ci/image: downstream of build via workflow_run; manifest-driven URLs

[widgetii]

Summary

PR-F (final) of six in the nightly-build redesign. image.yml flips from a standalone cron at 23:30 UTC to triggering on build.yml's workflow_run completion, and resolves firmware URLs via the gh-pages manifest instead of hardcoding releases/download/latest.

Changes

• Trigger: drop the independent 23:30 UTC cron; trigger via workflow_run on build.yml + workflow_dispatch as before.
• Partial-failure tolerance (matches ci/manifest: publish on partial failure; fix built_at=; extend retry budget #2115): run on success OR failure, only skip cancelled. Missing firmware tgzs for a particular platform become silent skips inside create().
• New optional input build_id (default: channels.nightly from the gh-pages manifest). Lets workflow_dispatch assemble flash images for any historic dated nightly without code changes — useful for recovering an older known-good image after a bisect identifies a regression.
• Manifest-driven URL resolution for firmware tgzs via jq against manifest.json. Returns empty for missing platforms; the existing create() skip-on-empty path handles that cleanly (matches pre-PR behaviour for boards the build matrix doesn't cover, e.g. ssc325_ultimate, t10_ultimate).
• U-Boot binaries unchanged — still come from releases/download/latest/u-boot-<board>-nor.bin because uboot.yml uploads to the latest tag and U-Boot has its own (manual) build cadence, not coupled to the nightly firmware cycle.

Verified locally

jq resolution against the live manifest:

  ssc335_lite: openipc.ssc335-nor-lite.tgz
  ssc335_ultimate: openipc.ssc335-nor-ultimate.tgz
  ssc325_ultimate: <not in manifest — skip>
  t31_lite: openipc.t31-nor-lite.tgz
  t31_ultimate: openipc.t31-nor-ultimate.tgz
  v851s_lite: openipc.v851s-nor-lite.tgz
  t10_ultimate: <not in manifest — skip>

Test plan

• CI passes on this PR.
• After merge, dispatch image.yml manually with no inputs — assembles images for the current channels.nightly.
• Dispatch with build_id=nightly-20260520-887328c — assembles for that specific historic build.
• Tonight's cron: build.yml completes → manifest.yml and image.yml both fire via workflow_run and both produce fresh artifacts.

What this completes

With this merge the original plan in .claude/plans/let-s-think-about-how-fizzy-bubble.md is fully implemented. The full PR chain across the redesign:

• ci/nightly: SHA-gate cron, publish dated nightly-* releases, BUILD_ID in os-release #2111 — SHA-gate cron, dated nightly-YYYYMMDD-<short> releases, BUILD_ID in os-release
• ci/nightly: manifest aggregator + 90-build retention sweep #2112 — manifest aggregator + 90-build retention sweep
• ci/manifest: pass --repo to gh so script doesn't need cwd .git #2113 — gh --repo flag (hotfix)
• sysupgrade: read manifest, learn --channel/--build/--list-builds (1.0.50) #2114 — sysupgrade learns --channel/--build/--list-builds (1.0.50)
• ci/manifest: publish on partial failure; fix built_at=; extend retry budget #2115 — partial-failure publication; built_at= fix; retry budget
• ci/build-one: accept arbitrary commit input; publish to nightly-bisect-* tag #2116 — build-one.yml accepts arbitrary commit input
• contrib: openipc-bisect — host-side firmware bisect driver #2117 — host-side contrib/openipc-bisect
• #this — image.yml downstream of build.yml

🤖 Generated with Claude Code