promote: stage → main (elb linker fixes + ci-base rebuild) #39

Closed

will.anderson wants to merge 0 commits from stage into main

pull from: stage

merge into: :main

:main

:stage-elp-native-lang

:docs/operator-naming-convention

:stage-elp-lang-consolidation

:stage-elp-es-port

:engram-tiered-storage

:dev

:engram-persistence-integrity

:feat/engram-reseed-route

:feat/el-route-decorators

:test/dev-ci-baseline

:fix/cgi-identity-emission-clean

:fix/cgi-identity-emission

:feat/AddingReadme

:stage

:reconcile/el-cluster-windows-runtime

:fix/durable-response-truncation

:fix/engram-lexical-tokenized-search

:fix/http-fs-read-len

:hotfix/ci-stage-main-publish-hardening

:hotfix/ci-dev-publish-hardening

:hotfix/stage-elc-engram-integration

:feat/ranked-engram-search

:hotfix/win-runtime-portability

:hotfix/runtime-engram-get-node-by-label

:feat/engram-semantic-search

:hotfix/elc-fixes

:hotfix/el-runtime-leak-and-persist

:integrate/local-main-commits

:fix/runtime-load-merge-2026-06-30

:fix/windows-rusage-guard

:fix/http-response-truncation

:salvage/tim-wip-presync-20260625

:feat/windows-el-runtime

:feat/accumulation-layer

:fix/runtime-integrity-reconcile

:fix/engram-save-atomic-darwin

:chore/live-darwin-runtime

:feat/wm-api-and-http-serve-async

:fix/engram-node-full-field-corruption

:fix/llm-model-and-utf8

:fix/elb-monolithic-link

:fix/ci-gcloud-install-order

:fix/native-test-precompile-runtime

:fix/ci-base-dev-first-run

:fix/elc-parser-elb-build

:fix/elc-oom-checkout

:fix/css-str-join-separator

:fix/html-template-if-style-script

:fix/elb-gcc-bracket-depth

:fix/ci-openssl-linker

:feat/ci-hook-test

:feat/native-testing

:runtime/integrate

:fix/http-serve-1-arg-compat

:feat/el-html-templates

:feat/js-browser-runtime

Conversation 0 Commits - Files Changed -

+780 -18707

will.anderson commented 2026-05-07 08:11:45 +00:00

Owner

Copy Link

Copy Source

Includes all three fixes: ci-base rebuild on release (#31), clang -fbracket-depth detection (#34), -lssl -lcrypto OpenSSL flags (#37). Merging triggers sdk-release.yaml → rebuilds ci-base:latest.

Includes all three fixes: ci-base rebuild on release (#31), clang -fbracket-depth detection (#34), -lssl -lcrypto OpenSSL flags (#37). Merging triggers sdk-release.yaml → rebuilds ci-base:latest.

will.anderson added 53 commits 2026-05-07 08:11:46 +00:00

dist: add linux/amd64 binaries and el_runtime.js a54797ebfe

Merge pull request 'ci: fix gen2/gen3 gcc flags and step name formatting' (#1) from fix/ci-workflow-flags into dev c4a569f29b

Merge pull request 'feat: port el-ui vessels — rename crates→vessels, add El source + manifests' (#2) from feat/el-ui-html-emit into dev 607d5661d8

Merge branch 'main' into dev 17e204ff2b

Restructure CI/CD into proper dev -> stage -> main gated pipeline ... 6b0a77a1dd

- ci-dev.yaml: push to dev only (remove stale PR trigger)
- ci-stage.yaml: PR from dev validates, push to stage publishes to foundation-stage;
  add -lm/-Wl,--allow-multiple-definition flags and all 9 native --test suites
- sdk-release.yaml: add PR to main trigger for validation, gate publish/release/dispatch
  on push (post-merge) only; add -lm flags and all 9 native --test suites to main as well

ci-dev: add PR trigger, gate publish on push (post-merge only) 19a7430ff8

ci: trigger test run 1b9bc049de

fix: add -lssl -lcrypto to all CI gcc linker commands ... af66cebfd3

el_runtime.c now uses OpenSSL EVP AEAD encryption; all gcc commands
in all three workflow files need -lssl -lcrypto to link correctly.

fix: use elc-cli.el as gen3 entry point, not compiler.el directly ... 95b6fac094

compiler.el imports lexer.el/parser.el/codegen.el with bare names; those
resolve relative to the source file's directory only when the entry point
is elc-cli.el (which imports el-compiler/src/compiler.el by full path).
Compiling compiler.el directly leaves lex/parse/codegen as undefined refs.

fix: add -lssl -lcrypto -lm to all test runner gcc commands ... 702093e043

Same OpenSSL/math linker flags needed everywhere el_runtime.c is linked.

fix: use elc-linux-amd64 as bootstrap seed instead of elc-bootstrap.c ... ec9c322cc7

elc-bootstrap.c is stale and produces a broken gen2 that can't correctly
compile current El source (generates C without main() for user programs).
The committed elc-linux-amd64 binary is the current, correct seed for
linux CI. This removes the gen2-from-C step entirely.

fix: normalize NaN to 'nan' in float_to_str regardless of sign bit ... 8b074d2e39

0.0/0.0 can produce -nan on Linux/x86_64 (%g gives '-nan'),
causing the no-cycle calendar test to fail. Explicitly check isnan()
and emit 'nan' so behavior is platform-independent.

Merge pull request 'fix: add -lssl -lcrypto to all CI gcc linker commands' (#6) from fix/ci-openssl-linker into dev 9862f4d6e1

fix: add --batch to gpg --dearmor in publish steps ... dca741f915

gpg tries to open /dev/tty for passphrase input when no TTY is present
in CI, causing the GCP key setup to fail. --batch suppresses interactive
prompts and dearmoring doesn't require one anyway.

Merge pull request 'fix: add --batch to gpg --dearmor in CI publish steps' (#7) from fix/ci-openssl-linker into dev d2940f5d1d

fix: download GCP apt key directly, no gpg --dearmor ... 7fd01b8a8d

packages.cloud.google.com now serves the key in binary format; piping
through gpg --dearmor fails with 'no valid OpenPGP data found'.

Merge pull request 'fix: download GCP apt key directly without gpg --dearmor' (#8) from fix/ci-openssl-linker into dev f2741e4bdb

fix: use trusted=yes for gcloud apt source, drop GPG key dance ... 0b50e61f98

The packages.cloud.google.com key format has changed and signature
verification keeps failing in CI. trusted=yes bypasses the ceremony —
we're downloading from a known Google URL so it's fine.

Merge pull request 'fix: use trusted=yes for gcloud apt source, drop GPG key dance' (#9) from fix/ci-openssl-linker into dev e93c899d1f

fix: use valid Artifact Registry package IDs (no slashes) ... 9c350e9f2f

Package IDs must contain only letters, numbers, periods, hyphens and
underscores. el/elc → el-elc, el/el_runtime.c → el-runtime-c, etc.

Merge pull request 'fix: use valid Artifact Registry package IDs (no slashes)' (#10) from fix/ci-openssl-linker into dev f7953eb73a

fix: use GITHUB_SHA instead of GITEA_SHA for artifact version ... 0ab9361fab

GITEA_SHA is not set in the runner container environment; GITHUB_SHA is.
Empty version string caused INVALID_ARGUMENT from Artifact Registry.

Merge pull request 'fix: use GITHUB_SHA for artifact version' (#11) from fix/ci-openssl-linker into dev a79b421578

fix: use GIT_TOKEN secret (GITEA_ prefix is reserved) b0570656b1

Merge pull request 'fix: use GIT_TOKEN secret in sdk-release.yaml' (#13) from fix/ci-openssl-linker into dev 77100649c3

Merge pull request 'promote: dev → stage' (#12) from dev into stage e7e0f7d3e5

fix: add missing runtime functions for epm.el ... 54de7d3f3f

Add native_str_to_int (El compiler alias for str_to_int) and
http_post_json_with_headers (JSON POST with additional headers map)
which epm.el generates calls to but were absent from el_runtime.c.

Merge pull request 'fix: add missing runtime functions (native_str_to_int, http_post_json_with_headers)' (#15) from fix/ci-openssl-linker into dev 231cb5eddd

Merge pull request 'promote: dev → stage (runtime fix)' (#16) from dev into stage f0c731d2db

fix: align runtime function return types with El compiler output ... 60ad7f2f6b

El compiler generates calls to println, print, exit_program,
http_set_handler, http_serve, http_set_handler_v2, and http_serve_v2
as el_val_t-returning functions. The runtime declared them void,
causing conflicting-type errors when el-install.c was compiled.

Change all seven to return el_val_t (side-effect functions return 0).
Also update el_runtime.h declarations to match.

Merge pull request 'fix: align runtime return types with El compiler output' (#18) from fix/ci-openssl-linker into dev bcfb33ea83

Merge pull request 'promote: dev → stage (return type fix)' (#19) from dev into stage 17b1aa0736

fix: add __-prefixed runtime primitives expected by El compiler ... 254cbe0ac2

The El compiler generates calls to __-prefixed C primitives from within
El stdlib compiled code (e.g. __println, __str_len, __json_get, etc).
These were absent from el_runtime.c, causing linker failures when
building el-install, elb, or epm with the current compiler.

Add 46 __-prefixed aliases/implementations in el_runtime.c covering:
- I/O: __println, __print, __readline
- String: __str_len, __str_cmp, __str_ncmp, __str_alloc, __str_set_char,
  __str_concat_raw, __str_slice_raw, __str_char_at, plus numeric converters
- FS: __fs_read, __fs_write, __fs_exists, __fs_mkdir, __fs_list_raw, etc
- HTTP: __http_do, __http_do_map, __http_serve, __http_serve_v2,
  __http_response, __http_sse_* (weak stubs)
- JSON: __json_get, __json_set, __json_parse_map, __json_stringify_val, etc
- State, env, exec, uuid, sha256, args

Merge pull request 'fix: add __-prefixed runtime primitives for El compiler' (#21) from fix/ci-openssl-linker into dev 2fd298df55

Merge pull request 'promote: dev → stage (__-prefixed runtime fix)' (#22) from dev into stage 979a5677d5

fix: add __http_do_map_to_file runtime primitive ... 61bf501b84

el-install.el generates calls to __http_do_map_to_file (HTTP request
with JSON headers map, streaming response to file). Add it to both
the HAVE_CURL implementation and the no-curl stub section.

Merge pull request 'fix: add __http_do_map_to_file runtime primitive' (#24) from fix/ci-openssl-linker into dev f1dfc394e3

Merge pull request 'promote: dev → stage (__http_do_map_to_file)' (#25) from dev into stage 3e29fc43ab

ci: use elb to build epm and el-install (cd into project dir, use --elc flag) 94d6eace94

Merge pull request 'ci: use elb to build epm and el-install' (#27) from fix/ci-openssl-linker into dev ... b19dd5608f

ci: use elb to build epm and el-install

Merge pull request 'promote: dev → stage (elb build fix)' (#28) from dev into stage ... fd208583fe

promote: dev → stage (elb build fix)

Remove Cargo.toml files from el-ui — vessels use manifest.el ... e8b01583d8

All package management is through manifest.el / epm. Cargo.toml files
were incorrectly added to vessels and the root. Removed root workspace
Cargo.toml + Cargo.lock and all vessel-level Cargo.toml files.

el-graph and el-html were already correct (no Cargo.toml).

Remove all .rs bootstrap files from el-ui vessels ... 5d9299a472

el-ui vessels are El. The Rust bootstrap implementations were added as
a stopgap but don't belong here — everything should be El source.
Each vessel's src/main.el and manifest.el are the source of truth.

Merge pull request 'Remove Cargo.toml and .rs bootstrap files from el-ui vessels' (#30) from fix/ci-openssl-linker into dev 2e529bd0fe

ci: rebuild ci-base on SDK release; publish elb + el_runtime.js to Artifact Registry ... edbde5ef51

- sdk-release.yaml: add elb and el_runtime.js to foundation-prod uploads
- sdk-release.yaml: add 'Rebuild ci-base' step — patches ci-base:latest with
  freshly built El SDK after each main branch release (pull → overlay → push)
- sdk-release.yaml: add neuron-web to el-sdk-updated dispatch so downstream
  CI rebuilds automatically on SDK update
- ci-dev.yaml: add elb build step and publish elb + el_runtime.js to
  foundation-dev alongside elc and runtime

Merge pull request 'ci: rebuild ci-base on SDK release; publish elb + el_runtime.js to Artifact Registry' (#31) from fix/ci-openssl-linker into dev ... 908ce303f3

ci: rebuild ci-base on SDK release; publish elb + el_runtime.js to Artifact Registry

Merge pull request 'promote: dev → stage (CI rebuild fix + ci-base refresh)' (#32) from dev into stage ... c0553459e1

promote: dev → stage (CI rebuild fix + ci-base refresh)

fix(elb): use clang-only -fbracket-depth flag conditionally ... 6f634ae432

gcc rejects -fbracket-depth=1024 with 'unrecognized command-line option'.
Use shell subshell to probe cc --version and only pass the flag when
the compiler is clang.

Merge pull request 'fix(elb): use clang-only -fbracket-depth flag conditionally' (#34) from fix/elb-gcc-bracket-depth into dev ... b0d0975f05

fix(elb): use clang-only -fbracket-depth flag conditionally

Merge pull request 'promote: dev → stage (elb gcc fix)' (#35) from dev into stage ... 9c7bde47dc

promote: dev → stage (elb gcc fix)

fix(elb): add -lssl -lcrypto to link_binary flags ... 05d717744b

el_runtime.c uses OpenSSL (EVP_*, RAND_bytes) for AEAD encrypt/decrypt.
elb was only linking -lcurl -lpthread -lm, missing the SSL libs.
Matches the explicit flags used in ci-dev.yaml and ci-stage.yaml.

Merge pull request 'fix(elb): add -lssl -lcrypto to link_binary flags' (#37) from fix/elb-gcc-bracket-depth into dev ... 8ab8e3fd31

fix(elb): add -lssl -lcrypto to link_binary flags

Merge pull request 'promote: dev → stage (elb linker fixes)' (#38) from dev into stage ... 8fa9c4ba20

promote: dev → stage (elb linker fixes)

will.anderson closed this pull request 2026-05-07 14:20:56 +00:00

Pull request closed

Please reopen this pull request to perform a merge.

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

BETA-CRITICAL

On the beta critical path — must resolve before ship

HELD

Blocked pending an external decision (counsel / dual sign-off)

ORTHOGONAL

Parallel workstream (testing/hardening) — safe to assign off critical path

POST-BETA

Important but not blocking the beta ship

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

andre.almeida (Andre Almeida) tim.lingo (Tim Lingo) will.anderson (Will Anderson)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: neuron-technologies/el#39