WIP: One-Click Emergency Rollback Workflow

.github/workflows/marketplace-publish.yml

@@ -1,9 +1,14 @@
 name: Publish Extension
 on:
     workflow_dispatch:
+        inputs:
+            rollback_source_version:
+                description: "[Rollback] Source git tag (e.g., v4.115.0) - leave empty for normal publish"
+                required: false
+                type: string
 
 env:
-    GIT_REF: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || 'main' }}
+    GIT_REF: ${{ inputs.rollback_source_version || (github.event_name == 'pull_request' && github.event.pull_request.head.sha || 'main') }}
     NODE_VERSION: 20.19.2
     PNPM_VERSION: 10.8.1
     TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }}
@@ -15,10 +20,32 @@ jobs:
         permissions:
             contents: write # Required for pushing tags.
         steps:
+            - name: Validate rollback tag
+              if: ${{ inputs.rollback_source_version != '' }}
+              run: |
+                  TAG="${{ inputs.rollback_source_version }}"
+
+                  # Auto-fix: add 'v' prefix if missing
+                  if [[ ! "$TAG" =~ ^v ]]; then
+                    TAG="v$TAG"
+                    echo "Auto-fixed tag: $TAG (added 'v' prefix)"
+                  fi
+
+                  # Verify tag exists
+                  if ! git ls-remote --tags origin | grep -q "refs/tags/$TAG$"; then
+                    echo "❌ Error: Tag '$TAG' does not exist"
+                    echo ""
+                    echo "Available recent tags:"
+                    git ls-remote --tags origin | grep -o 'refs/tags/v[0-9].*' | sed 's|refs/tags/||' | sort -V | tail -10
+                    exit 1
+                  fi
+
+                  echo "✅ Tag '$TAG' exists"
+                  echo "VALIDATED_TAG=$TAG" >> $GITHUB_ENV
             - name: Checkout code
               uses: actions/checkout@v4
               with:
-                  ref: ${{ env.GIT_REF }}
+                  ref: ${{ env.VALIDATED_TAG || env.GIT_REF }}
             - name: Install pnpm
               uses: pnpm/action-setup@v4
               with:
@@ -34,6 +61,9 @@ jobs:
               run: |
                   git config user.name "github-actions[bot]"
                   git config user.email "github-actions[bot]@users.noreply.github.com"
+            - name: Set rollback version
+              if: ${{ inputs.rollback_source_version != '' }}
+              run: node scripts/set-rollback-version.js ${{ inputs.rollback_source_version }}
             - name: Create .env file
               run: echo "KILOCODE_POSTHOG_API_KEY=${{ secrets.POSTHOG_API_KEY }}" >> .env
             - name: Package Extension
@@ -99,6 +129,14 @@ jobs:
                     --target ${{ env.GIT_REF }} \
                     bin/kilo-code-${current_package_version}.vsix
                   echo "Successfully created GitHub Release v${current_package_version}"
+            - name: Create rollback version PR
+              if: ${{ inputs.rollback_source_version != '' }}
+              run: node scripts/create-rollback-pr.js
+              env:
+                  GITHUB_TOKEN: ${{ secrets.CROSS_REPO_ACCESS_TOKEN }}
+                  GITHUB_REPOSITORY: ${{ github.repository }}
+                  SOURCE_TAG: ${{ inputs.rollback_source_version }}
+                  GITHUB_SHA: ${{ github.sha }}
 
     publish-jetbrains:
         needs: publish-extension
@@ -107,8 +145,12 @@ jobs:
             - name: Checkout code
               uses: actions/checkout@v4
               with:
+                  ref: ${{ env.VALIDATED_TAG || env.GIT_REF }}
                   submodules: recursive
                   lfs: true
+            - name: Set rollback version
+              if: ${{ inputs.rollback_source_version != '' }}
+              run: node scripts/set-rollback-version.js ${{ inputs.rollback_source_version }}
             - name: Install pnpm
               uses: pnpm/action-setup@v4
               with:

package.json

@@ -45,6 +45,7 @@
 		"@changesets/changelog-github": "^0.5.1",
 		"@changesets/cli": "^2.27.10",
 		"@dotenvx/dotenvx": "^1.34.0",
+		"@octokit/rest": "^22.0.1",
 		"@roo-code/config-typescript": "workspace:^",
 		"@types/glob": "^9.0.0",
 		"@types/node": "20.x",