Complete Gmail correspondence workflow

deploy/deploy.sh

@@ -67,6 +67,44 @@ if [ "$ai_status" != "running" ]; then
   exit 1
 fi
 
+if [ -n "${APP_PUBLIC_BASE_URL:-}" ]; then
+  public_base="${APP_PUBLIC_BASE_URL%/}"
+  auth_config_body_file="$(mktemp)"
+  auth_config_headers_file="$(mktemp)"
+  cleanup_public_check() {
+    rm -f "$auth_config_body_file" "$auth_config_headers_file"
+  }
+  trap cleanup_public_check EXIT
+
+  echo "Running public smoke check against ${public_base}"
+  if ! curl -fsS "${public_base}/" >/dev/null; then
+    echo "Public frontend check failed for ${public_base}/"
+    exit 1
+  fi
+
+  if ! curl -fsS -D "$auth_config_headers_file" -o "$auth_config_body_file" "${public_base}/api/auth/config"; then
+    echo "Public API smoke check failed for ${public_base}/api/auth/config"
+    exit 1
+  fi
+
+  content_type="$(awk 'BEGIN{IGNORECASE=1} /^content-type:/ {print $2}' "$auth_config_headers_file" | tr -d '\r' | tail -n 1)"
+  if [[ "$content_type" != application/json* ]]; then
+    echo "Public API smoke check returned unexpected content type: ${content_type:-missing}"
+    echo "First bytes of response:"
+    head -c 200 "$auth_config_body_file" || true
+    exit 1
+  fi
+
+  if ! grep -q 'requireAuth' "$auth_config_body_file"; then
+    echo "Public API smoke check returned JSON without requireAuth."
+    cat "$auth_config_body_file"
+    exit 1
+  fi
+
+  trap - EXIT
+  cleanup_public_check
+fi
+
 # Clean up old legacy container name if it still exists from pre-rename deployments.
 docker rm -f app-summarizer-1 2>/dev/null || true