@wipcomputer/wip-ai-devops-toolbox 1.9.37 → 1.9.39

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -31,6 +31,52 @@
31
31
 
32
32
 
33
33
 
34
+
35
+ ## 1.9.39 (2026-03-16)
36
+
37
+ # Wire license-guard as Claude Code PreToolUse hook
38
+
39
+ **Date:** 2026-03-16
40
+ **Closes:** #130
41
+
42
+ ## What changed
43
+
44
+ license-guard now registers as a Claude Code PreToolUse hook on install. Previously the hook code existed (hook.mjs) but was never wired into the deploy system. Now:
45
+
46
+ - Renamed hook.mjs to guard.mjs (matches file-guard/branch-guard convention that LDM OS deploy.mjs expects)
47
+ - Added `claudeCode.hook` config to package.json (event: PreToolUse, matcher: Bash, timeout: 5)
48
+ - On next `ldm install`, the hook auto-registers in ~/.claude/settings.json
49
+
50
+ The hook blocks git commit and git push when license compliance fails:
51
+ - LICENSE file missing
52
+ - Copyright doesn't match .license-guard.json config
53
+ - CLA.md missing
54
+ - README.md missing ## License section
55
+ - MIT+AGPL config but LICENSE or README only mentions MIT
56
+
57
+ Repos without .license-guard.json are not affected (the hook silently passes).
58
+
59
+ ## Also done
60
+
61
+ - Updated plan statuses: license guard Phase 1 complete, bootstrap LDM OS complete
62
+ - Bootstrap LDM OS was already shipped in install.js (lines 740-812)
63
+
64
+ ## 1.9.38 (2026-03-16)
65
+
66
+ # GitHub Packages publish from public repo
67
+
68
+ **Date:** 2026-03-16
69
+ **Closes:** #193
70
+
71
+ ## What changed
72
+
73
+ `deploy-public.sh` now publishes to GitHub Packages from the public repo clone after the npm publish step. Previously, GitHub Packages were only published from the private repo during `wip-release`, so they showed on the private repo's Packages tab. Users couldn't see them.
74
+
75
+ Now packages show on the public repo's Packages tab where users expect to find them. Uses `gh auth token` for authentication (already available from the gh CLI).
76
+
77
+ ## Why
78
+
79
+ The Packages tab on public repos was empty. Users visiting wipcomputer/wip-ldm-os or wipcomputer/wip-ai-devops-toolbox saw no packages even though they were published. The packages existed but were linked to the private repo.
34
80
 
35
81
  ## 1.9.37 (2026-03-16)
36
82
 
package/SKILL.md CHANGED
@@ -5,7 +5,7 @@ license: MIT
5
5
  interface: [cli, module, mcp, skill, hook, plugin]
6
6
  metadata:
7
7
  display-name: "WIP AI DevOps Toolbox"
8
- version: "1.9.37"
8
+ version: "1.9.39"
9
9
  homepage: "https://github.com/wipcomputer/wip-ai-devops-toolbox"
10
10
  author: "Parker Todd Brooks"
11
11
  category: dev-tools
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@wipcomputer/wip-ai-devops-toolbox",
3
- "version": "1.9.37",
3
+ "version": "1.9.39",
4
4
  "type": "module",
5
5
  "description": "The complete AI DevOps toolkit for AI-assisted development teams.",
6
6
  "license": "MIT",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@wipcomputer/deploy-public",
3
- "version": "1.9.37",
3
+ "version": "1.9.39",
4
4
  "description": "Private-to-public repo sync. Excludes ai/ folder, creates PR, merges, cleans up branches.",
5
5
  "bin": {
6
6
  "deploy-public": "./deploy-public.sh"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@wipcomputer/post-merge-rename",
3
- "version": "1.9.37",
3
+ "version": "1.9.39",
4
4
  "description": "Post-merge branch renaming. Appends --merged-YYYY-MM-DD to preserve history.",
5
5
  "bin": {
6
6
  "post-merge-rename": "./post-merge-rename.sh"
@@ -86,6 +86,9 @@ const ALLOWED_BASH_PATTERNS = [
86
86
  /\bwip-release\b.*--dry-run/,
87
87
  /\bnpm\s+install\s+-g\b/, // global installs modify /opt/homebrew/, not the repo
88
88
  /\bnpm\s+link\b/, // global operation, not repo-local
89
+ /\bldm\s+(install|init|doctor|stack|updates)\b/, // LDM OS commands modify ~/.ldm/, not the repo
90
+ /\brm\s+.*\.ldm\/state\//, // cleaning LDM state files only, not repo files
91
+ /\bclaude\s+mcp\b/, // MCP registration, not repo files
89
92
  ];
90
93
 
91
94
  function deny(reason) {
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@wipcomputer/wip-branch-guard",
3
- "version": "1.9.37",
3
+ "version": "1.9.39",
4
4
  "description": "PreToolUse hook that blocks all writes on main branch. Forces agents to work on branches or worktrees.",
5
5
  "type": "module",
6
6
  "main": "guard.mjs",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@wipcomputer/wip-file-guard",
3
- "version": "1.9.37",
3
+ "version": "1.9.39",
4
4
  "type": "module",
5
5
  "description": "Hook that blocks destructive edits to protected identity files. For Claude Code CLI and OpenClaw.",
6
6
  "main": "guard.mjs",
@@ -1,11 +1,18 @@
1
1
  {
2
2
  "name": "@wipcomputer/wip-license-guard",
3
- "version": "1.9.37",
3
+ "version": "1.9.39",
4
4
  "description": "License compliance for your own repos. Ensures correct copyright, dual-license blocks, and LICENSE files.",
5
5
  "type": "module",
6
6
  "bin": {
7
7
  "wip-license-guard": "./cli.mjs"
8
8
  },
9
+ "claudeCode": {
10
+ "hook": {
11
+ "event": "PreToolUse",
12
+ "matcher": "Bash",
13
+ "timeout": 5
14
+ }
15
+ },
9
16
  "license": "MIT AND AGPL-3.0-or-later",
10
17
  "repository": {
11
18
  "type": "git",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@wipcomputer/wip-license-hook",
3
- "version": "1.9.37",
3
+ "version": "1.9.39",
4
4
  "description": "License rug-pull detection and dependency license compliance for open source projects",
5
5
  "type": "module",
6
6
  "main": "dist/cli/index.js",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@wipcomputer/wip-readme-format",
3
- "version": "1.9.37",
3
+ "version": "1.9.39",
4
4
  "description": "Reformat any repo's README to follow the WIP Computer standard. Agent-first, human-readable.",
5
5
  "type": "module",
6
6
  "bin": {
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@wipcomputer/wip-release",
3
- "version": "1.9.37",
3
+ "version": "1.9.39",
4
4
  "type": "module",
5
5
  "description": "One-command release pipeline. Bumps version, updates changelog + SKILL.md, publishes to npm + GitHub.",
6
6
  "main": "core.mjs",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@wipcomputer/wip-repo-init",
3
- "version": "1.9.37",
3
+ "version": "1.9.39",
4
4
  "description": "Scaffold the standard ai/ directory structure in any repo",
5
5
  "type": "module",
6
6
  "bin": {
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@wipcomputer/wip-repo-permissions-hook",
3
- "version": "1.9.37",
3
+ "version": "1.9.39",
4
4
  "type": "module",
5
5
  "description": "Repo visibility guard. Blocks repos from going public without a -private counterpart.",
6
6
  "main": "core.mjs",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@wipcomputer/wip-repos",
3
- "version": "1.9.37",
3
+ "version": "1.9.39",
4
4
  "type": "module",
5
5
  "description": "Repo manifest reconciler. Single source of truth for repo organization. Like prettier for folder structure.",
6
6
  "main": "core.mjs",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@wipcomputer/universal-installer",
3
- "version": "1.9.37",
3
+ "version": "1.9.39",
4
4
  "type": "module",
5
5
  "description": "The Universal Interface specification for agent-native software. Teaches your AI how to build repos with every interface: CLI, Module, MCP Server, OpenClaw Plugin, Skill, Claude Code Hook.",
6
6
  "main": "detect.mjs",
File without changes