@wipcomputer/wip-ai-devops-toolbox 1.9.45 → 1.9.47

package/CHANGELOG.md

@@ -31,6 +31,92 @@
 
 
 
+
+## 1.9.47 (2026-03-20)
+
+# Release Notes: wip-ai-devops-toolbox v1.9.47
+
+**New: `wip-repos claude` command + CLAUDE.md templates.**
+
+## What changed
+
+### `wip-repos claude` (Phases 1-3 of the CLAUDE.md plan)
+
+New subcommand that generates cross-repo ecosystem sections in CLAUDE.md files. When an agent opens repo-A, it can't read repo-B. This command pre-generates the context.
+
+```bash
+wip-repos claude              # regenerate all repos
+wip-repos claude my-repo      # regenerate one repo
+wip-repos claude --init       # create CLAUDE.md for repos missing one
+wip-repos claude --dry-run    # preview changes
+```
+
+Features:
+- Reads all repos from manifest, extracts metadata (package.json, SKILL.md, directory structure)
+- Generates `## Ecosystem` sections with delimiter comments (`<!-- wip-repos:start/end -->`)
+- Hand-written sections are never overwritten
+- Relevance filtering: only related repos shown (same category + core repos)
+- `--init` creates starter CLAUDE.md from template for repos missing one
+
+### Templates
+
+- `templates/global-claude-md.md` ... universal CLAUDE.md for ~/.claude/CLAUDE.md
+- `templates/repo-claude-md.template` ... per-repo starter with ecosystem placeholder
+
+## Why
+
+Agents lose context across repos. They can't read sibling repos at runtime. Pre-generating cross-repo maps into CLAUDE.md solves this without requiring runtime access.
+
+## Issues closed
+
+- #212 (partial: Phases 1-3 of 6)
+
+## How to verify
+
+```bash
+wip-repos claude --dry-run
+```
+
+## 1.9.46 (2026-03-18)
+
+# Release Notes: wip-ai-devops-toolbox v1.9.46
+
+**Centralized worktree management: guard rule, wip-release prune, Dev Guide convention.**
+
+## What changed
+
+### Guard: worktree path warning (#212)
+Branch guard now warns when `git worktree add` creates a worktree outside `_worktrees/`. Shows the convention and suggests `ldm worktree add`. Warning only, not a hard block.
+
+### wip-release: worktree prune (#212)
+New step 12 in the release pipeline. After branch cleanup, prunes stale worktrees from `_worktrees/` whose branches are merged into main. Automatic cleanup after every release.
+
+### Dev Guide: _worktrees/ convention (#212)
+Documents the centralized worktree convention:
+- All worktrees go in `_worktrees/<repo-name>--<branch-suffix>/`
+- Use `ldm worktree add` (auto-detects repo, creates in the right place)
+- Guard warns about worktrees outside the convention
+- `wip-release` auto-prunes merged worktrees
+
+## Why
+
+Worktrees created as repo siblings confused iCloud sync, looked like real repos in directory listings, and were never cleaned up. This session alone created 10+ stale worktrees. The convention keeps them organized and the release pipeline cleans them automatically.
+
+## Issues closed
+
+- #212
+- #213
+
+## How to verify
+
+```bash
+# Guard warning:
+cd /path/to/repo
+git worktree add ../my-worktree -b test   # should warn about _worktrees/
+
+# Correct path:
+ldm worktree add cc-mini/test             # creates _worktrees/<repo>--cc-mini--test/
+```
 
 ## 1.9.45 (2026-03-18)
 

package/DEV-GUIDE-GENERAL-PUBLIC.md

@@ -524,16 +524,42 @@ gh api "repos/<org>/<repo>/branches/main/protection" -X PUT \
 
 The main working tree stays on `main` and is read-only in practice. All development happens in git worktrees. This keeps the primary clone clean, prevents accidental commits to main, and enables parallel work within a single agent.
 
+### Worktree Location Convention
+
+**All worktrees go in `_worktrees/` as a sibling to the repos directory.** Never create worktrees as siblings to repos directly. They look like real repos, confuse iCloud sync, and are hard to find/clean.
+
+**Convention:** `_worktrees/<repo-name>--<branch-suffix>/`
+
+```
+repos/
+  ldm-os/
+    components/
+      memory-crystal-private/     <- real repo
+    devops/
+      wip-ai-devops-toolbox-private/  <- real repo
+  _worktrees/
+    memory-crystal-private--cc-mini--fix-search/   <- worktree
+    wip-ai-devops-toolbox-private--cc-mini--guard/  <- worktree
+```
+
 ### Starting a Worktree
 
-From Claude Code:
+**Preferred:** Use the `ldm worktree` command:
+```bash
+ldm worktree add cc-mini/fix-bug    # auto-detects repo, creates in _worktrees/
+```
+
+**From Claude Code:**
 ```bash
 claude --worktree <name>
 ```
 
-Or mid-session, say "work in a worktree" and the session will move into one.
+**Manual:**
+```bash
+git worktree add ../_worktrees/<repo>--<branch> -b <branch>
+```
 
-Worktrees live at `.claude/worktrees/` inside the repo. Each worktree gets its own directory with a full checkout on a separate branch.
+The branch guard warns if you create worktrees outside `_worktrees/` or `.claude/worktrees/`.
 
 ### Branch Naming
 

package/SKILL.md

@@ -5,7 +5,7 @@ license: MIT
 interface: [cli, module, mcp, skill, hook, plugin]
 metadata:
   display-name: "WIP AI DevOps Toolbox"
-  version: "1.9.45"
+  version: "1.9.47"
   homepage: "https://github.com/wipcomputer/wip-ai-devops-toolbox"
   author: "Parker Todd Brooks"
   category: dev-tools

package/_trash/RELEASE-NOTES-v1-9-41.md

@@ -0,0 +1,28 @@
+# Release Notes: wip-ai-devops-toolbox v1.9.41
+
+**One-line summary of what this release does**
+
+## What changed
+
+Describe the changes. Not a commit list. Explain:
+- What was built or fixed
+- Why it matters
+- What the user should know
+
+## Why
+
+What problem does this solve? What was broken or missing?
+
+## Issues closed
+
+- #251
+- #117
+- #128
+- #250
+- #73
+
+## How to verify
+
+```bash
+# Commands to test the changes
+```

package/_trash/RELEASE-NOTES-v1-9-46.md

@@ -0,0 +1,38 @@
+# Release Notes: wip-ai-devops-toolbox v1.9.46
+
+**Centralized worktree management: guard rule, wip-release prune, Dev Guide convention.**
+
+## What changed
+
+### Guard: worktree path warning (#212)
+Branch guard now warns when `git worktree add` creates a worktree outside `_worktrees/`. Shows the convention and suggests `ldm worktree add`. Warning only, not a hard block.
+
+### wip-release: worktree prune (#212)
+New step 12 in the release pipeline. After branch cleanup, prunes stale worktrees from `_worktrees/` whose branches are merged into main. Automatic cleanup after every release.
+
+### Dev Guide: _worktrees/ convention (#212)
+Documents the centralized worktree convention:
+- All worktrees go in `_worktrees/<repo-name>--<branch-suffix>/`
+- Use `ldm worktree add` (auto-detects repo, creates in the right place)
+- Guard warns about worktrees outside the convention
+- `wip-release` auto-prunes merged worktrees
+
+## Why
+
+Worktrees created as repo siblings confused iCloud sync, looked like real repos in directory listings, and were never cleaned up. This session alone created 10+ stale worktrees. The convention keeps them organized and the release pipeline cleans them automatically.
+
+## Issues closed
+
+- #212
+- #213
+
+## How to verify
+
+```bash
+# Guard warning:
+cd /path/to/repo
+git worktree add ../my-worktree -b test   # should warn about _worktrees/
+
+# Correct path:
+ldm worktree add cc-mini/test             # creates _worktrees/<repo>--cc-mini--test/
+```

package/_trash/RELEASE-NOTES-v1-9-47.md

@@ -0,0 +1,42 @@
+# Release Notes: wip-ai-devops-toolbox v1.9.47
+
+**New: `wip-repos claude` command + CLAUDE.md templates.**
+
+## What changed
+
+### `wip-repos claude` (Phases 1-3 of the CLAUDE.md plan)
+
+New subcommand that generates cross-repo ecosystem sections in CLAUDE.md files. When an agent opens repo-A, it can't read repo-B. This command pre-generates the context.
+
+```bash
+wip-repos claude              # regenerate all repos
+wip-repos claude my-repo      # regenerate one repo
+wip-repos claude --init       # create CLAUDE.md for repos missing one
+wip-repos claude --dry-run    # preview changes
+```
+
+Features:
+- Reads all repos from manifest, extracts metadata (package.json, SKILL.md, directory structure)
+- Generates `## Ecosystem` sections with delimiter comments (`<!-- wip-repos:start/end -->`)
+- Hand-written sections are never overwritten
+- Relevance filtering: only related repos shown (same category + core repos)
+- `--init` creates starter CLAUDE.md from template for repos missing one
+
+### Templates
+
+- `templates/global-claude-md.md` ... universal CLAUDE.md for ~/.claude/CLAUDE.md
+- `templates/repo-claude-md.template` ... per-repo starter with ecosystem placeholder
+
+## Why
+
+Agents lose context across repos. They can't read sibling repos at runtime. Pre-generating cross-repo maps into CLAUDE.md solves this without requiring runtime access.
+
+## Issues closed
+
+- #212 (partial: Phases 1-3 of 6)
+
+## How to verify
+
+```bash
+wip-repos claude --dry-run
+```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-ai-devops-toolbox",
-  "version": "1.9.45",
+  "version": "1.9.47",
   "type": "module",
   "description": "The complete AI DevOps toolkit for AI-assisted development teams.",
   "license": "MIT",

package/templates/global-claude-md.md

@@ -0,0 +1,73 @@
+# CLAUDE.md — Global (WIP Computer)
+
+## Team
+
+WIP Computer. Three contributors on every commit:
+- Parker Todd Brooks (human, parkertoddbrooks)
+- Lesa (OpenClaw agent, lesaai)
+- Claude Code (Claude Opus 4.6)
+
+## Git Rules
+
+**Never push directly to main.** Branch, PR, merge. Every time.
+**Never squash merge.** Always `--merge`. Squashing destroys co-author attribution.
+**Always include `--delete-branch`** on `gh pr merge`.
+**Co-authors on every commit:**
+```
+Co-Authored-By: Parker Todd Brooks <parkertoddbrooks@users.noreply.github.com>
+Co-Authored-By: Lesa <lesaai@icloud.com>
+Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
+```
+
+## Branch Prefixes
+
+`cc-mini/` for Claude Code on Mac mini. `cc-air/` for MacBook Air. `lesa-mini/` for Lesa.
+
+## Worktree Workflow
+
+All edits happen in worktrees. Never edit directly on main.
+```bash
+ldm worktree add cc-mini/feature-name    # preferred
+# or: git worktree add ../_worktrees/<repo>--<branch> -b <branch>
+```
+
+## Writing Style
+
+**Never use em dashes.** Use periods, colons, semicolons, or "..." instead.
+
+## Release Process
+
+1. Branch + commit + push
+2. Release notes file on the branch: `RELEASE-NOTES-v{version}.md` (dashes, not dots)
+3. `gh pr create` then `gh pr merge --merge --delete-branch`
+4. `git checkout main && git pull`
+5. `wip-release patch` (auto-detects release notes file)
+6. `deploy-public.sh` to sync public repo
+
+**Release notes go on the feature branch, committed with the code.** Not as a separate PR.
+
+## Tools
+
+- `wip-release` for releases (version bump, changelog, npm, GitHub release)
+- `wip-file-guard` protects CLAUDE.md, SOUL.md, MEMORY.md, SHARED-CONTEXT.md
+- `wip-branch-guard` blocks writes on main, teaches the workflow
+- `ldm install` for installing/updating extensions
+- `ldm doctor` for health checks
+
+## Exclude from npm
+
+Always add to `.npmignore`:
+```
+CLAUDE.md
+ai/
+.claude/
+_worktrees/
+```
+
+## Boot Sequence
+
+Read the repo's own CLAUDE.md first. Then check `ai/read-me-first.md` if it exists.
+
+## Dev Guide
+
+Full conventions: `DEV-GUIDE-GENERAL-PUBLIC.md` in wip-ai-devops-toolbox.

package/templates/repo-claude-md.template

@@ -0,0 +1,24 @@
+# CLAUDE.md — {{repo-name}}
+
+## Boot Sequence
+1. Read this file completely before acting
+2. Read `ai/read-me-first.md` if it exists
+3. Never commit directly to main. Use worktrees.
+
+## Project Overview
+- **Description:** {{description}}
+- **Language:** {{language}}
+- **Test:** `{{scripts.test}}`
+- **Build:** `{{scripts.build}}`
+- **Lint:** `{{scripts.lint}}`
+
+## Architecture
+{{detected-dirs}}
+
+## Repo-Specific Guardrails
+{{guardrails}}
+
+## Ecosystem
+<!-- wip-repos:start -->
+_Run `wip-repos claude` to populate this section with cross-repo context._
+<!-- wip-repos:end -->

package/tools/deploy-public/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/deploy-public",
-  "version": "1.9.45",
+  "version": "1.9.47",
   "description": "Private-to-public repo sync. Excludes ai/ folder, creates PR, merges, cleans up branches.",
   "bin": {
     "deploy-public": "./deploy-public.sh"

package/tools/post-merge-rename/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/post-merge-rename",
-  "version": "1.9.45",
+  "version": "1.9.47",
   "description": "Post-merge branch renaming. Appends --merged-YYYY-MM-DD to preserve history.",
   "bin": {
     "post-merge-rename": "./post-merge-rename.sh"

package/tools/wip-branch-guard/guard.mjs

@@ -225,6 +225,21 @@ async function main() {
         }
       } catch {}
     }
+
+    // Warn when creating worktrees outside _worktrees/ (#212)
+    const wtMatch = cmd.match(/\bgit\s+worktree\s+add\s+["']?([^\s"']+)/);
+    if (wtMatch) {
+      const wtPath = wtMatch[1];
+      if (!wtPath.includes('_worktrees') && !wtPath.includes('.claude/worktrees')) {
+        deny(`WARNING: Creating worktree outside _worktrees/. Use: ldm worktree add <branch>
+
+The convention is _worktrees/<repo>--<branch>/ so worktrees don't mix with real repos.
+Manual equivalent: git worktree add ../_worktrees/<repo>--<branch> -b <branch>
+
+This is a warning, not a block. If you need to create it here, retry.`);
+        process.exit(0);
+      }
+    }
   }
 
   // Determine which repo to check.

package/tools/wip-branch-guard/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-branch-guard",
-  "version": "1.9.45",
+  "version": "1.9.47",
   "description": "PreToolUse hook that blocks all writes on main branch. Forces agents to work on branches or worktrees.",
   "type": "module",
   "main": "guard.mjs",

package/tools/wip-file-guard/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-file-guard",
-  "version": "1.9.45",
+  "version": "1.9.47",
   "type": "module",
   "description": "Hook that blocks destructive edits to protected identity files. For Claude Code CLI and OpenClaw.",
   "main": "guard.mjs",

package/tools/wip-license-guard/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-license-guard",
-  "version": "1.9.45",
+  "version": "1.9.47",
   "description": "License compliance for your own repos. Ensures correct copyright, dual-license blocks, and LICENSE files.",
   "type": "module",
   "bin": {

package/tools/wip-license-hook/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-license-hook",
-  "version": "1.9.45",
+  "version": "1.9.47",
   "description": "License rug-pull detection and dependency license compliance for open source projects",
   "type": "module",
   "main": "dist/cli/index.js",

package/tools/wip-readme-format/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-readme-format",
-  "version": "1.9.45",
+  "version": "1.9.47",
   "description": "Reformat any repo's README to follow the WIP Computer standard. Agent-first, human-readable.",
   "type": "module",
   "bin": {

package/tools/wip-release/core.mjs

@@ -1579,6 +1579,39 @@ export async function release({ repoPath, level, notes, notesSource, dryRun, noP
     console.log(`  ! Branch prune skipped: ${e.message}`);
   }
 
+  // 12. Prune stale worktrees (#212)
+  try {
+    execSync('git worktree prune', { cwd: repoPath, stdio: 'pipe' });
+    // Also check _worktrees/ for dirs whose branches are now merged
+    const worktreesDir = join(dirname(repoPath), '_worktrees');
+    if (existsSync(worktreesDir)) {
+      const repoBase = basename(repoPath);
+      const wtDirs = readdirSync(worktreesDir, { withFileTypes: true })
+        .filter(d => d.isDirectory() && d.name.startsWith(repoBase + '--'));
+      let wtPruned = 0;
+      for (const d of wtDirs) {
+        const wtPath = join(worktreesDir, d.name);
+        try {
+          // Check if branch is merged into main
+          const branch = execSync('git branch --show-current', {
+            cwd: wtPath, encoding: 'utf8', timeout: 3000
+          }).trim();
+          if (branch) {
+            execSync(`git merge-base --is-ancestor "${branch}" main`, {
+              cwd: repoPath, stdio: 'pipe', timeout: 5000
+            });
+            // Branch is merged. Remove worktree.
+            execSync(`git worktree remove "${wtPath}"`, { cwd: repoPath, stdio: 'pipe' });
+            wtPruned++;
+          }
+        } catch {} // Branch not merged or other issue, leave it
+      }
+      if (wtPruned > 0) {
+        console.log(`  ✓ Pruned ${wtPruned} merged worktree(s) from _worktrees/`);
+      }
+    }
+  } catch {}
+
   // Write release marker so branch guard blocks immediate install (#73)
   try {
     const markerDir = join(process.env.HOME || '', '.ldm', 'state');

package/tools/wip-release/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-release",
-  "version": "1.9.45",
+  "version": "1.9.47",
   "type": "module",
   "description": "One-command release pipeline. Bumps version, updates changelog + SKILL.md, publishes to npm + GitHub.",
   "main": "core.mjs",

package/tools/wip-repo-init/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-repo-init",
-  "version": "1.9.45",
+  "version": "1.9.47",
   "description": "Scaffold the standard ai/ directory structure in any repo",
   "type": "module",
   "bin": {

package/tools/wip-repo-permissions-hook/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-repo-permissions-hook",
-  "version": "1.9.45",
+  "version": "1.9.47",
   "type": "module",
   "description": "Repo visibility guard. Blocks repos from going public without a -private counterpart.",
   "main": "core.mjs",

package/tools/wip-repos/claude.mjs

@@ -0,0 +1,248 @@
+/**
+ * wip-repos claude ... generate cross-repo CLAUDE.md ecosystem sections
+ *
+ * Reads all repos on disk via the manifest, extracts metadata from each,
+ * and writes an ## Ecosystem section into each repo's CLAUDE.md.
+ *
+ * Usage:
+ *   wip-repos claude              # regenerate all repos
+ *   wip-repos claude <repo>       # regenerate one repo
+ *   wip-repos claude --init       # create CLAUDE.md for repos missing one
+ *   wip-repos claude --dry-run    # preview changes
+ */
+
+import { existsSync, readFileSync, writeFileSync, readdirSync, mkdirSync } from 'node:fs';
+import { join, basename, resolve, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const TEMPLATE_PATH = join(__dirname, '..', '..', 'templates', 'repo-claude-md.template');
+const START_MARKER = '<!-- wip-repos:start -->';
+const END_MARKER = '<!-- wip-repos:end -->';
+
+function readJSON(path) {
+  try { return JSON.parse(readFileSync(path, 'utf8')); } catch { return null; }
+}
+
+/**
+ * Extract metadata from a single repo on disk.
+ */
+function extractRepoMeta(repoPath) {
+  const pkg = readJSON(join(repoPath, 'package.json'));
+  const name = pkg?.name || basename(repoPath);
+  const description = pkg?.description || '';
+  const version = pkg?.version || '';
+  const exports = pkg?.exports ? Object.keys(pkg.exports) : [];
+  const binCommands = pkg?.bin ? Object.keys(pkg.bin) : [];
+  const scripts = pkg?.scripts || {};
+
+  // Detect interfaces
+  const interfaces = [];
+  if (binCommands.length > 0) interfaces.push('CLI');
+  if (pkg?.main || pkg?.exports) interfaces.push('Module');
+  if (existsSync(join(repoPath, 'mcp-server.mjs')) || existsSync(join(repoPath, 'dist', 'mcp-server.js'))) interfaces.push('MCP');
+  if (existsSync(join(repoPath, 'openclaw.plugin.json'))) interfaces.push('OpenClaw Plugin');
+  if (existsSync(join(repoPath, 'SKILL.md'))) interfaces.push('Skill');
+
+  // Detect key dirs
+  const dirs = [];
+  for (const d of ['src', 'lib', 'tools', 'bin', 'dist', 'test', 'scripts', 'ai']) {
+    if (existsSync(join(repoPath, d))) dirs.push(d + '/');
+  }
+
+  return {
+    name,
+    description,
+    version,
+    interfaces,
+    binCommands,
+    dirs,
+    scripts,
+    path: repoPath,
+  };
+}
+
+/**
+ * Determine which repos are relevant to a given repo.
+ * Returns only repos in the same category or that share dependencies.
+ */
+function filterRelevant(targetMeta, allMetas, manifest) {
+  // Find target's category from manifest
+  const targetBase = basename(targetMeta.path);
+  let targetCategory = null;
+
+  for (const [category, repos] of Object.entries(manifest.repos || {})) {
+    if (repos.some(r => r.local?.includes(targetBase) || r.name === targetBase)) {
+      targetCategory = category;
+      break;
+    }
+  }
+
+  // Core repos every repo should know about
+  const coreNames = ['wip-ldm-os', 'wip-ai-devops-toolbox', 'memory-crystal'];
+
+  return allMetas.filter(m => {
+    if (m.path === targetMeta.path) return false; // skip self
+    const mBase = basename(m.path);
+    // Same category
+    if (targetCategory) {
+      for (const repos of Object.values(manifest.repos || {})) {
+        if (repos.some(r => r.local?.includes(mBase))) return true;
+      }
+    }
+    // Core repo
+    if (coreNames.some(c => mBase.includes(c))) return true;
+    return false;
+  }).slice(0, 15); // cap at 15 to keep CLAUDE.md focused
+}
+
+/**
+ * Generate the ecosystem section for a repo.
+ */
+function generateEcosystem(targetMeta, relevantMetas) {
+  const lines = [];
+  for (const m of relevantMetas) {
+    const relPath = basename(m.path);
+    lines.push(`### ${m.name}`);
+    lines.push(`**Path:** \`${relPath}\``);
+    if (m.description) lines.push(m.description);
+    if (m.interfaces.length > 0) lines.push(`**Interfaces:** ${m.interfaces.join(', ')}`);
+    if (m.binCommands.length > 0) lines.push(`**CLI:** ${m.binCommands.join(', ')}`);
+    if (m.version) lines.push(`**Version:** ${m.version}`);
+    lines.push('');
+  }
+  return lines.join('\n').trim();
+}
+
+/**
+ * Update the ecosystem section in a CLAUDE.md file.
+ * Only replaces content between the delimiter comments.
+ */
+function updateEcosystemSection(claudeMdPath, ecosystemContent) {
+  const content = readFileSync(claudeMdPath, 'utf8');
+  const startIdx = content.indexOf(START_MARKER);
+  const endIdx = content.indexOf(END_MARKER);
+
+  if (startIdx === -1 || endIdx === -1) {
+    // No delimiters found. Append section.
+    const section = `\n## Ecosystem (auto-generated by wip-repos claude)\n${START_MARKER}\n\n${ecosystemContent}\n\n${END_MARKER}\n`;
+    return content + section;
+  }
+
+  // Replace between delimiters
+  const before = content.substring(0, startIdx + START_MARKER.length);
+  const after = content.substring(endIdx);
+  return `${before}\n\n${ecosystemContent}\n\n${after}`;
+}
+
+/**
+ * Create a starter CLAUDE.md from the template.
+ */
+function createFromTemplate(repoPath, meta) {
+  const template = existsSync(TEMPLATE_PATH)
+    ? readFileSync(TEMPLATE_PATH, 'utf8')
+    : '# CLAUDE.md\n\n## Ecosystem\n<!-- wip-repos:start -->\n<!-- wip-repos:end -->\n';
+
+  let content = template
+    .replace(/\{\{repo-name\}\}/g, meta.name)
+    .replace(/\{\{description\}\}/g, meta.description || 'No description')
+    .replace(/\{\{language\}\}/g, meta.scripts?.build?.includes('tsc') ? 'TypeScript' : 'JavaScript')
+    .replace(/\{\{scripts\.test\}\}/g, meta.scripts?.test || 'npm test')
+    .replace(/\{\{scripts\.build\}\}/g, meta.scripts?.build || 'npm run build')
+    .replace(/\{\{scripts\.lint\}\}/g, meta.scripts?.lint || 'npm run lint')
+    .replace(/\{\{detected-dirs\}\}/g, meta.dirs.length > 0 ? meta.dirs.map(d => `- \`${d}\``).join('\n') : '(no standard dirs detected)')
+    .replace(/\{\{guardrails\}\}/g, existsSync(join(repoPath, '.license-guard.json')) ? '- Dual-license (MIT + AGPL). See LICENSE.' : '');
+
+  return content;
+}
+
+/**
+ * Main entry point.
+ */
+export function runClaude(manifestPath, args = []) {
+  const dryRun = args.includes('--dry-run');
+  const init = args.includes('--init');
+  const targetRepo = args.find(a => !a.startsWith('--'));
+
+  const manifest = readJSON(manifestPath);
+  if (!manifest) {
+    console.error('  Could not read manifest at ' + manifestPath);
+    process.exit(1);
+  }
+
+  // Find all repo paths from manifest
+  const manifestDir = dirname(manifestPath);
+  const repoPaths = [];
+  for (const [category, repos] of Object.entries(manifest.repos || {})) {
+    for (const repo of repos) {
+      const localPath = repo.local ? resolve(manifestDir, repo.local) : null;
+      if (localPath && existsSync(localPath)) {
+        repoPaths.push(localPath);
+      }
+    }
+  }
+
+  if (repoPaths.length === 0) {
+    console.log('  No repos found in manifest.');
+    return;
+  }
+
+  // Extract metadata from all repos
+  const allMetas = repoPaths.map(p => extractRepoMeta(p));
+
+  // Filter to target if specified
+  const targets = targetRepo
+    ? allMetas.filter(m => basename(m.path).includes(targetRepo))
+    : allMetas;
+
+  if (targets.length === 0) {
+    console.error(`  No repo matching "${targetRepo}" found.`);
+    process.exit(1);
+  }
+
+  console.log(`  Processing ${targets.length} repo(s)...`);
+  let created = 0, updated = 0, skipped = 0;
+
+  for (const meta of targets) {
+    const claudeMdPath = join(meta.path, 'CLAUDE.md');
+    const repoName = basename(meta.path);
+
+    if (!existsSync(claudeMdPath)) {
+      if (init) {
+        const content = createFromTemplate(meta.path, meta);
+        if (dryRun) {
+          console.log(`  [create] ${repoName}/CLAUDE.md`);
+        } else {
+          writeFileSync(claudeMdPath, content);
+          console.log(`  + Created ${repoName}/CLAUDE.md`);
+        }
+        created++;
+      } else {
+        skipped++;
+      }
+      continue;
+    }
+
+    // Generate ecosystem section
+    const relevant = filterRelevant(meta, allMetas, manifest);
+    const ecosystem = generateEcosystem(meta, relevant);
+    const newContent = updateEcosystemSection(claudeMdPath, ecosystem);
+    const oldContent = readFileSync(claudeMdPath, 'utf8');
+
+    if (newContent === oldContent) {
+      skipped++;
+      continue;
+    }
+
+    if (dryRun) {
+      console.log(`  [update] ${repoName}/CLAUDE.md (${relevant.length} related repos)`);
+    } else {
+      writeFileSync(claudeMdPath, newContent);
+      console.log(`  + Updated ${repoName}/CLAUDE.md (${relevant.length} related repos)`);
+    }
+    updated++;
+  }
+
+  console.log('');
+  console.log(`  ${dryRun ? 'Dry run' : 'Done'}. ${created} created, ${updated} updated, ${skipped} skipped.`);
+}

package/tools/wip-repos/cli.mjs

@@ -12,6 +12,7 @@
  */
 
 import { check, planSync, executeSync, addRepo, moveRepo, generateReadmeTree, loadManifest } from './core.mjs';
+import { runClaude } from './claude.mjs';
 import { resolve, dirname, join } from 'node:path';
 import { readFileSync } from 'node:fs';
 import { fileURLToPath } from 'node:url';
@@ -173,6 +174,11 @@ try {
       break;
     }
 
+    case 'claude': {
+      runClaude(manifestPath, args.slice(1));
+      break;
+    }
+
     default:
       usage();
       if (command && command !== '--help' && command !== '-h') {

package/tools/wip-repos/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-repos",
-  "version": "1.9.45",
+  "version": "1.9.47",
   "type": "module",
   "description": "Repo manifest reconciler. Single source of truth for repo organization. Like prettier for folder structure.",
   "main": "core.mjs",

package/tools/wip-universal-installer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/universal-installer",
-  "version": "1.9.45",
+  "version": "1.9.47",
   "type": "module",
   "description": "The Universal Interface specification for agent-native software. Teaches your AI how to build repos with every interface: CLI, Module, MCP Server, OpenClaw Plugin, Skill, Claude Code Hook.",
   "main": "detect.mjs",