name: Update and Sync Superpowers

on:
  push:
    branches:
      - main
  workflow_dispatch:
  schedule:
    - cron: "@daily"

concurrency:
  group: superpowers-update-sync-${{ github.repository }}
  cancel-in-progress: true

env:
  WORKSPACE_DIR: "/home/workspace"
  THIRDPARTY_BRANCH: "thirdparty/skill"
  UPSTREAM_REPO: "https://github.com/obra/superpowers.git"
  UPSTREAM_REF: "main"
  SUPERPOWERS_DIR: "superpowers"
  SUPERPOWERS_LIST: "codex/skills/.sources/superpowers.list"

jobs:
  update:
    name: Update thirdparty/skill snapshot
    runs-on: ubuntu-22.04
    outputs:
      snapshot_changed: ${{ steps.update_snapshot.outputs.snapshot_changed }}
    env:
      TARGET_BRANCH: "${{ env.THIRDPARTY_BRANCH }}"

    steps:
      - name: Prepare repo
        run: |
          echo "========================================"
          echo "Prepare repo to WORKSPACE_DIR"
          echo "========================================"

          REPO_NAME="${{ github.event.repository.name }}"
          REPO_DIR="${{ env.WORKSPACE_DIR }}/$REPO_NAME"
          TOKEN="${{ secrets.WORKFLOW }}"
          if [ -n "$TOKEN" ]; then
            REPO_URL="https://oauth2:${TOKEN}@${GITHUB_SERVER_URL#https://}/${{ github.repository }}.git"
          else
            REPO_URL="${GITHUB_SERVER_URL}/${{ github.repository }}.git"
          fi

          if [ -d "$REPO_DIR" ]; then
            if [ -d "$REPO_DIR/.git" ]; then
              cd "$REPO_DIR"
              git clean -fdx
              git reset --hard
              git fetch --all --tags --force --prune --prune-tags
            else
              rm -rf "$REPO_DIR"
            fi
          fi

          if [ ! -d "$REPO_DIR/.git" ]; then
            mkdir -p "${{ env.WORKSPACE_DIR }}"
            git clone "$REPO_URL" "$REPO_DIR"
            cd "$REPO_DIR"
          fi

          git fetch origin main
          git checkout -B main origin/main

          git config --global --add safe.directory "$REPO_DIR"
          echo "REPO_DIR=$REPO_DIR" >> $GITHUB_ENV

      - name: Update thirdparty/skill snapshot
        id: update_snapshot
        shell: bash
        run: |
          set -euo pipefail
          cd "$REPO_DIR"
          before_ref=""
          if git show-ref --verify --quiet "refs/remotes/origin/$TARGET_BRANCH"; then
            before_ref="$(git rev-parse "origin/$TARGET_BRANCH")"
          fi
          bash .gitea/ci/update_thirdparty_superpowers.sh
          git fetch origin "$TARGET_BRANCH"
          after_ref="$(git rev-parse "origin/$TARGET_BRANCH")"
          if [ "$after_ref" != "$before_ref" ]; then
            echo "snapshot_changed=true" >> "$GITHUB_OUTPUT"
          else
            echo "snapshot_changed=false" >> "$GITHUB_OUTPUT"
          fi
  sync:
    name: Sync skills to main
    needs: update
    if: ${{ needs.update.outputs.snapshot_changed == 'true' }}
    runs-on: ubuntu-22.04
    env:
      TARGET_BRANCH: "main"
      SUPERPOWERS_BRANCH: "${{ env.THIRDPARTY_BRANCH }}"
      SUPERPOWERS_DIR: "${{ env.SUPERPOWERS_DIR }}"
      SUPERPOWERS_LIST: "${{ env.SUPERPOWERS_LIST }}"

    steps:
      - name: Prepare repo
        run: |
          echo "========================================"
          echo "Prepare repo to WORKSPACE_DIR"
          echo "========================================"

          REPO_NAME="${{ github.event.repository.name }}"
          REPO_DIR="${{ env.WORKSPACE_DIR }}/$REPO_NAME"
          TOKEN="${{ secrets.WORKFLOW }}"
          if [ -n "$TOKEN" ]; then
            REPO_URL="https://oauth2:${TOKEN}@${GITHUB_SERVER_URL#https://}/${{ github.repository }}.git"
          else
            REPO_URL="${GITHUB_SERVER_URL}/${{ github.repository }}.git"
          fi

          if [ -d "$REPO_DIR" ]; then
            if [ -d "$REPO_DIR/.git" ]; then
              cd "$REPO_DIR"
              # Clear local index flags so checked-out workflow/script files
              # always refresh from the latest main branch contents.
              git ls-files -v | awk '/^[a-zS] / {sub(/^[a-zS] /, ""); print}' | while IFS= read -r path; do
                git update-index --no-assume-unchanged --no-skip-worktree -- "$path"
              done
              git clean -fdx
              git reset --hard
              git fetch --all --tags --force --prune --prune-tags
            else
              rm -rf "$REPO_DIR"
            fi
          fi

          if [ ! -d "$REPO_DIR/.git" ]; then
            mkdir -p "${{ env.WORKSPACE_DIR }}"
            git clone "$REPO_URL" "$REPO_DIR"
            cd "$REPO_DIR"
          fi

          git fetch origin "$TARGET_BRANCH"
          git checkout -B "$TARGET_BRANCH" "origin/$TARGET_BRANCH"

          git config --global --add safe.directory "$REPO_DIR"
          echo "REPO_DIR=$REPO_DIR" >> $GITHUB_ENV

      - name: Sync superpowers skills to main
        shell: bash
        run: |
          set -euo pipefail
          cd "$REPO_DIR"
          bash .gitea/ci/sync_superpowers.sh