@respira/wordpress-mcp-server 8.0.5 → 8.1.0

package/dist/server.js

@@ -3,9 +3,8 @@
  *
  * Provides tools for AI coding assistants to interact with WordPress sites
  */
-import { Server } from '@modelcontextprotocol/sdk/server/index.js';
-import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
-import { CallToolRequestSchema, ListToolsRequestSchema, } from '@modelcontextprotocol/sdk/types.js';
+import { Server } from '@modelcontextprotocol/server';
+import { serveStdio } from '@modelcontextprotocol/server/stdio';
 import { execSync } from 'child_process';
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'fs';
 import { homedir } from 'os';
@@ -1345,13 +1344,13 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
     }
     setupHandlers() {
         // List available tools
-        this.server.setRequestHandler(ListToolsRequestSchema, async () => {
+        this.server.setRequestHandler('tools/list', async () => {
             return {
                 tools: await this.getTools(),
             };
         });
         // Handle tool calls
-        this.server.setRequestHandler(CallToolRequestSchema, async (request) => {
+        this.server.setRequestHandler('tools/call', async (request) => {
             const { name, arguments: args } = request.params;
             // respira_redeem_token must work even before any site is configured —
             // it's the bootstrap path that puts the first sites into the config.
@@ -2209,7 +2208,7 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
             },
             {
                 name: 'wordpress_delete_post',
-                description: 'Delete a post. IMPORTANT: By default, this only works on Respira-created duplicates. The force parameter only works if "Allow Direct Editing" is enabled in Respira settings (disabled by default for safety).',
+                description: 'Delete a post. IMPORTANT: By default, this only works on Respira-created duplicates. The force parameter only works if "Allow Direct Editing" is enabled in Respira settings (disabled by default for safety).\n\nApproval flow: destructive — the first call may return `code: respira_approval_required` with `data.approval_request.approval_token`. Pass that token back via the `approval_token` param on the next call to complete the delete.',
                 inputSchema: {
                     type: 'object',
                     properties: {
@@ -2221,6 +2220,10 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                             type: 'boolean',
                             description: 'Force delete even if not a duplicate',
                         },
+                        approval_token: {
+                            type: 'string',
+                            description: 'One-time token from a prior respira_approval_required response. Omit on the first call; the tool will reject with a token if approval is required, then re-call with this parameter set to that token to confirm and execute.',
+                        },
                     },
                     required: ['id'],
                 },
@@ -2738,7 +2741,7 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
             },
             {
                 name: 'wordpress_create_site_pattern',
-                description: 'Stage creation of a native synced or unsynced user pattern. The write is approval-first, snapshot-backed, read-back verified, and server-render verified.',
+                description: 'Stage creation of a native synced or unsynced user pattern. The write is approval-first, snapshot-backed, read-back verified, and server-render verified.\n\nApproval flow: the first call may return `code: respira_approval_required` with `data.approval_request.approval_token`. Pass that token back via the `approval_token` param on the next call to complete the create.',
                 inputSchema: {
                     type: 'object',
                     properties: {
@@ -2750,13 +2753,17 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                         verification_marker: { type: 'string' },
                         dry_run: { type: 'boolean' },
                         edit_target: { type: 'string', enum: ['approval', 'live'] },
+                        approval_token: {
+                            type: 'string',
+                            description: 'One-time token from a prior respira_approval_required response. Omit on the first call; the tool will reject with a token if approval is required, then re-call with this parameter set to that token to confirm and execute.',
+                        },
                     },
                     required: ['title'],
                 },
             },
             {
                 name: 'wordpress_update_site_pattern',
-                description: 'Stage targeted path-addressed operations on an editable user pattern with stale-write, wrong-target, snapshot, and render protection.',
+                description: 'Stage targeted path-addressed operations on an editable user pattern with stale-write, wrong-target, snapshot, and render protection.\n\nApproval flow: the first call may return `code: respira_approval_required` with `data.approval_request.approval_token`. Pass that token back via the `approval_token` param on the next call to complete the update.',
                 inputSchema: {
                     type: 'object',
                     properties: {
@@ -2766,13 +2773,17 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                         verification_marker: { type: 'string' },
                         dry_run: { type: 'boolean' },
                         edit_target: { type: 'string', enum: ['approval', 'live'] },
+                        approval_token: {
+                            type: 'string',
+                            description: 'One-time token from a prior respira_approval_required response. Omit on the first call; the tool will reject with a token if approval is required, then re-call with this parameter set to that token to confirm and execute.',
+                        },
                     },
                     required: ['id', 'expected_fingerprint', 'operations'],
                 },
             },
             {
                 name: 'wordpress_delete_site_pattern',
-                description: 'Stage deletion of an editable user pattern. Referenced patterns are refused unless allow_referenced_delete is explicitly approved; a rollback snapshot is retained.',
+                description: 'Stage deletion of an editable user pattern. Referenced patterns are refused unless allow_referenced_delete is explicitly approved; a rollback snapshot is retained.\n\nApproval flow: destructive — the first call may return `code: respira_approval_required` with `data.approval_request.approval_token`. Pass that token back via the `approval_token` param on the next call to complete the delete.',
                 inputSchema: {
                     type: 'object',
                     properties: {
@@ -2781,6 +2792,10 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                         allow_referenced_delete: { type: 'boolean' },
                         dry_run: { type: 'boolean' },
                         edit_target: { type: 'string', enum: ['approval', 'live'] },
+                        approval_token: {
+                            type: 'string',
+                            description: 'One-time token from a prior respira_approval_required response. Omit on the first call; the tool will reject with a token if approval is required, then re-call with this parameter set to that token to confirm and execute.',
+                        },
                     },
                     required: ['id', 'expected_fingerprint'],
                 },
@@ -2811,7 +2826,7 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
             },
             {
                 name: 'wordpress_create_site_navigation',
-                description: 'Stage creation of a native block navigation entity. The write is approval-first, snapshot-backed, read-back verified, and server-render verified.',
+                description: 'Stage creation of a native block navigation entity. The write is approval-first, snapshot-backed, read-back verified, and server-render verified.\n\nApproval flow: the first call may return `code: respira_approval_required` with `data.approval_request.approval_token`. Pass that token back via the `approval_token` param on the next call to complete the create.',
                 inputSchema: {
                     type: 'object',
                     properties: {
@@ -2822,13 +2837,17 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                         verification_marker: { type: 'string' },
                         dry_run: { type: 'boolean' },
                         edit_target: { type: 'string', enum: ['approval', 'live'] },
+                        approval_token: {
+                            type: 'string',
+                            description: 'One-time token from a prior respira_approval_required response. Omit on the first call; the tool will reject with a token if approval is required, then re-call with this parameter set to that token to confirm and execute.',
+                        },
                     },
                     required: ['title'],
                 },
             },
             {
                 name: 'wordpress_update_site_navigation',
-                description: 'Stage exact path-addressed operations on a native block navigation entity while preserving unknown extension blocks and rejecting stale or wrong targets.',
+                description: 'Stage exact path-addressed operations on a native block navigation entity while preserving unknown extension blocks and rejecting stale or wrong targets.\n\nApproval flow: the first call may return `code: respira_approval_required` with `data.approval_request.approval_token`. Pass that token back via the `approval_token` param on the next call to complete the update.',
                 inputSchema: {
                     type: 'object',
                     properties: {
@@ -2838,13 +2857,17 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                         verification_marker: { type: 'string' },
                         dry_run: { type: 'boolean' },
                         edit_target: { type: 'string', enum: ['approval', 'live'] },
+                        approval_token: {
+                            type: 'string',
+                            description: 'One-time token from a prior respira_approval_required response. Omit on the first call; the tool will reject with a token if approval is required, then re-call with this parameter set to that token to confirm and execute.',
+                        },
                     },
                     required: ['id', 'expected_fingerprint', 'operations'],
                 },
             },
             {
                 name: 'wordpress_delete_site_navigation',
-                description: 'Stage deletion of a native block navigation entity. Referenced navigation is refused unless allow_referenced_delete is explicitly approved; a rollback snapshot is retained.',
+                description: 'Stage deletion of a native block navigation entity. Referenced navigation is refused unless allow_referenced_delete is explicitly approved; a rollback snapshot is retained.\n\nApproval flow: destructive — the first call may return `code: respira_approval_required` with `data.approval_request.approval_token`. Pass that token back via the `approval_token` param on the next call to complete the delete.',
                 inputSchema: {
                     type: 'object',
                     properties: {
@@ -2853,6 +2876,10 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                         allow_referenced_delete: { type: 'boolean' },
                         dry_run: { type: 'boolean' },
                         edit_target: { type: 'string', enum: ['approval', 'live'] },
+                        approval_token: {
+                            type: 'string',
+                            description: 'One-time token from a prior respira_approval_required response. Omit on the first call; the tool will reject with a token if approval is required, then re-call with this parameter set to that token to confirm and execute.',
+                        },
                     },
                     required: ['id', 'expected_fingerprint'],
                 },
@@ -3780,7 +3807,7 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
             },
             {
                 name: 'wordpress_delete_comment',
-                description: 'Delete a comment.',
+                description: 'Delete a comment.\n\nApproval flow: destructive — the first call may return `code: respira_approval_required` with `data.approval_request.approval_token`. Pass that token back via the `approval_token` param on the next call to complete the delete.',
                 inputSchema: {
                     type: 'object',
                     properties: {
@@ -3788,6 +3815,10 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                             type: 'number',
                             description: 'Comment ID',
                         },
+                        approval_token: {
+                            type: 'string',
+                            description: 'One-time token from a prior respira_approval_required response. Omit on the first call; the tool will reject with a token if approval is required, then re-call with this parameter set to that token to confirm and execute.',
+                        },
                     },
                     required: ['id'],
                 },
@@ -3931,7 +3962,7 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
             },
             {
                 name: 'wordpress_delete_term',
-                description: 'Delete a term.',
+                description: 'Delete a term.\n\nApproval flow: destructive — the first call may return `code: respira_approval_required` with `data.approval_request.approval_token`. Pass that token back via the `approval_token` param on the next call to complete the delete.',
                 inputSchema: {
                     type: 'object',
                     properties: {
@@ -3943,6 +3974,10 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                             type: 'number',
                             description: 'Term ID',
                         },
+                        approval_token: {
+                            type: 'string',
+                            description: 'One-time token from a prior respira_approval_required response. Omit on the first call; the tool will reject with a token if approval is required, then re-call with this parameter set to that token to confirm and execute.',
+                        },
                     },
                     required: ['taxonomy', 'id'],
                 },
@@ -4535,7 +4570,7 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
             },
             {
                 name: 'wordpress_delete_option',
-                description: 'Delete an option.',
+                description: 'Delete an option.\n\nApproval flow: destructive — the first call may return `code: respira_approval_required` with `data.approval_request.approval_token`. Pass that token back via the `approval_token` param on the next call to complete the delete.',
                 inputSchema: {
                     type: 'object',
                     properties: {
@@ -4543,6 +4578,10 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                             type: 'string',
                             description: 'Option name',
                         },
+                        approval_token: {
+                            type: 'string',
+                            description: 'One-time token from a prior respira_approval_required response. Omit on the first call; the tool will reject with a token if approval is required, then re-call with this parameter set to that token to confirm and execute.',
+                        },
                     },
                     required: ['option'],
                 },
@@ -6923,7 +6962,7 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                 };
             }
             case 'wordpress_delete_post':
-                return await client.deletePost(args.id, args.force);
+                return await client.deletePost(args.id, args.force, args.approval_token);
             case 'wordpress_list_media':
                 return await client.listMedia(args);
             case 'wordpress_upload_media': {
@@ -7154,7 +7193,7 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
             case 'wordpress_update_comment':
                 return await client.updateComment(args.id, args);
             case 'wordpress_delete_comment':
-                return await client.deleteComment(args.id);
+                return await client.deleteComment(args.id, args.approval_token);
             // Taxonomies
             case 'wordpress_list_taxonomies':
                 return await client.listTaxonomies();
@@ -7169,7 +7208,7 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
             case 'wordpress_update_term':
                 return await client.updateTerm(args.taxonomy, args.id, args);
             case 'wordpress_delete_term':
-                return await client.deleteTerm(args.taxonomy, args.id);
+                return await client.deleteTerm(args.taxonomy, args.id, args.approval_token);
             // Custom Post Types
             case 'wordpress_list_post_types':
                 return await client.listPostTypes();
@@ -7244,7 +7283,7 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
             case 'wordpress_update_option':
                 return await client.updateOption(args.option, args.value);
             case 'wordpress_delete_option':
-                return await client.deleteOption(args.option);
+                return await client.deleteOption(args.option, args.approval_token);
             // Media enhancements
             case 'wordpress_get_media':
                 return await client.getMedia(args.id);
@@ -7763,7 +7802,18 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                             hint: 'Install Advanced Custom Fields on the target site, then retry. ACF Pro is required for repeaters, flexible content, galleries, and options pages.'
                         };
                     }
-                    return await this.currentSite.dispatchAcfTool(acfName, args);
+                    // Same class of bug as the mcp-v8.0.3 Bricks/Elementor fix: `client`
+                    // (resolved above via resolveClient(args), site_id-aware) is the
+                    // correct target — NOT `this.currentSite`, which is only the
+                    // globally active site. This ACF branch used `this.currentSite!`,
+                    // so respira_acf_update_option(s)/get_option(s) and every other ACF
+                    // tool silently read/wrote the active site while the response
+                    // envelope (built from args.site_id in getActiveSiteSummary/
+                    // withSiteContext) still named the pinned site_id, making the
+                    // wrong-site write invisible. Reported by john@localmarketingpros.com
+                    // (17-site DSO rollout): a population pass pinned to site B landed
+                    // on site A instead.
+                    return await client.dispatchAcfTool(acfName, args);
                 }
                 // Check if this is a widget shortcut (wordpress_add_*).
                 if (name.startsWith('wordpress_add_')) {
@@ -8089,7 +8139,7 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
             },
             {
                 name: 'wordpress_bulk_pages_operation',
-                description: 'Apply an operation across up to 100 pages. Supports strip_inline_styles, find_and_replace, and custom operations. Each page gets a snapshot for rollback. Rate limited to 3/hr.',
+                description: 'Apply an operation across up to 100 pages. Supports strip_inline_styles, find_and_replace, and custom operations. Each page gets a snapshot for rollback. Rate limited to 3/hr.\n\nApproval flow: destructive — the first call may return `code: respira_approval_required` with `data.approval_request.approval_token`. Pass that token back via the `approval_token` param on the next call to complete the operation.',
                 inputSchema: {
                     type: 'object',
                     properties: {
@@ -8106,6 +8156,10 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                             type: 'object',
                             description: 'Execution options: {dry_run: boolean}',
                         },
+                        approval_token: {
+                            type: 'string',
+                            description: 'One-time token from a prior respira_approval_required response. Omit on the first call; the tool will reject with a token if approval is required, then re-call with this parameter set to that token to confirm and execute.',
+                        },
                     },
                     required: ['page_ids', 'operation'],
                 },
@@ -8491,8 +8545,14 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
         }));
     }
     async run() {
-        const transport = new StdioServerTransport();
-        await this.server.connect(transport);
+        // SDK 2's stdio serving entry owns the opening exchange. It selects
+        // server/discover for MCP 2026-07-28 clients and the legacy initialize
+        // handshake for older clients, then pins this configured server instance
+        // to the connection.
+        serveStdio(() => this.server, {
+            legacy: 'serve',
+            onerror: (error) => console.error('[respira-mcp] protocol error:', error.message),
+        });
         // v6.17: one-line bootstrap log so the customer can see whether this MCP
         // came back after a Claude restart. Pre-v6.17 the only stderr line was
         // "Respira WordPress MCP Server running on stdio" which didn't tell you