@respira/wordpress-mcp-server 8.1.5 → 8.2.0

package/dist/server.js

@@ -4,6 +4,7 @@
  * Provides tools for AI coding assistants to interact with WordPress sites
  */
 import { Server } from '@modelcontextprotocol/server';
+import { setMcpClientInfo } from './agent-signature.js';
 import { serveStdio } from '@modelcontextprotocol/server/stdio';
 import { execSync } from 'child_process';
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'fs';
@@ -347,6 +348,7 @@ Follow these on every site. They are what separates a great result from a frustr
 5. Load schemas before writing. Use respira_get_builder_inline_schemas (or the per-builder schema tools) so attribute shapes are exact, not improvised.
 6. Dropped styling is not a retry. If a write returns dropped_styling_hint or a STYLING DROPPED message, the builder did not recognize that setting. Do NOT re-send the same write. Pick a supported attribute or move that bit into a code block, then write again. (This is the single biggest source of wasted retries.)
 7. Design-system first. When the builder exposes a design system, read it before building and reuse existing tokens instead of inventing styles: respira_bricks_design_system (Bricks global classes/colors/typography), respira_elementor_design_system (Elementor global colors/typography), and Divi 5 presets/color tokens. This keeps results on-brand and maintainable.
+8. Honor and grow Site Memory. get_site_context / get_builder_info include a site_memory block: rules are hard constraints the plugin enforces (protected content refuses writes — never work around a refusal, tell the user), notes are the site's accumulated conventions. When the user states a durable preference or corrects a mistake worth not repeating, offer to save it with respira_remember so the next session starts warm.
 
 ## Tool naming
 
@@ -574,6 +576,18 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
 
 21 tools for product management, categories, tags, orders, stock, and sales reports. All prefixed woocommerce_*.`,
         });
+        // Capture the client's self-declared identity from the MCP initialize
+        // handshake (highest-trust attribution signal short of an env pin; the
+        // ps heuristic misfiles Claude Desktop as claude-code). Best-effort:
+        // attribution must never break a connection.
+        this.server.oninitialized = () => {
+            try {
+                const ci = this.server.getClientVersion?.();
+                if (ci?.name)
+                    setMcpClientInfo(ci.name, ci.version);
+            }
+            catch { /* ignore */ }
+        };
         this.versionChecker = new RespiraVersionChecker('@respira/wordpress-mcp-server', RespiraWordPressServer.MCP_SERVER_VERSION);
         // RESPIRA_SITES env var: comma-separated hostnames to restrict visible sites.
         // Used by MCP config packs and multisite configurations.
@@ -1860,6 +1874,10 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                             type: 'string',
                             description: 'URL slug (post_name). Example: "about-us" produces /about-us/.',
                         },
+                        excerpt: {
+                            type: 'string',
+                            description: 'Post excerpt (wp_posts.post_excerpt) — the "Excerpt"/"Zajawka" panel, RSS summaries and archive teasers. Do NOT pass this inside meta: an excerpt written as post meta reads back fine and renders nowhere.',
+                        },
                         custom_css: {
                             type: 'string',
                             description: 'Custom CSS for the page. Auto-detects builder: Divi → _et_pb_custom_css, Elementor → _elementor_page_settings.custom_css.',
@@ -2137,6 +2155,10 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                             type: 'string',
                             description: 'URL slug (post_name). Example: "my-post" produces /my-post/.',
                         },
+                        excerpt: {
+                            type: 'string',
+                            description: 'Post excerpt (wp_posts.post_excerpt) — the "Excerpt"/"Zajawka" panel, RSS summaries and archive teasers. Do NOT pass this inside meta: an excerpt written as post meta reads back fine and renders nowhere.',
+                        },
                         author: {
                             description: 'Author (user id or user login). Requires edit_others_posts capability when different from the acting user.',
                             oneOf: [
@@ -4251,6 +4273,45 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                 },
                 destructiveHint: true,
             },
+            // Site Memory (v8.3, Resonance) — persistent per-site memory that lives IN the
+            // WordPress site, so it travels across clients (Claude, ChatGPT, Cursor) and
+            // sessions. Notes/preferences/lessons are advisory context; rules are ENFORCED
+            // by the plugin (writes to protected content are refused server-side). The
+            // current memory arrives automatically in get_site_context / get_builder_info
+            // under the site_memory key.
+            {
+                name: 'wordpress_remember',
+                description: "Save a durable memory about this site to its persistent Site Memory. Use when the user states a preference (\"always use native modules, never raw HTML\"), corrects a mistake worth not repeating, or you discover a convention or environment quirk the next session should know. The memory is injected into site context for every future agent session, across all AI clients. Ask the user before saving anything they did not state themselves. type=rule creates an ENFORCED constraint (with optional rule.protect post_ids/slugs the plugin will refuse to write to) that only the site owner can later remove. Re-using a key updates the entry. Included on Builder and Studio plans.",
+                inputSchema: {
+                    type: 'object',
+                    properties: {
+                        key: { type: 'string', description: 'Short slug identifying the memory, e.g. "brand-voice" or "never-touch-checkout". Lowercase letters/digits/hyphens, max 64 chars. Re-using a key updates it.' },
+                        type: { type: 'string', enum: ['fact', 'preference', 'lesson', 'rule'], description: 'fact = observed setup; preference = user taste; lesson = learned from a mistake or correction; rule = enforced constraint (only the owner can remove it — use for "never touch X" instructions).' },
+                        content: { type: 'string', description: 'The memory itself, max 500 chars. Distill: one clear imperative sentence beats a paragraph.' },
+                        rule: { type: 'object', description: 'Rules only. {"protect":{"post_ids":[12],"slugs":["checkout"]}} makes the plugin refuse agent writes/deletes to that content, including its duplicates.' },
+                        builder: { type: 'string', description: 'Optional builder fingerprint (e.g. "bricks") when the memory is builder-specific, so staleness is detectable after a rebuild.' },
+                        builder_version: { type: 'string', description: 'Optional builder version for the fingerprint.' },
+                    },
+                    required: ['key', 'content'],
+                },
+            },
+            {
+                name: 'wordpress_forget',
+                description: 'Remove a stale entry from this site\'s persistent Site Memory by key. Enforced rules cannot be removed from a conversation — only by the site owner in the Respira dashboard (Site Memory) — so a refusal here is expected behavior, not an error to work around.',
+                inputSchema: {
+                    type: 'object',
+                    properties: {
+                        key: { type: 'string', description: 'Memory key to forget (from wordpress_list_memory).' },
+                    },
+                    required: ['key'],
+                },
+            },
+            {
+                name: 'wordpress_list_memory',
+                description: 'List everything stored in this site\'s persistent Site Memory: facts, preferences, lessons, and enforced rules, with source and last-updated metadata. The same content arrives automatically in get_site_context; use this when you need keys for updating or forgetting entries.',
+                inputSchema: { type: 'object', properties: {} },
+                readOnlyHint: true,
+            },
             {
                 name: 'wordpress_list_custom_posts',
                 description: 'List posts of a custom post type. Each row includes author ({id, login, display_name}), taxonomies map, and featured_media alongside id/title/slug/status/date/url.',
@@ -4424,6 +4485,10 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                             type: 'string',
                             description: 'URL slug (post_name).',
                         },
+                        excerpt: {
+                            type: 'string',
+                            description: 'Post excerpt (wp_posts.post_excerpt) — the "Excerpt"/"Zajawka" panel, RSS summaries and archive teasers. Do NOT pass this inside meta: an excerpt written as post meta reads back fine and renders nowhere.',
+                        },
                         author: {
                             description: 'Author (user id or user login). Requires edit_others_posts capability when different from the acting user.',
                             oneOf: [
@@ -7261,6 +7326,13 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
             }
             case 'wordpress_delete_playbook':
                 return await client.callRestV1('DELETE', `/playbooks/${args.id}`);
+            // Site Memory (v8.3, Resonance)
+            case 'wordpress_remember':
+                return await client.callRestV1('POST', '/memory', { ...args, source: 'agent' });
+            case 'wordpress_forget':
+                return await client.callRestV1('DELETE', `/memory/${args.key}`);
+            case 'wordpress_list_memory':
+                return await client.callRestV1('GET', '/memory');
             case 'wordpress_list_custom_posts':
                 return await client.listCustomPosts(args.type, args);
             case 'wordpress_get_custom_post':