@diviops/mcp-server 1.5.14 → 1.5.17

package/README.md

@@ -64,7 +64,7 @@ The skill enforces the Divi block format, the design system, and the response co
 
 ## Tools at a glance
 
-The server exposes **73 tools** across the categories below. Each category links to representative tools; the full table lives in [server-reference.md](../docs/server-reference.md).
+The server exposes **73 always-on tools** across the categories below. Each category links to representative tools; the full table lives in [server-reference.md](../docs/server-reference.md).
 
 | Category | Use case | Tool prefixes |
 |----------|----------|---------------|
@@ -78,6 +78,15 @@ The server exposes **73 tools** across the categories below. Each category links
 | WP-CLI passthrough | Escape hatch for site ops | `meta_wp_cli` |
 | Cache + meta | Connection probe, identity, icons, cache flush | `meta_*` |
 
+Additional **conditionally-registered Pro tools** appear only on sites that have the Pro plugin (`diviops-agent-pro`) active alongside the target coverage plugin:
+
+| Category | Conditional gate | Tool names |
+|----------|------------------|------------|
+| FluentCart reads (V1) | Pro plugin + FluentCart installed + module enabled | `diviops_fc_product_list`, `diviops_fc_product_get` |
+| FluentCart simple product writes (V2) | Pro plugin + FluentCart installed + module enabled | `diviops_fc_product_create`, `diviops_fc_product_update`, `diviops_fc_product_delete` |
+
+When the gates are not satisfied, the tools simply don't appear on the MCP surface — no error envelope, no missing-capability hint. See the `diviops-fluentcart` skill bundle for the operator-side guide.
+
 See [server-reference.md](../docs/server-reference.md) for per-tool descriptions.
 
 ## Bundled CLI — `diviops-preset`

package/data/verified-attrs-backlog.json

@@ -13,7 +13,7 @@
       "blocker": "Pattern is VB_PRESET_STORAGE_VERIFIED (round-4-section.json) but applicability[divi/heading].cell_evidence_level is SCHEMA_OBSERVED. Need a divi/heading module-preset capture that emits module.decoration.background.desktop.value.color to lift the cell.",
       "capture_target": "module-preset on divi/heading with module.decoration.background.desktop.value.color set via VB",
       "value_to_authoring": "high (heading-with-background is a common pattern for accent / callout headings)",
-      "notes": "Should be captured on divi5-clean.local per reference_substrate_roles."
+      "notes": "Should be captured on the canonical clean reference substrate per reference_substrate_roles."
     },
     {
       "priority": 1,
@@ -85,14 +85,14 @@
       "priority": 2,
       "pattern_family": "divi/spacing",
       "current_effective_evidence": "SCHEMA_OBSERVED",
-      "blocker": "Track 7a (2026-05-23, addresses #747) captured divi/spacing group-preset bound to divi/section on Divi 5.6.0, with both padding and margin axes confirmed sparse-emit + always-paired-sync-flags shape. Pattern level + divi/section cell promoted to VB_PRESET_STORAGE_VERIFIED. Heading/text/button cells still need their own roundtrips on divi5-clean.local (canonical reference substrate) — each module's per-wrapper spacing cell may have its own shape quirks per feedback_preset_map_per_module, AND the group_id value (currently schema-inferred as 'title.decoration.spacing' / 'content.decoration.spacing' / 'module.decoration.spacing') is now KNOWN-MAYBE-WRONG since the section cell uses groupId='designSpacing' (Composable Settings panel id, not dotted attr path); per-cell capture must verify whether each cell uses the same value or a wrapper-prefixed variant.",
+      "blocker": "The canonical section spacing capture (2026-05-23) captured divi/spacing group-preset bound to divi/section on Divi 5.6.0, with both padding and margin axes confirmed sparse-emit + always-paired-sync-flags shape. Pattern level + divi/section cell promoted to VB_PRESET_STORAGE_VERIFIED. Heading/text/button cells still need their own roundtrips on the canonical clean reference substrate — each module's per-wrapper spacing cell may have its own shape quirks per feedback_preset_map_per_module, AND the group_id value (currently schema-inferred as 'title.decoration.spacing' / 'content.decoration.spacing' / 'module.decoration.spacing') is now KNOWN-MAYBE-WRONG since the section cell uses groupId='designSpacing' (Composable Settings panel id, not dotted attr path); per-cell capture must verify whether each cell uses the same value or a wrapper-prefixed variant.",
       "capture_targets": [
-        "divi/spacing group preset bound to title wrapper on divi/heading (proper capture on divi5-clean.local; do NOT use divi5-ai sandbox preset ecs423stpr or yjh59i25br as evidence — they are unverified residue from prior exploration)",
-        "divi/spacing group preset bound to content wrapper on divi/text (proper capture on divi5-clean.local)",
+        "divi/spacing group preset bound to title wrapper on divi/heading (proper capture on the canonical clean reference substrate; do NOT use sandbox preset ecs423stpr or yjh59i25br as evidence — they are unverified residue from prior exploration)",
+        "divi/spacing group preset bound to content wrapper on divi/text (proper capture on the canonical clean reference substrate)",
         "divi/spacing group preset bound to module wrapper on divi/button (Button exception path — Button uses module.decoration.spacing per Button exception, not button.decoration.spacing which is VB-hidden)"
       ],
       "value_to_authoring": "very high (Composable Settings spacing presets are the entire preset-driven authoring story for spacing)",
-      "notes": "Pattern-level already promoted via Track 7a divi/section capture. Remaining captures lift only their per-module cells (no further pattern-level promotion needed). Each capture must independently verify groupId — do NOT assume 'designSpacing' propagates from the section cell. Note: divi5-ai sandbox has three pre-existing divi/spacing presets (g4zpdl2v6g, ecs423stpr, yjh59i25br) that visually carry sparse-emit shape including title-wrapper variants, but these are unverified residue; treat as 'question is approachable' only, not as evidence."
+      "notes": "Pattern-level already promoted via the canonical section spacing capture. Remaining captures lift only their per-module cells (no further pattern-level promotion needed). Each capture must independently verify groupId — do NOT assume 'designSpacing' propagates from the section cell. Note: the write/reset sandbox substrate has three pre-existing divi/spacing presets (g4zpdl2v6g, ecs423stpr, yjh59i25br) that visually carry sparse-emit shape including title-wrapper variants, but these are unverified residue; treat as 'question is approachable' only, not as evidence."
     },
     {
       "priority": 2,

package/data/verified-attrs.json

@@ -18,9 +18,9 @@
     "Tier 3 = module-specific unique attrs. Per-module cell-level only.",
     "Group-preset routing fields (group_name + group_id) appear per applicability cell on preset_type:group entries because shared buckets (e.g. divi/spacing) have constant groupName across modules but divergent groupId per use.",
     "styleAttrs shorthand contract: capture files may use shorthand strings (e.g. 'byte-identical to attrs'); treat semantically as deepClone(attrs). Do not rewrite captures.",
-    "Day-one allowlist is a DERIVED QUERY at Track 4 CLI runtime: filter entries whose effective evidence (min rule above) is >= VB_PRESET_STORAGE_VERIFIED. No separate allowlist artifact ships.",
+    "Day-one allowlist is a DERIVED QUERY at preset-CLI runtime: filter entries whose effective evidence (min rule above) is >= VB_PRESET_STORAGE_VERIFIED. No separate allowlist artifact ships.",
     "Pattern A (Google Fonts: separate family + weight) and Pattern B (local-hosted: weight encoded in family string) are distinct entries; write emitter MUST NOT vouch one with the other's evidence.",
-    "Sources point to durable locations only: committed files in this repo (docs/, .claude/skills/) or stable URLs. .oaris/drafts/ paths are forbidden."
+    "Sources point to durable locations only: committed files in this repo (docs/, .claude/skills/) or stable URLs. Gitignored draft paths are forbidden."
   ],
   "tier1": [
     {
@@ -77,7 +77,7 @@
       "pattern_evidence_source": "docs/verification/evidence/canonical-shape-dumps-2026-05-18/round-4-section.json",
       "pattern_divi_version": "5.5.2",
       "pattern_verified_at": "2026-05-18",
-      "canonical_shape_note": "module.decoration.spacing.desktop.value.padding (and .margin) is sparse-emit: only user-touched corners (top, right, bottom, left) appear in attrs, plus syncVertical + syncHorizontal which BOTH always emit on any spacing touch (atomic sibling pair — both engage together even when only one direction was touched). Sync flag values are 'off' by default, 'on' when user explicitly enables sync. Round-4 section main capture (top+bottom touched) stored {top, bottom, syncVertical, syncHorizontal} — no left/right. Round-4 discriminator (top+bottom only, sync explicitly NOT touched) confirms sync flags engage atomically while corners do not. Phase 2 emitter rule: emit only the specified corners + always emit both sync flags. Atomicity claim revised 2026-05-23 per Track 7a (#747) group-bucket capture which corroborates the same sparse-emit + always-paired-sync shape on the group-preset path (evidence: docs/verification/evidence/canonical-shape-dumps-2026-05-23/round-5-spacing-section.json).",
+      "canonical_shape_note": "module.decoration.spacing.desktop.value.padding (and .margin) is sparse-emit: only user-touched corners (top, right, bottom, left) appear in attrs, plus syncVertical + syncHorizontal which BOTH always emit on any spacing touch (atomic sibling pair — both engage together even when only one direction was touched). Sync flag values are 'off' by default, 'on' when user explicitly enables sync. Round-4 section main capture (top+bottom touched) stored {top, bottom, syncVertical, syncHorizontal} — no left/right. Round-4 discriminator (top+bottom only, sync explicitly NOT touched) confirms sync flags engage atomically while corners do not. Phase 2 emitter rule: emit only the specified corners + always emit both sync flags. Atomicity claim revised 2026-05-23 per the canonical section spacing group-bucket capture which corroborates the same sparse-emit + always-paired-sync shape on the group-preset path (evidence: docs/verification/evidence/canonical-shape-dumps-2026-05-23/round-5-spacing-section.json).",
       "applicability": {
         "divi/section": {
           "wrapper": "module",
@@ -88,7 +88,7 @@
           "source": "docs/verification/evidence/canonical-shape-dumps-2026-05-18/round-4-section.json",
           "preset_map_key": "module.decoration.spacing__padding",
           "state": "desktop.value",
-          "caveats": ["Padding (and margin) is sparse-emit: corners appear ONLY when user touched them; syncVertical + syncHorizontal always emit on any spacing touch (atomic sibling pair). Phase 2 emitter rule: emit only the specified corners + always emit both sync flags. Default sync values are 'off'; 'on' when user explicitly enables sync. Atomicity claim revised 2026-05-23 per Track 7a evidence."]
+          "caveats": ["Padding (and margin) is sparse-emit: corners appear ONLY when user touched them; syncVertical + syncHorizontal always emit on any spacing touch (atomic sibling pair). Phase 2 emitter rule: emit only the specified corners + always emit both sync flags. Default sync values are 'off'; 'on' when user explicitly enables sync. Atomicity claim revised 2026-05-23 per the canonical section spacing capture evidence."]
         },
         "divi/heading": {
           "wrapper": "module",
@@ -499,7 +499,7 @@
       "pattern_evidence_source": "docs/verification/evidence/canonical-shape-dumps-2026-05-23/round-5-spacing-section.json",
       "pattern_divi_version": "5.6.0",
       "pattern_verified_at": "2026-05-23",
-      "canonical_shape_note": "Composable Settings spacing bucket (group preset). VB-verified on Divi 5.6.0 via Track 7a (divi/section cell only): groupId is the Composable Settings panel id 'designSpacing' (NOT a dotted attribute path — prior 'module.decoration.spacing' note was a misread). primaryAttrName is 'module' for section spacing; registry schema does not carry primaryAttrName today, recorded in the divi/section cell caveats instead. Attrs root: attrs.<primaryAttrName>.decoration.spacing.desktop.value.{padding|margin}, where both padding and margin follow the IDENTICAL sparse-emit rule: only user-touched corners (top, right, bottom, left) appear, with syncVertical + syncHorizontal always emitted together on any spacing touch (atomic sibling pair; 'off' by default, 'on' when user explicitly enables sync). Margin capture (kxc3elho8v on divi5-ai sandbox) corroborates the same shape rule with single-corner touch on the margin axis. Round-trip render-side verification (divi/section block referencing an MCP-created preset on divi5-ai page 1520): clean — empty corners stay empty in VB, no phantom defaults. Inner-element variants (title, content wrappers) and non-section module cells (heading, text, button) are NOT verified — they retain schema-inferred group_id values with caveats; do NOT extrapolate this section evidence to those cells per feedback_preset_map_per_module.",
+      "canonical_shape_note": "Composable Settings spacing bucket (group preset). VB-verified on Divi 5.6.0 via the canonical section spacing capture (divi/section cell only): groupId is the Composable Settings panel id 'designSpacing' (NOT a dotted attribute path — prior 'module.decoration.spacing' note was a misread). primaryAttrName is 'module' for section spacing; registry schema does not carry primaryAttrName today, recorded in the divi/section cell caveats instead. Attrs root: attrs.<primaryAttrName>.decoration.spacing.desktop.value.{padding|margin}, where both padding and margin follow the IDENTICAL sparse-emit rule: only user-touched corners (top, right, bottom, left) appear, with syncVertical + syncHorizontal always emitted together on any spacing touch (atomic sibling pair; 'off' by default, 'on' when user explicitly enables sync). Margin capture (kxc3elho8v on the write/reset sandbox substrate) corroborates the same shape rule with single-corner touch on the margin axis. Round-trip render-side verification (divi/section block referencing an MCP-created preset on the write/reset sandbox substrate, page 1520): clean — empty corners stay empty in VB, no phantom defaults. Inner-element variants (title, content wrappers) and non-section module cells (heading, text, button) are NOT verified — they retain schema-inferred group_id values with caveats; do NOT extrapolate this section evidence to those cells per feedback_preset_map_per_module.",
       "applicability": {
         "divi/heading": {
           "wrapper": "title",
@@ -512,7 +512,7 @@
           "source": ".claude/skills/divi-5-builder/references/presets.md#known-group-bucket-inventory-vb-verified-2026-05-04",
           "caveats": [
             "divi/spacing group bucket VB-confirmed (5.4.0); per-module title-spacing cell needs its own roundtrip",
-            "group_id is NOT VB-verified for this cell — value 'title.decoration.spacing' is schema-inferred. Track 7a (5.6.0) proved the section cell uses groupId='designSpacing' (Composable Settings panel id, not dotted attr path); whether heading uses the same value or a wrapper-prefixed variant is unverified. Do NOT use this group_id for preset writes until a heading-spacing capture on divi5-clean.local lands. Note: sandbox presets on divi5-ai.local (ids ecs423stpr, yjh59i25br) are bound to title wrapper with the same sparse-emit shape, but these are unverified residue and explicitly NOT used as evidence; proper capture on canonical reference substrate is required."
+            "group_id is NOT VB-verified for this cell — value 'title.decoration.spacing' is schema-inferred. The canonical section spacing capture (5.6.0) proved the section cell uses groupId='designSpacing' (Composable Settings panel id, not dotted attr path); whether heading uses the same value or a wrapper-prefixed variant is unverified. Do NOT use this group_id for preset writes until a heading-spacing capture on the canonical clean reference substrate lands. Note: write/reset sandbox presets (ids ecs423stpr, yjh59i25br) are bound to title wrapper with the same sparse-emit shape, but these are unverified residue and explicitly NOT used as evidence; proper capture on the canonical reference substrate is required."
           ]
         },
         "divi/text": {
@@ -525,7 +525,7 @@
           "verified_at": "2026-05-19",
           "source": ".claude/skills/divi-5-builder/references/presets.md#known-group-bucket-inventory-vb-verified-2026-05-04",
           "caveats": [
-            "group_id is NOT VB-verified for this cell — value 'content.decoration.spacing' is schema-inferred. Track 7a (5.6.0) proved the section cell uses groupId='designSpacing' (Composable Settings panel id, not dotted attr path); whether text uses the same value or a wrapper-prefixed variant is unverified. Do NOT use this group_id for preset writes until a text-spacing capture on divi5-clean.local lands."
+            "group_id is NOT VB-verified for this cell — value 'content.decoration.spacing' is schema-inferred. The canonical section spacing capture (5.6.0) proved the section cell uses groupId='designSpacing' (Composable Settings panel id, not dotted attr path); whether text uses the same value or a wrapper-prefixed variant is unverified. Do NOT use this group_id for preset writes until a text-spacing capture on the canonical clean reference substrate lands."
           ]
         },
         "divi/section": {
@@ -556,7 +556,7 @@
           "source": ".claude/skills/divi-5-builder/references/presets.md#known-group-bucket-inventory-vb-verified-2026-05-04",
           "caveats": [
             "Button padding is canonically authored on module.decoration.spacing per Button exception (NOT button.decoration.spacing which is VB-hidden)",
-            "group_id is NOT VB-verified for this cell — value 'module.decoration.spacing' is schema-inferred. Track 7a (5.6.0) proved the section cell uses groupId='designSpacing' (Composable Settings panel id, not dotted attr path); whether button uses the same value or differs is unverified. Do NOT use this group_id for preset writes until a button-spacing capture on divi5-clean.local lands."
+            "group_id is NOT VB-verified for this cell — value 'module.decoration.spacing' is schema-inferred. The canonical section spacing capture (5.6.0) proved the section cell uses groupId='designSpacing' (Composable Settings panel id, not dotted attr path); whether button uses the same value or differs is unverified. Do NOT use this group_id for preset writes until a button-spacing capture on the canonical clean reference substrate lands."
           ]
         }
       }

package/dist/compatibility.d.ts

@@ -27,6 +27,17 @@
  * Pre-release versions (e.g. 1.0.0-beta.22) sort before their release (1.0.0).
  */
 export declare function compareVersions(a: string, b: string): -1 | 0 | 1;
+/**
+ * Per-target presence record (ADR-003 § handshake shape). `present`
+ * reports whether the target plugin is installed + bootable on this
+ * site; `version` is advisory only and may be null when version
+ * detection is unavailable (front-end requests can't always reach
+ * `get_plugin_data()`).
+ */
+export interface HandshakeTarget {
+    present: boolean;
+    version?: string | null;
+}
 /**
  * Shape returned by `POST /diviops/v1/handshake`.
  *
@@ -35,6 +46,12 @@ export declare function compareVersions(a: string, b: string): -1 | 0 | 1;
  * a string[] of coarse namespace keys; the server normalizes that
  * legacy shape to an empty map (every gated tool then fails fast
  * with an upgrade hint, which is the intended behavior).
+ *
+ * ADR-003 / ADR-007 Pro-extension fields (`pro_active`,
+ * `pro_version`, `available_targets`, `active_modules`) are
+ * optional — Free-only sites omit them entirely. The server treats
+ * absence as `pro_active: false` + empty target/module maps so
+ * Pro-gated tools cleanly decline registration on Free sites.
  */
 export interface HandshakeResult {
     compatible: boolean;
@@ -45,6 +62,14 @@ export interface HandshakeResult {
         version: string | null;
     };
     capabilities: Record<string, boolean>;
+    /** ADR-007 § 7.1 — Pro plugin presence flag. Undefined on Free sites. */
+    pro_active?: boolean;
+    /** ADR-003 — Pro plugin version (when `pro_active === true`). */
+    pro_version?: string;
+    /** ADR-003 — per-target presence map (FluentCart, future slices). */
+    available_targets?: Record<string, HandshakeTarget>;
+    /** ADR-003 — per-target admin-controlled activation toggle. */
+    active_modules?: Record<string, boolean>;
 }
 /**
  * Thrown when a tool handler calls `requireCapability(key)` and the

package/dist/index.js

@@ -136,6 +136,58 @@ function registerLocalTool(name, config, handler) {
     recordIdempotent(name, config?._meta);
     server.registerTool(name, config, handler);
 }
+/**
+ * Register a Pro-coverage-slice tool (ADR-003 / ADR-007).
+ *
+ * Differs from `registerPluginTool` in three ways:
+ *
+ * 1. **Capability-key override.** The MCP tool name follows the
+ *    `diviops_<namespace>_<verb>` convention (e.g. `diviops_fc_product_list`),
+ *    while the plugin-side capability key follows ADR-007's
+ *    `<target>_<noun>_<verb>` shape (e.g. `fluentcart_product_list`).
+ *    The two don't share a stripping rule, so the capability key must
+ *    be passed explicitly.
+ *
+ * 2. **Conditional registration.** The tool is registered with the
+ *    MCP server ONLY when all four gates align at handshake time:
+ *      - handshakeState.kind === "ok"
+ *      - proActive === true
+ *      - availableTargets[target].present === true
+ *      - activeModules[target] === true
+ *      - capabilities[capabilityKey] === true
+ *
+ *    When any gate is false the call is a no-op — the tool simply
+ *    doesn't exist on the MCP surface. Per ADR-007 "no error surface,
+ *    just absence."
+ *
+ * 3. **No runtime requireCapability().** Because registration is
+ *    already gated at startup, the wrapped handler doesn't need to
+ *    recheck capabilities on every call. The wp.request() call is
+ *    still naturally guarded by the plugin's permission_callback +
+ *    route presence at the WP side.
+ *
+ * **Call-site ordering.** This helper MUST be invoked from
+ * `registerProTools()` (run after the handshake settles in `main()`),
+ * not at module load time. Calling it at module load would always
+ * short-circuit on `handshakeState.kind === "pending"`. The Pro tools
+ * are defined inside `registerProTools()` precisely so they can read
+ * the resolved handshakeState.
+ */
+function registerProTool(name, config, handler, gates) {
+    if (handshakeState.kind !== "ok")
+        return;
+    if (!handshakeState.proActive)
+        return;
+    const target = handshakeState.availableTargets[gates.target];
+    if (!target || target.present !== true)
+        return;
+    if (handshakeState.activeModules[gates.target] !== true)
+        return;
+    if (!handshakeState.capabilities[gates.capabilityKey])
+        return;
+    recordIdempotent(name, config?._meta);
+    server.registerTool(name, config, handler);
+}
 /* eslint-enable @typescript-eslint/no-explicit-any */
 // ── dry_run convention ──────────────────────────────────────────────
 //
@@ -2999,21 +3051,308 @@ registerPluginTool("diviops_meta_flush_cache", {
         ],
     };
 });
+// ── Pro coverage-slice tools (ADR-003 / ADR-007) ─────────────────────
+//
+// FCP V1 read tools — ADR-007 § 7.1. Registered through `registerProTool`
+// which short-circuits when any of {pro_active, target presence, module
+// activation, capability key} gates are false. On Free-only sites the
+// FCP tools simply don't exist on the MCP surface — no error envelope,
+// no missing-capability hint, just absence.
+//
+// Run inside `registerProTools()` rather than at module load because the
+// gates read handshakeState which is `pending` until `main()` runs.
+function registerProTools() {
+    // diviops_fc_product_list — bridges /diviops/v1/pro/fluentcart/products
+    registerProTool("diviops_fc_product_list", {
+        description: "List FluentCart Pro products (Pro tier; requires FluentCart Pro installed + activated). Returns a paginated summary list with product identity (id, title, slug, status), variation_type, variants_count, and min/max price. Filterable by `search` (LIKE post_title), `type` (one of physical/digital/subscription/onetime/simple/variations), and `status` (one of publish/draft/pending/private/trash; default returns publish+draft+pending+private). Read-only. Returns the standardized envelope { ok, data?, error: { code, message, hint? } }; the success payload is { products: ProductSummary[], pagination: { page, per_page, total, total_pages }, filters: { search, type, status } }. Error codes: invalid_input (HTTP 400) when type/status filter is out of range; fluentcart.module_inactive (HTTP 412) when FluentCart is uninstalled or the diviops-agent-pro module toggle is off; fluentcart.query_failed (HTTP 500) when the underlying FluentCart model query raises an exception (message field carries the upstream exception). Use this before authoring a Divi commerce page to identify which product IDs / types to render.",
+        inputSchema: {
+            page: z
+                .number()
+                .int()
+                .positive()
+                .optional()
+                .default(1)
+                .describe("Page number, 1-indexed. Default 1."),
+            per_page: z
+                .number()
+                .int()
+                .positive()
+                .optional()
+                .default(20)
+                .describe("Page size. Default 20, clamped to a max of 100 per call."),
+            search: z
+                .string()
+                .optional()
+                .describe("Search term — matches against product post_title via SQL LIKE %term%. Case-insensitive on most MySQL collations."),
+            type: z
+                .enum([
+                "physical",
+                "digital",
+                "subscription",
+                "onetime",
+                "simple",
+                "variations",
+            ])
+                .optional()
+                .describe("Product type filter. physical/digital filter by fulfillment_type on variations; subscription/onetime filter by payment_type on variations; simple filters detail.variation_type='simple'; variations filters detail.variation_type in {simple_variations, advanced_variations}."),
+            status: z
+                .enum(["publish", "draft", "pending", "private", "trash"])
+                .optional()
+                .describe("Post status filter. Defaults to all visible-to-admin statuses (publish+draft+pending+private). Pass 'trash' explicitly to inspect trashed products."),
+        },
+        annotations: { idempotentHint: true },
+        _meta: { idempotent: "true" },
+    }, async ({ page, per_page, search, type, status, }) => {
+        const body = {};
+        if (page !== undefined)
+            body.page = page;
+        if (per_page !== undefined)
+            body.per_page = per_page;
+        if (search !== undefined)
+            body.search = search;
+        if (type !== undefined)
+            body.type = type;
+        if (status !== undefined)
+            body.status = status;
+        const result = await wp.requestEnveloped("/pro/fluentcart/products", { method: "POST", body });
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: serializeEnvelope(result, "diviops_fc_product_list"),
+                },
+            ],
+        };
+    }, { target: "fluentcart", capabilityKey: "fluentcart_product_list" });
+    // diviops_fc_product_get — bridges /diviops/v1/pro/fluentcart/products/{id}
+    registerProTool("diviops_fc_product_get", {
+        description: "Fetch a single FluentCart Pro product by ID, including the ProductDetail row, the default-variation read-back fields, and a list of variation IDs (Pro tier; requires FluentCart Pro installed + activated). Read-only. Returns the standardized envelope { ok, data?, error: { code, message, hint? } }; the success payload is { product: { id, title, slug, status, created_at, modified_at, variation_type, variants_count, min_price, max_price, stock_availability, excerpt, content, author_id, view_url, edit_url }, detail: { fulfillment_type, variation_type, min_price, max_price, manage_stock, manage_downloadable, stock_availability, default_variation_id, ... } | null, default_variation: { id, sku, item_price, compare_price } | null, variation_ids: number[], variations_count }. The default_variation block closes the read-after-write loop for the V2 simple-product write tools — sku and compare_price round-trip cleanly without a FluentCart admin fallback. Unit asymmetry: product_create / product_update accept price and compare_price in currency units (e.g. 29.99); product_get returns min_price, max_price, default_variation.item_price, and default_variation.compare_price in stored cents (e.g. 2999). default_variation.sku is null when the stored SKU is SQL NULL; clearing a SKU with sku: \"\" on update reads back as null. default_variation itself is null when the product has no default variation row. Use the variation_ids list to follow up with a (future) diviops_fc_variation_list call. Error codes: invalid_input (HTTP 400) when id is not a positive integer; not_found (HTTP 404) when no product matches the ID (or it's filtered out by the FluentCart auto-draft global scope); fluentcart.module_inactive (HTTP 412) when FluentCart is uninstalled or the module toggle is off; fluentcart.query_failed (HTTP 500) when the FluentCart model query raises an exception.",
+        inputSchema: {
+            id: z
+                .number()
+                .int()
+                .positive()
+                .describe("FluentCart product ID (the post ID of the fluent_products CPT entry)."),
+        },
+        annotations: { idempotentHint: true },
+        _meta: { idempotent: "true" },
+    }, async ({ id }) => {
+        const result = await wp.requestEnveloped(`/pro/fluentcart/products/${id}`, { method: "POST" });
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: serializeEnvelope(result, "diviops_fc_product_get"),
+                },
+            ],
+        };
+    }, { target: "fluentcart", capabilityKey: "fluentcart_product_get" });
+    // ── V2 — simple product writes ─────────────────────────────────────
+    //
+    // Three Pro write tools backing the constrained simple-onetime-product
+    // surface from ADR-007 § 7.1. All three accept `dry_run` (default
+    // false), emit the standard envelope, and refuse non-simple shapes
+    // with `fluentcart.unsupported_product_shape` so the V3 variation
+    // surface can own multi-variant complexity cleanly.
+    // diviops_fc_product_create — POST /diviops/v1/pro/fluentcart/products/create
+    registerProTool("diviops_fc_product_create", {
+        description: "Create a simple FluentCart Pro product (Pro tier; requires FluentCart Pro installed + activated). V2 scope: simple onetime products only — one default variant, `detail.variation_type=\"simple\"`, `payment_type=\"onetime\"`, `fulfillment_type=\"digital\"|\"physical\"`. Multi-variation, subscriptions, downloadables, gallery, taxonomies, activation_limit, and license-flow fields ship in later verticals and are refused here. Required: `title` (1-200 chars). Optional: `status` (`draft`|`publish`|`pending`|`private`; default `draft`), `content`, `excerpt`, `fulfillment_type` (default `digital`), `price` (≥0; default 0), `compare_price` (≥0; must be ≥ `price` when provided), `sku` (unique across variations). Returns the standardized envelope { ok, data?, error: { code, message, hint? } }; apply-mode success payload is { product, detail, default_variation: { id, sku, item_price, compare_price } | null, variation_ids, variations_count, product_id, detail_id, default_variation_id } (HTTP 201). The default_variation block mirrors the diviops_fc_product_get read-back shape so callers don't need a follow-up read to confirm sku / compare_price / item_price after a write. Unit asymmetry: write inputs (price, compare_price) are in currency units (e.g. 29.99); the default_variation block returns item_price + compare_price in stored cents (e.g. 2999), matching detail.min_price / max_price. default_variation.compare_price is null when no compare price is stored (FCP persists \"no compare\" as 0, normalized to null on read); default_variation.sku is null when the SKU column is SQL NULL or an empty string (the create path stores omitted SKU as NULL). Error codes: invalid_input (400) when any input violates the constraints above; fluentcart.sku_conflict (409) when the provided SKU is already in use; fluentcart.module_inactive (412); fluentcart.command_failed (500) when wp_insert_post/ProductDetail/ProductVariation creation raises. Idempotency: NOT idempotent — repeat calls create distinct products." +
+            DRY_RUN_DESC_SUFFIX,
+        inputSchema: {
+            title: z
+                .string()
+                .min(1)
+                .max(200)
+                .describe("Product title (post_title). 1-200 chars. Used verbatim as the default variation's variation_title."),
+            status: z
+                .enum(["draft", "publish", "pending", "private"])
+                .optional()
+                .describe("Post status. Defaults to 'draft'."),
+            content: z
+                .string()
+                .optional()
+                .describe("Long product description (post_content). Optional."),
+            excerpt: z
+                .string()
+                .optional()
+                .describe("Short product summary (post_excerpt). Optional."),
+            fulfillment_type: z
+                .enum(["digital", "physical"])
+                .optional()
+                .describe("Fulfillment shape — digital downloads vs physical shipping. Defaults to 'digital'."),
+            price: z
+                .number()
+                .min(0)
+                .optional()
+                .describe("Default variation's item_price (currency units, e.g. dollars — converted to cents server-side). Non-negative. Defaults to 0."),
+            compare_price: z
+                .number()
+                .min(0)
+                .optional()
+                .describe("Default variation's compare-at price (strike-through). Must be ≥ `price` when both provided. Non-negative."),
+            sku: z
+                .string()
+                .optional()
+                .describe("Default variation's SKU. Must be unique across all FluentCart variations. Omit to skip SKU assignment."),
+            dry_run: DRY_RUN_FIELD,
+        },
+        annotations: { idempotentHint: false },
+        _meta: { idempotent: "false" },
+    }, async ({ title, status, content, excerpt, fulfillment_type, price, compare_price, sku, dry_run, }) => {
+        const body = { title };
+        if (status !== undefined)
+            body.status = status;
+        if (content !== undefined)
+            body.content = content;
+        if (excerpt !== undefined)
+            body.excerpt = excerpt;
+        if (fulfillment_type !== undefined)
+            body.fulfillment_type = fulfillment_type;
+        if (price !== undefined)
+            body.price = price;
+        if (compare_price !== undefined)
+            body.compare_price = compare_price;
+        if (sku !== undefined)
+            body.sku = sku;
+        if (dry_run !== undefined)
+            body.dry_run = dry_run;
+        const result = await wp.requestEnveloped("/pro/fluentcart/products/create", { method: "POST", body });
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: serializeEnvelope(result, "diviops_fc_product_create"),
+                },
+            ],
+        };
+    }, { target: "fluentcart", capabilityKey: "fluentcart_product_create" });
+    // diviops_fc_product_update — POST /diviops/v1/pro/fluentcart/products/{id}/update
+    registerProTool("diviops_fc_product_update", {
+        description: "Update a simple FluentCart Pro product (Pro tier; requires FluentCart Pro installed + activated). V2 scope: simple onetime products only — accepts partial updates on title, status, content, excerpt, fulfillment_type, price, compare_price, sku. Refuses non-simple products (variation_type other than 'simple', or default variant with payment_type other than 'onetime') with `fluentcart.unsupported_product_shape` (HTTP 422) — multi-variation + subscription writes ship in V3+. Required: `id` (positive integer; the post ID of the fluent_products CPT entry). All other fields optional; only changed fields are applied. When no field actually changes, returns `ok:true` with `data.noop: true` (apply mode) or an empty-plan dry-run summary. Returns the standardized envelope { ok, data?, error: { code, message, hint? } }; apply-mode success payload is { product, detail, default_variation: { id, sku, item_price, compare_price } | null, variation_ids, variations_count, changed_fields[] } (or { noop: true, product, detail, default_variation, ... } on a no-op). The default_variation block reflects the post-update state (or current state on noop) and mirrors the diviops_fc_product_get shape — sku, item_price, and compare_price round-trip without a follow-up read. Unit asymmetry: write inputs (price, compare_price) are in currency units (e.g. 29.99); default_variation returns item_price + compare_price in stored cents (e.g. 2999). default_variation.sku is null after `sku: \"\"` clears it (the empty string is stored as SQL NULL so the variations table's UNIQUE constraint allows multiple cleared SKUs); default_variation.compare_price is null when no compare price is stored (FCP persists \"no compare\" as 0, normalized to null on read). Error codes: invalid_input (400) when any field violates the constraints; not_found (404) when the product ID does not exist; fluentcart.unsupported_product_shape (422) when the product is not simple/onetime; fluentcart.sku_conflict (409) when a new SKU collides with another variation; fluentcart.module_inactive (412); fluentcart.command_failed (500). Idempotency: conditional — repeating an identical update is a no-op." +
+            DRY_RUN_DESC_SUFFIX,
+        inputSchema: {
+            id: z
+                .number()
+                .int()
+                .positive()
+                .describe("FluentCart product ID (the post ID of the fluent_products CPT entry)."),
+            title: z
+                .string()
+                .min(1)
+                .max(200)
+                .optional()
+                .describe("New product title. 1-200 chars."),
+            status: z
+                .enum(["draft", "publish", "pending", "private"])
+                .optional()
+                .describe("New post status."),
+            content: z.string().optional().describe("New long description."),
+            excerpt: z.string().optional().describe("New short summary."),
+            fulfillment_type: z
+                .enum(["digital", "physical"])
+                .optional()
+                .describe("New fulfillment shape."),
+            price: z
+                .number()
+                .min(0)
+                .optional()
+                .describe("New default-variation item_price (currency units). Non-negative."),
+            compare_price: z
+                .number()
+                .min(0)
+                .optional()
+                .describe("New compare-at price. Must be ≥ `price` when both provided."),
+            sku: z
+                .string()
+                .optional()
+                .describe("New SKU for the default variation. Empty string clears the SKU."),
+            dry_run: DRY_RUN_FIELD,
+        },
+        annotations: { idempotentHint: false },
+        _meta: { idempotent: "conditional" },
+    }, async ({ id, title, status, content, excerpt, fulfillment_type, price, compare_price, sku, dry_run, }) => {
+        const body = {};
+        if (title !== undefined)
+            body.title = title;
+        if (status !== undefined)
+            body.status = status;
+        if (content !== undefined)
+            body.content = content;
+        if (excerpt !== undefined)
+            body.excerpt = excerpt;
+        if (fulfillment_type !== undefined)
+            body.fulfillment_type = fulfillment_type;
+        if (price !== undefined)
+            body.price = price;
+        if (compare_price !== undefined)
+            body.compare_price = compare_price;
+        if (sku !== undefined)
+            body.sku = sku;
+        if (dry_run !== undefined)
+            body.dry_run = dry_run;
+        const result = await wp.requestEnveloped(`/pro/fluentcart/products/${id}/update`, { method: "POST", body });
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: serializeEnvelope(result, "diviops_fc_product_update"),
+                },
+            ],
+        };
+    }, { target: "fluentcart", capabilityKey: "fluentcart_product_update" });
+    // diviops_fc_product_delete — POST /diviops/v1/pro/fluentcart/products/{id}/delete
+    registerProTool("diviops_fc_product_delete", {
+        description: "Trash a FluentCart Pro product (Pro tier; requires FluentCart Pro installed + activated). V2 semantics: trash, NOT hard-delete. Uses `wp_trash_post` (not FluentCart's `ProductResource::delete`, which permanently destroys detail / variation rows) so the trash bin remains recoverable from the FluentCart admin UI. Repeat-safe: trashing an already-trashed product returns `ok:true` with `data.already_trashed: true` (no error). Permanent delete is intentionally NOT in V2 — surfaces in a later vertical with explicit policy. Pending-order protection: a product with at least one on-hold or processing order returns `fluentcart.pending_orders` (HTTP 409) and is not bypassable in V2. Returns the standardized envelope { ok, data?, error: { code, message, hint? } }; apply-mode success payload is { trashed: true, product_id } or { already_trashed: true, product_id }. Error codes: invalid_input (400) when id is not a positive integer; not_found (404) when no product matches; fluentcart.pending_orders (409) when the product has on-hold/processing orders; fluentcart.module_inactive (412); fluentcart.command_failed (500). Idempotency: conditional — repeat trash is a no-op." +
+            DRY_RUN_DESC_SUFFIX,
+        inputSchema: {
+            id: z
+                .number()
+                .int()
+                .positive()
+                .describe("FluentCart product ID (the post ID of the fluent_products CPT entry)."),
+            dry_run: DRY_RUN_FIELD,
+        },
+        annotations: { idempotentHint: false },
+        _meta: { idempotent: "conditional" },
+    }, async ({ id, dry_run }) => {
+        const body = {};
+        if (dry_run !== undefined)
+            body.dry_run = dry_run;
+        const result = await wp.requestEnveloped(`/pro/fluentcart/products/${id}/delete`, { method: "POST", body });
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: serializeEnvelope(result, "diviops_fc_product_delete"),
+                },
+            ],
+        };
+    }, { target: "fluentcart", capabilityKey: "fluentcart_product_delete" });
+}
 // ── Start ────────────────────────────────────────────────────────────
 async function main() {
-    // Capability handshake — populate the per-tool gate map (#486).
+    // Capability handshake — populate the per-tool gate map (#486)
+    // and the ADR-003 / ADR-007 Pro-extension surface (target presence,
+    // module activation). On Free-only sites the Pro fields are
+    // normalized to `false` / `{}` by wp-client.
     try {
         const hs = await wp.handshake(SERVER_VERSION);
         handshakeState = {
             kind: "ok",
             capabilities: hs.capabilities,
             pluginVersion: hs.plugin_version,
+            proActive: hs.pro_active === true,
+            availableTargets: hs.available_targets ?? {},
+            activeModules: hs.active_modules ?? {},
         };
         const diviInfo = hs.divi.active
             ? `Divi ${hs.divi.version ?? "unknown"}`
             : "Divi not active";
         const capCount = Object.keys(hs.capabilities).filter((k) => hs.capabilities[k]).length;
-        console.error(`Handshake OK: plugin ${hs.plugin_version}, ${diviInfo}, ${capCount} capabilities`);
+        const proInfo = handshakeState.proActive
+            ? `Pro active (${hs.pro_version ?? "version unknown"})`
+            : "Pro inactive";
+        console.error(`Handshake OK: plugin ${hs.plugin_version}, ${diviInfo}, ${proInfo}, ${capCount} capabilities`);
         if (capCount === 0) {
             console.error("Warning: plugin returned an empty capability map. Plugin-touching tools will fail with an upgrade hint. Update diviops-agent to ≥1.2.0.");
         }
@@ -3029,11 +3368,17 @@ async function main() {
         // failed so plugin-touching tools fall through to their own
         // wp.request() calls and surface the real error (401, 5xx, etc.)
         // instead of being misreported as missing capabilities.
-        // Codex review on PR #525: pre-#486 behavior surfaced the actual
-        // cause; the gate must preserve that.
+        // Prior review feedback: the pre-handshake-gate behavior surfaced the
+        // actual cause; the gate must preserve that.
         handshakeState = { kind: "failed" };
         console.error(`Handshake warning (gate disabled): ${msg}`);
     }
+    // Pro coverage-slice registration must run AFTER the handshake so the
+    // gates (`pro_active`, `available_targets`, `active_modules`,
+    // capability map) reflect the connected site's actual state. On Free
+    // sites — or when the handshake failed — registerProTool's internal
+    // gates short-circuit so no Pro tools register.
+    registerProTools();
     const transport = new StdioServerTransport();
     await server.connect(transport);
     console.error("Divi MCP Server running on stdio");

package/dist/preset-cli/button-emitter.d.ts

@@ -1,5 +1,5 @@
 /**
- * `divi/button` group-preset emitter — Track 4 vertical slice.
+ * `divi/button` group-preset emitter.
  *
  * Emits a byte-canonical Divi 5.5.x `type: "group"` button preset at
  * `attrs.button.decoration.{background, border, font}`, gated by the

package/dist/preset-cli/button-emitter.js

@@ -1,5 +1,5 @@
 /**
- * `divi/button` group-preset emitter — Track 4 vertical slice.
+ * `divi/button` group-preset emitter.
  *
  * Emits a byte-canonical Divi 5.5.x `type: "group"` button preset at
  * `attrs.button.decoration.{background, border, font}`, gated by the

package/dist/preset-cli/cli.d.ts

@@ -1,9 +1,10 @@
 /**
- * `diviops-preset` — standalone preset-emitter CLI (Track 4 scaffold).
+ * `diviops-preset` — standalone preset-emitter CLI.
  *
  * Emits byte-canonical Divi 5.5.x preset JSON, gated by the verified-attrs
- * registry and routed through the existing storage-path contract. Track 4
- * ships one emitter: `divi/button` group presets.
+ * registry and routed through the existing storage-path contract. The
+ * initial slice shipped the `divi/button` group emitter; subsequent slices
+ * added the heading/font, color, and spacing emitters.
  *
  * Usage:
  *   diviops-preset button [options]      Emit a divi/button group preset