feat(cms): improve catalog, editorial recovery and operations

src/lib/ci-deploy.test.ts

@@ -78,10 +78,22 @@ describe("deployment transaction", () => {
 			result.calls.indexOf("docker stop"),
 		);
 		expect(result.calls.indexOf("verify-deployed-release.mjs")).toBeLessThan(
+			result.calls.indexOf("docker tag sha256:new epicnext-cms:latest"),
+		);
+		expect(result.calls.indexOf("pnpm test:e2e")).toBeLessThan(
 			result.calls.indexOf(
-				`docker tag epicnext-cms:${sha} epicnext-cms:latest`,
+				`docker tag sha256:new epicnext-cms:verified-${sha}`,
 			),
 		);
+		expect(result.calls).toContain(
+			`docker image rm epicnext-cms:verified-${"c".repeat(40)}`,
+		);
+		expect(result.calls).not.toContain(
+			`docker image rm epicnext-cms:verified-${"b".repeat(40)}`,
+		);
+		expect(result.calls).not.toContain(
+			`docker image rm epicnext-cms:verified-${sha}`,
+		);
 		expect(result.calls).toContain(
 			"docker tag sha256:old epicnext-cms:previous",
 		);
@@ -97,9 +109,12 @@ describe("deployment transaction", () => {
 			const result = simulate(scenario);
 			expect(result.status).not.toBe(0);
 			expect(result.app).toBe("old");
+			expect(result.calls).not.toContain(
+				`docker tag sha256:new epicnext-cms:verified-${sha}`,
+			);
 			expect(result.output).toContain("Rollback verified: sha256:old");
 			expect(result.calls).not.toContain(
-				`docker tag epicnext-cms:${sha} epicnext-cms:latest`,
+				"docker tag sha256:new epicnext-cms:latest",
 			);
 		},
 		30000,