ICPI Cutover Parity Checklist

Purpose

This checklist is the low-risk parity gate before pointing live or shared dev traffic at svc-icpi.

Read-Route Checks

• GET /api/v1/icpi/prices returns the same JSON shape and pagination fields
• GET /api/v1/icpi/suggest returns the same suggestion shape and region fallback behavior
• GET /api/v1/icpi/latest/:itemCode returns the same 404 icpi_not_found behavior
• GET /api/v1/icpi/estimate returns the same estimate shape and 400 invalid_estimate_query behavior

Write-Route / Auth Checks

• POST /api/v1/icpi/upsert still requires gateway auth
• extracted svc-icpi service still requires service-side bearer auth on /icpi/upsert
• invalid token still returns the same 401 reason family
• failed principal resolution still returns principal_resolution_failed

Request / Response Parity Checks

• sourceKey normalization still defaults to SRF
• currency normalization still defaults to GEL
• row dedupe still keys on sourceKey, year, quarter, regionCode, itemCode, unit, currency
• upsert response meta fields still include:
  • received
  • accepted
  • duplicatesDropped
  • sourceKey
  • sourceVersion

Env Cutover Checks

• ICPI_SERVICE_URL can point to http://localhost:4021
• TENDERS_SERVICE_URL remains unchanged for all non-ICPI traffic
• AUTH_SERVICE_URL is set for the new svc-icpi runtime
• DATABASE_URL is set for the new svc-icpi runtime
• JWT_SECRET is set for the new svc-icpi runtime

Boot / Build Checks

• npm --prefix services/svc-icpi run build
• npm --prefix services/svc-icpi run start with required env
• npm --prefix services/svc-tenders run build still passes while old host remains

Gateway Cutover Checks

• gateway still proxies GET /api/v1/icpi/* without route changes
• gateway still proxies POST /api/v1/icpi/upsert without route changes
• ICPI_SERVICE_URL=http://localhost:4021 is enough to redirect ICPI traffic without changing gateway code

Rollback Checks

• old colocated ICPI host still exists in svc-tenders
• rollback can happen by setting ICPI_SERVICE_URL back to the old host or unsetting it
• no irreversible code deletion happened in Sprint 49

Monitoring Checks

• watch 502 icpi_service_unavailable
• watch 504 icpi_service_timeout
• watch 401 spikes on ICPI upsert
• watch response-shape regressions in the web ICPI page and portal API helpers