@respira/wordpress-mcp-server 6.19.1 → 6.19.3

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAoBH,OAAO,KAAK,EAAE,mBAAmB,EAAe,MAAM,kBAAkB,CAAC;AAiLzE,qBAAa,sBAAsB;IACjC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,WAAW,CAAgC;IACnD,OAAO,CAAC,KAAK,CAA2C;IACxD,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,cAAc,CAAwB;IAC9C,OAAO,CAAC,YAAY,CAA4B;IAChD,8EAA8E;IAC9E,OAAO,CAAC,YAAY,CAA4B;IAChD,8EAA8E;IAC9E,OAAO,CAAC,mBAAmB,CAAS;IAEpC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAsB;IAEhE;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAWzB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;gBA4Bb,WAAW,EAAE,mBAAmB,EAAE,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE;IAmUvE,OAAO,CAAC,cAAc;IAItB;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;IAkB5B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,aAAa;IA4BrB,gEAAgE;IAChE,OAAO,CAAC,aAAa;IAUrB;;;;;;OAMG;YACW,UAAU;IA2CxB;;;;;;;;;;;;;;OAcG;YACW,WAAW;IAyIzB;;;;;;;;;OASG;YACW,kBAAkB;IA6FhC,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,aAAa;YAuNP,kBAAkB;YA6BlB,yBAAyB;IASvC;;;OAGG;IACH,OAAO,CAAC,oBAAoB;YAyBd,QAAQ;IAg/EtB;;;;;;OAMG;IACH,yEAAyE;IACzE,OAAO,CAAC,mBAAmB,CAAoD;IAC/E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAU;YAEpC,oBAAoB;YAqDpB,2BAA2B;IAazC;;;;OAIG;YACW,cAAc;IAY5B,OAAO,CAAC,mBAAmB;IAwT3B;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAe3C;IAEF;;;;OAIG;IACH,OAAO,CAAC,0BAA0B;YAmCpB,cAAc;IAqG5B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,eAAe;YAuCT,gBAAgB;IA0sB9B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAgSzB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IA6UxB,GAAG;CAyCV"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAoBH,OAAO,KAAK,EAAE,mBAAmB,EAAe,MAAM,kBAAkB,CAAC;AAiLzE,qBAAa,sBAAsB;IACjC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,WAAW,CAAgC;IACnD,OAAO,CAAC,KAAK,CAA2C;IACxD,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,cAAc,CAAwB;IAC9C,OAAO,CAAC,YAAY,CAA4B;IAChD,8EAA8E;IAC9E,OAAO,CAAC,YAAY,CAA4B;IAChD,8EAA8E;IAC9E,OAAO,CAAC,mBAAmB,CAAS;IAEpC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAsB;IAEhE;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAWzB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;gBA4Bb,WAAW,EAAE,mBAAmB,EAAE,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE;IAmUvE,OAAO,CAAC,cAAc;IAItB;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;IAkB5B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,aAAa;IA4BrB,gEAAgE;IAChE,OAAO,CAAC,aAAa;IAUrB;;;;;;OAMG;YACW,UAAU;IA2CxB;;;;;;;;;;;;;;OAcG;YACW,WAAW;IAyIzB;;;;;;;;;OASG;YACW,kBAAkB;IA6FhC,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,aAAa;YAuOP,kBAAkB;YA6BlB,yBAAyB;IASvC;;;OAGG;IACH,OAAO,CAAC,oBAAoB;YAyBd,QAAQ;IA28EtB;;;;;;OAMG;IACH,yEAAyE;IACzE,OAAO,CAAC,mBAAmB,CAAoD;IAC/E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAU;YAEpC,oBAAoB;YAqDpB,2BAA2B;IAazC;;;;OAIG;YACW,cAAc;IAY5B,OAAO,CAAC,mBAAmB;IAwT3B;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAe3C;IAEF;;;;OAIG;IACH,OAAO,CAAC,0BAA0B;YAmCpB,cAAc;IAqG5B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,eAAe;YAuCT,gBAAgB;IAisB9B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IA+SzB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IA6UxB,GAAG;CAyCV"}

package/dist/server.js

@@ -968,13 +968,30 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
             }
             // Per-call watchdog: a single hung handler must never wedge the stdio
             // loop for every subsequent tool call. If the deadline fires, the race
-            // rejects with ToolTimeoutError; the losing handler keeps running in
-            // the background but the client gets a clean structured error and the
-            // next tool call is free to proceed.
+            // rejects with ToolTimeoutError, AND we destroy the WP client's HTTP
+            // agents to free the orphaned socket so the next tool call doesn't
+            // queue behind it at the agent layer. v6.19.3 bug fc2bfdf3 — Mauricio
+            // Piper (Fischers Fritze) reported that after one tool deadlocked
+            // every subsequent call, including diagnose_connection, also hung 4
+            // min; only killing Claude Desktop recovered. Per-client agents (now
+            // bounded at maxSockets:16, keepAlive:false) plus this destroy-on-
+            // trip make orphans cost at most one socket for at most the axios
+            // 30s response timeout, instead of indefinitely blocking the pool.
             const toolTimeoutMs = getMaxToolTimeoutMs();
             let timeoutHandle;
+            const siteForAbort = this.currentSite;
             const toolTimeout = new Promise((_, reject) => {
-                timeoutHandle = setTimeout(() => reject(new ToolTimeoutError(name, toolTimeoutMs)), toolTimeoutMs);
+                timeoutHandle = setTimeout(() => {
+                    try {
+                        if (siteForAbort && typeof siteForAbort.abortInFlightRequests === 'function') {
+                            siteForAbort.abortInFlightRequests();
+                        }
+                    }
+                    catch {
+                        // Don't block the rejection on cleanup.
+                    }
+                    reject(new ToolTimeoutError(name, toolTimeoutMs));
+                }, toolTimeoutMs);
             });
             try {
                 this.currentSite.setCurrentToolName(name);
@@ -1254,42 +1271,6 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                 },
                 readOnlyHint: true,
             },
-            {
-                name: 'wordpress_search_abilities',
-                description: 'SEARCH the curated WordPress abilities directory across all known plugins (Elementor, Yoast SEO, WooCommerce, Jetpack, ACF, Akismet, plus Respira\'s own 151 tools — 163 total today, growing weekly via auto-pull). ' +
-                    'Use this whenever the user asks "is there an ability that does X", "can WordPress do Y", "what plugins expose Z as MCP", "how do i automate W on my site". ' +
-                    'Each result is enriched with per-site context: is_installed (is the plugin active on THIS site), is_inhaled (has the admin opted the ability into Respira\'s MCP surface), install_url (wp.org page when not installed), inhale_admin_url (Respira admin tab when installed but not inhaled), and how_to_invoke (the exact tool call to make when ready). ' +
-                    'After finding a matching ability, if is_inhaled is true you can call it via wordpress_invoke_ability. Otherwise surface install_url or inhale_admin_url to the user so they can opt in. ' +
-                    'No auth gates: this surface is open to every agent connected to Respira. The directory itself is global; the enrichment is per-site.',
-                inputSchema: {
-                    type: 'object',
-                    properties: {
-                        q: {
-                            type: 'string',
-                            description: 'Free-text query — matches against ability_name, label, description, plugin_name, category. Optional; an empty query returns the top of the directory.',
-                        },
-                        plugin: {
-                            type: 'string',
-                            description: 'Restrict to a single plugin by wp.org slug (e.g. "wordpress-seo") or display name ("Yoast SEO"). Optional.',
-                        },
-                        category: {
-                            type: 'string',
-                            description: 'Restrict to a single category (e.g. "SEO", "E-commerce", "Page Builder", "Custom Fields"). Optional.',
-                        },
-                        kind: {
-                            type: 'string',
-                            enum: ['read', 'write'],
-                            description: 'Restrict to read-only or write abilities. Optional.',
-                        },
-                        limit: {
-                            type: 'integer',
-                            description: 'Max results to return (default 20, max 100).',
-                            default: 20,
-                        },
-                    },
-                },
-                readOnlyHint: true,
-            },
             {
                 name: 'wordpress_invoke_ability',
                 description: 'Invoke an inhaled WordPress Abilities API ability through the Respira safety wrapper. ' +
@@ -1845,7 +1826,7 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
             },
             {
                 name: 'wordpress_inject_builder_content',
-                description: 'REPLACE (or append to) the entire page builder layout. WARNING: By default this REPLACES all existing content — use mode:"append" to add content without destroying existing elements. For editing a single module, use wordpress_update_module instead. Use exactly: gutenberg, divi, elementor, bricks, beaver, oxygen, breakdance, brizy, thrive, visual-composer, wpbakery. For Divi, divi_version is required ("4" or "5"). Starting in plugin v7.0.16, calling this against a page that already has content with mode="replace" (the default) without also passing confirm_replace=true returns a 409 respira_replace_confirmation_required — pass mode="append" to add to existing content, pass mode="replace" AND confirm_replace=true to overwrite, or pass edit_target="live" to overwrite the live page directly (plugin v7.0.22+ accepts an authorized live edit as the confirmation). The gate prevents silent data loss.\n\nNested Divi 5 content shape — canonical: `content: [{ type: "section", settings: {...}, children: [{ type: "row", children: [{ type: "column", children: [{ type: "heading", settings: {...} }, ...] }] }] }]`. Plugin v7.0.32 also accepts `rows / cols / columns / modules / elements / innerBlocks` as aliases for `children` on Divi (Divi-vocabulary; soft warning surfaces in response.warnings). Plugin v7.0.32 hard-errors with `respira_children_dropped` (HTTP 500) if any container payload declares children but the emit produced fewer innerBlocks — silent data-loss is no longer possible.',
+                description: 'REPLACE (or append to) the entire page builder layout. WARNING: By default this REPLACES all existing content (use mode:"append" to add content without destroying existing elements). For editing a single module, use wordpress_update_module instead. Use exactly: gutenberg, divi, elementor, bricks, beaver, oxygen, breakdance, brizy, thrive, visual-composer, wpbakery. For Divi, divi_version is required ("4" or "5"). Starting in plugin v7.0.16, calling this against a page that already has content with mode="replace" (the default) without also passing confirm_replace=true returns a 409 respira_replace_confirmation_required. Pass mode="append" to add to existing content, pass mode="replace" AND confirm_replace=true to overwrite, or pass edit_target="live" to overwrite the live page directly (plugin v7.0.22+ accepts an authorized live edit as the confirmation). The gate prevents silent data loss.\n\nNested Divi 5 content shape (canonical): `content: [{ type: "section", settings: {...}, children: [{ type: "row", children: [{ type: "column", children: [{ type: "heading", settings: {...} }, ...] }] }] }]`. Plugin v7.0.32 also accepts `rows / cols / columns / modules / elements / innerBlocks` as aliases for `children` on Divi (Divi-vocabulary; soft warning surfaces in response.warnings). Plugin v7.0.32 hard-errors with `respira_children_dropped` (HTTP 500) if any container payload declares children but the emit produced fewer innerBlocks (silent data-loss is no longer possible).\n\nDivi render-critical attrs (the plugin returns `respira_divi_required_attrs_missing` if any are absent, because the module would render empty): `divi/heading` requires `title`; `divi/text` requires `content`; `divi/code` requires `raw_content`; `divi/blurb` requires `title`; `divi/team-member` requires `name`; `divi/testimonial` requires `author`; `divi/cta` requires `title`; `divi/pricing-table` requires `title` and `sum`; `divi/number-counter` requires `number`; `divi/button` requires `button_text`. Set each via the module\'s `settings` object.',
                 inputSchema: {
                     type: 'object',
                     properties: {
@@ -2103,7 +2084,7 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
             },
             {
                 name: 'wordpress_read_theme_file',
-                description: 'Read the contents of a theme stylesheet on disk (CSS / SCSS / LESS / JSON only). Path is relative to wp-content/themes, e.g. `vds/css/custom.css`. Useful for diffing before a write and for handing the existing stylesheet to an LLM as context. Requires plugin v7.0.42+ and the user behind the API key must have the WP `edit_themes` capability. Returns content, content_md5, byte_size, mtime, theme_role (active_stylesheet | active_template | other), is_writable.',
+                description: 'Read the contents of a theme stylesheet on disk. ONLY these extensions are accepted: `.css`, `.scss`, `.less`, `.json`. Any other extension (`.php`, `.html`, `.twig`, `.js`, `.svg`, `.md`, `.txt`, etc.) returns `respira_theme_file_extension_not_allowed` and the tool does NOT support reading them. PHP/HTML theme files are out of scope on purpose; ask the human to edit those by hand or via a code editor over SFTP. Path is relative to wp-content/themes, e.g. `vds/css/custom.css`. Useful for diffing before a write and for handing the existing stylesheet to an LLM as context. Requires plugin v7.0.42+ and the user behind the API key must have the WP `edit_themes` capability. Returns content, content_md5, byte_size, mtime, theme_role (active_stylesheet | active_template | other), is_writable.',
                 inputSchema: {
                     type: 'object',
                     properties: {
@@ -4379,14 +4360,6 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                 return await client.getDiviMigrationReadiness();
             case 'wordpress_abilities_gap_report':
                 return await client.getAbilitiesGapReport();
-            case 'wordpress_search_abilities':
-                return await client.searchAbilities({
-                    q: args?.q,
-                    plugin: args?.plugin,
-                    category: args?.category,
-                    kind: args?.kind,
-                    limit: args?.limit,
-                });
             case 'wordpress_invoke_ability':
                 return await client.invokeInhaledAbility(args?.ability, args?.args || {});
             case 'wordpress_list_pages':
@@ -4921,22 +4894,30 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
             },
             {
                 name: 'wordpress_move_element',
-                description: 'Move an element to a different container or position within the page.',
+                description: 'Move an element to a different container or position within the page. Locate the element using the same identifier_type/identifier_value pattern as respira_find_element / respira_remove_element. The destination is a container PATH (e.g. "0.1" for sections[0].rows[1], or "root"/empty for top level), not a container element id.',
                 inputSchema: {
                     type: 'object',
                     properties: {
                         post_id: { type: 'number', description: 'Page/post ID' },
-                        element_id: { type: 'string', description: 'Element ID to move' },
-                        target_container_id: {
+                        identifier_type: {
+                            type: 'string',
+                            enum: ['id', 'css_class', 'text', 'widget_type', 'global_id', 'admin_label', 'type', 'path'],
+                            description: 'How to locate the element to move (same enum as respira_find_element).',
+                        },
+                        identifier_value: {
                             type: 'string',
-                            description: 'ID of the container to move into',
+                            description: 'Value matching identifier_type.',
+                        },
+                        target_container_path: {
+                            type: 'string',
+                            description: 'Dot-separated container path inside the target page (e.g. "0.1.0"). Pass "root" or "" to move to the top level.',
                         },
                         position: {
                             type: 'number',
-                            description: 'Position index within the target container (0-based)',
+                            description: 'Position index within the target container (0-based). Pass -1 to append.',
                         },
                     },
-                    required: ['post_id', 'element_id', 'target_container_id', 'position'],
+                    required: ['post_id', 'identifier_type', 'identifier_value', 'target_container_path', 'position'],
                 },
             },
             {
@@ -5002,19 +4983,22 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
             },
             {
                 name: 'wordpress_reorder_elements',
-                description: 'Reorder child elements within a container.',
+                description: 'Reorder child elements within a container. The container is identified by its PATH inside the page (e.g. "0.1" for sections[0].rows[1], or "root"/"" for the top level).',
                 inputSchema: {
                     type: 'object',
                     properties: {
                         post_id: { type: 'number', description: 'Page/post ID' },
-                        container_id: { type: 'string', description: 'Container element ID' },
+                        container_path: {
+                            type: 'string',
+                            description: 'Dot-separated container path (e.g. "0.1.0"). Pass "root" or "" for the top-level container.',
+                        },
                         new_order: {
                             type: 'array',
-                            description: 'Array of element IDs in the desired order',
+                            description: 'Array of element IDs in the desired order.',
                             items: { type: 'string' },
                         },
                     },
-                    required: ['post_id', 'container_id', 'new_order'],
+                    required: ['post_id', 'container_path', 'new_order'],
                 },
             },
             // --- Composite Tools ---