mirror of
https://github.com/fsolla/teqo.git
synced 2026-11-13 06:25:20 +00:00
9e9864f420
- /fotos/encontre + POST /api/fotos/selfie: só o vetor 128-d, sem imagem, sem score e sem nomes de terceiros; fail-closed pela flag photoAlbum.selfieSearchEnabled (default false) e pelos Consents por chave estável (busca-selfie-fotos/busca-selfie-indice, não seedados — a superfície nasce fechada até o aval jurídico/DPIA). - Índice A/C do gate (PR #1370): só quem aderiu é indexado; descriptors do acervo são transitórios. Collection faceSubject (admin-only, sem vínculo com Contact), vínculos matchedPhotos e marker faces.checkedKey no archivePhoto (modelo + enrolledAt). - Engine @vladmandic/face-api nos dois lados: browser lazy com modelos same-origin (copy-face-vision-assets no prebuild/predev/Docker) e CLI node-wasm sem tfjs-node. CLIs ops-only faces:enroll / faces:index --apply|--verify com guardas C231/C232. - Opt-out self-service por reconhecimento (leave-index) + canal de remoção do C233; rate limit próprio (namespace selfie:<hash>) e bounded body extraído do beacon. - UI portada classe-a-classe do design estendido (paridade certificada, tier primário); e2e frontendFotosSelfie (manifest+curado+projeto, engine stubada) e canário do engine real; runbook §C234, contrato em AGENTS-public.md e changelog. - Migration aditiva add_face_subject (SQL revisado); hard-stops aprovados na sessão.
75 lines
2.6 KiB
JavaScript
75 lines
2.6 KiB
JavaScript
/**
|
|
* `pnpm dev` launcher (OPS40). `next dev` resolves its port from the `-p` flag
|
|
* or the REAL process env BEFORE `@next/env` loads `.env.local`, so a worktree
|
|
* provisioner's `PORT=3100+slot` was silently ignored and every worktree bound
|
|
* 3000. The wrapper loads the env files itself (same precedence as the guard),
|
|
* hands the port to Next as a CLI flag, and spawns the dev server in-process.
|
|
*
|
|
* Precedence (exactly what `loadCliEnv` merges, override:false):
|
|
* 1. real `process.env.PORT` (Playwright's webServer injects it — e2e wins)
|
|
* 2. `.env.local` (the worktree provisioner)
|
|
* 3. `.env`
|
|
* 4. none → no `-p` → Next default 3000 + its free-port retry (main repo)
|
|
*/
|
|
import { spawn } from 'node:child_process'
|
|
import { createRequire } from 'node:module'
|
|
|
|
import { copyCardVisionAssets } from './copy-card-vision-assets.mjs'
|
|
import { copyFaceVisionAssets } from './copy-face-vision-assets.mjs'
|
|
import './guard-dev-db.mjs'
|
|
import { dieWithLabel, loadCliEnv, nextDevArgs, resolveDevPort } from './lib/cli.mjs'
|
|
|
|
const require = createRequire(import.meta.url)
|
|
const die = dieWithLabel('dev')
|
|
|
|
loadCliEnv()
|
|
|
|
// S15 — the card-cutout wasm runtime is a gitignored artifact: make sure the dev
|
|
// server serves it same-origin before Next boots.
|
|
try {
|
|
await copyCardVisionAssets(process.cwd())
|
|
await copyFaceVisionAssets(process.cwd())
|
|
} catch (error) {
|
|
die(error.message)
|
|
}
|
|
|
|
let port
|
|
try {
|
|
port = resolveDevPort(process.env)
|
|
} catch (error) {
|
|
die(error.message)
|
|
}
|
|
|
|
const extraArgs = process.argv.slice(2)
|
|
const nextArgs = [...nextDevArgs(port), ...extraArgs]
|
|
const nextBin = require.resolve('next/dist/bin/next')
|
|
|
|
if (port === null) {
|
|
console.log(`[dev] next dev ${nextArgs.join(' ')} (sem PORT — porta padrão 3000)`)
|
|
} else {
|
|
console.log(`[dev] dev server na porta ${port} (PORT do env) — next dev -p ${port}`)
|
|
}
|
|
|
|
const child = spawn(process.execPath, [nextBin, ...nextArgs], {
|
|
stdio: 'inherit',
|
|
// Paridade com o cross-env NODE_OPTIONS=--no-deprecation anterior.
|
|
env: { ...process.env, NODE_OPTIONS: '--no-deprecation' },
|
|
})
|
|
|
|
for (const signal of ['SIGINT', 'SIGTERM', 'SIGHUP']) {
|
|
process.on(signal, () => child.kill(signal))
|
|
}
|
|
|
|
child.on('error', (error) => die(`falha ao subir o next dev: ${error.message}`))
|
|
|
|
child.on('exit', (code, signal) => {
|
|
if (signal) {
|
|
// O listener acima re-forwardaria o sinal para um filho já morto e o
|
|
// kill(process.pid) re-dispararia este próprio handler — remove antes de
|
|
// re-sinalizar para deixar a disposição padrão encerrar o processo.
|
|
process.removeAllListeners(signal)
|
|
process.kill(process.pid, signal)
|
|
} else {
|
|
process.exit(code ?? 1)
|
|
}
|
|
})
|