v1.8.0 — Theme Builder, Performance + Security Auditors, Audit Page

Highlights

Theme Builder

• MCP_Themer — custom post type mcp_template_part for header / footer / single / archive / 404
• Conditional rendering: match by is_singular / is_archive / is_404 + priority
• Fallback chain: highest-priority matching part wins
• Renders via Elementor frontend; blank-template.php is the no-chrome fallback
• Full Elementor widget support via Elementor JSON storage

Performance + Security Auditors (full rewrite)

• Performance_Analyzer: 12 checks (cron, object cache, autoload size, revisions, transients, plugins, themes, PHP version, WP version, memory_limit, uploads writable, cron overdue)
• Security_Scanner: 12 checks (WP_DEBUG, file_editor, admin user, DB prefix, WP version, PHP version, salts, readme.html, xmlrpc, wp-config.php perms, DB table prefix, login rate-limiting)
• 12h transient cache + option persistence + A/B/C/D/F grading with severity weights
• Severity badges (critical=25, warning=10, info=0)

Audit Admin Page (MCP_Audit_Page)

• Side-by-side perf + sec cards
• One-click Refresh now with nonce verification
• Copy-able fix snippets for every finding

WP-CLI Commands

wp mcp audit [--refresh]
wp mcp security [--refresh]

REST Endpoints (mcp/v1)

• GET /audit/performance (manage_options)
• GET /audit/security (manage_options)

Agent Registry Tools

• performance_audit
• security_audit

Bugfixes

• autoloader map: Performance → Performance_Analyzer
• format_items fallback to line-by-line log on associative tables
• chat.js: guard null response.error, use path: instead of url:
• settings.php: bootstrap_submenu_pages() registers audit page
• plugin.php: register Themer in admin bootstrap
• Template_Builder: more detailed style guidance in prompts

Stats

• 1,491 lines added, 64 removed
• 5 new PHP classes
• 12 perf checks + 12 sec checks
• 2 new WP-CLI commands
• 2 new REST endpoints
• 2 new agent tools

🤖 Generated with Claude Code