# CodeCanyon Release Checklist

Use this checklist before building a marketplace package.

## Code Readiness

- Run all migrations on a clean database.
- Run `php artisan test`.
- Run `npm run build`.
- Run `php artisan remotematch:health` and document expected local warnings.
- Confirm `.env` is not included in the package.
- Confirm `storage/app/remotematch-installed.json` is not included in the package.
- Confirm no private API keys, database credentials, or personal emails are committed.
- Confirm the browser installer works at `/install` on a clean domain.
- Confirm demo data is optional and disabled by default.
- Confirm the default admin is forced to change password after first login.
- Confirm demo mode makes admin settings read-only and blocks admin write requests.
- Confirm public homepage job cards do not expose apply URLs.
- Confirm paid dashboard routes remain protected.

## Buyer Documentation

- Include `README.md`.
- Include `docs/buyer-installation.md`.
- Include `docs/deployment-cpanel-vps.md`.
- Include `docs/support-policy.md`.
- Include `docs/changelog.md`.

## Package Build

From the project root:

```bash
bash scripts/build-codecanyon-package.sh
```

Output:

```text
build/remotematch-codecanyon.zip
```

Review the ZIP before submission. It should exclude `.env`, `vendor`, `node_modules`, local logs, caches, and generated test artifacts.

## Legal Copy

RemoteMatch does not guarantee job placement. Job listings may come from third-party sources and users may be redirected to original employer or job source websites to apply. AI-generated scores and suggestions are advisory and not guarantees.