From bb546cf4bc2e74b9c19e12f8ac22784d40438d0a Mon Sep 17 00:00:00 2001
From: Jason Staack <jason@staack.com>
Date: Sat, 14 Mar 2026 09:56:01 -0500
Subject: [PATCH] fix: hide first-run credential hint in production builds

---
 frontend/src/routes/login.tsx | 16 +++++++++-------
 1 file changed, 9 insertions(+), 7 deletions(-)

diff --git a/frontend/src/routes/login.tsx b/frontend/src/routes/login.tsx
index 7560027..78e2af8 100644
--- a/frontend/src/routes/login.tsx
+++ b/frontend/src/routes/login.tsx
@@ -232,13 +232,15 @@ function LoginPage() {
           </form>
         </div>
 
-        {/* First-run hint */}
-        <div className="text-center mt-4 px-2">
-          <p className="text-xs text-text-muted">
-            First time? Use the credentials from your <code className="text-text-secondary">.env</code> file
-            (<code className="text-text-secondary">FIRST_ADMIN_EMAIL</code> / <code className="text-text-secondary">FIRST_ADMIN_PASSWORD</code>).
-          </p>
-        </div>
+        {/* First-run hint (dev only) */}
+        {import.meta.env.DEV && (
+          <div className="text-center mt-4 px-2">
+            <p className="text-xs text-text-muted">
+              First time? Use the credentials from your <code className="text-text-secondary">.env</code> file
+              (<code className="text-text-secondary">FIRST_ADMIN_EMAIL</code> / <code className="text-text-secondary">FIRST_ADMIN_PASSWORD</code>).
+            </p>
+          </div>
+        )}
 
         {/* Legal links */}
         <div className="flex justify-center gap-4 mt-3">