Changeset 3777876

Timestamp:

11/01/2026 10:52:56 AM (12 hours ago)

Author:

capoeira314

Message:

Release 0.9.2: tool annotations

Location:

simonov-ai-site-manager

Files:

• tags/0.9.2 (copied) (copied from simonov-ai-site-manager/trunk )
• tags/0.9.2/includes/class-tool-registry.php (modified) (2 diffs)
• tags/0.9.2/readme.txt (modified) (4 diffs)
• tags/0.9.2/simonov-ai-site-manager.php (modified) (2 diffs)
• trunk/includes/class-tool-registry.php (modified) (2 diffs)
• trunk/readme.txt (modified) (4 diffs)
• trunk/simonov-ai-site-manager.php (modified) (2 diffs)

simonov-ai-site-manager/tags/0.9.2/includes/class-tool-registry.php

@@ -111 +111 @@
 
         /**
+         * Writes that only add something new and never overwrite or remove.
+         *
+         * MCP assumes a write is destructive unless told otherwise, and that is the
+         * right default here too: update_* replaces what was there, set_* and
+         * assign_* swap one value for another. Only the tools named below are
+         * reported as additive.
+         *
+         * @var string[]
+         */
+        private static $additive_tools = array(
+                'create_comment',
+                'create_post',
+                'create_term',
+                'pll_create_translation',
+                'upload_media_base64',
+                'upload_media_from_url',
+                'wc_create_product',
+        );
+
+        /**
+         * MCP tool annotations, derived from the same classification read-only
+         * mode uses, so the hint a client sees can never disagree with what the
+         * server enforces.
+         *
+         * Clients use these to decide what to run without asking the user first;
+         * ChatGPT, for one, asks before calling tools not marked read-only.
+         *
+         * @param string $name Tool name.
+         * @return array
+         */
+        public function annotations( $name ) {
+                if ( ! $this->is_write( $name ) ) {
+                        return array(
+                                'readOnlyHint'  => true,
+                                'openWorldHint' => false,
+                        );
+                }
+                return array(
+                        'readOnlyHint'    => false,
+                        'destructiveHint' => ! in_array( (string) $name, self::$additive_tools, true ),
+                        // Fetching from a URL is the one tool that reaches beyond this site.
+                        'openWorldHint'   => 'upload_media_from_url' === $name,
+                );
+        }
+
+        /**
          * Is the server restricted to reads?
          *
@@ -175 +221 @@
                                 'description' => $def['description'],
                                 'inputSchema' => $def['inputSchema'],
+                                'annotations' => $this->annotations( $name ),
                         );
                 }

simonov-ai-site-manager/tags/0.9.2/readme.txt

@@ -5 +5 @@
 Tested up to: 7.1
 Requires PHP: 7.0
-Stable tag: 0.9.1
+Stable tag: 0.9.2
 License: GPLv2 or later
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
@@ -97 +97 @@
 4. In a chat, open the "+" menu, choose developer mode and select your site.
 
-ChatGPT may ask you to confirm a tool call before running it. Read what it is about to do before you confirm.
+Tools that only read run straight away. Before anything that changes the site, ChatGPT asks you to confirm. Read what it is about to do before you confirm.
 
 = Connect Claude Code =
@@ -169 +169 @@
 * Every tool enforces WordPress capabilities against the specific object it touches — not just a generic capability — so a non-admin configured user cannot edit content it does not own.
 * No tool changes plugins, themes, users or site settings.
-* Option reads refuse anything that looks like a credential (API keys, SMTP passwords, salts).
 * Media uploads validate file content against the extension and block fetches to internal/cloud-metadata addresses.
 * Disable individual tools from the settings page if you want to reduce surface area.
@@ -181 +180 @@
 == Changelog ==
 
+= 0.9.2 =
+* Every tool now tells the client whether it only reads, adds something new, or can overwrite or delete. ChatGPT and other clients run reading tools without asking and ask before changes.
+
 = 0.9.1 =
 * MCP requests never hold administrative capabilities, whichever account is connected.

simonov-ai-site-manager/tags/0.9.2/simonov-ai-site-manager.php

@@ -4 +4 @@
  * Plugin URI:        https://github.com/yuo2007/simonov-ai-site-manager
  * Description:        Free, open Model Context Protocol (MCP) server for WordPress. Lets Claude, ChatGPT and other MCP clients manage posts, media, taxonomies, comments, WooCommerce and Polylang translations.
- * Version:           0.9.1
+ * Version:           0.9.2
  * Requires at least: 5.8
  * Requires PHP:      7.0
@@ -20 +20 @@
 defined( 'ABSPATH' ) || exit;
 
-define( 'WPMCP_VERSION', '0.9.1' );
+define( 'WPMCP_VERSION', '0.9.2' );
 define( 'WPMCP_FILE', __FILE__ );
 define( 'WPMCP_DIR', plugin_dir_path( __FILE__ ) );

simonov-ai-site-manager/trunk/includes/class-tool-registry.php

@@ -111 +111 @@
 
         /**
+         * Writes that only add something new and never overwrite or remove.
+         *
+         * MCP assumes a write is destructive unless told otherwise, and that is the
+         * right default here too: update_* replaces what was there, set_* and
+         * assign_* swap one value for another. Only the tools named below are
+         * reported as additive.
+         *
+         * @var string[]
+         */
+        private static $additive_tools = array(
+                'create_comment',
+                'create_post',
+                'create_term',
+                'pll_create_translation',
+                'upload_media_base64',
+                'upload_media_from_url',
+                'wc_create_product',
+        );
+
+        /**
+         * MCP tool annotations, derived from the same classification read-only
+         * mode uses, so the hint a client sees can never disagree with what the
+         * server enforces.
+         *
+         * Clients use these to decide what to run without asking the user first;
+         * ChatGPT, for one, asks before calling tools not marked read-only.
+         *
+         * @param string $name Tool name.
+         * @return array
+         */
+        public function annotations( $name ) {
+                if ( ! $this->is_write( $name ) ) {
+                        return array(
+                                'readOnlyHint'  => true,
+                                'openWorldHint' => false,
+                        );
+                }
+                return array(
+                        'readOnlyHint'    => false,
+                        'destructiveHint' => ! in_array( (string) $name, self::$additive_tools, true ),
+                        // Fetching from a URL is the one tool that reaches beyond this site.
+                        'openWorldHint'   => 'upload_media_from_url' === $name,
+                );
+        }
+
+        /**
          * Is the server restricted to reads?
          *
@@ -175 +221 @@
                                 'description' => $def['description'],
                                 'inputSchema' => $def['inputSchema'],
+                                'annotations' => $this->annotations( $name ),
                         );
                 }

simonov-ai-site-manager/trunk/readme.txt

@@ -5 +5 @@
 Tested up to: 7.1
 Requires PHP: 7.0
-Stable tag: 0.9.1
+Stable tag: 0.9.2
 License: GPLv2 or later
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
@@ -97 +97 @@
 4. In a chat, open the "+" menu, choose developer mode and select your site.
 
-ChatGPT may ask you to confirm a tool call before running it. Read what it is about to do before you confirm.
+Tools that only read run straight away. Before anything that changes the site, ChatGPT asks you to confirm. Read what it is about to do before you confirm.
 
 = Connect Claude Code =
@@ -169 +169 @@
 * Every tool enforces WordPress capabilities against the specific object it touches — not just a generic capability — so a non-admin configured user cannot edit content it does not own.
 * No tool changes plugins, themes, users or site settings.
-* Option reads refuse anything that looks like a credential (API keys, SMTP passwords, salts).
 * Media uploads validate file content against the extension and block fetches to internal/cloud-metadata addresses.
 * Disable individual tools from the settings page if you want to reduce surface area.
@@ -181 +180 @@
 == Changelog ==
 
+= 0.9.2 =
+* Every tool now tells the client whether it only reads, adds something new, or can overwrite or delete. ChatGPT and other clients run reading tools without asking and ask before changes.
+
 = 0.9.1 =
 * MCP requests never hold administrative capabilities, whichever account is connected.

simonov-ai-site-manager/trunk/simonov-ai-site-manager.php

@@ -4 +4 @@
  * Plugin URI:        https://github.com/yuo2007/simonov-ai-site-manager
  * Description:        Free, open Model Context Protocol (MCP) server for WordPress. Lets Claude, ChatGPT and other MCP clients manage posts, media, taxonomies, comments, WooCommerce and Polylang translations.
- * Version:           0.9.1
+ * Version:           0.9.2
  * Requires at least: 5.8
  * Requires PHP:      7.0
@@ -20 +20 @@
 defined( 'ABSPATH' ) || exit;
 
-define( 'WPMCP_VERSION', '0.9.1' );
+define( 'WPMCP_VERSION', '0.9.2' );
 define( 'WPMCP_FILE', __FILE__ );
 define( 'WPMCP_DIR', plugin_dir_path( __FILE__ ) );