fix(extensions): pull the service image on install/update so moving tags refresh

An extension's service can pin a moving image tag (e.g. :latest) and never touch
it per release; the platform refreshes it. dockerComposeAction gains a `pull`
action and the installer runs `docker compose pull <svc>` before `up -d` — `up`
alone won't re-pull a tag already cached on the host, so an updated extension
would otherwise keep running the old image. Best-effort: a pull failure falls
through to the cached image.

Author: Medformatik

apps/api/src/services/extension-installer.ts

@@ -154,6 +154,18 @@ export async function installExtension(
       await ctx.log("Rendering compose...");
       await renderAndPersistCompose();
       for (const svc of serviceComponents) {
+        // Pull first so a moving image tag (e.g. :latest) is refreshed on
+        // update — `up -d` alone won't re-pull a tag already cached on the host,
+        // so without this an updated extension would keep running the old image.
+        // Best-effort: a pull failure (offline / locally-built image) falls
+        // through to starting on the cached image.
+        const pulled = await dockerComposeAction(svc.service, "pull");
+        if (pulled.exitCode !== 0) {
+          await ctx.log(
+            `docker compose pull ${svc.service} failed (exit ${pulled.exitCode}); starting on the cached image`,
+            "stderr",
+          );
+        }
         await serviceStart(svc.service, ctx);
       }
     }

apps/api/src/utils/docker-compose.ts

@@ -34,23 +34,27 @@ export async function dockerComposePs(): Promise<PsEntry[]> {
 
 export async function dockerComposeAction(
   serviceId: string,
-  action: "start" | "stop" | "restart" | "recreate" | "remove",
+  action: "start" | "stop" | "restart" | "recreate" | "remove" | "pull",
 ): Promise<{ exitCode: number; stdout: string }> {
   const serviceArgs = serviceId ? [serviceId] : [];
   const args =
     action === "start"
       ? ["up", "-d", ...serviceArgs]
-      : action === "recreate"
-        ? // Force-recreate so a rotated secret (same key/path, new file content)
-          // is always picked up, not just config-shape changes.
-          ["up", "-d", "--force-recreate", ...serviceArgs]
-        : action === "stop"
-          ? ["stop", ...serviceArgs]
-          : action === "remove"
-            ? // Stop + remove the container (clean teardown when uninstalling an
-              // extension's service). `-s` stops first, `-f` skips confirmation.
-              ["rm", "-sf", ...serviceArgs]
-            : ["restart", ...serviceArgs];
+      : action === "pull"
+        ? // Re-fetch the image so a moving tag (e.g. :latest) is refreshed; a
+          // following `up -d` then recreates the container on the new digest.
+          ["pull", ...serviceArgs]
+        : action === "recreate"
+          ? // Force-recreate so a rotated secret (same key/path, new file content)
+            // is always picked up, not just config-shape changes.
+            ["up", "-d", "--force-recreate", ...serviceArgs]
+          : action === "stop"
+            ? ["stop", ...serviceArgs]
+            : action === "remove"
+              ? // Stop + remove the container (clean teardown when uninstalling an
+                // extension's service). `-s` stops first, `-f` skips confirmation.
+                ["rm", "-sf", ...serviceArgs]
+              : ["restart", ...serviceArgs];
   try {
     const { stdout } = await execFile("docker", ["compose", "-f", composePath(), ...args], {
       timeout: 120_000,