claude-plugin-wordpress-manager 1.7.2 → 1.9.0

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "wordpress-manager",
-  "version": "1.7.2",
-  "description": "Unified WordPress management plugin for Claude Code. Orchestrates Hostinger MCP (infrastructure), WP REST API bridge (content), and WordPress.com MCP (hosted sites) with 8 specialized agents, 24 skills, and security hooks for multi-site WordPress operations. Includes local dev environment support for WordPress Studio, LocalWP, and wp-env. Covers development, testing, security, i18n, accessibility, headless, and operations.",
+  "version": "1.9.0",
+  "description": "Unified WordPress management plugin for Claude Code. Orchestrates Hostinger MCP (infrastructure), WP REST API bridge (81 tools incl. WooCommerce + Multisite), and WordPress.com MCP (hosted sites) with 9 specialized agents, 26 skills, and security hooks. Includes WordPress Multisite network management (10 tools via WP-CLI), WooCommerce store management (30 tools), local dev environment support, development, testing, security, i18n, accessibility, headless, and operations.",
   "author": {
     "name": "vinmor",
     "email": "morreale.v@gmail.com"
@@ -17,7 +17,11 @@
     "local-development",
     "wordpress-studio",
     "localwp",
-    "wp-env"
+    "wp-env",
+    "woocommerce",
+    "ecommerce",
+    "multisite",
+    "network"
   ],
   "mcpServers": "./.mcp.json"
 }

package/CHANGELOG.md

@@ -2,6 +2,61 @@
 
 All notable changes to the WordPress Manager plugin for Claude Code.
 
+## [1.9.0] - 2026-02-28
+
+### Added
+- **WordPress Multisite support** — 10 new MCP tools for network management
+- **WP-CLI execution module** (`wpcli.ts`) — local and SSH remote command execution
+- **New skill**: `wp-multisite` with 6 reference files (network setup, site management, domain mapping, network plugins, user roles, migration)
+- **Detection script**: `multisite_inspect.mjs` — detects multisite configuration
+- **SiteConfig extended**: `wp_path`, `ssh_host`, `ssh_user`, `ssh_key`, `ssh_port`, `is_multisite` fields
+
+### New MCP Tools (10)
+- `ms_list_sites` — List all sub-sites in the network
+- `ms_get_site` — Get sub-site details
+- `ms_create_site` — Create a new sub-site
+- `ms_activate_site` — Activate or deactivate a sub-site
+- `ms_delete_site` — Delete a sub-site (with safety gate)
+- `ms_list_network_plugins` — List plugins with network activation status (REST)
+- `ms_network_activate_plugin` — Network-activate a plugin (wp-cli)
+- `ms_network_deactivate_plugin` — Network-deactivate a plugin (wp-cli)
+- `ms_list_super_admins` — List Super Admin users (wp-cli)
+- `ms_get_network_settings` — Get network-wide settings (wp-cli)
+
+### Changed
+- `wp-site-manager` agent: added Multisite Network Management section
+- Router decision-tree.md upgraded to v6 with multisite keywords
+- `wp-wpcli-and-ops` and `wp-security` skills: added multisite cross-references
+- WP REST Bridge: 71 → 81 total tools
+
+## [1.8.0] - 2026-02-28
+
+### Added
+- **WooCommerce support** — 30 new MCP tools via WP REST Bridge (`wc/v3` namespace)
+  - `wc-products.ts` (7 tools): CRUD products, categories, variations
+  - `wc-orders.ts` (6 tools): List, get, update status, notes, refunds
+  - `wc-customers.ts` (4 tools): List, get, create, update customers
+  - `wc-coupons.ts` (4 tools): CRUD coupons with discount rules
+  - `wc-reports.ts` (5 tools): Sales, top sellers, order/product/customer totals
+  - `wc-settings.ts` (4 tools): Payment gateways, shipping zones, tax classes, system status
+- **`wp-woocommerce` skill** — WooCommerce operations with decision tree and 8 reference files
+  - Reference files: product-management, order-workflow, analytics-reports, coupon-marketing, shipping-setup, payment-gateways, tax-configuration, wc-extensions
+- **`wp-ecommerce-manager` agent** — WooCommerce store management (color: orange)
+  - 5 procedures: product catalog, order processing, sales analytics, coupon campaigns, store health
+  - Report template with KPIs and recommendations
+- **`woocommerce_inspect.mjs`** detection script — scans for WC plugin, hooks, composer deps, API config
+- WooCommerce authentication: Consumer Key/Secret via separate AxiosInstance in WP REST Bridge
+  - `SiteConfig` extended with optional `wc_consumer_key`/`wc_consumer_secret`
+  - `makeWooCommerceRequest()` reusing existing retry and concurrency logic
+- WC types: `WCProduct`, `WCOrder`, `WCCustomer`, `WCCoupon` in types.ts
+
+### Changed
+- Router upgraded to v5 — WooCommerce keywords in Step 0 + Step 2b routing entry
+- `wp-site-manager` agent — added `wp-ecommerce-manager` to delegation table
+- Cross-references added to `wp-audit`, `wp-deploy`, `wp-backup` skills
+- WP REST Bridge: 41 → 71 total tools
+- Version bumps: plugin.json + package.json → 1.8.0 (25 skills, 9 agents)
+
 ## [1.7.2] - 2026-02-28
 
 ### Changed

package/agents/wp-ecommerce-manager.md

@@ -0,0 +1,136 @@
+---
+name: wp-ecommerce-manager
+color: orange
+description: |
+  Use this agent when the user needs to manage a WooCommerce store: products, orders,
+  customers, coupons, analytics, or store configuration.
+
+  <example>
+  Context: User wants to check recent orders and update their status.
+  user: "Mostrami gli ordini degli ultimi 7 giorni e segna come completati quelli spediti"
+  assistant: "I'll use the wp-ecommerce-manager agent to list recent orders and update their status."
+  <commentary>Order management with status updates requires the WooCommerce agent for safe multi-step operations.</commentary>
+  </example>
+
+  <example>
+  Context: User needs to set up a product catalog.
+  user: "Crea 5 prodotti nel catalogo WooCommerce con variazioni di taglia"
+  assistant: "I'll use the wp-ecommerce-manager agent to create variable products with size variations."
+  <commentary>Bulk product creation with variations is a multi-step WooCommerce operation.</commentary>
+  </example>
+
+  <example>
+  Context: User wants a sales performance overview.
+  user: "Fammi un report delle vendite di questo mese con i prodotti piu venduti"
+  assistant: "I'll use the wp-ecommerce-manager agent to generate a monthly sales report with top sellers."
+  <commentary>Sales analytics combining multiple report endpoints requires the WooCommerce agent.</commentary>
+  </example>
+
+model: inherit
+tools: Read, Grep, Glob, Bash, WebFetch, WebSearch
+---
+
+# WooCommerce E-Commerce Manager
+
+Specialized agent for WooCommerce store management. Handles product catalog, order processing, customer management, coupon marketing, sales analytics, and store configuration through the WP REST Bridge WooCommerce tools (30 MCP tools, `wc/v3` namespace).
+
+## Available MCP Tool Sets
+
+### 1. WP REST Bridge — WooCommerce (wc_ prefix)
+
+All tools require WooCommerce credentials in `WP_SITES_CONFIG` (`wc_consumer_key` + `wc_consumer_secret`).
+
+- **Products (7)**: `wc_list_products`, `wc_get_product`, `wc_create_product`, `wc_update_product`, `wc_delete_product`, `wc_list_product_categories`, `wc_list_product_variations`
+- **Orders (6)**: `wc_list_orders`, `wc_get_order`, `wc_update_order_status`, `wc_list_order_notes`, `wc_create_order_note`, `wc_create_refund`
+- **Customers (4)**: `wc_list_customers`, `wc_get_customer`, `wc_create_customer`, `wc_update_customer`
+- **Coupons (4)**: `wc_list_coupons`, `wc_get_coupon`, `wc_create_coupon`, `wc_delete_coupon`
+- **Reports (5)**: `wc_get_sales_report`, `wc_get_top_sellers`, `wc_get_orders_totals`, `wc_get_products_totals`, `wc_get_customers_totals`
+- **Settings (4)**: `wc_list_payment_gateways`, `wc_list_shipping_zones`, `wc_get_tax_classes`, `wc_get_system_status`
+
+### 2. WP REST Bridge — WordPress (wp/v2)
+
+For cross-referencing with WordPress content:
+- **Content**: `list_content`, `get_content`, `create_content` (pages for shop, cart, checkout)
+- **Plugins**: `list_plugins` (verify WooCommerce active)
+- **Media**: `upload_media` (product images)
+
+## Operating Procedures
+
+### Product Catalog Setup
+
+1. Verify WooCommerce active: `list_plugins` → check woocommerce status
+2. Create categories: use WooCommerce admin or REST API
+3. Create products: `wc_create_product` with name, price, description, categories, images
+4. For variable products: create parent (type: 'variable') → add attributes → create variations
+5. Verify: `wc_list_products` with status filter
+
+### Order Processing
+
+1. List pending orders: `wc_list_orders` with status='processing'
+2. Review order details: `wc_get_order` for each order
+3. Update status: `wc_update_order_status` (processing → completed)
+4. Add notes: `wc_create_order_note` for tracking info
+5. Handle refunds: `wc_create_refund` with amount and reason
+
+### Sales Analytics
+
+1. Get sales overview: `wc_get_sales_report` with period or date range
+2. Get top products: `wc_get_top_sellers`
+3. Get totals: `wc_get_orders_totals` + `wc_get_products_totals` + `wc_get_customers_totals`
+4. Present as structured report with KPIs (AOV, revenue trend, top sellers)
+
+### Coupon Campaign
+
+1. Define strategy: discount type (percent/fixed), target, limits
+2. Create coupon: `wc_create_coupon` with rules
+3. Verify: `wc_get_coupon` to confirm settings
+4. Monitor: `wc_list_coupons` to check usage_count
+
+### Store Health Check
+
+1. System status: `wc_get_system_status` (WC version, environment, DB)
+2. Payment gateways: `wc_list_payment_gateways` (verify active gateways)
+3. Shipping: `wc_list_shipping_zones` (verify zone coverage)
+4. Tax: `wc_get_tax_classes` (verify tax configuration)
+
+## Report Format
+
+```
+## WooCommerce Store Report — [Site Name]
+
+### Sales Summary (period)
+- Total Sales: $X,XXX
+- Net Sales: $X,XXX
+- Orders: XX
+- Average Order Value: $XX.XX
+- Items Sold: XX
+
+### Top Sellers
+1. Product Name — XX units ($X,XXX revenue)
+2. ...
+
+### Order Status
+- Processing: XX
+- Completed: XX
+- On Hold: XX
+- Refunded: XX
+
+### Recommendations
+- [Actionable items based on data]
+```
+
+## Safety Rules
+
+- NEVER delete products without explicit user confirmation
+- NEVER process refunds without verifying order details and getting user approval
+- ALWAYS confirm before changing order status (especially to cancelled/refunded)
+- ALWAYS verify WooCommerce credentials are configured before attempting operations
+- NEVER expose Consumer Key/Secret in output or logs
+- When creating bulk products, confirm the list with user before executing
+
+## Related Skills
+
+- `wp-woocommerce` — Decision tree and reference files for all WC operations
+- `wp-deploy` — Deploy store changes to production
+- `wp-backup` — Backup store database before bulk operations
+- `wp-audit` — Security and performance audit for WC stores

package/agents/wp-site-manager.md

@@ -102,6 +102,31 @@ When asked about site status:
 - Always announce which site you're operating on
 - When comparing across sites, switch and collect data sequentially
 
+### Multisite Network Management
+For WordPress Multisite networks (sites with `is_multisite: true` in WP_SITES_CONFIG):
+
+**Prerequisites check:**
+1. Verify the site is multisite: `ms_list_sites` (will error if not multisite)
+2. Verify wp-cli access is configured (`wp_path` in config)
+
+**Sub-site operations:**
+- List sub-sites → `ms_list_sites`
+- Create sub-site → `ms_create_site` (slug, title, admin email)
+- Activate/deactivate → `ms_activate_site`
+- Delete → `ms_delete_site` (requires `confirm: true`)
+
+**Network administration:**
+- List plugins with network status → `ms_list_network_plugins`
+- Network-activate → `ms_network_activate_plugin`
+- Network-deactivate → `ms_network_deactivate_plugin`
+- List Super Admins → `ms_list_super_admins`
+- Network settings → `ms_get_network_settings`
+
+**Safety rules for multisite:**
+- NEVER delete blog_id 1 (main site)
+- ALWAYS confirm before network-activating plugins (affects ALL sites)
+- Announce which network you're operating on when multiple multisite networks are configured
+
 ### Safety Rules
 - NEVER delete content without explicit user confirmation
 - NEVER deactivate plugins without listing dependencies first
@@ -121,3 +146,5 @@ For domain-specific tasks, delegate to specialized agents:
 | Performance optimization | `wp-performance-optimizer` | Speed analysis and optimization |
 | Content creation / SEO | `wp-content-strategist` | Content workflows and SEO |
 | Deploy to production | `wp-deployment-engineer` | Plugin, theme, site deployment |
+| WooCommerce store management | `wp-ecommerce-manager` | Products, orders, customers, coupons, analytics |
+| Multisite network management | `wp-site-manager` (this agent) | Sub-sites, network plugins, Super Admin — see section above |

package/docs/plans/2026-02-28-multisite-v1.9.0-design.md

@@ -0,0 +1,258 @@
+# v1.9.0 Multisite — Design Document
+
+**Data:** 2026-02-28
+**Stato:** Approvato
+**Baseline:** v1.8.0 (25 skill, 9 agent, 71 MCP tools, 13 detection scripts)
+
+---
+
+## Contesto
+
+WordPress Multisite permette di gestire un network di siti da una singola installazione. Le REST API standard di WordPress NON espongono endpoint per operazioni multisite (creazione/eliminazione sub-siti, network activation, Super Admin management). Per questo motivo, i tool MCP usano **WP-CLI** come backend di esecuzione.
+
+## Decisioni architetturali
+
+| Decisione | Scelta | Motivazione |
+|-----------|--------|-------------|
+| Backend esecuzione | WP-CLI via child_process | WordPress REST API non ha endpoint multisite |
+| Contesto esecuzione | Locale + SSH remoto | Copre sia ambienti dev che produzione |
+| Approccio ibrido | REST dove disponibile, wp-cli per network-only | Minimizza dipendenza SSH, massima compatibilita |
+| Agent | Estensione wp-site-manager (no nuovo agent) | Come da roadmap, multisite e gestione siti |
+| Modulo wp-cli | Dedicato (wpcli.ts) | Riusabile per v2.0 CI/CD, DRY |
+
+---
+
+## Componenti
+
+| Tipo | Nome | Descrizione |
+|------|------|-------------|
+| Modulo TS | `wpcli.ts` | Esecuzione wp-cli locale/SSH con auto-detection |
+| MCP Tools | `multisite-sites.ts` (5) | CRUD sub-siti via wp-cli |
+| MCP Tools | `multisite-network.ts` (5) | Network admin, misto REST + wp-cli |
+| Skill | `wp-multisite` | SKILL.md + 6 reference files |
+| Detection | `multisite_inspect.mjs` | Rileva multisite, sub-siti, domain mapping |
+| Agent update | `wp-site-manager.md` | Nuova sezione Multisite Network Management |
+
+---
+
+## Architettura TypeScript
+
+### SiteConfig estesa (`types.ts`)
+
+Nuovi campi opzionali aggiunti a SiteConfig:
+
+```typescript
+// WP-CLI access (optional, for multisite and CLI operations)
+wp_path?: string;        // Local WP installation path (e.g., ~/Studio/mysite, /var/www/wordpress)
+ssh_host?: string;       // SSH hostname for remote wp-cli
+ssh_user?: string;       // SSH username
+ssh_key?: string;        // Path to SSH private key
+ssh_port?: number;       // SSH port (default: 22)
+is_multisite?: boolean;  // Flag: this site is a multisite network
+```
+
+### Nuovo tipo `WPNetworkSite`
+
+```typescript
+interface WPNetworkSite {
+  blog_id: number;
+  url: string;
+  domain: string;
+  path: string;
+  registered: string;
+  last_updated: string;
+  public: boolean;
+  archived: boolean;
+  mature: boolean;
+  spam: boolean;
+  deleted: boolean;
+}
+```
+
+### Nuovo modulo `wpcli.ts`
+
+Funzioni esportate:
+
+| Funzione | Firma | Scopo |
+|----------|-------|-------|
+| `executeWpCli` | `(command: string, siteId?: string) => Promise<string>` | Esegue wp-cli locale o SSH, restituisce stdout |
+| `hasWpCli` | `(siteId?: string) => boolean` | Verifica se wp-cli e configurato |
+| `isMultisite` | `(siteId?: string) => boolean` | Verifica flag is_multisite |
+
+Logica `executeWpCli`:
+1. Risolve siteId (default: activeSiteId)
+2. Recupera SiteConfig
+3. Se `wp_path` presente e NO `ssh_host` → locale: `cd {wp_path} && wp {command} --format=json`
+4. Se `ssh_host` presente → SSH: `ssh -i {ssh_key} -p {ssh_port} {ssh_user}@{ssh_host} 'cd {wp_path} && wp {command} --format=json'`
+5. Se nessuno configurato → throw Error con messaggio chiaro
+6. Timeout: 30 secondi
+7. Parse stdout, gestione stderr per errori
+
+---
+
+## MCP Tools (10 totali)
+
+### `multisite-sites.ts` — 5 tool (tutti wp-cli)
+
+| Tool | WP-CLI Command | Input | Output |
+|------|---------------|-------|--------|
+| `ms_list_sites` | `wp site list` | `site_id?` | Array WPNetworkSite |
+| `ms_get_site` | `wp site list --blog_id={id}` | `blog_id, site_id?` | WPNetworkSite singolo |
+| `ms_create_site` | `wp site create --slug --title --email` | `slug, title, email, site_id?` | blog_id creato |
+| `ms_activate_site` | `wp site activate/deactivate {id}` | `blog_id, active: boolean, site_id?` | Conferma |
+| `ms_delete_site` | `wp site delete {id} --yes` | `blog_id, confirm: true, site_id?` | Conferma |
+
+### `multisite-network.ts` — 5 tool (misto REST + wp-cli)
+
+| Tool | Metodo | Input | Output |
+|------|--------|-------|--------|
+| `ms_list_network_plugins` | REST `list_plugins` | `site_id?` | Plugin con flag network_active |
+| `ms_network_activate_plugin` | wp-cli `wp plugin activate --network` | `plugin_slug, site_id?` | Conferma |
+| `ms_network_deactivate_plugin` | wp-cli `wp plugin deactivate --network` | `plugin_slug, site_id?` | Conferma |
+| `ms_list_super_admins` | wp-cli `wp super-admin list` | `site_id?` | Array username |
+| `ms_get_network_settings` | wp-cli `wp network meta list 1` | `site_id?` | Network settings object |
+
+### Safety gates
+
+- Tutti i tool verificano `isMultisite(siteId)` — errore se non multisite
+- `ms_delete_site` richiede `confirm: true` esplicito
+- `ms_network_activate_plugin` e `ms_network_deactivate_plugin` loggano il plugin e il siteId
+- Timeout 30s per ogni comando wp-cli
+
+---
+
+## Skill `wp-multisite`
+
+### Struttura
+
+```
+skills/wp-multisite/
+├── SKILL.md
+├── references/
+│   ├── network-setup.md
+│   ├── site-management.md
+│   ├── domain-mapping.md
+│   ├── network-plugins.md
+│   ├── user-roles.md
+│   └── migration-multisite.md
+└── scripts/
+    └── multisite_inspect.mjs
+```
+
+### SKILL.md — Contenuto
+
+- Trigger phrases: multisite, network, sub-site, domain mapping, super admin
+- Prerequisites: wp-cli, is_multisite flag, wp_path/ssh_host configurati
+- Decision tree: 10 tool ms_* con condizioni
+- Reference file links
+
+### Reference files (6)
+
+| File | Contenuto |
+|------|-----------|
+| `network-setup.md` | Sub-directory vs sub-domain, wp-config.php constants, MULTISITE/SUBDOMAIN_INSTALL |
+| `site-management.md` | CRUD sub-siti, bulk operations, template sites |
+| `domain-mapping.md` | Domini custom per sub-siti, SSL, DNS CNAME, sunrise.php |
+| `network-plugins.md` | Network-activated vs per-site, must-use plugins, conflict resolution |
+| `user-roles.md` | Super Admin capabilities, site-level roles, add/remove super admin |
+| `migration-multisite.md` | Single-site → multisite, multisite → single, database tables |
+
+### Detection script `multisite_inspect.mjs`
+
+Controlla:
+1. `wp-config.php` per costanti `MULTISITE`, `SUBDOMAIN_INSTALL`, `DOMAIN_CURRENT_SITE`, `PATH_CURRENT_SITE`
+2. `WP_SITES_CONFIG` env var per flag `is_multisite`
+3. Presenza di `wp-content/sunrise.php` (domain mapping avanzato)
+4. `.htaccess` per rewrite rules multisite (sub-directory pattern)
+
+---
+
+## Agent update: `wp-site-manager.md`
+
+Nuova sezione **"## Multisite Network Management"** (~25 righe):
+
+- Prerequisiti: verifica `is_multisite` e wp-cli
+- Procedure: lista sub-siti, crea sub-sito, gestione plugin network, domain mapping
+- Tool reference: 10 tool `ms_*`
+- Safety: conferma prima di delete, verificare Super Admin
+
+---
+
+## Router `decision-tree.md` (v6)
+
+Step 0 — aggiunta keyword "multisite" e "network" alla categoria operations.
+
+Step 2b (operations) — nuova entry:
+```
+"multisite, network, sub-sito, sub-site, domain mapping, super admin, network activate"
+  → wp-multisite skill + wp-site-manager agent
+```
+
+---
+
+## Cross-references
+
+| File | Aggiunta |
+|------|----------|
+| `wp-wpcli-and-ops/SKILL.md` | "Per operazioni multisite, vedi `wp-multisite` skill" |
+| `wp-security/SKILL.md` | "Per Super Admin e capabilities multisite, vedi `wp-multisite` skill" |
+
+---
+
+## Config esempio
+
+```json
+[
+  {
+    "id": "mynetwork",
+    "url": "https://network.example.com",
+    "username": "superadmin",
+    "password": "xxxx xxxx xxxx xxxx",
+    "wp_path": "/var/www/wordpress",
+    "ssh_host": "network.example.com",
+    "ssh_user": "deploy",
+    "ssh_key": "~/.ssh/id_rsa",
+    "is_multisite": true
+  },
+  {
+    "id": "local-multisite",
+    "url": "http://multisite.local",
+    "username": "admin",
+    "password": "yyyy yyyy yyyy yyyy",
+    "wp_path": "~/Studio/multisite",
+    "is_multisite": true
+  }
+]
+```
+
+Primo sito: remoto via SSH. Secondo: locale senza SSH.
+
+---
+
+## Version bump
+
+- `plugin.json` → v1.9.0, description aggiornata (26 skill, 9 agent)
+- `package.json` → v1.9.0, keywords: +multisite, +network
+- `CHANGELOG.md` → entry v1.9.0
+
+---
+
+## File da creare/modificare
+
+| File | Azione | Note |
+|------|--------|------|
+| `servers/wp-rest-bridge/src/wpcli.ts` | **NUOVO** | Modulo WP-CLI execution |
+| `servers/wp-rest-bridge/src/types.ts` | Modifica | +WPNetworkSite, +SiteConfig fields |
+| `servers/wp-rest-bridge/src/tools/multisite-sites.ts` | **NUOVO** | 5 tool gestione sub-siti |
+| `servers/wp-rest-bridge/src/tools/multisite-network.ts` | **NUOVO** | 5 tool network admin |
+| `servers/wp-rest-bridge/src/tools/index.ts` | Modifica | Registrazione 10 nuovi tool |
+| `skills/wp-multisite/SKILL.md` | **NUOVO** | Skill principale |
+| `skills/wp-multisite/references/*.md` (6 file) | **NUOVO** | 6 reference files |
+| `skills/wp-multisite/scripts/multisite_inspect.mjs` | **NUOVO** | Detection script |
+| `agents/wp-site-manager.md` | Modifica | +sezione Multisite |
+| `skills/wordpress-router/references/decision-tree.md` | Modifica | Router v6 |
+| `skills/wp-wpcli-and-ops/SKILL.md` | Modifica | Cross-ref |
+| `skills/wp-security/SKILL.md` | Modifica | Cross-ref |
+| `.claude-plugin/plugin.json` | Modifica | Version bump |
+| `package.json` | Modifica | Version bump |
+| `CHANGELOG.md` | Modifica | Entry v1.9.0 |