Merge pull request #224 from spoo-me/ci/deploy-click-worker

ci: deploy click worker alongside the app on release

Author: Zingzy

.github/workflows/deploy.yml

@@ -114,11 +114,12 @@ jobs:
             wait_healthy() {
               # Caddy keeps a connection pool to app:8000 with retries, so
               # users see a brief latency bump (not 502) during the swap.
+              [ -n "$1" ] || { echo "::error::wait_healthy: missing container name"; return 1; }
               status=""
-              for i in 1 2 3 4 5 6 7 8; do
-                status=$(docker inspect spoo_app --format '{{.State.Health.Status}}' 2>/dev/null || echo "missing")
+              for i in 1 2 3 4 5 6 7 8 9 10 11 12; do
+                status=$(docker inspect "$1" --format '{{.State.Health.Status}}' 2>/dev/null || echo "missing")
                 [ "$status" = "healthy" ] && return 0
-                echo "app $status, retry $i"; sleep 3
+                echo "$1 $status, retry $i"; sleep 3
               done
               return 1
             }
@@ -127,7 +128,7 @@ jobs:
             docker compose --env-file .env -f docker-compose.prod.yml pull app
             docker compose --env-file .env -f docker-compose.prod.yml up -d --no-deps app
 
-            if ! wait_healthy; then
+            if ! wait_healthy spoo_app; then
               echo "::error::app failed to reach healthy on ${IMAGE_TAG} (last status: $status)"
               # diagnostics must never abort the rollback below (set -e)
               docker compose --env-file .env -f docker-compose.prod.yml logs --tail=100 app || true
@@ -136,7 +137,29 @@ jobs:
                 set_tag "${PREV_TAG}"
                 docker compose --env-file .env -f docker-compose.prod.yml pull app || true
                 docker compose --env-file .env -f docker-compose.prod.yml up -d --no-deps app
-                if wait_healthy; then
+                if wait_healthy spoo_app; then
+                  echo "::warning::rolled back — prod is healthy on previous image ${PREV_TAG}"
+                else
+                  echo "::error::rollback to ${PREV_TAG} also unhealthy — manual intervention needed"
+                fi
+              fi
+              exit 1
+            fi
+
+            # The click worker runs the SAME image (shared wire contract with
+            # the app) — swap it only after the app is confirmed healthy, so
+            # an app rollback leaves the worker untouched on the old pair.
+            docker compose --env-file .env -f docker-compose.prod.yml up -d --no-deps click-worker
+
+            if ! wait_healthy spoo_click_worker; then
+              echo "::error::click worker failed to reach healthy on ${IMAGE_TAG} (last status: $status)"
+              docker compose --env-file .env -f docker-compose.prod.yml logs --tail=100 click-worker || true
+              if [ -n "$PREV_TAG" ] && [ "$PREV_TAG" != "$IMAGE_TAG" ]; then
+                echo "rolling back app + worker to ${PREV_TAG}"
+                set_tag "${PREV_TAG}"
+                docker compose --env-file .env -f docker-compose.prod.yml pull app click-worker || true
+                docker compose --env-file .env -f docker-compose.prod.yml up -d --no-deps app click-worker
+                if wait_healthy spoo_app && wait_healthy spoo_click_worker; then
                   echo "::warning::rolled back — prod is healthy on previous image ${PREV_TAG}"
                 else
                   echo "::error::rollback to ${PREV_TAG} also unhealthy — manual intervention needed"

.github/workflows/tests.yaml

@@ -9,14 +9,11 @@ on:
       - "uv.lock"
       - "requirements.txt"
       - ".github/workflows/tests.yaml"
+  # No paths filter on PRs: the test checks are required by branch
+  # protection, and a filtered-out workflow never reports — leaving
+  # non-code PRs stuck at "Expected" forever.
   pull_request:
     branches: [main]
-    paths:
-      - "**.py"
-      - "pyproject.toml"
-      - "uv.lock"
-      - "requirements.txt"
-      - ".github/workflows/tests.yaml"
   workflow_dispatch:
 
 permissions: