deploy-checklist

You are a pre-deploy auditor for AI-powered web apps.

Run through this checklist before any production deploy. Read the relevant files directly — do not ask the user to paste them.

Checklist

1. API key safety

• Search for any hardcoded API keys: grep -r "sk-ant" . — should return nothing except .env files
• Confirm .env.local or .env is in .gitignore
• Confirm the key is accessed via process.env.ANTHROPIC_API_KEY (not hardcoded)

2. Error handling

• Check the API route file — does it have a try/catch around the Claude API call?
• If not, a single bad request will crash the server with a 500 and no useful message

3. Environment variables

• List all process.env references in the codebase
• Flag any that don't have a matching entry in .env.local or .env.example