@steve31415/baselib 3.30.0 → 3.31.0

package/README.md

@@ -29,7 +29,9 @@ ERROR log (`~/plasticine-way/docs/SECURITY.md`, "Resend API key").
 
 Bins: `check-test-owners` — the fleet's structural test-coverage gate; every
 app runs it from `npm run verify`. `pw-deploy` / `pw-rollback` — the fleet
-deploy (`~/plasticine-way/docs/OPERATIONS.md`, "Deployment safety").
+deploy (`~/plasticine-way/docs/OPERATIONS.md`, "Deployment safety"); an
+app's hooks module (`DeployHooks` in `src/deploy/types.ts`) extends both,
+`postRollback` being the one hook `pw-rollback` runs.
 `pw-sql` / `pw-logs` — read-only production queries (database, Axiom), the
 first step of any production investigation (same doc, "Investigating
 production state").

package/dist/deploy/rollback.js

@@ -7,7 +7,7 @@ import { hostname } from 'node:os';
 import { must, mustJson } from './exec.js';
 import { openEvidence, PhaseTimer } from './evidence.js';
 import { acquireLock, listReleaseRecords, placeHold, releaseLock } from './gcs.js';
-import { DEFAULT_ACCOUNT, loadConfig } from './config.js';
+import { DEFAULT_ACCOUNT, loadConfig, loadHooks } from './config.js';
 import { pickRevisionForSha, releaseEntriesFrom, selectRollbackTarget, readServingState, SHA40, } from './plan.js';
 export async function runRollback(options) {
     const log = options.log ?? ((m) => console.error(`[pw-rollback] ${m}`));
@@ -19,6 +19,7 @@ export async function runRollback(options) {
     const requested = argv.find((a) => SHA40.test(a));
     const timer = new PhaseTimer(log);
     let evidenceDir = '';
+    let rolledBackTo = '';
     let lock = null;
     try {
         const config = await loadConfig(options.repoRoot);
@@ -151,6 +152,26 @@ export async function runRollback(options) {
                 throw new Error(`${service.name}: post-rollback smoke failed (${lastDetail})`);
             log(`${service.name}: smoke passed`);
         }
+        // The hooks module is loaded only now: a broken one must not stand
+        // between an incident and the traffic move.
+        timer.enter('hooks');
+        rolledBackTo = target;
+        const hooks = await loadHooks(options.repoRoot, config);
+        if (hooks.postRollback) {
+            const ctx = {
+                sha: target,
+                baseSha: servingShas.length === 1 ? servingShas[0] : null,
+                config,
+                repoRoot: options.repoRoot,
+                contextDir: '',
+                evidenceDir,
+                imageDigest: targets[0].imageDigest,
+                serving,
+                exec: runner,
+                log,
+            };
+            await hooks.postRollback(ctx);
+        }
         timer.close();
         log(`rolled back to ${target.slice(0, 12)}`);
         log(`hold placed on ${servingShas.map((sha) => sha.slice(0, 12)).join(', ')} — ` +
@@ -162,6 +183,10 @@ export async function runRollback(options) {
         const message = error instanceof Error ? error.message : String(error);
         console.error(message);
         console.error(`rollback failed in phase: ${timer.current}`);
+        if (rolledBackTo) {
+            console.error(`traffic IS on ${rolledBackTo.slice(0, 12)} and the hold is placed; only the app's ` +
+                'postRollback hook failed — finish what it does by hand');
+        }
         if (evidenceDir)
             console.error(`evidence: ${evidenceDir}`);
         return 1;

package/dist/deploy/types.d.ts

@@ -120,4 +120,11 @@ export interface DeployHooks {
     smoke?: (ctx: HookContext) => Promise<void>;
     /** Runs after everything else succeeded (e.g. notes's release state). */
     postSuccess?: (ctx: HookContext) => Promise<void>;
+    /** pw-rollback only: runs after traffic is back on the target build, the
+     *  hold is placed and the smoke passed — for what a traffic move does not
+     *  carry (e.g. podcasts' render Job image). `sha` and `imageDigest` are the
+     *  rollback target's, `serving` is the state rolled back from, and
+     *  `contextDir` is empty (nothing is built). A throw fails the command but
+     *  undoes nothing. */
+    postRollback?: (ctx: HookContext) => Promise<void>;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@steve31415/baselib",
-  "version": "3.30.0",
+  "version": "3.31.0",
   "description": "Plasticine new-world shared platform library: logging, auth, service-to-service auth, db, HTTP, sync, app updates",
   "type": "module",
   "license": "MIT",