production-readiness

name	production-readiness
description	Audit the project against its production/deploy checklist — required secrets, migrations, store/push config, security toggles, and the verification gate. Use before a release, a deploy, or when asked if the app is production-ready.

Production readiness checklist

Walk these and report status (✅/⚠️/❌) with the file/setting for each gap.

Secrets & env (must be set, NOT the dev placeholders)

• JWT_SECRET ≥ 32 chars high-entropy · ENCRYPTION_KEY real openssl rand -base64 32 (the .env.example value is an all-zero dev placeholder — must change).
• DATABASE_URL, REDIS_URL (prod uses a password), S3_*.
• CORS_ORIGIN = explicit allow-list (wildcard throws in production — intended).
• Apple IAP: APPLE_ROOT_CA_CERTS (Apple Root CA - G3 PEM) or webhooks reject.
• Android IAP: GOOGLE_PUBSUB_AUDIENCE + GOOGLE_PUBSUB_SERVICE_ACCOUNT_EMAIL (Pub/Sub guard fails closed in prod without them) + GOOGLE_PLAY_PACKAGE_NAME.
• Firebase Admin creds for FCM send.
• APPLE_IAP_SKIP_VERIFICATION must NOT be true (it throws in prod anyway).

Database

• Migrations applied: bun run prisma:deploy (= prisma migrate deploy, applies pending migrations in order). On an existing prod DB, baseline with prisma migrate resolve --applied <name> rather than reset.
• Subscription packages seeded (prisma db seed) or created via admin.

Mobile / store

• Dev build (not Expo Go). EXPO_PUBLIC_API_URL points at prod /api.
• iOS push: aps-environment = production (driven by EXPO_PUBLIC_ENV), APNs key uploaded to Firebase, Push capability on the App ID.
• In-app account deletion wired in the UI (calls DELETE /api/v1/auth/account) — App Store requires it for apps that create accounts.
• Android 13+ POST_NOTIFICATIONS flow works.

Security / infra

• Docker image runs as non-root + healthcheck (Dockerfile) · throttler uses Redis (multi-instance) · helmet on · Swagger disabled in production.
• Webhooks authenticated (Apple JWS chain, Google Pub/Sub OIDC) + @SkipThrottle().

CI / quality gate

• Run /verify (tsc + build + lint + test) for both packages — all green.
• GitHub Actions CI present (.github/workflows/ci.yml).

Known deferred (decide per product)

• PaymentTransaction.amount is Decimal and populated; verify store payloads actually carry price in your config.
• relationMode = "prisma" (no native FKs) — acceptable but note for data integrity.
• Apple/Google receipt re-verification depth on the /subscription/upgrade path.