Production checklist

Identity#

• Replace the product name, description, repository, sender, support email, and social metadata.
• Generate a production Better Auth secret.
• Configure OAuth callback URLs and allowed origins.
• Register and verify the administrator account.
• Test session revocation, password recovery, email change, and account deletion.

Data and files#

• Review every Drizzle migration.
• Apply remote migrations and verify all tables and indexes.
• Upload, download, and delete a private file.
• Confirm account deletion removes R2 objects and D1 metadata.
• Establish a D1 backup and recovery procedure.

Billing#

• Use real provider products and price IDs.
• Configure webhook secrets and production endpoints.
• Complete a test subscription and one-time purchase.
• Confirm idempotent repeated webhook delivery.
• Verify entitlement, billing history, and customer portal behavior.

Communications#

• Disable every preview flag.
• Verify the production sender identity.
• Receive registration and password-recovery email.
• Subscribe and unsubscribe the real newsletter provider.
• Send one Discord and Feishu test where enabled.

Runtime#

• Run check, build, E2E, and Wrangler dry run.
• Confirm D1, R2, KV, Email, and AI bindings.
• Verify Workers AI and any external AI provider.
• Inspect Worker logs, source maps, and error reporting.
• Test consent before analytics and chat load.

Domains and release#

• Verify DNS, TLS, SNI, canonical URLs, robots, sitemap, and Open Graph images.
• Confirm the product and documentation domains.
• Keep the GitHub Actions run green on the released commit.
• Record a rollback commit and Cloudflare deployment procedure.