{"banner":"SHIELD/ATLAS Configuration Manager — Centralized Environment Variable Registry","summary":{"total":49,"configured":10,"missingRequired":0,"missingRequiredVars":[],"missingRecommended":0,"missingRecommendedVars":[],"configuredPct":20,"byCategory":[{"category":"Database","total":1,"configured":1,"missing":[]},{"category":"Server","total":2,"configured":2,"missing":[]},{"category":"AI Providers","total":4,"configured":4,"missing":[]},{"category":"Security","total":2,"configured":2,"missing":[]},{"category":"Sensors","total":5,"configured":1,"missing":[]},{"category":"Infrastructure","total":2,"configured":0,"missing":[]},{"category":"Integration","total":23,"configured":0,"missing":[]},{"category":"Google Cloud","total":4,"configured":0,"missing":[]},{"category":"Hardware","total":1,"configured":0,"missing":[]},{"category":"Performance","total":2,"configured":0,"missing":[]},{"category":"Deployment","total":2,"configured":0,"missing":[]},{"category":"Voice","total":1,"configured":0,"missing":[]}]},"validation":{"valid":true,"errors":[],"warnings":["No distributed broker configured (REDIS_URL or KAFKA_BROKERS) — using LocalAdapter (single-node only)","FAA NOTAM credentials not configured — NOTAM ingestion disabled"]},"variables":[{"key":"DATABASE_URL","category":"Database","description":"PostgreSQL connection string","required":true,"recommended":false,"sensitive":true,"configured":true,"source":"environment","defaultValue":null,"validValues":null,"currentValue":"***REDACTED***"},{"key":"PORT","category":"Server","description":"HTTP server listen port","required":false,"recommended":false,"sensitive":false,"configured":true,"source":"environment","defaultValue":"5000","validValues":null,"currentValue":"5000"},{"key":"NODE_ENV","category":"Server","description":"Runtime environment","required":false,"recommended":false,"sensitive":false,"configured":true,"source":"environment","defaultValue":"development","validValues":["development","production","test"],"currentValue":"production"},{"key":"AI_INTEGRATIONS_OPENAI_API_KEY","category":"AI Providers","description":"OpenAI GPT-4o API key (primary, US-origin, GSAR 552.239-7001) — degrades gracefully","required":false,"recommended":true,"sensitive":true,"configured":true,"source":"environment","defaultValue":null,"validValues":null,"currentValue":"***REDACTED***"},{"key":"AI_INTEGRATIONS_OPENROUTER_API_KEY","category":"AI Providers","description":"OpenRouter API key for GPT-4o/Gemini/Perplexity — degrades gracefully","required":false,"recommended":true,"sensitive":true,"configured":true,"source":"environment","defaultValue":null,"validValues":null,"currentValue":"***REDACTED***"},{"key":"AI_INTEGRATIONS_OPENROUTER_BASE_URL","category":"AI Providers","description":"OpenRouter API base URL (only needed when OpenRouter is enabled)","required":false,"recommended":false,"sensitive":false,"configured":true,"source":"environment","defaultValue":"https://openrouter.ai/api/v1","validValues":null,"currentValue":"https://openrouter.ai/api/v1"},{"key":"OPENAI_API_KEY","category":"AI Providers","description":"OpenAI API key (direct access)","required":false,"recommended":false,"sensitive":true,"configured":true,"source":"environment","defaultValue":null,"validValues":null,"currentValue":"***REDACTED***"},{"key":"ATLAS_JWT_SECRET","category":"Security","description":"JWT signing secret for ATLAS auth","required":true,"recommended":false,"sensitive":true,"configured":true,"source":"environment","defaultValue":null,"validValues":null,"currentValue":"***REDACTED***"},{"key":"ATLAS_OWNER_CODES","category":"Security","description":"Comma-separated owner authorization codes","required":false,"recommended":false,"sensitive":true,"configured":true,"source":"environment","defaultValue":"FLOOD2026","validValues":null,"currentValue":"***REDACTED***"},{"key":"AIS_STREAM_API_KEY","category":"Sensors","description":"AISStream.io WebSocket API key for global vessel tracking","required":false,"recommended":false,"sensitive":true,"configured":true,"source":"environment","defaultValue":null,"validValues":null,"currentValue":"***REDACTED***"},{"key":"PLANET_API_KEY","category":"Sensors","description":"Planet Labs API key for live commercial imagery tasking","required":false,"recommended":false,"sensitive":true,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"MAXAR_API_KEY","category":"Sensors","description":"Maxar API bearer token for live commercial imagery","required":false,"recommended":false,"sensitive":true,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"FAA_NOTAM_CLIENT_ID","category":"Sensors","description":"FAA NOTAM API client ID","required":false,"recommended":false,"sensitive":true,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"FAA_NOTAM_CLIENT_SECRET","category":"Sensors","description":"FAA NOTAM API client secret","required":false,"recommended":false,"sensitive":true,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"REDIS_URL","category":"Infrastructure","description":"Redis connection URL for distributed event bus and state","required":false,"recommended":false,"sensitive":true,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"KAFKA_BROKERS","category":"Infrastructure","description":"Comma-separated Kafka broker addresses","required":false,"recommended":false,"sensitive":false,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"JTIC2S_CPCE_BASE_URL","category":"Integration","description":"JTIC2S CPCE config-server base URL","required":false,"recommended":false,"sensitive":false,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"JTIC2S_CPCE_TOKEN_URL","category":"Integration","description":"JTIC2S CPCE OAuth token URL","required":false,"recommended":false,"sensitive":false,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"JTIC2S_CPCE_CLIENT_ID","category":"Integration","description":"JTIC2S CPCE OAuth client id","required":false,"recommended":false,"sensitive":true,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"JTIC2S_CPCE_CLIENT_SECRET","category":"Integration","description":"JTIC2S CPCE OAuth client secret","required":false,"recommended":false,"sensitive":true,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"JTIC2S_CPCE_SCOPE","category":"Integration","description":"JTIC2S CPCE OAuth scope","required":false,"recommended":false,"sensitive":false,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"JTIC2S_CPCE_AUDIENCE","category":"Integration","description":"JTIC2S CPCE OAuth audience","required":false,"recommended":false,"sensitive":false,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"JTIC2S_CPCE_MAX_RETRIES","category":"Integration","description":"JTIC2S CPCE bounded retry limit","required":false,"recommended":false,"sensitive":false,"configured":false,"source":"default","defaultValue":"4","validValues":null,"currentValue":"4"},{"key":"JTIC2S_CPCE_BACKOFF_BASE_MS","category":"Integration","description":"JTIC2S CPCE retry base backoff in ms","required":false,"recommended":false,"sensitive":false,"configured":false,"source":"default","defaultValue":"250","validValues":null,"currentValue":"250"},{"key":"JTIC2S_CPCE_BACKOFF_CAP_MS","category":"Integration","description":"JTIC2S CPCE retry max backoff in ms","required":false,"recommended":false,"sensitive":false,"configured":false,"source":"default","defaultValue":"5000","validValues":null,"currentValue":"5000"},{"key":"JTIC2S_RABBITMQ_URL","category":"Integration","description":"JTIC2S RabbitMQ broker URL","required":false,"recommended":false,"sensitive":true,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"JTIC2S_RABBITMQ_EXCHANGE","category":"Integration","description":"JTIC2S RabbitMQ exchange name","required":false,"recommended":false,"sensitive":false,"configured":false,"source":"default","defaultValue":"afatdsm-topic-exchange","validValues":null,"currentValue":"afatdsm-topic-exchange"},{"key":"JTIC2S_RABBITMQ_QUEUE","category":"Integration","description":"JTIC2S RabbitMQ subscriber queue","required":false,"recommended":false,"sensitive":false,"configured":false,"source":"default","defaultValue":"jtic2s.atlas.ingest","validValues":null,"currentValue":"jtic2s.atlas.ingest"},{"key":"JTIC2S_RABBITMQ_BINDINGS","category":"Integration","description":"JTIC2S RabbitMQ binding keys (comma-separated)","required":false,"recommended":false,"sensitive":false,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"JTIC2S_RABBITMQ_PREFETCH","category":"Integration","description":"JTIC2S RabbitMQ prefetch count","required":false,"recommended":false,"sensitive":false,"configured":false,"source":"default","defaultValue":"25","validValues":null,"currentValue":"25"},{"key":"JTIC2S_NATS_URL","category":"Integration","description":"JTIC2S NATS broker URL(s), comma-separated","required":false,"recommended":false,"sensitive":true,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"JTIC2S_NATS_TOKEN","category":"Integration","description":"JTIC2S NATS token auth","required":false,"recommended":false,"sensitive":true,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"JTIC2S_NATS_USER","category":"Integration","description":"JTIC2S NATS username","required":false,"recommended":false,"sensitive":true,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"JTIC2S_NATS_PASSWORD","category":"Integration","description":"JTIC2S NATS password","required":false,"recommended":false,"sensitive":true,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"JTIC2S_NATS_TLS","category":"Integration","description":"JTIC2S NATS TLS enabled","required":false,"recommended":false,"sensitive":false,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"JTIC2S_STOMP_URL","category":"Integration","description":"JTIC2S STOMP broker URL","required":false,"recommended":false,"sensitive":true,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"JTIC2S_STOMP_USER","category":"Integration","description":"JTIC2S STOMP username override","required":false,"recommended":false,"sensitive":true,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"JTIC2S_STOMP_PASSWORD","category":"Integration","description":"JTIC2S STOMP password override","required":false,"recommended":false,"sensitive":true,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"JTIC2S_STOMP_TLS","category":"Integration","description":"JTIC2S STOMP TLS enabled","required":false,"recommended":false,"sensitive":false,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"GOOGLE_CLIENT_ID","category":"Google Cloud","description":"Google OAuth2 client ID","required":false,"recommended":false,"sensitive":false,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"GOOGLE_CLIENT_SECRET","category":"Google Cloud","description":"Google OAuth2 client secret","required":false,"recommended":false,"sensitive":true,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"GOOGLE_SERVICE_ACCOUNT_KEY","category":"Google Cloud","description":"Google service account JSON key","required":false,"recommended":false,"sensitive":true,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"SDR_POLL_INTERVAL_MS","category":"Hardware","description":"SDR USB device polling interval in milliseconds","required":false,"recommended":false,"sensitive":false,"configured":false,"source":"default","defaultValue":"3000","validValues":null,"currentValue":"3000"},{"key":"ATLAS_BACKPRESSURE_THRESHOLD","category":"Performance","description":"Query queue backpressure threshold","required":false,"recommended":false,"sensitive":false,"configured":false,"source":"default","defaultValue":"50","validValues":null,"currentValue":"50"},{"key":"ATLAS_CACHE_TTL_MS","category":"Performance","description":"Database query cache TTL in milliseconds","required":false,"recommended":false,"sensitive":false,"configured":false,"source":"default","defaultValue":"30000","validValues":null,"currentValue":"30000"},{"key":"PRODUCTION_DOMAIN","category":"Deployment","description":"Production domain for CORS and redirects","required":false,"recommended":false,"sensitive":false,"configured":false,"source":"default","defaultValue":"secureassure.app","validValues":null,"currentValue":"secureassure.app"},{"key":"ELEVENLABS_API_KEY","category":"Voice","description":"ElevenLabs API key for studio TTS","required":false,"recommended":false,"sensitive":true,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"GMAIL_REFRESH_TOKEN","category":"Google Cloud","description":"Gmail OAuth refresh token for outbound mail","required":false,"recommended":false,"sensitive":true,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"PUBLIC_BASE_URL","category":"Deployment","description":"Public site origin (default https://secureassure.app)","required":false,"recommended":false,"sensitive":false,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null}],"secretsManagement":{"current":"Environment variables (EC2 .env / GitHub Actions secrets)","roadmap":"HashiCorp Vault integration planned for FedRAMP High baseline","compliance":"All secrets injected at runtime, never stored in code or version control"}}