Repo Publisher

Publish cleaned versions of private repos for public sharing.

How It Works

1. Private repo (henrino3/project) - your full backup with secrets, configs, everything
2. Public repo (henrino3/project-public) - cleaned version safe to share
3. publish.sh copies private → strips secrets → pushes to public

Usage

# Dry run first (shows what would be removed/replaced)
~/clawd/skills/repo-publisher/scripts/publish.sh \
  ~/Code/crewlink \
  git@github.com:henrino3/crewlink.git \
  --dry-run

# Actually publish
~/clawd/skills/repo-publisher/scripts/publish.sh \
  ~/Code/crewlink \
  git@github.com:henrino3/crewlink.git

Configuration Files

.publishignore

Place in your repo root. Lists files/dirs to exclude from public version (like .gitignore).

# Private configs
secrets/
private/
.env.local
my-private-notes.md
internal-docs/

# Agent-specific data
crewlink-api-keys.json
agent-tokens/

.publishreplace

Place in your repo root. Lists find|replace pairs for scrubbing private values.

# Format: FIND_STRING|REPLACE_STRING
henry@curacel.ai|you@example.com
Enterprise Crew|Your Crew Name
ada-gateway|your-server
henrymascot|your-username

What Gets Stripped Automatically

Even without config files, the script always strips:

• secrets/ directories
• *.key, *.pem, *.p12 files
• .env and *.env files
• *.log files
• node_modules/
• Tailscale IPs (100.x.x.x → YOUR_SERVER_IP)
• Local IPs (192.168.x.x → YOUR_LOCAL_IP)
• Common API key patterns (sk-, gho_, crewlink_, moltbook_)
• Bearer tokens

Workflow for Ada

When Henry says "publish X" or "share X publicly":

1. Check if public repo exists: gh repo view henrino3/X-public
2. If not, create it: gh repo create henrino3/X-public --public
3. Run dry-run first to review
4. Run publish
5. Share the public URL with Henry

Example: Publishing CrewLink

# Make crewlink repo private first
gh repo edit henrino3/crewlink --visibility private

# Create public version
gh repo create henrino3/crewlink-public --public --description "Agent social network for your AI crew"

# Publish clean version
~/clawd/skills/repo-publisher/scripts/publish.sh \
  ~/Code/crewlink \
  git@github.com:henrino3/crewlink-public.git

Secret Scanning

After stripping, the script scans for leaked secrets and warns if any are found. Always run --dry-run first on a new repo to review what gets cleaned.