fix: lates

production-readiness-checklist.md

@@ -10,6 +10,8 @@
   - `APP_URL` (atau `OPS_BASE_URL`)
   - `WHATSAPP_WEBHOOK_VERIFY_TOKEN` + `WHATSAPP_WEBHOOK_SECRET`
   - `CAMPAIGN_RETRY_JOB_TOKEN`
+  - `SESSION_TTL_SECONDS` (opsional, contoh `86400` untuk 24 jam)
+  - `SESSION_COOKIE_DOMAIN` (opsional untuk cookie shared subdomain)
   - optional production hardening:
     - `HEALTHCHECK_TOKEN`
     - `WEBHOOK_FAILURE_RATE_THRESHOLD_PER_HOUR`
@@ -24,6 +26,8 @@
 - [ ] Run `npm run typecheck`.
 - [ ] Run `npm run build`.
 - [ ] Run `npm run ops:smoke` sebelum deploy dan setelah restart service.
+- [ ] Jika aplikasi pakai PM2, verifikasi restart aman:
+  - `npm run ops:safe-restart` (hanya di server, setelah cek git/env terbaru).
 - [ ] Review `.env` tidak mengandung placeholder (contoh `change-me`, `your-*`).
 
 ## Runtime Readiness (Post-Deploy)
@@ -35,6 +39,9 @@
   - run `npm run ops:maintenance` on a broader schedule (daily/weekly) for cleanup.
 - [ ] Run ops readiness: `npm run ops:readiness`.
 - [ ] Check endpoint health: `GET /api/health`.
+- [ ] Verify sesi login valid dan cookie lifetime:
+  - set `OPS_SESSION_CHECK_EMAIL` dan `OPS_SESSION_CHECK_PASSWORD`
+  - `npm run ops:session-check`
 - [ ] Verify webhook endpoint reachable: `POST /api/webhooks/whatsapp`.
 - [ ] Verify campaign retry endpoint state:
   - `GET /api/jobs/campaign-retry?token=<CAMPAIGN_RETRY_JOB_TOKEN>`