Fix WORKS Drive image upload recovery

.gitea/workflows/image_publish.yml

@@ -154,6 +154,19 @@ jobs:
           provenance: false
           sbom: false
 
+      - name: Verify built Docker images before WORKS upload
+        env:
+          IMAGE_TAG: ${{ steps.version.outputs.image_tag }}
+        run: |
+          set -euo pipefail
+
+          for image in backend userfront adminfront devfront orgfront; do
+            image_ref="baron_sso/${image}:${IMAGE_TAG}"
+            echo "Checking built Docker image before WORKS upload: ${image_ref}"
+            docker image inspect "${image_ref}" >/dev/null
+            docker image ls "${image_ref}"
+          done
+
       - name: Resolve WORKS Drive access token
         env:
           WORKS_DRIVE_ACCESS_TOKEN_INPUT: ${{ secrets.WORKS_DRIVE_ACCESS_TOKEN }}
@@ -233,12 +246,33 @@ jobs:
             fi
           done
 
-          for image in backend userfront adminfront devfront orgfront; do
+          images="backend userfront adminfront devfront orgfront"
+          image_total=5
+          image_index=0
+          uploaded_images=""
+
+          for image in ${images}; do
+            image_index=$((image_index + 1))
             image_ref="baron_sso/${image}:${IMAGE_TAG}"
-            DOCKER_IMAGE_REF="${image_ref}" \
-            WORKS_DRIVE_DOCKER_IMAGE_DIR="${WORKS_DRIVE_DOCKER_IMAGE_DIR}" \
-            WORKS_DRIVE_SHARED_DRIVE_ID="${WORKS_DRIVE_DOCKER_IMAGE_DRIVE_ID}" \
-            WORKS_DRIVE_PARENT_FILE_ID="${WORKS_DRIVE_DOCKER_IMAGE_PARENT_FILE_ID:-}" \
-            WORKS_DOCKER_IMAGE_ARCHIVE_DIR="${RUNNER_TEMP}/baron-sso-docker-image-upload" \
-              scripts/docker-image/upload_works_drive.sh
+            echo "WORKS image upload ${image_index}/${image_total}: ${image_ref}"
+            docker image inspect "${image_ref}" >/dev/null
+            if DOCKER_IMAGE_REF="${image_ref}" \
+              WORKS_DRIVE_DOCKER_IMAGE_DIR="${WORKS_DRIVE_DOCKER_IMAGE_DIR}" \
+              WORKS_DRIVE_SHARED_DRIVE_ID="${WORKS_DRIVE_DOCKER_IMAGE_DRIVE_ID}" \
+              WORKS_DRIVE_PARENT_FILE_ID="${WORKS_DRIVE_DOCKER_IMAGE_PARENT_FILE_ID:-}" \
+              WORKS_DOCKER_IMAGE_ARCHIVE_DIR="${RUNNER_TEMP}/baron-sso-docker-image-upload" \
+                scripts/docker-image/upload_works_drive.sh; then
+              uploaded_images="${uploaded_images}${uploaded_images:+ }${image_ref}"
+              echo "WORKS image upload completed: ${image_ref}"
+            else
+              upload_status="$?"
+              echo "::error::WORKS image upload failed at ${image_index}/${image_total}: ${image_ref}"
+              echo "Already uploaded images: ${uploaded_images:-none}"
+              exit "${upload_status}"
+            fi
+          done
+
+          echo "Uploaded WORKS image archives:"
+          for image_ref in ${uploaded_images}; do
+            echo " - ${image_ref}"
           done