@wipcomputer/deploy-public 1.0.0

package/LICENSE

@@ -0,0 +1,52 @@
+Dual License: MIT + AGPLv3
+
+Copyright (c) 2026 WIP Computer, Inc.
+
+
+1. MIT License (local and personal use)
+---------------------------------------
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+2. GNU Affero General Public License v3.0 (commercial and cloud use)
+--------------------------------------------------------------------
+
+If you run this software as part of a hosted service, cloud platform,
+marketplace listing, or any network-accessible offering for commercial
+purposes, the AGPLv3 terms apply. You must either:
+
+  a) Release your complete source code under AGPLv3, or
+  b) Obtain a commercial license.
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU Affero General Public License as published
+by the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+GNU Affero General Public License for more details.
+
+You should have received a copy of the GNU Affero General Public License
+along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+
+AGPLv3 for personal use is free. Commercial licenses available.

package/SKILL.md

@@ -0,0 +1,71 @@
+---
+name: deploy-public
+description: Private-to-public repo sync. Copies everything except ai/ to the public mirror. Creates PR, merges, syncs releases.
+license: MIT
+interface: [cli, skill]
+metadata:
+  display-name: "Private-to-Public Sync"
+  version: "1.3.0"
+  homepage: "https://github.com/wipcomputer/wip-ai-devops-toolbox"
+  author: "Parker Todd Brooks"
+  category: dev-tools
+  capabilities:
+    - repo-sync
+    - release-sync
+  requires:
+    bins: [git, gh, bash]
+  openclaw:
+    requires:
+      bins: [git, gh, bash]
+    emoji: "🚢"
+compatibility: Requires git, gh (GitHub CLI), bash.
+---
+
+# deploy-public
+
+Private-to-public repo sync. One script for all repos. Copies code, creates a PR on the public repo, merges it, and syncs GitHub releases.
+
+## When to Use This Skill
+
+**Use deploy-public for:**
+- Publishing a private repo's code to its public counterpart
+- After running `wip-release` on the private repo (release must exist first)
+- Syncing release notes from private to public
+
+**CRITICAL: Release order matters.**
+1. Merge PR to private repo's main
+2. Run `wip-release` (creates GitHub release with notes on private repo)
+3. THEN run `deploy-public.sh` (pulls notes from private release)
+
+If you skip step 2, the public release gets empty notes.
+
+### Do NOT Use For
+
+- Repos without a `-private` counterpart
+- First-time repo setup (create the public repo on GitHub first)
+
+## API Reference
+
+### CLI
+
+```bash
+bash scripts/deploy-public.sh /path/to/private-repo org/public-repo
+```
+
+### Examples
+
+```bash
+# Deploy memory-crystal
+bash scripts/deploy-public.sh /path/to/memory-crystal-private wipcomputer/memory-crystal
+
+# Deploy wip-dev-tools
+bash scripts/deploy-public.sh /path/to/wip-ai-devops-toolbox-private wipcomputer/wip-ai-devops-toolbox
+```
+
+## What It Does
+
+1. Clones the public repo to a temp directory
+2. Copies all files from private repo (excluding `ai/`, `.git/`)
+3. Creates a branch, commits, pushes, creates PR
+4. Merges the PR (regular merge, never squash)
+5. Syncs GitHub releases (pulls notes from private repo's releases)

package/deploy-public.sh

@@ -0,0 +1,170 @@
+#!/usr/bin/env bash
+#
+# deploy-public.sh ... sync a private repo to its public counterpart
+#
+# Usage:
+#   bash deploy-public.sh <private-repo-path> <public-github-repo>
+#
+# Example:
+#   bash deploy-public.sh /path/to/memory-crystal wipcomputer/memory-crystal
+#
+# Convention:
+#   - Private repo: {name}-private (where all work happens)
+#   - Public repo:  {name} (deployment target, never work here directly)
+#   - ai/ folder is excluded from public deploys
+#   - Old ai/ in public git history is fine, just not going forward
+#
+# Location: wip-dev-guide-private/scripts/deploy-public.sh (one script for all repos)
+
+set -euo pipefail
+
+PRIVATE_REPO="$1"
+PUBLIC_REPO="$2"
+
+if [[ -z "$PRIVATE_REPO" || -z "$PUBLIC_REPO" ]]; then
+  echo "Usage: bash deploy-public.sh <private-repo-path> <public-github-repo>"
+  echo "Example: bash deploy-public.sh /path/to/memory-crystal wipcomputer/memory-crystal"
+  exit 1
+fi
+
+if [[ ! -d "$PRIVATE_REPO/.git" ]]; then
+  echo "Error: $PRIVATE_REPO is not a git repository"
+  exit 1
+fi
+
+# Get the latest commit message from private repo
+COMMIT_MSG=$(cd "$PRIVATE_REPO" && git log -1 --pretty=format:"%s")
+COMMIT_HASH=$(cd "$PRIVATE_REPO" && git log -1 --pretty=format:"%h")
+
+TMPDIR=$(mktemp -d)
+trap 'rm -rf "$TMPDIR"' EXIT
+
+echo "Cloning public repo $PUBLIC_REPO..."
+gh repo clone "$PUBLIC_REPO" "$TMPDIR/public" -- --depth 1 2>/dev/null || {
+  echo "Public repo is empty or doesn't exist. Initializing..."
+  mkdir -p "$TMPDIR/public"
+  cd "$TMPDIR/public"
+  git init
+  git remote add origin "git@github.com:${PUBLIC_REPO}.git"
+  cd - > /dev/null
+}
+
+echo "Syncing files from private repo (excluding ai/, .git/)..."
+
+# Remove all tracked files in public (except .git) so deleted files get removed
+find "$TMPDIR/public" -mindepth 1 -maxdepth 1 ! -name .git -exec rm -rf {} +
+
+# rsync from private, excluding ai/ and .git/
+rsync -a \
+  --exclude='ai/' \
+  --exclude='_trash/' \
+  --exclude='.git/' \
+  --exclude='.DS_Store' \
+  --exclude='.wrangler/' \
+  --exclude='.claude/' \
+  --exclude='CLAUDE.md' \
+  "$PRIVATE_REPO/" "$TMPDIR/public/"
+
+cd "$TMPDIR/public"
+
+# Check if there are changes
+if git diff --quiet HEAD -- 2>/dev/null && git diff --cached --quiet HEAD -- 2>/dev/null && [[ -z "$(git ls-files --others --exclude-standard)" ]]; then
+  echo "No changes to deploy."
+  exit 0
+fi
+
+# Harness ID for branch prefix. Set HARNESS_ID env var, or auto-detect from private repo path.
+if [[ -z "${HARNESS_ID:-}" ]]; then
+  case "$PRIVATE_REPO" in
+    *"Claude Code - Mini"*) HARNESS_ID="cc-mini" ;;
+    *"Claude Code - MBA"*)  HARNESS_ID="cc-air" ;;
+    *"Lēsa"*)               HARNESS_ID="oc-lesa-mini" ;;
+    *)                       HARNESS_ID="deploy" ;;
+  esac
+fi
+BRANCH="$HARNESS_ID/deploy-$(date +%Y%m%d-%H%M%S)"
+
+git checkout -b "$BRANCH"
+git add -A
+git commit -m "$COMMIT_MSG (from $COMMIT_HASH)"
+
+echo "Pushing branch $BRANCH to $PUBLIC_REPO..."
+git push -u origin "$BRANCH"
+
+echo "Creating PR..."
+PR_URL=$(gh pr create -R "$PUBLIC_REPO" \
+  --head "$BRANCH" \
+  --title "$COMMIT_MSG" \
+  --body "Synced from private repo (commit $COMMIT_HASH).")
+
+echo "Merging PR..."
+PR_NUMBER=$(echo "$PR_URL" | grep -o '[0-9]*$')
+gh pr merge "$PR_NUMBER" -R "$PUBLIC_REPO" --merge
+
+# Delete the deploy branch (merged, no longer needed)
+echo "Cleaning up deploy branch..."
+gh api -X DELETE "repos/$PUBLIC_REPO/git/refs/heads/$BRANCH" 2>/dev/null && echo "  ✓ Deleted branch $BRANCH" || echo "  ! Could not delete branch (non-fatal)"
+
+# Clean up any other non-main branches on public repo
+echo "Checking for stale branches on public repo..."
+STALE_BRANCHES=$(gh api "repos/$PUBLIC_REPO/branches" --paginate --jq '.[].name' 2>/dev/null | grep -v '^main$' || true)
+if [[ -n "$STALE_BRANCHES" ]]; then
+  STALE_COUNT=$(echo "$STALE_BRANCHES" | wc -l | tr -d ' ')
+  echo "  Found $STALE_COUNT stale branch(es). Deleting..."
+  echo "$STALE_BRANCHES" | while read -r stale; do
+    gh api -X DELETE "repos/$PUBLIC_REPO/git/refs/heads/$stale" 2>/dev/null && echo "  ✓ Deleted $stale" || echo "  ! Could not delete $stale"
+  done
+else
+  echo "  ✓ No stale branches"
+fi
+
+echo "Code synced via PR: $PR_URL"
+
+# ── Sync release to public repo ──
+# If the private repo has a version tag, create a matching release on the public repo.
+# Pulls full release notes from the private repo and rewrites any private repo references.
+
+# Try package.json first, fall back to latest git tag
+VERSION=$(cd "$PRIVATE_REPO" && node -p "require('./package.json').version" 2>/dev/null || echo "")
+if [[ -z "$VERSION" ]]; then
+  # No package.json. Use the latest version tag (v*) in the repo
+  TAG=$(cd "$PRIVATE_REPO" && git tag -l 'v*' --sort=-version:refname 2>/dev/null | head -1 || echo "")
+  if [[ -n "$TAG" ]]; then
+    VERSION="${TAG#v}"
+  fi
+fi
+if [[ -n "$VERSION" ]]; then
+  TAG="v$VERSION"
+  EXISTING=$(gh release view "$TAG" -R "$PUBLIC_REPO" --json tagName 2>/dev/null || echo "")
+  if [[ -z "$EXISTING" ]]; then
+    # Get the private repo's GitHub path (e.g., wipcomputer/memory-crystal-private)
+    PRIVATE_GH=$(cd "$PRIVATE_REPO" && git remote get-url origin | sed 's/.*github.com[:/]\(.*\)\.git/\1/')
+
+    # Pull full release notes from private repo
+    NOTES=$(gh release view "$TAG" -R "$PRIVATE_GH" --json body -q '.body' 2>/dev/null || echo "")
+
+    if [[ -z "$NOTES" || "$NOTES" == "null" ]]; then
+      NOTES="Release $TAG"
+    else
+      # Rewrite private repo references to public repo
+      NOTES=$(echo "$NOTES" | sed "s|$PRIVATE_GH|$PUBLIC_REPO|g")
+    fi
+
+    echo "Creating release $TAG on $PUBLIC_REPO..."
+    gh release create "$TAG" -R "$PUBLIC_REPO" --title "$TAG" --notes "$NOTES" 2>/dev/null && echo "  ✓ Release $TAG created on $PUBLIC_REPO" || echo "  ✗ Release creation failed (non-fatal)"
+  else
+    # Update existing release notes (in case they were incomplete)
+    PRIVATE_GH=$(cd "$PRIVATE_REPO" && git remote get-url origin | sed 's/.*github.com[:/]\(.*\)\.git/\1/')
+    NOTES=$(gh release view "$TAG" -R "$PRIVATE_GH" --json body -q '.body' 2>/dev/null || echo "")
+    if [[ -n "$NOTES" && "$NOTES" != "null" ]]; then
+      NOTES=$(echo "$NOTES" | sed "s|$PRIVATE_GH|$PUBLIC_REPO|g")
+      gh release edit "$TAG" -R "$PUBLIC_REPO" --notes "$NOTES" 2>/dev/null && echo "  ✓ Release $TAG notes updated on $PUBLIC_REPO" || true
+    fi
+    echo "  Release $TAG exists on $PUBLIC_REPO (notes synced)"
+  fi
+fi
+
+echo "Done. Public repo updated."
+echo "  PR: $PR_URL"
+echo "  Commit: $COMMIT_MSG (from $COMMIT_HASH)"
+[[ -n "${VERSION:-}" ]] && echo "  Release: v$VERSION"

package/package.json

@@ -0,0 +1,9 @@
+{
+  "name": "@wipcomputer/deploy-public",
+  "version": "1.0.0",
+  "description": "Private-to-public repo sync. Excludes ai/ folder, creates PR, merges, cleans up branches.",
+  "bin": {
+    "deploy-public": "./deploy-public.sh"
+  },
+  "license": "MIT"
+}