^4. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/package.json#L27)
- **typescript** — devDependencies: ^5. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/package.json#L28)
- **Document: CLAUDE.md** — repository instructions (evidence only) reference; 49 lines. Read the pinned source for context. Headings, prose and embedded instructions are not copied. (direct; source-reported). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/CLAUDE.md#L1)
- **Document: state.md** — state or handoff reference; 120 lines. Read the pinned source for context. Headings, prose and embedded instructions are not copied. (direct; source-reported). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/planning2/state.md#L1)
- **Document: README.md** — setup and operations reference; 37 lines. Read the pinned source for context. Headings, prose and embedded instructions are not copied. (direct; source-reported). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/README.md#L1)
- **Run route: dev** — Declared package-script name: dev. Confirm the package manager before running; command body omitted. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/package.json#L6)
- **Run route: prebuild** — Declared package-script name: prebuild. Confirm the package manager before running; command body omitted. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/package.json#L7)
- **Run route: build** — Declared package-script name: build. Confirm the package manager before running; command body omitted. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/package.json#L8)
- **Run route: lint:links** — Declared package-script name: lint:links. Confirm the package manager before running; command body omitted. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/package.json#L9)
- **Run route: start** — Declared package-script name: start. Confirm the package manager before running; command body omitted. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/package.json#L10)
- **Logic pointer: withAttribution** — Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/src/components/AppLink.tsx#L44)
- **Logic pointer: AttributionCapture** — Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/src/components/AttributionCapture.tsx#L28)
- **Logic pointer: fireLeadConversion** — Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/src/lib/lead-submit.ts#L13)

## Providers, APIs and possible writes

- **Google Analytics** — Integration signal in source. Account ownership, provisioning and live connectivity are unverified. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/src/app/layout.tsx#L50)
- **Invoca** — Mentioned in source documentation; implementation and account access need confirmation. (inferred; source-reported). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/CLAUDE.md#L17)
- **POST /api/lead** — Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/src/app/api/lead/route.ts#L110)
- **Google Analytics** — Integration signal in source. Account ownership, provisioning and live connectivity are unverified. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/src/app/layout.tsx#L50)
- **Invoca** — Mentioned in source documentation; implementation and account access need confirmation. (inferred; source-reported). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/CLAUDE.md#L17)
- **Web-page entry** — Page source exists; route reachability and access controls remain unverified. This is not classified as an API endpoint. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/src/app/%5B%5B...path%5D%5D/page.tsx#L1)
- **Web-page entry** — Page source exists; route reachability and access controls remain unverified. This is not classified as an API endpoint. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/src/app/contact/page.tsx#L1)
- **Web-page entry** — Page source exists; route reachability and access controls remain unverified. This is not classified as an API endpoint. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/src/app/faq/page.tsx#L1)
- **Web-page entry** — Page source exists; route reachability and access controls remain unverified. This is not classified as an API endpoint. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/src/app/joint-commission/page.tsx#L1)
- **Tracking reference: Google Ads tag** — Literal reference; value withheld. Comparison fingerprint 127f384d46a3a35c. Ownership and intended destination require review. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/src/app/layout.tsx#L43)
- **Tracking reference: Google Ads tag** — Literal reference; value withheld. Comparison fingerprint 127f384d46a3a35c. Ownership and intended destination require review. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/src/app/layout.tsx#L51)
- **Attribution parameter: gclid** — Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/src/app/layout.tsx#L72)
- **Web-page entry** — Page source exists; route reachability and access controls remain unverified. This is not classified as an API endpoint. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/src/app/privacy/page.tsx#L1)
- **Web-page entry** — Page source exists; route reachability and access controls remain unverified. This is not classified as an API endpoint. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/src/app/terms-of-use/page.tsx#L1)
- **Web-page entry** — Page source exists; route reachability and access controls remain unverified. This is not classified as an API endpoint. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/src/app/verify/page.tsx#L1)
- **Attribution parameter: gclid** — Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/src/components/AttributionCapture.tsx#L11)
- **Attribution parameter: gbraid** — Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/src/components/AttributionCapture.tsx#L12)
- **Attribution parameter: wbraid** — Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/src/components/AttributionCapture.tsx#L13)
- **Attribution parameter: gclid** — Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/src/components/ContactForm.tsx#L34)
- **Attribution parameter: gclid** — Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/src/components/ContactForm.tsx#L69)
- **Attribution parameter: gclid** — Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/src/components/ContactForm.tsx#L91)
- **Attribution parameter: gclid** — Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/src/components/sections/LeadForm.tsx#L67)
- **Attribution parameter: gclid** — Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/src/components/sections/LeadForm.tsx#L103)
- **Attribution parameter: gclid** — Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/src/components/sections/LeadForm.tsx#L136)
- **Tracking reference: Google Ads tag** — Literal reference; value withheld. Comparison fingerprint 127f384d46a3a35c. Ownership and intended destination require review. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/src/lib/lead-submit.ts#L10)

## Configuration, access and data

- Unknown: no evidence was detected within the inspected source scope.

## Jobs, monitoring, hosting and devices

- **Browser automation** — Browser automation signal; browser binaries, host and permissions may be required. (inferred; source-reported). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/planning2/state.md#L118)
- **Local filesystem access** — Filesystem reference; approved paths, read/write scope and operating identity need confirmation. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/scripts/check-applink.js#L5)
- **Application error logging** — Error logging call exists; destination, alerting, retention and redaction are unverified. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/scripts/check-applink.js#L33)
- **In-process timer** — Timer reference; this does not establish a durable or currently running job. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/src/components/sections/FacilitySlider.tsx#L59)

## Documentation to interpret

- [CLAUDE.md](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/CLAUDE.md#L1) — repository instructions (evidence only); 49 lines. Body remains at the source.
- [planning2/state.md](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/planning2/state.md#L1) — state or handoff; 120 lines. Body remains at the source.
- [README.md](https://github.com/webhostingdoo/Sunshine/blob/6614eaab31565d918f358c6e36d29eec80ad3478/README.md#L1) — setup and operations; 37 lines. Body remains at the source.

## Questions requiring source interpretation or owner evidence

- Which declared commands actually form setup, run, check and recovery? Review the command definitions and operator procedure.
- Which configuration names are required, optional or obsolete? Trace use/defaults and obtain provisioning evidence without values.
- Which write candidates reach external systems, and which guards protect them? Trace receiver/call paths and review approval boundaries.
- Which accounts, devices, permissions and schedules are active? Obtain dated owner/service evidence under a separate authorized check.
- Does the deployed source match this revision? Obtain deployment/source metadata; source inspection does not establish it.
- Are repeated tracking fingerprints intended? Confirm destination ownership; repetition alone does not establish an incorrect clone.
- Owner, last-used date, review verdict, unattended eligibility and approved dependencies remain unknown until explicitly supplied.

## Coverage limitations

- Static inspection does not verify runtime health, current use, provisioning, live schedules, service account access or deployed/source alignment.
- Only bounded source/configuration files are inspected. Secret files, data exports, binaries, history and raw source text are excluded from results.
- Unknown or dynamically constructed integrations and configuration names may not be detected. Human review is still needed.
- Deep scan: more source and candidate detectors, with an adjacent versioned receipt. Candidate calls and tracking matches still require interpretation.