Production Deployment

# Run full test suite
npm test

# Run integration tests against sandbox
npm run test:integration

# Run security audit
npm audit

# Check for outdated dependencies
npm outdated

# Build application
npm run build

# Deploy to staging
npm run deploy:staging

# Run smoke tests
npm run test:smoke:staging

# Verify staging with production credentials (in controlled test)

# Quick rollback to previous version
npm run deploy:rollback

# Or restore from backup
git checkout v1.0.0-prod
npm run deploy:production

// Before (Sandbox)
const BASE_URL = 'https://qrph.sbx.moduluslabs.io';

// After (Production)
const BASE_URL = 'https://qrph.moduluslabs.io';

// Better - Use environment variable
const BASE_URL = process.env.MODULUS_BASE_URL;

# Search for hardcoded sandbox URLs
grep -r "qrphsandbox" .

# Should return no results in production code

const metrics = {
  // API Health
  apiResponseTime: 'Average response time for QR creation',
  apiErrorRate: 'Percentage of API calls that fail',
  apiAvailability: 'Uptime percentage',

  // Business Metrics
  qrCodesCreated: 'Total QR codes generated',
  transactionsCompleted: 'Successful payments',
  transactionValue: 'Total payment volume',
  conversionRate: 'QR scans to completed payments',

  // Webhook Metrics
  webhooksReceived: 'Total webhooks received',
  webhookProcessingTime: 'Time to process webhook',
  webhookFailureRate: 'Percentage of webhook processing failures',

  // Performance
  databaseQueryTime: 'Average DB query duration',
  serverCPU: 'CPU utilization',
  serverMemory: 'Memory utilization',
  requestsPerMinute: 'API request rate'
};

# 1. Generate new credentials via partner portal

# 2. Update secrets manager with new credentials
aws secretsmanager update-secret \
  --secret-id prod/modulus-labs \
  --secret-string '{
    "MODULUS_SECRET_KEY": "sk_live_NEW_KEY",
    "MODULUS_ENCRYPTION_KEY": "NEW_ENCRYPTION_KEY"
  }'

# 3. Deploy with new credentials
npm run deploy:production

# 4. Verify new credentials work
npm run test:smoke:production

# 5. Revoke old credentials
# Contact [email protected] to revoke old API key

// Use load balancer to distribute requests
// across multiple application instances

// Example: AWS Auto Scaling
const autoscaling = {
  minInstances: 2,
  maxInstances: 10,
  targetCPU: 70,
  targetMemory: 80
};

// Scale based on metrics
if (requestsPerMinute > 500) {
  scaleUp();
}

// Connection pooling
const pool = new Pool({
  max: 20,
  min: 5,
  idleTimeoutMillis: 30000
});

// Read replicas for queries
const writeDB = connectToMaster();
const readDB = connectToReplica();

// Use read replica for non-critical reads
async function getTransactionHistory(merchantRef) {
  return readDB.query(
    'SELECT * FROM transactions WHERE merchant_ref = $1',
    [merchantRef]
  );
}

// Cache QR codes for a short period
const cache = new Map();

async function createQRWithCache(amount, ref) {
  const cacheKey = `${amount}:${ref}`;

  if (cache.has(cacheKey)) {
    const cached = cache.get(cacheKey);
    if (Date.now() - cached.timestamp < 300000) { // 5 minutes
      return cached.data;
    }
  }

  const qr = await modulusApi.createQR(amount, ref);
  cache.set(cacheKey, {
    data: qr,
    timestamp: Date.now()
  });

  return qr;
}