@wipcomputer/wip-ai-devops-toolbox 1.9.20

package/scripts/post-merge-rename.sh

@@ -0,0 +1,205 @@
+#!/usr/bin/env bash
+#
+# post-merge-rename.sh
+# Scans for branches merged into main and renames them with --merged-YYYY-MM-DD.
+# Branches already renamed (containing --merged-) are skipped.
+#
+# Usage:
+#   bash post-merge-rename.sh                    # scan + rename all
+#   bash post-merge-rename.sh <branch>           # rename a specific branch
+#   bash post-merge-rename.sh --dry-run          # preview only
+#   bash post-merge-rename.sh --prune            # rename + delete old merged branches (keep last 3 per developer)
+#   bash post-merge-rename.sh --prune --dry-run  # preview prune
+#
+# Run this after merging a PR, or periodically to catch missed renames.
+#
+# Author: CC-mini (Opus 4.6)
+# Date: 2026-03-08
+
+set -euo pipefail
+
+DRY_RUN=false
+PRUNE=false
+SPECIFIC_BRANCH=""
+KEEP_COUNT=3
+
+for arg in "$@"; do
+  case "$arg" in
+    --dry-run) DRY_RUN=true ;;
+    --prune) PRUNE=true ;;
+    --help|-h)
+      echo "Usage: post-merge-rename.sh [<branch>] [--dry-run] [--prune]"
+      echo ""
+      echo "Scans for branches merged into main and renames them"
+      echo "with --merged-YYYY-MM-DD suffix."
+      echo ""
+      echo "  --prune    After renaming, delete old --merged branches."
+      echo "             Keeps the last $KEEP_COUNT per developer prefix."
+      echo "             Also deletes stale branches whose PRs are merged"
+      echo "             but were never renamed."
+      exit 0
+      ;;
+    *) SPECIFIC_BRANCH="$arg" ;;
+  esac
+done
+
+# Must be in a git repo
+if ! git rev-parse --is-inside-work-tree &>/dev/null; then
+  echo "Error: not inside a git repo."
+  exit 1
+fi
+
+# Fetch latest remote state
+git fetch origin --prune 2>/dev/null || true
+
+rename_branch() {
+  local branch="$1"
+  local trimmed
+  trimmed=$(echo "$branch" | sed 's/^[[:space:]]*//' | sed 's/[[:space:]]*$//')
+
+  # Skip main
+  [[ "$trimmed" == "main" || "$trimmed" == "master" ]] && return
+
+  # Skip already renamed
+  [[ "$trimmed" == *"--merged-"* ]] && return
+
+  # Skip current branch (can't rename the checked-out branch)
+  local current
+  current=$(git branch --show-current)
+  if [[ "$trimmed" == "$current" ]]; then
+    echo "  SKIP $trimmed (currently checked out)"
+    return
+  fi
+
+  # Find merge date: when this branch's tip became reachable from main
+  local merge_date
+  merge_date=$(git log main --format="%ai" --ancestry-path "$(git merge-base main "$trimmed" 2>/dev/null)..main" 2>/dev/null | tail -1 | cut -d' ' -f1)
+
+  # Fallback: use the branch tip's own date
+  if [[ -z "$merge_date" ]]; then
+    merge_date=$(git log "$trimmed" -1 --format="%ai" 2>/dev/null | cut -d' ' -f1)
+  fi
+
+  if [[ -z "$merge_date" ]]; then
+    echo "  SKIP $trimmed (could not determine merge date)"
+    return
+  fi
+
+  local new_name="${trimmed}--merged-${merge_date}"
+
+  if $DRY_RUN; then
+    echo "  [dry-run] $trimmed -> $new_name"
+  else
+    echo "  Renaming: $trimmed -> $new_name"
+
+    # Rename local
+    git branch -m "$trimmed" "$new_name" 2>/dev/null || true
+
+    # Push new name to remote
+    git push origin "$new_name" 2>/dev/null || true
+
+    # Remove old name from remote
+    git push origin --delete "$trimmed" 2>/dev/null || true
+  fi
+}
+
+if [[ -n "$SPECIFIC_BRANCH" && "$SPECIFIC_BRANCH" != "--dry-run" ]]; then
+  # Rename a specific branch
+  echo "Checking branch: $SPECIFIC_BRANCH"
+  if git merge-base --is-ancestor "$SPECIFIC_BRANCH" main 2>/dev/null; then
+    rename_branch "$SPECIFIC_BRANCH"
+  else
+    echo "  $SPECIFIC_BRANCH is NOT merged into main. Leaving as-is."
+  fi
+else
+  # Scan all local branches merged into main
+  echo "Scanning for merged branches..."
+  merged=$(git branch --merged main | grep -v "^\*" | grep -v "main$" | grep -v "master$" | grep -v "\-\-merged\-" || true)
+
+  if [[ -z "$merged" ]]; then
+    echo "  No unrenamed merged branches found. All clean."
+    exit 0
+  fi
+
+  while IFS= read -r branch; do
+    rename_branch "$branch"
+  done <<< "$merged"
+fi
+
+# ── Prune old merged branches ────────────────────────────────────────
+
+prune_branches() {
+  echo ""
+  echo "Pruning old merged branches (keeping last $KEEP_COUNT per developer)..."
+
+  # Get all remote --merged branches
+  local merged_branches
+  merged_branches=$(git branch -r | grep "\-\-merged\-" | sed 's|origin/||' | sed 's/^[[:space:]]*//' | sort)
+
+  if [[ -z "$merged_branches" ]]; then
+    echo "  No --merged branches found. Nothing to prune."
+    return
+  fi
+
+  # Extract unique developer prefixes (everything before the first /)
+  local prefixes
+  prefixes=$(echo "$merged_branches" | sed 's|/.*||' | sort -u)
+
+  for prefix in $prefixes; do
+    # Get all --merged branches for this prefix, sorted by date (newest first)
+    # The date is in the --merged-YYYY-MM-DD suffix
+    local branches_for_prefix
+    branches_for_prefix=$(echo "$merged_branches" | grep "^${prefix}/" | sort -t'-' -k$(echo "$prefix" | tr -cd '-' | wc -c | tr -d ' ' | xargs -I{} expr {} + 5) -r 2>/dev/null || echo "$merged_branches" | grep "^${prefix}/" | sort -r)
+
+    local count=0
+    while IFS= read -r branch; do
+      [[ -z "$branch" ]] && continue
+      count=$((count + 1))
+
+      if [[ $count -le $KEEP_COUNT ]]; then
+        echo "  ✓ KEEP $branch"
+      else
+        if $DRY_RUN; then
+          echo "  [dry-run] DELETE $branch"
+        else
+          git push origin --delete "$branch" 2>/dev/null && echo "  ✗ DELETED $branch" || echo "  ! FAILED to delete $branch"
+          git branch -d "$branch" 2>/dev/null || true
+        fi
+      fi
+    done <<< "$branches_for_prefix"
+  done
+
+  # Also clean up stale branches: branches without --merged suffix
+  # whose PRs are merged (they exist on remote but have no open PR)
+  echo ""
+  echo "Checking for stale unmerged-looking branches..."
+
+  local all_remote
+  all_remote=$(git branch -r | grep -v HEAD | grep -v "origin/main" | sed 's|origin/||' | sed 's/^[[:space:]]*//' | grep -v "\-\-merged\-" || true)
+
+  local current_branch
+  current_branch=$(git branch --show-current)
+
+  for branch in $all_remote; do
+    [[ -z "$branch" ]] && continue
+    # Skip the current working branch
+    [[ "$branch" == "$current_branch" ]] && continue
+
+    # Check if this branch is fully merged into main
+    if git merge-base --is-ancestor "origin/$branch" origin/main 2>/dev/null; then
+      if $DRY_RUN; then
+        echo "  [dry-run] DELETE $branch (merged but never renamed)"
+      else
+        git push origin --delete "$branch" 2>/dev/null && echo "  ✗ DELETED $branch (merged but never renamed)" || echo "  ! FAILED to delete $branch"
+        git branch -d "$branch" 2>/dev/null || true
+      fi
+    fi
+  done
+}
+
+if $PRUNE; then
+  prune_branches
+fi
+
+echo ""
+echo "Done."

package/scripts/publish-skill.sh

@@ -0,0 +1,134 @@
+#!/usr/bin/env bash
+#
+# publish-skill.sh ... publish SKILL.md to a website as plain text
+#
+# Usage:
+#   bash publish-skill.sh <repo-path> <website-path> [--name <name>] [--deploy]
+#
+# Examples:
+#   # Copy SKILL.md to website install directory
+#   bash publish-skill.sh /path/to/memory-crystal-private /path/to/wip-websites/wip.computer --name memory-crystal
+#
+#   # Copy and deploy to VPS
+#   bash publish-skill.sh /path/to/memory-crystal-private /path/to/wip-websites/wip.computer --name memory-crystal --deploy
+#
+#   # Auto-detect name from package.json
+#   bash publish-skill.sh /path/to/memory-crystal-private /path/to/wip-websites/wip.computer --deploy
+#
+# Convention:
+#   SKILL.md in the repo -> install/{name}.txt on the website
+#   The website serves these as plain text at yoursite.com/install/{name}.txt
+#   Any AI can fetch the URL and get clean, parseable content.
+#
+# Config (optional, in repo root):
+#   .skill-publish.json:
+#   {
+#     "name": "memory-crystal",
+#     "website": "/path/to/website",
+#     "deploy_command": "bash deploy.sh"
+#   }
+
+set -euo pipefail
+
+REPO_PATH="${1:-}"
+WEBSITE_PATH="${2:-}"
+NAME=""
+DO_DEPLOY=false
+
+# Parse flags
+shift 2 2>/dev/null || true
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --name) NAME="$2"; shift 2 ;;
+    --deploy) DO_DEPLOY=true; shift ;;
+    *) echo "Unknown flag: $1"; exit 1 ;;
+  esac
+done
+
+# ── Resolve from config if args are missing ──
+
+if [[ -z "$REPO_PATH" ]]; then
+  echo "Usage: bash publish-skill.sh <repo-path> <website-path> [--name <name>] [--deploy]"
+  exit 1
+fi
+
+# Try to load .skill-publish.json from repo
+CONFIG_FILE="$REPO_PATH/.skill-publish.json"
+if [[ -f "$CONFIG_FILE" ]]; then
+  if command -v node &>/dev/null; then
+    [[ -z "$WEBSITE_PATH" ]] && WEBSITE_PATH=$(node -p "require('$CONFIG_FILE').website || ''" 2>/dev/null || echo "")
+    [[ -z "$NAME" ]] && NAME=$(node -p "require('$CONFIG_FILE').name || ''" 2>/dev/null || echo "")
+    DEPLOY_CMD=$(node -p "require('$CONFIG_FILE').deploy_command || ''" 2>/dev/null || echo "")
+  fi
+fi
+
+if [[ -z "$WEBSITE_PATH" ]]; then
+  echo "Error: website path required (arg 2 or .skill-publish.json)"
+  exit 1
+fi
+
+# ── Auto-detect name from package.json ──
+
+if [[ -z "$NAME" ]]; then
+  if [[ -f "$REPO_PATH/package.json" ]] && command -v node &>/dev/null; then
+    NAME=$(node -p "require('$REPO_PATH/package.json').name || ''" 2>/dev/null || echo "")
+    # Strip npm scope (@wipcomputer/foo -> foo)
+    NAME="${NAME#@*/}"
+  fi
+fi
+
+if [[ -z "$NAME" ]]; then
+  echo "Error: could not determine skill name. Use --name or add to package.json"
+  exit 1
+fi
+
+# ── Find SKILL.md ──
+
+SKILL_FILE=""
+
+# Check skills/*/SKILL.md first (standard location)
+if [[ -z "$SKILL_FILE" ]]; then
+  FOUND=$(find "$REPO_PATH/skills" -maxdepth 2 -name "SKILL.md" 2>/dev/null | head -1)
+  [[ -n "$FOUND" ]] && SKILL_FILE="$FOUND"
+fi
+
+# Check root SKILL.md
+if [[ -z "$SKILL_FILE" && -f "$REPO_PATH/SKILL.md" ]]; then
+  SKILL_FILE="$REPO_PATH/SKILL.md"
+fi
+
+if [[ -z "$SKILL_FILE" ]]; then
+  echo "Error: no SKILL.md found in $REPO_PATH"
+  exit 1
+fi
+
+# ── Publish ──
+
+INSTALL_DIR="$WEBSITE_PATH/install"
+mkdir -p "$INSTALL_DIR"
+
+cp "$SKILL_FILE" "$INSTALL_DIR/$NAME.txt"
+echo "Published: install/$NAME.txt (from $(basename "$SKILL_FILE"))"
+
+# ── Deploy if requested ──
+
+if [[ "$DO_DEPLOY" == "true" ]]; then
+  # Look for deploy script in website directory
+  DEPLOY_SCRIPT=""
+  if [[ -n "${DEPLOY_CMD:-}" ]]; then
+    DEPLOY_SCRIPT="$DEPLOY_CMD"
+  elif [[ -f "$WEBSITE_PATH/../deploy.sh" ]]; then
+    DEPLOY_SCRIPT="bash $WEBSITE_PATH/../deploy.sh"
+  elif [[ -f "$WEBSITE_PATH/deploy.sh" ]]; then
+    DEPLOY_SCRIPT="bash $WEBSITE_PATH/deploy.sh"
+  fi
+
+  if [[ -n "$DEPLOY_SCRIPT" ]]; then
+    echo "Deploying website..."
+    eval "$DEPLOY_SCRIPT"
+  else
+    echo "Warning: --deploy requested but no deploy script found."
+    echo "  Looked for: deploy.sh in website directory"
+    echo "  Or set deploy_command in .skill-publish.json"
+  fi
+fi

package/tools/deploy-public/LICENSE

@@ -0,0 +1,52 @@
+Dual License: MIT + AGPLv3
+
+Copyright (c) 2026 WIP Computer, Inc.
+
+
+1. MIT License (local and personal use)
+---------------------------------------
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+2. GNU Affero General Public License v3.0 (commercial and cloud use)
+--------------------------------------------------------------------
+
+If you run this software as part of a hosted service, cloud platform,
+marketplace listing, or any network-accessible offering for commercial
+purposes, the AGPLv3 terms apply. You must either:
+
+  a) Release your complete source code under AGPLv3, or
+  b) Obtain a commercial license.
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU Affero General Public License as published
+by the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+GNU Affero General Public License for more details.
+
+You should have received a copy of the GNU Affero General Public License
+along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+
+AGPLv3 for personal use is free. Commercial licenses available.

package/tools/deploy-public/README.md

@@ -0,0 +1,31 @@
+###### WIP Computer
+
+# Private-to-Public Sync
+
+Publish safely. Syncs your private working repo to a clean public mirror. Excludes internal `ai/` folders automatically.
+
+## What it does
+
+- Copies everything except `ai/` and `.git/` to the public repo
+- Creates a PR on the public repo, merges it
+- Syncs GitHub releases from private to public
+- Cleans up deploy branches
+
+## Usage
+
+```bash
+bash deploy-public.sh /path/to/private-repo org/public-repo
+```
+
+## Requirements
+
+- git
+- gh (GitHub CLI)
+- bash
+
+## Interfaces
+
+- **CLI**: Shell script
+- **Skill**: SKILL.md for agent instructions
+
+## Part of [AI DevOps Toolbox](https://github.com/wipcomputer/wip-ai-devops-toolbox)

package/tools/deploy-public/SKILL.md

@@ -0,0 +1,71 @@
+---
+name: deploy-public
+description: Private-to-public repo sync. Copies everything except ai/ to the public mirror. Creates PR, merges, syncs releases.
+license: MIT
+interface: [cli, skill]
+metadata:
+  display-name: "Private-to-Public Sync"
+  version: "1.3.0"
+  homepage: "https://github.com/wipcomputer/wip-ai-devops-toolbox"
+  author: "Parker Todd Brooks"
+  category: dev-tools
+  capabilities:
+    - repo-sync
+    - release-sync
+  requires:
+    bins: [git, gh, bash]
+  openclaw:
+    requires:
+      bins: [git, gh, bash]
+    emoji: "🚢"
+compatibility: Requires git, gh (GitHub CLI), bash.
+---
+
+# deploy-public
+
+Private-to-public repo sync. One script for all repos. Copies code, creates a PR on the public repo, merges it, and syncs GitHub releases.
+
+## When to Use This Skill
+
+**Use deploy-public for:**
+- Publishing a private repo's code to its public counterpart
+- After running `wip-release` on the private repo (release must exist first)
+- Syncing release notes from private to public
+
+**CRITICAL: Release order matters.**
+1. Merge PR to private repo's main
+2. Run `wip-release` (creates GitHub release with notes on private repo)
+3. THEN run `deploy-public.sh` (pulls notes from private release)
+
+If you skip step 2, the public release gets empty notes.
+
+### Do NOT Use For
+
+- Repos without a `-private` counterpart
+- First-time repo setup (create the public repo on GitHub first)
+
+## API Reference
+
+### CLI
+
+```bash
+bash scripts/deploy-public.sh /path/to/private-repo org/public-repo
+```
+
+### Examples
+
+```bash
+# Deploy memory-crystal
+bash scripts/deploy-public.sh /path/to/memory-crystal-private wipcomputer/memory-crystal
+
+# Deploy wip-dev-tools
+bash scripts/deploy-public.sh /path/to/wip-ai-devops-toolbox-private wipcomputer/wip-ai-devops-toolbox
+```
+
+## What It Does
+
+1. Clones the public repo to a temp directory
+2. Copies all files from private repo (excluding `ai/`, `.git/`)
+3. Creates a branch, commits, pushes, creates PR
+4. Merges the PR (regular merge, never squash)
+5. Syncs GitHub releases (pulls notes from private repo's releases)