@wipcomputer/wip-ai-devops-toolbox 1.9.24 → 1.9.25

package/CHANGELOG.md

@@ -31,6 +31,10 @@
 
 
 
+
+## 1.9.25 (2026-03-14)
+
+Fix branch guard matcher (catches Bash + NotebookEdit). Add Forced Git Worktrees and Branch Guard sections to SKILL.md. Update SPEC.md and TECHNICAL.md with all 17 tools and LDM OS links.
 
 ## 1.9.24 (2026-03-14)
 

package/SKILL.md

@@ -5,7 +5,7 @@ license: MIT
 interface: [cli, module, mcp, skill, hook, plugin]
 metadata:
   display-name: "WIP AI DevOps Toolbox"
-  version: "1.9.24"
+  version: "1.9.25"
   homepage: "https://github.com/wipcomputer/wip-ai-devops-toolbox"
   author: "Parker Todd Brooks"
   category: dev-tools
@@ -673,6 +673,42 @@ Edit any section independently before deploying. Same pattern as release notes:
 
 **Interfaces:** CLI, Skill
 
+### Forced Git Worktrees
+
+Every repo uses git worktrees. Agents never edit on main. Period.
+
+When an agent needs to make changes, it creates a worktree (isolated copy of the repo on its own branch). All edits happen there. Main stays clean. Multiple agents can work on the same repo simultaneously without collisions. When the work is done, it goes through a PR to merge back.
+
+**How it works:**
+- Agent runs `EnterWorktree` (Claude Code) or `git worktree add` to get an isolated copy
+- All edits happen on the worktree branch
+- When done: commit, push, create PR, merge
+- Main is never touched directly
+
+**Interfaces:** CLI, CC Hook
+
+### Branch Guard
+
+Blocks all writes on main. The enforcement layer for forced worktrees.
+
+**How it works as a CC Hook:**
+- Runs as a PreToolUse hook in Claude Code
+- Intercepts `Write`, `Edit`, `NotebookEdit`, and destructive `Bash` commands
+- Resolves which repo the target file belongs to (from the file path, not CWD)
+- If that repo's current branch is main: **blocked**
+- Read-only operations (Read, Glob, Grep) are always allowed
+- Git operations that don't modify files (status, log, diff, branch, checkout, pull, merge, push) are allowed
+- `gh` commands (issues, PRs, releases) are allowed
+
+**Commands:**
+```
+wip-branch-guard --check       # report current branch status for all repos
+```
+
+**Where it writes:** Nothing. It only reads and blocks.
+
+**Interfaces:** CC Hook
+
 ---
 
 ## MCP Server Configuration

package/TECHNICAL.md

@@ -31,23 +31,24 @@ ldm doctor
 
 ## Tools
 
-### wip-universal-installer
+### Universal Installer (built into [LDM OS](https://github.com/wipcomputer/wip-ldm-os))
 
-The Universal Interface specification for agent-native software. Defines how every tool ships six interfaces: CLI, importable module, MCP Server, OpenClaw Plugin, Skill, Claude Code Hook. Includes a reference installer and a minimal example template.
+The Universal Interface specification for agent-native software. Defines how every tool ships six interfaces: CLI, importable module, MCP Server, OpenClaw Plugin, Skill, Claude Code Hook. The detection engine powers [`ldm install`](https://github.com/wipcomputer/wip-ldm-os).
 
 ```bash
 # Detect what interfaces a repo supports
-wip-install /path/to/repo --dry-run
+ldm install /path/to/repo --dry-run
 
 # Install a tool from GitHub
+ldm install wipcomputer/wip-file-guard
+
+# Standalone fallback (bootstraps LDM OS if needed)
 wip-install wipcomputer/wip-file-guard
 ```
 
-**Source:** Pure JavaScript, no build step. [`tools/wip-universal-installer/detect.mjs`](tools/wip-universal-installer/detect.mjs) (detection), [`tools/wip-universal-installer/install.js`](tools/wip-universal-installer/install.js) (installer). Zero dependencies.
-
-[README](tools/wip-universal-installer/README.md) ... [SKILL.md](tools/wip-universal-installer/SKILL.md) ... [SPEC.md](tools/wip-universal-installer/SPEC.md) ... [Reference](tools/wip-universal-installer/REFERENCE.md)
+**Source:** Pure JavaScript, no build step. [`tools/wip-universal-installer/detect.mjs`](tools/wip-universal-installer/detect.mjs) (detection), [`tools/wip-universal-installer/install.js`](tools/wip-universal-installer/install.js) (standalone installer). Zero dependencies. LDM OS deploy engine at [`lib/deploy.mjs`](https://github.com/wipcomputer/wip-ldm-os/blob/main/lib/deploy.mjs).
 
-Also available as `UNIVERSAL-INTERFACE.md` at the repo root.
+[README](tools/wip-universal-installer/README.md) ... [SKILL.md](tools/wip-universal-installer/SKILL.md) ... [Universal Interface Spec](tools/wip-universal-installer/SPEC.md) ... [Reference](tools/wip-universal-installer/REFERENCE.md)
 
 ### Dev Guide
 
@@ -211,6 +212,62 @@ wip-repos tree
 
 [README](tools/wip-repos/README.md)
 
+### wip-repo-init
+
+Scaffold the standard `ai/` directory in any repo. Plans, notes, ideas, dev updates, todos. One command.
+
+New repo: creates the full structure. Existing repo: moves old `ai/` contents to `ai/_sort/ai_old/` so you can sort at your own pace. Nothing is deleted.
+
+```bash
+wip-repo-init /path/to/repo              # scaffold ai/ in a repo
+wip-repo-init /path/to/repo --dry-run    # preview without changes
+```
+
+**Source:** Pure JavaScript, no build step. [`tools/wip-repo-init/init.mjs`](tools/wip-repo-init/init.mjs). Zero dependencies.
+
+[README](tools/wip-repo-init/README.md) ... [SKILL.md](tools/wip-repo-init/SKILL.md)
+
+### wip-readme-format
+
+Generate or validate READMEs that follow the WIP Computer standard. Badges, title, tagline, "Teach Your AI" block, features, interface coverage table, license.
+
+```bash
+wip-readme-format /path/to/repo              # generate section files
+wip-readme-format /path/to/repo --deploy     # assemble into final README
+wip-readme-format /path/to/repo --dry-run    # preview without writing
+```
+
+**Source:** Pure JavaScript, no build step. [`tools/wip-readme-format/format.mjs`](tools/wip-readme-format/format.mjs). Zero dependencies. Reads templates from `ai/wip-templates/readme/`.
+
+[README](tools/wip-readme-format/README.md) ... [SKILL.md](tools/wip-readme-format/SKILL.md)
+
+### wip-license-guard
+
+License enforcement for your own repos. Checks copyright, dual-license (MIT+AGPL), CLA, README license section. Toolbox-aware: checks every sub-tool. Interactive first-run setup. Auto-fix mode repairs issues.
+
+```bash
+wip-license-guard check                  # audit current repo
+wip-license-guard check --fix            # audit and auto-fix
+wip-license-guard init --from-standard   # apply WIP Computer defaults
+wip-license-guard readme-license         # audit/fix license blocks across all repos
+```
+
+**Source:** Pure JavaScript, no build step. [`tools/wip-license-guard/cli.mjs`](tools/wip-license-guard/cli.mjs) (CLI), [`tools/wip-license-guard/core.mjs`](tools/wip-license-guard/core.mjs) (logic). Zero dependencies.
+
+[README](tools/wip-license-guard/README.md) ... [SKILL.md](tools/wip-license-guard/SKILL.md)
+
+### wip-branch-guard
+
+Blocks all writes on main branch. The enforcement layer for forced worktrees. PreToolUse hook that catches Write, Edit, and destructive Bash commands. Resolves the repo from the file path, not the CWD, so it works when Claude Code opens in a different directory.
+
+```bash
+wip-branch-guard --check       # report current branch status
+```
+
+**Source:** Pure JavaScript, no build step. [`tools/wip-branch-guard/guard.mjs`](tools/wip-branch-guard/guard.mjs). Zero dependencies.
+
+[INSTALL.md](tools/wip-branch-guard/INSTALL.md)
+
 ## Source Code
 
 All implementation source is committed in this repo. No closed binaries, no mystery boxes.
@@ -263,20 +320,43 @@ node cli.js --dry-run patch --notes="test"
 Tell your AI:
 
 ```
-Read the SKILL.md at github.com/wipcomputer/wip-ai-devops-toolbox/blob/main/SKILL.md.
+Read wip.computer/install/wip-ai-devops-toolbox.txt
+
 Then explain what these tools do and help me set them up.
 ```
 
-Or install individually:
+Or install via LDM OS:
+
+```bash
+npm install -g @wipcomputer/wip-ldm-os
+ldm init
+ldm install wipcomputer/wip-ai-devops-toolbox --dry-run
+ldm install wipcomputer/wip-ai-devops-toolbox
+ldm doctor
+```
+
+Or install the root package directly:
+
+```bash
+npm install -g @wipcomputer/wip-ai-devops-toolbox
+```
+
+Or install individual tools:
 
 ```bash
 npm install -g @wipcomputer/wip-release
 npm install -g @wipcomputer/wip-license-hook
 npm install -g @wipcomputer/wip-file-guard
-npm install -g @wipcomputer/universal-installer
 npm install -g @wipcomputer/wip-repos
 ```
 
 ## License
 
-MIT. Built by Parker Todd Brooks, Lēsa (OpenClaw, Claude Opus 4.6), Claude Code CLI (Claude Opus 4.6).
+Dual-license model designed to keep tools free while preventing commercial resellers.
+
+```
+MIT      All CLI tools, MCP servers, skills, and hooks (use anywhere, no restrictions).
+AGPLv3   Commercial redistribution, marketplace listings, or bundling into paid services.
+```
+
+Built by Parker Todd Brooks, Lēsa (OpenClaw, Claude Opus 4.6), Claude Code (Claude Opus 4.6).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-ai-devops-toolbox",
-  "version": "1.9.24",
+  "version": "1.9.25",
   "type": "module",
   "description": "The complete AI DevOps toolkit for AI-assisted development teams.",
   "license": "MIT",

package/tools/deploy-public/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/deploy-public",
-  "version": "1.9.24",
+  "version": "1.9.25",
   "description": "Private-to-public repo sync. Excludes ai/ folder, creates PR, merges, cleans up branches.",
   "bin": {
     "deploy-public": "./deploy-public.sh"

package/tools/post-merge-rename/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/post-merge-rename",
-  "version": "1.9.24",
+  "version": "1.9.25",
   "description": "Post-merge branch renaming. Appends --merged-YYYY-MM-DD to preserve history.",
   "bin": {
     "post-merge-rename": "./post-merge-rename.sh"

package/tools/wip-branch-guard/package.json

@@ -1,11 +1,18 @@
 {
   "name": "@wipcomputer/wip-branch-guard",
-  "version": "1.9.24",
+  "version": "1.9.25",
   "description": "PreToolUse hook that blocks all writes on main branch. Forces agents to work on branches or worktrees.",
   "type": "module",
   "main": "guard.mjs",
   "bin": {
     "wip-branch-guard": "guard.mjs"
   },
+  "claudeCode": {
+    "hook": {
+      "event": "PreToolUse",
+      "matcher": "Write|Edit|NotebookEdit|Bash",
+      "timeout": 5
+    }
+  },
   "license": "MIT"
 }

package/tools/wip-file-guard/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-file-guard",
-  "version": "1.9.24",
+  "version": "1.9.25",
   "type": "module",
   "description": "Hook that blocks destructive edits to protected identity files. For Claude Code CLI and OpenClaw.",
   "main": "guard.mjs",

package/tools/wip-license-guard/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-license-guard",
-  "version": "1.9.24",
+  "version": "1.9.25",
   "description": "License compliance for your own repos. Ensures correct copyright, dual-license blocks, and LICENSE files.",
   "type": "module",
   "bin": {

package/tools/wip-license-hook/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-license-hook",
-  "version": "1.9.24",
+  "version": "1.9.25",
   "description": "License rug-pull detection and dependency license compliance for open source projects",
   "type": "module",
   "main": "dist/cli/index.js",

package/tools/wip-readme-format/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-readme-format",
-  "version": "1.9.24",
+  "version": "1.9.25",
   "description": "Reformat any repo's README to follow the WIP Computer standard. Agent-first, human-readable.",
   "type": "module",
   "bin": {

package/tools/wip-release/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-release",
-  "version": "1.9.24",
+  "version": "1.9.25",
   "type": "module",
   "description": "One-command release pipeline. Bumps version, updates changelog + SKILL.md, publishes to npm + GitHub.",
   "main": "core.mjs",

package/tools/wip-repo-init/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-repo-init",
-  "version": "1.9.24",
+  "version": "1.9.25",
   "description": "Scaffold the standard ai/ directory structure in any repo",
   "type": "module",
   "bin": {

package/tools/wip-repo-permissions-hook/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-repo-permissions-hook",
-  "version": "1.9.24",
+  "version": "1.9.25",
   "type": "module",
   "description": "Repo visibility guard. Blocks repos from going public without a -private counterpart.",
   "main": "core.mjs",

package/tools/wip-repos/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-repos",
-  "version": "1.9.24",
+  "version": "1.9.25",
   "type": "module",
   "description": "Repo manifest reconciler. Single source of truth for repo organization. Like prettier for folder structure.",
   "main": "core.mjs",

package/tools/wip-universal-installer/SPEC.md

@@ -161,20 +161,46 @@ The `ai/` folder is the development process. It is not part of the published pro
 
 ## The Reference Installer
 
-`wip-install` is the reference implementation. It scans a repo, detects which interfaces exist, and installs them all. One command.
+`ldm install` is the primary installer (part of LDM OS). `wip-install` is the standalone fallback. Both scan a repo, detect which interfaces exist, and install them all. One command.
 
 ```bash
-wip-install /path/to/repo          # local
-wip-install org/repo               # from GitHub
-wip-install --dry-run /path/to/repo # detect only
+ldm install /path/to/repo           # local (via LDM OS)
+ldm install org/repo                # from GitHub
+ldm install org/repo --dry-run      # detect only
+wip-install /path/to/repo           # standalone fallback (bootstraps LDM OS if needed)
 wip-install --json /path/to/repo    # JSON output
 ```
 
+For toolbox repos (with a `tools/` directory containing sub-tools), the installer enters toolbox mode and installs each sub-tool.
+
 ## Examples
 
-| Repo | Interfaces | Type |
-|------|------------|------|
-| [wip-grok](https://github.com/wipcomputer/wip-grok) | CLI + Module + MCP + Skill | Sensor + Actuator |
-| [wip-x](https://github.com/wipcomputer/wip-x) | CLI + Module + MCP + Skill | Sensor + Actuator |
-| [wip-file-guard](https://github.com/wipcomputer/wip-file-guard) | CLI + OpenClaw + CC Hook | Actuator |
-| [wip-markdown-viewer](https://github.com/wipcomputer/wip-markdown-viewer) | CLI + Module | Actuator |
+### AI DevOps Toolbox (this repo)
+
+| # | Tool | Interfaces |
+|---|------|------------|
+| | **Repo Management** | |
+| 1 | [Repo Visibility Guard](tools/wip-repo-permissions-hook/) | CLI + Module + MCP + OpenClaw + Skill + CC Hook |
+| 2 | [Repo Manifest Reconciler](tools/wip-repos/) | CLI + Module + MCP + Skill |
+| 3 | [Repo Init](tools/wip-repo-init/) | CLI + Skill |
+| 4 | [README Formatter](tools/wip-readme-format/) | CLI + Skill |
+| 5 | [Branch Guard](tools/wip-branch-guard/) | CLI + Module + CC Hook |
+| | **License, Compliance, and Protection** | |
+| 6 | [Identity File Protection](tools/wip-file-guard/) | CLI + Module + OpenClaw + Skill + CC Hook |
+| 7 | [License Guard](tools/wip-license-guard/) | CLI + Skill |
+| 8 | [License Rug-Pull Detection](tools/wip-license-hook/) | CLI + Module + MCP + Skill |
+| | **Release & Deploy** | |
+| 9 | [Release Pipeline](tools/wip-release/) | CLI + Module + MCP + Skill |
+| 10 | [Private-to-Public Sync](tools/deploy-public/) | CLI + Skill |
+| 11 | [Post-Merge Branch Naming](tools/post-merge-rename/) | CLI + Skill |
+| 12 | [Universal Installer](tools/wip-universal-installer/) | CLI + Module + Skill |
+
+### Other WIP Computer Tools
+
+| Repo | Interfaces |
+|------|------------|
+| [Memory Crystal](https://github.com/wipcomputer/memory-crystal) | CLI + Module + MCP + OpenClaw + Skill |
+| [LDM OS](https://github.com/wipcomputer/wip-ldm-os) | CLI + Module + Skill + CC Hook |
+| [wip-grok](https://github.com/wipcomputer/wip-grok) | CLI + Module + MCP + Skill |
+| [wip-x](https://github.com/wipcomputer/wip-x) | CLI + Module + MCP + Skill |
+| [Markdown Viewer](https://github.com/wipcomputer/wip-markdown-viewer) | CLI + Module |

package/tools/wip-universal-installer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/universal-installer",
-  "version": "1.9.24",
+  "version": "1.9.25",
   "type": "module",
   "description": "The Universal Interface specification for agent-native software. Teaches your AI how to build repos with every interface: CLI, Module, MCP Server, OpenClaw Plugin, Skill, Claude Code Hook.",
   "main": "detect.mjs",