# Platform-native CI/CD — luxfi/wallet.
#
# Build+deploy intent owned by platform.hanzo.ai (NOT GitHub Actions). On
# webhook, platform builds these images on the lux arcd pools
# (lux-build-linux-{amd64,arm64}) and pushes to GHCR. See platform
# docs/PLATFORM_CI.md.
#
# Build-only: the lux web3 operator (lux.cloud) deploys the App(Wallet) parts
# via the Service CRs (apps/backend/k8s/wallet-backend.yaml for the backend;
# apps/web/k8s/overlays/<brand> kustomize for the per-brand web). Bump each
# CR's pinned tag to the built {{git.sha}} to roll. The same web image
# (ghcr.io/luxfi/wallet-web) serves every brand — white-label is the runtime
# brand.json ConfigMap, not a per-brand build.
build:
  # Custody backend — static Go binary, distroless.
  - matrix:
      - { os: linux, arch: amd64 }
      - { os: linux, arch: arm64 }
    dockerfile: ./apps/backend/Dockerfile
    context: .
    image: ghcr.io/luxfi/wallet-backend
    tag-pattern: "{{git.sha}}"
    push: true

  # Web SPA — Vite build, served by the house static SPA server
  # (ghcr.io/hanzoai/spa, :3000, SPA fallback). One image, all brands.
  - matrix:
      - { os: linux, arch: amd64 }
      - { os: linux, arch: arm64 }
    dockerfile: ./apps/web/Dockerfile
    context: .
    image: ghcr.io/luxfi/wallet-web
    tag-pattern: "{{git.sha}}"
    push: true