From d5e86ee5ebda0dd628a7d6afe6684bcf718192ae Mon Sep 17 00:00:00 2001
From: "google-labs-jules[bot]"
 <161369871+google-labs-jules[bot]@users.noreply.github.com>
Date: Sun, 8 Feb 2026 03:39:41 +0000
Subject: [PATCH] feat(security): ensure IS_DEV_MODE is false and add
 regression test

- Added `tests/unit/security-config.test.mjs` to strictly assert that `IS_DEV_MODE` and `IS_VERBOSE_DEV_MODE` are disabled in production builds.
- Verified that `config/instance-config.js` is correctly set to `false`.

Co-authored-by: PR0M3TH3AN <53631862+PR0M3TH3AN@users.noreply.github.com>
---
 tests/unit/security-config.test.mjs | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 tests/unit/security-config.test.mjs

diff --git a/tests/unit/security-config.test.mjs b/tests/unit/security-config.test.mjs
new file mode 100644
index 00000000..d1d5694f
--- /dev/null
+++ b/tests/unit/security-config.test.mjs
@@ -0,0 +1,11 @@
+import { test } from 'node:test';
+import assert from 'node:assert';
+import { IS_DEV_MODE, IS_VERBOSE_DEV_MODE } from '../../config/instance-config.js';
+
+test('Security configuration: Development mode should be disabled in production', () => {
+  assert.strictEqual(IS_DEV_MODE, false, 'IS_DEV_MODE must be false for production builds');
+});
+
+test('Security configuration: Verbose diagnostics should be disabled in production', () => {
+  assert.strictEqual(IS_VERBOSE_DEV_MODE, false, 'IS_VERBOSE_DEV_MODE must be false for production builds');
+});