Changeset 3798383

iato-mcp/tags/1.21.1/iato-mcp.php

-              r3797770
+              r3798383
  * Plugin URI:  https://iato.ai/wordpress-mcp
  * Description: Exposes an MCP server from any self-hosted WordPress install, enabling IATO analyze-and-fix workflows via Claude Desktop and other AI clients.
  * Version:     1.21.0
+ * Version:     1.21.1
  * Author:      IATO
  * Author URI:  https://iato.ai
 …
 defined( 'ABSPATH' ) || exit;
 define( 'IATO_MCP_VERSION', '1.21.0' );
+define( 'IATO_MCP_VERSION', '1.21.1' );
 define( 'IATO_MCP_FILE', __FILE__ );
 define( 'IATO_MCP_DIR', plugin_dir_path( __FILE__ ) );

iato-mcp/tags/1.21.1/includes/class-elementor-adapter.php

-              r3797770
+              r3798383
          * Implements: add, remove, replace, move, copy, test.
          * Strict path semantics: replace/remove/move/copy fail on missing paths.
+         * add, copy and move insert into a list at an index, as RFC 6902 says (1.21.1:
+         * they replaced the element there until then), and each op on a list item
+         * reports the list as it is afterwards (`list`, `from_list`).
+         *
+         * Each op that sets a value also carries `_stored_at`, where annotate_stored()
+         * finds it in the stored tree: its element's id and the path inside it, so a
+         * later op that shifts the list does not send it to another element.
+         * annotate_stored() removes the key.
+         *
          * @return array|WP_Error Applied ops on success.
 …
                                 return $result;
+                        }
+                        if ( in_array( $result['op'], [ 'add', 'replace' ], true ) ) {
+                                $result['_stored_at'] = self::stored_at( $elements, $result['_resolved_path'] ?? $result['path'] );
+                        }
+                        unset( $result['_resolved_path'] );
                         $applied[] = $result;
+                }
 …
                                         return new WP_Error( 'invalid_patch', "add op missing 'value' at {$path}" );
+                                }
                                 $err = self::pointer_set( $elements, $path, $op['value'], true );
                                 if ( is_wp_error( $err ) ) {
                                         return $err;
+                                }
                                 return [ 'op' => 'add', 'path' => $path, 'value' => $op['value'] ];
+                                $added = self::pointer_add( $elements, $path, $op['value'] );
+                                if ( is_wp_error( $added ) ) {
+                                        return $added;
+                                }
+                                return self::with_list( [ 'op' => 'add', 'path' => $path, 'value' => $op['value'] ], $elements, $path, $added );
                         case 'replace':
 …
                                         return $prev;
+                                }
+                                $err = self::pointer_remove( $elements, $path );
+                                $removed = self::list_position( $elements, $path );
+                                $err     = self::pointer_remove( $elements, $path );
                                 if ( is_wp_error( $err ) ) {
                                         return $err;
+                                }
+                                return [ 'op' => 'remove', 'path' => $path, 'previous_value' => $prev ];
+                                $out = [ 'op' => 'remove', 'path' => $path, 'previous_value' => $prev ];
+                                if ( null !== $removed ) {
+                                        $out['list'] = self::list_report( $elements, self::parent_pointer( $path ), $removed['index'], $removed['count_before'] );
+                                }
+                                return $out;
                         case 'move':
 …
                                         return new WP_Error( 'invalid_patch', "move op missing 'from' at {$path}" );
+                                }
+                                // RFC 6902 4.4: an element cannot move into its own children.
+                                if ( str_starts_with( $path, $from . '/' ) ) {
+                                        return new WP_Error( 'invalid_patch', "move op cannot move {$from} into itself ({$path})." );
+                                }
                                 $value = self::pointer_get( $elements, $from );
                                 if ( is_wp_error( $value ) ) {
                                         return $value;
+                                }
+                                $err = self::pointer_remove( $elements, $from );
+                                $taken = self::list_position( $elements, $from );
+                                $err   = self::pointer_remove( $elements, $from );
                                 if ( is_wp_error( $err ) ) {
                                         return $err;
+                                }
+                                $err = self::pointer_set( $elements, $path, $value, true );
+                                if ( is_wp_error( $err ) ) {
+                                        return $err;
+                                }
+                                return [ 'op' => 'move', 'from' => $from, 'path' => $path, 'value' => $value ];
+                                $added = self::pointer_add( $elements, $path, $value );
+                                if ( is_wp_error( $added ) ) {
+                                        return $added;
+                                }
+                                $out         = [ 'op' => 'move', 'from' => $from, 'path' => $path, 'value' => $value ];
+                                $same_parent = self::parent_pointer( $from ) === self::parent_pointer( $path );
+                                if ( $same_parent && null !== $taken && null !== $added['index'] ) {
+                                        // One list: its length before the move, not between the two halves of it.
+                                        $added['count_before'] = $taken['count_before'];
+                                } elseif ( null !== $taken ) {
+                                        $out['from_list'] = self::list_report( $elements, self::parent_pointer( $from ), $taken['index'], $taken['count_before'] );
+                                }
+                                return self::with_list( $out, $elements, $path, $added );
                         case 'copy':
 …
                                         return $value;
+                                }
                                 $err = self::pointer_set( $elements, $path, $value, true );
                                 if ( is_wp_error( $err ) ) {
                                         return $err;
+                                }
                                 return [ 'op' => 'copy', 'from' => $from, 'path' => $path, 'value' => $value ];
+                                $added = self::pointer_add( $elements, $path, $value );
+                                if ( is_wp_error( $added ) ) {
+                                        return $added;
+                                }
+                                return self::with_list( [ 'op' => 'copy', 'from' => $from, 'path' => $path, 'value' => $value ], $elements, $path, $added );
                         case 'test':
 …
                         return new WP_Error( 'invalid_patch_path', "Path not found: {$path}" );
+                }
+                // Asked before the unset (1.21.1): afterwards a list missing its middle item
+                // has keys 0 and 2, was never re-indexed, and was stored as a JSON object.
+                $was_list = self::is_list( $node );
                 unset( $node[ $key ] );
                 // Re-index numeric arrays so subsequent path resolution doesn't break.
                 if ( array_keys( $node ) === range( 0, count( $node ) - 1 ) ) {
+                // Re-index lists so subsequent path resolution doesn't break.
+                if ( $was_list ) {
                         $node = array_values( $node );
+                }
                 return null;
+        }
+        /**
+         * RFC 6902 add: insert into a list at an index (`-` or the list's length
+         * appends), set a member of an object. Mutates by reference.
+         *
+         * A list is an array keyed 0..n-1, or empty. Anything else is an object,
+         * including a stored page whose elements have gaps in their numbering, which
+         * keeps the behaviour it had: the key is set, and `-` appends.
+         *
+         * @return array|WP_Error `index` and `count_before` for a list insert, both null otherwise.
+         */
+        public static function pointer_add( array &$root, string $path, mixed $value ): array|WP_Error {
+                if ( '' === $path ) {
+                        return new WP_Error( 'invalid_patch_path', 'Cannot replace root document.' );
+                }
+                $segs = self::pointer_segments( $path );
+                $last = array_pop( $segs );
+                $node = &$root;
+                foreach ( $segs as $seg ) {
+                        if ( ! is_array( $node ) ) {
+                                return new WP_Error( 'invalid_patch_path', "Cannot traverse non-array at {$path}" );
+                        }
+                        if ( array_key_exists( $seg, $node ) ) {
+                                $node = &$node[ $seg ];
+                                continue;
+                        }
+                        if ( ctype_digit( $seg ) && array_key_exists( (int) $seg, $node ) ) {
+                                $node = &$node[ (int) $seg ];
+                                continue;
+                        }
+                        return new WP_Error( 'invalid_patch_path', "Path not found: {$path}" );
+                }
+                if ( ! is_array( $node ) ) {
+                        return new WP_Error( 'invalid_patch_path', "Cannot set on non-array at {$path}" );
+                }
+                if ( self::is_list( $node ) && ( '-' === $last || ctype_digit( $last ) ) ) {
+                        $count = count( $node );
+                        if ( '-' === $last ) {
+                                $index = $count;
+                        } else {
+                                if ( strlen( $last ) > 1 && '0' === $last[0] ) {
+                                        return new WP_Error( 'invalid_patch_path', "Index {$last} has a leading zero at {$path}." );
+                                }
+                                $index = (int) $last;
+                                if ( $index > $count ) {
+                                        return new WP_Error( 'invalid_patch_path', "Index {$index} is past the end of a list of {$count} at {$path}. Use {$count} or - to append." );
+                                }
+                        }
+                        array_splice( $node, $index, 0, [ $value ] );
+                        return [ 'index' => $index, 'count_before' => $count ];
+                }
+                if ( '-' === $last ) {
+                        $node[] = $value;
+                } else {
+                        $node[ ctype_digit( $last ) ? (int) $last : $last ] = $value;
+                }
+                return [ 'index' => null, 'count_before' => null ];
+        }
+        /** Keyed 0..n-1, or empty: a JSON array. (array_is_list() needs PHP 8.1.) */
+        private static function is_list( array $value ): bool {
+                return [] === $value || array_keys( $value ) === range( 0, count( $value ) - 1 );
+        }
+        /** The pointer of the array that holds $path's target ('' for the root). */
+        private static function parent_pointer( string $path ): string {
+                $at = strrpos( $path, '/' );
+                return false === $at ? '' : substr( $path, 0, $at );
+        }
+        /** Where $path's target sits in its list, or null when its parent is not a list. */
+        private static function list_position( array $root, string $path ): ?array {
+                $parent = self::pointer_get( $root, self::parent_pointer( $path ) );
+                $last   = (string) substr( (string) strrchr( $path, '/' ), 1 );
+                if ( ! is_array( $parent ) || ! self::is_list( $parent ) || ! ctype_digit( $last ) ) {
+                        return null;
+                }
+                return [ 'index' => (int) $last, 'count_before' => count( $parent ) ];
+        }
+        /** At most this many ids in a `list` report. */
+        private const LIST_IDS_MAX = 100;
+        /**
+         * The list at $parent after an op: where the op acted, its length before and
+         * after, and each item's `id` (elements) or `_id` (repeater rows), null for
+         * an item with neither. Shows a misplaced insert before it is written.
+         */
+        private static function list_report( array $root, string $parent, int $index, int $count_before ): array {
+                $out  = [ 'path' => $parent, 'index' => $index, 'count_before' => $count_before ];
+                $list = self::pointer_get( $root, $parent );
+                if ( ! is_array( $list ) ) {
+                        return $out;
+                }
+                $items              = array_values( $list );
+                $out['count_after'] = count( $items );
+                $ids                = [];
+                foreach ( array_slice( $items, 0, self::LIST_IDS_MAX ) as $item ) {
+                        $id    = is_array( $item ) ? ( $item['id'] ?? $item['_id'] ?? null ) : null;
+                        $ids[] = is_scalar( $id ) ? (string) $id : null;
+                }
+                $out['ids_after'] = $ids;
+                if ( count( $items ) > self::LIST_IDS_MAX ) {
+                        $out['ids_truncated'] = true;
+                }
+                return $out;
+        }
+        /** Add an insert's `list` report to its op, and the index `-` stood for. */
+        private static function with_list( array $op, array $root, string $path, array $added ): array {
+                if ( null === $added['index'] ) {
+                        return $op;
+                }
+                $parent              = self::parent_pointer( $path );
+                $op['list']          = self::list_report( $root, $parent, $added['index'], $added['count_before'] );
+                $op['_resolved_path'] = $parent . '/' . $added['index'];
+                return $op;
+        }
+        /**
+         * Where annotate_stored() finds an op's value: the deepest element (an object
+         * with `id` and `elType`) on its path, by id, and the path inside it. The whole
+         * path when no element lies on it.
+         */
+        private static function stored_at( array $root, string $path ): array {
+                $segs   = self::pointer_segments( $path );
+                $node   = $root;
+                $anchor = null;
+                foreach ( $segs as $i => $seg ) {
+                        if ( ! is_array( $node ) ) {
+                                break;
+                        }
+                        if ( array_key_exists( $seg, $node ) ) {
+                                $node = $node[ $seg ];
+                        } elseif ( ctype_digit( $seg ) && array_key_exists( (int) $seg, $node ) ) {
+                                $node = $node[ (int) $seg ];
+                        } else {
+                                break;
+                        }
+                        if ( is_array( $node ) && isset( $node['elType'] ) && isset( $node['id'] ) && is_scalar( $node['id'] ) && '' !== (string) $node['id'] ) {
+                                $anchor = [ 'id' => (string) $node['id'], 'rest' => $i + 1 ];
+                        }
+                }
+                if ( null === $anchor ) {
+                        return [ 'path' => $path ];
+                }
+                $rest = array_slice( $segs, $anchor['rest'] );
+                return [
+                        'id'   => $anchor['id'],
+                        'rest' => [] === $rest ? '' : '/' . implode( '/', array_map( fn( $seg ) => self::escape_pointer_segment( (string) $seg ), $rest ) ),
+                        'path' => $path,
+                ];
+        }
 …
+        }
+        /** The same value, read the same way get_elementor_widget would return it? */
+        /**
+         * The same data? Strings byte for byte, objects whatever the order of their
+         * keys (1.21.1: Elementor's save writes an element's keys in its own order, so
+         * a real write read back as different where the dry run did not), lists in order.
+         */
         private static function same_stored_value( mixed $a, mixed $b ): bool {
+                return $a === $b || ( ! is_string( $a ) && ! is_string( $b ) && wp_json_encode( $a ) === wp_json_encode( $b ) );
+                if ( $a === $b ) {
+                        return true;
+                }
+                if ( is_string( $a ) || is_string( $b ) ) {
+                        return false;
+                }
+                return wp_json_encode( self::canonical( $a ) ) === wp_json_encode( self::canonical( $b ) );
+        }
+        /** Objects with their keys sorted, recursively; lists keep their order. */
+        private static function canonical( mixed $value ): mixed {
+                if ( ! is_array( $value ) ) {
+                        return $value;
+                }
+                $out = [];
+                foreach ( $value as $key => $item ) {
+                        $out[ $key ] = self::canonical( $item );
+                }
+                if ( ! self::is_list( $out ) ) {
+                        ksort( $out, SORT_STRING );
+                }
+                return $out;
+        }
+        /** At most this many paths in `added_paths` and in `removed_paths`. */
+        private const ADDED_PATHS_MAX = 20;
+        /**
+         * Why a stored value differs from the one sent, as `stored_difference`:
+         * - `markup_normalized`: a string holds the same HTML written differently
+         *   (quotes, character references, attribute order or case). Needs WordPress
+         *   6.5; below it such a string is `changed`.
+         * - `keys_added`: the save added keys, listed in `added_paths`.
+         * - `keys_removed`: the save dropped keys that were sent, listed in
+         *   `removed_paths` (Elementor's save drops `isInner` from a widget).
+         * - `changed`: a value differs otherwise; sanitized_report names what the
+         *   filters removed.
+         *
+         * @param array $kinds   Set of the kinds found, by reference.
+         * @param array $added   Paths of added keys, by reference.
+         * @param array $removed Paths of dropped keys, by reference.
+         */
+        private static function stored_difference( mixed $sent, mixed $stored, string $path, array &$kinds, array &$added, array &$removed ): void {
+                if ( self::same_stored_value( $sent, $stored ) ) {
+                        return;
+                }
+                if ( is_string( $sent ) && is_string( $stored ) ) {
+                        $kinds[ true === IATO_MCP_Sanitize_Report::same_markup( $sent, $stored ) ? 'markup_normalized' : 'changed' ] = true;
+                        return;
+                }
+                if ( ! is_array( $sent ) || ! is_array( $stored ) ) {
+                        $kinds['changed'] = true;
+                        return;
+                }
+                $lists = self::is_list( $sent ) && self::is_list( $stored ) && [] !== $sent && [] !== $stored;
+                if ( $lists && count( $sent ) !== count( $stored ) ) {
+                        $kinds['changed'] = true;
+                        return;
+                }
+                foreach ( $sent as $key => $item ) {
+                        $at = $path . '/' . self::escape_pointer_segment( (string) $key );
+                        if ( ! array_key_exists( $key, $stored ) ) {
+                                $kinds[ $lists ? 'changed' : 'keys_removed' ] = true;
+                                $removed[] = $at;
+                                continue;
+                        }
+                        self::stored_difference( $item, $stored[ $key ], $at, $kinds, $added, $removed );
+                }
+                foreach ( array_diff_key( $stored, $sent ) as $key => $unused ) {
+                        $kinds[ $lists ? 'changed' : 'keys_added' ] = true;
+                        $added[] = $path . '/' . self::escape_pointer_segment( (string) $key );
+                }
+        }
+        /** Every element's pointer, by id: [id => [pointer, ...]]. */
+        private static function element_paths( array $nodes, string $prefix, array &$out ): void {
+                foreach ( $nodes as $key => $node ) {
+                        if ( ! is_array( $node ) ) {
+                                continue;
+                        }
+                        $pointer = $prefix . '/' . self::escape_pointer_segment( (string) $key );
+                        if ( isset( $node['id'], $node['elType'] ) && is_scalar( $node['id'] ) ) {
+                                $out[ (string) $node['id'] ][] = $pointer;
+                        }
+                        if ( isset( $node['elements'] ) && is_array( $node['elements'] ) ) {
+                                self::element_paths( $node['elements'], $pointer . '/elements', $out );
+                        }
+                }
+        }
+        /**
+         * Where an op's value is stored: through its element's id when apply_rfc6902()
+         * noted one (exactly one element with that id), else at its path.
+         *
+         * @return string|null The pointer, or null when it cannot be found.
+         */
+        private static function stored_pointer( array $tree, array $op, ?array $at, ?array &$ids ): ?string {
+                if ( is_array( $at ) && isset( $at['id'] ) ) {
+                        if ( null === $ids ) {
+                                $ids = [];
+                                self::element_paths( $tree, '', $ids );
+                        }
+                        $paths = $ids[ $at['id'] ] ?? [];
+                        return 1 === count( $paths ) ? $paths[0] . (string) ( $at['rest'] ?? '' ) : null;
+                }
+                return (string) ( $at['path'] ?? $op['path'] ?? '' );
+        }
 …
          * Say for each op that set a value whether the tree as stored holds what was
          * sent (`stored_matches_input`), and when it does not, what it holds instead:
+         * `stored_bytes`, `stored_sha256` and `stored_value`. The sanitising pass, or
+         * `stored_bytes`, `stored_sha256` and `stored_value`, and why it differs
+         * (`stored_difference`, see stored_difference()). The sanitising pass, or
          * Elementor's own save, can change a value on the way in, and `value` is what
          * the client sent. An op whose target cannot be read back is left as it is.
+         * Removes apply_rfc6902()'s `_stored_at` from every op.
+         *
          * @param array      $applied The ops, each with a JSON pointer `path` into the tree.
 …
          */
         public static function annotate_stored( array $applied, ?array $tree ): array {
+                if ( null === $tree ) {
+                        return $applied;
+                }
+                $ids = null;
                 foreach ( $applied as $i => $op ) {
                         if ( ! is_array( $op ) || ! array_key_exists( 'value', $op ) || ! in_array( $op['op'] ?? '', [ 'add', 'replace' ], true ) ) {
+                        if ( ! is_array( $op ) ) {
                                 continue;
+                        }
+                        $stored = self::pointer_get( $tree, (string) ( $op['path'] ?? '' ) );
+                        if ( is_wp_error( $stored ) ) {
+                        $at = isset( $op['_stored_at'] ) && is_array( $op['_stored_at'] ) ? $op['_stored_at'] : null;
+                        unset( $applied[ $i ]['_stored_at'] );
+                        if ( null === $tree || ! array_key_exists( 'value', $op ) || ! in_array( $op['op'] ?? '', [ 'add', 'replace' ], true ) ) {
+                                continue;
+                        }
+                        $pointer = self::stored_pointer( $tree, $op, $at, $ids );
+                        $stored  = null === $pointer ? null : self::pointer_get( $tree, $pointer );
+                        if ( null === $pointer || is_wp_error( $stored ) ) {
                                 continue;
+                        }
 …
                                 $applied[ $i ]['stored_bytes']  = $digest['bytes'];
                                 $applied[ $i ]['stored_sha256'] = $digest['sha256'];
+                                $applied[ $i ]                  = self::with_difference( $applied[ $i ], $op['value'], $stored, $pointer );
                                 $applied[ $i ]['stored_value']  = $stored;
+                        }
+                }
                 return $applied;
+        }
+        /** Add `stored_difference` (and `added_paths`) to an op whose stored value differs. */
+        private static function with_difference( array $op, mixed $sent, mixed $stored, string $path ): array {
+                $kinds   = [];
+                $added   = [];
+                $removed = [];
+                self::stored_difference( $sent, $stored, $path, $kinds, $added, $removed );
+                if ( [] === $kinds ) {
+                        $kinds['changed'] = true; // differs, and no part of it says how
+                }
+                $op['stored_difference'] = array_values( array_intersect( [ 'changed', 'keys_added', 'keys_removed', 'markup_normalized' ], array_keys( $kinds ) ) );
+                if ( isset( $kinds['keys_added'] ) ) {
+                        $op['added_paths'] = array_slice( $added, 0, self::ADDED_PATHS_MAX );
+                }
+                if ( isset( $kinds['keys_removed'] ) ) {
+                        $op['removed_paths'] = array_slice( $removed, 0, self::ADDED_PATHS_MAX );
+                }
+                return $op;
+        }
 …
                                 $applied[ $i ]['stored_bytes']  = $digest['bytes'];
                                 $applied[ $i ]['stored_sha256'] = $digest['sha256'];
+                                // No stored_difference: the difference here is Elementor's typed envelope.
+                        }
+                }

iato-mcp/tags/1.21.1/includes/class-page-fonts.php

-              r3797770
+              r3798383
         private static $google_on = null;
+        /** @var callable|null Test seam: fn(): bool, Elementor's "Load Google Fonts Locally". */
+        private static $local_setting = null;
+        /** @var callable|null Test seam: fn(): array, the local copies Elementor holds (_elementor_local_google_fonts). */
+        private static $local_copies = null;
+        /** Elementor's font types that Google_Font serves, from Google or from a local copy. */
+        private const GOOGLE_TYPES = [ 'googlefonts', 'earlyaccess' ];
         public static function init(): void {
                 // wp_enqueue_scripts runs inside wp_head at priority 1; Elementor prints the
 …
+        }
+        public static function local_google_fonts(): bool {
+        /** Replace where Google fonts come from, for unit tests; nulls restore it. */
+        public static function set_font_sources( ?callable $local_setting, ?callable $local_copies ): void {
+                self::$local_setting = $local_setting;
+                self::$local_copies  = $local_copies;
+        }
+        /** Elementor's "Load Google Fonts Locally" setting, read as Google_Font::enqueue() reads it. */
+        public static function local_google_fonts_setting(): bool {
+                if ( null !== self::$local_setting ) {
+                        return (bool) ( self::$local_setting )();
+                }
                 return (bool) get_option( 'elementor_local_google_fonts', '0' );
+        }
+        /**
+         * Where Elementor serves a family from (1.21.1), or null for one that is not a
+         * Google font. Google_Font::enqueue() first serves a local copy it already holds,
+         * whatever the setting says (turning the setting off does not delete them), and
+         * only then reads the setting: on, it downloads a copy on the first page view
+         * and uses Google's when that fails; off, Google's. The same in Elementor 4.2.2
+         * and 4.3.4. Until 1.21.1 the plugin read only the setting.
+         *
+         * @return string|null 'local', 'local_after_first_view' or 'google'.
+         */
+        public static function served_from( string $family, ?string $type ): ?string {
+                if ( ! in_array( $type, self::GOOGLE_TYPES, true ) ) {
+                        return null;
+                }
+                $copies = null !== self::$local_copies ? ( self::$local_copies )() : get_option( '_elementor_local_google_fonts', [] );
+                $copy   = is_array( $copies ) ? ( $copies[ sanitize_key( $family ) ] ?? null ) : null;
+                if ( is_array( $copy ) && ! empty( $copy['url'] ) ) {
+                        return 'local';
+                }
+                return self::local_google_fonts_setting() ? 'local_after_first_view' : 'google';
+        }
+        /**
+         * The fields get_page_fonts and set_page_fonts report about where fonts come from:
+         * `served_from` for each Google family, `google_fonts_local` (true when every
+         * Google family on the page is served from this site; with none, the setting, as
+         * before 1.21.1) and `local_google_fonts_setting`.
+         *
+         * @param array<string,string|null> $types Family => Elementor's type.
+         */
+        public static function source_report( array $types ): array {
+                $served = [];
+                foreach ( $types as $family => $type ) {
+                        $from = self::served_from( (string) $family, $type );
+                        if ( null !== $from ) {
+                                $served[ (string) $family ] = $from;
+                        }
+                }
+                $setting = self::local_google_fonts_setting();
+                return [
+                        'served_from'                => (object) $served,
+                        'google_fonts_local'         => [] === $served ? $setting : ! in_array( 'google', $served, true ),
+                        'local_google_fonts_setting' => $setting,
+                ];
+        }

iato-mcp/tags/1.21.1/includes/class-sanitize-report.php

-              r3797770
+              r3798383
  * the output are compared: each is reduced to an inventory of tags and
  * attributes, and whatever the output has fewer of was removed. Pure PHP, no
+ * WordPress calls.
+ * WordPress calls, except same_markup(), which uses WordPress's tokenizer when
+ * there is one.
+ *
  * @package IATO_MCP
 …
                 'stripped_unsafe'        => 'Inline SVG and style blocks were removed: the markup did not pass the safety check.',
         ];
+        /** HTML's void elements: a self-closing slash on one changes nothing. */
+        private const VOID = [ 'AREA', 'BASE', 'BR', 'COL', 'EMBED', 'HR', 'IMG', 'INPUT', 'LINK', 'META', 'SOURCE', 'TRACK', 'WBR' ];
+        /**
+         * The same HTML written differently? Same tags in the same order, the same
+         * attributes with the same decoded values, the same decoded text; quotes,
+         * character references, attribute order and case may differ (kses rewrites
+         * single-quoted attributes with double quotes). Null when it cannot tell:
+         * WordPress below 6.5 (no WP_HTML_Tag_Processor::next_token()), or markup
+         * the tokenizer stops in. 1.21.1, for `stored_difference`.
+         */
+        public static function same_markup( string $a, string $b ): ?bool {
+                $left = self::markup_tokens( $a );
+                if ( null === $left ) {
+                        return null;
+                }
+                $right = self::markup_tokens( $b );
+                return null === $right ? null : $left === $right;
+        }
+        /** @return array|null Each token as data, or null (see same_markup()). */
+        private static function markup_tokens( string $html ): ?array {
+                if ( ! class_exists( 'WP_HTML_Tag_Processor' ) || ! method_exists( 'WP_HTML_Tag_Processor', 'next_token' ) ) {
+                        return null;
+                }
+                $processor = new WP_HTML_Tag_Processor( $html );
+                $tokens    = [];
+                while ( $processor->next_token() ) {
+                        $type = $processor->get_token_type();
+                        if ( '#tag' !== $type ) {
+                                $tokens[] = [ $type, $processor->get_modifiable_text() ];
+                                continue;
+                        }
+                        $tag        = (string) $processor->get_tag();
+                        $attributes = [];
+                        foreach ( (array) $processor->get_attribute_names_with_prefix( '' ) as $name ) {
+                                $attributes[ $name ] = $processor->get_attribute( $name );
+                        }
+                        ksort( $attributes, SORT_STRING );
+                        $self_closing = in_array( $tag, self::VOID, true ) ? false : $processor->has_self_closing_flag();
+                        $tokens[]     = [ '#tag', $tag, $processor->is_tag_closer(), $attributes, $self_closing ];
+                }
+                if ( method_exists( $processor, 'paused_at_incomplete_token' ) && $processor->paused_at_incomplete_token() ) {
+                        return null;
+                }
+                return $tokens;
+        }
         /**
 …
                         $notes[] = self::POLICY_NOTES[ $policy ];
+                }
+                // 1.21.1: a value kses rewrote without removing anything (single quotes become
+                // double quotes) was reported with nothing in it.
+                if ( 'html' === $rule && '' === $policy && [] === $removed['removed_tags'] && [] === $removed['removed_attributes'] && empty( $entry['removed_css'] ) ) {
+                        $notes[] = true === self::same_markup( $before, $after )
+                                ? 'Nothing was removed: WordPress wrote the same HTML differently (attribute quotes, character references, attribute order or case).'
+                                : 'No tag or attribute was removed: WordPress rewrote part of the value, such as an attribute value or character references.';
+                }
                 // 1.21.0: where a page's CSS can go instead. set_page_css ships switched off, so
                 // a client cannot see it in tools/list until an administrator turns it on.

iato-mcp/tags/1.21.1/includes/class-settings.php

-              r3797770
+              r3798383
                 // $bridge_gated reflects the key as it was when the form was rendered,
                 // i.e. before this request saved it.
+                $tools = iato_mcp_merge_gated_tools(
+                $tools_before = array_values( array_filter( self::TOOL_NAMES, [ self::class, 'is_tool_enabled' ] ) );
+                $tools        = iato_mcp_merge_gated_tools(
                         self::sanitize_tools( $tools_raw, false ),
                         get_option( 'iato_mcp_tools', [] ),
 …
                 );
                 update_option( 'iato_mcp_tools', $tools );
+                // 1.21.1: clients read the tool list when they connect, and this server has
+                // no stream on which to tell them it changed (notifications/tools/list_changed).
+                $tools_after   = array_values( array_filter( self::TOOL_NAMES, [ self::class, 'is_tool_enabled' ] ) );
+                $tools_changed = $tools_before !== $tools_after;
                 // WordPress Abilities exposure toggle (hidden value=0 sibling pattern,
 …
                 wp_send_json_success( [
+                        'message' => __( 'Settings saved.', 'iato-mcp' ),
+                        'message' => $tools_changed
+                                ? __( 'Settings saved. AI clients read the tool list when they connect: reconnect the connector in your AI client to see the tools you turned on or off.', 'iato-mcp' )
+                                : __( 'Settings saved.', 'iato-mcp' ),
                         'values'  => [
                                 'api_key_length'      => strlen( $api_key ),
                                 'crawl_id'            => $crawl_id,
                                 'tools_enabled'       => count( $tools ),
+                                'tools_changed'       => $tools_changed,
                                 'abilities_enabled'   => $abilities_enabled,
                                 'cache_purge_enabled' => $cache_purge_enabled,
 …
                                                 </span>
                                         </div>
                                         <p class="iato-card-desc"><?php esc_html_e( 'Choose which MCP tools are available to AI clients.', 'iato-mcp' ); ?></p>
+                                        <p class="iato-card-desc"><?php esc_html_e( 'Choose which MCP tools are available to AI clients. AI clients read this list when they connect: after a change, reconnect the connector in your AI client to see it.', 'iato-mcp' ); ?></p>
                                         <?php foreach ( self::TOOL_CATEGORIES as $category => $tools ) :

iato-mcp/tags/1.21.1/includes/tools/wp/tool-elementor-widgets.php

-              r3797770
+              r3798383
         'update_elementor_patch',
+        [
                 'description' => 'Apply an RFC 6902 JSON Patch to the entire Elementor document. Use this for surgical array entry edits (repeater rows, indexed inserts) where update_elementor_widget\'s replace-only array semantics are too coarse. Each op may include op, path, value, from. Supports dry_run, if_revision, idempotency_key. Requires edit_posts. Plain values set on Elementor Atomic Editor (V4) elements (Elementor 4.3.0 or later) are converted and validated with Elementor\'s own code; elsewhere atomic elements accept only $$type envelope values.',
+                'description' => 'Apply an RFC 6902 JSON Patch to the entire Elementor document. Use this for surgical array entry edits (repeater rows, indexed inserts) where update_elementor_widget\'s replace-only array semantics are too coarse. Each op may include op, path, value, from. add at a list index inserts before the item there (RFC 6902); replace overwrites it; /- appends. Each op on a list item returns list (count_before, count_after, ids_after) so a dry run shows where it lands. Supports dry_run, if_revision, idempotency_key. Requires edit_posts. Plain values set on Elementor Atomic Editor (V4) elements (Elementor 4.3.0 or later) are converted and validated with Elementor\'s own code; elsewhere atomic elements accept only $$type envelope values.',
                 'inputSchema' => [
                         'type'       => 'object',
                         'properties' => [
                                 'id'              => [ 'type' => 'integer', 'description' => 'WordPress post/page ID (required).' ],
                                 'ops'             => [ 'type' => 'array',   'description' => 'RFC 6902 op array (required). Supports add, remove, replace, move, copy, test.' ],
+                                'ops'             => [ 'type' => 'array',   'description' => 'RFC 6902 op array (required). Supports add, remove, replace, move, copy, test. add, copy and move insert at a list index; an index past the end is refused.' ],
                                 'dry_run'         => [ 'type' => 'boolean', 'description' => 'Preview applied_patch without writing (default: false).' ],
                                 'if_revision'     => [ 'type' => 'string',  'description' => 'Optional revision guard.' ],

iato-mcp/tags/1.21.1/includes/tools/wp/tool-page-assets.php

-              r3797770
+              r3798383
         'get_page_fonts',
+        [
                 'description' => 'Returns the font families set_page_fonts loads on one post, each with Elementor\'s type for it, and whether Elementor loads Google fonts from this site. Requires edit_post on the post.',
+                'description' => 'Returns the font families set_page_fonts loads on one post, each with Elementor\'s type for it, and for each Google font where Elementor serves it from (served_from: local, local_after_first_view or google). Requires edit_post on the post.',
                 'inputSchema' => [
                         'type'       => 'object',
 …
                         $types[ $font ] = IATO_MCP_Page_Fonts::type_of( $font );
+                }
                 return IATO_MCP_Server::ok( [ 'id' => $post->ID, 'fonts' => $fonts, 'types' => (object) $types, 'google_fonts_local' => IATO_MCP_Page_Fonts::local_google_fonts() ] );
+                return IATO_MCP_Server::ok( [ 'id' => $post->ID, 'fonts' => $fonts, 'types' => (object) $types ] + IATO_MCP_Page_Fonts::source_report( $types ) );
+        }
 );
 …
         'set_page_fonts',
+        [
                 'description' => 'Loads font families on one post or page only, through Elementor\'s own font loader, so a page\'s CSS can use a font the site does not load elsewhere. Each family must be one Elementor knows (its Google fonts, system fonts, or Elementor Pro custom and Adobe fonts), spelled as Elementor lists it: unknown_font otherwise. With Elementor\'s "Load Google Fonts Locally" on, visitors fetch them from this site, not Google. Elementor loads every weight of a family, so there is no weights option. fonts replaces the list (at most 10; [] removes it). This plugin loads them, so the page loses them while the plugin is deactivated. Accepts dry_run. Returns the list with each family\'s type, a change_receipt and a cache object (that page is purged). Requires Elementor and edit_post on the post.',
+                'description' => 'Loads font families on one post or page only, through Elementor\'s own font loader, so a page\'s CSS can use a font the site does not load elsewhere. Each family must be one Elementor knows (its Google fonts, system fonts, or Elementor Pro custom and Adobe fonts), spelled as Elementor lists it: unknown_font otherwise. Elementor serves a Google font from this site when it already holds a copy, or when its "Load Google Fonts Locally" is on; served_from says which for each. Elementor loads every weight of a family, so there is no weights option. fonts replaces the list (at most 10; [] removes it). This plugin loads them, so the page loses them while the plugin is deactivated. Accepts dry_run. Returns the list with each family\'s type and served_from, a change_receipt and a cache object (that page is purged). Requires Elementor and edit_post on the post.',
                 'inputSchema' => [
                         'type'       => 'object',
 …
+                }
                 $stored = IATO_MCP_Page_Fonts::stored( $post->ID );
                 $data   = [ 'id' => $post->ID, 'fonts' => $plan['fonts'], 'types' => (object) $plan['types'], 'google_fonts_local' => IATO_MCP_Page_Fonts::local_google_fonts() ];
+                $data   = [ 'id' => $post->ID, 'fonts' => $plan['fonts'], 'types' => (object) $plan['types'] ] + IATO_MCP_Page_Fonts::source_report( $plan['types'] );
                 $notes  = [];
                 foreach ( $plan['types'] as $font => $type ) {

iato-mcp/tags/1.21.1/readme.txt

-              r3797770
+              r3798383
 Tested up to: 7.1
 Requires PHP: 8.0
 Stable tag: 1.21.0
+Stable tag: 1.21.1
 License: GPL-2.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
 …
 == Changelog ==
+= 1.21.1 =
+* Fix: `update_elementor_patch`: `add` at a list index now inserts before the item there, as RFC 6902 says and the tool's description promised. Since 1.3.0 it replaced the item, so a widget added at an index deleted the widget that stood there. `copy` to an index overwrote the item there and `move` to an index deleted one; both now insert. An index past the end of a list is refused instead of leaving a gap, and an element cannot be moved into its own children. Use `replace` to overwrite. A page that lost an element this way can be put back by rolling back that write's receipt within 90 days, or from Elementor's revisions.
+* Fix: `update_elementor_patch`: `remove` of an item in the middle of a list left a gap in its numbering, so a later op in the same patch could not find the next item, and the list could be stored as a JSON object.
+* New: each `update_elementor_patch` op on a list item returns `list` (where it acted, the list's length before and after, and its items' ids afterwards), on dry runs too, so a misplaced insert shows before it is written.
+* Fix: `stored_matches_input` no longer reads a different key order as a different value. Elementor's save writes an element's keys in its own order, so a real write said false where its dry run said true.
+* Fix: an `add` to `/-`, and an op whose position a later op in the same patch shifted, now get `stored_matches_input`. They used to get nothing, or be compared with whatever stood at the old position.
+* New: when the stored value differs, `stored_difference` says how: `markup_normalized` (the same HTML written differently, such as single quotes rewritten as double quotes), `keys_added` or `keys_removed` (with `added_paths` and `removed_paths`; Elementor's save drops `isInner` from a widget), or `changed`. A `sanitized_report` entry for a value WordPress rewrote without removing anything now says so; it used to be empty.
+* Fix: `get_page_fonts` and `set_page_fonts` report where each Google font is served from (`served_from`: `local`, `local_after_first_view` or `google`). Elementor serves a local copy it already holds even with "Load Google Fonts Locally" off, so `google_fonts_local` was false on sites that served fonts locally. It now means every Google font on the page comes from this site; `local_google_fonts_setting` gives the setting itself.
+* New: Settings > IATO MCP > Tools says that AI clients read the tool list when they connect, and saving a change to the tools says to reconnect the connector. This server cannot tell a connected client that the list changed.
 = 1.21.0 =
 * New: `set_page_css` and `get_page_css` give one page its own CSS, printed in that page's head only. They follow the same rules as Additional CSS: nothing loaded from another site, at most 200 KB, and anything that would close the style element removed. The CSS is checked again when it is printed. Needs a WordPress user who may edit CSS (administrators and editors) and `edit_post` on the page.
 …
 == Upgrade Notice ==
+= 1.21.1 =
+Fixes update_elementor_patch: add at an index now inserts, as RFC 6902 says, instead of replacing (deleting) the element there. Use replace to overwrite. Also clearer stored-value and font-source reports.
 = 1.21.0 =
 Adds page CSS, fonts, approved page scripts and draft preview links (all switched off until you turn them on), keeps ARIA, form attributes and more SVG in Elementor HTML, and says what Elementor stored.

iato-mcp/trunk/iato-mcp.php

-              r3797770
+              r3798383
  * Plugin URI:  https://iato.ai/wordpress-mcp
  * Description: Exposes an MCP server from any self-hosted WordPress install, enabling IATO analyze-and-fix workflows via Claude Desktop and other AI clients.
  * Version:     1.21.0
+ * Version:     1.21.1
  * Author:      IATO
  * Author URI:  https://iato.ai
 …
 defined( 'ABSPATH' ) || exit;
 define( 'IATO_MCP_VERSION', '1.21.0' );
+define( 'IATO_MCP_VERSION', '1.21.1' );
 define( 'IATO_MCP_FILE', __FILE__ );
 define( 'IATO_MCP_DIR', plugin_dir_path( __FILE__ ) );

iato-mcp/trunk/includes/class-elementor-adapter.php

-              r3797770
+              r3798383
          * Implements: add, remove, replace, move, copy, test.
          * Strict path semantics: replace/remove/move/copy fail on missing paths.
+         * add, copy and move insert into a list at an index, as RFC 6902 says (1.21.1:
+         * they replaced the element there until then), and each op on a list item
+         * reports the list as it is afterwards (`list`, `from_list`).
+         *
+         * Each op that sets a value also carries `_stored_at`, where annotate_stored()
+         * finds it in the stored tree: its element's id and the path inside it, so a
+         * later op that shifts the list does not send it to another element.
+         * annotate_stored() removes the key.
+         *
          * @return array|WP_Error Applied ops on success.
 …
                                 return $result;
+                        }
+                        if ( in_array( $result['op'], [ 'add', 'replace' ], true ) ) {
+                                $result['_stored_at'] = self::stored_at( $elements, $result['_resolved_path'] ?? $result['path'] );
+                        }
+                        unset( $result['_resolved_path'] );
                         $applied[] = $result;
+                }
 …
                                         return new WP_Error( 'invalid_patch', "add op missing 'value' at {$path}" );
+                                }
                                 $err = self::pointer_set( $elements, $path, $op['value'], true );
                                 if ( is_wp_error( $err ) ) {
                                         return $err;
+                                }
                                 return [ 'op' => 'add', 'path' => $path, 'value' => $op['value'] ];
+                                $added = self::pointer_add( $elements, $path, $op['value'] );
+                                if ( is_wp_error( $added ) ) {
+                                        return $added;
+                                }
+                                return self::with_list( [ 'op' => 'add', 'path' => $path, 'value' => $op['value'] ], $elements, $path, $added );
                         case 'replace':
 …
                                         return $prev;
+                                }
+                                $err = self::pointer_remove( $elements, $path );
+                                $removed = self::list_position( $elements, $path );
+                                $err     = self::pointer_remove( $elements, $path );
                                 if ( is_wp_error( $err ) ) {
                                         return $err;
+                                }
+                                return [ 'op' => 'remove', 'path' => $path, 'previous_value' => $prev ];
+                                $out = [ 'op' => 'remove', 'path' => $path, 'previous_value' => $prev ];
+                                if ( null !== $removed ) {
+                                        $out['list'] = self::list_report( $elements, self::parent_pointer( $path ), $removed['index'], $removed['count_before'] );
+                                }
+                                return $out;
                         case 'move':
 …
                                         return new WP_Error( 'invalid_patch', "move op missing 'from' at {$path}" );
+                                }
+                                // RFC 6902 4.4: an element cannot move into its own children.
+                                if ( str_starts_with( $path, $from . '/' ) ) {
+                                        return new WP_Error( 'invalid_patch', "move op cannot move {$from} into itself ({$path})." );
+                                }
                                 $value = self::pointer_get( $elements, $from );
                                 if ( is_wp_error( $value ) ) {
                                         return $value;
+                                }
+                                $err = self::pointer_remove( $elements, $from );
+                                $taken = self::list_position( $elements, $from );
+                                $err   = self::pointer_remove( $elements, $from );
                                 if ( is_wp_error( $err ) ) {
                                         return $err;
+                                }
+                                $err = self::pointer_set( $elements, $path, $value, true );
+                                if ( is_wp_error( $err ) ) {
+                                        return $err;
+                                }
+                                return [ 'op' => 'move', 'from' => $from, 'path' => $path, 'value' => $value ];
+                                $added = self::pointer_add( $elements, $path, $value );
+                                if ( is_wp_error( $added ) ) {
+                                        return $added;
+                                }
+                                $out         = [ 'op' => 'move', 'from' => $from, 'path' => $path, 'value' => $value ];
+                                $same_parent = self::parent_pointer( $from ) === self::parent_pointer( $path );
+                                if ( $same_parent && null !== $taken && null !== $added['index'] ) {
+                                        // One list: its length before the move, not between the two halves of it.
+                                        $added['count_before'] = $taken['count_before'];
+                                } elseif ( null !== $taken ) {
+                                        $out['from_list'] = self::list_report( $elements, self::parent_pointer( $from ), $taken['index'], $taken['count_before'] );
+                                }
+                                return self::with_list( $out, $elements, $path, $added );
                         case 'copy':
 …
                                         return $value;
+                                }
                                 $err = self::pointer_set( $elements, $path, $value, true );
                                 if ( is_wp_error( $err ) ) {
                                         return $err;
+                                }
                                 return [ 'op' => 'copy', 'from' => $from, 'path' => $path, 'value' => $value ];
+                                $added = self::pointer_add( $elements, $path, $value );
+                                if ( is_wp_error( $added ) ) {
+                                        return $added;
+                                }
+                                return self::with_list( [ 'op' => 'copy', 'from' => $from, 'path' => $path, 'value' => $value ], $elements, $path, $added );
                         case 'test':
 …
                         return new WP_Error( 'invalid_patch_path', "Path not found: {$path}" );
+                }
+                // Asked before the unset (1.21.1): afterwards a list missing its middle item
+                // has keys 0 and 2, was never re-indexed, and was stored as a JSON object.
+                $was_list = self::is_list( $node );
                 unset( $node[ $key ] );
                 // Re-index numeric arrays so subsequent path resolution doesn't break.
                 if ( array_keys( $node ) === range( 0, count( $node ) - 1 ) ) {
+                // Re-index lists so subsequent path resolution doesn't break.
+                if ( $was_list ) {
                         $node = array_values( $node );
+                }
                 return null;
+        }
+        /**
+         * RFC 6902 add: insert into a list at an index (`-` or the list's length
+         * appends), set a member of an object. Mutates by reference.
+         *
+         * A list is an array keyed 0..n-1, or empty. Anything else is an object,
+         * including a stored page whose elements have gaps in their numbering, which
+         * keeps the behaviour it had: the key is set, and `-` appends.
+         *
+         * @return array|WP_Error `index` and `count_before` for a list insert, both null otherwise.
+         */
+        public static function pointer_add( array &$root, string $path, mixed $value ): array|WP_Error {
+                if ( '' === $path ) {
+                        return new WP_Error( 'invalid_patch_path', 'Cannot replace root document.' );
+                }
+                $segs = self::pointer_segments( $path );
+                $last = array_pop( $segs );
+                $node = &$root;
+                foreach ( $segs as $seg ) {
+                        if ( ! is_array( $node ) ) {
+                                return new WP_Error( 'invalid_patch_path', "Cannot traverse non-array at {$path}" );
+                        }
+                        if ( array_key_exists( $seg, $node ) ) {
+                                $node = &$node[ $seg ];
+                                continue;
+                        }
+                        if ( ctype_digit( $seg ) && array_key_exists( (int) $seg, $node ) ) {
+                                $node = &$node[ (int) $seg ];
+                                continue;
+                        }
+                        return new WP_Error( 'invalid_patch_path', "Path not found: {$path}" );
+                }
+                if ( ! is_array( $node ) ) {
+                        return new WP_Error( 'invalid_patch_path', "Cannot set on non-array at {$path}" );
+                }
+                if ( self::is_list( $node ) && ( '-' === $last || ctype_digit( $last ) ) ) {
+                        $count = count( $node );
+                        if ( '-' === $last ) {
+                                $index = $count;
+                        } else {
+                                if ( strlen( $last ) > 1 && '0' === $last[0] ) {
+                                        return new WP_Error( 'invalid_patch_path', "Index {$last} has a leading zero at {$path}." );
+                                }
+                                $index = (int) $last;
+                                if ( $index > $count ) {
+                                        return new WP_Error( 'invalid_patch_path', "Index {$index} is past the end of a list of {$count} at {$path}. Use {$count} or - to append." );
+                                }
+                        }
+                        array_splice( $node, $index, 0, [ $value ] );
+                        return [ 'index' => $index, 'count_before' => $count ];
+                }
+                if ( '-' === $last ) {
+                        $node[] = $value;
+                } else {
+                        $node[ ctype_digit( $last ) ? (int) $last : $last ] = $value;
+                }
+                return [ 'index' => null, 'count_before' => null ];
+        }
+        /** Keyed 0..n-1, or empty: a JSON array. (array_is_list() needs PHP 8.1.) */
+        private static function is_list( array $value ): bool {
+                return [] === $value || array_keys( $value ) === range( 0, count( $value ) - 1 );
+        }
+        /** The pointer of the array that holds $path's target ('' for the root). */
+        private static function parent_pointer( string $path ): string {
+                $at = strrpos( $path, '/' );
+                return false === $at ? '' : substr( $path, 0, $at );
+        }
+        /** Where $path's target sits in its list, or null when its parent is not a list. */
+        private static function list_position( array $root, string $path ): ?array {
+                $parent = self::pointer_get( $root, self::parent_pointer( $path ) );
+                $last   = (string) substr( (string) strrchr( $path, '/' ), 1 );
+                if ( ! is_array( $parent ) || ! self::is_list( $parent ) || ! ctype_digit( $last ) ) {
+                        return null;
+                }
+                return [ 'index' => (int) $last, 'count_before' => count( $parent ) ];
+        }
+        /** At most this many ids in a `list` report. */
+        private const LIST_IDS_MAX = 100;
+        /**
+         * The list at $parent after an op: where the op acted, its length before and
+         * after, and each item's `id` (elements) or `_id` (repeater rows), null for
+         * an item with neither. Shows a misplaced insert before it is written.
+         */
+        private static function list_report( array $root, string $parent, int $index, int $count_before ): array {
+                $out  = [ 'path' => $parent, 'index' => $index, 'count_before' => $count_before ];
+                $list = self::pointer_get( $root, $parent );
+                if ( ! is_array( $list ) ) {
+                        return $out;
+                }
+                $items              = array_values( $list );
+                $out['count_after'] = count( $items );
+                $ids                = [];
+                foreach ( array_slice( $items, 0, self::LIST_IDS_MAX ) as $item ) {
+                        $id    = is_array( $item ) ? ( $item['id'] ?? $item['_id'] ?? null ) : null;
+                        $ids[] = is_scalar( $id ) ? (string) $id : null;
+                }
+                $out['ids_after'] = $ids;
+                if ( count( $items ) > self::LIST_IDS_MAX ) {
+                        $out['ids_truncated'] = true;
+                }
+                return $out;
+        }
+        /** Add an insert's `list` report to its op, and the index `-` stood for. */
+        private static function with_list( array $op, array $root, string $path, array $added ): array {
+                if ( null === $added['index'] ) {
+                        return $op;
+                }
+                $parent              = self::parent_pointer( $path );
+                $op['list']          = self::list_report( $root, $parent, $added['index'], $added['count_before'] );
+                $op['_resolved_path'] = $parent . '/' . $added['index'];
+                return $op;
+        }
+        /**
+         * Where annotate_stored() finds an op's value: the deepest element (an object
+         * with `id` and `elType`) on its path, by id, and the path inside it. The whole
+         * path when no element lies on it.
+         */
+        private static function stored_at( array $root, string $path ): array {
+                $segs   = self::pointer_segments( $path );
+                $node   = $root;
+                $anchor = null;
+                foreach ( $segs as $i => $seg ) {
+                        if ( ! is_array( $node ) ) {
+                                break;
+                        }
+                        if ( array_key_exists( $seg, $node ) ) {
+                                $node = $node[ $seg ];
+                        } elseif ( ctype_digit( $seg ) && array_key_exists( (int) $seg, $node ) ) {
+                                $node = $node[ (int) $seg ];
+                        } else {
+                                break;
+                        }
+                        if ( is_array( $node ) && isset( $node['elType'] ) && isset( $node['id'] ) && is_scalar( $node['id'] ) && '' !== (string) $node['id'] ) {
+                                $anchor = [ 'id' => (string) $node['id'], 'rest' => $i + 1 ];
+                        }
+                }
+                if ( null === $anchor ) {
+                        return [ 'path' => $path ];
+                }
+                $rest = array_slice( $segs, $anchor['rest'] );
+                return [
+                        'id'   => $anchor['id'],
+                        'rest' => [] === $rest ? '' : '/' . implode( '/', array_map( fn( $seg ) => self::escape_pointer_segment( (string) $seg ), $rest ) ),
+                        'path' => $path,
+                ];
+        }
 …
+        }
+        /** The same value, read the same way get_elementor_widget would return it? */
+        /**
+         * The same data? Strings byte for byte, objects whatever the order of their
+         * keys (1.21.1: Elementor's save writes an element's keys in its own order, so
+         * a real write read back as different where the dry run did not), lists in order.
+         */
         private static function same_stored_value( mixed $a, mixed $b ): bool {
+                return $a === $b || ( ! is_string( $a ) && ! is_string( $b ) && wp_json_encode( $a ) === wp_json_encode( $b ) );
+                if ( $a === $b ) {
+                        return true;
+                }
+                if ( is_string( $a ) || is_string( $b ) ) {
+                        return false;
+                }
+                return wp_json_encode( self::canonical( $a ) ) === wp_json_encode( self::canonical( $b ) );
+        }
+        /** Objects with their keys sorted, recursively; lists keep their order. */
+        private static function canonical( mixed $value ): mixed {
+                if ( ! is_array( $value ) ) {
+                        return $value;
+                }
+                $out = [];
+                foreach ( $value as $key => $item ) {
+                        $out[ $key ] = self::canonical( $item );
+                }
+                if ( ! self::is_list( $out ) ) {
+                        ksort( $out, SORT_STRING );
+                }
+                return $out;
+        }
+        /** At most this many paths in `added_paths` and in `removed_paths`. */
+        private const ADDED_PATHS_MAX = 20;
+        /**
+         * Why a stored value differs from the one sent, as `stored_difference`:
+         * - `markup_normalized`: a string holds the same HTML written differently
+         *   (quotes, character references, attribute order or case). Needs WordPress
+         *   6.5; below it such a string is `changed`.
+         * - `keys_added`: the save added keys, listed in `added_paths`.
+         * - `keys_removed`: the save dropped keys that were sent, listed in
+         *   `removed_paths` (Elementor's save drops `isInner` from a widget).
+         * - `changed`: a value differs otherwise; sanitized_report names what the
+         *   filters removed.
+         *
+         * @param array $kinds   Set of the kinds found, by reference.
+         * @param array $added   Paths of added keys, by reference.
+         * @param array $removed Paths of dropped keys, by reference.
+         */
+        private static function stored_difference( mixed $sent, mixed $stored, string $path, array &$kinds, array &$added, array &$removed ): void {
+                if ( self::same_stored_value( $sent, $stored ) ) {
+                        return;
+                }
+                if ( is_string( $sent ) && is_string( $stored ) ) {
+                        $kinds[ true === IATO_MCP_Sanitize_Report::same_markup( $sent, $stored ) ? 'markup_normalized' : 'changed' ] = true;
+                        return;
+                }
+                if ( ! is_array( $sent ) || ! is_array( $stored ) ) {
+                        $kinds['changed'] = true;
+                        return;
+                }
+                $lists = self::is_list( $sent ) && self::is_list( $stored ) && [] !== $sent && [] !== $stored;
+                if ( $lists && count( $sent ) !== count( $stored ) ) {
+                        $kinds['changed'] = true;
+                        return;
+                }
+                foreach ( $sent as $key => $item ) {
+                        $at = $path . '/' . self::escape_pointer_segment( (string) $key );
+                        if ( ! array_key_exists( $key, $stored ) ) {
+                                $kinds[ $lists ? 'changed' : 'keys_removed' ] = true;
+                                $removed[] = $at;
+                                continue;
+                        }
+                        self::stored_difference( $item, $stored[ $key ], $at, $kinds, $added, $removed );
+                }
+                foreach ( array_diff_key( $stored, $sent ) as $key => $unused ) {
+                        $kinds[ $lists ? 'changed' : 'keys_added' ] = true;
+                        $added[] = $path . '/' . self::escape_pointer_segment( (string) $key );
+                }
+        }
+        /** Every element's pointer, by id: [id => [pointer, ...]]. */
+        private static function element_paths( array $nodes, string $prefix, array &$out ): void {
+                foreach ( $nodes as $key => $node ) {
+                        if ( ! is_array( $node ) ) {
+                                continue;
+                        }
+                        $pointer = $prefix . '/' . self::escape_pointer_segment( (string) $key );
+                        if ( isset( $node['id'], $node['elType'] ) && is_scalar( $node['id'] ) ) {
+                                $out[ (string) $node['id'] ][] = $pointer;
+                        }
+                        if ( isset( $node['elements'] ) && is_array( $node['elements'] ) ) {
+                                self::element_paths( $node['elements'], $pointer . '/elements', $out );
+                        }
+                }
+        }
+        /**
+         * Where an op's value is stored: through its element's id when apply_rfc6902()
+         * noted one (exactly one element with that id), else at its path.
+         *
+         * @return string|null The pointer, or null when it cannot be found.
+         */
+        private static function stored_pointer( array $tree, array $op, ?array $at, ?array &$ids ): ?string {
+                if ( is_array( $at ) && isset( $at['id'] ) ) {
+                        if ( null === $ids ) {
+                                $ids = [];
+                                self::element_paths( $tree, '', $ids );
+                        }
+                        $paths = $ids[ $at['id'] ] ?? [];
+                        return 1 === count( $paths ) ? $paths[0] . (string) ( $at['rest'] ?? '' ) : null;
+                }
+                return (string) ( $at['path'] ?? $op['path'] ?? '' );
+        }
 …
          * Say for each op that set a value whether the tree as stored holds what was
          * sent (`stored_matches_input`), and when it does not, what it holds instead:
+         * `stored_bytes`, `stored_sha256` and `stored_value`. The sanitising pass, or
+         * `stored_bytes`, `stored_sha256` and `stored_value`, and why it differs
+         * (`stored_difference`, see stored_difference()). The sanitising pass, or
          * Elementor's own save, can change a value on the way in, and `value` is what
          * the client sent. An op whose target cannot be read back is left as it is.
+         * Removes apply_rfc6902()'s `_stored_at` from every op.
+         *
          * @param array      $applied The ops, each with a JSON pointer `path` into the tree.
 …
          */
         public static function annotate_stored( array $applied, ?array $tree ): array {
+                if ( null === $tree ) {
+                        return $applied;
+                }
+                $ids = null;
                 foreach ( $applied as $i => $op ) {
                         if ( ! is_array( $op ) || ! array_key_exists( 'value', $op ) || ! in_array( $op['op'] ?? '', [ 'add', 'replace' ], true ) ) {
+                        if ( ! is_array( $op ) ) {
                                 continue;
+                        }
+                        $stored = self::pointer_get( $tree, (string) ( $op['path'] ?? '' ) );
+                        if ( is_wp_error( $stored ) ) {
+                        $at = isset( $op['_stored_at'] ) && is_array( $op['_stored_at'] ) ? $op['_stored_at'] : null;
+                        unset( $applied[ $i ]['_stored_at'] );
+                        if ( null === $tree || ! array_key_exists( 'value', $op ) || ! in_array( $op['op'] ?? '', [ 'add', 'replace' ], true ) ) {
+                                continue;
+                        }
+                        $pointer = self::stored_pointer( $tree, $op, $at, $ids );
+                        $stored  = null === $pointer ? null : self::pointer_get( $tree, $pointer );
+                        if ( null === $pointer || is_wp_error( $stored ) ) {
                                 continue;
+                        }
 …
                                 $applied[ $i ]['stored_bytes']  = $digest['bytes'];
                                 $applied[ $i ]['stored_sha256'] = $digest['sha256'];
+                                $applied[ $i ]                  = self::with_difference( $applied[ $i ], $op['value'], $stored, $pointer );
                                 $applied[ $i ]['stored_value']  = $stored;
+                        }
+                }
                 return $applied;
+        }
+        /** Add `stored_difference` (and `added_paths`) to an op whose stored value differs. */
+        private static function with_difference( array $op, mixed $sent, mixed $stored, string $path ): array {
+                $kinds   = [];
+                $added   = [];
+                $removed = [];
+                self::stored_difference( $sent, $stored, $path, $kinds, $added, $removed );
+                if ( [] === $kinds ) {
+                        $kinds['changed'] = true; // differs, and no part of it says how
+                }
+                $op['stored_difference'] = array_values( array_intersect( [ 'changed', 'keys_added', 'keys_removed', 'markup_normalized' ], array_keys( $kinds ) ) );
+                if ( isset( $kinds['keys_added'] ) ) {
+                        $op['added_paths'] = array_slice( $added, 0, self::ADDED_PATHS_MAX );
+                }
+                if ( isset( $kinds['keys_removed'] ) ) {
+                        $op['removed_paths'] = array_slice( $removed, 0, self::ADDED_PATHS_MAX );
+                }
+                return $op;
+        }
 …
                                 $applied[ $i ]['stored_bytes']  = $digest['bytes'];
                                 $applied[ $i ]['stored_sha256'] = $digest['sha256'];
+                                // No stored_difference: the difference here is Elementor's typed envelope.
+                        }
+                }

iato-mcp/trunk/includes/class-page-fonts.php

-              r3797770
+              r3798383
         private static $google_on = null;
+        /** @var callable|null Test seam: fn(): bool, Elementor's "Load Google Fonts Locally". */
+        private static $local_setting = null;
+        /** @var callable|null Test seam: fn(): array, the local copies Elementor holds (_elementor_local_google_fonts). */
+        private static $local_copies = null;
+        /** Elementor's font types that Google_Font serves, from Google or from a local copy. */
+        private const GOOGLE_TYPES = [ 'googlefonts', 'earlyaccess' ];
         public static function init(): void {
                 // wp_enqueue_scripts runs inside wp_head at priority 1; Elementor prints the
 …
+        }
+        public static function local_google_fonts(): bool {
+        /** Replace where Google fonts come from, for unit tests; nulls restore it. */
+        public static function set_font_sources( ?callable $local_setting, ?callable $local_copies ): void {
+                self::$local_setting = $local_setting;
+                self::$local_copies  = $local_copies;
+        }
+        /** Elementor's "Load Google Fonts Locally" setting, read as Google_Font::enqueue() reads it. */
+        public static function local_google_fonts_setting(): bool {
+                if ( null !== self::$local_setting ) {
+                        return (bool) ( self::$local_setting )();
+                }
                 return (bool) get_option( 'elementor_local_google_fonts', '0' );
+        }
+        /**
+         * Where Elementor serves a family from (1.21.1), or null for one that is not a
+         * Google font. Google_Font::enqueue() first serves a local copy it already holds,
+         * whatever the setting says (turning the setting off does not delete them), and
+         * only then reads the setting: on, it downloads a copy on the first page view
+         * and uses Google's when that fails; off, Google's. The same in Elementor 4.2.2
+         * and 4.3.4. Until 1.21.1 the plugin read only the setting.
+         *
+         * @return string|null 'local', 'local_after_first_view' or 'google'.
+         */
+        public static function served_from( string $family, ?string $type ): ?string {
+                if ( ! in_array( $type, self::GOOGLE_TYPES, true ) ) {
+                        return null;
+                }
+                $copies = null !== self::$local_copies ? ( self::$local_copies )() : get_option( '_elementor_local_google_fonts', [] );
+                $copy   = is_array( $copies ) ? ( $copies[ sanitize_key( $family ) ] ?? null ) : null;
+                if ( is_array( $copy ) && ! empty( $copy['url'] ) ) {
+                        return 'local';
+                }
+                return self::local_google_fonts_setting() ? 'local_after_first_view' : 'google';
+        }
+        /**
+         * The fields get_page_fonts and set_page_fonts report about where fonts come from:
+         * `served_from` for each Google family, `google_fonts_local` (true when every
+         * Google family on the page is served from this site; with none, the setting, as
+         * before 1.21.1) and `local_google_fonts_setting`.
+         *
+         * @param array<string,string|null> $types Family => Elementor's type.
+         */
+        public static function source_report( array $types ): array {
+                $served = [];
+                foreach ( $types as $family => $type ) {
+                        $from = self::served_from( (string) $family, $type );
+                        if ( null !== $from ) {
+                                $served[ (string) $family ] = $from;
+                        }
+                }
+                $setting = self::local_google_fonts_setting();
+                return [
+                        'served_from'                => (object) $served,
+                        'google_fonts_local'         => [] === $served ? $setting : ! in_array( 'google', $served, true ),
+                        'local_google_fonts_setting' => $setting,
+                ];
+        }

iato-mcp/trunk/includes/class-sanitize-report.php

-              r3797770
+              r3798383
  * the output are compared: each is reduced to an inventory of tags and
  * attributes, and whatever the output has fewer of was removed. Pure PHP, no
+ * WordPress calls.
+ * WordPress calls, except same_markup(), which uses WordPress's tokenizer when
+ * there is one.
+ *
  * @package IATO_MCP
 …
                 'stripped_unsafe'        => 'Inline SVG and style blocks were removed: the markup did not pass the safety check.',
         ];
+        /** HTML's void elements: a self-closing slash on one changes nothing. */
+        private const VOID = [ 'AREA', 'BASE', 'BR', 'COL', 'EMBED', 'HR', 'IMG', 'INPUT', 'LINK', 'META', 'SOURCE', 'TRACK', 'WBR' ];
+        /**
+         * The same HTML written differently? Same tags in the same order, the same
+         * attributes with the same decoded values, the same decoded text; quotes,
+         * character references, attribute order and case may differ (kses rewrites
+         * single-quoted attributes with double quotes). Null when it cannot tell:
+         * WordPress below 6.5 (no WP_HTML_Tag_Processor::next_token()), or markup
+         * the tokenizer stops in. 1.21.1, for `stored_difference`.
+         */
+        public static function same_markup( string $a, string $b ): ?bool {
+                $left = self::markup_tokens( $a );
+                if ( null === $left ) {
+                        return null;
+                }
+                $right = self::markup_tokens( $b );
+                return null === $right ? null : $left === $right;
+        }
+        /** @return array|null Each token as data, or null (see same_markup()). */
+        private static function markup_tokens( string $html ): ?array {
+                if ( ! class_exists( 'WP_HTML_Tag_Processor' ) || ! method_exists( 'WP_HTML_Tag_Processor', 'next_token' ) ) {
+                        return null;
+                }
+                $processor = new WP_HTML_Tag_Processor( $html );
+                $tokens    = [];
+                while ( $processor->next_token() ) {
+                        $type = $processor->get_token_type();
+                        if ( '#tag' !== $type ) {
+                                $tokens[] = [ $type, $processor->get_modifiable_text() ];
+                                continue;
+                        }
+                        $tag        = (string) $processor->get_tag();
+                        $attributes = [];
+                        foreach ( (array) $processor->get_attribute_names_with_prefix( '' ) as $name ) {
+                                $attributes[ $name ] = $processor->get_attribute( $name );
+                        }
+                        ksort( $attributes, SORT_STRING );
+                        $self_closing = in_array( $tag, self::VOID, true ) ? false : $processor->has_self_closing_flag();
+                        $tokens[]     = [ '#tag', $tag, $processor->is_tag_closer(), $attributes, $self_closing ];
+                }
+                if ( method_exists( $processor, 'paused_at_incomplete_token' ) && $processor->paused_at_incomplete_token() ) {
+                        return null;
+                }
+                return $tokens;
+        }
         /**
 …
                         $notes[] = self::POLICY_NOTES[ $policy ];
+                }
+                // 1.21.1: a value kses rewrote without removing anything (single quotes become
+                // double quotes) was reported with nothing in it.
+                if ( 'html' === $rule && '' === $policy && [] === $removed['removed_tags'] && [] === $removed['removed_attributes'] && empty( $entry['removed_css'] ) ) {
+                        $notes[] = true === self::same_markup( $before, $after )
+                                ? 'Nothing was removed: WordPress wrote the same HTML differently (attribute quotes, character references, attribute order or case).'
+                                : 'No tag or attribute was removed: WordPress rewrote part of the value, such as an attribute value or character references.';
+                }
                 // 1.21.0: where a page's CSS can go instead. set_page_css ships switched off, so
                 // a client cannot see it in tools/list until an administrator turns it on.

iato-mcp/trunk/includes/class-settings.php

-              r3797770
+              r3798383
                 // $bridge_gated reflects the key as it was when the form was rendered,
                 // i.e. before this request saved it.
+                $tools = iato_mcp_merge_gated_tools(
+                $tools_before = array_values( array_filter( self::TOOL_NAMES, [ self::class, 'is_tool_enabled' ] ) );
+                $tools        = iato_mcp_merge_gated_tools(
                         self::sanitize_tools( $tools_raw, false ),
                         get_option( 'iato_mcp_tools', [] ),
 …
                 );
                 update_option( 'iato_mcp_tools', $tools );
+                // 1.21.1: clients read the tool list when they connect, and this server has
+                // no stream on which to tell them it changed (notifications/tools/list_changed).
+                $tools_after   = array_values( array_filter( self::TOOL_NAMES, [ self::class, 'is_tool_enabled' ] ) );
+                $tools_changed = $tools_before !== $tools_after;
                 // WordPress Abilities exposure toggle (hidden value=0 sibling pattern,
 …
                 wp_send_json_success( [
+                        'message' => __( 'Settings saved.', 'iato-mcp' ),
+                        'message' => $tools_changed
+                                ? __( 'Settings saved. AI clients read the tool list when they connect: reconnect the connector in your AI client to see the tools you turned on or off.', 'iato-mcp' )
+                                : __( 'Settings saved.', 'iato-mcp' ),
                         'values'  => [
                                 'api_key_length'      => strlen( $api_key ),
                                 'crawl_id'            => $crawl_id,
                                 'tools_enabled'       => count( $tools ),
+                                'tools_changed'       => $tools_changed,
                                 'abilities_enabled'   => $abilities_enabled,
                                 'cache_purge_enabled' => $cache_purge_enabled,
 …
                                                 </span>
                                         </div>
                                         <p class="iato-card-desc"><?php esc_html_e( 'Choose which MCP tools are available to AI clients.', 'iato-mcp' ); ?></p>
+                                        <p class="iato-card-desc"><?php esc_html_e( 'Choose which MCP tools are available to AI clients. AI clients read this list when they connect: after a change, reconnect the connector in your AI client to see it.', 'iato-mcp' ); ?></p>
                                         <?php foreach ( self::TOOL_CATEGORIES as $category => $tools ) :

iato-mcp/trunk/includes/tools/wp/tool-elementor-widgets.php

-              r3797770
+              r3798383
         'update_elementor_patch',
+        [
                 'description' => 'Apply an RFC 6902 JSON Patch to the entire Elementor document. Use this for surgical array entry edits (repeater rows, indexed inserts) where update_elementor_widget\'s replace-only array semantics are too coarse. Each op may include op, path, value, from. Supports dry_run, if_revision, idempotency_key. Requires edit_posts. Plain values set on Elementor Atomic Editor (V4) elements (Elementor 4.3.0 or later) are converted and validated with Elementor\'s own code; elsewhere atomic elements accept only $$type envelope values.',
+                'description' => 'Apply an RFC 6902 JSON Patch to the entire Elementor document. Use this for surgical array entry edits (repeater rows, indexed inserts) where update_elementor_widget\'s replace-only array semantics are too coarse. Each op may include op, path, value, from. add at a list index inserts before the item there (RFC 6902); replace overwrites it; /- appends. Each op on a list item returns list (count_before, count_after, ids_after) so a dry run shows where it lands. Supports dry_run, if_revision, idempotency_key. Requires edit_posts. Plain values set on Elementor Atomic Editor (V4) elements (Elementor 4.3.0 or later) are converted and validated with Elementor\'s own code; elsewhere atomic elements accept only $$type envelope values.',
                 'inputSchema' => [
                         'type'       => 'object',
                         'properties' => [
                                 'id'              => [ 'type' => 'integer', 'description' => 'WordPress post/page ID (required).' ],
                                 'ops'             => [ 'type' => 'array',   'description' => 'RFC 6902 op array (required). Supports add, remove, replace, move, copy, test.' ],
+                                'ops'             => [ 'type' => 'array',   'description' => 'RFC 6902 op array (required). Supports add, remove, replace, move, copy, test. add, copy and move insert at a list index; an index past the end is refused.' ],
                                 'dry_run'         => [ 'type' => 'boolean', 'description' => 'Preview applied_patch without writing (default: false).' ],
                                 'if_revision'     => [ 'type' => 'string',  'description' => 'Optional revision guard.' ],

iato-mcp/trunk/includes/tools/wp/tool-page-assets.php

-              r3797770
+              r3798383
         'get_page_fonts',
+        [
                 'description' => 'Returns the font families set_page_fonts loads on one post, each with Elementor\'s type for it, and whether Elementor loads Google fonts from this site. Requires edit_post on the post.',
+                'description' => 'Returns the font families set_page_fonts loads on one post, each with Elementor\'s type for it, and for each Google font where Elementor serves it from (served_from: local, local_after_first_view or google). Requires edit_post on the post.',
                 'inputSchema' => [
                         'type'       => 'object',
 …
                         $types[ $font ] = IATO_MCP_Page_Fonts::type_of( $font );
+                }
                 return IATO_MCP_Server::ok( [ 'id' => $post->ID, 'fonts' => $fonts, 'types' => (object) $types, 'google_fonts_local' => IATO_MCP_Page_Fonts::local_google_fonts() ] );
+                return IATO_MCP_Server::ok( [ 'id' => $post->ID, 'fonts' => $fonts, 'types' => (object) $types ] + IATO_MCP_Page_Fonts::source_report( $types ) );
+        }
 );
 …
         'set_page_fonts',
+        [
                 'description' => 'Loads font families on one post or page only, through Elementor\'s own font loader, so a page\'s CSS can use a font the site does not load elsewhere. Each family must be one Elementor knows (its Google fonts, system fonts, or Elementor Pro custom and Adobe fonts), spelled as Elementor lists it: unknown_font otherwise. With Elementor\'s "Load Google Fonts Locally" on, visitors fetch them from this site, not Google. Elementor loads every weight of a family, so there is no weights option. fonts replaces the list (at most 10; [] removes it). This plugin loads them, so the page loses them while the plugin is deactivated. Accepts dry_run. Returns the list with each family\'s type, a change_receipt and a cache object (that page is purged). Requires Elementor and edit_post on the post.',
+                'description' => 'Loads font families on one post or page only, through Elementor\'s own font loader, so a page\'s CSS can use a font the site does not load elsewhere. Each family must be one Elementor knows (its Google fonts, system fonts, or Elementor Pro custom and Adobe fonts), spelled as Elementor lists it: unknown_font otherwise. Elementor serves a Google font from this site when it already holds a copy, or when its "Load Google Fonts Locally" is on; served_from says which for each. Elementor loads every weight of a family, so there is no weights option. fonts replaces the list (at most 10; [] removes it). This plugin loads them, so the page loses them while the plugin is deactivated. Accepts dry_run. Returns the list with each family\'s type and served_from, a change_receipt and a cache object (that page is purged). Requires Elementor and edit_post on the post.',
                 'inputSchema' => [
                         'type'       => 'object',
 …
+                }
                 $stored = IATO_MCP_Page_Fonts::stored( $post->ID );
                 $data   = [ 'id' => $post->ID, 'fonts' => $plan['fonts'], 'types' => (object) $plan['types'], 'google_fonts_local' => IATO_MCP_Page_Fonts::local_google_fonts() ];
+                $data   = [ 'id' => $post->ID, 'fonts' => $plan['fonts'], 'types' => (object) $plan['types'] ] + IATO_MCP_Page_Fonts::source_report( $plan['types'] );
                 $notes  = [];
                 foreach ( $plan['types'] as $font => $type ) {

iato-mcp/trunk/readme.txt

-              r3797770
+              r3798383
 Tested up to: 7.1
 Requires PHP: 8.0
 Stable tag: 1.21.0
+Stable tag: 1.21.1
 License: GPL-2.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
 …
 == Changelog ==
+= 1.21.1 =
+* Fix: `update_elementor_patch`: `add` at a list index now inserts before the item there, as RFC 6902 says and the tool's description promised. Since 1.3.0 it replaced the item, so a widget added at an index deleted the widget that stood there. `copy` to an index overwrote the item there and `move` to an index deleted one; both now insert. An index past the end of a list is refused instead of leaving a gap, and an element cannot be moved into its own children. Use `replace` to overwrite. A page that lost an element this way can be put back by rolling back that write's receipt within 90 days, or from Elementor's revisions.
+* Fix: `update_elementor_patch`: `remove` of an item in the middle of a list left a gap in its numbering, so a later op in the same patch could not find the next item, and the list could be stored as a JSON object.
+* New: each `update_elementor_patch` op on a list item returns `list` (where it acted, the list's length before and after, and its items' ids afterwards), on dry runs too, so a misplaced insert shows before it is written.
+* Fix: `stored_matches_input` no longer reads a different key order as a different value. Elementor's save writes an element's keys in its own order, so a real write said false where its dry run said true.
+* Fix: an `add` to `/-`, and an op whose position a later op in the same patch shifted, now get `stored_matches_input`. They used to get nothing, or be compared with whatever stood at the old position.
+* New: when the stored value differs, `stored_difference` says how: `markup_normalized` (the same HTML written differently, such as single quotes rewritten as double quotes), `keys_added` or `keys_removed` (with `added_paths` and `removed_paths`; Elementor's save drops `isInner` from a widget), or `changed`. A `sanitized_report` entry for a value WordPress rewrote without removing anything now says so; it used to be empty.
+* Fix: `get_page_fonts` and `set_page_fonts` report where each Google font is served from (`served_from`: `local`, `local_after_first_view` or `google`). Elementor serves a local copy it already holds even with "Load Google Fonts Locally" off, so `google_fonts_local` was false on sites that served fonts locally. It now means every Google font on the page comes from this site; `local_google_fonts_setting` gives the setting itself.
+* New: Settings > IATO MCP > Tools says that AI clients read the tool list when they connect, and saving a change to the tools says to reconnect the connector. This server cannot tell a connected client that the list changed.
 = 1.21.0 =
 * New: `set_page_css` and `get_page_css` give one page its own CSS, printed in that page's head only. They follow the same rules as Additional CSS: nothing loaded from another site, at most 200 KB, and anything that would close the style element removed. The CSS is checked again when it is printed. Needs a WordPress user who may edit CSS (administrators and editors) and `edit_post` on the page.
 …
 == Upgrade Notice ==
+= 1.21.1 =
+Fixes update_elementor_patch: add at an index now inserts, as RFC 6902 says, instead of replacing (deleting) the element there. Use replace to overwrite. Also clearer stored-value and font-source reports.
 = 1.21.0 =
 Adds page CSS, fonts, approved page scripts and draft preview links (all switched off until you turn them on), keeps ARIA, form attributes and more SVG in Elementor HTML, and says what Elementor stored.

Plugin Directory

Context Navigation

Legend:

iato-mcp/tags/1.21.1/iato-mcp.php

iato-mcp/tags/1.21.1/includes/class-elementor-adapter.php

iato-mcp/tags/1.21.1/includes/class-page-fonts.php

iato-mcp/tags/1.21.1/includes/class-sanitize-report.php

iato-mcp/tags/1.21.1/includes/class-settings.php

iato-mcp/tags/1.21.1/includes/tools/wp/tool-elementor-widgets.php

iato-mcp/tags/1.21.1/includes/tools/wp/tool-page-assets.php

iato-mcp/tags/1.21.1/readme.txt

iato-mcp/trunk/iato-mcp.php

iato-mcp/trunk/includes/class-elementor-adapter.php

iato-mcp/trunk/includes/class-page-fonts.php

iato-mcp/trunk/includes/class-sanitize-report.php

iato-mcp/trunk/includes/class-settings.php

iato-mcp/trunk/includes/tools/wp/tool-elementor-widgets.php

iato-mcp/trunk/includes/tools/wp/tool-page-assets.php

iato-mcp/trunk/readme.txt

Download in other formats: