@respira/wordpress-mcp-server 8.3.1 → 8.3.2

package/CHANGELOG.md

@@ -5,6 +5,12 @@ All notable changes to Respira WordPress MCP Server will be documented in this f
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [8.3.2] - 2026-08-13
+
+### Added
+
+- **Two Art Direction companions.** `wordpress_mint_design_preview` returns a short lived signed link that lets the respira.press dashboard frame the real rendered page, drafts included, without changing caching, passwords or visibility for anyone else (Respira for WordPress 8.6.22+). `wordpress_get_design_apply_reports` reads the per-builder receipts a token apply leaves behind, so an agent can answer "what exactly was written where" without guessing. Tool counts move to 212 core, 317 with the WooCommerce add-on, and the listing guard verified every surface against the new figures before this release.
+
 ## [8.3.1] - 2026-08-13
 
 ### Added

package/README.md

@@ -7,14 +7,14 @@
 <h1 align="center">Respira WordPress MCP Server</h1>
 
 <p align="center">
-  <strong>210 MCP tools, 315 with the WooCommerce add-on. 17 page builders and the native Site Editor. MCP 2026-07-28 with legacy-client support.</strong><br>
+  <strong>212 MCP tools, 317 with the WooCommerce add-on. 17 page builders and the native Site Editor. MCP 2026-07-28 with legacy-client support.</strong><br>
   Element-level editing, full page creation, HTML-to-builder conversion with rendering fidelity validation, per-site tool governance, storefront design intelligence, stock images, bulk operations — all through one MCP server.
 </p>
 
 <p align="center">
   <a href="https://www.npmjs.com/package/@respira/wordpress-mcp-server"><img src="https://img.shields.io/npm/v/@respira/wordpress-mcp-server.svg?style=flat-square&color=10b981" alt="npm version"></a>
   <a href="https://www.npmjs.com/package/@respira/wordpress-mcp-server"><img src="https://img.shields.io/npm/dm/@respira/wordpress-mcp-server.svg?style=flat-square" alt="npm downloads"></a>
-  <img src="https://img.shields.io/badge/tools-315-10b981?style=flat-square" alt="315 Tools with WooCommerce">
+  <img src="https://img.shields.io/badge/tools-317-10b981?style=flat-square" alt="317 Tools with WooCommerce">
   <img src="https://img.shields.io/badge/builders-17-10b981?style=flat-square" alt="17 Page Builders">
   <img src="https://img.shields.io/badge/TypeScript-100%25-blue?style=flat-square&logo=typescript&logoColor=white" alt="TypeScript">
 </p>
@@ -247,7 +247,7 @@ Or run the interactive setup wizard: `npx @respira/wordpress-mcp-server --setup`
 
 ### Tool Limit? Use `enabledTools`
 
-Some MCP clients (Antigravity, etc.) have a hard limit on active tools (often 100). Respira can expose up to 315 tools when the WooCommerce add-on is active. To stay under the limit, add `enabledTools` to your config — only those tools will appear in the listing:
+Some MCP clients (Antigravity, etc.) have a hard limit on active tools (often 100). Respira can expose up to 317 tools when the WooCommerce add-on is active. To stay under the limit, add `enabledTools` to your config — only those tools will appear in the listing:
 
 ```json
 {
@@ -398,7 +398,7 @@ These are Respira-native WordPress operations, not a copied generic tool catalog
 | `wordpress_update_site_navigation` | Target one link/submenu while preserving unknown extension blocks |
 | `wordpress_delete_site_navigation` | Delete through approval; referenced navigation is refused by default |
 
-### Design Direction (9 tools)
+### Design Direction (11 tools)
 
 One saved design direction per site — identity, DTCG-subset tokens, dials, guidance, waivers — that agents read before building anything. Readiness is computed on every response: `ready` needs the bg + ink + accent color roles plus a heading/body font pair, and activation refuses a direction that is not ready. The direction document is site data, not instructions.
 
@@ -417,6 +417,8 @@ The design check closes the loop: `wordpress_check_design` runs deterministic sl
 | `wordpress_apply_design_direction` | Push the direction's tokens into the resolved builder's native store through approval; snapshot first, per-builder report persisted |
 | `wordpress_export_design_direction` | Export strict DTCG 2025.10 with roles + per-builder apply reports in `$extensions["press.respira"]` |
 | `wordpress_check_design` | Design check: deterministic slop-and-drift rules, plus `rendered: true` (plugin 8.6.20+) for contrast, structure and painted colors on the real page, screenshots attached |
+| `wordpress_mint_design_preview` | Mint a 15-minute signed preview URL (plugin 8.6.22+) that renders the real page, drafts and duplicates included, frameable by the respira.press dashboard only; stores nothing |
+| `wordpress_get_design_apply_reports` | Read the stored per-builder apply reports for a direction: what apply actually wrote, straight from the site |
 
 ### Bricks Deep Intelligence (20 tools)
 | Tool | Description |
@@ -852,6 +854,6 @@ MIT © [Respira](https://respira.press)
 ---
 
 <p align="center">
-  <strong>210 core tools, 315 with WooCommerce. 17 builders. The AI infrastructure layer for WordPress.</strong><br>
+  <strong>212 core tools, 317 with WooCommerce. 17 builders. The AI infrastructure layer for WordPress.</strong><br>
   <a href="https://respira.press">respira.press</a>
 </p>

package/TOOL_CATALOG.md

@@ -2,7 +2,7 @@
 
 <!-- Generated by scripts/check-tool-registry-parity.mjs. Do not edit by hand. -->
 
-Generated catalog: **183 core tools**, **105 WooCommerce tools**, **288 total**.
+Generated catalog: **185 core tools**, **105 WooCommerce tools**, **290 total**.
 
 The runtime applies site context and per-site governance, so an individual connection may expose a smaller relevant subset.
 
@@ -88,6 +88,7 @@ The runtime applies site context and per-site governance, so an individual conne
 - `wordpress_get_comment` — read; native + hosted
 - `wordpress_get_core_web_vitals` — read; native + hosted
 - `wordpress_get_custom_post` — read; native + hosted
+- `wordpress_get_design_apply_reports` — read; native + hosted
 - `wordpress_get_design_direction` — read; native + hosted
 - `wordpress_get_divi_migration_readiness` — read; hosted/stdio
 - `wordpress_get_media` — read; native + hosted
@@ -142,6 +143,7 @@ The runtime applies site context and per-site governance, so an individual conne
 - `wordpress_list_theme_builder_templates` — read; native + hosted
 - `wordpress_list_users` — read; native + hosted
 - `wordpress_make_responsive` — read; hosted/stdio
+- `wordpress_mint_design_preview` — read; native + hosted
 - `wordpress_move_element` — write; native + hosted
 - `wordpress_read_page` — read; native + hosted
 - `wordpress_read_post` — read; native + hosted

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAkBH,OAAO,KAAK,EAAE,mBAAmB,EAAe,MAAM,kBAAkB,CAAC;AAsHzE;;;;;;;;;;;;;;;;GAgBG;AACH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,GAAG,MAAM,CAoBhF;AAiID,qBAAa,sBAAsB;IACjC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,WAAW,CAAgC;IACnD,OAAO,CAAC,KAAK,CAA2C;IACxD,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,cAAc,CAAwB;IAC9C,OAAO,CAAC,YAAY,CAA4B;IAChD,8EAA8E;IAC9E,OAAO,CAAC,YAAY,CAA4B;IAChD,8EAA8E;IAC9E,OAAO,CAAC,mBAAmB,CAAS;IACpC,iFAAiF;IACjF,OAAO,CAAC,iBAAiB,CAAK;IAC9B,iFAAiF;IACjF,OAAO,CAAC,mBAAmB,CAAgC;IAE3D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAsB;IAEhE;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAWzB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;gBA4Bb,WAAW,EAAE,mBAAmB,EAAE,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE;IA6VvE,OAAO,CAAC,cAAc;IAItB;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;IAkB5B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,aAAa;IAiCrB,gEAAgE;IAChE,OAAO,CAAC,aAAa;IAUrB;;;;;;OAMG;YACW,UAAU;IA2CxB;;;;;;;;;;;;;;OAcG;YACW,WAAW;IAiJzB;;;;;;;;;OASG;YACW,kBAAkB;IA4OhC;;;;;;;;OAQG;IACH,OAAO,CAAC,qBAAqB;IAgE7B;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;YACW,qBAAqB;YAiBrB,kBAAkB;IA6FhC,yFAAyF;IACzF,OAAO,CAAC,gBAAgB;IASxB;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,6BAA6B;IA0BrC;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,yBAAyB;IA+BjC,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,aAAa;YAmQP,kBAAkB;YA6BlB,yBAAyB;IASvC;;;OAGG;IACH,OAAO,CAAC,oBAAoB;YAyBd,QAAQ;IAyhHtB;;;;;;OAMG;IACH;;;;;;;;;;;;;oDAagD;IAChD,OAAO,CAAC,mBAAmB,CAAoD;IAC/E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAU;IAClD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAU;IAC1D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAS;IAC1D;;mDAE+C;IAC/C,OAAO,CAAC,0BAA0B,CAAoC;IAEtE;;;;;;;;OAQG;YACW,0BAA0B;YAyC1B,oBAAoB;YA6CpB,2BAA2B;IAQzC;;;;OAIG;YACW,cAAc;IAQ5B,OAAO,CAAC,mBAAmB;IAw9C3B;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAe3C;IAEF;;;;OAIG;IACH,OAAO,CAAC,0BAA0B;YAmCpB,cAAc;IA4G5B,oEAAoE;IACpE,OAAO,CAAC,iBAAiB;IAoBzB;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,eAAe;YAuCT,gBAAgB;IA+5C9B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IA0ZzB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IA6UxB,GAAG;CA+CV"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAkBH,OAAO,KAAK,EAAE,mBAAmB,EAAe,MAAM,kBAAkB,CAAC;AAsHzE;;;;;;;;;;;;;;;;GAgBG;AACH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,GAAG,MAAM,CAoBhF;AAiID,qBAAa,sBAAsB;IACjC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,WAAW,CAAgC;IACnD,OAAO,CAAC,KAAK,CAA2C;IACxD,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,cAAc,CAAwB;IAC9C,OAAO,CAAC,YAAY,CAA4B;IAChD,8EAA8E;IAC9E,OAAO,CAAC,YAAY,CAA4B;IAChD,8EAA8E;IAC9E,OAAO,CAAC,mBAAmB,CAAS;IACpC,iFAAiF;IACjF,OAAO,CAAC,iBAAiB,CAAK;IAC9B,iFAAiF;IACjF,OAAO,CAAC,mBAAmB,CAAgC;IAE3D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAsB;IAEhE;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAWzB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;gBA4Bb,WAAW,EAAE,mBAAmB,EAAE,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE;IA6VvE,OAAO,CAAC,cAAc;IAItB;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;IAkB5B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,aAAa;IAiCrB,gEAAgE;IAChE,OAAO,CAAC,aAAa;IAUrB;;;;;;OAMG;YACW,UAAU;IA2CxB;;;;;;;;;;;;;;OAcG;YACW,WAAW;IAiJzB;;;;;;;;;OASG;YACW,kBAAkB;IA4OhC;;;;;;;;OAQG;IACH,OAAO,CAAC,qBAAqB;IAgE7B;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;YACW,qBAAqB;YAiBrB,kBAAkB;IA6FhC,yFAAyF;IACzF,OAAO,CAAC,gBAAgB;IASxB;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,6BAA6B;IA0BrC;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,yBAAyB;IA+BjC,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,aAAa;YAmQP,kBAAkB;YA6BlB,yBAAyB;IASvC;;;OAGG;IACH,OAAO,CAAC,oBAAoB;YAyBd,QAAQ;IAwjHtB;;;;;;OAMG;IACH;;;;;;;;;;;;;oDAagD;IAChD,OAAO,CAAC,mBAAmB,CAAoD;IAC/E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAU;IAClD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAU;IAC1D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAS;IAC1D;;mDAE+C;IAC/C,OAAO,CAAC,0BAA0B,CAAoC;IAEtE;;;;;;;;OAQG;YACW,0BAA0B;YAyC1B,oBAAoB;YA6CpB,2BAA2B;IAQzC;;;;OAIG;YACW,cAAc;IAQ5B,OAAO,CAAC,mBAAmB;IAw9C3B;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAe3C;IAEF;;;;OAIG;IACH,OAAO,CAAC,0BAA0B;YAmCpB,cAAc;IA4G5B,oEAAoE;IACpE,OAAO,CAAC,iBAAiB;IAoBzB;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,eAAe;YAuCT,gBAAgB;IAy6C9B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IA0ZzB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IA6UxB,GAAG;CA+CV"}

package/dist/server.js

@@ -3311,6 +3311,35 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                 readOnlyHint: true,
                 idempotentHint: true,
             },
+            {
+                name: 'wordpress_mint_design_preview',
+                description: 'Mint a short-lived signed preview URL for one post or the front page (omit post_id). Draft and Respira-duplicate ids are allowed — that is the point: the respira.press dashboard iframes the REAL rendered page and refreshes it after every write, and this token is what makes that possible. For 15 minutes the returned url renders with frame headers lifted for the respira.press dashboard origins ONLY, caching bypassed, and (for an unpublished post) the page visible the way WP preview shows it to an editor — only that one id, never anything else. Password-protected posts still ask for their password. Mints a capability but stores nothing on the site: no option, no meta, no DB row. Response: { url, expires_at }; 404 when the post id is unknown.',
+                inputSchema: {
+                    type: 'object',
+                    properties: {
+                        post_id: {
+                            type: 'number',
+                            description: 'Optional post/page id; omit for the front page. Drafts and Respira duplicates are allowed.',
+                        },
+                    },
+                },
+                readOnlyHint: true,
+            },
+            {
+                name: 'wordpress_get_design_apply_reports',
+                description: 'Read the per-builder apply reports stored on a design direction ({direction_id}, or the ACTIVE direction when omitted): exactly what wordpress_apply_design_direction wrote per builder — tokens_mapped, mapped slugs/css vars, skipped_existing, skipped_unclassifiable, store, snapshot_id, applied_at. Served straight from the stored reports with no recomputation; reports is an empty array when the direction has never been applied. 404 when direction_id names a direction that does not exist, or when nothing is active and direction_id is omitted.',
+                inputSchema: {
+                    type: 'object',
+                    properties: {
+                        direction_id: {
+                            type: 'number',
+                            description: 'Optional direction id; omit for the active direction.',
+                        },
+                    },
+                },
+                readOnlyHint: true,
+                idempotentHint: true,
+            },
             {
                 name: 'wordpress_apply_builder_patch',
                 description: 'Apply a list of targeted builder patch operations. Each operation is { identifier: { id|admin_label|path|type [+match_content] }, updates: { content?, attributes?, ...flat_settings? } }. The identifier block follows the same shape as wordpress_find_element\'s identifier; the updates block follows the same shape as wordpress_update_module\'s updates. Returns 400 respira_patch_invalid_operation when an entry is missing either field. This is NOT a JSON-Patch document — do not pass { op, path, value } shapes (those will be rejected). Example: { operations: [{ identifier: { admin_label: "Hero" }, updates: { admin_label: "Hero Content" } }] }.',
@@ -7894,6 +7923,10 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                 return await client.callRestV2('GET', '/design-direction/export', args.id !== undefined ? { id: args.id } : undefined);
             case 'wordpress_check_design':
                 return await client.callRestV2('POST', '/design-direction/check', args);
+            case 'wordpress_mint_design_preview':
+                return await client.callRestV2('POST', '/design-direction/preview-token', args);
+            case 'wordpress_get_design_apply_reports':
+                return await client.callRestV2('GET', '/design-direction/apply-reports', args.direction_id !== undefined ? { direction_id: args.direction_id } : undefined);
             case 'wordpress_apply_builder_patch':
                 return await client.applyBuilderPatch(args.builder, args.post_id, args.operations, args.include, args.edit_target);
             case 'woocommerce_list_products':