@respira/wordpress-mcp-server 7.2.4 → 7.2.6

package/dist/server.d.ts

@@ -138,6 +138,19 @@ export declare class RespiraWordPressServer {
     /** Cached site context for tool filtering (refreshed on site switch). */
     private cachedFilterContext;
     private static readonly FILTER_CACHE_TTL;
+    /**
+     * Capability negotiation (7.2.6): tools whose plugin REST route only exists
+     * from a given plugin version. On older plugins these 404 with
+     * respira_rest_no_route — the biggest non-element failure class in the
+     * MCP-quality telemetry (656 errors across 97 tools), pure version skew since
+     * only ~half the connected sites run a current plugin. We stop advertising
+     * these tools when the connected plugin predates the route, so the agent is
+     * never offered something that will 404. @since values are verified against
+     * the plugin source (the first release tag that contains each route).
+     */
+    private static readonly TOOL_MIN_PLUGIN_VERSION;
+    /** True when version `a` is strictly older than `b` (both "x.y.z"). */
+    private static versionLt;
     private filterToolsByContext;
     private isWooCommerceAddonAvailable;
     /**

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAoBH,OAAO,KAAK,EAAE,mBAAmB,EAAe,MAAM,kBAAkB,CAAC;AAkQzE,qBAAa,sBAAsB;IACjC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,WAAW,CAAgC;IACnD,OAAO,CAAC,KAAK,CAA2C;IACxD,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,cAAc,CAAwB;IAC9C,OAAO,CAAC,YAAY,CAA4B;IAChD,8EAA8E;IAC9E,OAAO,CAAC,YAAY,CAA4B;IAChD,8EAA8E;IAC9E,OAAO,CAAC,mBAAmB,CAAS;IAEpC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAsB;IAEhE;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAWzB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;gBA4Bb,WAAW,EAAE,mBAAmB,EAAE,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE;IAsVvE,OAAO,CAAC,cAAc;IAItB;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;IAkB5B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,aAAa;IA4BrB,gEAAgE;IAChE,OAAO,CAAC,aAAa;IAUrB;;;;;;OAMG;YACW,UAAU;IAgDxB;;;;;;;;;;;;;;OAcG;YACW,WAAW;IAiJzB;;;;;;;;;OASG;YACW,kBAAkB;IAiHhC;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,6BAA6B;IA0BrC;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,yBAAyB;IA+BjC,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,aAAa;YAmQP,kBAAkB;YA6BlB,yBAAyB;IASvC;;;OAGG;IACH,OAAO,CAAC,oBAAoB;YAyBd,QAAQ;IA+vFtB;;;;;;OAMG;IACH,yEAAyE;IACzE,OAAO,CAAC,mBAAmB,CAAoD;IAC/E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAU;YAEpC,oBAAoB;YAqDpB,2BAA2B;IAazC;;;;OAIG;YACW,cAAc;IAY5B,OAAO,CAAC,mBAAmB;IAwT3B;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAe3C;IAEF;;;;OAIG;IACH,OAAO,CAAC,0BAA0B;YAmCpB,cAAc;IAqG5B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,eAAe;YAuCT,gBAAgB;IAy2B9B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAwUzB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IA6UxB,GAAG;CAyCV"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAoBH,OAAO,KAAK,EAAE,mBAAmB,EAAe,MAAM,kBAAkB,CAAC;AAkQzE,qBAAa,sBAAsB;IACjC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,WAAW,CAAgC;IACnD,OAAO,CAAC,KAAK,CAA2C;IACxD,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,cAAc,CAAwB;IAC9C,OAAO,CAAC,YAAY,CAA4B;IAChD,8EAA8E;IAC9E,OAAO,CAAC,YAAY,CAA4B;IAChD,8EAA8E;IAC9E,OAAO,CAAC,mBAAmB,CAAS;IAEpC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAsB;IAEhE;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAWzB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;gBA4Bb,WAAW,EAAE,mBAAmB,EAAE,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE;IAsVvE,OAAO,CAAC,cAAc;IAItB;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;IAkB5B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,aAAa;IA4BrB,gEAAgE;IAChE,OAAO,CAAC,aAAa;IAUrB;;;;;;OAMG;YACW,UAAU;IAgDxB;;;;;;;;;;;;;;OAcG;YACW,WAAW;IAiJzB;;;;;;;;;OASG;YACW,kBAAkB;IAiHhC;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,6BAA6B;IA0BrC;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,yBAAyB;IA+BjC,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,aAAa;YAmQP,kBAAkB;YA6BlB,yBAAyB;IASvC;;;OAGG;IACH,OAAO,CAAC,oBAAoB;YAyBd,QAAQ;IAuwFtB;;;;;;OAMG;IACH,yEAAyE;IACzE,OAAO,CAAC,mBAAmB,CAAoD;IAC/E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAU;IAElD;;;;;;;;;OASG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAQ7C;IAEF,uEAAuE;IACvE,OAAO,CAAC,MAAM,CAAC,SAAS;YAWV,oBAAoB;YAwEpB,2BAA2B;IAazC;;;;OAIG;YACW,cAAc;IAY5B,OAAO,CAAC,mBAAmB;IAwT3B;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAe3C;IAEF;;;;OAIG;IACH,OAAO,CAAC,0BAA0B;YAmCpB,cAAc;IAqG5B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,eAAe;YAuCT,gBAAgB;IA22B9B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAwUzB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IA6UxB,GAAG;CAyCV"}

package/dist/server.js

@@ -2178,6 +2178,10 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                             description: 'When editing an original, choose ask, live, or duplicate. Defaults to ask when direct editing is enabled.',
                             enum: ['ask', 'live', 'duplicate'],
                         },
+                        confirm_live_edit: {
+                            type: 'boolean',
+                            description: 'Set true together with edit_target:"live" to acknowledge a direct write to the published original. Exposed at the top level so autonomous flows can complete the confirmation_required handshake without polluting the updates object.',
+                        },
                     },
                     required: ['builder', 'page_id', 'module_identifier', 'updates'],
                 },
@@ -2338,6 +2342,10 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                             description: 'When editing an original, choose ask, live, or duplicate. Defaults to ask when direct editing is enabled.',
                             enum: ['ask', 'live', 'duplicate'],
                         },
+                        confirm_live_edit: {
+                            type: 'boolean',
+                            description: 'Set true together with edit_target:"live" to acknowledge a direct write to the published original. Exposed at the top level so autonomous flows can complete the confirmation_required handshake without polluting the operations.',
+                        },
                     },
                     required: ['builder', 'post_id', 'operations'],
                 },
@@ -4245,6 +4253,37 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
     /** Cached site context for tool filtering (refreshed on site switch). */
     cachedFilterContext = null;
     static FILTER_CACHE_TTL = 60_000; // 1 minute
+    /**
+     * Capability negotiation (7.2.6): tools whose plugin REST route only exists
+     * from a given plugin version. On older plugins these 404 with
+     * respira_rest_no_route — the biggest non-element failure class in the
+     * MCP-quality telemetry (656 errors across 97 tools), pure version skew since
+     * only ~half the connected sites run a current plugin. We stop advertising
+     * these tools when the connected plugin predates the route, so the agent is
+     * never offered something that will 404. @since values are verified against
+     * the plugin source (the first release tag that contains each route).
+     */
+    static TOOL_MIN_PLUGIN_VERSION = {
+        wordpress_run_pagespeed_audit: '7.1.0', // /pagespeed/audit — first in v7.1.0
+        wordpress_analyze_pagespeed: '7.1.0', // /analyze/pagespeed — first in v7.1.0
+        wordpress_abilities_gap_report: '7.1.0', // /abilities/gap-report — first in v7.1.0
+        wordpress_invoke_ability: '7.1.0', // /abilities/invoke — first in v7.1.0
+        wordpress_read_theme_file: '7.0.42', // /theme-files/* — @since 7.0.42
+        wordpress_write_theme_file: '7.0.42',
+        wordpress_append_theme_file: '7.0.42',
+    };
+    /** True when version `a` is strictly older than `b` (both "x.y.z"). */
+    static versionLt(a, b) {
+        const pa = a.split('.').map((n) => parseInt(n, 10) || 0);
+        const pb = b.split('.').map((n) => parseInt(n, 10) || 0);
+        for (let i = 0; i < 3; i++) {
+            const x = pa[i] || 0;
+            const y = pb[i] || 0;
+            if (x !== y)
+                return x < y;
+        }
+        return false;
+    }
     async filterToolsByContext(tools) {
         if (!this.currentSite) {
             return tools; // No site connected — show everything.
@@ -4263,6 +4302,16 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                 return tools; // Can't fetch context — show everything.
             }
         }
+        // Capability negotiation: make sure the plugin version is known (cheap and
+        // memoized in the client) so the per-tool gate below can hide routes the
+        // connected plugin is too old to have. Never blocks the filter on failure.
+        try {
+            await this.currentSite.checkCompatibility();
+        }
+        catch {
+            /* non-fatal — fall through with whatever version we have (possibly null) */
+        }
+        const pluginVersion = this.currentSite.pluginVersion ?? null;
         const detectedBuilder = (context?.page_builder?.name || '').toLowerCase();
         const hasWooCommerce = Boolean(context?.woocommerce?.active || context?.addons?.woocommerce?.installed);
         return tools.filter((tool) => {
@@ -4287,6 +4336,14 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
             if (name.startsWith('woocommerce_')) {
                 return hasWooCommerce;
             }
+            // Capability negotiation: hide tools whose plugin route only exists from a
+            // newer plugin version than the connected site runs (avoids rest_no_route
+            // 404s on version-skewed sites). Conservative: only when the plugin version
+            // is KNOWN and below the tool's verified minimum.
+            const minPv = RespiraWordPressServer.TOOL_MIN_PLUGIN_VERSION[name];
+            if (minPv && pluginVersion && RespiraWordPressServer.versionLt(pluginVersion, minPv)) {
+                return false;
+            }
             // Everything else: always show.
             return true;
         });
@@ -5033,7 +5090,7 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                 return await client.makeResponsive(args.page_id, args.dry_run || false);
             case 'wordpress_update_module':
                 return hoistDroppedStylingWarnings({
-                    ...(await client.updateModule(args.builder, args.page_id, args.module_identifier, args.updates, args.edit_target)),
+                    ...(await client.updateModule(args.builder, args.page_id, args.module_identifier, args.updates, args.edit_target, args.confirm_live_edit)),
                     respira_approvals_url: client.getApprovalsUrl(),
                 });
             case 'wordpress_validate_security':
@@ -5336,7 +5393,7 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
             case 'wordpress_end_session':
                 return await client.callRestV2('POST', '/snapshots/session/end', {});
             case 'wordpress_apply_builder_patch':
-                return await client.applyBuilderPatch(args.builder, args.post_id, args.operations, args.include, args.edit_target);
+                return await client.applyBuilderPatch(args.builder, args.post_id, args.operations, args.include, args.edit_target, args.confirm_live_edit);
             case 'woocommerce_list_products':
                 return await client.woocommerceListProducts(args);
             case 'woocommerce_get_product':