feat: Wave 2 — version About dialog, installer core, release image pipeline

[jmservera]

Summary

Wave 2 of the PRD 004 release/packaging plan. Bundles the three independent Wave 2 slices (PR-5, PR-6, PR-10) into a single branch as requested. Builds on the already-merged Wave 1 foundation (version plumbing, OCI labels, UBEROS_WORKSPACE).

What changed

Frontend About/Version dialog (Theme G, FR-G3)

• services/frontend/src/lib/control.js — new getVersion() calling GET /control/version, falling back to dev.
• services/frontend/src/App.svelte — an About menubar entry opening a modal that shows the running version (primed on mount, refreshed on open).
• tests/acceptance/s14-theme-g-about.spec.js — Playwright spec: /control/version returns a version, the About entry renders, and the modal shows the control-plane version.

Installer core + local mode (Themes D/E/G, FR-D2, FR-D3, FR-E5, FR-G4)

• install.sh — new POSIX-sh installer: --mode local|release with auto-detection (source checkout vs release bundle), --version, --help, unknown-flag handling, and .env generation that never clobbers an existing .env. Local mode runs docker compose build && up -d. Release mode is a clear placeholder for the later installer stage (PR-13).
• .env.template — installer template mirroring .env.example, including UBEROS_WORKSPACE and UBEROS_VERSION.

Release image pipeline (Theme B, FR-B1, FR-B2, FR-B3)

• .github/workflows/release.yml — on v* tags, matrix-builds all 8 service images for linux/amd64 and pushes them to ghcr.io/jmservera/uberos/<service>:<version>, adding a moving :beta tag for pre-releases. Passes UBEROS_VERSION (feeding the OCI labels from Wave 1) and NPM_REGISTRY build-args.

Validation

• docker compose build frontend — clean.
• Playwright s14-theme-g-about — 3/3 pass against the running stack.
• install.sh — sh -n clean, shellcheck clean, --version/--help/bad-flag behavior verified, auto-detect resolves to local on this checkout.
• actionlint (Docker image) on release.yml — clean.
• docker compose config --quiet — resolves.

Related issues

Part of #29 (packaging / workspace isolation / installer). This PR adds the installer core and version transparency but does not fully close #29 — workspace provisioning + migration land in Wave 3 (PR-8), so no auto-close keyword is used.

Note

The release workflow depends on ghcr publish permissions and package-visibility automation (tracked as DR-03 in the planning log). Confirm GITHUB_TOKEN package-write perms and package visibility before pushing the first real v* tag.

[Copilot]

Pull request overview

Implements Wave 2 of the release/packaging plan by adding (1) a frontend About dialog that surfaces the running UbeROS version from the control plane, (2) an initial POSIX install.sh that bootstraps local deployments and generates .env from a template without clobbering existing configs, and (3) a GitHub Actions release workflow that builds and publishes service images to GHCR on v* tags.

Changes:

• Frontend: add getVersion() and an About modal wired into the menubar, plus a Playwright acceptance spec.
• Installer: introduce install.sh with mode auto-detection and first-run .env generation from .env.template.
• CI/CD: add .github/workflows/release.yml to build/push all service images on version tags.

Reviewed changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
tests/acceptance/s14-theme-g-about.spec.js	New Playwright acceptance test validating /control/version and About modal rendering.
services/frontend/src/lib/control.js	Adds getVersion() to fetch the running version from the control plane.
services/frontend/src/App.svelte	Adds an About button + modal showing the running version, primed on mount and refreshed on open.
install.sh	New POSIX installer scaffolding with mode detection, .env generation, and local mode compose build/up.
.github/workflows/release.yml	New tag-triggered workflow to build/push images to GHCR with version-based tagging.
.env.template	New installer template for .env, including workspace/version settings and other stack defaults.

[Copilot]

Pull request overview

Copilot reviewed 6 out of 6 changed files in this pull request and generated 1 comment.

[Copilot]

Pull request overview

Copilot reviewed 6 out of 6 changed files in this pull request and generated 2 comments.

[Copilot]

Pull request overview

Copilot reviewed 6 out of 6 changed files in this pull request and generated 1 comment.

Comments suppressed due to low confidence (1)

install.sh:108

• ensure_workspace() falls back to ./workspace when UBEROS_WORKSPACE is empty, which will create/modify a workspace inside the source checkout and undermine the repo-isolation goal. Instead, fail fast with guidance so users keep the workspace outside the repo.

ensure_workspace() {
  workspace="$(env_value UBEROS_WORKSPACE)"
  workspace="${workspace:-./workspace}"
  # Compose resolves relative bind-mount paths against the project directory