@adsim/wordpress-mcp-server 1.0.0 → 3.0.0

package/tests/unit/tools/media.test.js

@@ -0,0 +1,279 @@
+import { vi, describe, it, expect, beforeEach, afterEach } from 'vitest';
+
+vi.mock('node-fetch', () => ({ default: vi.fn() }));
+
+import fetch from 'node-fetch';
+import { handleToolCall } from '../../../index.js';
+import { mockSuccess, mockError, getAuditLogs, makeRequest, parseResult } from '../../helpers/mockWpRequest.js';
+
+function call(name, args = {}) {
+  return handleToolCall(makeRequest(name, args));
+}
+
+// ────────────────────────────────────────────────────────────
+// wp_list_media
+// ────────────────────────────────────────────────────────────
+
+describe('wp_list_media', () => {
+  let consoleSpy;
+  beforeEach(() => { fetch.mockReset(); consoleSpy = vi.spyOn(console, 'error').mockImplementation(() => {}); });
+  afterEach(() => { consoleSpy.mockRestore(); });
+
+  it('returns formatted media list on success', async () => {
+    fetch.mockResolvedValue(mockSuccess([
+      { id: 100, title: { rendered: 'Image 1' }, date: '2024-01-01', mime_type: 'image/jpeg', source_url: 'https://test.example.com/wp-content/uploads/img.jpg', alt_text: 'Alt', media_details: { width: 800, height: 600 } }
+    ]));
+
+    const result = await call('wp_list_media');
+    const data = parseResult(result);
+
+    expect(data.total).toBe(1);
+    expect(data.page).toBe(1);
+    expect(data.media).toHaveLength(1);
+    expect(data.media[0].id).toBe(100);
+    expect(data.media[0].title).toBe('Image 1');
+    expect(data.media[0].mime_type).toBe('image/jpeg');
+    expect(data.media[0].source_url).toBe('https://test.example.com/wp-content/uploads/img.jpg');
+    expect(data.media[0].alt_text).toBe('Alt');
+    expect(data.media[0].width).toBe(800);
+    expect(data.media[0].height).toBe(600);
+  });
+
+  it('returns error on 403', async () => {
+    fetch.mockResolvedValue(mockError(403));
+
+    const result = await call('wp_list_media');
+
+    expect(result.isError).toBe(true);
+  });
+
+  it('returns error on 404', async () => {
+    fetch.mockResolvedValue(mockError(404));
+
+    const result = await call('wp_list_media');
+
+    expect(result.isError).toBe(true);
+  });
+
+  it('logs audit entry with status success', async () => {
+    fetch.mockResolvedValue(mockSuccess([
+      { id: 100, title: { rendered: 'Image 1' }, date: '2024-01-01', mime_type: 'image/jpeg', source_url: 'https://test.example.com/wp-content/uploads/img.jpg', alt_text: 'Alt', media_details: { width: 800, height: 600 } }
+    ]));
+
+    await call('wp_list_media');
+    const logs = getAuditLogs(consoleSpy);
+    const entry = logs.find(l => l.tool === 'wp_list_media');
+
+    expect(entry).toBeDefined();
+    expect(entry.status).toBe('success');
+  });
+});
+
+// ────────────────────────────────────────────────────────────
+// wp_get_media
+// ────────────────────────────────────────────────────────────
+
+describe('wp_get_media', () => {
+  let consoleSpy;
+  beforeEach(() => { fetch.mockReset(); consoleSpy = vi.spyOn(console, 'error').mockImplementation(() => {}); });
+  afterEach(() => { consoleSpy.mockRestore(); });
+
+  it('returns full media details on success', async () => {
+    fetch.mockResolvedValue(mockSuccess({
+      id: 100, title: { rendered: 'Image 1' }, date: '2024-01-01', mime_type: 'image/jpeg',
+      source_url: 'https://test.example.com/wp-content/uploads/img.jpg', alt_text: 'Alt',
+      caption: { rendered: 'Caption' },
+      media_details: {
+        width: 800, height: 600, file: '2024/01/img.jpg',
+        sizes: {
+          thumbnail: { source_url: 'https://test.example.com/wp-content/uploads/img-150x150.jpg', width: 150, height: 150 }
+        }
+      }
+    }));
+
+    const result = await call('wp_get_media', { id: 100 });
+    const data = parseResult(result);
+
+    expect(data.id).toBe(100);
+    expect(data.title).toBe('Image 1');
+    expect(data.mime_type).toBe('image/jpeg');
+    expect(data.source_url).toBe('https://test.example.com/wp-content/uploads/img.jpg');
+    expect(data.alt_text).toBe('Alt');
+    expect(data.caption).toBe('Caption');
+    expect(data.width).toBe(800);
+    expect(data.height).toBe(600);
+    expect(data.file).toBe('2024/01/img.jpg');
+    expect(data.sizes.thumbnail).toBeDefined();
+    expect(data.sizes.thumbnail.url).toBe('https://test.example.com/wp-content/uploads/img-150x150.jpg');
+    expect(data.sizes.thumbnail.width).toBe(150);
+    expect(data.sizes.thumbnail.height).toBe(150);
+  });
+
+  it('returns error on 403', async () => {
+    fetch.mockResolvedValue(mockError(403));
+
+    const result = await call('wp_get_media', { id: 100 });
+
+    expect(result.isError).toBe(true);
+  });
+
+  it('returns error on 404', async () => {
+    fetch.mockResolvedValue(mockError(404));
+
+    const result = await call('wp_get_media', { id: 999 });
+
+    expect(result.isError).toBe(true);
+  });
+
+  it('logs audit entry with status success', async () => {
+    fetch.mockResolvedValue(mockSuccess({
+      id: 100, title: { rendered: 'Image 1' }, date: '2024-01-01', mime_type: 'image/jpeg',
+      source_url: 'https://test.example.com/wp-content/uploads/img.jpg', alt_text: 'Alt',
+      caption: { rendered: 'Caption' },
+      media_details: { width: 800, height: 600, file: '2024/01/img.jpg', sizes: {} }
+    }));
+
+    await call('wp_get_media', { id: 100 });
+    const logs = getAuditLogs(consoleSpy);
+    const entry = logs.find(l => l.tool === 'wp_get_media');
+
+    expect(entry).toBeDefined();
+    expect(entry.status).toBe('success');
+    expect(entry.target).toBe(100);
+  });
+});
+
+// ────────────────────────────────────────────────────────────
+// wp_upload_media
+// ────────────────────────────────────────────────────────────
+
+describe('wp_upload_media', () => {
+  let consoleSpy;
+  beforeEach(() => { fetch.mockReset(); consoleSpy = vi.spyOn(console, 'error').mockImplementation(() => {}); });
+  afterEach(() => { consoleSpy.mockRestore(); });
+
+  it('downloads file and uploads to WP on success', async () => {
+    let callCount = 0;
+    fetch.mockImplementation(() => {
+      callCount++;
+      if (callCount === 1) {
+        // First call: download the remote file
+        return Promise.resolve({
+          ok: true,
+          status: 200,
+          headers: { get: (name) => name === 'content-type' ? 'image/jpeg' : null },
+          buffer: () => Promise.resolve(Buffer.from('fake-image-data')),
+          json: () => Promise.resolve({}),
+          text: () => Promise.resolve('')
+        });
+      }
+      // Second call: upload to WP API
+      return Promise.resolve(mockSuccess({
+        id: 101,
+        source_url: 'https://test.example.com/wp-content/uploads/uploaded.jpg',
+        mime_type: 'image/jpeg'
+      }));
+    });
+
+    const result = await call('wp_upload_media', { url: 'https://remote.example.com/photo.jpg' });
+    const data = parseResult(result);
+
+    expect(data.success).toBe(true);
+    expect(data.media.id).toBe(101);
+    expect(data.media.source_url).toBe('https://test.example.com/wp-content/uploads/uploaded.jpg');
+    expect(data.media.mime_type).toBe('image/jpeg');
+  });
+
+  it('is blocked in READ-ONLY mode (governance)', async () => {
+    process.env.WP_READ_ONLY = 'true';
+
+    const result = await call('wp_upload_media', { url: 'https://remote.example.com/photo.jpg' });
+
+    expect(result.isError).toBe(true);
+    expect(result.content[0].text).toContain('READ-ONLY');
+
+    delete process.env.WP_READ_ONLY;
+  });
+
+  it('returns error when download fails with 403', async () => {
+    fetch.mockImplementation(() => {
+      return Promise.resolve({
+        ok: false,
+        status: 403,
+        headers: { get: () => null },
+        buffer: () => Promise.resolve(Buffer.from('')),
+        json: () => Promise.resolve({ message: 'Forbidden' }),
+        text: () => Promise.resolve('Forbidden')
+      });
+    });
+
+    const result = await call('wp_upload_media', { url: 'https://remote.example.com/photo.jpg' });
+
+    expect(result.isError).toBe(true);
+  });
+
+  it('returns error when WP upload API returns 403', async () => {
+    let callCount = 0;
+    fetch.mockImplementation(() => {
+      callCount++;
+      if (callCount === 1) {
+        return Promise.resolve({
+          ok: true,
+          status: 200,
+          headers: { get: (name) => name === 'content-type' ? 'image/jpeg' : null },
+          buffer: () => Promise.resolve(Buffer.from('fake-image-data')),
+          json: () => Promise.resolve({}),
+          text: () => Promise.resolve('')
+        });
+      }
+      return Promise.resolve(mockError(403));
+    });
+
+    const result = await call('wp_upload_media', { url: 'https://remote.example.com/photo.jpg' });
+
+    expect(result.isError).toBe(true);
+  });
+
+  it('logs audit entry with status success on upload', async () => {
+    let callCount = 0;
+    fetch.mockImplementation(() => {
+      callCount++;
+      if (callCount === 1) {
+        return Promise.resolve({
+          ok: true,
+          status: 200,
+          headers: { get: (name) => name === 'content-type' ? 'image/jpeg' : null },
+          buffer: () => Promise.resolve(Buffer.from('fake-image-data')),
+          json: () => Promise.resolve({}),
+          text: () => Promise.resolve('')
+        });
+      }
+      return Promise.resolve(mockSuccess({
+        id: 101,
+        source_url: 'https://test.example.com/wp-content/uploads/uploaded.jpg',
+        mime_type: 'image/jpeg'
+      }));
+    });
+
+    await call('wp_upload_media', { url: 'https://remote.example.com/photo.jpg' });
+    const logs = getAuditLogs(consoleSpy);
+    const entry = logs.find(l => l.tool === 'wp_upload_media');
+
+    expect(entry).toBeDefined();
+    expect(entry.status).toBe('success');
+    expect(entry.target).toBe(101);
+  });
+
+  it('logs audit entry with status blocked in READ-ONLY mode', async () => {
+    process.env.WP_READ_ONLY = 'true';
+
+    await call('wp_upload_media', { url: 'https://remote.example.com/photo.jpg' });
+    const logs = getAuditLogs(consoleSpy);
+    const entry = logs.find(l => l.tool === 'wp_upload_media');
+
+    expect(entry).toBeDefined();
+    expect(entry.status).toBe('blocked');
+
+    delete process.env.WP_READ_ONLY;
+  });
+});

package/tests/unit/tools/pages.test.js

@@ -0,0 +1,222 @@
+import { vi, describe, it, expect, beforeEach, afterEach } from 'vitest';
+
+vi.mock('node-fetch', () => ({ default: vi.fn() }));
+
+import fetch from 'node-fetch';
+import { handleToolCall } from '../../../index.js';
+import { mockSuccess, mockError, getAuditLogs, makeRequest, parseResult } from '../../helpers/mockWpRequest.js';
+
+function call(name, args = {}) {
+  return handleToolCall(makeRequest(name, args));
+}
+
+// ────────────────────────────────────────────────────────────
+// wp_list_pages
+// ────────────────────────────────────────────────────────────
+
+describe('wp_list_pages', () => {
+  let consoleSpy;
+  beforeEach(() => { fetch.mockReset(); consoleSpy = vi.spyOn(console, 'error').mockImplementation(() => {}); });
+  afterEach(() => { consoleSpy.mockRestore(); });
+
+  it('returns formatted page list on success', async () => {
+    fetch.mockResolvedValue(mockSuccess([
+      { id: 10, title: { rendered: 'About' }, status: 'publish', date: '2024-01-01', link: 'https://test.example.com/about', parent: 0, menu_order: 1, template: '', excerpt: { rendered: 'About page' } }
+    ]));
+
+    const result = await call('wp_list_pages');
+    const data = parseResult(result);
+
+    expect(data.total).toBe(1);
+    expect(data.pages[0].id).toBe(10);
+    expect(data.pages[0].title).toBe('About');
+    expect(data.pages[0].parent).toBe(0);
+    expect(data.pages[0].menu_order).toBe(1);
+  });
+
+  it('logs audit entry with status success', async () => {
+    fetch.mockResolvedValue(mockSuccess([
+      { id: 10, title: { rendered: 'About' }, status: 'publish', date: '2024-01-01', link: 'https://test.example.com/about', parent: 0, menu_order: 1, template: '', excerpt: { rendered: 'About page' } }
+    ]));
+
+    await call('wp_list_pages');
+    const logs = getAuditLogs(consoleSpy);
+    const entry = logs.find(l => l.tool === 'wp_list_pages');
+
+    expect(entry).toBeDefined();
+    expect(entry.status).toBe('success');
+    expect(entry.action).toBe('list');
+  });
+});
+
+// ────────────────────────────────────────────────────────────
+// wp_get_page
+// ────────────────────────────────────────────────────────────
+
+describe('wp_get_page', () => {
+  let consoleSpy;
+  beforeEach(() => { fetch.mockReset(); consoleSpy = vi.spyOn(console, 'error').mockImplementation(() => {}); });
+  afterEach(() => { consoleSpy.mockRestore(); });
+
+  it('returns full page data on success', async () => {
+    fetch.mockResolvedValue(mockSuccess({
+      id: 10, title: { rendered: 'About' }, content: { rendered: '<p>About us</p>' }, excerpt: { rendered: 'About page' },
+      status: 'publish', date: '2024-01-01', modified: '2024-01-01', link: 'https://test.example.com/about',
+      slug: 'about', parent: 0, menu_order: 1, template: '', author: 1, featured_media: 0, meta: {}
+    }));
+
+    const result = await call('wp_get_page', { id: 10 });
+    const data = parseResult(result);
+
+    expect(data.id).toBe(10);
+    expect(data.title).toBe('About');
+    expect(data.content).toBe('<p>About us</p>');
+    expect(data.slug).toBe('about');
+    expect(data.parent).toBe(0);
+    expect(data.template).toBe('');
+  });
+
+  it('returns error on 404', async () => {
+    fetch.mockResolvedValue(mockError(404));
+
+    const result = await call('wp_get_page', { id: 999 });
+
+    expect(result.isError).toBe(true);
+    expect(result.content[0].text).toContain('404');
+  });
+
+  it('logs audit with target and target_type', async () => {
+    fetch.mockResolvedValue(mockSuccess({
+      id: 10, title: { rendered: 'About' }, content: { rendered: '<p>About us</p>' }, excerpt: { rendered: 'About page' },
+      status: 'publish', date: '2024-01-01', modified: '2024-01-01', link: 'https://test.example.com/about',
+      slug: 'about', parent: 0, menu_order: 1, template: '', author: 1, featured_media: 0, meta: {}
+    }));
+
+    await call('wp_get_page', { id: 10 });
+    const logs = getAuditLogs(consoleSpy);
+    const entry = logs.find(l => l.tool === 'wp_get_page');
+
+    expect(entry).toBeDefined();
+    expect(entry.status).toBe('success');
+    expect(entry.target).toBe(10);
+    expect(entry.target_type).toBe('page');
+  });
+});
+
+// ────────────────────────────────────────────────────────────
+// wp_create_page
+// ────────────────────────────────────────────────────────────
+
+describe('wp_create_page', () => {
+  let consoleSpy;
+  beforeEach(() => { fetch.mockReset(); consoleSpy = vi.spyOn(console, 'error').mockImplementation(() => {}); });
+  afterEach(() => { consoleSpy.mockRestore(); });
+
+  it('creates a page and returns success shape', async () => {
+    fetch.mockResolvedValue(mockSuccess({
+      id: 11, title: { rendered: 'New Page' }, status: 'draft', link: 'https://test.example.com/?page_id=11', parent: 0
+    }));
+
+    const result = await call('wp_create_page', { title: 'New Page', content: 'Page body' });
+    const data = parseResult(result);
+
+    expect(data.success).toBe(true);
+    expect(data.page.id).toBe(11);
+    expect(data.page.title).toBe('New Page');
+    expect(data.page.status).toBe('draft');
+    expect(data.page.parent).toBe(0);
+  });
+
+  it('is blocked by WP_READ_ONLY', async () => {
+    process.env.WP_READ_ONLY = 'true';
+    try {
+      const result = await call('wp_create_page', { title: 'T', content: 'C' });
+
+      expect(result.isError).toBe(true);
+      expect(result.content[0].text).toContain('READ-ONLY');
+
+      const logs = getAuditLogs(consoleSpy);
+      const entry = logs.find(l => l.tool === 'wp_create_page');
+      expect(entry).toBeDefined();
+      expect(entry.status).toBe('blocked');
+    } finally {
+      delete process.env.WP_READ_ONLY;
+    }
+  });
+
+  it('logs audit on success', async () => {
+    fetch.mockResolvedValue(mockSuccess({
+      id: 11, title: { rendered: 'New Page' }, status: 'draft', link: 'https://test.example.com/?page_id=11', parent: 0
+    }));
+
+    await call('wp_create_page', { title: 'New Page', content: 'Body' });
+    const logs = getAuditLogs(consoleSpy);
+    const entry = logs.find(l => l.tool === 'wp_create_page');
+
+    expect(entry).toBeDefined();
+    expect(entry.status).toBe('success');
+    expect(entry.action).toBe('create');
+    expect(entry.target_type).toBe('page');
+  });
+});
+
+// ────────────────────────────────────────────────────────────
+// wp_update_page
+// ────────────────────────────────────────────────────────────
+
+describe('wp_update_page', () => {
+  let consoleSpy;
+  beforeEach(() => { fetch.mockReset(); consoleSpy = vi.spyOn(console, 'error').mockImplementation(() => {}); });
+  afterEach(() => { consoleSpy.mockRestore(); });
+
+  it('updates a page and returns success shape', async () => {
+    fetch.mockResolvedValue(mockSuccess({
+      id: 10, title: { rendered: 'Updated' }, status: 'publish', link: 'https://test.example.com/about', modified: '2024-01-02'
+    }));
+
+    const result = await call('wp_update_page', { id: 10, title: 'Updated' });
+    const data = parseResult(result);
+
+    expect(data.success).toBe(true);
+    expect(data.page.id).toBe(10);
+    expect(data.page.title).toBe('Updated');
+    expect(data.page.modified).toBe('2024-01-02');
+  });
+
+  it('returns error on 404', async () => {
+    fetch.mockResolvedValue(mockError(404));
+
+    const result = await call('wp_update_page', { id: 999, title: 'Ghost' });
+
+    expect(result.isError).toBe(true);
+    expect(result.content[0].text).toContain('404');
+  });
+
+  it('is blocked by WP_READ_ONLY', async () => {
+    process.env.WP_READ_ONLY = 'true';
+    try {
+      const result = await call('wp_update_page', { id: 10, title: 'T' });
+
+      expect(result.isError).toBe(true);
+      expect(result.content[0].text).toContain('READ-ONLY');
+    } finally {
+      delete process.env.WP_READ_ONLY;
+    }
+  });
+
+  it('logs audit with target and action', async () => {
+    fetch.mockResolvedValue(mockSuccess({
+      id: 10, title: { rendered: 'Updated' }, status: 'publish', link: 'https://test.example.com/about', modified: '2024-01-02'
+    }));
+
+    await call('wp_update_page', { id: 10, title: 'Updated' });
+    const logs = getAuditLogs(consoleSpy);
+    const entry = logs.find(l => l.tool === 'wp_update_page');
+
+    expect(entry).toBeDefined();
+    expect(entry.status).toBe('success');
+    expect(entry.action).toBe('update');
+    expect(entry.target).toBe(10);
+    expect(entry.target_type).toBe('page');
+  });
+});