name: Sync external skill plugins

on:
  workflow_dispatch:
  schedule:
    - cron: "17 3 * * *"

permissions:
  contents: write

jobs:
  sync:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout marketplace
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Sync external plugins
        shell: pwsh
        run: ./scripts/sync_external_plugins.ps1

      - name: Validate marketplace
        run: python scripts/validate_marketplace.py

      - name: Commit synced changes
        shell: bash
        run: |
          if git diff --quiet; then
            echo "No external plugin updates."
            exit 0
          fi

          git config user.name "EAPIL Skill Sync"
          git config user.email "skill-sync@users.noreply.git.playones.com"
          git add .agents plugins/codex/plugins plugins/codex/.agents config/external-sources.lock.json
          git commit -m "Sync external skill plugins" \
            -m "Constraint: Scheduled sync vendors configured third-party skill sources into Codex plugin layout." \
            -m "Rejected: Git submodules | Codex marketplace installs do not reliably recurse external submodules." \
            -m "Confidence: medium" \
            -m "Scope-risk: moderate" \
            -m "Directive: Review upstream license or structure changes before expanding adapters." \
            -m "Tested: scripts/sync_external_plugins.ps1; scripts/validate_marketplace.py." \
            -m "Not-tested: Manual plugin install in Codex UI."
          git push