Pros & Cons: unreadable in dark mode. The template filled every empty color field with a light hex value (#f0fdf4, #fef2f2 and dark titles) and wrote all eight into the block's inline style. An inline custom property beats the…
Read full notes18 changes
What's Changed
Fixed
Pros & Cons: unreadable in dark mode. The template filled every empty color field with a light hex value (#f0fdf4, #fef2f2 and dark titles) and wrote all eight into the block's inline style. An inline custom property beats the stylesheet, so the token fallbacks in pros-cons.css, which mix the theme's background, text, success and danger colors and already follow dark mode, never ran. In dark mode the list text turned light while the columns stayed near-white: 1.2:1 contrast against the 4.5:1 that WCAG AA asks for. The block now writes only the colors an editor actually chose and leaves out the style attribute when there are none. On a dark theme the columns measure 11.8:1 for text, 7.1:1 or better for titles and 5.9:1 or better for icons. In light mode they look the same as before, except that the pros column takes the theme's success color instead of a fixed green.
The eight color fields no longer default to those light values, so a newly inserted block doesn't save them into its data. Blocks that already carry one of the old defaults (#f0fdf4, #16a34a, #166534, #fef2f2, #dc2626, #991b1b) are treated as uncustomized and follow the theme too. Any other custom color still applies exactly as set, in both modes.
Commits
2.12.1: Pros & Cons follows the theme into dark mode (95d1665)
Added Content Tools duplicates native posts/pages into drafts with permission checks and a metadata allowlist.
Added Link Health scans stored public-content links in resumable batches, with safe HTTP checks, cached results, ignore/recheck actions, and CSV export.
Added Site Activity records a bounded private history of settings, publishing, and plugin/theme changes, with privacy export and anonymization.
All three modules are disabled by default. Link Health weekly scans are separately opt-in.
Fixed Component styles render inside the block editor canvas even when generated uploads CSS is unavailable.
Fixed Protect File blocks, bound URLs, and serialized block settings when replacing or unlinking links.
Fixed Keep partial scans and concurrent recheck/ignore actions consistent when source content changes.
Improved Stream filtered CSV exports in one pass, and preserve WordPress update hooks and feed cache invalidation after link edits.
Fixed Record successful manual, bulk, and automatic plugin/theme updates after their final outcome is known.
Added Link Health filters for status, source type, and URL/source title, including filtered pagination and CSV export.
Added Previewed URL replacement and unlinking in individual source posts, with edit permissions, revisions, and concurrent-save protection.
Improved Live Link Health progress and results, continuous bounded checking while the workspace is open, and 50 link results per page across all sources.
Fixed Stop requests are honored after an active batch, stopped scans resume their saved cursor, and stale browser requests cannot advance or stop a newer scan.
Improved Backend branding, local outline icons, consistent form controls, accessible labels, and mobile alignment.
Improved Color-adaptive SVG admin mark, module back buttons and breadcrumbs, and responsive settings layouts with guidance in a right sidebar.
Fixed Link Health and Site Activity now include the current module in their breadcrumbs.
Commits
Fix v1.7.0 release review regressions (758c341)
Add Link Health filters and previewed URL editing (7b4d154)
Fix Link Health live scanning and paginate 50 results (ac664ff)
Refine listing assets with restrained translucent materials (c815ead)
Render listing branding with colorful liquid glass materials (36570dd)
Add colorful listing icon and bento banner (5f83bf1)
Improve module navigation and responsive settings guidance (3b249eb)
Correct directory screenshot framing and image formats (f1772b6)
Polish backend branding, local icons, and form alignment (4677cef)
Add Content Tools, Link Health, and Site Activity for 1.7.0 (9401ae3)
Makes code changes recoverable, errors actionable and going live explicit, and adds the publishing and file tools agents were missing.
Read full notes7 changes
Validation: 59 WordPress integration tests / 383 assertions on PHP 8.3 and 8.5 locally and on the CI matrix, 9 converter tests, PHP syntax and coding standards, runtime and translation freshness, an HTTP MCP smoke test on disposable WordPress including a real fatal-change rollback, and both release ZIPs.
The companion archive is separate from the installable WordPress ZIP. Site Agent does not implement OAuth.
PHP file writes, moves and deletes are syntax- and compile-checked, then the site is loaded with WordPress's edit-scrape check and a change that causes a fatal error is reverted.
Tool errors include the real message and line. PHP execution rejects exit and die and reports wp_die(), indirect exits and fatal errors as tool errors.
Edits to published, private or scheduled posts are saved as autosaves for review unless a status is passed. Scheduling requires a future date. Titles keep tag-like text and percent sequences.
Content writes accept terms, featured images, slugs, publish dates and SEO meta. New tools list terms, import media with alt text, update media, and create, delete or move source files; must-use plugins are reachable and credential files are blocked by name.
Each Application Password can be limited to some tool groups. The audit history records targets, the password used and denied calls. Diagnostics and a Test connection button explain connection failures.
URL credentials are removed before dispatch, WP-CLI @aliases are rejected, and SITE_AGENT_ALLOW_EXECUTION=false blocks source editing, PHP and WP-CLI.
Updates use WordPress's Update URI hook, cache failed checks, and keep validated metadata when the store is unreachable during an upgrade. Signed-package verification ships without an enforcing key.
Adds inline documentation to Tools > Site Agent for connecting with an authenticated MCP URL. The guide covers enabling URL authentication, creating a dedicated Application Password, generating and copying the endpoint, credential…
Read full notes
Adds inline documentation to Tools > Site Agent for connecting with an authenticated MCP URL. The guide covers enabling URL authentication, creating a dedicated Application Password, generating and copying the endpoint, credential privacy, revocation, and client compatibility. It shows a site-specific placeholder URL without displaying real credentials.
Validation: 33 WordPress integration tests / 144 assertions, 7 converter tests, PHP syntax and coding standards, runtime and translation freshness, disposable WordPress rendering, and both release ZIPs.
The companion archive is separate from the installable WordPress ZIP. Site Agent does not implement OAuth. ChatGPT web compatibility with credential-bearing URLs has not been verified.
Edit native WordPress blocks directly in the Page Blocks workspace. Existing code editors, library, AI, performance tools, page settings, drafts, and save-conflict checks remain available.
Read full notes7 changes
Fixed library creation returning an incorrect ID after cache/integration writes, and guarded newer template-style APIs on WordPress 6.0.
Validated with 186 passing tests (4 optional integration skips), a fresh packaged upgrade rehearsal preserving content/render/library/settings hashes, PHPStan, syntax, and package checks. Requires PHP 8.1 and WordPress 6.0.
Native visual editing: Edit native WordPress blocks directly in the Page Blocks workspace. Existing code editors, library, AI, performance tools, page settings, drafts, and save-conflict checks remain available.
Choose Fixed / Auto placement for normal layout flow or Freeform for desktop drag, resize, snapping, guides, and keyboard nudges. Mobile layouts follow block reading order.
Drop media files onto the canvas to upload through WordPress and insert native media blocks.
Use a compact Design inspector with property rows, swatches, responsive controls, and alignment icons.
Keep the toolbar and footer visible; respect the selected block template's content width.
Section selection automatically activates Visual or Code mode.
Compatibility: Existing code sections, legacy Page Block names, linked library references, nested blocks, third-party markup, and CSS loading settings remain supported. Stored sections are not automatically converted. Unreleased prototype sections retain their saved HTML/CSS fallback; conversion to native blocks is explicit and undoable.
Adds opt-in URL authentication to the Site Agent MCP endpoint for compatible clients that cannot send custom Authorization headers.
Read full notes
Enable URL authentication under Tools > Site Agent, save, then use the converter's new Copy authenticated endpoint button. The URL's auth query parameter contains Base64-encoded username and Application Password credentials. Standard and URL-safe Base64 are accepted; the copy action handles URL encoding and existing plain-permalink query parameters.
Authentication uses WordPress's native Application Password validator on every request. Administrator and enabled-tool checks remain enforced; account passwords, invalid/revoked credentials, conflicting identities and unrelated REST routes are rejected. The mode defaults off, respects emergency disable and HTTPS requirements, and marks MCP responses private/no-store.
Base64 is reversible. Credential-bearing URLs may appear in browser history, proxy/server logs or client configuration. Use a dedicated, revocable Application Password and keep the complete URL private. The client must support Streamable HTTP/MCP and preserve the query on each request. This is not an OAuth implementation or a guarantee of compatibility with every client.
Validation: 33 WordPress integration tests / 144 assertions, 7 converter tests, real headerless local HTTP initialization and tool discovery, route isolation, invalid-credential rejection, cache headers, session termination, coding standards and package checks.
Adds the optional Site Agent companion package, with WordPress workflow instructions, the approved icon and a credential-free MCP connection. The companion covers site inspection, raw-content audits, draft preparation, hash-checked edits…
Read full notes2 changes
Adds the optional Site Agent companion package, with WordPress workflow instructions, the approved icon and a credential-free MCP connection. The companion covers site inspection, raw-content audits, draft preparation, hash-checked edits and the developer tools enabled on the connected WordPress site.
Two separate ZIPs are provided:
Both companion manifests now use version 0.1.3. The compatibility manifest points to the included mcp.json; the standalone ZIP includes the complete GPL license. Packaging validation is part of CI.
Authentication still requires a compatible private connection using a WordPress Application Password and Basic Authorization header. This release does not add OAuth or claim authenticated ChatGPT web connectivity. Existing WordPress functionality, runtime dependencies and access controls are unchanged.
Validation: 24 WordPress integration tests / 106 assertions, 6 converter tests, PHP/JavaScript syntax, coding standards, translation and generated-runtime freshness, companion metadata/reference checks and ZIP verification.
site-agent-0.1.3.zip: installable WordPress plugin, also delivered through FluentCart automatic updates.
site-agent-companion-0.1.3.zip: companion package for compatible ChatGPT/Codex hosts. Do not upload this ZIP to WordPress.
Adds a credential converter beside the MCP connection instructions. Enter your WordPress username and a dedicated Application Password, then copy the Base64 token, full Basic Authorization value or complete MCP configuration.
Read full notes
Conversion stays in the browser. The helper accepts grouped Application Passwords and UTF-8 usernames, masks generated tokens and clears sensitive values when inputs change or the page is left. Site Agent does not submit or store converter credentials.
Validation: 24 WordPress integration tests with 106 assertions; 6 converter tests; JavaScript syntax, WordPress coding standards, PHP lint, translation freshness and package checks. Rendered-browser checks covered exact encoding, masking, copy controls and clearing. The official MCP runtime pin and access settings are unchanged.
Site Agent connects MCP-compatible clients directly to WordPress, with ten named tools for content, source inspection, source editing, PHP execution and foreground WP-CLI.
Read full notes
Access starts disabled. Tool groups are independent opt-ins; developer execution is full-privilege access and is not sandboxed.
This public release adds free FluentCart update-license activation, encrypted site-bound credentials, protected package downloads, fresh download URLs for single/bulk upgrades, and extracted plugin identity checks. Licensing controls automatic updates only; all functionality remains available without activation.
The bundled official WordPress MCP Adapter is the upcoming 0.7.0 prerelease at a pinned source commit, with PHP MCP Schema 0.2.0. No Novamira application code, assets or dependencies are included.
Requires WordPress 6.9+ and PHP 8.0+. PHP 8.0, 8.3 and 8.5 CI passed, including 24 integration tests and 106 assertions. Use the complete release ZIP below; it includes the scoped official runtime.
Every field added in 2.12.0 is optional and off when empty. Rendering blocks saved by 2.11.x through the new template gives the same markup with one exception: the price, discount and price note are now wrapped in…
Read full notes53 changes
What's Changed
Fixed
Product Box: the Top Image style cropped the product. The hero was forced into a 16:9 frame with object-fit: cover, so a tall or square product lost its top and bottom, and a very wide one lost its sides. The hero now shows the whole image (contain) at the image's own shape, capped at 420px tall (260px on phones).
Product Box: every image was the full-size original. The template asked for product-box-image (550×550) and product-box-wide (800×450), but extra.php registered those sizes on after_setup_theme and is itself loaded on acf/init, after that hook has fired. The sizes were never generated, so WordPress fell back to the original upload: a 3000px photo went into a 300px column. The side image now uses core's medium_large (768px) and the Top Image large (1024px), both uncropped and with srcset. The dead size registration is removed, so no extra files are generated per upload.
The corner badge no longer overlaps a long title or the new label in the default and No Image styles. Above a contained Top Image, above a stacked side image on phones, and above a No Image box on phones, it gets its own strip instead of covering the product or squeezing the title.
Two phone-width rules never applied: the smaller badge and the smaller price lost to the higher-specificity base selectors. Both now take effect.
The CSS minifier broke descendant selectors that start with a colon.tools/build-assets.php dropped whitespace before every :, so .box :is(*, ::before) shipped as .box:is(*, ::before), which matches the box itself instead of what's inside it. The source files were right and only the .min.css files the plugin actually serves were wrong. Rules that were silently dead in production now apply as written: The space before : is now always kept (it costs a byte in the rare color : red and never changes meaning), and three regression cases cover it.
Added
Image Fit (Display tab): "Show full image" (default) or "Fill & crop". Fill & crop restores the old cropped look: a square frame in the side layout, and an edge-to-edge image in Top Image. Cropping is CSS-only, so the full image is always what's downloaded.
Top Image Frame (Display tab): Auto (the image's own shape), 16:9, 4:3 or 1:1, so several Top Image boxes in a grid line up. With "Show full image" the product sits inside the frame; with "Fill & crop" it fills it.
Highlight Label: a pill above the title ("Best Overall", "Editor's Choice"). Setting it also gives the box an accent border so the pick stands out in a list.
Open Links in New Tab: applies to the title, image and button links, and adds rel="noopener" without duplicating tokens already present.
Title & Image Link Rel: the title link had no rel at all, so an affiliate URL in the title shipped without sponsored. It now takes its own rel value.
Disclosure: optional small print under the buttons for affiliate disclosures.
The rating now shows its number (for example, 4.5) next to the stars. Screen readers get one label on the stars instead of an aria-label on a plain div, which most of them ignore.
The Top Image hero links to the title URL, like the side image always has.
Images served from the media library carry width and height, so the box no longer jumps when the image loads.
Rank: a "#1", "#2" tile beside the title for "best of" lists.
Review Score: your own score as a ring beside the title, out of 10, 5 or 100, with an editable label ("Our score" by default). Screen readers get one label: "Our score: 9.2 out of 10".
Verdict: a one-line "Why it wins" callout above the features, with an editable label.
Spec Chips: up to eight short facts (49", 144Hz) as pills under the title.
"You save" amount: worked out from Original and Current Price and printed in the current price's own format ("$60.57", "₹1,20,000" with Indian grouping, "300,00 €"). It stays hidden rather than guessing when either price isn't a plain amount ("Free", "From $99", "$9.99/mo") or the two use different currencies.
Price Checked On: a date under the price, shown in the site's date format inside a <time> element. Amazon's Associates rules expect displayed prices to carry one.
Perks: up to six icon-and-text items (shipping, returns, warranty, secure, deal, fast, gift, check). The icons are inline SVG, so they don't depend on the theme's icon font.
Amazon Yellow button style.
Emphasize First Button: the first button gets larger and filled with the accent color, and the rest become outlines. Amazon Yellow and Custom buttons keep their own colors.
Arrow on First Button: an arrow that nudges forward on hover or keyboard focus.
Shine on First Button: Off, On hover, or Repeat (a sweep every few seconds, which also works on phones). The shine is its own element, so it can't collide with theme icon classes like md-icon-external that use ::before or ::after.
Box Style: Spotlight: a gradient border, a soft accent tint at the top and an accent glow. On browsers that support relative colors, the gradient's second color is derived from the accent.
Accent Color: one color for the label, rank, score ring, verdict, Spotlight border, primary buttons and discount chip. The text on it is picked automatically for contrast, and only #rgb/#rrggbb values reach the style attribute.
The field group is split into Product, Highlights, Price & Buttons, and Display tabs, and the score and verdict label fields only appear once a score or verdict is entered.
Tests for price parsing across US, Indian and European formats, the savings math, date handling, accent sanitizing and contrast, link attributes and image-size selection. Other tests assert that every new field is optional and defaults to off, and that the product box registers no image sizes of its own.
Compatibility: Every field added in 2.12.0 is optional and off when empty. Rendering blocks saved by 2.11.x through the new template gives the same markup with one exception: the price, discount and price note are now wrapped in .acf-product-box__price-block. All existing class names are unchanged.
Changed
In the bottom section, the description now sits above the price and buttons, which share one row. Before, the price, the price note, the description and the buttons were separate items in one wrapping row, so the price note and description floated between the price and the buttons, and the buttons often wrapped onto a line of their own.
Image frames are transparent. The gray panel behind the side and Top Image pictures is gone, so a product cutout (a transparent PNG or WebP) sits directly on the card, and the divider under the Top Image is gone with it. Images with their own background get 8px rounded corners.
Phone layout: a stacked side image is capped at 220px tall and a Top Image at 260px, so the title and price stay near the top of the screen. Buttons are full width with 44px touch targets and 14px text. Spacing is tighter, and the disclosure is centered under the buttons.
The image zoom on hover only runs on devices that can hover, so tapping on a phone no longer leaves the image stuck zoomed.
Button focus rings use :focus-visible, so they show for keyboard users and not after a mouse click.
