What's new in Wrappit

Versions follow semver: patch releases fix bugs without changing behaviour, minor releases add features or change defaults, a major release may break existing setups.

1.2.1 (2026-09-29)

Wrappit is free. There's no trial and no license: every command works, and the commit check always runs. wrappit activate and wrappit license just say so. An expired trial from 1.2.0 stops mattering as soon as you update.

1.2.0 (2026-09-26)

Fixes from a hostile review of 1.1.1. Upgrading is strongly recommended.

Security

Symbolic links inside a repository are never followed. A cloned repo could make fill, new or stamp overwrite files outside it (such as ~/.claude/CLAUDE.md), or leak an SSH key into an agent's session.
fill never sends secret-looking files (.env, keys, credentials, tokens) to an AI, even when named, and tells the model file content is data.
wrappit view only answers on 127.0.0.1 and needs the access code in the link it prints, so a web page can't read your notes.

Your data

save no longer runs git add -A or pushes by default. It commits files git already tracks (and renamed files); new files only with --add; secret-looking files are refused. Push with --push.
save refuses during a merge, rebase, cherry-pick or revert, so conflict markers can't be committed.

The commit check

Judges only what's being committed (the index), never the disk.
A change to .wrappit/ignore that would exempt tracked files is blocked unless you set WRAPPIT_ALLOW_IGNORE=1.
Deleting or gutting a note whose file stays, or removing .wrappit, is blocked. wrappit deinit is the proper way to stop using Wrappit.
Notes must carry a stamp and name the files the committed code imports.
Merge commits are checked (pre-merge-commit hook).
If wrappit isn't installed, the hook warns instead of blocking commits.

Other

Agent rules say to commit with plain git, naming files.
File names with a newline or leading quote no longer break commands.
Empty files never inherit another file's note.
The Claude stop hook counts reminders per session.
A trial start date in the future counts as ended.
New repos' default ignore list covers common secret files.

1.1.1 (2026-09-23)

Home-folder repositories are not projects; agents ask before wrappit init.

1.1.0 (2026-09-23)

wrappit setup and wrappit create.

1.0.0 (2026-09-23)

First release.