flag-parity-allowlist.txt

# Env keys consumed by code but deliberately NOT wired in cdk task definitions.
# Checked by scripts/release/flag-parity.mjs (CI, cdk job). Every entry needs a
# category; the checker fails on keys missing here AND on stale entries (no
# longer consumed, or since wired in cdk — remove the line when that happens).
#
# To turn a code-default lever into a per-env setting: wire it in
# cdk/lib/app-stack.ts (or etl-stack.ts), regenerate the snapshot
# (cd cdk && npm test -- -u), and delete its line here.

# --- runtime/system (injected by platform, test runner, or build) ---
AWS_DEFAULT_REGION
AWS_REGION
NEXT_PUBLIC_IMPERSONATION_TTL_SECONDS  # build-time inline (NEXT_PUBLIC_*)
NEXT_PUBLIC_SITE_URL                   # build-time inline (NEXT_PUBLIC_*)
OTEL_SERVICE_VERSION
SPS_IMAGE_SHA                          # stamped by the deploy workflow at build
VITEST                                 # test-runner guard

# --- optional external API keys / etiquette headers (unset = degraded-but-safe) ---
AI_GATEWAY_API_KEY
NCBI_API_KEY
OPENALEX_MAILTO
SERPAPI_KEY

# --- SAML/session optional overrides (lib/auth/config.ts optionalEnv(), safe code default) ---
SAML_DEFAULT_RETURN_PATH  # falls back to "/edit"
SAML_EPPN_ATTRIBUTE       # falls back to the standard eppn OID
SAML_NAMEID_FORMAT        # unset lets the IdP choose the NameID format
SESSION_COOKIE_DOMAIN     # unset omits Domain (local dev / same-host default)
SESSION_COOKIE_NAME       # falls back to "__Secure-sps_session"

# --- code-default tunables: numeric/mode levers with baked-in defaults ---
BIOSKETCH_GENERATE_MODEL
CANCER_FUNDING_MODEL                # NCI Table 2A inference model rollback lever (code default Sonnet 4.5)
EDIT_BIOSKETCH_GENERATE_RATE_LIMIT
EDIT_CV_EXPORT_RATE_LIMIT           # CV-export Bedrock cap (code default 10/hr)
GRANT_MATCHER_DENSE_REL
GRANT_MATCHER_REL_BOOST
IMPERSONATION_READONLY
IMPERSONATION_TTL_SECONDS
MATCHA_EXTRACT_MODEL                # Matcha concept-extractor model rollback lever (code default Sonnet 4.5)
OVERVIEW_GENERATE_MODEL
OVERVIEW_GENERATE_TEMPERATURE
RECITER_REFRESH_DELAY_MINUTES
REPORTER_MATCH_V2_MAX_PER_RUN
REPORTER_MATCH_V2_MIN_PMIDS
FACULTY_REVIEW_TOKEN_PREVIOUS       # rotation slot; primary FACULTY_REVIEW_TOKEN wired in app-stack (#1855)
RESEARCH_INFORMATICS_TOKEN_PREVIOUS # rotation slot; primary RESEARCH_INFORMATICS_TOKEN wired in app-stack (#2363)
SCHOLARS_REVALIDATE_TOKEN_PREVIOUS
SEARCH_AREA_BOOST_TOP_N             # area-boost scholar-list cap (code default 500) — A/B lever
SEARCH_AREA_BOOST_W_MID             # area-boost tier weight (code default 1.5) — A/B lever
SEARCH_AREA_BOOST_W_LO              # area-boost tier weight (code default 0.75) — A/B lever
SEARCH_FUNDING_MATCH_REASON         # default-on (!== "off")
SEARCH_FUNDING_PHRASE_BOOST
SEARCH_FUNDING_TAB_MSM
SEARCH_FUNDING_TEXT_EVIDENCE
SEARCH_INDEX_BULK_MAX_ATTEMPTS
SEARCH_INDEX_BULK_MAX_BYTES
SEARCH_INDEX_BULK_MAX_DOCS
SEARCH_INDEX_BULK_PAUSE_MS
SEARCH_OS_REQUEST_TIMEOUT_MS        # interactive OS .search() timeout (code default 5000ms)
SEARCH_PEOPLE_CLINICAL_FN_WEIGHT    # weight for SEARCH_PEOPLE_CLINICAL_FN (code default 3)
SEARCH_PEOPLE_DEPT_LEADERSHIP_BOOST # default-on (!== "off")
SEARCH_PEOPLE_RELEVANCE_MODE
SEARCH_PUB_RELEVANCE_RECENCY
SEARCH_PUB_TAB_CONCEPT_MODE
SEARCH_PUB_TAB_FALLBACK_SPARSE_OFF
SEARCH_PUB_TAB_IMPACT
SEARCH_PUB_TAB_MSM
SEARCH_RANKING_V2                   # default-on (!== "off")
SELF_EDIT_OVERVIEW_GENERATE_RATE_LIMIT
SPS_TRACE_REDACT
TELEMETRY_SALT

# --- manual ETL knobs: overrides supplied per one-off task run, never baked ---
CANCER_TAXONOMY_FORCE_REPLACE       # bypass the ruleset+MeSH paired-hash short-circuit
ETL_GUARD_BYPASS
FAMILY_REVIEW_TERMS_PATH
FAMILY_SENSITIVITY_CURATED_PATH
FAMILY_SUPPRESSION_CURATED_PATH
HIERARCHY_FORCE_REPLACE             # §4.3 escape hatch: force a hierarchy full-replace past the sha256 short-circuit
HONORS_SEED_PATH                    # #1761 seed import: non-repo data path, operator run-task only
MESH_ALIAS_CURATED_PATH
MESH_ANCHOR_CURATED_PATH
MESH_ANCHOR_MIN_SUPPORT
MESH_ANCHOR_THRESHOLD
MESH_FORCE_REPLACE
MESH_SYNONYM_BUCKET
MESH_YEAR_OVERRIDE
SCHOLARS_DISABLE_CHIEF_DETECTION
SCHOLAR_PROXY_NOTIFY_SEND
SCHOLAR_TOOL_DRY_RUN
SCHOLAR_TOOL_FORCE_REPLACE
SPOTLIGHT_FORCE_REPLACE             # §4.3 escape hatch: force a spotlight full-replace past the sha256 short-circuit
TECHNOLOGIES_MIN_RETAIN             # CTL volume-guard floor (code default 0.8)
TECHNOLOGIES_SEED_PATH              # read the committed seed instead of scraping CTL
NEWS_SEED_PATH                      # news: read the committed seed instead of scraping the newsroom
NEWS_BACKFILL                       # news: walk the full feed + re-reconcile every article (default incremental)
NEWS_MAX_PAGES                      # news: feed-page ceiling for a backfill (code default 60; 100 stories/page)
NEWS_MIN_PUBLISHED                  # news: ignore articles published before this date (code default 2019-01-01; "" walks the 1997 archive)
SCHOLARS_VIVO_ORG_CROSSWALK
SCHOLARS_VIVO_ORG_REDIRECT_OUTPUT
SCHOLARS_VIVO_PUB_REDIRECT_OUTPUT
SCHOLARS_VIVO_REDIRECT_OUTPUT

# --- ETL source locations with code defaults (bucket/key/table/base DNs) ---
CLINICAL_TRIALS_BUCKET
CLINICAL_TRIALS_KEY
DATA_SHARING_BUCKET
DATA_SHARING_KEY
COI_STATEMENTS_BUCKET
COI_STATEMENTS_KEY
EMAIL_VISIBILITY_BUCKET
EMAIL_VISIBILITY_KEY
MENTORING_AOC_KEY
MENTORING_COPUBS_BUCKET
MENTORING_COPUBS_KEY
MENTORING_COPUB_LIST_KEY
PUBLICATION_CITING_KEY
RCR_BUCKET
RCR_KEY
RECITER_ANALYSIS_BUCKET
SCHOLARS_ANALYSIS_TABLE
SCHOLARS_GOLDSTANDARD_TABLE
SCHOLARS_HEADSHOT_BASE
SCHOLARS_LDAP_ACTIVE_FILTER
SCHOLARS_LDAP_EMPLOYEE_SOR_BASE
SCHOLARS_LDAP_EMPLOYEE_SOR_FILTER
SCHOLARS_LDAP_FACULTY_SOR_BASE
SCHOLARS_LDAP_FACULTY_SOR_FILTER
SCHOLARS_LDAP_FACULTY_SOR_HISTORICAL_FILTER
SCHOLARS_LDAP_GROUPS_BASE
SCHOLARS_LDAP_NYP_AFFILIATES_BASE
SCHOLARS_LDAP_NYP_AFFILIATES_FILTER
SCHOLARS_LDAP_ORGUNITS_BASE
SCHOLARS_LDAP_POSTDOC_EMPLOYMENT_FILTER
SCHOLARS_LDAP_SEARCH_BASE
SCHOLARS_LDAP_STUDENT_FILTER
SCHOLARS_LDAP_STUDENT_SEARCH_BASE
SCHOLARS_LDAP_STUDENT_SOR_BASE
SCHOLARS_LDAP_STUDENT_SOR_FILTER
STEWARD_NAMES_BUCKET
STEWARD_NAMES_KEY