wizz-method 2.12.0 → 2.14.0

package/README.md

@@ -72,7 +72,7 @@ The Wizz layer applies to everyone: standard closing (✅/➡️/🎯), token ec
 npx wizz-method install
 ```
 
-Follow the prompts, then open your AI IDE (Claude Code, Cursor, Codex and others) in the project folder.
+The guided install takes four steps (folder, what you'll use it for, your AI tool, your name) and shows what will be installed before it starts. Choose Português on the first screen or pass `--lang pt`; `--advanced` asks the complete question list. Then open your AI tool (Claude Code, Cursor, Codex and others) in the project folder.
 
 ### 2. Customize the Wizz layer
 
@@ -106,6 +106,7 @@ Without a TTY, the default language is "Português (BR)". Use `--lang` or the `W
 | Command | Does |
 |---|---|
 | `npx wizz-method install` | Installs modules, hooks, skills and MCPs into the project |
+| `npx wizz-method catalog [--area <area>]` | Lists every area, skill and tool, marking what's installed |
 | `npx wizz-method status` | Shows what's installed and each module's version |
 | `npx wizz-method doctor` | Diagnostics: hooks, rtk, jq, optional Python and `_wizz/` drift |
 | `npx wizz-method resolve [--skill <name>]` | Regenerates the customization snapshots in `_wizz/_resolved/` |

package/THIRD-PARTY-NOTICES.md

@@ -106,12 +106,14 @@ the `<Font>-OFL.txt` file in the same folder.
 - Path: `src/skills-lib/wizz-humanizer/`
 - Origin: [blader/humanizer](https://github.com/blader/humanizer)
 - License: MIT (full text at `src/skills-lib/wizz-humanizer/LICENSE`, copyright (c) 2025 Siqi Chen)
+- Version: 3.1.0, upstream commit `225a6f39` (ported 2026-09-30).
 
 ## wizz-huashu-design
 
 - Path: `src/skills-lib/wizz-huashu-design/`
 - Origin: [alchaincyf/huashu-design](https://github.com/alchaincyf/huashu-design)
 - License: MIT (full text at `src/skills-lib/wizz-huashu-design/LICENSE`, copyright (c) 2026 alchaincyf (花叔))
+- `scripts/html2pptx.js`: clean-room rewrite from upstream commit `0830494e` (2026-09-22). The earlier copy was removed upstream because it derived from proprietary Anthropic code; it was replaced here on 2026-09-30.
 
 ## wizz-react-components (Stitch template)
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
   "name": "wizz-method",
-  "version": "2.12.0",
+  "version": "2.14.0",
   "description": "Wizz Method: método de agência orientado por IA em PT-BR",
   "keywords": [
     "agile",
@@ -14,6 +14,10 @@
     "wizzcomms"
   ],
   "homepage": "https://method.wizzcomms.com",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/wizzcomms/wizz-method.git"
+  },
   "license": "SEE LICENSE IN LICENSE",
   "author": "Wizz! comms. (wizzcomms)",
   "main": "tools/installer/wizz-cli.js",
@@ -38,7 +42,9 @@
     "removals.txt",
     "THIRD-PARTY-NOTICES.md",
     "SECURITY.md",
-    "tools/fetch-assets.mjs"
+    "tools/fetch-assets.mjs",
+    "!**/__pycache__/**",
+    "!**/*.pyc"
   ],
   "scripts": {
     "docs:build": "node tools/build-docs.mjs",
@@ -60,7 +66,7 @@
     "lint:md": "markdownlint-cli2 \"**/*.md\"",
     "prepare": "command -v husky >/dev/null 2>&1 && husky || exit 0",
     "quality": "npm run format:check && npm run lint && npm run lint:md && npm run docs:build && npm run quality:validate",
-    "quality:validate": "npm test && npm run validate:refs && npm run validate:registry-schema && npm run validate:method-refs && npm run validate:skills && npm run docs:validate-sidebar && npm run validate:generated && npm run eval:routing && npm run eval:output",
+    "quality:validate": "npm test && npm run validate:refs && npm run validate:registry-schema && npm run validate:method-refs && npm run validate:model-ids && npm run validate:skills && npm run docs:validate-sidebar && npm run validate:generated && npm run eval:routing && npm run eval:output",
     "rebundle": "node tools/bundle-web-bundles.js",
     "sync:check": "node tools/sync-check.mjs",
     "sync:global": "node tools/sync-global.mjs",
@@ -115,6 +121,7 @@
     "test:workflow-path-regex": "node test/test-workflow-path-regex.js",
     "validate:generated": "npm run test:dispatch-rule && npm run test:routing-table-refs && npm run test:subagents-parity",
     "validate:method-refs": "node tools/validate-method-refs.js --strict",
+    "validate:model-ids": "node tools/validate-model-ids.mjs",
     "validate:refs": "node tools/validate-file-refs.js --strict",
     "validate:registry-schema": "node tools/validate-registry-schema.js --strict",
     "validate:skills": "node tools/validate-skills.js --strict",

package/skills-registry.yaml

@@ -229,20 +229,20 @@ areas:
         platform: [darwin, linux]
         # O check confere o SHA fixado, não só a existência da pasta: o bundle é
         # copiado (não clonado), então o pin é gravado num marcador no install.
-        check: 'grep -qx 83da59fa78c3eee9e20f515fe75c438bb5166efd "$HOME/.claude/skills/watch/.wizz-pin" 2>/dev/null'
+        check: 'grep -qx 03ceb42f7fa2c4439aca01752118044baabffb8f "$HOME/.claude/skills/watch/.wizz-pin" 2>/dev/null'
         # Pin de supply chain (2026-08-23): clone temporário + checkout do SHA
         # + `skills add` local. Atualizar conscientemente.
-        install: 'd="$(mktemp -d)" && git clone https://github.com/bradautomates/claude-video.git "$d" && git -C "$d" checkout 83da59fa78c3eee9e20f515fe75c438bb5166efd && npx skills add "$d" -g -y --copy && printf "%s\\n" 83da59fa78c3eee9e20f515fe75c438bb5166efd > "$HOME/.claude/skills/watch/.wizz-pin" && rm -rf "$d"'
+        install: 'd="$(mktemp -d)" && git clone https://github.com/bradautomates/claude-video.git "$d" && git -C "$d" checkout 03ceb42f7fa2c4439aca01752118044baabffb8f && npx skills add "$d" -g -y --copy && printf "%s\\n" 03ceb42f7fa2c4439aca01752118044baabffb8f > "$HOME/.claude/skills/watch/.wizz-pin" && rm -rf "$d"'
       - id: get-brolls
-        # Versão que o SKILL.md do upstream declara no SHA pinado abaixo. A
-        # última tag publicada lá é a v2.3.7; o 2.3.8 só existe como HEAD.
+        # Versão que o SKILL.md do upstream declara no SHA pinado abaixo
+        # (tag v2.5.0, 2026-09-19).
         metadata:
-          version: "2.3.8"
+          version: "2.5.0"
         when: "CAPTAR B-roll/insert — em português: 'imagens de apoio', 'cenas de apoio', 'imagem de corte' para Reel, TikTok ou vídeo: acha a fonte LITERAL do que a narração cita (o fato, a pessoa, o produto, a notícia, a tela) em YouTube (yt-dlp, sem API key), Instagram/TikTok (navegador/Playwright, sessão do usuário), Pexels/Pixabay/Wikimedia Commons/NASA ou arquivo local; gera prévia (poster, contact sheet numerado, GIF), monta um Storyboard HTML para REVISÃO HUMANA e entrega o corte com origem/autor/condições de uso registrados. Etapa de CAPTAÇÃO do pipeline de vídeo: enche a timeline de material real antes do corte fino e da montagem. Stock só quando o usuário pedir stock explicitamente — nunca como preenchimento de um beat sem fonte literal."
         not_when:
           - "Analisar/resumir um vídeo que já se tem em mãos: é claude-video."
           - "Cortar/montar footage já captado: é buttercut (corte fino) ou wizz-remotion-best-practices (montagem final)."
-          - "Gerar imagem/vídeo por IA: é fal-video. O get-brolls busca material REAL, não sintético."
+          - "Gerar imagem/vídeo por IA: é wizz-ad-creative, que escreve o prompt para o usuário colar no Flow ou em outra IA. O get-brolls busca material REAL, não sintético."
           - "Desenhar uma tela/cena em HTML: é hyperframes."
           - "Minerar/estudar criativo ou oferta de concorrente (Biblioteca de Anúncios, 'baixa esse anúncio pra eu ver'): é wizz-lowticket-minerador na área ads. O get-brolls capta insert para a SUA edição, com procedência registrada — não é ferramenta de inteligência competitiva, e o fato de saber baixar um Reel não o torna uma."
         rel:
@@ -255,18 +255,18 @@ areas:
         platform: [darwin]
         # O check confere o SHA fixado, não só a existência da pasta: o bundle é
         # copiado (não clonado), então o pin é gravado num marcador no install.
-        check: 'grep -qx 3d2313b0b856594617371697875ccfd59861c693 "$HOME/.claude/skills/get-brolls/.wizz-pin" 2>/dev/null'
+        check: 'grep -qx d9364053d336ae2c1d71a3c4de796590dece8c53 "$HOME/.claude/skills/get-brolls/.wizz-pin" 2>/dev/null'
         # Pin de supply chain (2026-09-17): clone temporário + checkout do SHA
         # + `skills add` global + o `install.sh` do próprio upstream (cria .venv
-        # e .tools DENTRO da skill: yt-dlp fixado, EJS e Playwright CLI). O
-        # upstream documenta 2.3.8 mas a última tag publicada é v2.3.7, então o
-        # pin é o SHA do HEAD de 2026-09-17 (mesmo caso do apple-design).
+        # e .tools DENTRO da skill: yt-dlp fixado, EJS e Playwright CLI). Desde
+        # 2026-09-30 o pin é o commit da tag oficial v2.5.0 (antes, HEAD de
+        # 2026-09-17, quando ainda não havia tag). install.sh sem mudança.
         # Atualizar conscientemente. O install.sh aborta sozinho se faltar
         # python3/ffmpeg/node 22+; sem pin gravado, o installer volta a oferecer.
         # Escopo GLOBAL (-g) de propósito: a skill guarda .venv/.tools/.env na
         # própria raiz e recebe o projeto por `--project`, então é instalar uma
         # vez e usar em todos — igual hyperframes e claude-video.
-        install: 'd="$(mktemp -d)" && git clone https://github.com/engenheirodevideo/get-brolls.git "$d" && git -C "$d" checkout 3d2313b0b856594617371697875ccfd59861c693 && npx skills add "$d" -g -y --copy && bash "$HOME/.claude/skills/get-brolls/scripts/install.sh" && printf "%s\\n" 3d2313b0b856594617371697875ccfd59861c693 > "$HOME/.claude/skills/get-brolls/.wizz-pin" && rm -rf "$d"'
+        install: 'd="$(mktemp -d)" && git clone https://github.com/engenheirodevideo/get-brolls.git "$d" && git -C "$d" checkout d9364053d336ae2c1d71a3c4de796590dece8c53 && npx skills add "$d" -g -y --copy && bash "$HOME/.claude/skills/get-brolls/scripts/install.sh" && printf "%s\\n" d9364053d336ae2c1d71a3c4de796590dece8c53 > "$HOME/.claude/skills/get-brolls/.wizz-pin" && rm -rf "$d"'
         # Sem drawtext (libfreetype) o contact sheet sai sem número e timecode e
         # o Storyboard degrada EM SILÊNCIO — por isso o probe olha o filtro, não
         # só o binário do ffmpeg. A venv prova que o install.sh chegou ao fim.
@@ -279,9 +279,9 @@ areas:
         platform: darwin-arm64
         # Clone-and-run: o próprio repo responde o SHA, então o check compara com o
         # pin. O install repara um clone existente em vez de falhar no git clone.
-        check: 'test "$(git -C ./buttercut rev-parse HEAD 2>/dev/null)" = f71d9537e2c22c3c4c1c659c4bdfb11e90ccd961'
+        check: 'test "$(git -C ./buttercut rev-parse HEAD 2>/dev/null)" = 3d4cf6b6b6881c6bc2f964e2d311f7688186f79b'
         # Pin de supply chain (2026-08-23): checkout de SHA fixo; atualizar conscientemente.
-        install: "{ [ -d buttercut/.git ] || git clone https://github.com/barefootford/buttercut.git buttercut; } && git -C buttercut fetch --tags origin && git -C buttercut checkout f71d9537e2c22c3c4c1c659c4bdfb11e90ccd961"
+        install: "{ [ -d buttercut/.git ] || git clone https://github.com/barefootford/buttercut.git buttercut; } && git -C buttercut fetch --tags origin && git -C buttercut checkout 3d4cf6b6b6881c6bc2f964e2d311f7688186f79b"
         verify: "command -v ffmpeg >/dev/null 2>&1 && command -v ruby >/dev/null 2>&1 && command -v python3 >/dev/null 2>&1"
       - id: voicebox
         when: "Voz/TTS/clonagem de voz local para narração/VO de vídeo (7 engines TTS + Whisper STT). App desktop que expõe endpoint MCP local em runtime. Clone-and-run no projeto."
@@ -299,17 +299,11 @@ areas:
           after: [voicebox]
           before: [wizz-remotion-best-practices, wizz-video-effects]
         platform: [darwin, linux]
-        check: "test -x ./tools/ctc-align/.venv/bin/ctc-forced-aligner"
-        install: 'mkdir -p tools/ctc-align && uv venv --python 3.12 tools/ctc-align/.venv && uv pip install --python tools/ctc-align/.venv/bin/python "git+https://github.com/MahmoudAshraf97/ctc-forced-aligner.git"'
+        # O pip grava o commit instalado no direct_url.json: o check compara com o pin.
+        check: "test -x ./tools/ctc-align/.venv/bin/ctc-forced-aligner && grep -qs 64293cc6d711e57666c4a8b098e9fd93b381fd88 ./tools/ctc-align/.venv/lib/python*/site-packages/ctc_forced_aligner-*.dist-info/direct_url.json"
+        # Pin de supply chain (2026-09-30): commit fixo; atualizar conscientemente.
+        install: 'mkdir -p tools/ctc-align && uv venv --python 3.12 tools/ctc-align/.venv && uv pip install --python tools/ctc-align/.venv/bin/python "git+https://github.com/MahmoudAshraf97/ctc-forced-aligner.git@64293cc6d711e57666c4a8b098e9fd93b381fd88"'
         verify: "command -v ffmpeg >/dev/null 2>&1 && command -v uv >/dev/null 2>&1"
-      - id: fal-video
-        when: "GERAR vídeo/imagem por IA (Veo/Kling/Wan e outros modelos via API da fal.ai), estilo UGC/ad-ready. Substitui o arcads: mesmo caso de uso (vídeo gerado por IA), custo 50-95% menor por vídeo, sem clone-and-run pesado. Precisa FAL_KEY em .env. Sem CLI binária oficial: usa o client Node oficial @fal-ai/client como dependência do projeto."
-        rel:
-          pairs_with: [wizz-ad-creative]
-        platform: [darwin, linux]
-        check: "test -f node_modules/@fal-ai/client/package.json"
-        # Pin de supply chain (2026-08-25): versão fixa (client oficial fal.ai); atualizar conscientemente.
-        install: "npm install @fal-ai/client@1.10.1"
       - id: apple-design
         when: "Revisar/auditar UI NATIVA (iOS/macOS: SwiftUI, Flutter, React Native, Tauri, Electron) contra o Apple HIG e o Liquid Glass — compliance com o HIG, acessibilidade, dark mode, navegação. Cobre o gap que o wizz-taste-skill declara fora de escopo ('native mobile: use Apple HIG directly')."
         not_when: "UI web: aí é wizz-ui-ux-pro-max / wizz-impeccable."
@@ -573,9 +567,10 @@ areas:
     # para as CLIs de vídeo quando o roteiro vira vídeo", prometendo um handoff
     # que a área não pode fazer: as CLIs de vídeo (get-brolls, hyperframes,
     # buttercut, claude-video) moram em `designer`, e o único cli daqui é o
-    # postiz. Medido: essa frase puxava pedido de ASSET ("imagens de apoio pro
-    # meu Reel", "carrossel pro Instagram") para social, que não tem a
-    # ferramenta. A fronteira ficou no summary; a nota ficou aqui.
+    # buffer (era o postiz até 2026-09-25). Medido: essa frase puxava pedido
+    # de ASSET ("imagens de apoio pro meu Reel", "carrossel pro Instagram")
+    # para social, que não tem a ferramenta. A fronteira ficou no summary;
+    # a nota ficou aqui.
     summary: "Social e roteiros virais: o TEXTO e o ROTEIRO de Reels/Shorts, hooks, legenda, thread, calendário de conteúdo. Persona Rafa, aplica o Blueprint de Roteiro Viral. Captar, desenhar ou montar o asset em si (b-roll, vídeo, carrossel, imagem) não é desta área."
     skills:
       - id: wizz-social-content
@@ -584,7 +579,7 @@ areas:
           - "Editar/revisar texto de social já escrito: aí é wizz-copy-editing."
           - "Pedir SÓ o asset de um Reel/vídeo — b-roll, 'imagens de apoio', 'cenas de apoio', imagem de corte, footage — sem que o texto ou o roteiro façam parte do pedido: a captação é get-brolls, na área designer. Esta entrada entra quando o TEXTO ou o ROTEIRO é parte do que se pede; se o pedido junta roteiro E captação, são 2 áreas."
         rel:
-          before: [get-brolls, postiz]
+          before: [buffer, get-brolls]
           pairs_with: [wizz-canvas-design, wizz-content-strategy, wizz-copy-editing, wizz-launch-strategy]
       - id: wizz-content-strategy
         when: "Decidir O QUE produzir de conteúdo (topic clusters, calendário, pilares)."
@@ -596,20 +591,22 @@ areas:
           after: [wizz-copywriting]
           pairs_with: [wizz-social-content]
     clis:
-      - id: postiz
-        when: "PUBLICAR/agendar de verdade em redes sociais (30+ integrações) a partir do conteúdo que o wizz-social já gerou. Separa 'gerar' (Wizz) de 'publicar' (Postiz). Precisa autenticar antes (`postiz auth:login` ou env `POSTIZ_API_KEY`); para imagem/vídeo a própria CLI faz o upload."
+      - id: buffer
+        when: "PUBLICAR/agendar de verdade em redes sociais (Instagram, TikTok, YouTube, LinkedIn, Facebook, Threads, X, Pinterest, Bluesky, Mastodon, Google Business) a partir do conteúdo que o wizz-social já gerou. Separa 'gerar' (Wizz) de 'publicar' (Buffer). Precisa de API key (`buffer init` ou env `BUFFER_API_KEY`). Imagem/vídeo NÃO sobe do disco: a mídia precisa estar numa URL pública HTTPS e direta (Cloudinary, Cloudflare R2), estável até o post publicar."
         not_when: "Escrever o roteiro ou a legenda: isso é skill da área (wizz-social-content, wizz-copy-editing)."
         rel:
           after: [wizz-social-content]
-        # Item 30 da auditoria (2026-09-11, Parte 3.7). Pin de supply chain
-        # (2026-09-12): versão publicada fixa no npm, atualizar conscientemente.
+        # Substituiu o postiz em 2026-09-25: a nuvem da Postiz não tem plano
+        # grátis (a partir de US$ 29/mês) e o self-host exige servidor próprio
+        # mais um app de desenvolvedor por rede. O plano grátis do Buffer tem
+        # 3 canais, 10 posts na fila por canal e API/CLI/MCP inclusos.
         # CLI, não MCP: o schema de `mcps:` deste registry só aceita stdio
-        # ({command,args,env}) e o MCP hospedado da Postiz é HTTP+OAuth
-        # (https://mcp.postiz.com/mcp-oauth-dynamic) — não encaixa. Existe uma
-        # skill wrapper (`gitroomhq/postiz-agent`) que só dirige esta mesma CLI;
-        # opcional, não registrada aqui.
-        check: "command -v postiz >/dev/null 2>&1"
-        install: "npm install -g postiz@2.0.16"
+        # ({command,args,env}) e o MCP do Buffer é HTTP com bearer
+        # (https://mcp.buffer.com/mcp) — não encaixa.
+        # Pin de supply chain (2026-09-25): versão publicada fixa no npm,
+        # atualizar conscientemente.
+        check: "command -v buffer >/dev/null 2>&1"
+        install: "npm install -g @bufferapp/cli@1.2.0"
 
   ads:
     agent: wizz-ads
@@ -620,9 +617,9 @@ areas:
         rel:
           pairs_with: [wizz-ad-creative, wizz-tracking-audit]
       - id: wizz-ad-creative
-        when: "Gerar/iterar criativos e headlines de anúncio em escala (RSA, variações)."
+        when: "Gerar/iterar criativos e headlines de anúncio em escala (RSA, variações). Inclui escrever o PROMPT de imagem/vídeo por IA (Veo, Kling, Flow e similares) para o usuário gerar fora do método: nenhuma API de geração está integrada."
         rel:
-          pairs_with: [fal-video, wizz-copywriting, wizz-paid-ads, wizz-video-effects]
+          pairs_with: [wizz-copywriting, wizz-paid-ads, wizz-video-effects]
       - id: wizz-analytics-tracking
         when: "Tracking de conversão pros anúncios (compartilhada com growth)."
         rel:
@@ -714,7 +711,7 @@ areas:
           pairs_with: [wizz-infrastructure]
         check: "sentry-cli --version"
         # Pin de supply chain (2026-08-25): versão fixa; atualizar conscientemente.
-        install: "npm install -g @sentry/cli@3.6.2"
+        install: "npm install -g @sentry/cli@3.8.0"
       - id: archify
         when: "DESENHAR um diagrama VALIDADO de arquitetura/workflow/sequência/dataflow/estado como HTML+SVG navegável (aceita Mermaid) — no passo 'Renderings & polish' do wizz-architecture, ou quando o usuário pedir um diagrama assim. Protocolo obrigatório validate → deliver → visual-check: nunca declarar sucesso sem ler o JSON do comando. Ele DESENHA o que já foi decidido; a decisão e o porquê continuam no wizz-architecture (memlog, AD-n)."
         not_when:
@@ -771,7 +768,7 @@ areas:
           pairs_with: [wizz-agent-browser]
         check: "agent-browser --version"
         # Pin de supply chain (2026-08-23): versão fixa; atualizar conscientemente.
-        install: "npm install -g agent-browser@0.34.0"
+        install: "npm install -g agent-browser@0.38.1"
       - id: strix
         when: "CONDICIONAL, nunca default — executor de pentest AUTÔNOMO e OFENSIVO (agentes de IA que rodam o app, exploram e VALIDAM vulnerabilidades com PoC real). Complementa security-audit-pentest: aquela skill é a metodologia/checklist humana; o Strix é o executor automatizado. Ferramenta dual-use: SÓ contra alvo próprio ou com AUTORIZAÇÃO ESCRITA do dono do sistema e ESCOPO definido — nunca contra alvo de terceiros sem permissão. Roda SEMPRE dentro do sandbox Docker isolado que a própria ferramenta provê (jamais direto no host). Gate condicional: ofereça apenas mediante confirmação explícita do usuário, com escopo e autorização declarados; jamais acione por padrão silencioso. RETORNO DEFENSIVO OBRIGATÓRIO: o executor (subagente) SEMPRE devolve o achado em formato defensivo — falha, severidade, evidência mínima e correção — nunca payload/exploit cru ou arma pronta; assim o revisor recebe conteúdo defensivo pra corrigir, não instrução de ataque. Precisa de Docker rodando e de uma LLM API key configurada."
         not_when: "Sem alvo próprio ou sem autorização escrita e escopo definido do dono do sistema; nunca acionar por padrão silencioso."
@@ -782,7 +779,7 @@ areas:
         # Pin de supply chain (2026-08-25): versão fixa do pacote pip; o sandbox
         # é a imagem pinada ghcr.io/usestrix/strix-sandbox:1.3.0, puxada no 1º run
         # dentro do Docker isolado. Atualizar conscientemente.
-        install: "pipx install strix-agent==1.5.3"
+        install: "pipx install strix-agent==1.6.2"
         verify: "command -v docker >/dev/null 2>&1 && docker info >/dev/null 2>&1"
 
   analyst:
@@ -936,7 +933,7 @@ mcp_utility:
     server:
       command: npx
       # Pin de supply chain (2026-08-23): versão fixa; atualizar conscientemente.
-      args: ["-y", "@upstash/context7-mcp@4.0.3"]
+      args: ["-y", "@upstash/context7-mcp@4.1.1"]
 
 # ─────────────────────────────────────────────────────────────────────────────
 # CLIs — ferramentas de linha de comando que os agentes chamam direto (não são
@@ -974,17 +971,20 @@ cli_utility:
     # --version` só testava que rodava). Agora `check` volta a ser só
     # presença/versão (roda e imprime o número); a COMPARAÇÃO semver contra
     # min_version é feita pelo installer (detectClis), não em shell.
-    min_version: 0.45.0
+    min_version: 0.50.0
     check: "rtk --version"
-    # Pin de supply chain (2026-08-23): tag v0.45.0 (antes: v0.43.0)
-    # Checksum do install.sh nesta tag (2026-08-23): sha256
+    # Pin de supply chain (2026-09-30): tag v0.50.0 (antes: v0.45.0)
+    # Checksum do install.sh nesta tag (2026-09-30): sha256
     # d6eb73a772903e13ff34ee1be8a8b24e896ba9a978f20d2279a08b4083ea6f77
-    # (install.sh idêntico ao v0.43.0 — mesmo checksum.)
+    # (install.sh idêntico ao v0.43.0 e ao v0.45.0 — mesmo checksum.)
+    # O install.sh baixa a release MAIS NOVA, não a da tag, a menos que
+    # RTK_VERSION esteja setada (achado de 2026-09-30): sem ela o pin da tag
+    # só travava o script, não o binário.
     # (RT1: tag git pode ser movida à força; o checksum trava o conteúdo real
     # que será executado, não só o nome da tag. Verificado com `shasum -c`
     # antes do `sh`; se a tag mudar de conteúdo, o install aborta em vez de
     # rodar script desconhecido.)
-    install: "curl -fsSL https://raw.githubusercontent.com/rtk-ai/rtk/refs/tags/v0.45.0/install.sh -o /tmp/rtk-install-v0.45.0.sh && echo 'd6eb73a772903e13ff34ee1be8a8b24e896ba9a978f20d2279a08b4083ea6f77  /tmp/rtk-install-v0.45.0.sh' | shasum -a 256 -c - && sh /tmp/rtk-install-v0.45.0.sh"
+    install: "curl -fsSL https://raw.githubusercontent.com/rtk-ai/rtk/refs/tags/v0.50.0/install.sh -o /tmp/rtk-install-v0.50.0.sh && echo 'd6eb73a772903e13ff34ee1be8a8b24e896ba9a978f20d2279a08b4083ea6f77  /tmp/rtk-install-v0.50.0.sh' | shasum -a 256 -c - && RTK_VERSION=v0.50.0 sh /tmp/rtk-install-v0.50.0.sh"
 
 # ─────────────────────────────────────────────────────────────────────────────
 # SQUADS — painéis consultivos de personas (rodam via wizz-party-mode).

package/src/bmm-skills/1-analysis/research/wizz-domain-research/customize.toml

@@ -30,9 +30,10 @@ activation_steps_append = []
 #   - a file reference prefixed with `file:`, e.g. "file:{project-root}/docs/standards.md"
 #     (glob patterns are supported; the file's contents are loaded and treated as facts).
 
-persistent_facts = [
-  "file:{project-root}/**/project-context.md",
-]
+# Empty of project-context by default: repo-wide context belongs in CLAUDE.md/AGENTS.md
+# (the Wizz block imports project-context.md there once per session). Add
+# `file:{project-root}/**/project-context.md` here only to load it on every activation.
+persistent_facts = []
 
 # Scalar: executed when the workflow reaches its terminal stage (Step 6: Research Synthesis),
 # after the domain research document has been saved and the user selects [C] Complete.

package/src/bmm-skills/1-analysis/research/wizz-market-research/customize.toml

@@ -30,9 +30,10 @@ activation_steps_append = []
 #   - a file reference prefixed with `file:`, e.g. "file:{project-root}/docs/standards.md"
 #     (glob patterns are supported; the file's contents are loaded and treated as facts).
 
-persistent_facts = [
-  "file:{project-root}/**/project-context.md",
-]
+# Empty of project-context by default: repo-wide context belongs in CLAUDE.md/AGENTS.md
+# (the Wizz block imports project-context.md there once per session). Add
+# `file:{project-root}/**/project-context.md` here only to load it on every activation.
+persistent_facts = []
 
 # Scalar: executed when the workflow reaches its terminal stage (Step 6: Research Completion),
 # after the market research document has been saved and the user selects [C] Complete.

package/src/bmm-skills/1-analysis/research/wizz-technical-research/customize.toml

@@ -30,8 +30,10 @@ activation_steps_append = []
 #   - a file reference prefixed with `file:`, e.g. "file:{project-root}/docs/standards.md"
 #     (glob patterns are supported; the file's contents are loaded and treated as facts).
 
+# Empty of project-context by default: repo-wide context belongs in CLAUDE.md/AGENTS.md
+# (the Wizz block imports project-context.md there once per session). Add
+# `file:{project-root}/**/project-context.md` here only to load it on every activation.
 persistent_facts = [
-  "file:{project-root}/**/project-context.md",
   "When researching a specific library, framework, or SDK, consult Context7 for current docs and version-specific facts as a preferred source alongside web search: call resolve-library-id with the library name, then query-docs with the returned /org/project id and a specific question. If Context7 is unavailable, note the gap and proceed with web research.",
 ]
 

package/src/bmm-skills/1-analysis/wizz-agent-analyst/customize.toml

@@ -35,8 +35,10 @@ activation_steps_append = []
 #   - a file reference prefixed with `file:`, e.g. "file:{project-root}/docs/standards.md"
 #     (glob patterns are supported; the file's contents are loaded and treated as facts).
 
+# Empty of project-context by default: repo-wide context belongs in CLAUDE.md/AGENTS.md
+# (the Wizz block imports project-context.md there once per session). Add
+# `file:{project-root}/**/project-context.md` here only to load it on every activation.
 persistent_facts = [
-  "file:{project-root}/**/project-context.md",
   "FEATURE: the SessionStart hook already resolves the active feature from the git branch and injects 'FEATURE ATIVA: <slug>'. If it exists, save EVERY planning and implementation artifact in the subfolder with that name ({planning_artifacts}/{active_feature}/, {implementation_artifacts}/{active_feature}/) and write the slug to active_feature in {project-root}/_wizz/bmm/config.yaml on first write, announcing it in ONE line. Memory saved in this session carries the same slug as its theme. With no feature resolved, write to the root folders. NEVER ask the user for the feature: invoke wizz-set-feature only if they ask to switch, or if there are two open features and the request does not decide between them.",
 ]
 

package/src/bmm-skills/1-analysis/wizz-agent-tech-writer/customize.toml

@@ -36,9 +36,10 @@ activation_steps_append = []
 #   - a file reference prefixed with `file:`, e.g. "file:{project-root}/docs/standards.md"
 #     (glob patterns are supported; the file's contents are loaded and treated as facts).
 
-persistent_facts = [
-  "file:{project-root}/**/project-context.md",
-]
+# Empty of project-context by default: repo-wide context belongs in CLAUDE.md/AGENTS.md
+# (the Wizz block imports project-context.md there once per session). Add
+# `file:{project-root}/**/project-context.md` here only to load it on every activation.
+persistent_facts = []
 
 role = "Capture and curate project knowledge so humans and future LLM agents stay in sync during the Wizz Method analysis phase."
 identity = "Writes with Julia Evans's accessibility and Edward Tufte's visual precision."

package/src/bmm-skills/1-analysis/wizz-document-project/customize.toml

@@ -30,9 +30,10 @@ activation_steps_append = []
 #   - a file reference prefixed with `file:`, e.g. "file:{project-root}/docs/standards.md"
 #     (glob patterns are supported; the file's contents are loaded and treated as facts).
 
-persistent_facts = [
-  "file:{project-root}/**/project-context.md",
-]
+# Empty of project-context by default: repo-wide context belongs in CLAUDE.md/AGENTS.md
+# (the Wizz block imports project-context.md there once per session). Add
+# `file:{project-root}/**/project-context.md` here only to load it on every activation.
+persistent_facts = []
 
 # Scalar: executed when the workflow reaches its terminal stage, after
 # the main output has been delivered. Override wins. Leave empty for

package/src/bmm-skills/1-analysis/wizz-prfaq/customize.toml

@@ -30,9 +30,10 @@ activation_steps_append = []
 #   - a file reference prefixed with `file:`, e.g. "file:{project-root}/docs/standards.md"
 #     (glob patterns are supported; the file's contents are loaded and treated as facts).
 
-persistent_facts = [
-  "file:{project-root}/**/project-context.md",
-]
+# Empty of project-context by default: repo-wide context belongs in CLAUDE.md/AGENTS.md
+# (the Wizz block imports project-context.md there once per session). Add
+# `file:{project-root}/**/project-context.md` here only to load it on every activation.
+persistent_facts = []
 
 # Scalar: executed when the workflow reaches its terminal stage (Stage 5: The Verdict),
 # after the PRFAQ and distillate have been delivered. Override wins. Leave empty for

package/src/bmm-skills/1-analysis/wizz-product-brief/customize.toml

@@ -24,14 +24,13 @@ activation_steps_append = []
 # Each entry is either a literal sentence, a skill prefixed with `skill:`, or a `file:`-prefixed path/glob
 # whose contents are loaded as facts.
 #
-# Default loads project-context.md if wizz-generate-project-context has produced one — this gives
-# the facilitator persistent awareness of the project's tech, domain, and constraints without
-# re-asking. Common opt-ins (set in team/user override TOML):
+# Common opt-ins (set in team/user override TOML):
 #   "skill:acme-co:terms-and-conditions"                                      # a skill that contains some relevant info
 #   "Elvis has left the building"                                             # generic agent instruction
-persistent_facts = [
-  "file:{project-root}/**/project-context.md",
-]
+# Empty of project-context by default: repo-wide context belongs in CLAUDE.md/AGENTS.md
+# (the Wizz block imports project-context.md there once per session). Add
+# `file:{project-root}/**/project-context.md` here only to load it on every activation.
+persistent_facts = []
 
 # Executed when the workflow completes (after the user has been told the
 # brief is ready). Accepts either a string scalar (single instruction)

package/src/bmm-skills/2-plan-workflows/wizz-agent-pm/customize.toml

@@ -35,8 +35,10 @@ activation_steps_append = []
 #   - a file reference prefixed with `file:`, e.g. "file:{project-root}/docs/standards.md"
 #     (glob patterns are supported; the file's contents are loaded and treated as facts).
 
+# Empty of project-context by default: repo-wide context belongs in CLAUDE.md/AGENTS.md
+# (the Wizz block imports project-context.md there once per session). Add
+# `file:{project-root}/**/project-context.md` here only to load it on every activation.
 persistent_facts = [
-  "file:{project-root}/**/project-context.md",
   "FEATURE: the SessionStart hook already resolves the active feature from the git branch and injects 'FEATURE ATIVA: <slug>'. If it exists, save EVERY planning and implementation artifact in the subfolder with that name ({planning_artifacts}/{active_feature}/, {implementation_artifacts}/{active_feature}/) and write the slug to active_feature in {project-root}/_wizz/bmm/config.yaml on first write, announcing it in ONE line. Memory saved in this session carries the same slug as its theme. With no feature resolved, write to the root folders. NEVER ask the user for the feature: invoke wizz-set-feature only if they ask to switch, or if there are two open features and the request does not decide between them.",
 ]
 

package/src/bmm-skills/2-plan-workflows/wizz-agent-ux-designer/customize.toml

@@ -35,8 +35,10 @@ activation_steps_append = []
 #   - a file reference prefixed with `file:`, e.g. "file:{project-root}/docs/standards.md"
 #     (glob patterns are supported; the file's contents are loaded and treated as facts).
 
+# Empty of project-context by default: repo-wide context belongs in CLAUDE.md/AGENTS.md
+# (the Wizz block imports project-context.md there once per session). Add
+# `file:{project-root}/**/project-context.md` here only to load it on every activation.
 persistent_facts = [
-  "file:{project-root}/**/project-context.md",
   "FEATURE: the SessionStart hook already resolves the active feature from the git branch and injects 'FEATURE ATIVA: <slug>'. If it exists, save EVERY planning and implementation artifact in the subfolder with that name ({planning_artifacts}/{active_feature}/, {implementation_artifacts}/{active_feature}/) and write the slug to active_feature in {project-root}/_wizz/bmm/config.yaml on first write, announcing it in ONE line. Memory saved in this session carries the same slug as its theme. With no feature resolved, write to the root folders. NEVER ask the user for the feature: invoke wizz-set-feature only if they ask to switch, or if there are two open features and the request does not decide between them.",
 ]
 

package/src/bmm-skills/2-plan-workflows/wizz-create-prd/customize.toml

@@ -30,9 +30,10 @@ activation_steps_append = []
 #   - a file reference prefixed with `file:`, e.g. "file:{project-root}/docs/standards.md"
 #     (glob patterns are supported; the file's contents are loaded and treated as facts).
 
-persistent_facts = [
-  "file:{project-root}/**/project-context.md",
-]
+# Empty of project-context by default: repo-wide context belongs in CLAUDE.md/AGENTS.md
+# (the Wizz block imports project-context.md there once per session). Add
+# `file:{project-root}/**/project-context.md` here only to load it on every activation.
+persistent_facts = []
 
 # Scalar: executed when the workflow reaches Step 12 (Workflow Completion),
 # after the PRD is finalized and workflow status is updated. Override wins.

package/src/bmm-skills/2-plan-workflows/wizz-edit-prd/customize.toml

@@ -30,9 +30,10 @@ activation_steps_append = []
 #   - a file reference prefixed with `file:`, e.g. "file:{project-root}/docs/standards.md"
 #     (glob patterns are supported; the file's contents are loaded and treated as facts).
 
-persistent_facts = [
-  "file:{project-root}/**/project-context.md",
-]
+# Empty of project-context by default: repo-wide context belongs in CLAUDE.md/AGENTS.md
+# (the Wizz block imports project-context.md there once per session). Add
+# `file:{project-root}/**/project-context.md` here only to load it on every activation.
+persistent_facts = []
 
 # Scalar: executed when the workflow reaches Step E-4 (Complete & Validate) and the
 # user exits via [S] Summary or [X] Exit — not on [V] Validate (which chains to

package/src/bmm-skills/2-plan-workflows/wizz-prd/customize.toml

@@ -24,14 +24,13 @@ activation_steps_append = []
 # Each entry is either a literal sentence, a skill prefixed with `skill:`, or a `file:`-prefixed path/glob
 # whose contents are loaded as facts.
 #
-# Default loads project-context.md if wizz-generate-project-context has produced one — this gives
-# the facilitator persistent awareness of the project's tech, domain, and constraints without
-# re-asking. Common opt-ins (set in team/user override TOML):
+# Common opt-ins (set in team/user override TOML):
 #   "skill:acme-co:terms-and-conditions"                                      # a skill that contains some relevant info
 #   "Investor PRDs must include a market sizing section."                    # generic agent instruction
-persistent_facts = [
-  "file:{project-root}/**/project-context.md",
-]
+# Empty of project-context by default: repo-wide context belongs in CLAUDE.md/AGENTS.md
+# (the Wizz block imports project-context.md there once per session). Add
+# `file:{project-root}/**/project-context.md` here only to load it on every activation.
+persistent_facts = []
 
 # Executed when the workflow completes (after the user has been told the
 # PRD is ready). Accepts either a string scalar (single instruction)

package/src/bmm-skills/2-plan-workflows/wizz-ux/customize.toml

@@ -14,9 +14,10 @@ activation_steps_append = []
 
 # Persistent facts loaded at activation and kept in mind for the run.
 # Entries: literal sentence, `skill:NAME`, or `file:PATH` (glob ok).
-persistent_facts = [
-  "file:{project-root}/**/project-context.md",
-]
+# Empty of project-context by default: repo-wide context belongs in CLAUDE.md/AGENTS.md
+# (the Wizz block imports project-context.md there once per session). Add
+# `file:{project-root}/**/project-context.md` here only to load it on every activation.
+persistent_facts = []
 
 # Runs at workflow completion. String or array of instructions.
 on_complete = ""

package/src/bmm-skills/2-plan-workflows/wizz-validate-prd/customize.toml

@@ -30,9 +30,10 @@ activation_steps_append = []
 #   - a file reference prefixed with `file:`, e.g. "file:{project-root}/docs/standards.md"
 #     (glob patterns are supported; the file's contents are loaded and treated as facts).
 
-persistent_facts = [
-  "file:{project-root}/**/project-context.md",
-]
+# Empty of project-context by default: repo-wide context belongs in CLAUDE.md/AGENTS.md
+# (the Wizz block imports project-context.md there once per session). Add
+# `file:{project-root}/**/project-context.md` here only to load it on every activation.
+persistent_facts = []
 
 # Scalar: executed when the workflow reaches Step 13 (Validation Report Complete) and
 # the user exits via [X] Exit — not on [E] Use Edit Workflow (which chains to

package/src/bmm-skills/3-solutioning/wizz-agent-architect/customize.toml

@@ -35,8 +35,10 @@ activation_steps_append = []
 #   - a file reference prefixed with `file:`, e.g. "file:{project-root}/docs/standards.md"
 #     (glob patterns are supported; the file's contents are loaded and treated as facts).
 
+# Empty of project-context by default: repo-wide context belongs in CLAUDE.md/AGENTS.md
+# (the Wizz block imports project-context.md there once per session). Add
+# `file:{project-root}/**/project-context.md` here only to load it on every activation.
 persistent_facts = [
-  "file:{project-root}/**/project-context.md",
   "FEATURE: the SessionStart hook already resolves the active feature from the git branch and injects 'FEATURE ATIVA: <slug>'. If it exists, save EVERY planning and implementation artifact in the subfolder with that name ({planning_artifacts}/{active_feature}/, {implementation_artifacts}/{active_feature}/) and write the slug to active_feature in {project-root}/_wizz/bmm/config.yaml on first write, announcing it in ONE line. Memory saved in this session carries the same slug as its theme. With no feature resolved, write to the root folders. NEVER ask the user for the feature: invoke wizz-set-feature only if they ask to switch, or if there are two open features and the request does not decide between them.",
 ]
 

package/src/bmm-skills/3-solutioning/wizz-architecture/customize.toml

@@ -24,14 +24,13 @@ activation_steps_append = []
 # Each entry is either a literal sentence, a skill prefixed with `skill:`, or a `file:`-prefixed
 # path/glob whose contents are loaded as facts.
 #
-# Default loads project-context.md if wizz-generate-project-context produced one — giving the
-# architect persistent awareness of the project's tech, domain, and conventions (load-bearing
-# for brownfield). Common opt-ins (set in team/user override TOML):
+# Common opt-ins (set in team/user override TOML):
 #   "Our org is AWS-only -- do not propose GCP or Azure."
 #   "file:{project-root}/docs/engineering-standards.md"
-persistent_facts = [
-  "file:{project-root}/**/project-context.md",
-]
+# Empty of project-context by default: repo-wide context belongs in CLAUDE.md/AGENTS.md
+# (the Wizz block imports project-context.md there once per session). Add
+# `file:{project-root}/**/project-context.md` here only to load it on every activation.
+persistent_facts = []
 
 # Executed when the workflow completes (after the spine is final and the user has been told).
 # String scalar (single instruction) or array of instructions executed in order. Empty for none.

package/src/bmm-skills/3-solutioning/wizz-check-implementation-readiness/customize.toml

@@ -30,9 +30,10 @@ activation_steps_append = []
 #   - a file reference prefixed with `file:`, e.g. "file:{project-root}/docs/standards.md"
 #     (glob patterns are supported; the file's contents are loaded and treated as facts).
 
-persistent_facts = [
-  "file:{project-root}/**/project-context.md",
-]
+# Empty of project-context by default: repo-wide context belongs in CLAUDE.md/AGENTS.md
+# (the Wizz block imports project-context.md there once per session). Add
+# `file:{project-root}/**/project-context.md` here only to load it on every activation.
+persistent_facts = []
 
 # Scalar: executed when the workflow reaches Step 6 (Final Assessment),
 # after the readiness report has been saved and presented. Override wins.

package/src/bmm-skills/3-solutioning/wizz-create-architecture/customize.toml

@@ -30,9 +30,10 @@ activation_steps_append = []
 #   - a file reference prefixed with `file:`, e.g. "file:{project-root}/docs/standards.md"
 #     (glob patterns are supported; the file's contents are loaded and treated as facts).
 
-persistent_facts = [
-  "file:{project-root}/**/project-context.md",
-]
+# Empty of project-context by default: repo-wide context belongs in CLAUDE.md/AGENTS.md
+# (the Wizz block imports project-context.md there once per session). Add
+# `file:{project-root}/**/project-context.md` here only to load it on every activation.
+persistent_facts = []
 
 # Scalar: executed when the workflow reaches Step 8 (Architecture Completion & Handoff),
 # after the architecture document frontmatter is updated and next-steps guidance is given.