sync-agent-skills.yml

name: Sync Supabase agent skills from supabase/agent-skills releases

on:
  workflow_dispatch:
    inputs:
      release_tag:
        description: Release tag from supabase/agent-skills (e.g. v0.1.0).
        required: true

permissions:
  contents: write
  pull-requests: write

jobs:
  sync:
    runs-on: ubuntu-latest

    steps:
      - name: Check out repository
        uses: actions/checkout@v4

      - name: Sync skills
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          mkdir -p "$RUNNER_TEMP/agent-skills-release"
          gh release download "${{ inputs.release_tag }}" \
            --repo supabase/agent-skills \
            --dir "$RUNNER_TEMP/agent-skills-release" \
            --pattern "index.json"

          INDEX="$RUNNER_TEMP/agent-skills-release/index.json"

          rm -rf skills/*/

          for name in $(jq -r '.skills[].name' "${INDEX}"); do
            url=$(jq -r --arg n "${name}" '.skills[] | select(.name == $n) | .url' "${INDEX}")
            expected_hex=$(jq -r --arg n "${name}" '.skills[] | select(.name == $n) | .digest' "${INDEX}")
            expected_hex="${expected_hex#sha256:}"

            curl -fsSL "${url}" -o "$RUNNER_TEMP/agent-skills-release/${name}.tar.gz"

            actual_hex=$(sha256sum "$RUNNER_TEMP/agent-skills-release/${name}.tar.gz" | awk '{print $1}')
            if [ "${actual_hex}" != "${expected_hex}" ]; then
              echo "Digest mismatch for ${name}: expected ${expected_hex}, got ${actual_hex}"
              exit 1
            fi

            mkdir -p "skills/${name}"
            tar -xzf "$RUNNER_TEMP/agent-skills-release/${name}.tar.gz" -C "skills/${name}"
          done

      - name: Create pull request
        uses: peter-evans/create-pull-request@v7
        with:
          branch: feat/sync-agent-skills-v${{ inputs.release_tag }}
          delete-branch: true
          commit-message: "feat: sync skills from supabase/agent-skills ${{ inputs.release_tag }}"
          title: "feat: sync skills from supabase/agent-skills ${{ inputs.release_tag }}"
          body: |
            ## Summary
            - sync Supabase agent skills from `supabase/agent-skills`

            ## Source
            - release tag: `${{ inputs.release_tag }}`

            ## Notes
            - generated by the `sync-agent-skills` workflow