test(news): gate deployment on an isolated real browser publication journey

src/lib/ci-deploy.test.ts

@@ -73,6 +73,10 @@ describe("deployment transaction", () => {
 		const result = simulate("success");
 		expect(result.status, result.output).toBe(0);
 		expect(result.app).toBe("new");
+		expect(result.calls).toContain("node --import tsx e2e/news-real/run.ts");
+		expect(result.calls.indexOf("e2e/news-real/run.ts")).toBeLessThan(
+			result.calls.indexOf("pnpm db:migrate"),
+		);
 		expect(result.backup).toBe(false);
 		expect(result.calls.indexOf("pnpm db:migrate")).toBeLessThan(
 			result.calls.indexOf("docker stop"),
@@ -131,6 +135,7 @@ describe("deployment transaction", () => {
 		"remote-failure",
 		"build-failure",
 		"migration-failure",
+		"news-e2e-failure",
 	])("leaves the active container untouched after %s", (scenario) => {
 		const result = simulate(scenario);
 		expect(result.status).not.toBe(0);

src/test/ci-deploy-harness.sh

@@ -52,7 +52,8 @@ export -f git flock pnpm curl sleep docker
 node() {
   echo "node $*" >> "$TEST_DIR/calls"
   case "$SCENARIO" in
-    release-failure) return 1 ;;
+    release-failure) [[ "$*" != *verify-deployed-release.mjs* ]] || return 1 ;;
+    news-e2e-failure) [[ "$*" != *e2e/news-real/run.ts* ]] || return 1 ;;
 
   esac
   return 0