name: Engram CI — stage

on:
  push:
    branches:
      - stage
  pull_request:
    branches:
      - stage

jobs:
  build-and-test:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Enforce source branch (stage ← dev only)
        if: github.event_name == 'pull_request'
        run: |
          SOURCE="${GITHUB_HEAD_REF}"
          if [ "${SOURCE}" != "dev" ]; then
            echo "ERROR: Stage branch only accepts PRs from 'dev'. Source was: '${SOURCE}'"
            exit 1
          fi
          echo "Source branch check passed: ${SOURCE} → stage"

      - name: Install build dependencies
        run: |
          apt-get update -qq
          apt-get install -y gcc libcurl4-openssl-dev

      # Install El SDK from stage artifact registry
      - name: Install El SDK from stage registry
        env:
          GCP_SA_KEY: ${{ secrets.GCP_SA_KEY }}
        run: |
          echo "${GCP_SA_KEY}" > /tmp/gcp-key.json
          apt-get install -y -qq apt-transport-https ca-certificates gnupg curl
          curl -fsSL https://packages.cloud.google.com/apt/doc/apt-key.gpg | gpg --dearmor -o /usr/share/keyrings/cloud.google.gpg
          echo "deb [signed-by=/usr/share/keyrings/cloud.google.gpg] https://packages.cloud.google.com/apt cloud-sdk main" > /etc/apt/sources.list.d/google-cloud-sdk.list
          apt-get update -qq && apt-get install -y google-cloud-cli
          gcloud auth activate-service-account --key-file=/tmp/gcp-key.json
          gcloud config set project neuron-785695

          mkdir -p /usr/local/bin /usr/local/lib/el

          LATEST_VERSION=$(gcloud artifacts versions list \
            --repository=foundation-stage \
            --location=us-central1 \
            --project=neuron-785695 \
            --package=el/elc \
            --format="value(name)" 2>/dev/null | sort | tail -1 | sed 's|.*/||' || true)

          if [ -n "${LATEST_VERSION}" ]; then
            echo "Downloading elc ${LATEST_VERSION} from foundation-stage..."
            gcloud artifacts generic download \
              --repository=foundation-stage \
              --location=us-central1 \
              --project=neuron-785695 \
              --package=el/elc \
              --version="${LATEST_VERSION}" \
              --destination=/usr/local/bin/elc
            chmod +x /usr/local/bin/elc
          else
            echo "No stage artifact found, falling back to Gitea latest release..."
            RELEASE_BASE="https://git.neuralplatform.ai/neuron-technologies/el/releases/download/latest"
            curl -fsSL "${RELEASE_BASE}/elc" -o /usr/local/bin/elc
            chmod +x /usr/local/bin/elc
          fi

          RELEASE_BASE="https://git.neuralplatform.ai/neuron-technologies/el/releases/download/latest"
          curl -fsSL "${RELEASE_BASE}/el_runtime.c" -o /usr/local/lib/el/el_runtime.c
          curl -fsSL "${RELEASE_BASE}/el_runtime.h" -o /usr/local/lib/el/el_runtime.h

          echo "El SDK installed:"
          elc --version || true
          rm -f /tmp/gcp-key.json

      # Compile server.el → dist/engram.c
      - name: Compile server.el
        run: |
          mkdir -p dist
          elc src/server.el > dist/engram.c
          echo "Compiled src/server.el → dist/engram.c"

      # Link to produce the engram binary
      - name: Link engram binary
        run: |
          cc -std=c11 -O2 \
            -I /usr/local/lib/el \
            -o dist/engram \
            dist/engram.c \
            /usr/local/lib/el/el_runtime.c \
            -lcurl -lpthread
          echo "Linked dist/engram"
          ls -lh dist/engram

      # Run tests if spec directory contains runnable tests
      - name: Run tests
        run: |
          if [ -f spec/run.sh ]; then
            bash spec/run.sh
          else
            echo "No spec/run.sh found — skipping test run"
          fi

      # Publish artifact to GCP Artifact Registry (stage)
      - name: Publish engram to Artifact Registry (stage)
        env:
          GCP_SA_KEY: ${{ secrets.GCP_SA_KEY }}
        run: |
          echo "${GCP_SA_KEY}" > /tmp/gcp-key.json
          gcloud auth activate-service-account --key-file=/tmp/gcp-key.json
          gcloud config set project neuron-785695

          VERSION="${GITEA_SHA:0:8}"
          gcloud artifacts generic upload \
            --repository=foundation-stage \
            --location=us-central1 \
            --project=neuron-785695 \
            --package=engram/engram \
            --version="${VERSION}" \
            --source=dist/engram

          echo "Published engram version=${VERSION} to foundation-stage/engram/engram"
          rm -f /tmp/gcp-key.json
