Stabilize auth flow and profile images

scripts/bootstrap-baron-api-env.sh

@@ -0,0 +1,53 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "$0")/.." && pwd)"
+BARON_DIR="${BARON_SSO_WORKTREE:-/home/ubuntu/workspace/baron-sso-tdc114plus-api}"
+SOURCE_FILE="$BARON_DIR/.env.sample"
+TARGET_FILE="$BARON_DIR/.env"
+
+if [ ! -f "$SOURCE_FILE" ]; then
+  echo "Baron SSO env sample not found: $SOURCE_FILE" >&2
+  exit 1
+fi
+
+if [ -f "$TARGET_FILE" ]; then
+  echo "Target env file already exists: $TARGET_FILE" >&2
+  echo "Remove or rename it first if you want to regenerate from the sample." >&2
+  exit 1
+fi
+
+cp "$SOURCE_FILE" "$TARGET_FILE"
+
+cat >>"$TARGET_FILE" <<'EOF'
+
+# --- tdc114plus local smoke overrides ---
+# Added by scripts/bootstrap-baron-api-env.sh
+APP_ENV=development
+BACKEND_LOG_LEVEL=debug
+CLIENT_LOG_DEBUG=true
+CORS_ALLOWED_ORIGINS=http://localhost:5000
+USERFRONT_URL=http://localhost:5000
+BACKEND_PUBLIC_URL=http://localhost:5000
+BACKEND_URL=http://localhost:5000
+OATHKEEPER_PUBLIC_URL=http://localhost:5000
+ADMINFRONT_URL=http://localhost:5173
+DEVFRONT_URL=http://localhost:5174
+ORGFRONT_URL=http://localhost:5175
+KRATOS_UI_URL=http://localhost:5000
+KRATOS_BROWSER_URL=http://localhost:5000/auth
+WORKS_ADMIN_OAUTH_TOKEN_URL=https://auth.worksmobile.com/oauth2/v2.0/token
+WORKSMOBILE_ENABLED=false
+WORKSMOBILE_RELAY_ENABLED=false
+LOGIN_LOGOUT_SMS_ENABLED=false
+LOGIN_LOGOUT_NAVER_ENABLED=false
+VITE_CLIENT_LOG_DEBUG=false
+DEV_SERVER_WATCH_POLLING=true
+EOF
+
+echo "Created $TARGET_FILE from $SOURCE_FILE"
+echo "A local smoke override block was appended to prefer localhost URLs and disable optional external notifications."
+echo "Next steps:"
+echo "  1. Review $TARGET_FILE and replace any placeholder secrets if your local backend requires real values."
+echo "  2. Run ./scripts/check-baron-api-env.sh"
+echo "  3. If runtime looks ready, run TDC114_API_BASE=http://127.0.0.1:5000 ./scripts/api-smoke.sh"