flexport-prod-checklist

# Flexport Production Checklist ## Overview Pre-deployment and go-live checklist for Flexport logistics integrations covering API configuration, webhook setup, monitoring, and rollback procedures. ## Pre-Deployment ### Authentication & Secrets - [ ] Production API key stored in secret manager (not env files) - [ ] Webhook secret configured and verified - [ ] Key rotation procedure documented - [ ] No keys in git history (`git log -p | grep -i flexport_api`) ### API Integration - [ ] All endpoints tested against production API - [ ] Pagination implemented for list endpoints (`/shipments`, `/products`) - [ ] Rate limit handling with exponential backoff - [ ] Retry logic for transient 5xx errors - [ ] Idempotency keys on POST/PATCH operations - [ ] `Flexport-Version: 2` header on all requests ### Webhooks - [ ] HTTPS endpoint with valid TLS certificate - [ ] `X-Hub-Signature` verification implemented - [ ] Webhook endpoint responds within 5 seconds - [ ] Dead letter queue for failed webhook processing - [ ] Idempotent webhook handlers (replay-safe) ### Data Integrity - [ ] HS codes validated against customs requirements - [ ] UN/LOCODE port codes verified - [ ] Commercial invoice totals cross-checked - [ ] Product catalog synced with Flexport Product Library ## Monitoring & Alerting ```typescript // Health check endpoint app.get('/health', async (req, res) => { const start = Date.now(); try { const r = await fetch('https://api.flexport.com/shipments?per=1', { ...