@automattic/mcp-wordpress-remote 0.3.4 → 0.4.0

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2024 Your Name
+Copyright (c) 2025 Automattic Inc.
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/dist/lib.d.ts

@@ -15,7 +15,7 @@ interface WordPressResponse {
     [key: string]: any;
 }
 
-declare const MCP_WORDPRESS_REMOTE_VERSION = "0.3.4";
+declare const MCP_WORDPRESS_REMOTE_VERSION = "0.4.0";
 /**
  * Centralized configuration for MCP WordPress Remote
  * All default values are defined here and can be overridden via environment variables
@@ -327,4 +327,47 @@ declare function isProxyConfigured(): boolean;
  */
 declare function getProxyType(): 'pac' | 'env' | 'none';
 
-export { APIError, AuthError, CONFIG, ConfigError, LogLevel, MCP_WORDPRESS_REMOTE_VERSION, OAuthError, type TokenValidationResult, type WPClientInfo, type WPTokens, type WordPressRequestParams, type WordPressResponse, getAgentForUrl, getConfig, getCustomHeaders, getDefaultOAuthScopes, getFetchInfo, getProxyInfo, getProxyType, initializeProxy, isAPIError, isAuthError, isConfigError, isFetchAvailable, isOAuthError, isProxyConfigured, log, logger, parseCustomHeaders, proxyFetch, setupFetchPolyfill, validateConfig, wpRequest };
+/**
+ * MCP Request Types for WordPress Remote Proxy
+ *
+ * Type definitions for all MCP JSON-RPC request schemas
+ */
+
+interface WPRequestParams {
+    method: string;
+    [key: string]: unknown;
+}
+
+/**
+ * Tool-call hooks for MCP WordPress Remote.
+ *
+ * Lets an embedding package observe completed `tools/call` requests and
+ * piggyback on the proxy's live, authenticated session — for example to send
+ * usage telemetry — without forking the proxy.
+ *
+ * The registry lives on a global symbol so it is a single instance even when a
+ * consumer registers through the `/lib` bundle while the handlers run in the
+ * separate `proxy` bundle.
+ */
+
+/** Context passed to each hook after a tool call completes. */
+interface ToolCallContext {
+    /** Name of the tool the client just called. */
+    name: string;
+    /**
+     * Dispatch an additional request over the proxy's live, authenticated
+     * session. The request is prepared for the session's detected transport
+     * (JSON-RPC envelope or simple format) before it is sent, e.g.
+     * `wpRequest({ method: 'tools/call', name, arguments })`.
+     */
+    wpRequest: (params: WPRequestParams) => Promise<WordPressResponse>;
+}
+/** A hook fired after each completed `tools/call`. May be async. */
+type ToolCallHook = (context: ToolCallContext) => void | Promise<void>;
+/**
+ * Register a hook fired after each completed `tools/call`. Returns a function
+ * that unregisters it.
+ */
+declare function registerToolCallHook(hook: ToolCallHook): () => void;
+
+export { APIError, AuthError, CONFIG, ConfigError, LogLevel, MCP_WORDPRESS_REMOTE_VERSION, OAuthError, type TokenValidationResult, type ToolCallContext, type ToolCallHook, type WPClientInfo, type WPTokens, type WordPressRequestParams, type WordPressResponse, getAgentForUrl, getConfig, getCustomHeaders, getDefaultOAuthScopes, getFetchInfo, getProxyInfo, getProxyType, initializeProxy, isAPIError, isAuthError, isConfigError, isFetchAvailable, isOAuthError, isProxyConfigured, log, logger, parseCustomHeaders, proxyFetch, registerToolCallHook, setupFetchPolyfill, validateConfig, wpRequest };

package/dist/lib.js

@@ -20760,12 +20760,15 @@ var require_json = __commonJS({
     var JSON_SYNTAX_REGEXP = /#+/g;
     function json2(options) {
       var opts = options || {};
-      var limit = typeof opts.limit !== "number" ? bytes.parse(opts.limit || "100kb") : opts.limit;
+      var limit = typeof opts.limit === "undefined" || opts.limit === null ? 102400 : bytes.parse(opts.limit);
       var inflate = opts.inflate !== false;
       var reviver = opts.reviver;
       var strict = opts.strict !== false;
       var type = opts.type || "application/json";
       var verify = opts.verify || false;
+      if (limit === null) {
+        throw new TypeError('option limit "' + String(opts.limit) + '" is invalid');
+      }
       if (verify !== false && typeof verify !== "function") {
         throw new TypeError("option verify must be function");
       }
@@ -20887,9 +20890,12 @@ var require_raw = __commonJS({
     function raw(options) {
       var opts = options || {};
       var inflate = opts.inflate !== false;
-      var limit = typeof opts.limit !== "number" ? bytes.parse(opts.limit || "100kb") : opts.limit;
+      var limit = typeof opts.limit === "undefined" || opts.limit === null ? 102400 : bytes.parse(opts.limit);
       var type = opts.type || "application/octet-stream";
       var verify = opts.verify || false;
+      if (limit === null) {
+        throw new TypeError('option limit "' + String(opts.limit) + '" is invalid');
+      }
       if (verify !== false && typeof verify !== "function") {
         throw new TypeError("option verify must be function");
       }
@@ -20945,9 +20951,12 @@ var require_text = __commonJS({
       var opts = options || {};
       var defaultCharset = opts.defaultCharset || "utf-8";
       var inflate = opts.inflate !== false;
-      var limit = typeof opts.limit !== "number" ? bytes.parse(opts.limit || "100kb") : opts.limit;
+      var limit = typeof opts.limit === "undefined" || opts.limit === null ? 102400 : bytes.parse(opts.limit);
       var type = opts.type || "text/plain";
       var verify = opts.verify || false;
+      if (limit === null) {
+        throw new TypeError('option limit "' + String(opts.limit) + '" is invalid');
+      }
       if (verify !== false && typeof verify !== "function") {
         throw new TypeError("option verify must be function");
       }
@@ -23556,9 +23565,12 @@ var require_urlencoded = __commonJS({
       }
       var extended = opts.extended !== false;
       var inflate = opts.inflate !== false;
-      var limit = typeof opts.limit !== "number" ? bytes.parse(opts.limit || "100kb") : opts.limit;
+      var limit = typeof opts.limit === "undefined" || opts.limit === null ? 102400 : bytes.parse(opts.limit);
       var type = opts.type || "application/x-www-form-urlencoded";
       var verify = opts.verify || false;
+      if (limit === null) {
+        throw new TypeError('option limit "' + String(opts.limit) + '" is invalid');
+      }
       if (verify !== false && typeof verify !== "function") {
         throw new TypeError("option verify must be function");
       }
@@ -47325,7 +47337,7 @@ async function selectCallbackPort(serverUrl, specifiedPort, _unused) {
 }
 
 // src/lib/config.ts
-var MCP_WORDPRESS_REMOTE_VERSION = "0.3.4";
+var MCP_WORDPRESS_REMOTE_VERSION = "0.4.0";
 function parsePositiveIntEnv(value, defaultValue) {
   if (!value) {
     return defaultValue;
@@ -47760,13 +47772,19 @@ async function getAgentForUrl(url2) {
         const socksMatch = directive.match(/SOCKS5?\s+(\S+):(\d+)/i);
         if (socksMatch) {
           const proxyUrl = `socks5h://${socksMatch[1]}:${socksMatch[2]}`;
-          logger.debug(`PAC returned SOCKS proxy for ${url2}: ${sanitizeProxyUrl(proxyUrl)}`, "PROXY");
+          logger.debug(
+            `PAC returned SOCKS proxy for ${url2}: ${sanitizeProxyUrl(proxyUrl)}`,
+            "PROXY"
+          );
           return new SocksProxyAgent(proxyUrl);
         }
         const proxyMatch = directive.match(/PROXY\s+(\S+):(\d+)/i);
         if (proxyMatch) {
           const proxyUrl = `http://${proxyMatch[1]}:${proxyMatch[2]}`;
-          logger.debug(`PAC returned HTTP proxy for ${url2}: ${sanitizeProxyUrl(proxyUrl)}`, "PROXY");
+          logger.debug(
+            `PAC returned HTTP proxy for ${url2}: ${sanitizeProxyUrl(proxyUrl)}`,
+            "PROXY"
+          );
           return new HttpsProxyAgent(proxyUrl);
         }
       }
@@ -48443,7 +48461,7 @@ async function discoverAuthorizationServerMetadata(authorizationServerUrl) {
     const customHeaders = getCustomHeaders();
     const response = await proxyFetch(metadataUrl.toString(), {
       headers: {
-        "Accept": "application/json",
+        Accept: "application/json",
         ...customHeaders
       }
     });
@@ -48480,7 +48498,7 @@ async function discoverProtectedResourceMetadata(resourceUrl) {
     const customHeaders = getCustomHeaders();
     const response = await proxyFetch(metadataUrl.toString(), {
       headers: {
-        "Accept": "application/json",
+        Accept: "application/json",
         ...customHeaders
       }
     });
@@ -49075,7 +49093,7 @@ var MCPOAuthProvider = class {
           if (authInfo.resource_metadata_url) {
             const metadataResponse = await proxyFetch(authInfo.resource_metadata_url, {
               headers: {
-                "Accept": "application/json",
+                Accept: "application/json",
                 ...customHeaders
               }
             });
@@ -49112,6 +49130,12 @@ var MCPOAuthProvider = class {
       logger.oauth("Using provided client ID, skipping dynamic registration");
       return;
     }
+    const storedClientInfo = await readClientInfo(this.serverUrlHash);
+    if (typeof storedClientInfo?.client_id === "string" && storedClientInfo.client_id.length > 0) {
+      this.config.clientId = storedClientInfo.client_id;
+      logger.oauth("Reusing persisted client registration, skipping dynamic registration");
+      return;
+    }
     if (!CONFIG.OAUTH_DYNAMIC_REGISTRATION) {
       throw new OAuthError2(
         "No client ID provided and dynamic registration is disabled",
@@ -50035,10 +50059,7 @@ async function getOAuthTokens() {
         return null;
       }
     } else {
-      logger.warn(
-        "Using legacy OAuth provider. Consider enabling PKCE for MCP compliance",
-        "AUTH"
-      );
+      logger.warn("Using legacy OAuth provider. Consider enabling PKCE for MCP compliance", "AUTH");
       if (!authCoordinator) {
         if (!globalEvents) {
           globalEvents = new EventEmitter3();
@@ -50281,7 +50302,10 @@ async function executeWordPressRequest(requestData, useJsonRpc, sessionIdUsed) {
 }
 async function refreshSession(failedSessionId) {
   if (failedSessionId && globalSessionId && globalSessionId !== failedSessionId) {
-    logger.info("Detected newer session while handling invalid-session error; skipping refresh", "SESSION");
+    logger.info(
+      "Detected newer session while handling invalid-session error; skipping refresh",
+      "SESSION"
+    );
     return;
   }
   if (sessionRefreshPromise) {
@@ -50335,11 +50359,7 @@ async function wpRequest(requestData, useJsonRpc = true, options = {}) {
         sessionIdUsed: sessionIdUsed || "none"
       });
       await refreshSession(sessionIdUsed);
-      const retriedResult = await executeWordPressRequest(
-        requestData,
-        useJsonRpc,
-        globalSessionId
-      );
+      const retriedResult = await executeWordPressRequest(requestData, useJsonRpc, globalSessionId);
       return retriedResult.responseData;
     }
     if (error51 instanceof APIError) {
@@ -50351,6 +50371,25 @@ async function wpRequest(requestData, useJsonRpc = true, options = {}) {
     throw new APIError(errorMessage, 0, getRequestUrl(), void 0, code);
   }
 }
+
+// src/lib/tool-call-hooks.ts
+var REGISTRY_KEY = Symbol.for("@automattic/mcp-wordpress-remote:tool-call-hooks");
+function getRegistry() {
+  const globalObject = globalThis;
+  let registry2 = globalObject[REGISTRY_KEY];
+  if (!registry2) {
+    registry2 = /* @__PURE__ */ new Set();
+    globalObject[REGISTRY_KEY] = registry2;
+  }
+  return registry2;
+}
+function registerToolCallHook(hook) {
+  const registry2 = getRegistry();
+  registry2.add(hook);
+  return () => {
+    registry2.delete(hook);
+  };
+}
 export {
   APIError,
   AuthError,
@@ -50377,6 +50416,7 @@ export {
   logger,
   parseCustomHeaders,
   proxyFetch,
+  registerToolCallHook,
   setupFetchPolyfill,
   validateConfig,
   wpRequest

package/dist/proxy.js

@@ -3775,6 +3775,7 @@ var require_fast_uri = __commonJS({
       return uriTokens.join("");
     }
     var URI_PARSE = /^(?:([^#/:?]+):)?(?:\/\/((?:([^#/?@]*)@)?(\[[^#/?\]]+\]|[^#/:?]*)(?::(\d*))?))?([^#?]*)(?:\?([^#]*))?(?:#((?:.|[\n\r])*))?/u;
+    var AUTHORITY_PREFIX = /^(?:[^#/:?]+:)?\/\/([^/?#]*)/;
     function getParseError(parsed, matches) {
       if (matches[2] !== void 0 && parsed.path && parsed.path[0] !== "/") {
         return 'URI path must start with "/" when authority is present.';
@@ -3804,6 +3805,11 @@ var require_fast_uri = __commonJS({
           uri = "//" + uri;
         }
       }
+      const authorityMatch = uri.match(AUTHORITY_PREFIX);
+      if (authorityMatch !== null && authorityMatch[1].indexOf("\\") !== -1) {
+        parsed.error = "URI authority must not contain a literal backslash.";
+        malformedAuthorityOrPort = true;
+      }
       const matches = uri.match(URI_PARSE);
       if (matches) {
         parsed.scheme = matches[1];
@@ -3847,7 +3853,7 @@ var require_fast_uri = __commonJS({
         if (!options.unicodeSupport && (!schemeHandler || !schemeHandler.unicodeSupport)) {
           if (parsed.host && (options.domainHost || schemeHandler && schemeHandler.domainHost) && isIP2 === false && nonSimpleDomain(parsed.host)) {
             try {
-              parsed.host = URL.domainToASCII(parsed.host.toLowerCase());
+              parsed.host = new URL("http://" + parsed.host).hostname;
             } catch (e2) {
               parsed.error = parsed.error || "Host's domain name can not be converted to ASCII: " + e2;
             }
@@ -27617,12 +27623,15 @@ var require_json = __commonJS({
     var JSON_SYNTAX_REGEXP = /#+/g;
     function json2(options) {
       var opts = options || {};
-      var limit = typeof opts.limit !== "number" ? bytes.parse(opts.limit || "100kb") : opts.limit;
+      var limit = typeof opts.limit === "undefined" || opts.limit === null ? 102400 : bytes.parse(opts.limit);
       var inflate = opts.inflate !== false;
       var reviver = opts.reviver;
       var strict = opts.strict !== false;
       var type = opts.type || "application/json";
       var verify = opts.verify || false;
+      if (limit === null) {
+        throw new TypeError('option limit "' + String(opts.limit) + '" is invalid');
+      }
       if (verify !== false && typeof verify !== "function") {
         throw new TypeError("option verify must be function");
       }
@@ -27744,9 +27753,12 @@ var require_raw = __commonJS({
     function raw(options) {
       var opts = options || {};
       var inflate = opts.inflate !== false;
-      var limit = typeof opts.limit !== "number" ? bytes.parse(opts.limit || "100kb") : opts.limit;
+      var limit = typeof opts.limit === "undefined" || opts.limit === null ? 102400 : bytes.parse(opts.limit);
       var type = opts.type || "application/octet-stream";
       var verify = opts.verify || false;
+      if (limit === null) {
+        throw new TypeError('option limit "' + String(opts.limit) + '" is invalid');
+      }
       if (verify !== false && typeof verify !== "function") {
         throw new TypeError("option verify must be function");
       }
@@ -27802,9 +27814,12 @@ var require_text = __commonJS({
       var opts = options || {};
       var defaultCharset = opts.defaultCharset || "utf-8";
       var inflate = opts.inflate !== false;
-      var limit = typeof opts.limit !== "number" ? bytes.parse(opts.limit || "100kb") : opts.limit;
+      var limit = typeof opts.limit === "undefined" || opts.limit === null ? 102400 : bytes.parse(opts.limit);
       var type = opts.type || "text/plain";
       var verify = opts.verify || false;
+      if (limit === null) {
+        throw new TypeError('option limit "' + String(opts.limit) + '" is invalid');
+      }
       if (verify !== false && typeof verify !== "function") {
         throw new TypeError("option verify must be function");
       }
@@ -30413,9 +30428,12 @@ var require_urlencoded = __commonJS({
       }
       var extended = opts.extended !== false;
       var inflate = opts.inflate !== false;
-      var limit = typeof opts.limit !== "number" ? bytes.parse(opts.limit || "100kb") : opts.limit;
+      var limit = typeof opts.limit === "undefined" || opts.limit === null ? 102400 : bytes.parse(opts.limit);
       var type = opts.type || "application/x-www-form-urlencoded";
       var verify = opts.verify || false;
+      if (limit === null) {
+        throw new TypeError('option limit "' + String(opts.limit) + '" is invalid');
+      }
       if (verify !== false && typeof verify !== "function") {
         throw new TypeError("option verify must be function");
       }
@@ -55942,7 +55960,7 @@ async function selectCallbackPort(serverUrl, specifiedPort, _unused) {
 }
 
 // src/lib/config.ts
-var MCP_WORDPRESS_REMOTE_VERSION = "0.3.4";
+var MCP_WORDPRESS_REMOTE_VERSION = "0.4.0";
 function parsePositiveIntEnv(value, defaultValue) {
   if (!value) {
     return defaultValue;
@@ -56387,13 +56405,19 @@ async function getAgentForUrl(url2) {
         const socksMatch = directive.match(/SOCKS5?\s+(\S+):(\d+)/i);
         if (socksMatch) {
           const proxyUrl = `socks5h://${socksMatch[1]}:${socksMatch[2]}`;
-          logger.debug(`PAC returned SOCKS proxy for ${url2}: ${sanitizeProxyUrl(proxyUrl)}`, "PROXY");
+          logger.debug(
+            `PAC returned SOCKS proxy for ${url2}: ${sanitizeProxyUrl(proxyUrl)}`,
+            "PROXY"
+          );
           return new SocksProxyAgent(proxyUrl);
         }
         const proxyMatch = directive.match(/PROXY\s+(\S+):(\d+)/i);
         if (proxyMatch) {
           const proxyUrl = `http://${proxyMatch[1]}:${proxyMatch[2]}`;
-          logger.debug(`PAC returned HTTP proxy for ${url2}: ${sanitizeProxyUrl(proxyUrl)}`, "PROXY");
+          logger.debug(
+            `PAC returned HTTP proxy for ${url2}: ${sanitizeProxyUrl(proxyUrl)}`,
+            "PROXY"
+          );
           return new HttpsProxyAgent(proxyUrl);
         }
       }
@@ -56574,7 +56598,7 @@ function mapHttpStatusToMcpCode(statusCode) {
     RESOURCE_NOT_FOUND: -32002,
     // Resource not found
     TOOL_NOT_FOUND: -32003,
-    // Tool not found  
+    // Tool not found
     PROMPT_NOT_FOUND: -32004,
     // Prompt not found
     PERMISSION_DENIED: -32008,
@@ -56642,7 +56666,11 @@ function mcpErrorParts(error51) {
   if (wpError) {
     return { code: wpError.code, message: wpError.message ?? error51.message, data: wpError.data };
   }
-  return { code: deriveMcpErrorCode(error51), message: error51.message, data: buildApiErrorData(error51) };
+  return {
+    code: deriveMcpErrorCode(error51),
+    message: error51.message,
+    data: buildApiErrorData(error51)
+  };
 }
 function convertAPIErrorToMcpError(error51) {
   return { error: mcpErrorParts(error51) };
@@ -57130,7 +57158,7 @@ async function discoverAuthorizationServerMetadata(authorizationServerUrl) {
     const customHeaders = getCustomHeaders();
     const response = await proxyFetch(metadataUrl.toString(), {
       headers: {
-        "Accept": "application/json",
+        Accept: "application/json",
         ...customHeaders
       }
     });
@@ -57167,7 +57195,7 @@ async function discoverProtectedResourceMetadata(resourceUrl) {
     const customHeaders = getCustomHeaders();
     const response = await proxyFetch(metadataUrl.toString(), {
       headers: {
-        "Accept": "application/json",
+        Accept: "application/json",
         ...customHeaders
       }
     });
@@ -57762,7 +57790,7 @@ var MCPOAuthProvider = class {
           if (authInfo.resource_metadata_url) {
             const metadataResponse = await proxyFetch(authInfo.resource_metadata_url, {
               headers: {
-                "Accept": "application/json",
+                Accept: "application/json",
                 ...customHeaders
               }
             });
@@ -57799,6 +57827,12 @@ var MCPOAuthProvider = class {
       logger.oauth("Using provided client ID, skipping dynamic registration");
       return;
     }
+    const storedClientInfo = await readClientInfo(this.serverUrlHash);
+    if (typeof storedClientInfo?.client_id === "string" && storedClientInfo.client_id.length > 0) {
+      this.config.clientId = storedClientInfo.client_id;
+      logger.oauth("Reusing persisted client registration, skipping dynamic registration");
+      return;
+    }
     if (!CONFIG.OAUTH_DYNAMIC_REGISTRATION) {
       throw new OAuthError2(
         "No client ID provided and dynamic registration is disabled",
@@ -58722,10 +58756,7 @@ async function getOAuthTokens() {
         return null;
       }
     } else {
-      logger.warn(
-        "Using legacy OAuth provider. Consider enabling PKCE for MCP compliance",
-        "AUTH"
-      );
+      logger.warn("Using legacy OAuth provider. Consider enabling PKCE for MCP compliance", "AUTH");
       if (!authCoordinator) {
         if (!globalEvents) {
           globalEvents = new EventEmitter3();
@@ -58971,7 +59002,10 @@ async function executeWordPressRequest(requestData, useJsonRpc, sessionIdUsed) {
 }
 async function refreshSession(failedSessionId) {
   if (failedSessionId && globalSessionId && globalSessionId !== failedSessionId) {
-    logger.info("Detected newer session while handling invalid-session error; skipping refresh", "SESSION");
+    logger.info(
+      "Detected newer session while handling invalid-session error; skipping refresh",
+      "SESSION"
+    );
     return;
   }
   if (sessionRefreshPromise) {
@@ -59025,11 +59059,7 @@ async function wpRequest(requestData, useJsonRpc = true, options = {}) {
         sessionIdUsed: sessionIdUsed || "none"
       });
       await refreshSession(sessionIdUsed);
-      const retriedResult = await executeWordPressRequest(
-        requestData,
-        useJsonRpc,
-        globalSessionId
-      );
+      const retriedResult = await executeWordPressRequest(requestData, useJsonRpc, globalSessionId);
       return retriedResult.responseData;
     }
     if (error51 instanceof APIError) {
@@ -59117,7 +59147,10 @@ async function waitForInit(context, timeoutMs = INIT_TIMEOUT_MS) {
 
 // src/lib/transport-detection.ts
 async function detectTransportType(context, initParams) {
-  logger.info("\u{1F50D} Starting transport detection and WordPress API initialization...", "TRANSPORT_DETECT");
+  logger.info(
+    "\u{1F50D} Starting transport detection and WordPress API initialization...",
+    "TRANSPORT_DETECT"
+  );
   let init;
   let transportType = null;
   const enhancedParams = initParams ? { ...initParams } : {};
@@ -59144,11 +59177,15 @@ async function detectTransportType(context, initParams) {
         proxyVersion: MCP_WORDPRESS_REMOTE_VERSION
       });
     } else {
-      logger.warn("clientInfo is present but not a valid object, skipping enhancement", "TRANSPORT_DETECT", {
-        clientInfoType: typeof enhancedParams.clientInfo,
-        isArray: Array.isArray(enhancedParams.clientInfo),
-        isNull: enhancedParams.clientInfo === null
-      });
+      logger.warn(
+        "clientInfo is present but not a valid object, skipping enhancement",
+        "TRANSPORT_DETECT",
+        {
+          clientInfoType: typeof enhancedParams.clientInfo,
+          isArray: Array.isArray(enhancedParams.clientInfo),
+          isNull: enhancedParams.clientInfo === null
+        }
+      );
     }
   } else {
     logger.debug("No clientInfo provided in initialize parameters", "TRANSPORT_DETECT");
@@ -59202,8 +59239,14 @@ async function detectTransportType(context, initParams) {
       logger.info("\u2705 Simple transport detected and working", "TRANSPORT_DETECT");
       logger.debug("Simple initialization response:", "TRANSPORT_DETECT", init);
     } catch (simpleError) {
-      logger.error("\u274C Both JSON-RPC and simple transports failed", "TRANSPORT_DETECT", simpleError);
-      const connectionError = new Error("Unable to establish connection with either transport type");
+      logger.error(
+        "\u274C Both JSON-RPC and simple transports failed",
+        "TRANSPORT_DETECT",
+        simpleError
+      );
+      const connectionError = new Error(
+        "Unable to establish connection with either transport type"
+      );
       connectionError.cause = simpleError;
       throw connectionError;
     }
@@ -59216,7 +59259,10 @@ async function detectTransportType(context, initParams) {
   } else {
     logger.warn("No session ID received from WordPress - continuing without session", "PROXY");
   }
-  logger.info(`WordPress connection initialized successfully using ${transportType} transport`, "PROXY");
+  logger.info(
+    `WordPress connection initialized successfully using ${transportType} transport`,
+    "PROXY"
+  );
   return {
     transportType,
     initResult: init,
@@ -59224,6 +59270,31 @@ async function detectTransportType(context, initParams) {
   };
 }
 
+// src/lib/tool-call-hooks.ts
+var REGISTRY_KEY = Symbol.for("@automattic/mcp-wordpress-remote:tool-call-hooks");
+function getRegistry() {
+  const globalObject = globalThis;
+  let registry2 = globalObject[REGISTRY_KEY];
+  if (!registry2) {
+    registry2 = /* @__PURE__ */ new Set();
+    globalObject[REGISTRY_KEY] = registry2;
+  }
+  return registry2;
+}
+function runToolCallHooks(context) {
+  const hooks = [...getRegistry()];
+  if (hooks.length === 0) return;
+  setImmediate(() => {
+    for (const hook of hooks) {
+      void Promise.resolve().then(() => hook(context)).catch((error51) => {
+        const message = error51 instanceof Error ? error51.message : String(error51);
+        logger.error(`Tool-call hook failed: ${message}`, "HOOKS");
+      }).catch(() => {
+      });
+    }
+  });
+}
+
 // src/lib/request-handler-factory.ts
 function createRequestHandler(config2, context) {
   return async (request) => {
@@ -59245,6 +59316,10 @@ function createRequestHandler(config2, context) {
     const wpParams = config2.paramMapper(request);
     const requestData = prepareRequest(wpParams, request, context);
     const response = await wpRequest(requestData, context.transportType === "jsonrpc");
+    if (config2.method === "tools/call") {
+      const hookWpRequest = (params) => wpRequest(prepareRequest(params, {}, context), context.transportType === "jsonrpc");
+      runToolCallHooks({ name: String(wpParams.name ?? ""), wpRequest: hookWpRequest });
+    }
     return response;
   };
 }
@@ -59285,19 +59360,27 @@ function createWrappedHandler(config2, context) {
       });
       if (isAPIError(error51)) {
         if (context.transportType === "simple") {
-          logger.debug(`Converting APIError to MCP error format for ${config2.name} (simple transport)`, "MCP", {
+          logger.debug(
+            `Converting APIError to MCP error format for ${config2.name} (simple transport)`,
+            "MCP",
+            {
+              statusCode: error51.statusCode,
+              endpoint: error51.endpoint,
+              message: error51.message
+            }
+          );
+          return convertAPIErrorToMcpError(error51);
+        }
+        logger.debug(
+          `Converting APIError to McpError for ${config2.name} (jsonrpc transport)`,
+          "MCP",
+          {
             statusCode: error51.statusCode,
+            code: error51.code,
             endpoint: error51.endpoint,
             message: error51.message
-          });
-          return convertAPIErrorToMcpError(error51);
-        }
-        logger.debug(`Converting APIError to McpError for ${config2.name} (jsonrpc transport)`, "MCP", {
-          statusCode: error51.statusCode,
-          code: error51.code,
-          endpoint: error51.endpoint,
-          message: error51.message
-        });
+          }
+        );
         throw apiErrorToMcpError(error51);
       }
       throw error51;
@@ -59467,7 +59550,9 @@ async function WordPressProxy() {
           version: MCP_WORDPRESS_REMOTE_VERSION
         },
         capabilities: {
-          experimental: { connectionFailed: connectionError.code ? { code: connectionError.code } : {} }
+          experimental: {
+            connectionFailed: connectionError.code ? { code: connectionError.code } : {}
+          }
         },
         instructions: `MCP WordPress Remote Proxy Server (Connection Failed${connectionError.code ? `: ${connectionError.code}` : ""})`
       };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@automattic/mcp-wordpress-remote",
-  "version": "0.3.4",
+  "version": "0.4.0",
   "description": "MCP WordPress Remote proxy server",
   "engines": {
     "node": ">=18.0.0"
@@ -12,6 +12,7 @@
     "proxy"
   ],
   "author": "Automattic Inc.",
+  "license": "MIT",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/Automattic/mcp-wordpress-remote.git"
@@ -39,7 +40,7 @@
   "scripts": {
     "build": "tsup",
     "build:watch": "tsup --watch",
-    "check": "prettier --check . && tsc",
+    "check": "prettier --check src && tsc --noEmit",
     "start": "NODE_ENV=development tsup --watch",
     "dev": "NODE_ENV=development node dist/proxy.js",
     "test": "jest",