# sqc — operating profile

Repository: webhostingdoo/sqc
Source revision: 8270385c5e469730a571d27c9f8ad40772c1fac7
HQ revision: bc9bd4733aecd8862c6a00e7db10853d2f3fc245
Scanned: 2026-10-23T16:19:50.344Z
Result: scanned

Static source evidence only. Runtime health, credential provisioning and current use are not verified. Secret values and raw source excerpts are excluded.

## Runtime & build

- **@clerk/nextjs** — dependencies: 7.9.2. Declaration only; installation is not checked. (direct)
  - [package.json:33](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L33) · declared-config
- **@electric-sql/pglite** — dependencies: 0.5.8. Declaration only; installation is not checked. (direct)
  - [package.json:31](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L31) · declared-config
- **@playwright/test** — devDependencies: 1.63.0. Declaration only; installation is not checked. (direct)
  - [package.json:58](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L58) · declared-config
- **@radix-ui/react-dialog** — dependencies: 1.1.23. Declaration only; installation is not checked. (direct)
  - [package.json:44](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L44) · declared-config
- **@sentry/nextjs** — dependencies: 10.74.0. Declaration only; installation is not checked. (direct)
  - [package.json:36](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L36) · declared-config
- **@supabase/supabase-js** — dependencies: 2.116.0. Declaration only; installation is not checked. (direct)
  - [package.json:34](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L34) · declared-config
- **@tailwindcss/postcss** — devDependencies: 4.3.3. Declaration only; installation is not checked. (direct)
  - [package.json:54](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L54) · declared-config
- **@tanstack/react-table** — dependencies: 9.2.4. Declaration only; installation is not checked. (direct)
  - [package.json:43](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L43) · declared-config
- **@types/node** — devDependencies: 22.20.2. Declaration only; installation is not checked. (direct)
  - [package.json:50](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L50) · declared-config
- **@types/react** — devDependencies: 19.3.0. Declaration only; installation is not checked. (direct)
  - [package.json:51](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L51) · declared-config
- **@types/react-dom** — devDependencies: 19.3.0. Declaration only; installation is not checked. (direct)
  - [package.json:52](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L52) · declared-config
- **csv-parse** — dependencies: 7.0.2. Declaration only; installation is not checked. (direct)
  - [package.json:39](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L39) · declared-config
- **csv-stringify** — dependencies: 6.8.3. Declaration only; installation is not checked. (direct)
  - [package.json:40](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L40) · declared-config
- **decimal.js** — dependencies: 10.6.0. Declaration only; installation is not checked. (direct)
  - [package.json:41](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L41) · declared-config
- **eslint** — devDependencies: 9.39.5. Declaration only; installation is not checked. (direct)
  - [package.json:55](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L55) · declared-config
- **eslint-config-next** — devDependencies: 16.3.8. Declaration only; installation is not checked. (direct)
  - [package.json:56](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L56) · declared-config
- **exceljs** — dependencies: 4.4.0. Declaration only; installation is not checked. (direct)
  - [package.json:38](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L38) · declared-config
- **inngest** — dependencies: 4.20.0. Declaration only; installation is not checked. (direct)
  - [package.json:35](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L35) · declared-config
- **lucide-react** — dependencies: 1.46.0. Declaration only; installation is not checked. (direct)
  - [package.json:45](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L45) · declared-config
- **next** — dependencies: 16.3.8. Declaration only; installation is not checked. (direct)
  - [package.json:28](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L28) · declared-config
- **node engine** — Declared compatibility: 24.x. (direct)
  - [package.json:6](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L6) · declared-config
- **npm engine** — Declared compatibility: 11.10.0. (direct)
  - [package.json:6](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L6) · declared-config
- **openai** — dependencies: 7.15.0. Declaration only; installation is not checked. (direct)
  - [package.json:37](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L37) · declared-config
- **Package manager** — npm@11.10.0 (direct)
  - [package.json:10](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L10) · declared-config
- **postgres** — dependencies: 3.4.9. Declaration only; installation is not checked. (direct)
  - [package.json:32](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L32) · declared-config
- **Python source** — Python source is present. The required interpreter, installed packages and launch environment need confirmation. (direct)
  - [scripts/audit-inputs.py:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/audit-inputs.py#L1) · observed-code
  - [scripts/provider\_catalog\_build.py:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/provider_catalog_build.py#L1) · observed-code
  - [scripts/provider\_catalog\_export.py:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/provider_catalog_export.py#L1) · observed-code
  - [scripts/provider\_catalog\_fetch.py:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/provider_catalog_fetch.py#L1) · observed-code
  - [scripts/provider\_catalog\_lookup.py:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/provider_catalog_lookup.py#L1) · observed-code
  - [scripts/provider\_catalog\_verify.py:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/provider_catalog_verify.py#L1) · observed-code
  - [scripts/test\_provider\_catalog.py:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/test_provider_catalog.py#L1) · observed-code
- **react** — dependencies: 19.3.0. Declaration only; installation is not checked. (direct)
  - [package.json:29](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L29) · declared-config
- **react-dom** — dependencies: 19.3.0. Declaration only; installation is not checked. (direct)
  - [package.json:30](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L30) · declared-config
- **tailwindcss** — devDependencies: 4.3.3. Declaration only; installation is not checked. (direct)
  - [package.json:53](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L53) · declared-config
- **tsx** — devDependencies: 4.23.13. Declaration only; installation is not checked. (direct)
  - [package.json:49](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L49) · declared-config
- **typescript** — devDependencies: 5.9.3. Declaration only; installation is not checked. (direct)
  - [package.json:48](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L48) · declared-config
- **vitest** — devDependencies: 5.0.0. Declaration only; installation is not checked. (direct)
  - [package.json:57](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L57) · declared-config
- **zod** — dependencies: 4.6.5. Declaration only; installation is not checked. (direct)
  - [package.json:42](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L42) · declared-config
- **Runtime pin: .node-version** — Declared runtime: 24.19.0. Availability on the operating machine is unverified. (direct)
  - [.node-version:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.node-version#L1) · declared-config

To establish: Which runtime versions, build steps and operating systems are required?

## Providers & services

- **Clerk** — Integration signal in source. Account ownership, provisioning and live connectivity are unverified. (inferred)
  - [package.json:33](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L33) · declared-config
  - [src/app/denied/page.tsx:2](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/denied/page.tsx#L2) · observed-code
  - [src/app/layout.tsx:2](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/layout.tsx#L2) · observed-code
  - [src/app/sign-in/\[\[...sign-in\]\]/page.tsx:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/sign-in/%5B%5B...sign-in%5D%5D/page.tsx#L1) · observed-code
  - [src/components/workbench.tsx:3](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/components/workbench.tsx#L3) · observed-code
  - [src/lib/server/auth.ts:25](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/auth.ts#L25) · observed-code
  - [src/proxy.ts:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/proxy.ts#L1) · observed-code
- **Inngest** — Mentioned in source documentation; implementation and account access need confirmation. (inferred)
  - [docs/ARCHITECTURE.md:15](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/ARCHITECTURE.md#L15) · source-reported
  - [docs/DECISIONS.md:75](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/DECISIONS.md#L75) · source-reported
  - [package.json:35](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L35) · declared-config
  - [src/app/api/inngest/route.ts:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/api/inngest/route.ts#L1) · observed-code
  - [src/lib/server/inngest.ts:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/inngest.ts#L1) · observed-code
- **OpenAI** — Mentioned in source documentation; implementation and account access need confirmation. (inferred)
  - [docs/ARCHITECTURE.md:19](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/ARCHITECTURE.md#L19) · source-reported
  - [package.json:37](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L37) · declared-config
  - [src/lib/server/research-adapter.ts:61](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/research-adapter.ts#L61) · observed-code
- **Sentry** — Integration signal in source. Account ownership, provisioning and live connectivity are unverified. (inferred)
  - [package.json:36](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L36) · declared-config
  - [src/lib/server/monitoring.ts:3](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/monitoring.ts#L3) · observed-code
- **Supabase** — Mentioned in source documentation; implementation and account access need confirmation. (inferred)
  - [AGENTS.md:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/AGENTS.md#L9) · source-reported
  - [docs/ARCHITECTURE.md:14](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/ARCHITECTURE.md#L14) · source-reported
  - [docs/DECISIONS.md:75](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/DECISIONS.md#L75) · source-reported
  - [docs/OPERATIONS.md:46](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/OPERATIONS.md#L46) · source-reported
  - [docs/RECOVERY\_PLAN.md:7](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/RECOVERY_PLAN.md#L7) · source-reported
  - [package.json:34](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L34) · declared-config
  - [scripts/cleanup-hosted-review.ts:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-review.ts#L9) · observed-code
  - [scripts/cleanup-hosted-rules.ts:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-rules.ts#L9) · observed-code

To establish: Which provider accounts, plans and service owners are required?

## Secrets & configuration

- **CLERK\_SECRET\_KEY** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:23](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L23) · declared-config
  - [scripts/doctor.ts:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/doctor.ts#L9) · observed-code
  - [src/app/denied/page.tsx:5](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/denied/page.tsx#L5) · observed-code
  - [src/app/layout.tsx:10](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/layout.tsx#L10) · observed-code
  - [src/app/sign-in/\[\[...sign-in\]\]/page.tsx:13](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/sign-in/%5B%5B...sign-in%5D%5D/page.tsx#L13) · observed-code
  - [src/lib/server/models.ts:33](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/models.ts#L33) · observed-code
  - [src/proxy.ts:16](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/proxy.ts#L16) · observed-code
- **DATABASE\_URL** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:28](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L28) · declared-config
  - [scripts/doctor.ts:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/doctor.ts#L9) · observed-code
  - [src/lib/server/db.ts:36](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/db.ts#L36) · observed-code
  - [src/lib/server/db.ts:37](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/db.ts#L37) · observed-code
  - [src/lib/server/models.ts:35](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/models.ts#L35) · observed-code
- **DEBUG** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [scripts/verify-hosted-review.ts:40](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-review.ts#L40) · observed-code
  - [scripts/verify-hosted-rules.ts:41](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-rules.ts#L41) · observed-code
  - [scripts/verify-hosted-smoke.ts:102](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-smoke.ts#L102) · observed-code
- **INNGEST\_EVENT\_KEY** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:31](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L31) · declared-config
  - [src/app/api/inngest/route.ts:6](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/api/inngest/route.ts#L6) · observed-code
  - [src/lib/server/models.ts:38](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/models.ts#L38) · observed-code
- **INNGEST\_SIGNING\_KEY** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:32](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L32) · declared-config
  - [scripts/doctor.ts:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/doctor.ts#L9) · observed-code
  - [src/app/api/inngest/route.ts:6](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/api/inngest/route.ts#L6) · observed-code
  - [src/lib/server/inngest.ts:8](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/inngest.ts#L8) · observed-code
  - [src/lib/server/models.ts:38](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/models.ts#L38) · observed-code
- **NEXT\_PUBLIC\_CLERK\_PUBLISHABLE\_KEY** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:22](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L22) · declared-config
  - [src/app/denied/page.tsx:5](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/denied/page.tsx#L5) · observed-code
  - [src/app/layout.tsx:10](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/layout.tsx#L10) · observed-code
  - [src/app/sign-in/\[\[...sign-in\]\]/page.tsx:13](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/sign-in/%5B%5B...sign-in%5D%5D/page.tsx#L13) · observed-code
  - [src/proxy.ts:16](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/proxy.ts#L16) · observed-code
- **NEXT\_PUBLIC\_CLERK\_SIGN\_IN\_URL** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:24](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L24) · declared-config
- **NEXT\_PUBLIC\_SUPABASE\_PUBLISHABLE\_KEY** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:26](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L26) · declared-config
- **NEXT\_PUBLIC\_SUPABASE\_URL** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:25](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L25) · declared-config
  - [scripts/cleanup-hosted-review.ts:83](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-review.ts#L83) · observed-code
  - [scripts/cleanup-hosted-rules.ts:90](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-rules.ts#L90) · observed-code
  - [src/lib/server/hosted-upload.ts:12](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/hosted-upload.ts#L12) · observed-code
  - [src/lib/server/storage.ts:11](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/storage.ts#L11) · observed-code
- **NEXT\_RUNTIME** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [src/instrumentation.ts:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/instrumentation.ts#L1) · declared-config
- **NODE\_ENV** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [src/lib/server/import-service.ts:43](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/import-service.ts#L43) · observed-code
  - [src/lib/server/knowledge-service.ts:108](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/knowledge-service.ts#L108) · observed-code
- **OPENAI\_API\_KEY** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:35](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L35) · declared-config
- **PORT** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [scripts/local.ts:5](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/local.ts#L5) · observed-code
- **PWDEBUG** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [scripts/verify-hosted-review.ts:40](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-review.ts#L40) · observed-code
  - [scripts/verify-hosted-rules.ts:41](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-rules.ts#L41) · observed-code
  - [scripts/verify-hosted-smoke.ts:102](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-smoke.ts#L102) · observed-code
- **RESEARCH\_AUTOMATION\_POLICY** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:38](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L38) · declared-config
- **RESEARCH\_BUDGET\_USD** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:39](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L39) · declared-config
- **RESEARCH\_CONCURRENCY** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:44](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L44) · declared-config
- **RESEARCH\_ENABLED** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:37](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L37) · declared-config
- **RESEARCH\_INPUT\_USD\_PER\_MILLION** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:47](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L47) · declared-config
- **RESEARCH\_MAX\_INPUT\_TOKENS** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:42](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L42) · declared-config
- **RESEARCH\_MAX\_OUTPUT\_TOKENS** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:43](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L43) · declared-config
- **RESEARCH\_MAX\_REQUESTS** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:40](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L40) · declared-config
- **RESEARCH\_MAX\_TOTAL\_TOKENS** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:41](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L41) · declared-config
- **RESEARCH\_MAX\_WEB\_SEARCH\_CALLS** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:45](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L45) · declared-config
- **RESEARCH\_MODEL** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:36](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L36) · declared-config
  - [src/lib/server/recommendations.ts:31](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/recommendations.ts#L31) · observed-code
- **RESEARCH\_OUTPUT\_USD\_PER\_MILLION** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:48](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L48) · declared-config
- **RESEARCH\_PRICE\_SOURCE** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:50](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L50) · declared-config
- **RESEARCH\_PRICE\_VERIFIED\_AT** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:51](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L51) · declared-config
- **RESEARCH\_TIMEOUT\_MS** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:46](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L46) · declared-config
- **RESEARCH\_WEB\_SEARCH\_USD\_PER\_CALL** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:49](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L49) · declared-config
- **SENTRY\_DSN** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:33](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L33) · declared-config
  - [scripts/doctor.ts:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/doctor.ts#L9) · observed-code
  - [src/lib/server/models.ts:40](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/models.ts#L40) · observed-code
  - [src/lib/server/monitoring.ts:3](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/monitoring.ts#L3) · observed-code
  - [src/lib/server/monitoring.ts:4](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/monitoring.ts#L4) · observed-code
- **SQC\_ACCESS\_CODE\_HASH** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:18](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L18) · declared-config
  - [src/lib/server/models.ts:33](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/models.ts#L33) · observed-code
  - [src/lib/server/session-auth.ts:32](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/session-auth.ts#L32) · observed-code
- **SQC\_ACCESS\_OPERATOR\_ID** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:17](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L17) · declared-config
  - [scripts/install-corpus-explanations.ts:11](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/install-corpus-explanations.ts#L11) · observed-code
  - [scripts/install-corpus.ts:11](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/install-corpus.ts#L11) · observed-code
  - [src/lib/server/models.ts:33](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/models.ts#L33) · observed-code
  - [src/lib/server/session-auth.ts:27](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/session-auth.ts#L27) · observed-code
- **SQC\_APP\_ORIGIN** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L9) · declared-config
  - [src/app/page.tsx:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/page.tsx#L9) · observed-code
  - [src/lib/server/auth.ts:7](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/auth.ts#L7) · observed-code
  - [src/lib/server/models.ts:33](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/models.ts#L33) · observed-code
  - [src/lib/server/session-auth.ts:28](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/session-auth.ts#L28) · observed-code
- **SQC\_AUTH\_MODE** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:12](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L12) · declared-config
  - [scripts/doctor.ts:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/doctor.ts#L9) · observed-code
  - [src/lib/server/models.ts:32](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/models.ts#L32) · observed-code
  - [src/lib/server/session-auth.ts:13](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/session-auth.ts#L13) · observed-code
- **SQC\_BIND\_HOST** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [scripts/backup.ts:2](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/backup.ts#L2) · observed-code
  - [scripts/local.ts:4](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/local.ts#L4) · observed-code
  - [tests/integration/harness.ts:11](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/tests/integration/harness.ts#L11) · observed-code
- **SQC\_BROWSER\_EXECUTABLE** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [playwright.config.ts:12](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/playwright.config.ts#L12) · declared-config
  - [playwright.query-classification.config.ts:14](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/playwright.query-classification.config.ts#L14) · declared-config
  - [scripts/verify-hosted-review.ts:52](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-review.ts#L52) · observed-code
  - [scripts/verify-hosted-rules.ts:53](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-rules.ts#L53) · observed-code
  - [scripts/verify-hosted-smoke.ts:121](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-smoke.ts#L121) · observed-code
- **SQC\_BROWSER\_PORT** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [playwright.config.ts:3](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/playwright.config.ts#L3) · declared-config
- **SQC\_BROWSER\_URL** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [playwright.config.ts:4](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/playwright.config.ts#L4) · declared-config
  - [playwright.config.ts:13](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/playwright.config.ts#L13) · declared-config
- **SQC\_CAPACITY\_ROWS** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [scripts/capacity.ts:11](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/capacity.ts#L11) · observed-code
- **SQC\_DATA\_DIR** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [scripts/doctor.ts:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/doctor.ts#L9) · observed-code
  - [scripts/local.ts:6](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/local.ts#L6) · observed-code
  - [src/lib/server/environment.ts:7](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/environment.ts#L7) · observed-code
  - [tests/browser/query-classification-fixture.ts:7](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/tests/browser/query-classification-fixture.ts#L7) · observed-code
  - [tests/integration/harness.ts:7](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/tests/integration/harness.ts#L7) · observed-code
- **SQC\_DOWNLOAD\_SIGNING\_KEY** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:30](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L30) · declared-config
  - [src/lib/server/storage.ts:35](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/storage.ts#L35) · observed-code
- **SQC\_HOSTED\_SMOKE\_ACCESS\_CODE\_FILE** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [scripts/verify-hosted-review.ts:43](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-review.ts#L43) · observed-code
  - [scripts/verify-hosted-rules.ts:44](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-rules.ts#L44) · observed-code
  - [scripts/verify-hosted-smoke.ts:104](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-smoke.ts#L104) · observed-code
- **SQC\_HOSTED\_SMOKE\_BYPASS\_URL\_FILE** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [scripts/verify-hosted-review.ts:55](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-review.ts#L55) · observed-code
  - [scripts/verify-hosted-review.ts:56](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-review.ts#L56) · observed-code
  - [scripts/verify-hosted-rules.ts:56](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-rules.ts#L56) · observed-code
  - [scripts/verify-hosted-rules.ts:57](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-rules.ts#L57) · observed-code
- **SQC\_HOSTED\_SMOKE\_CLEANUP** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [scripts/cleanup-hosted-review.ts:21](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-review.ts#L21) · observed-code
  - [scripts/cleanup-hosted-rules.ts:21](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-rules.ts#L21) · observed-code
- **SQC\_HOSTED\_SMOKE\_CLEANUP\_BACKUP** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [scripts/cleanup-hosted-review.ts:22](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-review.ts#L22) · observed-code
  - [scripts/cleanup-hosted-rules.ts:22](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-rules.ts#L22) · observed-code
- **SQC\_HOSTED\_SMOKE\_RECEIPT** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [scripts/cleanup-hosted-review.ts:22](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-review.ts#L22) · observed-code
  - [scripts/cleanup-hosted-rules.ts:22](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-rules.ts#L22) · observed-code
  - [scripts/verify-hosted-review.ts:43](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-review.ts#L43) · observed-code
  - [scripts/verify-hosted-rules.ts:44](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-rules.ts#L44) · observed-code
- **SQC\_HOSTED\_SMOKE\_TEST\_AUTH** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [scripts/verify-hosted-review.ts:39](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-review.ts#L39) · observed-code
  - [scripts/verify-hosted-rules.ts:40](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-rules.ts#L40) · observed-code
  - [scripts/verify-hosted-smoke.ts:101](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-smoke.ts#L101) · observed-code
- **SQC\_HOSTED\_SMOKE\_URL** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [scripts/verify-hosted-review.ts:41](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-review.ts#L41) · observed-code
  - [scripts/verify-hosted-rules.ts:42](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-rules.ts#L42) · observed-code
  - [scripts/verify-hosted-smoke.ts:103](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-smoke.ts#L103) · observed-code
- **SQC\_INPUT\_DIR** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [scripts/audit-inputs.ts:13](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/audit-inputs.ts#L13) · observed-code
  - [scripts/verify-private.ts:12](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-private.ts#L12) · observed-code
- **SQC\_LOCAL\_DEV** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:8](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L8) · declared-config
  - [scripts/backup.ts:2](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/backup.ts#L2) · observed-code
  - [scripts/local.ts:4](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/local.ts#L4) · observed-code
  - [tests/integration/harness.ts:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/tests/integration/harness.ts#L9) · observed-code
- **SQC\_LOCAL\_SERVER\_PROOF** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [scripts/local.ts:7](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/local.ts#L7) · observed-code
  - [scripts/local.ts:20](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/local.ts#L20) · observed-code
  - [src/lib/server/auth.ts:19](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/auth.ts#L19) · observed-code
  - [src/proxy.ts:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/proxy.ts#L9) · observed-code
- **SQC\_MODE** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:7](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L7) · declared-config
  - [scripts/backup.ts:2](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/backup.ts#L2) · observed-code
  - [scripts/cleanup-hosted-review.ts:21](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-review.ts#L21) · observed-code
  - [scripts/cleanup-hosted-rules.ts:21](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-rules.ts#L21) · observed-code
  - [scripts/local.ts:4](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/local.ts#L4) · observed-code
  - [tests/integration/harness.ts:8](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/tests/integration/harness.ts#L8) · observed-code
- **SQC\_NEXT\_DIR** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [next.config.ts:2](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/next.config.ts#L2) · declared-config
  - [scripts/local.ts:6](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/local.ts#L6) · observed-code
- **SQC\_NODE** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [scripts/runtime.mjs:7](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/runtime.mjs#L7) · observed-code
- **SQC\_OPERATOR\_IDS** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:10](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L10) · declared-config
  - [scripts/install-corpus.ts:11](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/install-corpus.ts#L11) · observed-code
  - [src/lib/server/models.ts:20](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/models.ts#L20) · observed-code
- **SQC\_PORT** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [scripts/local.ts:6](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/local.ts#L6) · observed-code
  - [src/app/page.tsx:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/page.tsx#L9) · observed-code
  - [src/lib/server/auth.ts:7](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/auth.ts#L7) · observed-code
- **SQC\_PYTHON** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [scripts/audit-inputs.ts:7](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/audit-inputs.ts#L7) · observed-code
- **SQC\_QUERY\_BROWSER\_PORT** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [playwright.query-classification.config.ts:4](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/playwright.query-classification.config.ts#L4) · declared-config
- **SQC\_SESSION\_SECRET** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:20](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L20) · declared-config
  - [src/lib/server/models.ts:33](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/models.ts#L33) · observed-code
  - [src/lib/server/session-auth.ts:36](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/session-auth.ts#L36) · observed-code
- **SQC\_STORAGE\_BUCKET** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:29](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L29) · declared-config
  - [scripts/cleanup-hosted-review.ts:83](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-review.ts#L83) · observed-code
  - [scripts/cleanup-hosted-rules.ts:90](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-rules.ts#L90) · observed-code
  - [src/lib/server/hosted-upload.ts:12](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/hosted-upload.ts#L12) · observed-code
  - [src/lib/server/storage.ts:16](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/storage.ts#L16) · observed-code
  - [src/lib/server/storage.ts:22](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/storage.ts#L22) · observed-code
  - [src/lib/server/storage.ts:30](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/storage.ts#L30) · observed-code
- **SQC\_TEST\_DATA\_DIR** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [scripts/capacity.ts:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/capacity.ts#L9) · observed-code
  - [scripts/verify-private.ts:10](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-private.ts#L10) · observed-code
- **SQC\_TEST\_ENQUEUE\_FAILURE** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [src/lib/server/import-service.ts:43](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/import-service.ts#L43) · observed-code
- **SQC\_WORKER\_BATCH\_SIZE** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [src/lib/server/worker.ts:75](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/worker.ts#L75) · observed-code
- **SQC\_WORKER\_LEASE\_MS** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct)
  - [src/lib/server/worker.ts:32](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/worker.ts#L32) · observed-code
- **SUPABASE\_SERVICE\_ROLE\_KEY** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct)
  - [.env.example:27](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L27) · declared-config
  - [scripts/cleanup-hosted-review.ts:83](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-review.ts#L83) · observed-code
  - [scripts/cleanup-hosted-rules.ts:90](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-rules.ts#L90) · observed-code
  - [scripts/doctor.ts:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/doctor.ts#L9) · observed-code
  - [src/lib/server/hosted-upload.ts:12](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/hosted-upload.ts#L12) · observed-code
  - [src/lib/server/models.ts:36](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/models.ts#L36) · observed-code
  - [src/lib/server/storage.ts:11](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/storage.ts#L11) · observed-code

To establish: Where are these named requirements provisioned, and who owns rotation? Values are never collected.

## Schedules & background work

- **In-process timer** — Timer reference; this does not establish a durable or currently running job. (inferred)
  - [scripts/capacity.ts:17](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/capacity.ts#L17) · observed-code
  - [scripts/local.ts:26](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/local.ts#L26) · observed-code
  - [src/components/operations.tsx:36](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/components/operations.tsx#L36) · observed-code
  - [src/components/workbench.tsx:107](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/components/workbench.tsx#L107) · observed-code
- **Inngest** — Mentioned in source documentation; implementation and account access need confirmation. (inferred)
  - [docs/ARCHITECTURE.md:15](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/ARCHITECTURE.md#L15) · source-reported
  - [docs/DECISIONS.md:75](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/DECISIONS.md#L75) · source-reported
  - [package.json:35](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L35) · declared-config
  - [src/app/api/inngest/route.ts:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/api/inngest/route.ts#L1) · observed-code
  - [src/lib/server/inngest.ts:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/inngest.ts#L1) · observed-code
- **Guard-name candidate: RESEARCH\_ENABLED** — A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified. (inferred)
  - [.env.example:37](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L37) · observed-code
- **Guard-name candidate: UNSELECTED\_PHRASE\_ENABLED** — A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified. (inferred)
  - [scripts/verify-hosted-review.ts:104](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-review.ts#L104) · observed-code
- **Guard-name candidate: PAID\_RESEARCH\_BUTTON\_ENABLED** — A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified. (inferred)
  - [scripts/verify-hosted-review.ts:115](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-review.ts#L115) · observed-code
- **Guard-name candidate: UNSELECTED\_PHRASE\_ENABLED** — A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified. (inferred)
  - [scripts/verify-hosted-rules.ts:110](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-rules.ts#L110) · observed-code
- **Guard-name candidate: PAID\_RESEARCH\_BUTTON\_ENABLED** — A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified. (inferred)
  - [scripts/verify-hosted-rules.ts:121](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-rules.ts#L121) · observed-code
- **Function declaration: sqc-durable-job-sweep** — Background-function configuration candidate. Trigger, retries, concurrency, deployment and enabled state require review. (inferred)
  - [src/lib/server/inngest.ts:7](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/inngest.ts#L7) · observed-code
- **Trigger candidate: cron** — Source-declared cron value: \* \* \* \* \*. Parent job and activation need confirmation. (inferred)
  - [src/lib/server/inngest.ts:7](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/inngest.ts#L7) · observed-code
- **Concurrency declaration** — Literal configuration value: 1. Which job/process it limits and whether it is active require review. (inferred)
  - [src/lib/server/inngest.ts:7](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/inngest.ts#L7) · observed-code
- **Guard-name candidate: RESEARCH\_ENABLED** — A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified. (inferred)
  - [src/lib/server/research-adapter.ts:104](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/research-adapter.ts#L104) · observed-code

To establish: Which declared jobs are enabled, in which environment, with what timezone and retry policy?

## APIs & webhooks

- **GET /api/download** — Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified. (direct)
  - [src/app/api/download/route.ts:7](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/api/download/route.ts#L7) · observed-code
- **GET /api/inngest** — Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified. (direct)
  - [src/app/api/inngest/route.ts:7](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/api/inngest/route.ts#L7) · observed-code
- **OpenAI** — Mentioned in source documentation; implementation and account access need confirmation. (inferred)
  - [docs/ARCHITECTURE.md:19](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/ARCHITECTURE.md#L19) · source-reported
  - [package.json:37](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L37) · declared-config
  - [src/lib/server/research-adapter.ts:61](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/research-adapter.ts#L61) · observed-code
- **POST /api/inngest** — Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified. (direct)
  - [src/app/api/inngest/route.ts:8](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/api/inngest/route.ts#L8) · observed-code
- **POST /api/rpc** — Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified. (direct)
  - [src/app/api/rpc/route.ts:8](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/api/rpc/route.ts#L8) · observed-code
- **POST /api/session** — Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified. (direct)
  - [src/app/api/session/route.ts:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/api/session/route.ts#L9) · observed-code
- **POST /api/storage-upload** — Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified. (direct)
  - [src/app/api/storage-upload/route.ts:5](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/api/storage-upload/route.ts#L5) · observed-code
- **POST /api/storage-upload/complete** — Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified. (direct)
  - [src/app/api/storage-upload/complete/route.ts:5](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/api/storage-upload/complete/route.ts#L5) · observed-code
- **POST /api/upload** — Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified. (direct)
  - [src/app/api/upload/route.ts:7](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/api/upload/route.ts#L7) · observed-code
- **PUT /api/inngest** — Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified. (direct)
  - [src/app/api/inngest/route.ts:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/api/inngest/route.ts#L9) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [scripts/cleanup-hosted-review.ts:18](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-review.ts#L18) · observed-code
- **Write-call candidate: remove** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [scripts/cleanup-hosted-review.ts:84](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-review.ts#L84) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [scripts/cleanup-hosted-rules.ts:18](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-rules.ts#L18) · observed-code
- **Write-call candidate: remove** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [scripts/cleanup-hosted-rules.ts:91](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-rules.ts#L91) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [scripts/provider\_catalog\_fetch.py:39](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/provider_catalog_fetch.py#L39) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [scripts/provider\_catalog\_fetch.py:71](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/provider_catalog_fetch.py#L71) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [scripts/provider\_catalog\_lookup.py:31](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/provider_catalog_lookup.py#L31) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [scripts/test\_provider\_catalog.py:66](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/test_provider_catalog.py#L66) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [scripts/verify-private.ts:17](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-private.ts#L17) · observed-code
- **Web-page entry** — Page source exists; route reachability and access controls remain unverified. This is not classified as an API endpoint. (direct)
  - [src/app/denied/page.tsx:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/denied/page.tsx#L1) · observed-code
- **Web-page entry** — Page source exists; route reachability and access controls remain unverified. This is not classified as an API endpoint. (direct)
  - [src/app/page.tsx:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/page.tsx#L1) · observed-code
- **Web-page entry** — Page source exists; route reachability and access controls remain unverified. This is not classified as an API endpoint. (direct)
  - [src/app/sign-in/\[\[...sign-in\]\]/page.tsx:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/sign-in/%5B%5B...sign-in%5D%5D/page.tsx#L1) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/components/negative-keywords.tsx:28](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/components/negative-keywords.tsx#L28) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/components/negative-keywords.tsx:30](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/components/negative-keywords.tsx#L30) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/lib/domain/exports.ts:160](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/domain/exports.ts#L160) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/lib/domain/recognition.ts:7](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/domain/recognition.ts#L7) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/lib/imports/parsers.ts:11](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/imports/parsers.ts#L11) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/lib/server/brand-knowledge.ts:23](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/brand-knowledge.ts#L23) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/lib/server/brand-knowledge.ts:27](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/brand-knowledge.ts#L27) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/lib/server/corpus.ts:88](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/corpus.ts#L88) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/lib/server/corpus.ts:92](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/corpus.ts#L92) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/lib/server/corpus.ts:132](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/corpus.ts#L132) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/lib/server/corpus.ts:135](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/corpus.ts#L135) · observed-code
- **Write-call candidate: remove** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/lib/server/hosted-upload.ts:27](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/hosted-upload.ts#L27) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/lib/server/negative-service.ts:79](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/negative-service.ts#L79) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/lib/server/positive-service.ts:22](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/positive-service.ts#L22) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/lib/server/recommendations.ts:16](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/recommendations.ts#L16) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/lib/server/research-service.ts:18](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/research-service.ts#L18) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/lib/server/rule-service.ts:126](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/rule-service.ts#L126) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/lib/server/session-auth.ts:37](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/session-auth.ts#L37) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/lib/server/session-auth.ts:44](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/session-auth.ts#L44) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/lib/server/session-auth.ts:57](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/session-auth.ts#L57) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/lib/server/session-auth.ts:97](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/session-auth.ts#L97) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/lib/server/storage.ts:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/storage.ts#L9) · observed-code
- **Write-call candidate: upload** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/lib/server/storage.ts:16](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/storage.ts#L16) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/lib/server/storage.ts:38](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/storage.ts#L38) · observed-code
- **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/lib/server/storage.ts:39](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/storage.ts#L39) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/lib/server/worker.ts:40](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/worker.ts#L40) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/lib/server/worker.ts:151](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/worker.ts#L151) · observed-code
- **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred)
  - [src/lib/server/workspace.ts:13](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/workspace.ts#L13) · observed-code

To establish: Who calls each interface, with which authentication, quotas and write permissions?

## Data & storage

- **PostgreSQL** — Integration signal in source. Account ownership, provisioning and live connectivity are unverified. (inferred)
  - [package.json:32](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L32) · declared-config
  - [src/lib/server/db.ts:2](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/db.ts#L2) · observed-code
- **Schema / migration definition** — Schema-related source exists; database contents and applied migration state were not inspected. (direct)
  - [supabase/migrations/202609140001\_sqc\_authorization.sql:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609140001_sqc_authorization.sql#L1) · observed-code
  - [supabase/migrations/202609250001\_sqc\_knowledge\_base.sql:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609250001_sqc_knowledge_base.sql#L1) · observed-code
  - [supabase/migrations/202609250003\_kb\_fk\_indexes.sql:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609250003_kb_fk_indexes.sql#L1) · observed-code
  - [supabase/migrations/202609250005\_kb\_samhsa\_directory.sql:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609250005_kb_samhsa_directory.sql#L1) · observed-code
  - [supabase/migrations/202609250006\_kb\_samhsa\_mental\_health.sql:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609250006_kb_samhsa_mental_health.sql#L1) · observed-code
  - [supabase/migrations/202610020001\_sqc\_server\_only.sql:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202610020001_sqc_server_only.sql#L1) · observed-code
  - [supabase/migrations/20261005083109\_consolidated\_knowledge\_draft.sql:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/20261005083109_consolidated_knowledge_draft.sql#L1) · observed-code
- **SQLite** — Integration signal in source. Account ownership, provisioning and live connectivity are unverified. (inferred)
  - [scripts/provider\_catalog\_build.py:16](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/provider_catalog_build.py#L16) · observed-code
  - [scripts/provider\_catalog\_export.py:8](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/provider_catalog_export.py#L8) · observed-code
  - [scripts/provider\_catalog\_lookup.py:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/provider_catalog_lookup.py#L9) · observed-code
  - [scripts/provider\_catalog\_verify.py:10](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/provider_catalog_verify.py#L10) · observed-code
  - [scripts/test\_provider\_catalog.py:3](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/test_provider_catalog.py#L3) · observed-code
- **Supabase** — Mentioned in source documentation; implementation and account access need confirmation. (inferred)
  - [AGENTS.md:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/AGENTS.md#L9) · source-reported
  - [docs/ARCHITECTURE.md:14](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/ARCHITECTURE.md#L14) · source-reported
  - [docs/DECISIONS.md:75](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/DECISIONS.md#L75) · source-reported
  - [docs/OPERATIONS.md:46](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/OPERATIONS.md#L46) · source-reported
  - [docs/RECOVERY\_PLAN.md:7](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/RECOVERY_PLAN.md#L7) · source-reported
  - [package.json:34](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L34) · declared-config
  - [scripts/cleanup-hosted-review.ts:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-review.ts#L9) · observed-code
  - [scripts/cleanup-hosted-rules.ts:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-rules.ts#L9) · observed-code
- **Table reference: sqc\_schema** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [src/lib/server/schema.sql:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/schema.sql#L1) · observed-code
- **Table reference: sqc\_state** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [src/lib/server/schema.sql:2](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/schema.sql#L2) · observed-code
- **Table reference: sqc\_documents** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [src/lib/server/schema.sql:4](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/schema.sql#L4) · observed-code
- **Table reference: sqc\_runs** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [src/lib/server/schema.sql:7](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/schema.sql#L7) · observed-code
- **Table reference: sqc\_jobs** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [src/lib/server/schema.sql:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/schema.sql#L9) · observed-code
- **Table reference: sqc\_rows** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [src/lib/server/schema.sql:11](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/schema.sql#L11) · observed-code
- **Table reference: sqc\_queries** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [src/lib/server/schema.sql:13](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/schema.sql#L13) · observed-code
- **Table reference: sqc\_results** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [src/lib/server/schema.sql:14](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/schema.sql#L14) · observed-code
- **Table reference: sqc\_audit** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [src/lib/server/schema.sql:18](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/schema.sql#L18) · observed-code
- **Table reference: sqc\_private.operators** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/202609140001\_sqc\_authorization.sql:6](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609140001_sqc_authorization.sql#L6) · observed-code
- **Table reference: public.** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/202609140001\_sqc\_authorization.sql:19](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609140001_sqc_authorization.sql#L19) · observed-code
- **Table reference: kb.categories** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/202609250001\_sqc\_knowledge\_base.sql:15](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609250001_sqc_knowledge_base.sql#L15) · observed-code
- **Table reference: kb.attach\_groups** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/202609250001\_sqc\_knowledge\_base.sql:24](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609250001_sqc_knowledge_base.sql#L24) · observed-code
- **Table reference: kb.topics** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/202609250001\_sqc\_knowledge\_base.sql:33](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609250001_sqc_knowledge_base.sql#L33) · observed-code
- **Table reference: kb.decisions** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/202609250001\_sqc\_knowledge\_base.sql:42](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609250001_sqc_knowledge_base.sql#L42) · observed-code
- **Table reference: kb.profiles** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/202609250001\_sqc\_knowledge\_base.sql:52](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609250001_sqc_knowledge_base.sql#L52) · observed-code
- **Table reference: kb.imports** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/202609250001\_sqc\_knowledge\_base.sql:61](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609250001_sqc_knowledge_base.sql#L61) · observed-code
- **Table reference: kb.search\_terms** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/202609250001\_sqc\_knowledge\_base.sql:71](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609250001_sqc_knowledge_base.sql#L71) · observed-code
- **Table reference: kb.queries** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/202609250001\_sqc\_knowledge\_base.sql:91](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609250001_sqc_knowledge_base.sql#L91) · observed-code
- **Table reference: kb.brands** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/202609250001\_sqc\_knowledge\_base.sql:106](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609250001_sqc_knowledge_base.sql#L106) · observed-code
- **Table reference: kb.protected\_searches** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/202609250001\_sqc\_knowledge\_base.sql:119](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609250001_sqc_knowledge_base.sql#L119) · observed-code
- **Table reference: kb.negative\_keywords** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/202609250001\_sqc\_knowledge\_base.sql:129](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609250001_sqc_knowledge_base.sql#L129) · observed-code
- **Table reference: kb.negative\_keyword\_history** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/202609250001\_sqc\_knowledge\_base.sql:167](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609250001_sqc_knowledge_base.sql#L167) · observed-code
- **Table reference: kb.** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/202609250001\_sqc\_knowledge\_base.sql:297](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609250001_sqc_knowledge_base.sql#L297) · observed-code
- **Table reference: kb.samhsa\_service\_codes** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/202609250005\_kb\_samhsa\_directory.sql:5](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609250005_kb_samhsa_directory.sql#L5) · observed-code
- **Table reference: kb.samhsa\_facilities** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/202609250005\_kb\_samhsa\_directory.sql:14](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609250005_kb_samhsa_directory.sql#L14) · observed-code
- **Table reference: kb.samhsa\_brand\_matches** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/202609250005\_kb\_samhsa\_directory.sql:45](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609250005_kb_samhsa_directory.sql#L45) · observed-code
- **Table reference: kb.** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/202609250005\_kb\_samhsa\_directory.sql:59](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609250005_kb_samhsa_directory.sql#L59) · observed-code
- **Table reference: kb.samhsa\_facilities** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/202609250006\_kb\_samhsa\_mental\_health.sql:5](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609250006_kb_samhsa_mental_health.sql#L5) · observed-code
- **Table reference: kb.samhsa\_facilities** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/202609250006\_kb\_samhsa\_mental\_health.sql:7](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609250006_kb_samhsa_mental_health.sql#L7) · observed-code
- **Table reference: kb.samhsa\_facilities** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/202609250006\_kb\_samhsa\_mental\_health.sql:8](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609250006_kb_samhsa_mental_health.sql#L8) · observed-code
- **Table reference: public.** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/202610020001\_sqc\_server\_only.sql:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202610020001_sqc_server_only.sql#L9) · observed-code
- **Table reference: sqc\_knowledge.releases** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/20261005083109\_consolidated\_knowledge\_draft.sql:6](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/20261005083109_consolidated_knowledge_draft.sql#L6) · observed-code
- **Table reference: sqc\_knowledge.sources** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/20261005083109\_consolidated\_knowledge\_draft.sql:14](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/20261005083109_consolidated_knowledge_draft.sql#L14) · observed-code
- **Table reference: sqc\_knowledge.records** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/20261005083109\_consolidated\_knowledge\_draft.sql:29](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/20261005083109_consolidated_knowledge_draft.sql#L29) · observed-code
- **Table reference: sqc\_knowledge.negative\_candidates** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/20261005083109\_consolidated\_knowledge\_draft.sql:47](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/20261005083109_consolidated_knowledge_draft.sql#L47) · observed-code
- **Table reference: sqc\_knowledge.releases** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/20261005083109\_consolidated\_knowledge\_draft.sql:96](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/20261005083109_consolidated_knowledge_draft.sql#L96) · observed-code
- **Table reference: sqc\_knowledge.sources** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/20261005083109\_consolidated\_knowledge\_draft.sql:97](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/20261005083109_consolidated_knowledge_draft.sql#L97) · observed-code
- **Table reference: sqc\_knowledge.records** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/20261005083109\_consolidated\_knowledge\_draft.sql:98](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/20261005083109_consolidated_knowledge_draft.sql#L98) · observed-code
- **Table reference: sqc\_knowledge.negative\_candidates** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [supabase/migrations/20261005083109\_consolidated\_knowledge\_draft.sql:99](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/20261005083109_consolidated_knowledge_draft.sql#L99) · observed-code
- **Table reference: sources** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [scripts/provider\_catalog\_build.py:119](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/provider_catalog_build.py#L119) · observed-code
- **Table reference: taxonomy** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [scripts/provider\_catalog\_build.py:120](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/provider_catalog_build.py#L120) · observed-code
- **Table reference: records** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [scripts/provider\_catalog\_build.py:121](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/provider_catalog_build.py#L121) · observed-code
- **Table reference: names** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [scripts/provider\_catalog\_build.py:126](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/provider_catalog_build.py#L126) · observed-code
- **Table reference: categories** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [scripts/provider\_catalog\_build.py:129](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/provider_catalog_build.py#L129) · observed-code
- **Table reference: locations** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [scripts/provider\_catalog\_build.py:131](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/provider_catalog_build.py#L131) · observed-code
- **Table reference: ingest\_stats** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [scripts/provider\_catalog\_build.py:134](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/provider_catalog_build.py#L134) · observed-code
- **Table reference: name\_catalog** — Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown. (direct)
  - [scripts/provider\_catalog\_build.py:376](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/provider_catalog_build.py#L376) · observed-code

To establish: Who owns the data, migrations, retention, backups and restoration?

## Identity & permissions

- **Clerk** — Integration signal in source. Account ownership, provisioning and live connectivity are unverified. (inferred)
  - [package.json:33](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L33) · declared-config
  - [src/app/denied/page.tsx:2](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/denied/page.tsx#L2) · observed-code
  - [src/app/layout.tsx:2](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/layout.tsx#L2) · observed-code
  - [src/app/sign-in/\[\[...sign-in\]\]/page.tsx:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/sign-in/%5B%5B...sign-in%5D%5D/page.tsx#L1) · observed-code
  - [src/components/workbench.tsx:3](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/components/workbench.tsx#L3) · observed-code
  - [src/lib/server/auth.ts:25](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/auth.ts#L25) · observed-code
  - [src/proxy.ts:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/proxy.ts#L1) · observed-code
- **Supabase** — Mentioned in source documentation; implementation and account access need confirmation. (inferred)
  - [AGENTS.md:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/AGENTS.md#L9) · source-reported
  - [docs/ARCHITECTURE.md:14](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/ARCHITECTURE.md#L14) · source-reported
  - [docs/DECISIONS.md:75](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/DECISIONS.md#L75) · source-reported
  - [docs/OPERATIONS.md:46](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/OPERATIONS.md#L46) · source-reported
  - [docs/RECOVERY\_PLAN.md:7](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/RECOVERY_PLAN.md#L7) · source-reported
  - [package.json:34](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L34) · declared-config
  - [scripts/cleanup-hosted-review.ts:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-review.ts#L9) · observed-code
  - [scripts/cleanup-hosted-rules.ts:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-rules.ts#L9) · observed-code
- **Row-security declaration** — DDL references row-level security. This does not establish deployed policies, role coverage or effective authorization. (inferred)
  - [supabase/migrations/202609140001\_sqc\_authorization.sql:19](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609140001_sqc_authorization.sql#L19) · observed-code
- **API-key or authorization header** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [supabase/migrations/202609140001\_sqc\_authorization.sql:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609140001_sqc_authorization.sql#L1) · observed-code
- **Login allowlist** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [supabase/migrations/202609140001\_sqc\_authorization.sql:14](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609140001_sqc_authorization.sql#L14) · observed-code
- **Row-security declaration** — DDL references row-level security. This does not establish deployed policies, role coverage or effective authorization. (inferred)
  - [supabase/migrations/202609250001\_sqc\_knowledge\_base.sql:297](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609250001_sqc_knowledge_base.sql#L297) · observed-code
- **API-key or authorization header** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [supabase/migrations/202609250001\_sqc\_knowledge\_base.sql:3](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609250001_sqc_knowledge_base.sql#L3) · observed-code
- **Row-security declaration** — DDL references row-level security. This does not establish deployed policies, role coverage or effective authorization. (inferred)
  - [supabase/migrations/202609250005\_kb\_samhsa\_directory.sql:59](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202609250005_kb_samhsa_directory.sql#L59) · observed-code
- **Row-security declaration** — DDL references row-level security. This does not establish deployed policies, role coverage or effective authorization. (inferred)
  - [supabase/migrations/202610020001\_sqc\_server\_only.sql:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202610020001_sqc_server_only.sql#L9) · observed-code
- **API-key or authorization header** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [supabase/migrations/202610020001\_sqc\_server\_only.sql:14](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/202610020001_sqc_server_only.sql#L14) · observed-code
- **Row-security declaration** — DDL references row-level security. This does not establish deployed policies, role coverage or effective authorization. (inferred)
  - [supabase/migrations/20261005083109\_consolidated\_knowledge\_draft.sql:96](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/supabase/migrations/20261005083109_consolidated_knowledge_draft.sql#L96) · observed-code
- **Login allowlist** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [scripts/setup-access-code.ts:79](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/setup-access-code.ts#L79) · observed-code
- **API-key or authorization header** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [scripts/verify-hosted-smoke.ts:73](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-smoke.ts#L73) · observed-code
- **Login allowlist** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [src/app/denied/page.tsx:6](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/denied/page.tsx#L6) · observed-code
- **Login allowlist** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [src/app/sign-in/\[\[...sign-in\]\]/page.tsx:14](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/sign-in/%5B%5B...sign-in%5D%5D/page.tsx#L14) · observed-code
- **API-key or authorization header** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [src/components/client.ts:50](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/components/client.ts#L50) · observed-code
- **Login allowlist** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [src/components/operations.tsx:94](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/components/operations.tsx#L94) · observed-code
- **Login allowlist** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [src/lib/server/auth.ts:27](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/auth.ts#L27) · observed-code
- **API-key or authorization header** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [src/lib/server/export-service.ts:224](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/export-service.ts#L224) · observed-code
- **API-key or authorization header** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [src/lib/server/hosted-upload.ts:16](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/hosted-upload.ts#L16) · observed-code
- **API-key or authorization header** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [src/lib/server/models.ts:35](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/models.ts#L35) · observed-code
- **Login allowlist** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [src/lib/server/models.ts:37](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/models.ts#L37) · observed-code
- **API-key or authorization header** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [src/lib/server/research-adapter.ts:66](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/research-adapter.ts#L66) · observed-code
- **API-key or authorization header** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [src/lib/server/storage.ts:31](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/storage.ts#L31) · observed-code
- **API-key or authorization header** — Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred. (inferred)
  - [src/proxy.ts:5](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/proxy.ts#L5) · observed-code

To establish: Which human, service and tenant roles can read or write each resource?

## Errors & monitoring

- **Application error logging** — Error logging call exists; destination, alerting, retention and redaction are unverified. (inferred)
  - [scripts/audit-inputs.ts:10](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/audit-inputs.ts#L10) · observed-code
  - [scripts/cleanup-hosted-review.ts:90](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-review.ts#L90) · observed-code
  - [scripts/cleanup-hosted-rules.ts:97](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-rules.ts#L97) · observed-code
  - [scripts/local.ts:19](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/local.ts#L19) · observed-code
  - [scripts/runtime.mjs:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/runtime.mjs#L9) · observed-code
  - [scripts/setup-access-code.ts:101](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/setup-access-code.ts#L101) · observed-code
  - [scripts/verify-hosted-review.ts:138](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-review.ts#L138) · observed-code
  - [scripts/verify-hosted-rules.ts:185](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-rules.ts#L185) · observed-code
- **Sentry** — Integration signal in source. Account ownership, provisioning and live connectivity are unverified. (inferred)
  - [package.json:36](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L36) · declared-config
  - [src/lib/server/monitoring.ts:3](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/monitoring.ts#L3) · observed-code

To establish: Where do errors and alerts go, who receives them, and are sensitive fields scrubbed?

## Hosting & delivery

No evidence found in the inspected files. This does not establish absence.

To establish: Which project/environment is deployed, and does its source match this revision?

## Devices & execution access

- **Browser automation** — Browser automation signal; browser binaries, host and permissions may be required. (inferred)
  - [.vercelignore:9](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.vercelignore#L9) · observed-code
  - [package.json:23](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L23) · declared-config
  - [eslint.config.mjs:4](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/eslint.config.mjs#L4) · observed-code
  - [next.config.ts:2](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/next.config.ts#L2) · declared-config
  - [playwright.config.ts:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/playwright.config.ts#L1) · declared-config
  - [playwright.query-classification.config.ts:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/playwright.query-classification.config.ts#L1) · declared-config
  - [scripts/verify-hosted-review.ts:11](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-review.ts#L11) · observed-code
  - [scripts/verify-hosted-rules.ts:11](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-rules.ts#L11) · observed-code
- **Clipboard** — Clipboard access is referenced; permission and user gesture requirements need review. (inferred)
  - [scripts/verify-hosted-review.ts:127](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-review.ts#L127) · observed-code
  - [scripts/verify-hosted-rules.ts:133](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-rules.ts#L133) · observed-code
  - [src/components/negative-review.tsx:98](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/components/negative-review.tsx#L98) · observed-code
- **Local filesystem access** — Filesystem reference; approved paths, read/write scope and operating identity need confirmation. (inferred)
  - [scripts/audit-inputs.py:14](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/audit-inputs.py#L14) · observed-code
  - [scripts/audit-inputs.ts:2](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/audit-inputs.ts#L2) · observed-code
  - [scripts/candidate-capacity.ts:3](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/candidate-capacity.ts#L3) · observed-code
  - [scripts/cleanup-hosted-review.ts:6](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-review.ts#L6) · observed-code
  - [scripts/cleanup-hosted-rules.ts:6](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-rules.ts#L6) · observed-code
  - [scripts/doctor.ts:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/doctor.ts#L1) · observed-code
  - [scripts/fixtures.ts:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/fixtures.ts#L1) · observed-code
  - [scripts/install-corpus-explanations.ts:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/install-corpus-explanations.ts#L1) · observed-code
- **Local process access** — Source starts or inspects local processes. Commands, execution owner and machine access need review. (inferred)
  - [scripts/audit-inputs.ts:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/audit-inputs.ts#L1) · observed-code
  - [scripts/runtime.mjs:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/runtime.mjs#L1) · observed-code
  - [scripts/setup-access-code.ts:2](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/setup-access-code.ts#L2) · observed-code

To establish: Does operation need a browser, mobile device, local PC, filesystem or remote computer? Who grants access?

## Troubleshooting & recovery

- **Package script: audit:dependencies** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:15](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L15) · declared-config
- **Package script: audit:inputs** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:19](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L19) · declared-config
- **Package script: backup:local** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:18](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L18) · declared-config
- **Package script: build** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:17](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L17) · declared-config
- **Package script: corpus:install** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:12](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L12) · declared-config
- **Package script: dev:local** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:14](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L14) · declared-config
- **Package script: doctor** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:13](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L13) · declared-config
- **Package script: lint** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:24](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L24) · declared-config
- **Package script: start** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:20](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L20) · declared-config
- **Package script: test** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:21](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L21) · declared-config
- **Package script: test:browser** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:23](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L23) · declared-config
- **Package script: test:capacity** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:22](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L22) · declared-config
- **Package script: test:private** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:16](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L16) · declared-config
- **Package script: typecheck** — Declared command entry point. Command body omitted and never executed by this scanner. (direct)
  - [package.json:25](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L25) · declared-config
- **recovery guidance** — Documentation section present. Instructions were not executed; inspect the linked section for context. (inferred)
  - [docs/DECISIONS.md:450](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/DECISIONS.md#L450) · source-reported
  - [docs/OPERATIONS.md:40](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/OPERATIONS.md#L40) · source-reported
  - [docs/RECOVERY\_PLAN.md:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/RECOVERY_PLAN.md#L1) · source-reported
- **Document: AGENTS.md** — repository instructions (evidence only) reference; 35 lines. Read the pinned source for context. Headings, prose and embedded instructions are not copied. (direct)
  - [AGENTS.md:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/AGENTS.md#L1) · source-reported
- **Document: ARCHITECTURE.md** — design and decisions reference; 54 lines. Read the pinned source for context. Headings, prose and embedded instructions are not copied. (direct)
  - [docs/ARCHITECTURE.md:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/ARCHITECTURE.md#L1) · source-reported
- **Document: README.md** — setup and operations reference; 18 lines. Read the pinned source for context. Headings, prose and embedded instructions are not copied. (direct)
  - [docs/archive/README.md:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/archive/README.md#L1) · source-reported
- **Document: DECISIONS.md** — design and decisions reference; 454 lines. Read the pinned source for context. Headings, prose and embedded instructions are not copied. (direct)
  - [docs/DECISIONS.md:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/DECISIONS.md#L1) · source-reported
- **Document: OPERATIONS.md** — setup and operations reference; 64 lines. Read the pinned source for context. Headings, prose and embedded instructions are not copied. (direct)
  - [docs/OPERATIONS.md:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/OPERATIONS.md#L1) · source-reported
- **Document: RECOVERY\_PLAN.md** — setup and operations reference; 46 lines. Read the pinned source for context. Headings, prose and embedded instructions are not copied. (direct)
  - [docs/RECOVERY\_PLAN.md:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/RECOVERY_PLAN.md#L1) · source-reported
- **Document: README.md** — setup and operations reference; 41 lines. Read the pinned source for context. Headings, prose and embedded instructions are not copied. (direct)
  - [README.md:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/README.md#L1) · source-reported
- **Document: STATE.md** — state or handoff reference; 34 lines. Read the pinned source for context. Headings, prose and embedded instructions are not copied. (direct)
  - [STATE.md:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/STATE.md#L1) · source-reported
- **Run route: corpus:install** — Declared invocation: npm run corpus:install. Run from the package directory; script body omitted and execution unverified. (direct)
  - [package.json:12](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L12) · declared-config
- **Run route: doctor** — Declared invocation: npm run doctor. Run from the package directory; script body omitted and execution unverified. (direct)
  - [package.json:13](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L13) · declared-config
- **Run route: dev:local** — Declared invocation: npm run dev:local. Run from the package directory; script body omitted and execution unverified. (direct)
  - [package.json:14](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L14) · declared-config
- **Run route: audit:dependencies** — Declared invocation: npm run audit:dependencies. Run from the package directory; script body omitted and execution unverified. (direct)
  - [package.json:15](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L15) · declared-config
- **Run route: test:private** — Declared invocation: npm run test:private. Run from the package directory; script body omitted and execution unverified. (direct)
  - [package.json:16](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L16) · declared-config
- **Run route: build** — Declared invocation: npm run build. Run from the package directory; script body omitted and execution unverified. (direct)
  - [package.json:17](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L17) · declared-config
- **Run route: backup:local** — Declared invocation: npm run backup:local. Run from the package directory; script body omitted and execution unverified. (direct)
  - [package.json:18](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L18) · declared-config
- **Run route: audit:inputs** — Declared invocation: npm run audit:inputs. Run from the package directory; script body omitted and execution unverified. (direct)
  - [package.json:19](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L19) · declared-config
- **Run route: start** — Declared invocation: npm run start. Run from the package directory; script body omitted and execution unverified. (direct)
  - [package.json:20](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L20) · declared-config
- **Run route: test** — Declared invocation: npm run test. Run from the package directory; script body omitted and execution unverified. (direct)
  - [package.json:21](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L21) · declared-config
- **Run route: test:capacity** — Declared invocation: npm run test:capacity. Run from the package directory; script body omitted and execution unverified. (direct)
  - [package.json:22](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L22) · declared-config
- **Run route: test:browser** — Declared invocation: npm run test:browser. Run from the package directory; script body omitted and execution unverified. (direct)
  - [package.json:23](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L23) · declared-config
- **Run route: lint** — Declared invocation: npm run lint. Run from the package directory; script body omitted and execution unverified. (direct)
  - [package.json:24](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L24) · declared-config
- **Run route: typecheck** — Declared invocation: npm run typecheck. Run from the package directory; script body omitted and execution unverified. (direct)
  - [package.json:25](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L25) · declared-config
- **Logic pointer: createCorpusClassifier** — Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied. (inferred)
  - [src/lib/domain/corpus.ts:136](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/domain/corpus.ts#L136) · observed-code
- **Logic pointer: classifyQuery** — Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied. (inferred)
  - [src/lib/domain/recognition.ts:86](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/domain/recognition.ts#L86) · observed-code
- **Logic pointer: createClassifier** — Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied. (inferred)
  - [src/lib/domain/recognition.ts:131](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/domain/recognition.ts#L131) · observed-code
- **Logic pointer: classifierForSnapshot** — Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied. (inferred)
  - [src/lib/server/corpus.ts:143](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/corpus.ts#L143) · observed-code
- **Logic pointer: classifierWithCorpus** — Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied. (inferred)
  - [src/lib/server/corpus.ts:158](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/corpus.ts#L158) · observed-code
- **Logic pointer: normalizedOptions** — Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied. (inferred)
  - [src/lib/server/import-custom.ts:8](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/import-custom.ts#L8) · observed-code
- **Logic pointer: reclassify** — Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied. (inferred)
  - [src/lib/server/service.ts:25](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/service.ts#L25) · observed-code
- **Logic pointer: normalized** — Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied. (inferred)
  - [src/lib/server/workspace.ts:100](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/workspace.ts#L100) · observed-code

To establish: Which runbook, health checks, rollback and recovery procedure have been exercised?

## Tests & ownership

- **Test sources present** — Test paths found in the tree; their contents and outcomes are not inferred from existence. (inferred)
  - [scripts/test\_provider\_catalog.py:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/test_provider_catalog.py#L1) · declared-config
  - [tests/browser/consolidated-knowledge.spec.ts:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/tests/browser/consolidated-knowledge.spec.ts#L1) · declared-config
  - [tests/browser/help.spec.ts:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/tests/browser/help.spec.ts#L1) · declared-config
  - [tests/browser/negative-library.spec.ts:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/tests/browser/negative-library.spec.ts#L1) · declared-config
  - [tests/browser/origin-navigation.spec.ts:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/tests/browser/origin-navigation.spec.ts#L1) · declared-config
  - [tests/browser/positive-library.spec.ts:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/tests/browser/positive-library.spec.ts#L1) · declared-config
  - [tests/browser/query-classification-fixture.ts:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/tests/browser/query-classification-fixture.ts#L1) · declared-config
  - [tests/browser/query-classification.spec.ts:1](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/tests/browser/query-classification.spec.ts#L1) · declared-config

To establish: Who maintains this app, what is actually in use, and which checks establish acceptance?

## Coverage and limitations

136 files inspected of 136 eligible; 137 excluded/outside scope; 0 failed reads.

- Static inspection does not verify runtime health, current use, provisioning, live schedules, service account access or deployed/source alignment.
- Only bounded source/configuration files are inspected. Secret files, data exports, binaries, history and raw source text are excluded from results.
- Unknown or dynamically constructed integrations and configuration names may not be detected. Human review is still needed.
- Deep scan: more source and candidate detectors, with an adjacent versioned receipt. Candidate calls and tracking matches still require interpretation.