# Rollout tooling (from the release 7/8 rollouts)

Every script reads `CLAUDE_JOB_DIR` (the job scratch; logs land in `$CLAUDE_JOB_DIR/tmp`) and
`REL` (a label prefixing every log, default `r9`). Run them from the primary checkout, detached
(`setsid nohup sh plans/tools/rollout/<x>.sh > $T/<x>.log 2>&1 < /dev/null &`) and wait on
`exit=` in the log. The procedure they implement is `plans/release-8.md` "## Rollout".

| Script | Step |
|---|---|
| `md5.sh <label>` | md5 sweep of `settings.json`, every `site.json`/`config.json`, `homepage.json` — before the build, before the restart, after boot; the three must match. |
| `gate.sh` (`WT=<worktree>`, specs in `$T/$REL-gate-specs.txt`) | tsc, common, editor unit, scripts, editor build, e2e on the merged worktree. |
| `builds.sh` | editor build into the live `.next`, then umtool. Comment out umtool when untouched. |
| `restart.sh` | ONE editor restart then umtool; `RESTART_FAIL` if the port stays bound. Ask before it kills an operator-started job. |
| `smoke.sh` | live smoke on :3001 — old/new API pairs, pages, `DEFERRED_OK` asserts a well-formed deferral list (not empty), `SMOKE_FAIL=0` is the verdict. |
| `sync.sh` | one `pnpm ops sync` proof (teamrcn). |
| `sites-redeploy.sh` | the five official sites BY NAME (`build-deploy` with `siteIds`; never `all` until the docker build image is rebuilt), then `build-hub` + `deploy-hub`. |
| `home-preview.sh` / `home-publish.sh` | homepage build + deploy to the `refresh` preview branch / to production. |
| `cancel-scan.mjs <jobId>` | cancels one job through the live `/jobs` Cancel button (Playwright). |
| `ytdlp-live-check.mjs [site]` / `e-live-check.mjs [site]` | live proofs of slices Z and E on a published site (Playwright). |