Session work\n\nAuto-commit at session end to preserve work in progress.\n\nSession-ID: 5744c168-6eb5-4fd8-9362-bbb6455f058f\nSession-Timestamp: 2026-01-31T02:33:41.451Z\nBranch: 74-fix/please-add-the-thin-ci-caller-workflow-u\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com> (#75)

Author: sylvansys

.github/actions/sync-workflow/action.yml

@@ -0,0 +1,62 @@
+name: Sync Constellos Review Workflow
+description: Fetches the latest constellos-review.yml template and updates the local copy if outdated
+
+inputs:
+  workflow_path:
+    description: Path to the local workflow file to sync
+    required: false
+    default: .github/workflows/constellos-review.yml
+  template_url:
+    description: URL to fetch the latest template from
+    required: false
+    default: https://raw.githubusercontent.com/constellos/github-agents/main/.github/templates/constellos-review.yml
+
+runs:
+  using: composite
+  steps:
+    - name: Sync workflow file
+      shell: bash
+      env:
+        WORKFLOW_PATH: ${{ inputs.workflow_path }}
+        TEMPLATE_URL: ${{ inputs.template_url }}
+      run: |
+        echo "::group::Sync constellos-review.yml"
+
+        # Fetch latest template
+        LATEST=$(curl -fsSL "$TEMPLATE_URL" 2>&1) || {
+          echo "::warning::Failed to fetch latest template from $TEMPLATE_URL"
+          echo "::endgroup::"
+          exit 0
+        }
+
+        # Compare with local copy
+        if [ -f "$WORKFLOW_PATH" ]; then
+          LOCAL=$(cat "$WORKFLOW_PATH")
+          if [ "$LATEST" = "$LOCAL" ]; then
+            echo "Workflow is up to date."
+            echo "::endgroup::"
+            exit 0
+          fi
+        fi
+
+        echo "Workflow is outdated — updating."
+        mkdir -p "$(dirname "$WORKFLOW_PATH")"
+        echo "$LATEST" > "$WORKFLOW_PATH"
+
+        # Configure git and push
+        git config user.name "github-actions[bot]"
+        git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+        git add "$WORKFLOW_PATH"
+        git commit -m "chore: sync constellos-review.yml from template" || {
+          echo "::warning::Nothing to commit (file unchanged after write)."
+          echo "::endgroup::"
+          exit 0
+        }
+        git push || {
+          echo "::warning::Failed to push workflow sync commit. The PR branch may be from a fork."
+          echo "::endgroup::"
+          exit 0
+        }
+
+        echo "Workflow synced successfully."
+        echo "::endgroup::"

.github/templates/constellos-review.yml

@@ -15,6 +15,18 @@ permissions:
   pull-requests: read  # REQUIRED: agents need this to fetch changed files via gh pr view
 
 jobs:
+  # Auto-sync this workflow from the latest template
+  sync-workflow:
+    if: github.event.pull_request.head.repo.full_name == github.repository
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ github.head_ref }}
+      - uses: constellos/github-agents/.github/actions/sync-workflow@main
+
   # Read config and determine which agents to run
   config:
     runs-on: ubuntu-latest

.github/workflows/ci-pipeline.yml

@@ -0,0 +1,10 @@
+name: CI
+
+on:
+  pull_request:
+    branches: ['**']
+
+jobs:
+  CI:
+    uses: constellos/.github/.github/workflows/ci-pipeline-reusable.yml@main
+    secrets: inherit