@wipcomputer/wip-ai-devops-toolbox 1.9.65 → 1.9.67

package/CHANGELOG.md

@@ -31,6 +31,76 @@
 
 
 
+
+## 1.9.67 (2026-03-31)
+
+# Release Notes: wip-ai-devops-toolbox v1.9.67
+
+**Date:** 2026-03-30
+
+## What changed
+
+### Hardcoded path removal
+
+Two files in the devops toolbox had paths that assumed a specific username or iCloud layout.
+
+**ldm-jobs/backup.sh** referenced `/Users/lesa/Library/Mobile Documents/.../ldm/bin/` to find the `ldm` binary for scheduled backup jobs. This iCloud path was fragile (iCloud sync delays, different usernames). The script now uses `$HOME/.ldm/bin/` which is the standard LDM install location and works on any machine (#301).
+
+**test.sh** (the branch guard test harness) had `/Users/lesa` hardcoded for creating temp directories. It now uses `$HOME` so tests run correctly under any user account (#301).
+
+### Earlier changes included in this release
+
+**v1.9.66** added auto-combine for release notes from batched PRs (#237). When multiple PRs are merged between releases, their individual RELEASE-NOTES files are automatically combined into a single changelog entry.
+
+**v1.9.65** fixed the scaffold-on-main issue (#223) where scaffolding left untracked files that blocked `git pull` on the main working tree.
+
+## Why
+
+The backup job is scheduled via LaunchAgent and runs unattended. If the path to `ldm` is wrong, backups silently fail. Moving to `$HOME/.ldm/bin/` aligns with the standard LDM install path and eliminates the iCloud dependency. The test fix ensures CI and local test runs work for all contributors.
+
+## Issues closed
+
+- #301
+
+## How to verify
+
+```bash
+grep -r "/Users/lesa" ldm-jobs/ tools/wip-branch-guard/test.sh
+# Should return zero results
+```
+
+## 1.9.66 (2026-03-30)
+
+# Release Notes: wip-ai-devops-toolbox v1.9.66
+
+Auto-combine release notes when batching multiple PRs into a single release.
+
+## The story
+
+When multiple PRs merge to main before wip-release runs, the release had no good way to gather all their stories. Each PR might have its own RELEASE-NOTES file committed on the branch, but once the branch merges and the file gets trashed, the next release only sees an empty repo root. The agent had to write a new RELEASE-NOTES file from scratch, losing the narrative that was already reviewed in each PR.
+
+Now wip-release looks back through git history. It finds every merge commit since the last tag, checks each one for RELEASE-NOTES files via `git diff-tree` and `git show`, and combines them into a single document. If only one PR had notes, it uses them as-is (fully backwards compatible). If multiple PRs had notes, it wraps them with per-PR section headers, strips duplicate top-level headings, and collects all issue references into a combined list at the end.
+
+The detection sits at priority 2.5 in the release notes cascade: after the single-file check (RELEASE-NOTES-v{ver}.md on disk) but before the dev-update fallback. A file on disk always wins. The merged-PR scan only kicks in when nothing is found on disk.
+
+## What changed
+
+- New exported function `collectMergedPRNotes()` in `core.mjs` that scans git merge history for RELEASE-NOTES files
+- Updated `cli.js` to call it at priority 2.5 in the notes detection cascade
+- Updated help text to document the new detection path
+- Zero breaking changes. Single-file detection still works exactly as before.
+
+## Issues closed
+
+- Closes #237
+
+## How to verify
+
+```bash
+# In any repo with multiple merged PRs since last tag, each having RELEASE-NOTES files:
+wip-release patch --dry-run
+# Should show: "Combined release notes from N merged PRs"
+```
 
 ## 1.9.65 (2026-03-29)
 

package/SKILL.md

@@ -5,7 +5,7 @@ license: MIT
 interface: [cli, module, mcp, skill, hook, plugin]
 metadata:
   display-name: "WIP AI DevOps Toolbox"
-  version: "1.9.65"
+  version: "1.9.67"
   homepage: "https://github.com/wipcomputer/wip-ai-devops-toolbox"
   author: "Parker Todd Brooks"
   category: dev-tools

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-ai-devops-toolbox",
-  "version": "1.9.65",
+  "version": "1.9.67",
   "type": "module",
   "description": "The complete AI DevOps toolkit for AI-assisted development teams.",
   "license": "MIT",

package/tools/deploy-public/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/deploy-public",
-  "version": "1.9.65",
+  "version": "1.9.67",
   "description": "Private-to-public repo sync. Excludes ai/ folder, creates PR, merges, cleans up branches.",
   "bin": {
     "deploy-public": "./deploy-public.sh"

package/tools/ldm-jobs/backup.sh

@@ -2,7 +2,7 @@
 # Job: daily backup
 # Calls Lesa's existing backup script
 
-SCRIPT="$HOME/Documents/wipcomputer--mac-mini-01/staff/Lēsa/scripts/daily-backup.sh"
+SCRIPT="$HOME/.ldm/bin/ldm-backup.sh"
 
 echo "=== Backup started: $(date) ==="
 

package/tools/post-merge-rename/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/post-merge-rename",
-  "version": "1.9.65",
+  "version": "1.9.67",
   "description": "Post-merge branch renaming. Appends --merged-YYYY-MM-DD to preserve history.",
   "bin": {
     "post-merge-rename": "./post-merge-rename.sh"

package/tools/wip-branch-guard/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-branch-guard",
-  "version": "1.9.65",
+  "version": "1.9.67",
   "description": "PreToolUse hook that blocks all writes on main branch. Forces agents to work on branches or worktrees.",
   "type": "module",
   "scripts": {

package/tools/wip-branch-guard/test.sh

@@ -110,7 +110,7 @@ test_case "mkdir .worktrees" allow Bash "mkdir -p .worktrees/repo--branch"
 
 echo ""
 echo "--- Plan files (should ALLOW Write/Edit) ---"
-test_case "Edit plan file" allow Edit "/Users/lesa/.claude/plans/my-plan.md"
+test_case "Edit plan file" allow Edit "$HOME/.claude/plans/my-plan.md"
 
 echo ""
 echo "=== Results: $PASS passed, $FAIL failed, $SKIP skipped ==="

package/tools/wip-file-guard/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-file-guard",
-  "version": "1.9.65",
+  "version": "1.9.67",
   "type": "module",
   "description": "Hook that blocks destructive edits to protected identity files. For Claude Code CLI and OpenClaw.",
   "main": "guard.mjs",

package/tools/wip-license-guard/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-license-guard",
-  "version": "1.9.65",
+  "version": "1.9.67",
   "description": "License compliance for your own repos. Ensures correct copyright, dual-license blocks, and LICENSE files.",
   "type": "module",
   "bin": {

package/tools/wip-license-hook/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-license-hook",
-  "version": "1.9.65",
+  "version": "1.9.67",
   "description": "License rug-pull detection and dependency license compliance for open source projects",
   "type": "module",
   "main": "dist/cli/index.js",

package/tools/wip-readme-format/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-readme-format",
-  "version": "1.9.65",
+  "version": "1.9.67",
   "description": "Reformat any repo's README to follow the WIP Computer standard. Agent-first, human-readable.",
   "type": "module",
   "bin": {

package/tools/wip-release/cli.js

@@ -5,7 +5,7 @@
  * Release tool CLI. Bumps version, updates docs, publishes.
  */
 
-import { release, detectCurrentVersion } from './core.mjs';
+import { release, detectCurrentVersion, collectMergedPRNotes } from './core.mjs';
 
 const args = process.argv.slice(2);
 const level = args.find(a => ['patch', 'minor', 'major'].includes(a));
@@ -31,6 +31,7 @@ let notesSource = (notes !== null && notes !== undefined && notes !== '') ? 'fla
 // Release notes priority (highest wins):
 //   1. --notes-file=path          Explicit file path (always wins)
 //   2. RELEASE-NOTES-v{ver}.md    In repo root (always wins over --notes flag)
+//   2.5. Merged PR notes          Auto-combined from git history (#237)
 //   3. ai/dev-updates/YYYY-MM-DD* Today's dev update (wins over --notes flag if longer)
 //   4. --notes="text"             Flag fallback (only if nothing better exists)
 //
@@ -71,6 +72,31 @@ let notesSource = (notes !== null && notes !== undefined && notes !== '') ? 'fla
     } catch {}
   }
 
+  // 2.5. Auto-combine release notes from merged PRs since last tag (#237)
+  // Only runs when no single RELEASE-NOTES file was found on disk.
+  // Scans git merge history for RELEASE-NOTES files committed on PR branches.
+  if (level && notesSource !== 'file') {
+    try {
+      const { collectMergedPRNotes, detectCurrentVersion: dcv, bumpSemver: bs } = await import('./core.mjs');
+      const cwd = process.cwd();
+      const cv = dcv(cwd);
+      const nv = bs(cv, level);
+      const combined = collectMergedPRNotes(cwd, cv, nv);
+      if (combined) {
+        if (flagNotes && flagNotes !== combined.notes) {
+          console.log(`  ! --notes flag ignored: merged PR notes take priority`);
+        }
+        notes = combined.notes;
+        notesSource = combined.notesSource;
+        if (combined.prCount > 1) {
+          console.log(`  \u2713 Combined release notes from ${combined.prCount} merged PRs`);
+        } else {
+          console.log(`  \u2713 Found release notes from merged PR`);
+        }
+      }
+    } catch {}
+  }
+
   // 3. Auto-detect dev update from ai/dev-updates/ (wins over --notes flag if longer)
   if (level && (!notes || (notesSource === 'flag' && notes.length < 200))) {
     try {
@@ -134,9 +160,11 @@ Flags:
 Release notes (REQUIRED, must be a file on disk):
   1. --notes-file=path          Explicit file path
   2. RELEASE-NOTES-v{ver}.md    In repo root (auto-detected)
-  3. ai/dev-updates/YYYY-MM-DD* Today's dev update (auto-detected)
+  3. Merged PR notes             Auto-combined from git history (#237)
+  4. ai/dev-updates/YYYY-MM-DD* Today's dev update (auto-detected)
   The --notes flag is NOT accepted. Write a file. Commit it on your branch.
   The file shows up in the PR diff so it can be reviewed before merge.
+  When batching multiple PRs, each PR's RELEASE-NOTES are auto-combined.
 
 Skill publish to website:
   Add .publish-skill.json to repo root: { "name": "my-tool" }

package/tools/wip-release/core.mjs

@@ -368,6 +368,161 @@ ${issueRefs || '- #XX (replace with actual issue numbers)'}
   return notesPath;
 }
 
+/**
+ * Collect release notes from merged PRs since the last tag.
+ *
+ * When multiple PRs are batched into a single release, each PR may have
+ * committed its own RELEASE-NOTES-v*.md file. This function finds those
+ * notes in git history and combines them into one document.
+ *
+ * Steps:
+ *   1. git log v{prev}..HEAD --merges --oneline to find merge commits
+ *   2. Extract PR number from "Merge pull request #XX from ..."
+ *   3. Check each merge commit's diff for RELEASE-NOTES*.md files
+ *   4. Read content via git show {sha}:{path}
+ *   5. Combine into a single document (newest first)
+ *
+ * Returns { notes, notesSource, prCount } or null if nothing found.
+ */
+export function collectMergedPRNotes(repoPath, currentVersion, newVersion) {
+  let lastTag;
+  try {
+    lastTag = execFileSync('git', ['describe', '--tags', '--abbrev=0'],
+      { cwd: repoPath, encoding: 'utf8' }).trim();
+  } catch {
+    return null; // No tags yet
+  }
+
+  // Find merge commits since last tag
+  let mergeLog;
+  try {
+    mergeLog = execFileSync('git', [
+      'log', `${lastTag}..HEAD`, '--merges', '--oneline'
+    ], { cwd: repoPath, encoding: 'utf8' }).trim();
+  } catch {
+    return null;
+  }
+
+  if (!mergeLog) return null;
+
+  const mergeLines = mergeLog.split('\n').filter(Boolean);
+  const prNotes = [];
+
+  for (const line of mergeLines) {
+    // Format: "abc1234 Merge pull request #XX from org/branch"
+    const prMatch = line.match(/^([a-f0-9]+)\s+Merge pull request #(\d+)\s+from\s+(.+)$/);
+    if (!prMatch) continue;
+
+    const [, shortHash, prNum, branchRef] = prMatch;
+
+    // Get the full hash for this merge commit
+    let fullHash;
+    try {
+      fullHash = execFileSync('git', ['rev-parse', shortHash],
+        { cwd: repoPath, encoding: 'utf8' }).trim();
+    } catch {
+      continue;
+    }
+
+    // List files changed in this merge commit.
+    // For merge commits, diff against first parent to see what the PR brought in.
+    // Plain diff-tree on a merge commit shows nothing without -m or -c.
+    let changedFiles;
+    try {
+      changedFiles = execFileSync('git', [
+        'diff', '--name-only', `${fullHash}^1`, fullHash
+      ], { cwd: repoPath, encoding: 'utf8' }).trim();
+    } catch {
+      continue;
+    }
+
+    // Look for RELEASE-NOTES*.md files
+    const noteFiles = changedFiles.split('\n')
+      .filter(f => /^RELEASE-NOTES.*\.md$/i.test(f.trim()));
+
+    if (noteFiles.length === 0) continue;
+
+    // Read the content of each release notes file from that commit
+    for (const noteFile of noteFiles) {
+      try {
+        const content = execFileSync('git', [
+          'show', `${fullHash}:${noteFile.trim()}`
+        ], { cwd: repoPath, encoding: 'utf8' }).trim();
+
+        if (content) {
+          prNotes.push({
+            prNum,
+            branch: branchRef,
+            content,
+            hash: shortHash,
+          });
+        }
+      } catch {
+        // File might have been deleted in the merge. Skip.
+      }
+    }
+  }
+
+  if (prNotes.length === 0) return null;
+
+  // If only one PR had notes, return it directly (no wrapping)
+  if (prNotes.length === 1) {
+    return {
+      notes: prNotes[0].content,
+      notesSource: 'file',
+      prCount: 1,
+    };
+  }
+
+  // Multiple PRs: combine into one document (newest first, already in log order)
+  const pkg = JSON.parse(readFileSync(join(repoPath, 'package.json'), 'utf8'));
+  const name = pkg.name?.replace(/^@[^/]+\//, '') || basename(repoPath);
+
+  const sections = [];
+  sections.push(`# Release Notes: ${name} v${newVersion}`);
+  sections.push('');
+  sections.push(`This release combines ${prNotes.length} merged pull requests.`);
+  sections.push('');
+
+  // Collect all issue refs for a combined summary
+  const allIssueRefs = new Set();
+
+  for (const pr of prNotes) {
+    sections.push(`---`);
+    sections.push('');
+    sections.push(`### PR #${pr.prNum}`);
+    sections.push('');
+
+    // Strip the top-level heading from individual notes to avoid duplicate titles
+    let body = pr.content;
+    body = body.replace(/^#\s+.*\n+/, '');
+    sections.push(body);
+    sections.push('');
+
+    // Collect issue references
+    const refs = body.match(/#\d+/g) || [];
+    for (const ref of refs) allIssueRefs.add(ref);
+  }
+
+  // Add combined issue references at the end
+  if (allIssueRefs.size > 0) {
+    sections.push('---');
+    sections.push('');
+    sections.push('## All issues referenced');
+    sections.push('');
+    for (const ref of allIssueRefs) {
+      sections.push(`- ${ref}`);
+    }
+    sections.push('');
+  }
+
+  return {
+    notes: sections.join('\n'),
+    notesSource: 'file',
+    prCount: prNotes.length,
+  };
+}
+
 /**
  * Check if a file was modified in commits since the last git tag.
  */

package/tools/wip-release/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-release",
-  "version": "1.9.65",
+  "version": "1.9.67",
   "type": "module",
   "description": "One-command release pipeline. Bumps version, updates changelog + SKILL.md, publishes to npm + GitHub.",
   "main": "core.mjs",

package/tools/wip-repo-init/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-repo-init",
-  "version": "1.9.65",
+  "version": "1.9.67",
   "description": "Scaffold the standard ai/ directory structure in any repo",
   "type": "module",
   "bin": {

package/tools/wip-repo-permissions-hook/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-repo-permissions-hook",
-  "version": "1.9.65",
+  "version": "1.9.67",
   "type": "module",
   "description": "Repo visibility guard. Blocks repos from going public without a -private counterpart.",
   "main": "core.mjs",

package/tools/wip-repos/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-repos",
-  "version": "1.9.65",
+  "version": "1.9.67",
   "type": "module",
   "description": "Repo manifest reconciler. Single source of truth for repo organization. Like prettier for folder structure.",
   "main": "core.mjs",

package/tools/wip-universal-installer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/universal-installer",
-  "version": "1.9.65",
+  "version": "1.9.67",
   "type": "module",
   "description": "The Universal Interface specification for agent-native software. Teaches your AI how to build repos with every interface: CLI, Module, MCP Server, OpenClaw Plugin, Skill, Claude Code Hook.",
   "main": "detect.mjs",