Package Exports

@wipcomputer/wip-repo-permissions-hook
@wipcomputer/wip-repo-permissions-hook/core.mjs

This package does not declare an exports field, so the exports above have been automatically detected and optimized by JSPM instead. If any package subpath is missing, it is recommended to post an issue to the original package (@wipcomputer/wip-repo-permissions-hook) to support the "exports" field. If that is not possible, create a JSPM override to customize the exports field for this package.

Readme

WIP Computer

wip-repo-permissions-hook

Repo visibility guard. Blocks repos from going public without a -private counterpart.

Every repo follows the public/private pattern. The private repo is the working repo with ai/ folders (plans, todos, dev updates). The public repo is the same code without ai/. Making a repo public without the -private counterpart exposes internal development context.

This tool blocks that.

How It Works

Before any repo visibility change to public, the guard checks:

Is this a fork of an external project? If yes, allow (exempt).
Does {repo-name}-private exist on GitHub? If yes, allow.
Otherwise, block with an error.

Surfaces

CLI ... wip-repo-permissions check|audit|can-publish
Claude Code hook ... PreToolUse:Bash, blocks gh repo edit --visibility public
OpenClaw plugin ... before_tool_use lifecycle hook
Cron audit ... periodic scan of all public repos via ldm-jobs

CLI Usage

# Check a single repo
node cli.js check wipcomputer/memory-crystal
# -> OK: memory-crystal-private exists

# Check a repo without -private (blocked)
node cli.js check wipcomputer/wip-bridge
# -> BLOCKED: no -private counterpart

# Audit all public repos in org
node cli.js audit wipcomputer

# Alias for check
node cli.js can-publish wipcomputer/wip-ai-devops-toolbox

Claude Code Setup

Add to ~/.claude/settings.json:

{
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Bash",
        "hooks": [{
          "type": "command",
          "command": "node /path/to/wip-repo-permissions-hook/guard.mjs",
          "timeout": 10
        }]
      }
    ]
  }
}

OpenClaw Setup

Symlink or copy to extensions:

cp -r tools/wip-repo-permissions-hook ~/.ldm/extensions/wip-repo-permissions-hook
ln -sf ~/.ldm/extensions/wip-repo-permissions-hook ~/.openclaw/extensions/wip-repo-permissions-hook
openclaw gateway restart

License

CLI, MCP server, OpenClaw plugin, hooks        MIT    (use anywhere, no restrictions)
Hosted or cloud service use                    AGPL   (network service distribution)

AGPL for personal use is free.

Built by Parker Todd Brooks, Lēsa (OpenClaw, Claude Opus 4.6), Claude Code (Claude Opus 4.6).