feat(release): 정적 프런트엔드와 격리 빌더를 도입한다

Gateway와 프로필 릴리스가 불변 프런트엔드 아티팩트를 원자적으로 게시하고 실패 시 이전 포인터를 복구하도록 한다. 릴리스 빌드는 전용 builder protocol로 분리하고 성공한 Gateway 커밋을 재기동용 Git ref에 고정한다.
2026-08-22 09:32:47 +00:00
parent d74a8e48bb
commit d3e5d12cbf
18 changed files with 991 additions and 48 deletions
@@ -0,0 +1,68 @@
+import { describe, expect, it, vi } from 'vitest';
+
+import {
+    RemoteBuildRunner,
+    sanitizeReleaseBuildEnv,
+    type BuildProgressEvent,
+} from '../src/orchestrator/buildRunner.js';
+
+describe('sanitizeReleaseBuildEnv', () => {
+    it('keeps only public build controls and frontend values', () => {
+        expect(
+            sanitizeReleaseBuildEnv({
+                CI: 'true',
+                NODE_OPTIONS: '--max-old-space-size=1024',
+                VITE_APP_BASE_PATH: '/gateway',
+                GAME_TOKEN_SECRET: 'secret',
+                DATABASE_URL: 'postgresql://private',
+                REDIS_URL: 'redis://private',
+                PATH: '/private/path',
+            })
+        ).toEqual({
+            CI: 'true',
+            PATH: '/private/path',
+            NODE_OPTIONS: '--max-old-space-size=1024',
+            VITE_APP_BASE_PATH: '/gateway',
+        });
+        expect(
+            sanitizeReleaseBuildEnv({
+                NODE_OPTIONS: '--max-old-space-size=1536',
+                RELEASE_BUILD_NODE_OPTIONS: '--max-old-space-size=3072',
+            })
+        ).toEqual({ NODE_OPTIONS: '--max-old-space-size=3072' });
+    });
+});
+
+describe('RemoteBuildRunner', () => {
+    it('streams progress and returns the builder result without sending secrets', async () => {
+        const messages = [
+            { event: { type: 'OUTPUT', stream: 'stdout', message: 'building' } },
+            { result: { ok: true, exitCode: 0, output: 'building' } },
+        ];
+        const fetchImpl = vi.fn(async (_url: string | URL | Request, init?: RequestInit) => {
+            const request = JSON.parse(String(init?.body)) as {
+                commands: Array<{ env: Record<string, string> }>;
+            };
+            expect(request.commands[0].env).toEqual({ VITE_APP_BASE_PATH: '/gateway' });
+            return new Response(`${messages.map((message) => JSON.stringify(message)).join('\n')}\n`, {
+                status: 200,
+            });
+        }) as unknown as typeof fetch;
+        const progress: BuildProgressEvent[] = [];
+        const result = await new RemoteBuildRunner('http://builder:15100', fetchImpl).run(
+            [
+                {
+                    command: 'pnpm',
+                    args: ['exec', 'turbo', 'run', 'build'],
+                    cwd: '/srv/core/repository',
+                    env: { VITE_APP_BASE_PATH: '/gateway', GAME_TOKEN_SECRET: 'do-not-send' },
+                },
+            ],
+            (event) => {
+                progress.push(event);
+            }
+        );
+        expect(result).toEqual({ ok: true, exitCode: 0, output: 'building' });
+        expect(progress).toEqual([{ type: 'OUTPUT', stream: 'stdout', message: 'building' }]);
+    });
+});