> ## Documentation Index > Fetch the complete documentation index at: https://docs.wip.computer/llms.txt > Use this file to discover all available pages before exploring further. # AI DevOps Toolbox > The complete toolkit for AI-assisted software development. Release pipeline, license compliance, repo management, identity protection. # AI DevOps Toolbox Want your AI to help with real development? Here's what's working for us at WIP Computer. Your AI writes code. But does it know how to release it? Check license compliance? Protect your important files? Sync private repos to public? Follow a real development process? AI DevOps Toolbox is the complete toolkit. Built by a team of humans and AIs shipping real software together. ## Teach Your AI to Use AI DevOps Toolbox Open your AI and paste this: ``` Read wip.computer/install/wip-ai-devops-toolbox.txt Then explain: 1. What is AI DevOps Toolbox? 2. What does it install on my system? 3. What changes for us? (this AI) 4. What changes across all my AIs? Check if AI DevOps Toolbox is already installed. If it is, show me what I have and what's new. Then ask: - Do you have questions? - Want to see a dry run? If I say yes, run: ldm install wipcomputer/wip-ai-devops-toolbox --dry-run Show me exactly what will change. Don't install anything until I say "install". ``` Your AI will read the spec, explain everything, and do a dry-run install first so you can see exactly what changes before anything is written to your system. ## Features Every tool ships as one or more **interfaces:** the ways you and your AI can use it. **CLI** runs in your terminal. **Module** imports into your code. **Connection** links to any MCP-compatible AI. **Background Integration** works inside OpenClaw. **Skill** teaches your AI how to use the tool via a SKILL.md file. **Automation Hook** runs automatically inside Claude Code on specific events. ### Setup and Onboarding **Universal Installer** * Teaches your AI to take anything you build and make it work across every AI. You write code in any language. This tool turns it into a CLI, connection point, background integration, skill, and automation hook. One command, all interfaces. * Detects what a repo supports and deploys it all. Toolbox mode walks every sub-tool automatically. * **Interfaces:** CLI, Module, Skill * *Stable* **Dev Guide** * Your team's conventions, baked in. Release process, repo structure, branch protection, the `ai/` folder standard. * Best practices for AI-assisted development teams. Covers everything from branching to compliance. ### Automation **LDM Dev Tools.app** * Scheduled automation that runs whether anyone remembers or not. Backup, branch protection audit, visibility audit. * macOS .app bundle with Full Disk Access. One app to grant permissions to, one place to add new automation. Scripts can be run standalone without the .app. * *Stable* ### Repo Management **Repo Visibility Guard** * Never accidentally expose a private repo. * Blocks repos from going public without a `-private` counterpart. Catches accidental exposure of internal plans and development context before it happens. * **Interfaces:** CLI, Module, Connection, Background Integration, Skill, Automation Hook * *Stable* **Repo Manifest Reconciler** * Know where every repo belongs. One source of truth for folder structure. * Like an auto-formatter for folder structure. Move folders around all day; on sync, everything snaps back to where the manifest says. * **Interfaces:** CLI, Module, Connection, Skill * *Stable* **Repo Init** * Set up the standard `ai/` directory in any repo. Plans, notes, ideas, dev updates, todos. One command. * New repo: creates the full structure. Existing repo: moves old `ai/` contents to `ai/_sort/ai_old/` so you can sort at your own pace. Nothing is deleted. * **Interfaces:** CLI, Skill * *Stable* **README Formatter** * Generate or validate READMEs that follow the WIP Computer standard. Badges, title, tagline, "Teach Your AI" block, features, interface coverage table, license. * **Interfaces:** CLI, Skill * *Stable* **Forced Git Worktrees** * Every repo uses git worktrees. Your AIs never edit on main. Period. * When an AI needs to make changes, it creates a worktree (an isolated copy of the repo on its own branch). All edits happen there. Main stays clean. Multiple AIs can work on the same repo at the same time without conflicts. * **Interfaces:** CLI, Automation Hook * *Stable* **Branch Guard** * Blocks all writes on main. The enforcement layer for forced worktrees. * A safety check that catches Write, Edit, and destructive commands. Figures out the repo from the file path, not the working directory, so it works no matter where your AI started. * **Interfaces:** Automation Hook * *Stable* ### License, Compliance, and Protection **Identity File Protection** * Your AI knows what it can never overwrite. CLAUDE.md, SOUL.md, MEMORY.md, SHARED-CONTEXT.md are permanently protected. * Blocks destructive edits to protected personality and memory files. Your AI can read them but can't blow them away. * **Interfaces:** CLI, Module, Background Integration, Skill, Automation Hook * *Stable* **License Guard** * Enforce licensing on every commit. Copyright, dual-license, CLA. Checked automatically. * Ensures your repos have correct copyright, license type, and LICENSE files. Interactive first-run setup. Toolbox-aware: checks every sub-tool. Auto-fix mode repairs issues. * **Interfaces:** CLI * *Stable* **License Change Detection** * Catch license changes in dependencies before they ship. * Scans every dependency for license changes. Blocks merges if a license changed upstream. Daily scan. Generates a public compliance dashboard. * **Interfaces:** CLI, Module, Connection, Skill * *Stable* ### Release and Deploy **Release Pipeline** * Release software correctly. Version bump, changelog, npm publish, GitHub release. One command, nothing forgotten. * SKILL.md sync, release notes on the branch for PR review. Warns when notes are too short or look like changelogs instead of narrative. * **Interfaces:** CLI, Module, Connection, Skill * *Stable* **Private-to-Public Sync** * Publish safely. Syncs private to public, excludes internal files, every time. * One script syncs your private working repo to a clean public mirror. Excludes internal `ai/` folders automatically. Creates a PR, merges it, cleans up branches. * **Interfaces:** CLI, Skill * *Stable* **Post-Merge Branch Naming** * Cleans up after itself. Merged branches get renamed with dates automatically. * Renames merged branches with `--merged-YYYY-MM-DD`. Preserves history without cluttering your branch list. * **Interfaces:** CLI, Skill * *Stable* **Skill Publish to Website** * After every release, your SKILL.md goes live as plain text on your website. No manual copying. No forgetting. * Add `.publish-skill.json` to your repo with `name` and `websiteRepo`. On release, SKILL.md is copied to `yoursite.com/install/{name}.txt` and deployed automatically. * **Interfaces:** Module (built into Release Pipeline) * *Stable* ## Interface Coverage | # | Tool | CLI | Module | Connection | Background | Skill | Hook | | -- | --------------------------------------- | --- | ------ | ---------- | ---------- | ----- | ---- | | | **Setup and Onboarding** | | | | | | | | 1 | Universal Installer | Y | Y | | | Y | | | 2 | Dev Guide | | | | | | | | | **Automation** | | | | | | | | 3 | LDM Dev Tools.app | | | | | | | | | **Repo Management** | | | | | | | | 4 | Repo Visibility Guard | Y | Y | Y | Y | Y | Y | | 5 | Repo Manifest Reconciler | Y | Y | Y | | Y | | | 6 | Repo Init | Y | | | | Y | | | 7 | README Formatter | Y | | | | Y | | | 8 | Forced Git Worktrees | Y | | | | | Y | | 9 | Branch Guard | | | | | | Y | | | **License, Compliance, and Protection** | | | | | | | | 10 | Identity File Protection | Y | Y | | Y | Y | Y | | 11 | License Guard | Y | | | | | | | 12 | License Change Detection | Y | Y | Y | | Y | | | | **Release and Deploy** | | | | | | | | 13 | Release Pipeline | Y | Y | Y | | Y | | | 14 | Private-to-Public Sync | Y | | | | Y | | | 15 | Post-Merge Branch Naming | Y | | | | Y | | | 16 | Skill Publish to Website | | Y | | | | | *** ## Technical Documentation ### Quick Start ```bash theme={null} # Install LDM OS (the shared system for all your AIs) npm install -g @wipcomputer/wip-ldm-os ldm init # Preview what will be installed (12 tools, 39+ interfaces) ldm install wipcomputer/wip-ai-devops-toolbox --dry-run # Install everything ldm install wipcomputer/wip-ai-devops-toolbox # Verify ldm doctor ``` ### Universal Installer The Universal Interface specification for AI-native software. Defines how every tool ships six interfaces: CLI, importable module, connection point, background integration, skill, automation hook. The detection engine powers `ldm install`. ```bash theme={null} ldm install /path/to/repo --dry-run # Detect what interfaces a repo supports ldm install wipcomputer/wip-file-guard # Install a tool from GitHub ``` Source: Pure JavaScript, no build step. Zero dependencies. ### wip-release One-command release pipeline. Version bump, changelog, SKILL.md sync, npm publish, GitHub release, website skill publish. All in one shot. ```bash theme={null} wip-release patch # auto-detects RELEASE-NOTES-v{version}.md wip-release minor --dry-run wip-release major ``` **Release notes are mandatory.** Write `RELEASE-NOTES-v{version}.md` (dashes, not dots) on your feature branch. Commit it with the code. The PR diff shows both code and notes for review. **Quality gates (all run before release):** * Release notes must come from a file (not a flag) * Must reference at least one GitHub issue (#XX) * Product docs must be updated * Technical docs must be updated if source changed * No stale merged branches * Must run from main working tree (not worktree) ### wip-license-hook License change detection. Scans every dependency and fork for license changes. Pre-pull hook blocks merges if a license changed upstream. Pre-push hook alerts. Daily scan. ```bash theme={null} wip-license-hook scan wip-license-hook audit ``` ### wip-repo-permissions-hook Repo visibility guard. Blocks repos from going public without a `-private` counterpart. ```bash theme={null} wip-repo-permissions check wipcomputer/memory-crystal wip-repo-permissions audit wipcomputer ``` ### wip-file-guard A safety check that blocks destructive edits to protected personality and memory files. Two rules: block `Write` on protected files entirely, block `Edit` when removing more than 2 lines or replacing more than 4 lines. ### wip-branch-guard Blocks all writes on main branch. The enforcement layer for required worktrees. Features: * **Workflow teaching:** Error messages include the full 8-step dev process. Your AI learns the workflow from the error. * **Worktree path warning:** Warns when `git worktree add` creates outside `_worktrees/`. * **Dogfood cooldown:** After `wip-release`, blocks `npm install -g` for 5 minutes. * **Dangerous flag blocking:** `--no-verify` and `git push --force` blocked on any branch. * **Shared state allowlist:** CLAUDE.md, SHARED-CONTEXT.md, daily logs always writable on main. ### deploy-public.sh Private-to-public repo sync. Copies all files except `ai/` from private to public repo. Creates a branch, commits with co-authors, pushes, creates PR, merges, creates matching GitHub release, publishes to npm and GitHub Packages. ```bash theme={null} bash deploy-public.sh /path/to/private-repo wipcomputer/public-repo bash deploy-public.sh /path/to/private-repo wipcomputer/public-repo --dry-run ``` ### Source Code All source is committed in the repo. No closed binaries, no hidden code. | Tool | Language | Build step? | | ------------------------- | ---------------- | --------------- | | wip-release | JavaScript (ESM) | None | | wip-license-hook | TypeScript | `npm run build` | | wip-license-guard | JavaScript (ESM) | None | | wip-repo-permissions-hook | JavaScript (ESM) | None | | wip-file-guard | JavaScript (ESM) | None | | wip-branch-guard | JavaScript (ESM) | None | | wip-universal-installer | JavaScript (ESM) | None | | wip-repos | JavaScript (ESM) | None | | wip-repo-init | JavaScript (ESM) | None | | wip-readme-format | JavaScript (ESM) | None | | deploy-public.sh | Shell | None | | post-merge-rename.sh | Shell | None | ## Part of LDM OS AI DevOps Toolbox installs into [LDM OS](https://github.com/wipcomputer/wip-ldm-os), the shared system for all your AIs. Run `ldm install` to see other tools you can add. ## License Dual-license model designed to keep tools free while preventing commercial resellers. ``` MIT All CLI tools, connections, and background integrations (use anywhere, no restrictions). AGPLv3 Commercial redistribution, marketplace listings, or bundling into paid services. ```