wordpress-agent-kit 0.4.0 → 0.6.0

package/skills-custom/wp-wpengine/scripts/ci-gate.sh

@@ -0,0 +1,118 @@
+#!/usr/bin/env bash
+# ci-gate.sh — run the full CI gate locally before pushing.
+#
+# Mirrors what GitHub Actions ci-gate.yml runs. Use this before any push
+# to a branch that triggers a WP Engine deploy.
+#
+# Usage:
+#   bash scripts/ci-gate.sh              # run both gates
+#   bash scripts/ci-gate.sh --php-only   # PHP gate only
+#   bash scripts/ci-gate.sh --js-only    # JS/TS gate only
+#
+# Exit code: 0 = all passed, 1 = at least one check failed.
+
+set -uo pipefail
+root="$(git rev-parse --show-toplevel)"
+cd "$root"
+
+PHP_ONLY=false
+JS_ONLY=false
+for arg in "$@"; do
+  [[ "$arg" == "--php-only" ]] && PHP_ONLY=true
+  [[ "$arg" == "--js-only" ]] && JS_ONLY=true
+done
+
+PASS=0
+FAIL=0
+
+run() {
+  local label="$1"; shift
+  echo "▶ $label"
+  if "$@" 2>&1; then
+    echo "  ✓ $label"
+    ((PASS++))
+  else
+    echo "  ✗ FAILED: $label"
+    ((FAIL++))
+    return 1
+  fi
+}
+
+# ── PHP gate ──────────────────────────────────────────────────────────────────
+if ! $JS_ONLY; then
+  echo ""
+  echo "── PHP gate ──────────────────────────────────────────────────────────"
+  if command -v composer >/dev/null 2>&1 && [ -f composer.json ]; then
+    if [ ! -d vendor ]; then
+      echo "▶ composer install"
+      composer install --no-interaction --quiet
+    fi
+
+    run "php -l (all tracked PHP files)" \
+      bash -c 'git ls-files "*.php" | xargs -P4 php -l > /dev/null'
+
+    if [ -x vendor/bin/phpcs ]; then
+      run "phpcs (WordPress coding standards)" composer run phpcs
+    else
+      echo "  ⚠  phpcs not found — run: composer install"
+    fi
+
+    if [ -x vendor/bin/phpstan ]; then
+      run "phpstan (static analysis)" composer run phpstan
+    else
+      echo "  ⚠  phpstan not found — run: composer install"
+    fi
+  else
+    echo "  ⚠  composer not available or no composer.json — skipping PHP gate"
+  fi
+fi
+
+# ── JS/TS gate ────────────────────────────────────────────────────────────────
+if ! $PHP_ONLY; then
+  echo ""
+  echo "── JS/TS gate ────────────────────────────────────────────────────────"
+  if [ -f package.json ]; then
+    if [ ! -d node_modules ]; then
+      echo "▶ npm install"
+      npm install --silent
+    fi
+
+    if [ -x node_modules/.bin/biome ]; then
+      run "biome check (lint + format)" npx biome check .
+    else
+      echo "  ⚠  biome not installed — run: npm install"
+    fi
+
+    if npm run typecheck --if-present 2>/dev/null; then
+      ((PASS++))
+    elif command -v tsc >/dev/null 2>&1 || [ -x node_modules/.bin/tsc ]; then
+      run "tsc --noEmit (type check)" npx tsc --noEmit
+    fi
+
+    if npm run test --if-present 2>/dev/null; then
+      ((PASS++))
+    fi
+
+    if npm run build --if-present 2>/dev/null; then
+      ((PASS++))
+    fi
+  else
+    echo "  ⚠  No package.json — skipping JS/TS gate"
+  fi
+fi
+
+# ── Summary ───────────────────────────────────────────────────────────────────
+echo ""
+echo "── CI Gate Result ────────────────────────────────────────────────────"
+echo "  Passed : $PASS"
+echo "  Failed : $FAIL"
+echo ""
+
+if [[ "$FAIL" -eq 0 ]]; then
+  echo "✅ Gate green — safe to push."
+  exit 0
+else
+  echo "❌ Gate failed — fix the issues above before pushing."
+  echo "   --no-verify is not a valid workaround; CI will catch the same failures."
+  exit 1
+fi

package/skills-custom/wp-wpengine/scripts/wpe-check.sh

@@ -0,0 +1,89 @@
+#!/usr/bin/env bash
+# wpe-check.sh — verify SSH connectivity to all configured WP Engine environments.
+#
+# Reads installs from wp-cli.yml @aliases (ssh: field) or from WPE_INSTALLS env var.
+# Useful after first-time machine setup or when debugging SSH issues.
+#
+# Usage:
+#   bash scripts/wpe-check.sh
+#   WPE_INSTALLS="mysite mysitestg mysitedev" bash scripts/wpe-check.sh
+#
+# Exit code: 0 = all connected, 1 = at least one failed.
+
+set -uo pipefail
+root="$(git rev-parse --show-toplevel 2>/dev/null || pwd)"
+cd "$root"
+
+SSH_OPTS="-o BatchMode=yes -o ConnectTimeout=8 -o StrictHostKeyChecking=accept-new"
+
+# ── Discover installs from wp-cli.yml @aliases ────────────────────────────────
+declare -A ALIAS_MAP   # install → alias label
+CURRENT_ALIAS=""
+
+if [ -f wp-cli.yml ]; then
+  while IFS= read -r line; do
+    if [[ "$line" =~ ^@([a-zA-Z0-9_-]+): ]]; then
+      CURRENT_ALIAS="${BASH_REMATCH[1]}"
+    elif [[ "$line" =~ ^[[:space:]]+ssh:[[:space:]]+([^@[:space:]]+)@[^[:space:]]+ && -n "$CURRENT_ALIAS" ]]; then
+      INSTALL="${BASH_REMATCH[1]}"
+      ALIAS_MAP["$INSTALL"]="@${CURRENT_ALIAS}"
+      CURRENT_ALIAS=""
+    fi
+  done < wp-cli.yml
+fi
+
+# Fallback: WPE_INSTALLS env var
+if [ "${#ALIAS_MAP[@]}" -eq 0 ] && [ -n "${WPE_INSTALLS:-}" ]; then
+  for slug in $WPE_INSTALLS; do
+    ALIAS_MAP["$slug"]="$slug"
+  done
+fi
+
+if [ "${#ALIAS_MAP[@]}" -eq 0 ]; then
+  echo "No WP Engine installs found."
+  echo ""
+  echo "Options:"
+  echo "  1. Add @aliases with 'ssh: <install>@<install>.ssh.wpengine.net' to wp-cli.yml"
+  echo "  2. Set WPE_INSTALLS='slug1 slug2 slug3' environment variable"
+  exit 1
+fi
+
+echo ""
+echo "── WP Engine SSH connectivity ────────────────────────────────────────"
+printf "  %-25s %-15s %-12s %s\n" "Install" "Alias" "Status" "WP version"
+echo "  ─────────────────────────────────────────────────────────────────"
+
+PASS=0
+FAIL=0
+
+for INSTALL in "${!ALIAS_MAP[@]}"; do
+  ALIAS="${ALIAS_MAP[$INSTALL]}"
+  SSH_HOST="${INSTALL}.ssh.wpengine.net"
+
+  WP_VERSION=$(ssh $SSH_OPTS "${INSTALL}@${SSH_HOST}" \
+    wp core version --skip-plugins --skip-themes 2>/dev/null || echo "")
+
+  if [ -n "$WP_VERSION" ]; then
+    printf "  %-25s %-15s %-12s %s\n" "$INSTALL" "$ALIAS" "✓ connected" "$WP_VERSION"
+    ((PASS++))
+  else
+    printf "  %-25s %-15s %-12s %s\n" "$INSTALL" "$ALIAS" "✗ FAILED" "—"
+    ((FAIL++))
+  fi
+done
+
+echo ""
+echo "  $PASS connected  |  $FAIL failed"
+
+if [[ "$FAIL" -gt 0 ]]; then
+  echo ""
+  echo "Troubleshooting:"
+  echo "  • Confirm key exists:  ls -la ~/.ssh/wpengine_ed25519"
+  echo "  • Confirm permissions: chmod 600 ~/.ssh/wpengine_ed25519"
+  echo "  • Trust the host:      ssh-keyscan -H ssh.wpengine.net >> ~/.ssh/known_hosts"
+  echo "  • Check portal:        https://my.wpengine.com/ssh_keys"
+  echo "  • Verify git access:   ssh git@git.wpengine.com info"
+fi
+
+echo ""
+[[ "$FAIL" -eq 0 ]] && exit 0 || exit 1

package/skills-custom/wp-wpengine/scripts/wpe-preflight.sh

@@ -0,0 +1,104 @@
+#!/usr/bin/env bash
+# wpe-preflight.sh — pre-deploy sanity checks for a WP Engine environment.
+#
+# Verifies SSH access, WP-CLI, site URL consistency, HTTP health, and
+# active plugin count before any deploy touches production or staging.
+#
+# Usage:
+#   INSTALL=mysite bash scripts/wpe-preflight.sh [staging|production]
+#   WPE_INSTALL=mysite bash scripts/wpe-preflight.sh production
+#
+# Exit code: 0 = all checks passed (safe to deploy), 1 = at least one failed.
+
+set -uo pipefail
+
+ENV="${1:-production}"
+INSTALL="${WPE_INSTALL:-${INSTALL:-}}"
+
+if [ -z "$INSTALL" ]; then
+  echo "❌ Usage: INSTALL=<slug> bash scripts/wpe-preflight.sh [staging|production]"
+  echo "   The install slug is the WP Engine environment name (e.g., 'mysite', 'mysitestg')."
+  exit 1
+fi
+
+SSH_HOST="${INSTALL}.ssh.wpengine.net"
+SSH_OPTS="-o BatchMode=yes -o ConnectTimeout=15 -o StrictHostKeyChecking=accept-new"
+WP="ssh $SSH_OPTS ${INSTALL}@${SSH_HOST} wp"
+
+PASS=0
+FAIL=0
+
+check() {
+  local label="$1"; shift
+  printf "  %-50s" "$label"
+  local output
+  if output=$("$@" 2>&1); then
+    echo "✓  $output"
+    ((PASS++))
+  else
+    echo "✗  FAILED"
+    echo "     $output" >&2
+    ((FAIL++))
+  fi
+}
+
+echo ""
+echo "── WP Engine preflight: ${INSTALL} (${ENV}) ─────────────────────"
+echo ""
+
+# ── SSH ───────────────────────────────────────────────────────────────────────
+echo "SSH"
+check "SSH gateway reachable" \
+  ssh $SSH_OPTS "${INSTALL}@${SSH_HOST}" echo "connected"
+
+check "WP-CLI available" \
+  $WP --info --skip-plugins --skip-themes
+
+# ── WordPress ─────────────────────────────────────────────────────────────────
+echo ""
+echo "WordPress"
+check "WP core version" \
+  $WP core version --skip-plugins --skip-themes
+
+check "siteurl option readable" \
+  $WP option get siteurl --skip-plugins --skip-themes
+
+check "Active plugins present (count > 0)" \
+  bash -c "COUNT=\$(${WP} plugin list --status=active --format=count --skip-plugins --skip-themes 2>&1); echo \"\$COUNT active\"; [[ \"\$COUNT\" -gt 0 ]]"
+
+check "No pending DB upgrades" \
+  $WP core update-db --dry-run --skip-plugins --skip-themes
+
+# ── HTTP health ───────────────────────────────────────────────────────────────
+echo ""
+echo "HTTP health"
+SITE_URL=$(ssh $SSH_OPTS "${INSTALL}@${SSH_HOST}" \
+  wp option get home --skip-plugins --skip-themes 2>/dev/null || echo "")
+
+if [ -n "$SITE_URL" ]; then
+  check "Homepage returns 2xx/3xx" \
+    bash -c "STATUS=\$(curl -s -o /dev/null -w '%{http_code}' -L --max-time 15 '${SITE_URL}'); echo \"HTTP \$STATUS\"; [[ \"\$STATUS\" -ge 200 && \"\$STATUS\" -lt 400 ]]"
+
+  check "No PHP errors in homepage body" \
+    bash -c "BODY=\$(curl -sL --max-time 15 '${SITE_URL}'); echo \"\${#BODY} chars\"; ! echo \"\$BODY\" | grep -qi 'fatal error\|parse error\|warning: '"
+
+  check "wp-json REST API responds" \
+    bash -c "STATUS=\$(curl -s -o /dev/null -w '%{http_code}' --max-time 10 '${SITE_URL}/wp-json/wp/v2/'); echo \"HTTP \$STATUS\"; [[ \"\$STATUS\" -ge 200 && \"\$STATUS\" -lt 400 ]]"
+else
+  echo "  ⚠  Could not retrieve site URL — skipping HTTP checks"
+fi
+
+# ── Result ────────────────────────────────────────────────────────────────────
+echo ""
+echo "── Preflight result ──────────────────────────────────────────────────"
+echo "  Passed : $PASS"
+echo "  Failed : $FAIL"
+echo ""
+
+if [[ "$FAIL" -eq 0 ]]; then
+  echo "✅ All checks passed — safe to deploy to ${ENV}."
+  exit 0
+else
+  echo "❌ Preflight failed — resolve the issues above before deploying to ${ENV}."
+  exit 1
+fi

package/.github/skills/wp-wpengine/SKILL.md

@@ -1,127 +0,0 @@
----
-name: wp-wpengine
-description: "Optional: Use for WP Engine hosting workflows — SSH-based git push to WP Engine environments, managing installs/domains/cache/backups via the wpe-labs Claude Code skills, and WP Engine API access. Requires WPE_USERNAME and WPE_PASSWORD env vars."
-license: GPL-2.0-or-later
-optional: true
----
-
-# WP Engine
-
-## When to use
-
-- Deploy WordPress code to a WP Engine environment via `git push`.
-- Manage WP Engine installs, domains, cache, backups, or users through natural language.
-- Generate monthly usage/bandwidth reports across WP Engine accounts.
-- Manage LargeFS media offload configuration.
-
-## Prerequisites
-
-- SSH key for WP Engine git push stored in 1Password (`Employee` vault, item `wpengine_ed25519`).
-- WP Engine API credentials in 1Password (`Employee` vault, item `WP Engine API`).
-- `op` CLI authenticated (`op whoami` works).
-- The `wpe-labs` Claude Code skills installed (`~/.claude/skills/wpe-labs:*`).
-
-## Procedure
-
-### 1) First-time SSH setup on a new machine
-
-Pull the private key from 1Password and configure SSH:
-
-```bash
-op read "op://Employee/wpengine_ed25519/private key" > ~/.ssh/wpengine_ed25519
-chmod 600 ~/.ssh/wpengine_ed25519
-ssh-keyscan git.wpengine.com >> ~/.ssh/known_hosts
-```
-
-Add to `~/.ssh/config` (before any `Host *` block):
-```
-Host git.wpengine.com
-  User git
-  IdentityFile ~/.ssh/wpengine_ed25519
-  IdentitiesOnly yes
-```
-
-Verify:
-```bash
-ssh git@git.wpengine.com info
-# Expected: hello <username> / R W <install-name>
-```
-
-The public key is already registered on WP Engine — no portal action needed on new machines.
-
-### 2) Add a WP Engine git remote
-
-Find the remote URL on the WP Engine portal: `https://my.wpengine.com/installs/<ENV>/git_push`
-
-```bash
-git remote add wpengine git@git.wpengine.com:<install-name>.git
-# Example for staging:
-git remote add wpengine-staging git@git.wpengine.com:<install-name>stg.git
-```
-
-### 3) Deploy via git push
-
-```bash
-git push wpengine main
-```
-
-- WP Engine deploys the pushed branch automatically.
-- Only the WordPress files are pushed (not `node_modules`, build artifacts, etc.).
-- After push, WP Engine may take 1–2 min to propagate the deploy.
-
-### 4) wpe-labs skills (natural language management)
-
-Load API credentials, then use any `/wpe-labs:*` skill:
-
-```bash
-# Load credentials from 1Password for the session
-eval $(op run --env-file ~/.config/op-ssh/.env.1pass -- env | grep ^WPE | sed 's/^/export /')
-```
-
-Available skills:
-
-| Skill | What it does | Risk |
-|---|---|---|
-| `/wpe-labs:account-usage` | Bandwidth, visits, storage across accounts | 🟢 Read-only |
-| `/wpe-labs:monthly-report` | Client-ready monthly usage report | 🟢 Read-only |
-| `/wpe-labs:backups` | On-demand backups + progress monitoring | 🟡 Write |
-| `/wpe-labs:cache` | Purge object/page/CDN cache | 🟡 Write |
-| `/wpe-labs:users` | List, invite, update roles, remove users | 🟡/🔴 |
-| `/wpe-labs:domains` | Manage domains, DNS, SSL | 🟡/🔴 |
-| `/wpe-labs:installs` | List, create, copy WordPress installs | 🟡/🔴 |
-| `/wpe-labs:offload` | LargeFS media offload config | 🟡 Write |
-
-Example prompts:
-```
-/wpe-labs:account-usage which accounts are closest to their bandwidth limit?
-/wpe-labs:cache purge all cache for uofdev production
-/wpe-labs:backups back up uofdev production before deployment
-/wpe-labs:installs copy uofdev production to staging
-/wpe-labs:monthly-report last month
-```
-
-### 5) Re-installing wpe-labs skills
-
-```bash
-curl -fsSL https://raw.githubusercontent.com/wpengine/wpe-labs-platform-skills/main/install.sh | bash
-```
-
-## Verification
-
-- SSH: `ssh git@git.wpengine.com info` — should return `hello <username> / R W <install>`
-- API: `op run --env-file ~/.config/op-ssh/.env.1pass -- bash -c 'curl -s -u "$WPE_USERNAME:$WPE_PASSWORD" https://api.wpengineapi.com/v1/user | jq .email'`
-
-## Failure modes
-
-- **SSH: Host key verification failed** — re-run `ssh-keyscan git.wpengine.com >> ~/.ssh/known_hosts`
-- **SSH: Permission denied** — confirm the key is at `~/.ssh/wpengine_ed25519` with `chmod 600`
-- **git push rejected** — verify the remote URL matches the install name exactly
-- **wpe-labs: 401 Unauthorized** — regenerate API credentials at `https://my.wpengine.com/api_access` and update the `WP Engine API` item in 1Password
-- **wpe-labs: storage shows zero** — ask Claude to "refresh storage" (async recalculation, ~30–60s)
-
-## References
-
-- WP Engine git push portal: `https://my.wpengine.com/installs/<ENV>/git_push`
-- WP Engine API access: `https://my.wpengine.com/api_access`
-- wpe-labs skills source: `https://github.com/wpengine/wpe-labs-platform-skills`
-- SSH setup log (first machine): gist `602d6a16ddfea438c0611a8e5cc31d5e`

package/.github/workflows/ci.yml

@@ -1,44 +0,0 @@
-name: CI
-
-on:
-  push:
-    branches: [main, master]
-  pull_request:
-    branches: [main, master]
-
-jobs:
-  lint-and-test:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-
-      - name: Setup pnpm
-        uses: pnpm/action-setup@v4
-        with:
-          version: 9
-          run_install: false
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: '22'
-          cache: 'pnpm'
-
-      - name: Install dependencies
-        run: pnpm install --frozen-lockfile
-
-      - name: Check formatting
-        run: pnpm run format:check
-
-      - name: Run lint
-        run: pnpm run lint:check
-
-      - name: Type check
-        run: pnpm run check
-
-      - name: Run tests
-        run: pnpm run test:run
-
-      - name: Build
-        run: pnpm run build

package/.husky/pre-commit

@@ -1,7 +0,0 @@
-#!/bin/sh
-. "$(dirname "$0")/_/husky.sh"
-
-pnpm exec biome check --write .
-git add -A
-pnpm run lint:check
-pnpm run test:run