hardening: G15 provider preflight workflow

[DevCalebR]

Summary

• add a provider preflight engine covering Clerk URL/origin consistency, Stripe webhook secret + endpoint assumptions, Twilio webhook parity expectations, and DB health checks
• add

callbackcloser@0.1.0 preflight:providers
node --experimental-strip-types --experimental-specifier-resolution=node scripts/provider_preflight.ts

CallbackCloser provider preflight

• Loaded env files: .env, .env.local

[PASS] Clerk URLs/origins consistency

• App base URL: https://dermal-fontal-branson.ngrok-free.dev (NEXT_PUBLIC_APP_URL)
• Publishable key format: looks valid (pk_*)
• Secret key format: looks valid (sk_*)
• Sign-in URL resolves to: https://dermal-fontal-branson.ngrok-free.dev/sign-in
• Sign-up URL resolves to: https://dermal-fontal-branson.ngrok-free.dev/sign-up

[PASS] Stripe webhook secret + endpoint assumptions

• Webhook secret format: looks valid (whsec_*)
• Expected Stripe webhook endpoint: https://dermal-fontal-branson.ngrok-free.dev/api/stripe/webhook
• Reachability assumption: endpoint uses public HTTPS origin.

[PASS] Twilio webhook target parity

• Expected voice webhook URL: https://dermal-fontal-branson.ngrok-free.dev/api/twilio/voice?webhook_token=REDACTED
• Expected SMS webhook URL: https://dermal-fontal-branson.ngrok-free.dev/api/twilio/sms?webhook_token=REDACTED
• Expected status webhook URL: https://dermal-fontal-branson.ngrok-free.dev/api/twilio/status?webhook_token=REDACTED
• Parity assumption: Twilio Console webhooks should exactly match the expected URLs above.

[PASS] Database connection health

• Database health query succeeded (SELECT 1).

Overall: PASS (4/4 checks passed) command () with actionable PASS/FAIL output

• add focused tests for provider preflight logic and mocked DB pass/fail behavior
• update docs/checklists to include provider preflight usage
• update production readiness changelog marking G15 done

Verification

• npm test
• npm run lint
• npm run build
• npm run typecheck
• npm run env:check
• npm run preflight:providers (expected FAIL in this runtime due Neon DB connectivity; fail output includes actionable fixes)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
callbackcloser	Ready	Preview, Comment	Mar 2, 2026 5:15am