Merge branch 'main' into 26.7

Author: yomybaby

.github/workflows/docs-archive-orphan-branch.yml

@@ -218,6 +218,37 @@ jobs:
           # docs corrections that should land in the archive.
           git push --force origin "$BRANCH"
 
+      # The live site renders every archive at Amplify build time, but
+      # Amplify only builds on pushes to `main`. Without this step, a
+      # docs-only push to a release branch refreshes the archive branch
+      # yet the deployed /<minor>/ pages stay stale until an unrelated
+      # `main` merge happens to land (FR-3275). POSTing the Amplify
+      # incoming webhook starts a rebuild of the main-HEAD pipeline so
+      # the refreshed archive is re-rendered immediately. The release
+      # path already rebuilds via the auto-opened pdfTag PR merge
+      # (FR-3246); this covers the push/dispatch paths. Skips with a
+      # warning when the secret is not configured, preserving the
+      # previous behavior.
+      - name: Trigger Amplify docs rebuild
+        if: ${{ steps.resolve.outputs.dry_run != 'true' }}
+        env:
+          WEBHOOK: ${{ secrets.AMPLIFY_DOCS_WEBHOOK_URL }}
+        run: |
+          if [ -z "$WEBHOOK" ]; then
+            echo "::warning::AMPLIFY_DOCS_WEBHOOK_URL secret not set — docs-archive branch was updated, but the live site stays stale until the next main build. Create an Amplify incoming webhook (docs app → Build settings → Incoming webhooks) and store its URL in this secret."
+            exit 0
+          fi
+          # The archive force-push above already succeeded, so a flaky
+          # webhook must not fail the workflow. Bound the request (timeout
+          # + retries) and downgrade any failure to a warning — the live
+          # site will still refresh on the next main build.
+          if curl -fsS --max-time 30 --retry 3 --retry-delay 5 --retry-all-errors \
+               -X POST "$WEBHOOK" -H 'Content-Type: application/json' -d '{}'; then
+            echo "Amplify rebuild triggered."
+          else
+            echo "::warning::Amplify webhook POST failed after retries — the docs-archive branch is already updated, so the live site will refresh on the next main build. Re-run this workflow (or POST the webhook manually) to force it sooner."
+          fi
+
       - name: Dry-run summary
         if: ${{ steps.resolve.outputs.dry_run == 'true' }}
         env:

.github/workflows/docs-checks.yml

@@ -0,0 +1,43 @@
+# Deterministic checks for the user-manual package (FR-3276).
+#
+# Runs the docs package's script-based lints on any PR that touches the
+# manual. These previously existed only as local npm scripts with no CI
+# teeth:
+#   - check:terminology-md — TERMINOLOGY.md is in sync with terminology.json
+#   - check:nav-titles     — sidebar nav labels relate to their page H1s
+#     (guards against "Sessions All"-style label/title drift; see
+#     packages/backend.ai-webui-docs/scripts/check-nav-titles.mjs)
+name: docs-checks
+
+on:
+  pull_request:
+    paths:
+      - "packages/backend.ai-webui-docs/**"
+      - ".github/workflows/docs-checks.yml"
+
+permissions:
+  contents: read
+
+jobs:
+  docs-checks:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      # pnpm must be installed before setup-node so that node's
+      # package-manager cache resolution (`pnpm store path`) works.
+      - uses: pnpm/action-setup@v5
+
+      - uses: actions/setup-node@v5
+        with:
+          node-version-file: ".nvmrc"
+          cache: "pnpm"
+
+      - name: Install docs package dependencies
+        run: pnpm install --filter backend.ai-webui-docs --frozen-lockfile
+
+      - name: Terminology table in sync
+        run: pnpm --filter backend.ai-webui-docs run check:terminology-md
+
+      - name: Nav labels relate to page H1s
+        run: pnpm --filter backend.ai-webui-docs run check:nav-titles

.github/workflows/storybook-coverage-checker.lock.yml

@@ -44,7 +44,7 @@ You are a Storybook coverage analyzer. When a PR is ready for review, analyze ch
 
 ### Step 1: Find the PR
 
-Use the GitHub MCP server tools (configured via `tools.github.toolsets: [pull_requests, repos]`) to find the pull request for the current branch. Query open pull requests whose head ref matches the current branch name and select the most recent one.
+Use the GitHub MCP server tools (configured via `tools.github.toolsets: [pull_requests, repos]`) to find the pull request for the current branch. Query open pull requests whose head ref matches the current branch name and select the most recent one. **Remember this PR number** — because this workflow runs via `workflow_dispatch` (no triggering PR context), you must pass it explicitly as `item_number` when you call `add_comment` (see Important Notes below).
 
 ### Step 2: Get Changed Component Files
 
@@ -139,7 +139,7 @@ loading: {
    - `-propName`: Removed prop (in story, not in component)
    - `~propName`: Changed prop (type mismatch)
 4. **BAI-specific props**: Focus on props defined in the component's own interface, not inherited from Ant Design
-5. **Use `add_comment`**: This safe-output tool will automatically comment on the relevant pull request when configured with `target: "*"`, so `item_number` is not required
+5. **Use `add_comment`**: Because `safe-outputs.add-comment` is configured with `target: "*"` (this workflow is dispatched, so it has no triggering PR), you **must** set `item_number` in the `add_comment` output to the pull request number you identified in Step 1. Omitting it makes the safe-output handler fail with "no specific item number was provided".
 
 ## Example Analysis
 

.github/workflows/storybook-coverage-checker.md

@@ -156,14 +156,27 @@ applications:
             # `<projectRoot>/.docs-archive/<sanitized-ref>`. With the
             # appRoot set to this package, `<projectRoot>` IS the cwd,
             # so the worktree path is simply
-            # `.docs-archive/<sanitized-ref>`. The list is hardcoded
-            # to `26.4` for v1; future archived minors must be added
-            # here in lockstep with the `versions:` config until a
-            # toolkit helper does it dynamically.
+            # `.docs-archive/<sanitized-ref>`.
+            #
+            # ARCHIVE_REFS is derived DIRECTLY from the config's
+            # `versions:` block (FR-3255) — every `ref: docs-archive/X.Y`
+            # line — so adding a minor to `docs-toolkit.config.yaml`
+            # (which the `docs-version-pdftag-pr.yml` release automation
+            # now does automatically) is picked up here with ZERO
+            # lockstep edits. The `^\s*ref:` anchor matches only real
+            # archive-branch refs, never the `docs-archive/…` mentions
+            # in the surrounding config comments. The
+            # `${ARR[@]+"${ARR[@]}"}` expansion is empty-array-safe under
+            # `set -u` (older bash errors on a bare `"${ARR[@]}"`).
             - |
               set -euo pipefail
-              ARCHIVE_REFS=(docs-archive/26.4)
-              for ref in "${ARCHIVE_REFS[@]}"; do
+              mapfile -t ARCHIVE_REFS < <(
+                grep -oE '^[[:space:]]*ref:[[:space:]]*docs-archive/[0-9]+\.[0-9]+[[:space:]]*$' \
+                  docs-toolkit.config.yaml \
+                  | grep -oE 'docs-archive/[0-9]+\.[0-9]+' | sort -u
+              )
+              echo "Archive refs from config: ${ARCHIVE_REFS[*]:-(none)}"
+              for ref in ${ARCHIVE_REFS[@]+"${ARCHIVE_REFS[@]}"}; do
                 sanitized="${ref//\//__}"
                 worktree=".docs-archive/${sanitized}"
                 # Idempotency check: a plain `[ -d "${worktree}" ]` is

amplify.yml

@@ -956,6 +956,15 @@ input AppConfigAllowListFilter
 
   """Filter by last update datetime."""
   updatedAt: DateTimeFilter = null
+
+  """Added in 26.7.0. Match all of the given sub-filters."""
+  AND: [AppConfigAllowListFilter!] = null
+
+  """Added in 26.7.0. Match any of the given sub-filters."""
+  OR: [AppConfigAllowListFilter!] = null
+
+  """Added in 26.7.0. Negate the given sub-filters."""
+  NOT: [AppConfigAllowListFilter!] = null
 }
 
 """Added in 26.7.0. Specifies ordering for app config allow-list results."""
@@ -1040,6 +1049,15 @@ input AppConfigDefinitionFilter
 
   """Filter by last update datetime."""
   updatedAt: DateTimeFilter = null
+
+  """Added in 26.7.0. Match all of the given sub-filters."""
+  AND: [AppConfigDefinitionFilter!] = null
+
+  """Added in 26.7.0. Match any of the given sub-filters."""
+  OR: [AppConfigDefinitionFilter!] = null
+
+  """Added in 26.7.0. Negate the given sub-filters."""
+  NOT: [AppConfigDefinitionFilter!] = null
 }
 
 """Added in 26.7.0. Specifies ordering for app config definition results."""
@@ -2692,6 +2710,15 @@ input CategoryFilter
 {
   """Filter by name."""
   name: StringFilter = null
+
+  """Added in 26.7.0. Match all of the given sub-filters."""
+  AND: [CategoryFilter!] = null
+
+  """Added in 26.7.0. Match any of the given sub-filters."""
+  OR: [CategoryFilter!] = null
+
+  """Added in 26.7.0. Negate the given sub-filters."""
+  NOT: [CategoryFilter!] = null
 }
 
 """Added in 26.3.0. Specifies ordering for query preset category results."""
@@ -3331,6 +3358,15 @@ input ContainerRegistryV2Filter
   registryName: StringFilter = null
   type: ContainerRegistryTypeFilter = null
   isGlobal: Boolean = null
+
+  """Added in 26.7.0. Match all of the given sub-filters."""
+  AND: [ContainerRegistryV2Filter!] = null
+
+  """Added in 26.7.0. Match any of the given sub-filters."""
+  OR: [ContainerRegistryV2Filter!] = null
+
+  """Added in 26.7.0. Negate the given sub-filters."""
+  NOT: [ContainerRegistryV2Filter!] = null
 }
 
 """Added in 26.4.2. Ordering specification for container registries."""
@@ -5816,6 +5852,15 @@ input DeploymentRevisionPresetFilter
 
   """Variant ID filter."""
   runtimeVariantId: UUIDFilter = null
+
+  """Added in 26.7.0. Match all of the given sub-filters."""
+  AND: [DeploymentRevisionPresetFilter!] = null
+
+  """Added in 26.7.0. Match any of the given sub-filters."""
+  OR: [DeploymentRevisionPresetFilter!] = null
+
+  """Added in 26.7.0. Negate the given sub-filters."""
+  NOT: [DeploymentRevisionPresetFilter!] = null
 }
 
 """Added in 26.4.2. Order specification for deployment revision presets."""
@@ -8841,6 +8886,15 @@ input KeypairResourcePolicyV2Filter
   Added in 26.4.4. Filter policies by their assigned keypairs. A policy matches if at least one of its keypairs satisfies the conditions.
   """
   keypair: KeypairResourcePolicyKeypairNestedFilter = null
+
+  """Added in 26.7.0. Match all of the given sub-filters."""
+  AND: [KeypairResourcePolicyV2Filter!] = null
+
+  """Added in 26.7.0. Match any of the given sub-filters."""
+  OR: [KeypairResourcePolicyV2Filter!] = null
+
+  """Added in 26.7.0. Negate the given sub-filters."""
+  NOT: [KeypairResourcePolicyV2Filter!] = null
 }
 
 """Added in 26.4.2. Ordering specification for keypair resource policies."""
@@ -9125,6 +9179,15 @@ input LoginClientTypeFilter
 
   """Filter by last modification datetime."""
   modifiedAt: DateTimeFilter = null
+
+  """Added in 26.7.0. Match all of the given sub-filters."""
+  AND: [LoginClientTypeFilter!] = null
+
+  """Added in 26.7.0. Match any of the given sub-filters."""
+  OR: [LoginClientTypeFilter!] = null
+
+  """Added in 26.7.0. Negate the given sub-filters."""
+  NOT: [LoginClientTypeFilter!] = null
 }
 
 """Added in 26.4.2. Specifies ordering for login client type results."""
@@ -13340,6 +13403,15 @@ input ProjectResourcePolicyV2Filter
   maxVfolderCount: IntFilter = null
   maxQuotaScopeSize: IntFilter = null
   maxNetworkCount: IntFilter = null
+
+  """Added in 26.7.0. Match all of the given sub-filters."""
+  AND: [ProjectResourcePolicyV2Filter!] = null
+
+  """Added in 26.7.0. Match any of the given sub-filters."""
+  OR: [ProjectResourcePolicyV2Filter!] = null
+
+  """Added in 26.7.0. Negate the given sub-filters."""
+  NOT: [ProjectResourcePolicyV2Filter!] = null
 }
 
 """Added in 26.4.2. Ordering specification for project resource policies."""
@@ -17335,6 +17407,15 @@ input RuntimeVariantFilter
 {
   """Name filter."""
   name: StringFilter = null
+
+  """Added in 26.7.0. Match all of the given sub-filters."""
+  AND: [RuntimeVariantFilter!] = null
+
+  """Added in 26.7.0. Match any of the given sub-filters."""
+  OR: [RuntimeVariantFilter!] = null
+
+  """Added in 26.7.0. Negate the given sub-filters."""
+  NOT: [RuntimeVariantFilter!] = null
 }
 
 """Added in 24.03.5."""
@@ -17450,6 +17531,15 @@ input RuntimeVariantPresetFilter
 
   """Variant ID filter."""
   runtimeVariantId: UUIDFilter = null
+
+  """Added in 26.7.0. Match all of the given sub-filters."""
+  AND: [RuntimeVariantPresetFilter!] = null
+
+  """Added in 26.7.0. Match any of the given sub-filters."""
+  OR: [RuntimeVariantPresetFilter!] = null
+
+  """Added in 26.7.0. Negate the given sub-filters."""
+  NOT: [RuntimeVariantPresetFilter!] = null
 }
 
 """Added in 26.4.2. Order specification."""
@@ -20628,6 +20718,15 @@ input UserResourcePolicyV2Filter
   maxQuotaScopeSize: IntFilter = null
   maxSessionCountPerModelSession: IntFilter = null
   maxCustomizedImageCount: IntFilter = null
+
+  """Added in 26.7.0. Match all of the given sub-filters."""
+  AND: [UserResourcePolicyV2Filter!] = null
+
+  """Added in 26.7.0. Match any of the given sub-filters."""
+  OR: [UserResourcePolicyV2Filter!] = null
+
+  """Added in 26.7.0. Negate the given sub-filters."""
+  NOT: [UserResourcePolicyV2Filter!] = null
 }
 
 """Added in 26.4.2. Ordering specification for user resource policies."""