fix: address CodeRabbit follow-up feedback from PRs #121 and #122

.github/workflows/release-engine.yml

@@ -29,6 +29,8 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
+      - uses: docker/setup-qemu-action@v3
+
       - uses: docker/setup-buildx-action@v3
 
       - name: Set goreleaser tag

.gitignore

@@ -48,8 +48,8 @@ ai/
 
 # Internal development process (ephemeral implementation plans)
 docs/superpowers/plans/
-plans/
-marketing/variants/
+/plans/
+/marketing/variants/
 
 # Node / Bun
 node_modules/

RELEASING.md

@@ -28,7 +28,7 @@ The automated CI path (Version PR → merge) requires no local tooling beyond gi
 5b. release-helm.yml    → helm push OCI + GitHub Release
 ```
 
-> **Note on workflow naming:** `release-please.yml` is named after a tool we evaluated but didn't adopt — it actually runs the Changesets CLI. A rename to `changeset-version.yml` is tracked in [the relevant issue].
+> **Note on workflow naming:** `release-please.yml` is named after a tool we evaluated but didn't adopt — it actually runs the Changesets CLI. A rename to `changeset-version.yml` is tracked in [dvflw/mantle#123](https://github.com/dvflw/mantle/issues/123).
 
 ## Step 1: Add a Changeset (During Development)
 
@@ -90,7 +90,7 @@ Those tags trigger the package-specific release workflows:
 
 **Floating tags** (`major.minor`, `major`, `latest`) are only pushed for stable releases. For pre-release versions (e.g. `0.5.0-rc.1`) the versioned image is pushed but floating tags are skipped.
 
-**Platform-specific image tags:** the pipeline no longer publishes per-arch tags like `ghcr.io/dvflw/mantle:<version>-amd64`. Only the multi-arch manifest tag (`ghcr.io/dvflw/mantle:<version>`) is pushed. Update any CI or deploy configs that reference the old suffixed tags.
+**Platform-specific image tags:** per-arch tags like `ghcr.io/dvflw/mantle:<version>-amd64` and `ghcr.io/dvflw/mantle:<version>-arm64` exist in GHCR as internal references required by the multi-arch manifest, but are not intended for direct consumption. Always pull the multi-arch manifest tag (`ghcr.io/dvflw/mantle:<version>`), which selects the correct platform automatically. Update any CI or deploy configs that reference the old suffixed tags directly.
 
 **Trivy scan policy:** the `trivy` job runs after `release` with `exit-code: 1` on `CRITICAL` or `HIGH` CVEs. A failure marks the workflow run as failed but does not retract the already-published release. If a CVE scan fails post-release, open a patch release issue immediately.
 

packages/engine/.goreleaser.yaml

@@ -48,18 +48,45 @@ changelog:
       order: 999
 
 dockers_v2:
-  - ids: [mantle]
+  - image_templates:
+      - "ghcr.io/dvflw/mantle:{{ .Version }}-amd64"
+    use: buildx
+    ids: [mantle]
+    goos: linux
+    goarch: amd64
     dockerfile: Dockerfile.goreleaser
-    images:
-      - "ghcr.io/dvflw/mantle"
-    tags:
-      - "{{ .Version }}"
-      # Floating tags (major.minor, major, latest) are only pushed for stable
-      # releases. Empty template results are skipped by goreleaser, so these
-      # evaluate to "" and are dropped for any pre-release version.
-      - "{{ if not .Prerelease }}{{ .Major }}.{{ .Minor }}{{ end }}"
-      - "{{ if not .Prerelease }}{{ .Major }}{{ end }}"
-      - "{{ if not .Prerelease }}latest{{ end }}"
+    build_flag_templates:
+      - "--platform=linux/amd64"
+  - image_templates:
+      - "ghcr.io/dvflw/mantle:{{ .Version }}-arm64"
+    use: buildx
+    ids: [mantle]
+    goos: linux
+    goarch: arm64
+    dockerfile: Dockerfile.goreleaser
+    build_flag_templates:
+      - "--platform=linux/arm64"
+
+docker_manifests:
+  - name_template: "ghcr.io/dvflw/mantle:{{ .Version }}"
+    image_templates:
+      - "ghcr.io/dvflw/mantle:{{ .Version }}-amd64"
+      - "ghcr.io/dvflw/mantle:{{ .Version }}-arm64"
+  - name_template: "ghcr.io/dvflw/mantle:{{ .Major }}.{{ .Minor }}"
+    image_templates:
+      - "ghcr.io/dvflw/mantle:{{ .Version }}-amd64"
+      - "ghcr.io/dvflw/mantle:{{ .Version }}-arm64"
+    skip_push: "{{ if or .IsSnapshot .Prerelease }}true{{ end }}"
+  - name_template: "ghcr.io/dvflw/mantle:{{ .Major }}"
+    image_templates:
+      - "ghcr.io/dvflw/mantle:{{ .Version }}-amd64"
+      - "ghcr.io/dvflw/mantle:{{ .Version }}-arm64"
+    skip_push: "{{ if or .IsSnapshot .Prerelease }}true{{ end }}"
+  - name_template: "ghcr.io/dvflw/mantle:latest"
+    image_templates:
+      - "ghcr.io/dvflw/mantle:{{ .Version }}-amd64"
+      - "ghcr.io/dvflw/mantle:{{ .Version }}-arm64"
+    skip_push: "{{ if or .IsSnapshot .Prerelease }}true{{ end }}"
 
 release:
   github:

packages/engine/internal/server/api.go

@@ -48,7 +48,7 @@ type StepSummary struct {
 // handleListExecutions handles GET /api/v1/executions with query param filters.
 //
 //	@Summary      List executions
-//	@Description  Returns a paginated list of workflow executions for the authenticated team. Supports filtering by workflow name, status, and age.
+//	@Description  Returns a list of workflow executions for the authenticated team, most recent first. Supports filtering by workflow name, status, and age. Use the limit parameter to cap results (default 20).
 //	@Tags         executions
 //	@Param    workflow  query  string   false  "Filter by workflow name"
 //	@Param    status    query  string   false  "Filter by status"   Enums(pending,running,completed,failed,cancelled)