@wix/ditto-codegen-public 1.0.405 → 1.0.407

package/dist/out.js

@@ -11564,7 +11564,7 @@ var require_subagents = __commonJS({
   "dist/opencode-integration/subagents.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.WDS_DOCS_SUBAGENT_NAME = exports2.WIX_DOCS_SUBAGENT_NAME = exports2.VALIDATOR_SUBAGENT_NAME = exports2.PRIMARY_AGENT_NAME = void 0;
+    exports2.SUBAGENT_AGENT_NAMES = exports2.WDS_DOCS_SUBAGENT_NAME = exports2.WIX_DOCS_SUBAGENT_NAME = exports2.VALIDATOR_SUBAGENT_NAME = exports2.PRIMARY_AGENT_NAME = void 0;
     exports2.getAgentConfig = getAgentConfig;
     var types_1 = require_types4();
     var constants_1 = require_constants5();
@@ -11572,6 +11572,11 @@ var require_subagents = __commonJS({
     exports2.VALIDATOR_SUBAGENT_NAME = "codegen-validator";
     exports2.WIX_DOCS_SUBAGENT_NAME = "codegen-wix-docs";
     exports2.WDS_DOCS_SUBAGENT_NAME = "codegen-wds-docs";
+    exports2.SUBAGENT_AGENT_NAMES = [
+      exports2.VALIDATOR_SUBAGENT_NAME,
+      exports2.WIX_DOCS_SUBAGENT_NAME,
+      exports2.WDS_DOCS_SUBAGENT_NAME
+    ];
     var VALIDATOR_DESCRIPTION = `Runs validate (tsc + wix build) and fixes the reported errors, consulting the
 skills or wix-mcp for SDK-shape errors; returns when the build is clean
 or reports what it couldn't fix. Validation step only \u2014 never generates features.`;
@@ -11595,9 +11600,10 @@ Then summarize each error: message, file, root cause, fix. No diffs.
     var WIX_DOCS_DESCRIPTION = `Use ONLY to discover a Wix SDK you don't know and that the skills +
 KNOWN WIX APIS don't cover. Send ONE complete question; returns the import path
 + exported namespace/method + runtime context + full signature + any required
-scope/permission IDs + a short usage example (not a link). Don't fetch a doc you
-already identified, and don't split a lookup into separate search/signature
-calls. Read-only.`;
+scope/permission IDs + any user setup prerequisites (dependent app to install,
+dashboard setting to enable, template to create) + a short usage example (not a
+link). Don't fetch a doc you already identified, and don't split a lookup into
+separate search/signature calls. Read-only.`;
     var WIX_DOCS_PROMPT = `You research Wix SDK APIs via wix-mcp and report back \u2014 never write app code.
 The caller uses DIRECT imports inside an extension that already supplies
 auth/host: 'import { <namespace> } from "@wix/<pkg>"; await <namespace>.<method>(<optionsObject>)'
@@ -11608,12 +11614,17 @@ introduction ('SearchWixSDKDocumentation' \u2192 'ReadFullDocsArticle') to confi
 it's the RIGHT API and its runtime context \u2014 backend, the dashboard host, or the
 site/editor host (host modules like @wix/dashboard work ONLY in their own host);
 (2) read 'ReadFullDocsMethodSchema' for the exact exported name and its
-options-object parameters. Reply with: the import path + exported
-namespace/method, the runtime context, the full TypeScript signature, and a
-short usage example \u2014 never a bare link, never 'as any' or a guessed method. If
-the API is limited to one context, say so. For a required scope/permission,
-return the EXACT scope-ID string from the docs (never a guessed format); if none
-is documented, say so.`;
+options-object parameters; (3) capture any user SETUP prerequisites the docs
+call out (often a 'Before you begin' section) \u2014 a dependent app that must be
+installed (e.g. Wix Stores, Members Area), a dashboard setting that must be
+enabled (e.g. Automations for back-in-stock notifications), or a template/config
+the user must create first (e.g. a triggered email). Reply with: the import path
++ exported namespace/method, the runtime context, the full TypeScript signature,
+a short usage example \u2014 never a bare link, never 'as any' or a guessed method \u2014
+and a SETUP STEPS list of the prerequisites from (3) so the main agent can relay
+them to the user (say 'none' if there are none). If the API is limited to one
+context, say so. For a required scope/permission, return the EXACT scope-ID
+string from the docs (never a guessed format); if none is documented, say so.`;
     var WDS_DOCS_DESCRIPTION = `Use ONLY when building dashboard UI and you need a Wix Design System
 component/prop/example you don't know and the skills don't cover.
 Returns the component name + props + a short usage example. Not for layouts the
@@ -12029,6 +12040,7 @@ var require_dist5 = __commonJS({
       return check_site_ui_decision_1.createCheckSiteUIDecision;
     } });
     exports2.appBuilderCodegenConfig = {
+      environmentIdentity: "You generate a Wix CLI app (a code-first Wix app) on a dev machine. The user previews it on a dev site and releases it from the product UI.",
       codegenRules: [],
       askRules: [],
       gitConflictsRules: [],
@@ -14370,6 +14382,7 @@ var require_dist8 = __commonJS({
     var codegen_checkpoint_plugin_1 = require_dist6();
     var codegen_common_logic_1 = require_dist7();
     exports2.studio2CodegenConfig = {
+      environmentIdentity: "You generate code for the user's own live Wix site \u2014 to the user it's just their site, not a separate app they're aware of. Your changes are saved and applied to the site automatically; there is no separate release step.",
       codegenRules: [
         { filename: "site-data-layer-rules.md", content: codegen_common_logic_1.SITE_DATA_LAYER_RULES },
         { filename: "studio-2-site-ui-rules.md", content: codegen_common_logic_1.STUDIO_2_SITE_UI_RULES }
@@ -14723,6 +14736,7 @@ var require_dist10 = __commonJS({
     var codegen_feature_vibe_plugin_1 = require_dist9();
     var codegen_common_logic_1 = require_dist7();
     exports2.harmonyCodegenConfig = {
+      environmentIdentity: "You generate code for the user's own live Wix site \u2014 to the user it's just their site, not a separate app they're aware of. Your changes are saved and applied to the site automatically; there is no separate release step.",
       codegenRules: [
         { filename: "site-data-layer-rules.md", content: codegen_common_logic_1.SITE_DATA_LAYER_RULES }
       ],
@@ -14735,13 +14749,36 @@ var require_dist10 = __commonJS({
   }
 });
 
+// dist/opencode-integration/rules/shared-rules.js
+var require_shared_rules = __commonJS({
+  "dist/opencode-integration/rules/shared-rules.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.OUTPUT_MESSAGE_RULES = exports2.BOUNDARY_RULES = void 0;
+    exports2.buildEnvironmentRules = buildEnvironmentRules;
+    function buildEnvironmentRules(environmentIdentity) {
+      return `ENVIRONMENT:
+${environmentIdentity}`;
+    }
+    exports2.BOUNDARY_RULES = `YOUR BOUNDARIES:
+- You only write code. You cannot release, publish, upload/download files, or do other product/platform actions for the user \u2014 those are the user's to do in the UI, not yours.
+- If asked how to do such a product/platform action (download/upload files, release, manage app info, use git or the IDE, etc.), do NOT explain the steps or name specific tools, surfaces, or locations \u2014 it varies by environment and you may be wrong. Just say it's outside what you do (you only write code) and that it's done in the UI, not through code.
+- Don't mention internal/sandbox details (e.g. paths like \`/user-code\`) \u2014 the user can't see them.`;
+    exports2.OUTPUT_MESSAGE_RULES = `OUTPUT MESSAGE (shown to the user):
+- Match their technical level: include code/technical detail only if their request was technical; otherwise describe the outcome in plain language (no code, file/type names, or internals).
+- List any manual setup the user must still do for the feature to work, as short "next steps" (e.g. installing a dependent app or enabling a dashboard setting).
+- Be honest: if you didn't fully build what was asked (e.g. stored data but didn't send it), say so. Keep it short.`;
+  }
+});
+
 // dist/opencode-integration/rules/codegen-rules.js
 var require_codegen_rules = __commonJS({
   "dist/opencode-integration/rules/codegen-rules.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.CODEGEN_RULES = void 0;
-    exports2.CODEGEN_RULES = `CORE PRINCIPLES:
+    exports2.buildCodegenRules = buildCodegenRules;
+    var shared_rules_1 = require_shared_rules();
+    var CODEGEN_CORE_RULES = `CORE PRINCIPLES:
 - Do NOT invent or assume new types, modules, functions, props, events, or imports.
 - NEVER use mocks, placeholders, debugging, or TODOs in any code.
 - ALWAYS implement complete, production-ready functionality.
@@ -14781,7 +14818,7 @@ IMPLEMENTATION WORKFLOW:
 4. **Register**: Register all extensions in \`src/extensions.ts\`.
 5. **Validate**: Dispatch ONE \`task({ subagent: "codegen-validator", prompt: "Run validate({ runBuild: true }) \u2014 it typechecks AND builds in a single pass (tsc runs first and fails fast before the build). Fix any errors and re-run until it passes. Pass installDeps: true only if package.json changed and npm install was not already run in this session." })\`. Wait for the subagent to return. Do NOT call \`validate\` directly from the primary agent, and do NOT make a separate tsc-only call first \u2014 the single runBuild pass already fails fast on type errors. VERIFY the subagent actually FINISHED with a clean build: read its returned summary and confirm it converged. If it reports remaining/unresolved errors or was cut off before finishing (e.g. "Maximum steps reached"), do NOT treat it as success \u2014 re-dispatch \`codegen-validator\` to finish the remaining errors before moving on.
 6. **Declare permissions**: If the generated code requires Wix app permissions, call \`required-permissions\` ONCE with their SCOPE IDs (see PERMISSIONS below). Skip this step entirely if no permissions are needed.
-7. **Final message**: Your last message is returned to the user as the codegen output \u2014 keep it short and plain (a sentence or two on what the app now does).
+7. **Final message**: Your last message is returned to the user as the codegen output \u2014 keep it short and plain (a sentence or two on what the app now does). Do NOT mention permissions/scopes here (see PERMISSIONS) and follow OUTPUT MESSAGE below.
 8. **Stop**: STOP immediately. Do NOT refactor, clean up, or verify.
 
 FILE CREATION:
@@ -14798,7 +14835,16 @@ When you call \`required-permissions\` (see workflow step 6 for when), use SCOPE
 - Embedded scripts \u2192 "SCOPE.DC-APPS.MANAGE-EMBEDDED-SCRIPTS"
 
 CRITICAL: Only include permissions you have explicitly seen in the Wix SDK documentation (via MCP or loaded skills) \u2014 NEVER guess or infer a scope ID. If you cannot point to where you saw it, do NOT include it. When in doubt, skip the call entirely. A fabricated scope ID will show an error to the user and confuse them; a missing permission is just a warning the user can fix.
-`;
+
+The \`required-permissions\` tool records and surfaces permissions to the user automatically \u2014 NEVER mention permissions/scopes (IDs or names) in your output, or tell the user to grant them.`;
+    function buildCodegenRules(environmentIdentity) {
+      return [
+        (0, shared_rules_1.buildEnvironmentRules)(environmentIdentity),
+        shared_rules_1.BOUNDARY_RULES,
+        CODEGEN_CORE_RULES,
+        shared_rules_1.OUTPUT_MESSAGE_RULES
+      ].join("\n\n");
+    }
   }
 });
 
@@ -14807,8 +14853,9 @@ var require_ask_rules = __commonJS({
   "dist/opencode-integration/rules/ask-rules.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.ASK_RULES = void 0;
-    exports2.ASK_RULES = `CORE PRINCIPLES:
+    exports2.buildAskRules = buildAskRules;
+    var shared_rules_1 = require_shared_rules();
+    var ASK_CORE_RULES = `CORE PRINCIPLES:
 - You are a READ-ONLY assistant. You MUST NOT modify, create, or delete any files.
 - Your job is to answer questions about the codebase and Wix platform by reading code and fetching documentation.
 - Use the read tool to explore the codebase and find relevant code.
@@ -14828,6 +14875,14 @@ DEBUGGING GUIDANCE:
   - Browser DevTools: the Console, Network, and Sources tabs.
   - \`console.log\` statements, then read the output in the already-running server logs.
   - Inspecting network requests in the browser, without starting a new server.`;
+    function buildAskRules(environmentIdentity) {
+      return [
+        (0, shared_rules_1.buildEnvironmentRules)(environmentIdentity),
+        shared_rules_1.BOUNDARY_RULES,
+        ASK_CORE_RULES,
+        shared_rules_1.OUTPUT_MESSAGE_RULES
+      ].join("\n\n");
+    }
   }
 });
 
@@ -14988,24 +15043,26 @@ var require_environments = __commonJS({
     var git_conflicts_rules_1 = require_git_conflicts_rules();
     var job_decision_manager_1 = require_job_decision_manager();
     var logger_12 = require_logger();
-    var SHARED_CODEGEN_RULE = {
-      filename: "codegen-instructions.md",
-      content: codegen_rules_1.CODEGEN_RULES
-    };
-    var SHARED_ASK_RULE = {
-      filename: "ask-instructions.md",
-      content: ask_rules_1.ASK_RULES
-    };
     var SHARED_GIT_CONFLICTS_RULE = {
       filename: "git-conflicts-instructions.md",
       content: git_conflicts_rules_1.GIT_CONFLICTS_RULES
     };
-    var withSharedRules = (env) => ({
-      ...env,
-      codegenRules: [SHARED_CODEGEN_RULE, ...env.codegenRules],
-      askRules: [SHARED_ASK_RULE, ...env.askRules],
-      gitConflictsRules: [SHARED_GIT_CONFLICTS_RULE, ...env.gitConflictsRules]
-    });
+    var withSharedRules = (env) => {
+      const sharedCodegenRule = {
+        filename: "codegen-instructions.md",
+        content: (0, codegen_rules_1.buildCodegenRules)(env.environmentIdentity)
+      };
+      const sharedAskRule = {
+        filename: "ask-instructions.md",
+        content: (0, ask_rules_1.buildAskRules)(env.environmentIdentity)
+      };
+      return {
+        ...env,
+        codegenRules: [sharedCodegenRule, ...env.codegenRules],
+        askRules: [sharedAskRule, ...env.askRules],
+        gitConflictsRules: [SHARED_GIT_CONFLICTS_RULE, ...env.gitConflictsRules]
+      };
+    };
     function getCodegenEnvironmentConfig() {
       switch (process.env.CODEGEN_ENVIRONMENT) {
         case types_1.Environment.STUDIO_2:
@@ -15245,6 +15302,144 @@ var require_config = __commonJS({
   }
 });
 
+// dist/opencode-integration/subagent-tool-logger.js
+var require_subagent_tool_logger = __commonJS({
+  "dist/opencode-integration/subagent-tool-logger.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.SUBAGENT_TOOL_LOGGER_PLUGIN_PATH = exports2.SUBAGENT_STARTED_EVENT_TYPE = exports2.SUBAGENT_TOOL_EVENT_TYPE = void 0;
+    exports2.buildSubagentToolLoggerPluginSource = buildSubagentToolLoggerPluginSource;
+    exports2.writeSubagentToolLoggerPlugin = writeSubagentToolLoggerPlugin;
+    var promises_1 = require("fs/promises");
+    var os_1 = require("os");
+    var path_1 = require("path");
+    var logger_12 = require_logger();
+    var subagents_1 = require_subagents();
+    exports2.SUBAGENT_TOOL_EVENT_TYPE = "subagent_tool_use";
+    exports2.SUBAGENT_STARTED_EVENT_TYPE = "subagent_started";
+    var GLOBAL_PLUGIN_DIR = (0, path_1.join)((0, os_1.homedir)(), ".config", "opencode", "plugin");
+    var PLUGIN_FILENAME = "subagent-tool-logger.ts";
+    exports2.SUBAGENT_TOOL_LOGGER_PLUGIN_PATH = (0, path_1.join)(GLOBAL_PLUGIN_DIR, PLUGIN_FILENAME);
+    function buildSubagentToolLoggerPluginSource() {
+      return `// Generated by @wix/ditto-codegen (subagent-tool-logger) \u2014 do not edit.
+const EVENT_TYPE = ${JSON.stringify(exports2.SUBAGENT_TOOL_EVENT_TYPE)};
+const STARTED_EVENT_TYPE = ${JSON.stringify(exports2.SUBAGENT_STARTED_EVENT_TYPE)};
+const SUBAGENT_AGENTS = new Set(${JSON.stringify(subagents_1.SUBAGENT_AGENT_NAMES)});
+
+export const SubagentToolLogger = async () => {
+  // sessionID -> agent name, learned from session.* / message.updated (both
+  // fire before the session's tool parts). Root/primary parts keep the primary
+  // agent name and are never emitted here \u2014 'opencode run' already logs them.
+  const agentBySession = new Map();
+  // callID:status dedupe \u2014 a part can update to a terminal status more than once.
+  const emitted = new Set();
+  // sessions we've already emitted a start marker for (events repeat).
+  const started = new Set();
+
+  // Emit the start marker once per subagent session, stamped with opencode's
+  // own creation time \u2014 NOT the plugin's observation time (Date.now), which
+  // only reflects when this event loop happened to process the event.
+  const emitStart = (sid, agent, model, createdAt) => {
+    if (!sid || started.has(sid)) return;
+    started.add(sid);
+    process.stdout.write(
+      JSON.stringify({
+        type: STARTED_EVENT_TYPE,
+        timestamp: createdAt || Date.now(),
+        exactTime: createdAt != null,
+        sessionID: sid,
+        agent,
+        ...(model ? { model } : {}),
+      }) + "\\n",
+    );
+  };
+
+  return {
+    event: async ({ event }) => {
+      try {
+        if (!event) return;
+
+        // Most exact start signal: the child session's own creation time.
+        // Session.Info carries parentID (set => it is a subagent child),
+        // agent, model, and time.created (epoch ms, stamped at creation).
+        if (event.type === "session.created" || event.type === "session.updated") {
+          const info = event.properties?.info;
+          if (!info?.parentID) return; // only subagent (child) sessions
+          const agent = info.agent;
+          if (!agent || !SUBAGENT_AGENTS.has(agent)) return;
+          agentBySession.set(info.id, agent);
+          emitStart(info.id, agent, info.model?.id, info.time?.created);
+          return;
+        }
+
+        if (event.type === "message.updated") {
+          const info = event.properties?.info;
+          const sid = event.properties?.sessionID;
+          const agent = info?.agent;
+          if (!sid || !agent) return;
+          agentBySession.set(sid, agent);
+          // Fallback if session.* was not delivered: the child's first
+          // assistant message creation time (also opencode-stamped).
+          if (SUBAGENT_AGENTS.has(agent)) {
+            emitStart(sid, agent, info.modelID, info.time?.created);
+          }
+          return;
+        }
+
+        if (event.type !== "message.part.updated") return;
+        const part = event.properties?.part;
+        if (part?.type !== "tool") return;
+
+        const status = part.state?.status;
+        if (status !== "completed" && status !== "error") return;
+
+        const agent = agentBySession.get(part.sessionID);
+        if (!agent || !SUBAGENT_AGENTS.has(agent)) return;
+
+        const key = part.callID + ":" + status;
+        if (emitted.has(key)) return;
+        emitted.add(key);
+
+        const state = part.state || {};
+        // Emit raw \u2014 parser.ts summarizeOpenCodeLine trims input/output before
+        // Panorama. part.time.{start,end} are opencode-stamped; prefer over Date.now.
+        process.stdout.write(
+          JSON.stringify({
+            type: EVENT_TYPE,
+            timestamp: part.time?.end || Date.now(),
+            sessionID: part.sessionID,
+            agent,
+            part: {
+              tool: part.tool,
+              callID: part.callID,
+              ...(part.time ? { time: part.time } : {}),
+              state: {
+                status,
+                ...(state.input ? { input: state.input } : {}),
+                ...(state.output ? { output: state.output } : {}),
+                ...(state.title ? { title: state.title } : {}),
+              },
+            },
+          }) + "\\n",
+        );
+      } catch {
+        // Logging must never interfere with the run.
+      }
+    },
+  };
+};
+`;
+    }
+    async function writeSubagentToolLoggerPlugin() {
+      await (0, promises_1.mkdir)(GLOBAL_PLUGIN_DIR, { recursive: true });
+      await (0, promises_1.writeFile)(exports2.SUBAGENT_TOOL_LOGGER_PLUGIN_PATH, buildSubagentToolLoggerPluginSource(), "utf-8");
+      logger_12.logger.info("[OpenCode] Wrote subagent tool logger plugin", {
+        path: exports2.SUBAGENT_TOOL_LOGGER_PLUGIN_PATH
+      });
+    }
+  }
+});
+
 // dist/opencode-integration/parser.js
 var require_parser = __commonJS({
   "dist/opencode-integration/parser.js"(exports2) {
@@ -15262,6 +15457,7 @@ var require_parser = __commonJS({
     exports2.summarizeOpenCodeLine = summarizeOpenCodeLine;
     var types_1 = require_types4();
     var subagents_1 = require_subagents();
+    var subagent_tool_logger_12 = require_subagent_tool_logger();
     function parseRequiredPermissions(output) {
       let permissions = [];
       const lines = output.split("\n");
@@ -15404,7 +15600,7 @@ var require_parser = __commonJS({
       return outputs;
     }
     function summarizeOpenCodeLine(line) {
-      if (line.type !== "tool_use") {
+      if (line.type !== "tool_use" && line.type !== subagent_tool_logger_12.SUBAGENT_TOOL_EVENT_TYPE) {
         return line;
       }
       const { part } = line;
@@ -22814,6 +23010,7 @@ var skills_installer_1 = require_skills_installer();
 var rules_writer_1 = require_rules_writer();
 var tools_writer_1 = require_tools_writer();
 var node_modules_guard_1 = require_node_modules_guard();
+var subagent_tool_logger_1 = require_subagent_tool_logger();
 var plugin_artifacts_1 = require_plugin_artifacts();
 var config_1 = require_config();
 var environments_1 = require_environments();
@@ -22887,7 +23084,8 @@ async function initOpenCode() {
     ]),
     (0, skills_installer_1.applySkillsOverride)((0, codegen_flow_helpers_1.getOutputPath)(), logger_1.logger),
     (0, tools_writer_1.writeToolFiles)(pluginArtifacts.tools),
-    (0, node_modules_guard_1.writeGuardPlugin)()
+    (0, node_modules_guard_1.writeGuardPlugin)(),
+    (0, subagent_tool_logger_1.writeSubagentToolLoggerPlugin)()
   ]);
 }
 async function main(ctx) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/ditto-codegen-public",
-  "version": "1.0.405",
+  "version": "1.0.407",
   "description": "AI-powered Wix CLI app generator - standalone executable",
   "scripts": {
     "build": "node build.mjs",
@@ -29,5 +29,5 @@
     "esbuild": "^0.27.2",
     "vitest": "^4.0.16"
   },
-  "falconPackageHash": "7a15f5850d6a383ca1193b0a3473908455ef8cba130c912beb4ee409"
+  "falconPackageHash": "5263f96dd353d10c30f46a86ba26c43cfc4901eadfadc6bb73b7db9f"
 }