Table of contents

Appifio Creator · Lesson AS17 · Recap · Aura series
Aura webapp handoff checklist
before customers use it
before customers use it
One check sheet: Creator · Storage · CMS · MCP (if used) - tick everything before you hand off.
Learning goals: Have a self-check list before go-live / customer handoff.
Previous: AS01-AS16 or H01 · Next: AS18 · ~15 minutes hands-on
1. Four layers before handoff
□ Creator (storefront) → □ Storage (warehouse) → □ CMS (back office) → □ MCP (optional)
Always finish with: Save changes clicked + try the Current view
1b. Build order (deployment flow)
When building from scratch (Coder), work by phase - don’t skip ahead:
| Phase | Work | Related lessons |
|---|---|---|
| 1 · Shell | HTML templates (index, detail, login, admin…); login page + session check; absolute URL helpers | AS04, AS05, AM09-AM10 |
| 2 · One data type at a time | Pick one indexed ledger; public list read; admin add/edit; guest form only appends a row | AS02, AS03, AM02 |
| 3 · Every item has a URL | Add data row → add route → (tag/category if needed). Delete: remove row + remove route | AS04, AM05, AM12 |
| 4 · Visitor opens a URL | Routing → HTML → read data → render page | AS04, AM12 |
| Symptom | Usually because |
|---|---|
| Empty list, no error | No posts yet - normal (AS03) |
| 404 on a slug | Missing route (AS04) |
| Route exists but blank page | Missing HTML file under Files |
| Links jump to wrong domain / lose site slug | Relative URL / leading slash (AS04 · AM10) |
| Rejected when editing | Not logged in / session expired / missing role (AS05) |
| “Try again later” / every action stuck | Requests too dense - wait (AS03 · AM10) |
| Guest can’t submit form / posts missing on site | CMS content security (AS11) |
| Custom type: menu/form broken after AI “created a type” | Incomplete schema merge - AS20 (Panel) / AS21 |
2. Creator checklist (storefront)
- Home / mobile look fine on Current
- Every important URL opens (AS04)
- No leftover “Lorem” / test phone numbers
- Final Save changes done
3. Storage checklist (warehouse)
- Backend tab: valid API key; Easy/Advanced matches need
- Contact form: append one row OK; “Try again later” on spam (AS03)
- Secrets (if any) live in Secrets manager, not in HTML (AS06)
- Admin accounts: owner + staff with split roles (AS05)
4. CMS checklist
- Can open
/your-site-slug/cms; owner account exists (AS07) - Prompt: Aura Complete +
Appifio Aura CMS + Storage - Complete AI Guide- do not enable Easy (AS19) - Publish 1 test post → site shows it (AS08 + AS10); filter on correct
status(blog) - Contacts / orders (if shop) readable in CMS (AS09)
- Custom types (if any): create on Panel (AS20) or AI Panel-safe merge (AS21); public pages filter
publish_state - Security: visitors don’t see drafts (AS11)
- Staff know their own passwords - not the owner password
5. MCP checklist (only if used)
- Token only shared with trusted builders; know how to Revoke
- Team understands: IDE ≠ live until Save changes (AS16)
- If MCP is no longer needed: turn off Enable MCP integration + Revoke tokens
6. Handoff security
- Don’t send API keys / MCP tokens in a large group email.
- Change demo passwords before real customers.
- Delete test data (fake contacts) if needed.
7. Comparisons
- Webflow / Framer launch checklist: same idea - tick before publish.
- H01: webapp overview - AS17 is the detailed Aura tick sheet.
8. Ultra-short checklist (print & carry)
□ Live looks OK · □ Form writes · □ CMS opens · □ Aura prompt (+ CMS guide if using CMS) · □ Roles OK · □ Secrets not exposed · □ (MCP) token controlled · □ Save changes done
AS18 - Symptom → error layer
Internal navigation (same language)
Appifio Creator · Aura series · AS17