sync-extension.yml

name: Sync Extension from sentience-chrome

on:
  repository_dispatch:
    types: [extension-updated]
  workflow_dispatch:
    inputs:
      release_tag:
        description: 'Release tag from sentience-chrome (e.g., v1.0.0)'
        required: true
        type: string
  schedule:
    # Check for new releases daily at 2 AM UTC
    - cron: '0 2 * * *'

jobs:
  sync-extension:
    runs-on: ubuntu-latest
    permissions:
      contents: write
      pull-requests: write
      
    steps:
    - name: Checkout sdk-python
      uses: actions/checkout@v4
      with:
        token: ${{ secrets.GITHUB_TOKEN }}
        fetch-depth: 0  # Fetch all history for proper branching
        
    - name: Set up Python
      uses: actions/setup-python@v5
      with:
        python-version: '3.11'
        
    - name: Determine release tag
      id: release
      run: |
        if [ "${{ github.event_name }}" == "workflow_dispatch" ]; then
          TAG="${{ github.event.inputs.release_tag }}"
        elif [ "${{ github.event_name }}" == "repository_dispatch" ]; then
          TAG="${{ github.event.client_payload.release_tag }}"
        else
          # Scheduled check - get latest release
          TAG=$(curl -s -H "Authorization: token ${{ secrets.SENTIENCE_CHROME_TOKEN }}" \
            "https://api.github.com/repos/${{ secrets.SENTIENCE_CHROME_REPO }}/releases/latest" | jq -r '.tag_name // empty')
          
          # Check if we already processed this tag
          if git ls-remote --exit-code --heads origin "sync-extension-$TAG"; then
            echo "Branch for $TAG already exists, skipping."
            echo "skip=true" >> $GITHUB_OUTPUT
            exit 0
          fi
        fi
        
        if [ -z "$TAG" ]; then
          echo "Could not determine release tag."
          exit 1
        fi
        
        echo "Syncing tag: $TAG"
        echo "tag=$TAG" >> $GITHUB_OUTPUT
        
    - name: Download extension files
      if: steps.release.outputs.skip != 'true'
      run: |
        TAG="${{ steps.release.outputs.tag }}"
        REPO="${{ secrets.SENTIENCE_CHROME_REPO }}"
        
        # Setup temp directory
        mkdir -p extension-temp
        cd extension-temp
        
        echo "⬇️ Fetching release info for $TAG from $REPO..."
        
        # Capture response to file for debugging
        # Use -f to fail on HTTP errors (404/403) so we don't parse error HTML
        # We explicitly print the response body on failure for debugging
        HTTP_CODE=$(curl -s -w "%{http_code}" -o release.json \
          -H "Authorization: token ${{ secrets.SENTIENCE_CHROME_TOKEN }}" \
          "https://api.github.com/repos/$REPO/releases/tags/$TAG")
          
        if [ "$HTTP_CODE" != "200" ]; then
          echo "❌ Failed to fetch release info. HTTP Code: $HTTP_CODE"
          echo "Response Body:"
          cat release.json
          exit 1
        fi
          
        # Check if we got a valid release object (sanity check for "Not Found" message)
        if grep -q "Not Found" release.json; then
          echo "❌ Critical Error: Release tag $TAG not found in repo $REPO (API returned 404 message)"
          cat release.json
          exit 1
        fi

        # Robust extraction with safe navigation operator
        # The ? prevents jq from crashing if .assets is missing/null
        ASSET_URL=$(cat release.json | jq -r '.assets[]? | select(.name == "extension-files.tar.gz") | .browser_download_url')
          
        if [ -z "$ASSET_URL" ] || [ "$ASSET_URL" == "null" ]; then
          echo "❌ Critical Error: extension-files.tar.gz not found in release assets!"
          echo "Available assets in release:"
          cat release.json | jq -r '.assets[].name' || echo "No assets found or invalid JSON"
          exit 1
        fi

        # 2. Download the tarball
        echo "📦 Downloading tarball from $ASSET_URL..."
        curl -L -H "Authorization: token ${{ secrets.SENTIENCE_CHROME_TOKEN }}" \
             -H "Accept: application/octet-stream" \
             "$ASSET_URL" -o extension.tar.gz

        # 3. Extract it
        echo "📂 Extracting..."
        tar -xzf extension.tar.gz
        rm extension.tar.gz
        
        # 4. Verify extraction
        echo "✅ Extraction complete. Contents:"
        ls -la
        
        if [ ! -f "manifest.json" ]; then
          echo "❌ Error: manifest.json missing after extraction"
          exit 1
        fi
        
    - name: Update extension files
      if: steps.release.outputs.skip != 'true'
      run: |
        # Target directory in sdk-python (inside the package source)
        TARGET_DIR="sentience/extension"
        
        # Ensure target directory exists and is clean
        # Note: We preserve the directory structure, just update contents
        rm -rf "$TARGET_DIR"
        mkdir -p "$TARGET_DIR"
        
        # Copy files from temp directory
        cp -r extension-temp/* "$TARGET_DIR/"
        
        # Verify copy
        if [ ! -f "$TARGET_DIR/manifest.json" ]; then
          echo "❌ Failed to copy manifest.json to $TARGET_DIR"
          exit 1
        fi
        
        # Cleanup
        rm -rf extension-temp
        
        echo "✅ Extension files updated in $TARGET_DIR"
        ls -la "$TARGET_DIR"
        
    - name: Check for changes
      if: steps.release.outputs.skip != 'true'
      id: changes
      run: |
        git add sentience/extension/
        
        if git diff --staged --quiet; then
          echo "No changes detected."
          echo "changed=false" >> $GITHUB_OUTPUT
        else
          echo "Changes detected."
          echo "changed=true" >> $GITHUB_OUTPUT
          
          # Show staged files
          echo "📊 Staged file sizes:"
          git diff --staged --name-only | while read file; do
            if [ -f "$file" ]; then
              size=$(ls -lh "$file" | awk '{print $5}')
              echo "  $file: $size"
            fi
          done
        fi
        
    - name: Create Pull Request
      if: steps.release.outputs.skip != 'true' && steps.changes.outputs.changed == 'true'
      uses: peter-evans/create-pull-request@v5
      with:
        token: ${{ secrets.PR_TOKEN || secrets.GITHUB_TOKEN }}
        commit-message: "chore: sync extension files from sentience-chrome ${{ steps.release.outputs.tag }}"
        title: "Sync Extension: ${{ steps.release.outputs.tag }}"
        body: |
          This PR syncs extension files from sentience-chrome release ${{ steps.release.outputs.tag }}.
          
          **Files updated:**
          - Extension manifest and scripts
          - WASM binary and bindings
          
          **Source:** [sentience-chrome release ${{ steps.release.outputs.tag }}](https://github.com/${{ secrets.SENTIENCE_CHROME_REPO }}/releases/tag/${{ steps.release.outputs.tag }})
        branch: sync-extension-${{ steps.release.outputs.tag }}
        delete-branch: true
        labels: |
          automated
          extension-sync