From 4d230b87afdcd24f02264f8f937c8628b92db05a Mon Sep 17 00:00:00 2001
From: mptyl <mp@tylconsulting.it>
Date: Tue, 18 Aug 2026 07:24:18 +0200
Subject: [PATCH] fix(deploy): render maintenance smoke profile

---
 scripts/unified-deployment-smoke.sh | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/scripts/unified-deployment-smoke.sh b/scripts/unified-deployment-smoke.sh
index acccff6e..e75b87fd 100755
--- a/scripts/unified-deployment-smoke.sh
+++ b/scripts/unified-deployment-smoke.sh
@@ -988,10 +988,10 @@ task13_core_id() {
 task13_assert_maintenance_auth_isolation() {
   local rendered
   rendered="$TASK13_TMP/maintenance-auth-isolation.json"
-  if ! task13_compose config --format json >"$rendered" 2>>"$TASK13_LOG"; then
+  if ! task13_compose --profile workspace-maintenance config --format json >"$rendered" 2>>"$TASK13_LOG"; then
     task13_log_failure "render workspace maintenance mount isolation"
   fi
-  node - "$rendered" <<'NODE'
+  if ! node - "$rendered" <<'NODE'
 const config = JSON.parse(require("node:fs").readFileSync(process.argv[2], "utf8"));
 const maintenance = config.services?.["workspace-maintenance"];
 if (!maintenance || !Array.isArray(maintenance.volumes)) process.exit(1);
@@ -999,6 +999,9 @@ if (maintenance.volumes.some((mount) => mount?.target === "/run/thothii-auth" ||
   process.exit(1);
 }
 NODE
+  then
+    task13_log_failure "workspace maintenance authentication mount isolation"
+  fi
   task13_compose_logged "seed core authentication isolation sentinel" exec -T core sh -ceu \
     ': > /data/auth/task13-maintenance-isolation-sentinel'
   task13_compose_logged "workspace maintenance auth isolation" \