el/engram/.gitea/workflows/engram-release.yaml

name: Engram Release

on:
  push:
    branches:
      - main
  repository_dispatch:
    types:
      - el-sdk-updated

jobs:
  build-and-release:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Enforce source branch (main ← stage only)
        if: github.event_name == 'pull_request'
        run: |
          SOURCE="${GITHUB_HEAD_REF}"
          if [ "${SOURCE}" != "stage" ]; then
            echo "ERROR: Main branch only accepts PRs from 'stage'. Source was: '${SOURCE}'"
            exit 1
          fi
          echo "Source branch check passed: ${SOURCE} → main"

      - name: Install build dependencies
        run: |
          apt-get update -qq
          apt-get install -y gcc libcurl4-openssl-dev

      # Install El SDK from the latest release
      - name: Install El SDK
        env:
          GITEA_API: https://git.neuralplatform.ai/api/v1
          RELEASE_BASE: https://git.neuralplatform.ai/neuron-technologies/el/releases/download/latest
        run: |
          mkdir -p /usr/local/bin /usr/local/lib/el

          echo "Downloading elc..."
          curl -fsSL "${RELEASE_BASE}/elc" -o /usr/local/bin/elc
          chmod +x /usr/local/bin/elc

          echo "Downloading el_runtime.c..."
          curl -fsSL "${RELEASE_BASE}/el_runtime.c" -o /usr/local/lib/el/el_runtime.c

          echo "Downloading el_runtime.h..."
          curl -fsSL "${RELEASE_BASE}/el_runtime.h" -o /usr/local/lib/el/el_runtime.h

          echo "El SDK installed:"
          elc --version || true

      # Compile server.el → dist/engram.c
      - name: Compile server.el
        run: |
          mkdir -p dist
          elc src/server.el > dist/engram.c
          echo "Compiled src/server.el → dist/engram.c"

      # Link to produce the engram binary
      - name: Link engram binary
        run: |
          cc -std=c11 -O2 \
            -I /usr/local/lib/el \
            -o dist/engram \
            dist/engram.c \
            /usr/local/lib/el/el_runtime.c \
            -lcurl -lpthread
          echo "Linked dist/engram"
          ls -lh dist/engram

      # Publish / update the `latest` release
      - name: Publish latest release
        env:
          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
          GITEA_API: https://git.neuralplatform.ai/api/v1
          REPO: neuron-technologies/engram
        run: |
          # Delete existing `latest` release if present
          EXISTING_ID=$(curl -sf \
            -H "Authorization: token ${GITEA_TOKEN}" \
            "${GITEA_API}/repos/${REPO}/releases/tags/latest" \
            | python3 -c "import sys,json; d=json.load(sys.stdin); print(d['id'])" 2>/dev/null || true)

          if [ -n "${EXISTING_ID}" ]; then
            echo "Deleting existing release id=${EXISTING_ID}"
            curl -sf -X DELETE \
              -H "Authorization: token ${GITEA_TOKEN}" \
              "${GITEA_API}/repos/${REPO}/releases/${EXISTING_ID}"
          fi

          # Remove stale tag
          curl -sf -X DELETE \
            -H "Authorization: token ${GITEA_TOKEN}" \
            "${GITEA_API}/repos/${REPO}/tags/latest" || true

          # Create new release
          RELEASE_ID=$(curl -sf -X POST \
            -H "Authorization: token ${GITEA_TOKEN}" \
            -H "Content-Type: application/json" \
            "${GITEA_API}/repos/${REPO}/releases" \
            -d "{
              \"tag_name\": \"latest\",
              \"name\": \"Engram (latest)\",
              \"body\": \"Latest Engram build from commit ${GITHUB_SHA}.\nBuilt $(date -u +%Y-%m-%dT%H:%M:%SZ).\",
              \"draft\": false,
              \"prerelease\": false
            }" | python3 -c "import sys,json; print(json.load(sys.stdin)['id'])")

          echo "Created release id=${RELEASE_ID}"

          # Upload engram binary
          echo "Uploading engram binary..."
          curl -sf -X POST \
            -H "Authorization: token ${GITEA_TOKEN}" \
            -F "attachment=@dist/engram;filename=engram" \
            "${GITEA_API}/repos/${REPO}/releases/${RELEASE_ID}/assets"

          echo "Release published successfully"

      # Publish artifact to GCP Artifact Registry (prod)
      - name: Publish engram to Artifact Registry (prod)
        env:
          GCP_SA_KEY: ${{ secrets.GCP_SA_KEY }}
        run: |
          echo "${GCP_SA_KEY}" > /tmp/gcp-key.json
          apt-get install -y -qq apt-transport-https ca-certificates gnupg curl
          curl -fsSL https://packages.cloud.google.com/apt/doc/apt-key.gpg | gpg --dearmor -o /usr/share/keyrings/cloud.google.gpg
          echo "deb [signed-by=/usr/share/keyrings/cloud.google.gpg] https://packages.cloud.google.com/apt cloud-sdk main" > /etc/apt/sources.list.d/google-cloud-sdk.list
          apt-get update -qq && apt-get install -y google-cloud-cli
          gcloud auth activate-service-account --key-file=/tmp/gcp-key.json
          gcloud config set project neuron-785695

          VERSION="${GITEA_SHA:0:8}"
          gcloud artifacts generic upload \
            --repository=foundation-prod \
            --location=us-central1 \
            --project=neuron-785695 \
            --package=engram/engram \
            --version="${VERSION}" \
            --source=dist/engram

          echo "Published engram version=${VERSION} to foundation-prod/engram/engram"
          rm -f /tmp/gcp-key.json

      # Dispatch engram-updated to downstream dependents
      - name: Dispatch engram-updated to elql
        env:
          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
          GITEA_API: https://git.neuralplatform.ai/api/v1
        run: |
          curl -sf -X POST \
            -H "Authorization: token ${GITEA_TOKEN}" \
            -H "Content-Type: application/json" \
            "${GITEA_API}/repos/neuron-technologies/elql/dispatches" \
            -d "{\"type\":\"engram-updated\",\"inputs\":{\"engram_version\":\"latest\",\"commit\":\"${GITHUB_SHA}\"}}"
          echo "Dispatched engram-updated to neuron-technologies/elql"