Stonewright v1.0.0-alpha.64

Stonewright 1.0.0-alpha.64

Release date: 2026-06-17

This alpha fixes fresh plugin activation on MySQL variants that reject defaults
on TEXT columns, and makes Codex setup first-class so new users can refresh
the companion after releases without stale MCP tool lists.

Highlights

• Fixes the stonewright_skills table schema by removing the default from the
  description text column.
• Adds a Codex client snippet in the admin Configuration page using
  ~/.codex/config.toml / .codex/config.toml TOML syntax.
• Adds Codex docs for restarting/reloading the IDE MCP session, checking /mcp,
  and rerunning stonewright-setup-profile plus
  stonewright-wordpress-mcp-status after releases or skill syncs.
• Synchronizes @stonewright/companion package version and runtime
  APP_VERSION so status responses no longer report an old companion build.
• Updates public descriptions to position Stonewright as WordPress MCP builder
  tools for Elementor, Gutenberg, content models, PHP runtime execution, and
  tokenized WP-CLI.

Control Notes

• Full PHP runtime access remains first-class through stonewright/php-execute.
• WP-CLI remains tokenized through the companion.
• Production-safe mode and destructive confirmation-token behavior are
  unchanged.

Release Assets

• stonewright-1.0.0-alpha.64.zip: installable WordPress plugin package with
  production Composer dependencies.
• stonewright-companion-1.0.0-alpha.64.tgz: Node companion package for setup
  profiles, PHP runtime routing, WP-CLI, health checks, and optional MCP proxy.
• SHA256SUMS.txt: checksums for release assets.

Verification

• composer test
• composer phpstan
• composer phpcs
• composer security:audit
• composer dependencies:audit
• composer docs:matrix
• npm run typecheck
• npm test
• npm run build
• Live MCP smoke: plugin activation on mcp-test.local, tokenized WP-CLI
  status/list, and Stonewright setup/status version checks.

Stonewright v1.0.0-alpha.63

Stonewright 1.0.0-alpha.63

Release date: 2026-06-17

This alpha adds two composite implementation paths and stronger repair payloads
so strict tool-cap clients and weaker models can finish common WordPress builder
work with fewer decisions and fewer MCP calls.

Highlights

• Adds stonewright/theme-builder-apply-template for real Elementor Theme
  Builder templates: spec validation, backup snapshot, Elementor data render,
  display-condition application, optional live verification, and repair hints.
• Adds stonewright/content-model-loop-grid-flow for CPT/ACF-backed Elementor
  Loop Grid sections: content model contract, field contract, row upserts, loop
  item template, and Loop Grid widget settings in one workflow.
• Enriches Design Spec validation failures with exact paths, received types,
  allowed shapes, nearest valid examples, and repair hints.
• Adds setup/status metadata for stale client detection after releases or skill
  syncs: companion_version, expected_companion_package, and
  refresh_required_tool_names.
• Updates active setup snippets, docs, and skills to 1.0.0-alpha.63.

Control Notes

• Full PHP runtime access remains first-class through stonewright/php-execute.
• Theme Builder and Loop Grid writes still use permissions, context tokens,
  design-spec validation, backup snapshots, and audit-aware ability execution.
• Production-safe mode and destructive confirmation-token behavior are
  unchanged.

Release Assets

• stonewright-1.0.0-alpha.63.zip: installable WordPress plugin package with
  production Composer dependencies.
• stonewright-companion-1.0.0-alpha.63.tgz: Node companion package for setup
  profiles, PHP runtime routing, WP-CLI, health checks, and optional MCP proxy.
• SHA256SUMS.txt: checksums for release assets.

Verification

• composer test
• composer phpstan
• composer phpcs
• composer security:audit
• composer dependencies:audit
• composer docs:matrix
• npm run typecheck
• npm test
• npm run build
• Live MCP smoke: stonewright-context-bootstrap,
  stonewright-workflow-preflight, stonewright-tool-profile full,
  stonewright-wordpress-mcp-status, and tokenized WP-CLI status against
  mcp-test.local.

Stonewright v1.0.0-alpha.62

Stonewright 1.0.0-alpha.62

Release date: 2026-06-17

This alpha makes full WordPress PHP runtime execution a first-class
Stonewright path while preserving the existing production gates and tokenized
companion command model.

Highlights

• Adds stonewright/php-execute for short PHP snippets inside the loaded
  WordPress runtime, with WordPress functions, loaded plugins, $wpdb, stdout,
  structured return payloads, and audit coverage.
• Exposes PHP runtime routing through compact profiles, workflow preflight,
  context bootstrap, setup profiles, public docs, skills, fixtures, and the
  generated ability truth matrix.
• Keeps WP-CLI focused on tokenized command workflows and blocks wp eval,
  wp eval-file, wp shell, wp package, --exec, and --require as
  companion entry points.
• Updates the installed Codex Stonewright skill so weak-model startup guidance
  names stonewright/php-execute directly and avoids stale guarded-WP-CLI
  wording.
• Bumps plugin and companion release versions to 1.0.0-alpha.62.

Control Notes

• stonewright/php-execute is the dedicated PHP runtime path; docs and agent
  guidance still reject generic PHP adapters and REST-runner shell bypasses.
• Production-safe mode, real permission callbacks, backup snapshots,
  confirmation tokens, design-spec validation, audit logging, and companion
  command blocking remain intact.
• The companion session must be restarted after upgrading so compact profile
  metadata exposes the new runtime tool surface.

Release Assets

• stonewright-1.0.0-alpha.62.zip: installable WordPress plugin package with
  production Composer dependencies.
• stonewright-companion-1.0.0-alpha.62.tgz: Node companion package for
  PHP runtime routing, WP-CLI, health checks, and optional MCP proxy.
• SHA256SUMS.txt: checksums for release assets.

Verification

• composer test
• composer phpstan
• composer phpcs
• composer security:audit
• composer dependencies:audit
• composer docs:matrix
• npm run typecheck
• npm test
• npm run build
• Live MCP smoke: stonewright/context-bootstrap,
  stonewright/system-abilities-list, stonewright/tool-profile,
  stonewright/design-validate-spec, and tokenized WP-CLI batch commands
  against mcp-test.local.

Stonewright v1.0.0-alpha.61

Stonewright 1.0.0-alpha.61

Release date: 2026-06-17

This alpha improves companion WP-CLI recovery diagnostics, aligns fast-build
schemas with their examples, and adds read-only shortcode discovery.

Highlights

• Adds deep companion WP-CLI health diagnostics for PHP ini loading, mysqli
  and pdo_mysql, WordPress bootstrap, database checks, LocalWP DB host/port
  detection, cached default WordPress roots, and actionable setup guidance.
• Adds typed wp_cli_context support while preserving legacy custom context
  values.
• Aligns fast build payloads: content-bulk-upsert-posts accepts
  post_status, elementor-v3-batch-mutate accepts compact aliases,
  widget schema discovery can filter tabs/controls, and design-build-spec
  turns shorthand section descriptors into validator-valid blocks.
• Adds compact bootstrap/preflight hash responses for lower-token startup.
• Adds stonewright/site-shortcodes-discover to list registered shortcode tags
  and safe callback summaries without executing handlers.
• Bumps plugin and companion release versions to 1.0.0-alpha.61.

Safety Notes

• Elementor batch writes still snapshot with Backup::snapshot_post() before
  saving.
• Destructive Elementor remove operations still require confirmation tokens in
  production-safe mode, including compact alias payloads.
• Design specs are still validated with DesignSpec\Validator::validate()
  before rendering.
• stonewright/site-shortcodes-discover is read-only and does not execute
  shortcode callbacks.
• Permission and audit gates are unchanged for existing write abilities.

Release Assets

• stonewright-1.0.0-alpha.61.zip: installable WordPress plugin package with
  production Composer dependencies.
• stonewright-companion-1.0.0-alpha.61.tgz: Node companion package for
  WP-CLI, health checks, and optional MCP proxy.
• SHA256SUMS.txt: checksums for release assets.

Verification

• composer test
• composer phpstan
• composer phpcs
• npm run typecheck
• npm test
• npm run build

Stonewright v1.0.0-alpha.57

Stonewright 1.0.0-alpha.57

Release date: 2026-06-17

This alpha fixes MCP ability runtime validation for schemas that intentionally
publish permissive JSON object placeholders for strict client discovery.

Highlights

• Keeps public MCP discovery schemas compatible with strict clients while
  converting placeholder objects to array-based schemas before WordPress REST
  runtime validation.
• Restores stonewright-context-bootstrap execution when its response includes
  permissive array item schemas.
• Adds regression coverage for runtime schema placeholders in registered
  abilities.

Safety Notes

• No WordPress write ability changed.
• Backup, confirmation token, permission, and audit gates are unchanged.
• Validation still runs; only the runtime schema view is normalized before the
  WordPress REST validator receives it.
• The companion still runs WP-CLI through execFile argv tokens and continues
  to block arbitrary PHP and shell entry points.

Release Assets

• stonewright-1.0.0-alpha.57.zip: installable WordPress plugin package with
  production Composer dependencies.
• stonewright-companion-1.0.0-alpha.57.tgz: Node companion package for
  WP-CLI, health checks, and optional MCP proxy.
• SHA256SUMS.txt: checksums for release assets.

Verification

• stonewright-context-bootstrap
• composer test
• composer phpstan
• composer phpcs
• composer security:audit
• composer dependencies:audit
• npm run typecheck
• npm test
• npm run build

Stonewright v1.0.0-alpha.56

Stonewright 1.0.0-alpha.56

Release date: 2026-06-17

This alpha fixes companion startup for MCP clients that launch Stonewright from
the GitHub release tarball through npx.

Highlights

• Adds a Node shebang to the companion MCP entrypoint so npm-generated bin
  shims execute the tarball correctly on Windows, macOS, and Linux.
• Updates setup-profile, WordPress admin snippets, and public docs to launch the
  explicit stonewright-mcp bin with
  npx -y --package <tarball> stonewright-mcp.
• Keeps local recovery tools such as stonewright-setup-profile,
  stonewright-wordpress-mcp-status, and direct stonewright-wp-cli-* tools
  visible even when the proxied WordPress endpoint still needs configuration.

Safety Notes

• No WordPress write ability changed.
• Backup, confirmation token, permission, validation, and audit gates are
  unchanged.
• The companion still runs WP-CLI through execFile argv tokens and continues
  to block arbitrary PHP and shell entry points.

Release Assets

• stonewright-1.0.0-alpha.56.zip: installable WordPress plugin package with
  production Composer dependencies.
• stonewright-companion-1.0.0-alpha.56.tgz: Node companion package for
  WP-CLI, health checks, and optional MCP proxy.
• SHA256SUMS.txt: checksums for release assets.

Verification

• composer test
• composer phpstan
• composer phpcs
• npm run typecheck
• npm test
• npm run build
• Local tarball MCP stdio handshake through npx -y --package ./stonewright-companion-1.0.0-alpha.56.tgz stonewright-mcp

Stonewright v1.0.0-alpha.55

Stonewright 1.0.0-alpha.55

Release date: 2026-06-17

This alpha fixes strict MCP client schema compatibility for public ability
output schemas.

Highlights

• Normalizes output schemas before WordPress ability registration.
• Ensures permissive output arrays still expose items: {} to strict MCP
  clients.
• Exposes normalized output schemas in registry metadata so admin and test
  surfaces see the same public schema shape.
• Adds a regression guard for future output schema additions.

Release Assets

• stonewright-1.0.0-alpha.55.zip: installable WordPress plugin package with
  production Composer dependencies.
• stonewright-companion-1.0.0-alpha.55.tgz: Node companion package for
  WP-CLI, health checks, and optional MCP proxy.
• SHA256SUMS.txt: checksums for release assets.

Verification

• composer test
• composer phpstan
• composer phpcs
• npm run typecheck
• npm test
• npm run build

Stonewright v1.0.0-alpha.54

Stonewright 1.0.0-alpha.54

Release date: 2026-06-17

This alpha removes one more redundant startup step for token-sensitive MCP
clients.

Highlights

• Treats stonewright-tool-profile as optional profile switch/verification
  instead of a required first-call step.
• Uses fast_path.tool_profile from stonewright-workflow-preflight as the
  default compact tool guidance.
• Keeps startup readiness green when bootstrap, workflow preflight, and skill
  retrieval are visible, even if the optional profile tool is unavailable.
• Updates companion, WordPress agent instructions, admin copy-paste prompts,
  docs, and the Stonewright skill pack to match the shorter flow.

Release Assets

• stonewright-1.0.0-alpha.54.zip: installable WordPress plugin package with
  production Composer dependencies.
• stonewright-companion-1.0.0-alpha.54.tgz: Node companion package for
  WP-CLI, health checks, and optional MCP proxy.
• SHA256SUMS.txt: checksums for release assets.

Verification

• composer test
• composer phpstan
• composer phpcs
• npm run typecheck
• npm test
• npm run build

Stonewright v1.0.0-alpha.53

Stonewright 1.0.0-alpha.53

Release date: 2026-06-17

This alpha reduces startup chatter for token-sensitive agents that begin work
with stonewright/workflow-preflight.

Highlights

• Inlines compact tool_profile data in workflow preflight responses.
• Exposes grouped tools, next-best tool recommendations, and discovery policy
  without requiring a second profile call when the preflight profile is enough.
• Keeps write safety unchanged: this release only changes read-only workflow
  guidance.

Release Assets

• stonewright-1.0.0-alpha.53.zip: installable WordPress plugin package with
  production Composer dependencies.
• stonewright-companion-1.0.0-alpha.53.tgz: Node companion package for
  WP-CLI, health checks, and optional MCP proxy.
• SHA256SUMS.txt: checksums for release assets.

Verification

• composer test
• composer phpstan
• composer phpcs
• npm run typecheck
• npm test
• npm run build

Stonewright v1.0.0-alpha.52

Stonewright 1.0.0-alpha.52

Released: 2026-06-17

Highlights

• Adds grouped tool inventory to the WordPress-side stonewright/tool-profile response.
• Helps direct HTTP MCP sessions choose the next Elementor, content/media, Gutenberg/FSE, WP-CLI, or site-admin tool without broad discovery.

Added

• tool_groups in stonewright/tool-profile.
• next_best_tools in stonewright/tool-profile.
• discovery_policy in stonewright/tool-profile.

Verification

• npm test
• npm run typecheck
• npm run build
• composer test
• composer phpstan
• composer phpcs

Assets

• stonewright-1.0.0-alpha.52.zip: installable WordPress plugin package.
• stonewright-companion-1.0.0-alpha.52.tgz: Node companion package.