Expose API-origin playback through Caddy

Author: richiemcilroy

docs/deployment-automation.md

@@ -19,7 +19,9 @@ The GitHub Actions workflow is `.github/workflows/release-deploy.yml`.
    Before preflight, the deploy wrapper installs the current
    `control-plane.compose.yml`, patches an existing concrete Caddyfile to use
    the managed upstream snippet, creates that snippet if it is missing, and
-   leaves any existing upstream target intact. The bootstrap also removes
+   leaves any existing upstream target intact. It also repairs public Caddy
+   matchers so `/v/*` reaches the control-plane API for Tigris-backed playback.
+   The bootstrap also removes
    legacy `admin off` Caddy settings and reloads Caddy while the upstream still
    points at the current slot; if that one-time reload fails, it restarts Caddy
    before the deploy transaction begins so later promotions can use normal

docs/deployment-v1.md

@@ -407,7 +407,8 @@ The SSH wrapper also bootstraps production host files before preflight: it
 installs the current control-plane Compose template, patches an existing
 concrete Caddyfile to use the managed upstream snippet, creates
 `/etc/caddy/rend-control-plane-upstream.caddy` only when missing, removes
-legacy `admin off` Caddy settings, and preserves an existing upstream target.
+legacy `admin off` Caddy settings, ensures public `/v/*` playback reaches the
+control-plane API, and preserves an existing upstream target.
 The bootstrap reloads Caddy while the upstream still points at the current slot;
 if an older running config cannot reload because admin was disabled, it performs
 one restart before the transaction starts so later blue/green promotions can use

docs/edge-host-runbook-v1.md

@@ -160,9 +160,10 @@ own public TLS. Checked Caddy templates live in:
 - `docs/templates/control-plane-upstream.Caddyfile`
 - `docs/templates/edge-host.Caddyfile`
 
-The control-plane template exposes `api.rend.so` for the public `/v1/*` API and
-`/readyz`, blocks `/internal/*` on that public hostname, and allows only
-configured edge source IPs to `/internal/*` on `api-internal.play.rend.so`.
+The control-plane template exposes `api.rend.so` for the public `/v1/*` API,
+API-origin playback under `/v/*`, and `/readyz`, blocks `/internal/*` on that
+public hostname, and allows only configured edge source IPs to `/internal/*` on
+`api-internal.play.rend.so`.
 The edge template has a public hostname that blocks `/internal/*` and
 `/metrics`, proxies only canonical lowercase UUID playback paths, and returns
 `404` for `/v/probe`, non-UUID `/v/*`, and every other path. It also has a

docs/templates/control-plane.Caddyfile

@@ -18,7 +18,7 @@ import /etc/caddy/rend-control-plane-upstream.caddy
 	}
 
 	@public_api {
-		path /v1/* /readyz
+		path /v1/* /v/* /readyz
 	}
 	handle @public_api {
 		import rend_active_control_plane

scripts/bootstrap-control-plane-host-files.sh

@@ -165,6 +165,17 @@ for index, line in enumerate(lines):
         lines[index] = f"{match.group(1)}import rend_active_control_plane"
         replaced = True
 
+public_path_pattern = re.compile(r"^(\s*)path\s+(.+)$")
+for index, line in enumerate(lines):
+    match = public_path_pattern.match(line)
+    if not match:
+        continue
+    paths = match.group(2).split()
+    if "/v1/*" in paths and "/readyz" in paths and "/v/*" not in paths:
+        insert_at = paths.index("/v1/*") + 1
+        paths.insert(insert_at, "/v/*")
+        lines[index] = f"{match.group(1)}path {' '.join(paths)}"
+
 has_snippet_import = any(line.strip() == "import rend_active_control_plane" for line in lines)
 if not has_snippet_import:
     if not replaced and source_text == template.read_text(encoding="utf-8"):

scripts/test-control-plane-blue-green-deploy.sh

@@ -198,6 +198,9 @@ cat >"$bootstrap_case/backups/old/Caddyfile" <<'EOF'
 }
 
 api.example.test {
+	@public_api {
+		path /v1/* /readyz
+	}
 	handle {
 		reverse_proxy 127.0.0.1:4000
 	}
@@ -217,6 +220,10 @@ if ! grep -q 'import rend_active_control_plane' "$bootstrap_case/etc/caddy/Caddy
   echo "bootstrap-host-files: expected patched Caddyfile to use managed upstream import" >&2
   exit 1
 fi
+if ! grep -q 'path /v1/\* /v/\* /readyz' "$bootstrap_case/etc/caddy/Caddyfile"; then
+  echo "bootstrap-host-files: expected public Caddy matcher to include API-origin /v/* playback" >&2
+  exit 1
+fi
 if ! grep -q 'rend-control-plane-upstream.caddy' "$bootstrap_case/etc/caddy/Caddyfile"; then
   echo "bootstrap-host-files: expected patched Caddyfile to import managed upstream snippet" >&2
   exit 1

scripts/validate-edge-deploy-templates.sh

@@ -251,7 +251,7 @@ require_contains docs/templates/control-plane.Caddyfile 'remote_ip {$REND_CONTRO
 require_contains docs/templates/control-plane.Caddyfile 'REND_PUBLIC_API_HOSTNAME'
 require_contains docs/templates/control-plane.Caddyfile 'import /etc/caddy/rend-control-plane-upstream.caddy'
 require_contains docs/templates/control-plane.Caddyfile 'import rend_active_control_plane'
-require_contains docs/templates/control-plane.Caddyfile "path /v1/* /readyz"
+require_contains docs/templates/control-plane.Caddyfile "path /v1/* /v/* /readyz"
 require_contains docs/templates/control-plane.Caddyfile "path /internal/*"
 require_contains docs/templates/control-plane.Caddyfile "respond 404"
 require_not_contains docs/templates/control-plane.Caddyfile "admin off"