feat: verify live Store pages

Author: lukisch

CHANGELOG.md

@@ -2,6 +2,9 @@
 
 ## Unreleased
 
+- Added an opt-in `store-materials --live-pages` gate that checks the configured
+  privacy and support URLs over HTTPS. GitHub Pages is now enabled for the
+  repository and both public Store routes are deployed.
 - Added a conservative runtime MCP reaper for duplicate process generations left
   under the Codex Store desktop app-server. It groups launches by Codex's direct
   `node_repl.exe` runtime anchors, always protects the newest launch cohort, requires

README.de.md

@@ -154,7 +154,7 @@ Das Projekt enthält die Grundlage für den Windows Store:
 - `docs/privacy.md`
 - `docs/support.md`
 
-Geplante öffentliche Store-Ziele:
+Öffentliche Store-Seiten:
 
 - Datenschutz: `https://dev-bricks.github.io/CareCenter-for-Codex/privacy`
 - Support: `https://dev-bricks.github.io/CareCenter-for-Codex/support`
@@ -163,10 +163,13 @@ Validieren mit:
 
 ```powershell
 python -m codex_logdatenbank_wartung.cli store-materials
+python -m codex_logdatenbank_wartung.cli store-materials --live-pages
 python -m codex_logdatenbank_wartung.cli store-materials --exe-path C:\_Local_DEV\codex-maintenance\bin
 ```
 
-Ohne `--exe-path` versucht der Check, die gebaute EXE automatisch aus `build_exe.bat` (`DIST_DIR`) zu finden. Mit `--exe-path` kann entweder die konkrete `.exe` oder nur der Build-Ordner übergeben werden.
+Mit `--live-pages` wird das externe Release-Gate geprüft: Der Befehl ruft beide konfigurierten Store-URLs über HTTPS ab und meldet nicht erreichbare Seiten als Warnung. Ohne `--exe-path` versucht der Check, die gebaute EXE automatisch aus `build_exe.bat` (`DIST_DIR`) zu finden. Mit `--exe-path` kann entweder die konkrete `.exe` oder nur der Build-Ordner übergeben werden.
+
+Der Check baut die statischen GitHub-Pages-Dateien außerdem temporär und prüft `privacy/index.html`, `support/index.html`, `index.html` sowie den Build-Marker. Der aktive Workflow `.github/workflows/pages.yml` veröffentlicht die Routen `/privacy/` und `/support/` über GitHub Pages.
 
 ## Entwicklung
 

README.md

@@ -166,7 +166,7 @@ The project includes Windows Store groundwork:
 - `docs/privacy.md`
 - `docs/support.md`
 
-Planned public Store targets:
+Public Store pages:
 
 - Privacy: `https://dev-bricks.github.io/CareCenter-for-Codex/privacy`
 - Support: `https://dev-bricks.github.io/CareCenter-for-Codex/support`
@@ -175,18 +175,19 @@ Validate them with:
 
 ```powershell
 python -m codex_logdatenbank_wartung.cli store-materials
+python -m codex_logdatenbank_wartung.cli store-materials --live-pages
 python -m codex_logdatenbank_wartung.cli store-materials --exe-path C:\_Local_DEV\codex-maintenance\bin
 ```
 
-Without `--exe-path`, the check tries to discover the built EXE automatically from `build_exe.bat` (`DIST_DIR`). With `--exe-path`, you can pass either the exact `.exe` file or just the build directory.
+Use `--live-pages` for the external release gate: it requests both configured Store URLs over HTTPS and reports unreachable pages as warnings. Without `--exe-path`, the check tries to discover the built EXE automatically from `build_exe.bat` (`DIST_DIR`). With `--exe-path`, you can pass either the exact `.exe` file or just the build directory.
 
 The Store privacy/support URLs are prepared for GitHub Pages. `store-materials` also runs a temporary static Pages build and verifies `privacy/index.html`, `support/index.html`, `index.html`, and the build marker. You can still build the artifact explicitly with:
 
 ```powershell
 python scripts\build_store_pages.py --output _site
 ```
 
-The workflow `.github/workflows/pages.yml` publishes the generated `/privacy/` and `/support/` routes after GitHub Pages is configured to use GitHub Actions for this repository.
+The active workflow `.github/workflows/pages.yml` publishes the generated `/privacy/` and `/support/` routes through GitHub Pages.
 
 ## Development
 

src/codex_logdatenbank_wartung/cli.py

@@ -144,7 +144,11 @@ def cmd_store_materials(args: argparse.Namespace) -> int:
     from .store_release import validate_store_materials
 
     exe_path = Path(args.exe_path) if args.exe_path else None
-    report = validate_store_materials(project_root=Path(args.project_root), exe_path=exe_path)
+    report = validate_store_materials(
+        project_root=Path(args.project_root),
+        exe_path=exe_path,
+        check_live_pages=args.live_pages,
+    )
     print(report.to_text())
     return {"ok": 0, "warning": 2, "failed": 1}[report.status]
 
@@ -443,6 +447,11 @@ def build_parser() -> argparse.ArgumentParser:
         default=None,
         help="Optionaler Pfad zur gebauten EXE fuer einen konkreten Existenzcheck.",
     )
+    store_materials_parser.add_argument(
+        "--live-pages",
+        action="store_true",
+        help="Oeffentliche Privacy-/Support-URLs per HTTPS pruefen.",
+    )
     store_materials_parser.set_defaults(func=cmd_store_materials)
 
     store_screenshot_parser = subparsers.add_parser(

src/codex_logdatenbank_wartung/store_release.py

@@ -10,6 +10,8 @@
 from importlib import util as importlib_util
 from pathlib import Path
 from types import ModuleType
+from urllib import error as urlerror
+from urllib import request as urlrequest
 from urllib.parse import urlparse
 
 PROJECT_ROOT = Path(__file__).resolve().parents[2]
@@ -151,6 +153,40 @@ def _check_urls(payload: dict[str, object]) -> StoreCheck:
     return StoreCheck("Store-URLs", "ok", " / ".join(ok_fields))
 
 
+def _check_live_store_pages(
+    payload: dict[str, object],
+    timeout_seconds: float = 10.0,
+) -> StoreCheck:
+    problems: list[str] = []
+    ok_fields: list[str] = []
+
+    for field in URL_FIELDS:
+        raw = str(payload.get(field, "")).strip()
+        if not raw:
+            problems.append(f"{field} fehlt")
+            continue
+
+        request = urlrequest.Request(
+            raw,
+            headers={"User-Agent": "CareCenter-for-Codex store-readiness"},
+        )
+        try:
+            with urlrequest.urlopen(request, timeout=timeout_seconds) as response:
+                status = int(response.status)
+        except (urlerror.HTTPError, urlerror.URLError, TimeoutError, OSError) as exc:
+            problems.append(f"{field}: {exc}")
+            continue
+
+        if status != 200:
+            problems.append(f"{field}: HTTP {status}")
+            continue
+        ok_fields.append(field)
+
+    if problems:
+        return StoreCheck("Store-Webseiten-Live", "warning", "; ".join(problems))
+    return StoreCheck("Store-Webseiten-Live", "ok", " / ".join(ok_fields))
+
+
 def _check_docs(project_root: Path) -> StoreCheck:
     missing = [name for name in STORE_DOCS if not (project_root / name).exists()]
     if missing:
@@ -377,6 +413,7 @@ def _check_executable(project_root: Path, payload: dict[str, object], exe_path:
 def validate_store_materials(
     project_root: Path = PROJECT_ROOT,
     exe_path: Path | None = None,
+    check_live_pages: bool = False,
 ) -> StoreMaterialsReport:
     checks: list[StoreCheck] = []
     payload, config_check = _load_store_package(project_root / STORE_PACKAGE_PATH.name)
@@ -391,6 +428,8 @@ def validate_store_materials(
     checks.append(_check_docs(project_root))
     checks.append(_check_published_store_docs(project_root, payload))
     checks.append(_check_store_pages_build(project_root))
+    if check_live_pages:
+        checks.append(_check_live_store_pages(payload))
     checks.append(_check_screenshot(project_root))
     checks.append(_check_executable(project_root, payload, exe_path))
     return StoreMaterialsReport(checks)

tests/test_cli.py

@@ -6,7 +6,7 @@
 from pathlib import Path
 from unittest.mock import patch
 
-from codex_logdatenbank_wartung.cli import main
+from codex_logdatenbank_wartung.cli import build_parser, main
 
 
 def test_init_config_writes_on_fresh_system(tmp_path: Path, capsys) -> None:
@@ -81,6 +81,12 @@ def test_store_materials_command_returns_warning_for_missing_files(tmp_path: Pat
     assert "Store-Materialien" in out
 
 
+def test_store_materials_parser_accepts_live_pages_flag() -> None:
+    args = build_parser().parse_args(["store-materials", "--live-pages"])
+
+    assert args.live_pages is True
+
+
 def test_store_screenshot_command_writes_png(tmp_path: Path, capsys, monkeypatch) -> None:
     cfg = tmp_path / "config.json"
     cfg.write_text("{}", encoding="utf-8")

tests/test_store_release.py

@@ -3,6 +3,7 @@
 import json
 from pathlib import Path
 
+from codex_logdatenbank_wartung import store_release
 from codex_logdatenbank_wartung.store_release import validate_store_materials
 
 
@@ -97,6 +98,112 @@ def test_validate_store_materials_reports_ok_for_complete_materials(tmp_path: Pa
     assert pages_build_check.status == "ok"
 
 
+def test_validate_store_materials_checks_live_pages_on_request(
+    tmp_path: Path,
+    monkeypatch,
+) -> None:
+    class FakeResponse:
+        status = 200
+
+        def __enter__(self):
+            return self
+
+        def __exit__(self, *_args) -> None:
+            return None
+
+    requested_urls: list[str] = []
+
+    def fake_urlopen(request, *, timeout: float):
+        requested_urls.append(request.full_url)
+        assert timeout == 10.0
+        return FakeResponse()
+
+    monkeypatch.setattr(store_release.urlrequest, "urlopen", fake_urlopen)
+    exe_path = tmp_path / "CareCenterForCodex.exe"
+    exe_path.write_bytes(b"exe")
+    _write_store_files(
+        tmp_path,
+        {
+            "app_name": "CareCenter for Codex",
+            "publisher": "CN=01234567-89AB-CDEF-0123-456789ABCDEF",
+            "publisher_display": "Lukas Geiger",
+            "identity_name": "LukasGeiger.CareCenterForCodex",
+            "version": "0.8.0.0",
+            "description": "Offline Wartung und Reparatur fuer die Codex-Desktop-App.",
+            "executable": "CareCenterForCodex.exe",
+            "capabilities": "runFullTrust",
+            "category": "Developer Tools",
+            "age_rating": "3+",
+            "privacy_url": "https://dev-bricks.github.io/CareCenter-for-Codex/privacy",
+            "support_url": "https://dev-bricks.github.io/CareCenter-for-Codex/support",
+        },
+    )
+
+    report = validate_store_materials(
+        project_root=tmp_path,
+        exe_path=exe_path,
+        check_live_pages=True,
+    )
+
+    live_check = next(check for check in report.checks if check.name == "Store-Webseiten-Live")
+    assert live_check.status == "ok"
+    assert requested_urls == [
+        "https://dev-bricks.github.io/CareCenter-for-Codex/privacy",
+        "https://dev-bricks.github.io/CareCenter-for-Codex/support",
+    ]
+
+
+def test_validate_store_materials_warns_when_live_page_is_missing(
+    tmp_path: Path,
+    monkeypatch,
+) -> None:
+    class FakeResponse:
+        def __init__(self, status: int) -> None:
+            self.status = status
+
+        def __enter__(self):
+            return self
+
+        def __exit__(self, *_args) -> None:
+            return None
+
+    def fake_urlopen(request, *, timeout: float):
+        del timeout
+        status = 404 if request.full_url.endswith("/support") else 200
+        return FakeResponse(status)
+
+    monkeypatch.setattr(store_release.urlrequest, "urlopen", fake_urlopen)
+    exe_path = tmp_path / "CareCenterForCodex.exe"
+    exe_path.write_bytes(b"exe")
+    _write_store_files(
+        tmp_path,
+        {
+            "app_name": "CareCenter for Codex",
+            "publisher": "CN=01234567-89AB-CDEF-0123-456789ABCDEF",
+            "publisher_display": "Lukas Geiger",
+            "identity_name": "LukasGeiger.CareCenterForCodex",
+            "version": "0.8.0.0",
+            "description": "Offline Wartung und Reparatur fuer die Codex-Desktop-App.",
+            "executable": "CareCenterForCodex.exe",
+            "capabilities": "runFullTrust",
+            "category": "Developer Tools",
+            "age_rating": "3+",
+            "privacy_url": "https://dev-bricks.github.io/CareCenter-for-Codex/privacy",
+            "support_url": "https://dev-bricks.github.io/CareCenter-for-Codex/support",
+        },
+    )
+
+    report = validate_store_materials(
+        project_root=tmp_path,
+        exe_path=exe_path,
+        check_live_pages=True,
+    )
+
+    live_check = next(check for check in report.checks if check.name == "Store-Webseiten-Live")
+    assert live_check.status == "warning"
+    assert "support_url: HTTP 404" in live_check.message
+
+
 def test_validate_store_materials_auto_detects_built_exe_from_build_script(tmp_path: Path) -> None:
     dist_dir = tmp_path / "_local" / "bin"
     dist_dir.mkdir(parents=True)