wize-dev-kit 0.14.0 → 0.16.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (226) hide show
  1. package/ARCH.md +24 -77
  2. package/CHANGELOG.md +24 -0
  3. package/DECISIONS.md +1 -27
  4. package/README.md +7 -2
  5. package/ROSTER.md +3 -11
  6. package/adapters/README.md +7 -7
  7. package/adapters/antigravity/README.md +5 -5
  8. package/adapters/claude-code/README.md +1 -1
  9. package/adapters/codex/README.md +5 -5
  10. package/adapters/codex/adapter.yaml +1 -1
  11. package/adapters/codex/render.js +1 -1
  12. package/adapters/continue/README.md +5 -5
  13. package/adapters/cursor/README.md +2 -2
  14. package/adapters/generic/README.md +1 -1
  15. package/adapters/kimi-code/README.md +5 -5
  16. package/adapters/kimi-code/render.js +2 -2
  17. package/adapters/opencode/README.md +3 -3
  18. package/adapters/opencode/render.js +1 -27
  19. package/adapters/windsurf/README.md +3 -3
  20. package/package.json +1 -1
  21. package/schemas/agent.schema.json +2 -2
  22. package/schemas/workflow.schema.json +1 -1
  23. package/src/app-overlay/wize-app-release-channels/workflow.md +0 -2
  24. package/src/app-overlay/wize-app-scaffold/workflow.md +0 -2
  25. package/src/app-overlay/wize-app-store-listing/workflow.md +0 -2
  26. package/src/builder-skills/wize-create-agent/workflow.md +0 -2
  27. package/src/builder-skills/wize-create-skill/workflow.md +0 -2
  28. package/src/builder-skills/wize-create-workflow/workflow.md +0 -2
  29. package/src/core-skills/module.yaml +3 -0
  30. package/src/core-skills/wize-advanced-elicitation/skill.md +0 -2
  31. package/src/core-skills/wize-brainstorming/skill.md +0 -2
  32. package/src/core-skills/wize-eli5/skill.md +72 -0
  33. package/src/core-skills/wize-review-adversarial/skill.md +0 -3
  34. package/src/core-skills/wize-shard-doc/skill.md +0 -2
  35. package/src/method-skills/1-analysis/wize-agent-analyst/agent.yaml +0 -3
  36. package/src/method-skills/1-analysis/wize-document-project/workflow.md +20 -213
  37. package/src/method-skills/1-analysis/wize-prfaq/workflow.md +11 -152
  38. package/src/method-skills/1-analysis/wize-product-brief/workflow.md +19 -92
  39. package/src/method-skills/1-analysis/wize-research/workflow.md +12 -39
  40. package/src/method-skills/1-analysis/wize-trigger-map/workflow.md +16 -82
  41. package/src/method-skills/2-plan-workflows/wize-create-prd/workflow.md +23 -135
  42. package/src/method-skills/2-plan-workflows/wize-ux-design/workflow.md +28 -134
  43. package/src/method-skills/2-plan-workflows/wize-ux-scenarios/workflow.md +15 -93
  44. package/src/method-skills/2-plan-workflows/wize-validate-prd/workflow.md +12 -108
  45. package/src/method-skills/3-solutioning/wize-check-implementation-readiness/workflow.md +11 -103
  46. package/src/method-skills/3-solutioning/wize-create-architecture/workflow.md +48 -55
  47. package/src/method-skills/3-solutioning/wize-create-epics-and-stories/workflow.md +15 -154
  48. package/src/method-skills/3-solutioning/wize-design-system/workflow.md +22 -184
  49. package/src/method-skills/3-solutioning/wize-nfr-principles/workflow.md +17 -145
  50. package/src/method-skills/3-solutioning/wize-tech-vision/workflow.md +22 -130
  51. package/src/method-skills/4-implementation/wize-agent-dev/persona.md +0 -12
  52. package/src/method-skills/4-implementation/wize-code-review/workflow.md +12 -54
  53. package/src/method-skills/4-implementation/wize-create-story/workflow.md +10 -154
  54. package/src/method-skills/4-implementation/wize-dev-story/workflow.md +17 -185
  55. package/src/method-skills/4-implementation/wize-quick-dev/workflow.md +18 -136
  56. package/src/method-skills/4-implementation/wize-retrospective/workflow.md +10 -114
  57. package/src/method-skills/4-implementation/wize-sprint-planning/workflow.md +11 -78
  58. package/src/method-skills/4-implementation/wize-sprint-status/workflow.md +11 -45
  59. package/src/method-skills/module.yaml +0 -28
  60. package/src/orchestrator-skills/module.yaml +1 -7
  61. package/src/orchestrator-skills/wize-help/skill.md +67 -227
  62. package/src/orchestrator-skills/wize-onboarding/workflow.md +14 -78
  63. package/src/orchestrator-skills/wize-orchestrator/agent.yaml +0 -2
  64. package/src/orchestrator-skills/wize-orchestrator/persona.md +3 -44
  65. package/src/orchestrator-skills/wize-party-mode/workflow.md +0 -2
  66. package/src/tea-skills/wize-tea-design/workflow.md +13 -107
  67. package/src/tea-skills/wize-tea-gate/workflow.md +25 -118
  68. package/src/tea-skills/wize-tea-nfr/workflow.md +14 -107
  69. package/src/tea-skills/wize-tea-review/workflow.md +13 -123
  70. package/src/tea-skills/wize-tea-risk/workflow.md +10 -113
  71. package/src/tea-skills/wize-tea-trace/workflow.md +12 -86
  72. package/src/web-overlay/wize-web-deploy/workflow.md +0 -2
  73. package/src/web-overlay/wize-web-scaffold/workflow.md +0 -2
  74. package/src/web-overlay/wize-web-seo-audit/workflow.md +0 -2
  75. package/tools/check-eli5-all-adapters.js +50 -0
  76. package/tools/installer/onboarding.js +20 -14
  77. package/tools/installer/render-shared.js +14 -158
  78. package/tools/installer/validators/run-all.js +2 -3
  79. package/tools/installer/wize-cli.js +70 -499
  80. package/AGENTS.md +0 -37
  81. package/README.es.md +0 -294
  82. package/README.pt-BR.md +0 -292
  83. package/docs/harnesses/antigravity.md +0 -20
  84. package/docs/harnesses/antigravity.pt-BR.md +0 -20
  85. package/docs/harnesses/claude-code.md +0 -23
  86. package/docs/harnesses/claude-code.pt-BR.md +0 -23
  87. package/docs/harnesses/codex.md +0 -21
  88. package/docs/harnesses/codex.pt-BR.md +0 -21
  89. package/docs/harnesses/continue.md +0 -21
  90. package/docs/harnesses/continue.pt-BR.md +0 -21
  91. package/docs/harnesses/cursor.md +0 -22
  92. package/docs/harnesses/cursor.pt-BR.md +0 -22
  93. package/docs/harnesses/generic.md +0 -20
  94. package/docs/harnesses/generic.pt-BR.md +0 -20
  95. package/docs/harnesses/kimi-code.md +0 -19
  96. package/docs/harnesses/kimi-code.pt-BR.md +0 -19
  97. package/docs/harnesses/opencode.md +0 -31
  98. package/docs/harnesses/opencode.pt-BR.md +0 -31
  99. package/docs/harnesses/windsurf.md +0 -22
  100. package/docs/harnesses/windsurf.pt-BR.md +0 -22
  101. package/src/core-skills/wize-customize/skill.md +0 -116
  102. package/src/core-skills/wize-editorial-review-prose/skill.md +0 -94
  103. package/src/core-skills/wize-editorial-review-structure/skill.md +0 -99
  104. package/src/core-skills/wize-grill/skill.md +0 -77
  105. package/src/core-skills/wize-index-docs/skill.md +0 -119
  106. package/src/core-skills/wize-pre-pr-check/skill.md +0 -134
  107. package/src/core-skills/wize-review-edge-case-hunter/skill.md +0 -115
  108. package/src/core-skills/wize-spec/assets/headless-schemas.md +0 -39
  109. package/src/core-skills/wize-spec/assets/spec-template.md +0 -40
  110. package/src/core-skills/wize-spec/customize.toml +0 -20
  111. package/src/core-skills/wize-spec/skill.md +0 -112
  112. package/src/method-skills/1-analysis/wize-document-project/documentation-requirements.csv +0 -12
  113. package/src/method-skills/1-analysis/wize-document-project/templates/api-contracts-template.md +0 -38
  114. package/src/method-skills/1-analysis/wize-document-project/templates/architecture-template.md +0 -54
  115. package/src/method-skills/1-analysis/wize-document-project/templates/component-inventory-template.md +0 -40
  116. package/src/method-skills/1-analysis/wize-document-project/templates/contribution-guide-template.md +0 -34
  117. package/src/method-skills/1-analysis/wize-document-project/templates/data-models-template.md +0 -36
  118. package/src/method-skills/1-analysis/wize-document-project/templates/deep-dive-template.md +0 -312
  119. package/src/method-skills/1-analysis/wize-document-project/templates/deployment-guide-template.md +0 -42
  120. package/src/method-skills/1-analysis/wize-document-project/templates/development-guide-template.md +0 -61
  121. package/src/method-skills/1-analysis/wize-document-project/templates/index-template.md +0 -185
  122. package/src/method-skills/1-analysis/wize-document-project/templates/project-overview-template.md +0 -110
  123. package/src/method-skills/1-analysis/wize-document-project/templates/project-scan-report-schema.json +0 -159
  124. package/src/method-skills/1-analysis/wize-document-project/templates/source-tree-template.md +0 -142
  125. package/src/method-skills/1-analysis/wize-domain-research/customize.toml +0 -14
  126. package/src/method-skills/1-analysis/wize-domain-research/domain-steps/step-01-init.md +0 -49
  127. package/src/method-skills/1-analysis/wize-domain-research/domain-steps/step-02-domain-analysis.md +0 -39
  128. package/src/method-skills/1-analysis/wize-domain-research/domain-steps/step-03-competitive-landscape.md +0 -39
  129. package/src/method-skills/1-analysis/wize-domain-research/domain-steps/step-04-regulatory-focus.md +0 -39
  130. package/src/method-skills/1-analysis/wize-domain-research/domain-steps/step-05-technical-trends.md +0 -39
  131. package/src/method-skills/1-analysis/wize-domain-research/domain-steps/step-06-research-synthesis.md +0 -43
  132. package/src/method-skills/1-analysis/wize-domain-research/research.template.md +0 -31
  133. package/src/method-skills/1-analysis/wize-domain-research/workflow.md +0 -58
  134. package/src/method-skills/1-analysis/wize-market-research/customize.toml +0 -14
  135. package/src/method-skills/1-analysis/wize-market-research/research.template.md +0 -31
  136. package/src/method-skills/1-analysis/wize-market-research/steps/step-01-init.md +0 -57
  137. package/src/method-skills/1-analysis/wize-market-research/steps/step-02-customer-behavior.md +0 -39
  138. package/src/method-skills/1-analysis/wize-market-research/steps/step-03-customer-pain-points.md +0 -37
  139. package/src/method-skills/1-analysis/wize-market-research/steps/step-04-customer-decisions.md +0 -39
  140. package/src/method-skills/1-analysis/wize-market-research/steps/step-05-competitive-analysis.md +0 -37
  141. package/src/method-skills/1-analysis/wize-market-research/steps/step-06-research-completion.md +0 -47
  142. package/src/method-skills/1-analysis/wize-market-research/workflow.md +0 -66
  143. package/src/method-skills/1-analysis/wize-refresh-knowledge/workflow.md +0 -129
  144. package/src/method-skills/1-analysis/wize-technical-research/customize.toml +0 -14
  145. package/src/method-skills/1-analysis/wize-technical-research/research.template.md +0 -31
  146. package/src/method-skills/1-analysis/wize-technical-research/technical-steps/step-01-init.md +0 -49
  147. package/src/method-skills/1-analysis/wize-technical-research/technical-steps/step-02-technical-overview.md +0 -45
  148. package/src/method-skills/1-analysis/wize-technical-research/technical-steps/step-03-integration-patterns.md +0 -39
  149. package/src/method-skills/1-analysis/wize-technical-research/technical-steps/step-04-architectural-patterns.md +0 -39
  150. package/src/method-skills/1-analysis/wize-technical-research/technical-steps/step-05-implementation-research.md +0 -42
  151. package/src/method-skills/1-analysis/wize-technical-research/technical-steps/step-06-research-synthesis.md +0 -46
  152. package/src/method-skills/1-analysis/wize-technical-research/workflow.md +0 -60
  153. package/src/method-skills/2-plan-workflows/wize-edit-prd/workflow.md +0 -110
  154. package/src/method-skills/3-solutioning/wize-create-architecture/architecture-decision-template.md +0 -41
  155. package/src/method-skills/3-solutioning/wize-create-architecture/customize.toml +0 -20
  156. package/src/method-skills/3-solutioning/wize-create-architecture/steps/step-01-init.md +0 -95
  157. package/src/method-skills/3-solutioning/wize-create-architecture/steps/step-01b-continue.md +0 -32
  158. package/src/method-skills/3-solutioning/wize-create-architecture/steps/step-02-context.md +0 -126
  159. package/src/method-skills/3-solutioning/wize-create-architecture/steps/step-03-starter.md +0 -110
  160. package/src/method-skills/3-solutioning/wize-create-architecture/steps/step-04-decisions.md +0 -129
  161. package/src/method-skills/3-solutioning/wize-create-architecture/steps/step-05-patterns.md +0 -109
  162. package/src/method-skills/3-solutioning/wize-create-architecture/steps/step-06-structure.md +0 -97
  163. package/src/method-skills/3-solutioning/wize-create-architecture/steps/step-07-validation.md +0 -124
  164. package/src/method-skills/3-solutioning/wize-create-architecture/steps/step-08-complete.md +0 -59
  165. package/src/method-skills/3-solutioning/wize-project-context/workflow.md +0 -120
  166. package/src/method-skills/4-implementation/wize-changelog/workflow.md +0 -184
  167. package/src/method-skills/4-implementation/wize-checkpoint-preview/workflow.md +0 -117
  168. package/src/method-skills/4-implementation/wize-code-review/customize.toml +0 -21
  169. package/src/method-skills/4-implementation/wize-code-review/steps/step-01-gather-context.md +0 -64
  170. package/src/method-skills/4-implementation/wize-code-review/steps/step-02-review.md +0 -40
  171. package/src/method-skills/4-implementation/wize-code-review/steps/step-03-triage.md +0 -43
  172. package/src/method-skills/4-implementation/wize-code-review/steps/step-04-present.md +0 -100
  173. package/src/method-skills/4-implementation/wize-correct-course/workflow.md +0 -93
  174. package/src/method-skills/4-implementation/wize-investigate/workflow.md +0 -123
  175. package/src/method-skills/4-implementation/wize-release/workflow.md +0 -162
  176. package/src/orchestrator-skills/wize/skill.md +0 -164
  177. package/src/orchestrator-skills/wize-check/skill.md +0 -98
  178. package/src/security-overlay/_shared/allowlist.js +0 -154
  179. package/src/security-overlay/_shared/backlog.js +0 -169
  180. package/src/security-overlay/_shared/cli-runner.js +0 -87
  181. package/src/security-overlay/_shared/cvss.js +0 -108
  182. package/src/security-overlay/_shared/detect.js +0 -125
  183. package/src/security-overlay/_shared/install-script.js +0 -205
  184. package/src/security-overlay/_shared/invoke-phase.js +0 -86
  185. package/src/security-overlay/_shared/owasp.js +0 -56
  186. package/src/security-overlay/_shared/partial.js +0 -225
  187. package/src/security-overlay/_shared/preflight.js +0 -175
  188. package/src/security-overlay/_shared/scope-gate.js +0 -172
  189. package/src/security-overlay/_shared/scope-parser.js +0 -147
  190. package/src/security-overlay/agents/red-teamer/agent.yaml +0 -54
  191. package/src/security-overlay/agents/red-teamer/persona.md +0 -49
  192. package/src/security-overlay/data/common.txt +0 -115
  193. package/src/security-overlay/data/owasp-top10.json +0 -15
  194. package/src/security-overlay/data/tool-allowlist.json +0 -31
  195. package/src/security-overlay/skills/wize-sec-enumerate/scripts/run-enumerate.js +0 -180
  196. package/src/security-overlay/skills/wize-sec-enumerate/skill.md +0 -34
  197. package/src/security-overlay/skills/wize-sec-exploit/data/common.txt +0 -117
  198. package/src/security-overlay/skills/wize-sec-exploit/scripts/run-ffuf.js +0 -147
  199. package/src/security-overlay/skills/wize-sec-exploit/scripts/run-nikto.js +0 -145
  200. package/src/security-overlay/skills/wize-sec-exploit/scripts/run-nuclei.js +0 -176
  201. package/src/security-overlay/skills/wize-sec-exploit/scripts/run-sqlmap.js +0 -139
  202. package/src/security-overlay/skills/wize-sec-pentest/scripts/run-pipeline.js +0 -184
  203. package/src/security-overlay/skills/wize-sec-pentest/skill.md +0 -54
  204. package/src/security-overlay/skills/wize-sec-recon/scripts/run-gitleaks.js +0 -139
  205. package/src/security-overlay/skills/wize-sec-recon/scripts/run-osv.js +0 -227
  206. package/src/security-overlay/skills/wize-sec-recon/scripts/run-recon.js +0 -162
  207. package/src/security-overlay/skills/wize-sec-recon/skill.md +0 -37
  208. package/src/security-overlay/skills/wize-sec-report/scripts/render-report.js +0 -1033
  209. package/src/security-overlay/skills/wize-sec-scope/scripts/generate-scope.js +0 -106
  210. package/src/security-overlay/skills/wize-sec-scope/skill.md +0 -52
  211. package/src/tea-skills/wize-qa-generate-e2e-tests/workflow.md +0 -121
  212. package/tools/installer/baseline.js +0 -128
  213. package/tools/installer/commands/agent.js +0 -197
  214. package/tools/installer/commands/doctor.js +0 -319
  215. package/tools/installer/commands/document-project.js +0 -93
  216. package/tools/installer/commands/sync.js +0 -45
  217. package/tools/installer/commands/update.js +0 -172
  218. package/tools/installer/document-project/batch-scanner.js +0 -93
  219. package/tools/installer/document-project/classify.js +0 -170
  220. package/tools/installer/document-project/modes/deep-dive.js +0 -196
  221. package/tools/installer/document-project/modes/full-rescan.js +0 -15
  222. package/tools/installer/document-project/modes/initial-scan.js +0 -100
  223. package/tools/installer/document-project/modes/quick.js +0 -211
  224. package/tools/installer/document-project/render-index.js +0 -101
  225. package/tools/installer/document-project/state.js +0 -110
  226. package/tools/installer/version-check.js +0 -117
@@ -1,201 +1,33 @@
1
1
  ---
2
-
3
2
  code: wize-dev-story
4
- description: "Use quando uma story estiver pronta para implementação e precisar ser desenvolvida com TDD e commits rastreáveis."
5
3
  name: Dev Story
6
4
  phase: 4-implementation
7
5
  owner: wize-agent-dev # Shuri
8
- status: ready
6
+ status: stub
9
7
  ---
10
8
 
11
9
  # Dev Story
12
10
 
13
- **Goal.** Implement one story under TDD discipline. Tests first; minimum code to pass; refactor with green. Each commit cites an AC ID. The PR ends in a clean gate, not a "looks good to me."
14
-
15
- Shuri drives. Hawkeye observes (test design is binding). Tony stays available for architectural questions.
16
-
17
- ## Operating contract
18
-
19
- I work inside a repo with WDK installed: `.wize/`, `AGENTS.md`, and the `wize-*` skills are my instructions and memory, not background reading. This section is the execution slice of the story's **mission contract** (see `/wize mission` or `/wize-help mission`).
20
-
21
- - **Inspect before editing.** Read the story, its sources of truth, and the touched code first.
22
- - **Reuse ladder before new code** (see `wize-agent-dev` persona): needs to exist → already here → stdlib → framework feature → installed dep → one-liner → only then new code.
23
- - **Test-first, unconditionally.** Red before green, per the loop below — this is the strict-TDD workflow; the "when applicable" latitude lives in `wize-quick-dev`, not here. Smallest sufficient change; follow existing conventions.
24
- - **Run real commands.** No success claim without evidence — a passing run, not "should pass."
25
- - **Never stop at planning.** Planning is a step, not a deliverable.
11
+ **Goal.** Implement one story under TDD discipline.
26
12
 
27
13
  ## Inputs
28
-
29
- - `.wize/solutioning/stories/{epic}/{story}.md`
14
+ - `.wize/solutioning/stories/{epic}/{story-id}.md`
30
15
  - `.wize/solutioning/architecture.md`
31
- - `.wize/solutioning/design-system/` (use existing components)
32
- - `.wize/implementation/tea/{epic}/{story}/design.md` (the test contract)
16
+ - `.wize/implementation/tea/{epic}/{story-id}/design.md` (Hawkeye must have produced this)
33
17
 
34
18
  ## Outputs
35
-
36
- - Code + tests in the target repo.
37
- - Commit messages reference AC IDs.
38
- - Story file updated to `status: ready-for-review`.
39
-
40
- ## The loop (TDD, story-scoped)
41
-
42
- ### 1. Read
43
-
44
- Story ACs, out-of-scope, notes, `tea-design.md`. Confirm the test split. If the design doesn't match the story (mismatch on test count, mock, environment), ping Hawkeye **before** writing code.
45
-
46
- ### 2. Slice the story into micro-cycles
47
-
48
- Each cycle is one AC (or part of one) and produces a green test + small code change. Don't try to ship the whole story in one commit.
49
-
50
- ### 3. Red
51
-
52
- Write the failing test first. Match the assertion shape in `design.md`. Don't write code yet.
53
-
54
- ```ts
55
- // red — first run, fails
56
- test('valid email returns ok', () => {
57
- expect(validateInviteEmail('a@b.co')).toEqual({ ok: true });
58
- });
59
- ```
60
-
61
- ### 4. Green
62
-
63
- Before writing anything new, run Shuri's reuse ladder (see `wize-agent-dev` persona): does this need to exist → already in the codebase → stdlib → native/framework feature → installed dependency → one-liner → only then new code. Write the **minimum** code that turns the test green. No anticipated branches; no "just-in-case" handling.
64
-
65
- ```ts
66
- // green — minimum to pass
67
- export const validateInviteEmail = (s: string) => ({ ok: /@/.test(s) });
68
- ```
69
-
70
- ### 5. Refactor
71
-
72
- Now harden, with the test as safety net.
73
-
74
- ```ts
75
- // refactor — same green tests, real logic
76
- import { z } from 'zod';
77
- const schema = z.string().email();
78
- export const validateInviteEmail = (s: string) =>
79
- schema.safeParse(s).success ? { ok: true } : { ok: false, code: 'invalid_format', field: 'email' };
80
- ```
81
-
82
- ### 6. Commit
83
-
84
- Conventional commits, AC IDs referenced.
85
-
86
- ```
87
- feat(invite): validate email per AC-02-1 / AC-02-2
88
- - add validateInviteEmail with zod
89
- - add 4 unit tests covering valid + invalid rules
90
- ```
91
-
92
- ### 7. Repeat
93
-
94
- Until every AC has at least one test + minimum code that makes it pass.
95
-
96
- ### 7.5. Loop verification (auto-check)
97
-
98
- Before declaring the loop done, run these checks:
99
-
100
- | Check | How | Fail → |
101
- |---|---|---|
102
- | **Evidence of iteration** | `git log --oneline` shows ≥2 commits with AC IDs (skip if story has only 1 AC) | Return to step 2 |
103
- | **AC-to-test mapping** | Every AC in the story file has a corresponding test case name | Return to step 3 (Red) |
104
- | **All AC tests green** | `npx vitest run --reporter=verbose` (or equivalent) — grep output for each AC's test name | Return to step 4 (Green) |
105
-
106
- **Max-cycles guard.** If the same AC cycles through Red→Green→Refactor 3+ times without staying green, stop and escalate to Wizer: the test design may be wrong, the AC may be mis-sized, or the approach may need Tony.
107
-
108
- ### 8. Knowledge update (inline, ~60s)
109
-
110
- Before opening the PR, ask: **did this story touch any of the 5 baseline axes** documented in `.wize/knowledge/document-project/`?
111
-
112
- | Axis | Touched when… | File to update |
113
- |---|---|---|
114
- | **Architecture** | new component, new sequence, changed data flow | `architecture-snapshot.md` |
115
- | **Conventions** | new naming/folder/test pattern published as public contract (incl. `testid`) | `conventions.md` |
116
- | **Risk-spots** | introduced a complexity hot spot OR resolved one | `risk-spots.md` |
117
- | **Dependencies** | added / removed / upgraded a runtime dep | `dependencies.md` |
118
- | **Overview** | new user-visible feature a new dev should know about | `overview.md` |
119
-
120
- If yes for any axis: open the file and add **1–3 lines** under a new dated bullet — in the same PR.
121
-
122
- ```markdown
123
- ## 2026-06-12 — E01-S03
124
- - Conventions: `data-testid="invite-*"` published as public contract; Hawkeye E2E depends on these.
125
- - Risk: R-1 (mailer) mitigation now confirmed (integration test covers retry policy).
126
- ```
127
-
128
- If no axis was touched, you skip this step entirely — quick-dev-style changes don't need it. Hawkeye will check whether the call was correct in `tea-review`. A story that touched an axis but skipped the update gets a `KN-NN` finding in the gate (recommendation `CONCERNS` advisory, or `FAIL` enforcing).
129
-
130
- This is how the brownfield baseline stays alive instead of going stale 6 months in.
131
-
132
- ### 9. Pre-PR self-check
133
-
134
- - All Hawkeye-declared tests exist + pass — **AC → test mapping complete**, every AC traced to a named passing test.
135
- - Required checks run: unit + integration + e2e (as the test contract declares), lint, format, type-check, build — and security when the story touches auth/payments/boundaries. If a command couldn't run, say **exactly which and why** — don't silently drop it.
136
- - No `test.skip` / `.only` left.
137
- - Authz enforced at every server boundary the story adds.
138
- - Loading / empty / error states rendered and asserted.
139
- - `data-testid` matches story's "notes for Hawkeye".
140
- - Story file frontmatter → `status: ready-for-review`.
141
- - Self-walk the screen (web) or smoke a tab on simulator (app).
142
-
143
- ### 10. Open PR
144
-
145
- PR description includes:
146
- - Story link.
147
- - AC list with the test names that cover them.
148
- - Screenshots / recordings of happy + failure paths.
149
- - Knowledge update line (`Touched axis: <none|architecture|conventions|risk-spots|dependencies|overview>`).
150
- - TEA expected next: design → trace → review → gate.
151
-
152
- ### 11. Address gate findings
153
-
154
- If `tea-review` or `tea-gate` flags issues, fix them in the same PR or open a follow-up if the story has shipped a separate value-bearing slice.
155
-
156
- **Loop-back protocol:**
157
- 1. Read each finding's `severity` and `blocking` flag.
158
- 2. For each `blocking: true` finding → return to step 3 (Red) for the affected AC.
159
- 3. For each `blocking: false` finding → log in story `notes` and fix in same PR before re-submitting to gate.
160
- 4. **Max-retry guard:** if the same story cycles through gate → fix → gate 3+ times, stop and escalate to Wizer. The story may be mis-sized, the test design may be wrong, or the ACs may need renegotiation with Hill.
161
-
162
- ## Security + perf during implementation
163
-
164
- Shuri thinks both at write time, not at review time:
165
-
166
- - Auth context on every server entry point — confirm via Tony's middleware pattern.
167
- - Tokens never logged.
168
- - Inputs validated at the boundary; trusted by the time they reach domain.
169
- - Network calls in handlers wrapped with timeout + retry policy from architecture.
170
- - Don't `await` in a loop without batching.
171
- - Don't ship dead code (`isFooEnabled = true` always).
19
+ - Code + tests in the target repo
20
+ - Commit messages reference AC IDs
21
+ - Story file updated to `status: ready-for-review`
22
+
23
+ ## Steps (TDD loop)
24
+ 1. **Read.** Story ACs and Hawkeye's design.
25
+ 2. **Red.** Write the failing test first.
26
+ 3. **Green.** Minimum code to pass.
27
+ 4. **Refactor.** Clean — only with green tests.
28
+ 5. **Repeat** until every AC has at least one test.
29
+ 6. **Self-check.** Security, perf, dead code, naming.
30
+ 7. **Hand-off.** Ping Hawkeye for trace + review.
172
31
 
173
32
  ## Quick-dev exception
174
-
175
- If the work is small / well-scoped and Wizer invoked `wize-quick-dev` instead of this workflow, the design step is replaced by smoke-test-only commitment and the gate is a single one-line entry in `quick-dev-log.md`.
176
-
177
- ## Anti-patterns Shuri rejects in her own work
178
-
179
- - Writing code first and tests "after the bug fix" — that's not TDD; that's regression-tests.
180
- - Commits that don't cite an AC.
181
- - "Refactor while green" turning into "rewrite while green."
182
- - Bundling cross-cutting refactors into the story PR. Split.
183
- - Editing tests so they pass instead of editing code so tests pass.
184
-
185
- ## Final report
186
-
187
- When the story is done, report to the thread in this shape — decisions, evidence, results, blockers only; no extended private reasoning:
188
-
189
- 1. **Route used** — full lifecycle (dev-story).
190
- 2. **Solution summary** — what changed and why, in a few lines.
191
- 3. **Files changed.**
192
- 4. **AC → test mapping** — each AC and the passing test that covers it.
193
- 5. **Commands run + results** — the real checks and their outcomes; name any that couldn't run and why.
194
- 6. **`.wize/` artifacts updated** — story status, TEA artifacts, knowledge axes.
195
- 7. **Relevant decisions** — including any ADR if architectural.
196
- 8. **Residual risks / limitations / skipped items** — including recommended extras logged separately (no silent scope creep).
197
- 9. **Single recommended next action** — usually the TEA gate.
198
-
199
- ## Hand-off
200
-
201
- > Story E01-S03 implemented. All ACs covered by tests; CI green. PR opened (#412). Hawkeye, ready for trace + review. Notes section of the story has the testid map you'll use.
33
+ If invoked via `wize-quick-dev`, the design step is replaced by smoke-test-only commitment.
@@ -1,151 +1,33 @@
1
1
  ---
2
-
3
2
  code: wize-quick-dev
4
- description: "Use quando a demanda for pequena e bem delimitada (bug fix, copy edit, refactor) e não justificar o ciclo completo."
5
3
  name: Quick Dev (lifecycle shortcut)
6
4
  phase: 4-implementation
7
5
  owner: wize-agent-dev # Shuri
8
- status: ready
6
+ status: stub
9
7
  ---
10
8
 
11
9
  # Quick Dev
12
10
 
13
- **Goal.** When the task is small and well-scoped (bug fix, copy edit, small refactor, dep bump, brownfield maintenance), skip Phase 1–3 and execute with light TEA. Save the full lifecycle for new value.
14
-
15
- Wizer authorizes the shortcut (via routing). Shuri runs it. Hawkeye does smoke-only.
16
-
17
- ## Operating contract (light)
18
-
19
- Still a **mission contract**, just a small one: `.wize/` + `AGENTS.md` + skills are the instructions. Inspect before editing, reuse ladder before new code, smallest sufficient change, test-first when the change has a testable surface, run the real smoke + checks, no success claim without evidence. If it grows past ~1h or touches a new feature/architecture/UX/security surface, stop and re-route to Full Lifecycle — don't force it through here.
20
-
21
- ## When to use (yes)
22
-
23
- - Bug fix with a clear root cause.
24
- - Copy or content edit.
25
- - Small refactor with no behavior change.
26
- - Dependency bump (security or minor).
27
- - Brownfield maintenance: rename, structural cleanup, dead-code removal.
28
- - Hotfix during incident response (post-mortem after).
29
-
30
- ## When NOT to use (no)
31
-
32
- - New feature, even small.
33
- - Cross-cutting change touching architecture.
34
- - Changes where ACs need to be agreed.
35
- - Anything that should be a story.
36
- - Anything that touches security/auth/payments without senior review.
37
-
38
- ## Decision tree
39
-
40
- ```
41
- Question Yes No
42
- Is there an AC to write? → full lifecycle → next
43
- Does it touch architecture? → full lifecycle → next
44
- Does it need UX input? → full lifecycle → next
45
- Could it surprise a user? → full lifecycle → next
46
- Is it ≤ 1 hour to a careful dev? → quick-dev → full lifecycle
47
- ```
48
-
49
- ## Inputs
11
+ **Goal.** When the task is small and well-scoped (bug fix, copy edit, small refactor), skip the full lifecycle.
50
12
 
51
- - Issue / Slack message / PR comment describing the problem.
52
- - Repo state.
53
- - `.wize/config/tea.toml` (smoke-only policy when `policy = "advisory"`).
13
+ ## When to use
14
+ - Bug fix with clear root cause
15
+ - Copy or content edit
16
+ - Small refactor with no behavior change
17
+ - Dependency bump
18
+ - Brownfield maintenance
54
19
 
55
- ## Output
56
-
57
- - Code change (single PR).
58
- - Single-line entry appended to `.wize/implementation/quick-dev-log.md`.
59
- - Conventional commit.
20
+ ## When NOT to use
21
+ - New feature
22
+ - Cross-cutting change touching architecture
23
+ - Anything where ACs need to be agreed
60
24
 
61
25
  ## Steps
62
-
63
- ### 1. Frame in one paragraph
64
-
65
- What changes, why, and what could break. If the paragraph is hard to write, you're not in quick-dev territory.
66
-
67
- ### 2. Implement
68
-
69
- - TDD when reasonable; smoke-test-and-fix when the cost of TDD is greater than the value.
70
- - Run Shuri's reuse ladder (see `wize-agent-dev` persona) before writing anything new: does this need to exist → already in the codebase → stdlib → native/framework feature → installed dependency → one-liner → only then new code. Don't introduce new abstractions.
71
-
72
- ### 3. Hawkeye lite
73
-
74
- - Smoke test: imports load, the changed flow doesn't break.
75
- - Lint + format + type-check clean.
76
- - No `tea-design / trace / review / nfr` written.
77
- - Single one-line gate entry instead of full `gate.md`.
78
-
79
- ### 4. Log
80
-
81
- Append one line to `.wize/implementation/quick-dev-log.md`:
82
-
83
- ```
84
- 2026-06-11 | shuri | dep-bump zod 3.22→3.23 | smoke PASS | PR #418
85
- 2026-06-11 | shuri | fix copy on /signin help link | smoke PASS | PR #419
86
- 2026-06-11 | shuri | rename UserService → AccountService | smoke PASS | PR #420
87
- ```
88
-
89
- ### 5. Knowledge update (only if applicable)
90
-
91
- Most quick-dev changes don't touch the baseline axes (copy edit, small refactor, dep bump in a stable lib). When they do — typically a **dependency bump** or a **rename that breaks a public contract** — add **one line** to the matching `document-project/*.md` file:
92
-
93
- ```markdown
94
- ## 2026-06-11
95
- - Dependencies: bump zod 3.22 → 3.23. No API changes; validateInviteEmail unaffected.
96
- - Conventions: `AccountService` replaces `UserService` (rename); imports updated repo-wide.
97
- ```
98
-
99
- Heuristic: *"would a new dev hitting `document-project/*.md` next week be misled if I don't add this?"* Yes → write. No → skip.
100
-
101
- ### 6. Commit + open PR
102
-
103
- Conventional commit. PR description: the paragraph from step 1.
104
-
105
- ```
106
- fix(auth): typo in error message for AC-04-2 follow-up
107
-
108
- The error shown after rate-limit said "Sloow down" — corrected to "Slow down".
109
- No behavior change; copy-only.
110
- ```
111
-
112
- ## Quick-dev log template
113
-
114
- ```markdown
115
- # Quick-dev log
116
-
117
- | Date | Owner | What | Smoke | PR |
118
- |---|---|---|---|---|
119
- | 2026-06-11 | shuri | … | PASS | #N |
120
- ```
121
-
122
- ## Done report (compact)
123
-
124
- Report in four lines — no ceremony:
125
-
126
- 1. What changed + why.
127
- 2. Files changed.
128
- 3. Checks run + results (smoke, lint, format, type-check). Name any that couldn't run and why.
129
- 4. Recommended next action, if any.
26
+ 1. **Frame.** One paragraph: what changes and why.
27
+ 2. **Implement.** TDD or smoke-test-and-fix, depending on risk.
28
+ 3. **Hawkeye lite.** Smoke test + lint only (no design/trace/nfr/review).
29
+ 4. **Gate.** Tiny `gate.md` (PASS or CONCERNS) appended to a rolling `.wize/implementation/quick-dev-log.md`.
30
+ 5. **Commit.** Conventional commit referencing the change.
130
31
 
131
32
  ## Disabling
132
-
133
- To force every change through the full lifecycle (for very high-stakes products), set in `.wize/config/project.toml`:
134
-
135
- ```toml
136
- [install]
137
- quick_dev_enabled = false
138
- ```
139
-
140
- Wizer respects this; quick-dev becomes unavailable; every change must go through Pepper → … → Hawkeye gate.
141
-
142
- ## Anti-patterns Shuri rejects in herself
143
-
144
- - Reaching for quick-dev to skip writing an AC because she doesn't want to argue with Hill.
145
- - Quick-dev that touches security/auth/payments.
146
- - A "small refactor" that ends up changing behavior.
147
- - Skipping the log entry.
148
-
149
- ## Hand-off
150
-
151
- > `dep-bump zod 3.23` is in. PR #418, smoke PASS. Logged. No further TEA artifacts; moving on.
33
+ Set `quick_dev_enabled = false` in `.wize/config/project.toml` to force full lifecycle for everything.
@@ -1,140 +1,36 @@
1
1
  ---
2
-
3
2
  code: wize-retrospective
4
- description: "Use quando o sprint terminar e precisar de retrospectiva facilitada com todo o time."
5
3
  name: Retrospective
6
4
  phase: 4-implementation
7
5
  owner: wize-orchestrator # Wizer facilitates; whole team contributes
8
- status: ready
6
+ status: stub
9
7
  ---
10
8
 
11
9
  # Retrospective
12
10
 
13
- **Goal.** Capture what worked, what didn't, what surprised, and **one concrete change for next sprint**. A retro that ends in a vibe is a retro that didn't ship a change.
14
-
15
- Wizer facilitates. Hill enforces output discipline. Everyone (including Pepper, Mantis, Fury) contributes.
16
-
17
- ## When to run
18
-
19
- - End of every sprint (cadence).
20
- - After any incident (separate; pulls from incident timeline).
21
- - At major milestones (epic close, release, year-end).
11
+ **Goal.** Capture what worked, what didn't, and what we change next sprint.
22
12
 
23
13
  ## Inputs
24
-
25
14
  - `.wize/implementation/sprint-status.md` (current sprint)
26
15
  - All `gate.md` files from current sprint
27
- - `tea/nfr/{epic}.md` if an epic closed this sprint
28
- - Quick-dev log
29
-
30
- ## Output
31
16
 
17
+ ## Outputs
32
18
  - `.wize/implementation/retrospective/{YYYY-MM-DD}.md`
33
19
 
34
- ## Format (60 minutes, fixed)
35
-
36
- | Minutes | Section |
37
- |---|---|
38
- | 0–5 | Frame: Wizer reads the sprint stats (capacity, shipped, slipped, gates). |
39
- | 5–15 | **Worked** — what we want to repeat. |
40
- | 15–25 | **Didn't work** — what we want to change. |
41
- | 25–35 | **Surprised us** — externalities, signals, anything not on plan. |
42
- | 35–45 | Pick **1–3 changes**. Vote with effort/impact dots. |
43
- | 45–55 | Each change gets an owner + deadline. |
44
- | 55–60 | Wizer reads back the doc; everyone confirms; close. |
45
-
46
- Going over 60 minutes is a sign the retro became therapy. Time-box.
47
-
48
- ## Steps
49
-
50
- ### 1. Open with stats
51
-
52
- Wizer reads the sprint dashboard from `sprint-status.md`:
53
- - Stories committed vs shipped (a count, not a velocity metric — we don't estimate).
54
- - Number of gates: PASS / CONCERNS / FAIL / WAIVED.
55
- - Blockers and their resolution times.
56
- - Carry-over count.
57
-
58
- Stats anchor the retro in observations, not feelings.
59
-
60
- ### 2. Worked / didn't / surprised
61
-
62
- Each engineer brings 2–3 items per section, written in advance ideally. Time-box discussion: any item that takes > 3 min becomes a follow-up.
63
-
64
- ### 3. Changes (1–3 max)
65
-
66
- A change is:
67
- - **Specific:** "Pair-program for E04-S02 because R-3 is high" — not "communicate more."
68
- - **Owned:** a person.
69
- - **Bounded:** a deadline or a sprint to land it.
70
-
71
- If you pick 4+ changes, you'll execute 0. Choose.
72
-
73
- ### 4. Write the doc
74
-
75
- Use the template; close the retro with the doc in front of the team.
76
-
77
- ### 5. Trigger reads
78
-
79
- Wizer notifies Hill (who plugs the changes into next sprint planning), Hawkeye (who may revise risk profile), Fury (when an NFR principle change emerges).
80
-
81
- ## Output template
20
+ ## Template
82
21
 
83
22
  ```markdown
84
- ---
85
- sprint: 7
86
- date: 2026-06-25
87
- facilitator: Wizer
88
- attendees: [Hill, Tony, Mantis, Pepper, Fury, Hawkeye, Shuri]
89
- ---
90
-
91
- # Retrospective — Sprint 7
92
-
93
- ## Sprint snapshot
94
- - Committed: 4 stories + 1 stretch
95
- - Shipped: 4 stories
96
- - Stretch: not pulled
97
- - Gates: 4 PASS, 1 CONCERNS, 0 FAIL
98
- - Blockers: 1 (vendor sandbox, resolved Day 5)
99
- - Carry-over to S8: 0
23
+ # Retrospective — Sprint N
100
24
 
101
25
  ## Worked
102
- - Pairing on E03-S02 (auth refresh) — issue caught at integration test instead of in prod.
103
- - TEA design done at planning for R-3 stories paid off.
104
- - Mantis' "before/after" recordings in PRs accelerated review.
26
+ - …
105
27
 
106
28
  ## Didn't work
107
- - Sprint-status entries went stale mid-sprint (Hill on vacation).
108
- - E02-S02 was too big for one PR and should have been sliced; it stalled the sprint.
109
- - Vendor outage with no fallback caught us cold.
29
+ - …
110
30
 
111
31
  ## Surprised us
112
- - A11y audit caught 3 issues on a screen Mantis had already signed off on (axe found dynamic-content edge cases).
113
- - Cost dashboard showed mailer spend doubled — outbox retry was too aggressive.
114
-
115
- ## Changes for Sprint 8
116
-
117
- 1. **Sprint-status delegation rotation** — when Hill is OOO, Wizer takes over. *Owner: Wizer. By: Sprint 8 Day 1.*
118
- 2. **Slice-check every story at planning** — any story that can't be described as a single PR gets split before it's pulled. *Owner: Tony. By: Sprint 8 planning.*
119
- 3. **Vendor fallback drill** — quarterly, simulate top-3 vendor outages. *Owner: Hawkeye + Tony. By: end of Q3.*
120
-
121
- ## Decisions made
122
- - Mailer retry policy updated (NFR-01-1).
123
- - Risk profile revised: R-1 mitigation now confirmed.
32
+ - …
124
33
 
125
- ## Notes for next sprint
126
- - Carry zero stories; everyone starts S8 fresh.
127
- - Stretch goal in S8: catch up on REV-01 (copy fix from S7).
34
+ ## Changes next sprint (owner + due date)
35
+ - [ ] … — owner: …
128
36
  ```
129
-
130
- ## Anti-patterns Wizer rejects (politely)
131
-
132
- - **A retro without a change.** Then it was venting.
133
- - **"We need to communicate better."** Specific or it doesn't count.
134
- - **Adopting > 3 changes.** None will land.
135
- - **No owner / no deadline.** Hopes, not plans.
136
- - **Skipping the retro to "save time."** The next sprint costs more.
137
-
138
- ## Hand-off
139
-
140
- > Retro at `.wize/implementation/retrospective/2026-06-25.md`. 3 changes; owners assigned. Sprint 8 planning anchors on them. Hawkeye, please update `risk-profile.md` with the R-1 mitigation confirmed.
@@ -1,91 +1,24 @@
1
1
  ---
2
-
3
2
  code: wize-sprint-planning
4
- description: "Use quando um novo sprint começar e precisar planejar as stories, prioridades e capacidade do time."
5
3
  name: Sprint Planning
6
4
  phase: 4-implementation
7
5
  owner: wize-agent-pm # Maria Hill
8
- status: ready
6
+ status: stub
9
7
  ---
10
8
 
11
9
  # Sprint Planning
12
10
 
13
- **Goal.** Pick what enters this sprint. Capacity-honest, priority-honest, risk-honest.
14
-
15
- Maria Hill chairs. Tony advises on slicing. Hawkeye flags risk. Shuri commits to the load.
16
-
17
- > **No estimates.** Plan by story count and priority, never by velocity, points, or person-day math. Estimates only burn time and tokens. Pull what fits, keep a buffer, and let shipped-vs-committed counts (not a velocity number) tell you next time.
11
+ **Goal.** Pick what enters this sprint. Capacity-honest, priority-honest.
18
12
 
19
13
  ## Inputs
14
+ - Story backlog from `.wize/solutioning/stories/`
15
+ - Velocity history (if exists) from `.wize/implementation/sprint-status.md`
16
+ - Hawkeye risk profile (`risk-profile.md`)
20
17
 
21
- - Story backlog: `.wize/solutioning/stories/`
22
- - Previous sprint state: `.wize/implementation/sprint-status.yaml`
23
- - `.wize/implementation/tea/risk-profile.md`
24
- - Team availability for the next interval.
25
-
26
- ## Output
27
-
28
- - Updated `.wize/implementation/sprint-status.yaml`.
29
- - Story files updated with `priority: 1` for chosen stories.
30
-
31
- ## Steps
32
-
33
- 1. **Look back** — what shipped, what slipped, what surprised (counts, not velocity).
34
- 2. **Gauge availability** — who's around this interval and who's out. No person-day math.
35
- 3. **Pull stories** — continuation first, then priority, then risk.
36
- 4. **Leave slack** for unknowns — pull fewer stories than feel possible, not a padded number.
37
- 5. **Walk the gate plan** — design/trace/review/gate per story.
38
- 6. **Commit** — verbal + written into YAML.
39
-
40
- ## Status state machine
41
-
42
- - Epic: `backlog` → `in-progress` → `done`
43
- - Story: `backlog` → `ready-for-dev` → `in-progress` → `review` → `done`
44
- - Retrospective: `optional` ↔ `done`
45
-
46
- ## Sprint block template
47
-
48
- ```yaml
49
- # generated: YYYY-MM-DD
50
- # last_updated: YYYY-MM-DD
51
- # project: {project_name}
52
- # project_key: {project_key}
53
- # tracking_system: file-system
54
- # story_location: .wize/solutioning/stories
55
-
56
- generated: YYYY-MM-DD
57
- last_updated: YYYY-MM-DD
58
- project: {project_name}
59
- project_key: {project_key}
60
- tracking_system: file-system
61
- story_location: .wize/solutioning/stories
62
-
63
- development_status:
64
- epic-1: backlog
65
- 1-1-story-one: backlog
66
- 1-2-story-two: backlog
67
- epic-1-retrospective: optional
68
- ```
69
-
70
- ## Anti-patterns
71
-
72
- - Estimating — velocity, points, or person-days. Just don't.
73
- - Over-committing because "it looks like it fits."
74
- - Stories without owners.
75
- - Stretch goals that are really plan.
76
- - Pulling blocked dependencies.
77
- - Zero slack.
78
-
79
- ## Hand-off
18
+ ## Outputs
19
+ - Sprint entry appended to `.wize/implementation/sprint-status.md`
80
20
 
81
- > Sprint committed at `.wize/implementation/sprint-status.yaml`. Stories in `ready-for-dev` are now eligible for the dev loop.
82
- >
83
- > **Recommended next loop:**
84
- >
85
- > ```
86
- > /loop /wize-dev-story
87
- > ```
88
- >
89
- > `/loop /wize-dev-story` drives one story at a time: TDD red-green-refactor, AC IDs in commits, `tea-design.md` contract, knowledge update on the 5 baseline axes, and a clean gate at the end. `/loop` keeps it going across the sprint's `ready-for-dev` queue until the user pauses.
90
- >
91
- > Next: `/wize-sprint-status` (Maria Hill) to track progress.
21
+ ## Rules
22
+ - High-risk stories get TEA design done first or are deferred.
23
+ - Velocity = the smaller of "what we shipped last sprint" and "what we estimate we can ship this sprint."
24
+ - Stretch goals are explicit, not silent.