@wix/ditto-codegen-public 1.0.366 → 1.0.368

package/dist/opencode-tools/batch-write.ts

@@ -1,7 +1,21 @@
 import { tool } from "@opencode-ai/plugin";
-import { writeFile, mkdir } from "fs/promises";
+import { writeFile, mkdir, stat } from "fs/promises";
 import { join, dirname, isAbsolute } from "path";
 
+// Overwriting a non-trivial existing file re-emits the whole file (slow/costly);
+// such edits must use multi-edit. Smaller files are scaffolding stubs (allowed).
+const EXISTING_FILE_REWRITE_GUARD_BYTES = 2048;
+
+// Size of an existing regular file, or null if absent/not a file (a fresh create).
+async function existingFileSize(path: string): Promise<number | null> {
+  try {
+    const s = await stat(path);
+    return s.isFile() ? s.size : null;
+  } catch {
+    return null;
+  }
+}
+
 function unescapeString(str: string): string {
   return str.replace(/\\(n|t|r|"|\\)/g, (_, c: string) => {
     if (c === "n") return "\n";
@@ -18,8 +32,8 @@ function normalizeToolString(text: string): string {
 
 export default tool({
   description:
-    "Write multiple files at once. Creates directories as needed. " +
-    "Use this instead of calling write/edit multiple times for new files.",
+    "Write multiple new files in one call (creates dirs). " +
+    "For an existing file, use multi-edit instead; batch-write rejects overwriting a non-trivial existing file.",
   args: {
     files: tool.schema
       .array(
@@ -39,6 +53,16 @@ export default tool({
         ? f.path
         : join(context.directory, f.path);
       try {
+        const existingSize = await existingFileSize(fullPath);
+        if (
+          existingSize !== null &&
+          existingSize > EXISTING_FILE_REWRITE_GUARD_BYTES
+        ) {
+          results.push(
+            `BLOCKED: ${f.path} exists; use multi-edit to change existing files.`,
+          );
+          continue;
+        }
         await mkdir(dirname(fullPath), { recursive: true });
         const content =
           typeof f.content === "string"

package/dist/out.js

@@ -11246,7 +11246,7 @@ ${(0, prompt_utils_1.formatChatHistory)(recentHistory, "CONVERSATION CONTEXT")}
 INSTRUCTIONS:
 1. Read the latest user request carefully
 2. If it asks to CREATE something new, create it as a new extension using skills
-3. If it asks to MODIFY existing code, make those specific changes
+3. If it asks to MODIFY existing code, edit only what is needed with \`multi-edit\`; never rewrite a whole file.
 4. Do NOT ignore the user's request or substitute your own interpretation`;
     }
     function buildIterationPrompt(chatHistory) {
@@ -11498,6 +11498,67 @@ var require_rules_writer = __commonJS({
   }
 });
 
+// dist/opencode-integration/node-modules-guard.js
+var require_node_modules_guard = __commonJS({
+  "dist/opencode-integration/node-modules-guard.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.GUARD_PLUGIN_PATH = exports2.GUARD_MESSAGE = exports2.MAX_SPELUNK_CALLS = void 0;
+    exports2.isSpelunkCommand = isSpelunkCommand;
+    exports2.buildGuardPluginSource = buildGuardPluginSource;
+    exports2.writeGuardPlugin = writeGuardPlugin;
+    var promises_1 = require("fs/promises");
+    var os_1 = require("os");
+    var path_1 = require("path");
+    var logger_12 = require_logger();
+    var READ_VERB_RE = /(^|[\s|;&(])(grep|rg|cat|head|tail|sed|awk|less|more|strings|find)\b/;
+    var SDK_INTERNALS_RE = /node_modules\/(@wix|vite|astro)\b/;
+    exports2.MAX_SPELUNK_CALLS = 2;
+    exports2.GUARD_MESSAGE = `BLOCKED: node_modules is not a documentation source, and the exploratory budget (${exports2.MAX_SPELUNK_CALLS} lookups) is used up. The API you are hunting is already documented:
+- Wix Data items CRUD: import { items } from "@wix/data" (items.query/get/insert/update/remove).
+- Dashboard host SDK (toasts, navigation): import { dashboard } from "@wix/dashboard".
+For anything more (CSS-module/asset typing, component config, etc.), re-read the wix-app skill's references with batch-read, or call SearchWixSDKDocumentation / ReadFullDocsMethodSchema. Do not retry this command.`;
+    function isSpelunkCommand(command) {
+      return READ_VERB_RE.test(command) && SDK_INTERNALS_RE.test(command);
+    }
+    var GLOBAL_PLUGIN_DIR = (0, path_1.join)((0, os_1.homedir)(), ".config", "opencode", "plugin");
+    var GUARD_PLUGIN_FILENAME = "node-modules-guard.ts";
+    exports2.GUARD_PLUGIN_PATH = (0, path_1.join)(GLOBAL_PLUGIN_DIR, GUARD_PLUGIN_FILENAME);
+    function buildGuardPluginSource() {
+      return `// Generated by @wix/ditto-codegen (node-modules-guard) \u2014 do not edit.
+const READ_VERB_RE = /${READ_VERB_RE.source}/;
+const SDK_INTERNALS_RE = /${SDK_INTERNALS_RE.source}/;
+const MAX_SPELUNK_CALLS = ${exports2.MAX_SPELUNK_CALLS};
+const GUARD_MESSAGE = ${JSON.stringify(exports2.GUARD_MESSAGE)};
+
+let spelunkCalls = 0;
+
+export const NodeModulesGuard = async () => ({
+  "tool.execute.before": async (
+    input: { tool: string },
+    output: { args: { command?: string } },
+  ) => {
+    if (input.tool !== "bash") return;
+    const command = output.args?.command ?? "";
+    if (!READ_VERB_RE.test(command) || !SDK_INTERNALS_RE.test(command)) return;
+    spelunkCalls += 1;
+    if (spelunkCalls > MAX_SPELUNK_CALLS) {
+      throw new Error(GUARD_MESSAGE);
+    }
+  },
+});
+`;
+    }
+    async function writeGuardPlugin() {
+      await (0, promises_1.mkdir)(GLOBAL_PLUGIN_DIR, { recursive: true });
+      await (0, promises_1.writeFile)(exports2.GUARD_PLUGIN_PATH, buildGuardPluginSource(), "utf-8");
+      logger_12.logger.info("[OpenCode] Wrote node_modules guard plugin", {
+        path: exports2.GUARD_PLUGIN_PATH
+      });
+    }
+  }
+});
+
 // ../../node_modules/@wix/ambassador-ctp-ditto-v1-blueprint/cjs/build/types.impl.js
 var require_types_impl2 = __commonJS({
   "../../node_modules/@wix/ambassador-ctp-ditto-v1-blueprint/cjs/build/types.impl.js"(exports2) {
@@ -13476,9 +13537,13 @@ TOOL USAGE:
 - For tools where no batch variant exists (e.g. \`grep\`, \`glob\`), still emit MULTIPLE \`tool_use\` blocks in a SINGLE response when the calls are independent. Sequential turns waste a model round-trip per call.
 - Before calling MCP tools, check if loaded skills already cover the API. Only use MCP for gaps.
 - When using MCP to look up a Wix SDK method, ALWAYS call \`ReadFullDocsMethodSchema\` (not just \`ReadFullDocsArticle\`). The schema is the source of truth for parameter shapes. Code examples in docs may use incorrect call signatures.
-- To discover API shapes, method signatures, or type definitions: ALWAYS try \`SearchWixSDKDocumentation\` or \`ReadFullDocsMethodSchema\` via wix-mcp first. ONLY fall back to grepping \`node_modules\` if the MCP tools return no useful results. Grepping \`node_modules\` as a first resort wastes turns, inflates context, and produces unreliable results \u2014 SDK internals are not a documentation source.
+- To discover API shapes, method signatures, or type definitions: ALWAYS try \`SearchWixSDKDocumentation\` or \`ReadFullDocsMethodSchema\` via wix-mcp first. ONLY fall back to grepping \`node_modules\` if the MCP tools return no useful results. Grepping \`node_modules\` as a first resort wastes turns, inflates context, and produces unreliable results \u2014 SDK internals are not a documentation source. ENFORCED: after 2 such lookups, further bash inspection of \`node_modules\` Wix/vite/astro internals is rejected.
 - NEVER run preview, dev, release, or promote commands.
 
+KNOWN WIX APIS (already documented \u2014 do NOT rediscover these from node_modules; for full detail consult the \`wix-app\` skill's references or \`ReadFullDocsMethodSchema\`):
+- Wix Data items CRUD: \`import { items } from "@wix/data"\` \u2014 \`items.query(collectionId)\`, \`items.get\`, \`items.insert\`, \`items.update\` (replaces the WHOLE item \u2014 send all fields), \`items.remove\`.
+- Dashboard host SDK (toasts, navigation, modals): \`import { dashboard } from "@wix/dashboard"\`.
+
 IMPLEMENTATION WORKFLOW:
 1. **Plan**: Determine extension types using the \`wix-app\` skill. Generate ALL UUIDs upfront. Include a \`progress\` call (e.g. "Planning extensions").
 2. **Research**: Load relevant SDK docs and skills for each extension type. Include a \`progress\` call (e.g. "Reading documentation").
@@ -13730,6 +13795,7 @@ var require_config = __commonJS({
     var constants_1 = require_constants5();
     var experiments_1 = require_experiments();
     var rules_writer_12 = require_rules_writer();
+    var node_modules_guard_12 = require_node_modules_guard();
     var environments_12 = require_environments();
     exports2.DEFAULT_TIMEOUT_MS = 20 * 60 * 1e3;
     exports2.DEFAULT_MODEL = "anthropic/claude-sonnet-4-6";
@@ -13806,6 +13872,9 @@ var require_config = __commonJS({
           }
         },
         instructions: instructionPaths,
+        // Blocks node_modules SDK-spelunking bash turns after a small exploratory
+        // budget and steers back to the loaded references (see node-modules-guard.ts).
+        plugin: [node_modules_guard_12.GUARD_PLUGIN_PATH],
         autoupdate: false,
         share: "disabled",
         lsp: false,
@@ -20996,6 +21065,7 @@ var logger_1 = require_logger();
 var skills_installer_1 = require_skills_installer();
 var rules_writer_1 = require_rules_writer();
 var tools_writer_1 = require_tools_writer();
+var node_modules_guard_1 = require_node_modules_guard();
 var plugin_artifacts_1 = require_plugin_artifacts();
 var config_1 = require_config();
 var environments_1 = require_environments();
@@ -21054,7 +21124,8 @@ async function initOpenCode() {
     (0, rules_writer_1.writeRuleFiles)([...envConfig.codegenRules, ...pluginArtifacts.rules]),
     (0, rules_writer_1.writeRuleFiles)(envConfig.askRules),
     (0, skills_installer_1.applySkillsOverride)((0, codegen_flow_helpers_1.getOutputPath)(), logger_1.logger),
-    (0, tools_writer_1.writeToolFiles)(pluginArtifacts.tools)
+    (0, tools_writer_1.writeToolFiles)(pluginArtifacts.tools),
+    (0, node_modules_guard_1.writeGuardPlugin)()
   ]);
 }
 async function main(ctx) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/ditto-codegen-public",
-  "version": "1.0.366",
+  "version": "1.0.368",
   "description": "AI-powered Wix CLI app generator - standalone executable",
   "scripts": {
     "build": "node build.mjs",
@@ -29,5 +29,5 @@
     "esbuild": "^0.27.2",
     "vitest": "^4.0.16"
   },
-  "falconPackageHash": "fcb0cf778e55a780aca1cac6efea4c192f6bfc82a53a21a0068e72de"
+  "falconPackageHash": "04ef867afd4c765b5f00fab8d163c32d045403ff32f4c83530f52728"
 }