Expand Compose capabilities and image management

[Copilot]

This PR advances the first two improvement areas: broader Docker Compose support and stronger image/registry workflows. It adds profile-aware parsing, service attachments, secure registry authentication, and configurable image builds.

• Compose engine

  • Adds profile filtering during parsing.
  • Supports service-level secrets and configs.
  • Validates references to undefined attachments.
  • Extends parser coverage for profiles and attachments.

• Image management

  • Adds secure OCI registry login using password stdin.
  • Supports Dockerfile/Containerfile builds with tags and build arguments.
  • Adds build-cache control.
  • Improves stdin handling in ProcessRunner.
  • Preserves existing push and tag operations.

Example:

try await imageService.login(
    registry: "registry.example.com",
    username: "developer",
    password: password
)

try await imageService.build(
    context: projectDirectory,
    dockerfile: "Dockerfile",
    tags: ["registry.example.com/app:latest"],
    buildArgs: ["BUILD_ENV": "production"],
    useCache: true
)

[Copilot]

Pull request overview

This PR expands the ComposeEngine parser to support profile-aware service filtering and service-level secrets/configs attachments (including validation), and extends the ContainerBackend to support secure registry login via stdin and image builds via the container CLI.

Changes:

• Add profiles filtering to ComposeParser.parse(...) and validate referenced secrets/configs.
• Extend Compose models to decode secrets/configs on services and add tests covering profiles + attachments.
• Add registry login using --password-stdin, image build support, and stdin support in ProcessRunner.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
Tests/ComposeEngineTests/ComposeEngineTests.swift	Adds coverage for profiles + service attachments in parsing/validation.
Sources/ContainerBackend/ProcessRunner.swift	Adds optional stdin support for CLI invocations.
Sources/ContainerBackend/ImageService.swift	Adds registry login via stdin and introduces an image build API.
Sources/ComposeEngine/Models/ComposeModels.swift	Adds secrets/configs fields to ServiceConfig decoding/model.
Sources/ComposeEngine/ComposeParser.swift	Adds profile filtering and validates secret/config references.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[djpfs]

resolve the comments

[Copilot]

resolve the comments

All review comments have been addressed in the latest commit:

• login formatting — fixed indentation and consistent error message formatting to match the rest of ImageService.
• build API — updated to use tags: [String] and useCache: Bool = true, matching the PR description example.
• ProcessRunner stdin — moved the standardInput write to a Task.detached block, consistent with how stdout/stderr are read, preserving the non-blocking guarantee.
• Doc comments — added /// Named secrets... and /// Named configs... doc comments to the new ComposeModels fields.
• Validation tests — added testUndefinedSecretThrowsError and testUndefinedConfigThrowsError covering the new unknownSecret/unknownConfig error cases.