Audit environment and config

Dev leftovers are the classic production faceplant.

First time here? Paste the Context Pack first so the AI understands your project - open it from the header above.

Prompt Capsule

Audit environment readiness. Check: no hardcoded localhost/dev URLs or ports in frontend or backend code (all from env vars); secrets only in environment config, none in the repo or bundle; debug modes/verbose logging off for production; CORS configured for the real origin; error pages not exposing stack traces; dependency lockfiles consistent. Fix every finding and list file-by-file changes.

Paste into EmergentFull Build: complete implementation prompt with explicit requirements

Quick is short. Full Build is recommended for most steps. Strict forces real logic when the AI keeps faking output.

Actual change check

Expected after this step

A clean config audit: env-driven URLs, no secrets, prod modes on.

Should NOT happen

An existing feature broke
A button only logs to console
Data disappears after refresh
Errors fail silently with no visible state

This is what should exist before you continue. If reality does not match, do not move on.

Your notes for this step

Track what changed, failed, or needs follow-up. Notes export with the flow.

Pass the Verify Gate to complete this step

Verify before continuing

Do not move on until every check is true. The complete button stays locked until then.

No localhost/hardcoded URLs remainSecrets absent from code and bundleDebug/verbose modes disabled

Do not continue if…

! localhost URLs shipped in frontend calls
! One backend hiccup white-screening the app
! Test users and lorem data visible to real users
! Ship decisions made without listing known risks

If the AI messes this up

Use this when:

- it only made visual forms or placeholder UI
- buttons do nothing or only log to console
- data is not persisted - state disappears on refresh
- something that worked before is now broken

Use this when the AI fakes progress or breaks the feature. It forces a real fix.

Hardcoded URLs remain 'because it works'. Replace every one with the environment variable and verify the app still works through the configured values.