docker-dev.yml

name: Docker Build & Publish (Dev)

on:
  push:
    branches:
      - develop
  workflow_dispatch:
    inputs:
      branch:
        description: "Branch to build (e.g., develop, main). Defaults to current branch."
        required: false
        type: string

jobs:
  build-backend:
    name: Build & Push Backend (Dev) - ${{ matrix.platform }}
    runs-on: ${{ matrix.runner }}
    permissions:
      contents: read
      packages: write
    strategy:
      fail-fast: false
      matrix:
        include:
          - platform: linux/amd64
            runner: blacksmith-4vcpu-ubuntu-2404
            cache-key: amd64
          - platform: linux/arm64
            runner: blacksmith-4vcpu-ubuntu-2404-arm
            cache-key: arm64

    steps:
      - name: Checkout code
        uses: useblacksmith/checkout@v1
        with:
          ref: ${{ github.event.inputs.branch || github.ref }}

      - name: Set image tags
        id: tags
        run: |
          SHORT_SHA=$(echo "${{ github.sha }}" | cut -c1-7)
          BRANCH_NAME="${{ github.ref_name }}"
          if [ "${{ github.event_name }}" == "workflow_dispatch" ] && [ -n "${{ github.event.inputs.branch }}" ]; then
            BRANCH_NAME="${{ github.event.inputs.branch }}"
          fi
          # Sanitize branch name for Docker tag (replace / with -)
          BRANCH_NAME=$(echo "$BRANCH_NAME" | sed 's/\//-/g')
          echo "dev=dev" >> $GITHUB_OUTPUT
          echo "sha=$SHORT_SHA" >> $GITHUB_OUTPUT
          echo "branch=$BRANCH_NAME" >> $GITHUB_OUTPUT
          echo "full=dev-$BRANCH_NAME-$SHORT_SHA" >> $GITHUB_OUTPUT

      - name: Cache Composer dependencies
        uses: actions/cache@v4
        with:
          path: ./backend/storage/packages
          key: ${{ runner.os }}-composer-${{ matrix.cache-key }}-${{ hashFiles('backend/composer.lock') }}
          restore-keys: |
            ${{ runner.os }}-composer-${{ matrix.cache-key }}-

      - name: Setup Blacksmith Builder
        uses: useblacksmith/setup-docker-builder@v2
        with:
          cache-key: backend/Dockerfile

      - name: Log in to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Set platform tag
        id: platform-tag
        run: |
          PLATFORM_TAG=$(echo "${{ matrix.platform }}" | sed 's/\//-/g')
          echo "tag=$PLATFORM_TAG" >> $GITHUB_OUTPUT

      - name: Build & Push Backend
        uses: useblacksmith/build-push-action@v2
        with:
          context: ./backend
          platforms: ${{ matrix.platform }}
          push: true
          tags: |
            ghcr.io/mythicalltd/featherpanel-backend:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }}-${{ steps.platform-tag.outputs.tag }}

  manifest-backend:
    name: Create Multi-Arch Manifest - Backend
    runs-on: blacksmith-4vcpu-ubuntu-2404
    needs: build-backend
    permissions:
      contents: read
      packages: write

    steps:
      - name: Checkout code
        uses: useblacksmith/checkout@v1
        with:
          ref: ${{ github.event.inputs.branch || github.ref }}

      - name: Set image tags
        id: tags
        run: |
          SHORT_SHA=$(echo "${{ github.sha }}" | cut -c1-7)
          BRANCH_NAME="${{ github.ref_name }}"
          if [ "${{ github.event_name }}" == "workflow_dispatch" ] && [ -n "${{ github.event.inputs.branch }}" ]; then
            BRANCH_NAME="${{ github.event.inputs.branch }}"
          fi
          # Sanitize branch name for Docker tag (replace / with -)
          BRANCH_NAME=$(echo "$BRANCH_NAME" | sed 's/\//-/g')
          echo "branch=$BRANCH_NAME" >> $GITHUB_OUTPUT
          echo "sha=$SHORT_SHA" >> $GITHUB_OUTPUT

      - name: Setup Blacksmith Builder
        uses: useblacksmith/setup-docker-builder@v2
        with:
          cache-key: backend/Dockerfile

      - name: Log in to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Wait for platform-specific images
        run: |
          echo "Waiting for platform-specific images to be available..."
          sleep 10

      - name: Create and push manifest
        run: |
          docker buildx imagetools create --tag ghcr.io/mythicalltd/featherpanel-backend:dev \
            ghcr.io/mythicalltd/featherpanel-backend:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }}-linux-amd64 \
            ghcr.io/mythicalltd/featherpanel-backend:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }}-linux-arm64
          docker buildx imagetools create --tag ghcr.io/mythicalltd/featherpanel-backend:dev-${{ steps.tags.outputs.branch }} \
            ghcr.io/mythicalltd/featherpanel-backend:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }}-linux-amd64 \
            ghcr.io/mythicalltd/featherpanel-backend:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }}-linux-arm64
          docker buildx imagetools create --tag ghcr.io/mythicalltd/featherpanel-backend:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }} \
            ghcr.io/mythicalltd/featherpanel-backend:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }}-linux-amd64 \
            ghcr.io/mythicalltd/featherpanel-backend:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }}-linux-arm64

  build-frontendv2:
    name: Build & Push Frontend v2 (Dev) - ${{ matrix.platform }}
    runs-on: ${{ matrix.runner }}
    permissions:
      contents: read
      packages: write
    strategy:
      fail-fast: false
      matrix:
        include:
          - platform: linux/amd64
            runner: blacksmith-4vcpu-ubuntu-2404
            cache-key: amd64
          - platform: linux/arm64
            runner: blacksmith-4vcpu-ubuntu-2404-arm
            cache-key: arm64

    steps:
      - name: Checkout code
        uses: useblacksmith/checkout@v1
        with:
          ref: ${{ github.event.inputs.branch || github.ref }}

      - name: Set image tags
        id: tags
        run: |
          SHORT_SHA=$(echo "${{ github.sha }}" | cut -c1-7)
          BRANCH_NAME="${{ github.ref_name }}"
          if [ "${{ github.event_name }}" == "workflow_dispatch" ] && [ -n "${{ github.event.inputs.branch }}" ]; then
            BRANCH_NAME="${{ github.event.inputs.branch }}"
          fi
          # Sanitize branch name for Docker tag (replace / with -)
          BRANCH_NAME=$(echo "$BRANCH_NAME" | sed 's/\//-/g')
          echo "dev=dev" >> $GITHUB_OUTPUT
          echo "sha=$SHORT_SHA" >> $GITHUB_OUTPUT
          echo "branch=$BRANCH_NAME" >> $GITHUB_OUTPUT
          echo "full=dev-$BRANCH_NAME-$SHORT_SHA" >> $GITHUB_OUTPUT

      - name: Cache pnpm dependencies
        uses: actions/cache@v4
        with:
          path: ./frontendv2/node_modules
          key: ${{ runner.os }}-pnpm-v2-${{ matrix.cache-key }}-${{ hashFiles('frontendv2/pnpm-lock.yaml') }}
          restore-keys: |
            ${{ runner.os }}-pnpm-v2-${{ matrix.cache-key }}-

      - name: Setup Blacksmith Builder
        uses: useblacksmith/setup-docker-builder@v2
        with:
          cache-key: frontendv2/Dockerfile

      - name: Log in to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Set platform tag
        id: platform-tag
        run: |
          PLATFORM_TAG=$(echo "${{ matrix.platform }}" | sed 's/\//-/g')
          echo "tag=$PLATFORM_TAG" >> $GITHUB_OUTPUT

      - name: Setup PHP (OpenAPI for in-panel docs)
        uses: shivammathur/setup-php@v2
        with:
          php-version: "8.5"
          tools: composer:v2
          coverage: none

      - name: Generate OpenAPI specification
        working-directory: backend
        run: |
          composer install --no-interaction --no-progress --prefer-dist
          COMPOSER_ALLOW_SUPERUSER=1 composer openapi
          test -s openapi.json

      - name: Setup pnpm
        uses: pnpm/action-setup@v4
        with:
          version: 10

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 24
          cache: pnpm
          cache-dependency-path: frontendv2/pnpm-lock.yaml

      - name: Generate developer docs (not committed; baked into image)
        working-directory: frontendv2
        env:
          OPENAPI_JSON: ../backend/openapi.json
        run: |
          pnpm install --frozen-lockfile
          pnpm export:docs
          test -f public/icanhasfeatherpanel/api/openapi.json
          test -f public/icanhasfeatherpanel/api/oauth2.md

      - name: Build & Push Frontend v2
        uses: useblacksmith/build-push-action@v2
        with:
          context: ./frontendv2
          platforms: ${{ matrix.platform }}
          push: true
          tags: |
            ghcr.io/mythicalltd/featherpanel-frontendv2:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }}-${{ steps.platform-tag.outputs.tag }}

  manifest-frontendv2:
    name: Create Multi-Arch Manifest - Frontend v2
    runs-on: blacksmith-4vcpu-ubuntu-2404
    needs: build-frontendv2
    permissions:
      contents: read
      packages: write

    steps:
      - name: Checkout code
        uses: useblacksmith/checkout@v1
        with:
          ref: ${{ github.event.inputs.branch || github.ref }}

      - name: Set image tags
        id: tags
        run: |
          SHORT_SHA=$(echo "${{ github.sha }}" | cut -c1-7)
          BRANCH_NAME="${{ github.ref_name }}"
          if [ "${{ github.event_name }}" == "workflow_dispatch" ] && [ -n "${{ github.event.inputs.branch }}" ]; then
            BRANCH_NAME="${{ github.event.inputs.branch }}"
          fi
          # Sanitize branch name for Docker tag (replace / with -)
          BRANCH_NAME=$(echo "$BRANCH_NAME" | sed 's/\//-/g')
          echo "branch=$BRANCH_NAME" >> $GITHUB_OUTPUT
          echo "sha=$SHORT_SHA" >> $GITHUB_OUTPUT

      - name: Setup Blacksmith Builder
        uses: useblacksmith/setup-docker-builder@v2
        with:
          cache-key: frontendv2/Dockerfile

      - name: Log in to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Wait for platform-specific images
        run: |
          echo "Waiting for platform-specific images to be available..."
          sleep 10

      - name: Create and push manifest
        run: |
          docker buildx imagetools create --tag ghcr.io/mythicalltd/featherpanel-frontendv2:dev \
            ghcr.io/mythicalltd/featherpanel-frontendv2:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }}-linux-amd64 \
            ghcr.io/mythicalltd/featherpanel-frontendv2:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }}-linux-arm64
          docker buildx imagetools create --tag ghcr.io/mythicalltd/featherpanel-frontendv2:dev-${{ steps.tags.outputs.branch }} \
            ghcr.io/mythicalltd/featherpanel-frontendv2:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }}-linux-amd64 \
            ghcr.io/mythicalltd/featherpanel-frontendv2:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }}-linux-arm64
          docker buildx imagetools create --tag ghcr.io/mythicalltd/featherpanel-frontendv2:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }} \
            ghcr.io/mythicalltd/featherpanel-frontendv2:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }}-linux-amd64 \
            ghcr.io/mythicalltd/featherpanel-frontendv2:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }}-linux-arm64

  build-async-runner:
    name: Build & Push Async Runner (Dev) - ${{ matrix.platform }}
    runs-on: ${{ matrix.runner }}
    permissions:
      contents: read
      packages: write
    strategy:
      fail-fast: false
      matrix:
        include:
          - platform: linux/amd64
            runner: blacksmith-4vcpu-ubuntu-2404
            cache-key: amd64
          - platform: linux/arm64
            runner: blacksmith-4vcpu-ubuntu-2404-arm
            cache-key: arm64

    steps:
      - name: Checkout code
        uses: useblacksmith/checkout@v1
        with:
          ref: ${{ github.event.inputs.branch || github.ref }}

      - name: Set image tags
        id: tags
        run: |
          SHORT_SHA=$(echo "${{ github.sha }}" | cut -c1-7)
          BRANCH_NAME="${{ github.ref_name }}"
          if [ "${{ github.event_name }}" == "workflow_dispatch" ] && [ -n "${{ github.event.inputs.branch }}" ]; then
            BRANCH_NAME="${{ github.event.inputs.branch }}"
          fi
          # Sanitize branch name for Docker tag (replace / with -)
          BRANCH_NAME=$(echo "$BRANCH_NAME" | sed 's/\//-/g')
          echo "dev=dev" >> $GITHUB_OUTPUT
          echo "sha=$SHORT_SHA" >> $GITHUB_OUTPUT
          echo "branch=$BRANCH_NAME" >> $GITHUB_OUTPUT
          echo "full=dev-$BRANCH_NAME-$SHORT_SHA" >> $GITHUB_OUTPUT

      - name: Setup Blacksmith Builder
        uses: useblacksmith/setup-docker-builder@v2
        with:
          cache-key: runner/Dockerfile

      - name: Log in to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Set platform tag
        id: platform-tag
        run: |
          PLATFORM_TAG=$(echo "${{ matrix.platform }}" | sed 's/\//-/g')
          echo "tag=$PLATFORM_TAG" >> $GITHUB_OUTPUT

      - name: Build & Push Async Runner
        uses: useblacksmith/build-push-action@v2
        with:
          context: ./runner
          file: ./runner/Dockerfile
          platforms: ${{ matrix.platform }}
          push: true
          tags: |
            ghcr.io/mythicalltd/featherpanel-async-runner:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }}-${{ steps.platform-tag.outputs.tag }}

  manifest-async-runner:
    name: Create Multi-Arch Manifest - Async Runner
    runs-on: blacksmith-4vcpu-ubuntu-2404
    needs: build-async-runner
    permissions:
      contents: read
      packages: write

    steps:
      - name: Checkout code
        uses: useblacksmith/checkout@v1
        with:
          ref: ${{ github.event.inputs.branch || github.ref }}

      - name: Set image tags
        id: tags
        run: |
          SHORT_SHA=$(echo "${{ github.sha }}" | cut -c1-7)
          BRANCH_NAME="${{ github.ref_name }}"
          if [ "${{ github.event_name }}" == "workflow_dispatch" ] && [ -n "${{ github.event.inputs.branch }}" ]; then
            BRANCH_NAME="${{ github.event.inputs.branch }}"
          fi
          # Sanitize branch name for Docker tag (replace / with -)
          BRANCH_NAME=$(echo "$BRANCH_NAME" | sed 's/\//-/g')
          echo "branch=$BRANCH_NAME" >> $GITHUB_OUTPUT
          echo "sha=$SHORT_SHA" >> $GITHUB_OUTPUT

      - name: Setup Blacksmith Builder
        uses: useblacksmith/setup-docker-builder@v2
        with:
          cache-key: runner/Dockerfile

      - name: Log in to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Wait for platform-specific images
        run: |
          echo "Waiting for platform-specific images to be available..."
          sleep 10

      - name: Create and push manifest
        run: |
          docker buildx imagetools create --tag ghcr.io/mythicalltd/featherpanel-async-runner:dev \
            ghcr.io/mythicalltd/featherpanel-async-runner:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }}-linux-amd64 \
            ghcr.io/mythicalltd/featherpanel-async-runner:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }}-linux-arm64
          docker buildx imagetools create --tag ghcr.io/mythicalltd/featherpanel-async-runner:dev-${{ steps.tags.outputs.branch }} \
            ghcr.io/mythicalltd/featherpanel-async-runner:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }}-linux-amd64 \
            ghcr.io/mythicalltd/featherpanel-async-runner:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }}-linux-arm64
          docker buildx imagetools create --tag ghcr.io/mythicalltd/featherpanel-async-runner:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }} \
            ghcr.io/mythicalltd/featherpanel-async-runner:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }}-linux-amd64 \
            ghcr.io/mythicalltd/featherpanel-async-runner:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }}-linux-arm64

  build-mcp:
    name: Build & Push MCP (Dev) - ${{ matrix.platform }}
    runs-on: ${{ matrix.runner }}
    permissions:
      contents: read
      packages: write
    strategy:
      fail-fast: false
      matrix:
        include:
          - platform: linux/amd64
            runner: blacksmith-2vcpu-ubuntu-2404
            cache-key: amd64
          - platform: linux/arm64
            runner: blacksmith-2vcpu-ubuntu-2404-arm
            cache-key: arm64

    steps:
      - name: Checkout code
        uses: useblacksmith/checkout@v1
        with:
          ref: ${{ github.event.inputs.branch || github.ref }}

      - name: Set image tags
        id: tags
        run: |
          SHORT_SHA=$(echo "${{ github.sha }}" | cut -c1-7)
          BRANCH_NAME="${{ github.ref_name }}"
          if [ "${{ github.event_name }}" == "workflow_dispatch" ] && [ -n "${{ github.event.inputs.branch }}" ]; then
            BRANCH_NAME="${{ github.event.inputs.branch }}"
          fi
          BRANCH_NAME=$(echo "$BRANCH_NAME" | sed 's/\//-/g')
          echo "dev=dev" >> $GITHUB_OUTPUT
          echo "sha=$SHORT_SHA" >> $GITHUB_OUTPUT
          echo "branch=$BRANCH_NAME" >> $GITHUB_OUTPUT
          echo "full=dev-$BRANCH_NAME-$SHORT_SHA" >> $GITHUB_OUTPUT

      - name: Set up Docker Buildx
        uses: useblacksmith/setup-docker-builder@v2
        with:
          cache-key: mcp/Dockerfile

      - name: Log in to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Set platform tag
        id: platform-tag
        run: |
          PLATFORM_TAG=$(echo "${{ matrix.platform }}" | sed 's/\//-/g')
          echo "tag=$PLATFORM_TAG" >> $GITHUB_OUTPUT

      - name: Build & Push MCP
        uses: useblacksmith/build-push-action@v2
        with:
          context: ./mcp
          file: ./mcp/Dockerfile
          platforms: ${{ matrix.platform }}
          push: true
          tags: |
            ghcr.io/mythicalltd/featherpanel-mcp:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }}-${{ steps.platform-tag.outputs.tag }}

  manifest-mcp:
    name: Create Multi-Arch Manifest - MCP
    runs-on: blacksmith-2vcpu-ubuntu-2404
    needs: build-mcp
    permissions:
      contents: read
      packages: write

    steps:
      - name: Checkout code
        uses: useblacksmith/checkout@v1
        with:
          ref: ${{ github.event.inputs.branch || github.ref }}

      - name: Set image tags
        id: tags
        run: |
          SHORT_SHA=$(echo "${{ github.sha }}" | cut -c1-7)
          BRANCH_NAME="${{ github.ref_name }}"
          if [ "${{ github.event_name }}" == "workflow_dispatch" ] && [ -n "${{ github.event.inputs.branch }}" ]; then
            BRANCH_NAME="${{ github.event.inputs.branch }}"
          fi
          BRANCH_NAME=$(echo "$BRANCH_NAME" | sed 's/\//-/g')
          echo "branch=$BRANCH_NAME" >> $GITHUB_OUTPUT
          echo "sha=$SHORT_SHA" >> $GITHUB_OUTPUT

      - name: Set up Docker Buildx
        uses: useblacksmith/setup-docker-builder@v2
        with:
          cache-key: mcp/Dockerfile

      - name: Log in to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Wait for platform-specific images
        run: |
          echo "Waiting for platform-specific images to be available..."
          sleep 10

      - name: Create and push manifest
        run: |
          docker buildx imagetools create --tag ghcr.io/mythicalltd/featherpanel-mcp:dev \
            ghcr.io/mythicalltd/featherpanel-mcp:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }}-linux-amd64 \
            ghcr.io/mythicalltd/featherpanel-mcp:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }}-linux-arm64
          docker buildx imagetools create --tag ghcr.io/mythicalltd/featherpanel-mcp:dev-${{ steps.tags.outputs.branch }} \
            ghcr.io/mythicalltd/featherpanel-mcp:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }}-linux-amd64 \
            ghcr.io/mythicalltd/featherpanel-mcp:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }}-linux-arm64
          docker buildx imagetools create --tag ghcr.io/mythicalltd/featherpanel-mcp:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }} \
            ghcr.io/mythicalltd/featherpanel-mcp:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }}-linux-amd64 \
            ghcr.io/mythicalltd/featherpanel-mcp:dev-${{ steps.tags.outputs.branch }}-${{ steps.tags.outputs.sha }}-linux-arm64