mrleo1nidandClaude Opus 5.5
4fa1add80d
ci / contract (сгенерированный код совпадает с openapi.yaml) (push) Successful in 48s
ci / api (push) Successful in 51s
ci / recommender (push) Canceled after 2s
ci / ts (packages + web) (push) Canceled after 0s
ci / docker (образы собираются — их сервер собирает сам при обновлении) (apps/web/Dockerfile, web, ) (push) Canceled after 0s
ci / docker (образы собираются — их сервер собирает сам при обновлении) (services/api/Dockerfile, api, api) (push) Canceled after 0s
ci / docker (образы собираются — их сервер собирает сам при обновлении) (services/api/Dockerfile, storage-agent, storage-agent) (push) Canceled after 0s
ci / docker (образы собираются — их сервер собирает сам при обновлении) (services/recommender/Dockerfile, recommender, ) (push) Canceled after 0s
ci / mobile (Metro-бандл Android) (push) Canceled after 0s
Security and robustness: - storage-agent rejects an empty INTERNAL_TOKEN (config notEmpty + middleware) - api takes the client IP only from X-Real-IP (chi RealIP trusted True-Client-IP) - /readyz reports ok/fail and logs the cause; checks run in parallel with a timeout - storage-agent shuts down gracefully; shared httpx.NewServer/Serve with IdleTimeout - goose migrations take a Postgres advisory lock - recommender readyz: per-check timeout, redis socket timeouts Clients: - Android release allows cleartext HTTP for LAN servers (expo-build-properties) - checkServer times out after 10s; connect button is disabled while checking Deploy and CI: - install.sh hands cache/uploads/updates/models to the non-root service users - update.sh refuses downgrades unless PIPU_ALLOW_DOWNGRADE=1 - recommender/analyzer get only the env they need; required secrets fail fast - nginx security headers and CSP; strip True-Client-IP - dev compose binds ports to 127.0.0.1; postgres/redis images pinned - version.mjs fails on a malformed explicit tag instead of releasing 0.0.0-dev - contract check catches untracked generated files - final releases fail without a release keystore; changelog skips rc tags Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
60 lines
1.9 KiB
Python
60 lines
1.9 KiB
Python
"""Точка входа: `pipu-rec serve` (онлайн-API) или `pipu-rec analyze` (воркер аудиоанализа)."""
|
|
|
|
import argparse
|
|
import asyncio
|
|
import logging
|
|
|
|
import psycopg
|
|
import redis.asyncio as aioredis
|
|
import uvicorn
|
|
|
|
from pipu_rec.api.app import create_app
|
|
from pipu_rec.settings import Settings
|
|
|
|
log = logging.getLogger("pipu_rec")
|
|
|
|
|
|
def _serve(settings: Settings) -> None:
|
|
rdb = aioredis.Redis.from_url(settings.redis_url, socket_connect_timeout=2, socket_timeout=2)
|
|
|
|
async def check_postgres() -> None:
|
|
async with await psycopg.AsyncConnection.connect(settings.database_url, connect_timeout=2) as conn:
|
|
await conn.execute("SELECT 1")
|
|
|
|
async def check_redis() -> None:
|
|
await rdb.ping()
|
|
|
|
app = create_app(settings, {"postgres": check_postgres, "redis": check_redis})
|
|
uvicorn.run(app, host=settings.http_host, port=settings.http_port, log_level=settings.log_level)
|
|
|
|
|
|
def _analyze(settings: Settings, workers: int) -> None:
|
|
# Аудиоанализ (Essentia) появится в M4; сейчас воркер только держит процесс живым.
|
|
log.info("analyzer started: workers=%d version=%s (no-op until M4)", workers, settings.version)
|
|
|
|
async def idle() -> None:
|
|
while True:
|
|
await asyncio.sleep(3600)
|
|
|
|
asyncio.run(idle())
|
|
|
|
|
|
def main() -> None:
|
|
parser = argparse.ArgumentParser(prog="pipu-rec")
|
|
sub = parser.add_subparsers(dest="cmd", required=True)
|
|
sub.add_parser("serve", help="внутренний API рекомендаций")
|
|
analyze = sub.add_parser("analyze", help="воркер аудиоанализа")
|
|
analyze.add_argument("--workers", type=int, default=4)
|
|
args = parser.parse_args()
|
|
|
|
settings = Settings()
|
|
logging.basicConfig(level=settings.log_level.upper())
|
|
if args.cmd == "serve":
|
|
_serve(settings)
|
|
else:
|
|
_analyze(settings, args.workers)
|
|
|
|
|
|
if __name__ == "__main__":
|
|
main()
|