Flexion - Custom Implementations Tracker

.github/pull_request_template.md

@@ -10,8 +10,15 @@
 
 This is to ensure large feature PRs are discussed with the community first, before starting work on it. If the community does not want this feature or it is not relevant for Open WebUI as a project, it can be identified in the discussion before working on the feature and submitting the PR.
 
+<!--
+### ⚠️ Important: Your PR is a contribution, not a guarantee of merge.
+
+The most impactful way to contribute to Open WebUI is through well-written bug reports, detailed feature discussions, and thoughtful ideas. These directly shape the project. If you do open a pull request, please know that Open WebUI is held to the highest standard of code quality, consistency, and architectural coherence, and every line merged becomes something the core team must own, maintain, and support indefinitely. Submitted code may be refactored, rewritten, or used as inspiration for a different implementation. This is not a reflection of your work's quality. It is how we ensure that a small team can deeply understand and evolve every part of the codebase.
+-->
+
 **Before submitting, make sure you've checked the following:**
 
+- [ ] **Linked Issue/Discussion:** This PR references an existing [Issue](https://github.com/open-webui/open-webui/issues) or [Discussion](https://github.com/open-webui/open-webui/discussions) — `Closes #___` / `Relates to #___`. If one does not exist, create one first. PRs without a linked issue or discussion may be closed without review.
 - [ ] **Target branch:** Verify that the pull request targets the `dev` branch. **PRs targeting `main` will be immediately closed.**
 - [ ] **Description:** Provide a concise description of the changes made in this pull request down below.
 - [ ] **Changelog:** Ensure a changelog entry following the format of [Keep a Changelog](https://keepachangelog.com/) is added at the bottom of the PR description.

.github/workflows/format-backend.yaml → .github/workflows/format-backend.yaml.disabled

@@ -40,10 +40,7 @@ jobs:
       - name: Install dependencies
         run: |
           python -m pip install --upgrade pip
-          pip install black
+          pip install "ruff>=0.15.5"
 
-      - name: Format backend
-        run: npm run format:backend
-
-      - name: Check for changes after format
-        run: git diff --exit-code
+      - name: Ruff format check
+        run: ruff format --check . --exclude .venv --exclude venv

.github/workflows/publish-flex-image.yml

@@ -0,0 +1,83 @@
+name: Publish flex image to ECR
+
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'Version tag for ECR (e.g. v0.9.6). Use the upstream release tag verbatim — keep the 0. prefix.'
+        required: true
+        type: string
+      environment:
+        description: 'Target environment'
+        required: true
+        type: choice
+        options:
+          - dev
+          - prod
+        default: dev
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  publish:
+    name: Build flex@${{ github.sha }} → open-webui-${{ inputs.environment }}:${{ inputs.version }}
+    # ARM-native runner — matches Fargate ARM target, no QEMU emulation needed.
+    runs-on: ubuntu-24.04-arm
+    env:
+      AWS_REGION: ${{ secrets.AWS_REGION }}
+      REPOSITORY: open-webui-${{ inputs.environment }}
+    steps:
+      - uses: actions/checkout@v6
+
+      - uses: aws-actions/configure-aws-credentials@v6
+        with:
+          role-to-assume: ${{ inputs.environment == 'prod' && secrets.AWS_ROLE_ARN_PROD || secrets.AWS_ROLE_ARN_DEV }}
+          aws-region: ${{ env.AWS_REGION }}
+
+      - uses: docker/setup-buildx-action@v4
+
+      - id: ecr
+        uses: aws-actions/amazon-ecr-login@v2
+
+      - name: Refuse to overwrite an existing tag
+        run: |
+          if aws ecr describe-images \
+              --repository-name "$REPOSITORY" \
+              --region "$AWS_REGION" \
+              --image-ids imageTag="${{ inputs.version }}" \
+              >/dev/null 2>&1; then
+            echo "::error title=Tag exists::${REPOSITORY}:${{ inputs.version }} already exists in ECR. Promotion is intentionally not idempotent — delete the existing tag manually or pick a different version."
+            exit 1
+          fi
+
+      - name: Build and push (linux/arm64)
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          platforms: linux/arm64
+          push: true
+          tags: ${{ steps.ecr.outputs.registry }}/${{ env.REPOSITORY }}:${{ inputs.version }}
+          build-args: |
+            BUILD_HASH=${{ github.sha }}
+            USE_PERMISSION_HARDENING=false
+
+      - name: Show pushed image
+        run: |
+          aws ecr describe-images \
+            --repository-name "$REPOSITORY" \
+            --region "$AWS_REGION" \
+            --image-ids imageTag="${{ inputs.version }}" \
+            --query 'imageDetails[0].{Digest:imageDigest,Tags:imageTags,Pushed:imagePushedAt,SizeBytes:imageSizeInBytes}' \
+            --output table
+
+      - name: Next-step reminder
+        run: |
+          cat <<EOF
+          ::notice title=Next step::Image is in ECR but not deployed yet. Open a PR
+          in flexion/flexion-open-webui-infra changing imageTag in
+          cdk-infra/lib/cdk-infra-stack.ts to '${{ inputs.version }}' (and update
+          the matching assertion in cdk-infra/test/cdk-infra.test.ts). Merge to deploy.
+          See docs/UPGRADING.md in the infra repo.
+          EOF