From 517c8d75a8112c3b1df65d40cc8325f777d440c1 Mon Sep 17 00:00:00 2001
From: Codex <codex@noreply.local>
Date: Tue, 19 May 2026 07:16:16 +0000
Subject: [PATCH] chore(prod): allow code queue v1 rollout

---
 deploy.json           | 2 +-
 scripts/src/deploy.ts | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/deploy.json b/deploy.json
index 72ef756b..bf655af3 100644
--- a/deploy.json
+++ b/deploy.json
@@ -61,7 +61,7 @@
         {
           "id": "code-queue",
           "repo": "https://github.com/pikasTech/unidesk",
-          "commitId": "aae14e2b1ccf8f91e84b6ac89d72681028794472"
+          "commitId": "0cf73d817f14032ad6038fd47ec402c87bf059bb"
         },
         {
           "id": "code-queue-mgr",
diff --git a/scripts/src/deploy.ts b/scripts/src/deploy.ts
index 251d6785..a83946b9 100644
--- a/scripts/src/deploy.ts
+++ b/scripts/src/deploy.ts
@@ -131,7 +131,7 @@ const nativeK3sInstallVersion = "v1.34.1+k3s1";
 const nativeK3sImage = "rancher/k3s:v1.34.1-k3s1";
 const nativeK3sCtrAddress = "/run/k3s/containerd/containerd.sock";
 const unideskRepoUrl = "https://github.com/pikasTech/unidesk";
-const d601MaintenanceDeployAllowedServiceIds = new Set<string>(["backend-core", "frontend", "k3sctl-adapter"]);
+const d601MaintenanceDeployAllowedServiceIds = new Set<string>(["backend-core", "frontend", "k3sctl-adapter", "code-queue"]);
 const devApplySupportedServiceIds = new Set<string>(["backend-core", "frontend"]);
 const deployEnvironmentTargets: Record<DeployEnvironment, DeployEnvironmentTarget> = {
   dev: {
@@ -194,7 +194,7 @@ export function deployHelp(action: string | undefined = undefined): Record<strin
       apply: "Start an async target-side reconcile job unless --run-now is explicitly present.",
     },
     options: [
-      { name: "--file <path>", default: defaultDeployFile, description: "Desired-state manifest path relative to the repo root. JSON and ESM JS manifests are supported, for example deploy.json or develop.js. Local manifest apply has one D601 direct-service exception: k3sctl-adapter." },
+      { name: "--file <path>", default: defaultDeployFile, description: "Desired-state manifest path relative to the repo root. JSON and ESM JS manifests are supported, for example deploy.json or develop.js. Local manifest apply allows k3sctl-adapter and explicit production code-queue controlled rollout on D601." },
       { name: "--env <dev|prod>", description: "Read the named environment from origin/master:deploy.json. Dev apply is enabled only for backend-core and frontend in D601 unidesk-dev; prod apply is disabled." },
       { name: "--service <id>", description: "Limit reconcile to one service from the manifest." },
       { name: "--dry-run", description: "Prepare and validate without mutating the target service." },