linear-prod-checklist

# Linear Production Checklist ## Overview Comprehensive checklist and implementation patterns for deploying Linear integrations to production. Covers authentication, error handling, rate limiting, monitoring, data handling, and deployment verification. ## Prerequisites - Working development integration passing all tests - Production Linear workspace (or production API key) - Deployment infrastructure (Vercel, Cloud Run, etc.) - Secret management solution (not `.env` files in production) ## Pre-Production Checklist ### 1. Authentication & Security ``` [ ] Production API key generated (separate from dev) [ ] API key stored in secret manager (Vault, AWS SM, GCP SM) [ ] OAuth redirect URIs updated for production domain [ ] Webhook secrets are unique per environment [ ] All dev secrets rotated before launch [ ] HTTPS enforced on all endpoints [ ] Webhook HMAC-SHA256 verification implemented [ ] Webhook timestamp validation (< 60s age) [ ] Token refresh flow implemented (mandatory since Oct 2025) ``` ### 2. Error Handling & Resilience ``` [ ] All Linear API calls wrapped in try/catch [ ] Rate limit retry with exponential backoff (max 5 retries) [ ] 30s timeout on all API calls [ ] Graceful degradation when Linear API is down [ ] Error logging includes context (no secrets in logs) [ ] InvalidInputLinearError caught separately from network errors [ ] Alerts configured for auth failures and error rate spikes ``` ### 3. Performance & Rate Limits ``` [ ] Pagination with first:50 f...