npm - @respira/wordpress-mcp-server - Versions diffs - 8.3.18 → 8.3.20 - Mend

@respira/wordpress-mcp-server 8.3.18 → 8.3.20

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (43) hide show

package/CHANGELOG.md CHANGED Viewed

@@ -5,6 +5,95 @@ All notable changes to Respira WordPress MCP Server will be documented in this f
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+## [8.3.20] - 2026-09-09
+### Fixed
+- **One failed handshake made a site look broken for the rest of the session.** A
+  successful version negotiation is cached for the life of the client, which is right.
+  A failure was cached the same way, which is not: a single transient error from the
+  host meant every later call replayed the same verdict without sending a request, so
+  nothing appeared in the site's own logs either and the site looked dead for as long as
+  the session lasted. Two customers sat blocked for a quarter of an hour on sites that
+  were already healthy. Failures now expire after a minute, and a message that came from
+  cache says when the failure was first seen instead of implying a fresh check.
+- **A Respira outage was described as a fault on the customer's site.** When the
+  account service could not answer, the resulting error was rendered as though the site
+  had produced it, ending with advice to go and read wp-content/debug.log. The failure
+  is now named for what it is, a problem reaching Respira rather than anything to fix on
+  the site, and the debug.log advice is gone from that path.
+- **Editing a menu item failed on hosts that block PUT.** Those hosts already had a
+  fallback that reissues the request as a POST, but it was only wired into some paths,
+  and twenty five methods called PUT directly without it, menus among them. The fallback
+  could not have rescued them anyway: it decided whether to retry by reading a status
+  that the shared error handler discards, so it only ever fired for one specific case
+  and never for a real 405. Both halves are fixed, so every PUT write now falls back
+  where the host requires it. Deletes still need a change on the WordPress side and are
+  unchanged for now.
+- **Redeeming an install token discarded local per-site settings.** The redeemed entry
+  replaced the stored one outright, and the dashboard only sends five fields, so
+  anything set by hand was dropped: the flag that forces the query-string REST route,
+  the forced write method, HTTP auth credentials, the TLS exception, and local tool
+  preferences. The site kept working until the next restart, which put the loss a long
+  way from its cause. A redeem now updates the fields it carries and leaves the rest
+  alone.
+- **A password-protected site was reported as one with Respira uninstalled.** The check
+  for whether the Respira routes exist was the one request in the client that did not
+  send configured credentials, so on a site behind HTTP auth it was refused, and the
+  refusal was read as the routes being absent. The connector then said the plugin was
+  deactivated, deleted, or failing to load. It also called an authentication challenge a
+  firewall or maintenance mode, and told operators to add credentials they had already
+  added. The probe now authenticates, an unanswerable check says so instead of claiming
+  absence, and the connection diagnostic reports an authentication challenge as what it
+  is rather than as a blocked method.
+- **Filed issue reports lost the builder they came from.** The report tool read the
+  builder name from a field the site does not return, so every report was filed with no
+  builder recorded even when the site could name it unambiguously.
+- **Two commerce skills were never shipped.** The bundling step rebuilds the skills
+  directory from source on every build, and these two existed only in the built copy, so
+  each build deleted them. They were listed in the public catalogue throughout. Both now
+  ship, and the build fails loudly rather than quietly deleting a skill that is missing
+  from source.
+## [8.3.19] - 2026-09-04
+### Fixed
+- **Uploading a JPEG never worked.** `upload_media` decided whether the `file`
+  argument was a filesystem path by testing whether it started with `/`. Base64 of a
+  JPEG's opening bytes is `/9j/`, so every bare base64 JPEG matched that test, was
+  treated as an absolute path, and failed with "File not found: /9j/...". Nothing
+  ever reached WordPress. The existing test missed it because its sample payload
+  happened to start with a letter.
+- **A failed upload hung for minutes instead of retrying.** The multipart body was a
+  single-use stream, and both retry paths (the 5xx idempotency retry and the
+  `?rest_route=` fallback) re-sent the already-consumed stream with the original
+  `Content-Length`. The request promised bytes it then never wrote, so it never
+  reached the server and sat until the socket timed out. Measured at 88 seconds for
+  one call, with only the first attempt ever delivered. The body is now replayable
+  and no streaming body is re-sent.
+- **The `?rest_route=` upload fallback had never worked.** It inherited the same
+  exhausted stream, so the fallback reported that the host "also returned HTML"
+  without having sent anything.
+- **One bad upload could take the whole server down.** Error responses skipped the
+  size cap that success responses go through, so a failed upload echoed the entire
+  base64 payload back inside the error message. A 900 KB image produced a 1.2 MB
+  JSON-RPC frame against a 100 KiB cap, and an oversized frame makes MCP hosts kill
+  the subprocess, which is why every later tool call timed out until a restart. Error
+  messages are now truncated.
+- The tool description advertised a 120 second upload timeout; the actual default has
+  been 90 seconds since 6.18.4. Corrected.
+### Changed
+- `mcp-bundle/build.sh` now packs the local `mcp-server` when its version matches the
+  bundle's pin, instead of always resolving from the npm registry. The registry path
+  remains as the fallback. The bundle could previously only be built after publishing,
+  while the release workflow's parity gate runs before publishing and requires the
+  built bundle to already carry the version being released, so a release was
+  unsatisfiable on the first attempt at any version. It also means the bundle is now
+  reproducible from the tag rather than dependent on registry state.
 ## [8.3.18] - 2026-09-03
 ### Fixed

package/TOOL_CATALOG.md CHANGED Viewed

@@ -9,24 +9,24 @@ The runtime applies site context and per-site governance, so an individual conne
 ## WordPress and Respira
 - `respira_duplicate_with_translations` — write; hosted/stdio
-- `wordpress_abilities_gap_report` — read; hosted/stdio
+- `wordpress_abilities_gap_report` — read; native + hosted
 - `wordpress_activate_design_direction` — write; native + hosted
 - `wordpress_activate_plugin` — write; native + hosted
 - `wordpress_analyze_aeo` — read; native + hosted
 - `wordpress_analyze_images` — read; native + hosted
-- `wordpress_analyze_pagespeed` — read; hosted/stdio
+- `wordpress_analyze_pagespeed` — read; native + hosted
 - `wordpress_analyze_performance` — read; native + hosted
 - `wordpress_analyze_rankmath` — read; native + hosted
 - `wordpress_analyze_readability` — read; native + hosted
 - `wordpress_analyze_seo` — read; native + hosted
-- `wordpress_append_theme_file` — read; hosted/stdio
-- `wordpress_apply_accessibility_fixes` — write; hosted/stdio
+- `wordpress_append_theme_file` — read; native + hosted
+- `wordpress_apply_accessibility_fixes` — write; native + hosted
 - `wordpress_apply_builder_patch` — write; native + hosted
 - `wordpress_apply_design_direction` — write; native + hosted
-- `wordpress_apply_divi_library_item` — write; hosted/stdio
+- `wordpress_apply_divi_library_item` — write; native + hosted
 - `wordpress_assign_menu_location` — write; native + hosted
 - `wordpress_batch_update` — write; native + hosted
-- `wordpress_begin_session` — read; hosted/stdio
+- `wordpress_begin_session` — read; native + hosted
 - `wordpress_build_mega_menu` — write; native + hosted
 - `wordpress_build_page` — write; native + hosted
 - `wordpress_bulk_pages_operation` — write; native + hosted
@@ -34,7 +34,7 @@ The runtime applies site context and per-site governance, so an individual conne
 - `wordpress_check_seo_issues` — read; native + hosted
 - `wordpress_check_structured_data` — read; native + hosted
 - `wordpress_convert_html_to_builder` — write; native + hosted
-- `wordpress_create_acf_field_group` — write; hosted/stdio
+- `wordpress_create_acf_field_group` — write; native + hosted
 - `wordpress_create_comment` — write; native + hosted
 - `wordpress_create_custom_post` — write; native + hosted
 - `wordpress_create_design_token` — write; native + hosted
@@ -43,23 +43,23 @@ The runtime applies site context and per-site governance, so an individual conne
 - `wordpress_create_page_duplicate` — write; native + hosted
 - `wordpress_create_playbook` — write; hosted/stdio
 - `wordpress_create_post_duplicate` — write; native + hosted
-- `wordpress_create_post_type` — write; hosted/stdio
+- `wordpress_create_post_type` — write; native + hosted
 - `wordpress_create_site_navigation` — write; native + hosted
 - `wordpress_create_site_pattern` — write; native + hosted
 - `wordpress_create_site_template` — write; native + hosted
-- `wordpress_create_taxonomy` — write; hosted/stdio
+- `wordpress_create_taxonomy` — write; native + hosted
 - `wordpress_create_term` — write; native + hosted
 - `wordpress_create_theme_builder_template` — write; native + hosted
 - `wordpress_create_translation` — write; native + hosted
 - `wordpress_create_user` — write; native + hosted
 - `wordpress_deactivate_design_direction` — write; native + hosted
 - `wordpress_deactivate_plugin` — write; native + hosted
-- `wordpress_delete_acf_field_group` — write; hosted/stdio
+- `wordpress_delete_acf_field_group` — write; native + hosted
 - `wordpress_delete_comment` — write; native + hosted
 - `wordpress_delete_custom_post` — write; native + hosted
 - `wordpress_delete_design_direction` — write; native + hosted
 - `wordpress_delete_design_token` — write; native + hosted
-- `wordpress_delete_divi_preset` — write; hosted/stdio
+- `wordpress_delete_divi_preset` — write; native + hosted
 - `wordpress_delete_media` — write; native + hosted
 - `wordpress_delete_menu` — write; native + hosted
 - `wordpress_delete_menu_item` — write; native + hosted
@@ -68,37 +68,37 @@ The runtime applies site context and per-site governance, so an individual conne
 - `wordpress_delete_playbook` — write; hosted/stdio
 - `wordpress_delete_plugin` — write; native + hosted
 - `wordpress_delete_post` — write; native + hosted
-- `wordpress_delete_post_type` — write; hosted/stdio
+- `wordpress_delete_post_type` — write; native + hosted
 - `wordpress_delete_site_navigation` — write; native + hosted
 - `wordpress_delete_site_pattern` — write; native + hosted
-- `wordpress_delete_taxonomy` — write; hosted/stdio
+- `wordpress_delete_taxonomy` — write; native + hosted
 - `wordpress_delete_term` — write; native + hosted
 - `wordpress_delete_user` — write; native + hosted
 - `wordpress_diagnose_connection` — read; hosted/stdio
 - `wordpress_diff_snapshots` — read; native + hosted
 - `wordpress_duplicate_element` — write; native + hosted
-- `wordpress_end_session` — read; hosted/stdio
+- `wordpress_end_session` — read; native + hosted
 - `wordpress_export_design_direction` — read; native + hosted
 - `wordpress_extract_builder_content` — read; native + hosted
 - `wordpress_find_builder_targets` — read; native + hosted
 - `wordpress_find_element` — read; native + hosted
 - `wordpress_forget` — read; native + hosted
-- `wordpress_get_accessibility_scan` — read; hosted/stdio
+- `wordpress_get_accessibility_scan` — read; native + hosted
 - `wordpress_get_active_site` — read; hosted/stdio
 - `wordpress_get_activity` — read; native + hosted
 - `wordpress_get_builder_info` — read; native + hosted
-- `wordpress_get_builder_inline_schemas` — read; hosted/stdio
+- `wordpress_get_builder_inline_schemas` — read; native + hosted
 - `wordpress_get_comment` — read; native + hosted
 - `wordpress_get_core_web_vitals` — read; native + hosted
 - `wordpress_get_custom_post` — read; native + hosted
 - `wordpress_get_design_apply_reports` — read; native + hosted
 - `wordpress_get_design_direction` — read; native + hosted
-- `wordpress_get_divi_migration_readiness` — read; hosted/stdio
+- `wordpress_get_divi_migration_readiness` — read; native + hosted
 - `wordpress_get_media` — read; native + hosted
 - `wordpress_get_menu` — read; native + hosted
 - `wordpress_get_menu_item` — read; native + hosted
 - `wordpress_get_option` — read; native + hosted
-- `wordpress_get_page_outline` — read; hosted/stdio
+- `wordpress_get_page_outline` — read; native + hosted
 - `wordpress_get_playbook` — read; hosted/stdio
 - `wordpress_get_post_type` — read; native + hosted
 - `wordpress_get_server_compatibility` — read; native + hosted
@@ -116,16 +116,16 @@ The runtime applies site context and per-site governance, so an individual conne
 - `wordpress_inject_builder_content` — write; native + hosted
 - `wordpress_install_plugin` — write; native + hosted
 - `wordpress_invoke_ability` — write; hosted/stdio
-- `wordpress_list_accessibility_scans` — read; hosted/stdio
-- `wordpress_list_acf_field_groups` — read; hosted/stdio
+- `wordpress_list_accessibility_scans` — read; native + hosted
+- `wordpress_list_acf_field_groups` — read; native + hosted
 - `wordpress_list_activity` — read; native + hosted
 - `wordpress_list_comments` — read; native + hosted
-- `wordpress_list_custom_post_types` — read; hosted/stdio
+- `wordpress_list_custom_post_types` — read; native + hosted
 - `wordpress_list_custom_posts` — read; native + hosted
-- `wordpress_list_custom_taxonomies` — read; hosted/stdio
+- `wordpress_list_custom_taxonomies` — read; native + hosted
 - `wordpress_list_design_directions` — read; native + hosted
 - `wordpress_list_design_tokens` — read; native + hosted
-- `wordpress_list_divi_presets` — read; hosted/stdio
+- `wordpress_list_divi_presets` — read; native + hosted
 - `wordpress_list_media` — read; native + hosted
 - `wordpress_list_memory` — read; native + hosted
 - `wordpress_list_menu_items` — read; native + hosted
@@ -146,40 +146,40 @@ The runtime applies site context and per-site governance, so an individual conne
 - `wordpress_list_terms` — read; native + hosted
 - `wordpress_list_theme_builder_templates` — read; native + hosted
 - `wordpress_list_users` — read; native + hosted
-- `wordpress_make_responsive` — read; hosted/stdio
+- `wordpress_make_responsive` — read; native + hosted
 - `wordpress_mint_design_preview` — read; native + hosted
 - `wordpress_move_element` — write; native + hosted
 - `wordpress_purge_cache` — write; native + hosted
 - `wordpress_read_page` — read; native + hosted
 - `wordpress_read_post` — read; native + hosted
-- `wordpress_read_theme_file` — read; hosted/stdio
+- `wordpress_read_theme_file` — read; native + hosted
 - `wordpress_redeem_token` — write; hosted/stdio
 - `wordpress_remember` — read; native + hosted
 - `wordpress_remove_element` — write; native + hosted
 - `wordpress_reorder_elements` — write; native + hosted
 - `wordpress_report_issue` — read; hosted/stdio
 - `wordpress_reset_site_template` — write; native + hosted
-- `wordpress_resolve_divi_preset` — read; hosted/stdio
-- `wordpress_restore_session` — write; hosted/stdio
+- `wordpress_resolve_divi_preset` — read; native + hosted
+- `wordpress_restore_session` — write; native + hosted
 - `wordpress_restore_snapshot` — write; native + hosted
-- `wordpress_run_pagespeed_audit` — read; hosted/stdio
+- `wordpress_run_pagespeed_audit` — read; native + hosted
 - `wordpress_run_security_audit` — read; native + hosted
 - `wordpress_save_design_direction` — write; native + hosted
-- `wordpress_save_divi_library_item` — write; hosted/stdio
-- `wordpress_scan_page_accessibility` — read; hosted/stdio
+- `wordpress_save_divi_library_item` — write; native + hosted
+- `wordpress_scan_page_accessibility` — read; native + hosted
 - `wordpress_search_abilities` — read; native + hosted
 - `wordpress_search_docs` — read; hosted/stdio
 - `wordpress_search_stock_images` — read; native + hosted
 - `wordpress_sideload_image` — write; native + hosted
 - `wordpress_switch_site` — write; native + hosted
-- `wordpress_update_acf_field_group` — write; hosted/stdio
+- `wordpress_update_acf_field_group` — write; native + hosted
 - `wordpress_update_comment` — write; native + hosted
 - `wordpress_update_core_security` — write; native + hosted
 - `wordpress_update_custom_post` — write; native + hosted
 - `wordpress_update_design_token` — write; native + hosted
 - `wordpress_update_element` — write; native + hosted
 - `wordpress_update_media` — write; native + hosted
-- `wordpress_update_media_batch` — write; hosted/stdio
+- `wordpress_update_media_batch` — write; native + hosted
 - `wordpress_update_menu` — write; native + hosted
 - `wordpress_update_menu_item` — write; native + hosted
 - `wordpress_update_module` — write; native + hosted
@@ -188,19 +188,19 @@ The runtime applies site context and per-site governance, so an individual conne
 - `wordpress_update_playbook` — write; hosted/stdio
 - `wordpress_update_plugin` — write; native + hosted
 - `wordpress_update_post` — write; native + hosted
-- `wordpress_update_post_type` — write; hosted/stdio
+- `wordpress_update_post_type` — write; native + hosted
 - `wordpress_update_site_navigation` — write; native + hosted
 - `wordpress_update_site_pattern` — write; native + hosted
 - `wordpress_update_site_template` — write; native + hosted
-- `wordpress_update_taxonomy` — write; hosted/stdio
+- `wordpress_update_taxonomy` — write; native + hosted
 - `wordpress_update_term` — write; native + hosted
 - `wordpress_update_theme_builder_template` — write; native + hosted
 - `wordpress_update_translation` — write; native + hosted
 - `wordpress_update_user` — write; native + hosted
 - `wordpress_upload_media` — write; native + hosted
-- `wordpress_upsert_divi_presets` — read; hosted/stdio
+- `wordpress_upsert_divi_presets` — read; native + hosted
 - `wordpress_validate_security` — read; native + hosted
-- `wordpress_write_theme_file` — read; hosted/stdio
+- `wordpress_write_theme_file` — read; native + hosted
 ## WooCommerce add-on

package/dist/__tests__/0e6bd33c-redeem-preserves-per-site-settings.test.d.ts ADDED Viewed

	@@ -0,0 +1,2 @@
1	+ export {};
2	+ //# sourceMappingURL=0e6bd33c-redeem-preserves-per-site-settings.test.d.ts.map

package/dist/__tests__/0e6bd33c-redeem-preserves-per-site-settings.test.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"0e6bd33c-redeem-preserves-per-site-settings.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/0e6bd33c-redeem-preserves-per-site-settings.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/0e6bd33c-redeem-preserves-per-site-settings.test.js ADDED Viewed

@@ -0,0 +1,91 @@
+/**
+ * Ticket 0e6bd33c — redeeming a token must not silently discard the per-site
+ * settings the token does not own.
+ *
+ * A redeem token carries exactly five fields per site: id, name, url, apiKey
+ * and default (buildRespiraConfig, product-website/src/lib/mcp-config.ts).
+ * Everything else on a site object in ~/.respira/config.json was put there by
+ * the operator, usually on this connector's own advice:
+ *
+ *   forceRestRoute    — the only thing that makes hosts work where pretty
+ *                       /wp-json/ 404s and ?rest_route= returns JSON
+ *   forceWriteMethod  — the only thing that makes hosts work where PUT is
+ *                       blocked or dropped
+ *   httpAuth          — server-level Basic Auth for staging sites
+ *   insecureTLS       — the documented TLS escape hatch
+ *
+ * mergeRedeemedSites used to do `byKey.set(key, site)` on a URL collision:
+ * the freshly minted entry replaced the whole object. Redeem reported
+ * success, the file was rewritten, and every one of those flags was gone.
+ * The session kept working (the live clients were already built) so nothing
+ * failed until the next restart, at which point the site failed exactly the
+ * way it had failed before the flag was added.
+ *
+ * These assertions fail on unmodified main.
+ */
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import { mergeRedeemedSites } from '../config.js';
+/** What the dashboard mints: five fields, nothing else. */
+function tokenSite(id, url, extra = {}) {
+    return { id, name: id, url, apiKey: `respira_site_${id}`, ...extra };
+}
+test('a re-redeem keeps forceRestRoute on the site that needed it', () => {
+    const existing = [
+        tokenSite('a', 'https://a.example.com', { default: true, forceRestRoute: true }),
+    ];
+    const merged = mergeRedeemedSites(existing, [tokenSite('a', 'https://a.example.com', { default: true })]);
+    assert.equal(merged.length, 1);
+    assert.equal(merged[0].forceRestRoute, true, 'forceRestRoute was dropped by the redeem rewrite; the site 404s on every call after the next restart');
+});
+test('a re-redeem keeps every per-site key the token does not carry', () => {
+    const existing = [
+        tokenSite('a', 'https://a.example.com', {
+            default: true,
+            forceRestRoute: true,
+            forceWriteMethod: 'post',
+            insecureTLS: true,
+            httpAuth: { username: 'staging', password: 'hunter2' },
+        }),
+    ];
+    const merged = mergeRedeemedSites(existing, [tokenSite('a', 'https://a.example.com', { default: true })]);
+    assert.equal(merged[0].forceRestRoute, true, 'forceRestRoute dropped');
+    assert.equal(merged[0].forceWriteMethod, 'post', 'forceWriteMethod dropped');
+    assert.equal(merged[0].insecureTLS, true, 'insecureTLS dropped');
+    assert.deepEqual(merged[0].httpAuth, { username: 'staging', password: 'hunter2' }, 'httpAuth dropped');
+});
+test('an unrecognised per-site key added by hand also survives', () => {
+    // Deliberately not in WordPressSiteConfig: an allowlist-based fix would
+    // drop this, and would drop every future key added to the schema too.
+    const existing = [
+        { ...tokenSite('a', 'https://a.example.com', { default: true }), someFutureFlag: 'keep-me' },
+    ];
+    const merged = mergeRedeemedSites(existing, [tokenSite('a', 'https://a.example.com', { default: true })]);
+    assert.equal(merged[0].someFutureFlag, 'keep-me');
+});
+test('the token still wins for the fields it does carry', () => {
+    const existing = [
+        tokenSite('a', 'https://a.example.com', { default: true, forceRestRoute: true }),
+    ];
+    const merged = mergeRedeemedSites(existing, [
+        { id: 'a', name: 'Renamed', url: 'https://a.example.com', apiKey: 'respira_site_rotated', default: true },
+    ]);
+    assert.equal(merged[0].apiKey, 'respira_site_rotated', 'a rotated key must still land');
+    assert.equal(merged[0].name, 'Renamed', 'a renamed site must still land');
+    assert.equal(merged[0].forceRestRoute, true, 'and the local flag must still survive it');
+});
+test('preserving local keys does not leave two sites claiming default', () => {
+    const existing = [
+        tokenSite('a', 'https://a.example.com', { default: true, forceRestRoute: true }),
+        tokenSite('b', 'https://b.example.com'),
+    ];
+    // A full-account token re-mints both and marks b default.
+    const merged = mergeRedeemedSites(existing, [
+        tokenSite('b', 'https://b.example.com', { default: true }),
+        tokenSite('a', 'https://a.example.com'),
+    ]);
+    assert.equal(merged.filter((s) => s.default === true).length, 1, 'exactly one default must survive the merge');
+    assert.equal(merged.find((s) => s.default === true)?.url, 'https://b.example.com', "the just-redeemed token's default wins");
+    assert.equal(merged.find((s) => s.url === 'https://a.example.com')?.forceRestRoute, true);
+});
+//# sourceMappingURL=0e6bd33c-redeem-preserves-per-site-settings.test.js.map

package/dist/__tests__/0e6bd33c-redeem-preserves-per-site-settings.test.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"0e6bd33c-redeem-preserves-per-site-settings.test.js","sourceRoot":"","sources":["../../src/__tests__/0e6bd33c-redeem-preserves-per-site-settings.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAGlD,2DAA2D;AAC3D,SAAS,SAAS,CAAC,EAAU,EAAE,GAAW,EAAE,QAAsC,EAAE;IAClF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC;AACvE,CAAC;AAED,IAAI,CAAC,6DAA6D,EAAE,GAAG,EAAE;IACvE,MAAM,QAAQ,GAA0B;QACtC,SAAS,CAAC,GAAG,EAAE,uBAAuB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;KACjF,CAAC;IACF,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,uBAAuB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAE1G,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC/B,MAAM,CAAC,KAAK,CACV,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,EACxB,IAAI,EACJ,sGAAsG,CACvG,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+DAA+D,EAAE,GAAG,EAAE;IACzE,MAAM,QAAQ,GAA0B;QACtC,SAAS,CAAC,GAAG,EAAE,uBAAuB,EAAE;YACtC,OAAO,EAAE,IAAI;YACb,cAAc,EAAE,IAAI;YACpB,gBAAgB,EAAE,MAAM;YACxB,WAAW,EAAE,IAAI;YACjB,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE;SACvD,CAAC;KACH,CAAC;IACF,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,uBAAuB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAE1G,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,IAAI,EAAE,wBAAwB,CAAC,CAAC;IACvE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,MAAM,EAAE,0BAA0B,CAAC,CAAC;IAC7E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,qBAAqB,CAAC,CAAC;IACjE,MAAM,CAAC,SAAS,CACd,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAClB,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,EAC5C,kBAAkB,CACnB,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0DAA0D,EAAE,GAAG,EAAE;IACpE,wEAAwE;IACxE,sEAAsE;IACtE,MAAM,QAAQ,GAAG;QACf,EAAE,GAAG,SAAS,CAAC,GAAG,EAAE,uBAAuB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,cAAc,EAAE,SAAS,EAAE;KACzD,CAAC;IACtC,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,uBAAuB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAE1G,MAAM,CAAC,KAAK,CAAE,MAAM,CAAC,CAAC,CAAS,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;AAC7D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mDAAmD,EAAE,GAAG,EAAE;IAC7D,MAAM,QAAQ,GAA0B;QACtC,SAAS,CAAC,GAAG,EAAE,uBAAuB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;KACjF,CAAC;IACF,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,EAAE;QAC1C,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,uBAAuB,EAAE,MAAM,EAAE,sBAAsB,EAAE,OAAO,EAAE,IAAI,EAAE;KAC1G,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,sBAAsB,EAAE,+BAA+B,CAAC,CAAC;IACxF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,gCAAgC,CAAC,CAAC;IAC1E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,IAAI,EAAE,0CAA0C,CAAC,CAAC;AAC3F,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iEAAiE,EAAE,GAAG,EAAE;IAC3E,MAAM,QAAQ,GAA0B;QACtC,SAAS,CAAC,GAAG,EAAE,uBAAuB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;QAChF,SAAS,CAAC,GAAG,EAAE,uBAAuB,CAAC;KACxC,CAAC;IACF,0DAA0D;IAC1D,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,EAAE;QAC1C,SAAS,CAAC,GAAG,EAAE,uBAAuB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC1D,SAAS,CAAC,GAAG,EAAE,uBAAuB,CAAC;KACxC,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CACV,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,MAAM,EAC/C,CAAC,EACD,4CAA4C,CAC7C,CAAC;IACF,MAAM,CAAC,KAAK,CACV,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,EAAE,GAAG,EAC3C,uBAAuB,EACvB,wCAAwC,CACzC,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,uBAAuB,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;AAC5F,CAAC,CAAC,CAAC"}

package/dist/__tests__/139f7353-put-fallback-dedicated-methods.test.d.ts ADDED Viewed

@@ -0,0 +1,30 @@
+/**
+ * Ticket 139f7353 — the PUT-blocked-host fallback never reached the ~25
+ * dedicated client methods that call `client.put()` directly.
+ *
+ * Two earlier tickets fixed this in two places: e2d884cb wired
+ * `putWithPostFallback` into updatePost/updatePage/updateCustomPost, and
+ * 2b3a706b wired it into the shared `callRestV1`/`callRestV2` callers. Both
+ * left the dedicated methods alone. On a host whose edge blocks PUT (reported
+ * on Kinsta + Cloudflare, where `respira_diagnose_connection` shows
+ * `write_method_probe.put_status` 404/405) that produced a very specific
+ * shape of broken: `respira_create_menu_item` worked, because creating is a
+ * POST, and `respira_update_menu_item` returned 405, so a menu could be built
+ * and then never reordered.
+ *
+ * `respira_update_menu_item` is the one that got reported. It is not special:
+ * every menu, media, user, comment, term, WooCommerce and ACF update method
+ * had the identical gap.
+ *
+ * The fallback is safe here for the same reason it is safe for posts and
+ * pages: the plugin registers all of these routes with
+ * `WP_REST_Server::EDITABLE`, which is `'POST, PUT, PATCH'`, so the fallback
+ * POST lands on the identical handler. Verified against the route table in
+ * wordpress-plugin/respira-for-wordpress/includes/class-respira-api.php.
+ *
+ * A real HTTP server, not a mocked adapter, so the whole interceptor chain
+ * runs — including the codedError() step that strips `.response` and made an
+ * earlier status-only version of this predicate a no-op.
+ */
+export {};
+//# sourceMappingURL=139f7353-put-fallback-dedicated-methods.test.d.ts.map

package/dist/__tests__/139f7353-put-fallback-dedicated-methods.test.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"139f7353-put-fallback-dedicated-methods.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/139f7353-put-fallback-dedicated-methods.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG"}

package/dist/__tests__/139f7353-put-fallback-dedicated-methods.test.js ADDED Viewed

@@ -0,0 +1,162 @@
+/**
+ * Ticket 139f7353 — the PUT-blocked-host fallback never reached the ~25
+ * dedicated client methods that call `client.put()` directly.
+ *
+ * Two earlier tickets fixed this in two places: e2d884cb wired
+ * `putWithPostFallback` into updatePost/updatePage/updateCustomPost, and
+ * 2b3a706b wired it into the shared `callRestV1`/`callRestV2` callers. Both
+ * left the dedicated methods alone. On a host whose edge blocks PUT (reported
+ * on Kinsta + Cloudflare, where `respira_diagnose_connection` shows
+ * `write_method_probe.put_status` 404/405) that produced a very specific
+ * shape of broken: `respira_create_menu_item` worked, because creating is a
+ * POST, and `respira_update_menu_item` returned 405, so a menu could be built
+ * and then never reordered.
+ *
+ * `respira_update_menu_item` is the one that got reported. It is not special:
+ * every menu, media, user, comment, term, WooCommerce and ACF update method
+ * had the identical gap.
+ *
+ * The fallback is safe here for the same reason it is safe for posts and
+ * pages: the plugin registers all of these routes with
+ * `WP_REST_Server::EDITABLE`, which is `'POST, PUT, PATCH'`, so the fallback
+ * POST lands on the identical handler. Verified against the route table in
+ * wordpress-plugin/respira-for-wordpress/includes/class-respira-api.php.
+ *
+ * A real HTTP server, not a mocked adapter, so the whole interceptor chain
+ * runs — including the codedError() step that strips `.response` and made an
+ * earlier status-only version of this predicate a no-op.
+ */
+import { test, after } from 'node:test';
+import assert from 'node:assert/strict';
+import http from 'node:http';
+import { WordPressClient, ORIGINAL_METHOD_HEADER, isRetryableAsPost } from '../wordpress-client.js';
+/**
+ * The second half of the same ticket. PUT_FALLBACK_STATUSES has said
+ * {403, 404, 405} since 2b3a706b, but `handleError` rebuilds every non-2xx
+ * through `codedError`, which drops `.response`. So the status check in
+ * `isRetryableAsPost` could never fire on a real client error, and the
+ * name-based check that patched around that was hardcoded to 403 alone.
+ * A host that answers PUT with 405 and an HTML page — which is what the
+ * reporter's edge does — was therefore never retried, even at the call sites
+ * where the fallback WAS already wired in.
+ */
+test('an HTML 405 from the edge is retryable as POST, not just an HTML 403', () => {
+    assert.equal(isRetryableAsPost({ name: 'http_403_non_wordpress' }), true);
+    assert.equal(isRetryableAsPost({ name: 'http_405_non_wordpress' }), true, '405 is the reported case');
+    assert.equal(isRetryableAsPost({ name: 'http_404_non_wordpress' }), true, '404 is the other reported case');
+    // A status raised BY WordPress keeps its WP_Error code and stays a decision.
+    assert.equal(isRetryableAsPost({ name: 'rest_forbidden' }), false);
+    assert.equal(isRetryableAsPost({ name: 'http_500_non_wordpress' }), false);
+    assert.equal(isRetryableAsPost({ name: 'http_401_non_wordpress' }), false);
+});
+const servers = [];
+after(() => { for (const s of servers)
+    s.close(); });
+/**
+ * A host that answers 405 Method Not Allowed to PUT before WordPress runs
+ * (Cloudflare / Kinsta edge rule on the verb) and 200 to POST on the same
+ * path. The 405 body is HTML, like a real edge rejection, so the client
+ * cannot mistake it for a WordPress decision.
+ */
+async function startPutBlockedSite() {
+    const hits = [];
+    const server = http.createServer((req, res) => {
+        hits.push({
+            method: req.method || '',
+            url: req.url || '',
+            idempotencyKey: req.headers['idempotency-key'] || null,
+            originalMethod: req.headers[ORIGINAL_METHOD_HEADER.toLowerCase()] || null,
+        });
+        if (req.method === 'PUT') {
+            res.writeHead(405, { 'Content-Type': 'text/html', Allow: 'GET, POST, HEAD' });
+            res.end('<!DOCTYPE html><html><head><title>405 Not Allowed</title></head><body>405</body></html>');
+            return;
+        }
+        if (req.method === 'POST') {
+            let body = '';
+            req.on('data', (c) => { body += c; });
+            req.on('end', () => {
+                res.writeHead(200, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ success: true, via: 'POST', echo: body ? JSON.parse(body) : null }));
+            });
+            return;
+        }
+        res.writeHead(200, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify({ ok: true }));
+    });
+    servers.push(server);
+    await new Promise((resolve) => server.listen(0, '127.0.0.1', resolve));
+    const { port } = server.address();
+    const client = new WordPressClient({
+        id: 'blocked',
+        name: 'blocked',
+        url: `http://127.0.0.1:${port}`,
+        apiKey: `respira_site_${'x'.repeat(24)}`,
+    });
+    return { client, hits };
+}
+test('update_menu_item survives a host that answers 405 to PUT', async () => {
+    const { client, hits } = await startPutBlockedSite();
+    const result = await client.updateMenuItem(42, { position: 2 });
+    assert.equal(result.success, true, 'the reorder must actually land, not surface a 405');
+    assert.deepEqual(hits.map((h) => h.method), ['PUT', 'POST'], 'exactly one PUT then exactly one POST');
+    assert.equal(hits[1].url, '/wp-json/respira/v1/menus/items/42');
+    assert.equal(hits[1].originalMethod, 'PUT', 'the fallback POST must declare the verb it replaces');
+    assert.equal(hits[0].idempotencyKey, hits[1].idempotencyKey, 'both attempts must share one Idempotency-Key or the plugin cannot dedupe them');
+    assert.ok(hits[0].idempotencyKey, 'an idempotency key must be present at all');
+});
+/**
+ * update_menu_item is the reported one. These are the sibling methods that had
+ * the identical gap — all of them EDITABLE routes, so all of them fixable the
+ * same way. Named individually so a future regression names the tool it broke.
+ */
+const SIBLINGS = [
+    ['update_menu', (c) => c.updateMenu(7, { name: 'Main' }), '/wp-json/respira/v1/menus/7'],
+    ['assign_menu_location', (c) => c.assignMenuToLocation('primary', 7), '/wp-json/respira/v1/menus/locations/primary'],
+    ['update_media', (c) => c.updateMedia(3, { alt: 'a' }), '/wp-json/respira/v1/media/3'],
+    ['update_media_batch', (c) => c.updateMediaBatch([{ id: 3, alt: 'a' }]), '/wp-json/respira/v1/media/batch'],
+    ['update_user', (c) => c.updateUser(5, { display_name: 'A' }), '/wp-json/respira/v1/users/5'],
+    ['update_comment', (c) => c.updateComment(9, { content: 'x' }), '/wp-json/respira/v1/comments/9'],
+    ['update_term', (c) => c.updateTerm('category', 4, { name: 'n' }), '/wp-json/respira/v1/taxonomies/category/terms/4'],
+];
+for (const [label, call, expectedPath] of SIBLINGS) {
+    test(`${label} survives a host that answers 405 to PUT`, async () => {
+        const { client, hits } = await startPutBlockedSite();
+        const result = await call(client);
+        assert.equal(result.success, true, `${label} must fall back to POST`);
+        assert.deepEqual(hits.map((h) => h.method), ['PUT', 'POST']);
+        assert.equal(hits[1].url, expectedPath);
+        assert.equal(hits[1].originalMethod, 'PUT');
+        assert.equal(hits[0].idempotencyKey, hits[1].idempotencyKey);
+    });
+}
+test('the ACF dispatcher falls back too', async () => {
+    const { client, hits } = await startPutBlockedSite();
+    const result = await client.dispatchAcfTool('respira_acf_update_field', {
+        post_id: 12,
+        field_key: 'field_1',
+        value: 'x',
+    });
+    assert.equal(result.success, true);
+    assert.deepEqual(hits.map((h) => h.method), ['PUT', 'POST']);
+    assert.equal(hits[1].originalMethod, 'PUT');
+});
+test('a WordPress-issued 405 on a POST is not retried into a loop', async () => {
+    // Guard against the fix turning one failed call into an unbounded ladder:
+    // the fallback is exactly one POST, and a POST that fails is final.
+    const hits = [];
+    const server = http.createServer((req, res) => {
+        hits.push(req.method || '');
+        res.writeHead(405, { 'Content-Type': 'text/html' });
+        res.end('<!DOCTYPE html><html><head><title>405</title></head><body>405</body></html>');
+    });
+    servers.push(server);
+    await new Promise((resolve) => server.listen(0, '127.0.0.1', resolve));
+    const { port } = server.address();
+    const client = new WordPressClient({
+        id: 'x', name: 'x', url: `http://127.0.0.1:${port}`, apiKey: `respira_site_${'x'.repeat(24)}`,
+    });
+    await assert.rejects(() => client.updateMenuItem(1, { position: 1 }));
+    assert.deepEqual(hits, ['PUT', 'POST'], 'one PUT, one POST, then stop');
+});
+//# sourceMappingURL=139f7353-put-fallback-dedicated-methods.test.js.map

package/dist/__tests__/139f7353-put-fallback-dedicated-methods.test.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"139f7353-put-fallback-dedicated-methods.test.js","sourceRoot":"","sources":["../../src/__tests__/139f7353-put-fallback-dedicated-methods.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEpG;;;;;;;;;GASG;AACH,IAAI,CAAC,sEAAsE,EAAE,GAAG,EAAE;IAChF,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC1E,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,EAAE,IAAI,EAAE,0BAA0B,CAAC,CAAC;IACtG,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,EAAE,IAAI,EAAE,gCAAgC,CAAC,CAAC;IAC5G,6EAA6E;IAC7E,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IACnE,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3E,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;AAC7E,CAAC,CAAC,CAAC;AAEH,MAAM,OAAO,GAAkB,EAAE,CAAC;AAClC,KAAK,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC,IAAI,OAAO;IAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAIrD;;;;;GAKG;AACH,KAAK,UAAU,mBAAmB;IAChC,MAAM,IAAI,GAAU,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,IAAI,CAAC,IAAI,CAAC;YACR,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;YACxB,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE;YAClB,cAAc,EAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAY,IAAI,IAAI;YAClE,cAAc,EAAG,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,WAAW,EAAE,CAAY,IAAI,IAAI;SACtF,CAAC,CAAC;QAEH,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACzB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAC9E,GAAG,CAAC,GAAG,CAAC,yFAAyF,CAAC,CAAC;YACnG,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1B,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACtC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAChG,CAAC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7E,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,OAAO,EAAiB,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,SAAS;QACf,GAAG,EAAE,oBAAoB,IAAI,EAAE;QAC/B,MAAM,EAAE,gBAAgB,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;KACzC,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,IAAI,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;IAC1E,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,mBAAmB,EAAE,CAAC;IAErD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IAEhE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,mDAAmD,CAAC,CAAC;IACxF,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,uCAAuC,CAAC,CAAC;IACtG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,oCAAoC,CAAC,CAAC;IAChE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,KAAK,EAAE,qDAAqD,CAAC,CAAC;IACnG,MAAM,CAAC,KAAK,CACV,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,EACtB,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,EACtB,+EAA+E,CAChF,CAAC;IACF,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,2CAA2C,CAAC,CAAC;AACjF,CAAC,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,QAAQ,GAAkE;IAC9E,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,6BAA6B,CAAC;IACxF,CAAC,sBAAsB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,6CAA6C,CAAC;IACpH,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,6BAA6B,CAAC;IACtF,CAAC,oBAAoB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,iCAAiC,CAAC;IAC3G,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,EAAE,6BAA6B,CAAC;IAC7F,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,gCAAgC,CAAC;IACjG,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,iDAAiD,CAAC;CACtH,CAAC;AAEF,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,QAAQ,EAAE,CAAC;IACnD,IAAI,CAAC,GAAG,KAAK,0CAA0C,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,mBAAmB,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,KAAK,yBAAyB,CAAC,CAAC;QACtE,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;IACnD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,mBAAmB,EAAE,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,0BAA0B,EAAE;QACtE,OAAO,EAAE,EAAE;QACX,SAAS,EAAE,SAAS;QACpB,KAAK,EAAE,GAAG;KACX,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7D,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;IAC7E,0EAA0E;IAC1E,oEAAoE;IACpE,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC5B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;QACpD,GAAG,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7E,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,OAAO,EAAiB,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,oBAAoB,IAAI,EAAE,EAAE,MAAM,EAAE,gBAAgB,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;KAC9F,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,8BAA8B,CAAC,CAAC;AAC1E,CAAC,CAAC,CAAC"}

package/dist/__tests__/44fcf6b5-basic-auth-is-not-a-blocked-verb.test.d.ts ADDED Viewed

	@@ -0,0 +1,2 @@
1	+ export {};
2	+ //# sourceMappingURL=44fcf6b5-basic-auth-is-not-a-blocked-verb.test.d.ts.map

package/dist/__tests__/44fcf6b5-basic-auth-is-not-a-blocked-verb.test.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"44fcf6b5-basic-auth-is-not-a-blocked-verb.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/44fcf6b5-basic-auth-is-not-a-blocked-verb.test.ts"],"names":[],"mappings":""}