@respira/wordpress-mcp-server 7.6.1 → 8.0.0

package/README.md

@@ -7,14 +7,14 @@
 <h1 align="center">Respira WordPress MCP Server</h1>
 
 <p align="center">
-  <strong>200+ MCP tools (275+ with add-ons). 16 page builders. Context-aware tool filtering. The AI infrastructure layer for WordPress.</strong><br>
+  <strong>169 core MCP tools, 272 with the WooCommerce add-on. 16 page builders. Context-aware tool filtering. The AI infrastructure layer for WordPress.</strong><br>
   Element-level editing, full page creation, HTML-to-builder conversion with rendering fidelity validation, per-site tool governance, storefront design intelligence, stock images, bulk operations — all through one MCP server.
 </p>
 
 <p align="center">
   <a href="https://www.npmjs.com/package/@respira/wordpress-mcp-server"><img src="https://img.shields.io/npm/v/@respira/wordpress-mcp-server.svg?style=flat-square&color=10b981" alt="npm version"></a>
   <a href="https://www.npmjs.com/package/@respira/wordpress-mcp-server"><img src="https://img.shields.io/npm/dm/@respira/wordpress-mcp-server.svg?style=flat-square" alt="npm downloads"></a>
-  <img src="https://img.shields.io/badge/tools-200+-10b981?style=flat-square" alt="200+ Tools">
+  <img src="https://img.shields.io/badge/tools-272-10b981?style=flat-square" alt="272 Tools with WooCommerce">
   <img src="https://img.shields.io/badge/builders-16-10b981?style=flat-square" alt="16 Page Builders">
   <img src="https://img.shields.io/badge/TypeScript-100%25-blue?style=flat-square&logo=typescript&logoColor=white" alt="TypeScript">
 </p>
@@ -35,17 +35,38 @@ Other WordPress MCP servers wrap the REST API. They can create posts and pages,
 
 Respira includes a WordPress plugin that gives AI **native access** to 16 page builders, plus element-level precision, full page creation from structure, HTML-to-builder conversion, storefront design intelligence, stock image search, and bulk operations across hundreds of pages.
 
-### New in v7.5.5: path-safe multi-site routing and custom Elementor guidance
+### Next release: verified FSE and WooCommerce operations
 
-- **Subdirectory WordPress sites now have distinct identities.** `https://example.com` derives `example-com`, while `https://example.com/blog` derives `example-com-blog`; non-default ports are included too. Legacy automatic collisions self-heal, and ambiguous duplicate explicit IDs fail clearly instead of silently replacing one site in memory.
-- **Custom Elementor widgets have a safe targeted workflow.** Respira reads Elementor's live widget registry, including controls registered by themes and third-party plugins. Agents are instructed to list widgets, fetch the exact runtime schema, find the existing element, patch only its changed settings by stable ID, and re-read it—never replace the full `_elementor_data` document for one widget.
+- **First-class Site Editor tools.** Agents can list, inspect, create, target-update, and reset block templates and template parts; create and safely edit synced/unsynced patterns; and traverse native block navigation as exact nested paths. Every editable surface uses stale-write fingerprints, structural proposals, snapshots, compact diffs, cache invalidation, and truthful stored/rendered verification.
+- **Native design-token tools.** Gutenberg `theme.json` colors, typography, and spacing variables are exposed through the existing WordPress storage model rather than a parallel token database.
+- **Truthful storefront writes.** Woo product-card, checkout, sale-badge, and low-stock-badge tools resolve the real FSE template and registered block paths. An unsupported layout now returns `respira_woo_fse_write_not_supported`; it never reports an applied change that only logged intent.
+- **Bounded, defined commerce reporting.** Revenue, sales time series, top products, order summaries, and privacy-safe customer summaries use paginated WooCommerce data-store queries compatible with HPOS. Responses state currency, timezone, boundaries, statuses, coverage, and metric definitions.
+- **Safe store operations.** Read-only store configuration, payment gateway, shipping-zone, and tax-rate discovery is joined by approval-gated Woo webhooks with HTTPS targets, allowlisted topics, write-only secrets, and redacted rate-limited tests.
+- **Agent-visible audit history.** Activity list/detail tools connect compact diffs to snapshots, proposals, approvals, and rollbacks.
+- **Truthful capability discovery.** `wordpress_search_abilities` labels each result as Respira-native, inhaled, unavailable, or replaced by a safer audited Respira workflow, and returns the exact next action.
+- **Explicit feed recovery.** `woocommerce_get_feed_status` stays read-only while `woocommerce_repair_feed_scheduler` can clear only a confirmed-stale Respira lock, resume the idempotent build, verify the repair, and preserve Action Scheduler history.
+- **Safer plugin activation.** Dependency/version preflight, a signed fresh-process activation probe, REST/frontend boot checks, and narrowly scoped rollback prevent a broken plugin from taking the controlling request down with it.
+- **Generated release integrity.** A public [tool catalog](./TOOL_CATALOG.md) and machine-readable `tool-capabilities.json` are generated from the declarations used in release CI. Missing native or documentation coverage requires an explicit, reviewable exclusion.
 
-### Also shipped since v7.5.2
+### New in v7.6.2: clearer failures and trustworthy quality signals
 
-- **v7.5.3:** Windows absolute paths and `file://` URIs are recognized during media upload; `delete_media` now forwards its approval token and force flag so confirmation can complete.
-- **v7.5.4:** `tools/list` uses one shared, cached, two-second-bounded site-context fetch instead of three sequential WordPress calls. A slow or unreachable site can no longer hold the initial tool catalog open through multiple retry windows.
+- **PageSpeed failures keep their real machine-readable reason.** Rate limits, upstream outages, proxy HTML responses, and other structured WordPress errors no longer collapse into a generic failure, so agents can distinguish “retry later” from a Respira defect.
+- **PageSpeed tools reject incomplete requests before touching WordPress.** Both PageSpeed schemas require either `page_id` or `url`, preventing avoidable calls that could only fail.
+- **Every transport attempt has its own identity.** The logical call id remains stable for replay-safe writes, while `attempt_id` preserves each network attempt so a retry can never overwrite the evidence from the first timeout.
+- **Privacy remains metadata-only.** Retry detection uses a process-secret target hash. Respira never sends prompts, raw arguments, tool results, or WordPress content.
+- **The admin quality dashboard now separates operational health from task completion.** Expected approval/safety blocks, caller mistakes, customer setup, upstream services, product errors, unknown failures, and incomplete attempts are measured independently. Alerts use comparable site cohorts and require failures across multiple sites, reducing false alarms caused by one unusual customer setup.
+- **The npm package no longer publishes private repository metadata.** Support and product links point to respira.press.
 
-### v7.5.2: reconnect-safe writes and drop diagnostics
+### Reliability and builder additions since v7.5.2
+
+- **v7.5.3:** Windows media paths and `file://` uploads work correctly; `delete_media` approval tokens now reach the confirmation call.
+- **v7.5.4:** `tools/list` shares one cached, two-second-bounded context fetch instead of making three sequential WordPress checks, preventing slow-site handshake disconnects.
+- **v7.5.5:** subdirectory WordPress installs on the same hostname receive distinct site identities; custom Elementor widget guidance now uses live control schemas and targeted stable-ID updates.
+- **v7.5.6:** a successful `?rest_route=` diagnostic fallback becomes sticky for the rest of the MCP session.
+- **v7.6.0:** WPML translation tools and Divi Theme Builder header, footer, and body-template tools.
+- **v7.6.1:** `wordpress_build_mega_menu` creates a complete native Divi 4 or Divi 5 mega-menu hierarchy in one call.
+
+### Reconnect-safe writes and drop diagnostics (v7.5.2)
 
 - **Writes carry a stable idempotency key.** The connector automatically retries transient reads. It retries a write only when WordPress explicitly confirms replay support; an ambiguous timeout/reset is reported as `respira_write_outcome_unknown` so the agent verifies the target before trying again.
 - **Telemetry queues and retries independently of tool execution.** A dashboard or network interruption cannot block a WordPress call, and failed metadata batches are retained with bounded exponential backoff.
@@ -53,13 +74,13 @@ Respira includes a WordPress plugin that gives AI **native access** to 16 page b
 - **The quality dashboard can separate exact retries from editing sweeps.** It records stable session/call identity, transport, incomplete calls, connector/plugin versions, total vs tool time, and privacy-safe stage durations. Target comparison uses a secret HMAC; arguments, results, prompts, and WordPress content are never sent.
 - **Native URL-connected clients gain timeout-safe writes.** Plugin 7.5.46 adds `_respira_async: true`, `respira_get_job_status`, stable `Mcp-Session-Id` responses, replay-safe `_respira_call_id`, and a native `respira_diagnose_connection` tool. The native endpoint is stateless HTTP—independent POST requests, not a persistent “write channel.”
 
-### Also shipped since the README's previous v7.1 refresh
+### Also shipped between v7.1 and v7.5.1
 
 - **v7.2:** cascade session rollback; dropped-styling/no-op guidance; page-parent schemas; Oxygen 6 build guidance; completed live-edit confirmation parameters; bounded heavy-write/docs timeouts; and route-aware capability negotiation that hides tools an older plugin cannot execute.
 - **v7.3:** the WooCommerce add-on expanded from 21 to 56 tools across catalog, pricing, stock, storefront, brands, variations/attributes, coupons, customers, refunds, and AI-readiness.
 - **v7.4:** Agent-Ready Commerce expanded WooCommerce to 79 tools with feeds + store `llms.txt`, readiness fixes, signed cart links/attribution, and Subscriptions, Bookings, and Memberships writes. v7.4.1 then made newly connected dashboard sites self-heal into a running connector session.
 - **v7.5.0:** eight STAGGS configurator tools brought the WooCommerce total to 87.
-- **v7.5.1:** fixed normalized ACF tool routing and preserved dashboard-token 401 machine codes—the two fixes shipped immediately before this reliability release.
+- **v7.5.1:** fixed normalized ACF tool routing and preserved dashboard-token 401 machine codes.
 
 ### New in v7.1 "Roots"
 
@@ -95,7 +116,7 @@ Every successful tool response includes `structuredContent`, the raw JSON object
 
 ### v6.0 "Storefront" — Context-Aware Tool Filtering
 
-The MCP server automatically filters the tool list based on your site's detected builder and active plugins. A Divi site without WooCommerce sees ~130 tools instead of ~170. Less noise, faster AI responses, lower token usage. Fail-open: if detection fails, the full list is returned.
+The MCP server exposes 169 core tools and 103 WooCommerce add-on tools. It automatically filters the list based on the site's detected builder and active plugins, so clients receive only the useful subset. Fail-open: if detection fails, the full list is returned.
 
 | Capability | Respira | Typical WordPress MCP servers |
 |---|---|---|
@@ -203,7 +224,7 @@ Or run the interactive setup wizard: `npx @respira/wordpress-mcp-server --setup`
 
 ### Tool Limit? Use `enabledTools`
 
-Some MCP clients (Antigravity, etc.) have a hard limit on active tools (often 100). Respira exposes 172 tools by default. To stay under the limit, add `enabledTools` to your config — only those tools will appear in the listing:
+Some MCP clients (Antigravity, etc.) have a hard limit on active tools (often 100). Respira can expose up to 272 tools when the WooCommerce add-on is active. To stay under the limit, add `enabledTools` to your config — only those tools will appear in the listing:
 
 ```json
 {
@@ -242,13 +263,13 @@ Unknown tool names now return a proper `CallToolResult` with `isError: true` and
 ## v6.0 "Storefront" — What's New
 
 ### Context-Aware Tool Filtering
-The MCP server automatically filters the tool list based on your site's detected builder and active plugins. A Divi site without WooCommerce sees ~130 tools instead of ~170. Less noise, faster AI responses, lower token usage. Fail-open: if detection fails, the full list is returned.
+The MCP server automatically filters its 169 core and 103 WooCommerce tools based on the site's detected builder and active plugins. Less noise, faster AI responses, lower token usage. Fail-open: if detection fails, the full list is returned.
 
 ### Flatsome UX Builder (Builder #12)
 Full round-trip shortcode editing, element-level precision, declarative page creation, and 55-element intelligence. Detected by active theme — mixed-builder sites handled per-page.
 
 ### 15 New WooCommerce Commerce Tools
-Storefront design intelligence bridges commerce data and page builder visuals. Bulk pricing, catalog health audits, advanced filtering, natural language product search. Total WooCommerce tools: 36.
+Storefront design intelligence bridges commerce data and page builder visuals. Bulk pricing, catalog health audits, advanced filtering, natural language product search. Total WooCommerce tools: 103.
 
 ### Element-Level Operations
 Find, update, move, duplicate, and remove individual elements inside any page builder — by ID, type, CSS class, or content text.
@@ -332,6 +353,23 @@ respira_add_image({ post_id: 42, image_url: "https://..." })
 
 ## All Tools
 
+### Native Site Editor structures (10 tools) — Next release
+
+These are Respira-native WordPress operations, not a copied generic tool catalog. User-owned structures use the same approval, revision, snapshot, no-op detection, read-back, and render-verification contract as template editing. Theme and plugin patterns are inspectable but remain owned by their source.
+
+| Tool | Description |
+|---|---|
+| `wordpress_list_site_patterns` | List user, theme, plugin, and core patterns with source, sync status, and fingerprints |
+| `wordpress_get_site_pattern` | Inspect a pattern as a lossless path-addressed block tree |
+| `wordpress_create_site_pattern` | Stage a synced or unsynced user pattern |
+| `wordpress_update_site_pattern` | Apply exact block operations with stale/wrong-target protection |
+| `wordpress_delete_site_pattern` | Delete through approval; referenced patterns are refused by default |
+| `wordpress_list_site_navigations` | List block navigation entities with compact nested items and exact paths |
+| `wordpress_get_site_navigation` | Inspect the full native navigation block document and its references |
+| `wordpress_create_site_navigation` | Stage a native block navigation entity |
+| `wordpress_update_site_navigation` | Target one link/submenu while preserving unknown extension blocks |
+| `wordpress_delete_site_navigation` | Delete through approval; referenced navigation is refused by default |
+
 ### Bricks Deep Intelligence (20 tools) — NEW in v5.4
 | Tool | Description |
 |---|---|
@@ -476,12 +514,13 @@ Add any widget to a page in one call:
 | `respira_switch_site` | Switch active site |
 | `respira_get_active_site` | Get current site info |
 
-### WooCommerce Add-on (21 tools)
+### WooCommerce Add-on (103 tools)
 Available when the [WooCommerce add-on](https://respira.press/addons/woocommerce) is installed. Included free with Studio and Founder plans.
 
 | Category | Tools |
 |---|---|
 | **Storefront intelligence** (NEW in v6.0) | `analyze_shop_page`, `analyze_product_page`, `update_product_card_layout`, `add_low_stock_badge`, `add_sale_badge`, `update_checkout_layout` |
+| **Product-card fields** (NEW in 8.0) | `analyze_storefront_card`, `update_storefront_card_field` |
 | **Catalog operations** (NEW in v6.0) | `list_products_advanced`, `bulk_update_products`, `analyze_catalog_health`, `find_product_by_natural_language` |
 | **Pricing** (NEW in v6.0) | `bulk_update_prices`, `schedule_sale`, `revert_pricing` |
 | **Inventory** (NEW in v6.0) | `bulk_update_stock`, `find_low_stock` |
@@ -490,7 +529,9 @@ Available when the [WooCommerce add-on](https://respira.press/addons/woocommerce
 | **Inventory control** | `get_stock_status`, `update_stock` |
 | **Product categories** | `list_categories`, `get_category`, `create_category`, `update_category`, `delete_category` |
 | **Product tags** | `list_tags`, `get_tag`, `create_tag`, `update_tag`, `delete_tag` |
-| **Analytics** | `sales_report` |
+| **Analytics** | `sales_report` (deprecated alias), `revenue_summary`, `sales_timeseries`, `top_products`, `orders_summary`, `customers_summary` |
+| **Store configuration** | `get_store_configuration`, `list_payment_gateways`, `list_shipping_zones`, `list_tax_rates` |
+| **Webhooks** | `list_webhooks`, `get_webhook`, `create_webhook`, `update_webhook`, `delete_webhook`, `test_webhook` |
 
 ---
 
@@ -523,19 +564,6 @@ Manage multiple WordPress sites from one config:
 
 Switch sites: `respira_switch_site({ siteId: "staging" })`
 
-Every non-global tool also accepts `site_id`. For shared connectors, include it on every call; set `RESPIRA_REQUIRE_SITE_ID=1` to reject multi-site writes that omit it. If two installs share a hostname (for example the root site and `/blog`), keep distinct explicit IDs as shown below. v7.5.5+ also derives distinct IDs from their paths automatically.
-
-```json
-{
-  "sites": [
-    { "id": "brand24-main", "name": "Brand24 staging", "url": "https://stag.brand24.com", "apiKey": "respira_main_key", "default": true },
-    { "id": "brand24-blog", "name": "Brand24 blog staging", "url": "https://stag.brand24.com/blog", "apiKey": "respira_blog_key" }
-  ]
-}
-```
-
-For the strongest isolation—especially when several testers work concurrently—use one connector/config per WordPress install. A shared connector is safe when IDs are unique, calls carry `site_id`, and `RESPIRA_REQUIRE_SITE_ID=1` is enabled.
-
 For agencies managing many sites, use the hosted setup at [respira.press/dashboard/mcp](https://www.respira.press/dashboard/mcp) to generate configs and install commands from your account.
 
 ---
@@ -774,6 +802,6 @@ MIT © [Respira](https://respira.press)
 ---
 
 <p align="center">
-  <strong>200+ tools. 16 builders. The AI infrastructure layer for WordPress.</strong><br>
+  <strong>169 core tools, 272 with WooCommerce. 16 builders. The AI infrastructure layer for WordPress.</strong><br>
   <a href="https://respira.press">respira.press</a>
 </p>

package/TOOL_CATALOG.md

@@ -0,0 +1,288 @@
+# Respira MCP tool catalog
+
+<!-- Generated by scripts/check-tool-registry-parity.mjs. Do not edit by hand. -->
+
+Generated catalog: **169 core tools**, **105 WooCommerce tools**, **274 total**.
+
+The runtime applies site context and per-site governance, so an individual connection may expose a smaller relevant subset.
+
+## WordPress and Respira
+
+- `respira_duplicate_with_translations` — write; hosted/stdio
+- `wordpress_abilities_gap_report` — read; hosted/stdio
+- `wordpress_activate_plugin` — write; native + hosted
+- `wordpress_analyze_aeo` — read; native + hosted
+- `wordpress_analyze_images` — read; native + hosted
+- `wordpress_analyze_pagespeed` — read; hosted/stdio
+- `wordpress_analyze_performance` — read; native + hosted
+- `wordpress_analyze_rankmath` — read; native + hosted
+- `wordpress_analyze_readability` — read; native + hosted
+- `wordpress_analyze_seo` — read; native + hosted
+- `wordpress_append_theme_file` — read; hosted/stdio
+- `wordpress_apply_accessibility_fixes` — write; hosted/stdio
+- `wordpress_apply_builder_patch` — write; native + hosted
+- `wordpress_assign_menu_location` — write; native + hosted
+- `wordpress_batch_update` — write; native + hosted
+- `wordpress_begin_session` — read; hosted/stdio
+- `wordpress_build_mega_menu` — write; native + hosted
+- `wordpress_build_page` — write; native + hosted
+- `wordpress_bulk_pages_operation` — write; native + hosted
+- `wordpress_check_seo_issues` — read; native + hosted
+- `wordpress_check_structured_data` — read; native + hosted
+- `wordpress_convert_html_to_builder` — write; native + hosted
+- `wordpress_create_acf_field_group` — write; hosted/stdio
+- `wordpress_create_comment` — write; native + hosted
+- `wordpress_create_custom_post` — write; native + hosted
+- `wordpress_create_design_token` — write; native + hosted
+- `wordpress_create_menu` — write; native + hosted
+- `wordpress_create_menu_item` — write; native + hosted
+- `wordpress_create_page_duplicate` — write; native + hosted
+- `wordpress_create_playbook` — write; hosted/stdio
+- `wordpress_create_post_duplicate` — write; native + hosted
+- `wordpress_create_post_type` — write; hosted/stdio
+- `wordpress_create_site_navigation` — write; native + hosted
+- `wordpress_create_site_pattern` — write; native + hosted
+- `wordpress_create_site_template` — write; native + hosted
+- `wordpress_create_taxonomy` — write; hosted/stdio
+- `wordpress_create_term` — write; native + hosted
+- `wordpress_create_theme_builder_template` — write; native + hosted
+- `wordpress_create_translation` — write; native + hosted
+- `wordpress_create_user` — write; native + hosted
+- `wordpress_deactivate_plugin` — write; native + hosted
+- `wordpress_delete_acf_field_group` — write; hosted/stdio
+- `wordpress_delete_comment` — write; native + hosted
+- `wordpress_delete_custom_post` — write; native + hosted
+- `wordpress_delete_design_token` — write; native + hosted
+- `wordpress_delete_media` — write; native + hosted
+- `wordpress_delete_menu` — write; native + hosted
+- `wordpress_delete_menu_item` — write; native + hosted
+- `wordpress_delete_option` — write; native + hosted
+- `wordpress_delete_page` — write; native + hosted
+- `wordpress_delete_playbook` — write; hosted/stdio
+- `wordpress_delete_plugin` — write; native + hosted
+- `wordpress_delete_post` — write; native + hosted
+- `wordpress_delete_post_type` — write; hosted/stdio
+- `wordpress_delete_site_navigation` — write; native + hosted
+- `wordpress_delete_site_pattern` — write; native + hosted
+- `wordpress_delete_taxonomy` — write; hosted/stdio
+- `wordpress_delete_term` — write; native + hosted
+- `wordpress_delete_user` — write; native + hosted
+- `wordpress_diagnose_connection` — read; hosted/stdio
+- `wordpress_diff_snapshots` — read; native + hosted
+- `wordpress_duplicate_element` — write; native + hosted
+- `wordpress_end_session` — read; hosted/stdio
+- `wordpress_extract_builder_content` — read; native + hosted
+- `wordpress_find_builder_targets` — read; native + hosted
+- `wordpress_find_element` — read; native + hosted
+- `wordpress_get_accessibility_scan` — read; hosted/stdio
+- `wordpress_get_active_site` — read; hosted/stdio
+- `wordpress_get_activity` — read; native + hosted
+- `wordpress_get_builder_info` — read; native + hosted
+- `wordpress_get_builder_inline_schemas` — read; hosted/stdio
+- `wordpress_get_comment` — read; native + hosted
+- `wordpress_get_core_web_vitals` — read; native + hosted
+- `wordpress_get_custom_post` — read; native + hosted
+- `wordpress_get_divi_migration_readiness` — read; hosted/stdio
+- `wordpress_get_media` — read; native + hosted
+- `wordpress_get_menu` — read; native + hosted
+- `wordpress_get_menu_item` — read; native + hosted
+- `wordpress_get_option` — read; native + hosted
+- `wordpress_get_page_outline` — read; hosted/stdio
+- `wordpress_get_playbook` — read; hosted/stdio
+- `wordpress_get_post_type` — read; native + hosted
+- `wordpress_get_server_compatibility` — read; native + hosted
+- `wordpress_get_site_context` — read; native + hosted
+- `wordpress_get_site_navigation` — read; native + hosted
+- `wordpress_get_site_pattern` — read; native + hosted
+- `wordpress_get_site_template` — read; native + hosted
+- `wordpress_get_snapshot` — read; native + hosted
+- `wordpress_get_taxonomy` — read; native + hosted
+- `wordpress_get_term` — read; native + hosted
+- `wordpress_get_theme_docs` — read; native + hosted
+- `wordpress_get_translations` — read; native + hosted
+- `wordpress_get_user` — read; native + hosted
+- `wordpress_inject_builder_content` — write; native + hosted
+- `wordpress_install_plugin` — write; native + hosted
+- `wordpress_invoke_ability` — write; hosted/stdio
+- `wordpress_list_accessibility_scans` — read; hosted/stdio
+- `wordpress_list_acf_field_groups` — read; hosted/stdio
+- `wordpress_list_activity` — read; native + hosted
+- `wordpress_list_comments` — read; native + hosted
+- `wordpress_list_custom_post_types` — read; hosted/stdio
+- `wordpress_list_custom_posts` — read; native + hosted
+- `wordpress_list_custom_taxonomies` — read; hosted/stdio
+- `wordpress_list_design_tokens` — read; native + hosted
+- `wordpress_list_media` — read; native + hosted
+- `wordpress_list_menu_items` — read; native + hosted
+- `wordpress_list_menu_locations` — read; native + hosted
+- `wordpress_list_menus` — read; native + hosted
+- `wordpress_list_options` — read; native + hosted
+- `wordpress_list_pages` — read; native + hosted
+- `wordpress_list_playbooks` — read; hosted/stdio
+- `wordpress_list_plugins` — read; native + hosted
+- `wordpress_list_post_types` — read; native + hosted
+- `wordpress_list_posts` — read; native + hosted
+- `wordpress_list_site_navigations` — read; native + hosted
+- `wordpress_list_site_patterns` — read; native + hosted
+- `wordpress_list_site_templates` — read; native + hosted
+- `wordpress_list_sites` — read; hosted/stdio
+- `wordpress_list_snapshots` — read; native + hosted
+- `wordpress_list_taxonomies` — read; native + hosted
+- `wordpress_list_terms` — read; native + hosted
+- `wordpress_list_theme_builder_templates` — read; native + hosted
+- `wordpress_list_users` — read; native + hosted
+- `wordpress_make_responsive` — read; hosted/stdio
+- `wordpress_move_element` — write; native + hosted
+- `wordpress_read_page` — read; native + hosted
+- `wordpress_read_post` — read; native + hosted
+- `wordpress_read_theme_file` — read; hosted/stdio
+- `wordpress_redeem_token` — write; hosted/stdio
+- `wordpress_remove_element` — write; native + hosted
+- `wordpress_reorder_elements` — write; native + hosted
+- `wordpress_report_issue` — read; hosted/stdio
+- `wordpress_reset_site_template` — write; native + hosted
+- `wordpress_restore_session` — write; hosted/stdio
+- `wordpress_restore_snapshot` — write; native + hosted
+- `wordpress_run_pagespeed_audit` — read; hosted/stdio
+- `wordpress_scan_page_accessibility` — read; hosted/stdio
+- `wordpress_search_abilities` — read; native + hosted
+- `wordpress_search_docs` — read; hosted/stdio
+- `wordpress_search_stock_images` — read; native + hosted
+- `wordpress_sideload_image` — write; native + hosted
+- `wordpress_switch_site` — write; native + hosted
+- `wordpress_update_acf_field_group` — write; hosted/stdio
+- `wordpress_update_comment` — write; native + hosted
+- `wordpress_update_custom_post` — write; native + hosted
+- `wordpress_update_design_token` — write; native + hosted
+- `wordpress_update_element` — write; native + hosted
+- `wordpress_update_media` — write; native + hosted
+- `wordpress_update_media_batch` — write; hosted/stdio
+- `wordpress_update_menu` — write; native + hosted
+- `wordpress_update_menu_item` — write; native + hosted
+- `wordpress_update_module` — write; native + hosted
+- `wordpress_update_option` — write; native + hosted
+- `wordpress_update_page` — write; native + hosted
+- `wordpress_update_playbook` — write; hosted/stdio
+- `wordpress_update_plugin` — write; native + hosted
+- `wordpress_update_post` — write; native + hosted
+- `wordpress_update_post_type` — write; hosted/stdio
+- `wordpress_update_site_navigation` — write; native + hosted
+- `wordpress_update_site_pattern` — write; native + hosted
+- `wordpress_update_site_template` — write; native + hosted
+- `wordpress_update_taxonomy` — write; hosted/stdio
+- `wordpress_update_term` — write; native + hosted
+- `wordpress_update_theme_builder_template` — write; native + hosted
+- `wordpress_update_translation` — write; native + hosted
+- `wordpress_update_user` — write; native + hosted
+- `wordpress_upload_media` — write; native + hosted
+- `wordpress_validate_security` — read; native + hosted
+- `wordpress_write_theme_file` — read; hosted/stdio
+
+## WooCommerce add-on
+
+- `woocommerce_add_low_stock_badge` — write; native + hosted
+- `woocommerce_add_order_note` — write; native + hosted
+- `woocommerce_add_sale_badge` — write; native + hosted
+- `woocommerce_add_subscription_note` — write; native + hosted
+- `woocommerce_agent_orders_report` — read; native + hosted
+- `woocommerce_analyze_product_page` — read; native + hosted
+- `woocommerce_analyze_shop_page` — read; native + hosted
+- `woocommerce_analyze_storefront_card` — read; native + hosted
+- `woocommerce_bulk_update_prices` — write; native + hosted
+- `woocommerce_bulk_update_products` — write; native + hosted
+- `woocommerce_bulk_update_stock` — write; native + hosted
+- `woocommerce_catalog_ai_readiness` — read; native + hosted
+- `woocommerce_catalog_health` — read; native + hosted
+- `woocommerce_configurator_status` — read; native + hosted
+- `woocommerce_configure_feed` — write; native + hosted
+- `woocommerce_create_brand` — write; native + hosted
+- `woocommerce_create_cart_link` — write; native + hosted
+- `woocommerce_create_category` — write; native + hosted
+- `woocommerce_create_coupon` — write; native + hosted
+- `woocommerce_create_customer` — write; native + hosted
+- `woocommerce_create_global_attribute` — write; native + hosted
+- `woocommerce_create_order_refund` — write; native + hosted
+- `woocommerce_create_product` — write; native + hosted
+- `woocommerce_create_tag` — write; native + hosted
+- `woocommerce_create_variation` — write; native + hosted
+- `woocommerce_create_webhook` — write; native + hosted
+- `woocommerce_customers_summary` — read; native + hosted
+- `woocommerce_delete_brand` — write; native + hosted
+- `woocommerce_delete_category` — write; native + hosted
+- `woocommerce_delete_tag` — write; native + hosted
+- `woocommerce_delete_webhook` — write; native + hosted
+- `woocommerce_duplicate_product` — write; native + hosted
+- `woocommerce_find_low_stock` — read; native + hosted
+- `woocommerce_find_product` — read; native + hosted
+- `woocommerce_generate_feed` — write; native + hosted
+- `woocommerce_generate_variations` — write; native + hosted
+- `woocommerce_get_booking` — read; native + hosted
+- `woocommerce_get_brand` — read; native + hosted
+- `woocommerce_get_category` — read; native + hosted
+- `woocommerce_get_configurator_attribute_items` — read; native + hosted
+- `woocommerce_get_feed_status` — read; native + hosted
+- `woocommerce_get_membership` — read; native + hosted
+- `woocommerce_get_order` — read; native + hosted
+- `woocommerce_get_order_refunds` — read; native + hosted
+- `woocommerce_get_plugin_state` — read; native + hosted
+- `woocommerce_get_product` — read; native + hosted
+- `woocommerce_get_product_configurator` — read; native + hosted
+- `woocommerce_get_stock_status` — read; native + hosted
+- `woocommerce_get_store_configuration` — read; native + hosted
+- `woocommerce_get_subscription` — read; native + hosted
+- `woocommerce_get_tag` — read; native + hosted
+- `woocommerce_get_webhook` — read; native + hosted
+- `woocommerce_list_bookings` — read; native + hosted
+- `woocommerce_list_brands` — read; native + hosted
+- `woocommerce_list_categories` — read; native + hosted
+- `woocommerce_list_configurator_attributes` — read; native + hosted
+- `woocommerce_list_coupons` — read; native + hosted
+- `woocommerce_list_membership_plans` — read; native + hosted
+- `woocommerce_list_memberships` — read; native + hosted
+- `woocommerce_list_orders` — read; native + hosted
+- `woocommerce_list_payment_gateways` — read; native + hosted
+- `woocommerce_list_products` — read; native + hosted
+- `woocommerce_list_products_advanced` — read; native + hosted
+- `woocommerce_list_shipping_zones` — read; native + hosted
+- `woocommerce_list_subscriptions` — read; native + hosted
+- `woocommerce_list_tags` — read; native + hosted
+- `woocommerce_list_tax_rates` — read; native + hosted
+- `woocommerce_list_webhooks` — read; native + hosted
+- `woocommerce_orders_summary` — read; native + hosted
+- `woocommerce_product_ai_readiness` — read; native + hosted
+- `woocommerce_readiness_fixlist` — read; native + hosted
+- `woocommerce_repair_feed_scheduler` — write; native + hosted
+- `woocommerce_reschedule_booking` — write; native + hosted
+- `woocommerce_revenue_summary` — read; native + hosted
+- `woocommerce_revert_pricing` — write; native + hosted
+- `woocommerce_sales_report` — read; native + hosted
+- `woocommerce_sales_timeseries` — read; native + hosted
+- `woocommerce_schedule_sale` — write; native + hosted
+- `woocommerce_set_configurator_attribute_items` — write; native + hosted
+- `woocommerce_set_feed_category_mapping` — write; native + hosted
+- `woocommerce_set_image_alt` — write; native + hosted
+- `woocommerce_set_membership_end_date` — write; native + hosted
+- `woocommerce_set_plugin_state` — write; native + hosted
+- `woocommerce_set_product_attributes` — write; native + hosted
+- `woocommerce_set_product_configurator` — write; native + hosted
+- `woocommerce_set_variation_gallery` — write; native + hosted
+- `woocommerce_test_webhook` — read; native + hosted
+- `woocommerce_top_products` — read; native + hosted
+- `woocommerce_update_booking_status` — write; native + hosted
+- `woocommerce_update_brand` — write; native + hosted
+- `woocommerce_update_category` — write; native + hosted
+- `woocommerce_update_checkout_layout` — write; native + hosted
+- `woocommerce_update_coupon` — write; native + hosted
+- `woocommerce_update_customer` — write; native + hosted
+- `woocommerce_update_membership_status` — write; native + hosted
+- `woocommerce_update_order_status` — write; native + hosted
+- `woocommerce_update_product` — write; native + hosted
+- `woocommerce_update_product_card_layout` — write; native + hosted
+- `woocommerce_update_stock` — write; native + hosted
+- `woocommerce_update_storefront_card_field` — write; native + hosted
+- `woocommerce_update_subscription_dates` — write; native + hosted
+- `woocommerce_update_subscription_status` — write; native + hosted
+- `woocommerce_update_tag` — write; native + hosted
+- `woocommerce_update_webhook` — write; native + hosted
+- `woocommerce_validate_feed` — read; native + hosted
+

package/dist/__tests__/pagespeed-error-classification.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=pagespeed-error-classification.test.d.ts.map

package/dist/__tests__/pagespeed-error-classification.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagespeed-error-classification.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/pagespeed-error-classification.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/pagespeed-error-classification.test.js

@@ -0,0 +1,52 @@
+import assert from 'node:assert/strict';
+import { test } from 'node:test';
+import { WordPressClient } from '../wordpress-client.js';
+const config = {
+    id: 'pagespeed-test',
+    name: 'PageSpeed test',
+    url: 'https://example.com',
+    apiKey: 'respira_test_key',
+};
+function fakeResponse(status, data) {
+    return {
+        isAxiosError: true,
+        message: `Request failed with status code ${status}`,
+        response: {
+            status,
+            statusText: 'Error',
+            headers: {},
+            data,
+            config: {},
+        },
+        config: { url: '/analyze/pagespeed', method: 'post' },
+    };
+}
+test('PageSpeed rate limits retain a stable upstream error code', async () => {
+    const client = new WordPressClient(config);
+    const error = await client.handleError(fakeResponse(429, {
+        code: 'respira_pagespeed_rate_limited',
+        message: 'Google PSI rate limited this request.',
+        data: { status: 429, retry_after: 60 },
+    }));
+    assert.equal(error.name, 'respira_pagespeed_rate_limited');
+    assert.deepEqual(error.respiraErrorEnvelope, {
+        code: 'respira_pagespeed_rate_limited',
+        retry_after: 60,
+    });
+});
+test('PageSpeed upstream 5xx responses do not become unclassified', async () => {
+    const client = new WordPressClient(config);
+    const error = await client.handleError(fakeResponse(503, {
+        code: 'respira_pagespeed_upstream_unavailable',
+        message: 'Google PSI is unavailable.',
+        data: { status: 503 },
+    }));
+    assert.equal(error.name, 'respira_pagespeed_upstream_unavailable');
+    assert.match(error.message, /WordPress server error \(503\)/);
+});
+test('non-WordPress proxy errors receive a specific machine code', async () => {
+    const client = new WordPressClient(config);
+    const error = await client.handleError(fakeResponse(502, '<!DOCTYPE html><html><title>Bad Gateway</title></html>'));
+    assert.equal(error.name, 'http_502_non_wordpress');
+});
+//# sourceMappingURL=pagespeed-error-classification.test.js.map

package/dist/__tests__/pagespeed-error-classification.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagespeed-error-classification.test.js","sourceRoot":"","sources":["../../src/__tests__/pagespeed-error-classification.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAGzD,MAAM,MAAM,GAAwB;IAClC,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,gBAAgB;IACtB,GAAG,EAAE,qBAAqB;IAC1B,MAAM,EAAE,kBAAkB;CAC3B,CAAC;AAEF,SAAS,YAAY,CAAC,MAAc,EAAE,IAAa;IACjD,OAAO;QACL,YAAY,EAAE,IAAI;QAClB,OAAO,EAAE,mCAAmC,MAAM,EAAE;QACpD,QAAQ,EAAE;YACR,MAAM;YACN,UAAU,EAAE,OAAO;YACnB,OAAO,EAAE,EAAE;YACX,IAAI;YACJ,MAAM,EAAE,EAAE;SACX;QACD,MAAM,EAAE,EAAE,GAAG,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,EAAE;KAC/C,CAAC;AACX,CAAC;AAED,IAAI,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;IAC3E,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAO,MAAc,CAAC,WAAW,CAC7C,YAAY,CAAC,GAAG,EAAE;QAChB,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,uCAAuC;QAChD,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE;KACvC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,gCAAgC,CAAC,CAAC;IAC3D,MAAM,CAAC,SAAS,CAAE,KAAa,CAAC,oBAAoB,EAAE;QACpD,IAAI,EAAE,gCAAgC;QACtC,WAAW,EAAE,EAAE;KAChB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;IAC7E,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAO,MAAc,CAAC,WAAW,CAC7C,YAAY,CAAC,GAAG,EAAE;QAChB,IAAI,EAAE,wCAAwC;QAC9C,OAAO,EAAE,4BAA4B;QACrC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE;KACtB,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,wCAAwC,CAAC,CAAC;IACnE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,gCAAgC,CAAC,CAAC;AAChE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;IAC5E,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAO,MAAc,CAAC,WAAW,CAC7C,YAAY,CAAC,GAAG,EAAE,wDAAwD,CAAC,CAC5E,CAAC;IAEF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC"}

package/dist/__tests__/rest-route-fallback.test.js

@@ -262,68 +262,4 @@ test('diagnose_connection reports rest_route_fallback_worked: true when applicab
         restoreAdapter();
     }
 });
-// Regression test for ticket 73b64e82: diagnoseConnection's own probes run
-// over a bare axios.request() and never touched the interceptor-wrapped
-// client, so a confirmed rest_route_fallback_worked: true never actually
-// flipped the sticky flag — every subsequent normal tool call kept retrying
-// the shadowed pretty path from scratch instead of going straight to
-// ?rest_route=, even though the diagnostic had already proven it works.
-test('diagnose_connection sticky flag: a confirmed rest_route_fallback_worked applies to the NEXT tool call, not just the report', async () => {
-    installMockAdapter();
-    try {
-        const client = new WordPressClient(buildConfig());
-        setHandler((config) => {
-            const url = config.url || '';
-            const baseURL = config.baseURL || '';
-            const fullUrl = url.startsWith('http') ? url : `${baseURL}${url}`;
-            if (/\/wp-json\/?$/.test(fullUrl) || fullUrl.endsWith('/wp-json/')) {
-                return {
-                    status: 200,
-                    headers: { 'content-type': 'application/json' },
-                    data: { namespaces: ['respira/v1'] },
-                };
-            }
-            if (/[?&]rest_route=/.test(fullUrl)) {
-                return {
-                    status: 200,
-                    headers: { 'content-type': 'application/json' },
-                    data: { builder: 'elementor' },
-                };
-            }
-            if (/\/wp-json\/respira\//.test(fullUrl)) {
-                return {
-                    status: 200,
-                    headers: { 'content-type': 'text/html; charset=UTF-8' },
-                    data: HOMEPAGE_HTML,
-                };
-            }
-            return {
-                status: 404,
-                headers: { 'content-type': 'application/json' },
-                data: { code: 'rest_no_route' },
-            };
-        });
-        // Before diagnosing, the sticky flag is off (nothing has proven the
-        // fallback works yet on this client instance).
-        assert.equal(client.useRestRouteFallback, false);
-        const report = await client.diagnoseConnection({});
-        assert.equal(report.rest_route_fallback_worked, true);
-        // The diagnostic's own finding must flip the sticky flag immediately,
-        // not just describe it in the report.
-        assert.equal(client.useRestRouteFallback, true, 'diagnoseConnection should apply its own finding to the client');
-        assert.equal(report.rest_route_fallback_active, true, 'report should reflect the now-active sticky flag');
-        const callsBeforeNextTool = callLog.length;
-        const info = await client.getBuilderInfo();
-        assert.deepEqual(info, { builder: 'elementor' });
-        // The next normal tool call must go straight to ?rest_route= — it must
-        // NOT re-probe the pretty path that diagnose_connection already proved
-        // is shadowed.
-        const newCalls = callLog.slice(callsBeforeNextTool);
-        assert.equal(newCalls.length, 1, 'sticky flag from diagnose_connection should skip the pretty-path probe entirely');
-        assert.match(newCalls[0].url, /[?&]rest_route=/, 'post-diagnose tool call should be in rest_route form');
-    }
-    finally {
-        restoreAdapter();
-    }
-});
 //# sourceMappingURL=rest-route-fallback.test.js.map