From 52139793bc56795f252f101e8887372f3f55ced7 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Tue, 30 Jun 2026 01:44:00 +0000
Subject: [PATCH 1/9] =?UTF-8?q?fix(web):=20=E5=8F=82=E6=8B=9D=E6=99=82?=
 =?UTF-8?q?=E3=81=ABID=E3=83=88=E3=83=BC=E3=82=AF=E3=83=B3=E3=82=92?=
 =?UTF-8?q?=E9=80=81=E4=BF=A1=E7=9B=B4=E5=89=8D=E3=81=B8=E5=86=8D=E5=8F=96?=
 =?UTF-8?q?=E5=BE=97=E3=81=97=E3=83=AD=E3=82=B0=E3=82=A4=E3=83=B3=E5=88=87?=
 =?UTF-8?q?=E3=82=8C=E3=82=92=E9=98=B2=E6=AD=A2?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

永続化された古いIDトークン(発行から1時間で失効)をそのまま送っていたため、
失効後の参拝でFunctionsのverifyIdTokenが403を返し即ログアウトしていた。
送信直前に onAuthStateChanged で認証状態の確定を待ってから getIdToken() で
最新トークンを取得する(失効時はSDKが自動リフレッシュ)ことで根本解決する。

index.vueは a6da64e で対応済みだったが sanpai.vue が直し漏れていた。

Co-authored-by: kojira <kojira@users.noreply.github.com>
---
 web/pages/sanpai.vue | 27 +++++++++++++++++++++++++--
 1 file changed, 25 insertions(+), 2 deletions(-)

diff --git a/web/pages/sanpai.vue b/web/pages/sanpai.vue
index 375d144..fb78110 100644
--- a/web/pages/sanpai.vue
+++ b/web/pages/sanpai.vue
@@ -60,9 +60,19 @@
 </template>
 
 <script>
-import { getAuth } from "firebase/auth";
+import { getAuth, onAuthStateChanged } from "firebase/auth";
 import { mapGetters } from "vuex";
 
+// 認証状態の復元は非同期のため、最初に確定したユーザーを待ち受ける
+function resolveCurrentUser(auth) {
+  return new Promise((resolve) => {
+    const unsubscribe = onAuthStateChanged(auth, (user) => {
+      unsubscribe();
+      resolve(user);
+    });
+  });
+}
+
 export default {
   middleware: ["auth"],
   data() {
@@ -78,6 +88,19 @@ export default {
     };
   },
   async mounted() {
+    const auth = getAuth();
+    const currentUser = await resolveCurrentUser(auth);
+    if (!currentUser) {
+      // 本当に未ログイン
+      this.$store.dispatch("logout");
+      this.isLoading = false;
+      return;
+    }
+    // IDトークンは発行から1時間で失効するため、送信直前に再取得する
+    // (失効していれば Firebase SDK が自動でリフレッシュする)
+    const token = await currentUser.getIdToken();
+    this.$store.commit("setToken", token);
+
     let payload = {
       github_id: this.user.github_id,
       screen_name: this.user.screen_name,
@@ -86,7 +109,7 @@ export default {
       payload,
       {
         headers: {
-          Authorization: `Bearer ${this.token}`
+          Authorization: `Bearer ${token}`
         }
       })
       .catch(e=>{

From 75b43cbb6dac8decdfc22a9e528c1f29ce1e2eb0 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Tue, 30 Jun 2026 01:50:39 +0000
Subject: [PATCH 2/9] =?UTF-8?q?perf(functions):=20=E5=8F=82=E6=8B=9D?=
 =?UTF-8?q?=E3=81=AE=E8=A7=A3=E6=9E=90=E3=82=92=E5=85=A8=E4=BB=B6=E5=86=8D?=
 =?UTF-8?q?=E9=9B=86=E8=A8=88=E3=81=8B=E3=82=89=E5=B7=AE=E5=88=86=E8=A8=88?=
 =?UTF-8?q?=E7=AE=97=E3=81=B8=E5=A4=89=E6=9B=B4=E3=81=97=E9=AB=98=E9=80=9F?=
 =?UTF-8?q?=E5=8C=96?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

参拝のたびに get_activity_list で github_activities を全件読み出し、
user_performance で全件を再ソート・再集計していたため、参拝履歴が増える
ほど Firestore 読み取り件数と計算量が線形に増加していた。

user_performance の各寄与は加算的で、唯一のクロスバッチ依存はバッチ境界
(前回最終イベントと今回先頭イベントの時間差)のみ。hp は continuous_count*2 が
「diff<=7200秒のペア数*2」と等価であることを利用し、保存済み status と
新着分のみで全件計算と同一結果を再現する compute_performance_increment を新設。

user_performance 自体は status/userOGP でも使うため変更せず、初回(status または
last_activity_created_at 未保存)は従来通り全件計算で基準を初期化する。
全件計算と増分計算の一致は2分割5000試行+3バッチ3000試行で確認済み。

Co-authored-by: kojira <kojira@users.noreply.github.com>
---
 app/functions/index.js | 122 ++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 119 insertions(+), 3 deletions(-)

diff --git a/app/functions/index.js b/app/functions/index.js
index fead21f..b77f3cc 100644
--- a/app/functions/index.js
+++ b/app/functions/index.js
@@ -333,6 +333,108 @@ function user_formatted_performance(user_data, append_data={}) {
 }
 
 
+// 保存済み status から user_performance 相当の生ステータスを復元する
+function raw_user_data_from_status(status, username) {
+  return {
+    user: username,
+    hp: status.hp,
+    power: status.power,
+    defence: status.defence,
+    dex: 0,
+    agility: status.agility,
+    intelligence: status.intelligence
+  }
+}
+
+// アクティビティ群の中で最も新しい created_at を返す(無ければ null)
+function latest_activity_created_at(items) {
+  return items.reduce((latest, item) => {
+    if (!latest) return item.created_at
+    return (moment(item.created_at).unix() > moment(latest).unix()) ? item.created_at : latest
+  }, null)
+}
+
+// 累積ステータス(base_user_data)に新着アクティビティ分だけを加算する増分計算。
+// user_performance の per-event / per-pair の寄与は加算的で、バッチ境界
+// (previous_created_at と新着先頭の時間差)だけがクロスバッチ依存となるため、
+// 全件を再集計せずとも全件計算と同一の結果が得られる。
+// hp は「diff<=7200秒のペア数*2」であり、user_performance の continuous_count*2 と等価。
+function compute_performance_increment(base_user_data, new_items, previous_created_at) {
+  let user_data = {
+    user: base_user_data.user,
+    hp: base_user_data.hp,
+    power: base_user_data.power,
+    defence: base_user_data.defence,
+    dex: base_user_data.dex || 0,
+    agility: base_user_data.agility,
+    intelligence: base_user_data.intelligence
+  }
+  let sorted_items = [...new_items].sort(function(a, b) {
+    return (moment(a.created_at).unix() < moment(b.created_at).unix()) ? -1 : 1
+  })
+  let prev_created_at = previous_created_at
+  for (const item of sorted_items) {
+    if (prev_created_at) {
+      let diff = moment(item.created_at).diff(moment(prev_created_at)) / 1000
+      if (30 < diff && diff <= 120) {
+        user_data.agility += 6
+      } else if (diff <= 180) {
+        user_data.agility += 3
+      } else if (diff <= 300) {
+        user_data.agility += 2
+      } else if (diff <= 1200) {
+        user_data.agility += 1
+      }
+      if (diff <= 7200) {
+        user_data.hp += 2
+      }
+    }
+    switch (item.type) {
+      case "ForkEvent":
+        user_data.power += 1
+        break
+      case "PushEvent":
+        user_data.power += 2
+        break
+      case "CreateEvent":
+      case "DeleteEvent":
+        user_data.power += 1
+        break
+      case "PullRequestEvent":
+        user_data.power += 3
+        break
+      case "IssuesEvent":
+        switch (item.payload) {
+          case "opened":
+            user_data.intelligence += 3
+            break
+          case "closed":
+            user_data.defence += 5
+            break
+        }
+        break
+      case "IssueCommentEvent":
+        user_data.intelligence += 2
+        break
+      case "PullRequestReviewEvent":
+        user_data.defence += 3
+        break
+      case "PullRequestReviewCommentEvent":
+        user_data.defence += 3
+        break
+      case "GollumEvent":
+        user_data.defence += 3
+        break
+      case "ReleaseEvent":
+        user_data.defence += 10
+        break
+    }
+    prev_created_at = item.created_at
+  }
+  return { user_data: user_data, last_created_at: prev_created_at }
+}
+
+
 async function get_ranking(db, screen_name) {
   const rankingCache = await db.collection("cache_data").doc("ranking_cache").get()
   let response = {}
@@ -1018,14 +1120,28 @@ exports.sanpai = functions.https.onRequest(async(request, response) => {
         github_image_path: userData.image_path
       }
 
-      const raw_activities_list = await get_activity_list(userRef)
+      let raw_user_data
+      let last_activity_created_at
+      if (userData.status && userData.last_activity_created_at) {
+        // 保存済みステータスに新着分だけを加算(全件再集計しない)
+        const base_user_data = raw_user_data_from_status(userData.status, userData.screen_name)
+        const increment = compute_performance_increment(base_user_data, splited_items, userData.last_activity_created_at)
+        raw_user_data = increment.user_data
+        last_activity_created_at = increment.last_created_at
+      } else {
+        // 初回(status未保存)は全アクティビティから計算し、増分計算の基準を初期化する
+        const raw_activities_list = await get_activity_list(userRef)
+        raw_user_data = user_performance(raw_activities_list, userData.screen_name)
+        last_activity_created_at = latest_activity_created_at(raw_activities_list)
+      }
 
-      userStatusData = user_formatted_performance(user_performance(raw_activities_list, userData.screen_name), userAppendData)
+      userStatusData = user_formatted_performance(raw_user_data, userAppendData)
 
       await userRef.update({
         last_sanpai: FieldValue.serverTimestamp(),
         exp: FieldValue.increment(add_exp),
-        status: userStatusData
+        status: userStatusData,
+        last_activity_created_at: last_activity_created_at
       })
       let return_data = {
         status: "success",

From 2f17877acb5dd86da3f04434d7f39958b4f9e3e9 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Tue, 30 Jun 2026 02:13:50 +0000
Subject: [PATCH 3/9] =?UTF-8?q?ci:=20GitHub=20Actions=20=E3=81=AE=E3=82=A2?=
 =?UTF-8?q?=E3=82=AF=E3=82=B7=E3=83=A7=E3=83=B3=E3=82=92=E6=96=B0=E3=83=90?=
 =?UTF-8?q?=E3=83=BC=E3=82=B8=E3=83=A7=E3=83=B3=E3=81=B8=E6=9B=B4=E6=96=B0?=
 =?UTF-8?q?=E3=81=97=20actionlint=20=E3=82=92=E9=80=9A=E3=81=99?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

actionlint が "the runner of ... action is too old to run" を検出し
actions-test ジョブが失敗していた(alpha-0.2 既存の不具合)。
ランタイム廃止された古いアクションを互換性のある最新メジャーへ更新する。

- actions/checkout@v3 -> v4
- actions/setup-node@v2,v3 -> v4
- actions/cache@v3 -> v4
- google-github-actions/auth@v1 -> v2
- google-github-actions/setup-gcloud@v1 -> v2

入力仕様は各アクションで互換のため挙動は変えない。
ローカルで actionlint v1.7.12 がエラーなし(exit 0)を確認済み。

Co-authored-by: kojira <kojira@users.noreply.github.com>
---
 .github/workflows/dev-deploy.yml  | 10 +++++-----
 .github/workflows/prod-deploy.yml | 10 +++++-----
 .github/workflows/setup.yml       |  8 ++++----
 3 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/.github/workflows/dev-deploy.yml b/.github/workflows/dev-deploy.yml
index 6b1e85c..a309ee8 100644
--- a/.github/workflows/dev-deploy.yml
+++ b/.github/workflows/dev-deploy.yml
@@ -12,7 +12,7 @@ jobs:
   build:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Run actionlint
         shell: bash
@@ -22,12 +22,12 @@ jobs:
           ./actionlint -color
 
       - name: setup node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: "18"
 
       - name: cache
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: ~/.npm
           key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
@@ -61,7 +61,7 @@ jobs:
         run: |
           set -ex
           echo "${{ secrets.DEV_GCLOUD_SERVICE_KEY }}" | base64 -d > ${{ env.GCP_KEY_PATH }}
-      - uses: 'google-github-actions/auth@v1'
+      - uses: 'google-github-actions/auth@v2'
         with:
           credentials_json: '${{ secrets.DEV_GCLOUD_SERVICE_KEY }}'
 
@@ -69,7 +69,7 @@ jobs:
         run: 'gcloud auth list --filter=status:ACTIVE --format="value(account)"'
 
       - name: 'Set up Cloud SDK'
-        uses: 'google-github-actions/setup-gcloud@v1'
+        uses: 'google-github-actions/setup-gcloud@v2'
         with:
           install_components: ''
           project_id: 'd-shrine-dev'
diff --git a/.github/workflows/prod-deploy.yml b/.github/workflows/prod-deploy.yml
index 3cd40c5..f146f0b 100644
--- a/.github/workflows/prod-deploy.yml
+++ b/.github/workflows/prod-deploy.yml
@@ -12,7 +12,7 @@ jobs:
   deploy:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Run actionlint
         shell: bash
@@ -22,12 +22,12 @@ jobs:
           ./actionlint -color
 
       - name: setup node
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@v4
         with:
           node-version: "18"
 
       - name: cache
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: ~/.npm
           key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
@@ -64,14 +64,14 @@ jobs:
         run: |
           set -ex
           echo "${{ secrets.PROD_GCLOUD_SERVICE_KEY }}" | base64 -d > ${{ env.GCP_KEY_PATH }}
-      - uses: 'google-github-actions/auth@v1'
+      - uses: 'google-github-actions/auth@v2'
         with:
           credentials_json: '${{ secrets.PROD_GCLOUD_SERVICE_KEY }}'
       - name: 'Use gcloud CLI'
         run: 'gcloud auth list --filter=status:ACTIVE --format="value(account)"'
 
       - name: 'Set up Cloud SDK'
-        uses: 'google-github-actions/setup-gcloud@v1'
+        uses: 'google-github-actions/setup-gcloud@v2'
         with:
           install_components: ''
           project_id: 'd-shrine'
diff --git a/.github/workflows/setup.yml b/.github/workflows/setup.yml
index 373a034..01a3780 100644
--- a/.github/workflows/setup.yml
+++ b/.github/workflows/setup.yml
@@ -10,7 +10,7 @@ jobs:
   actions-test:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Run actionlint
         shell: bash
@@ -22,15 +22,15 @@ jobs:
   build:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: setup node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: "18"
 
       - name: cache
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: ~/.npm
           key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}

From 2216a16d36967d4487f6f4e6cc33987cce715971 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Tue, 30 Jun 2026 02:48:01 +0000
Subject: [PATCH 4/9] =?UTF-8?q?refactor(functions):=20=E5=8F=82=E6=8B=9D?=
 =?UTF-8?q?=E3=81=AE=E8=83=BD=E5=8A=9B=E8=A7=A3=E6=9E=90=E3=83=AD=E3=82=B8?=
 =?UTF-8?q?=E3=83=83=E3=82=AF=E3=82=92=20performance.js=20=E3=81=AB?=
 =?UTF-8?q?=E5=88=86=E9=9B=A2?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

ユニットテスト可能にするため、副作用のない純粋な計算ロジック
(user_performance / user_formatted_performance / compute_performance_increment /
raw_user_data_from_status / latest_activity_created_at / get_level など)を
index.js から performance.js へ抽出し、index.js からは require して使用する。
関数本体は逐語移設で挙動は不変。エミュレータで全関数のロードを確認済み。

Co-authored-by: kojira <kojira@users.noreply.github.com>
---
 app/functions/index.js       | 260 +---------------------------------
 app/functions/performance.js | 267 +++++++++++++++++++++++++++++++++++
 2 files changed, 274 insertions(+), 253 deletions(-)
 create mode 100644 app/functions/performance.js

diff --git a/app/functions/index.js b/app/functions/index.js
index b77f3cc..04476a7 100644
--- a/app/functions/index.js
+++ b/app/functions/index.js
@@ -10,6 +10,13 @@ const { ChartJSNodeCanvas } = require("chartjs-node-canvas")
 const cors = require("cors")({
   origin: true
 })
+const {
+  user_performance,
+  user_formatted_performance,
+  raw_user_data_from_status,
+  latest_activity_created_at,
+  compute_performance_increment
+} = require("./performance")
 
 const projectID = process.env.GCLOUD_PROJECT
 const buggetName = `${projectID}.appspot.com`
@@ -37,7 +44,6 @@ const fontStyle = {
   lineHeight: 100,
   color: "#FFFFFF"
 }
-const target_points = [0,5,11,19,30,45,65,91,124,166,218,281,357,447,553,676,818,981,1167,1378,1616,1884,2184,2519,2892,3306,3764,4269,4825,5436,6106,6840,7643,8520,9477,10520,11656,12892,14236,15696,17281,19001,20867,22891,25086,27466,30046,32842,35872,39156]
 const date_now = (moment()).unix()
 const date_low = moment("2022-01-01T00:00:00Z").subtract(9, 'hours').unix()
 const date_max = moment("2022-01-04T00:00:00Z").subtract(9, 'hours').unix()
@@ -60,27 +66,6 @@ const sanpai = {
 // Create and Deploy Your First Cloud Functions
 // https://firebase.google.com/docs/functions/write-firebase-functions
 
-function get_level(points) {
-  level = 0
-  for (let i=0; i < target_points.length; i++) {
-    if (points <= target_points[i]) {
-      level = i + 1
-      break
-    }
-  }
-  return level
-}
-
-function get_next_leve_exp(points) {
-  let level = get_level(points)
-  let return_data = {
-    next_level: level + 1,
-    next_exp: target_points[level]
-  }
-  return return_data
-}
-
-
 async function get_feed(user, per_page=100) {
   functions.logger.info("get_feed")
   try {
@@ -204,237 +189,6 @@ async function get_activity_list(userRef) {
 }
 
 
-function user_performance(items, username) {
-  let user_data = {
-    user: username,
-    hp: 0,
-    power: 0,
-    defence: 0,
-    dex: 0,
-    agility: 0,
-    intelligence: 0
-  }
-
-
-  previousItem = null
-  continuous_count = 0
-  let sorted_item = items.sort(function(a, b) {
-    return (moment(a.created_at).unix() < moment(b.created_at).unix()) ? -1 : 1
-  })
-  for (const item of sorted_item) {
-    if (previousItem) {
-      previous_time = moment(previousItem.created_at)
-      current_time = moment(item.created_at)
-      diff = current_time.diff(previous_time)/1000
-      if (30 < diff && diff <= 120) {
-        user_data.agility += 6
-      } else if (diff <= 180) {
-        user_data.agility += 3
-      } else if (diff <= 300) {
-        user_data.agility += 2
-      } else if (diff <= 1200) {
-        user_data.agility += 1
-      }
-      if (diff <= 7200) {
-        continuous_count++
-      } else {
-        user_data.hp += continuous_count * 2
-        continuous_count = 0
-      }
-    }
-    switch (item.type) {
-      case "ForkEvent":
-        user_data.power += 1
-        break
-      case "PushEvent":
-        user_data.power += 2
-        break
-      case "CreateEvent":
-      case "DeleteEvent":
-        user_data.power += 1
-        break
-      case "PullRequestEvent":
-        user_data.power += 3
-        break
-      case "IssuesEvent":
-        switch (item.payload) {
-          case "opened":
-            user_data.intelligence += 3
-            break
-          case "closed":
-            user_data.defence += 5
-            break
-        }
-        break
-      case "IssueCommentEvent":
-        user_data.intelligence += 2
-        break
-      case "PullRequestReviewEvent":
-        user_data.defence += 3
-        break
-      case "PullRequestReviewCommentEvent":
-        user_data.defence += 3
-        break
-      case "GollumEvent":
-        user_data.defence += 3
-        break
-      case "ReleaseEvent":
-        user_data.defence += 10
-        break
-    }
-    previousItem = item
-  }
-  if (continuous_count > 0) {
-    user_data.hp += continuous_count * 2
-  }
-
-  return user_data
-}
-
-function user_formatted_performance(user_data, append_data={}) {
-  let return_Data = {
-    user: user_data.user,
-    points: 0,
-    hp: user_data.hp,
-    power: user_data.power,
-    intelligence: user_data.intelligence,
-    defence: user_data.defence,
-    agility: user_data.agility,
-    total: user_data.hp + user_data.power + user_data.intelligence + user_data.defence + user_data.agility,
-    level: 0,
-    exp: 0,
-    next_exp: 0,
-    chart: {
-      hp: 0,
-      power: 0,
-      intelligence: 0,
-      defence: 0,
-      agility: 0
-    }
-  }
-  // 経験値を反映
-  if(append_data.exp) {
-    return_Data.exp += append_data.exp
-    return_Data.points = append_data.exp
-  }
-  if(append_data.user) {
-    return_Data.user = append_data.user
-  }
-
-  return_Data.chart.hp = return_Data.hp
-  return_Data.chart.power = return_Data.power,
-  return_Data.chart.intelligence = return_Data.intelligence
-  return_Data.chart.defence = return_Data.defence
-  return_Data.chart.agility = return_Data.agility
-
-  return_Data.level = get_level(return_Data.total)
-  return_Data.next_exp = get_next_leve_exp(return_Data.total).next_exp
-  return return_Data
-}
-
-
-// 保存済み status から user_performance 相当の生ステータスを復元する
-function raw_user_data_from_status(status, username) {
-  return {
-    user: username,
-    hp: status.hp,
-    power: status.power,
-    defence: status.defence,
-    dex: 0,
-    agility: status.agility,
-    intelligence: status.intelligence
-  }
-}
-
-// アクティビティ群の中で最も新しい created_at を返す(無ければ null)
-function latest_activity_created_at(items) {
-  return items.reduce((latest, item) => {
-    if (!latest) return item.created_at
-    return (moment(item.created_at).unix() > moment(latest).unix()) ? item.created_at : latest
-  }, null)
-}
-
-// 累積ステータス(base_user_data)に新着アクティビティ分だけを加算する増分計算。
-// user_performance の per-event / per-pair の寄与は加算的で、バッチ境界
-// (previous_created_at と新着先頭の時間差)だけがクロスバッチ依存となるため、
-// 全件を再集計せずとも全件計算と同一の結果が得られる。
-// hp は「diff<=7200秒のペア数*2」であり、user_performance の continuous_count*2 と等価。
-function compute_performance_increment(base_user_data, new_items, previous_created_at) {
-  let user_data = {
-    user: base_user_data.user,
-    hp: base_user_data.hp,
-    power: base_user_data.power,
-    defence: base_user_data.defence,
-    dex: base_user_data.dex || 0,
-    agility: base_user_data.agility,
-    intelligence: base_user_data.intelligence
-  }
-  let sorted_items = [...new_items].sort(function(a, b) {
-    return (moment(a.created_at).unix() < moment(b.created_at).unix()) ? -1 : 1
-  })
-  let prev_created_at = previous_created_at
-  for (const item of sorted_items) {
-    if (prev_created_at) {
-      let diff = moment(item.created_at).diff(moment(prev_created_at)) / 1000
-      if (30 < diff && diff <= 120) {
-        user_data.agility += 6
-      } else if (diff <= 180) {
-        user_data.agility += 3
-      } else if (diff <= 300) {
-        user_data.agility += 2
-      } else if (diff <= 1200) {
-        user_data.agility += 1
-      }
-      if (diff <= 7200) {
-        user_data.hp += 2
-      }
-    }
-    switch (item.type) {
-      case "ForkEvent":
-        user_data.power += 1
-        break
-      case "PushEvent":
-        user_data.power += 2
-        break
-      case "CreateEvent":
-      case "DeleteEvent":
-        user_data.power += 1
-        break
-      case "PullRequestEvent":
-        user_data.power += 3
-        break
-      case "IssuesEvent":
-        switch (item.payload) {
-          case "opened":
-            user_data.intelligence += 3
-            break
-          case "closed":
-            user_data.defence += 5
-            break
-        }
-        break
-      case "IssueCommentEvent":
-        user_data.intelligence += 2
-        break
-      case "PullRequestReviewEvent":
-        user_data.defence += 3
-        break
-      case "PullRequestReviewCommentEvent":
-        user_data.defence += 3
-        break
-      case "GollumEvent":
-        user_data.defence += 3
-        break
-      case "ReleaseEvent":
-        user_data.defence += 10
-        break
-    }
-    prev_created_at = item.created_at
-  }
-  return { user_data: user_data, last_created_at: prev_created_at }
-}
-
-
 async function get_ranking(db, screen_name) {
   const rankingCache = await db.collection("cache_data").doc("ranking_cache").get()
   let response = {}
diff --git a/app/functions/performance.js b/app/functions/performance.js
new file mode 100644
index 0000000..e3cf228
--- /dev/null
+++ b/app/functions/performance.js
@@ -0,0 +1,267 @@
+#!/usr/bin/env node
+// 参拝の能力解析(パフォーマンス計算)に関する純粋ロジック。
+// 副作用(Firestore/HTTP/認証)を持たず、ユニットテスト可能な単位として index.js から分離している。
+const moment = require("moment")
+
+const target_points = [0,5,11,19,30,45,65,91,124,166,218,281,357,447,553,676,818,981,1167,1378,1616,1884,2184,2519,2892,3306,3764,4269,4825,5436,6106,6840,7643,8520,9477,10520,11656,12892,14236,15696,17281,19001,20867,22891,25086,27466,30046,32842,35872,39156]
+
+function get_level(points) {
+  level = 0
+  for (let i=0; i < target_points.length; i++) {
+    if (points <= target_points[i]) {
+      level = i + 1
+      break
+    }
+  }
+  return level
+}
+
+function get_next_leve_exp(points) {
+  let level = get_level(points)
+  let return_data = {
+    next_level: level + 1,
+    next_exp: target_points[level]
+  }
+  return return_data
+}
+
+function user_performance(items, username) {
+  let user_data = {
+    user: username,
+    hp: 0,
+    power: 0,
+    defence: 0,
+    dex: 0,
+    agility: 0,
+    intelligence: 0
+  }
+
+
+  previousItem = null
+  continuous_count = 0
+  let sorted_item = items.sort(function(a, b) {
+    return (moment(a.created_at).unix() < moment(b.created_at).unix()) ? -1 : 1
+  })
+  for (const item of sorted_item) {
+    if (previousItem) {
+      previous_time = moment(previousItem.created_at)
+      current_time = moment(item.created_at)
+      diff = current_time.diff(previous_time)/1000
+      if (30 < diff && diff <= 120) {
+        user_data.agility += 6
+      } else if (diff <= 180) {
+        user_data.agility += 3
+      } else if (diff <= 300) {
+        user_data.agility += 2
+      } else if (diff <= 1200) {
+        user_data.agility += 1
+      }
+      if (diff <= 7200) {
+        continuous_count++
+      } else {
+        user_data.hp += continuous_count * 2
+        continuous_count = 0
+      }
+    }
+    switch (item.type) {
+      case "ForkEvent":
+        user_data.power += 1
+        break
+      case "PushEvent":
+        user_data.power += 2
+        break
+      case "CreateEvent":
+      case "DeleteEvent":
+        user_data.power += 1
+        break
+      case "PullRequestEvent":
+        user_data.power += 3
+        break
+      case "IssuesEvent":
+        switch (item.payload) {
+          case "opened":
+            user_data.intelligence += 3
+            break
+          case "closed":
+            user_data.defence += 5
+            break
+        }
+        break
+      case "IssueCommentEvent":
+        user_data.intelligence += 2
+        break
+      case "PullRequestReviewEvent":
+        user_data.defence += 3
+        break
+      case "PullRequestReviewCommentEvent":
+        user_data.defence += 3
+        break
+      case "GollumEvent":
+        user_data.defence += 3
+        break
+      case "ReleaseEvent":
+        user_data.defence += 10
+        break
+    }
+    previousItem = item
+  }
+  if (continuous_count > 0) {
+    user_data.hp += continuous_count * 2
+  }
+
+  return user_data
+}
+
+function user_formatted_performance(user_data, append_data={}) {
+  let return_Data = {
+    user: user_data.user,
+    points: 0,
+    hp: user_data.hp,
+    power: user_data.power,
+    intelligence: user_data.intelligence,
+    defence: user_data.defence,
+    agility: user_data.agility,
+    total: user_data.hp + user_data.power + user_data.intelligence + user_data.defence + user_data.agility,
+    level: 0,
+    exp: 0,
+    next_exp: 0,
+    chart: {
+      hp: 0,
+      power: 0,
+      intelligence: 0,
+      defence: 0,
+      agility: 0
+    }
+  }
+  // 経験値を反映
+  if(append_data.exp) {
+    return_Data.exp += append_data.exp
+    return_Data.points = append_data.exp
+  }
+  if(append_data.user) {
+    return_Data.user = append_data.user
+  }
+
+  return_Data.chart.hp = return_Data.hp
+  return_Data.chart.power = return_Data.power,
+  return_Data.chart.intelligence = return_Data.intelligence
+  return_Data.chart.defence = return_Data.defence
+  return_Data.chart.agility = return_Data.agility
+
+  return_Data.level = get_level(return_Data.total)
+  return_Data.next_exp = get_next_leve_exp(return_Data.total).next_exp
+  return return_Data
+}
+
+
+// 保存済み status から user_performance 相当の生ステータスを復元する
+function raw_user_data_from_status(status, username) {
+  return {
+    user: username,
+    hp: status.hp,
+    power: status.power,
+    defence: status.defence,
+    dex: 0,
+    agility: status.agility,
+    intelligence: status.intelligence
+  }
+}
+
+// アクティビティ群の中で最も新しい created_at を返す(無ければ null)
+function latest_activity_created_at(items) {
+  return items.reduce((latest, item) => {
+    if (!latest) return item.created_at
+    return (moment(item.created_at).unix() > moment(latest).unix()) ? item.created_at : latest
+  }, null)
+}
+
+// 累積ステータス(base_user_data)に新着アクティビティ分だけを加算する増分計算。
+// user_performance の per-event / per-pair の寄与は加算的で、バッチ境界
+// (previous_created_at と新着先頭の時間差)だけがクロスバッチ依存となるため、
+// 全件を再集計せずとも全件計算と同一の結果が得られる。
+// hp は「diff<=7200秒のペア数*2」であり、user_performance の continuous_count*2 と等価。
+function compute_performance_increment(base_user_data, new_items, previous_created_at) {
+  let user_data = {
+    user: base_user_data.user,
+    hp: base_user_data.hp,
+    power: base_user_data.power,
+    defence: base_user_data.defence,
+    dex: base_user_data.dex || 0,
+    agility: base_user_data.agility,
+    intelligence: base_user_data.intelligence
+  }
+  let sorted_items = [...new_items].sort(function(a, b) {
+    return (moment(a.created_at).unix() < moment(b.created_at).unix()) ? -1 : 1
+  })
+  let prev_created_at = previous_created_at
+  for (const item of sorted_items) {
+    if (prev_created_at) {
+      let diff = moment(item.created_at).diff(moment(prev_created_at)) / 1000
+      if (30 < diff && diff <= 120) {
+        user_data.agility += 6
+      } else if (diff <= 180) {
+        user_data.agility += 3
+      } else if (diff <= 300) {
+        user_data.agility += 2
+      } else if (diff <= 1200) {
+        user_data.agility += 1
+      }
+      if (diff <= 7200) {
+        user_data.hp += 2
+      }
+    }
+    switch (item.type) {
+      case "ForkEvent":
+        user_data.power += 1
+        break
+      case "PushEvent":
+        user_data.power += 2
+        break
+      case "CreateEvent":
+      case "DeleteEvent":
+        user_data.power += 1
+        break
+      case "PullRequestEvent":
+        user_data.power += 3
+        break
+      case "IssuesEvent":
+        switch (item.payload) {
+          case "opened":
+            user_data.intelligence += 3
+            break
+          case "closed":
+            user_data.defence += 5
+            break
+        }
+        break
+      case "IssueCommentEvent":
+        user_data.intelligence += 2
+        break
+      case "PullRequestReviewEvent":
+        user_data.defence += 3
+        break
+      case "PullRequestReviewCommentEvent":
+        user_data.defence += 3
+        break
+      case "GollumEvent":
+        user_data.defence += 3
+        break
+      case "ReleaseEvent":
+        user_data.defence += 10
+        break
+    }
+    prev_created_at = item.created_at
+  }
+  return { user_data: user_data, last_created_at: prev_created_at }
+}
+
+module.exports = {
+  target_points,
+  get_level,
+  get_next_leve_exp,
+  user_performance,
+  user_formatted_performance,
+  raw_user_data_from_status,
+  latest_activity_created_at,
+  compute_performance_increment
+}

From 4e1d52073f348f0c534f86a853cf0733ec8c4a17 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Tue, 30 Jun 2026 02:48:01 +0000
Subject: [PATCH 5/9] =?UTF-8?q?test(functions):=20=E5=8F=82=E6=8B=9D?=
 =?UTF-8?q?=E8=A7=A3=E6=9E=90=E3=81=AE=E3=83=A6=E3=83=8B=E3=83=83=E3=83=88?=
 =?UTF-8?q?=E3=83=86=E3=82=B9=E3=83=88=E3=81=A8=E5=A2=97=E5=88=86=E8=A8=88?=
 =?UTF-8?q?=E7=AE=97=E3=81=AE=E7=AD=89=E4=BE=A1=E6=80=A7=E3=83=86=E3=82=B9?=
 =?UTF-8?q?=E3=83=88=E3=82=92=E8=BF=BD=E5=8A=A0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

node:test/node:assert を使用(追加依存なし)。npm test で実行可能。
- 各イベント種別の加点、時間差による agility/hp、レベル算出などの単体検証
- IssuesEvent が payload 文字列時のみ加点する既存挙動も明示的に検証
- 全件計算 vs 増分計算の一致をランダム多数試行(2分割2000+3バッチ1000)で検証
全12テストがパスすることを確認済み。

Co-authored-by: kojira <kojira@users.noreply.github.com>
---
 app/functions/package.json             |   3 +-
 app/functions/test/performance.test.js | 210 +++++++++++++++++++++++++
 2 files changed, 212 insertions(+), 1 deletion(-)
 create mode 100644 app/functions/test/performance.test.js

diff --git a/app/functions/package.json b/app/functions/package.json
index 5dd8917..f14d3e9 100644
--- a/app/functions/package.json
+++ b/app/functions/package.json
@@ -6,7 +6,8 @@
     "shell": "firebase functions:shell",
     "start": "npm run shell",
     "deploy": "firebase deploy --only functions",
-    "logs": "firebase functions:log"
+    "logs": "firebase functions:log",
+    "test": "node --test"
   },
   "engines": {
     "node": "18"
diff --git a/app/functions/test/performance.test.js b/app/functions/test/performance.test.js
new file mode 100644
index 0000000..1ea346e
--- /dev/null
+++ b/app/functions/test/performance.test.js
@@ -0,0 +1,210 @@
+const test = require("node:test")
+const assert = require("node:assert")
+const moment = require("moment")
+const perf = require("../performance")
+
+const {
+  get_level,
+  get_next_leve_exp,
+  user_performance,
+  user_formatted_performance,
+  raw_user_data_from_status,
+  latest_activity_created_at,
+  compute_performance_increment
+} = perf
+
+// ---- helpers ----
+function iso(unix) {
+  return moment.unix(unix).utc().format("YYYY-MM-DDTHH:mm:ss") + "Z"
+}
+let _seq = 0
+function item(type, unix, payload = null) {
+  return { id: `${unix}_${_seq++}`, type, payload, created_at: iso(unix) }
+}
+
+// ============================================================
+// get_level / get_next_leve_exp
+// ============================================================
+test("get_level: しきい値の境界", () => {
+  assert.strictEqual(get_level(0), 1)   // target_points[0]=0
+  assert.strictEqual(get_level(5), 2)   // target_points[1]=5
+  assert.strictEqual(get_level(6), 3)   // 6<=11
+  assert.strictEqual(get_level(11), 3)
+  assert.strictEqual(get_level(12), 4)  // 12<=19
+})
+
+test("get_next_leve_exp: 次レベルと必要経験値", () => {
+  const r = get_next_leve_exp(0) // level=1 -> target_points[1]=5
+  assert.strictEqual(r.next_level, 2)
+  assert.strictEqual(r.next_exp, 5)
+})
+
+// ============================================================
+// user_performance: イベント種別ごとの加点
+// ============================================================
+test("user_performance: 単一イベントの種別加点", () => {
+  assert.strictEqual(user_performance([item("PushEvent", 1000)], "u").power, 2)
+  assert.strictEqual(user_performance([item("ForkEvent", 1000)], "u").power, 1)
+  assert.strictEqual(user_performance([item("CreateEvent", 1000)], "u").power, 1)
+  assert.strictEqual(user_performance([item("DeleteEvent", 1000)], "u").power, 1)
+  assert.strictEqual(user_performance([item("PullRequestEvent", 1000)], "u").power, 3)
+  assert.strictEqual(user_performance([item("IssueCommentEvent", 1000)], "u").intelligence, 2)
+  assert.strictEqual(user_performance([item("PullRequestReviewEvent", 1000)], "u").defence, 3)
+  assert.strictEqual(user_performance([item("PullRequestReviewCommentEvent", 1000)], "u").defence, 3)
+  assert.strictEqual(user_performance([item("GollumEvent", 1000)], "u").defence, 3)
+  assert.strictEqual(user_performance([item("ReleaseEvent", 1000)], "u").defence, 10)
+})
+
+test("user_performance: 未対応イベントは加点しない", () => {
+  const r = user_performance([item("WatchEvent", 1000)], "u")
+  assert.strictEqual(r.power + r.defence + r.intelligence + r.agility + r.hp, 0)
+})
+
+test("user_performance: IssuesEvent は payload が文字列の時のみ加点(既存仕様)", () => {
+  // 文字列 payload の場合のみ switch にマッチする
+  assert.strictEqual(user_performance([item("IssuesEvent", 1000, "opened")], "u").intelligence, 3)
+  assert.strictEqual(user_performance([item("IssuesEvent", 1000, "closed")], "u").defence, 5)
+  // GitHub API 実体のオブジェクト payload はマッチせず加点されない(既存挙動)
+  const objR = user_performance([item("IssuesEvent", 1000, { action: "opened" })], "u")
+  assert.strictEqual(objR.intelligence, 0)
+  assert.strictEqual(objR.defence, 0)
+})
+
+// ============================================================
+// user_performance: 時間差による agility / hp
+// ============================================================
+function twoPush(diffSec) {
+  return user_performance([item("PushEvent", 1000), item("PushEvent", 1000 + diffSec)], "u")
+}
+
+test("user_performance: agility は連続イベントの時間差で決まる", () => {
+  assert.strictEqual(twoPush(60).agility, 6)   // 30<diff<=120
+  assert.strictEqual(twoPush(120).agility, 6)
+  assert.strictEqual(twoPush(150).agility, 3)  // <=180
+  assert.strictEqual(twoPush(250).agility, 2)  // <=300
+  assert.strictEqual(twoPush(1000).agility, 1) // <=1200
+  assert.strictEqual(twoPush(1201).agility, 0) // >1200 はどのバケットにも該当しない
+  assert.strictEqual(twoPush(30).agility, 3)   // 30<diff は false だが diff<=180 に該当し +3
+})
+
+test("user_performance: hp は diff<=7200秒の連続ペア数*2", () => {
+  assert.strictEqual(twoPush(60).hp, 2)    // 連続1ペア -> hp 2
+  assert.strictEqual(twoPush(7200).hp, 2)  // 境界(<=7200)
+  assert.strictEqual(twoPush(7201).hp, 0)  // ギャップ -> hp 0
+  // 3連続(全て7200秒以内) -> 2ペア -> hp 4
+  const three = user_performance([
+    item("PushEvent", 1000), item("PushEvent", 2000), item("PushEvent", 3000)
+  ], "u")
+  assert.strictEqual(three.hp, 4)
+})
+
+// ============================================================
+// user_formatted_performance
+// ============================================================
+test("user_formatted_performance: total/chart/level/exp/points", () => {
+  const raw = { user: "u", hp: 10, power: 4, intelligence: 2, defence: 3, agility: 6, dex: 0 }
+  const fmt = user_formatted_performance(raw, { exp: 100, user: { display_name: "d" } })
+  assert.strictEqual(fmt.total, 10 + 4 + 2 + 3 + 6)
+  assert.strictEqual(fmt.exp, 100)
+  assert.strictEqual(fmt.points, 100)
+  assert.deepStrictEqual(fmt.chart, { hp: 10, power: 4, intelligence: 2, defence: 3, agility: 6 })
+  assert.strictEqual(fmt.level, get_level(fmt.total))
+  assert.deepStrictEqual(fmt.user, { display_name: "d" })
+})
+
+// ============================================================
+// raw_user_data_from_status / latest_activity_created_at
+// ============================================================
+test("raw_user_data_from_status: status から生ステータスを復元", () => {
+  const status = { hp: 1, power: 2, defence: 3, agility: 4, intelligence: 5 }
+  assert.deepStrictEqual(raw_user_data_from_status(status, "u"), {
+    user: "u", hp: 1, power: 2, defence: 3, dex: 0, agility: 4, intelligence: 5
+  })
+})
+
+test("latest_activity_created_at: 最新の created_at を返す", () => {
+  assert.strictEqual(latest_activity_created_at([]), null)
+  const items = [item("PushEvent", 3000), item("PushEvent", 1000), item("PushEvent", 5000)]
+  assert.strictEqual(latest_activity_created_at(items), iso(5000))
+})
+
+// ============================================================
+// 増分計算の等価性(プロパティテスト)
+// ============================================================
+const TYPES = ["ForkEvent","PushEvent","CreateEvent","DeleteEvent","PullRequestEvent","IssuesEvent","IssueCommentEvent","PullRequestReviewEvent","PullRequestReviewCommentEvent","GollumEvent","ReleaseEvent","WatchEvent"]
+const PAYLOADS = [{ action: "opened" }, { action: "closed" }, "opened", "closed", null]
+function rand(n) { return Math.floor(Math.random() * n) }
+
+function genItems(count, startUnix) {
+  let t = startUnix
+  let items = []
+  for (let i = 0; i < count; i++) {
+    t += rand(10000) // 7200秒境界を跨ぐようばらつかせる
+    items.push(item(TYPES[rand(TYPES.length)], t, PAYLOADS[rand(PAYLOADS.length)]))
+  }
+  return items
+}
+
+const KEYS = ["hp","power","intelligence","defence","agility","total","level","next_exp","points","exp"]
+function pick(o) { const r = {}; for (const k of KEYS) r[k] = o[k]; return r }
+const append = { exp: 42, user: { display_name: "d", screen_name: "s" } }
+
+// 保存済み status からの増分適用を 1 ステップ行う
+function applyIncrement(prevStatus, prevTs, batch) {
+  if (prevStatus) {
+    const inc = compute_performance_increment(raw_user_data_from_status(prevStatus, "s"), batch, prevTs)
+    return { status: user_formatted_performance(inc.user_data, {}), ts: inc.last_created_at }
+  }
+  // 初回(status未保存)は全件計算で初期化
+  return {
+    status: user_formatted_performance(user_performance(batch.slice(), {}), {}),
+    ts: latest_activity_created_at(batch)
+  }
+}
+
+test("増分計算 == 全件計算 (2分割・多数試行)", () => {
+  for (let c = 0; c < 2000; c++) {
+    const all = genItems(1 + rand(40), moment("2020-01-01T00:00:00Z").unix() + rand(1000000))
+    all.sort((a, b) => moment(a.created_at).unix() - moment(b.created_at).unix())
+    const k = rand(all.length + 1)
+    const oldItems = all.slice(0, k)
+    const newItems = all.slice(k)
+    if (newItems.length === 0) continue
+
+    const full = user_formatted_performance(user_performance(all.slice(), {}), append)
+
+    let incFmt
+    if (oldItems.length > 0) {
+      const baseStatus = user_formatted_performance(user_performance(oldItems.slice(), {}), {})
+      const inc = compute_performance_increment(raw_user_data_from_status(baseStatus, "s"), newItems, latest_activity_created_at(oldItems))
+      incFmt = user_formatted_performance(inc.user_data, append)
+    } else {
+      incFmt = user_formatted_performance(user_performance(newItems.slice(), {}), append)
+    }
+    assert.deepStrictEqual(pick(incFmt), pick(full))
+  }
+})
+
+test("増分計算 == 全件計算 (3バッチ逐次適用)", () => {
+  for (let c = 0; c < 1000; c++) {
+    const all = genItems(3 + rand(40), moment("2020-01-01T00:00:00Z").unix() + rand(1000000))
+    all.sort((a, b) => moment(a.created_at).unix() - moment(b.created_at).unix())
+    const p1 = rand(all.length), p2 = p1 + rand(all.length - p1)
+    const b1 = all.slice(0, p1), b2 = all.slice(p1, p2), b3 = all.slice(p2)
+    if (b3.length === 0) continue
+
+    const full = user_formatted_performance(user_performance(all.slice(), {}), append)
+
+    let s = null, ts = null
+    if (b1.length > 0) { const r = applyIncrement(s, ts, b1); s = r.status; ts = r.ts }
+    if (b2.length > 0) { const r = applyIncrement(s, ts, b2); s = r.status; ts = r.ts }
+    let finalFmt
+    if (s) {
+      const inc = compute_performance_increment(raw_user_data_from_status(s, "s"), b3, ts)
+      finalFmt = user_formatted_performance(inc.user_data, append)
+    } else {
+      finalFmt = user_formatted_performance(user_performance(b3.slice(), {}), append)
+    }
+    assert.deepStrictEqual(pick(finalFmt), pick(full))
+  }
+})

From fe8397bba947847de1cc83c80d888c3883a40a71 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Tue, 30 Jun 2026 02:58:34 +0000
Subject: [PATCH 6/9] =?UTF-8?q?ci:=20functions=20=E3=81=AE=E3=83=86?=
 =?UTF-8?q?=E3=82=B9=E3=83=88=E3=82=92=E5=AE=9F=E8=A1=8C=E3=81=99=E3=82=8B?=
 =?UTF-8?q?=20test=20=E3=82=B8=E3=83=A7=E3=83=96=E3=82=92=E8=BF=BD?=
 =?UTF-8?q?=E5=8A=A0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

push 時に app/functions の npm test(node --test)を実行する専用ジョブを
setup.yml に追加し、参拝解析のユニット/等価性テストを CI で自動検証する。
Node 18(CIと同一)で node --test がテストを自動検出し全件パスすることを確認済み。

Co-authored-by: kojira <kojira@users.noreply.github.com>
---
 .github/workflows/setup.yml | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)

diff --git a/.github/workflows/setup.yml b/.github/workflows/setup.yml
index 01a3780..d18bdd2 100644
--- a/.github/workflows/setup.yml
+++ b/.github/workflows/setup.yml
@@ -61,3 +61,29 @@ jobs:
           npm install -g firebase-tools
           npm install
         working-directory: ./app/functions
+
+  test:
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: setup node
+        uses: actions/setup-node@v4
+        with:
+          node-version: "18"
+
+      - name: cache
+        uses: actions/cache@v4
+        with:
+          path: ~/.npm
+          key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
+          restore-keys: |
+            ${{ runner.os }}-node-
+
+      - name: install functions deps
+        run: npm install
+        working-directory: ./app/functions
+
+      - name: run functions tests
+        run: npm test
+        working-directory: ./app/functions

From 6b2a1e030bf304ee27d852435104f344323e669d Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Tue, 30 Jun 2026 03:17:59 +0000
Subject: [PATCH 7/9] =?UTF-8?q?refactor(functions):=20performance.js=20?=
 =?UTF-8?q?=E3=82=92=E5=A0=85=E7=89=A2=E5=8C=96(=E3=83=AD=E3=83=BC?=
 =?UTF-8?q?=E3=82=AB=E3=83=AB=E5=A4=89=E6=95=B0=E5=AE=A3=E8=A8=80=E3=83=BB?=
 =?UTF-8?q?=E4=B8=8D=E5=A4=89=E6=9D=A1=E4=BB=B6=E3=81=AE=E6=98=8E=E6=96=87?=
 =?UTF-8?q?=E5=8C=96)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

レビュー指摘対応:
- #2 暗黙のグローバル変数(level/previousItem/continuous_count/previous_time/
  current_time/diff)を let 宣言に修正。挙動は不変(各関数先頭で初期化されるため)。
- #1 compute_performance_increment が全件計算と一致する前提(新着は累積済みより後)を
  doc コメントで明文化し、前提が崩れた場合に console.warn で検知するガードを追加。
  呼び出し側(sanpai)にも前提を満たす旨のコメントを追記。
- ガードが機能することのテストを追加(全13テスト pass)。

Co-authored-by: kojira <kojira@users.noreply.github.com>
---
 app/functions/index.js                 |  5 ++++-
 app/functions/performance.js           | 25 +++++++++++++++++++------
 app/functions/test/performance.test.js | 18 ++++++++++++++++++
 3 files changed, 41 insertions(+), 7 deletions(-)

diff --git a/app/functions/index.js b/app/functions/index.js
index 04476a7..741349d 100644
--- a/app/functions/index.js
+++ b/app/functions/index.js
@@ -877,7 +877,10 @@ exports.sanpai = functions.https.onRequest(async(request, response) => {
       let raw_user_data
       let last_activity_created_at
       if (userData.status && userData.last_activity_created_at) {
-        // 保存済みステータスに新着分だけを加算(全件再集計しない)
+        // 保存済みステータスに新着分だけを加算(全件再集計しない)。
+        // splited_items は「created_at > last_sanpai」で抽出した未集計イベントのみ、
+        // last_activity_created_at は累積済みイベントの最大時刻であり、
+        // compute_performance_increment の不変条件(新着は累積分より後)を満たす。
         const base_user_data = raw_user_data_from_status(userData.status, userData.screen_name)
         const increment = compute_performance_increment(base_user_data, splited_items, userData.last_activity_created_at)
         raw_user_data = increment.user_data
diff --git a/app/functions/performance.js b/app/functions/performance.js
index e3cf228..6714356 100644
--- a/app/functions/performance.js
+++ b/app/functions/performance.js
@@ -6,7 +6,7 @@ const moment = require("moment")
 const target_points = [0,5,11,19,30,45,65,91,124,166,218,281,357,447,553,676,818,981,1167,1378,1616,1884,2184,2519,2892,3306,3764,4269,4825,5436,6106,6840,7643,8520,9477,10520,11656,12892,14236,15696,17281,19001,20867,22891,25086,27466,30046,32842,35872,39156]
 
 function get_level(points) {
-  level = 0
+  let level = 0
   for (let i=0; i < target_points.length; i++) {
     if (points <= target_points[i]) {
       level = i + 1
@@ -37,16 +37,16 @@ function user_performance(items, username) {
   }
 
 
-  previousItem = null
-  continuous_count = 0
+  let previousItem = null
+  let continuous_count = 0
   let sorted_item = items.sort(function(a, b) {
     return (moment(a.created_at).unix() < moment(b.created_at).unix()) ? -1 : 1
   })
   for (const item of sorted_item) {
     if (previousItem) {
-      previous_time = moment(previousItem.created_at)
-      current_time = moment(item.created_at)
-      diff = current_time.diff(previous_time)/1000
+      let previous_time = moment(previousItem.created_at)
+      let current_time = moment(item.created_at)
+      let diff = current_time.diff(previous_time)/1000
       if (30 < diff && diff <= 120) {
         user_data.agility += 6
       } else if (diff <= 180) {
@@ -180,6 +180,14 @@ function latest_activity_created_at(items) {
 // (previous_created_at と新着先頭の時間差)だけがクロスバッチ依存となるため、
 // 全件を再集計せずとも全件計算と同一の結果が得られる。
 // hp は「diff<=7200秒のペア数*2」であり、user_performance の continuous_count*2 と等価。
+//
+// 【前提となる不変条件】全件計算と一致するのは以下が成り立つ場合のみ:
+//   1. new_items は base_user_data に未集計のイベントだけで構成される(二重計上しない)。
+//   2. new_items の全イベントが previous_created_at(=累積済みイベントの最大時刻)より後である。
+//   3. previous_created_at は累積済みイベントの最大 created_at である。
+// 呼び出し側(sanpai)は「created_at > last_sanpai」で new_items を抽出し、
+// previous_created_at に保存済み最大時刻(last_activity_created_at)を渡すことでこれを満たす。
+// この前提が崩れると全件計算と不一致になり得るため、崩れた場合は警告ログを出す。
 function compute_performance_increment(base_user_data, new_items, previous_created_at) {
   let user_data = {
     user: base_user_data.user,
@@ -193,6 +201,11 @@ function compute_performance_increment(base_user_data, new_items, previous_creat
   let sorted_items = [...new_items].sort(function(a, b) {
     return (moment(a.created_at).unix() < moment(b.created_at).unix()) ? -1 : 1
   })
+  // 不変条件2の検知: 新着の最古イベントが境界より前なら前提が崩れている
+  if (previous_created_at && sorted_items.length > 0 &&
+      moment(sorted_items[0].created_at).unix() < moment(previous_created_at).unix()) {
+    console.warn(`[performance] 増分計算の前提違反: 新着の最古イベント(${sorted_items[0].created_at})が境界(${previous_created_at})より前です。全件計算と不一致になり得ます。`)
+  }
   let prev_created_at = previous_created_at
   for (const item of sorted_items) {
     if (prev_created_at) {
diff --git a/app/functions/test/performance.test.js b/app/functions/test/performance.test.js
index 1ea346e..2d17c50 100644
--- a/app/functions/test/performance.test.js
+++ b/app/functions/test/performance.test.js
@@ -128,6 +128,24 @@ test("latest_activity_created_at: 最新の created_at を返す", () => {
   assert.strictEqual(latest_activity_created_at(items), iso(5000))
 })
 
+test("compute_performance_increment: 不変条件違反(新着が境界より前)で警告を出す", () => {
+  const base = { user: "u", hp: 0, power: 0, defence: 0, agility: 0, intelligence: 0 }
+  const orig = console.warn
+  let warned = 0
+  console.warn = () => { warned++ }
+  try {
+    // 境界より前の created_at を渡す
+    compute_performance_increment(base, [item("PushEvent", 1000)], iso(5000))
+    assert.strictEqual(warned, 1)
+    // 境界より後なら警告は出ない
+    warned = 0
+    compute_performance_increment(base, [item("PushEvent", 9000)], iso(5000))
+    assert.strictEqual(warned, 0)
+  } finally {
+    console.warn = orig
+  }
+})
+
 // ============================================================
 // 増分計算の等価性(プロパティテスト)
 // ============================================================

From 947c2ffea56d366182f8462a647c13401037dd0d Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Tue, 30 Jun 2026 03:18:12 +0000
Subject: [PATCH 8/9] =?UTF-8?q?refactor(web):=20sanpai.vue=20=E3=81=AE?=
 =?UTF-8?q?=E6=9C=AA=E4=BD=BF=E7=94=A8=20token=20getter=20=E3=82=92?=
 =?UTF-8?q?=E5=89=8A=E9=99=A4?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

レビュー指摘#4対応。トークンは送信直前に getIdToken() で取得したローカル変数を
使うようになり、mapGetters の token は未使用になったため削除。Nuxt ビルドで検証済み。

Co-authored-by: kojira <kojira@users.noreply.github.com>
---
 web/pages/sanpai.vue | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/pages/sanpai.vue b/web/pages/sanpai.vue
index fb78110..f8c1ec8 100644
--- a/web/pages/sanpai.vue
+++ b/web/pages/sanpai.vue
@@ -135,7 +135,7 @@ export default {
     },
   },
   computed: {
-    ...mapGetters(["user", "token"]),
+    ...mapGetters(["user"]),
     shareUrl() {
       return this.$config.baseUrl;
     },

From a967d402bf954bc9f8a70bce924a617a78ae67a8 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Tue, 30 Jun 2026 03:18:12 +0000
Subject: [PATCH 9/9] =?UTF-8?q?ci:=20test=20=E3=82=B8=E3=83=A7=E3=83=96?=
 =?UTF-8?q?=E3=81=AE=E4=BE=9D=E5=AD=98=E5=B0=8E=E5=85=A5=E3=82=92=20--igno?=
 =?UTF-8?q?re-scripts=20=E3=81=AB=E5=A4=89=E6=9B=B4?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

レビュー指摘#5対応。テストは performance.js(moment のみ依存)を検証するもので、
canvas 等のネイティブビルド(OGP生成専用)は不要。--ignore-scripts により
CI のテストジョブを高速化し、ネイティブビルド失敗の影響を受けないようにする。

Co-authored-by: kojira <kojira@users.noreply.github.com>
---
 .github/workflows/setup.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/setup.yml b/.github/workflows/setup.yml
index d18bdd2..8696a09 100644
--- a/.github/workflows/setup.yml
+++ b/.github/workflows/setup.yml
@@ -80,8 +80,10 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-node-
 
+      # テストは performance.js(moment のみ依存)を検証するため、
+      # canvas 等のネイティブビルド(OGP生成専用)は不要。--ignore-scripts で高速・堅牢化する。
       - name: install functions deps
-        run: npm install
+        run: npm install --ignore-scripts
         working-directory: ./app/functions
 
       - name: run functions tests