Add script to delete automated GitHub releases while preserving tags

.gitignore

@@ -30,3 +30,6 @@ package-lock.json
 .claude/.worktrees
 .claude/settings.local.json
 CLAUDE.local.md
+
+# Backups written by scripts/delete_automated_releases.sh
+automated-releases-backup-*.json

scripts/delete_automated_releases.sh

@@ -0,0 +1,170 @@
+#!/usr/bin/env bash
+#
+# Delete GitHub Releases whose body starts with one of the auto-release
+# markers ("Automated release for" / "Dispatch release for") while KEEPING the
+# underlying git tags.
+#
+# These Release entries are created by the automated/dispatch release CI
+# workflows (one per sub-package version bump) and clutter the Releases page.
+# Deleting the Release object removes only the GitHub Releases UI entry; the
+# git tag -- and therefore the commit it points at and anything that resolves
+# it (pip installs, changelog links, etc.) -- is left untouched, because we
+# never pass `gh release delete --cleanup-tag`.
+#
+# Scope: top-level reflex releases -- the main package's bare "vX.Y.Z" tags, as
+# opposed to "<pkg>-v..." sub-package tags -- are KEPT in full when they are NOT
+# pre-releases, since those finalized core releases are the canonical entries on
+# the Releases page. Their pre-release (alpha) counterparts (e.g. v0.9.4a1) and
+# every sub-package release (reflex-base-v..., reflex-components-*-v..., etc.)
+# are still removed.
+#
+# Usage:
+#   scripts/delete_automated_releases.sh                  # dry run: list matches, delete nothing
+#   scripts/delete_automated_releases.sh --apply          # delete (asks for confirmation once)
+#   scripts/delete_automated_releases.sh --apply --yes    # delete without the confirmation prompt
+#   REPO=owner/name scripts/delete_automated_releases.sh  # target a different repo (default below)
+#   scripts/delete_automated_releases.sh --repo=owner/name --apply
+#
+# Requires: gh (https://cli.github.com/, authenticated via `gh auth login`) and jq.
+
+set -euo pipefail
+
+REPO="${REPO:-reflex-dev/reflex}"
+
+# Body prefixes that identify an auto-generated release. Matching is exact
+# (no leading-whitespace tolerance). Add/remove entries here to adjust scope.
+PREFIXES=("Automated release for" "Dispatch release for")
+
+usage() {
+  # Print the header comment block (from line 3 to the first non-comment line),
+  # stripping the leading "# " so --help reads as plain help text.
+  awk 'NR>=3 { if (/^#/) { sub(/^# ?/, ""); print; next } else exit }' "$0"
+}
+
+apply=false
+assume_yes=false
+for arg in "$@"; do
+  case "$arg" in
+    --apply) apply=true ;;
+    -y | --yes) assume_yes=true ;;
+    --repo=*) REPO="${arg#--repo=}" ;;
+    -h | --help)
+      usage
+      exit 0
+      ;;
+    *)
+      echo "error: unknown argument '$arg' (try --help)" >&2
+      exit 2
+      ;;
+  esac
+done
+
+command -v gh >/dev/null 2>&1 || {
+  echo "error: gh CLI not found -- install from https://cli.github.com/" >&2
+  exit 1
+}
+command -v jq >/dev/null 2>&1 || {
+  echo "error: jq not found -- install jq to run this script" >&2
+  exit 1
+}
+gh auth status >/dev/null 2>&1 || {
+  echo "error: gh is not authenticated -- run 'gh auth login'" >&2
+  exit 1
+}
+
+# Build the jq selector by OR-ing a startswith() clause per prefix. Each prefix
+# is JSON-encoded via jq so any quotes/backslashes are escaped safely.
+select_expr=""
+for p in "${PREFIXES[@]}"; do
+  enc=$(jq -cn --arg s "$p" '$s')
+  select_expr+="${select_expr:+ or }(.body | startswith($enc))"
+done
+
+# A release is eligible for deletion when its body matches a prefix, UNLESS it is
+# a top-level reflex release (bare "vX.Y.Z" tag, i.e. the main package rather
+# than a "<pkg>-v..." sub-package) that is not a pre-release -- those finalized
+# core entries are kept. test("^v[0-9]") matches only the main package's tags.
+keep_toplevel='(.tag_name | test("^v[0-9]")) and (.prerelease == false)'
+match_filter="select(.body != null and ($select_expr)) | select(($keep_toplevel) | not)"
+
+echo "Repository : $REPO"
+echo "Matching   : body starts with one of:"
+for p in "${PREFIXES[@]}"; do echo "               - \"$p\""; done
+echo "Keeping    : top-level non-pre-release reflex (vX.Y.Z) entries, e.g. v0.9.5"
+echo "Tags       : preserved (releases deleted without --cleanup-tag)"
+echo
+
+# Discover matching releases across all pages. gh applies --jq per page when
+# paginating, so this streams one "<tag>\t<first body line>" row per match.
+echo "Fetching releases for $REPO ..." >&2
+if ! rows_raw=$(gh api "repos/$REPO/releases" --paginate \
+  --jq "[.[] | $match_filter] | .[] | [.tag_name, (.body | split(\"\n\")[0] | rtrimstr(\"\r\"))] | @tsv"); then
+  echo "error: failed to list releases for $REPO" >&2
+  exit 1
+fi
+
+tags=()
+if [[ -n "$rows_raw" ]]; then
+  while IFS=$'\t' read -r tag firstline; do
+    [[ -z "$tag" ]] && continue
+    tags+=("$tag")
+    printf '  %-42s %s\n' "$tag" "$firstline"
+  done <<<"$rows_raw"
+fi
+
+count=${#tags[@]}
+echo
+echo "Found $count matching release(s)."
+
+if [[ "$count" -eq 0 ]]; then
+  echo "Nothing to do."
+  exit 0
+fi
+
+if [[ "$apply" != true ]]; then
+  echo
+  if [[ "$assume_yes" == true ]]; then
+    echo "Note: --yes has no effect without --apply."
+  fi
+  echo "Dry run -- no releases were deleted. Re-run with --apply to delete them."
+  exit 0
+fi
+
+# Back up the full matching release objects before deleting, so the entries can
+# be inspected (or recreated) later. --paginate emits one array per page; merge
+# them with a local 'jq -s add'. The timestamp keeps each run's backup distinct
+# so retrying after a partial failure never clobbers an earlier backup.
+backup="automated-releases-backup-${REPO//\//-}-$(date +%Y%m%d-%H%M%S).json"
+echo
+echo "Backing up matching releases to $backup ..."
+gh api "repos/$REPO/releases" --paginate --jq "[.[] | $match_filter]" | jq -s 'add' >"$backup"
+
+if [[ "$assume_yes" != true ]]; then
+  echo
+  read -r -p "Delete these $count release(s) from $REPO (tags will be kept)? [y/N] " reply
+  case "$reply" in
+    [yY] | [yY][eE][sS]) ;;
+    *)
+      echo "Aborted. No releases deleted."
+      exit 0
+      ;;
+  esac
+fi
+
+echo
+deleted=0
+failed=0
+for tag in "${tags[@]}"; do
+  # No --cleanup-tag: the Release is removed but the git tag is kept.
+  if gh release delete "$tag" --repo "$REPO" --yes; then
+    echo "  deleted release: $tag (tag kept)"
+    deleted=$((deleted + 1))
+  else
+    echo "  FAILED to delete: $tag" >&2
+    failed=$((failed + 1))
+  fi
+done
+
+echo
+echo "Done. Deleted $deleted release(s); $failed failure(s). Tags were not touched."
+[[ "$failed" -eq 0 ]]