mcp-wordpress 2.4.2 → 2.5.0

package/src/types/wordpress.ts

@@ -4,6 +4,20 @@
  * Comprehensive TypeScript definitions for WordPress REST API v2 responses
  */
 
+// Authentication method constants
+export const AUTH_METHODS = {
+  APP_PASSWORD: "app-password",
+  JWT: "jwt",
+  BASIC: "basic",
+  API_KEY: "api-key",
+  COOKIE: "cookie",
+} as const;
+
+export type AuthMethod = (typeof AUTH_METHODS)[keyof typeof AUTH_METHODS];
+
+// WordPress metadata type - can contain various primitive values and nested objects
+export type WordPressMeta = Record<string, unknown> | unknown[];
+
 // Common WordPress API response patterns
 export interface WordPressRendered {
   rendered: string;
@@ -31,15 +45,7 @@ export interface WordPressLinks {
 }
 
 // Post Types
-export type PostStatus =
-  | "publish"
-  | "future"
-  | "draft"
-  | "pending"
-  | "private"
-  | "trash"
-  | "auto-draft"
-  | "inherit";
+export type PostStatus = "publish" | "future" | "draft" | "pending" | "private" | "trash" | "auto-draft" | "inherit";
 export type PostFormat =
   | "standard"
   | "aside"
@@ -75,7 +81,7 @@ export interface WordPressPost {
   sticky: boolean;
   template: string;
   format: PostFormat;
-  meta: Record<string, any>;
+  meta: WordPressMeta;
   categories: number[];
   tags: number[];
   _links?: WordPressLinks;
@@ -100,7 +106,7 @@ export interface WordPressPage {
   comment_status: CommentStatus;
   ping_status: PingStatus;
   menu_order: number;
-  meta: Record<string, any>;
+  meta: WordPressMeta;
   template: string;
   parent: number;
   _links?: WordPressLinks;
@@ -156,7 +162,7 @@ export interface WordPressMedia {
   comment_status: CommentStatus;
   ping_status: PingStatus;
   template: string;
-  meta: Record<string, any>;
+  meta: WordPressMeta;
   description: WordPressRendered;
   caption: WordPressRendered;
   alt_text: string;
@@ -169,12 +175,7 @@ export interface WordPressMedia {
 }
 
 // User Types
-export type UserRole =
-  | "administrator"
-  | "editor"
-  | "author"
-  | "contributor"
-  | "subscriber";
+export type UserRole = "administrator" | "editor" | "author" | "contributor" | "subscriber";
 
 export interface WordPressUser {
   id: number;
@@ -194,7 +195,7 @@ export interface WordPressUser {
   capabilities: Record<string, boolean>;
   extra_capabilities: Record<string, boolean>;
   avatar_urls: Record<string, string>;
-  meta: Record<string, any>;
+  meta: WordPressMeta;
   _links?: WordPressLinks;
 }
 
@@ -218,7 +219,7 @@ export interface WordPressComment {
   status: "approved" | "unapproved" | "spam" | "trash";
   type: CommentType;
   author_avatar_urls: Record<string, string>;
-  meta: Record<string, any>;
+  meta: WordPressMeta;
   _links?: WordPressLinks;
 }
 
@@ -232,7 +233,7 @@ export interface WordPressCategory {
   slug: string;
   taxonomy: string;
   parent: number;
-  meta: Record<string, any>;
+  meta: WordPressMeta;
   _links?: WordPressLinks;
 }
 
@@ -244,7 +245,7 @@ export interface WordPressTag {
   name: string;
   slug: string;
   taxonomy: string;
-  meta: Record<string, any>;
+  meta: WordPressMeta;
   _links?: WordPressLinks;
 }
 
@@ -304,8 +305,8 @@ export interface WordPressAPIErrorResponse {
   message: string;
   data?: {
     status: number;
-    params?: Record<string, any>;
-    details?: Record<string, any>;
+    params?: Record<string, unknown>;
+    details?: Record<string, unknown>;
   };
 }
 
@@ -333,6 +334,7 @@ export interface PostQueryParams extends PaginationParams {
   tags?: number[];
   tags_exclude?: number[];
   sticky?: boolean;
+  [key: string]: unknown;
 }
 
 export interface MediaQueryParams extends PaginationParams {
@@ -392,7 +394,7 @@ export interface CreatePostRequest {
   comment_status?: CommentStatus;
   ping_status?: PingStatus;
   format?: PostFormat;
-  meta?: Record<string, any>;
+  meta?: WordPressMeta;
   sticky?: boolean;
   template?: string;
   categories?: number[];
@@ -416,7 +418,7 @@ export interface CreatePageRequest {
   comment_status?: CommentStatus;
   ping_status?: PingStatus;
   menu_order?: number;
-  meta?: Record<string, any>;
+  meta?: WordPressMeta;
   parent?: number;
   template?: string;
   date?: string;
@@ -443,11 +445,10 @@ export interface CreateUserRequest {
   url?: string;
   locale?: string;
   roles?: UserRole[];
-  meta?: Record<string, any>;
+  meta?: WordPressMeta;
 }
 
-export interface UpdateUserRequest
-  extends Partial<Omit<CreateUserRequest, "username">> {
+export interface UpdateUserRequest extends Partial<Omit<CreateUserRequest, "username">> {
   id: number;
 }
 
@@ -462,11 +463,10 @@ export interface CreateCommentRequest {
   date?: string;
   date_gmt?: string;
   status?: "approved" | "unapproved";
-  meta?: Record<string, any>;
+  meta?: WordPressMeta;
 }
 
-export interface UpdateCommentRequest
-  extends Partial<Omit<CreateCommentRequest, "status">> {
+export interface UpdateCommentRequest extends Partial<Omit<CreateCommentRequest, "status">> {
   id: number;
   status?: "approved" | "unapproved" | "spam" | "trash";
 }
@@ -476,7 +476,7 @@ export interface CreateCategoryRequest {
   description?: string;
   slug?: string;
   parent?: number;
-  meta?: Record<string, any>;
+  meta?: WordPressMeta;
 }
 
 export interface UpdateCategoryRequest extends Partial<CreateCategoryRequest> {
@@ -487,7 +487,7 @@ export interface CreateTagRequest {
   name: string;
   description?: string;
   slug?: string;
-  meta?: Record<string, any>;
+  meta?: WordPressMeta;
 }
 
 export interface UpdateTagRequest extends Partial<CreateTagRequest> {
@@ -517,3 +517,25 @@ export interface UpdateMediaRequest {
   status?: PostStatus;
   author?: number;
 }
+
+// Site Information
+export interface WordPressSiteInfo {
+  name: string;
+  description: string;
+  url: string;
+  home: string;
+  gmt_offset: number;
+  timezone_string: string;
+  namespaces: string[];
+  authentication: Record<string, unknown>;
+  routes: Record<string, unknown>;
+}
+
+// Search Results
+export interface WordPressSearchResult {
+  id: number;
+  title: string;
+  url: string;
+  type: string;
+  subtype: string;
+}

package/src/utils/debug.ts

@@ -6,45 +6,44 @@
  */
 
 import type { DebugInfo } from "../types/index.js";
+import { config } from "../config/Config.js";
 
 // Log levels
 export type LogLevel = "debug" | "info" | "warn" | "error";
 
 // Logger interface
 export interface Logger {
-  log(...args: any[]): void;
-  info(...args: any[]): void;
-  warn(...args: any[]): void;
-  error(...args: any[]): void;
+  log(...args: unknown[]): void;
+  info(...args: unknown[]): void;
+  warn(...args: unknown[]): void;
+  error(...args: unknown[]): void;
 }
 
 // Enhanced logger with structured logging
 export interface StructuredLogger extends Logger {
   logStructured(info: DebugInfo): void;
-  child(context: Record<string, any>): StructuredLogger;
+  child(context: Record<string, unknown>): StructuredLogger;
 }
 
+import { ConfigHelpers } from "../config/Config.js";
+
 // Check if debug mode is enabled
-const isDebugMode = (): boolean =>
-  (process.env.DEBUG === "true" || process.env.NODE_ENV === "development") &&
-  process.env.NODE_ENV !== "test";
+const isDebugMode = (): boolean => ConfigHelpers.shouldDebug();
 
 // Get current timestamp
 const getTimestamp = (): string => new Date().toISOString();
 
 // Format log message with timestamp and level
-const formatMessage = (level: LogLevel, args: any[]): string => {
+const formatMessage = (level: LogLevel, args: unknown[]): string => {
   const timestamp = getTimestamp();
   const prefix = `[${timestamp}] [${level.toUpperCase()}]`;
   return `${prefix} ${args
-    .map((arg) =>
-      typeof arg === "object" ? JSON.stringify(arg, null, 2) : String(arg),
-    )
+    .map((arg) => (typeof arg === "object" ? JSON.stringify(arg, null, 2) : String(arg)))
     .join(" ")}`;
 };
 
 // Handle circular references in objects
-const safeStringify = (obj: any): string => {
+const safeStringify = (obj: unknown): string => {
   try {
     return JSON.stringify(
       obj,
@@ -69,25 +68,25 @@ const safeStringify = (obj: any): string => {
  * Debug logger that only outputs in debug mode
  */
 export const debug: Logger = {
-  log: (...args: any[]): void => {
+  log: (...args: unknown[]): void => {
     if (isDebugMode()) {
       console.error(formatMessage("debug", args)); // Use stderr for debug to avoid STDIO interference
     }
   },
 
-  info: (...args: any[]): void => {
+  info: (...args: unknown[]): void => {
     if (isDebugMode()) {
       console.error(formatMessage("info", args));
     }
   },
 
-  warn: (...args: any[]): void => {
+  warn: (...args: unknown[]): void => {
     if (isDebugMode()) {
       console.error(formatMessage("warn", args));
     }
   },
 
-  error: (...args: any[]): void => {
+  error: (...args: unknown[]): void => {
     if (isDebugMode()) {
       console.error(formatMessage("error", args));
     }
@@ -108,44 +107,40 @@ export const silent: Logger = {
  * Enhanced structured logger
  */
 class StructuredLoggerImpl implements StructuredLogger {
-  private context: Record<string, any>;
+  private context: Record<string, unknown>;
   private enabled: boolean;
 
-  constructor(context: Record<string, any> = {}, enabled = isDebugMode()) {
+  constructor(context: Record<string, unknown> = {}, enabled = isDebugMode()) {
     this.context = context;
     this.enabled = enabled;
   }
 
-  private output(level: LogLevel, args: any[]): void {
+  private output(level: LogLevel, args: unknown[]): void {
     if (!this.enabled) return;
 
     const debugInfo: DebugInfo = {
       timestamp: Date.now(),
       level,
-      message: args
-        .map((arg) =>
-          typeof arg === "object" ? safeStringify(arg) : String(arg),
-        )
-        .join(" "),
+      message: args.map((arg) => (typeof arg === "object" ? safeStringify(arg) : String(arg))).join(" "),
       ...(Object.keys(this.context).length > 0 && { context: this.context }),
     };
 
     console.error(safeStringify(debugInfo));
   }
 
-  log(...args: any[]): void {
+  log(...args: unknown[]): void {
     this.output("debug", args);
   }
 
-  info(...args: any[]): void {
+  info(...args: unknown[]): void {
     this.output("info", args);
   }
 
-  warn(...args: any[]): void {
+  warn(...args: unknown[]): void {
     this.output("warn", args);
   }
 
-  error(...args: any[]): void {
+  error(...args: unknown[]): void {
     this.output("error", args);
   }
 
@@ -160,20 +155,15 @@ class StructuredLoggerImpl implements StructuredLogger {
     console.error(safeStringify(enhancedInfo));
   }
 
-  child(context: Record<string, any>): StructuredLogger {
-    return new StructuredLoggerImpl(
-      { ...this.context, ...context },
-      this.enabled,
-    );
+  child(context: Record<string, unknown>): StructuredLogger {
+    return new StructuredLoggerImpl({ ...this.context, ...context }, this.enabled);
   }
 }
 
 /**
  * Create a structured logger instance
  */
-export const createStructuredLogger = (
-  context: Record<string, any> = {},
-): StructuredLogger => {
+export const createStructuredLogger = (context: Record<string, unknown> = {}): StructuredLogger => {
   return new StructuredLoggerImpl(context);
 };
 
@@ -185,9 +175,7 @@ export const logger: Logger = debug;
 /**
  * Create a logger with context
  */
-export const createLogger = (
-  context: Record<string, any> = {},
-): StructuredLogger => {
+export const createLogger = (context: Record<string, unknown> = {}): StructuredLogger => {
   return createStructuredLogger(context);
 };
 
@@ -209,9 +197,7 @@ export const startTimer = (label?: string): PerformanceTimer => {
 
     endWithLog(message = "Operation"): number {
       const duration = Date.now() - start;
-      debug.info(
-        `${message} completed in ${duration}ms${label ? ` [${label}]` : ""}`,
-      );
+      debug.info(`${message} completed in ${duration}ms${label ? ` [${label}]` : ""}`);
       return duration;
     },
   };
@@ -220,10 +206,7 @@ export const startTimer = (label?: string): PerformanceTimer => {
 /**
  * Log error with stack trace
  */
-export const logError = (
-  error: Error | string,
-  context?: Record<string, any>,
-): void => {
+export const logError = (error: Error | string, context?: Record<string, unknown>): void => {
   if (typeof error === "string") {
     debug.error(error, context);
   } else {
@@ -251,32 +234,67 @@ export const logIf = (condition: boolean, level: LogLevel = "debug") => {
 };
 
 /**
- * Type-safe environment variable getter
+ * Type-safe environment variable getter with security logging
  */
-export const getEnvVar = (
-  key: string,
-  defaultValue?: string,
-): string | undefined => {
+export const getEnvVar = (key: string, defaultValue?: string): string | undefined => {
   const value = process.env[key];
   if (value === undefined && defaultValue !== undefined) {
-    debug.warn(
-      `Environment variable ${key} not found, using default: ${defaultValue}`,
-    );
+    // Don't log sensitive environment variable names in production
+    const isSecretVar = /password|secret|token|key|auth/i.test(key);
+    if (!isSecretVar || !config().app.isProduction) {
+      debug.warn(`Environment variable ${key} not found, using default`);
+    }
     return defaultValue;
   }
   return value;
 };
 
 /**
- * Validate required environment variables
+ * Validate required environment variables with secure error messages
  */
 export const validateEnvVars = (required: string[]): void => {
   const missing = required.filter((key) => !process.env[key]);
   if (missing.length > 0) {
-    const error = new Error(
-      `Missing required environment variables: ${missing.join(", ")}`,
-    );
+    // In production, don't expose which specific env vars are missing
+    const errorMessage = config().app.isProduction
+      ? `Missing ${missing.length} required environment variable(s)`
+      : `Missing required environment variables: ${missing.join(", ")}`;
+    const error = new Error(errorMessage);
     logError(error);
     throw error;
   }
 };
+
+/**
+ * Sanitize environment variable for logging
+ */
+export const sanitizeEnvValue = (key: string, value: string): string => {
+  const sensitiveKeys = /password|secret|token|key|auth|credential/i;
+
+  if (sensitiveKeys.test(key)) {
+    if (!value || value.length === 0) {
+      return "[EMPTY]";
+    }
+    return `[REDACTED:${value.length}chars]`;
+  }
+
+  return value;
+};
+
+/**
+ * Get sanitized environment summary for debugging
+ */
+export const getEnvSummary = (keys: string[]): Record<string, string> => {
+  const summary: Record<string, string> = {};
+
+  for (const key of keys) {
+    const value = process.env[key];
+    if (value !== undefined) {
+      summary[key] = sanitizeEnvValue(key, value);
+    } else {
+      summary[key] = "[NOT_SET]";
+    }
+  }
+
+  return summary;
+};

package/src/utils/enhancedError.ts

@@ -2,7 +2,7 @@ import { getErrorMessage } from "./error.js";
 
 export interface ErrorContext {
   operation: string;
-  parameters?: Record<string, any>;
+  parameters?: Record<string, unknown>;
   suggestions?: string[];
   troubleshooting?: string[];
 }
@@ -54,7 +54,7 @@ export class ErrorHandlers {
   /**
    * Handle post not found errors
    */
-  static postNotFound(postId: number, originalError: any): EnhancedError {
+  static postNotFound(postId: number, originalError: unknown): EnhancedError {
     const errorMessage = getErrorMessage(originalError);
 
     return new EnhancedError(`Post with ID ${postId} not found`, {
@@ -78,7 +78,7 @@ export class ErrorHandlers {
   /**
    * Handle authentication errors
    */
-  static authenticationFailed(originalError: any): EnhancedError {
+  static authenticationFailed(originalError: unknown): EnhancedError {
     const errorMessage = getErrorMessage(originalError);
 
     return new EnhancedError("Authentication failed", {
@@ -141,7 +141,7 @@ export class ErrorHandlers {
   /**
    * Handle permission errors
    */
-  static permissionDenied(operation: string, originalError: any): EnhancedError {
+  static permissionDenied(operation: string, originalError: unknown): EnhancedError {
     const errorMessage = getErrorMessage(originalError);
 
     return new EnhancedError(`Permission denied for ${operation}`, {
@@ -163,7 +163,7 @@ export class ErrorHandlers {
   /**
    * Handle network/connection errors
    */
-  static connectionError(originalError: any): EnhancedError {
+  static connectionError(originalError: unknown): EnhancedError {
     const errorMessage = getErrorMessage(originalError);
 
     return new EnhancedError("Failed to connect to WordPress site", {
@@ -185,7 +185,7 @@ export class ErrorHandlers {
   /**
    * Handle validation errors
    */
-  static validationError(field: string, value: any, expectedType: string): EnhancedError {
+  static validationError(field: string, value: unknown, expectedType: string): EnhancedError {
     return new EnhancedError(`Invalid ${field}: expected ${expectedType}, got ${typeof value}`, {
       operation: "validation",
       parameters: { field, value, expectedType },
@@ -205,7 +205,7 @@ export class ErrorHandlers {
   /**
    * Handle rate limiting errors
    */
-  static rateLimitExceeded(originalError: any): EnhancedError {
+  static rateLimitExceeded(originalError: unknown): EnhancedError {
     const errorMessage = getErrorMessage(originalError);
 
     return new EnhancedError("Rate limit exceeded", {
@@ -227,7 +227,7 @@ export class ErrorHandlers {
   /**
    * Generic error handler with basic suggestions
    */
-  static generic(operation: string, originalError: any): EnhancedError {
+  static generic(operation: string, originalError: unknown): EnhancedError {
     const errorMessage = getErrorMessage(originalError);
 
     return new EnhancedError(`Failed to ${operation}`, {