Provider health monitor

Firebase, Cloudflare, Google tags, OTP, WhatsApp, Telegram and SMTP health are tracked as dry-run status contracts without provider calls, env values or secrets.

Health statusChecks: 9Families: 5Healthy mock: 1Needs env: 5

Firebasetrue

Cloudflaretrue

Googletrue

OTPtrue

WhatsApptrue

Telegramtrue

Emailtrue

No LAN blocktrue

Provider families

identity1 checks

Healthy mock: 0Needs env: 1

dns_cdn1 checks

Healthy mock: 0Needs env: 0

metrics3 checks

Healthy mock: 1Needs env: 0

notification3 checks

Healthy mock: 0Needs env: 3

email1 checks

Healthy mock: 0Needs env: 1

Health checks

Firebase owner/admin authneeds_env

audit_provider_health_001Secret env names: 1

Add Firebase public config and service account through runtime secret stores.

Cloudflare DNS and TLSoperator_required

audit_provider_health_002Secret env names: 0

Use manual Cloudflare dashboard after staging /api/health passes.

Google Tag Manager and analyticsblocked_by_policy

audit_provider_health_003Secret env names: 0

Enable only after consent and blocked-event policy review.

Cloudflare Web Analyticsblocked_by_policy

audit_provider_health_004Secret env names: 0

Add public analytics token only after consent policy is active.

MUPZAOS product metricshealthy_mock

audit_provider_health_005Secret env names: 0

Keep dry-run aggregate metrics enabled locally.

OTP SMSneeds_env

audit_provider_health_006Secret env names: 3

Add OTP provider secrets to runtime secret storage before enabling real sends.

WhatsApp Cloud APIneeds_env

audit_provider_health_007Secret env names: 2

Configure WhatsApp token and approved templates after consent ledger is active.

Telegram Bot APIneeds_env

audit_provider_health_008Secret env names: 2

Configure bot token and webhook secret in server runtime env only.

SMTP emailneeds_env

audit_provider_health_009Secret env names: 2

Configure SMTP runtime env and keep invite/reset payloads secret-free.