v3.2.0 — Prompts v2, Compact tool mode, web_fetch
A core-engine release, and a rewrite of the Premium Prompts.
Highlights
Premium Prompts, rewritten. All 50 prompts used to dictate an explicit, section-by-section Elementor layout — column counts, padding values, widget names. They now hand the AI a style guide, a design signature (compositional direction, never layout), section intents, verbatim content facts, and non-negotiable standards: WCAG 2.1 AA, real photography in every slot, one consistent SVG icon set, builder-native construction, a completeness rule, and a lead-capture form. The AI researches, decides the composition, and builds.
Prompts are builder-agnostic. The first line of every prompt reads **Page builder:** Elementor. Change that one word to Gutenberg, Bricks, or plain HTML/CSS and the rest still applies.
Compact tool mode (opt-in). A Tools-tab toggle surfaces just 3 dispatcher meta-tools — list-tools, get-tool-schema, call-tool — instead of ~140, so clients that cap tool counts can still reach the whole surface. call-tool delegates each target tool's own permission check. Replaces Low-tools mode.
MCP Adapter via the Jetpack Autoloader. When several active plugins bundle the same adapter (WooCommerce, Automattic MCP, …), the highest version is arbitrated process-wide — no "class already declared" clashes regardless of load order.
Agent-facing Skills (Pro). The bundled Agent Skills (now 7) are discoverable and loadable by any connected MCP agent at runtime via list-skills / get-skill, with a Modules-tab switch to turn the injection off.
web_fetch in the AI Chat (Pro). The model can read a URL you give it — a reference design, a competitor page, docs, a JSON endpoint, or a stylesheet. Fetching a page also returns the absolute URLs of its stylesheets, so the AI reads a design's colour tokens and type scale from source. It cannot search the web; it needs a URL.
Prompts v1 archive (Pro). The original 50 prompts remain available as a licence-gated download on the Prompts screen.
Security
web_fetch runs on your server, so every URL — and every redirect hop, followed manually — is validated first: http(s) only, no credentials in the URL, ports 80/443 only, and refused if any resolved A/AAAA record is loopback, private, link-local (including the cloud-metadata address 169.254.169.254), CGNAT, multicast or reserved. Responses are size-capped, limited to textual content types, never executed, and handed to the model labelled as untrusted data.
Fixed
- Bundled Freemius SDK updated to 2.13.4. Freemius withdrew 2.13.3 after finding a regression in its add-on checkout flow. EMCP Tools does not use Freemius add-ons, so it was never affected — but a plugin should not ship a dependency version its vendor unpublished.
- Plugin scripts and styles are now versioned by their own modification time, so a changed asset is never served stale from the browser cache between releases.
- A clean install no longer emits a "Failed to open stream" notice from the autoloader's file map.
Full notes: CHANGELOG.md