env diff derived

{
  "input": {
    "body": {
      "after": {
        "LOG_LEVEL": "info",
        "DATABASE_URL": "postgres://app:a-different-not-real-password@prod-db.internal:5432/orders",
        "FEATURE_FLAGS": "",
        "STRIPE_WEBHOOK_SECRET": "whsec_0000000000000000000000000000000000"
      },
      "before": {
        "LOG_LEVEL": "debug",
        "DATABASE_URL": "postgres://app:not-a-real-password@staging-db.internal:5432/orders",
        "FEATURE_FLAGS": "new-checkout",
        "LEGACY_QUEUE_URL": "https://queue.internal/legacy"
      },
      "after_name": "production",
      "before_name": "staging"
    },
    "type": "http",
    "method": "POST",
    "bodyType": "json"
  },
  "output": {
    "type": "json",
    "example": {
      "added": [
        "STRIPE_WEBHOOK_SECRET"
      ],
      "limits": {
        "maxJobs": 200,
        "maxFindings": 500,
        "maxServices": 200,
        "maxResources": 2000,
        "maxVariables": 1000,
        "maxComponents": 5000,
        "maxDependencies": 5000
      },
      "passed": false,
      "changed": [
        {
          "name": "DATABASE_URL",
          "after": {
            "type": "string",
            "empty": false,
            "length": 73,
            "shape_class": "a9.",
            "looks_like_secret": "URL_WITH_INLINE_CREDENTIALS"
          },
          "before": {
            "type": "string",
            "empty": false,
            "length": 66,
            "shape_class": "a9.",
            "looks_like_secret": "URL_WITH_INLINE_CREDENTIALS"
          }
        },
        {
          "name": "LOG_LEVEL",
          "after": {
            "type": "string",
            "empty": false,
            "length": 4,
            "shape_class": "a",
            "looks_like_secret": null
          },
          "before": {
            "type": "string",
            "empty": false,
            "length": 5,
            "shape_class": "a",
            "looks_like_secret": null
          }
        },
        {
          "name": "FEATURE_FLAGS",
          "after": {
            "type": "string",
            "empty": true,
            "length": 0,
            "shape_class": "empty",
            "looks_like_secret": null
          },
          "before": {
            "type": "string",
            "empty": false,
            "length": 12,
            "shape_class": "a.",
            "looks_like_secret": null
          }
        }
      ],
      "removed": [
        "LEGACY_QUEUE_URL"
      ],
      "complete": true,
      "findings": [
        {
          "code": "VARIABLE_CHANGED",
          "detail": "DATABASE_URL differs between staging and production: 66 characters of a9. became 73 of a9.. Neither value is reported.",
          "variable": "DATABASE_URL"
        },
        {
          "code": "VARIABLE_CHANGED",
          "detail": "LOG_LEVEL differs between staging and production: 5 characters of a became 4 of a. Neither value is reported.",
          "variable": "LOG_LEVEL"
        },
        {
          "code": "VARIABLE_CHANGED",
          "detail": "FEATURE_FLAGS differs between staging and production: 12 characters of a. became 0 of empty. Neither value is reported.",
          "variable": "FEATURE_FLAGS"
        }
      ],
      "identical": false,
      "after_name": "production",
      "request_id": "example-request",
      "service_id": "env_diff",
      "added_count": 1,
      "after_count": 4,
      "assumptions": [
        "No value from either side is ever returned. A change is described by length and character classes, which is what makes this safe to run against production configuration.",
        "Values are compared as text, so 1 and \"1\" are the same value for an environment variable, because that is what the process will see."
      ],
      "before_name": "staging",
      "limitations": [
        "Presence and shape of the variables supplied. Whether a change is correct is not assessed, and no value is revealed either way.",
        "identical is true only when both sides were fully compared and no variable was added, removed or changed."
      ],
      "observed_at": "2026-10-02T00:00:00.000Z",
      "before_count": 4,
      "not_examined": [],
      "changed_count": 3,
      "finding_count": 7,
      "removed_count": 1,
      "service_version": "1.0.0",
      "unchanged_count": 0,
      "findings_by_code": {
        "VARIABLE_ADDED": 1,
        "VARIABLE_CHANGED": 3,
        "VARIABLE_REMOVED": 1,
        "VALUE_BECAME_EMPTY": 1,
        "VALUE_SHAPE_CHANGED": 1
      }
    }
  }
}