hubspot-prod-checklist

# HubSpot Production Checklist ## Overview Complete checklist for deploying HubSpot CRM integrations to production with health checks, monitoring, and rollback procedures. ## Prerequisites - Staging environment tested and verified - Production private app token with minimal scopes - Deployment pipeline configured - Monitoring/alerting ready ## Instructions ### Step 1: Pre-Deployment Verification - [ ] Production private app created with minimal scopes - [ ] Access token stored in secret manager (not env file) - [ ] `.env` files in `.gitignore` - [ ] No hardcoded tokens in source (`grep -r "pat-na1" src/`) - [ ] Webhook endpoints use HTTPS only - [ ] Webhook signature verification implemented (v3) - [ ] Error handling covers 401, 403, 404, 409, 429, 5xx - [ ] Rate limiting/backoff implemented (`numberOfApiCallRetries: 3`) - [ ] Batch operations used where possible (max 100/batch) - [ ] All tests passing against developer test account ### Step 2: Health Check Endpoint ```typescript import * as hubspot from '@hubspot/api-client'; interface HealthCheckResult { status: 'healthy' | 'degraded' | 'unhealthy'; hubspot: { connected: boolean; latencyMs: number; rateLimitRemaining?: number; }; timestamp: string; } async function hubspotHealthCheck(): Promise<HealthCheckResult> { const client = new hubspot.Client({ accessToken: process.env.HUBSPOT_ACCESS_TOKEN!, }); const start = Date.now(); try { // Cheapest possible API call: fetch 1 conta...