Merge branch 'develop'

Author: jagalindo

.dockerignore

@@ -0,0 +1,29 @@
+# Keep the Docker build context small and the layers reproducible.
+# NOTE: public/ (including the 17MB vendored pyodide runtime) must stay in the
+# context — Vite copies it into dist/ and the wheels stage reads public/flamapy.
+
+.git
+.github
+.claude
+node_modules
+dist
+dist-ssr
+
+# Python tooling / tests (the wheels stage only needs Makefile, scripts/,
+# flamapy.version and public/flamapy)
+tests
+.pytest_cache
+__pycache__
+**/__pycache__
+env
+.venv
+
+# Local files
+*.log
+.env
+.env.*
+.DS_Store
+.vscode
+.idea
+CLAUDE.md
+start_coding.sh

.github/workflows/deploy-pages.yml

@@ -1,8 +1,12 @@
 name: Deploy to GitHub Pages
 
+# Production deploy is tag-driven: a non-dev version tag (v1.2.3) publishes the
+# site. Dev tags (v1.2.3.dev0) are previews and do not deploy. Pushing to main
+# no longer deploys.
 on:
   push:
-    branches: [main]
+    tags:
+      - v[0-9]+.[0-9]+.*
   workflow_dispatch:
 
 permissions:
@@ -17,6 +21,7 @@ concurrency:
 jobs:
   build:
     runs-on: ubuntu-latest
+    if: ${{ github.event_name == 'workflow_dispatch' || !contains(github.ref, 'dev') }}
     steps:
       - uses: actions/checkout@v4
 
@@ -44,6 +49,9 @@ jobs:
       - name: Build
         env:
           VITE_BASE_PATH: ${{ steps.pages.outputs.base_path }}/
+          # GA4 measurement ID, inlined by Vite at build time (empty -> GA off),
+          # matching the Docker build so the Pages site reports analytics too.
+          VITE_GA_MEASUREMENT_ID: ${{ secrets.VITE_GA_MEASUREMENT_ID }}
         run: npm run build
 
       - name: SPA fallback

.github/workflows/docker-image.yml

@@ -1,4 +1,4 @@
-name: Lint
+name: Lint & Frontend tests
 
 on:
   pull_request:
@@ -19,11 +19,19 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 22
           cache: npm
 
       - name: Install dependencies
         run: npm ci
 
       - name: Run ESLint
         run: npm run lint
+
+      - name: Run frontend tests
+        run: npm test
+
+      # Catch build breakage before a release tag does (the flamapy wheels are
+      # not needed for the bundle to build — Vite just copies public/).
+      - name: Build
+        run: npm run build

.github/workflows/lint.yml

@@ -4,6 +4,9 @@ on:
   pull_request:
     branches:
       - main
+  push:
+    branches:
+      - develop
 
 jobs:
   test:

.github/workflows/pytest.yaml

@@ -0,0 +1,111 @@
+name: Release
+
+# Tag-driven release, mirroring the .dev tag schema of the flamapy packages.
+#   v1.2.3       -> docker :latest + :1.2.3, GitHub release, Render deploy
+#   v1.2.3.dev0  -> docker :dev    + :1.2.3.dev0 only (preview, no release/deploy)
+# Pushing to main no longer deploys; push a version tag to ship.
+on:
+  push:
+    tags:
+      - v[0-9]+.[0-9]+.*
+
+jobs:
+  docker:
+    name: Build & publish Docker image
+    runs-on: ubuntu-latest
+    outputs:
+      is_prerelease: ${{ steps.meta.outputs.is_prerelease }}
+    steps:
+      - name: Checkout the code
+        uses: actions/checkout@v4
+
+      - name: Compute image tags
+        id: meta
+        run: |
+          VERSION=${GITHUB_REF_NAME}
+          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+          if [[ "$VERSION" == *dev* ]]; then
+            echo "moving=dev" >> "$GITHUB_OUTPUT"
+            echo "is_prerelease=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "moving=latest" >> "$GITHUB_OUTPUT"
+            echo "is_prerelease=false" >> "$GITHUB_OUTPUT"
+          fi
+
+      # QEMU lets the amd64 runner also build the linux/arm64 image (Apple Silicon,
+      # ARM servers); buildx is the multi-platform builder driving it.
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to DockerHub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_API_TOKEN }}
+
+      - name: Build and push the multi-arch Docker image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: Dockerfile
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: |
+            flamapy/flamapy-ide:${{ steps.meta.outputs.version }}
+            flamapy/flamapy-ide:${{ steps.meta.outputs.moving }}
+          build-args: |
+            VITE_GA_MEASUREMENT_ID=${{ secrets.VITE_GA_MEASUREMENT_ID }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+  github-release:
+    name: Publish GitHub release
+    needs: docker
+    # Runs for every tag: real tags become full releases, .dev tags become
+    # GitHub pre-releases (see prerelease/make_latest below).
+    runs-on: ubuntu-latest
+    # The repo's default GITHUB_TOKEN is read-only; creating a release needs write.
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout git repo
+        uses: actions/checkout@v4
+        with:
+          # changelog-action diffs against the previous tag, so it needs full history.
+          fetch-depth: 0
+
+      - name: Generate changelog
+        id: changelog
+        continue-on-error: true
+        uses: Requarks/changelog-action@v1
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          tag: ${{ github.ref_name }}
+          writeToFile: 'false'
+
+      - name: Publish release github
+        uses: softprops/action-gh-release@v2
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          tag_name: ${{ github.ref_name }}
+          name: ${{ github.ref_name }}
+          # Fall back to GitHub's auto-generated notes if the changelog step failed.
+          body: ${{ steps.changelog.outputs.changes }}
+          generate_release_notes: ${{ steps.changelog.outcome != 'success' }}
+          # .dev tags publish as pre-releases and never become the "latest" release.
+          prerelease: ${{ needs.docker.outputs.is_prerelease == 'true' }}
+          make_latest: ${{ needs.docker.outputs.is_prerelease == 'false' }}
+
+  deploy-render:
+    name: Trigger Render deploy
+    needs: docker
+    if: needs.docker.outputs.is_prerelease == 'false'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Deploy
+        env:
+          deploy_url: ${{ secrets.RENDER_DEPLOY_HOOK_URL }}
+        run: curl "$deploy_url"

.github/workflows/release.yml

@@ -23,8 +23,10 @@ dist-ssr
 *.sln
 *.sw?
 .venv
+__pycache__/
 */__pycache__
 */*/__pycache__
+.pytest_cache/
 
 env/
 
@@ -46,4 +48,9 @@ start_coding.sh
 # PyPI/release-bundle source, so they MUST stay tracked.
 public/flamapy/*.whl
 !public/flamapy/flamapy_configurator-*.whl
-!public/flamapy/z3_solver-*.whl
+!public/flamapy/z3_solver-*.whl
+
+# The served manifest carries versioned wheel filenames, so it too is a build
+# artifact: `make build-wheels` generates it from the tracked, version-less
+# plugins.conf.template.json. Only the template is committed.
+public/flamapy/plugins.conf.json