wize-dev-kit 0.5.0 → 0.6.0

package/tools/installer/onboarding.js

@@ -26,6 +26,7 @@ function compose(detection, profiles) {
   lines.push('  → /wize-quick-dev              (Shuri, for small fixes)');
   if (profiles.find(p => p.code === 'web-overlay')) lines.push('  → /wize-web-scaffold           (overlay)');
   if (profiles.find(p => p.code === 'app-overlay')) lines.push('  → /wize-app-scaffold           (overlay)');
+  if (profiles.find(p => p.code === 'security-overlay')) lines.push('  → /wize-sec-pentest         (overlay)');
   return lines.join('\n');
 }
 

package/tools/installer/render-shared.js

@@ -114,6 +114,7 @@ function collectAssets(kitRoot, { profiles = ['core'] } = {}) {
     if (!fm.code) continue;
     if (fm.overlay === 'web' && !profSet.has('web-overlay')) continue;
     if (fm.overlay === 'app' && !profSet.has('app-overlay')) continue;
+    if (fm.overlay === 'security' && !profSet.has('security-overlay')) continue;
     out.push({
       kind: 'workflow',
       code: fm.code,
@@ -130,6 +131,9 @@ function collectAssets(kitRoot, { profiles = ['core'] } = {}) {
     const content = fs.readFileSync(skPath, 'utf-8');
     const fm = readFrontmatter(content);
     if (!fm.code) continue;
+    if (fm.overlay === 'web' && !profSet.has('web-overlay')) continue;
+    if (fm.overlay === 'app' && !profSet.has('app-overlay')) continue;
+    if (fm.overlay === 'security' && !profSet.has('security-overlay')) continue;
     out.push({
       kind: 'skill',
       code: fm.code,
@@ -137,7 +141,7 @@ function collectAssets(kitRoot, { profiles = ['core'] } = {}) {
       title: fm.module || '',
       description: fm.module ? `${fm.module} skill: ${fm.name || fm.code}` : (fm.name || fm.code),
       body: bodyAfterFrontmatter(content),
-      overlay: null,
+      overlay: fm.overlay || null,
       srcDir: path.dirname(skPath)
     });
   }

package/tools/installer/wize-cli.js

@@ -43,7 +43,8 @@ const TARGETS = [
 const PROFILES = [
   { code: 'core', label: 'Wize Dev Core', required: true },
   { code: 'web-overlay', label: 'Wize Web Dev (overlay)', required: false },
-  { code: 'app-overlay', label: 'Wize App Development (overlay)', required: false }
+  { code: 'app-overlay', label: 'Wize App Development (overlay)', required: false },
+  { code: 'security-overlay', label: 'Wize Security (AI Pentester overlay)', required: false }
 ];
 
 // Common BCP-47 short codes. Users can type any other value freely.
@@ -483,6 +484,12 @@ async function cmdInstall(args) {
   console.log(`✓ ide targets: ${targets.map(t => t.code).join(', ')}`);
   if (user_name) console.log(`✓ user.toml: agents will call you "${user_name}"`);
 
+  if (profiles.some(p => p.code === 'security-overlay')) {
+    console.log('\n⚠  security-overlay selected — authorized use only.');
+    console.log('   Uso autorizado. Você é responsável por obter permissão antes de testar alvos que não são seus.');
+    console.log('   O kit detecta alvos fora do scope.md e recusa automaticamente; ainda assim, use com responsabilidade.');
+  }
+
   if (wantsGitignore) {
     const r = applyGitignore(cwd);
     if (r.changed) console.log(`✓ .gitignore ${r.mode} with the wize-dev-kit block`);