킷 템플릿이 설치하고, 레지스트리가 자리를 정한다

# This script lives in the repository's scripts/; the repository is its member
# id in the family registry, which owns the engine's port and tailnet URLs.
REPO="${0:A:h:h}"
# Only on the Mac the family registry places this member on, including a
# machine's host profile override (cwkPippa todo #549, Pippa's Ark).
/usr/bin/python3 "$REPO/scripts/kit_family_endpoints.py" runs-here "${REPO:t}" || {
  echo "${0:t} runs only where the family registry places ${REPO:t}" >&2
  exit 1
}
topology="$("$REPO/scripts/family-topology.sh" "${REPO:t}")"
eval "$topology"
ENV_NAME="cwk-sizzle"
ENV_BIN="$HOME/miniconda3/envs/$ENV_NAME/bin"
CONDA="$HOME/miniconda3/bin/conda"
LABEL="com.cwk.sizzle-serve"
DOMAIN="gui/$(id -u)"
PLIST_SRC="$REPO/deploy/$LABEL.plist"
PLIST_DST="$HOME/Library/LaunchAgents/$LABEL.plist"
PORT="$KIT_LOOPBACK_PORT"
HEALTH="${KIT_LOOPBACK_URL}/api/health"
# The family data root comes from the registry through the host profile
# (~/cwk-dbs with none, cwkPippa todo #549).
DATA_DIR="$(/usr/bin/python3 "$REPO/scripts/kit_family_endpoints.py" data-root)/sizzle-db"
cd "$REPO"

urls = {key: (value or "").rstrip("/") for key, value in (urls or {}).items()}
loopback, https, http = urls.get("localhost", ""), urls.get("tailscale_https", ""), urls.get("tailscale_http", "")
for label, url in (("loopback URL", loopback), ("tailnet HTTPS URL", https)):
    if not url or urlsplit(url).port is None:
        refuse(f"declares no {label} with a port")
if http and urlsplit(http).port is None:
    refuse("declares a tailnet HTTP URL without a port")
facts = {
    "KIT_LOOPBACK_URL": loopback,
    "KIT_LOOPBACK_PORT": urlsplit(loopback).port,
    "KIT_TAILNET_HTTPS": https,
    "KIT_TAILNET_HOST": urlsplit(https).hostname,
    "KIT_HTTPS_PORT": urlsplit(https).port,
    "KIT_TAILNET_HTTP": http,
    "KIT_TAILNET_HTTP_PORT": urlsplit(http).port if http else "",
    "KIT_HOST_AFFINITY": affinity,
}
try:
    here = (Path.home() / ".config" / "fleet-label").read_text().strip()
except OSError:
    here = ""
facts["KIT_RUNS_HERE"] = "1" if affinity and here and affinity == here else ""
for name, value in facts.items():
    print(f"{name}={shlex.quote(str(value))}")

# The registry says whether tailnet HTTP exists; where the engine listens says
# who answers it. An engine on loopback only needs a Serve HTTP twin. One bound
# to every interface answers tailnet HTTP itself, and a Serve listener on its
# port would collide (Bellows, PippaGo, Pulse and QuestKiln bind all interfaces).
# >>> http twin (tests/test_kit_templates.py runs this block alone)
lsof_bin=/usr/sbin/lsof
http_twin=no
if [[ -n "$KIT_TAILNET_HTTP" ]]; then
  listeners="$("$lsof_bin" -nP -iTCP:"$KIT_LOOPBACK_PORT" -sTCP:LISTEN 2>/dev/null \
    | /usr/bin/awk 'NR > 1 && $1 !~ /^([Tt]ailscale|IPNExtens)/ {print $9}' || true)"
  if [[ -n "$listeners" ]] && ! print -r -- "$listeners" | /usr/bin/grep -qvE '^(127\.0\.0\.1|\[::1\]):'; then
    http_twin=yes
  fi
fi
# <<< http twin

# Establish the new secure path before releasing any old same-port HTTPS
# listener; the HTTP route then reclaims the port without an engine rebind.
"$tailscale_bin" serve --bg --yes --https="$KIT_HTTPS_PORT" "$target"
if [[ "$http_twin" == "yes" ]]; then
  "$tailscale_bin" serve --https="$KIT_TAILNET_HTTP_PORT" off >/dev/null 2>&1 || true
  "$tailscale_bin" serve --bg --yes --http="$KIT_TAILNET_HTTP_PORT" "$target"
  /usr/bin/curl --noproxy '*' -fsS --max-time 10 "$KIT_TAILNET_HTTP$health" >/dev/null
fi
/usr/bin/curl --noproxy '*' -fsS --max-time 10 "$KIT_TAILNET_HTTPS$health" >/dev/null