ci.yml

name: ci

on:
  push:
    branches: [main]
  pull_request:

jobs:
  test:
    name: test + lint (full offline stack)
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        python-version: ["3.10", "3.11", "3.12"]
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: ${{ matrix.python-version }}
      - name: Install (core + server/mcp/code extras; no torch — the offline gate)
        run: |
          python -m pip install --upgrade pip
          pip install -e ".[test]"
      - name: Lint (ruff)
        run: ruff check .
      - name: Unit tests (full suite — extras-gated tests included)
        run: python -m pytest tests/ -q
      - name: Retrieval eval gate
        run: python -m eval.harness --dataset eval/datasets/sample.jsonl --k 5
      - name: Retrieval eval gate — CodeMem (coding-agent wedge, incl. conflict resolution)
        run: python -m eval.harness --dataset eval/datasets/codemem.jsonl --k 5
      - name: Ablation (vector-only vs hybrid)
        run: python -m eval.ablation

  core-py39:
    name: core floor (numpy-only, Python 3.9)
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: "3.9"
      - name: Install (numpy-only core — the minimum supported runtime)
        run: |
          python -m pip install --upgrade pip
          pip install numpy pytest
      - name: Unit tests (extras-gated tests skip; the core must pass)
        run: python -m pytest tests/ -q
      - name: Retrieval eval gate
        run: python -m eval.harness --dataset eval/datasets/sample.jsonl --k 5
      - name: Ablation
        run: python -m eval.ablation

  docker-gate:
    # Keeps CI fast: the docker job always runs on push to main, but on PRs only
    # when image-relevant paths changed (Dockerfile, engraphis/**, scripts/**,
    # pyproject.toml, or this workflow). No third-party actions — plain git diff.
    name: docker smoke — path gate
    runs-on: ubuntu-latest
    outputs:
      run: ${{ steps.decide.outputs.run }}
    steps:
      - uses: actions/checkout@v7
        with:
          fetch-depth: 0
      - id: decide
        run: |
          if [ "${{ github.event_name }}" != "pull_request" ]; then
            echo "run=true" >> "$GITHUB_OUTPUT"
          elif git diff --name-only "${{ github.event.pull_request.base.sha }}" "${{ github.sha }}" \
              | grep -qE '^(Dockerfile|\.dockerignore|engraphis/|scripts/|pyproject\.toml|\.github/workflows/ci\.yml)'; then
            echo "run=true" >> "$GITHUB_OUTPUT"
          else
            echo "run=false" >> "$GITHUB_OUTPUT"
          fi

  docker-smoke:
    name: docker build + health smoke
    runs-on: ubuntu-latest
    needs: docker-gate
    if: needs.docker-gate.outputs.run == 'true'
    steps:
      - uses: actions/checkout@v7
      - name: Build image
        run: docker build -t engraphis:ci .
      - name: Run container (offline deterministic embedder — no model downloads)
        run: |
          docker run -d --name engraphis -p 8700:8700 \
            -e ENGRAPHIS_EMBED_MODEL= \
            -e ENGRAPHIS_LOOP_INTERVAL=0 \
            engraphis:ci
      - name: Wait for /api/health, then check /api/ready
        run: |
          for i in $(seq 1 60); do
            code=$(curl -s -o /dev/null -w '%{http_code}' http://127.0.0.1:8700/api/health || true)
            if [ "$code" = "200" ]; then
              echo "healthy after ~${i}s"
              curl -fsS http://127.0.0.1:8700/api/ready
              exit 0
            fi
            sleep 1
          done
          echo "server never became healthy"
          docker logs engraphis
          exit 1
      - name: Teardown
        if: always()
        run: docker rm -f engraphis

  build:
    name: build + install wheel
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: "3.11"
      - name: Build sdist + wheel and verify a clean install
        run: |
          python -m pip install --upgrade pip build
          python -m build
          pip install dist/*.whl
          python -c "import engraphis; print('wheel import OK')"