fireflies-prod-checklist

# Fireflies.ai Production Checklist ## Overview Complete checklist for deploying Fireflies.ai integrations to production. Covers API key management, webhook setup, health checks, and monitoring. ## Prerequisites - Staging environment tested - Production API key from Fireflies dashboard - Webhook endpoint with HTTPS and signature verification - Monitoring infrastructure ready ## Pre-Deployment Checklist ### API & Auth - [ ] Production `FIREFLIES_API_KEY` in secret manager (not env file) - [ ] API key has minimum required access - [ ] `FIREFLIES_WEBHOOK_SECRET` configured (16-32 chars) - [ ] Separate keys for dev/staging/prod environments - [ ] Key rotation procedure documented ### Code Quality - [ ] All GraphQL queries tested against real API in staging - [ ] Error handling for all Fireflies error codes (`auth_failed`, `too_many_requests`, `require_ai_credits`) - [ ] Rate limiting with exponential backoff implemented - [ ] No hardcoded API keys or transcript IDs - [ ] Webhook signature verification (HMAC-SHA256) enabled ### Webhook Configuration - [ ] Webhook URL registered in Fireflies dashboard (Settings > Developer settings) - [ ] HTTPS endpoint with valid TLS certificate - [ ] `x-hub-signature` header verified on every request - [ ] Webhook handler responds with 200 immediately (process async) - [ ] Dead-letter queue for failed webhook processing ### Health Check Endpoint ```typescript // /api/health export async function GET() { const checks: Record<string, any> ...