npm - @adsim/wordpress-mcp-server - Versions diffs - 4.4.0 → 4.5.0 - Mend

@adsim/wordpress-mcp-server 4.4.0 → 4.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (8) hide show

package/README.md +25 -4
package/dxt/manifest.json +12 -5
package/index.js +470 -2
package/package.json +1 -1
package/src/pluginDetector.js +158 -0
package/tests/unit/pluginDetector.test.js +167 -0
package/tests/unit/tools/pluginIntelligence.test.js +864 -0
package/tests/unit/tools/site.test.js +1 -1

package/README.md CHANGED Viewed

@@ -3,14 +3,14 @@
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 [![Node.js](https://img.shields.io/badge/Node.js-%3E%3D18-green.svg)](https://nodejs.org/)
 [![MCP SDK](https://img.shields.io/badge/MCP-SDK-blue.svg)](https://github.com/anthropics/mcp)
-[![Tests](https://img.shields.io/badge/tests-613%20passing-brightgreen.svg)](https://github.com/GeorgesAdSim/wordpress-mcp-server/actions)
+[![Tests](https://img.shields.io/badge/tests-674%20passing-brightgreen.svg)](https://github.com/GeorgesAdSim/wordpress-mcp-server/actions)
 [![npm](https://img.shields.io/npm/v/@adsim/wordpress-mcp-server.svg)](https://www.npmjs.com/package/@adsim/wordpress-mcp-server)
 **Enterprise Governance · Audit Trail · Multi-Site · Plugin-Free**
 The enterprise governance layer for Claude-to-WordPress integrations — secure, auditable, and multi-site.
-**v4.4.0 Enterprise** · 79 tools · 613 Vitest tests · GitHub Actions CI · HTTP Streamable transport · MCPB bundle · SEO metadata · SEO audit suite · Content intelligence · Plugin & theme management · Revision control · Editorial approval workflow · Destructive confirmation · Internal link analysis · WooCommerce (read + intelligence + write) · Execution controls · JSON audit trail · Multi-site targeting
+**v4.5.0 Enterprise** · 85 tools · 674 Vitest tests · GitHub Actions CI · HTTP Streamable transport · MCPB bundle · SEO metadata · SEO audit suite · Content intelligence · Plugin intelligence · Plugin & theme management · Revision control · Editorial approval workflow · Destructive confirmation · Internal link analysis · WooCommerce (read + intelligence + write) · Execution controls · JSON audit trail · Multi-site targeting
 ---
@@ -716,7 +716,7 @@ WC_PRICE_GUARDRAIL_THRESHOLD=20   # percentage — changes above this require ex
 ## Testing
-613 unit tests covering all 79 tools — zero network calls, fully mocked.
+674 unit tests covering all 85 tools — zero network calls, fully mocked.
 ```bash
 npm test              # run all tests (vitest)
 npm run test:watch    # watch mode
@@ -754,7 +754,9 @@ npm run test:coverage # coverage report
 | `contentIntelligence.test.js` | 16 content intelligence tools: brief, outline, readability, update frequency, link map, anchor texts, schema, structure, duplicates, gaps, FAQ, CTA, entities, velocity, revisions diff, word count | 125 |
 | `site.test.js` | site info, set target | 5 |
 | `transport/http.test.js` | HTTP transport, Bearer auth, sessions | 10 |
-| `dxt/manifest.test.js` | MCPB manifest validation, 79 tools declared | 10 |
+| `pluginDetector.test.js` | SEO plugin detection, rendered head, HTML head parsing | 13 |
+| `pluginIntelligence.test.js` | 6 plugin intelligence tools: rendered head, rendered SEO audit, pillar content, schema plugins, SEO score, Twitter meta | 48 |
+| `dxt/manifest.test.js` | MCPB manifest validation, 85 tools declared | 10 |
 Each test verifies: success response shape, governance blocking (write tools), HTTP error handling (403/404), and audit log entries.
@@ -924,6 +926,25 @@ npx @modelcontextprotocol/inspector node index.js
 ## Changelog
+### v4.5.0 (2026-02-21) — Plugin Intelligence (RankMath + Yoast)
+6 new tools exploiting native RankMath and Yoast SEO API endpoints for rendered head analysis, schema validation, and social meta management.
+**New shared module:**
+- `src/pluginDetector.js` — SEO plugin auto-detection via REST API namespace discovery (cached), rendered head fetching, HTML head parsing
+**Rendered SEO Analysis:**
+- `wp_get_rendered_head` — fetch the real `<head>` HTML via RankMath `/rankmath/v1/getHead` or Yoast `/yoast/v1/get_head` endpoints, compare rendered vs stored meta
+- `wp_audit_rendered_seo` — bulk audit rendered vs stored SEO meta divergences with per-post scoring (title/description/canonical/robots/schema mismatches)
+**Plugin-Native Features:**
+- `wp_get_pillar_content` — read/write RankMath `rank_math_pillar_content` cornerstone flag. Write mode blocked by `WP_READ_ONLY`
+- `wp_audit_schema_plugins` — validate JSON-LD schemas from plugin native fields (`rank_math_schema` or Yoast `yoast_head_json`). Checks required fields per @type
+- `wp_get_seo_score` — read RankMath native SEO score (0-100) with bulk mode distribution stats
+- `wp_get_twitter_meta` — read/write Twitter Card meta (title, description, image) for RankMath, Yoast, and SEOPress. Write mode blocked by `WP_READ_ONLY`
+674 Vitest unit tests · 85 tools
 ### v4.4.0 (2026-02-21) — Content Intelligence
 16 new read-only analysis tools for deep content intelligence without any WordPress plugin.

package/dxt/manifest.json CHANGED Viewed

@@ -2,9 +2,9 @@
   "manifest_version": "0.3",
   "name": "wordpress-mcp-server",
   "display_name": "WordPress MCP Server",
-  "version": "4.4.0",
-  "description": "Manage your WordPress site from Claude Desktop — posts, pages, media, SEO audits, content intelligence, plugins, themes, revisions, WooCommerce, content compression, and more. 79 tools, no WordPress plugin required.",
-  "long_description": "A full-featured MCP server for WordPress REST API integration. Manage posts, pages, media, categories, tags, comments, users, SEO metadata, plugins, themes, revisions, and WooCommerce products/orders/customers through 79 tools — all from Claude Desktop.\n\nNo WordPress plugin required. Uses the built-in WordPress REST API with Application Passwords for secure authentication.\n\nFeatures:\n- Content management: create, read, update, delete posts and pages\n- Content compression: field filtering, content_format (html/text/links_only), list modes (full/summary/ids_only) for LLM context optimization\n- Content intelligence: readability scoring, duplicate detection, entity extraction, publishing velocity, revision diff, content structure analysis, FAQ extraction, CTA detection, link mapping, anchor text audit, schema markup validation\n- Editorial approval workflow: submit for review, approve, reject\n- Media library: list, get details, upload from URL\n- Taxonomy: categories, tags, custom post types\n- SEO: auto-detects Yoast, RankMath, SEOPress, or All in One SEO\n- SEO audit suite: media alt text, orphan pages, heading structure, thin content, canonicals, E-E-A-T signals, broken links, keyword cannibalization, taxonomy bloat, outbound links\n- Plugins & themes: list, activate, deactivate\n- Revisions: list, view, restore, delete\n- WooCommerce read: products, orders, customers, price guardrail\n- WooCommerce intelligence: inventory alerts, order analytics, product SEO audit, product link suggestions\n- WooCommerce write: update products (with price guardrail), stock management, order status transitions\n- Enterprise controls: read-only mode, draft-only, disable-delete, require-approval (global and per-target)\n- Multi-site: target multiple WordPress installations with per-target controls",
+  "version": "4.5.0",
+  "description": "Manage your WordPress site from Claude Desktop — posts, pages, media, SEO audits, content intelligence, plugin intelligence, plugins, themes, revisions, WooCommerce, content compression, and more. 85 tools, no WordPress plugin required.",
+  "long_description": "A full-featured MCP server for WordPress REST API integration. Manage posts, pages, media, categories, tags, comments, users, SEO metadata, plugins, themes, revisions, and WooCommerce products/orders/customers through 85 tools — all from Claude Desktop.\n\nNo WordPress plugin required. Uses the built-in WordPress REST API with Application Passwords for secure authentication.\n\nFeatures:\n- Content management: create, read, update, delete posts and pages\n- Content compression: field filtering, content_format (html/text/links_only), list modes (full/summary/ids_only) for LLM context optimization\n- Content intelligence: readability scoring, duplicate detection, entity extraction, publishing velocity, revision diff, content structure analysis, FAQ extraction, CTA detection, link mapping, anchor text audit, schema markup validation\n- Plugin intelligence: SEO plugin detection (RankMath/Yoast/SEOPress), rendered head analysis, schema validation from plugin fields, SEO score reading, Twitter Card meta, pillar content management\n- Editorial approval workflow: submit for review, approve, reject\n- Media library: list, get details, upload from URL\n- Taxonomy: categories, tags, custom post types\n- SEO: auto-detects Yoast, RankMath, SEOPress, or All in One SEO\n- SEO audit suite: media alt text, orphan pages, heading structure, thin content, canonicals, E-E-A-T signals, broken links, keyword cannibalization, taxonomy bloat, outbound links\n- Plugins & themes: list, activate, deactivate\n- Revisions: list, view, restore, delete\n- WooCommerce read: products, orders, customers, price guardrail\n- WooCommerce intelligence: inventory alerts, order analytics, product SEO audit, product link suggestions\n- WooCommerce write: update products (with price guardrail), stock management, order status transitions\n- Enterprise controls: read-only mode, draft-only, disable-delete, require-approval (global and per-target)\n- Multi-site: target multiple WordPress installations with per-target controls",
   "author": {
     "name": "AdSim",
     "email": "georges@adsim.be",
@@ -112,7 +112,13 @@
     { "name": "wp_extract_entities", "description": "Regex/heuristic named entity extraction (brands, locations, persons, organizations)" },
     { "name": "wp_get_publishing_velocity", "description": "Publication cadence by author/category with trend detection" },
     { "name": "wp_compare_revisions_diff", "description": "Textual diff between revisions with amplitude scoring" },
-    { "name": "wp_list_posts_by_word_count", "description": "Posts sorted by length with 6-tier segmentation" }
+    { "name": "wp_list_posts_by_word_count", "description": "Posts sorted by length with 6-tier segmentation" },
+    { "name": "wp_get_rendered_head", "description": "Fetch real rendered <head> HTML via RankMath or Yoast headless endpoint, compare rendered vs stored meta" },
+    { "name": "wp_audit_rendered_seo", "description": "Bulk audit rendered vs stored SEO meta divergences with per-post scoring" },
+    { "name": "wp_get_pillar_content", "description": "Read or set RankMath pillar/cornerstone content flag. Write mode blocked by WP_READ_ONLY" },
+    { "name": "wp_audit_schema_plugins", "description": "Audit JSON-LD schemas from SEO plugin native fields (rank_math_schema or Yoast head)" },
+    { "name": "wp_get_seo_score", "description": "Read RankMath native SEO score (0-100) with bulk mode distribution stats" },
+    { "name": "wp_get_twitter_meta", "description": "Read or write Twitter Card meta (title, description, image) from RankMath, Yoast, or SEOPress" }
   ],
   "keywords": [
     "wordpress",
@@ -129,7 +135,8 @@
     "woocommerce",
     "ecommerce",
     "content-compression",
-    "content-intelligence"
+    "content-intelligence",
+    "plugin-intelligence"
   ],
   "license": "MIT",
   "user_config": {

package/index.js CHANGED Viewed

@@ -28,6 +28,7 @@ import { wcApiCall, getWcCredentials } from './src/woocommerceClient.js';
 import { parseImagesFromHtml, extractHeadings, extractInternalLinks as extractInternalLinksHtml, countWords } from './src/htmlParser.js';
 import { summarizePost, applyContentFormat } from './src/utils/contentCompressor.js';
 import { calculateReadabilityScore, extractHeadingsOutline, detectContentSections, extractTransitionWords, countPassiveSentences, buildTFIDFVectors, computeCosineSimilarity, findDuplicatePairs, extractEntities, computeTextDiff } from './src/contentAnalyzer.js';
+import { detectSeoPlugin, getRenderedHead, parseRenderedHead } from './src/pluginDetector.js';
 // ============================================================
 // CONFIGURATION
@@ -435,7 +436,7 @@ const ORDERBY = ['date', 'relevance', 'id', 'title', 'slug', 'modified', 'author
 const ORDERS = ['asc', 'desc'];
 const MEDIA_TYPES = ['image', 'video', 'audio', 'application'];
 const COMMENT_STATUSES = ['approved', 'hold', 'spam', 'trash'];
-const TOOLS_COUNT = 79;
+const TOOLS_COUNT = 85;
 function json(data) { return { content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] }; }
 function strip(html) { return (html || '').replace(/<[^>]*>/g, '').trim(); }
@@ -632,7 +633,23 @@ const TOOLS_DEFINITIONS = [
       { name: 'wp_compare_revisions_diff', description: 'Diff between two post revisions: lines/words added/removed, headings diff, amplitude score. Read-only.',
         inputSchema: { type: 'object', properties: { post_id: { type: 'number', description: 'Post or page ID' }, revision_id_from: { type: 'number', description: 'Older revision ID (baseline)' }, revision_id_to: { type: 'number', description: 'Newer revision ID (omit for current post)' }, post_type: { type: 'string', enum: ['post', 'page'], description: 'post or page (default post)' } }, required: ['post_id', 'revision_id_from'] }},
       { name: 'wp_list_posts_by_word_count', description: 'List posts sorted by word count with automatic length segmentation and distribution stats. Read-only.',
-        inputSchema: { type: 'object', properties: { limit: { type: 'number', description: 'Max posts to analyze (1-500, default 100)' }, post_type: { type: 'string', enum: ['post', 'page', 'both'], description: 'post, page, or both (default post)' }, order: { type: 'string', enum: ['asc', 'desc'], description: 'Sort order by word count (default desc)' }, category_id: { type: 'number', description: 'Optional: filter by category ID' } }}}
+        inputSchema: { type: 'object', properties: { limit: { type: 'number', description: 'Max posts to analyze (1-500, default 100)' }, post_type: { type: 'string', enum: ['post', 'page', 'both'], description: 'post, page, or both (default post)' }, order: { type: 'string', enum: ['asc', 'desc'], description: 'Sort order by word count (default desc)' }, category_id: { type: 'number', description: 'Optional: filter by category ID' } }}},
+      // ── PLUGIN INTELLIGENCE v4.5 (3) ──
+      { name: 'wp_get_rendered_head', description: 'Retrieve the real rendered <head> HTML as seen by Google via RankMath or Yoast headless endpoint. Compares rendered meta with stored meta. Read-only.',
+        inputSchema: { type: 'object', properties: { post_id: { type: 'number', description: 'Post or page ID' }, post_type: { type: 'string', enum: ['post', 'page'], description: 'post or page (default post)' } }, required: ['post_id'] }},
+      { name: 'wp_audit_rendered_seo', description: 'Bulk audit: compare rendered <head> vs stored SEO meta for divergences (title mismatch, missing description, canonical issues, missing schema). Requires RankMath or Yoast. Read-only.',
+        inputSchema: { type: 'object', properties: { limit: { type: 'number', description: 'Max posts to audit (1-50, default 10)' }, post_type: { type: 'string', enum: ['post', 'page'], description: 'post or page (default post)' } }}},
+      { name: 'wp_get_pillar_content', description: 'Read or set the RankMath pillar/cornerstone content flag. List all pillar posts, read a single post flag, or mark/unmark a post as pillar. Write mode blocked by WP_READ_ONLY.',
+        inputSchema: { type: 'object', properties: { post_id: { type: 'number', description: 'Post or page ID (read or write mode)' }, set_pillar: { type: 'boolean', description: 'Set pillar flag (true=pillar, false=not). Requires write access.' }, list_pillars: { type: 'boolean', description: 'List all pillar content posts (ignores post_id)' }, post_type: { type: 'string', enum: ['post', 'page'], description: 'post or page (default post)' }, limit: { type: 'number', description: 'Max posts to scan for list_pillars mode (default 100)' } }}},
+      // ── PLUGIN INTELLIGENCE v4.5 batch 2 (3) ──
+      { name: 'wp_audit_schema_plugins', description: 'Audit schema JSON-LD from SEO plugin native fields (rank_math_schema or Yoast head). Validates presence and required fields per @type. Read-only.',
+        inputSchema: { type: 'object', properties: { limit: { type: 'number', description: 'Max posts to audit (1-100, default 20)' }, post_type: { type: 'string', enum: ['post', 'page', 'both'], description: 'post, page, or both (default post)' } }}},
+      { name: 'wp_get_seo_score', description: 'Read RankMath native SEO score (0-100) for a single post or bulk-list posts sorted by score with distribution stats. Read-only.',
+        inputSchema: { type: 'object', properties: { post_id: { type: 'number', description: 'Single post ID to get score for' }, limit: { type: 'number', description: 'Bulk mode: max posts (1-100, default 20)' }, post_type: { type: 'string', enum: ['post', 'page'], description: 'post or page (default post)' }, order: { type: 'string', enum: ['asc', 'desc'], description: 'Sort by score (default desc)' } }}},
+      { name: 'wp_get_twitter_meta', description: 'Read or write Twitter Card meta (title, description, image) from RankMath, Yoast, or SEOPress. Write mode blocked by WP_READ_ONLY.',
+        inputSchema: { type: 'object', properties: { post_id: { type: 'number', description: 'Post or page ID' }, post_type: { type: 'string', enum: ['post', 'page'], description: 'post or page (default post)' }, twitter_title: { type: 'string', description: 'Set Twitter title (write mode)' }, twitter_description: { type: 'string', description: 'Set Twitter description (write mode)' }, twitter_image: { type: 'string', description: 'Set Twitter image URL (write mode)' } }, required: ['post_id'] }}
 ];
 function registerHandlers(s) {
@@ -4419,6 +4436,457 @@ export async function handleToolCall(request) {
         break;
       }
+      // ── PLUGIN INTELLIGENCE v4.5 ──
+      case 'wp_get_rendered_head': {
+        validateInput(args, { post_id: { type: 'number', required: true }, post_type: { type: 'string', enum: ['post', 'page'] } });
+        const grhPostId = args.post_id;
+        const grhPostType = args.post_type || 'post';
+        const { url: grhBaseUrl, auth: grhAuth } = getActiveAuth();
+        const grhPlugin = await detectSeoPlugin(grhBaseUrl, fetch);
+        if (!grhPlugin) throw new Error('No supported SEO plugin detected. wp_get_rendered_head requires RankMath or Yoast.');
+        if (grhPlugin !== 'rankmath' && grhPlugin !== 'yoast') throw new Error(`Rendered head requires RankMath or Yoast (detected: ${grhPlugin})`);
+        const grhEp = grhPostType === 'page' ? `/pages/${grhPostId}?_fields=id,title,link,slug,meta` : `/posts/${grhPostId}?_fields=id,title,link,slug,meta`;
+        const grhPost = await wpApiCall(grhEp);
+        const grhHeadResult = await getRenderedHead(grhBaseUrl, grhPost.link, grhPlugin, fetch, grhAuth);
+        if (!grhHeadResult.success) throw new Error(grhHeadResult.error);
+        const grhParsed = parseRenderedHead(grhHeadResult.head);
+        const grhMeta = grhPost.meta || {};
+        // Extract stored SEO meta based on plugin
+        let grhStoredTitle, grhStoredDesc, grhStoredKeyword, grhStoredCanonical, grhStoredRobots;
+        if (grhPlugin === 'rankmath') {
+          grhStoredTitle = grhMeta.rank_math_title || null;
+          grhStoredDesc = grhMeta.rank_math_description || null;
+          grhStoredKeyword = grhMeta.rank_math_focus_keyword || null;
+          grhStoredCanonical = grhMeta.rank_math_canonical_url || null;
+          const rm = grhMeta.rank_math_robots || [];
+          grhStoredRobots = Array.isArray(rm) && rm.length > 0 ? rm.join(', ') : null;
+        } else {
+          grhStoredTitle = grhMeta._yoast_wpseo_title || null;
+          grhStoredDesc = grhMeta._yoast_wpseo_metadesc || null;
+          grhStoredKeyword = grhMeta._yoast_wpseo_focuskw || null;
+          grhStoredCanonical = grhMeta._yoast_wpseo_canonical || null;
+          grhStoredRobots = grhMeta._yoast_wpseo_meta_robots_noindex === '1' ? 'noindex' : null;
+        }
+        result = json({
+          post_id: grhPostId,
+          post_url: grhPost.link,
+          seo_plugin: grhPlugin,
+          rendered: grhParsed,
+          stored: {
+            title: grhStoredTitle,
+            description: grhStoredDesc,
+            focus_keyword: grhStoredKeyword,
+            canonical: grhStoredCanonical,
+            robots: grhStoredRobots
+          },
+          raw_head_length: grhHeadResult.head.length,
+          schemas_count: grhParsed.schema_json_ld.length
+        });
+        auditLog({ tool: name, action: 'get_rendered_head', status: 'success', latency_ms: Date.now() - t0, params: { post_id: grhPostId, post_type: grhPostType, plugin: grhPlugin } });
+        break;
+      }
+      case 'wp_audit_rendered_seo': {
+        validateInput(args, { limit: { type: 'number', min: 1, max: 50 }, post_type: { type: 'string', enum: ['post', 'page'] } });
+        const arsLimit = args.limit || 10;
+        const arsPostType = args.post_type || 'post';
+        const { url: arsBaseUrl, auth: arsAuth } = getActiveAuth();
+        const arsPlugin = await detectSeoPlugin(arsBaseUrl, fetch);
+        if (!arsPlugin) throw new Error('No supported SEO plugin detected. wp_audit_rendered_seo requires RankMath or Yoast.');
+        if (arsPlugin !== 'rankmath' && arsPlugin !== 'yoast') throw new Error(`Rendered SEO audit requires RankMath or Yoast (detected: ${arsPlugin})`);
+        const arsEp = `/${arsPostType}s?per_page=${arsLimit}&status=publish&_fields=id,title,link,slug,meta`;
+        const arsPosts = await wpApiCall(arsEp);
+        const arsResults = [];
+        const arsSummary = { title_mismatch: 0, description_mismatch: 0, canonical_mismatch: 0, missing_rendered_title: 0, missing_rendered_description: 0, robots_mismatch: 0, schema_missing: 0 };
+        for (const p of arsPosts) {
+          const headRes = await getRenderedHead(arsBaseUrl, p.link, arsPlugin, fetch, arsAuth);
+          if (!headRes.success) {
+            arsResults.push({ id: p.id, title: strip(p.title?.rendered || ''), url: p.link, score: 0, issues: ['head_fetch_failed'], rendered: null, stored: null });
+            continue;
+          }
+          const parsed = parseRenderedHead(headRes.head);
+          const meta = p.meta || {};
+          const issues = [];
+          // Extract stored meta
+          let storedTitle, storedDesc, storedCanonical, storedRobots;
+          if (arsPlugin === 'rankmath') {
+            storedTitle = meta.rank_math_title || null;
+            storedDesc = meta.rank_math_description || null;
+            storedCanonical = meta.rank_math_canonical_url || null;
+            const rm = meta.rank_math_robots || [];
+            storedRobots = Array.isArray(rm) && rm.length > 0 ? rm.join(', ') : null;
+          } else {
+            storedTitle = meta._yoast_wpseo_title || null;
+            storedDesc = meta._yoast_wpseo_metadesc || null;
+            storedCanonical = meta._yoast_wpseo_canonical || null;
+            storedRobots = meta._yoast_wpseo_meta_robots_noindex === '1' ? 'noindex' : null;
+          }
+          // Compare rendered vs stored
+          if (!parsed.title) { issues.push('missing_rendered_title'); arsSummary.missing_rendered_title++; }
+          else if (storedTitle && !parsed.title.includes(storedTitle)) { issues.push('title_mismatch'); arsSummary.title_mismatch++; }
+          if (!parsed.meta_description) { issues.push('missing_rendered_description'); arsSummary.missing_rendered_description++; }
+          else if (storedDesc && parsed.meta_description !== storedDesc) { issues.push('description_mismatch'); arsSummary.description_mismatch++; }
+          if (parsed.canonical && parsed.canonical !== p.link && storedCanonical && parsed.canonical !== storedCanonical) { issues.push('canonical_mismatch'); arsSummary.canonical_mismatch++; }
+          if (parsed.robots && parsed.robots.includes('noindex') && (!storedRobots || !storedRobots.includes('noindex'))) { issues.push('robots_mismatch'); arsSummary.robots_mismatch++; }
+          if (parsed.schema_json_ld.length === 0) { issues.push('schema_missing'); arsSummary.schema_missing++; }
+          const score = Math.max(0, 100 - issues.length * 15);
+          arsResults.push({
+            id: p.id, title: strip(p.title?.rendered || ''), url: p.link, score, issues,
+            rendered: { title: parsed.title, description: parsed.meta_description, canonical: parsed.canonical, robots: parsed.robots, schemas_count: parsed.schema_json_ld.length },
+            stored: { title: storedTitle, description: storedDesc, canonical: storedCanonical, robots: storedRobots }
+          });
+        }
+        const arsAvgScore = arsResults.length > 0 ? arsResults.reduce((s, r) => s + r.score, 0) / arsResults.length : 0;
+        result = json({
+          seo_plugin: arsPlugin,
+          total_audited: arsResults.length,
+          avg_score: Math.round(arsAvgScore),
+          issues_summary: arsSummary,
+          posts: arsResults
+        });
+        auditLog({ tool: name, action: 'audit_rendered_seo', status: 'success', latency_ms: Date.now() - t0, params: { limit: arsLimit, post_type: arsPostType, plugin: arsPlugin } });
+        break;
+      }
+      case 'wp_get_pillar_content': {
+        validateInput(args, {
+          post_id: { type: 'number' },
+          set_pillar: { type: 'boolean' },
+          list_pillars: { type: 'boolean' },
+          post_type: { type: 'string', enum: ['post', 'page'] },
+          limit: { type: 'number', min: 1, max: 500 }
+        });
+        const pcPostType = args.post_type || 'post';
+        const { url: pcBaseUrl } = getActiveAuth();
+        const pcPlugin = await detectSeoPlugin(pcBaseUrl, fetch);
+        if (pcPlugin !== 'rankmath') throw new Error('Pillar content requires RankMath (detected: ' + (pcPlugin || 'none') + ')');
+        if (args.list_pillars) {
+          // Mode: list all pillar posts
+          const pcLimit = args.limit || 100;
+          const pcPosts = await wpApiCall(`/${pcPostType}s?per_page=${pcLimit}&status=publish&_fields=id,title,link,slug,meta`);
+          const pillars = pcPosts.filter(p => (p.meta || {}).rank_math_pillar_content === 'on').map(p => ({
+            id: p.id, title: strip(p.title?.rendered || ''), slug: p.slug, link: p.link, post_type: pcPostType
+          }));
+          result = json({ mode: 'list_pillars', seo_plugin: pcPlugin, pillar_count: pillars.length, pillars });
+          auditLog({ tool: name, action: 'read_pillar_content', status: 'success', latency_ms: Date.now() - t0, params: { list_pillars: true, post_type: pcPostType, limit: pcLimit } });
+        } else if (args.post_id !== undefined && args.set_pillar !== undefined) {
+          // Mode: write — set/unset pillar flag
+          if (getActiveControls().read_only) throw new Error('Blocked: READ-ONLY mode. Cannot update pillar content flag.');
+          const pcPost = await wpApiCall(`/${pcPostType}s/${args.post_id}?_fields=id,title,link,meta`);
+          await wpApiCall(`/${pcPostType}s/${args.post_id}`, { method: 'POST', body: JSON.stringify({ meta: { rank_math_pillar_content: args.set_pillar ? 'on' : '' } }) });
+          result = json({
+            mode: 'write', post_id: args.post_id, title: strip(pcPost.title?.rendered || ''),
+            is_pillar: args.set_pillar, action: args.set_pillar ? 'marked_as_pillar' : 'unmarked_as_pillar', seo_plugin: pcPlugin
+          });
+          auditLog({ tool: name, action: 'update_pillar_content', target: args.post_id, target_type: pcPostType, status: 'success', latency_ms: Date.now() - t0, params: { set_pillar: args.set_pillar } });
+        } else if (args.post_id !== undefined) {
+          // Mode: read single post
+          const pcPost = await wpApiCall(`/${pcPostType}s/${args.post_id}?_fields=id,title,link,meta`);
+          const isPillar = (pcPost.meta || {}).rank_math_pillar_content === 'on';
+          result = json({ mode: 'read', post_id: args.post_id, title: strip(pcPost.title?.rendered || ''), is_pillar: isPillar, seo_plugin: pcPlugin });
+          auditLog({ tool: name, action: 'read_pillar_content', status: 'success', latency_ms: Date.now() - t0, params: { post_id: args.post_id, post_type: pcPostType } });
+        } else {
+          throw new Error('Provide post_id (read/write) or list_pillars:true');
+        }
+        break;
+      }
+      case 'wp_audit_schema_plugins': {
+        validateInput(args, {
+          limit: { type: 'number', min: 1, max: 100 },
+          post_type: { type: 'string', enum: ['post', 'page', 'both'] }
+        });
+        const aspLimit = args.limit || 20;
+        const aspPostType = args.post_type || 'post';
+        const { url: aspBaseUrl, auth: aspAuth } = getActiveAuth();
+        const aspPlugin = await detectSeoPlugin(aspBaseUrl, fetch);
+        if (!aspPlugin) throw new Error('No supported SEO plugin detected');
+        if (aspPlugin !== 'rankmath' && aspPlugin !== 'yoast') throw new Error(`Schema plugin audit requires RankMath or Yoast (detected: ${aspPlugin})`);
+        const aspRequired = {
+          'Article': ['headline', 'datePublished', 'author'],
+          'BlogPosting': ['headline', 'datePublished', 'author'],
+          'NewsArticle': ['headline', 'datePublished', 'author'],
+          'FAQPage': ['mainEntity'],
+          'HowTo': ['name', 'step'],
+          'LocalBusiness': ['name', 'address'],
+          'BreadcrumbList': ['itemListElement'],
+          'Organization': ['name'],
+          'WebPage': ['name'],
+          'WebSite': ['name', 'url']
+        };
+        let aspAllPosts = [];
+        if (aspPostType === 'both') {
+          const aspP = await wpApiCall(`/posts?per_page=${aspLimit}&status=publish&_fields=id,title,link,slug,meta`);
+          const aspG = await wpApiCall(`/pages?per_page=${aspLimit}&status=publish&_fields=id,title,link,slug,meta`);
+          aspAllPosts = [...aspP, ...aspG];
+        } else {
+          aspAllPosts = await wpApiCall(`/${aspPostType}s?per_page=${aspLimit}&status=publish&_fields=id,title,link,slug,meta`);
+        }
+        const aspResults = [];
+        const aspTypesCounts = {};
+        const aspIssuesSummary = { no_plugin_schema: 0, invalid_schema_json: 0, missing_required_fields: 0, no_article_schema: 0 };
+        let aspWithSchema = 0;
+        for (const p of aspAllPosts) {
+          const postIssues = [];
+          const postSchemas = [];
+          let schemas = [];
+          if (aspPlugin === 'rankmath') {
+            const rawSchema = (p.meta || {}).rank_math_schema;
+            if (!rawSchema || rawSchema === '{}') {
+              postIssues.push('no_plugin_schema');
+              aspIssuesSummary.no_plugin_schema++;
+            } else {
+              try {
+                const parsed = typeof rawSchema === 'string' ? JSON.parse(rawSchema) : rawSchema;
+                if (parsed['@type']) {
+                  schemas = [parsed];
+                } else if (parsed['@graph']) {
+                  schemas = parsed['@graph'];
+                } else {
+                  schemas = Object.values(parsed).filter(v => v && typeof v === 'object' && v['@type']);
+                }
+                if (schemas.length === 0) { postIssues.push('no_plugin_schema'); aspIssuesSummary.no_plugin_schema++; }
+              } catch {
+                postIssues.push('invalid_schema_json');
+                aspIssuesSummary.invalid_schema_json++;
+              }
+            }
+          } else {
+            const headRes = await getRenderedHead(aspBaseUrl, p.link, aspPlugin, fetch, aspAuth);
+            if (headRes.success) {
+              const parsed = parseRenderedHead(headRes.head);
+              schemas = parsed.schema_json_ld || [];
+              if (schemas.length === 0) { postIssues.push('no_plugin_schema'); aspIssuesSummary.no_plugin_schema++; }
+            } else {
+              postIssues.push('no_plugin_schema');
+              aspIssuesSummary.no_plugin_schema++;
+            }
+          }
+          let hasArticleType = false;
+          for (const schema of schemas) {
+            const schemaType = schema['@type'] || 'Unknown';
+            if (['Article', 'BlogPosting', 'NewsArticle'].includes(schemaType)) hasArticleType = true;
+            aspTypesCounts[schemaType] = (aspTypesCounts[schemaType] || 0) + 1;
+            const requiredFields = aspRequired[schemaType];
+            const missingFields = [];
+            if (requiredFields) {
+              for (const field of requiredFields) {
+                if (!schema[field]) missingFields.push(field);
+              }
+            }
+            if (missingFields.length > 0) { postIssues.push('missing_required_fields'); aspIssuesSummary.missing_required_fields++; }
+            postSchemas.push({ type: schemaType, valid: missingFields.length === 0, missing_fields: missingFields });
+          }
+          if (schemas.length > 0 && !hasArticleType && aspPostType === 'post') {
+            postIssues.push('no_article_schema');
+            aspIssuesSummary.no_article_schema++;
+          }
+          if (schemas.length > 0) aspWithSchema++;
+          const postScore = Math.max(0, 100 - postIssues.length * 15);
+          aspResults.push({ id: p.id, title: strip(p.title?.rendered || ''), slug: p.slug, score: postScore, schemas: postSchemas, issues: postIssues });
+        }
+        const aspAvg = aspResults.length > 0 ? aspResults.reduce((s, r) => s + r.score, 0) / aspResults.length : 0;
+        const aspWithout = aspAllPosts.length - aspWithSchema;
+        result = json({
+          seo_plugin: aspPlugin,
+          total_audited: aspResults.length,
+          avg_score: Math.round(aspAvg),
+          schema_coverage: {
+            posts_with_schema: aspWithSchema,
+            posts_without_schema: aspWithout,
+            coverage_percent: aspAllPosts.length > 0 ? Math.round(aspWithSchema / aspAllPosts.length * 100) : 0
+          },
+          schema_types_found: aspTypesCounts,
+          issues_summary: aspIssuesSummary,
+          posts: aspResults
+        });
+        auditLog({ tool: name, action: 'audit_schema_plugins', status: 'success', latency_ms: Date.now() - t0, params: { limit: aspLimit, post_type: aspPostType, plugin: aspPlugin } });
+        break;
+      }
+      case 'wp_get_seo_score': {
+        validateInput(args, {
+          post_id: { type: 'number' },
+          limit: { type: 'number', min: 1, max: 100 },
+          post_type: { type: 'string', enum: ['post', 'page'] },
+          order: { type: 'string', enum: ['asc', 'desc'] }
+        });
+        const gssPostType = args.post_type || 'post';
+        const { url: gssBaseUrl } = getActiveAuth();
+        const gssPlugin = await detectSeoPlugin(gssBaseUrl, fetch);
+        if (gssPlugin !== 'rankmath') throw new Error('SEO score requires RankMath (detected: ' + (gssPlugin || 'none') + ')');
+        if (args.post_id !== undefined) {
+          const gssPost = await wpApiCall(`/${gssPostType}s/${args.post_id}?_fields=id,title,link,slug,meta`);
+          const gssMeta = gssPost.meta || {};
+          const gssRaw = gssMeta.rank_math_seo_score;
+          const gssScore = gssRaw !== undefined && gssRaw !== null && gssRaw !== '' ? parseInt(gssRaw, 10) : null;
+          const gssKw = gssMeta.rank_math_focus_keyword || null;
+          const gssRating = gssScore === null || gssScore === 0 ? 'no_score' : gssScore >= 80 ? 'excellent' : gssScore >= 60 ? 'good' : gssScore >= 40 ? 'average' : 'poor';
+          result = json({
+            mode: 'single', post_id: args.post_id, title: strip(gssPost.title?.rendered || ''),
+            link: gssPost.link, seo_score: gssScore, focus_keyword: gssKw, rating: gssRating
+          });
+          auditLog({ tool: name, action: 'get_seo_score', status: 'success', latency_ms: Date.now() - t0, params: { post_id: args.post_id, post_type: gssPostType } });
+        } else {
+          const gssLimit = args.limit || 20;
+          const gssSortOrder = args.order || 'desc';
+          const gssPosts = await wpApiCall(`/${gssPostType}s?per_page=${gssLimit}&status=publish&_fields=id,title,link,slug,meta`);
+          const gssItems = gssPosts.map(p => {
+            const m = p.meta || {};
+            const raw = m.rank_math_seo_score;
+            const score = raw !== undefined && raw !== null && raw !== '' ? parseInt(raw, 10) : null;
+            const kw = m.rank_math_focus_keyword || null;
+            const rating = score === null || score === 0 ? 'no_score' : score >= 80 ? 'excellent' : score >= 60 ? 'good' : score >= 40 ? 'average' : 'poor';
+            return { id: p.id, title: strip(p.title?.rendered || ''), slug: p.slug, link: p.link, seo_score: score, focus_keyword: kw, rating };
+          });
+          gssItems.sort((a, b) => {
+            const sa = a.seo_score === null ? -1 : a.seo_score;
+            const sb = b.seo_score === null ? -1 : b.seo_score;
+            return gssSortOrder === 'asc' ? sa - sb : sb - sa;
+          });
+          const gssDist = { excellent: 0, good: 0, average: 0, poor: 0, no_score: 0 };
+          const gssScores = [];
+          for (const item of gssItems) {
+            gssDist[item.rating]++;
+            if (item.seo_score !== null && item.seo_score > 0) gssScores.push(item.seo_score);
+          }
+          const gssTotal = gssItems.length;
+          const gssAvg = gssScores.length > 0 ? gssScores.reduce((a, b) => a + b, 0) / gssScores.length : 0;
+          const gssSorted = [...gssScores].sort((a, b) => a - b);
+          const gssMedian = gssSorted.length > 0 ? (gssSorted.length % 2 === 0 ? (gssSorted[gssSorted.length / 2 - 1] + gssSorted[gssSorted.length / 2]) / 2 : gssSorted[Math.floor(gssSorted.length / 2)]) : 0;
+          result = json({
+            mode: 'bulk', total_analyzed: gssItems.length,
+            avg_score: Math.round(gssAvg), median_score: gssMedian,
+            distribution: {
+              excellent: { count: gssDist.excellent, percent: gssTotal > 0 ? Math.round(gssDist.excellent / gssTotal * 100) : 0 },
+              good: { count: gssDist.good, percent: gssTotal > 0 ? Math.round(gssDist.good / gssTotal * 100) : 0 },
+              average: { count: gssDist.average, percent: gssTotal > 0 ? Math.round(gssDist.average / gssTotal * 100) : 0 },
+              poor: { count: gssDist.poor, percent: gssTotal > 0 ? Math.round(gssDist.poor / gssTotal * 100) : 0 },
+              no_score: { count: gssDist.no_score, percent: gssTotal > 0 ? Math.round(gssDist.no_score / gssTotal * 100) : 0 }
+            },
+            posts: gssItems
+          });
+          auditLog({ tool: name, action: 'get_seo_score', status: 'success', latency_ms: Date.now() - t0, params: { limit: gssLimit, post_type: gssPostType, order: gssSortOrder } });
+        }
+        break;
+      }
+      case 'wp_get_twitter_meta': {
+        validateInput(args, {
+          post_id: { type: 'number', required: true },
+          post_type: { type: 'string', enum: ['post', 'page'] },
+          twitter_title: { type: 'string' },
+          twitter_description: { type: 'string' },
+          twitter_image: { type: 'string' }
+        });
+        const gtmPostId = args.post_id;
+        const gtmPostType = args.post_type || 'post';
+        const { url: gtmBaseUrl } = getActiveAuth();
+        const gtmPlugin = await detectSeoPlugin(gtmBaseUrl, fetch);
+        if (!gtmPlugin) throw new Error('No supported SEO plugin detected');
+        const gtmIsWrite = args.twitter_title !== undefined || args.twitter_description !== undefined || args.twitter_image !== undefined;
+        if (gtmIsWrite) {
+          if (getActiveControls().read_only) throw new Error('Blocked: READ-ONLY mode. Cannot update Twitter meta.');
+          if (gtmPlugin !== 'rankmath' && gtmPlugin !== 'yoast') throw new Error('Twitter meta write requires RankMath or Yoast (detected: ' + gtmPlugin + ')');
+          const gtmMeta = {};
+          const gtmUpdated = [];
+          if (gtmPlugin === 'rankmath') {
+            if (args.twitter_title !== undefined) { gtmMeta.rank_math_twitter_title = args.twitter_title; gtmUpdated.push('twitter_title'); }
+            if (args.twitter_description !== undefined) { gtmMeta.rank_math_twitter_description = args.twitter_description; gtmUpdated.push('twitter_description'); }
+            if (args.twitter_image !== undefined) { gtmMeta.rank_math_twitter_image = args.twitter_image; gtmUpdated.push('twitter_image'); }
+          } else {
+            if (args.twitter_title !== undefined) { gtmMeta['_yoast_wpseo_twitter-title'] = args.twitter_title; gtmUpdated.push('twitter_title'); }
+            if (args.twitter_description !== undefined) { gtmMeta['_yoast_wpseo_twitter-description'] = args.twitter_description; gtmUpdated.push('twitter_description'); }
+            if (args.twitter_image !== undefined) { gtmMeta['_yoast_wpseo_twitter-image'] = args.twitter_image; gtmUpdated.push('twitter_image'); }
+          }
+          const gtmPost = await wpApiCall(`/${gtmPostType}s/${gtmPostId}?_fields=id,title,link,meta`);
+          await wpApiCall(`/${gtmPostType}s/${gtmPostId}`, { method: 'POST', body: JSON.stringify({ meta: gtmMeta }) });
+          result = json({
+            mode: 'write', post_id: gtmPostId, title: strip(gtmPost.title?.rendered || ''),
+            seo_plugin: gtmPlugin, updated_fields: gtmUpdated,
+            twitter: { title: args.twitter_title || null, description: args.twitter_description || null, image: args.twitter_image || null }
+          });
+          auditLog({ tool: name, action: 'update_twitter_meta', target: gtmPostId, target_type: gtmPostType, status: 'success', latency_ms: Date.now() - t0, params: { updated_fields: gtmUpdated } });
+        } else {
+          const gtmPost = await wpApiCall(`/${gtmPostType}s/${gtmPostId}?_fields=id,title,link,meta`);
+          const gtmM = gtmPost.meta || {};
+          let gtmTitle, gtmDesc, gtmImage, gtmCard;
+          if (gtmPlugin === 'rankmath') {
+            gtmTitle = gtmM.rank_math_twitter_title || null;
+            gtmDesc = gtmM.rank_math_twitter_description || null;
+            gtmImage = gtmM.rank_math_twitter_image || null;
+            gtmCard = gtmM.rank_math_twitter_card_type || null;
+          } else if (gtmPlugin === 'yoast') {
+            gtmTitle = gtmM['_yoast_wpseo_twitter-title'] || null;
+            gtmDesc = gtmM['_yoast_wpseo_twitter-description'] || null;
+            gtmImage = gtmM['_yoast_wpseo_twitter-image'] || null;
+            gtmCard = null;
+          } else {
+            gtmTitle = gtmM._seopress_social_twitter_title || null;
+            gtmDesc = gtmM._seopress_social_twitter_desc || null;
+            gtmImage = gtmM._seopress_social_twitter_img || null;
+            gtmCard = null;
+          }
+          result = json({
+            mode: 'read', post_id: gtmPostId, title: strip(gtmPost.title?.rendered || ''),
+            link: gtmPost.link, seo_plugin: gtmPlugin,
+            twitter: { title: gtmTitle, description: gtmDesc, image: gtmImage, card_type: gtmCard }
+          });
+          auditLog({ tool: name, action: 'read_twitter_meta', status: 'success', latency_ms: Date.now() - t0, params: { post_id: gtmPostId, post_type: gtmPostType, plugin: gtmPlugin } });
+        }
+        break;
+      }
       default:
         throw new Error(`Unknown tool: "${name}".`);
     }

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@adsim/wordpress-mcp-server",
-  "version": "4.4.0",
+  "version": "4.5.0",
   "description": "A Model Context Protocol (MCP) server for WordPress REST API integration. Manage posts, search content, and interact with your WordPress site through any MCP-compatible client.",
   "type": "module",
   "main": "index.js",