@wipcomputer/wip-ai-devops-toolbox 1.9.49 → 1.9.51

package/CHANGELOG.md

@@ -31,6 +31,47 @@
 
 
 
+
+## 1.9.51 (2026-03-24)
+
+# Release Notes: wip-ai-devops-toolbox v1.9.51
+
+## Branch Guard: Workspace Files Allowlist (#185)
+
+Added TOOLS.md, MEMORY.md, IDENTITY.md, SOUL.md, WHERE-TO-WRITE.md, HEARTBEAT.md to the shared state allowlist. Both agents can now write to workspace files on main without being blocked.
+
+Previously only SHARED-CONTEXT.md was allowed. This broke Lesa's ability to edit her own workspace files during the migration to ~/wipcomputerinc/.
+
+## TECHNICAL.md: Backup Documentation
+
+Updated LDM Dev Tools.app backup section to reflect the unified backup system. backup.sh now calls `~/.ldm/bin/ldm-backup.sh` (deployed by ldm install from wip-ldm-os-private/scripts/).
+
+## 1.9.50 (2026-03-20)
+
+# Release Notes: wip-ai-devops-toolbox v1.9.50
+
+**wip-release: require product update doc on every release.**
+
+## What changed
+
+New quality gate in wip-release: checks that `ai/dev-updates/product-update/*-product-update.md` was modified since the last release tag. Same pattern as dev-updates, roadmap, and readme-first checks.
+
+The product update doc is a human-readable test guide. Each release entry has: what changed, how it's supposed to work, and how to test. New entries go at the top. Additive only.
+
+## Why
+
+Three repos now have product update docs but nothing enforced keeping them current. Without the gate, the docs will drift immediately (same problem we had with TECHNICAL.md).
+
+## Issues closed
+
+- #220
+
+## How to verify
+
+```bash
+wip-release patch --dry-run
+# Should warn if product update doc not modified since last release
+```
 
 ## 1.9.49 (2026-03-20)
 

package/SKILL.md

@@ -5,7 +5,7 @@ license: MIT
 interface: [cli, module, mcp, skill, hook, plugin]
 metadata:
   display-name: "WIP AI DevOps Toolbox"
-  version: "1.9.49"
+  version: "1.9.51"
   homepage: "https://github.com/wipcomputer/wip-ai-devops-toolbox"
   author: "Parker Todd Brooks"
   category: dev-tools

package/TECHNICAL.md

@@ -60,19 +60,19 @@ Best practices for AI-assisted development teams. Covers release process, repo s
 
 macOS automation wrapper. A native `.app` bundle that runs scheduled jobs (backup, branch protection audit, etc.) with Full Disk Access. One app to grant permissions to, one place to add new automation.
 
-**Source:** Job scripts are plain shell, committed at [`tools/ldm-jobs/`](tools/ldm-jobs/):
+**Source:** Job scripts are plain shell. The app provides a Full Disk Access wrapper.
 
-| Script | What it does |
-|--------|-------------|
-| [`backup.sh`](tools/ldm-jobs/backup.sh) | Daily backup |
-| [`branch-protect.sh`](tools/ldm-jobs/branch-protect.sh) | Audit and enforce branch protection across all org repos |
-| [`visibility-audit.sh`](tools/ldm-jobs/visibility-audit.sh) | Audit public repos for missing -private counterparts |
+| Script | What it does | Source |
+|--------|-------------|--------|
+| `backup.sh` | Calls `~/.ldm/bin/ldm-backup.sh` (unified backup) | wip-ldm-os-private/scripts/ |
+| [`branch-protect.sh`](tools/ldm-jobs/branch-protect.sh) | Audit and enforce branch protection across all org repos | tools/ldm-jobs/ |
+| [`visibility-audit.sh`](tools/ldm-jobs/visibility-audit.sh) | Audit public repos for missing -private counterparts | tools/ldm-jobs/ |
 
-Scripts can be run standalone without the `.app`. The app provides a Full Disk Access wrapper for scripts that need it.
+The backup script is deployed by `ldm install` to `~/.ldm/bin/`. It backs up ~/.ldm/, ~/.openclaw/, ~/.claude/, and the workspace. See `how-backup-works.md` in the workspace docs.
 
 ```bash
 # Run standalone
-bash tools/ldm-jobs/backup.sh
+~/.ldm/bin/ldm-backup.sh                # or --dry-run to preview
 bash tools/ldm-jobs/branch-protect.sh
 bash tools/ldm-jobs/visibility-audit.sh
 

package/_trash/RELEASE-NOTES-v1-9-50.md

@@ -0,0 +1,24 @@
+# Release Notes: wip-ai-devops-toolbox v1.9.50
+
+**wip-release: require product update doc on every release.**
+
+## What changed
+
+New quality gate in wip-release: checks that `ai/dev-updates/product-update/*-product-update.md` was modified since the last release tag. Same pattern as dev-updates, roadmap, and readme-first checks.
+
+The product update doc is a human-readable test guide. Each release entry has: what changed, how it's supposed to work, and how to test. New entries go at the top. Additive only.
+
+## Why
+
+Three repos now have product update docs but nothing enforced keeping them current. Without the gate, the docs will drift immediately (same problem we had with TECHNICAL.md).
+
+## Issues closed
+
+- #220
+
+## How to verify
+
+```bash
+wip-release patch --dry-run
+# Should warn if product update doc not modified since last release
+```

package/_trash/RELEASE-NOTES-v1-9-51.md

@@ -0,0 +1,11 @@
+# Release Notes: wip-ai-devops-toolbox v1.9.51
+
+## Branch Guard: Workspace Files Allowlist (#185)
+
+Added TOOLS.md, MEMORY.md, IDENTITY.md, SOUL.md, WHERE-TO-WRITE.md, HEARTBEAT.md to the shared state allowlist. Both agents can now write to workspace files on main without being blocked.
+
+Previously only SHARED-CONTEXT.md was allowed. This broke Lesa's ability to edit her own workspace files during the migration to ~/wipcomputerinc/.
+
+## TECHNICAL.md: Backup Documentation
+
+Updated LDM Dev Tools.app backup section to reflect the unified backup system. backup.sh now calls `~/.ldm/bin/ldm-backup.sh` (deployed by ldm install from wip-ldm-os-private/scripts/).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-ai-devops-toolbox",
-  "version": "1.9.49",
+  "version": "1.9.51",
   "type": "module",
   "description": "The complete AI DevOps toolkit for AI-assisted development teams.",
   "license": "MIT",

package/tools/deploy-public/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/deploy-public",
-  "version": "1.9.49",
+  "version": "1.9.51",
   "description": "Private-to-public repo sync. Excludes ai/ folder, creates PR, merges, cleans up branches.",
   "bin": {
     "deploy-public": "./deploy-public.sh"

package/tools/post-merge-rename/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/post-merge-rename",
-  "version": "1.9.49",
+  "version": "1.9.51",
   "description": "Post-merge branch renaming. Appends --merged-YYYY-MM-DD to preserve history.",
   "bin": {
     "post-merge-rename": "./post-merge-rename.sh"

package/tools/wip-branch-guard/guard.mjs

@@ -313,6 +313,12 @@ This is a warning, not a block. If you need to create it here, retry.`);
   const SHARED_STATE_PATTERNS = [
     /CLAUDE\.md$/,
     /workspace\/SHARED-CONTEXT\.md$/,
+    /workspace\/TOOLS\.md$/,
+    /workspace\/MEMORY\.md$/,
+    /workspace\/IDENTITY\.md$/,
+    /workspace\/SOUL\.md$/,
+    /workspace\/WHERE-TO-WRITE\.md$/,
+    /workspace\/HEARTBEAT\.md$/,
     /workspace\/memory\/.*\.md$/,
     /\.ldm\/agents\/.*\/memory\/daily\/.*\.md$/,
     /\.ldm\/memory\/shared-log\.jsonl$/,

package/tools/wip-branch-guard/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-branch-guard",
-  "version": "1.9.49",
+  "version": "1.9.51",
   "description": "PreToolUse hook that blocks all writes on main branch. Forces agents to work on branches or worktrees.",
   "type": "module",
   "main": "guard.mjs",

package/tools/wip-file-guard/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-file-guard",
-  "version": "1.9.49",
+  "version": "1.9.51",
   "type": "module",
   "description": "Hook that blocks destructive edits to protected identity files. For Claude Code CLI and OpenClaw.",
   "main": "guard.mjs",

package/tools/wip-license-guard/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-license-guard",
-  "version": "1.9.49",
+  "version": "1.9.51",
   "description": "License compliance for your own repos. Ensures correct copyright, dual-license blocks, and LICENSE files.",
   "type": "module",
   "bin": {

package/tools/wip-license-hook/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-license-hook",
-  "version": "1.9.49",
+  "version": "1.9.51",
   "description": "License rug-pull detection and dependency license compliance for open source projects",
   "type": "module",
   "main": "dist/cli/index.js",

package/tools/wip-readme-format/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-readme-format",
-  "version": "1.9.49",
+  "version": "1.9.51",
   "description": "Reformat any repo's README to follow the WIP Computer standard. Agent-first, human-readable.",
   "type": "module",
   "bin": {

package/tools/wip-release/core.mjs

@@ -388,6 +388,20 @@ function checkProductDocs(repoPath) {
     }
   }
 
+  // 4. Product update doc: modified since last tag
+  const productUpdateDir = join(aiDir, 'dev-updates', 'product-update');
+  if (existsSync(productUpdateDir)) {
+    const puFiles = readdirSync(productUpdateDir).filter(f => f.endsWith('.md'));
+    if (puFiles.length > 0) {
+      const anyModified = puFiles.some(f =>
+        fileModifiedSinceLastTag(repoPath, `ai/dev-updates/product-update/${f}`)
+      );
+      if (!anyModified) {
+        missing.push('ai/dev-updates/product-update/ (product update doc not updated since last release)');
+      }
+    }
+  }
+
   return { missing, ok: missing.length === 0, skipped: false };
 }
 

package/tools/wip-release/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-release",
-  "version": "1.9.49",
+  "version": "1.9.51",
   "type": "module",
   "description": "One-command release pipeline. Bumps version, updates changelog + SKILL.md, publishes to npm + GitHub.",
   "main": "core.mjs",

package/tools/wip-repo-init/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-repo-init",
-  "version": "1.9.49",
+  "version": "1.9.51",
   "description": "Scaffold the standard ai/ directory structure in any repo",
   "type": "module",
   "bin": {

package/tools/wip-repo-init/templates/product/plans-prds/todos/README 2.md

@@ -0,0 +1,63 @@
+# todos/
+
+One todo file per person or agent. Three sections per file: To Do, Done, Deprecated.
+
+## What This Folder Is
+
+Todos that are specific to this repo. Each person or agent who works on this repo gets one file. The file tracks what they need to do, what they've done, and what got dropped.
+
+For cross-repo work or bigger items, use GitHub Issues. Todos here are for repo-scoped tasks that don't need the overhead of an issue.
+
+## Files
+
+One file per person/agent. Name it `[Name]-todo.md`.
+
+Example:
+
+| File | Who |
+|------|-----|
+| `Parker-todo.md` | Parker (human tasks: reviews, credentials, approvals) |
+| `CC-Mini-todo.md` | Claude Code on Mac Mini (code, builds, deploys) |
+
+Create the file when that person/agent first has work to do. No empty placeholder files.
+
+## File Format
+
+```markdown
+# [Name] Todos
+
+**Last updated:** YYYY-MM-DD
+
+## To Do
+
+- [ ] Task description
+- [ ] Task description (blocked by: reason)
+
+## Done
+
+- [x] Task description (YYYY-MM-DD)
+- [x] Task description (YYYY-MM-DD)
+
+## Deprecated
+
+- ~~Task description~~ ... reason. (YYYY-MM-DD)
+```
+
+## Rules
+
+- **Never delete anything.** Items move between sections, never off the page.
+- **To Do** ... work that needs to happen.
+- **Done** ... completed work. Check the box, add the date.
+- **Deprecated** ... planned but no longer needed. Strikethrough, add the reason and date. Not the same as Done. Done means it shipped. Deprecated means the requirement changed.
+- **Update the date** at the top of the file every time you edit it.
+- **One file per person/agent.** No dated files, no subfolders, no inboxes.
+- **Blocked items** stay in To Do with a `(blocked by: reason)` note. Don't move them to a separate section.
+
+## When to Use Todos vs GitHub Issues
+
+| Use | When |
+|-----|------|
+| **Todo file** | Quick tasks, repo-scoped work, things you'll do this session or this week |
+| **GitHub Issue** | Bugs, feature requests, cross-repo work, things that need tracking or discussion |
+
+Both is fine. File an issue AND add a todo that references it. The todo is your personal checklist. The issue is the team's record.

package/tools/wip-repo-permissions-hook/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-repo-permissions-hook",
-  "version": "1.9.49",
+  "version": "1.9.51",
   "type": "module",
   "description": "Repo visibility guard. Blocks repos from going public without a -private counterpart.",
   "main": "core.mjs",

package/tools/wip-repos/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-repos",
-  "version": "1.9.49",
+  "version": "1.9.51",
   "type": "module",
   "description": "Repo manifest reconciler. Single source of truth for repo organization. Like prettier for folder structure.",
   "main": "core.mjs",

package/tools/wip-universal-installer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/universal-installer",
-  "version": "1.9.49",
+  "version": "1.9.51",
   "type": "module",
   "description": "The Universal Interface specification for agent-native software. Teaches your AI how to build repos with every interface: CLI, Module, MCP Server, OpenClaw Plugin, Skill, Claude Code Hook.",
   "main": "detect.mjs",