@wix/ditto-codegen-public 1.0.367 → 1.0.368

package/dist/out.js

@@ -11498,6 +11498,67 @@ var require_rules_writer = __commonJS({
   }
 });
 
+// dist/opencode-integration/node-modules-guard.js
+var require_node_modules_guard = __commonJS({
+  "dist/opencode-integration/node-modules-guard.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.GUARD_PLUGIN_PATH = exports2.GUARD_MESSAGE = exports2.MAX_SPELUNK_CALLS = void 0;
+    exports2.isSpelunkCommand = isSpelunkCommand;
+    exports2.buildGuardPluginSource = buildGuardPluginSource;
+    exports2.writeGuardPlugin = writeGuardPlugin;
+    var promises_1 = require("fs/promises");
+    var os_1 = require("os");
+    var path_1 = require("path");
+    var logger_12 = require_logger();
+    var READ_VERB_RE = /(^|[\s|;&(])(grep|rg|cat|head|tail|sed|awk|less|more|strings|find)\b/;
+    var SDK_INTERNALS_RE = /node_modules\/(@wix|vite|astro)\b/;
+    exports2.MAX_SPELUNK_CALLS = 2;
+    exports2.GUARD_MESSAGE = `BLOCKED: node_modules is not a documentation source, and the exploratory budget (${exports2.MAX_SPELUNK_CALLS} lookups) is used up. The API you are hunting is already documented:
+- Wix Data items CRUD: import { items } from "@wix/data" (items.query/get/insert/update/remove).
+- Dashboard host SDK (toasts, navigation): import { dashboard } from "@wix/dashboard".
+For anything more (CSS-module/asset typing, component config, etc.), re-read the wix-app skill's references with batch-read, or call SearchWixSDKDocumentation / ReadFullDocsMethodSchema. Do not retry this command.`;
+    function isSpelunkCommand(command) {
+      return READ_VERB_RE.test(command) && SDK_INTERNALS_RE.test(command);
+    }
+    var GLOBAL_PLUGIN_DIR = (0, path_1.join)((0, os_1.homedir)(), ".config", "opencode", "plugin");
+    var GUARD_PLUGIN_FILENAME = "node-modules-guard.ts";
+    exports2.GUARD_PLUGIN_PATH = (0, path_1.join)(GLOBAL_PLUGIN_DIR, GUARD_PLUGIN_FILENAME);
+    function buildGuardPluginSource() {
+      return `// Generated by @wix/ditto-codegen (node-modules-guard) \u2014 do not edit.
+const READ_VERB_RE = /${READ_VERB_RE.source}/;
+const SDK_INTERNALS_RE = /${SDK_INTERNALS_RE.source}/;
+const MAX_SPELUNK_CALLS = ${exports2.MAX_SPELUNK_CALLS};
+const GUARD_MESSAGE = ${JSON.stringify(exports2.GUARD_MESSAGE)};
+
+let spelunkCalls = 0;
+
+export const NodeModulesGuard = async () => ({
+  "tool.execute.before": async (
+    input: { tool: string },
+    output: { args: { command?: string } },
+  ) => {
+    if (input.tool !== "bash") return;
+    const command = output.args?.command ?? "";
+    if (!READ_VERB_RE.test(command) || !SDK_INTERNALS_RE.test(command)) return;
+    spelunkCalls += 1;
+    if (spelunkCalls > MAX_SPELUNK_CALLS) {
+      throw new Error(GUARD_MESSAGE);
+    }
+  },
+});
+`;
+    }
+    async function writeGuardPlugin() {
+      await (0, promises_1.mkdir)(GLOBAL_PLUGIN_DIR, { recursive: true });
+      await (0, promises_1.writeFile)(exports2.GUARD_PLUGIN_PATH, buildGuardPluginSource(), "utf-8");
+      logger_12.logger.info("[OpenCode] Wrote node_modules guard plugin", {
+        path: exports2.GUARD_PLUGIN_PATH
+      });
+    }
+  }
+});
+
 // ../../node_modules/@wix/ambassador-ctp-ditto-v1-blueprint/cjs/build/types.impl.js
 var require_types_impl2 = __commonJS({
   "../../node_modules/@wix/ambassador-ctp-ditto-v1-blueprint/cjs/build/types.impl.js"(exports2) {
@@ -13476,9 +13537,13 @@ TOOL USAGE:
 - For tools where no batch variant exists (e.g. \`grep\`, \`glob\`), still emit MULTIPLE \`tool_use\` blocks in a SINGLE response when the calls are independent. Sequential turns waste a model round-trip per call.
 - Before calling MCP tools, check if loaded skills already cover the API. Only use MCP for gaps.
 - When using MCP to look up a Wix SDK method, ALWAYS call \`ReadFullDocsMethodSchema\` (not just \`ReadFullDocsArticle\`). The schema is the source of truth for parameter shapes. Code examples in docs may use incorrect call signatures.
-- To discover API shapes, method signatures, or type definitions: ALWAYS try \`SearchWixSDKDocumentation\` or \`ReadFullDocsMethodSchema\` via wix-mcp first. ONLY fall back to grepping \`node_modules\` if the MCP tools return no useful results. Grepping \`node_modules\` as a first resort wastes turns, inflates context, and produces unreliable results \u2014 SDK internals are not a documentation source.
+- To discover API shapes, method signatures, or type definitions: ALWAYS try \`SearchWixSDKDocumentation\` or \`ReadFullDocsMethodSchema\` via wix-mcp first. ONLY fall back to grepping \`node_modules\` if the MCP tools return no useful results. Grepping \`node_modules\` as a first resort wastes turns, inflates context, and produces unreliable results \u2014 SDK internals are not a documentation source. ENFORCED: after 2 such lookups, further bash inspection of \`node_modules\` Wix/vite/astro internals is rejected.
 - NEVER run preview, dev, release, or promote commands.
 
+KNOWN WIX APIS (already documented \u2014 do NOT rediscover these from node_modules; for full detail consult the \`wix-app\` skill's references or \`ReadFullDocsMethodSchema\`):
+- Wix Data items CRUD: \`import { items } from "@wix/data"\` \u2014 \`items.query(collectionId)\`, \`items.get\`, \`items.insert\`, \`items.update\` (replaces the WHOLE item \u2014 send all fields), \`items.remove\`.
+- Dashboard host SDK (toasts, navigation, modals): \`import { dashboard } from "@wix/dashboard"\`.
+
 IMPLEMENTATION WORKFLOW:
 1. **Plan**: Determine extension types using the \`wix-app\` skill. Generate ALL UUIDs upfront. Include a \`progress\` call (e.g. "Planning extensions").
 2. **Research**: Load relevant SDK docs and skills for each extension type. Include a \`progress\` call (e.g. "Reading documentation").
@@ -13730,6 +13795,7 @@ var require_config = __commonJS({
     var constants_1 = require_constants5();
     var experiments_1 = require_experiments();
     var rules_writer_12 = require_rules_writer();
+    var node_modules_guard_12 = require_node_modules_guard();
     var environments_12 = require_environments();
     exports2.DEFAULT_TIMEOUT_MS = 20 * 60 * 1e3;
     exports2.DEFAULT_MODEL = "anthropic/claude-sonnet-4-6";
@@ -13806,6 +13872,9 @@ var require_config = __commonJS({
           }
         },
         instructions: instructionPaths,
+        // Blocks node_modules SDK-spelunking bash turns after a small exploratory
+        // budget and steers back to the loaded references (see node-modules-guard.ts).
+        plugin: [node_modules_guard_12.GUARD_PLUGIN_PATH],
         autoupdate: false,
         share: "disabled",
         lsp: false,
@@ -20996,6 +21065,7 @@ var logger_1 = require_logger();
 var skills_installer_1 = require_skills_installer();
 var rules_writer_1 = require_rules_writer();
 var tools_writer_1 = require_tools_writer();
+var node_modules_guard_1 = require_node_modules_guard();
 var plugin_artifacts_1 = require_plugin_artifacts();
 var config_1 = require_config();
 var environments_1 = require_environments();
@@ -21054,7 +21124,8 @@ async function initOpenCode() {
     (0, rules_writer_1.writeRuleFiles)([...envConfig.codegenRules, ...pluginArtifacts.rules]),
     (0, rules_writer_1.writeRuleFiles)(envConfig.askRules),
     (0, skills_installer_1.applySkillsOverride)((0, codegen_flow_helpers_1.getOutputPath)(), logger_1.logger),
-    (0, tools_writer_1.writeToolFiles)(pluginArtifacts.tools)
+    (0, tools_writer_1.writeToolFiles)(pluginArtifacts.tools),
+    (0, node_modules_guard_1.writeGuardPlugin)()
   ]);
 }
 async function main(ctx) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/ditto-codegen-public",
-  "version": "1.0.367",
+  "version": "1.0.368",
   "description": "AI-powered Wix CLI app generator - standalone executable",
   "scripts": {
     "build": "node build.mjs",
@@ -29,5 +29,5 @@
     "esbuild": "^0.27.2",
     "vitest": "^4.0.16"
   },
-  "falconPackageHash": "334ea64feb8da31a445017f2c5a350e11334df997c23ffb1fe7984c9"
+  "falconPackageHash": "04ef867afd4c765b5f00fab8d163c32d045403ff32f4c83530f52728"
 }