Stabilize runtime auth and E2E coverage

2026-06-26 14:47:00 +09:00 · 2026-06-26 14:47:00 +09:00 · 188e899394
commit 188e899394
parent 6a3e3b541c
133 changed files with 55987 additions and 6775 deletions
--- a/scripts/start-public-runtime.ps1
+++ b/scripts/start-public-runtime.ps1
@ -0,0 +1,93 @@
+param(
+  [string]$Workspace = "D:\workspace\vignette",
+  [int]$ApiPort = 8001,
+  [string]$Cloudflared = "$env:LOCALAPPDATA\Microsoft\WinGet\Links\cloudflared.exe",
+  [string]$CloudflaredConfig = "$env:USERPROFILE\.cloudflared\vignette-config.yml",
+  [switch]$SkipCloudflaredRestart
+)
+
+$ErrorActionPreference = "Stop"
+
+$ApiDir = Join-Path $Workspace "apps\api"
+$Python = Join-Path $env:LOCALAPPDATA "Programs\Python\Python311\python.exe"
+$OutLog = Join-Path $ApiDir "api.public.out.log"
+$ErrLog = Join-Path $ApiDir "api.public.err.log"
+
+if (!(Test-Path $Python)) {
+  throw "Python 3.11 not found at $Python"
+}
+if (!(Test-Path $ApiDir)) {
+  throw "API directory not found at $ApiDir"
+}
+
+Get-CimInstance Win32_Process |
+  Where-Object { $_.CommandLine -like "*uvicorn app.main:app*--port $ApiPort*" } |
+  ForEach-Object { Stop-Process -Id $_.ProcessId -Force }
+
+$env:ENVIRONMENT = "prod"
+$env:AUTH_DEV_LOGIN_ENABLED = "false"
+$env:AUTO_SEED_PERSONAS = "false"
+$env:ALLOW_SEED_PERSONA_FALLBACK = "false"
+$env:FRONTEND_BASE_URL = "https://vignette.chanpaca.net"
+$env:CORS_ORIGINS = '["https://vignette.chanpaca.net","https://vignette-b1q.pages.dev"]'
+
+$proc = Start-Process -WindowStyle Hidden -FilePath $Python `
+  -ArgumentList @("-m", "uvicorn", "app.main:app", "--host", "127.0.0.1", "--port", "$ApiPort") `
+  -WorkingDirectory $ApiDir `
+  -RedirectStandardOutput $OutLog `
+  -RedirectStandardError $ErrLog `
+  -PassThru
+
+Start-Sleep -Seconds 3
+$health = Invoke-RestMethod -Uri "http://127.0.0.1:$ApiPort/health" -TimeoutSec 20
+if ($health.environment -ne "prod" -or -not $health.db -or -not $health.engine) {
+  throw "Public API health is not production-safe: $($health | ConvertTo-Json -Compress)"
+}
+
+if (!$SkipCloudflaredRestart) {
+  if (!(Test-Path $Cloudflared)) {
+    throw "cloudflared not found at $Cloudflared"
+  }
+  if (!(Test-Path $CloudflaredConfig)) {
+    throw "cloudflared config not found at $CloudflaredConfig"
+  }
+
+  $lines = Get-Content $CloudflaredConfig
+  $insideApiIngress = $false
+  $updated = $false
+  $nextLines = foreach ($line in $lines) {
+    if ($line -match "hostname:\s*api-vignette\.chanpaca\.net") {
+      $insideApiIngress = $true
+      $line
+      continue
+    }
+    if ($insideApiIngress -and $line -match "^\s*service:\s*http://127\.0\.0\.1:\d+\s*$") {
+      $updated = $true
+      $insideApiIngress = $false
+      "    service: http://127.0.0.1:$ApiPort"
+      continue
+    }
+    if ($insideApiIngress -and $line -match "^\s*-\s+") {
+      $insideApiIngress = $false
+    }
+    $line
+  }
+  if (!$updated) {
+    throw "Could not find api-vignette.chanpaca.net localhost service in $CloudflaredConfig"
+  }
+  Set-Content -Encoding UTF8 -Path $CloudflaredConfig -Value $nextLines
+
+  Get-CimInstance Win32_Process |
+    Where-Object { $_.Name -eq "cloudflared.exe" -and $_.CommandLine -like "*vignette-config.yml*" } |
+    ForEach-Object { Stop-Process -Id $_.ProcessId -Force }
+
+  Start-Sleep -Seconds 2
+  Start-Process -WindowStyle Hidden -FilePath $Cloudflared `
+    -ArgumentList @("tunnel", "--config", $CloudflaredConfig, "run") `
+    -RedirectStandardOutput (Join-Path $Workspace "cloudflared.public.out.log") `
+    -RedirectStandardError (Join-Path $Workspace "cloudflared.public.err.log") `
+    -PassThru | Out-Null
+}
+
+Write-Output "Public API running on http://127.0.0.1:$ApiPort with PID $($proc.Id)"
+Write-Output "Health: $($health | ConvertTo-Json -Compress)"