v1.8.0 — Theme Builder, Performance + Security Auditors, Audit Page

Highlights

Theme Builder

• MCP_Themer — custom post type mcp_template_part for header / footer / single / archive / 404
• Conditional rendering: match by is_singular / is_archive / is_404 + priority
• Fallback chain: highest-priority matching part wins
• Renders via Elementor frontend; blank-template.php is the no-chrome fallback
• Full Elementor widget support via Elementor JSON storage

Performance + Security Auditors (full rewrite)

• Performance_Analyzer: 12 checks (cron, object cache, autoload size, revisions, transients, plugins, themes, PHP version, WP version, memory_limit, uploads writable, cron overdue)
• Security_Scanner: 12 checks (WP_DEBUG, file_editor, admin user, DB prefix, WP version, PHP version, salts, readme.html, xmlrpc, wp-config.php perms, DB table prefix, login rate-limiting)
• 12h transient cache + option persistence + A/B/C/D/F grading with severity weights
• Severity badges (critical=25, warning=10, info=0)

Audit Admin Page (MCP_Audit_Page)

• Side-by-side perf + sec cards
• One-click Refresh now with nonce verification
• Copy-able fix snippets for every finding

WP-CLI Commands

wp mcp audit [--refresh]
wp mcp security [--refresh]

REST Endpoints (mcp/v1)

• GET /audit/performance (manage_options)
• GET /audit/security (manage_options)

Agent Registry Tools

• performance_audit
• security_audit

Bugfixes

• autoloader map: Performance → Performance_Analyzer
• format_items fallback to line-by-line log on associative tables
• chat.js: guard null response.error, use path: instead of url:
• settings.php: bootstrap_submenu_pages() registers audit page
• plugin.php: register Themer in admin bootstrap
• Template_Builder: more detailed style guidance in prompts

Stats

• 1,491 lines added, 64 removed
• 5 new PHP classes
• 12 perf checks + 12 sec checks
• 2 new WP-CLI commands
• 2 new REST endpoints
• 2 new agent tools

🤖 Generated with Claude Code

v1.7.0 — 20 new features: agent surface, snapshots, WP-CLI, admin UI

What's new in v1.7.0

20 new features spanning agent surface, snapshots, admin UI, quality, and distribution.

Agent Surface

• MCP_Agent_Registry — 13 tools: page_list, page_get, page_create, page_apply_elementor, ai_generate_elementor, site_context, template_list, snapshot_create/list/restore, media_upload_url, block_repair, content_search
• JSON schema validation with required/type/enum
• Per-tool capability checks
• POST /mcp/v1/agent/tools/{list,call}
• /agent/snapshot/{create,list,restore}

X-MCP-Key API auth

• Hashed keys with label + scopes + per-key rate limit
• wp mcp api-key create | list | revoke

Snapshots & Rollback

• MCP_Snapshot — custom post type 'mcp_snapshot' holding serialized Elementor meta
• Auto-snapshot with TTL dedupe
• Restore: _elementor_data, _elementor_page_settings, _elementor_version, bumps post_modified

Block Repair

• MCP_Block_Repair — scan/audit/auto_fix modes; auto-generates stable IDs (secXXXXXX, colXXXXXX, widXXXXXX)

Media from URL

• MCP_Media_Uploader — download_url() + media_handle_sideload() with mime + 10 MB cap

Content Search

• WP_Query-backed search over pages, posts, Elementor templates with has_elementor flag

Output Repair

• 3-strategy JSON parser (raw → strip trailing commas → balance brackets)
• Structural repair: unwraps {sections:[...]} envelopes, coerces single sections

Idempotency

• X-Idempotency-Key header + body field
• /chat/apply caches responses so retries don't double-bill OpenRouter

Error Tracker

• Rolling 200-entry log with level/code/context, scrubs secrets
• wp mcp errors [--limit=20]

Admin UI

• 4 new toolbar buttons: Clone a site, Template Builder, Prompts, History
• Clone site modal, Template Builder modal, Prompts side panel, History side panel
• 7 ready-to-use prompts (local business, dental, dev portfolio, hair salon, car wash, Persian tourism, Persian restaurant)

WP-CLI

• wp mcp status, wp mcp tools, wp mcp build-template --brand=..., wp mcp clone <url>, wp mcp errors, wp mcp api-key ...

Distribution

• .github/workflows/ci.yml — matrix test across PHP 7.4/8.2/8.5 × WP 6.5/6.8/7.1 + WP-CLI smoke job

Stats

• 39 → 48 PHP files (+23%)
• 6,225 → 7,936 LOC (+27%)
• 54 unit tests, all passing

v1.6.0 — Site Cloner, Crawler, Template Builder

What's new in v1.6.0

Three major features, all working with OpenRouter's free models:

Site Cloner — MCP_Site_Cloner (single + multi-page)

• POST /wp-json/mcp/v1/clone to clone any public URL into an Elementor page
• Multi-page mode discovers nav + probes /about, /contact, /blog to build a full site

Template Builder — MCP_Template_Builder (no URL needed)

• Build a complete Elementor site from a brand brief
• 7 design systems: Modern SaaS, Warm Editorial, Bold Studio, Calm Spa, Restaurant Warm, Tourism Vivid, Persian Traditional
• 7 role-based section builders: header, hero, features, about, testimonials, cta, footer
• Each section is generated as a separate AI call with a focused role prompt for reliability

Site Crawler — MCP_Site_Crawler

• Walks nav links, resolves relative paths, classifies by URL+anchor into roles
• Path probing: HEAD-probes common paths to fill in missing nav links
• SSRF guards: blocks localhost, 127.0.0.1, private/reserved IP ranges

Under the hood

• New MCP_Site_Fetcher with cURL, robots.txt, asset extraction
• New MCP_DOM_Analyzer for sections, columns, palette, typography
• New MCP_AI_Translator with HTML condensation and JSON parse fallback
• New bracket-aware JSON extractor handles '[text] [{...}]' and other noise prefixes
• Default model: nvidia/nemotron-3-super-120b-a12b:free
  (Llama 3.3 70B no longer free on OpenRouter)

Tests

• 99 → 153, all passing
• No PHPUnit dependency — standalone runner in tests/test-runner.php

Stats

• 32 → 39 PHP files
• 4174 → 6225 LOC

See README.md for full feature list and readme.txt for WordPress changelog.