{
  "schemaVersion": 1,
  "slug": "Sunshine-Performance-Reporting",
  "repository": "webhostingdoo/Sunshine-Performance-Reporting",
  "sourceSha": "07de262bfcbfe8a448a5ac23ca809734278ab15e",
  "hqSha": "b4553ab14f4cde1f764f87925a9585e2515b6ac3",
  "scannedAt": "2026-10-23T13:14:47.286Z",
  "status": "partial",
  "findings": [
    {
      "id": "6fad01273b9939c8",
      "category": "access",
      "label": "Clerk",
      "detail": "Integration signal in source. Account ownership, provisioning and live connectivity are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "package.json",
          "line": 41,
          "kind": "declared-config"
        },
        {
          "path": "server/auth.mjs",
          "line": 1,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "af8bcf0bfc954fba",
      "category": "access",
      "label": "Supabase",
      "detail": "Integration signal in source. Account ownership, provisioning and live connectivity are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "package.json",
          "line": 58,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "25a9856f4556aaf0",
      "category": "apis",
      "label": "Invoca",
      "detail": "Mentioned in source documentation; implementation and account access need confirmation.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "README.md",
          "line": 11,
          "kind": "source-reported"
        }
      ]
    },
    {
      "id": "4e0c141469c14a13",
      "category": "configuration",
      "label": "EXECUTIVE_SCREENSHOT",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "tests/executive-browser.mjs",
          "line": 503,
          "kind": "observed-code"
        },
        {
          "path": "tests/executive-browser.mjs",
          "line": 505,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "7826b2e8e80402f5",
      "category": "configuration",
      "label": "GITHUB_EVENT_NAME",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "scripts/ci-scope.mjs",
          "line": 90,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "795fc7e4047a7339",
      "category": "configuration",
      "label": "GITHUB_EVENT_PATH",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "scripts/ci-scope.mjs",
          "line": 86,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "1557f0c2de2a9799",
      "category": "configuration",
      "label": "GITHUB_OUTPUT",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "scripts/ci-scope.mjs",
          "line": 92,
          "kind": "observed-code"
        },
        {
          "path": "scripts/ci-scope.mjs",
          "line": 93,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "13c2b00a4e601e58",
      "category": "configuration",
      "label": "NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified. Client-visible prefix: review what may be exposed.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "api/index.mjs",
          "line": 20,
          "kind": "observed-code"
        },
        {
          "path": "server/hosted-index.mjs",
          "line": 14,
          "kind": "observed-code"
        },
        {
          "path": "tests/executive-atlas-browser.mjs",
          "line": 52,
          "kind": "observed-code"
        },
        {
          "path": "tests/executive-browser.mjs",
          "line": 8,
          "kind": "observed-code"
        },
        {
          "path": "tests/executive-campaigns-browser.mjs",
          "line": 9,
          "kind": "observed-code"
        },
        {
          "path": "tests/executive-ux-browser.mjs",
          "line": 23,
          "kind": "observed-code"
        },
        {
          "path": "tests/hosted-refresh-browser.mjs",
          "line": 9,
          "kind": "observed-code"
        },
        {
          "path": "tests/security-browser.mjs",
          "line": 74,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "bc604765b45600cf",
      "category": "configuration",
      "label": "PLAYWRIGHT_BROWSERS_PATH",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "tests/browser-support.mjs",
          "line": 9,
          "kind": "observed-code"
        },
        {
          "path": "tests/browser-support.mjs",
          "line": 10,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "a6e88925141f1873",
      "category": "configuration",
      "label": "PORT",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "scripts/preview-command.mjs",
          "line": 11,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "96b20e4a9ea7700f",
      "category": "configuration",
      "label": "SENTRY_DSN",
      "detail": "Secret-like name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "tests/monitoring-browser.mjs",
          "line": 9,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "07bc9554b196cd6b",
      "category": "configuration",
      "label": "SENTRY_ENVIRONMENT",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "tests/monitoring-browser.mjs",
          "line": 11,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "b70bd1423d420725",
      "category": "configuration",
      "label": "SENTRY_RELEASE",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "tests/monitoring-browser.mjs",
          "line": 10,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "cfa6f81c91e0cf18",
      "category": "configuration",
      "label": "SPR_TEST_BROWSER_CHANNEL",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "tests/browser-support.mjs",
          "line": 12,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "65e8359bd4a637f4",
      "category": "configuration",
      "label": "SPR_TEST_DATABASE_PASSWORD",
      "detail": "Secret-like name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "scripts/verify-v6.mjs",
          "line": 13,
          "kind": "observed-code"
        },
        {
          "path": "scripts/verify-v6.mjs",
          "line": 19,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "7dffdca2ac96ff42",
      "category": "configuration",
      "label": "SPR_TEST_DATABASE_PORT",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "scripts/verify-v6.mjs",
          "line": 7,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "eeb9ab0605e9da03",
      "category": "configuration",
      "label": "SPR_TEST_DATABASE_URL",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "scripts/verify-v6.mjs",
          "line": 20,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "aecd677bad074853",
      "category": "configuration",
      "label": "STORY_SCREENSHOT",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "tests/story-browser.mjs",
          "line": 205,
          "kind": "observed-code"
        },
        {
          "path": "tests/story-browser.mjs",
          "line": 207,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "da4676811e361d2c",
      "category": "data",
      "label": "PostgreSQL",
      "detail": "Integration signal in source. Account ownership, provisioning and live connectivity are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "package.json",
          "line": 49,
          "kind": "declared-config"
        },
        {
          "path": "server/command-cache-store.mjs",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "server/data.mjs",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "scripts/verify-v6.mjs",
          "line": 3,
          "kind": "observed-code"
        },
        {
          "path": "src/import/connection.mjs",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "tests/run-command-cache-db.mjs",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "tests/run-db-tests.mjs",
          "line": 1,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "8c2558e0fe705afc",
      "category": "data",
      "label": "Schema / migration definition",
      "detail": "Schema-related source exists; database contents and applied migration state were not inspected.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "supabase/migrations/20260930193044_incremental_reporting.sql",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "supabase/migrations/20261017152516_command_v6_prepared_reports.sql",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "supabase/migrations/20261017162946_command_v6_shared_calculations.sql",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "supabase/migrations/20261017193000_command_v6_cache_retention.sql",
          "line": 1,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "b24f7e9b61caaec6",
      "category": "data",
      "label": "Supabase",
      "detail": "Integration signal in source. Account ownership, provisioning and live connectivity are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "package.json",
          "line": 58,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "b173cf342c21c119",
      "category": "devices",
      "label": "Browser automation",
      "detail": "Browser automation signal; browser binaries, host and permissions may be required.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": ".github/workflows/v6-ci.yml",
          "line": 46,
          "kind": "declared-config"
        },
        {
          "path": "package.json",
          "line": 56,
          "kind": "declared-config"
        },
        {
          "path": "tests/browser-support.mjs",
          "line": 11,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "1e0a3ffe38003b16",
      "category": "devices",
      "label": "Local filesystem access",
      "detail": "Filesystem reference; approved paths, read/write scope and operating identity need confirmation.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "api/index.mjs",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "server/command-prepared.mjs",
          "line": 2,
          "kind": "observed-code"
        },
        {
          "path": "server/command-render.mjs",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "server/executive-pipeline.mjs",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "server/executive-render.mjs",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "server/executive.mjs",
          "line": 16,
          "kind": "observed-code"
        },
        {
          "path": "server/hosted-index.mjs",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "server/manager-render.mjs",
          "line": 1,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "57e8060de5ad3e87",
      "category": "devices",
      "label": "Local process access",
      "detail": "Source starts or inspects local processes. Commands, execution owner and machine access need review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "scripts/check-docs.mjs",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "scripts/check-privacy.mjs",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "scripts/ci-scope.mjs",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "scripts/import.mjs",
          "line": 4,
          "kind": "observed-code"
        },
        {
          "path": "scripts/run-tests.mjs",
          "line": 2,
          "kind": "observed-code"
        },
        {
          "path": "scripts/verify-v6.mjs",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "src/import/connection.mjs",
          "line": 3,
          "kind": "observed-code"
        },
        {
          "path": "tests/run-command-cache-db.mjs",
          "line": 7,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "6bdcdafe8ffca221",
      "category": "hosting",
      "label": "render configuration",
      "detail": "Hosting configuration found; service project and deployment are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "server/render.mjs",
          "line": 1,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "dcf7e759e8e5f4c6",
      "category": "hosting",
      "label": "Vercel configuration",
      "detail": "Deployment configuration is present. The live project, environment and deployed revision are not queried.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "vercel.json",
          "line": 1,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "5cf92b354d05cb63",
      "category": "observability",
      "label": "Application error logging",
      "detail": "Error logging call exists; destination, alerting, retention and redaction are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "scripts/build.mjs",
          "line": 160,
          "kind": "observed-code"
        },
        {
          "path": "scripts/check-docs.mjs",
          "line": 136,
          "kind": "observed-code"
        },
        {
          "path": "scripts/check-privacy.mjs",
          "line": 95,
          "kind": "observed-code"
        },
        {
          "path": "scripts/enrich.mjs",
          "line": 234,
          "kind": "observed-code"
        },
        {
          "path": "scripts/import.mjs",
          "line": 182,
          "kind": "observed-code"
        },
        {
          "path": "scripts/verify-v6.mjs",
          "line": 63,
          "kind": "observed-code"
        },
        {
          "path": "src/pulse.js",
          "line": 609,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "08dfc31148317f15",
      "category": "observability",
      "label": "Sentry",
      "detail": "Integration signal in source. Account ownership, provisioning and live connectivity are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "package.json",
          "line": 43,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "b41a94092bc7de05",
      "category": "operations",
      "label": "Package script: build:demo",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 19,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "b0fd1d3f1efbae89",
      "category": "operations",
      "label": "Package script: build:monitoring",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 10,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "4f119a17e94b7fea",
      "category": "operations",
      "label": "Package script: check:docs",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 30,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "ff6d848f5c87f4b6",
      "category": "operations",
      "label": "Package script: check:privacy",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 29,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "9857efaa0042b299",
      "category": "operations",
      "label": "Package script: format:check",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 32,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "fbf730b6e1a20a44",
      "category": "operations",
      "label": "Package script: format:check:v6",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 33,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "9942c3c40401103a",
      "category": "operations",
      "label": "Package script: import",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 28,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "999f08aa802d87e8",
      "category": "operations",
      "label": "Package script: preview:command",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 38,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "23939afe1f4f14e3",
      "category": "operations",
      "label": "Package script: test",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 13,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "39601ed977e2d46d",
      "category": "operations",
      "label": "Package script: test:browser",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 20,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "24499b44c6f10cd0",
      "category": "operations",
      "label": "Package script: test:command",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 34,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "75eb89ea2aecfacd",
      "category": "operations",
      "label": "Package script: test:command-browser",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 36,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "7ed35d79ca0c4ebb",
      "category": "operations",
      "label": "Package script: test:command-db",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 35,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "7eeff59ca489773a",
      "category": "operations",
      "label": "Package script: test:db",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 27,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "9fb1cbaa36899428",
      "category": "operations",
      "label": "Package script: test:executive-browser",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 14,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "a2e2650382c08c86",
      "category": "operations",
      "label": "Package script: test:executive-pipeline",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 16,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "4f11dce6cf8707bf",
      "category": "operations",
      "label": "Package script: test:executive-ux",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 15,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "225cde164efd255b",
      "category": "operations",
      "label": "Package script: test:hosted",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 22,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "4a92c757e7d4f620",
      "category": "operations",
      "label": "Package script: test:hosted-browser",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 23,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "d600e615c2c3b6a2",
      "category": "operations",
      "label": "Package script: test:hosted-refresh",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 25,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "5328e2db5acc4f6a",
      "category": "operations",
      "label": "Package script: test:maintenance",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 31,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "b90f8e7560e9fd14",
      "category": "operations",
      "label": "Package script: test:manager-browser",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 18,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "341fe5e98381d157",
      "category": "operations",
      "label": "Package script: test:monitoring",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 11,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "a680f0f7786db515",
      "category": "operations",
      "label": "Package script: test:monitoring-browser",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 12,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "fc0eb120e93dae1c",
      "category": "operations",
      "label": "Package script: test:parity",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 21,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "27c7fa791ad51997",
      "category": "operations",
      "label": "Package script: test:security-browser",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 24,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "71beb5af4fe8cd36",
      "category": "operations",
      "label": "Package script: test:signin-browser",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 26,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "4068be9e17ee84e4",
      "category": "operations",
      "label": "Package script: test:story-browser",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 17,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "fec2f7b33246827f",
      "category": "operations",
      "label": "Package script: verify:v6",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 37,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "c541ae484fc5cd47",
      "category": "providers",
      "label": "Clerk",
      "detail": "Integration signal in source. Account ownership, provisioning and live connectivity are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "package.json",
          "line": 41,
          "kind": "declared-config"
        },
        {
          "path": "server/auth.mjs",
          "line": 1,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "a353f77a14938865",
      "category": "providers",
      "label": "Invoca",
      "detail": "Mentioned in source documentation; implementation and account access need confirmation.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "README.md",
          "line": 11,
          "kind": "source-reported"
        }
      ]
    },
    {
      "id": "1583094693b94472",
      "category": "providers",
      "label": "Sentry",
      "detail": "Integration signal in source. Account ownership, provisioning and live connectivity are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "package.json",
          "line": 43,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "fe8232ecc99de85e",
      "category": "providers",
      "label": "Supabase",
      "detail": "Integration signal in source. Account ownership, provisioning and live connectivity are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "package.json",
          "line": 58,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "9f22192cc2fedd04",
      "category": "quality",
      "label": "GitHub workflow: v6-ci.yml",
      "detail": "Workflow file exists; required checks, credentials and run outcomes are not queried.",
      "confidence": "direct",
      "evidence": [
        {
          "path": ".github/workflows/v6-ci.yml",
          "line": 1,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "f6894bcdcb6e86c5",
      "category": "quality",
      "label": "Test sources present",
      "detail": "Test paths found in the tree; their contents and outcomes are not inferred from existence.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "tests/admissions.test.mjs",
          "line": 1,
          "kind": "declared-config"
        },
        {
          "path": "tests/browser-support.mjs",
          "line": 1,
          "kind": "declared-config"
        },
        {
          "path": "tests/browser.mjs",
          "line": 1,
          "kind": "declared-config"
        },
        {
          "path": "tests/calculations.test.mjs",
          "line": 1,
          "kind": "declared-config"
        },
        {
          "path": "tests/command-admissions-ui.test.mjs",
          "line": 1,
          "kind": "declared-config"
        },
        {
          "path": "tests/command-api-cache.test.mjs",
          "line": 1,
          "kind": "declared-config"
        },
        {
          "path": "tests/command-browser.mjs",
          "line": 1,
          "kind": "declared-config"
        },
        {
          "path": "tests/command-cache-db.test.mjs",
          "line": 1,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "e33c8b262bbf0294",
      "category": "runtime",
      "label": "@clerk/backend",
      "detail": "dependencies: 3.21.0. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 41,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "99be47ee05cf0e50",
      "category": "runtime",
      "label": "@floating-ui/dom",
      "detail": "dependencies: 1.7.4. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 42,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "b17d9893d4b1010d",
      "category": "runtime",
      "label": "@sentry/browser",
      "detail": "dependencies: 10.75.2. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 43,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "f205b4fec74e65d6",
      "category": "runtime",
      "label": "@sentry/node-core",
      "detail": "dependencies: 10.75.2. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 44,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "b0e78e68bb9d090d",
      "category": "runtime",
      "label": "@tanstack/table-core",
      "detail": "dependencies: 8.21.3. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 45,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "5479f801efbf2864",
      "category": "runtime",
      "label": "@vercel/functions",
      "detail": "dependencies: 3.10.1. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 46,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "e88a513558e36d3f",
      "category": "runtime",
      "label": "Browser document",
      "detail": "HTML source is present. Browser compatibility, hosting and live data access are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "src/command/shell.html",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "src/executive/shell.html",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "src/manager/shell.html",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "src/shell.html",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "src/story/shell.html",
          "line": 1,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "ee7988e1839d601d",
      "category": "runtime",
      "label": "csv-parse",
      "detail": "dependencies: 7.0.3. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 47,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "315446068b4b57e0",
      "category": "runtime",
      "label": "d3-geo",
      "detail": "dependencies: 3.1.1. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 48,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "81a9f7adf956e41b",
      "category": "runtime",
      "label": "embedded-postgres",
      "detail": "devDependencies: version not summarized. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 54,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "123f76083a17d32d",
      "category": "runtime",
      "label": "esbuild",
      "detail": "devDependencies: 0.28.2. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 55,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "aedbdfba62ede6d3",
      "category": "runtime",
      "label": "node engine",
      "detail": "Declared compatibility: 22.x.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 6,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "9528281b95b9c8a3",
      "category": "runtime",
      "label": "pg",
      "detail": "dependencies: 8.23.1. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 49,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "5cc119b24ca15681",
      "category": "runtime",
      "label": "playwright",
      "detail": "devDependencies: 1.58.2. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 56,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "cc384fb8093083a0",
      "category": "runtime",
      "label": "prettier",
      "detail": "devDependencies: 3.9.9. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 57,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "3806df9565fd6c7c",
      "category": "runtime",
      "label": "supabase",
      "detail": "devDependencies: 2.118.0. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 58,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "23d83d621e77aed0",
      "category": "runtime",
      "label": "topojson-client",
      "detail": "dependencies: 3.1.0. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 50,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "802954ce8f8c9a21",
      "category": "runtime",
      "label": "us-atlas",
      "detail": "dependencies: 3.0.1. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 51,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "afc6f3a6678bc0b1",
      "category": "schedules",
      "label": "In-process timer",
      "detail": "Timer reference; this does not establish a durable or currently running job.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "src/command/host.js",
          "line": 825,
          "kind": "observed-code"
        },
        {
          "path": "src/executive/host.js",
          "line": 84,
          "kind": "observed-code"
        },
        {
          "path": "src/hosted-shell.js",
          "line": 52,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "97af830f51c5347c",
      "category": "schedules",
      "label": "Vercel cron: */5 * * * *",
      "detail": "Declared schedule for /api/command-prewarm. Enabled state, timezone and execution history are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "vercel.json",
          "line": 26,
          "kind": "declared-config"
        }
      ]
    }
  ],
  "coverage": {
    "listed": 315,
    "eligible": 141,
    "inspected": 140,
    "skipped": 175,
    "failed": 0,
    "bytes": 1762027,
    "treeTruncated": false,
    "limited": true
  },
  "gaps": [
    "File-count or byte limits excluded eligible sources; this is a partial inspection.",
    "Static inspection does not verify runtime health, current use, provisioning, live schedules, service account access or deployed/source alignment.",
    "Only bounded source/configuration files are inspected. Secret files, data exports, binaries, history and raw source text are excluded from results.",
    "Unknown or dynamically constructed integrations and configuration names may not be detected. Human review is still needed."
  ],
  "changes": {
    "previousSha": "07de262bfcbfe8a448a5ac23ca809734278ab15e",
    "added": 1,
    "removed": 0
  }
}