@respira/wordpress-mcp-server 7.5.3 → 7.5.5

package/dist/server.js

@@ -428,6 +428,8 @@ Use respira_get_builder_info first to detect which builder is active. Then use t
 - Content format: Array of sections containing columns containing widgets
 - Each widget has a widgetType (e.g. "heading", "text-editor", "image", "button") and settings object
 - Dynamic schemas: Respira reads Elementor's control registry at runtime, so it knows the exact settings, types, and valid values for every widget
+- This includes registered third-party/theme widgets. For an existing custom widget: list_elementor_widgets -> get_elementor_widget_schema -> find_element by content/type -> update_element by the returned stable id with only changed settings -> find_element again to verify
+- Never use extract_builder_content + inject_builder_content or rewrite _elementor_data for a single-widget edit. Widget source code is only a fallback when its rendering semantics are not represented in the registered controls
 - Settings validator catches typos: "Unknown setting 'titel'. Did you mean 'title'?"
 - Responsive: settings support _mobile and _tablet suffixes (e.g. "align" for desktop, "align_mobile" for mobile)
 - respira_find_element works with Elementor widget IDs, types, CSS classes, and text content
@@ -4380,26 +4382,80 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
      * Widget shortcuts are filtered to only the detected builder's element types.
      * Core tools (site context, pages, posts, media, menus, etc.) always remain.
      */
-    /** Cached site context for tool filtering (refreshed on site switch). */
+    /** Cached site context, shared by tool filtering and the WooCommerce/ACF
+     * availability checks below — all three used to independently call
+     * getSiteContext() (getCompactSiteContext() itself just wraps it), meaning
+     * every getTools() invocation made up to three uncached, sequential live
+     * HTTP calls to the customer's own WordPress site before it could return
+     * the tool catalog. Each call carries the wordpress-client retry backoff
+     * (200/600/1800ms across 3 attempts), so a slow or failing site could push
+     * a single tools/list response past 7s — long enough for an MCP client's
+     * own handshake patience to give up and tear down the process, which
+     * looks identical to a crash with zero stderr output (nathankohut.co.uk,
+     * Windows, 2026-07-19). getContextForToolFiltering() below is the only
+     * caller of currentSite.getSiteContext() in this class; everything that
+     * used to call it directly or via getCompactSiteContext() now shares this
+     * one cached, timeout-bounded fetch instead. */
     cachedFilterContext = null;
-    static FILTER_CACHE_TTL = 60_000; // 1 minute
-    async filterToolsByContext(tools) {
+    static FILTER_CACHE_TTL = 60_000; // successful fetch: 1 minute
+    static FILTER_CACHE_FAILURE_TTL = 15_000; // failed fetch: retry sooner
+    static FILTER_CONTEXT_TIMEOUT_MS = 2_000;
+    /** Dedupes concurrent callers (e.g. isWooCommerceAddonAvailable() and
+     * isAcfAvailable() both missing a cold cache at once) onto one in-flight
+     * fetch instead of each starting their own. */
+    filterContextFetchInFlight = null;
+    /**
+     * Fetch (or reuse a cached / in-flight) site context for tool-catalog
+     * decisions. Bounded to FILTER_CONTEXT_TIMEOUT_MS regardless of how long
+     * the underlying client's own retry backoff would otherwise take, so a
+     * slow or unreachable site can never block tools/list indefinitely.
+     * Resolves to null (and caches the miss briefly) on timeout or any fetch
+     * error — callers treat null as "show everything / skip context-dependent
+     * gating" rather than failing the whole tool list.
+     */
+    async getContextForToolFiltering() {
         if (!this.currentSite) {
-            return tools; // No site connected — show everything.
+            return null;
         }
-        let context;
         const now = Date.now();
-        if (this.cachedFilterContext && (now - this.cachedFilterContext.timestamp) < RespiraWordPressServer.FILTER_CACHE_TTL) {
-            context = this.cachedFilterContext.context;
+        if (this.cachedFilterContext) {
+            const ttl = this.cachedFilterContext.context
+                ? RespiraWordPressServer.FILTER_CACHE_TTL
+                : RespiraWordPressServer.FILTER_CACHE_FAILURE_TTL;
+            if (now - this.cachedFilterContext.timestamp < ttl) {
+                return this.cachedFilterContext.context;
+            }
         }
-        else {
+        if (this.filterContextFetchInFlight) {
+            return this.filterContextFetchInFlight;
+        }
+        const fetchPromise = (async () => {
+            let context = null;
             try {
-                context = await this.currentSite.getCompactSiteContext();
-                this.cachedFilterContext = { context, timestamp: now };
+                const timeout = new Promise((_, reject) => setTimeout(() => reject(new Error('site context fetch timed out')), RespiraWordPressServer.FILTER_CONTEXT_TIMEOUT_MS));
+                context = await Promise.race([this.currentSite.getSiteContext(), timeout]);
             }
             catch {
-                return tools; // Can't fetch context — show everything.
+                context = null;
             }
+            this.cachedFilterContext = { context, timestamp: now };
+            return context;
+        })();
+        this.filterContextFetchInFlight = fetchPromise;
+        try {
+            return await fetchPromise;
+        }
+        finally {
+            this.filterContextFetchInFlight = null;
+        }
+    }
+    async filterToolsByContext(tools) {
+        if (!this.currentSite) {
+            return tools; // No site connected — show everything.
+        }
+        const context = await this.getContextForToolFiltering();
+        if (!context) {
+            return tools; // Can't fetch context — show everything.
         }
         const detectedBuilder = (context?.page_builder?.name || '').toLowerCase();
         const hasWooCommerce = Boolean(context?.woocommerce?.active || context?.addons?.woocommerce?.installed);
@@ -4430,16 +4486,11 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
         });
     }
     async isWooCommerceAddonAvailable() {
-        if (!this.currentSite) {
-            return false;
-        }
-        try {
-            const context = await this.currentSite.getSiteContext();
-            return Boolean(context.addons?.woocommerce?.installed && context.addons?.woocommerce?.licensed);
-        }
-        catch {
+        const context = await this.getContextForToolFiltering();
+        if (!context) {
             return false;
         }
+        return Boolean(context.addons?.woocommerce?.installed && context.addons?.woocommerce?.licensed);
     }
     /**
      * Detect whether ACF is active on the currently selected site.
@@ -4447,16 +4498,11 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
      * (a Pro tool on a non-Pro site returns PRO_FEATURE_REQUIRED).
      */
     async isAcfAvailable() {
-        if (!this.currentSite) {
-            return false;
-        }
-        try {
-            const context = await this.currentSite.getSiteContext();
-            return Boolean(context.addons?.acf?.installed);
-        }
-        catch {
+        const context = await this.getContextForToolFiltering();
+        if (!context) {
             return false;
         }
+        return Boolean(context.addons?.acf?.installed);
     }
     getWooCommerceTools() {
         return [
@@ -6838,7 +6884,7 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
             },
             {
                 name: 'wordpress_update_element',
-                description: 'Update settings or content on a specific element in a page. This is the PRIMARY tool for making content changes (text edits, style changes, image swaps, link updates, etc.). Works with all 12 page builders. First use find_element to locate the element, then pass the same identifier here with the updates object containing the new values. On WPBakery + Uncode pages, prefer identifier_type "uncode_shortcode_id" for stable round-trip matching. Response includes target_id, original_id, edit_target ("live" or "duplicate"), is_duplicate, duplicate_created and post_status so the caller can never mistake a duplicate-routed write for a live-page change.\n\nLive-edit confirmation: when respira_allow_direct_edit=1 AND the post is a published original, the first call returns `status: "confirmation_required"` with a `next_call_examples` payload. Re-call with the suggested `edit_target` (and `confirm_live_edit: true` for the live path) to acknowledge. Both params are exposed at the top level here so autonomous flows can complete the handshake through MCP without polluting the `updates` object.',
+                description: 'Update settings or content on one specific element. This is the PRIMARY tool for targeted changes (text, style, image, link, or a custom Elementor widget) and avoids rewriting the full builder document. First use find_element, then target its stable id and send only changed settings. For an Elementor custom/third-party widget, call list_elementor_widgets and get_elementor_widget_schema first; never use extract+inject or rewrite _elementor_data for a one-widget edit. On WPBakery + Uncode, prefer identifier_type "uncode_shortcode_id". Re-read with find_element after writing. Response identifies the resolved live/duplicate target so it cannot be mistaken for a live-page change.\n\nLive-edit confirmation: when respira_allow_direct_edit=1 AND the post is a published original, the first call returns `status: "confirmation_required"` with a `next_call_examples` payload. Re-call with the suggested `edit_target` (and `confirm_live_edit: true` for the live path) to acknowledge. Both params are exposed at the top level here so autonomous flows can complete the handshake through MCP without polluting the `updates` object.',
                 inputSchema: {
                     type: 'object',
                     properties: {