salesloft-prod-checklist

# SalesLoft Production Checklist ## Overview Go-live checklist for SalesLoft API integrations covering auth, error handling, monitoring, rate limits, and rollback procedures. ## Pre-Launch Checklist ### Authentication & Secrets - [ ] Production OAuth app created (separate from dev/staging) - [ ] Tokens stored in secret manager (AWS Secrets Manager, GCP Secret Manager, Vault) - [ ] Token refresh logic tested (simulated expired token) - [ ] Webhook signing secret rotated from dev value ### Error Handling - [ ] 401 triggers automatic token refresh (not crash) - [ ] 429 handled with backoff using `Retry-After` header - [ ] 5xx retried with exponential backoff (max 3 attempts) - [ ] 422 validation errors logged with request payload - [ ] Circuit breaker prevents cascade during SalesLoft outages ### Rate Limiting - [ ] Cost-based budget calculated for expected volume - [ ] Deep pagination avoided (page > 100 costs 3-30x) - [ ] Bulk operations use `p-queue` or similar throttle - [ ] Rate limit headers logged for capacity planning ### Monitoring & Alerting ```typescript // Health check endpoint app.get('/health', async (req, res) => { try { const start = Date.now(); await api.get('/me.json'); res.json({ status: 'healthy', salesloft: { connected: true, latencyMs: Date.now() - start }, }); } catch { res.status(503).json({ status: 'degraded', salesloft: { connected: false } }); } }); ``` - [ ] Health check includes SalesLoft connectivity - [...