Merge pull request #2231 from PR0M3TH3AN/jules-fix-verbose-dev-mode-2268472334484590253

🔒 Ensure verbose dev logging is disabled in production

config/instance-config.js

@@ -33,6 +33,8 @@ export const IS_DEV_MODE = false;
  * a quieter dev mode without disabling other development helpers entirely.
  * Use the runtime override documented in `js/config.js` if you need to toggle
  * verbosity without editing this file.
+ *
+ * Security: This must be false in production.
  */
 export const IS_VERBOSE_DEV_MODE = false;
 

tests/unit/security-config.test.mjs

@@ -0,0 +1,11 @@
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import { IS_DEV_MODE, IS_VERBOSE_DEV_MODE } from '../../config/instance-config.js';
+
+test('Security configuration: IS_VERBOSE_DEV_MODE must be false', () => {
+  assert.strictEqual(IS_VERBOSE_DEV_MODE, false, 'IS_VERBOSE_DEV_MODE should be false in production');
+});
+
+test('Security configuration: IS_DEV_MODE must be false', () => {
+  assert.strictEqual(IS_DEV_MODE, false, 'IS_DEV_MODE should be false in production');
+});