CI/CD Integration

name: EdgeGate AI Test

on:
  pull_request:
    branches: [main]
  push:
    branches: [main]

permissions:
  contents: read
  pull-requests: write
  issues: write
  checks: write

jobs:
  edgegate-test:
    name: EdgeGate AI Performance Test
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Run EdgeGate Test
        uses: actions/github-script@v7
        env:
          WORKSPACE_ID: ${{ secrets.EDGEGATE_WORKSPACE_ID }}
          API_SECRET: ${{ secrets.EDGEGATE_API_SECRET }}
          PIPELINE_ID: ${{ secrets.EDGEGATE_PIPELINE_ID }}
          MODEL_ARTIFACT_ID: ${{ secrets.EDGEGATE_MODEL_ARTIFACT_ID }}
          EDGEGATE_API_URL: https://edgegateapi.frozo.ai
        with:
          script: |
            const crypto = require('crypto');

            const timestamp = new Date().toISOString();
            const nonce = crypto.randomUUID();
            const body = JSON.stringify({
              pipeline_id: process.env.PIPELINE_ID,
              model_artifact_id: process.env.MODEL_ARTIFACT_ID,
              commit_sha: context.sha,
              branch: context.ref,
              pull_request: context.payload.pull_request?.number
            });

            const message = timestamp + '\n' + nonce + '\n' + body;
            const signature = crypto
              .createHmac('sha256', process.env.API_SECRET)
              .update(message)
              .digest('hex');

            const response = await fetch(
              process.env.EDGEGATE_API_URL + '/v1/ci/github/run',
              {
                method: 'POST',
                headers: {
                  'Content-Type': 'application/json',
                  'X-EdgeGate-Workspace': process.env.WORKSPACE_ID,
                  'X-EdgeGate-Timestamp': timestamp,
                  'X-EdgeGate-Nonce': nonce,
                  'X-EdgeGate-Signature': signature,
                },
                body: body,
              }
            );

            const result = await response.json();
            console.log('EdgeGate response:', JSON.stringify(result, null, 2));

            if (!response.ok) {
              core.setFailed('EdgeGate test failed: ' + result.detail);
            } else {
              core.info('Run queued: ' + result.run_id);
            }

name: EdgeGate AI Test
on:
  pull_request:
    branches: [main]

jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: ./.github/actions/edgegate
        with:
          workspace-id: ${{ secrets.EDGEGATE_WORKSPACE_ID }}
          api-secret:   ${{ secrets.EDGEGATE_API_SECRET }}
          pipeline-id:  ${{ secrets.EDGEGATE_PIPELINE_ID }}
          # model-artifact-id intentionally omitted — matrix is on the pipeline

name: EdgeGate Regression Test
on:
  pull_request:
    branches: [main]

jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Build model
        run: python scripts/build_model.py --out build/model.onnx
      - uses: ./.github/actions/edgegate
        with:
          workspace-id:           ${{ secrets.EDGEGATE_WORKSPACE_ID }}
          api-secret:             ${{ secrets.EDGEGATE_API_SECRET }}
          pipeline-id:            ${{ secrets.EDGEGATE_PIPELINE_ID }}
          model-path:             build/model.onnx
          baseline-artifact-ids:  ${{ secrets.EDGEGATE_BASELINE_IDS }}
          model-label:            ${{ github.sha }}
      # ↑ Action does: upload model.onnx → POST /v1/ci/github/upload-artifact
      #               replace matrix → POST /v1/ci/github/pipelines/{id}/matrix
      #                                   (fresh + baseline1 + baseline2 ...)
      #               trigger run → POST /v1/ci/github/run

gates:
  - metric: inference_time_ms
    operator: lte
    threshold: 1.0       # Inference ≤ 1.0ms
  - metric: peak_memory_mb
    operator: lte
    threshold: 150.0     # Peak memory ≤ 150MB

# Message format: timestamp + newline + nonce + newline + body
# For POST requests (with body):
MESSAGE=$(printf '%s\n%s\n%s' "$TIMESTAMP" "$NONCE" "$BODY")
SIGNATURE=$(printf '%s' "$MESSAGE" | openssl dgst -sha256 -hmac "$SECRET" | awk '{print $2}')

# For GET requests (no body):
MESSAGE=$(printf '%s\n%s\n' "$TIMESTAMP" "$NONCE")
SIGNATURE=$(printf '%s' "$MESSAGE" | openssl dgst -sha256 -hmac "$SECRET" | awk '{print $2}')