feat: poll agent-skills releases for sync

Author: Rodriguespn

.github/workflows/sync-agent-skills.yml

@@ -1,14 +1,13 @@
 name: Sync agent-skills release
 
 on:
-  repository_dispatch:
-    types:
-      - agent_skills_release_published
+  schedule:
+    - cron: "17 */6 * * *"
   workflow_dispatch:
     inputs:
       release_tag:
-        description: Release tag from supabase/agent-skills (for example, v0.1.0)
-        required: true
+        description: Optional release tag from supabase/agent-skills (for example, v0.1.0). Defaults to the latest release.
+        required: false
       release_version:
         description: Optional semver corresponding to the release tag
         required: false
@@ -31,18 +30,37 @@ jobs:
       - name: Resolve release metadata
         id: release
         shell: bash
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          if [ "${{ github.event_name }}" = "repository_dispatch" ]; then
-            echo "tag=${{ github.event.client_payload.release_tag }}" >> "$GITHUB_OUTPUT"
-            echo "version=${{ github.event.client_payload.release_version }}" >> "$GITHUB_OUTPUT"
-            echo "sha=${{ github.event.client_payload.commit_sha }}" >> "$GITHUB_OUTPUT"
+          if [ -n "${{ inputs.release_tag }}" ]; then
+            TAG="${{ inputs.release_tag }}"
+            VERSION="${{ inputs.release_version }}"
+            SHA="${{ inputs.commit_sha }}"
           else
-            echo "tag=${{ inputs.release_tag }}" >> "$GITHUB_OUTPUT"
-            echo "version=${{ inputs.release_version }}" >> "$GITHUB_OUTPUT"
-            echo "sha=${{ inputs.commit_sha }}" >> "$GITHUB_OUTPUT"
+            TAG=$(gh release view --repo supabase/agent-skills --json tagName --jq '.tagName')
+            VERSION="${TAG#v}"
+            SHA=$(gh release view "${TAG}" --repo supabase/agent-skills --json targetCommitish --jq '.targetCommitish')
+          fi
+
+          echo "tag=${TAG}" >> "$GITHUB_OUTPUT"
+          echo "version=${VERSION}" >> "$GITHUB_OUTPUT"
+          echo "sha=${SHA}" >> "$GITHUB_OUTPUT"
+
+      - name: Check whether sync is needed
+        id: should_sync
+        shell: bash
+        run: |
+          CURRENT_TAG=$(jq -r '.source_release // ""' skills/.upstream.json)
+
+          if [ "${CURRENT_TAG}" = "${{ steps.release.outputs.tag }}" ]; then
+            echo "changed=false" >> "$GITHUB_OUTPUT"
+          else
+            echo "changed=true" >> "$GITHUB_OUTPUT"
           fi
 
       - name: Download skill release assets
+        if: ${{ steps.should_sync.outputs.changed == 'true' }}
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
@@ -54,14 +72,16 @@ jobs:
             --pattern "supabase-postgres-best-practices.tar.gz"
 
       - name: Replace vendored skills
+        if: ${{ steps.should_sync.outputs.changed == 'true' }}
         run: |
           rm -rf skills/supabase skills/supabase-postgres-best-practices
-          mkdir -p skills/supabase skills/supabase-postgres-best-practices
+          mkdir -p skills
 
-          tar -xzf /tmp/agent-skills-release/supabase.tar.gz -C skills/supabase
-          tar -xzf /tmp/agent-skills-release/supabase-postgres-best-practices.tar.gz -C skills/supabase-postgres-best-practices
+          tar -xzf /tmp/agent-skills-release/supabase.tar.gz -C skills
+          tar -xzf /tmp/agent-skills-release/supabase-postgres-best-practices.tar.gz -C skills
 
       - name: Update upstream metadata
+        if: ${{ steps.should_sync.outputs.changed == 'true' }}
         shell: bash
         run: |
           SYNCED_AT=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
@@ -84,6 +104,7 @@ jobs:
           EOF
 
       - name: Create pull request
+        if: ${{ steps.should_sync.outputs.changed == 'true' }}
         uses: peter-evans/create-pull-request@v7
         with:
           branch: chore/sync-agent-skills-${{ steps.release.outputs.tag }}
@@ -102,4 +123,3 @@ jobs:
 
             ## Notes
             - generated by the `sync-agent-skills` workflow
-

AGENTS.md

@@ -84,9 +84,9 @@ The shipped skills in `skills/` are intended to be real vendored files.
 
 - The source of truth for skill content is `supabase/agent-skills`.
 - This repo consumes release assets from `supabase/agent-skills`, not a submodule or symlink.
-- The sync workflow expects the upstream release to publish:
+- The sync workflow polls the latest GitHub release from `supabase/agent-skills` and expects it to publish:
   - `supabase.tar.gz`
   - `supabase-postgres-best-practices.tar.gz`
 - Synced provenance is tracked in `skills/.upstream.json`.
 
-If skills are updated upstream, use the sync workflow or the repository dispatch event to vendor them into this repo as normal files and review the resulting PR here before merge.
+If skills are updated upstream, let the scheduled sync workflow pick up the new release or run the workflow manually with a specific `release_tag` to vendor them into this repo as normal files and review the resulting PR here before merge.