@wipcomputer/wip-ai-devops-toolbox 1.9.20

package/tools/wip-release/mcp-server.mjs

@@ -0,0 +1,109 @@
+#!/usr/bin/env node
+// wip-release/mcp-server.mjs
+// MCP server exposing release pipeline as tools.
+// Wraps core.mjs. Registered via .mcp.json.
+
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { CallToolRequestSchema, ListToolsRequestSchema } from '@modelcontextprotocol/sdk/types.js';
+import {
+  release, detectCurrentVersion, bumpSemver, buildReleaseNotes,
+} from './core.mjs';
+
+const server = new Server(
+  { name: 'wip-release', version: '1.3.0' },
+  { capabilities: { tools: {} } }
+);
+
+// ── Tool Definitions ──
+
+server.setRequestHandler(ListToolsRequestSchema, async () => ({
+  tools: [
+    {
+      name: 'release',
+      description: 'Run the full release pipeline. Bumps version, updates changelog + SKILL.md, commits, tags, publishes to npm + GitHub. Must be run from repo root or provide repoPath.',
+      inputSchema: {
+        type: 'object',
+        properties: {
+          repoPath: { type: 'string', description: 'Absolute path to the repo. Defaults to cwd.' },
+          level: { type: 'string', enum: ['patch', 'minor', 'major'], description: 'Semver bump level' },
+          notes: { type: 'string', description: 'Changelog entry and release notes summary' },
+          dryRun: { type: 'boolean', description: 'Preview only, no changes', default: false },
+          noPublish: { type: 'boolean', description: 'Bump + tag only, skip npm/GitHub publish', default: false },
+          skipProductCheck: { type: 'boolean', description: 'Skip product doc freshness check', default: false },
+        },
+        required: ['level', 'notes'],
+      },
+    },
+    {
+      name: 'release_status',
+      description: 'Check current version and what the next version would be for a given bump level.',
+      inputSchema: {
+        type: 'object',
+        properties: {
+          repoPath: { type: 'string', description: 'Absolute path to the repo. Defaults to cwd.' },
+          level: { type: 'string', enum: ['patch', 'minor', 'major'], description: 'Semver bump level to preview' },
+        },
+        required: ['level'],
+      },
+    },
+  ],
+}));
+
+// ── Tool Handlers ──
+
+server.setRequestHandler(CallToolRequestSchema, async (req) => {
+  const { name, arguments: args } = req.params;
+
+  if (name === 'release') {
+    try {
+      const result = await release({
+        repoPath: args.repoPath || process.cwd(),
+        level: args.level,
+        notes: args.notes,
+        dryRun: args.dryRun || false,
+        notesSource: 'flag', // MCP always passes notes directly
+        noPublish: args.noPublish || false,
+        skipProductCheck: args.skipProductCheck || false,
+      });
+      return {
+        content: [{
+          type: 'text',
+          text: `Release complete: ${result.currentVersion} -> ${result.newVersion}${result.dryRun ? ' (dry run)' : ''}`,
+        }],
+      };
+    } catch (err) {
+      return {
+        content: [{ type: 'text', text: `Release failed: ${err.message}` }],
+        isError: true,
+      };
+    }
+  }
+
+  if (name === 'release_status') {
+    try {
+      const repoPath = args.repoPath || process.cwd();
+      const current = detectCurrentVersion(repoPath);
+      const next = bumpSemver(current, args.level);
+      return {
+        content: [{
+          type: 'text',
+          text: `Current: ${current}\nNext (${args.level}): ${next}`,
+        }],
+      };
+    } catch (err) {
+      return {
+        content: [{ type: 'text', text: `Status check failed: ${err.message}` }],
+        isError: true,
+      };
+    }
+  }
+
+  return {
+    content: [{ type: 'text', text: `Unknown tool: ${name}` }],
+    isError: true,
+  };
+});
+
+const transport = new StdioServerTransport();
+await server.connect(transport);

package/tools/wip-release/package.json

@@ -0,0 +1,36 @@
+{
+  "name": "@wipcomputer/wip-release",
+  "version": "1.9.20",
+  "type": "module",
+  "description": "One-command release pipeline. Bumps version, updates changelog + SKILL.md, publishes to npm + GitHub.",
+  "main": "core.mjs",
+  "bin": {
+    "wip-release": "cli.js"
+  },
+  "exports": {
+    ".": "./core.mjs",
+    "./cli": "./cli.js"
+  },
+  "scripts": {
+    "test": "node cli.js --help"
+  },
+  "keywords": [
+    "release",
+    "version",
+    "publish",
+    "npm",
+    "agent-native",
+    "sensor",
+    "actuator"
+  ],
+  "author": "Parker Todd Brooks",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/wipcomputer/wip-release.git"
+  },
+  "homepage": "https://github.com/wipcomputer/wip-ai-devops-toolbox",
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.0"
+  }
+}

package/tools/wip-repo-init/README.md

@@ -0,0 +1,38 @@
+###### WIP Computer
+
+# Repo Init
+
+Scaffold the standard `ai/` directory in any repo. Plans, notes, ideas, dev updates, todos. One command.
+
+## What it does
+
+- **New repo:** Creates the full `ai/` directory structure
+- **Existing repo:** Moves old `ai/` contents to `ai/_sort/ai_old/` so you can sort at your own pace
+- Nothing is deleted
+
+## The `ai/` directory
+
+```
+ai/
+  plan/              architecture plans, roadmaps
+  dev-updates/       what was built, session logs
+  todos/
+    PUNCHLIST.md     blockers to ship
+    inboxes/         per-agent action items
+  notes/             research, references, raw conversation logs
+```
+
+The `ai/` folder is the development process. It is not part of the published product. Public repos exclude it via deploy-public.sh.
+
+## Usage
+
+```bash
+node tools/wip-repo-init/init.mjs /path/to/repo
+```
+
+## Interfaces
+
+- **CLI**: Run from terminal
+- **Skill**: SKILL.md for agent instructions
+
+## Part of [AI DevOps Toolbox](https://github.com/wipcomputer/wip-ai-devops-toolbox)

package/tools/wip-repo-init/SKILL.md

@@ -0,0 +1,77 @@
+---
+name: wip-repo-init
+description: Scaffold the standard ai/ directory structure in any repo.
+license: MIT
+interface: [cli, skill]
+metadata:
+  display-name: "Repo Init"
+  version: "1.0.0"
+  homepage: "https://github.com/wipcomputer/wip-ai-devops-toolbox"
+  author: "Parker Todd Brooks"
+  category: repo-management
+  capabilities:
+    - scaffold-ai-dir
+    - template-copy
+  requires:
+    bins: [node]
+  openclaw:
+    requires:
+      bins: [node]
+    install:
+      - id: node
+        kind: node
+        package: "@wipcomputer/wip-repo-init"
+        bins: [wip-repo-init]
+        label: "Install via npm"
+    emoji: "📁"
+compatibility: Requires node. Node.js 18+.
+---
+
+# Repo Init
+
+Scaffolds the standard `ai/` directory structure in any repo.
+
+## Commands
+
+```
+wip-repo-init /path/to/repo              # scaffold ai/ in a repo
+wip-repo-init /path/to/repo --dry-run    # preview without changes
+wip-repo-init /path/to/repo --yes        # skip confirmation prompt
+```
+
+## What happens
+
+**New repo (no ai/ folder):** Creates the full standard structure with all READMEs explaining what goes where.
+
+**Existing repo (ai/ folder exists):** Shows you what will happen and asks for confirmation. If you say yes:
+1. Moves your current `ai/` contents to `ai/_sort/ai_old/`
+2. Scaffolds the new standard structure
+3. You sort files from `ai_old/` into the new structure at your own pace
+
+Nothing is deleted. Your old files are all in `ai/_sort/ai_old/`.
+
+## The standard ai/ structure
+
+```
+ai/
+  read-me-first.md          <- explains everything, links to all sections
+  _sort/                    <- holding pen for files that need sorting
+  _trash/                   <- archive (never delete, move here)
+  dev-updates/              <- engineering changelog, auto-detected by wip-release
+  product/
+    readme-first-product.md <- the product bible
+    notes/                  <- freeform notes, research
+    plans-prds/             <- plans with lifecycle stages
+      roadmap.md            <- prioritized roadmap
+      current/              <- plans being built now
+      upcoming/             <- plans that are next
+      archive-complete/     <- plans that shipped
+      todos/                <- per-agent todo files
+    product-ideas/          <- ideas that aren't plans yet
+```
+
+Every folder has a `_trash/` subfolder. Every section has a README explaining what it is, what goes in it, and how to maintain it.
+
+## Interfaces
+
+CLI, Skill

package/tools/wip-repo-init/init.mjs

@@ -0,0 +1,142 @@
+#!/usr/bin/env node
+// wip-repo-init: scaffold the standard ai/ directory structure in any repo.
+//
+// New repo (no ai/ folder):
+//   Copies the template as-is.
+//
+// Existing repo (ai/ folder exists):
+//   1. Creates the new ai/ structure
+//   2. Moves old ai/ contents into ai/_sort/ai_old/
+//   3. You sort from there at your own pace.
+
+import { existsSync, mkdirSync, cpSync, renameSync, readdirSync, statSync } from 'node:fs';
+import { join, resolve, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { createInterface } from 'node:readline';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const TEMPLATE = join(__dirname, 'ai');
+
+const targetRepo = resolve(process.argv[2] || process.cwd());
+const aiDir = join(targetRepo, 'ai');
+const dryRun = process.argv.includes('--dry-run');
+
+const forceYes = process.argv.includes('--yes') || process.argv.includes('-y');
+
+function log(msg) { console.log(`  ${msg}`); }
+function ok(msg) { console.log(`  ✓ ${msg}`); }
+function skip(msg) { console.log(`  - ${msg}`); }
+
+async function confirm(question) {
+  if (forceYes) return true;
+  const rl = createInterface({ input: process.stdin, output: process.stdout });
+  return new Promise(resolve => {
+    rl.question(`  ${question} (y/N) `, answer => {
+      rl.close();
+      resolve(answer.trim().toLowerCase() === 'y');
+    });
+  });
+}
+
+// Recursively copy template, skipping files that already exist
+function scaffoldDir(src, dest) {
+  if (!existsSync(dest)) {
+    if (!dryRun) mkdirSync(dest, { recursive: true });
+    ok(`Created ${dest.replace(targetRepo + '/', '')}`);
+  }
+
+  for (const entry of readdirSync(src)) {
+    if (entry === '.DS_Store') continue;
+    const srcPath = join(src, entry);
+    const destPath = join(dest, entry);
+    const stat = statSync(srcPath);
+
+    if (stat.isDirectory()) {
+      scaffoldDir(srcPath, destPath);
+    } else {
+      if (existsSync(destPath)) {
+        skip(`${destPath.replace(targetRepo + '/', '')} already exists`);
+      } else {
+        if (!dryRun) cpSync(srcPath, destPath);
+        ok(`${destPath.replace(targetRepo + '/', '')}`);
+      }
+    }
+  }
+}
+
+console.log('');
+console.log(`  wip-repo-init${dryRun ? ' (dry run)' : ''}`);
+console.log(`  Target: ${targetRepo}`);
+console.log(`  ${'─'.repeat(40)}`);
+
+if (!existsSync(targetRepo)) {
+  console.log(`  ✗ Target directory does not exist: ${targetRepo}`);
+  process.exit(1);
+}
+
+if (existsSync(aiDir)) {
+  // Existing ai/ folder: explain what will happen, then confirm
+  log('Found existing ai/ folder.');
+  console.log('');
+  log('Here\'s what will happen:');
+  log('  1. Your current ai/ contents will be moved to ai/_sort/ai_old/');
+  log('  2. The standard ai/ structure will be scaffolded');
+  log('  3. You can sort files from ai_old/ into the new structure at your own pace');
+  console.log('');
+  log('Nothing is deleted. Your old files will all be in ai/_sort/ai_old/.');
+  console.log('');
+
+  const sortDir = join(aiDir, '_sort');
+  const aiOldDir = join(sortDir, 'ai_old');
+
+  if (existsSync(aiOldDir)) {
+    console.log(`  ✗ ai/_sort/ai_old/ already exists. A previous init was run but not sorted yet.`);
+    console.log(`    Sort the files in ai/_sort/ai_old/ first, then run again.`);
+    process.exit(1);
+  }
+
+  if (dryRun) {
+    log('[dry run] Would move old ai/ contents to ai/_sort/ai_old/');
+    log('[dry run] Would scaffold new ai/ structure:');
+    console.log('');
+    scaffoldDir(TEMPLATE, aiDir);
+    console.log(`\n  ${'─'.repeat(40)}`);
+    console.log('  Dry run complete. No changes made.\n');
+    process.exit(0);
+  }
+
+  const proceed = await confirm('Proceed?');
+  if (!proceed) {
+    console.log('  Cancelled.\n');
+    process.exit(0);
+  }
+
+  console.log('');
+  const tmpOld = join(targetRepo, '_ai_old_tmp');
+  renameSync(aiDir, tmpOld);
+  ok('Moved old ai/ to temporary location');
+
+  scaffoldDir(TEMPLATE, aiDir);
+
+  mkdirSync(join(aiDir, '_sort'), { recursive: true });
+  renameSync(tmpOld, aiOldDir);
+  ok('Moved old ai/ contents to ai/_sort/ai_old/');
+} else {
+  // No ai/ folder: scaffold from scratch
+  log('No existing ai/ folder. Scaffolding from template.');
+  console.log('');
+  scaffoldDir(TEMPLATE, aiDir);
+}
+
+console.log(`  ${'─'.repeat(40)}`);
+if (dryRun) {
+  console.log('  Dry run complete. No changes made.');
+} else {
+  ok('Done.');
+  if (existsSync(join(aiDir, '_sort', 'ai_old'))) {
+    console.log('');
+    log('Your old ai/ contents are in ai/_sort/ai_old/');
+    log('Sort them into the new structure at your own pace.');
+  }
+}
+console.log('');

package/tools/wip-repo-init/package.json

@@ -0,0 +1,11 @@
+{
+  "name": "@wipcomputer/wip-repo-init",
+  "version": "1.9.20",
+  "description": "Scaffold the standard ai/ directory structure in any repo",
+  "type": "module",
+  "bin": {
+    "wip-repo-init": "init.mjs"
+  },
+  "license": "MIT",
+  "author": "WIP Computer"
+}

package/tools/wip-repo-permissions-hook/LICENSE

@@ -0,0 +1,52 @@
+Dual License: MIT + AGPLv3
+
+Copyright (c) 2026 WIP Computer, Inc.
+
+
+1. MIT License (local and personal use)
+---------------------------------------
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+2. GNU Affero General Public License v3.0 (commercial and cloud use)
+--------------------------------------------------------------------
+
+If you run this software as part of a hosted service, cloud platform,
+marketplace listing, or any network-accessible offering for commercial
+purposes, the AGPLv3 terms apply. You must either:
+
+  a) Release your complete source code under AGPLv3, or
+  b) Obtain a commercial license.
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU Affero General Public License as published
+by the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+GNU Affero General Public License for more details.
+
+You should have received a copy of the GNU Affero General Public License
+along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+
+AGPLv3 for personal use is free. Commercial licenses available.

package/tools/wip-repo-permissions-hook/README.md

@@ -0,0 +1,86 @@
+###### WIP Computer
+
+[![npm](https://img.shields.io/npm/v/@wipcomputer/wip-repo-permissions-hook)](https://www.npmjs.com/package/@wipcomputer/wip-repo-permissions-hook) [![CLI / TUI](https://img.shields.io/badge/interface-CLI_/_TUI-black)](https://github.com/wipcomputer/wip-ai-devops-toolbox/blob/main/tools/wip-repo-permissions-hook/cli.js) [![MCP Server](https://img.shields.io/badge/interface-MCP_Server-black)](https://github.com/wipcomputer/wip-ai-devops-toolbox/blob/main/tools/wip-repo-permissions-hook/mcp-server.mjs) [![OpenClaw Plugin](https://img.shields.io/badge/interface-OpenClaw_Plugin-black)](https://github.com/wipcomputer/wip-ai-devops-toolbox/blob/main/tools/wip-repo-permissions-hook/openclaw.plugin.json) [![Claude Code Hook](https://img.shields.io/badge/interface-Claude_Code_Hook-black)](https://github.com/wipcomputer/wip-ai-devops-toolbox/blob/main/tools/wip-repo-permissions-hook/guard.mjs) [![Claude Code Skill](https://img.shields.io/badge/interface-Claude_Code_Skill-black)](https://github.com/wipcomputer/wip-ai-devops-toolbox/blob/main/tools/wip-repo-permissions-hook/SKILL.md) [![Universal Interface Spec](https://img.shields.io/badge/Universal_Interface_Spec-black?style=flat&color=black)](https://github.com/wipcomputer/wip-ai-devops-toolbox/blob/main/tools/wip-universal-installer/SPEC.md)
+
+# wip-repo-permissions-hook
+
+## Repo visibility guard. Blocks repos from going public without a -private counterpart.
+
+Every repo follows the public/private pattern. The private repo is the working repo with `ai/` folders (plans, todos, dev updates). The public repo is the same code without `ai/`. Making a repo public without the -private counterpart exposes internal development context.
+
+This tool blocks that.
+
+## How It Works
+
+Before any repo visibility change to public, the guard checks:
+
+1. Is this a fork of an external project? If yes, allow (exempt).
+2. Does `{repo-name}-private` exist on GitHub? If yes, allow.
+3. Otherwise, block with an error.
+
+## Surfaces
+
+- **CLI** ... `wip-repo-permissions check|audit|can-publish`
+- **Claude Code hook** ... PreToolUse:Bash, blocks `gh repo edit --visibility public`
+- **OpenClaw plugin** ... before_tool_use lifecycle hook
+- **Cron audit** ... periodic scan of all public repos via ldm-jobs
+
+## CLI Usage
+
+```bash
+# Check a single repo
+node cli.js check wipcomputer/memory-crystal
+# -> OK: memory-crystal-private exists
+
+# Check a repo without -private (blocked)
+node cli.js check wipcomputer/wip-bridge
+# -> BLOCKED: no -private counterpart
+
+# Audit all public repos in org
+node cli.js audit wipcomputer
+
+# Alias for check
+node cli.js can-publish wipcomputer/wip-ai-devops-toolbox
+```
+
+## Claude Code Setup
+
+Add to `~/.claude/settings.json`:
+
+```json
+{
+  "hooks": {
+    "PreToolUse": [
+      {
+        "matcher": "Bash",
+        "hooks": [{
+          "type": "command",
+          "command": "node /path/to/wip-repo-permissions-hook/guard.mjs",
+          "timeout": 10
+        }]
+      }
+    ]
+  }
+}
+```
+
+## OpenClaw Setup
+
+Symlink or copy to extensions:
+
+```bash
+cp -r tools/wip-repo-permissions-hook ~/.ldm/extensions/wip-repo-permissions-hook
+ln -sf ~/.ldm/extensions/wip-repo-permissions-hook ~/.openclaw/extensions/wip-repo-permissions-hook
+openclaw gateway restart
+```
+
+## License
+
+```
+CLI, MCP server, OpenClaw plugin, hooks        MIT    (use anywhere, no restrictions)
+Hosted or cloud service use                    AGPL   (network service distribution)
+```
+
+AGPL for personal use is free.
+
+Built by Parker Todd Brooks, Lēsa (OpenClaw, Claude Opus 4.6), Claude Code (Claude Opus 4.6).

package/tools/wip-repo-permissions-hook/SKILL.md

@@ -0,0 +1,73 @@
+---
+name: wip-repo-permissions-hook
+description: Repo visibility guard. Blocks repos from going public without a -private counterpart.
+license: MIT
+interface: [cli, module, mcp, hook, plugin]
+metadata:
+  display-name: "Repo Visibility Guard"
+  version: "1.0.0"
+  homepage: "https://github.com/wipcomputer/wip-ai-devops-toolbox"
+  author: "Parker Todd Brooks"
+  category: dev-tools
+  capabilities:
+    - visibility-check
+    - org-audit
+    - public-gate
+  requires:
+    bins: [node, gh]
+  openclaw:
+    requires:
+      bins: [node, gh]
+    install:
+      - id: node
+        kind: node
+        package: "@wipcomputer/wip-repo-permissions-hook"
+        bins: [wip-repo-permissions]
+        label: "Install via npm"
+    emoji: "🔒"
+compatibility: Requires node, gh (GitHub CLI). Node.js 18+.
+---
+
+# Repo Permissions Hook
+
+## What This Does
+
+Prevents repos from being made public unless a `-private` counterpart exists on GitHub. Protects internal plans, todos, and development context from accidental exposure.
+
+## The Rule
+
+Every repo that goes public must have a `{name}-private` repo. The private repo holds `ai/` folders with plans, todos, dev updates, and notes. The public repo has the same code without `ai/`.
+
+Forks of external projects are exempt.
+
+## How to Use
+
+### Check before changing visibility
+```bash
+node cli.js check <org>/<repo>
+```
+
+### Audit all public repos
+```bash
+node cli.js audit <org>
+```
+
+### Install as Claude Code hook
+Add to `~/.claude/settings.json` under `hooks.PreToolUse` with matcher `"Bash"`.
+
+### Install as OpenClaw plugin
+Copy to `~/.ldm/extensions/wip-repo-permissions-hook/` and restart gateway.
+
+### MCP
+
+Tools: `repo_permissions_check`, `repo_permissions_audit`
+
+Add to `.mcp.json`:
+```json
+{
+  "wip-repo-permissions": {
+    "command": "node",
+    "args": ["/path/to/tools/wip-repo-permissions-hook/mcp-server.mjs"]
+  }
+}
+```