Sentinal-Constructor.yml

name: SENTINEL-FORGE-COMPILER

on:
  push:
    paths:
      - 'src/*.c'

jobs:
  forge-binaries:
    name: "Forge C-Source into EXEs"
    runs-on: ubuntu-latest
    
    # --- CRITICAL FIX: GRANTING WRITE ACCESS ---
    permissions:
      contents: write
    # -------------------------------------------

    steps:
      - name: "Access Sovereign Source"
        uses: actions/checkout@v4
        with:
          # Uses the automatic GitHub token to authorize the push later
          token: ${{ secrets.GITHUB_TOKEN }}

      - name: "Initialize Environment"
        run: |
          mkdir -p bin
          mkdir -p Beacon

      - name: "Execute GCC Forge"
        run: |
          for source_file in src/*.c; do
            if [ -f "$source_file" ]; then
              filename=$(basename "$source_file" .c)
              echo "[FORGE] Processing: $source_file"
              gcc "$source_file" -o "bin/$filename.exe"
              echo "[FORGE] Created: bin/$filename.exe"
            fi
          done

      - name: "Verify Binary Signatures"
        run: |
          for exe in bin/*.exe; do
            if grep -q "1.1.CVBGOD" "$exe"; then
              echo "[VERIFIED] $exe contains the CVBGOD signature."
            else
              echo "[WARNING] $exe is missing the handshake."
            fi
          done

      - name: "Push Forged Assets"
        run: |
          git config --global user.name "Sentinel-Bot"
          git config --global user.email "sentinel@mercwar.systems"
          git add bin/*.exe
          
          # Only commit if there are actual binary changes
          if ! git diff --staged --quiet; then
            git commit -m "AVIS: Binaries forged by Sentinel [CVBGOD]"
            git push origin HEAD:${{ github.ref }}
          else
            echo "No changes to binaries. Skipping push."
          fi