@wix/mcp 1.0.94 → 1.0.96

package/build/dts/site-widget-tools/site-builder-tool/index.js

@@ -2,9 +2,10 @@ import { z } from 'zod';
 import { createHttpClient } from '@wix/http-client';
 import { getWidgetHtml } from '../../widget-manifest.js';
 import { RESOURCE_MIME_TYPE } from '@modelcontextprotocol/ext-apps/server';
-import { SITE_BUILDER_TOOL_NAME, SITE_WIDGET_MCP_CSP, OPEN_AI_SITE_WIDGET_CSP, OPENAI_WIDGET_MIME_TYPE } from '../constants.js';
+import { EDITOR_NOT_REQUESTED_MESSAGE, NOT_REQUESTED_WIDGET_PAYLOAD, SITE_BUILDER_TOOL_NAME, SITE_WIDGET_MCP_CSP, OPEN_AI_SITE_WIDGET_CSP, OPENAI_WIDGET_MIME_TYPE } from '../constants.js';
 import { defaultToolDescriptions } from '../../config/default-config.js';
 import { withJsonContent } from '../../tool-utils.js';
+import { NO_PERSONAL_DATA, START_DEPLOY_WEBSITE_PARAM_DESCRIPTIONS } from '../../docs/start-deploy-website.js';
 const httpClient = createHttpClient();
 const CREATE_SITE_WIDGET_URI = 'ui://widget/site-builder.html';
 export function addCreateSiteWidgetTool(server, authStrategy, options) {
@@ -67,7 +68,19 @@ export function addCreateSiteWidgetTool(server, authStrategy, options) {
             suggestedSiteName: z
                 .string()
                 .optional()
-                .describe('You must provide this on every call, including updates to an existing job, in English. A short name for the site: the business name the user gave, or one you derive from the site prompt.')
+                .describe('You must provide this on every call, including updates to an existing job, in English. A short name for the site: the business name the user gave, or one you derive from the site prompt.'),
+            wixEditorExplicitlyRequested: z
+                .boolean()
+                .optional()
+                .describe("Did the user, in their own words or their answer to your question, ask for the Wix Harmony Editor, or for Wix to design the site in Wix's editor? Asking for a site on Wix, or for Wix to build or make one, is not that. Wanting Wix's editor, or to design the site themselves, is not that either: ask them how to start first. Nor are a site's business, features or look."),
+            editorRequest: z
+                .string()
+                .optional()
+                .describe(`On a new build: the user's own words that asked for the Wix Harmony Editor or for Wix to design the site, quoted from their message or their answer to your question. Empty when they asked for neither; then wixEditorExplicitlyRequested is false. Recorded, not checked. ${NO_PERSONAL_DATA}`),
+            agentIdentity: z
+                .string()
+                .optional()
+                .describe(START_DEPLOY_WEBSITE_PARAM_DESCRIPTIONS.agentIdentity)
         },
         _meta: toolDefinitionMeta,
         annotations: {
@@ -77,8 +90,27 @@ export function addCreateSiteWidgetTool(server, authStrategy, options) {
         }
     }, async (args, { setToolBiParams, panorama }) => {
         const isAnonymous = authStrategy.isAnonymous?.() ?? false;
+        // A new build runs unless the agent says the user did not ask for it. Only an explicit
+        // false is refused: clients that hold the previous definition never send the flag, and
+        // resuming a job does not ask again.
+        if (!args.jobId && args.wixEditorExplicitlyRequested === false) {
+            return withJsonContent({
+                content: [
+                    { type: 'text', text: EDITOR_NOT_REQUESTED_MESSAGE }
+                ],
+                structuredContent: {
+                    success: false,
+                    status: 'not_requested',
+                    jobId: null
+                },
+                _meta: { widgetPayload: NOT_REQUESTED_WIDGET_PAYLOAD }
+            });
+        }
         console.log(`[${SITE_BUILDER_TOOL_NAME}] 🚀 tool invoked`, {
-            ...args,
+            jobId: args.jobId,
+            suggestedSiteName: args.suggestedSiteName,
+            wixEditorExplicitlyRequested: args.wixEditorExplicitlyRequested,
+            hasEditorRequest: !!args.editorRequest,
             isAnonymous
         });
         let jobId;

package/build/dts/site-widget-tools/site-creation-tool/index.d.ts

@@ -1,6 +1,12 @@
 import { McpAuthenticationStrategy } from '../../auth/index.js';
 import { WixMcpServer } from '../../wix-mcp-server.js';
 import { SiteWidgetToolOptions } from '../site-builder-tool/index.js';
-/** Entry tool for the site creation flow — opens the "create with AI" vs. "use a template" chooser widget when the build method is unstated. */
+/**
+ * WixSiteCreation no longer opens a chooser. It keeps its name, so a client that still holds
+ * the previous definition never gets "tool not found", and it answers with where a new site
+ * goes: written in code and uploaded. Its definition carries no widget. The widget resource
+ * stays registered for clients whose frozen definition still points at it (ChatGPT until
+ * OpenAI approves this one); it renders a one-line card with a button that restarts the turn.
+ */
 export declare function addWixSiteCreationTool(server: WixMcpServer, _authStrategy: McpAuthenticationStrategy, options?: SiteWidgetToolOptions): void;
 //# sourceMappingURL=index.d.ts.map

package/build/dts/site-widget-tools/site-creation-tool/index.js

@@ -1,27 +1,22 @@
 import { z } from 'zod';
-import { v4 as uuidv4 } from 'uuid';
 import { getWidgetHtml } from '../../widget-manifest.js';
 import { RESOURCE_MIME_TYPE } from '@modelcontextprotocol/ext-apps/server';
-import { WIX_SITE_CREATION_TOOL_NAME, SITE_WIDGET_MCP_CSP, OPEN_AI_SITE_WIDGET_CSP, buildSiteCreationSelectorMessage, SITE_CREATION_CUSTOM_ACTIONS_GUIDANCE } from '../constants.js';
+import { WIX_SITE_CREATION_TOOL_NAME, SITE_WIDGET_MCP_CSP, OPEN_AI_SITE_WIDGET_CSP, SITE_CREATION_ROUTE_MESSAGE } from '../constants.js';
 import { defaultToolDescriptions } from '../../config/default-config.js';
 import { withJsonContent } from '../../tool-utils.js';
 const WIX_SITE_CREATION_WIDGET_URI = 'ui://widget/wix-site-creation.html';
-/** Entry tool for the site creation flow — opens the "create with AI" vs. "use a template" chooser widget when the build method is unstated. */
+/**
+ * WixSiteCreation no longer opens a chooser. It keeps its name, so a client that still holds
+ * the previous definition never gets "tool not found", and it answers with where a new site
+ * goes: written in code and uploaded. Its definition carries no widget. The widget resource
+ * stays registered for clients whose frozen definition still points at it (ChatGPT until
+ * OpenAI approves this one); it renders a one-line card with a button that restarts the turn.
+ */
 export function addWixSiteCreationTool(server, _authStrategy, options) {
-    const toolDefinitionMeta = {
-        ui: {
-            resourceUri: WIX_SITE_CREATION_WIDGET_URI,
-            visibility: ['app', 'model']
-        },
-        securitySchemes: [{ type: 'oauth2', scopes: ['offline_access'] }],
-        'openai/toolInvocation/invoking': 'Opening site creation...',
-        'openai/toolInvocation/invoked': 'Ready',
-        'openai/outputTemplate': WIX_SITE_CREATION_WIDGET_URI
-    };
     const resourceMeta = {
         ui: { csp: SITE_WIDGET_MCP_CSP },
         'openai/widgetCSP': OPEN_AI_SITE_WIDGET_CSP,
-        'openai/widgetDescription': 'Renders the Wix site creation step: either a chooser (create with AI vs. pick a template) or a gallery of Wix Studio templates to preview and use.'
+        'openai/widgetDescription': 'Says the site is being built here in chat, with a button that continues the conversation.'
     };
     server.registerResource(`${WIX_SITE_CREATION_TOOL_NAME}_RESOURCE`, WIX_SITE_CREATION_WIDGET_URI, {}, async (uri) => {
         console.log(`[${WIX_SITE_CREATION_TOOL_NAME}] Resource requested`, {
@@ -46,25 +41,23 @@ export function addWixSiteCreationTool(server, _authStrategy, options) {
         title: 'Wix Site Creation',
         description: options?.toolDescriptions?.[WIX_SITE_CREATION_TOOL_NAME] ??
             defaultToolDescriptions[WIX_SITE_CREATION_TOOL_NAME],
+        // The previous definition's parameters, all optional, so a call made from it still validates.
         inputSchema: {
             query: z
-                .string()
-                .min(1)
-                .describe('The few most important keywords describing the site, used to search templates — e.g. "yoga studio", "wedding photographer".'),
-            sitePrompt: z
-                .string()
-                .min(1)
-                .describe('The prompt to build the site. If not provided, the user will be asked to provide a prompt.'),
-            suggestedSiteName: z
                 .string()
                 .optional()
-                .describe('Suggested site name based on the request, used alongside sitePrompt if the user picks "Create with AI".'),
-            customActions: z
+                .describe('A few keywords describing the site.'),
+            sitePrompt: z
                 .string()
                 .optional()
-                .describe(SITE_CREATION_CUSTOM_ACTIONS_GUIDANCE)
+                .describe('A description of the site.'),
+            suggestedSiteName: z.string().optional().describe('A site name.'),
+            customActions: z.string().optional().describe('Unused.'),
+            editorChosen: z.boolean().optional().describe('Unused.')
+        },
+        _meta: {
+            securitySchemes: [{ type: 'oauth2', scopes: ['offline_access'] }]
         },
-        _meta: toolDefinitionMeta,
         annotations: {
             readOnlyHint: true,
             destructiveHint: false,
@@ -72,34 +65,12 @@ export function addWixSiteCreationTool(server, _authStrategy, options) {
             idempotentHint: true
         }
     }, async (args) => {
-        console.log(`[${WIX_SITE_CREATION_TOOL_NAME}] 🚀 tool invoked`, {
+        console.log(`[${WIX_SITE_CREATION_TOOL_NAME}] routed to the code path`, {
             query: args.query
         });
-        const widgetPayload = {
-            query: args.query,
-            sitePrompt: args.sitePrompt,
-            suggestedSiteName: args.suggestedSiteName,
-            viewUUID: uuidv4(),
-            extras: server.getWidgetExtras()
-        };
-        // Reply instruction: a fixed SHAPE (question + the two options + a "Next up:" line) built
-        // from the query (site type) and the inferred customActions, with the two option lines left
-        // for the model to tailor to the industry. Returned as-is; the tool description also
-        // instructs the model to write it out (both are load-bearing). Microsoft Copilot gets the
-        // message without the preamble: its safety filter blocks the reply otherwise.
-        const message = buildSiteCreationSelectorMessage(args.query, args.customActions, { plain: server.isMicrosoftCopilotClient() });
         return withJsonContent({
-            content: [
-                {
-                    type: 'text',
-                    text: message
-                }
-            ],
-            structuredContent: {
-                success: true,
-                query: args.query
-            },
-            _meta: { widgetPayload }
+            content: [{ type: 'text', text: SITE_CREATION_ROUTE_MESSAGE }],
+            structuredContent: { success: true, route: 'code' }
         });
     });
 }

package/build/dts/site-widget-tools/suggested-domain-tool/index.js

@@ -31,11 +31,16 @@ export function addSuggestedDomainTool(server, authStrategy) {
     server.registerTool(GET_SUGGESTED_DOMAINS_TOOL_NAME, {
         title: 'Get Suggested Domains',
         description: dedent `
-        Suggests available domain names for a business, brand, or Wix site.
+        Suggests domain name ideas for a business, brand, or Wix site. Returns a list of domain names related to the input.
 
-        Call this when the user asks for domain name ideas, wants to know which domains are available, or wants a domain for a new or existing site.
+        Call this when the user:
+        - asks for domain name ideas in general, e.g. "domain ideas for a bakery"
+        - wants to find a domain for their site, new or existing
+        - wants alternatives or variations of a domain name, e.g. "something similar to mybakery.com"
 
-        Provide either a free-text \`query\` (the user's own words, e.g. "pancakes business", "modern yoga studio") OR a \`siteId\` to base the suggestions on that site's name. At least one of them is required.
+        Do not use this tool to check domain availability.
+
+        Provide either a free-text \`query\` (e.g. "pancakes business", "modern yoga studio") OR a \`siteId\` to base the suggestions on that site's name. At least one of them is required.
 
         Present the returned domains to the user as a short list. This tool only suggests domains — it does not purchase or connect them.
       `,
@@ -63,7 +68,10 @@ export function addSuggestedDomainTool(server, authStrategy) {
             openWorldHint: false
         },
         _meta: {
-            securitySchemes: [{ type: 'oauth2', scopes: ['offline_access'] }],
+            securitySchemes: [
+                { type: 'noauth' },
+                { type: 'oauth2', scopes: ['offline_access'] }
+            ],
             // Model-visible so hosts (e.g. Microsoft 365 Copilot) can call it directly and show it
             // in their debug info; 'app' keeps it callable from the site-builder widget.
             ui: { visibility: ['app', 'model'] },
@@ -72,13 +80,6 @@ export function addSuggestedDomainTool(server, authStrategy) {
         }
     }, async (args, { panorama }) => {
         console.log('[getSuggestedDomains] Invoked with args:', args);
-        if (isAnonymous?.()) {
-            console.log('[getSuggestedDomains] Returning empty response for anonymous user');
-            return {
-                content: [{ type: 'text', text: '' }],
-                structuredContent: { domains: [], success: true }
-            };
-        }
         const { query, siteId, tlds, limit } = args;
         if (!query && !siteId) {
             return {
@@ -92,9 +93,22 @@ export function addSuggestedDomainTool(server, authStrategy) {
                 structuredContent: { domains: [] }
             };
         }
+        const anonymous = isAnonymous?.() ?? false;
+        if (anonymous && !query) {
+            return {
+                isError: true,
+                content: [
+                    {
+                        type: 'text',
+                        text: "Without a connected Wix account the site's name can't be read: pass a query (the business or site name) instead of the siteId"
+                    }
+                ],
+                structuredContent: { domains: [] }
+            };
+        }
         try {
             let resolvedQuery = query;
-            if (siteId) {
+            if (siteId && !anonymous) {
                 try {
                     const siteHeaders = await getSiteAuthHeaders(siteId);
                     const siteName = await fetchSiteDisplayName(siteHeaders.Authorization, siteId);

package/build/dts/support/index.d.ts

@@ -1,4 +1,8 @@
 import { WixMcpServer } from '../wix-mcp-server.js';
 import { McpAuthenticationStrategy } from '../auth/index.js';
+/** Sends one issue to Wix's feedback channel. */
+export declare const REPORT_ISSUE_TOOL_NAME = "ReportIssueToWix";
+/** The tool's former name, still honored in disableTools and toolDescriptions. */
+export declare const LEGACY_REPORT_ISSUE_TOOL_NAME = "SupportAndFeedback";
 export declare function addSupportTool(server: WixMcpServer, strategy: McpAuthenticationStrategy, disableTools?: string[], toolDescriptions?: Record<string, string>): void;
 //# sourceMappingURL=index.d.ts.map

package/build/dts/support/index.js

@@ -7,19 +7,25 @@ import { rethrowIfUnauthorized } from '../auth/index.js';
 // mcp-serverless /feedback web function — relays the message to the
 // #mcp-user-feedback Slack channel, attributed to the calling user.
 const FEEDBACK_API_URL = 'https://www.wixapis.com/mcp-serverless/v1/feedback';
+/** Sends one issue to Wix's feedback channel. */
+export const REPORT_ISSUE_TOOL_NAME = 'ReportIssueToWix';
+/** The tool's former name, still honored in disableTools and toolDescriptions. */
+export const LEGACY_REPORT_ISSUE_TOOL_NAME = 'SupportAndFeedback';
 export function addSupportTool(server, strategy, disableTools = [], toolDescriptions) {
-    if (disableTools.includes('SupportAndFeedback')) {
+    if (disableTools.includes(REPORT_ISSUE_TOOL_NAME) ||
+        disableTools.includes(LEGACY_REPORT_ISSUE_TOOL_NAME)) {
         return;
     }
-    server.tool('SupportAndFeedback', toolDescriptions?.['SupportAndFeedback'] ??
-        defaultToolDescriptions.SupportAndFeedback, (() => {
-        const d = desc('SupportAndFeedback');
+    server.tool(REPORT_ISSUE_TOOL_NAME, toolDescriptions?.[REPORT_ISSUE_TOOL_NAME] ??
+        toolDescriptions?.[LEGACY_REPORT_ISSUE_TOOL_NAME] ??
+        defaultToolDescriptions.ReportIssueToWix, (() => {
+        const d = desc('ReportIssueToWix');
         return {
             message: z.string().describe(d.message),
             requestId: z.string().optional().describe(d.requestId)
         };
     })(), { readOnlyHint: false, destructiveHint: false, openWorldHint: false }, async ({ message, requestId }, { httpClient, setToolBiParams }) => {
-        logger.log(`[SupportAndFeedback] sending feedback${requestId ? `, requestId=${requestId}` : ''}`);
+        logger.log(`[ReportIssueToWix] sending report${requestId ? `, requestId=${requestId}` : ''}`);
         const fullMessage = requestId
             ? `${message}\n\nrequest id: ${requestId}`
             : message;
@@ -37,7 +43,7 @@ export function addSupportTool(server, strategy, disableTools = [], toolDescript
                 content: [
                     {
                         type: 'text',
-                        text: 'Feedback sent to Wix. Let the user know it was delivered — note that feedback cannot be replied to or tracked.'
+                        text: 'Report sent to Wix. Let the user know it was delivered — note that reports cannot be replied to or tracked.'
                     }
                 ]
             };
@@ -55,7 +61,7 @@ export function addSupportTool(server, strategy, disableTools = [], toolDescript
                 }
             }
             setToolBiParams({ requestId: feedbackRequestId });
-            const errorMessage = `Failed to send feedback to Wix: ${error}.${errorDetails}${feedbackRequestId ? ` Request ID: ${feedbackRequestId}` : ''}`;
+            const errorMessage = `Failed to send the report to Wix: ${error}.${errorDetails}${feedbackRequestId ? ` Request ID: ${feedbackRequestId}` : ''}`;
             logger.error(errorMessage);
             throw new Error(errorMessage);
         }

package/build/dts/tool-utils.d.ts

@@ -1,13 +1,20 @@
 import type { HttpResponse } from '@wix/http-client';
+/**
+ * Whether an account-scoped call failed for want of a site: `certain` when the API says so,
+ * `likely` for the empty 403 site APIs answer without one, null otherwise.
+ */
+export declare function missingSiteContext(status: number | undefined, responseData: unknown): 'certain' | 'likely' | null;
 export declare const DEFAULT_OPENAI_SECURITY_SCHEMES: {
     type: "oauth2";
     scopes: string[];
 }[];
-export declare const buildErrorMessage: ({ status, statusText, requestId, responseData }: {
+export declare const buildErrorMessage: ({ status, statusText, requestId, responseData, retryHint }: {
     status?: number;
     statusText?: string;
     requestId: string | null;
     responseData?: any;
+    /** Replaces the hint picked from the error details. */
+    retryHint?: string;
 }) => string;
 export declare const handleWixAPIResponse: <T = any>(response: HttpResponse) => Promise<T>;
 export declare function withJsonContent(result: any): any;

package/build/dts/tool-utils.js

@@ -11,6 +11,30 @@ const getRetryHint = (errorDetails) => {
         ? SINGLE_OPERATOR_PER_FIELD_HINT
         : FIELD_CAPABILITIES_HINT;
 };
+// What site APIs answer when a call carries no site: an explicit "no site in the request" in
+// one of its many spellings, or a 403 with an empty body.
+const NO_SITE_IN_REQUEST = /META_SITE_NOT_FOUND|MetaSite(?:Id)? (?:context )?(?:is missing|was not found|not found)|NO_METASITE_IN_CALL_CONTEXT|MISSING_METASITE_ID|MISSING_REQUEST_SITE_CONTEXT|metasiteId from the request context/i;
+/**
+ * Whether an account-scoped call failed for want of a site: `certain` when the API says so,
+ * `likely` for the empty 403 site APIs answer without one, null otherwise.
+ */
+export function missingSiteContext(status, responseData) {
+    const details = typeof responseData === 'string'
+        ? responseData
+        : JSON.stringify(responseData ?? '');
+    if (NO_SITE_IN_REQUEST.test(details))
+        return 'certain';
+    const parsed = typeof responseData === 'string'
+        ? safeParseJSON(responseData)
+        : responseData;
+    if (status === 403 &&
+        parsed &&
+        typeof parsed === 'object' &&
+        !parsed.message) {
+        return 'likely';
+    }
+    return null;
+}
 export const DEFAULT_OPENAI_SECURITY_SCHEMES = [
     { type: 'oauth2', scopes: ['offline_access'] }
 ];
@@ -22,7 +46,7 @@ const safeParseJSON = (text) => {
         return text;
     }
 };
-export const buildErrorMessage = ({ status, statusText, requestId, responseData }) => {
+export const buildErrorMessage = ({ status, statusText, requestId, responseData, retryHint }) => {
     const responseDataObject = typeof responseData === 'string'
         ? safeParseJSON(responseData)
         : responseData;
@@ -39,7 +63,7 @@ export const buildErrorMessage = ({ status, statusText, requestId, responseData
     ]
         .filter((str) => !!str)
         .join('\n');
-    return `${baseMessage}\n\n${getRetryHint(String(errorDetails))}`;
+    return `${baseMessage}\n\n${retryHint ?? getRetryHint(String(errorDetails))}`;
 };
 export const handleWixAPIResponse = async (response) => {
     const requestId = response.headers?.['x-wix-request-id'];

package/build/dts/toolkit-entry.d.cts

@@ -107,7 +107,8 @@ declare const VALID_DOCS_TOOLS: readonly [
 	"VELO",
 	"BUSINESS_SOLUTIONS",
 	"CLI",
-	"OVERVIEW"
+	"OVERVIEW",
+	"HELP_CENTER"
 ];
 export type DocsTool = (typeof VALID_DOCS_TOOLS)[number];
 /**
@@ -151,16 +152,27 @@ export interface DocsToolsOptions {
 	commitHash?: string;
 	/** Tags to filter skills by (e.g. ['velo', 'cms']) */
 	skillsTags?: string[];
+	/** Append the management recipes list (every recipe by area, each a link to its article) to the end of WixREADME, for every client. Default true; false leaves it out, and the README then points at the wix-manage skill and the public list only. */
+	readmeRecipesIndexEnabled?: boolean;
 	/** Enable dynamic context fetch */
 	dynamicContextEnabled?: boolean;
 	/** Enable partner context section in dynamic context output */
 	partnerContextEnabled?: boolean;
+	/** GetSiteContext renders the site's companion app. Off by default: only Aria (via the toolkit) needs it. */
+	includeCompanionApp?: boolean;
 	/** @deprecated Only CreateWixBusinessGuide read it, and that tool was removed; ignored. */
 	cliEnabled?: boolean | (() => boolean);
 	/** Use the new platformized semantic search API (POST /v1/docs/search) instead of the legacy GET endpoint */
 	usePlatformizedSearch?: boolean;
 	/** Use the platformized menu browse API (POST /v1/docs/menu/browse) instead of scraping the legacy get-menu-content markdown. Falls back to legacy on transport errors. */
 	usePlatformizedBrowse?: boolean;
+	/**
+	 * The Mintlify docs site (see ./mintlify-docs.ts). Off by default.
+	 * `'mintlify'`: REST and SDK search read the Mintlify KBs, and articles are
+	 * read from Mintlify's `.md`. `'mintlify-links'`: search reads today's KBs and
+	 * resolves the links in tool output to the Mintlify site.
+	 */
+	docsSite?: string;
 }
 export interface ToolHintsConfig {
 	readOnlyHint?: boolean;
@@ -258,8 +270,8 @@ export interface WixToolkitApiConfig {
 	toolHints?: Record<string, ToolHintsConfig>;
 	/**
 	 * Max response size in chars before truncation. Applies to CallWixSiteAPI/
-	 * ListWixSites/ManageWixSite (default: 50,000) and to ExecuteWixAPI/
-	 * SearchWixAPISpec (default: 24,000). Always clamped to a hard ceiling
+	 * ListWixSites/ManageWixSite (default: 50,000), ExecuteWixAPI (default:
+	 * 100,000) and SearchWixAPISpec (default: 64,000). Always clamped to a hard ceiling
 	 * regardless of what's requested here — see MAX_ALLOWED_RESPONSE_CHARS.
 	 */
 	maxResponseSize?: number;
@@ -416,13 +428,6 @@ export declare const SYSTEM_REMINDER: string;
  */
 export declare const defaultToolDescriptions: Record<string, string>;
 export declare const executeCodeModeToolDescriptions: Record<string, string>;
-/**
- * Default readme docs - content for WixREADME tool response.
- * Assumes both ExecuteWixAPI and SearchWixAPISpec are available (execute-and-search mode).
- *
- * Joined rather than interpolated into one `dedent` — `dedent` reads indentation from the literal
- * parts only, so a multi-line interpolation gets flattened.
- */
 export declare const defaultReadmeDocs: ReadmeDocConfig$1[];
 /**
  * Merge base config with overrides

package/build/dts/toolkit-entry.d.ts

@@ -107,7 +107,8 @@ declare const VALID_DOCS_TOOLS: readonly [
 	"VELO",
 	"BUSINESS_SOLUTIONS",
 	"CLI",
-	"OVERVIEW"
+	"OVERVIEW",
+	"HELP_CENTER"
 ];
 export type DocsTool = (typeof VALID_DOCS_TOOLS)[number];
 /**
@@ -151,16 +152,27 @@ export interface DocsToolsOptions {
 	commitHash?: string;
 	/** Tags to filter skills by (e.g. ['velo', 'cms']) */
 	skillsTags?: string[];
+	/** Append the management recipes list (every recipe by area, each a link to its article) to the end of WixREADME, for every client. Default true; false leaves it out, and the README then points at the wix-manage skill and the public list only. */
+	readmeRecipesIndexEnabled?: boolean;
 	/** Enable dynamic context fetch */
 	dynamicContextEnabled?: boolean;
 	/** Enable partner context section in dynamic context output */
 	partnerContextEnabled?: boolean;
+	/** GetSiteContext renders the site's companion app. Off by default: only Aria (via the toolkit) needs it. */
+	includeCompanionApp?: boolean;
 	/** @deprecated Only CreateWixBusinessGuide read it, and that tool was removed; ignored. */
 	cliEnabled?: boolean | (() => boolean);
 	/** Use the new platformized semantic search API (POST /v1/docs/search) instead of the legacy GET endpoint */
 	usePlatformizedSearch?: boolean;
 	/** Use the platformized menu browse API (POST /v1/docs/menu/browse) instead of scraping the legacy get-menu-content markdown. Falls back to legacy on transport errors. */
 	usePlatformizedBrowse?: boolean;
+	/**
+	 * The Mintlify docs site (see ./mintlify-docs.ts). Off by default.
+	 * `'mintlify'`: REST and SDK search read the Mintlify KBs, and articles are
+	 * read from Mintlify's `.md`. `'mintlify-links'`: search reads today's KBs and
+	 * resolves the links in tool output to the Mintlify site.
+	 */
+	docsSite?: string;
 }
 export interface ToolHintsConfig {
 	readOnlyHint?: boolean;
@@ -258,8 +270,8 @@ export interface WixToolkitApiConfig {
 	toolHints?: Record<string, ToolHintsConfig>;
 	/**
 	 * Max response size in chars before truncation. Applies to CallWixSiteAPI/
-	 * ListWixSites/ManageWixSite (default: 50,000) and to ExecuteWixAPI/
-	 * SearchWixAPISpec (default: 24,000). Always clamped to a hard ceiling
+	 * ListWixSites/ManageWixSite (default: 50,000), ExecuteWixAPI (default:
+	 * 100,000) and SearchWixAPISpec (default: 64,000). Always clamped to a hard ceiling
 	 * regardless of what's requested here — see MAX_ALLOWED_RESPONSE_CHARS.
 	 */
 	maxResponseSize?: number;
@@ -416,13 +428,6 @@ export declare const SYSTEM_REMINDER: string;
  */
 export declare const defaultToolDescriptions: Record<string, string>;
 export declare const executeCodeModeToolDescriptions: Record<string, string>;
-/**
- * Default readme docs - content for WixREADME tool response.
- * Assumes both ExecuteWixAPI and SearchWixAPISpec are available (execute-and-search mode).
- *
- * Joined rather than interpolated into one `dedent` — `dedent` reads indentation from the literal
- * parts only, so a multi-line interpolation gets flattened.
- */
 export declare const defaultReadmeDocs: ReadmeDocConfig$1[];
 /**
  * Merge base config with overrides

package/build/dts/toolkit.d.ts

@@ -107,8 +107,8 @@ export interface WixToolkitApiConfig {
     toolHints?: Record<string, ToolHintsConfig>;
     /**
      * Max response size in chars before truncation. Applies to CallWixSiteAPI/
-     * ListWixSites/ManageWixSite (default: 50,000) and to ExecuteWixAPI/
-     * SearchWixAPISpec (default: 24,000). Always clamped to a hard ceiling
+     * ListWixSites/ManageWixSite (default: 50,000), ExecuteWixAPI (default:
+     * 100,000) and SearchWixAPISpec (default: 64,000). Always clamped to a hard ceiling
      * regardless of what's requested here — see MAX_ALLOWED_RESPONSE_CHARS.
      */
     maxResponseSize?: number;

package/build/dts/toolkit.js

@@ -42,6 +42,7 @@ import { createBiLogger } from './infra/bi-logger.js';
 import { DEV_ENVIRONMENTS, getEnvironment } from './infra/environment.js';
 import { logger } from './infra/logger.js';
 import { createToolBiEvent, extractText, formatToolResultAdditionalFields } from './infra/tool-bi.js';
+import { serializeToolParamsForBi } from './infra/redact-personal-data.js';
 /**
  * Normalize auth config into a McpAuthenticationStrategy.
  */
@@ -177,6 +178,7 @@ export function createWixToolkit(options) {
             readmeDocs,
             authStrategy,
             dynamicContextEnabled: true,
+            includeCompanionApp: true,
             // README-free defaults first so consumer overrides still win.
             toolDescriptions: {
                 ...descriptionsWithoutReadme,
@@ -189,6 +191,7 @@ export function createWixToolkit(options) {
         addDocsTools(server, undefined, {
             authStrategy,
             dynamicContextEnabled: true,
+            includeCompanionApp: true,
             toolDescriptions: descriptionsWithoutReadme
         });
     }
@@ -214,7 +217,9 @@ export function createWixToolkit(options) {
                 authStrategy,
                 disableTools,
                 toolDescriptions: effectiveToolDescriptions,
-                maxResponseSize
+                maxResponseSize,
+                // The connection's docs site (`docs.docsSite`) applies to spec search too.
+                docsSite: docs?.docsSite
             });
         }
         if (requestedTools.has('ExecuteWixAPI') &&
@@ -233,7 +238,13 @@ export function createWixToolkit(options) {
             addUploadHeadlessWebsiteFilesTool(server, {
                 authStrategy,
                 toolDescriptions: effectiveToolDescriptions,
-                clientName
+                clientName,
+                // The headless guide the drop reply carries is read the way the docs tools read it.
+                guide: {
+                    skillsPortalUrl: docs?.skillsPortalUrl,
+                    repo: docs?.repo ?? docs?.skillsRepo,
+                    commitHash: docs?.commitHash ?? docs?.skillsPr
+                }
             });
         }
         // GraphQL tools register only the ones requested (each is opt-in by name).
@@ -309,7 +320,7 @@ export function createWixToolkit(options) {
                 biLogger.updateDefaults({ _uuid: '' });
                 panorama.transaction(toolName).start({
                     toolInvocationId,
-                    params: JSON.stringify(mergedArgs)
+                    params: serializeToolParamsForBi(mergedArgs)
                 });
             }
             const startTime = performance.now();
@@ -327,7 +338,8 @@ export function createWixToolkit(options) {
                 else {
                     additionalFields = formatToolResultAdditionalFields(cbResult, {
                         returnedRows: toolBiParams.returnedRows,
-                        originalLength: toolBiParams.originalLength
+                        originalLength: toolBiParams.originalLength,
+                        upload: toolBiParams.upload
                     }, { name: clientName });
                 }
                 // Panorama: finish or report error
@@ -342,7 +354,7 @@ export function createWixToolkit(options) {
                             context: {
                                 toolName,
                                 toolInvocationId,
-                                params: JSON.stringify(mergedArgs),
+                                params: serializeToolParamsForBi(mergedArgs),
                                 error: JSON.stringify(cbResult, null, 2)
                             }
                         });
@@ -361,7 +373,7 @@ export function createWixToolkit(options) {
                         context: {
                             toolName,
                             toolInvocationId,
-                            params: JSON.stringify(mergedArgs),
+                            params: serializeToolParamsForBi(mergedArgs),
                             error: errorBody
                         }
                     });
@@ -394,7 +406,7 @@ export function createWixToolkit(options) {
                         errorBody,
                         toolInvocationId,
                         toolName,
-                        params: JSON.stringify(mergedArgs),
+                        params: serializeToolParamsForBi(mergedArgs),
                         origin: nodeEnv,
                         sessionId,
                         executionResult: toolSucceeded ? 'Success' : 'Error',
@@ -447,7 +459,8 @@ export function createWixToolkit(options) {
                 const httpClient = new HttpClient();
                 return ((await getDynamicContext(authStrategy, httpClient, defaults, {
                     partnerContextEnabled: true,
-                    includeAccountContext: true
+                    includeAccountContext: true,
+                    includeCompanionApp: true
                 })) || null);
             }
             catch {