=== MCP Server & AI Experiments – WooCommerce Compatible ===
Contributors: hasanazizul, atlasaidev
Donate link: https://atlasaidev.com/
Tags: abilities, AI, artificial-intelligence, experiments, mcp
Requires at least: 6.8
Tested up to: 7.0
Requires PHP: 7.4
Stable tag: 1.5.4
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

AI-powered WordPress hub: 80+ abilities, MCP server, block editor AI experiments, RBAC, JWT auth, and workflows.

== Description ==

AI Agent Hub is the most complete AI integration plugin for WordPress. It provides **80+ abilities** across 10 modules, a built-in **MCP (Model Context Protocol)** server for AI agent connectivity, **AI experiments** directly in the Gutenberg block editor, **role-based access control**, **JWT authentication**, a **workflow builder**, and full **WooCommerce** support.

= Highlights =

* **80+ registered abilities** covering posts, pages, media, users, custom post types, REST API discovery, site diagnostics, WordPress settings, WooCommerce, and AI-powered content analysis.
* **11 independently toggleable modules** – enable only what you need.
* **Error Debugger** – Monitor PHP errors in real time, receive email alerts with a one-click fix command, and fix errors directly from your AI assistant via MCP (Pro).
* **AI Experiments in the Block Editor** – Generate excerpts, feature images, and more directly from the post editor with multi-provider AI support.
* **Built-in MCP server** – expose abilities as tools, resources, and prompts to AI agents over JSON-RPC 2.0.
* **External Abilities** – automatically discovers and integrates abilities from WordPress core and third-party plugins via the Abilities API.
* **JWT authentication** – secure MCP and REST API access with token-based auth.
* **Workflow builder** – combine abilities into reusable workflows from the admin dashboard or the post editor meta box.
* **Multi-provider AI** – connect OpenAI, Google Gemini, or Anthropic Claude via the WordPress AI Client.
* **Role-based access control** – assign abilities per WordPress role so each MCP connection only exposes what that user is allowed to use.
* **Backward compatible** – bundles the WordPress Abilities API and MCP Adapter as vendor dependencies, so it works on WordPress 6.8+ (not just 6.9+ where these APIs ship in core).

= AI Agent Hub Pro =

Unlock the full power of AI Agent Hub with [AI Agent Hub Pro](https://atlasaidev.com/ai-agent-hub-pro/):

* **Unlimited Workflows** – Create unlimited MCP workflows (free: 3 max).
* **T/R/P Access Modes** – Granular per-ability Tool/Resource/Prompt toggles for fine-grained MCP control.
* **Advanced AI Experiments** – Templates library, batch generation mode, explain AI reasoning, generation history, and keyboard shortcuts.
* **Workflow Prompt Builders** – 6 pre-built prompt builder workflows (SEO Audit, Content Brief, Site Overview, and more).
* **External Abilities** – Discover and expose third-party plugin abilities via the Abilities API.
* **Per-Ability RBAC** – Assign individual abilities (not just modules) to each WordPress role.
* **MCP Fix Command** – Error emails include a ready-to-paste MCP command that lets your AI assistant read, analyse, and fix the error with one paste — automatic backup included.
* **Webhook Notifications** – Send error alerts to Slack, Discord, or a custom webhook.
* **Backups Manager** – All AI-applied fixes are backed up automatically; restore any backup with one click.
* **Priority Support** – Direct support from the development team.

[Upgrade to Pro](https://atlasaidev.com/ai-agent-hub-pro/)

---

= Modules =

Each module can be independently enabled or disabled from the **AI Agent Hub** dashboard.

= 1. AI Content Steward (8 abilities) =

AI-powered content analysis, generation, and improvement for posts and pages.


= 2. Posts Manager (13 abilities) =

Full CRUD for WordPress posts, categories, and tags.


= 3. Pages Manager (5 abilities) =

CRUD operations for WordPress pages.


= 4. Media Manager (7 abilities) =

Upload, update, and manage media files.


= 5. Users Manager (7 abilities) =

Search, create, and manage WordPress users.


= 6. Custom Post Types Manager (6 abilities) =

CRUD operations for any registered custom post type.


= 7. REST API Tools (3 abilities) =

Discover and execute any WordPress REST API endpoint dynamically.


= 8. Site Info & Diagnostics (4 abilities) =

View site info, plugins, themes, and users at a glance.


= 9. Settings Manager (3 abilities) =

View and update WordPress site settings.

= 10. AI Store Manager – WooCommerce (24 abilities) =

Full WooCommerce management through AI. Requires WooCommerce to be active.

* Products: search, get, add, update, delete.
* Product categories: list, add, update, delete.
* Product tags: list, add, update, delete.
* Product brands: list, add, update, delete.
* Orders: search.
* Reports: coupons totals, customers totals, orders totals, products totals, reviews totals, sales.

= 11. Error Debugger =

Monitor PHP errors in real time and fix them faster. Works out of the box — no configuration required to start tracking errors.

**Free features:**
* Real-time PHP error tracking grouped by file and message.
* Email notifications for errors in plugins and themes — configurable recipient, severity levels, and rate limit.
* **Fix Command** in every email — a pre-filled text snippet you can paste into any AI assistant to get fix instructions.
* Admin dashboard widget showing the last 5 errors and a 24-hour error count.
* Debug log scanner catches errors that occur before the plugin loads (e.g. fatal parse errors during activation).

**Pro features (requires AI Agent Hub Pro):**
* MCP Fix Command — paste directly into Claude Desktop, Cursor, or any connected MCP client. The AI reads the file, suggests a fix, creates a backup, and applies it.
* Webhook notifications — send error alerts to Slack, Discord, or a custom URL.
* Backups Manager — all AI-applied fixes are backed up; restore any backup with one click.
* Extended error sources — monitor WordPress Core, MU-Plugins, and Drop-ins in addition to plugins and themes.

= Coming Soon =

* **AI Support Desk** – Summarize comment threads, suggest reply drafts, categorize support requests.
* **AI Automation Recipes / Workflows** – Rule-based AI automations triggered by WordPress events.

---

= AI Experiments in the Block Editor =

AI Agent Hub adds AI-powered experiment panels directly into the WordPress block editor:

* **Excerpt Generation** – Generate SEO-friendly excerpts from post content with one click. Appears in the post sidebar excerpt panel.
* **Image Generation** – Generate AI feature images from post content. Integrated into the Featured Image panel.

With [AI Agent Hub Pro](https://atlasaidev.com/ai-agent-hub-pro/), experiments gain advanced features: prompt templates library, batch generation mode, "Explain This Generation" reasoning, generation history, and keyboard shortcuts.

---

= Error Debugger =

The **Error Debugger** module monitors PHP errors on your WordPress site and helps you fix them faster.

**How it works:**

1. Enable the **Error Debugger** module from the AI Agent Hub dashboard.
2. Optionally enable **Email Notifications** and configure the recipient address, severity levels, and rate limit.
3. When a PHP error occurs in a plugin or theme, an email is sent with full error details and a **How to Fix** block.
4. Copy the fix command from the email and paste it into your AI assistant to get step-by-step fix instructions.

**Free fix flow:**
Copy the pre-filled text from the email → paste into ChatGPT, Claude, Gemini, or any AI chat → the AI explains the error and how to fix it.

**Pro fix flow (MCP):**
Copy the MCP command block from the email → paste into Claude Desktop, Cursor, or any MCP client connected to your site → the AI reads the file, suggests a fix, creates a backup, and applies it automatically.

**Admin dashboard widget:**
When the Error Debugger module is active, a **"AI Agent Hub — Recent Errors"** widget appears on the WordPress admin dashboard showing the last 5 errors and a 24-hour error count. You can disable the widget from the Error Debugger settings without disabling the module.

---

= Connecting AI Agents via MCP =

AI Agent Hub includes a built-in **MCP (Model Context Protocol)** server that lets external AI agents interact with your WordPress site. The MCP endpoint is:

`https://your-site.com/wp-json/awfah_mcp/mcp`

Any MCP-compatible AI client can connect and use all enabled abilities as tools, resources, and prompts.


= Post Editor Meta Box =

On every post and page edit screen, the **AI Content Steward** meta box provides:

* Provider selection (Auto, OpenAI, Gemini, Claude).
* Ability checkboxes to select which analyses to run.
* Editable prompt preview that updates as you select abilities.
* One-click workflow execution.
* Save workflows for reuse.


== Connecting AI Agents ==

= Claude Desktop =

Claude Desktop supports MCP servers natively. To connect it to your WordPress site:

**Step 1: Generate a JWT token**

Send a POST request to your site to get a JWT token:

`curl -X POST "https://your-site.com/wp-json/jwt-auth/v1/token" -H "Content-Type: application/json" -d "{\"username\":\"your-username\",\"password\":\"your-password\",\"expires_in\":2592000}"`

This returns a token valid for 30 days (2592000 seconds). Copy the `token` value from the response.

**Step 2: Configure Claude Desktop**

Open the Claude Desktop config file:

* **Windows:** `%APPDATA%\Claude\claude_desktop_config.json`
* **macOS:** `~/Library/Application Support/Claude/claude_desktop_config.json`

Add this MCP server entry:

`{
  "mcpServers": {
    "wordpress": {
      "command": "npx",
      "args": [
        "-y",
        "@anthropic-ai/mcp-wordpress-remote@latest",
        "--url",
        "https://your-site.com/wp-json/awfah_mcp/mcp"
      ],
      "env": {
        "JWT_TOKEN": "paste-your-jwt-token-here"
      }
    }
  }
}`

**Step 3: Restart Claude Desktop**

After saving the config, restart Claude Desktop. All enabled abilities will appear as tools. You can then ask Claude to manage posts, pages, media, users, settings, and WooCommerce from natural language.

= Claude Code (CLI) =

Claude Code can also connect to MCP servers. Add the server using:

`claude mcp add wordpress -- npx -y @anthropic-ai/mcp-wordpress-remote@latest --url https://your-site.com/wp-json/awfah_mcp/mcp`

Then set the JWT token as an environment variable before running Claude Code:

`export JWT_TOKEN="paste-your-jwt-token-here"`

= Cursor / Windsurf / Other MCP Clients =

Any editor or AI tool that supports MCP can connect. The setup is similar:

1. Generate a JWT token (see above).
2. Point the MCP client to: `https://your-site.com/wp-json/awfah_mcp/mcp`
3. Use the `@anthropic-ai/mcp-wordpress-remote` transport package, or configure your client's native MCP settings with the URL and JWT token.
4. The authentication header format is: `Authorization: Bearer <your-jwt-token>`

= Postman / API Testing =

You can test the MCP endpoint directly using Postman or any HTTP client. The MCP protocol uses JSON-RPC 2.0 over HTTP.

**Step 1: Initialize a session**

Send a POST request to `https://your-site.com/wp-json/awfah_mcp/mcp` with:

* Header: `Authorization: Bearer <your-jwt-token>`
* Header: `Content-Type: application/json`
* Body:
`{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "initialize",
  "params": {
    "protocolVersion": "2024-11-05",
    "capabilities": {},
    "clientInfo": { "name": "postman", "version": "1.0" }
  }
}`

Copy the `Mcp-Session-Id` header from the response.

**Step 2: Send initialized notification**

Send a POST with the session ID header:

* Header: `Mcp-Session-Id: <session-id-from-step-1>`
* Body:
`{
  "jsonrpc": "2.0",
  "method": "notifications/initialized"
}`

**Step 3: Call a tool**

Now you can call any ability as a tool:

`{
  "jsonrpc": "2.0",
  "id": 2,
  "method": "tools/call",
  "params": {
    "name": "awfah-site-get-site-info",
    "arguments": {}
  }
}`

Note: In MCP tool names, the `/` in ability IDs is replaced with `-`. So `awfah-site/get-site-info` becomes `awfah-site-get-site-info`.

= JWT Token Management =

AI Agent Hub provides three JWT endpoints:

* **Generate token:** `POST /wp-json/jwt-auth/v1/token` – Pass `username`, `password`, and optional `expires_in` (seconds, min 3600, max 2592000).
* **List tokens:** `GET /wp-json/jwt-auth/v1/tokens` – List all active tokens (requires authentication).
* **Revoke token:** `POST /wp-json/jwt-auth/v1/revoke` – Revoke a specific token (requires authentication).

Tokens are signed with HS256 using a per-site secret key stored in the `awfah_jwt_secret_key` option. Each token includes the user ID, issued-at time, expiration, and a unique JTI.

= Role-Based MCP Access =

AI Agent Hub provides **role-based access control** for MCP connections. This means different WordPress users see different abilities depending on their role.

**How it works:**

1. An administrator configures which abilities each WordPress role can access via the **Access Control** tab in the AI Agent Hub dashboard.
2. When an AI client connects via MCP, it authenticates as a specific WordPress user (using JWT or Application Password).
3. The plugin checks that user's role and only exposes the abilities assigned to that role.
4. The AI client can only see and execute the allowed abilities — everything else is hidden.

**Example scenarios:**

* **Administrator** — Full access to all 80+ abilities including post CRUD, site settings, user management, media, WooCommerce, and content analysis.
* **Editor** — Content-focused abilities only (e.g. analyze posts, generate excerpts, suggest titles, focus keywords). No access to site settings, user management, or destructive operations.
* **Author / Contributor** — Can be fully restricted or given a minimal subset of abilities as configured by the site admin.

**Setting up role-based access:**

1. Go to the **AI Agent Hub** dashboard in WordPress admin.
2. Click the **Access Control** tab.
3. Select a role from the dropdown.
4. Check or uncheck abilities to grant or revoke access for that role.
5. Click **Save**. Changes take effect immediately for all MCP connections using that role.

**Multiple MCP connections:**

You can create multiple MCP connections in your AI client config, each authenticating as a different WordPress user. For example:

* A "full-access" connection using an administrator account.
* A "content-only" connection using an editor account.

This lets you switch between permission levels depending on the task at hand.

= Application Passwords (Alternative) =

If you prefer not to use JWT, you can also authenticate with WordPress **Application Passwords** (available in WordPress 5.6+):

1. Go to **Users > Profile > Application Passwords**.
2. Create a new application password.
3. Use Basic Auth with your username and the application password.

However, JWT is recommended for MCP connections as it avoids sending credentials with every request.

== Frequently Asked Questions ==

= What AI providers are supported? =

AI Agent Hub supports any provider the **WordPress AI Client** supports for text generation, including:

* OpenAI (GPT models)
* Google Gemini
* Anthropic Claude

Configure providers under **Settings > AI Credentials**.

= How many abilities does the plugin register? =

Over **80 abilities** across 10 modules: Content Steward (8), Posts (13), Pages (5), Media (7), Users (7), Custom Post Types (6), REST API Tools (3), Site Info (4), Settings (3), and WooCommerce Store Manager (24).

= Does it work with WordPress versions before 6.9? =

Yes. AI Agent Hub bundles the WordPress Abilities API and MCP Adapter as vendor dependencies. This means it works on WordPress 6.8 and above, even on versions where these APIs are not yet included in WordPress core.

= Can I use this with Claude Desktop? =

Yes. AI Agent Hub includes a built-in MCP server. See the **Connecting AI Agents** section above for step-by-step setup.

= Is there a Pro version? =

Yes! [AI Agent Hub Pro](https://atlasaidev.com/ai-agent-hub-pro/) unlocks unlimited workflows, T/R/P access modes, advanced AI experiments (templates, batch mode, explain, history, shortcuts), workflow prompt builders, external abilities, per-ability RBAC, and priority support.

= Does the WooCommerce module require WooCommerce? =

Yes. The AI Store Manager module only registers its abilities when WooCommerce is active. If WooCommerce is not installed, the module toggle is available but abilities will not load.

= Can I disable modules I do not need? =

Yes. Each module has an independent toggle in the AI Agent Hub dashboard. Disabled modules do not register their abilities or expose them via MCP.

= Why do I see "AI analysis failed"? =

This usually means no AI provider is configured. Go to **Settings > AI Credentials** and verify at least one provider is set up. Enable `WP_DEBUG_LOG` and check `debug.log` for lines beginning with `[AI Agent Hub]`.

= Where is the post editor meta box? =

Open any post or page in the editor. Look for the **"AI Content Steward"** meta box in the sidebar or below the editor. You can select abilities, preview the prompt, and run workflows.

= How does the Error Debugger work? =

Enable the **Error Debugger** module from the dashboard. PHP errors in your plugins and themes are automatically tracked and displayed in the **Error Log** tab. You can also enable email notifications to be alerted whenever a new error occurs.

= What is the Fix Command in the error email? =

Every error notification email includes a **How to Fix** block — a pre-filled text snippet containing the error message, file path, and line number. Copy it and paste into any AI assistant (ChatGPT, Claude, Gemini, etc.) to get step-by-step instructions for fixing the error.

With **AI Agent Hub Pro**, the Fix Command becomes an MCP tool command. Paste it into Claude Desktop, Cursor, or any connected MCP client and the AI will read the file, suggest a fix, create a backup, and apply it — all without leaving your AI assistant.

= Does the Error Debugger work without Pro? =

Yes. The free version includes full error tracking, email notifications for plugin and theme errors, a "How to Fix" text block in every email, and an admin dashboard widget. Pro adds the MCP fix command, Slack/Discord webhooks, the Backups Manager, and extended error source monitoring (Core, MU-Plugins, Drop-ins).

= Will I get duplicate error emails for the same error? =

No. A rate limiter prevents duplicate notifications for the same error within a configurable cooldown period (default: 60 minutes). You can adjust the cooldown or set it to 1 minute if you want more frequent alerts.

= Can I turn off the Recent Errors dashboard widget? =

Yes. Go to **AI Agent Hub → Error Debugger** and toggle off **Admin Dashboard Widget**. The widget is removed immediately without disabling the rest of the Error Debugger module.

= How do I get support? =

Click the **"Contact Support"** button in the AI Agent Hub dashboard, or visit: https://atlasaidev.com/contact-us/

---

== Screenshots ==

1. AI Agent Hub dashboard with module toggles and provider status.
2. Workflow builder - drag abilities to create workflows.
3. Post editor meta box with ability selection and prompt preview.
4. Claude Desktop connected to WordPress via MCP.
5. AI Experiments - Excerpt generation in the block editor.
6. AI Experiments - Image generation in the block editor.

---

== Changelog ==

= 1.5.4 (10 May 2026) =
update title, tags


= 1.5.1 (05 May 2026) =


UI improvement: New Overview page added to the admin dashboard.

* **Overview page (new):**
  * Added a new "Overview" tab as the default landing page in the AI Agent Hub dashboard.
  * Three subtabs: Welcome, Pricing, and Feature Comparison.
  * Welcome subtab: plugin stats, getting started info, support links, compatible MCP clients, and AI providers.
  * Pricing subtab: Annual/Lifetime plan toggle with 3 pricing tiers. Emphasizes the 7-day free trial (no credit card required).
  * Feature Comparison subtab: Free vs Pro comparison table with 27 features.
  * 7-day free trial CTA prominently displayed for non-Pro users.

* **Dashboard navigation:**
  * "Overview" is now the default active tab when opening the AI Agent Hub dashboard.
  * Tab order updated: Overview → Dashboard → Workflows → Access Control → Analytics → Error Debugger → Documentation → Plugins.

= 1.5.0 (13 Apr 2026) =

Feature release: Error Debugger module with PHP error monitoring, email alerts, and a fix command for your AI assistant.

* **Error Debugger module (new):**
  * Monitor PHP errors from plugins and themes in real time — no configuration required to start tracking.
  * Error Log tab shows all errors grouped by file, with severity badges, source info, timestamps, and occurrence counts.
  * Read the full source context around any error directly in the dashboard.
  * Mark errors as fixed to keep the log tidy.

* **Email notifications:**
  * Receive an email alert whenever a PHP error occurs.
  * Configurable recipient email, severity levels (Fatal, Warning, Notice, Deprecated), and rate limit to avoid duplicate emails.
  * Configure which sources to monitor: Plugins and Themes (free).

* **Fix Command in every error email:**
  * Every notification includes a "How to Fix" block — a pre-filled text snippet you can copy and paste into any AI assistant (ChatGPT, Claude, Gemini, etc.) to get step-by-step fix instructions.
  * No AI subscription required — works with any AI chat service.

* **Admin dashboard widget:**
  * "AI Agent Hub — Recent Errors" widget on the WordPress admin dashboard shows the last 5 errors and a 24-hour error count at a glance.
  * Can be toggled off from the Error Debugger settings without disabling the module.

* **Debug log coverage:**
  * Scans `debug.log` on every admin page load to catch startup fatal errors that occur before the plugin loads (e.g. during plugin activation or update).

* **Error Trends and Spike Alerts (Pro):**
  * Weekly digest email and spike alert notifications available with AI Agent Hub Pro.

= 1.4.2 (10 Apr 2026) =

Feature release: Enhanced Plugins page with remote data, social proof, and cross-sell improvements.

* **Remote plugin data:**
  * Plugin information now fetched from a central GitHub repository with 24-hour transient caching.
  * New "Check for Updates" button to manually refresh plugin data without waiting for cache expiry.
  * Hardcoded fallback ensures the page works even if the remote fetch fails.

* **WP.org API integration:**
  * Star ratings and active install counts fetched from the WordPress.org Plugin API.
  * Cached separately with 24-hour transient for performance.

* **Enhanced plugin cards:**
  * Plugin icons from WordPress.org displayed on each card.
  * NEW badge for recently launched plugins.
  * PRO badge for plugins with a Pro version available.
  * RECOMMENDED badge for complementary plugins based on the current plugin.
  * YOU'RE HERE badge with blue border highlight for the current plugin.

* **Pro upsell & engagement:**
  * "Go Pro" button appears only when the Pro version is not installed.
  * "Configure" button for active plugins links directly to their settings page.
  * Top banner: "You're using [Plugin Name]. Complete your AI toolkit."
  * Google Analytics UTM parameters on all outbound links for conversion tracking.

* **Card ordering:**
  * Priority-based ordering with recommended plugins shown first.
  * Shuffle within same priority for fair rotation.

* **Compatibility:**
  * Tested up to WordPress 7.0.

= 1.4.1 (10 Mar 2026) =

Maintenance release: Workflow engine redesign with AI-powered parameter resolution and bug fixes.

* **Workflow engine redesign:**
  * Moved workflow execution from `Content_Steward_Controller` to dedicated `Workflows_Controller` with new `POST /awfah/v1/workflows/run` endpoint.
  * Generic ability execution via Abilities API — all 80+ abilities from any module now work in workflows (previously limited to 6 Content Steward abilities).
  * Backward-compatible: old `/content/run-workflow` endpoint delegates to the new controller.

* **AI-powered workflow parameter resolution:**
  * Three-tier input resolution: explicit per-ability params > AI extraction from prompt > fallback defaults.
  * New "Use AI to extract ability parameters from prompt" checkbox in the post meta box.
  * AI uses each ability's `input_schema` as a JSON Schema constraint to extract structured parameters from natural language prompts.
  * Enables abilities that require specific parameters (e.g., `name` for add-category) to work directly from workflow prompts.

* **Bug fixes:**
  * Fixed `post_id` to `id` mapping for abilities that require `id` in their input schema.
  * Fixed readme.txt short description exceeding WordPress.org 150-character limit.

= 1.4.0 (07 Mar 2026) =

Feature release: Pro plugin support, AI experiments in the block editor, backward compatibility with pre-6.9 WordPress, and MCP handler fixes.

* **Pro plugin support:**
  * Added Pro plugin detection (`awfah_is_pro_active()`) and integration hooks.
  * Pro upsell banner on dashboard and dismissible admin notice.
  * Pro features section in dashboard showing feature status (active/locked).
  * Pro URL linked throughout the plugin to [AI Agent Hub Pro](https://atlasaidev.com/ai-agent-hub-pro/).

* **AI Experiments in the block editor:**
  * Excerpt Generation experiment - generate AI excerpts directly from the post sidebar.
  * Image Generation experiment - generate AI feature images from the Featured Image panel.
  * Multi-provider support with model selection dropdown.
  * Editable prompts with per-post and global prompt saving.
  * Pro features: templates library, batch mode, explain reasoning, generation history, keyboard shortcuts.

* **Backward compatibility:**
  * WordPress Abilities API and MCP Adapter are now bundled as vendor dependencies.
  * Plugin works on WordPress 6.8+ (previously required 6.9 where these APIs ship in core).
  * Minimum WordPress requirement lowered from 6.9 to 6.4.

* **MCP handler fixes:**
  * Fixed Resources handler to properly pass input to ability execute callbacks.
  * Fixed Prompts handler for correct prompt identifier resolution.
  * Added `providers/{provider}/models` REST endpoint for model selection.

* **Content Steward abilities expanded:**
  * Added `awfah-content/summarize` ability for AI-powered content summarization.
  * Added `awfah-content/generate-alt-text` ability for vision-based image alt text generation.
  * Content Steward module now has 8 abilities (previously 6).

* **Dashboard improvements:**
  * Analytics view placeholder for future usage tracking.
  * Updated documentation with Pro features section.
  * Updated ability counts across all UI surfaces.

= 1.3.0 (20 Feb 2026) =

Feature release: External abilities, role-based workflow assignments, WooCommerce dependency handling, and MCP response fixes.

* **External Abilities module (new):**
  * Automatically discovers abilities registered by WordPress core and third-party plugins via `wp_get_abilities()`.
  * External abilities appear in the Dashboard, Workflows, Access Control, and MCP server.
  * Grouped by source namespace (e.g., "External: core", "External: mcp-adapter") in Access Control.
  * Toggleable on/off from the Dashboard like any other module.

* **Role-based workflow assignments:**
  * Workflows can now be assigned to "All roles" or specific WordPress roles during creation.
  * New "Workflows" sub-tab in Access Control for per-role workflow assignment.
  * Dual-layer access: `role_workflows` settings override takes precedence, falls back to workflow's own `assigned_roles` field.
  * Workflows endpoint supports `?context=admin` for unfiltered admin access.

* **WooCommerce dependency handling:**
  * AI Store Manager module is now visible but disabled when WooCommerce is not active.
  * Shows "WooCommerce required" badge on Dashboard and Access Control.
  * Toast error on toggle attempt when WooCommerce is missing.
  * Backend guard prevents enabling the module without WooCommerce.

* **MCP response fix:**
  * Fixed `structuredContent` validation error for list endpoints (tags, categories, posts, pages, media, users).
  * Sequential array responses are now wrapped in `{ "results": [...] }` to satisfy MCP protocol requirements.
  * Applied across all 8 ability files.

* **Documentation:**
  * Added External Abilities section to the Documentation tab.
  * Updated readme with External Abilities feature description.

= 1.2.1 (18 Feb 2026) =
Added: Plugins page added.

= 1.2.0 (12 Feb 2026) =

Major release: 70+ abilities across 9 modules, MCP server, JWT auth, and workflow builder.

* **New modules (7):**
  * Pages Manager - 5 abilities for WordPress page CRUD.
  * Media Manager - 7 abilities for media upload, update, delete, and file retrieval.
  * Users Manager - 7 abilities for user CRUD, current user, and role listing.
  * Custom Post Types Manager - 6 abilities for any registered custom post type.
  * REST API Tools - 3 abilities to discover and execute any REST API endpoint dynamically.
  * Site Info & Diagnostics - 4 abilities for site info, plugins, themes, and user info.
  * Settings Manager - 3 abilities to view and update all WordPress settings.

* **AI Store Manager (WooCommerce) - now fully functional:**
  * 25 abilities covering products, categories, tags, brands, orders, and reports.
  * Requires WooCommerce to be active (automatic detection).

* **Independent module toggles:**
  * Each of the 11 modules now has its own on/off toggle in the dashboard.
  * Previously all new modules were bundled under the Content Steward toggle.

* **JWT authentication for MCP:**
  * Generate tokens via `POST /wp-json/jwt-auth/v1/token`.
  * List active tokens via `GET /wp-json/jwt-auth/v1/tokens`.
  * Revoke tokens via `POST /wp-json/jwt-auth/v1/revoke`.
  * HS256 signing with per-site secret key.
  * Configurable expiration (1 hour to 30 days).

* **Workflow builder improvements:**
  * Drag-and-drop abilities into workflows from the admin dashboard.
  * Prompt preview now correctly updates when abilities are added or removed.
  * Post editor meta box prompt preview also updates correctly with each ability change.

* **Bug fixes:**
  * Fixed shallow merge of module settings causing new modules to not appear.
  * Fixed ability registration timing error on post edit screens.
  * Fixed workflow prompt always showing first ability's text instead of all selected abilities.

= 1.1.0 (13 Jan 2026) =

* Added: Documentation tab in the dashboard.

= 1.0.0 =

* Initial public release.
* Added AI Content Steward module (6 abilities).
* Added AI Providers dashboard.
* Added module toggles with "Coming soon" labels for future modules.

---

== Upgrade Notice ==

= 1.5.4 =
update title, tags