@respira/wordpress-mcp-server 7.2.9 → 7.2.11

package/dist/server.d.ts

@@ -15,6 +15,9 @@ export declare class RespiraWordPressServer {
     private allowedSites;
     /** Whether the plugin version warning has already been shown this session. */
     private versionWarningShown;
+    /** Epoch ms of the last account site-list refresh (throttle network calls). */
+    private lastSiteRefreshAt;
+    private static readonly SITE_REFRESH_MIN_INTERVAL_MS;
     private static readonly MCP_SERVER_VERSION;
     /**
      * Normalize a tool name: respira_* → wordpress_* for switch dispatch.
@@ -28,6 +31,26 @@ export declare class RespiraWordPressServer {
     private generateDualTools;
     constructor(siteConfigs: WordPressSiteConfig[], enabledTools?: string[]);
     private getSiteSummary;
+    /**
+     * Re-pull the account's CURRENT site list from respira.press and merge in any
+     * sites that aren't in the running server yet.
+     *
+     * Why this exists: the server boots from whatever site list was in its config
+     * at startup. When the user adds a site on the dashboard afterwards, a
+     * long-lived server (Cowork especially) never learns about it and silently
+     * serves the stale list — Emil had 4 sites but Cowork only ever saw 3
+     * (2026-06-30). Rather than make the user re-paste config and restart, this
+     * lets list_sites self-heal: authenticate with a `respira_site_` token the
+     * server already holds, fetch the account's canonical config, and register
+     * any new sites in-memory (and persist to ~/.respira/config.json when that is
+     * the active source).
+     *
+     * Best-effort and throttled: a network/auth failure is swallowed and the
+     * existing list is returned unchanged. Servers with no site token (OAuth-only)
+     * or pinned to RESPIRA_CONFIG_B64 still get the in-session merge; only the
+     * on-disk persistence is skipped when the file is not the active source.
+     */
+    private refreshSitesFromAccount;
     /**
      * N6 fix (v6.19.0): the response envelope `site` field must reflect the
      * client that ACTUALLY serviced the call, not the global default. Pre-fix,

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAoBH,OAAO,KAAK,EAAE,mBAAmB,EAAe,MAAM,kBAAkB,CAAC;AAqTzE,qBAAa,sBAAsB;IACjC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,WAAW,CAAgC;IACnD,OAAO,CAAC,KAAK,CAA2C;IACxD,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,cAAc,CAAwB;IAC9C,OAAO,CAAC,YAAY,CAA4B;IAChD,8EAA8E;IAC9E,OAAO,CAAC,YAAY,CAA4B;IAChD,8EAA8E;IAC9E,OAAO,CAAC,mBAAmB,CAAS;IAEpC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAsB;IAEhE;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAWzB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;gBA4Bb,WAAW,EAAE,mBAAmB,EAAE,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE;IAsVvE,OAAO,CAAC,cAAc;IAItB;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;IAkB5B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,aAAa;IA4BrB,gEAAgE;IAChE,OAAO,CAAC,aAAa;IAUrB;;;;;;OAMG;YACW,UAAU;IAgDxB;;;;;;;;;;;;;;OAcG;YACW,WAAW;IAiJzB;;;;;;;;;OASG;YACW,kBAAkB;IAiHhC;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,6BAA6B;IA0BrC;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,yBAAyB;IA+BjC,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,aAAa;YA2QP,kBAAkB;YA6BlB,yBAAyB;IASvC;;;OAGG;IACH,OAAO,CAAC,oBAAoB;YAyBd,QAAQ;IAuwFtB;;;;;;OAMG;IACH,yEAAyE;IACzE,OAAO,CAAC,mBAAmB,CAAoD;IAC/E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAU;IAElD;;;;;;;;;OASG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAQ7C;IAEF;;;;;;;OAOG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAQ3C;IAEF,4EAA4E;IAC5E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,+BAA+B,CAAY;IAEnE,uEAAuE;IACvE,OAAO,CAAC,MAAM,CAAC,SAAS;YAWV,oBAAoB;YAqFpB,2BAA2B;IAazC;;;;OAIG;YACW,cAAc;IAY5B,OAAO,CAAC,mBAAmB;IAwT3B;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAe3C;IAEF;;;;OAIG;IACH,OAAO,CAAC,0BAA0B;YAmCpB,cAAc;IAqG5B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,eAAe;YAuCT,gBAAgB;IA22B9B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAwUzB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IA6UxB,GAAG;CAyCV"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAoBH,OAAO,KAAK,EAAE,mBAAmB,EAAe,MAAM,kBAAkB,CAAC;AAsTzE,qBAAa,sBAAsB;IACjC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,WAAW,CAAgC;IACnD,OAAO,CAAC,KAAK,CAA2C;IACxD,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,cAAc,CAAwB;IAC9C,OAAO,CAAC,YAAY,CAA4B;IAChD,8EAA8E;IAC9E,OAAO,CAAC,YAAY,CAA4B;IAChD,8EAA8E;IAC9E,OAAO,CAAC,mBAAmB,CAAS;IACpC,+EAA+E;IAC/E,OAAO,CAAC,iBAAiB,CAAK;IAC9B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,4BAA4B,CAAU;IAE9D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAsB;IAEhE;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAWzB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;gBA4Bb,WAAW,EAAE,mBAAmB,EAAE,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE;IAsVvE,OAAO,CAAC,cAAc;IAItB;;;;;;;;;;;;;;;;;;OAkBG;YACW,uBAAuB;IA0GrC;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;IAkB5B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,aAAa;IA4BrB,gEAAgE;IAChE,OAAO,CAAC,aAAa;IAUrB;;;;;;OAMG;YACW,UAAU;IAgDxB;;;;;;;;;;;;;;OAcG;YACW,WAAW;IAiJzB;;;;;;;;;OASG;YACW,kBAAkB;IAyIhC;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,6BAA6B;IA0BrC;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,yBAAyB;IA+BjC,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,aAAa;YA2QP,kBAAkB;YA6BlB,yBAAyB;IASvC;;;OAGG;IACH,OAAO,CAAC,oBAAoB;YAyBd,QAAQ;IAuwFtB;;;;;;OAMG;IACH,yEAAyE;IACzE,OAAO,CAAC,mBAAmB,CAAoD;IAC/E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAU;IAElD;;;;;;;;;OASG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAQ7C;IAEF;;;;;;;OAOG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAQ3C;IAEF,4EAA4E;IAC5E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,+BAA+B,CAAY;IAEnE,uEAAuE;IACvE,OAAO,CAAC,MAAM,CAAC,SAAS;YAWV,oBAAoB;YAqFpB,2BAA2B;IAazC;;;;OAIG;YACW,cAAc;IAY5B,OAAO,CAAC,mBAAmB;IAwT3B;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAe3C;IAEF;;;;OAIG;IACH,OAAO,CAAC,0BAA0B;YAmCpB,cAAc;IAqG5B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,eAAe;YAuCT,gBAAgB;IAw3B9B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAwUzB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IA6UxB,GAAG;CAyCV"}

package/dist/server.js

@@ -17,6 +17,7 @@ import { getBricksTools, dispatchBricksTool } from './bricks-tools.js';
 import { getElementorTools, dispatchElementorTool } from './elementor-tools.js';
 import { getAcfTools, ACF_TOOL_NAMES } from './acf-tools.js';
 import { getUsageEmitter, deriveToolKind } from './usage-emitter.js';
+import { loadConfig, saveConfig } from './config.js';
 /**
  * Per-tool argument aliases. AI clients (especially Cowork / Claude desktop)
  * frequently pass a natural-but-wrong key for a value: `pageId` / `page_id`
@@ -315,6 +316,9 @@ export class RespiraWordPressServer {
     allowedSites = null;
     /** Whether the plugin version warning has already been shown this session. */
     versionWarningShown = false;
+    /** Epoch ms of the last account site-list refresh (throttle network calls). */
+    lastSiteRefreshAt = 0;
+    static SITE_REFRESH_MIN_INTERVAL_MS = 60_000;
     static MCP_SERVER_VERSION = MCP_SERVER_VERSION;
     /**
      * Normalize a tool name: respira_* → wordpress_* for switch dispatch.
@@ -693,6 +697,124 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
     getSiteSummary(site) {
         return site.getSiteSummary(site.getSiteId() === this.defaultSiteId);
     }
+    /**
+     * Re-pull the account's CURRENT site list from respira.press and merge in any
+     * sites that aren't in the running server yet.
+     *
+     * Why this exists: the server boots from whatever site list was in its config
+     * at startup. When the user adds a site on the dashboard afterwards, a
+     * long-lived server (Cowork especially) never learns about it and silently
+     * serves the stale list — Emil had 4 sites but Cowork only ever saw 3
+     * (2026-06-30). Rather than make the user re-paste config and restart, this
+     * lets list_sites self-heal: authenticate with a `respira_site_` token the
+     * server already holds, fetch the account's canonical config, and register
+     * any new sites in-memory (and persist to ~/.respira/config.json when that is
+     * the active source).
+     *
+     * Best-effort and throttled: a network/auth failure is swallowed and the
+     * existing list is returned unchanged. Servers with no site token (OAuth-only)
+     * or pinned to RESPIRA_CONFIG_B64 still get the in-session merge; only the
+     * on-disk persistence is skipped when the file is not the active source.
+     */
+    async refreshSitesFromAccount(force = false) {
+        const result = { added: [] };
+        const now = Date.now();
+        if (!force && now - this.lastSiteRefreshAt < RespiraWordPressServer.SITE_REFRESH_MIN_INTERVAL_MS) {
+            return result;
+        }
+        // Pick a live dashboard site token to authenticate the refresh.
+        let authToken = '';
+        for (const client of this.sites.values()) {
+            const key = client.getApiKey();
+            if (typeof key === 'string' && key.startsWith('respira_site_')) {
+                authToken = key;
+                break;
+            }
+        }
+        if (!authToken) {
+            // OAuth-only or token-less server: nothing to authenticate with.
+            return result;
+        }
+        // Stamp before the network call so a hang/failure still respects the
+        // throttle and we don't retry on every single list_sites.
+        this.lastSiteRefreshAt = now;
+        const apiBase = process.env.RESPIRA_API_BASE || 'https://www.respira.press';
+        const url = `${apiBase.replace(/\/+$/, '')}/api/mcp/config/refresh`;
+        let payload = null;
+        try {
+            const response = await fetch(url, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({ token: authToken }),
+                signal: AbortSignal.timeout(8000),
+            });
+            if (!response.ok) {
+                return result;
+            }
+            payload = await response.json().catch(() => null);
+        }
+        catch {
+            return result;
+        }
+        const accountSites = payload?.config?.sites;
+        if (!Array.isArray(accountSites)) {
+            return result;
+        }
+        for (const site of accountSites) {
+            if (!site?.id || !site?.url || !site?.apiKey)
+                continue;
+            if (this.sites.has(site.id))
+                continue;
+            const cfg = {
+                id: site.id,
+                name: site.name || site.id,
+                url: site.url,
+                apiKey: site.apiKey,
+                default: false,
+            };
+            const client = new WordPressClient(cfg);
+            this.sites.set(cfg.id, client);
+            if (this.currentSite === null) {
+                this.currentSite = client;
+                this.defaultSiteId = cfg.id;
+            }
+            try {
+                getUsageEmitter().registerSiteToken(cfg.url, cfg.apiKey);
+            }
+            catch {
+                // Best-effort; usage telemetry never blocks.
+            }
+            result.added.push(cfg.name);
+        }
+        // Persist new sites to disk so a restart keeps them — only when the file is
+        // the active config source. A RESPIRA_CONFIG_B64- or RESPIRA_CONFIG_FILE-
+        // pinned server still has the correct in-memory list this session; writing
+        // the default file would not be read on its next boot and could orphan a
+        // stray file, so skip it there.
+        const fileIsActiveSource = !process.env.RESPIRA_CONFIG_B64?.trim() && !process.env.RESPIRA_CONFIG_FILE?.trim();
+        if (result.added.length > 0 && fileIsActiveSource) {
+            try {
+                const onDisk = loadConfig();
+                const known = new Set(onDisk.sites.map((s) => s.id));
+                for (const site of accountSites) {
+                    if (site?.id && site?.url && site?.apiKey && !known.has(site.id)) {
+                        onDisk.sites.push({
+                            id: site.id,
+                            name: site.name || site.id,
+                            url: site.url,
+                            apiKey: site.apiKey,
+                            default: false,
+                        });
+                    }
+                }
+                saveConfig(onDisk);
+            }
+            catch {
+                // Best-effort; the in-memory merge above is what unblocks this session.
+            }
+        }
+        return result;
+    }
     /**
      * N6 fix (v6.19.0): the response envelope `site` field must reflect the
      * client that ACTUALLY serviced the call, not the global default. Pre-fix,
@@ -1093,17 +1215,39 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
             url: s.url,
         }));
         const hasConfigB64 = Boolean(process.env.RESPIRA_CONFIG_B64);
-        const baseMessage = `Connected ${sites.length} site${sites.length === 1 ? '' : 's'} via the Respira Cowork token. The config was written to ~/.respira/config.json. Restart this Cowork chat (or open a new one) so the MCP server picks up the new sites.`;
-        const message = hasConfigB64
-            ? `${baseMessage} IMPORTANT: your MCP server is currently configured via the RESPIRA_CONFIG_B64 environment variable, which takes precedence over the file on disk. To activate the new site, update RESPIRA_CONFIG_B64 in your agent's MCP server config with the base64-encoded contents of the new ~/.respira/config.json file, then restart the agent.`
-            : baseMessage;
+        // FAIL LOUD when the server is pinned to RESPIRA_CONFIG_B64. The config load
+        // order is RESPIRA_CONFIG_B64 -> RESPIRA_CONFIG_FILE -> ~/.respira/config.json
+        // (see config.ts), so the file we just wrote is OVERRIDDEN by the env var and
+        // the freshly-redeemed token never takes effect. The old code reported
+        // success with the caveat appended to the end of the message; agents glossed
+        // over it and reported "no output", so the user reconnected forever with a
+        // stale token (Sara / crediso.io: repeated redeems, token never updated,
+        // every authenticated call rejected). Returning success:false with the fix
+        // and the exact replacement value up front makes it impossible to miss.
+        if (hasConfigB64) {
+            const newConfigB64 = Buffer.from(JSON.stringify(config)).toString('base64');
+            return {
+                success: false,
+                error: 'config_pinned_to_env',
+                config_b64_active: true,
+                action_required: true,
+                config_path: configPath,
+                sites_count: sites.length,
+                sites,
+                new_config_b64: newConfigB64,
+                message: 'The token was redeemed and written to ~/.respira/config.json, but it will NOT take effect yet: this MCP server is pinned to the RESPIRA_CONFIG_B64 environment variable, which overrides the config file. That is exactly why reconnecting never updates the token and authenticated calls keep failing. ' +
+                    'Fix it one of two ways, then FULLY restart the agent: ' +
+                    '(1) remove RESPIRA_CONFIG_B64 from this server\'s MCP config so the file just written is used, or ' +
+                    '(2) replace the value of RESPIRA_CONFIG_B64 with this updated base64:\n\n' + newConfigB64,
+            };
+        }
         return {
             success: true,
             sites_count: sites.length,
             sites,
             config_path: configPath,
-            config_b64_active: hasConfigB64,
-            message,
+            config_b64_active: false,
+            message: `Connected ${sites.length} site${sites.length === 1 ? '' : 's'} via the Respira Cowork token. The config was written to ~/.respira/config.json. Restart this Cowork chat (or open a new one) so the MCP server picks up the new sites.`,
         };
     }
     /**
@@ -5019,6 +5163,10 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                     ? await client.getSiteContext()
                     : await client.getCompactSiteContext();
             case 'wordpress_list_sites': {
+                // Self-heal a stale list: re-pull the account's current sites so a site
+                // added on the dashboard after this server booted shows up without a
+                // re-paste or restart. Best-effort and throttled; never blocks the list.
+                const refresh = await this.refreshSitesFromAccount().catch(() => ({ added: [] }));
                 const allSites = Array.from(this.sites.values());
                 const visibleSites = allSites.filter((site) => this.isSiteAllowed(site));
                 // v6.17.2: surface hidden sites so the AI can explain
@@ -5031,6 +5179,13 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                 return {
                     sites: visibleSites.map((site) => this.getSiteSummary(site)),
                     active_site: this.getActiveSiteSummary(),
+                    ...(refresh.added.length > 0
+                        ? {
+                            refreshed_note: `Picked up ${refresh.added.length} newly added site${refresh.added.length === 1 ? '' : 's'} from your respira.press account: ${refresh.added.join(', ')}.${process.env.RESPIRA_CONFIG_B64?.trim()
+                                ? ' This server is pinned to the RESPIRA_CONFIG_B64 env var, so update that env to keep these sites after a restart.'
+                                : ''}`,
+                        }
+                        : {}),
                     ...(hiddenSites.length > 0
                         ? {
                             hidden_by_filter: hiddenSites,