mirror of
https://github.com/getsentry/sentry-for-ai.git
synced 2026-09-14 14:28:22 +08:00
Evan Purkhiser
d65bd23b67
This repository is the single source of truth for skills and routing metadata, but it is not itself an installable plugin, and each assistant (Claude Code, Cursor, Codex, Grok) expects the plugin in a different on-disk shape. No plugin ecosystem can consume a zip or release asset; all install from a git ref. So a GitHub Actions workflow builds each agent's distribution from this repository and deploys it to a dedicated repository whose root is exactly that agent's plugin, which a marketplace points at as getsentry/plugin-<agent>. Each agent has a `plugin-src/<agent>/` dir with its manifests, README, and a `build.sh` that assembles the dist tree from shared repo content. Claude, Cursor, and Grok consume the plugin at the repo root; Codex requires it under `plugins/sentry/` and rejects the `disable-model-invocation` field the skill tree relies on, so its build strips that field and emits a per-skill `agents/openai.yaml` (see `hide-skills.py`). MCP config is built from the repo's `mcp.json` source of truth: inline in Claude's manifest, and a file for the others. Cross-repo writes use a short-lived token from a dedicated GitHub App scoped to contents:write on the plugin repos; the default GITHUB_TOKEN cannot push to other repositories. The root `.claude-plugin/`, `.cursor-plugin/`, and `.mcp.json` are retained so existing installs that consumed the plugin from this repo's root keep working; their READMEs announce removal on or after 2026-07-11.
105 lines
3.8 KiB
YAML
105 lines
3.8 KiB
YAML
# Deploy per-agent plugin distributions to their own repositories.
|
|
#
|
|
# This repository is the single source of truth (skills + routing metadata,
|
|
# feeding skills.sentry.dev). Each AI assistant needs the plugin in a different
|
|
# shape, so this workflow builds each one and deploys it to a dedicated
|
|
# repository whose ROOT is exactly that agent's plugin:
|
|
#
|
|
# claude -> getsentry/plugin-claude
|
|
# cursor -> getsentry/plugin-cursor
|
|
# codex -> getsentry/plugin-codex
|
|
# grok -> getsentry/plugin-grok
|
|
#
|
|
# Marketplaces consume `getsentry/plugin-<agent>` by git ref. Each job builds its
|
|
# agent's tree from this repo, then commits it onto the target repo's `main`,
|
|
# replacing the previous contents. The four jobs target four different repos,
|
|
# so they run in parallel without contention.
|
|
#
|
|
# Cross-repo writes use a GitHub App token scoped per-job to a single plugin
|
|
# repo; the default GITHUB_TOKEN cannot push to other repositories. The app must
|
|
# be installed on the org with contents:write on the three plugin repos, its ID
|
|
# stored as the PLUGIN_DEPLOY_APP_ID variable and its private key as the
|
|
# PLUGIN_DEPLOY_KEY secret. Each target repo must already exist with `main` as
|
|
# its default branch.
|
|
|
|
name: Deploy plugins
|
|
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
paths:
|
|
- "skills/**"
|
|
- "commands/**"
|
|
- "assets/**"
|
|
- "SKILL_TREE.md"
|
|
- "LICENSE"
|
|
- "*.json"
|
|
- "plugin-src/**"
|
|
- ".github/workflows/deploy-plugins.yml"
|
|
workflow_dispatch:
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
deploy:
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 10
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
agent: [claude, cursor, codex, grok]
|
|
concurrency:
|
|
group: deploy-plugin-${{ matrix.agent }}
|
|
cancel-in-progress: false
|
|
steps:
|
|
- name: Checkout source
|
|
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
|
|
|
|
- name: Mint deploy token
|
|
id: token
|
|
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
|
|
with:
|
|
app-id: ${{ vars.PLUGIN_DEPLOY_APP_ID }}
|
|
private-key: ${{ secrets.PLUGIN_DEPLOY_KEY }}
|
|
owner: getsentry
|
|
repositories: plugin-${{ matrix.agent }}
|
|
|
|
- name: Install uv
|
|
uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
|
|
|
|
- name: Build and deploy plugin-${{ matrix.agent }}
|
|
env:
|
|
AGENT: ${{ matrix.agent }}
|
|
SRC_SHA: ${{ github.sha }}
|
|
GH_TOKEN: ${{ steps.token.outputs.token }}
|
|
run: |
|
|
set -euo pipefail
|
|
|
|
TARGET_REPO="plugin-${AGENT}"
|
|
WORKTREE="$(mktemp -d)/dist"
|
|
|
|
# Clone the target repo (lands on its default branch, `main`).
|
|
git clone "https://x-access-token:${GH_TOKEN}@github.com/getsentry/${TARGET_REPO}.git" "$WORKTREE"
|
|
git -C "$WORKTREE" config user.name "github-actions[bot]"
|
|
git -C "$WORKTREE" config user.email "41898282+github-actions[bot]@users.noreply.github.com"
|
|
|
|
# Rewrite the whole tree: clear tracked content (preserve the .git
|
|
# dir), then repopulate from source via the agent's build script.
|
|
git -C "$WORKTREE" rm -rfq --ignore-unmatch .
|
|
"plugin-src/${AGENT}/build.sh" "$WORKTREE"
|
|
|
|
# Validate the built tree against the agent's schema/validator before
|
|
# it can be deployed.
|
|
"plugin-src/${AGENT}/validate.sh" "$WORKTREE"
|
|
|
|
# Commit only if something changed.
|
|
git -C "$WORKTREE" add -A
|
|
if git -C "$WORKTREE" diff --cached --quiet; then
|
|
echo "::notice::${TARGET_REPO} unchanged; nothing to deploy"
|
|
exit 0
|
|
fi
|
|
git -C "$WORKTREE" commit -m "build: deploy from getsentry/sentry-for-ai@${SRC_SHA}"
|
|
git -C "$WORKTREE" push origin main
|
|
echo "::notice::deployed ${TARGET_REPO}"
|