@adsim/wordpress-mcp-server 4.6.0 → 5.1.0

package/src/tools/fse.js

@@ -0,0 +1,370 @@
+// src/tools/fse.js — fse tools (26)
+// Definitions + handlers (v5.0.0 refactor Step B+C)
+
+import { json } from '../shared/utils.js';
+import { validateInput } from '../shared/governance.js';
+import { rt } from '../shared/context.js';
+
+export const definitions = [
+  { name: 'wp_list_templates', _category: 'fse', description: 'Use to list all block templates. Supports filtering by post_type. Read-only.',
+        inputSchema: { type: 'object', properties: { per_page: { type: 'number', description: 'Results per page (1-100)' }, page: { type: 'number', description: 'Page number' }, post_type: { type: 'string', description: 'Filter by post type' } }}},
+  { name: 'wp_get_template', _category: 'fse', description: 'Use to get a single block template by ID. Template IDs are strings like "theme-slug//template-name". Read-only.',
+        inputSchema: { type: 'object', properties: { id: { type: 'string', description: 'Template ID (e.g. "theme-slug//template-name")' } }, required: ['id'] }},
+  { name: 'wp_create_template', _category: 'fse', description: 'Use to create a new block template. Write — blocked by WP_READ_ONLY.',
+        inputSchema: { type: 'object', properties: { slug: { type: 'string', description: 'Template slug' }, title: { type: 'string', description: 'Template title' }, content: { type: 'string', description: 'Block markup content' }, description: { type: 'string' }, status: { type: 'string', enum: ['publish', 'draft'] } }, required: ['slug'] }},
+  { name: 'wp_update_template', _category: 'fse', description: 'Use to update an existing block template. Write — blocked by WP_READ_ONLY.',
+        inputSchema: { type: 'object', properties: { id: { type: 'string', description: 'Template ID' }, title: { type: 'string' }, content: { type: 'string' }, description: { type: 'string' }, status: { type: 'string', enum: ['publish', 'draft'] } }, required: ['id'] }},
+  { name: 'wp_delete_template', _category: 'fse', description: 'Use to delete a block template. Destructive — blocked by WP_DISABLE_DELETE.',
+        inputSchema: { type: 'object', properties: { id: { type: 'string', description: 'Template ID' }, force: { type: 'boolean', description: 'Force permanent deletion' } }, required: ['id'] }},
+  { name: 'wp_list_template_parts', _category: 'fse', description: 'Use to list all template parts. Supports filtering by area (header/footer/general). Read-only.',
+        inputSchema: { type: 'object', properties: { per_page: { type: 'number' }, page: { type: 'number' }, area: { type: 'string', enum: ['header', 'footer', 'general'], description: 'Filter by area' } }}},
+  { name: 'wp_get_template_part', _category: 'fse', description: 'Use to get a single template part by ID. Read-only.',
+        inputSchema: { type: 'object', properties: { id: { type: 'string', description: 'Template part ID' } }, required: ['id'] }},
+  { name: 'wp_create_template_part', _category: 'fse', description: 'Use to create a new template part. Write — blocked by WP_READ_ONLY.',
+        inputSchema: { type: 'object', properties: { slug: { type: 'string' }, title: { type: 'string' }, content: { type: 'string' }, area: { type: 'string', enum: ['header', 'footer', 'general'] }, description: { type: 'string' }, status: { type: 'string', enum: ['publish', 'draft'] } }, required: ['slug'] }},
+  { name: 'wp_update_template_part', _category: 'fse', description: 'Use to update an existing template part. Write — blocked by WP_READ_ONLY.',
+        inputSchema: { type: 'object', properties: { id: { type: 'string', description: 'Template part ID' }, title: { type: 'string' }, content: { type: 'string' }, area: { type: 'string', enum: ['header', 'footer', 'general'] }, description: { type: 'string' }, status: { type: 'string', enum: ['publish', 'draft'] } }, required: ['id'] }},
+  { name: 'wp_delete_template_part', _category: 'fse', description: 'Use to delete a template part. Destructive — blocked by WP_DISABLE_DELETE.',
+        inputSchema: { type: 'object', properties: { id: { type: 'string', description: 'Template part ID' }, force: { type: 'boolean' } }, required: ['id'] }},
+  { name: 'wp_get_global_styles', _category: 'fse', description: 'Use to get global styles by ID. Read-only.',
+        inputSchema: { type: 'object', properties: { id: { type: 'number', description: 'Global styles post ID' } }, required: ['id'] }},
+  { name: 'wp_update_global_styles', _category: 'fse', description: 'Use to update global styles (colors, typography, spacing etc). Write — blocked by WP_READ_ONLY.',
+        inputSchema: { type: 'object', properties: { id: { type: 'number', description: 'Global styles post ID' }, styles: { type: 'object', description: 'Styles object (colors, typography, spacing, etc.)' }, settings: { type: 'object', description: 'Settings object (color palette, font families, etc.)' }, title: { type: 'string' } }, required: ['id'] }},
+  { name: 'wp_get_global_styles_variations', _category: 'fse', description: 'Use to list available global style variations for a theme. Read-only.',
+        inputSchema: { type: 'object', properties: { stylesheet: { type: 'string', description: 'Theme stylesheet slug' } }, required: ['stylesheet'] }},
+  { name: 'wp_list_block_patterns', _category: 'fse', description: 'Use to list all registered block patterns. Read-only.',
+        inputSchema: { type: 'object', properties: {} }},
+  { name: 'wp_get_block_pattern', _category: 'fse', description: 'Use to get a single block pattern by name. Filters from the full list. Read-only.',
+        inputSchema: { type: 'object', properties: { name: { type: 'string', description: 'Pattern name (e.g. "core/query-standard-posts")' } }, required: ['name'] }},
+  { name: 'wp_create_block_pattern', _category: 'fse', description: 'Use to create a custom block pattern. Write — blocked by WP_READ_ONLY.',
+        inputSchema: { type: 'object', properties: { title: { type: 'string' }, content: { type: 'string', description: 'Block markup' }, name: { type: 'string', description: 'Unique pattern name' }, description: { type: 'string' }, categories: { type: 'array', items: { type: 'string' }, description: 'Pattern categories' }, keywords: { type: 'array', items: { type: 'string' }, description: 'Search keywords' } }, required: ['title', 'content', 'name'] }},
+  { name: 'wp_delete_block_pattern', _category: 'fse', description: 'Use to delete a custom block pattern. Destructive — blocked by WP_DISABLE_DELETE.',
+        inputSchema: { type: 'object', properties: { id: { type: 'number', description: 'Block pattern post ID' }, force: { type: 'boolean' } }, required: ['id'] }},
+  { name: 'wp_list_navigation_menus', _category: 'fse', description: 'Use to list navigation menus. Supports search and status filtering. Read-only.',
+        inputSchema: { type: 'object', properties: { per_page: { type: 'number' }, page: { type: 'number' }, status: { type: 'string', enum: ['publish', 'draft', 'any'] }, search: { type: 'string' } }}},
+  { name: 'wp_get_navigation_menu', _category: 'fse', description: 'Use to get a single navigation menu by ID. Read-only.',
+        inputSchema: { type: 'object', properties: { id: { type: 'number', description: 'Navigation menu post ID' } }, required: ['id'] }},
+  { name: 'wp_create_navigation_menu', _category: 'fse', description: 'Use to create a navigation menu. Write — blocked by WP_READ_ONLY.',
+        inputSchema: { type: 'object', properties: { title: { type: 'string', description: 'Menu title' }, content: { type: 'string', description: 'Block markup for menu items' }, status: { type: 'string', enum: ['publish', 'draft'] } }, required: ['title'] }},
+  { name: 'wp_update_navigation_menu', _category: 'fse', description: 'Use to update a navigation menu. Write — blocked by WP_READ_ONLY.',
+        inputSchema: { type: 'object', properties: { id: { type: 'number', description: 'Navigation menu post ID' }, title: { type: 'string' }, content: { type: 'string' }, status: { type: 'string', enum: ['publish', 'draft'] } }, required: ['id'] }},
+  { name: 'wp_delete_navigation_menu', _category: 'fse', description: 'Use to delete a navigation menu. Destructive — blocked by WP_DISABLE_DELETE.',
+        inputSchema: { type: 'object', properties: { id: { type: 'number' }, force: { type: 'boolean' } }, required: ['id'] }},
+  { name: 'wp_list_widgets', _category: 'fse', description: 'Use to list all widgets. Supports filtering by sidebar ID. Read-only.',
+        inputSchema: { type: 'object', properties: { sidebar: { type: 'string', description: 'Sidebar ID to filter by' } }}},
+  { name: 'wp_get_widget', _category: 'fse', description: 'Use to get a single widget by ID. Read-only.',
+        inputSchema: { type: 'object', properties: { id: { type: 'string', description: 'Widget ID' } }, required: ['id'] }},
+  { name: 'wp_update_widget', _category: 'fse', description: 'Use to update a widget. Write — blocked by WP_READ_ONLY.',
+        inputSchema: { type: 'object', properties: { id: { type: 'string', description: 'Widget ID' }, id_base: { type: 'string', description: 'Widget type base ID' }, sidebar: { type: 'string', description: 'Target sidebar ID' }, instance: { type: 'object', description: 'Widget settings object' }, rendered: { type: 'string', description: 'Block content for block-based widgets' } }, required: ['id'] }},
+  { name: 'wp_delete_widget', _category: 'fse', description: 'Use to delete a widget. Destructive — blocked by WP_DISABLE_DELETE.',
+        inputSchema: { type: 'object', properties: { id: { type: 'string', description: 'Widget ID' }, force: { type: 'boolean' } }, required: ['id'] }}
+];
+
+export const handlers = {};
+
+handlers['wp_list_templates'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, sanitizeParams, name } = rt;
+  validateInput(args, { per_page: { type: 'number', min: 1, max: 100 }, page: { type: 'number', min: 1 }, post_type: { type: 'string' } });
+  const { per_page = 10, page = 1, post_type } = args;
+  let ep = `/templates?per_page=${per_page}&page=${page}`;
+  if (post_type) ep += `&post_type=${encodeURIComponent(post_type)}`;
+  const templates = await wpApiCall(ep);
+  result = json({ total: templates.length, page, templates: templates.map(t => ({ id: t.id, slug: t.slug, title: t.title?.rendered || t.title?.raw || t.title, description: t.description, status: t.status, type: t.type, theme: t.theme, has_theme_file: t.has_theme_file })) });
+  auditLog({ tool: name, action: 'list', status: 'success', latency_ms: Date.now() - t0, params: sanitizeParams(args) });
+  return result;
+};
+handlers['wp_get_template'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  validateInput(args, { id: { type: 'string', required: true } });
+  const t = await wpApiCall(`/templates/${encodeURIComponent(args.id)}`);
+  result = json({ id: t.id, slug: t.slug, title: t.title?.rendered || t.title?.raw || t.title, content: t.content?.raw || t.content?.rendered || '', description: t.description, status: t.status, type: t.type, theme: t.theme, has_theme_file: t.has_theme_file, modified: t.modified });
+  auditLog({ tool: name, action: 'get', status: 'success', latency_ms: Date.now() - t0, params: { id: args.id } });
+  return result;
+};
+handlers['wp_create_template'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  validateInput(args, { slug: { type: 'string', required: true } });
+  const { slug, title, content, description, status = 'publish' } = args;
+  const data = { slug };
+  if (title) data.title = title; if (content) data.content = content; if (description) data.description = description; if (status) data.status = status;
+  const nt = await wpApiCall('/templates', { method: 'POST', body: JSON.stringify(data) });
+  result = json({ success: true, message: 'Template created', template: { id: nt.id, slug: nt.slug, title: nt.title?.rendered || nt.title?.raw || nt.title, status: nt.status } });
+  auditLog({ tool: name, action: 'create', status: 'success', latency_ms: Date.now() - t0, params: { slug, status } });
+  return result;
+};
+handlers['wp_update_template'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  validateInput(args, { id: { type: 'string', required: true } });
+  const { id, title, content, description, status } = args;
+  const data = {};
+  if (title) data.title = title; if (content) data.content = content; if (description) data.description = description; if (status) data.status = status;
+  const ut = await wpApiCall(`/templates/${encodeURIComponent(id)}`, { method: 'POST', body: JSON.stringify(data) });
+  result = json({ success: true, message: 'Template updated', template: { id: ut.id, slug: ut.slug, title: ut.title?.rendered || ut.title?.raw || ut.title, status: ut.status } });
+  auditLog({ tool: name, action: 'update', status: 'success', latency_ms: Date.now() - t0, params: { id, ...data } });
+  return result;
+};
+handlers['wp_delete_template'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  validateInput(args, { id: { type: 'string', required: true } });
+  const { id, force = true } = args;
+  await wpApiCall(`/templates/${encodeURIComponent(id)}?force=${force}`, { method: 'DELETE' });
+  result = json({ success: true, message: `Template "${id}" deleted` });
+  auditLog({ tool: name, action: 'delete', status: 'success', latency_ms: Date.now() - t0, params: { id, force } });
+  return result;
+};
+handlers['wp_list_template_parts'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, sanitizeParams, name } = rt;
+  validateInput(args, { per_page: { type: 'number', min: 1, max: 100 }, page: { type: 'number', min: 1 }, area: { type: 'string', enum: ['header', 'footer', 'general'] } });
+  const { per_page = 10, page = 1, area } = args;
+  let ep = `/template-parts?per_page=${per_page}&page=${page}`;
+  if (area) ep += `&area=${encodeURIComponent(area)}`;
+  const parts = await wpApiCall(ep);
+  result = json({ total: parts.length, page, template_parts: parts.map(t => ({ id: t.id, slug: t.slug, title: t.title?.rendered || t.title?.raw || t.title, area: t.area, description: t.description, status: t.status, theme: t.theme, has_theme_file: t.has_theme_file })) });
+  auditLog({ tool: name, action: 'list', status: 'success', latency_ms: Date.now() - t0, params: sanitizeParams(args) });
+  return result;
+};
+handlers['wp_get_template_part'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  validateInput(args, { id: { type: 'string', required: true } });
+  const tp = await wpApiCall(`/template-parts/${encodeURIComponent(args.id)}`);
+  result = json({ id: tp.id, slug: tp.slug, title: tp.title?.rendered || tp.title?.raw || tp.title, content: tp.content?.raw || tp.content?.rendered || '', area: tp.area, description: tp.description, status: tp.status, theme: tp.theme, has_theme_file: tp.has_theme_file, modified: tp.modified });
+  auditLog({ tool: name, action: 'get', status: 'success', latency_ms: Date.now() - t0, params: { id: args.id } });
+  return result;
+};
+handlers['wp_create_template_part'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  validateInput(args, { slug: { type: 'string', required: true } });
+  const { slug, title, content, area, description, status = 'publish' } = args;
+  const data = { slug };
+  if (title) data.title = title; if (content) data.content = content; if (area) data.area = area; if (description) data.description = description; if (status) data.status = status;
+  const ntp = await wpApiCall('/template-parts', { method: 'POST', body: JSON.stringify(data) });
+  result = json({ success: true, message: 'Template part created', template_part: { id: ntp.id, slug: ntp.slug, title: ntp.title?.rendered || ntp.title?.raw || ntp.title, area: ntp.area, status: ntp.status } });
+  auditLog({ tool: name, action: 'create', status: 'success', latency_ms: Date.now() - t0, params: { slug, area, status } });
+  return result;
+};
+handlers['wp_update_template_part'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  validateInput(args, { id: { type: 'string', required: true } });
+  const { id, title, content, area, description, status } = args;
+  const data = {};
+  if (title) data.title = title; if (content) data.content = content; if (area) data.area = area; if (description) data.description = description; if (status) data.status = status;
+  const utp = await wpApiCall(`/template-parts/${encodeURIComponent(id)}`, { method: 'POST', body: JSON.stringify(data) });
+  result = json({ success: true, message: 'Template part updated', template_part: { id: utp.id, slug: utp.slug, title: utp.title?.rendered || utp.title?.raw || utp.title, area: utp.area, status: utp.status } });
+  auditLog({ tool: name, action: 'update', status: 'success', latency_ms: Date.now() - t0, params: { id, ...data } });
+  return result;
+};
+handlers['wp_delete_template_part'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  validateInput(args, { id: { type: 'string', required: true } });
+  const { id, force = true } = args;
+  await wpApiCall(`/template-parts/${encodeURIComponent(id)}?force=${force}`, { method: 'DELETE' });
+  result = json({ success: true, message: `Template part "${id}" deleted` });
+  auditLog({ tool: name, action: 'delete', status: 'success', latency_ms: Date.now() - t0, params: { id, force } });
+  return result;
+};
+handlers['wp_get_global_styles'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  validateInput(args, { id: { type: 'number', required: true, min: 1 } });
+  const gs = await wpApiCall(`/global-styles/${args.id}`);
+  result = json({ id: gs.id, title: gs.title?.rendered || gs.title?.raw || gs.title, styles: gs.styles, settings: gs.settings, modified: gs.modified });
+  auditLog({ tool: name, action: 'get', status: 'success', latency_ms: Date.now() - t0, params: { id: args.id } });
+  return result;
+};
+handlers['wp_update_global_styles'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  validateInput(args, { id: { type: 'number', required: true, min: 1 } });
+  const { id, styles, settings, title } = args;
+  const data = {};
+  if (styles) data.styles = styles; if (settings) data.settings = settings; if (title) data.title = title;
+  const ugs = await wpApiCall(`/global-styles/${id}`, { method: 'POST', body: JSON.stringify(data) });
+  result = json({ success: true, message: 'Global styles updated', global_styles: { id: ugs.id, title: ugs.title?.rendered || ugs.title?.raw || ugs.title, styles: ugs.styles, settings: ugs.settings } });
+  auditLog({ tool: name, action: 'update', status: 'success', latency_ms: Date.now() - t0, params: { id } });
+  return result;
+};
+handlers['wp_get_global_styles_variations'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  validateInput(args, { stylesheet: { type: 'string', required: true } });
+  const variations = await wpApiCall(`/global-styles/themes/${encodeURIComponent(args.stylesheet)}/variations`);
+  result = json({ stylesheet: args.stylesheet, total: variations.length, variations });
+  auditLog({ tool: name, action: 'list_variations', status: 'success', latency_ms: Date.now() - t0, params: { stylesheet: args.stylesheet } });
+  return result;
+};
+handlers['wp_list_block_patterns'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  const patterns = await wpApiCall('/block-patterns/patterns');
+  result = json({ total: patterns.length, patterns: patterns.map(p => ({ name: p.name, title: p.title, description: p.description, categories: p.categories, keywords: p.keywords, blockTypes: p.blockTypes, content: p.content?.substring(0, 200) })) });
+  auditLog({ tool: name, action: 'list', status: 'success', latency_ms: Date.now() - t0 });
+  return result;
+};
+handlers['wp_get_block_pattern'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  validateInput(args, { name: { type: 'string', required: true } });
+  const allPatterns = await wpApiCall('/block-patterns/patterns');
+  const found = allPatterns.find(p => p.name === args.name);
+  if (!found) throw new Error(`Block pattern "${args.name}" not found`);
+  result = json({ name: found.name, title: found.title, description: found.description, content: found.content, categories: found.categories, keywords: found.keywords, blockTypes: found.blockTypes });
+  auditLog({ tool: name, action: 'get', status: 'success', latency_ms: Date.now() - t0, params: { name: args.name } });
+  return result;
+};
+handlers['wp_create_block_pattern'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  validateInput(args, { title: { type: 'string', required: true }, content: { type: 'string', required: true }, name: { type: 'string', required: true } });
+  const { title, content, name: patternName, description, categories, keywords } = args;
+  const data = { title, content, name: patternName };
+  if (description) data.description = description; if (categories) data.categories = categories; if (keywords) data.keywords = keywords; data.status = 'publish';
+  const np = await wpApiCall('/block-patterns', { method: 'POST', body: JSON.stringify(data) });
+  result = json({ success: true, message: 'Block pattern created', pattern: { id: np.id, name: np.name || patternName, title: np.title?.rendered || np.title?.raw || np.title || title } });
+  auditLog({ tool: name, action: 'create', status: 'success', latency_ms: Date.now() - t0, params: { name: patternName, title } });
+  return result;
+};
+handlers['wp_delete_block_pattern'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  validateInput(args, { id: { type: 'number', required: true, min: 1 } });
+  const { id, force = true } = args;
+  await wpApiCall(`/block-patterns/${id}?force=${force}`, { method: 'DELETE' });
+  result = json({ success: true, message: `Block pattern ${id} deleted` });
+  auditLog({ tool: name, action: 'delete', status: 'success', latency_ms: Date.now() - t0, params: { id, force } });
+  return result;
+};
+handlers['wp_list_navigation_menus'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, sanitizeParams, name } = rt;
+  validateInput(args, { per_page: { type: 'number', min: 1, max: 100 }, page: { type: 'number', min: 1 }, status: { type: 'string', enum: ['publish', 'draft', 'any'] }, search: { type: 'string' } });
+  const { per_page = 10, page = 1, status, search } = args;
+  let ep = `/navigation?per_page=${per_page}&page=${page}`;
+  if (status) ep += `&status=${status}`;
+  if (search) ep += `&search=${encodeURIComponent(search)}`;
+  const navs = await wpApiCall(ep);
+  result = json({ total: navs.length, page, navigation_menus: navs.map(n => ({ id: n.id, title: n.title?.rendered || n.title?.raw || n.title, status: n.status, date: n.date, modified: n.modified, slug: n.slug })) });
+  auditLog({ tool: name, action: 'list', status: 'success', latency_ms: Date.now() - t0, params: sanitizeParams(args) });
+  return result;
+};
+handlers['wp_get_navigation_menu'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  validateInput(args, { id: { type: 'number', required: true, min: 1 } });
+  const nav = await wpApiCall(`/navigation/${args.id}`);
+  result = json({ id: nav.id, title: nav.title?.rendered || nav.title?.raw || nav.title, content: nav.content?.rendered || nav.content?.raw || '', status: nav.status, date: nav.date, modified: nav.modified, slug: nav.slug });
+  auditLog({ tool: name, action: 'get', status: 'success', latency_ms: Date.now() - t0, params: { id: args.id } });
+  return result;
+};
+handlers['wp_create_navigation_menu'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  validateInput(args, { title: { type: 'string', required: true } });
+  const { title, content, status = 'publish' } = args;
+  const data = { title };
+  if (content) data.content = content; if (status) data.status = status;
+  const nn = await wpApiCall('/navigation', { method: 'POST', body: JSON.stringify(data) });
+  result = json({ success: true, message: 'Navigation menu created', navigation: { id: nn.id, title: nn.title?.rendered || nn.title?.raw || nn.title, status: nn.status } });
+  auditLog({ tool: name, action: 'create', status: 'success', latency_ms: Date.now() - t0, params: { title, status } });
+  return result;
+};
+handlers['wp_update_navigation_menu'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  validateInput(args, { id: { type: 'number', required: true, min: 1 } });
+  const { id, title, content, status } = args;
+  const data = {};
+  if (title) data.title = title; if (content) data.content = content; if (status) data.status = status;
+  const un = await wpApiCall(`/navigation/${id}`, { method: 'POST', body: JSON.stringify(data) });
+  result = json({ success: true, message: 'Navigation menu updated', navigation: { id: un.id, title: un.title?.rendered || un.title?.raw || un.title, status: un.status } });
+  auditLog({ tool: name, action: 'update', status: 'success', latency_ms: Date.now() - t0, params: { id, ...data } });
+  return result;
+};
+handlers['wp_delete_navigation_menu'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  validateInput(args, { id: { type: 'number', required: true, min: 1 } });
+  const { id, force = true } = args;
+  await wpApiCall(`/navigation/${id}?force=${force}`, { method: 'DELETE' });
+  result = json({ success: true, message: `Navigation menu ${id} deleted` });
+  auditLog({ tool: name, action: 'delete', status: 'success', latency_ms: Date.now() - t0, params: { id, force } });
+  return result;
+};
+handlers['wp_list_widgets'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, sanitizeParams, name } = rt;
+  validateInput(args, { sidebar: { type: 'string' } });
+  const { sidebar } = args;
+  let ep = '/widgets';
+  if (sidebar) ep += `?sidebar=${encodeURIComponent(sidebar)}`;
+  const widgets = await wpApiCall(ep);
+  result = json({ total: widgets.length, widgets: widgets.map(w => ({ id: w.id, id_base: w.id_base, sidebar: w.sidebar, rendered: w.rendered?.substring(0, 200) })) });
+  auditLog({ tool: name, action: 'list', status: 'success', latency_ms: Date.now() - t0, params: sanitizeParams(args) });
+  return result;
+};
+handlers['wp_get_widget'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  validateInput(args, { id: { type: 'string', required: true } });
+  const w = await wpApiCall(`/widgets/${encodeURIComponent(args.id)}`);
+  result = json({ id: w.id, id_base: w.id_base, sidebar: w.sidebar, instance: w.instance, rendered: w.rendered });
+  auditLog({ tool: name, action: 'get', status: 'success', latency_ms: Date.now() - t0, params: { id: args.id } });
+  return result;
+};
+handlers['wp_update_widget'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  validateInput(args, { id: { type: 'string', required: true } });
+  const { id, id_base, sidebar, instance, rendered } = args;
+  const data = {};
+  if (id_base) data.id_base = id_base; if (sidebar) data.sidebar = sidebar; if (instance) data.instance = instance; if (rendered) data.rendered = rendered;
+  const uw = await wpApiCall(`/widgets/${encodeURIComponent(id)}`, { method: 'PUT', body: JSON.stringify(data) });
+  result = json({ success: true, message: 'Widget updated', widget: { id: uw.id, id_base: uw.id_base, sidebar: uw.sidebar } });
+  auditLog({ tool: name, action: 'update', status: 'success', latency_ms: Date.now() - t0, params: { id, sidebar } });
+  return result;
+};
+handlers['wp_delete_widget'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  validateInput(args, { id: { type: 'string', required: true } });
+  const { id, force = true } = args;
+  await wpApiCall(`/widgets/${encodeURIComponent(id)}?force=${force}`, { method: 'DELETE' });
+  result = json({ success: true, message: `Widget "${id}" deleted` });
+  auditLog({ tool: name, action: 'delete', status: 'success', latency_ms: Date.now() - t0, params: { id, force } });
+  return result;
+};

package/src/tools/health.js

@@ -0,0 +1,160 @@
+// src/tools/health.js — health tools (8)
+// Definitions + handlers (v5.0.0 refactor Step B+C)
+
+import { json, strip } from '../shared/utils.js';
+import { validateInput } from '../shared/governance.js';
+import { rt } from '../shared/context.js';
+
+export const definitions = [
+  { name: 'wp_get_site_health_status', _category: 'health', description: 'Use to get overall site health score (good/recommended/critical) and issue counts by severity. Read-only. Requires wp-site-health REST endpoint (WP 5.6+).',
+        inputSchema: { type: 'object', properties: {} }},
+  { name: 'wp_list_site_health_issues', _category: 'health', description: 'Use to list all site health issues with label, description, severity, and type. Read-only.',
+        inputSchema: { type: 'object', properties: { severity: { type: 'string', enum: ['critical', 'recommended', 'good'], description: 'Filter by severity' } }}},
+  { name: 'wp_get_site_health_info', _category: 'health', description: 'Use to get system info: PHP version, MySQL version, memory limit, active extensions, WP constants. Read-only.',
+        inputSchema: { type: 'object', properties: { section: { type: 'string', description: 'Filter by section (e.g. "wp-server", "wp-database", "wp-constants", "wp-paths-sizes")' } }}},
+  { name: 'wp_get_debug_log', _category: 'health', description: 'Use to read the last N lines of the WordPress debug.log. Requires the mcp-diagnostics companion mu-plugin. Read-only.',
+        inputSchema: { type: 'object', properties: { lines: { type: 'number', description: 'default 100, max 500' }, level: { type: 'string', enum: ['error', 'warning', 'notice', 'all'], description: 'Filter by log level (default all)' } }}},
+  { name: 'wp_get_cron_events', _category: 'health', description: 'Use to list all scheduled WP-Cron events with hook, args, schedule, next run, and overdue status. Read-only.',
+        inputSchema: { type: 'object', properties: { hook: { type: 'string', description: 'Filter by hook name' } }}},
+  { name: 'wp_get_transients', _category: 'health', description: 'Use to list database transients with key, expiration, and approximate size. Supports filtering expired. Read-only.',
+        inputSchema: { type: 'object', properties: { filter: { type: 'string', enum: ['all', 'expired', 'active'], description: 'Filter by expiration status (default all)' }, search: { type: 'string', description: 'Search transient keys' }, per_page: { type: 'number', description: 'default 50, max 200' } }}},
+  { name: 'wp_check_php_compatibility', _category: 'health', description: 'Use to check each active plugin PHP version requirement vs current PHP. Reports compatible/incompatible/unknown. Read-only.',
+        inputSchema: { type: 'object', properties: {} }},
+  { name: 'wp_get_active_hooks', _category: 'health', description: 'Use to list registered WordPress actions and filters with callbacks and priorities. Requires mcp-diagnostics companion mu-plugin. Read-only.',
+        inputSchema: { type: 'object', properties: { type: { type: 'string', enum: ['actions', 'filters', 'all'], description: 'Hook type (default all)' }, search: { type: 'string', description: 'Search hook names' }, per_page: { type: 'number', description: 'default 50, max 200' } }}}
+];
+
+export const handlers = {};
+
+handlers['wp_get_site_health_status'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  const tests = await wpApiCall('/tests/background', { basePath: '/wp-json/wp-site-health/v1' });
+  const issues = Array.isArray(tests) ? tests : [];
+  const counts = { critical: 0, recommended: 0, good: 0 };
+  issues.forEach(i => { if (counts[i.status] !== undefined) counts[i.status]++; });
+  const total = issues.length;
+  const score = total === 0 ? 'good' : counts.critical > 0 ? 'critical' : counts.recommended > 0 ? 'recommended' : 'good';
+  result = json({ score, total_issues: total, counts, summary: `${counts.critical} critical, ${counts.recommended} recommended, ${counts.good} good` });
+  auditLog({ tool: name, action: 'read', status: 'success', latency_ms: Date.now() - t0 });
+  return result;
+};
+handlers['wp_list_site_health_issues'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  const { severity } = args;
+  const allTests = await wpApiCall('/tests/background', { basePath: '/wp-json/wp-site-health/v1' });
+  let issues = Array.isArray(allTests) ? allTests : [];
+  if (severity) issues = issues.filter(i => i.status === severity);
+  result = json({ total: issues.length, filter: severity || 'all', issues: issues.map(i => ({ label: i.label, status: i.status, badge: i.badge?.label, description: strip(i.description || '').substring(0, 300), actions: strip(i.actions || '').substring(0, 200), test: i.test })) });
+  auditLog({ tool: name, action: 'list', status: 'success', latency_ms: Date.now() - t0, params: { severity } });
+  return result;
+};
+handlers['wp_get_site_health_info'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  const { section } = args;
+  const info = await wpApiCall('/info', { basePath: '/wp-json/wp-site-health/v1' });
+  if (section && info[section]) {
+    result = json({ section, label: info[section].label, fields: info[section].fields });
+  } else if (section) {
+    const available = Object.keys(info).filter(k => typeof info[k] === 'object' && info[k].label);
+    throw new Error(`Section "${section}" not found. Available: ${available.join(', ')}`);
+  } else {
+    const summary = {};
+    for (const [key, val] of Object.entries(info)) {
+      if (val && typeof val === 'object' && val.label) {
+        const fields = val.fields || {};
+        const fieldSummary = {};
+        for (const [fk, fv] of Object.entries(fields)) {
+          fieldSummary[fk] = fv.value || fv.debug || '';
+        }
+        summary[key] = { label: val.label, fields: fieldSummary };
+      }
+    }
+    result = json(summary);
+  }
+  auditLog({ tool: name, action: 'read', status: 'success', latency_ms: Date.now() - t0, params: { section } });
+  return result;
+};
+handlers['wp_get_debug_log'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, log, auditLog, name } = rt;
+  const { lines = 100, level = 'all' } = args;
+  validateInput(args, { lines: { type: 'number', min: 1, max: 500 }, level: { type: 'string', enum: ['error', 'warning', 'notice', 'all'] } });
+  const logData = await wpApiCall(`/debug-log?lines=${Math.min(lines, 500)}&level=${encodeURIComponent(level)}`, { basePath: '/wp-json/mcp-diagnostics/v1' });
+  result = json({ lines_returned: logData.lines?.length || 0, total_lines: logData.total_lines || 0, level, lines: logData.lines || [], file_size: logData.file_size || null, last_modified: logData.last_modified || null });
+  auditLog({ tool: name, action: 'read', status: 'success', latency_ms: Date.now() - t0, params: { lines, level } });
+  return result;
+};
+handlers['wp_get_cron_events'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  const { hook } = args;
+  const cronData = await wpApiCall('/cron-events', { basePath: '/wp-json/mcp-diagnostics/v1' });
+  let events = Array.isArray(cronData) ? cronData : cronData.events || [];
+  if (hook) events = events.filter(e => e.hook === hook || (e.hook && e.hook.includes(hook)));
+  const now = Math.floor(Date.now() / 1000);
+  result = json({ total: events.length, filter: hook || null, events: events.map(e => ({ hook: e.hook, args: e.args, schedule: e.schedule || 'single', interval: e.interval || null, next_run: e.next_run, next_run_date: e.next_run ? new Date(e.next_run * 1000).toISOString() : null, overdue: e.next_run ? e.next_run < now : false })) });
+  auditLog({ tool: name, action: 'list', status: 'success', latency_ms: Date.now() - t0, params: { hook } });
+  return result;
+};
+handlers['wp_get_transients'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  const { filter = 'all', search, per_page = 50 } = args;
+  validateInput(args, { filter: { type: 'string', enum: ['all', 'expired', 'active'] }, per_page: { type: 'number', min: 1, max: 200 } });
+  let ep = `/transients?filter=${filter}&per_page=${Math.min(per_page, 200)}`;
+  if (search) ep += `&search=${encodeURIComponent(search)}`;
+  const transientData = await wpApiCall(ep, { basePath: '/wp-json/mcp-diagnostics/v1' });
+  const transients = Array.isArray(transientData) ? transientData : transientData.transients || [];
+  result = json({ total: transients.length, filter, transients: transients.map(t => ({ key: t.key, expiration: t.expiration, expiration_date: t.expiration ? new Date(t.expiration * 1000).toISOString() : 'no expiry', expired: t.expiration ? t.expiration < Math.floor(Date.now() / 1000) : false, size_bytes: t.size_bytes || null })) });
+  auditLog({ tool: name, action: 'list', status: 'success', latency_ms: Date.now() - t0, params: { filter, search } });
+  return result;
+};
+handlers['wp_check_php_compatibility'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  const plugins = await wpApiCall('/plugins');
+  const siteHealth = await wpApiCall('/info', { basePath: '/wp-json/wp-site-health/v1' });
+  let phpVersion = 'unknown';
+  if (siteHealth?.['wp-server']?.fields?.php_version) {
+    phpVersion = siteHealth['wp-server'].fields.php_version.value || siteHealth['wp-server'].fields.php_version.debug || 'unknown';
+  }
+  const activePlugins = Array.isArray(plugins) ? plugins.filter(p => p.status === 'active') : [];
+  const report = activePlugins.map(p => {
+    const required = p.requires_php || null;
+    let compatible = 'unknown';
+    if (required && phpVersion !== 'unknown') {
+      const reqParts = required.split('.').map(Number);
+      const curParts = phpVersion.split('.').map(Number);
+      compatible = curParts[0] > reqParts[0] || (curParts[0] === reqParts[0] && (curParts[1] || 0) >= (reqParts[1] || 0)) ? 'compatible' : 'incompatible';
+    }
+    return { plugin: p.plugin || p.textdomain, name: p.name, version: p.version, requires_php: required, status: compatible };
+  });
+  const incompatible = report.filter(r => r.status === 'incompatible').length;
+  result = json({ php_version: phpVersion, total_active: report.length, incompatible_count: incompatible, plugins: report });
+  auditLog({ tool: name, action: 'check', status: 'success', latency_ms: Date.now() - t0 });
+  return result;
+};
+handlers['wp_get_active_hooks'] = async (args) => {
+  const t0 = Date.now();
+  let result;
+  const { wpApiCall, auditLog, name } = rt;
+  const { type = 'all', search, per_page = 50 } = args;
+  validateInput(args, { type: { type: 'string', enum: ['actions', 'filters', 'all'] }, per_page: { type: 'number', min: 1, max: 200 } });
+  let ep = `/hooks?type=${type}&per_page=${Math.min(per_page, 200)}`;
+  if (search) ep += `&search=${encodeURIComponent(search)}`;
+  const hookData = await wpApiCall(ep, { basePath: '/wp-json/mcp-diagnostics/v1' });
+  const hooks = Array.isArray(hookData) ? hookData : hookData.hooks || [];
+  result = json({ total: hooks.length, type, hooks: hooks.map(h => ({ name: h.name, type: h.type, callbacks: (h.callbacks || []).map(cb => ({ function: cb.function, priority: cb.priority, accepted_args: cb.accepted_args })) })) });
+  auditLog({ tool: name, action: 'list', status: 'success', latency_ms: Date.now() - t0, params: { type, search } });
+  return result;
+};

package/src/tools/index.js

@@ -0,0 +1,96 @@
+/**
+ * Tool Loader — aggregates definitions and handlers from all category modules.
+ * v5.0.0 refactor Steps B+C.
+ */
+
+import * as content from './content.js';
+import * as core from './core.js';
+import * as workflow from './workflow.js';
+import { createWorkflowHandler } from './workflow.js';
+import * as media from './media.js';
+import * as taxonomy from './taxonomy.js';
+import * as comments from './comments.js';
+import * as users from './users.js';
+import * as seo from './seo.js';
+import * as plugins from './plugins.js';
+import * as links from './links.js';
+import * as woocommerce from './woocommerce.js';
+import * as intelligence from './intelligence.js';
+import * as fse from './fse.js';
+import * as health from './health.js';
+import * as performance from './performance.js';
+import * as schema from './schema.js';
+import * as security from './security.js';
+import * as editorial from './editorial.js';
+
+/** All tool modules */
+export const toolModules = [
+  content, core, workflow, media, taxonomy, comments,
+  users, seo, plugins, links, woocommerce, intelligence,
+  fse, health, performance, schema, security, editorial,
+];
+
+/** All static definitions (175 tools), unfiltered */
+export const ALL_DEFINITIONS = toolModules.flatMap(m => m.definitions);
+
+/** All handlers merged into a single lookup */
+export const allHandlers = Object.assign(
+  {},
+  content.handlers, core.handlers, workflow.handlers,
+  media.handlers, taxonomy.handlers, comments.handlers,
+  users.handlers, seo.handlers, plugins.handlers,
+  links.handlers, woocommerce.handlers, intelligence.handlers,
+  fse.handlers, health.handlers, performance.handlers,
+  schema.handlers, security.handlers, editorial.handlers,
+);
+
+// Plugin-intelligence tools: only shown when WP_ENABLE_PLUGIN_INTELLIGENCE=true
+const PLUGIN_INTEL_TOOLS = [
+  'wp_get_rendered_head', 'wp_audit_rendered_seo', 'wp_get_pillar_content',
+  'wp_audit_schema_plugins', 'wp_get_seo_score', 'wp_get_twitter_meta'
+];
+
+// Editorial workflow tools: only shown when WP_REQUIRE_APPROVAL=true
+const EDITORIAL_TOOLS = ['wp_submit_for_review', 'wp_approve_post', 'wp_reject_post'];
+
+function getEnabledCategories() {
+  return process.env.WP_TOOL_CATEGORIES
+    ?.split(',')
+    .map(s => s.trim().toLowerCase())
+    .filter(Boolean) ?? null;
+}
+
+/**
+ * Return filtered tool definitions — mirrors getFilteredTools() from index.js.
+ */
+export function getTools(opts = {}) {
+  let tools = ALL_DEFINITIONS.filter(tool => {
+    const n = tool.name;
+    if (n.startsWith('wc_') && !process.env.WC_CONSUMER_KEY) return false;
+    if (EDITORIAL_TOOLS.includes(n) && process.env.WP_REQUIRE_APPROVAL !== 'true') return false;
+    if (PLUGIN_INTEL_TOOLS.includes(n) && process.env.WP_ENABLE_PLUGIN_INTELLIGENCE !== 'true') return false;
+    return true;
+  });
+
+  if (opts.pluginTools && opts.pluginTools.length > 0) {
+    const pluginTools = opts.pluginTools.map(t => t._category ? t : { ...t, _category: 'plugins' });
+    tools = [...tools, ...pluginTools];
+  }
+
+  const enabledCats = getEnabledCategories();
+  if (enabledCats !== null && enabledCats.length > 0) {
+    tools = tools.filter(t => t._category === 'core' || enabledCats.includes(t._category ?? 'core'));
+  }
+
+  return tools;
+}
+
+/**
+ * Get a handler function by tool name.
+ */
+export function getHandler(name) {
+  return allHandlers[name] || null;
+}
+
+// Late-bind wp_run_workflow to avoid circular import (workflow.js → index.js)
+allHandlers['wp_run_workflow'] = createWorkflowHandler(getHandler);