@respira/wordpress-mcp-server 6.19.2 → 6.19.4

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAoBH,OAAO,KAAK,EAAE,mBAAmB,EAAe,MAAM,kBAAkB,CAAC;AAiLzE,qBAAa,sBAAsB;IACjC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,WAAW,CAAgC;IACnD,OAAO,CAAC,KAAK,CAA2C;IACxD,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,cAAc,CAAwB;IAC9C,OAAO,CAAC,YAAY,CAA4B;IAChD,8EAA8E;IAC9E,OAAO,CAAC,YAAY,CAA4B;IAChD,8EAA8E;IAC9E,OAAO,CAAC,mBAAmB,CAAS;IAEpC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAsB;IAEhE;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAWzB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;gBA4Bb,WAAW,EAAE,mBAAmB,EAAE,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE;IAmUvE,OAAO,CAAC,cAAc;IAItB;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;IAkB5B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,aAAa;IA4BrB,gEAAgE;IAChE,OAAO,CAAC,aAAa;IAUrB;;;;;;OAMG;YACW,UAAU;IA2CxB;;;;;;;;;;;;;;OAcG;YACW,WAAW;IAyIzB;;;;;;;;;OASG;YACW,kBAAkB;IA6FhC,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,aAAa;YAuNP,kBAAkB;YA6BlB,yBAAyB;IASvC;;;OAGG;IACH,OAAO,CAAC,oBAAoB;YAyBd,QAAQ;IAg/EtB;;;;;;OAMG;IACH,yEAAyE;IACzE,OAAO,CAAC,mBAAmB,CAAoD;IAC/E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAU;YAEpC,oBAAoB;YAqDpB,2BAA2B;IAazC;;;;OAIG;YACW,cAAc;IAY5B,OAAO,CAAC,mBAAmB;IAwT3B;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAe3C;IAEF;;;;OAIG;IACH,OAAO,CAAC,0BAA0B;YAmCpB,cAAc;IAqG5B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,eAAe;YAuCT,gBAAgB;IA0sB9B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAgSzB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IA6UxB,GAAG;CAyCV"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAoBH,OAAO,KAAK,EAAE,mBAAmB,EAAe,MAAM,kBAAkB,CAAC;AAiLzE,qBAAa,sBAAsB;IACjC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,WAAW,CAAgC;IACnD,OAAO,CAAC,KAAK,CAA2C;IACxD,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,cAAc,CAAwB;IAC9C,OAAO,CAAC,YAAY,CAA4B;IAChD,8EAA8E;IAC9E,OAAO,CAAC,YAAY,CAA4B;IAChD,8EAA8E;IAC9E,OAAO,CAAC,mBAAmB,CAAS;IAEpC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAsB;IAEhE;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAWzB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;gBA4Bb,WAAW,EAAE,mBAAmB,EAAE,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE;IAmUvE,OAAO,CAAC,cAAc;IAItB;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;IAkB5B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,aAAa;IA4BrB,gEAAgE;IAChE,OAAO,CAAC,aAAa;IAUrB;;;;;;OAMG;YACW,UAAU;IA2CxB;;;;;;;;;;;;;;OAcG;YACW,WAAW;IAyIzB;;;;;;;;;OASG;YACW,kBAAkB;IA6FhC,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,aAAa;YAuOP,kBAAkB;YA6BlB,yBAAyB;IASvC;;;OAGG;IACH,OAAO,CAAC,oBAAoB;YAyBd,QAAQ;IA28EtB;;;;;;OAMG;IACH,yEAAyE;IACzE,OAAO,CAAC,mBAAmB,CAAoD;IAC/E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAU;YAEpC,oBAAoB;YAqDpB,2BAA2B;IAazC;;;;OAIG;YACW,cAAc;IAY5B,OAAO,CAAC,mBAAmB;IAwT3B;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAe3C;IAEF;;;;OAIG;IACH,OAAO,CAAC,0BAA0B;YAmCpB,cAAc;IAqG5B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,eAAe;YAuCT,gBAAgB;IAsvB9B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IA+SzB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IA6UxB,GAAG;CAyCV"}

package/dist/server.js

@@ -968,13 +968,30 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
             }
             // Per-call watchdog: a single hung handler must never wedge the stdio
             // loop for every subsequent tool call. If the deadline fires, the race
-            // rejects with ToolTimeoutError; the losing handler keeps running in
-            // the background but the client gets a clean structured error and the
-            // next tool call is free to proceed.
+            // rejects with ToolTimeoutError, AND we destroy the WP client's HTTP
+            // agents to free the orphaned socket so the next tool call doesn't
+            // queue behind it at the agent layer. v6.19.3 bug fc2bfdf3 — Mauricio
+            // Piper (Fischers Fritze) reported that after one tool deadlocked
+            // every subsequent call, including diagnose_connection, also hung 4
+            // min; only killing Claude Desktop recovered. Per-client agents (now
+            // bounded at maxSockets:16, keepAlive:false) plus this destroy-on-
+            // trip make orphans cost at most one socket for at most the axios
+            // 30s response timeout, instead of indefinitely blocking the pool.
             const toolTimeoutMs = getMaxToolTimeoutMs();
             let timeoutHandle;
+            const siteForAbort = this.currentSite;
             const toolTimeout = new Promise((_, reject) => {
-                timeoutHandle = setTimeout(() => reject(new ToolTimeoutError(name, toolTimeoutMs)), toolTimeoutMs);
+                timeoutHandle = setTimeout(() => {
+                    try {
+                        if (siteForAbort && typeof siteForAbort.abortInFlightRequests === 'function') {
+                            siteForAbort.abortInFlightRequests();
+                        }
+                    }
+                    catch {
+                        // Don't block the rejection on cleanup.
+                    }
+                    reject(new ToolTimeoutError(name, toolTimeoutMs));
+                }, toolTimeoutMs);
             });
             try {
                 this.currentSite.setCurrentToolName(name);
@@ -1254,42 +1271,6 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                 },
                 readOnlyHint: true,
             },
-            {
-                name: 'wordpress_search_abilities',
-                description: 'SEARCH the curated WordPress abilities directory across all known plugins (Elementor, Yoast SEO, WooCommerce, Jetpack, ACF, Akismet, plus Respira\'s own 151 tools — 163 total today, growing weekly via auto-pull). ' +
-                    'Use this whenever the user asks "is there an ability that does X", "can WordPress do Y", "what plugins expose Z as MCP", "how do i automate W on my site". ' +
-                    'Each result is enriched with per-site context: is_installed (is the plugin active on THIS site), is_inhaled (has the admin opted the ability into Respira\'s MCP surface), install_url (wp.org page when not installed), inhale_admin_url (Respira admin tab when installed but not inhaled), and how_to_invoke (the exact tool call to make when ready). ' +
-                    'After finding a matching ability, if is_inhaled is true you can call it via wordpress_invoke_ability. Otherwise surface install_url or inhale_admin_url to the user so they can opt in. ' +
-                    'No auth gates: this surface is open to every agent connected to Respira. The directory itself is global; the enrichment is per-site.',
-                inputSchema: {
-                    type: 'object',
-                    properties: {
-                        q: {
-                            type: 'string',
-                            description: 'Free-text query — matches against ability_name, label, description, plugin_name, category. Optional; an empty query returns the top of the directory.',
-                        },
-                        plugin: {
-                            type: 'string',
-                            description: 'Restrict to a single plugin by wp.org slug (e.g. "wordpress-seo") or display name ("Yoast SEO"). Optional.',
-                        },
-                        category: {
-                            type: 'string',
-                            description: 'Restrict to a single category (e.g. "SEO", "E-commerce", "Page Builder", "Custom Fields"). Optional.',
-                        },
-                        kind: {
-                            type: 'string',
-                            enum: ['read', 'write'],
-                            description: 'Restrict to read-only or write abilities. Optional.',
-                        },
-                        limit: {
-                            type: 'integer',
-                            description: 'Max results to return (default 20, max 100).',
-                            default: 20,
-                        },
-                    },
-                },
-                readOnlyHint: true,
-            },
             {
                 name: 'wordpress_invoke_ability',
                 description: 'Invoke an inhaled WordPress Abilities API ability through the Respira safety wrapper. ' +
@@ -4379,14 +4360,6 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                 return await client.getDiviMigrationReadiness();
             case 'wordpress_abilities_gap_report':
                 return await client.getAbilitiesGapReport();
-            case 'wordpress_search_abilities':
-                return await client.searchAbilities({
-                    q: args?.q,
-                    plugin: args?.plugin,
-                    category: args?.category,
-                    kind: args?.kind,
-                    limit: args?.limit,
-                });
             case 'wordpress_invoke_ability':
                 return await client.invokeInhaledAbility(args?.ability, args?.args || {});
             case 'wordpress_list_pages':
@@ -4464,8 +4437,40 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                 return await client.deletePost(args.id, args.force);
             case 'wordpress_list_media':
                 return await client.listMedia(args);
-            case 'wordpress_upload_media':
+            case 'wordpress_upload_media': {
+                // v6.19.4: pre-flight size + transport check before the upload.
+                // The MCP-quality dashboard showed upload_media at 50.7% success,
+                // p95 = 120 seconds, 34.8% of calls timing out >60s — meaning
+                // the watchdog was firing on every other call. Almost all of the
+                // long tail is the agent passing a base64 payload of a large
+                // image without realising the per-call timeout will kill it.
+                // Surface a clear "too large for one-shot upload, use chunked
+                // workflow" error BEFORE the upload starts instead of waiting
+                // 120 seconds to fail.
+                const sizeBytes = typeof args.file === 'string' ? Math.floor(args.file.length * 0.75) : 0;
+                const MAX_SAFE_BYTES = 5 * 1024 * 1024; // 5MB after base64 → ~3.75MB binary
+                const HARD_LIMIT_BYTES = 25 * 1024 * 1024; // 25MB → server-side rejected
+                if (sizeBytes > HARD_LIMIT_BYTES) {
+                    return {
+                        success: false,
+                        error: 'file_too_large',
+                        message: `Refused to upload: payload is ~${(sizeBytes / 1024 / 1024).toFixed(1)}MB after base64 decode, hard limit is ${HARD_LIMIT_BYTES / 1024 / 1024}MB per call. WordPress would reject this and your call would time out at ~2 minutes. Resize the image client-side (recommended: 2000px max dimension, <2MB) and retry. For PDFs and other documents, the operator should upload manually via wp-admin Media Library.`,
+                        preflight: { size_bytes: sizeBytes, hard_limit_bytes: HARD_LIMIT_BYTES, recommended_max_bytes: MAX_SAFE_BYTES },
+                    };
+                }
+                if (sizeBytes > MAX_SAFE_BYTES) {
+                    // Soft warning — still attempt the upload, but tell the agent
+                    // up front this is high-risk for timeout so it can plan around
+                    // it (e.g. set expectations with the user, retry on a smaller
+                    // crop, etc) instead of looping.
+                    const r = await client.uploadMedia(args.file, args.filename, args.mime_type, args.title, args.alt, args.caption);
+                    if (r && typeof r === 'object') {
+                        r.preflight_warning = `Large payload (~${(sizeBytes / 1024 / 1024).toFixed(1)}MB after decode). Uploads above ${MAX_SAFE_BYTES / 1024 / 1024}MB succeed in ~50% of calls in current telemetry due to per-call watchdog timeout on slow hosts. If this upload times out, ask the user to crop / compress the image client-side before retrying.`;
+                    }
+                    return r;
+                }
                 return await client.uploadMedia(args.file, args.filename, args.mime_type, args.title, args.alt, args.caption);
+            }
             case 'wordpress_extract_builder_content':
                 return await client.extractBuilderContent(args.builder, args.page_id);
             case 'wordpress_find_builder_targets':
@@ -4788,8 +4793,29 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                 return await client.callRestV2('POST', `/builder/elements/find/${post_id}`, rest);
             }
             case 'wordpress_update_element': {
+                // v6.19.4: surface the new plugin-side write_was_noop warning
+                // prominently in the tool result. The plugin v7.0.61+ adds
+                // `write_diag` + `warning` keys to the response when post_content
+                // didn't change despite a successful write. Hoist them to the
+                // top of the response payload (above `changes`) and prepend the
+                // warning_hint to the message so the agent sees it before any
+                // other content. The dashboard shows 81% in-session retry rate
+                // on this tool — exactly the silent-fail signature where agents
+                // ignore deeply-nested signals and just retry. Front-load.
                 const { post_id, ...rest } = args;
-                return await client.callRestV2('POST', `/builder/elements/update/${post_id}`, rest);
+                const r = await client.callRestV2('POST', `/builder/elements/update/${post_id}`, rest);
+                if (r && typeof r === 'object' && r.warning === 'write_was_noop') {
+                    const hint = r.warning_hint || 'Write succeeded at the API layer but post_content did not change. Verify with respira_extract_builder_content and escalate to the user instead of retrying.';
+                    const original = typeof r.message === 'string' ? r.message : '';
+                    r.message = `⚠️ NO-OP DETECTED — ${hint}\n\nOriginal message: ${original}`.trim();
+                    // Also surface as a top-level error-shaped field so MCP clients
+                    // that branch on `r.success === false` don't silently treat
+                    // this as a clean success. Keep `success: true` so existing
+                    // call sites don't break, but make the agent-visible payload
+                    // unambiguous.
+                    r.agent_must_escalate = true;
+                }
+                return r;
             }
             case 'wordpress_move_element': {
                 const { post_id, ...rest } = args;
@@ -4921,22 +4947,30 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
             },
             {
                 name: 'wordpress_move_element',
-                description: 'Move an element to a different container or position within the page.',
+                description: 'Move an element to a different container or position within the page. Locate the element using the same identifier_type/identifier_value pattern as respira_find_element / respira_remove_element. The destination is a container PATH (e.g. "0.1" for sections[0].rows[1], or "root"/empty for top level), not a container element id.',
                 inputSchema: {
                     type: 'object',
                     properties: {
                         post_id: { type: 'number', description: 'Page/post ID' },
-                        element_id: { type: 'string', description: 'Element ID to move' },
-                        target_container_id: {
+                        identifier_type: {
+                            type: 'string',
+                            enum: ['id', 'css_class', 'text', 'widget_type', 'global_id', 'admin_label', 'type', 'path'],
+                            description: 'How to locate the element to move (same enum as respira_find_element).',
+                        },
+                        identifier_value: {
                             type: 'string',
-                            description: 'ID of the container to move into',
+                            description: 'Value matching identifier_type.',
+                        },
+                        target_container_path: {
+                            type: 'string',
+                            description: 'Dot-separated container path inside the target page (e.g. "0.1.0"). Pass "root" or "" to move to the top level.',
                         },
                         position: {
                             type: 'number',
-                            description: 'Position index within the target container (0-based)',
+                            description: 'Position index within the target container (0-based). Pass -1 to append.',
                         },
                     },
-                    required: ['post_id', 'element_id', 'target_container_id', 'position'],
+                    required: ['post_id', 'identifier_type', 'identifier_value', 'target_container_path', 'position'],
                 },
             },
             {
@@ -5002,19 +5036,22 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
             },
             {
                 name: 'wordpress_reorder_elements',
-                description: 'Reorder child elements within a container.',
+                description: 'Reorder child elements within a container. The container is identified by its PATH inside the page (e.g. "0.1" for sections[0].rows[1], or "root"/"" for the top level).',
                 inputSchema: {
                     type: 'object',
                     properties: {
                         post_id: { type: 'number', description: 'Page/post ID' },
-                        container_id: { type: 'string', description: 'Container element ID' },
+                        container_path: {
+                            type: 'string',
+                            description: 'Dot-separated container path (e.g. "0.1.0"). Pass "root" or "" for the top-level container.',
+                        },
                         new_order: {
                             type: 'array',
-                            description: 'Array of element IDs in the desired order',
+                            description: 'Array of element IDs in the desired order.',
                             items: { type: 'string' },
                         },
                     },
-                    required: ['post_id', 'container_id', 'new_order'],
+                    required: ['post_id', 'container_path', 'new_order'],
                 },
             },
             // --- Composite Tools ---