@wipcomputer/wip-ai-devops-toolbox 1.9.30 → 1.9.32

package/CHANGELOG.md

@@ -31,6 +31,58 @@
 
 
 
+
+## 1.9.32 (2026-03-15)
+
+# --version on all CLIs + issue cleanup
+
+**Date:** 2026-03-15
+**Closes:** #190, #191, #169, #123, #119
+
+## What changed
+
+All 7 CLI tools now support `--version` and `-v`. Each reads its own `package.json` and prints the version. Previously, `wip-release --version` printed the help text instead of a version number.
+
+Tools updated: wip-release, wip-repos, wip-license-guard, wip-repo-permissions, wip-repo-init, wip-readme-format, wip-file-guard, wip-branch-guard.
+
+wip-license-guard also got a proper README (#169) with all commands, config format, and integration docs.
+
+## Issues closed
+
+- #190: wip-release --version should work
+- #191: enforce --version on all CLI tools
+- #169: wip-license-guard needs its own README
+- #123: Merge/Deploy/Install conflated (enforced across v1.9.25-v1.9.30)
+- #119: All destructive tools must have --dry-run (all confirmed)
+
+## 1.9.31 (2026-03-15)
+
+# Release Notes: wip-ai-devops-toolbox v1.9.31
+
+Branch guard no longer blocks global npm operations on main.
+
+## What changed
+
+Moved `npm install -g` and `npm link` from BLOCKED_BASH_PATTERNS to ALLOWED_BASH_PATTERNS in `wip-branch-guard/guard.mjs`. Global npm operations modify `/opt/homebrew/`, not the repo. Local `npm install` (no -g flag) remains blocked.
+
+## Why
+
+During LDM OS v0.4.0 dogfood, a CC session couldn't run `npm install -g @wipcomputer/wip-ldm-os@0.4.0` even after Parker explicitly said "install." The guard was too aggressive. Original intent (issue #137) was to block repo writes on main, not system-level package installs.
+
+## Issues closed
+
+- Closes #188 (branch guard blocks npm install -g)
+- Cross-ref: wipcomputer/wip-ldm-os#44
+
+## How to verify
+
+```bash
+# On main branch, these should now succeed:
+npm install -g @wipcomputer/wip-ldm-os@0.4.0
+npm link
+# This should still be blocked on main:
+npm install
+```
 
 ## 1.9.30 (2026-03-15)
 

package/SKILL.md

@@ -5,7 +5,7 @@ license: MIT
 interface: [cli, module, mcp, skill, hook, plugin]
 metadata:
   display-name: "WIP AI DevOps Toolbox"
-  version: "1.9.30"
+  version: "1.9.32"
   homepage: "https://github.com/wipcomputer/wip-ai-devops-toolbox"
   author: "Parker Todd Brooks"
   category: dev-tools

package/_trash/RELEASE-NOTES-v1-9-31.md

@@ -0,0 +1,26 @@
+# Release Notes: wip-ai-devops-toolbox v1.9.31
+
+Branch guard no longer blocks global npm operations on main.
+
+## What changed
+
+Moved `npm install -g` and `npm link` from BLOCKED_BASH_PATTERNS to ALLOWED_BASH_PATTERNS in `wip-branch-guard/guard.mjs`. Global npm operations modify `/opt/homebrew/`, not the repo. Local `npm install` (no -g flag) remains blocked.
+
+## Why
+
+During LDM OS v0.4.0 dogfood, a CC session couldn't run `npm install -g @wipcomputer/wip-ldm-os@0.4.0` even after Parker explicitly said "install." The guard was too aggressive. Original intent (issue #137) was to block repo writes on main, not system-level package installs.
+
+## Issues closed
+
+- Closes #188 (branch guard blocks npm install -g)
+- Cross-ref: wipcomputer/wip-ldm-os#44
+
+## How to verify
+
+```bash
+# On main branch, these should now succeed:
+npm install -g @wipcomputer/wip-ldm-os@0.4.0
+npm link
+# This should still be blocked on main:
+npm install
+```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-ai-devops-toolbox",
-  "version": "1.9.30",
+  "version": "1.9.32",
   "type": "module",
   "description": "The complete AI DevOps toolkit for AI-assisted development teams.",
   "license": "MIT",

package/tools/deploy-public/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/deploy-public",
-  "version": "1.9.30",
+  "version": "1.9.32",
   "description": "Private-to-public repo sync. Excludes ai/ folder, creates PR, merges, cleans up branches.",
   "bin": {
     "deploy-public": "./deploy-public.sh"

package/tools/post-merge-rename/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/post-merge-rename",
-  "version": "1.9.30",
+  "version": "1.9.32",
   "description": "Post-merge branch renaming. Appends --merged-YYYY-MM-DD to preserve history.",
   "bin": {
     "post-merge-rename": "./post-merge-rename.sh"

package/tools/wip-branch-guard/guard.mjs

@@ -5,8 +5,16 @@
 // Agents must work on branches or worktrees. Never on main.
 
 import { execSync } from 'node:child_process';
-import { dirname } from 'node:path';
-import { statSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { statSync, readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+
+if (process.argv.includes('--version') || process.argv.includes('-v')) {
+  const __dirname = dirname(fileURLToPath(import.meta.url));
+  const pkg = JSON.parse(readFileSync(join(__dirname, 'package.json'), 'utf8'));
+  console.log(pkg.version);
+  process.exit(0);
+}
 
 // Tools that modify files or git state
 const WRITE_TOOLS = new Set(['Write', 'Edit', 'NotebookEdit']);
@@ -49,8 +57,6 @@ const BLOCKED_BASH_PATTERNS = [
   /\brm\s+/,
   /\bmkdir\s+/,
   /\btouch\s+/,
-  /\bnpm\s+link\b/,
-  /\bnpm\s+install\s+-g\b/,
   />\s/,          // redirects
   /\btee\s+/,
   /\bsed\s+-i/,
@@ -77,6 +83,8 @@ const ALLOWED_BASH_PATTERNS = [
   /--dry-run/,
   /--help/,
   /\bwip-release\b.*--dry-run/,
+  /\bnpm\s+install\s+-g\b/,   // global installs modify /opt/homebrew/, not the repo
+  /\bnpm\s+link\b/,            // global operation, not repo-local
 ];
 
 function deny(reason) {

package/tools/wip-branch-guard/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-branch-guard",
-  "version": "1.9.30",
+  "version": "1.9.32",
   "description": "PreToolUse hook that blocks all writes on main branch. Forces agents to work on branches or worktrees.",
   "type": "module",
   "main": "guard.mjs",

package/tools/wip-file-guard/guard.mjs

@@ -5,8 +5,16 @@
 // - Blocks Write tool on protected files entirely
 // - Blocks Edit when net line removal > 2 lines
 
-import { basename } from 'node:path';
-import { existsSync } from 'node:fs';
+import { basename, dirname, join } from 'node:path';
+import { existsSync, readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+
+if (process.argv.includes('--version') || process.argv.includes('-v')) {
+  const __dirname = dirname(fileURLToPath(import.meta.url));
+  const pkg = JSON.parse(readFileSync(join(__dirname, 'package.json'), 'utf8'));
+  console.log(pkg.version);
+  process.exit(0);
+}
 
 // Exact basename matches
 export const PROTECTED = new Set([

package/tools/wip-file-guard/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-file-guard",
-  "version": "1.9.30",
+  "version": "1.9.32",
   "type": "module",
   "description": "Hook that blocks destructive edits to protected identity files. For Claude Code CLI and OpenClaw.",
   "main": "guard.mjs",

package/tools/wip-license-guard/README.md

@@ -2,31 +2,68 @@
 
 # License Guard
 
-Enforce licensing on every commit. Copyright, dual-license, CLA. Checked automatically.
+Enforce licensing on every repo. Copyright, dual-license, CLA, README license section. Checked automatically on every release.
 
-## What it does
+## Commands
 
-- Ensures your own repos have correct copyright, license type, and LICENSE files
-- Interactive first-run setup
-- Toolbox-aware: checks every sub-tool
-- Auto-fix mode repairs issues
-- `readme-license` scans all your repos and applies a standard license block to every README in one command
-- Removes duplicate license sections from sub-tool READMEs
+```bash
+wip-license-guard check                  # audit current repo
+wip-license-guard check --fix            # audit and auto-fix issues
+wip-license-guard init                   # interactive first-run setup
+wip-license-guard init --from-standard   # apply WIP Computer defaults without prompting
+wip-license-guard readme-license         # audit license blocks across all repos
+wip-license-guard readme-license --fix   # apply standard license block to all READMEs
+wip-license-guard readme-license --dry-run  # preview changes without writing
+```
 
-## Usage
+## What it checks
 
-```bash
-node tools/wip-license-guard/cli.mjs /path/to/repo
-node tools/wip-license-guard/cli.mjs /path/to/repo --fix
+- LICENSE file exists and matches configured license type
+- Copyright line is correct and current year
+- CLA.md exists (if configured)
+- README has a `## License` section with the standard block
+- For toolbox repos: checks every sub-tool in `tools/`
+
+## Config
+
+`.license-guard.json` in repo root. Created by `init`. Contains copyright holder, license type, year, and what to enforce.
+
+```json
+{
+  "copyright": "WIP Computer, Inc.",
+  "license": "MIT+AGPL",
+  "year": 2026,
+  "enforceCLA": true,
+  "enforceReadmeLicense": true
+}
 ```
 
-## Requirements
+## wip-release gate
+
+Step 0 of wip-release reads `.license-guard.json` and runs the same checks. If compliance fails, the release is blocked.
 
-- node (18+)
-- git
+## `--from-standard` generates
+
+- `.license-guard.json` with WIP Computer defaults
+- `LICENSE` file (dual MIT+AGPL)
+- `CLA.md`
+
+## readme-license
+
+Scans all repos in a directory and applies a standard license block to every README. Removes duplicate license sections from sub-tool READMEs. Reads templates from `ai/wip-templates/readme/`.
+
+## Source
+
+Pure JavaScript, no build step. Zero dependencies.
+
+- `cli.mjs` ... CLI entry point
+- `core.mjs` ... license checking and generation logic
+- `hook.mjs` ... wip-release gate integration
 
 ## Interfaces
 
-- **CLI**: Command-line tool
+- **CLI**: `wip-license-guard`
 
 ## Part of [AI DevOps Toolbox](https://github.com/wipcomputer/wip-ai-devops-toolbox)
+
+Built by Parker Todd Brooks, Lēsa (OpenClaw, Claude Opus 4.6), Claude Code (Claude Opus 4.6).

package/tools/wip-license-guard/cli.mjs

@@ -4,10 +4,18 @@
 // Ensures correct copyright, dual-license blocks, and LICENSE files.
 
 import { existsSync, readFileSync, writeFileSync, readdirSync } from 'node:fs';
-import { join } from 'node:path';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
 import { createInterface } from 'node:readline';
 import { generateLicense, generateCLA, generateReadmeBlock, replaceReadmeLicenseSection, removeReadmeLicenseSection } from './core.mjs';
 
+if (process.argv.includes('--version') || process.argv.includes('-v')) {
+  const __dirname = dirname(fileURLToPath(import.meta.url));
+  const pkg = JSON.parse(readFileSync(join(__dirname, 'package.json'), 'utf8'));
+  console.log(pkg.version);
+  process.exit(0);
+}
+
 const args = process.argv.slice(2);
 const HELP_FLAGS = ['--help', '-h', 'help'];
 const command = HELP_FLAGS.some(f => args.includes(f)) ? 'help' : (args.find(a => !a.startsWith('--')) || 'check');

package/tools/wip-license-guard/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-license-guard",
-  "version": "1.9.30",
+  "version": "1.9.32",
   "description": "License compliance for your own repos. Ensures correct copyright, dual-license blocks, and LICENSE files.",
   "type": "module",
   "bin": {

package/tools/wip-license-hook/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-license-hook",
-  "version": "1.9.30",
+  "version": "1.9.32",
   "description": "License rug-pull detection and dependency license compliance for open source projects",
   "type": "module",
   "main": "dist/cli/index.js",

package/tools/wip-readme-format/format.mjs

@@ -28,6 +28,13 @@ import { fileURLToPath } from 'node:url';
 import { detectInterfaces, detectToolbox } from '../wip-universal-installer/detect.mjs';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
+
+if (process.argv.includes('--version') || process.argv.includes('-v')) {
+  const pkg = JSON.parse(readFileSync(join(__dirname, 'package.json'), 'utf8'));
+  console.log(pkg.version);
+  process.exit(0);
+}
+
 const args = process.argv.slice(2);
 const DRY_RUN = args.includes('--dry-run');
 const CHECK = args.includes('--check');

package/tools/wip-readme-format/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-readme-format",
-  "version": "1.9.30",
+  "version": "1.9.32",
   "description": "Reformat any repo's README to follow the WIP Computer standard. Agent-first, human-readable.",
   "type": "module",
   "bin": {

package/tools/wip-release/cli.js

@@ -98,6 +98,15 @@ let notesSource = (notes !== null && notes !== undefined && notes !== '') ? 'fla
   }
 }
 
+if (args.includes('--version') || args.includes('-v')) {
+  const { readFileSync } = await import('node:fs');
+  const { join, dirname } = await import('node:path');
+  const { fileURLToPath } = await import('node:url');
+  const pkg = JSON.parse(readFileSync(join(dirname(fileURLToPath(import.meta.url)), 'package.json'), 'utf8'));
+  console.log(pkg.version);
+  process.exit(0);
+}
+
 if (!level || args.includes('--help') || args.includes('-h')) {
   const cwd = process.cwd();
   let current = '';

package/tools/wip-release/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-release",
-  "version": "1.9.30",
+  "version": "1.9.32",
   "type": "module",
   "description": "One-command release pipeline. Bumps version, updates changelog + SKILL.md, publishes to npm + GitHub.",
   "main": "core.mjs",

package/tools/wip-repo-init/init.mjs

@@ -9,12 +9,18 @@
 //   2. Moves old ai/ contents into ai/_sort/ai_old/
 //   3. You sort from there at your own pace.
 
-import { existsSync, mkdirSync, cpSync, renameSync, readdirSync, statSync } from 'node:fs';
+import { existsSync, mkdirSync, cpSync, renameSync, readdirSync, statSync, readFileSync } from 'node:fs';
 import { join, resolve, dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { createInterface } from 'node:readline';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
+
+if (process.argv.includes('--version') || process.argv.includes('-v')) {
+  const pkg = JSON.parse(readFileSync(join(__dirname, 'package.json'), 'utf8'));
+  console.log(pkg.version);
+  process.exit(0);
+}
 const TEMPLATE = join(__dirname, 'templates');
 
 const targetRepo = resolve(process.argv[2] || process.cwd());

package/tools/wip-repo-init/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-repo-init",
-  "version": "1.9.30",
+  "version": "1.9.32",
   "description": "Scaffold the standard ai/ directory structure in any repo",
   "type": "module",
   "bin": {

package/tools/wip-repo-permissions-hook/cli.js

@@ -9,8 +9,18 @@
  *   wip-repo-permissions can-publish <org/repo> Alias for check
  */
 
+import { readFileSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
 import { checkPrivateCounterpart, auditOrg } from './core.mjs';
 
+if (process.argv.includes('--version') || process.argv.includes('-v')) {
+  const __dirname = dirname(fileURLToPath(import.meta.url));
+  const pkg = JSON.parse(readFileSync(join(__dirname, 'package.json'), 'utf8'));
+  console.log(pkg.version);
+  process.exit(0);
+}
+
 const args = process.argv.slice(2);
 const command = args[0];
 const target = args[1];

package/tools/wip-repo-permissions-hook/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-repo-permissions-hook",
-  "version": "1.9.30",
+  "version": "1.9.32",
   "type": "module",
   "description": "Repo visibility guard. Blocks repos from going public without a -private counterpart.",
   "main": "core.mjs",

package/tools/wip-repos/cli.mjs

@@ -12,7 +12,16 @@
  */
 
 import { check, planSync, executeSync, addRepo, moveRepo, generateReadmeTree, loadManifest } from './core.mjs';
-import { resolve, dirname } from 'node:path';
+import { resolve, dirname, join } from 'node:path';
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+
+if (process.argv.includes('--version') || process.argv.includes('-v')) {
+  const __dirname = dirname(fileURLToPath(import.meta.url));
+  const pkg = JSON.parse(readFileSync(join(__dirname, 'package.json'), 'utf8'));
+  console.log(pkg.version);
+  process.exit(0);
+}
 
 const args = process.argv.slice(2);
 const command = args[0];

package/tools/wip-repos/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-repos",
-  "version": "1.9.30",
+  "version": "1.9.32",
   "type": "module",
   "description": "Repo manifest reconciler. Single source of truth for repo organization. Like prettier for folder structure.",
   "main": "core.mjs",

package/tools/wip-universal-installer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/universal-installer",
-  "version": "1.9.30",
+  "version": "1.9.32",
   "type": "module",
   "description": "The Universal Interface specification for agent-native software. Teaches your AI how to build repos with every interface: CLI, Module, MCP Server, OpenClaw Plugin, Skill, Claude Code Hook.",
   "main": "detect.mjs",