@steve31415/baselib 3.8.3 → 3.9.0

package/dist/deploy/config.js

@@ -53,6 +53,14 @@ export function validateConfig(raw) {
                 fail(`updateSecrets.${key} (want <secret-name>:<numeric version>)`);
         }
     }
+    if (c.updateEnv) {
+        for (const [key, value] of Object.entries(c.updateEnv)) {
+            if (!/^[A-Z][A-Z0-9_]*$/.test(key) || key === 'BUILD_ID')
+                fail(`updateEnv.${key} (key)`);
+            if (typeof value !== 'string' || /[|\n]/.test(value))
+                fail(`updateEnv.${key} (want a string without '|' or newlines)`);
+        }
+    }
     return c;
 }
 export async function loadConfig(repoRoot) {

package/dist/deploy/deploy.js

@@ -241,11 +241,14 @@ export async function runDeploy(options) {
                 });
                 continue;
             }
+            // One --update-env-vars with gcloud's alternate-delimiter form (^|^ …)
+            // so declared values may contain commas; '|' is rejected by validateConfig.
+            const envPairs = [`BUILD_ID=${sha}`, ...Object.entries(config.updateEnv ?? {}).map(([k, v]) => `${k}=${v}`)];
             const updateArgs = [
                 'run', 'services', 'update', service.name,
                 ...gcloudBase, '--region', config.region, '--quiet', '--format=json',
                 '--image', imageDigest,
-                '--update-env-vars', `BUILD_ID=${sha}`,
+                '--update-env-vars', `^|^${envPairs.join('|')}`,
                 '--update-labels', `pw-build-sha=${sha.slice(0, 40)}`,
             ];
             if (config.updateSecrets) {

package/dist/deploy/types.d.ts

@@ -47,6 +47,10 @@ export interface DeployConfig {
     releasePrefix: string;
     /** Secrets re-pinned on every routine deploy (name -> secret:version). */
     updateSecrets?: Record<string, string>;
+    /** Non-secret env vars asserted on every routine deploy (name -> value), so a
+     *  runtime-config change is a commit the deploy carries rather than a hand-run
+     *  `gcloud run services update`. Undeclared vars are left as they are. */
+    updateEnv?: Record<string, string>;
     /** Refuse to deploy across a migrations/ diff (notes2 semantics). */
     refuseMigrationDiffOnDeploy?: boolean;
     /** Repo-relative path of an optional ES module exporting hooks. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@steve31415/baselib",
-  "version": "3.8.3",
+  "version": "3.9.0",
   "description": "Plasticine new-world shared platform library: logging, auth, service-to-service auth, db, HTTP, sync, app updates",
   "type": "module",
   "license": "MIT",