wize-dev-kit 0.14.0 → 0.16.0

package/src/security-overlay/skills/wize-sec-scope/scripts/generate-scope.js

@@ -1,106 +0,0 @@
-'use strict';
-
-// generate-scope.js — creates a valid .wize/security/scope.md from CLI args.
-// Zero-dep. Computes scope_sha256 from the body (including the leading newline
-// separator, matching parseScope's convention).
-
-const fs = require('node:fs');
-const path = require('node:path');
-const crypto = require('node:crypto');
-
-function parseArgv(argv) {
-  const out = { url: null, hosts: [], paths: [], acceptedBy: null, outPath: null };
-  for (let i = 0; i < (argv || []).length; i++) {
-    const a = argv[i];
-    if (a === '--url' && argv[i + 1]) { out.url = argv[i + 1]; i++; }
-    else if (a.startsWith('--url=')) out.url = a.slice('--url='.length);
-    else if (a === '--hosts' && argv[i + 1]) { out.hosts = argv[i + 1].split(',').map(s => s.trim()).filter(Boolean); i++; }
-    else if (a.startsWith('--hosts=')) out.hosts = a.slice('--hosts='.length).split(',').map(s => s.trim()).filter(Boolean);
-    else if (a === '--paths' && argv[i + 1]) { out.paths = argv[i + 1].split(',').map(s => s.trim()).filter(Boolean); i++; }
-    else if (a.startsWith('--paths=')) out.paths = a.slice('--paths='.length).split(',').map(s => s.trim()).filter(Boolean);
-    else if (a === '--accepted-by' && argv[i + 1]) { out.acceptedBy = argv[i + 1]; i++; }
-    else if (a.startsWith('--accepted-by=')) out.acceptedBy = a.slice('--accepted-by='.length);
-    else if (a === '--out' && argv[i + 1]) { out.outPath = argv[i + 1]; i++; }
-    else if (a.startsWith('--out=')) out.outPath = a.slice('--out='.length);
-  }
-  if (!out.outPath) out.outPath = path.join(process.cwd(), '.wize', 'security', 'scope.md');
-  return out;
-}
-
-function buildBody({ url, hosts, paths }) {
-  const lines = [];
-
-  lines.push('## allowlist');
-
-  lines.push('hosts:');
-  for (const h of hosts) lines.push(`  - ${h}`);
-
-  lines.push('urls:');
-  if (url) lines.push(`  - ${url.replace(/\/+$/, '')}/`);
-
-  lines.push('paths:');
-  if (paths.length > 0) {
-    for (const p of paths) lines.push(`  - ${p}`);
-  } else {
-    lines.push('  - /');
-  }
-
-  lines.push('');
-  lines.push('## dast_target');
-  if (url) lines.push(`url: ${url}`);
-  lines.push('');
-  lines.push('## notes');
-  lines.push(`Scope gerado por wize-sec-scope em ${new Date().toISOString()}.`);
-  lines.push('');
-
-  return lines.join('\n');
-}
-
-function generateScope({ url, hosts, paths, acceptedBy, outPath }) {
-  const body = buildBody({ url, hosts, paths });
-
-  // The hash is computed on the body as parseScope returns it: with the
-  // leading newline separator between the closing --- and the body.
-  const signedBody = '\n' + body;
-  const scopeSha256 = crypto.createHash('sha256').update(signedBody, 'utf8').digest('hex');
-  const acceptedAt = new Date().toISOString();
-
-  const fm = [
-    `accepted_by: ${acceptedBy || 'unknown'}`,
-    `accepted_at: ${acceptedAt}`,
-    `scope_sha256: ${scopeSha256}`
-  ].join('\n');
-
-  const content = `---\n${fm}\n---\n${signedBody}`;
-
-  const dir = path.dirname(outPath);
-  fs.mkdirSync(dir, { recursive: true });
-  fs.writeFileSync(outPath, content, 'utf8');
-
-  return { path: outPath, sha256: scopeSha256, acceptedBy, acceptedAt };
-}
-
-function main() {
-  const args = parseArgv(process.argv.slice(2));
-
-  if (!args.url) {
-    console.error('✖ --url é obrigatório (ex: --url=http://localhost:8080)');
-    process.exit(2);
-  }
-  if (!args.acceptedBy) {
-    console.error('✖ --accepted-by é obrigatório (ex: --accepted-by="Seu Nome")');
-    process.exit(2);
-  }
-
-  const result = generateScope(args);
-  console.log(`✓ scope.md gerado em ${result.path}`);
-  console.log(`  SHA-256: ${result.sha256}`);
-  console.log(`  aceite por: ${result.acceptedBy}`);
-  console.log(`  aceite em: ${result.acceptedAt}`);
-}
-
-if (require.main === module) {
-  main();
-}
-
-module.exports = { generateScope, buildBody, parseArgv };

package/src/security-overlay/skills/wize-sec-scope/skill.md

@@ -1,52 +0,0 @@
----
-
-code: wize-sec-scope
-description: "Use para criar ou re-assinar o scope.md de segurança. Guia o usuário com perguntas e gera o arquivo com hash SHA-256."
-name: wize-sec-scope
-overlay: security
-module: security-overlay
-owner: wize-sec-red-teamer  # Natasha Romanoff
-status: ready
----
-
-# wize-sec-scope — Criação guiada de scope.md
-
-Cria o arquivo `.wize/security/scope.md` a partir de perguntas interativas. Gera o frontmatter com `accepted_by`, `accepted_at`, e `scope_sha256` (SHA-256 do corpo). O arquivo gerado passa na validação do `loadScope()` sem intervenção manual.
-
-## Uso
-
-```bash
-/wize-sec-scope
-```
-
-## Fluxo guiado
-
-O agente faz uma pergunta por vez:
-
-1. **URL base do alvo** — ex: `http://localhost:8080`
-2. **Hosts adicionais no escopo** — um por linha, Enter para pular
-3. **Paths no escopo** — ex: `/api/*`, Enter para todos (`/`)
-4. **Nome para o aceite** — quem está autorizando o pentest
-
-Ao final, gera `scope.md` com:
-
-- Frontmatter: `accepted_by`, `accepted_at` (ISO-8601), `scope_sha256`
-- Corpo: `## allowlist` com hosts, urls e paths
-- `## dast_target` com a URL base
-- `## notes` com o timestamp de criação
-
-## Re-assinatura
-
-Se o `scope.md` já existe e foi editado, use `--sign-scope` para recomputar o hash:
-
-```bash
-/wize-sec-pentest --sign-scope
-```
-
-## Script
-
-`scripts/generate-scope.js` — gera o arquivo programaticamente (usado pelo agente ou chamado diretamente).
-
-```bash
-node scripts/generate-scope.js --url=http://localhost:8080 --hosts=localhost,127.0.0.1 --paths=/api,/admin --accepted-by="Seu Nome"
-```

package/src/tea-skills/wize-qa-generate-e2e-tests/workflow.md

@@ -1,121 +0,0 @@
----
-
-code: wize-qa-generate-e2e-tests
-description: "Use quando o UX design e PRD estiverem validados e precisar gerar casos de teste E2E a partir das telas e ACs."
-name: Generate E2E Tests
-owner: wize-agent-test-architect   # Hawkeye
-status: ready
----
-
-# Generate E2E Tests
-
-**Goal.** Translate UX screens + PRD ACs into concrete E2E test cases. Hawkeye produces the cases (names, steps, selectors, expected outcome); the user (or Shuri) writes the actual test bodies in the chosen framework.
-
-Hawkeye drives. Mantis confirms UX fidelity. Shuri confirms selectors match the design system.
-
-## When to run
-
-- After `wize-ux-design` and `wize-create-prd` are validated.
-- Before a story enters `in-progress` if the ACs are E2E-heavy.
-- When the team adopts a new E2E framework and needs a baseline.
-
-## When NOT to run
-
-- Before UX design is ready (no screens = no cases).
-- For unit tests (covered by `wize-tea-design`).
-- For visual / a11y (separate audit, out of scope here).
-
-## Inputs
-
-- `.wize/planning/ux/ux-design/{screen}.md` — page specs.
-- `.wize/planning/prd.md` — ACs.
-- `.wize/solutioning/design-system/` — component + testid names.
-- The active profile (web-overlay → Playwright; app-overlay → Detox; core-only → propose and let user pick).
-
-## Output
-
-- `.wize/implementation/tea/e2e-cases/{screen}.md` — one file per screen with the test cases.
-
-## Steps
-
-### 1. Map (UX screen → ACs)
-
-For each screen, list the ACs that touch it. Cross-reference the PRD. If a screen has no ACs, flag it (gap).
-
-### 2. Cases (3-10 per screen)
-
-For each screen, generate 3-10 cases. For each case:
-- **Name:** verb-led, in 1 line.
-- **Pre-conditions:** setup (logged in, on screen X, etc.).
-- **Steps:** numbered, observable actions.
-- **Selectors:** `data-testid` values from the design system. If none exist, propose new ones.
-- **Expected outcome:** what the test asserts.
-- **Priority:** P0 (must pass before release) / P1 (should pass) / P2 (nice to have).
-
-### 3. Selectors
-
-Derive selectors from `design-system/` tokens + story notes. If a story has a `data-testid` map, prefer that. New selectors go into a "proposed testids" section; Mantis signs off in the next design-system sync.
-
-### 4. Triage
-
-Mark each case P0/P1/P2. P0 is the minimum viable E2E coverage. P1 expands happy paths. P2 covers edge cases.
-
-### 5. Hand off
-
-Notify the next workflow:
-- Shuri → implement the P0 cases first.
-- Mantis → sign off on the new testids.
-- The user → confirm the framework choice if it is ambiguous.
-
-## Output template
-
-```markdown
----
-screen: sign-in
-generated: 2026-06-16
-linked_acs: [AC-01-1, AC-01-2]
-framework: playwright
----
-
-# E2E cases — sign-in
-
-## Map
-- AC-01-1: user enters valid email + password
-- AC-01-2: user enters invalid email → error message
-
-## Cases
-
-### P0 — happy path
-- **Name:** Sign in with valid credentials
-- **Pre-conditions:** not signed in; on /signin
-- **Steps:** enter email; enter password; click "Sign in"
-- **Selectors:** data-testid="email-input", data-testid="password-input", data-testid="signin-cta"
-- **Expected outcome:** redirect to /dashboard; token in localStorage
-
-### P0 — invalid email
-- **Name:** Sign in with invalid email
-- **Pre-conditions:** not signed in; on /signin
-- **Steps:** enter "not-an-email"; enter password; click "Sign in"
-- **Selectors:** data-testid="email-input", data-testid="email-error"
-- **Expected outcome:** error text appears within 200ms; no redirect
-
-## Proposed testids
-- (none — using existing design system)
-
-## Triage summary
-- P0: 2
-- P1: 0
-- P2: 0
-```
-
-## Anti-patterns Hawkeye rejects
-
-- Generating 50 cases per screen. (Cap at 10; surface the rest as out-of-scope.)
-- Skipping the priority. (P0 is the contract; the rest is optional.)
-- Inventing selectors not present in the design system. (Propose them, but flag for Mantis.)
-- Auto-writing Playwright code. (Hawkeye proposes cases; the human writes the bodies.)
-- Skipping the screen-to-AC mapping. (Coverage gap = bug.)
-
-## Hand-off
-
-> "E2E cases generated for {N} screens. {N0} P0, {N1} P1, {N2} P2. Files at `.wize/implementation/tea/e2e-cases/`. Next: implement P0 (Shuri), sign off new testids (Mantis)."

package/tools/installer/baseline.js

@@ -1,128 +0,0 @@
-// Brownfield baseline runner — detects AI harness CLIs available on PATH and,
-// when authorized, executes `/wize-document-project` headlessly to populate
-// .wize/knowledge/document-project/. Falls back to printed instructions when
-// no harness is present or the user opts out.
-//
-// Harness priority is:
-//   1. user's selected IDE targets (from .wize/config/project.toml), highest first
-//   2. claude > codex > opencode (universal fallback)
-//
-// Set WIZE_SKIP_BASELINE=1 in the environment to disable any execution (the
-// install still suggests the next step). Useful for CI and unattended setups.
-
-'use strict';
-
-const fs = require('node:fs');
-const path = require('node:path');
-const { spawnSync } = require('node:child_process');
-
-// Harness registry — for each supported CLI we know:
-//   binary  : the executable name to find on PATH
-//   ideCode : the matching `ide_targets` code in project.toml (so we can prioritize)
-//   buildCmd: returns the spawnSync args (binary + arg list) for a headless run
-const HARNESSES = [
-  {
-    code: 'claude-code',
-    binary: 'claude',
-    buildCmd: (prompt) => ({ cmd: 'claude', args: ['-p', prompt] })
-  },
-  {
-    code: 'codex',
-    binary: 'codex',
-    buildCmd: (prompt) => ({ cmd: 'codex', args: ['exec', '--', prompt] })
-  },
-  {
-    code: 'opencode',
-    binary: 'opencode',
-    buildCmd: (prompt) => ({ cmd: 'opencode', args: ['run', prompt] })
-  }
-];
-
-function whichSync(bin) {
-  // Manual PATH walk — more predictable than shelling out to `which`/`where`,
-  // honors PATH overrides set by callers (and our tests), and stays portable.
-  const PATH = process.env.PATH || '';
-  const sep = process.platform === 'win32' ? ';' : ':';
-  const exts = process.platform === 'win32'
-    ? (process.env.PATHEXT || '.EXE;.CMD;.BAT').split(';')
-    : [''];
-  for (const dir of PATH.split(sep).filter(Boolean)) {
-    for (const ext of exts) {
-      const candidate = path.join(dir, bin + ext);
-      try {
-        const st = fs.statSync(candidate);
-        if (st.isFile() && (process.platform === 'win32' || (st.mode & 0o111))) {
-          return candidate;
-        }
-      } catch (_) { /* not here, keep looking */ }
-    }
-  }
-  return null;
-}
-
-// Returns an ordered list of harnesses present on PATH. When `preferIde`
-// includes a harness's `code`, it floats to the top of the result.
-function detectHarnessCli({ preferIde = [] } = {}) {
-  const found = [];
-  for (const h of HARNESSES) {
-    const p = whichSync(h.binary);
-    if (p) found.push({ ...h, path: p });
-  }
-  // Float preferred IDE targets to the top, keep relative order otherwise.
-  return found.sort((a, b) => {
-    const ai = preferIde.indexOf(a.code);
-    const bi = preferIde.indexOf(b.code);
-    if (ai === -1 && bi === -1) return 0;
-    if (ai === -1) return 1;
-    if (bi === -1) return -1;
-    return ai - bi;
-  });
-}
-
-// Run the harness headless with the document-project prompt. Returns
-// { ok: boolean, exitCode, stdout, stderr }.
-function runHeadlessBaseline({ harness, projectRoot, prompt, log = console.log }) {
-  if (process.env.WIZE_SKIP_BASELINE === '1') {
-    log('WIZE_SKIP_BASELINE=1 — not running the baseline; you can do it later in your IDE.');
-    return { ok: false, skipped: true };
-  }
-  const { cmd, args } = harness.buildCmd(prompt);
-  log(`Running ${cmd} ${args.map(a => /\s/.test(a) ? '"' + a + '"' : a).join(' ')}\n`);
-  const r = spawnSync(cmd, args, { cwd: projectRoot, stdio: 'inherit' });
-  return { ok: r.status === 0, exitCode: r.status, signal: r.signal };
-}
-
-function manualInstructions(harness) {
-  if (!harness) {
-    return [
-      '',
-      'No AI harness CLI was detected on PATH (claude / codex / opencode).',
-      'Open your IDE in this repo and run:',
-      '  /wize-document-project',
-      ''
-    ].join('\n');
-  }
-  const { cmd, args } = harness.buildCmd('/wize-document-project');
-  const shown = `${cmd} ${args.map(a => /\s/.test(a) ? '"' + a + '"' : a).join(' ')}`;
-  return [
-    '',
-    `Skipping the headless run. When you're ready, run from this folder:`,
-    `  ${shown}`,
-    '',
-    `Or open your IDE and type:  /wize-document-project`,
-    ''
-  ].join('\n');
-}
-
-function defaultPrompt() {
-  return 'Activate the wize-document-project skill and execute it on this repository. Follow the steps in .claude/skills/wize-document-project/SKILL.md (or the equivalent path for your IDE). Output the baseline docs under .wize/knowledge/document-project/.';
-}
-
-module.exports = {
-  HARNESSES,
-  whichSync,
-  detectHarnessCli,
-  runHeadlessBaseline,
-  manualInstructions,
-  defaultPrompt
-};

package/tools/installer/commands/agent.js

@@ -1,197 +0,0 @@
-// `wize-dev-kit agent <subcommand>` — manage built-in and custom agents.
-//
-//   list        - show every agent the active install resolves (built-in + custom)
-//   create      - scaffold a brand-new custom agent in .wize/custom/agents/{code}/
-//   edit <code> - override an existing built-in via .wize/custom/agents/{code}/customize.toml
-//
-// All write operations validate the result against schemas/agent.schema.json
-// (lite parser — no dependency on Ajv yet) and do a smoke dry-run before
-// persisting, matching the contract `wize-create-agent` describes.
-
-'use strict';
-
-const fs = require('node:fs');
-const path = require('node:path');
-const prompts = require('prompts');
-const { collectAssets } = require('../render-shared.js');
-
-const VALID_CODE = /^wize-(agent|orchestrator)(?:-[a-z0-9-]+)?$/;
-const VALID_MODULES = ['orchestrator', 'method', 'tea', 'builder', 'core', 'web-overlay', 'app-overlay', 'custom'];
-
-function ensureDir(p) { fs.mkdirSync(p, { recursive: true }); }
-
-function listAgents(kitRoot, projectRoot) {
-  const builtIn = collectAssets(kitRoot, { profiles: ['core', 'web-overlay', 'app-overlay'] })
-    .filter(a => a.kind === 'agent')
-    .map(a => ({ code: a.code, name: a.name, title: a.title, source: 'built-in' }));
-  const customDir = path.join(projectRoot, '.wize/custom/agents');
-  const custom = [];
-  if (fs.existsSync(customDir)) {
-    for (const entry of fs.readdirSync(customDir, { withFileTypes: true })) {
-      if (!entry.isDirectory()) continue;
-      const yamlPath = path.join(customDir, entry.name, 'agent.yaml');
-      const customizePath = path.join(customDir, entry.name, 'customize.toml');
-      if (fs.existsSync(yamlPath)) {
-        const yaml = fs.readFileSync(yamlPath, 'utf-8');
-        const name = (yaml.match(/^name:\s*(.+)$/m) || [])[1] || entry.name;
-        const title = (yaml.match(/^title:\s*(.+)$/m) || [])[1] || '';
-        custom.push({ code: entry.name, name: name.trim(), title: title.trim(), source: 'custom' });
-      } else if (fs.existsSync(customizePath)) {
-        custom.push({ code: entry.name, name: '(override)', title: '', source: 'override' });
-      }
-    }
-  }
-  return { builtIn, custom };
-}
-
-function cmdAgentList({ kitRoot, projectRoot, log = console.log } = {}) {
-  const { builtIn, custom } = listAgents(kitRoot, projectRoot);
-  log('Built-in agents:');
-  for (const a of builtIn) log(`  ${a.code.padEnd(36)} ${a.name}${a.title ? ' — ' + a.title : ''}`);
-  if (custom.length) {
-    log('\nCustom / override agents (from .wize/custom/agents/):');
-    for (const a of custom) log(`  ${a.code.padEnd(36)} ${a.name}${a.title ? ' — ' + a.title : ''}   [${a.source}]`);
-  } else {
-    log('\nCustom / override agents: (none yet — use `wize-dev-kit agent create`)');
-  }
-  return { builtIn, custom };
-}
-
-function validateAgent(spec, kitRoot) {
-  const errs = [];
-  if (!spec.code) errs.push('code is required');
-  else if (!VALID_CODE.test(spec.code)) errs.push(`code "${spec.code}" must match wize-(agent|orchestrator)[-name]`);
-  if (!spec.name) errs.push('name is required');
-  if (!spec.title) errs.push('title is required');
-  if (!VALID_MODULES.includes(spec.module)) errs.push(`module must be one of: ${VALID_MODULES.join(', ')}`);
-  if (!spec.description || spec.description.length < 10) errs.push('description must be ≥ 10 characters');
-  // Collide check against built-ins when not overriding.
-  const builtinCodes = collectAssets(kitRoot, { profiles: ['core', 'web-overlay', 'app-overlay'] })
-    .filter(a => a.kind === 'agent').map(a => a.code);
-  if (builtinCodes.includes(spec.code) && !spec.allowOverride) {
-    errs.push(`code "${spec.code}" already exists as a built-in. Use \`wize-dev-kit agent edit ${spec.code}\` to override.`);
-  }
-  return errs;
-}
-
-function renderAgentYaml(spec) {
-  return [
-    `code: ${spec.code}`,
-    `name: ${spec.name}`,
-    `title: ${spec.title}`,
-    `icon: "${spec.icon || '🔧'}"`,
-    `team: ${spec.team || 'software-development'}`,
-    `module: ${spec.module}`,
-    '',
-    'description: |',
-    ...spec.description.split('\n').map(l => '  ' + l),
-    ''
-  ].join('\n');
-}
-
-function renderPersonaMd(spec) {
-  const body = (spec.persona || `I am **${spec.name}**. ${spec.description}`).trim();
-  return [
-    `# ${spec.name} — ${spec.title}`,
-    '',
-    body,
-    ''
-  ].join('\n');
-}
-
-// Smoke dry-run: write to temp dir, re-read, assert frontmatter parses.
-function dryRunPersist(spec) {
-  const tmp = path.join(require('node:os').tmpdir(), `wize-agent-${spec.code}-${Date.now()}`);
-  ensureDir(tmp);
-  try {
-    fs.writeFileSync(path.join(tmp, 'agent.yaml'), renderAgentYaml(spec), 'utf-8');
-    fs.writeFileSync(path.join(tmp, 'persona.md'), renderPersonaMd(spec), 'utf-8');
-    const reread = fs.readFileSync(path.join(tmp, 'agent.yaml'), 'utf-8');
-    if (!/^code:\s+/m.test(reread)) throw new Error('emitted agent.yaml has no "code:" line');
-    if (!/^name:\s+/m.test(reread)) throw new Error('emitted agent.yaml has no "name:" line');
-    return { ok: true };
-  } finally {
-    try { fs.rmSync(tmp, { recursive: true, force: true }); } catch (_) {}
-  }
-}
-
-async function cmdAgentCreate({ kitRoot, projectRoot, opts = {} } = {}) {
-  const interactive = process.stdout.isTTY && process.stdin.isTTY && !opts.fromSpec;
-  let spec = opts.fromSpec || {};
-
-  if (interactive) {
-    const a = await prompts([
-      { type: 'text', name: 'code',  message: 'Agent code (e.g. wize-agent-runbooks)',
-        validate: v => VALID_CODE.test(v) || 'must match wize-(agent|orchestrator)[-name]' },
-      { type: 'text', name: 'name',  message: 'Display name (e.g. Riri Williams)', validate: v => !!v.trim() || 'required' },
-      { type: 'text', name: 'title', message: 'Role / title (e.g. Reliability Engineer)', validate: v => !!v.trim() || 'required' },
-      { type: 'text', name: 'icon',  message: 'Icon emoji (optional)', initial: '🔧' },
-      { type: 'text', name: 'team',  message: 'Team', initial: 'software-development' },
-      { type: 'select', name: 'module', message: 'Module', choices: VALID_MODULES.map(v => ({ title: v, value: v })), initial: VALID_MODULES.indexOf('custom') },
-      { type: 'text', name: 'description', message: 'One-paragraph description (≥ 10 chars)', validate: v => v.length >= 10 || 'must be ≥ 10 characters' },
-      { type: 'text', name: 'persona', message: 'Persona body (optional — defaults to description)', initial: '' }
-    ], { onCancel: () => process.exit(130) });
-    spec = { ...spec, ...a };
-  }
-
-  const errs = validateAgent(spec, kitRoot);
-  if (errs.length) {
-    console.error('✖ Validation failed:');
-    for (const e of errs) console.error('  - ' + e);
-    process.exit(2);
-  }
-
-  const dry = dryRunPersist(spec);
-  if (!dry.ok) {
-    console.error('✖ Dry-run failed; aborting.');
-    process.exit(3);
-  }
-
-  const target = path.join(projectRoot, '.wize/custom/agents', spec.code);
-  ensureDir(target);
-  fs.writeFileSync(path.join(target, 'agent.yaml'), renderAgentYaml(spec), 'utf-8');
-  fs.writeFileSync(path.join(target, 'persona.md'), renderPersonaMd(spec), 'utf-8');
-
-  console.log(`✓ Created ${path.relative(projectRoot, target)}/`);
-  console.log('  Run `wize-dev-kit sync` to refresh IDE adapter outputs with the new agent.');
-  return { code: spec.code, path: target };
-}
-
-async function cmdAgentEdit({ kitRoot, projectRoot, code, opts = {} } = {}) {
-  if (!code) {
-    console.error('Usage: wize-dev-kit agent edit <code>');
-    process.exit(1);
-  }
-  const builtinCodes = collectAssets(kitRoot, { profiles: ['core', 'web-overlay', 'app-overlay'] })
-    .filter(a => a.kind === 'agent').map(a => a.code);
-  if (!builtinCodes.includes(code)) {
-    console.error(`✖ "${code}" is not a built-in agent. Use \`wize-dev-kit agent create\` for new agents.`);
-    process.exit(2);
-  }
-
-  const target = path.join(projectRoot, '.wize/custom/agents', code);
-  ensureDir(target);
-  const customize = path.join(target, 'customize.toml');
-  if (fs.existsSync(customize) && !opts.force) {
-    console.log(`= ${path.relative(projectRoot, customize)} already exists. Edit it directly.`);
-    return { code, path: customize };
-  }
-  fs.writeFileSync(customize, `# Wize Dev Kit — overrides for the built-in agent "${code}".
-# This file is loaded on top of the built-in agent's persona.md / agent.yaml
-# at IDE adapter render time. Only the fields you set here are overridden.
-
-[persona]
-# motto      = "your custom motto"
-# voice      = "succinct and irreverent"
-# style      = "show with code, not prose"
-
-[behavior]
-# defer_to   = []         # e.g. ["wize-agent-pm"] to lower priority on certain decisions
-# tools_deny = []         # tool codes the override removes from the agent
-`, 'utf-8');
-  console.log(`✓ Created ${path.relative(projectRoot, customize)}`);
-  console.log('  Edit the file, then run `wize-dev-kit sync` to apply.');
-  return { code, path: customize };
-}
-
-module.exports = { cmdAgentList, cmdAgentCreate, cmdAgentEdit, listAgents, validateAgent };