feat(cms): improve catalog, editorial recovery and operations

src/test/ci-deploy-harness.sh

@@ -13,6 +13,7 @@ flock() { echo "lock" >> "$TEST_DIR/calls"; [ "$SCENARIO" != lock-failure ]; }
 pnpm() {
   echo "pnpm $*" >> "$TEST_DIR/calls"
   if [ "$1" = db:migrate ] && [ "$SCENARIO" = migration-failure ]; then return 1; fi
+  if [ "$1" = test:e2e ] && [ "$SCENARIO" = smoke-failure ] && [ "$(cat "$TEST_DIR/epicnext-cms-app" 2>/dev/null)" = new ]; then return 1; fi
   return 0
 }
 curl() {
@@ -27,7 +28,13 @@ docker() {
     inspect)
       [ -f "$TEST_DIR/$name" ] || return 1
       if [ "${3:-}" = '{{.State.Running}}' ]; then echo true
-      elif [ "${3:-}" = '{{.Image}}' ]; then echo sha256:old
+      elif [ "${3:-}" = '{{.Image}}' ]; then echo "sha256:$(cat "$TEST_DIR/$name")"
+      fi ;;
+    image)
+      if [ "$2" = ls ]; then
+        printf '%s\n' "epicnext-cms:verified-$TEST_SHA" "epicnext-cms:verified-bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb" "epicnext-cms:verified-cccccccccccccccccccccccccccccccccccccccc"
+      elif [ "$2" = inspect ]; then
+        case "$name" in *bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb) echo sha256:old ;; *) echo sha256:unused ;; esac
       fi ;;
     build) [ "$SCENARIO" != build-failure ] ;;
     stop) return 0 ;;
@@ -46,7 +53,7 @@ node() {
   echo "node $*" >> "$TEST_DIR/calls"
   case "$SCENARIO" in
     release-failure) return 1 ;;
-    smoke-failure) case "$*" in *verify-deployed-release.mjs*) return 1 ;; esac ;;
+
   esac
   return 0
 }

src/test/publish-container-harness.sh

@@ -0,0 +1,14 @@
+git() { if [ "$1" = rev-parse ]; then echo "$TEST_SHA"; fi; }
+tar() { cat >/dev/null; }
+node() { echo "verify $*" >> "$TEST_DIR/calls"; }
+docker() {
+ echo "docker $*" >> "$TEST_DIR/calls"
+ if [ "$1" = login ]; then cat >/dev/null; return; fi
+ if [ "$1 $2" = "image inspect" ]; then
+  if [[ "$*" = *org.opencontainers.image.revision* ]]; then echo "$TEST_SHA"
+  elif [[ "${@: -1}" = *verified-* ]]; then
+   case "$SCENARIO" in verified) echo sha256:candidate ;; mismatch) echo sha256:other ;; *) return 1 ;; esac
+  else echo sha256:candidate; fi
+ fi
+}
+export -f git tar node docker