fix(deploy): replace both legacy and CI containers during cutover

scripts/ci-deploy.sh

@@ -13,6 +13,9 @@ sha="$(git rev-parse HEAD)"
 image="epicnext-cms:$sha"
 previous_name=""
 previous_image=""
+secondary_name=""
+secondary_backup="epicnext-cms-rollback-secondary"
+secondary_backup_created=0
 backup_name="epicnext-cms-rollback"
 cutover_started=0
 candidate_attempted=0
@@ -52,6 +55,9 @@ finish() {
     if command -v ss >/dev/null 2>&1; then ss -ltnp 'sport = :3002' >&2 || true; fi
     if [ "$candidate_attempted" -eq 1 ]; then docker rm -f epicnext-cms-app || true; fi
     if [ "$backup_created" -eq 1 ]; then docker rename "$backup_name" "$previous_name" || true; fi
+    if [ "$secondary_backup_created" -eq 1 ]; then
+      docker rename "$secondary_backup" "$secondary_name" || true
+    fi
     if [ -n "$previous_name" ]; then
       if docker start "$previous_name" && healthy; then
         echo "Rollback verified: $previous_image"
@@ -61,6 +67,7 @@ finish() {
     else
       echo "No previous container exists; rollback is unavailable" >&2
     fi
+    if [ "$secondary_backup_created" -eq 1 ]; then docker start "$secondary_name" || true; fi
   fi
   exit "$status"
 }
@@ -97,10 +104,9 @@ pnpm db:migrate
 check_current
 
 # Prefer the active CI container, or the active legacy compose container.
-for name in epicnext-cms-app epicnext-cms; do
+for name in epicnext-cms epicnext-cms-app; do
   if [ "$(docker inspect --format '{{.State.Running}}' "$name" 2>/dev/null || true)" = true ]; then
-    previous_name="$name"
-    break
+    if [ -z "$previous_name" ]; then previous_name="$name"; else secondary_name="$name"; fi
   fi
 done
 if [ -z "$previous_name" ]; then
@@ -117,11 +123,18 @@ if [ -n "$previous_name" ]; then
   docker tag "$previous_image" epicnext-cms:previous
 fi
 # Remove a stopped leftover CI container when the compose container is active.
-if [ "$previous_name" != epicnext-cms-app ] && docker inspect epicnext-cms-app >/dev/null 2>&1; then
+if [ "$previous_name" != epicnext-cms-app ] && [ "$secondary_name" != epicnext-cms-app ] && docker inspect epicnext-cms-app >/dev/null 2>&1; then
   docker rm epicnext-cms-app
 fi
 
 cutover_started=1
+# Both legacy Compose and CI containers can exist after earlier failed updates.
+# Preserve each before releasing the shared host port; never kill an arbitrary PID.
+if [ -n "$secondary_name" ]; then
+  docker stop "$secondary_name"
+  docker rename "$secondary_name" "$secondary_backup"
+  secondary_backup_created=1
+fi
 if [ -n "$previous_name" ]; then
   docker stop "$previous_name"
   docker rename "$previous_name" "$backup_name"
@@ -153,6 +166,7 @@ PLAYWRIGHT_BASE_URL=http://127.0.0.1:3002 pnpm test:e2e
 docker tag "$image" epicnext-cms:latest
 cutover_started=0
 if [ "$backup_created" -eq 1 ]; then docker rm "$backup_name" || true; fi
+if [ "$secondary_backup_created" -eq 1 ]; then docker rm "$secondary_backup" || true; fi
 
 echo "Deployment verified: $sha"
 # Retain the current and previous releases; do not remove arbitrary named tags.