Site

Service verification checklist

When deploys fail, features rot, or secrets feel suspicious, verify which external services are still in active use by the site before deleting variables or dependencies.

Verify in code

Search for direct environment variable usage:

rg -n "ASTRO_STUDIO_APP_TOKEN|WORKOS_API_KEY|WORKOS_CLIENT_ID|WORKOS_COOKIE_PASSWORD|WORKOS_REDIRECT_URI|YOUTUBE_API_KEY|NODE_VERSION|import\.meta\.env|process\.env" . -g '!node_modules' -g '!dist'

Current known usage

• YOUTUBE_API_KEY → local npm run refresh:talks workflow via scripts/refresh-talks.mjs, not app runtime
• WORKOS_API_KEY → src/lib/authkit.ts
• WORKOS_CLIENT_ID → src/lib/authkit.ts
• WORKOS_REDIRECT_URI → src/lib/authkit.ts
• WORKOS_COOKIE_PASSWORD → src/lib/authkit.ts
• NODE_VERSION → build environment setting, not app code
• ASTRO_STUDIO_APP_TOKEN → no current app code references after Astro DB removal

Deletion rule

• If a variable has no code references and no build-pipeline role, remove it.
• If a variable is only needed by the build command, document that before deleting it.
• Rotate any secret that has been exposed in logs, screenshots, or dashboards.

URL Debugging