@respira/wordpress-mcp-server 8.3.26 → 8.3.28

package/CHANGELOG.md

@@ -5,6 +5,32 @@ All notable changes to Respira WordPress MCP Server will be documented in this f
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [8.3.28] - 2026-09-19
+
+### Added
+
+- **`diagnose_connection` says when a host blocks ChatGPT.** ChatGPT's connector reads a
+  site's sign-in details from OpenAI's servers with a Python user agent, and some hosts
+  refuse that before WordPress runs; WP Engine does by default. ChatGPT then says the
+  server "does not implement OAuth", although the plugin serves those details correctly.
+  Diagnose now asks for them the way ChatGPT does, reports `chatgpt_connector_blocked`,
+  names WP Engine when the site is on it, and says what to ask the host to allow.
+
+### Fixed
+
+- The package description and README said 230 core tools. The server has 231; the
+  WooCommerce count was one too high.
+
+## [8.3.27] - 2026-09-18
+
+### Added
+
+- **A write can name the page version it was based on.** update_page, update_post,
+  update_element, update_module, inject_builder_content and apply_builder_patch take
+  `expected_version`. With plugin 9.0.3 every read and write returns the page's
+  `content_version`; send it back and the write is refused with respira_version_conflict,
+  nothing written, if the page changed since. Leave it out and nothing changes.
+
 ## [8.3.26] - 2026-09-17
 
 ### Added

package/README.md

@@ -7,7 +7,7 @@
 <h1 align="center">Respira WordPress MCP Server</h1>
 
 <p align="center">
-  <strong>230 MCP tools, 335 with the WooCommerce add-on. 17 page builders and the native Site Editor. MCP 2026-07-28 with legacy-client support.</strong><br>
+  <strong>231 MCP tools, 335 with the WooCommerce add-on. 17 page builders and the native Site Editor. MCP 2026-07-28 with legacy-client support.</strong><br>
   Element-level editing, full page creation, HTML-to-builder conversion with rendering fidelity validation, per-site tool governance, storefront design intelligence, stock images, bulk operations — all through one MCP server.
 </p>
 
@@ -404,7 +404,7 @@ The server lists only what the connected site can use. Builder tools appear on t
 
 | Site | Tools listed |
 |---|---|
-| Core site (Gutenberg, no WooCommerce or ACF) | 230 |
+| Core site (Gutenberg, no WooCommerce or ACF) | 231 |
 | Core site with ACF | 284 |
 | WooCommerce add-on | 334 |
 | WooCommerce and ACF on Elementor | 395 |
@@ -958,6 +958,6 @@ MIT © [Respira](https://respira.press)
 ---
 
 <p align="center">
-  <strong>230 core tools, 335 with WooCommerce. 17 builders. The AI infrastructure layer for WordPress.</strong><br>
+  <strong>231 core tools, 335 with WooCommerce. 17 builders. The AI infrastructure layer for WordPress.</strong><br>
   <a href="https://respira.press">respira.press</a>
 </p>

package/dist/__tests__/chatgpt-connector-blocked-by-host.test.d.ts

@@ -0,0 +1,17 @@
+/**
+ * WP Engine's edge answers 403 to Python HTTP client user agents on every
+ * path, including `Python/3.12 aiohttp/3.13.5`, which is what ChatGPT's MCP
+ * connector sends from OpenAI's servers. Browsers and a Node user agent get
+ * 200. Verified 2026-09-19 on www.thinkfreely.ai and
+ * thinkfreelystg.wpenginepowered.com: the 200 carries `x-powered-by: WP
+ * Engine`, the 403 carries nothing that names the host.
+ *
+ * ChatGPT then reports "Error fetching OAuth configuration ... does not
+ * implement OAuth" while the plugin serves correct metadata, and every probe
+ * diagnose_connection made with its own user agent came back green.
+ *
+ * These drive the real WordPressClient.diagnoseConnection against a local
+ * server that behaves like that edge.
+ */
+export {};
+//# sourceMappingURL=chatgpt-connector-blocked-by-host.test.d.ts.map

package/dist/__tests__/chatgpt-connector-blocked-by-host.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chatgpt-connector-blocked-by-host.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/chatgpt-connector-blocked-by-host.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG"}

package/dist/__tests__/chatgpt-connector-blocked-by-host.test.js

@@ -0,0 +1,123 @@
+/**
+ * WP Engine's edge answers 403 to Python HTTP client user agents on every
+ * path, including `Python/3.12 aiohttp/3.13.5`, which is what ChatGPT's MCP
+ * connector sends from OpenAI's servers. Browsers and a Node user agent get
+ * 200. Verified 2026-09-19 on www.thinkfreely.ai and
+ * thinkfreelystg.wpenginepowered.com: the 200 carries `x-powered-by: WP
+ * Engine`, the 403 carries nothing that names the host.
+ *
+ * ChatGPT then reports "Error fetching OAuth configuration ... does not
+ * implement OAuth" while the plugin serves correct metadata, and every probe
+ * diagnose_connection made with its own user agent came back green.
+ *
+ * These drive the real WordPressClient.diagnoseConnection against a local
+ * server that behaves like that edge.
+ */
+import { test, after } from 'node:test';
+import assert from 'node:assert/strict';
+import http from 'node:http';
+import { WordPressClient } from '../wordpress-client.js';
+// Pinned as a literal, not imported: this is the measured string, and the
+// probe must keep sending exactly it.
+const CHATGPT_UA = 'Python/3.12 aiohttp/3.13.5';
+const servers = [];
+after(() => {
+    for (const s of servers)
+        s.close();
+});
+async function startSite(mode, opts = {}) {
+    const userAgents = [];
+    const server = http.createServer((req, res) => {
+        req.resume();
+        req.on('end', () => {
+            const ua = String(req.headers['user-agent'] || '');
+            userAgents.push(ua);
+            const isPython = /^python/i.test(ua);
+            if (isPython && mode === 'block_python') {
+                // Like the WP Engine edge: an HTML 403, no x-powered-by.
+                res.writeHead(403, { 'Content-Type': 'text/html' });
+                res.end('<html><head><title>403 Forbidden</title></head><body>Forbidden</body></html>');
+                return;
+            }
+            if (isPython && mode === 'reset_python') {
+                req.socket.destroy();
+                return;
+            }
+            const url = new URL(req.url || '/', 'http://placeholder');
+            const route = url.searchParams.get('rest_route') || url.pathname.replace(/^\/wp-json/, '') || '/';
+            const headers = { 'Content-Type': 'application/json' };
+            if (opts.poweredBy)
+                headers['X-Powered-By'] = opts.poweredBy;
+            const json = (status, body) => {
+                res.writeHead(status, headers);
+                res.end(req.method === 'HEAD' ? undefined : JSON.stringify(body));
+            };
+            if (url.pathname === '/.well-known/oauth-protected-resource' || route === '/respira/v1/oauth-protected-resource') {
+                return json(200, { resource: `http://${req.headers.host}/wp-json/respira/v1/mcp`, authorization_servers: ['https://www.respira.press'] });
+            }
+            if (route === '/respira/v1/ping' && (req.method === 'GET' || req.method === 'HEAD'))
+                return json(200, { ok: true });
+            if (req.method === 'OPTIONS')
+                return json(200, {});
+            if (route === '/respira/v1/ping') {
+                return json(404, { code: 'rest_no_route', message: 'No route was found matching the URL and request method.', data: { status: 404 } });
+            }
+            return json(200, { ok: true, route });
+        });
+    });
+    servers.push(server);
+    await new Promise((resolve) => server.listen(0, '127.0.0.1', resolve));
+    const { port } = server.address();
+    const origin = `http://127.0.0.1:${port}`;
+    const client = new WordPressClient({ id: 'chatgpt-ua', name: 'chatgpt-ua', url: origin, apiKey: 'respira_test_key' });
+    return { client, origin, userAgents };
+}
+test('a host that 403s the ChatGPT user agent on the OAuth metadata is flagged, with the fix first', async () => {
+    const site = await startSite('block_python');
+    const report = await site.client.diagnoseConnection({ probe_timeout_ms: 5000 });
+    assert.equal(report.success, true);
+    assert.equal(report.chatgpt_connector_blocked, true);
+    assert.equal(report.chatgpt_connector_probe, 'ran');
+    assert.equal(report.chatgpt_connector.default_user_agent_status, 200);
+    assert.equal(report.chatgpt_connector.chatgpt_user_agent_status, 403);
+    assert.equal(report.chatgpt_connector.url, `${site.origin}/.well-known/oauth-protected-resource`);
+    assert.equal(report.chatgpt_connector.host_detected, null);
+    // Exactly one request went out with ChatGPT's user agent.
+    assert.equal(site.userAgents.filter((ua) => ua === CHATGPT_UA).length, 1);
+    const first = String(report.recommendations[0] || '');
+    assert.match(first, /blocks ChatGPT's connector before WordPress runs/);
+    assert.match(first, /does not implement OAuth/);
+    assert.match(first, /answered 200 to this server's user agent and 403 to ChatGPT's/);
+    assert.match(first, /allow the user agent Python\/3\.12 aiohttp on \/\.well-known\/oauth-protected-resource and \/wp-json\/respira\/v1\//);
+    assert.doesNotMatch(first, /WP Engine/, 'the host is only named when the headers show it');
+});
+test('WP Engine is named when the 2xx it serves says so, even though its 403 does not', async () => {
+    const site = await startSite('block_python', { poweredBy: 'WP Engine' });
+    const report = await site.client.diagnoseConnection({ probe_timeout_ms: 5000 });
+    assert.equal(report.chatgpt_connector_blocked, true);
+    assert.equal(report.chatgpt_connector.host_detected, 'wpengine');
+    assert.match(String(report.recommendations[0] || ''), /on WP Engine/);
+    assert.match(String(report.recommendations[0] || ''), /Ask WP Engine support to allow/);
+});
+test('a host that answers ChatGPT the same as everyone else is not flagged', async () => {
+    const site = await startSite('allow_all');
+    const report = await site.client.diagnoseConnection({ probe_timeout_ms: 5000 });
+    assert.equal(report.success, true);
+    assert.equal(report.chatgpt_connector_blocked, false);
+    assert.equal(report.chatgpt_connector_probe, 'ran');
+    assert.equal(report.chatgpt_connector.chatgpt_user_agent_status, 200);
+    assert.ok(!report.recommendations.some((r) => /ChatGPT's connector/.test(r)), 'no ChatGPT recommendation on a site that lets it through');
+});
+test('a ChatGPT probe that errors is reported and diagnose still succeeds', async () => {
+    const site = await startSite('reset_python');
+    const report = await site.client.diagnoseConnection({ probe_timeout_ms: 5000 });
+    assert.equal(report.success, true);
+    assert.equal(report.chatgpt_connector_probe, 'error');
+    assert.equal(report.chatgpt_connector_blocked, null, 'an error proves nothing either way');
+    assert.ok(report.chatgpt_connector.error, 'the error itself is in the evidence');
+    assert.ok(!report.recommendations.some((r) => /ChatGPT's connector/.test(r)));
+    // The rest of the report is intact.
+    assert.equal(report.well_known_discovery.verdict, 'wordpress_serves_it');
+    assert.equal(report.write_method_verdict, 'not_blocked');
+});
+//# sourceMappingURL=chatgpt-connector-blocked-by-host.test.js.map

package/dist/__tests__/chatgpt-connector-blocked-by-host.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chatgpt-connector-blocked-by-host.test.js","sourceRoot":"","sources":["../../src/__tests__/chatgpt-connector-blocked-by-host.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,0EAA0E;AAC1E,sCAAsC;AACtC,MAAM,UAAU,GAAG,4BAA4B,CAAC;AAEhD,MAAM,OAAO,GAAkB,EAAE,CAAC;AAElC,KAAK,CAAC,GAAG,EAAE;IACT,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,CAAC,CAAC,KAAK,EAAE,CAAC;AACrC,CAAC,CAAC,CAAC;AAIH,KAAK,UAAU,SAAS,CAAC,IAAU,EAAE,OAA+B,EAAE;IACpE,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,GAAG,CAAC,MAAM,EAAE,CAAC;QACb,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;YACnD,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACpB,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrC,IAAI,QAAQ,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;gBACxC,yDAAyD;gBACzD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC,8EAA8E,CAAC,CAAC;gBACxF,OAAO;YACT,CAAC;YACD,IAAI,QAAQ,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;gBACxC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,CAAC,CAAC;YAC1D,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;YAClG,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;YAC/E,IAAI,IAAI,CAAC,SAAS;gBAAE,OAAO,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;YAC7D,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,IAAa,EAAE,EAAE;gBAC7C,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC/B,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YACpE,CAAC,CAAC;YACF,IAAI,GAAG,CAAC,QAAQ,KAAK,uCAAuC,IAAI,KAAK,KAAK,sCAAsC,EAAE,CAAC;gBACjH,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,yBAAyB,EAAE,qBAAqB,EAAE,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC;YAC5I,CAAC;YACD,IAAI,KAAK,KAAK,kBAAkB,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACpH,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACnD,IAAI,KAAK,KAAK,kBAAkB,EAAE,CAAC;gBACjC,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,yDAAyD,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YACzI,CAAC;YACD,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7E,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,OAAO,EAAiB,CAAC;IACjD,MAAM,MAAM,GAAG,oBAAoB,IAAI,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAS,CAAC,CAAC;IAC7H,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACxC,CAAC;AAED,IAAI,CAAC,8FAA8F,EAAE,KAAK,IAAI,EAAE;IAC9G,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;IAEhF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;IACtE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;IACtE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,uCAAuC,CAAC,CAAC;IAClG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAE3D,0DAA0D;IAC1D,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAE1E,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,kDAAkD,CAAC,CAAC;IACxE,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;IAChD,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,+DAA+D,CAAC,CAAC;IACrF,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,qHAAqH,CAAC,CAAC;IAC3I,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,WAAW,EAAE,iDAAiD,CAAC,CAAC;AAC7F,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;IACjG,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;IAEhF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IACjE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC;IACtE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,gCAAgC,CAAC,CAAC;AAC1F,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;IACtF,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;IAEhF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;IACtE,MAAM,CAAC,EAAE,CACP,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAC1E,0DAA0D,CAC3D,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;IACrF,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;IAEhF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,yBAAyB,EAAE,IAAI,EAAE,oCAAoC,CAAC,CAAC;IAC3F,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,EAAE,qCAAqC,CAAC,CAAC;IACjF,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,oCAAoC;IACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IACzE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,EAAE,aAAa,CAAC,CAAC;AAC3D,CAAC,CAAC,CAAC"}

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAoBH,OAAO,KAAK,EAAE,mBAAmB,EAAe,MAAM,kBAAkB,CAAC;AAwCzE,MAAM,MAAM,eAAe,GAAG;IAC5B,0EAA0E;IAC1E,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,0EAA0E;IAC1E,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,4EAA4E;IAC5E,qBAAqB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/C,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,eAAe,EACtB,SAAS,EAAE,MAAM,GAChB,MAAM,GAAG,IAAI,CAkBf;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,eAAe,EACtB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,eAAe,CAUjB;AA+FD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAQ5D;AAMD;;;;;;;;;;;;;;;;GAgBG;AACH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,GAAG,MAAM,CAoBhF;AA0LD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,gBAAgB,aAkB3B,CAAC;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,aAW3B,CAAC;AAEH,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,KAAK,EAAE,GAAG,GAAG,MAAM,CAIhD;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,OAAO,CAIvE;AAED,qBAAa,sBAAsB;IACjC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,WAAW,CAAgC;IACnD,OAAO,CAAC,KAAK,CAA2C;IACxD,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,cAAc,CAAwB;IAC9C,OAAO,CAAC,YAAY,CAA4B;IAChD,8EAA8E;IAC9E,OAAO,CAAC,YAAY,CAA4B;IAChD,8EAA8E;IAC9E,OAAO,CAAC,mBAAmB,CAAS;IACpC,iFAAiF;IACjF,OAAO,CAAC,iBAAiB,CAAK;IAC9B;;;OAGG;IACH,OAAO,CAAC,qBAAqB,CAMK;IAClC,iFAAiF;IACjF,OAAO,CAAC,mBAAmB,CAAgC;IAC3D;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6B;IAE5D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAsB;IAEhE;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAWzB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;gBA4Bb,WAAW,EAAE,mBAAmB,EAAE,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE;IAkWvE,OAAO,CAAC,cAAc;IAItB;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;IAkB5B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,aAAa;IAiCrB,gEAAgE;IAChE,OAAO,CAAC,aAAa;IAUrB;;;;;;OAMG;YACW,UAAU;IA2CxB;;;;;;;;;;;;;;OAcG;YACW,WAAW;IAyJzB;;;;;;;;;OASG;YACW,kBAAkB;IA4PhC;;;;;;;;OAQG;IACH,OAAO,CAAC,qBAAqB;IAgE7B;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;YACW,qBAAqB;IAkBnC;;;;;;;OAOG;IACH,OAAO,CAAC,yBAAyB;YAiCnB,kBAAkB;IAwGhC,yFAAyF;IACzF,OAAO,CAAC,gBAAgB;IASxB;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,6BAA6B;IA6CrC;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,yBAAyB;IA+BjC,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,aAAa;YAmVP,kBAAkB;YAiDlB,yBAAyB;IAUvC;;;OAGG;IACH,OAAO,CAAC,oBAAoB;YAyBd,QAAQ;IA8jKtB;;;;;;OAMG;IACH;;;;;;;;;;;;;oDAagD;IAChD,OAAO,CAAC,mBAAmB,CAAoD;IAC/E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAU;IAClD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAU;IAC1D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAS;IAC1D;;mDAE+C;IAC/C,OAAO,CAAC,0BAA0B,CAAoC;IAEtE;;;;;;;;OAQG;YACW,0BAA0B;YAyC1B,oBAAoB;YA6CpB,2BAA2B;IAQzC;;;;OAIG;YACW,cAAc;IAQ5B,OAAO,CAAC,mBAAmB;IAylE3B;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAe3C;IAEF;;;;OAIG;IACH,OAAO,CAAC,0BAA0B;YAmCpB,cAAc;IA8H5B,oEAAoE;IACpE,OAAO,CAAC,iBAAiB;IAoBzB;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,eAAe;YA+DT,gBAAgB;IAykD9B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAkhBzB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAkWxB,GAAG;CA+CV"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAoBH,OAAO,KAAK,EAAE,mBAAmB,EAAe,MAAM,kBAAkB,CAAC;AAwCzE,MAAM,MAAM,eAAe,GAAG;IAC5B,0EAA0E;IAC1E,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,0EAA0E;IAC1E,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,4EAA4E;IAC5E,qBAAqB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/C,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,eAAe,EACtB,SAAS,EAAE,MAAM,GAChB,MAAM,GAAG,IAAI,CAkBf;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,eAAe,EACtB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,eAAe,CAUjB;AA+FD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAQ5D;AAMD;;;;;;;;;;;;;;;;GAgBG;AACH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,GAAG,MAAM,CAoBhF;AA0LD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,gBAAgB,aAkB3B,CAAC;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,aAW3B,CAAC;AAEH,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,KAAK,EAAE,GAAG,GAAG,MAAM,CAIhD;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,OAAO,CAIvE;AAED,qBAAa,sBAAsB;IACjC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,WAAW,CAAgC;IACnD,OAAO,CAAC,KAAK,CAA2C;IACxD,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,cAAc,CAAwB;IAC9C,OAAO,CAAC,YAAY,CAA4B;IAChD,8EAA8E;IAC9E,OAAO,CAAC,YAAY,CAA4B;IAChD,8EAA8E;IAC9E,OAAO,CAAC,mBAAmB,CAAS;IACpC,iFAAiF;IACjF,OAAO,CAAC,iBAAiB,CAAK;IAC9B;;;OAGG;IACH,OAAO,CAAC,qBAAqB,CAMK;IAClC,iFAAiF;IACjF,OAAO,CAAC,mBAAmB,CAAgC;IAC3D;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6B;IAE5D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAsB;IAEhE;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAWzB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;gBA4Bb,WAAW,EAAE,mBAAmB,EAAE,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE;IAkWvE,OAAO,CAAC,cAAc;IAItB;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;IAkB5B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,aAAa;IAiCrB,gEAAgE;IAChE,OAAO,CAAC,aAAa;IAUrB;;;;;;OAMG;YACW,UAAU;IA2CxB;;;;;;;;;;;;;;OAcG;YACW,WAAW;IAyJzB;;;;;;;;;OASG;YACW,kBAAkB;IA4PhC;;;;;;;;OAQG;IACH,OAAO,CAAC,qBAAqB;IAgE7B;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;YACW,qBAAqB;IAkBnC;;;;;;;OAOG;IACH,OAAO,CAAC,yBAAyB;YAiCnB,kBAAkB;IAwGhC,yFAAyF;IACzF,OAAO,CAAC,gBAAgB;IASxB;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,6BAA6B;IA6CrC;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,yBAAyB;IA+BjC,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,aAAa;YAmVP,kBAAkB;YAiDlB,yBAAyB;IAUvC;;;OAGG;IACH,OAAO,CAAC,oBAAoB;YAyBd,QAAQ;IAulKtB;;;;;;OAMG;IACH;;;;;;;;;;;;;oDAagD;IAChD,OAAO,CAAC,mBAAmB,CAAoD;IAC/E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAU;IAClD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAU;IAC1D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAS;IAC1D;;mDAE+C;IAC/C,OAAO,CAAC,0BAA0B,CAAoC;IAEtE;;;;;;;;OAQG;YACW,0BAA0B;YAyC1B,oBAAoB;YA6CpB,2BAA2B;IAQzC;;;;OAIG;YACW,cAAc;IAQ5B,OAAO,CAAC,mBAAmB;IAylE3B;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAe3C;IAEF;;;;OAIG;IACH,OAAO,CAAC,0BAA0B;YAmCpB,cAAc;IA8H5B,oEAAoE;IACpE,OAAO,CAAC,iBAAiB;IAoBzB;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,eAAe;YA+DT,gBAAgB;IA2kD9B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAuhBzB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAkWxB,GAAG;CA+CV"}

package/dist/server.js

@@ -2636,6 +2636,10 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                 inputSchema: {
                     type: 'object',
                     properties: {
+                        expected_version: {
+                            type: 'string',
+                            description: "Optional. The content_version from your last read or write of this page. The write is refused with respira_version_conflict (409, nothing written) if the page changed since, e.g. another agent or an editor saved it. Read again, reapply your change, and retry with the new content_version.",
+                        },
                         id: {
                             type: 'number',
                             description: 'Page ID',
@@ -3037,6 +3041,10 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                 inputSchema: {
                     type: 'object',
                     properties: {
+                        expected_version: {
+                            type: 'string',
+                            description: "Optional. The content_version from your last read or write of this page. The write is refused with respira_version_conflict (409, nothing written) if the page changed since, e.g. another agent or an editor saved it. Read again, reapply your change, and retry with the new content_version.",
+                        },
                         id: {
                             type: 'number',
                             description: 'Post ID',
@@ -3361,6 +3369,10 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                 inputSchema: {
                     type: 'object',
                     properties: {
+                        expected_version: {
+                            type: 'string',
+                            description: "Optional. The content_version from your last read or write of this page. The write is refused with respira_version_conflict (409, nothing written) if the page changed since, e.g. another agent or an editor saved it. Read again, reapply your change, and retry with the new content_version.",
+                        },
                         builder: {
                             type: 'string',
                             description: 'Builder identifier. Use exactly: gutenberg, divi, elementor, bricks, beaver, oxygen, breakdance, brizy, thrive, visual-composer, wpbakery, flatsome, spectra, kadence, generateblocks, greenshift.',
@@ -3440,6 +3452,10 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                 inputSchema: {
                     type: 'object',
                     properties: {
+                        expected_version: {
+                            type: 'string',
+                            description: "Optional. The content_version from your last read or write of this page. The write is refused with respira_version_conflict (409, nothing written) if the page changed since, e.g. another agent or an editor saved it. Read again, reapply your change, and retry with the new content_version.",
+                        },
                         builder: {
                             type: 'string',
                             description: 'Builder name. Use exactly: gutenberg, divi, elementor, bricks, beaver, oxygen, breakdance, brizy, thrive, visual-composer, wpbakery, flatsome, spectra, kadence, generateblocks, greenshift.',
@@ -4570,6 +4586,10 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                 inputSchema: {
                     type: 'object',
                     properties: {
+                        expected_version: {
+                            type: 'string',
+                            description: "Optional. The content_version from your last read or write of this page. The write is refused with respira_version_conflict (409, nothing written) if the page changed since, e.g. another agent or an editor saved it. Read again, reapply your change, and retry with the new content_version.",
+                        },
                         builder: {
                             type: 'string',
                             description: 'Builder slug',
@@ -4748,7 +4768,7 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
             },
             {
                 name: 'wordpress_diagnose_connection',
-                description: 'Run a connection-fingerprint diagnostic for the active site. Combines the plugin\'s server-side report (route registration, php/wp/plugin versions, edge plugin presence) with outside-in probes from the MCP server (REST root reachability, content-type sanity check on Respira routes, edge-layer headers). Use when a tool returns "html instead of json", an opaque 5xx, or when a connection that worked yesterday silently breaks. ALSO use it when the user suspects the wrong site, a stale connection, or a setup step that "did nothing": the response carries transport_mode (which install is answering: mcpb_bundle, npx_cache, global_npm_install, project_local_install, source_checkout), transport.duplicate_entries (whether a second Respira server is running, which usually means the client config lists Respira twice), and client_config (which config source won and how many sites came out of it). Returns a structured object including detected edge layers (Cloudflare, Wordfence, Sucuri) and concrete remediation recommendations. It also reports well_known_discovery: whether the host answers /.well-known/oauth-protected-resource itself instead of letting WordPress answer it, which is what breaks a ChatGPT connection on a site whose plugin is working, since ChatGPT checks only that address.',
+                description: 'Run a connection-fingerprint diagnostic for the active site. Combines the plugin\'s server-side report (route registration, php/wp/plugin versions, edge plugin presence) with outside-in probes from the MCP server (REST root reachability, content-type sanity check on Respira routes, edge-layer headers). Use when a tool returns "html instead of json", an opaque 5xx, or when a connection that worked yesterday silently breaks. ALSO use it when the user suspects the wrong site, a stale connection, or a setup step that "did nothing": the response carries transport_mode (which install is answering: mcpb_bundle, npx_cache, global_npm_install, project_local_install, source_checkout), transport.duplicate_entries (whether a second Respira server is running, which usually means the client config lists Respira twice), and client_config (which config source won and how many sites came out of it). Returns a structured object including detected edge layers (Cloudflare, Wordfence, Sucuri) and concrete remediation recommendations. It also reports well_known_discovery: whether the host answers /.well-known/oauth-protected-resource itself instead of letting WordPress answer it, which is what breaks a ChatGPT connection on a site whose plugin is working, since ChatGPT checks only that address. And chatgpt_connector_blocked: whether the host or CDN refuses ChatGPT\'s connector (user agent Python/3.12 aiohttp) on that metadata while it serves this server fine, which is what makes ChatGPT say the server "does not implement OAuth".',
                 inputSchema: {
                     type: 'object',
                     properties: {
@@ -10155,14 +10175,14 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                 return await client.getBuilderInlineSchemas(args.builder, args.types);
             case 'wordpress_inject_builder_content':
                 return hoistDroppedStylingWarnings({
-                    ...(await client.injectBuilderContent(args.builder, args.page_id, args.content, args.divi_version, args.edit_target, args.mode, args.confirm_replace)),
+                    ...(await client.injectBuilderContent(args.builder, args.page_id, args.content, args.divi_version, args.edit_target, args.mode, args.confirm_replace, args.expected_version)),
                     respira_approvals_url: client.getApprovalsUrl(),
                 });
             case 'wordpress_make_responsive':
                 return await client.makeResponsive(args.page_id, args.dry_run || false);
             case 'wordpress_update_module':
                 return hoistDroppedStylingWarnings({
-                    ...(await client.updateModule(args.builder, args.page_id, args.module_identifier, args.updates, args.edit_target)),
+                    ...(await client.updateModule(args.builder, args.page_id, args.module_identifier, args.updates, args.edit_target, args.expected_version)),
                     respira_approvals_url: client.getApprovalsUrl(),
                 });
             case 'wordpress_validate_security':
@@ -10645,7 +10665,7 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
             case 'wordpress_get_design_apply_reports':
                 return await client.callRestV2('GET', '/design-direction/apply-reports', args.direction_id !== undefined ? { direction_id: args.direction_id } : undefined);
             case 'wordpress_apply_builder_patch':
-                return await client.applyBuilderPatch(args.builder, args.post_id, args.operations, args.include, args.edit_target);
+                return await client.applyBuilderPatch(args.builder, args.post_id, args.operations, args.include, args.edit_target, args.expected_version);
             case 'woocommerce_list_products':
                 return await client.woocommerceListProducts(args);
             case 'woocommerce_get_product':
@@ -11178,6 +11198,10 @@ Allowlist: css, scss, less, json. PHP / JS theme writes are intentionally out of
                 inputSchema: {
                     type: 'object',
                     properties: {
+                        expected_version: {
+                            type: 'string',
+                            description: "Optional. The content_version from your last read or write of this page. The write is refused with respira_version_conflict (409, nothing written) if the page changed since, e.g. another agent or an editor saved it. Read again, reapply your change, and retry with the new content_version.",
+                        },
                         post_id: { type: 'number', description: 'Page/post ID' },
                         identifier_type: {
                             type: 'string',