@adsim/wordpress-mcp-server 5.1.0 → 5.4.0

package/README.md

@@ -10,7 +10,7 @@
 
 The enterprise governance layer for Claude-to-WordPress integrations — secure, auditable, and multi-site.
 
-**v5.1.0 Enterprise** · 175 tools · ~1101 Vitest tests · GitHub Actions CI
+**v5.3.1 Enterprise** · 176 tools · ~1109 Vitest tests · GitHub Actions CI
 
 ---
 
@@ -1300,6 +1300,22 @@ npx @modelcontextprotocol/inspector node index.js
 
 ## Changelog
 
+### v5.3.1 (2026-03-11) — ACF REST Integration Fix
+
+- Fix: `wp_get_post` and `wp_get_page` now include `acf_fields` from WP REST `acf` field
+- Fix: `wp_get_post_meta` includes `acf_fields` alongside meta via `?_fields=meta,acf`
+- Fix: `acf_get_fields` second fallback via `wp/v2?_fields=acf` when acf/v3 returns empty
+- Hint displayed when ACF data is empty (Show in REST API diagnostic)
+- 176 tools · ~1109 Vitest tests
+
+### v5.3.0 (2026-03-11) — ACF Fallback + Post Meta
+
+- `wp_get_post_meta`: generic post meta reader — ACF, Elementor, Yoast, any custom meta
+- ACF adapter: WP Core meta fallback when acf/v3 returns 404 (ACF free support)
+- ACF adapter: diagnostic warning with causes when fields are empty
+- Auto-parse JSON meta values (_elementor_data, etc.)
+- 176 tools · ~1109 Vitest tests
+
 ### v5.1.0 (2026-03-11) — Workflow Orchestrator
 
 - `wp_run_workflow`: execute named or custom tool sequences in a single call

package/companion/mcp-diagnostics.php

@@ -140,6 +140,34 @@ function mcp_diagnostics_register_routes() {
 		),
 	) );
 
+	// ── SEO meta direct write (bypasses Yoast REST API block) ──
+	register_rest_route( $namespace, '/seo-meta/(?P<post_id>\d+)', array(
+		array(
+			'methods'             => 'GET',
+			'callback'            => 'mcp_diagnostics_seo_meta_get',
+			'permission_callback' => 'mcp_diagnostics_schema_permission_check',
+			'args'                => array(
+				'post_id' => array(
+					'type'              => 'integer',
+					'required'          => true,
+					'sanitize_callback' => 'absint',
+				),
+			),
+		),
+		array(
+			'methods'             => 'POST',
+			'callback'            => 'mcp_diagnostics_seo_meta_set',
+			'permission_callback' => 'mcp_diagnostics_schema_permission_check',
+			'args'                => array(
+				'post_id' => array(
+					'type'              => 'integer',
+					'required'          => true,
+					'sanitize_callback' => 'absint',
+				),
+			),
+		),
+	) );
+
 	// ── Polylang Free REST fallback ──
 	register_rest_route( $namespace, '/polylang/languages', array(
 		'methods'             => 'GET',
@@ -791,6 +819,143 @@ function mcp_schema_output_jsonld() {
 	echo '<script type="application/ld+json">' . $schema . '</script>' . "\n";
 }
 
+// ============================================================
+// SEO Meta direct write — bypasses Yoast REST API block
+// ============================================================
+
+/**
+ * Allowed SEO meta keys grouped by plugin.
+ * Only these keys can be written via the direct endpoint.
+ */
+function mcp_diagnostics_seo_allowed_keys() {
+	return array(
+		// Yoast SEO
+		'_yoast_wpseo_focuskw',
+		'_yoast_wpseo_title',
+		'_yoast_wpseo_metadesc',
+		'_yoast_wpseo_canonical',
+		'_yoast_wpseo_meta-robots-noindex',
+		'_yoast_wpseo_meta-robots-nofollow',
+		// RankMath
+		'rank_math_title',
+		'rank_math_description',
+		'rank_math_focus_keyword',
+		'rank_math_canonical_url',
+		// SEOPress
+		'_seopress_titles_title',
+		'_seopress_titles_desc',
+		'_seopress_analysis_target_kw',
+		'_seopress_robots_canonical',
+		'_seopress_robots_index',
+		'_seopress_robots_follow',
+		// All in One SEO
+		'_aioseo_title',
+		'_aioseo_description',
+		'_aioseo_keywords',
+		'_aioseo_canonical_url',
+		'_aioseo_noindex',
+		'_aioseo_nofollow',
+	);
+}
+
+/**
+ * GET /mcp-diagnostics/v1/seo-meta/{post_id}
+ * Read SEO meta fields directly from post_meta.
+ */
+function mcp_diagnostics_seo_meta_get( $request ) {
+	$post_id = $request->get_param( 'post_id' );
+	$post    = get_post( $post_id );
+
+	if ( ! $post ) {
+		return new WP_Error( 'not_found', __( 'Post not found.' ), array( 'status' => 404 ) );
+	}
+
+	$allowed = mcp_diagnostics_seo_allowed_keys();
+	$meta    = array();
+
+	foreach ( $allowed as $key ) {
+		$val = get_post_meta( $post_id, $key, true );
+		if ( $val !== '' && $val !== false ) {
+			$meta[ $key ] = $val;
+		}
+	}
+
+	return new WP_REST_Response( array(
+		'post_id' => $post_id,
+		'meta'    => $meta,
+		'source'  => 'direct_post_meta',
+	), 200 );
+}
+
+/**
+ * POST /mcp-diagnostics/v1/seo-meta/{post_id}
+ * Write SEO meta fields directly via update_post_meta().
+ * Bypasses Yoast's REST API write block.
+ *
+ * Accepts JSON body: { "meta": { "_yoast_wpseo_focuskw": "value", ... } }
+ */
+function mcp_diagnostics_seo_meta_set( $request ) {
+	if ( mcp_diagnostics_is_read_only() ) {
+		return new WP_Error( 'read_only', __( 'Site is in read-only mode.' ), array( 'status' => 403 ) );
+	}
+
+	$post_id = $request->get_param( 'post_id' );
+	$post    = get_post( $post_id );
+
+	if ( ! $post ) {
+		return new WP_Error( 'not_found', __( 'Post not found.' ), array( 'status' => 404 ) );
+	}
+
+	$body = $request->get_json_params();
+	$meta = isset( $body['meta'] ) ? $body['meta'] : array();
+
+	if ( empty( $meta ) || ! is_array( $meta ) ) {
+		return new WP_Error( 'invalid_body', __( 'Request body must contain a "meta" object with key-value pairs.' ), array( 'status' => 400 ) );
+	}
+
+	$allowed = mcp_diagnostics_seo_allowed_keys();
+	$written = array();
+	$rejected = array();
+
+	foreach ( $meta as $key => $value ) {
+		if ( ! in_array( $key, $allowed, true ) ) {
+			$rejected[] = $key;
+			continue;
+		}
+
+		// Sanitize: URLs get esc_url_raw, everything else gets sanitize_text_field
+		if ( strpos( $key, 'canonical' ) !== false ) {
+			$value = esc_url_raw( $value );
+		} else {
+			$value = sanitize_text_field( $value );
+		}
+
+		update_post_meta( $post_id, $key, $value );
+		$written[] = $key;
+	}
+
+	// Verify the writes
+	$verified = array();
+	foreach ( $written as $key ) {
+		$actual = get_post_meta( $post_id, $key, true );
+		$verified[ $key ] = $actual;
+	}
+
+	$response = array(
+		'post_id'  => $post_id,
+		'written'  => $written,
+		'verified' => $verified,
+		'source'   => 'direct_update_post_meta',
+	);
+
+	if ( ! empty( $rejected ) ) {
+		$response['rejected'] = $rejected;
+		$response['warning']  = 'Some keys were rejected (not in allowed SEO meta keys list).';
+	}
+
+	return new WP_REST_Response( $response, 200 );
+}
+
 // ============================================================
 // Polylang Free REST fallback endpoints
 // ============================================================

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adsim/wordpress-mcp-server",
-  "version": "5.1.0",
+  "version": "5.4.0",
   "description": "Enterprise WordPress MCP Server — 180 tools, modular architecture, governance, audit trail, WooCommerce, Schema.org, multilingual.",
   "type": "module",
   "main": "index.js",

package/src/plugins/adapters/acf/acfAdapter.js

@@ -33,9 +33,37 @@ async function handleGetFields(args, apiRequest) {
   const t0 = Date.now();
   const { id, post_type = 'posts', fields, mode = 'compact' } = args;
 
-  const data = await apiRequest(`/${post_type}/${id}`, { basePath: '/wp-json/acf/v3' });
+  let acfData = {};
+  let source = 'acf_rest_api';
+  let fallbackMeta = null;
+
+  try {
+    const data = await apiRequest(`/${post_type}/${id}`, { basePath: '/wp-json/acf/v3' });
+    acfData = data?.acf ?? data ?? {};
+  } catch (e) {
+    // Fallback: read from WP Core meta if acf/v3 returns 404
+    if (e.message.includes('404') || e.message.includes('rest_no_route')) {
+      try {
+        const post = await apiRequest(`/${post_type}/${id}?_fields=meta`, { basePath: '/wp-json/wp/v2' });
+        acfData = post?.meta ?? {};
+        source = 'wp_core_meta';
+        fallbackMeta = acfData;
+      } catch { throw e; }
+    } else {
+      throw e;
+    }
+  }
 
-  let acfData = data?.acf ?? data ?? {};
+  // Second fallback: try WP REST acf field if acf/v3 returned empty
+  if (Object.keys(acfData).length === 0 && source === 'acf_rest_api') {
+    try {
+      const post = await apiRequest(`/${post_type}/${id}?_fields=acf`, { basePath: '/wp-json/wp/v2' });
+      if (post?.acf && Object.keys(post.acf).length > 0) {
+        acfData = post.acf;
+        source = 'wp_rest_acf_field';
+      }
+    } catch { /* ignore — will show diagnostic below */ }
+  }
 
   // Filter to requested keys
   if (fields && fields.length > 0) {
@@ -46,8 +74,32 @@ async function handleGetFields(args, apiRequest) {
     acfData = filtered;
   }
 
+  // Diagnostic if empty
+  if (Object.keys(acfData).length === 0) {
+    const result = {
+      id, post_type, fields_count: 0, acf: {},
+      source,
+      warning: 'No ACF fields returned. Possible causes:',
+      causes: [
+        '1. Field group has Show in REST API = No → Enable in ACF Admin > Field Groups > Settings',
+        '2. ACF free version without REST support → Upgrade to ACF Pro or add acf_rest_api filter',
+        '3. Post type not in field group location rules',
+        '4. Post ID incorrect'
+      ],
+    };
+    if (fallbackMeta !== null) result.fallback_meta = fallbackMeta;
+    auditLog({ tool: 'acf_get_fields', action: 'read_acf_fields', target: id, status: 'empty', latency_ms: Date.now() - t0 });
+    return json(result);
+  }
+
+  const responseData = { id, post_type, fields_count: Object.keys(acfData).length, acf: acfData };
+  if (source !== 'acf_rest_api') {
+    responseData.source = source;
+    responseData.warning = 'ACF REST API not available. Data read from WP Core meta. Enable Show in REST API in field group settings.';
+  }
+
   const guarded = applyContextGuard(
-    { id, post_type, fields_count: Object.keys(acfData).length, acf: acfData },
+    responseData,
     { toolName: 'acf_get_fields', mode, maxChars: 30000 }
   );
 

package/src/tools/content.js

@@ -1,4 +1,4 @@
-// src/tools/content.js — content tools (12)
+// src/tools/content.js — content tools (13)
 // Definitions + handlers (v5.0.0 refactor Step B+C)
 
 import { json, strip, buildPaginationMeta, validateBlocks } from '../shared/utils.js';
@@ -7,7 +7,7 @@ import { rt } from '../shared/context.js';
 
 export const definitions = [
   { name: 'wp_list_posts', _category: 'content', description: 'Use to browse/filter posts by status, category, tag, author, or search. Read-only. Hint: use mode=\'summary\' for listings, \'ids_only\' for batch ops.', inputSchema: { type: 'object', properties: { per_page: { type: 'number', default: 10 }, page: { type: 'number', default: 1 }, status: { type: 'string', default: 'publish' }, orderby: { type: 'string', default: 'date' }, order: { type: 'string', default: 'desc' }, categories: { type: 'string' }, tags: { type: 'string' }, search: { type: 'string' }, author: { type: 'number' }, mode: { type: 'string', default: 'full', description: 'full=all fields, summary=id/title/slug/date/status/link only, ids_only=flat ID array' } }}},
-  { name: 'wp_get_post', _category: 'content', description: 'Use to read a single post with full content and meta. Read-only. Hint: use content_format=\'links_only\' for link audits (~800 chars vs 187k), \'text\' for rewrites, fields=[\'id\',\'title\',\'meta\'] for SEO-only.', inputSchema: { type: 'object', properties: { id: { type: 'number' }, fields: { type: 'array', items: { type: 'string' }, description: 'Return only specified fields (id,title,content,excerpt,slug,status,date,modified,categories,tags,author,featured_media,meta,link). Omit for all.' }, content_format: { type: 'string', default: 'html', description: 'html=raw HTML (truncated at WP_MAX_CONTENT_CHARS), text=plain text, links_only=extract internal links only' } }, required: ['id'] }},
+  { name: 'wp_get_post', _category: 'content', description: 'Use to read a single post with full content and meta. Read-only. Hint: use content_format=\'links_only\' for link audits (~800 chars vs 187k), \'text\' for rewrites, fields=[\'id\',\'title\',\'meta\'] for SEO-only.', inputSchema: { type: 'object', properties: { id: { type: 'number' }, fields: { type: 'array', items: { type: 'string' }, description: 'Return only specified fields (id,title,content,excerpt,slug,status,date,modified,categories,tags,author,featured_media,meta,link). Omit for all.' }, content_format: { type: 'string', enum: ['html', 'text', 'links_only', 'raw'], default: 'html', description: 'html=rendered HTML (truncated at WP_MAX_CONTENT_CHARS), text=plain text, links_only=extract internal links only, raw=Gutenberg source with block comments via ?context=edit (NEVER truncated — required before any read-modify-write of content)' } }, required: ['id'] }},
   { name: 'wp_create_post', _category: 'content', description: 'Use to create a post (defaults to draft). Accepts title, HTML content, categories, tags, featured_media, meta. Write — blocked by WP_READ_ONLY.', inputSchema: { type: 'object', properties: { title: { type: 'string' }, content: { type: 'string' }, status: { type: 'string', default: 'draft' }, excerpt: { type: 'string' }, categories: { type: 'array', items: { type: 'number' } }, tags: { type: 'array', items: { type: 'number' } }, slug: { type: 'string' }, featured_media: { type: 'number' }, meta: { type: 'object' }, author: { type: 'number' } }, required: ['title', 'content'] }},
   { name: 'wp_update_post', _category: 'content', description: 'Use to modify any post field — only provided fields change. Write — blocked by WP_READ_ONLY.', inputSchema: { type: 'object', properties: { id: { type: 'number' }, title: { type: 'string' }, content: { type: 'string' }, status: { type: 'string' }, excerpt: { type: 'string' }, categories: { type: 'array', items: { type: 'number' } }, tags: { type: 'array', items: { type: 'number' } }, slug: { type: 'string' }, featured_media: { type: 'number' }, meta: { type: 'object' }, author: { type: 'number' } }, required: ['id'] }},
   { name: 'wp_delete_post', _category: 'content', description: 'Use to trash or permanently delete a post. Write — blocked by WP_READ_ONLY, WP_DISABLE_DELETE.', inputSchema: { type: 'object', properties: { id: { type: 'number' }, force: { type: 'boolean', default: false }, confirmation_token: { type: 'string', description: 'Confirmation token returned by the first call when WP_CONFIRM_DESTRUCTIVE=true' } }, required: ['id'] }},
@@ -19,7 +19,9 @@ export const definitions = [
   { name: 'wp_list_pages', _category: 'content', description: 'Use to browse pages with hierarchy and templates. Supports parent filter, menu_order sort. Read-only. Hint: use mode=\'summary\' for listings, \'ids_only\' for batch ops.', inputSchema: { type: 'object', properties: { per_page: { type: 'number', default: 10 }, page: { type: 'number', default: 1 }, status: { type: 'string', default: 'publish' }, parent: { type: 'number' }, orderby: { type: 'string', default: 'menu_order' }, order: { type: 'string', default: 'asc' }, search: { type: 'string' }, mode: { type: 'string', enum: ['full', 'summary', 'ids_only'], default: 'full', description: 'full=all fields, summary=key fields only, ids_only=flat ID array' } }}},
   { name: 'wp_get_page', _category: 'content', description: 'Use to read a single page with content and template. Read-only. Warning: Elementor pages can exceed 100k chars.', inputSchema: { type: 'object', properties: { id: { type: 'number' } }, required: ['id'] }},
   { name: 'wp_create_page', _category: 'content', description: 'Use to create a page (defaults to draft). Supports parent, template, menu_order. Write — blocked by WP_READ_ONLY.', inputSchema: { type: 'object', properties: { title: { type: 'string' }, content: { type: 'string' }, status: { type: 'string', default: 'draft' }, parent: { type: 'number', default: 0 }, template: { type: 'string' }, menu_order: { type: 'number', default: 0 }, excerpt: { type: 'string' }, slug: { type: 'string' }, featured_media: { type: 'number' }, meta: { type: 'object' } }, required: ['title', 'content'] }},
-  { name: 'wp_update_page', _category: 'content', description: 'Use to modify any page field. Write — blocked by WP_READ_ONLY.', inputSchema: { type: 'object', properties: { id: { type: 'number' }, title: { type: 'string' }, content: { type: 'string' }, status: { type: 'string' }, parent: { type: 'number' }, template: { type: 'string' }, menu_order: { type: 'number' }, excerpt: { type: 'string' }, slug: { type: 'string' }, featured_media: { type: 'number' }, meta: { type: 'object' } }, required: ['id'] }}
+  { name: 'wp_update_page', _category: 'content', description: 'Use to modify any page field. Write — blocked by WP_READ_ONLY.', inputSchema: { type: 'object', properties: { id: { type: 'number' }, title: { type: 'string' }, content: { type: 'string' }, status: { type: 'string' }, parent: { type: 'number' }, template: { type: 'string' }, menu_order: { type: 'number' }, excerpt: { type: 'string' }, slug: { type: 'string' }, featured_media: { type: 'number' }, meta: { type: 'object' } }, required: ['id'] }},
+  { name: 'wp_get_post_meta', _category: 'content', description: 'Read post meta fields. Use for ACF data if acf/v3 unavailable, or for any custom meta (_elementor_data, _yoast_wpseo_*, etc.). Returns all meta if meta_key omitted.',
+        inputSchema: { type: 'object', properties: { post_id: { type: 'number' }, post_type: { type: 'string', default: 'posts', description: 'posts or pages' }, meta_key: { type: 'string', description: 'Specific key. Omit for all meta.' }, parse_json: { type: 'boolean', default: true, description: 'Auto-parse JSON strings (e.g. _elementor_data)' } }, required: ['post_id'] }}
 ];
 
 export const handlers = {};
@@ -51,10 +53,19 @@ handlers['wp_get_post'] = async (args) => {
   const t0 = Date.now();
   let result;
   const { wpApiCall, getActiveAuth, auditLog, name, summarizePost, applyContentFormat } = rt;
-  validateInput(args, { id: { type: 'number', required: true, min: 1 }, fields: { type: 'array' }, content_format: { type: 'string', enum: ['html', 'text', 'links_only'] } });
+  validateInput(args, { id: { type: 'number', required: true, min: 1 }, fields: { type: 'array' }, content_format: { type: 'string', enum: ['html', 'text', 'links_only', 'raw'] } });
   const { content_format = 'html', fields: requestedFields } = args;
-  const p = await wpApiCall(`/posts/${args.id}`);
+  // raw = source Gutenberg (block comments) : REST ?context=edit expose
+  // content.raw / title.raw (droits d'édition requis — déjà le cas ici).
+  const p = await wpApiCall(`/posts/${args.id}${content_format === 'raw' ? '?context=edit' : ''}`);
   let postData = { id: p.id, title: p.title.rendered, content: p.content.rendered, excerpt: p.excerpt.rendered, status: p.status, date: p.date, modified: p.modified, link: p.link, slug: p.slug, categories: p.categories, tags: p.tags, author: p.author, featured_media: p.featured_media, comment_status: p.comment_status, meta: p.meta || {} };
+  if (p.acf && Object.keys(p.acf).length > 0) { postData.acf_fields = p.acf; }
+  else { postData.acf_fields = {}; postData.acf_hint = 'ACF returned empty. Verify Show in REST API is enabled in each Field Group settings in WordPress Admin.'; }
+  if (content_format === 'raw') {
+    postData.content = p.content.raw ?? p.content.rendered;
+    postData.title = p.title.raw ?? p.title.rendered;
+    postData.excerpt = p.excerpt.raw ?? p.excerpt.rendered;
+  }
   const { url: siteUrl } = getActiveAuth();
   postData = applyContentFormat(postData, content_format, siteUrl);
   if (requestedFields && requestedFields.length > 0) postData = summarizePost(postData, requestedFields);
@@ -320,7 +331,10 @@ handlers['wp_get_page'] = async (args) => {
   const { wpApiCall, auditLog, name } = rt;
   validateInput(args, { id: { type: 'number', required: true, min: 1 } });
   const pg = await wpApiCall(`/pages/${args.id}`);
-  result = json({ id: pg.id, title: pg.title.rendered, content: pg.content.rendered, excerpt: pg.excerpt.rendered, status: pg.status, date: pg.date, modified: pg.modified, link: pg.link, slug: pg.slug, parent: pg.parent, menu_order: pg.menu_order, template: pg.template, author: pg.author, featured_media: pg.featured_media, meta: pg.meta || {} });
+  const pageData = { id: pg.id, title: pg.title.rendered, content: pg.content.rendered, excerpt: pg.excerpt.rendered, status: pg.status, date: pg.date, modified: pg.modified, link: pg.link, slug: pg.slug, parent: pg.parent, menu_order: pg.menu_order, template: pg.template, author: pg.author, featured_media: pg.featured_media, meta: pg.meta || {} };
+  if (pg.acf && Object.keys(pg.acf).length > 0) { pageData.acf_fields = pg.acf; }
+  else { pageData.acf_fields = {}; pageData.acf_hint = 'ACF returned empty. Verify Show in REST API is enabled in each Field Group settings in WordPress Admin.'; }
+  result = json(pageData);
   auditLog({ tool: name, target: args.id, target_type: 'page', action: 'read', status: 'success', latency_ms: Date.now() - t0 });
   return result;
 };
@@ -351,3 +365,38 @@ handlers['wp_update_page'] = async (args) => {
   auditLog({ tool: name, target: id, target_type: 'page', action: 'update', status: 'success', latency_ms: Date.now() - t0, params: sanitizeParams(upd) });
   return result;
 };
+handlers['wp_get_post_meta'] = async (args) => {
+  const t0 = Date.now();
+  const { wpApiCall, auditLog, name } = rt;
+  validateInput(args, { post_id: { type: 'number', required: true, min: 1 }, post_type: { type: 'string', enum: ['posts', 'pages'] } });
+  const { post_id, post_type = 'posts', meta_key, parse_json = true } = args;
+  let meta, acfFields = {};
+  try {
+    const post = await wpApiCall(`/${post_type}/${post_id}?_fields=meta,acf`);
+    meta = post?.meta ?? {};
+    acfFields = post?.acf ?? {};
+  } catch (e) {
+    if (post_type === 'posts' && e.message.includes('404')) {
+      const post = await wpApiCall(`/pages/${post_id}?_fields=meta,acf`);
+      meta = post?.meta ?? {};
+      acfFields = post?.acf ?? {};
+    } else { throw e; }
+  }
+  // Auto-parse JSON strings
+  if (parse_json) {
+    for (const [k, v] of Object.entries(meta)) {
+      if (typeof v === 'string' && v.length > 1 && (v[0] === '[' || v[0] === '{')) {
+        try { meta[k] = JSON.parse(v); } catch { /* keep as string */ }
+      }
+    }
+  }
+  let result;
+  if (meta_key) {
+    const value = meta[meta_key] !== undefined ? meta[meta_key] : (acfFields[meta_key] !== undefined ? acfFields[meta_key] : null);
+    result = json({ post_id, meta_key, value });
+  } else {
+    result = json({ post_id, meta, acf_fields: acfFields, source: Object.keys(acfFields).length > 0 ? 'acf_rest' : 'wp_meta_only' });
+  }
+  auditLog({ tool: name, target: post_id, action: 'read_meta', status: 'success', latency_ms: Date.now() - t0, params: { meta_key: meta_key || 'all' } });
+  return result;
+};

package/src/tools/index.js

@@ -30,7 +30,7 @@ export const toolModules = [
   fse, health, performance, schema, security, editorial,
 ];
 
-/** All static definitions (175 tools), unfiltered */
+/** All static definitions (176 tools), unfiltered */
 export const ALL_DEFINITIONS = toolModules.flatMap(m => m.definitions);
 
 /** All handlers merged into a single lookup */

package/src/tools/seo.js

@@ -191,11 +191,63 @@ handlers['wp_update_seo_meta'] = async (args) => {
 
   if (updated.length === 0) throw new Error('No SEO fields provided. Specify at least one of: title, description, focus_keyword, canonical_url, robots_noindex, robots_nofollow.');
 
-  const writeEp = post_type === 'page' ? `/pages/${id}` : `/posts/${id}`;
-  await wpApiCall(writeEp, { method: 'POST', body: JSON.stringify({ meta: metaUpdate }) });
+  // ── Strategy 1: Try MCP Companion direct write (uses update_post_meta, bypasses Yoast block) ──
+  let writeMethod = 'rest_api';
+  let verified = true;
+  const failedFields = [];
 
-  result = json({ success: true, message: `SEO meta updated for ${post_type} ${id}`, plugin, fields_updated: updated, meta_written: metaUpdate });
-  auditLog({ tool: name, target: id, target_type: post_type, action: 'update_seo', status: 'success', latency_ms: Date.now() - t0, params: { plugin, fields: updated } });
+  try {
+    const companionResult = await wpApiCall(`/${id}`, {
+      method: 'POST',
+      basePath: '/wp-json/mcp-diagnostics/v1/seo-meta',
+      body: JSON.stringify({ meta: metaUpdate }),
+    });
+    // Companion returns { written: [...], verified: { key: value } }
+    if (companionResult?.written?.length > 0) {
+      writeMethod = 'companion_direct';
+      // Verify from companion response
+      for (const [metaKey, expectedVal] of Object.entries(metaUpdate)) {
+        const actual = companionResult.verified?.[metaKey];
+        if (actual === undefined || actual === null || String(actual) !== String(expectedVal)) {
+          failedFields.push({ key: metaKey, expected: expectedVal, actual: actual ?? null });
+        }
+      }
+      if (failedFields.length > 0) verified = false;
+    }
+  } catch {
+    // Companion not installed — fall back to REST API
+    writeMethod = 'rest_api';
+  }
+
+  // ── Strategy 2: Standard REST API (fallback when companion not available) ──
+  if (writeMethod === 'rest_api') {
+    const writeEp = post_type === 'page' ? `/pages/${id}` : `/posts/${id}`;
+    await wpApiCall(writeEp, { method: 'POST', body: JSON.stringify({ meta: metaUpdate }) });
+
+    // Verify write: read back meta to detect silent failures (Yoast issue)
+    try {
+      const verify = await wpApiCall(readEp);
+      const verifyMeta = verify.meta || {};
+      for (const [metaKey, expectedVal] of Object.entries(metaUpdate)) {
+        const actual = verifyMeta[metaKey];
+        if (actual === undefined || actual === null || String(actual) !== String(expectedVal)) {
+          failedFields.push({ key: metaKey, expected: expectedVal, actual: actual ?? null });
+        }
+      }
+      if (failedFields.length > 0) verified = false;
+    } catch { verified = false; }
+  }
+
+  const response = { success: verified, message: `SEO meta updated for ${post_type} ${id}`, plugin, fields_updated: updated, meta_written: metaUpdate, verified, write_method: writeMethod };
+  if (!verified && failedFields.length > 0) {
+    response.failed_fields = failedFields;
+    response.warning = `Silent write failure detected: ${failedFields.length} field(s) were not saved by WordPress. This is a known issue with Yoast SEO which blocks REST API writes to its proprietary meta fields.`;
+    response.fix = 'Install the MCP Companion plugin (companion/mcp-diagnostics.php) as a must-use plugin to enable direct update_post_meta() writes that bypass Yoast restrictions. Copy it to wp-content/mu-plugins/mcp-diagnostics.php and retry.';
+    auditLog({ tool: name, target: id, target_type: post_type, action: 'update_seo', status: 'silent_failure', latency_ms: Date.now() - t0, params: { plugin, fields: updated, failed: failedFields.map(f => f.key), write_method: writeMethod } });
+  } else {
+    auditLog({ tool: name, target: id, target_type: post_type, action: 'update_seo', status: 'success', latency_ms: Date.now() - t0, params: { plugin, fields: updated, write_method: writeMethod } });
+  }
+  result = json(response);
   return result;
 };
 handlers['wp_audit_seo'] = async (args) => {

package/src/utils/contentCompressor.js

@@ -88,7 +88,7 @@ export function summarizePost(post, fields) {
 /**
  * Apply content_format transformation to a post object.
  * @param {object} post  Post with .content field
- * @param {string} contentFormat  'html' | 'text' | 'links_only'
+ * @param {string} contentFormat  'html' | 'text' | 'links_only' | 'raw'
  * @param {string} siteUrl  Site base URL
  * @param {number} maxChars  Truncation limit (0 = unlimited)
  * @returns {object}
@@ -106,6 +106,11 @@ export function applyContentFormat(post, contentFormat, siteUrl, maxChars = DEFA
       processed.internal_links = extractLinksOnly(post.content, siteUrl);
       processed._content_format = 'links_only';
       break;
+    case 'raw':
+      // Source Gutenberg destinée à être réécrite telle quelle :
+      // AUCUNE troncature (un raw tronqué corromprait le post à l'update).
+      processed._content_format = 'raw';
+      break;
     case 'html':
     default:
       processed.content = truncateContent(post.content, maxChars);

package/tests/unit/plugins/acf/acfAdapter.test.js

@@ -137,12 +137,50 @@ describe('ACF Adapter', () => {
     expect(data._warning).toContain('truncated');
   });
 
-  // 5. acf_get_fields — 404
-  it('acf_get_fields propagates 404 error', async () => {
+  // 5. acf_get_fields — fallback to WP Core meta on 404
+  it('acf_get_fields falls back to WP Core meta when acf/v3 returns 404', async () => {
+    let callCount = 0;
+    const fallbackApi = async (endpoint, opts) => {
+      callCount++;
+      if (opts?.basePath === '/wp-json/acf/v3') throw new Error('WP API 404: Not Found');
+      // WP Core fallback
+      return { meta: { hero_title: 'From Core', _elementor_data: '[]' } };
+    };
     const tool = acfAdapter.getTools().find(t => t.name === 'acf_get_fields');
-    await expect(
-      tool.handler({ id: 99999 }, mockApi(null, true))
-    ).rejects.toThrow('404');
+    const result = await tool.handler({ id: 42 }, fallbackApi);
+    const data = parseResult(result);
+    expect(data.source).toBe('wp_core_meta');
+    expect(data.warning).toContain('ACF REST API not available');
+    expect(data.acf.hero_title).toBe('From Core');
+    expect(callCount).toBe(2);
+  });
+
+  // 5b. acf_get_fields — fallback via ?_fields=acf when acf/v3 returns empty
+  it('acf_get_fields falls back to wp/v2?_fields=acf when acf/v3 returns empty', async () => {
+    let calls = [];
+    const fallbackApi = async (endpoint, opts) => {
+      calls.push({ endpoint, basePath: opts?.basePath });
+      if (opts?.basePath === '/wp-json/acf/v3') return { acf: {} };
+      if (endpoint.includes('_fields=acf')) return { acf: { hero: 'from_wp_rest' } };
+      return {};
+    };
+    const tool = acfAdapter.getTools().find(t => t.name === 'acf_get_fields');
+    const result = await tool.handler({ id: 42 }, fallbackApi);
+    const data = parseResult(result);
+    expect(data.acf.hero).toBe('from_wp_rest');
+    expect(data.source).toBe('wp_rest_acf_field');
+    expect(calls).toHaveLength(2);
+  });
+
+  // 5c. acf_get_fields — diagnostic warning when empty
+  it('acf_get_fields returns diagnostic when fields are empty', async () => {
+    const tool = acfAdapter.getTools().find(t => t.name === 'acf_get_fields');
+    const result = await tool.handler({ id: 42 }, mockApi({ acf: {} }));
+    const data = parseResult(result);
+    expect(data.fields_count).toBe(0);
+    expect(data.warning).toContain('No ACF fields returned');
+    expect(data.causes).toHaveLength(4);
+    expect(data.causes[0]).toContain('Show in REST API');
   });
 
   // 6. acf_list_field_groups — success

package/tests/unit/tools/contentCompressor.test.js

@@ -143,6 +143,13 @@ describe('contentCompressor — summarizePost', () => {
 });
 
 describe('contentCompressor — applyContentFormat', () => {
+  it('raw : passthrough intégral, jamais tronqué', () => {
+    const long = '<!-- wp:paragraph -->' + 'x'.repeat(50000) + '<!-- /wp:paragraph -->';
+    const result = applyContentFormat({ content: long }, 'raw', 'https://s.tld', 100);
+    expect(result.content).toBe(long);
+    expect(result._content_format).toBe('raw');
+  });
+
   const siteUrl = 'https://mysite.example.com';
 
   it('html mode — truncates long content', () => {

package/tests/unit/tools/dynamicFiltering.test.js

@@ -111,11 +111,11 @@ describe('Combined filtering counts', () => {
     process.env.WC_CONSUMER_KEY = 'ck_test';
     process.env.WP_REQUIRE_APPROVAL = 'true';
     process.env.WP_ENABLE_PLUGIN_INTELLIGENCE = 'true';
-    expect(getFilteredTools()).toHaveLength(175);
+    expect(getFilteredTools()).toHaveLength(176);
   });
 
   it('returns 145 tools with no optional features (174 - 20wc - 3editorial - 6pi)', () => {
-    expect(getFilteredTools()).toHaveLength(146);
+    expect(getFilteredTools()).toHaveLength(147);
   });
 });
 
@@ -188,13 +188,13 @@ describe('WP_TOOL_CATEGORIES filtering', () => {
     process.env.WP_TOOL_CATEGORIES = '';
     const tools = getFilteredTools();
     // Same as default (no category filter) — 143 base tools
-    expect(tools).toHaveLength(146);
+    expect(tools).toHaveLength(147);
   });
 
   it('WP_TOOL_CATEGORIES undefined → all tools exposed', () => {
     delete process.env.WP_TOOL_CATEGORIES;
     const tools = getFilteredTools();
-    expect(tools).toHaveLength(146);
+    expect(tools).toHaveLength(147);
   });
 
   it('core tools (wp_site_info, wp_set_target) always present regardless of config', () => {
@@ -216,7 +216,7 @@ describe('WP_TOOL_CATEGORIES filtering', () => {
   });
 
   it('total TOOLS_DEFINITIONS count is 174', () => {
-    expect(TOOLS_DEFINITIONS).toHaveLength(175);
+    expect(TOOLS_DEFINITIONS).toHaveLength(176);
   });
 
   it('getEnabledCategories reflects WP_TOOL_CATEGORIES', () => {

package/tests/unit/tools/postMeta.test.js

@@ -0,0 +1,105 @@
+import { vi, describe, it, expect, beforeEach, afterEach } from 'vitest';
+
+vi.mock('node-fetch', () => ({ default: vi.fn() }));
+
+import fetch from 'node-fetch';
+import { handleToolCall } from '../../../index.js';
+import { mockSuccess, mockError, makeRequest, parseResult } from '../../helpers/mockWpRequest.js';
+
+function call(name, args = {}) {
+  return handleToolCall(makeRequest(name, args));
+}
+
+let consoleSpy;
+beforeEach(() => { fetch.mockReset(); consoleSpy = vi.spyOn(console, 'error').mockImplementation(() => {}); });
+afterEach(() => { consoleSpy.mockRestore(); });
+
+// =========================================================================
+// wp_get_post_meta
+// =========================================================================
+
+describe('wp_get_post_meta', () => {
+  it('SUCCESS — returns all meta fields', async () => {
+    mockSuccess({ meta: { _yoast_wpseo_title: 'SEO Title', custom_field: 'value' } });
+
+    const res = await call('wp_get_post_meta', { post_id: 42 });
+    const data = parseResult(res);
+
+    expect(data.post_id).toBe(42);
+    expect(data.meta._yoast_wpseo_title).toBe('SEO Title');
+    expect(data.meta.custom_field).toBe('value');
+  });
+
+  it('SUCCESS — filters by meta_key', async () => {
+    mockSuccess({ meta: { _yoast_wpseo_title: 'SEO Title', other: 'x' } });
+
+    const res = await call('wp_get_post_meta', { post_id: 42, meta_key: '_yoast_wpseo_title' });
+    const data = parseResult(res);
+
+    expect(data.post_id).toBe(42);
+    expect(data.meta_key).toBe('_yoast_wpseo_title');
+    expect(data.value).toBe('SEO Title');
+  });
+
+  it('SUCCESS — auto-parses JSON strings', async () => {
+    mockSuccess({ meta: { _elementor_data: '[{"elType":"section"}]', plain: 'text' } });
+
+    const res = await call('wp_get_post_meta', { post_id: 10, parse_json: true });
+    const data = parseResult(res);
+
+    expect(Array.isArray(data.meta._elementor_data)).toBe(true);
+    expect(data.meta._elementor_data[0].elType).toBe('section');
+    expect(data.meta.plain).toBe('text');
+  });
+
+  it('FALLBACK — retries on pages if posts returns 404', async () => {
+    // First call (posts) → 404
+    fetch.mockImplementationOnce(() => Promise.resolve({
+      ok: false, status: 404,
+      headers: { get: () => null },
+      text: () => Promise.resolve('Not found')
+    }));
+    // Second call (pages) → success
+    mockSuccess({ meta: { page_field: 'from_pages' } });
+
+    const res = await call('wp_get_post_meta', { post_id: 5, post_type: 'posts' });
+    const data = parseResult(res);
+
+    expect(data.post_id).toBe(5);
+    expect(data.meta.page_field).toBe('from_pages');
+  });
+});
+
+// =========================================================================
+// wp_get_post — ACF fields integration
+// =========================================================================
+
+describe('wp_get_post — ACF fields', () => {
+  const fullPost = (acf) => ({
+    id: 1, title: { rendered: 'T' }, content: { rendered: '' }, excerpt: { rendered: '' },
+    status: 'publish', date: '2026-01-01', modified: '2026-01-01', link: 'https://test.example.com/?p=1',
+    slug: 'test', categories: [], tags: [], author: 1, featured_media: 0, comment_status: 'open', meta: {},
+    acf,
+  });
+
+  it('includes acf_fields when post.acf has data', async () => {
+    mockSuccess(fullPost({ hero_title: 'Hello', price: 29 }));
+
+    const res = await call('wp_get_post', { id: 1 });
+    const data = parseResult(res);
+
+    expect(data.acf_fields.hero_title).toBe('Hello');
+    expect(data.acf_fields.price).toBe(29);
+    expect(data.acf_hint).toBeUndefined();
+  });
+
+  it('includes acf_hint when post.acf is empty', async () => {
+    mockSuccess(fullPost({}));
+
+    const res = await call('wp_get_post', { id: 1 });
+    const data = parseResult(res);
+
+    expect(data.acf_fields).toEqual({});
+    expect(data.acf_hint).toContain('Show in REST API');
+  });
+});

package/tests/unit/tools/posts.test.js

@@ -52,6 +52,41 @@ describe('wp_list_posts', () => {
 // ────────────────────────────────────────────────────────────
 
 describe('wp_get_post', () => {
+  describe('content_format=raw', () => {
+    const RAW = '<!-- wp:paragraph --><p>Source brute</p><!-- /wp:paragraph -->';
+    const rawPost = {
+      id: 1,
+      title: { rendered: 'Rendu', raw: 'Brut' },
+      content: { rendered: '<p>Source brute</p>', raw: RAW },
+      excerpt: { rendered: 'ex', raw: 'ex brut' },
+      status: 'publish', date: '2024-01-01', modified: '2024-01-01',
+      link: 'https://test.example.com/post-1', slug: 'post-1',
+      categories: [], tags: [], author: 1, featured_media: 0,
+      comment_status: 'open', meta: {},
+    };
+
+    it('appelle la REST API avec ?context=edit', async () => {
+      fetch.mockResolvedValue(mockSuccess(rawPost));
+      await call('wp_get_post', { id: 1, content_format: 'raw' });
+      expect(String(fetch.mock.calls[0][0])).toContain('/posts/1?context=edit');
+    });
+
+    it('retourne content.raw et title.raw sans troncature', async () => {
+      fetch.mockResolvedValue(mockSuccess(rawPost));
+      const data = parseResult(await call('wp_get_post', { id: 1, content_format: 'raw' }));
+      expect(data.content).toBe(RAW);
+      expect(data.title).toBe('Brut');
+      expect(data._content_format).toBe('raw');
+    });
+
+    it('sans raw, pas de context=edit et contenu rendu', async () => {
+      fetch.mockResolvedValue(mockSuccess(rawPost));
+      const data = parseResult(await call('wp_get_post', { id: 1 }));
+      expect(String(fetch.mock.calls[0][0])).not.toContain('context=edit');
+      expect(data.content).toBe('<p>Source brute</p>');
+    });
+  });
+
   let consoleSpy;
   beforeEach(() => { fetch.mockReset(); consoleSpy = vi.spyOn(console, 'error').mockImplementation(() => {}); });
   afterEach(() => { consoleSpy.mockRestore(); });

package/tests/unit/tools/seo.test.js

@@ -105,21 +105,70 @@ describe('wp_get_seo_meta', () => {
 // =========================================================================
 
 describe('wp_update_seo_meta', () => {
-  it('SUCCESS — detects Yoast and updates title + description', async () => {
+  it('SUCCESS via companion — uses direct update_post_meta', async () => {
     // First fetch: read current post to detect plugin
     mockSuccess(yoastPost);
-    // Second fetch: write the meta update
-    mockSuccess({});
+    // Second fetch: companion endpoint succeeds with verified values
+    mockSuccess({
+      written: ['_yoast_wpseo_title', '_yoast_wpseo_metadesc'],
+      verified: { _yoast_wpseo_title: 'New SEO Title', _yoast_wpseo_metadesc: 'New desc' },
+      source: 'direct_update_post_meta',
+    });
 
     const res = await call('wp_update_seo_meta', { id: 1, title: 'New SEO Title', description: 'New desc' });
     const data = parseResult(res);
 
     expect(data.success).toBe(true);
+    expect(data.verified).toBe(true);
+    expect(data.write_method).toBe('companion_direct');
     expect(data.plugin).toBe('yoast');
     expect(data.fields_updated).toContain('title');
     expect(data.fields_updated).toContain('description');
   });
 
+  it('SUCCESS via REST fallback — companion not installed', async () => {
+    // First fetch: read current post to detect plugin
+    mockSuccess(yoastPost);
+    // Second fetch: companion endpoint → 404 (not installed)
+    mockError(404, '{"code":"rest_no_route"}');
+    // Third fetch: standard REST write
+    mockSuccess({});
+    // Fourth fetch: verification read — meta reflects the written values
+    mockSuccess({ ...yoastPost, meta: { ...yoastPost.meta, _yoast_wpseo_title: 'New SEO Title', _yoast_wpseo_metadesc: 'New desc' } });
+
+    const res = await call('wp_update_seo_meta', { id: 1, title: 'New SEO Title', description: 'New desc' });
+    const data = parseResult(res);
+
+    expect(data.success).toBe(true);
+    expect(data.verified).toBe(true);
+    expect(data.write_method).toBe('rest_api');
+    expect(data.plugin).toBe('yoast');
+  });
+
+  it('SILENT FAILURE — companion unavailable and REST write blocked by Yoast', async () => {
+    // First fetch: read current post to detect plugin
+    mockSuccess(yoastPost);
+    // Second fetch: companion → 404
+    mockError(404, '{"code":"rest_no_route"}');
+    // Third fetch: REST write — WordPress returns success but does not save
+    mockSuccess({});
+    // Fourth fetch: verification read — meta unchanged (silent failure)
+    mockSuccess(yoastPost);
+
+    const res = await call('wp_update_seo_meta', { id: 1, focus_keyword: 'new keyword' });
+    const data = parseResult(res);
+
+    expect(data.success).toBe(false);
+    expect(data.verified).toBe(false);
+    expect(data.write_method).toBe('rest_api');
+    expect(data.failed_fields).toBeDefined();
+    expect(data.failed_fields.length).toBeGreaterThan(0);
+    expect(data.failed_fields[0].key).toBe('_yoast_wpseo_focuskw');
+    expect(data.failed_fields[0].expected).toBe('new keyword');
+    expect(data.warning).toContain('Silent write failure');
+    expect(data.fix).toContain('mcp-diagnostics.php');
+  });
+
   it('GOVERNANCE — blocked by WP_READ_ONLY', async () => {
     const original = process.env.WP_READ_ONLY;
     process.env.WP_READ_ONLY = 'true';
@@ -152,7 +201,11 @@ describe('wp_update_seo_meta', () => {
 
   it('AUDIT — logs update_seo action on success', async () => {
     mockSuccess(yoastPost);
-    mockSuccess({});
+    // Companion succeeds
+    mockSuccess({
+      written: ['_yoast_wpseo_title'],
+      verified: { _yoast_wpseo_title: 'Audit Test' },
+    });
 
     await call('wp_update_seo_meta', { id: 1, title: 'Audit Test' });
 

package/tests/unit/tools/site.test.js

@@ -80,7 +80,7 @@ describe('wp_site_info', () => {
 
     // Server info
     expect(data.server.mcp_version).toBeDefined();
-    expect(data.server.tools_total).toBe(175);
+    expect(data.server.tools_total).toBe(176);
     expect(typeof data.server.tools_exposed).toBe('number');
     expect(Array.isArray(data.server.filtered_out)).toBe(true);
   });