🔧 chore(tsl): add playbook sync workflow

2026-07-07 16:46:40 +08:00
parent e1f7ce052c
commit 6f94cd3ee4
4 changed files with 297 additions and 0 deletions
@@ -0,0 +1,66 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Build the minimal TSL playbook bundle and publish its *expanded* contents to
+# the tsl-playbook branch. The branch tree mirrors the bundle root directly
+# (AGENTS.md, docs/, skills/) — there is no wrapping tsl-playbook/ directory.
+
+REPO_DIR="${REPO_DIR:-$(pwd)}"
+TARGET_BRANCH="${TARGET_BRANCH:-tsl-playbook}"
+BUILD_SCRIPT="${BUILD_SCRIPT:-scripts/build_tsl_playbook.py}"
+COMMIT_AUTHOR_NAME="${COMMIT_AUTHOR_NAME:-ci[bot]}"
+COMMIT_AUTHOR_EMAIL="${COMMIT_AUTHOR_EMAIL:-ci-bot@local}"
+
+cd "$REPO_DIR"
+
+git config user.name "$COMMIT_AUTHOR_NAME"
+git config user.email "$COMMIT_AUTHOR_EMAIL"
+
+source_sha="$(git rev-parse HEAD)"
+source_short="$(git rev-parse --short HEAD)"
+
+# Build the bundle into a temp dir *outside* the repo so that resetting the
+# target branch's working tree can never clobber the freshly built artifact.
+build_dir="$(mktemp -d)"
+cleanup() {
+  rm -rf "$build_dir"
+}
+trap cleanup EXIT
+
+bundle="$build_dir/tsl-playbook"
+python3 "$BUILD_SCRIPT" --output "$bundle"
+
+# Check out (or create) the target branch. It is a content-only branch that
+# shares no history with main, so an orphan branch keeps it clean.
+if git show-ref --verify --quiet "refs/remotes/origin/$TARGET_BRANCH"; then
+  git fetch origin "$TARGET_BRANCH"
+  git checkout -B "$TARGET_BRANCH" "origin/$TARGET_BRANCH"
+else
+  git checkout --orphan "$TARGET_BRANCH"
+fi
+
+# Replace the entire tracked tree with the bundle contents. `git rm` clears
+# tracked files; then copy the expanded bundle to the repo root.
+git rm -rf --quiet . >/dev/null 2>&1 || true
+
+# Copy bundle contents (including dotfiles) to the repo root.
+cp -R "$bundle"/. "$REPO_DIR"/
+
+git add -A
+
+if git diff --cached --quiet; then
+  echo "No tsl-playbook changes to publish."
+  exit 0
+fi
+
+git commit -m ":package: deps(tsl): sync tsl-playbook from ${source_short}
+
+Source-Commit: ${source_sha}"
+
+TOKEN="${WORKFLOW:-}"
+if [ -n "$TOKEN" ] && [ -n "${GITHUB_SERVER_URL:-}" ] && [ -n "${GITHUB_REPOSITORY:-}" ]; then
+  git remote set-url origin "https://oauth2:${TOKEN}@${GITHUB_SERVER_URL#https://}/${GITHUB_REPOSITORY}.git"
+fi
+
+git push origin "$TARGET_BRANCH"
+echo "✅ Published tsl-playbook @ ${source_short}"