Changelog
Every release, in detail.
Release notes for Novamira, Novamira Pro, Novamira HQ and the Novamira CLI.
v1.12.15
Latest- New: Gemini Desktop support. Connect Gemini Desktop to your site with OAuth sign-in through its custom connector.
- Fix: Faster responses to AI clients on some hosting.
- Fix: A NOVAMIRA_WP_CLI_COMMAND constant pointing at a missing or non-executable program, or at a missing phar, now reports WP-CLI as unavailable and names the constant and the path, where the WP-CLI abilities were previously listed and then failed with "Failed to start process."
- Fix: Sites using the custom login URL of SureMembers, or another plugin that checks the previous page whenever WordPress builds a site address, no longer crash with memory errors on pages reached from a link.
- Fix: Troubleshoot no longer asks to add the .well-known rule again when it is already in place. On hosting with a known firewall, such as SiteGround or Cloudflare, a 403 on the OAuth discovery URLs now points to hosting support, unless the .well-known rule is missing or the site itself produced the error.
- Fix: On sites with a page cache plugin such as WP-Optimize, AI clients can now connect with OAuth, where the plugin's note added to the sign-in details made them unreadable.
- Minor Fixes
v1.12.14
- Tweak: AI tools on the Configuration page that could only be connected with the Novamira CLI, such as ZCode, now also offer OAuth and Application Password.
- Tweak: The Configuration page now offers Other MCP client for AI tools missing from the list, with the server URL for OAuth and a prompt to paste for Application Password.
- Tweak: The Novamira CLI can now be set up from the Configuration page for Grok Build, MiniMax Code, Posit Assistant, Kimchi, fx and Sarvam Code.
- Tweak: The Configuration page now marks Claude.ai, ChatGPT.com and Grok.com as websites, and lists Codex in ChatGPT Desktop before ChatGPT.com.
- Tweak: On sites without HTTPS, the Configuration page now shows the Novamira CLI as requiring HTTPS instead of leaving it out.
- Fix: Sites that hide or rename the WordPress login page, with plugins such as WPS Hide Login or Solid Security, can now approve new connections, where the authorization page previously showed a "page not found" error to visitors who were not logged in.
- Fix: PHP code run by AI agents now reports a warning repeated many times as a single entry with how often it occurred, where a plugin that raised it thousands of times previously filled the response with copies.
- Fix: Files written or edited by AI agents are now replaced in a single step, so a page that loads one at that moment no longer reads it half written, which could switch the sandbox to safe mode.
- Minor Fixes
v1.12.13
- Fix: On hosting with PHP open_basedir restrictions, looking for WP-CLI no longer prints PHP warnings that broke AI client connections.
- Fix: After authorizing or denying a device on the Authorize Device page, the page now shows only the result, instead of also asking for another code.
- Fix: On Windows servers, upload links and file abilities now accept absolute paths with a drive letter (such as C:\...), where uploads previously failed with a directory creation error.
- Minor Fixes
v1.12.12
- New: Site integrity check skill. AI agents can check a site's plugins, themes and core for known vulnerabilities, and look for unknown administrators, modified or injected files, malicious code in the database, and form recipients that send data elsewhere. They report what they found and how confident they are, and change nothing without approval. The skill is also available in Read Mode.
- Tweak: PHP versions older than 8.5.12, 8.4.27, 8.3.36 and 8.2.35 (released by the PHP project on 2026/10/21) are now flagged to AI agents, so they can recommend updating PHP through the hosting provider.
- Minor Fixes
v1.12.11
- New: PHP compatibility check skill. AI agents can check whether the site's plugins, theme and custom code are ready for a newer PHP version, and propose an update or a code change for each problem.
- Tweak: Skills can now be made available in Novamira Pro's Read Mode, from the skill's page or in the skill file, so AI agents can use skills that only read the site while Read Mode is on.
- Fix: Sites on Windows servers whose table prefix contains capital letters no longer report the connection storage as missing.
- Minor Fixes
v1.12.10
- Tweak: OAuth connections for MCP now cover the site's entire REST API, using the full access already approved by the administrator. Existing connections keep working without needing to reconnect.
- Tweak: AI agents editing a Gutenberg page can now detect that it was edited by hand after they read it, and stop instead of overwriting those edits.
- Tweak: AI agents and Novamira HQ can now tell whether Read Mode is on for a site.
- Tweak: Kinsta sites now let Novamira clear cached sign-in responses when AI Abilities settings change.
- Fix: The Block Editor Queue now reports stopped changes and recovers abandoned batches, instead of staying stuck silently after an error.
- Fix: Ready Block Editor Queue batches are no longer held up by a newer batch that keeps failing.
- Fix: A Block Editor Queue page left open in a background tab is no longer reported as closed when the browser slows its heartbeat.
- Fix: Elementor pages edited through Novamira Pro over OAuth now retain global colors and fonts when their styles are regenerated.
- Fix: Older AI client connections now keep reaching Novamira when another plugin uses the same server address. Agents using the older address also receive the recommended connection URL to share with the user.
- Fix: Turning AI Abilities on now clears outdated sign-in responses after the settings finish saving, including addresses with a trailing slash.
- Fix: Troubleshoot now distinguishes error notices, unexpected responses and cached replies when a connection check fails, instead of pointing every invalid response at a cache or firewall.
- Fix: Troubleshoot connection checks now avoid failures caused by WordPress displaying error notices in the sign-in metadata.
- Fix: Troubleshoot and admin notices no longer produce a database error on sites where connection storage has not yet been initialized.
- Minor Fixes
v1.12.9
- Tweak: Novamira is now ready for Read Mode, a production ready Novamira Pro feature that lets an AI agent inspect a site without Novamira's write abilities. It requires Novamira Pro 1.12.0 or newer. The new Read Mode page under Novamira and `wp novamira read-mode` show whether it is on and turn it off. While it is on, only read abilities stay available, Novamira Visual does not work, the admin bar says Read Mode, the Abilities Hub lists only the read abilities and the Features page cannot be changed. Read Mode is not a security feature.
- Minor Fixes
v1.12.8
- Fix: AI Abilities now stay on on sites where a host or plugin rewrites the site address for individual requests, where they previously switched off after being turned on.
- Fix: The notice shown when AI Abilities switch off because the site domain changed now also appears on the Configuration page, where it was previously hidden.
- Fix: The buttons on the Configuration page for AI Abilities, application passwords and the production site notice now save reliably, where the page previously reloaded with nothing changed on some sites.
- Fix: The Claude Desktop bundle now installs on Windows when the site title contains characters such as | or :, which are replaced with a hyphen in the connector name.
- Fix: The OAuth discovery addresses now also answer when a server adds a trailing slash to them, where they previously returned a page not found. Troubleshoot recognizes that redirect and shows the line to add to .htaccess, instead of pointing at hosting support.
- Minor Fixes
v1.12.7
- Tweak: Novamira Design now tells AI agents when a design is active as soon as they connect, so they read it before starting visual work.
- Fix: Device-code sign-in can now keep waiting for approval when a client polls at the advertised interval, instead of reaching the site's request limit after a few minutes.
- Fix: Gutenberg changes queued by AI agents can no longer replace a page with a version that has lost most of its text or images. The change stops before saving and the agent is told to send the full content, where it previously finished with the text emptied.
- Minor Fixes
v1.12.6
- Tweak: The sandbox safe mode notice now explains in plain words what happened and includes a ready-to-paste prompt for your AI to fix the problem, with a link to the Sandbox page for those who prefer to do it by hand.
- Fix: Troubleshoot now recognizes when a real .well-known directory with its own .htaccess file keeps the OAuth discovery addresses from reaching WordPress, and shows the rewrite rule to add to that file, where it previously pointed at caches and firewalls.
- Fix: The Deactivate review page, Manage Connections and the OAuth approval screens now carry their own title, so sites that display PHP notices no longer show a strip_tags() deprecation from wp-admin/admin-header.php at the top of those pages, and the browser tab shows the page name.
- Minor Fixes
v1.12.5
- Fix: The OAuth sign-in addresses answer as not found while AI Abilities are off, and page caches no longer keep that answer: enabling the abilities now takes effect immediately, instead of requiring the cache to be emptied by hand.
- Minor Fixes
v1.12.4
- New: Grok.com and Grok Bot support. Connect grok.com with OAuth sign-in through a custom connector, or hand Grok Bot a short prompt with the server details and let it set up the OAuth or application password connection on its own.
- Fix: Admin access and upload link abilities now return their curl examples when PHP disables `escapeshellarg`, instead of failing while formatting the response.
- Fix: Registering an AI client now reports an error instead of a false success when the client could not be saved, for example on a site whose OAuth table is missing a column. Novamira adds a missing column automatically when the database allows it; a client that failed to connect during that window needs to be removed and added again.
- Fix: Troubleshoot now tells you who is redirecting an OAuth discovery URL. When the redirect comes from WordPress itself, the check points at the redirection, SEO or security plugin holding a rule for that path instead of sending you to hosting support, which cannot see or remove it.
- Fix: Filesystem abilities called over the REST API now return appropriate HTTP statuses for invalid requests, missing target directories, protected locations, and conflicting file state instead of reporting them as server errors.
- Fix: Other plugins' Bearer tokens are no longer rejected by Novamira. A request carrying another plugin's token now reaches that plugin's own authentication instead of failing with a Novamira sign-in error.
- Fix: Novamira Design tools are now available to AI clients that connect over the REST Abilities API, alongside the rest of Novamira's abilities.
- Fix: Prevent an HTTP 500 when another plugin triggers Bearer authentication before WordPress creates its rewrite object on sites using pretty or index-based permalinks.
- Fix: Browser sign-in now reaches the approval screen on sites whose WordPress Address and Site Address use different hosts (for example www and non-www), including after logging in, instead of stopping on the bare wp-admin dashboard.
- Fix: MCP server names now distinguish WordPress sites installed in different subdirectories on the same domain, and site titles with symbols display correctly in Claude connectors and bundles.
- Fix: Novamira Visual server names now distinguish WordPress sites installed in different subdirectories on the same domain, and site titles with symbols display correctly in the Visual bundle.
- Minor Fixes
v1.12.3
- Fix: Blocks sent to the Block Editor Queue without any settings of their own now save with all of their content. Such a block reached the hidden editor in a form the editor could mistake for outdated content that needed converting, and the conversion discarded the block's items: a bulleted or numbered list was saved empty, or with a single blank item, while the queue still reported the item as finalized. Queue items created before this release are corrected as they are read, so batches already waiting do not need to be recreated.
- Fix: Novamira CLI setup prompts now tell AI agents to select the installer for their current shell and switch to device authorization when browser sign-in cannot complete, so headless connections can finish without manual troubleshooting.
- Minor Fixes
v1.12.2
- Fix: Activating Novamira with WordPress debugging on no longer prints a "Translation loading for the `novamira` domain was triggered too early" notice, followed by "Cannot modify header information" warnings in wp-admin. Feature names and descriptions are now translated when they are displayed rather than while the plugin loads, and abilities still register as early as before.
- Fix: CSS and JavaScript files created in the sandbox can be loaded by site pages again. PHP and all other sandbox files remain blocked from direct web requests, and protection files installed by the previous release are upgraded automatically without replacing custom server rules.
v1.12.1
- Fix: Browser sign-in now completes on hosting with an external object cache, where a freshly opened approval link could be reported as invalid or expired before it was ever used. The short-lived approval state is now kept in the database, so AI clients that could not get past the approval screen, such as ChatGPT, connect again.
- Tweak: The Troubleshoot page now confirms that every OAuth table is installed instead of checking only the first one, so a partial installation is reported rather than appearing healthy.
v1.12.0
- New: A Features page lets administrators turn complete Novamira components on or off (Pro specializations will arrive with the future Novamira Pro 1.9.0 release). Abilities previously turned off individually are turned back on when their component is active.
- Tweak: Features, skills, abilities, and sandbox files now share a quieter interface with clearer hierarchy and consistent disabled states. Incomplete user skills now state what is missing and how to complete them.
- Fix: Agent context is now categorized as read-only context, so Novamira Chat no longer asks for code-execution approval before retrieving it.
- Fix: The Block Editor Queue now rejects page-builder blocks that require their builder's own runtime and directs AI agents to the appropriate integration, instead of accepting batches that cannot be finalized.
- Fix: WP-CLI abilities are now exposed only when the server can execute WP-CLI. AI agents that request them by name on unsupported servers receive the reason they are unavailable.
- Fix: The Block Editor Queue now reports when its hidden editor is unavailable instead of describing every third-party block as unregistered. WordPress 7.1 can also access the hidden editor directly again.
- Fix: Novamira Design now recognizes Do and Don't guidance grouped under labels or subheadings, including typographic apostrophes. Design checks enforce the same guidance and warn when none is recognized.
- Fix: Novamira Visual no longer lists internal system abilities as usable backend tools.
- Fix: ChatGPT connectors can now pass arguments to Novamira abilities through the generic execution tool instead of rejecting them as invalid.
- Fix: Novamira's full AI toolset remains available when another plugin loads the WordPress Abilities API first, instead of exposing only ability discovery.
- Minor Fixes
v1.11.6
- Fix: Novamira no longer announces classes of its bundled MCP Adapter at a location the plugin does not ship. On a site where another plugin checks whether those classes exist, that check ended in a critical error on every page after updating to 1.11.5.
v1.11.5
- New: The Configuration page now covers all 72 AI agents supported by the Novamira CLI installer, from Claude Code and Codex CLI to Hermes Agent and OpenClaw. Choose an agent once and see only the connection routes that work for it: Novamira CLI, OAuth, or Application Password.
- Tweak: Recurring admin notices now use a consistent close button and stay dismissed for each administrator, while critical setup errors remain visible.
- Tweak: When the OAuth tables are missing, the Troubleshoot page now names what is actually stopping the installer — AI Abilities being off, a domain lock, or the site not being served over HTTPS — instead of suggesting a deactivate and reactivate cycle that could not have helped.
- Tweak: Updated the bundled MCP Adapter to version 0.6.1.
- Fix: Anything a sandbox file prints while it loads is now discarded instead of being added to the response being built at the time. A single leftover debug line in a sandbox file used to appear ahead of the JSON on the MCP and OAuth endpoints, which broke every AI client's connection with a parse error, and showed up on front-end pages and admin screens too. With WP_DEBUG on, the discarded text is written to the PHP error log along with the file that printed it.
- Fix: A sandbox file that stops with an error no longer ends the whole request. The remaining sandbox files still load, WordPress finishes loading, and safe mode switches on from the next request as before — where previously one broken sandbox file could surface as an unrelated fatal error elsewhere in WordPress.
- Fix: The Block Editor Queue can now finalize third-party blocks in Chromium on WordPress 7.1, where the isolated editor previously caused registered block libraries to appear unavailable.
- Fix: AI clients that support both device authorization and browser sign-in, such as Visual Studio Code, can now connect over OAuth. They were registered as device-only clients, which discarded the redirect address they needed and left them refused at sign-in with "This application is registered for device authorization."
- Fix: The admin warning for detected connection problems now opens Troubleshoot directly instead of sending administrators to Configuration.
- Minor Fixes
v1.11.4
- New: Before deactivating Novamira, the review page now shows stored Novamira Pro memories, user-added skills, and Chat sessions. Choose whether to preserve or permanently delete each data type when removing the plugin.
- New: AI clients can now discover which Gutenberg block types a site has registered and read each block's attribute schema, supports, and nesting constraints before composing content, instead of finding out about a wrong block name or attribute only when a Block Editor Queue batch fails.
- Tweak: The Troubleshoot page can now clear this site's registration limits, so an AI client that reports too many attempts can be connected again right away instead of waiting for the hourly budget to refill. Connected clients are left untouched.
- Fix: Revoking a connection from Manage Connections now frees its connection slot right away, where the slot stayed in use until the connection expired on its own and could keep new clients from registering.
- Fix: The Block Editor Queue endpoints for claiming, completing, and failing queue items now respond with a clear "send a JSON object body" error when a request arrives without a JSON body or with a malformed one, instead of stopping with a PHP fatal error that left the batch stuck in the running state.
- Fix: The Block Editor Queue now mounts blocks in the hidden block editor before saving them, so blocks that receive their settings from the editor itself save complete. Previously blocks from libraries such as Kadence Blocks, Spectra, and GenerateBlocks could save without their per-block style IDs and layout markers — rendering unstyled, or with a row's columns stacked full-width — even though the queue reported success.
- Minor Fixes
v1.11.3
- New: The Configuration page now asks for the AI client before the authentication method, shows every supported client, and explains technically why an authentication method or cloud-only client cannot work in the current environment.
- New: Novamira detects Kinsta, WP Engine, Hostinger, SiteGround, Pantheon, and Cloudflare security layers that may classify direct connections from cloud AI clients as bot traffic. Application Password is recommended where appropriate, while OAuth remains available with a dismissible technical warning and an editable support email template.
- New: A dedicated Manage Connections page brings OAuth connected apps and Novamira Application Passwords together, with their usage details and revoke actions.
- New: Command-line tools can sign in with a device code when their browser runs on another machine, such as a shell reached over SSH or inside a container. The tool shows a short code, and you approve it from any device where you are signed in to this site. Only approve a code you started yourself.
- New: Before deactivation, Novamira warns when sandbox files may be powering site functionality, provides a copyable prompt for moving them to persistent storage, and lets administrators choose whether uninstall should remove OAuth data and revoke Novamira Application Passwords across all users.
- Tweak: Codex in ChatGPT Desktop and Codex CLI now have separate setup instructions, and the consumer Gemini CLI entry has moved to Antigravity CLI with its current MCP configuration format.
- Tweak: simplify troubleshooting for blocked OAuth connections.
- Tweak: AI clients now receive the WordPress user ID behind their connection and are warned not to modify Novamira or revoke the credentials keeping that connection active.
- Fix: Claude Code connection commands now register the MCP server globally for the current user.
- Fix: The Block Editor Queue no longer fails every batch with a "Blocked a frame with origin ... from accessing a cross-origin frame" error. When the hidden block editor iframe cannot be read, the queue now serializes with the block runtime of the queue page itself and reports why the iframe was unavailable, instead of failing the batch.
- Minor Fixes
v1.11.2
- Fix: Abilities that take no parameters, such as reading the active design or listing the design library, now work with AI clients that send no input at all, where they previously returned an invalid input error.
- Fix: WP-CLI now runs on Windows, including Local (Local by Flywheel) sites. Set NOVAMIRA_WP_CLI_COMMAND or use the novamira_wp_cli_command filter when detection is not enough.
- Fix: Background WP-CLI jobs on Windows return their job ID and the command's real exit code, and no longer corrupt paths or arguments containing %, !, quotation marks or accented characters.
- Fix: A wp.bat launcher is used only when its wp-cli.phar sits beside it, so command arguments never pass through the Windows command interpreter.
- Fix: OAuth key generation failures now report what OpenSSL refused and how to fix it, and "wp novamira oauth-keys generate" creates the keys from a working PHP environment.
- Minor Fixes
v1.11.1
- Fix: OAuth connections no longer ask users to reconnect for additional permissions.
v1.11.0
- New: Introduced REST API endpoints for the Novamira CLI. More information: novamira.ai/cli.
- Fix: Running PHP through an AI agent no longer logs a PHP warning on every call, which on some server setups flooded the error log and made large operations return a gateway error even though the change had already been saved.
- Minor Fixes
v1.10.1
- New: The one-click .mcpb bundle download for Claude Desktop is available again; it requires Claude Desktop 1.24012.1 or later.
- New: A Troubleshoot page runs on-demand checks on your site's AI connection and points at what to fix, including whether a CDN, firewall, or security plugin in front of the site is filtering AI clients. It produces a copyable report.
- New: A dashboard notice warns administrators when a change on the site stops a previously working AI connection from authenticating, so a connection that suddenly breaks does not go unnoticed.
- Tweak: Developers can raise the limit of 50 simultaneous OAuth connections with the novamira_oauth_max_clients filter.
- Fix: OAuth sign-in now works for AI clients that request the discovery documents with the resource path appended or inserted, as current connectors do, and on WordPress installed in a subdirectory, where those requests previously returned a "page not found" error.
- Fix: Imported design directions now recognize heading and body fonts declared as CSS custom properties or labelled lines, so a design no longer saves without an activatable font pair.
- Minor Fixes
v1.10.0
- New: Novamira Design. AI agents establish one saved design direction for your site and build every page within it, guarded by anti-slop checks; the new Design page lets you preview, import, edit and activate directions. Companion skills cover the workflow, from the design brief to the finished pages.
- Minor Fixes
v1.9.2
- New: ChatGPT support. Connect ChatGPT to your site with OAuth sign-in through its developer-mode custom connector.
- Tweak: Overwriting a post through the Gutenberg pending-change flow is now treated as a destructive action, so your AI client asks before replacing content.
- Tweak: Reading skills can no longer be turned off, so your skills always stay available even when other abilities are disabled.
- Tweak: Calling an ability you've turned off now reports that it is switched off and can be re-enabled, instead of a confusing "not found".
- Fix: Saving Gutenberg content no longer strips backslashes, which could corrupt blocks that rely on escaped characters.
- Minor Fixes
v1.9.1
- New: OAuth sign-in for AI clients. Claude and other MCP clients can connect through a standard OAuth authorization flow, approving access from your WordPress login. The Connect page walks you through each client with per-client setup steps.
- Fix: Abilities Hub enable, disable, and bulk actions no longer fail with an "Invalid ability name" error on some sites.
- Minor Fixes
v1.9.0
- New: Novamira Chat, an AI agent that lives inside your WordPress dashboard. Describe what you want in plain language and it makes the change, showing you exactly what it will do and asking for your approval first. It runs on your own AI provider key, so there is no subscription and you pay only for what the AI uses. Use it on a staging site with backups. Requires WordPress 7 and your own AI provider API key.
- Tweak: The write-file ability now rejects base64 and binary payloads, and points agents to the upload-link ability for large uploads.
- Minor Fixes
v1.8.1
- Fix: The Claude Desktop one-click bundle (.mcpb) is not connecting on recent Claude Desktop versions, so manual configuration is shown by default for now while we look for a solution.
v1.8.0
- New: Novamira Visual, an experimental browser workspace where you watch your AI agent work on WordPress in real time. Instead of working out of sight, the agent opens your pages and the block editor in front of you. For development and staging sites. Elementor and Bricks support comes with Novamira Pro.
- Minor Fixes
v1.7.1
- New: Claude Desktop gets a one-click .mcpb bundle download that installs the MCP server without editing any config files.
- New: The Connect page now asks you to pick your AI client first; the connection options (prompt, bundle, or manual JSON) appear only after that choice, tailored to the selected client.
- Tweak: When AI Abilities are disabled, existing application passwords are listed below step 1 without the step 2 framing, so the setup flow is clearer.
- Fix: WordPress 6.9 ability discovery no longer emits PHP notices for missing or late-registered ability categories.
- Minor Fixes
v1.7.0
- New: A Context page for giving AI agents stable, site-wide guidance they apply automatically on this site. If you also run Novamira Pro, this page appears once Pro is updated to 1.3.0 or later; until then Pro keeps providing custom instructions as before.
- Minor Fixes
v1.6.0
- New: A new Abilities Hub screen lists every ability available to AI agents, grouped by the plugin that provides it, so you can enable or disable each one individually.
- Tweak: Gutenberg pages built by AI agents now consistently use native and third-party blocks, so the result stays editable in the block editor; previously they could sometimes place content in a single raw HTML block.
- Tweak: Before building or restructuring a page, AI agents now confirm which approach you want to use (a page builder, the block editor, or the theme itself) instead of assuming one.
- Tweak: The Configuration page now notes that the paste-to-agent prompt includes your application password, and links to the manual configuration if you prefer not to share it with the AI.
- Minor Fixes
v1.5.1
- Tweak: The Novamira admin bar item now includes a dropdown toggle for turning AI Abilities on and off.
- Minor Fixes
v1.5.0
- New: In the Gutenberg Block Editor AI agents can now create and edit third party blocks valid from the first save
- Tweak: Large-file uploads and browser admin access now use header-based handoff flows, so generated endpoint URLs stay short and easier to reuse in tool commands.
v1.4.0
- New: Gutenberg (Block Editor) support, AI agents can now author and edit posts, pages, templates, template parts, and navigation menus, with native blocks valid from the first save
- New: The Configuration page now includes direct HTTP snippets for Claude and Codex clients that cannot use the default npx-based MCP setup.
- Minor Fixes
v1.3.0
- New: Skills. Create or upload Markdown playbooks your AI follows automatically on this site, including a built-in skill that teaches your AI to write new ones.
- New: AI agents can now create short-lived, one-time WordPress admin access links for browser automation tools, without exposing admin passwords.
- Tweak: The Sandbox files page now uses the same compact card layout as the Skills page, with an Enable/Disable toggle and file-type badges.
- Minor Fixes
v1.2.1
- New: AI agents can now run WP-CLI commands through Novamira, with support for background jobs.
- Minor Fixes
v1.2.0
- New: AI agents can now upload plugin, theme, media, and other large files more easily.
- New: A "paste to your AI agent" block on the Configuration page lets you copy a short description and have your AI client set up the MCP server connection for you, instead of editing JSON config files by hand.
- New: The Configuration page warns when AI Abilities are turned on against what looks like a production site, with a reminder to keep them on staging or development copies only.
- New: If you already have a saved application password (for example from a password manager), a new field on the Configuration page lets you paste it directly and skip generating a new one.
- New: Local HTTPS development sites with self-signed certificates are detected automatically, and the generated client configs include the small flag Node.js needs to accept the certificate.
- New: When the site is on a local hostname over HTTP, the Application Passwords notice now explains the exact line to add to wp-config.php to enable them.
- Tweak: Redesigned the Configuration page into three numbered cards (Enable AI Abilities, Application Password, Connect Your AI Client) so the setup reads top to bottom.
- Tweak: The MCP endpoint is now /wp-json/mcp/novamira. The previous /wp-json/mcp/mcp-adapter-default-server keeps working for AI clients that are already connected, no action needed.
- Tweak: Per-client JSON snippets are collapsed by default behind a "Need the JSON config for a specific client?" link, since most setups now use the paste-to-agent block.
- Tweak: AI agents working with data-modeling plugins (ACF, JetEngine, Pods, ACPT, Meta Box, Toolset, CPT UI, WooCommerce, etc.) are now told to use the plugin's own UI or API instead of registering post types, taxonomies, or fields directly in PHP, avoiding broken slugs and labels later.
- Fix: PHP notices about duplicate ability registration on every wp-cron tick no longer appear in the error log.
- Minor Fixes
v1.1.2
- New: Configuration instructions for the OpenAI Codex CLI MCP client.
- Fix: The Novamira ON admin bar indicator now only appears for administrators who can manage Novamira settings.
- Minor Fixes
v1.1.1
- Improvement: The Configuration page now detects when Application Passwords have been disabled by a security plugin (e.g. Solid Security, Wordfence) and shows a clear explanation instead of the generic HTTPS/local-environment message.
- Improvement: Moved the AI Abilities on/off switch to the top of the Configuration page making clear they are needed for the MCP to work.
- Improvement: When an AI agent sends invalid input, the error message now includes the specific per-property details the agent needs to correct it — so the agent can fix its own mistake in one try instead of guessing or asking the user.
- Minor Fixes
v1.1.0
- Fix: Recursive directory listings no longer fail when a folder contains a broken shortcut (symlink) — the listing now skips over it gracefully and includes the rest of the results.
- Improvement: AI agents now reliably receive site context and usage instructions, even on MCP clients that previously ignored them during connection setup.
- Improvement: Updated the bundled MCP Adapter library to version 0.5.0.
- Fix: Ability failures are now surfaced as proper errors instead of being masked by a success response.
- Minor Fixes
v1.0.3
- Fix: Sandbox crash detection failed to detect fatal errors thrown indirectly from WordPress core or third-party code called by a sandbox file.
v1.0.2
- Fix: Sandbox crash detection now uses a shutdown handler instead of a file marker, eliminating false positives from concurrent requests and external code calling exit().
- Fix: Execute-ability coerced empty parameters (`{}`) to `null`, causing "input is not of type object" validation errors for abilities with all-optional properties.
- Remove: PHP syntax validation from write-file and edit-file abilities — the sandbox already catches syntax errors at runtime, making pre-write validation redundant.
- Minor Fixes
v1.0.1
- New: Configuration instructions for 7 additional MCP clients: Cline, Roo Code, Kilo Code, GitHub Copilot, Amazon Q, Gemini CLI, and Antigravity.
- New: MCP server name now defaults to the site domain for easier multi-site setups.
- New: MCP server instructions include site locale and multilingual context.
- Fix: Admin page header spacing.
v1.0.0
- 🎉 First stable release.
v1.0.0-rc4
- New: Domain-locking for AI abilities — the site hostname is stored when abilities are enabled. If the domain changes (e.g. a staging database is restored on a different server), abilities automatically deactivate and an admin notice explains what happened.
- New: MCP server instructions — AI agents now receive context about the WordPress environment (version, active plugins) during MCP initialization.
- Minor fixes.
v1.0.0-rc3
- Fix: Shell quoting in the Claude Code mcp add command — the MCP server URL and other env values were not properly quoted, causing syntax errors when pasting the generated command.
v1.0.0-rc2
- Minor fixes.
v1.0.0-rc1
- Release candidate for 1.0.
- Eight abilities: execute-php, read-file, write-file, edit-file, delete-file, disable-file, enable-file, list-directory.
- PHP sandbox with crash recovery and safe mode.
v1.13.3
Latest- Tweak: MyListing specialization. AI agents can now give a new listing type MyListing's built-in fields (Title, Description, Location, Category, Logo, Work Hours and the others, or all of them at once), set up exactly as the listing type editor adds them, and every listing type they create includes the Title field, as in the editor. Agents can also customize a built-in field or use it as the starting point for a new field (such as WhatsApp from Phone) when creating or editing a listing type. Custom fields built this way keep the editor's standard field labels and cannot take another built-in field's identity.
- Fix: MyListing specialization. AI agents can create listing types with fields, change a type's fields and read a type's full setup on sites running PHP 8.0, where these requests stopped with an error.
- Fix: Divi canvases (off-canvas content) can now be read and edited by AI agents, and the pages showing them display the change right away.
- Minor Fixes
v1.13.2
- New: Kirki specialization. AI agents can build and edit Kirki pages, symbols, popups and templates, manage global classes, page settings and SEO, model and fill content collections, and export form submissions (requires Kirki 6.4.0 or newer). A companion skill covers its features and workflows.
- Fix: Novamira Pro license activation with an empty license key field now asks you to enter your key, instead of reporting it as invalid.
- Minor Fixes
v1.13.1
- New: Ollie specialization (requires the Ollie theme 1.4.8 or newer, and Ollie Pro 2.8.3 or newer for its editor extensions): AI agents can explore a site's templates, patterns, styles and the block settings Ollie Pro adds. A companion skill covers the workflows.
- New: MyListing specialization (requires the MyListing theme 3.0 or newer): AI agents can set up listing types, add and maintain listings with their locations and opening hours, and organize categories, regions and tags. A companion skill covers the workflows.
- Minor Fixes
v1.13.0
- New: WPML specialization (requires WPML 5.0 or newer). AI agents can translate pages, posts, categories, theme and plugin texts and media themselves, manage languages and what gets translated, or send content to your translators and to WPML's automatic translation, asking before they spend WPML credits. A companion skill covers the workflows.
- Tweak: Read Mode can now be turned on by AI agents and by Novamira HQ when you ask for it. Turning it off stays on the Read Mode page or with WP-CLI.
- Tweak: GenerateBlocks Pro Design Tokens can now be read, created, changed and deleted by AI agents, with values per breakpoint, and used to style blocks (requires GenerateBlocks Pro 2.8.0 or newer). A token that may still be in use is only deleted after you confirm.
- Fix: ACF field groups created by AI agents are now saved on sites that also run WPML, where ACF Pro 6.8 previously removed them.
- Fix: ACF values written by AI agents in a format the field does not take, and display rules with no condition, are now refused with a clear reply, where they were previously saved broken.
- Fix: ACF field groups set up with ACF Multilingual keep their translation mode when AI agents save them.
- Fix: Bricks sites running PHP 8.0 now load Novamira Pro normally, including WP-CLI commands that use PHP 8.0, where Novamira Pro previously stopped with a fatal error.
- Fix: Breakdance elements can now be edited by AI agents on sites running PHP 8.0.
- Fix: Divi sections, rows, columns and groups that AI agents create now use Divi's default flex layout, like the ones built in the Visual Builder, and keep a layout the agent sets explicitly. Pages built by AI agents before this update look exactly as they did.
v1.12.0
- New: Read Mode. It is production ready and lets AI agents inspect a site without Novamira's write abilities: turn it on from the Read Mode page under Novamira or with WP-CLI (requires a Novamira version with Read Mode). While it is on, agents can read files and site details through Novamira, and posts, terms, users, comments, options and the database schema, and run read-only SQL queries, through read abilities Novamira Pro adds. On the Read Mode page you can also allow the read abilities of the Novamira Pro specializations, which are on by default, and the read abilities other plugins declare read only, which are off by default; in the Abilities Hub you can turn single abilities off and on. Skills are not available to agents.
- Tweak: GeneratePress: `generatepress-list-sites` reads the cached catalogue of Site Library templates, and the new `generatepress-refresh-sites` fetches it again.
- Tweak: AI agents are now guided to flag potentially overlapping ability groups and suggest choosing one in Abilities Hub. Novamira recommends its own abilities while preserving your choice.
- Fix: Novamira Pro now provides a setup page when the base Novamira plugin is missing or inactive, with a download link and guidance to activate it before setting up the Pro license.
- Minor Fixes
v1.11.2
- Fix: Meta Box sites now load Novamira Pro normally again, where version 1.11.1 stopped the REST API, the MCP connection and the block editor from working while the Pro license was active.
v1.11.1
- Tweak: ACPT custom field values on comments can now be read and written by AI agents, and the guidance covers tabbed layouts, required fields and values such as prices, measurements, date ranges and files.
- Tweak: ACPT option pages can now be placed under a WordPress admin menu (such as Settings) by AI agents on ACPT 2.1 or newer, the first version that offers this placement.
- Tweak: ACPT field groups can now be read in full by AI agents, including choices, field settings, sub-fields and flexible layouts, to check or repair their setup.
- Fix: Divi pages whose Post Filter holds its filter items inside a text or group module, as the Divi editor allows since Divi 5.13, can now be edited by AI agents, where those pages were previously refused.
- Fix: Weglot API keys defined as constants in wp-config.php (requires Weglot 6.3 or newer) are now used by AI agents, where the setup check, status and cloud sync previously reported a missing key or used an older saved one.
- Fix: Weglot guidance for AI agents now matches what the plugin does with translated URLs and lists every error an agent can receive.
- Fix: ACPT option pages placed under a WordPress admin menu now stay there when an AI agent edits them.
- Fix: ACPT field groups edited by AI agents keep the choices, default choices, sub-fields and field settings the edit does not touch, and groups with dropdowns can be edited on every supported ACPT version.
- Fix: ACPT field groups created or edited by AI agents no longer take fields from other groups, and agents report the field names ACPT actually saved and any part of a change it did not store.
- Fix: Mosaic background, box-shadow and text-shadow variables can now be created by AI agents, where those requests previously failed.
- Fix: Mosaic loops built by AI agents now follow the requested sort order, and blog post loops can show the post excerpt.
- Fix: Mosaic pages built by AI agents now bind templates to single pages and apply theme width and spacing settings as Mosaic expects, and variable references in custom CSS keep working after a variable or collection is renamed.
- Minor fixes
v1.11.0
- New: Ghost Mode. Run Novamira on client sites without it showing up for the client's administrators: only the administrators you choose see its interface. It is not a security feature.
- Tweak: Novamira Pro licenses can now be activated, checked and deactivated with WP-CLI.
- Tweak: Elementor Theme Builder display conditions can now be read and set by AI agents (requires Elementor Pro), so a template can be assigned to specific pages without opening the Elementor editor.
- Tweak: Elementor templates created by AI agents are now published by default, and agents report the fields and text Elementor does not keep as written.
- Tweak: WPBakery Page Builder settings set by AI agents are now checked against the choices your version accepts, with a clear reply when a setting does not exist or no longer applies.
- Tweak: All in One SEO guidance for AI agents now matches what the plugin does on sites without All in One SEO Pro.
- Fix: Elementor work by AI agents is more reliable: variable tools stay available on recent releases, dynamic tags bind again on the new page-building surface, and agents no longer claim the site lacks loops, forms or accordions.
- Fix: Divi global presets that carry an id attribute are now flagged to AI agents, since every module using such a preset shares that id.
- Fix: WPBakery Page Builder pages built by AI agents keep their links, grids, custom CSS and layout, including on WPBakery Page Builder 9.0.
- Fix: All in One SEO site-wide settings can now be read by AI agents on sites without All in One SEO Pro.
- Minor fixes
v1.10.1
- Tweak: Elementor saved templates can now be created, listed, inspected, renamed, deleted and switched to another template type by AI agents.
- Fix: Memories saved by AI agents or from the Memory admin page now keep their text exactly as written, where code snippets and anything that looked like an HTML tag were previously removed on save while the save still reported success.
- Fix: Elementor templates rewritten by AI agents keep their template type, so a Loop Item, header, footer or other Theme Builder template stays what it was instead of becoming a plain page.
- Fix: Elementor template types set by AI agents are now checked against the types Elementor allows for that page or template, and a template switched to another type moves to the matching group in the Templates list.
- Fix: Elementor templates whose type comes from an inactive plugin (headers, footers and Loop Items while Elementor Pro is off) are left untouched when an AI agent edits them, and the agent is asked to reactivate that plugin first.
- Fix: Elementor's Site Settings (global colors, fonts and other site-wide settings) are no longer turned into a template by AI agents, and a template edit that fails to save leaves the template's type as it was.
- Fix: Elementor Pro Global Widgets edited by AI agents keep holding the same widget: an agent can change its content and style, including the items inside tabs and accordions, and a request to swap the widget or place another one beside it is declined with a pointer to the Elementor editor.
- Fix: Bricks dynamic data tags written without a space before @fallback (for example {post_title@fallback:'Untitled'}) are now reported to AI agents as the plain text the page shows, and the agent is asked to add the space. The Bricks skills now cover the fallback syntax.
- Fix: Bricksforge tools added in Bricksforge 4.0 (Animation Panel, Node Editor, Builder Customizer, White Label and Global Classes) can now be turned on and off by AI agents, and the setup check recognizes them instead of listing them as unknown. On earlier Bricksforge versions they are reported as not available.
- Minor fixes
v1.10.0
- New: Dynamic Content for Elementor specialization gives AI agents dedicated guidance for working with the plugin and lets them manage its PDF templates. A companion skill covers its features and workflows.
- New: JetElements specialization gives AI agents dedicated guidance for working with the plugin in Elementor. A companion skill covers its features and workflows.
- New: Ultimate Addons for Elementor specialization gives AI agents dedicated guidance for working with the plugin in Elementor. A companion skill covers its features and workflows.
- New: Happy Addons specialization gives AI agents dedicated guidance for working with the plugin in Elementor. A companion skill covers its features and workflows.
- New: Unlimited Elements for Elementor specialization gives AI agents dedicated guidance for working with the plugin in Elementor. A companion skill covers its features and workflows.
- New: Qi Addons for Elementor specialization gives AI agents dedicated guidance for working with the plugin in Elementor. A companion skill covers its features and workflows.
- New: Element Pack specialization gives AI agents dedicated guidance for working with the plugin in Elementor. A companion skill covers its features and workflows.
- New: HT Mega specialization gives AI agents dedicated guidance for working with the plugin in Elementor. A companion skill covers its features and workflows.
- New: PowerPack for Elementor specialization gives AI agents dedicated guidance for working with the plugin in Elementor. A companion skill covers its features and workflows.
- New: Piotnet Addons for Elementor specialization gives AI agents dedicated guidance for working with the plugin in Elementor. A companion skill covers its features and workflows.
- New: Xpro Elementor Addons specialization gives AI agents dedicated guidance for working with the plugin in Elementor. A companion skill covers its features and workflows.
- New: Bricks changes made by AI agents can be undone. Every content change is saved into a WordPress revision before it is written, so you can roll it back from the post's revision history, and a change is held back while someone else has that post open in the builder unless you ask for it to go through anyway.
- New: Bricks pages are checked on the site before an AI agent reports them as done. It loads the page the way a visitor would, so one that errors, comes out blank or loses its styles is caught and reported as a problem rather than handed over as finished.
- New: AI agents can manage Mosaic sub classes, Variants and variant sub classes, not just top-level Classes, and pick a Variant only from the ones an element supports. Class names are saved exactly as Mosaic would save them from its editor, including its automatic renaming when a name is already taken, and deleting a Class also removes it from the elements that used it, as in the editor.
- Tweak: The Elementor page building tools now offer the new atomic element types only on sites where Elementor has them enabled, so an agent no longer builds a page out of elements the site cannot render. Reading a page that already contains such elements now reports which ones are not registered, instead of returning a tree that looks complete while the page renders empty.
- Tweak: The Elementor page building tools now describe the shape of an element inside their own input schema — which keys a node takes, which of them accept a second spelling, and which are refused — instead of leaving it to the surrounding prose. An agent reading the tools no longer has to guess the shape of the content it is about to write.
- Tweak: An AI agent that pastes a whole section's markup into a single Bricks text element is now stopped and told to build the section out of separate elements, so what it hands over stays editable in the builder rather than arriving as one block of text. Empty sections and containers are reported the same way.
- Tweak: Bricks styles lead on Bricks sites. With an active Novamira design the agent works from your Bricks classes, variables and theme styles first and uses the design to fill gaps or when you ask for it; without one, Bricks is the single source of truth and no design document is created unless you ask for it.
- Tweak: A Divi layout the builder itself would not accept is now saved with a warning naming what that container does take, instead of being refused, and changing a setting that alters what a container may contain now rechecks its contents and reports anything that no longer fits. Divi error messages also name the container's actual variant and only ever suggest something Divi accepts there.
- Tweak: On a Mosaic install that still uses its older class storage, the class and variant tools explain that Mosaic needs updating, while themes, templates, page elements, components, collections and variables keep working.
- Tweak: Memory can now be turned on or off from the Novamira Features page, and its admin menu follows that setting.
- Fix: An Elementor page built with the new atomic elements on a site where Elementor does not have them enabled now comes back as an error naming the feature to turn on, instead of a success reply that leaves the page empty. Elementor silently drops element types it cannot build and saves nothing in their place, so everything an agent sent that way was lost while the write still reported success.
- Fix: Elementor writes are now checked against what was actually stored down to the nested elements, so content dropped below the top level comes back as an error instead of passing as saved.
- Fix: Listing Elementor widgets filtered by the atomic source now returns those widgets, where it previously came back empty on every site, including sites that have the new elements enabled.
- Fix: Narrowing an Elementor widget's controls to a single tab or section now returns those controls, where both filters previously came back empty for every widget on every site. On sites where the tools cannot confirm a widget's controls were handed over in full, narrowing by tab is now refused with an explanation instead of returning a partial list that looked complete.
- Fix: Inserting a ready-made Elementor subtree now accepts either spelling of an element's type, the same as writing a whole page. Inserting used to accept only one spelling, so a subtree an agent had just written could come back refused when it tried to insert that same content again.
- Fix: An Elementor element written without a type is now refused wherever it appears in a subtree, not only when it is the outermost one. Such an element still rendered on the page, but Elementor itself stopped counting it as an element: exporting the page, saving it as a template, and Elementor's own content clean-up all walked straight past it and logged PHP warnings on the way.
- Fix: Reading an Elementor page no longer hands back content the writing tools would then refuse. Any misspelled element keys found on the page are now listed separately instead, so nothing is lost, and rewriting the page clears them for good.
- Fix: An Elementor element that names a widget but no element type is now understood instead of refused, wherever it appears in a subtree — the widget name already says what the element is. This also makes pages that were saved earlier with that gap editable again through either writing tool.
- Fix: The short one-line form for an element's styles now works when writing a page or inserting a subtree, as it already did when adding or editing a single element. The same styles were valid in one tool and rejected by another.
- Fix: The Elementor page building skill now spells out the whole widget discovery call, so building a page no longer stops at that first step. Two of its instructions left out something the discovery tool requires, and an agent that followed either one was turned back with an input error before it could look up a single widget.
- Fix: Elementor content is no longer written to posts that cannot hold an Elementor page, such as another plugin's own template store. A write aimed at such a post now comes back as an error naming the post and its post type, instead of reporting success and leaving behind content nothing ever reads.
- Fix: Elementor's dynamic tags now keep working on the new element types when an AI agent applies one, storing the choice the way Elementor records it so the element shows what it should and the page still saves in the editor. A tag aimed at something no longer on the site, or a value Elementor would reject, is now refused with an explanation before anything is written.
- Fix: An Elementor element that has no link keeps it that way when an AI agent edits anything else on it. Editing only the text used to fill the empty link setting in with a default target and tag, which changed the element on every edit and made an empty link impossible to set back.
- Fix: Elementor settings that hold a structure rather than a single value, such as a link, a form field's options, an element's extra attributes, and display conditions, are accepted in the exact form Elementor stores them in again. A malformed or generically typed value that Elementor would reject anyway is now refused up front, instead of being saved in a shape the editor rejects.
- Fix: Adding or editing a single Elementor atomic element now runs Elementor's own validation over its settings before saving, the same check writing a whole page already had. A setting that used to save and report success, only for Elementor to refuse the element on its next save, now comes back as an error naming the setting, and nothing is saved.
- Fix: An Elementor image setting is no longer offered to AI agents as a place to attach a dynamic tag. The tag belongs on the image source inside the setting, not on the setting itself, so attaching it there was stored in a form Elementor does not read and the image stayed empty; the agent is now told so and pointed at the settings that do take a tag.
- Fix: Elementor elements an AI agent has just added to a page now arrive with their own styling, because the page's stylesheet is rebuilt from the content that was saved. A new icon now keeps the size it was given and a new grid stays a grid, where either could previously come out at default size or collapsed into a single column.
- Fix: The tool that refreshes a page's cached output no longer suggests it also rebuilds the stylesheet: it clears the cached markup only, as it always has.
- Fix: Bricks pages built by AI agents arrive styled on sites that serve CSS from files. The page's stylesheet is now written as part of the change, where it previously stayed empty or out of date until someone opened the page in the builder and saved it again.
- Fix: Bricks typography set up by AI agents loads and applies on the front end, so headings and body text use the family you asked for, and turning a single font option off no longer switches Google Fonts off across the site.
- Fix: Bricks sections built by AI agents stay editable in the builder. Element identifiers are generated by the site and a repeated one is refused before anything is saved, so a section no longer contains elements that cannot be selected, edited or deleted.
- Fix: New Bricks element identifiers must contain exactly six characters before they reach a page or template, while identifiers already stored remain editable through the same tools. Component bodies replace non-six-character identifiers automatically and report each replacement.
- Fix: Top-level Bricks elements written as a whole page, inserted subtree, or new template — plus component instances placed beside a top-level sibling — now store the root parent marker in the integer form its Duplicate command requires.
- Fix: Bricks content changes are read back before an agent reports them as saved, and reported together with the number of elements the page now holds, so work that did not land comes back as a problem instead of a success.
- Fix: Bricks layout settings applied by AI agents take effect on every element type. Spacing and direction are offered per element in the form Bricks accepts there, so values set on headings, buttons, images and the rest apply instead of being dropped.
- Fix: Bricks warnings raised while an agent builds now match your site. Working layout settings on a site with theme styles, and the data Bricks records on the elements themselves — element metadata, global elements and the protected parts of its nested elements — are no longer reported as problems, so a warning is worth acting on.
- Fix: Bricks component properties can be added and changed on an existing component, without rebuilding it and re-pointing the pages that use it. Instances placed before a new property existed keep rendering with that property's default.
- Fix: Bricks component styling reaches every page that uses the component. Editing a component refreshes the stored stylesheet of each page it appears on, and the reply names any page that could not be updated together with the call that finishes it.
- Fix: Bricks components are safe from an AI agent's clean-up. A component you have placed on a page is no longer reported to the agent as an empty band to remove, and a component nothing uses is no longer protected from deletion by pages that exist only as revisions.
- Fix: Bricks global settings can all be changed by AI agents, including the ones your site adds, where anything outside a short built-in list used to be refused as unknown.
- Fix: Bricks variables deleted by an AI agent go to the Bricks trash on sites that keep one, so you can restore them from the Variable Manager the way you would after deleting one yourself.
- Fix: Bricks global classes and theme styles edited with a shorter list drop the entries you removed, so a gradient renders with the stops you kept and a theme style stops applying where you removed its condition.
- Fix: Bricks settings written by AI agents are checked against what your version of Bricks accepts. An interaction trigger or action your build cannot run is refused instead of stored and reported as done, and a setting that holds a list, such as a form's actions, is caught before a single value written there can stop the page rendering.
- Fix: Many Bricks refusals now say what is actually wrong instead of looking like the site had broken. Sending a value Bricks does not accept, naming a setting or post type it does not know, asking for something the site is not set up for, or writing to a page someone else has open in the builder each come back as the specific problem, where before they all read as “the server broke, try again” and an agent could repeat the same impossible call. Refusals whose cause is still ambiguous — chiefly those that report something as not found — are deliberately left as they were rather than labelled with a guess.
- Fix: Applying a Bricks global class to a post that does not exist now says the post was not found, where it previously reported that the post had no content and invited the agent to add some to a page that was not there. Patching an area whose stored content is not a Bricks element tree is likewise reported as damaged content, rather than as an empty area to fill — which would have written over whatever is still stored there.
- Fix: A Bricks page whose stored elements were already broken before an agent touched it is now reported as exactly that, naming what is wrong with the stored page, instead of the failure being attributed to the change the agent was making. Nothing is saved either way, but the agent is now pointed at repairing the page rather than at rewriting a request that was never the problem.
- Fix: Dynamic images and button links bound by AI agents in Divi now show their real values without replacing other image or button details, and custom fields inside loops resolve correctly.
- Fix: Divi Theme Builder templates created by AI agents are now registered through Divi's own storage, so they appear reliably in the builder and apply to their assigned pages. Assignment-only edits preserve unrelated layout bindings, and an invalid assignment is refused instead of applied.
- Fix: Divi interactions created by AI agents now use the trigger names Divi's front end recognizes, so their configured effects run. They are also saved with Divi's enabled field and shown as enabled in the builder.
- Fix: A Divi page with a row nested inside a column can be changed again. Divi's builder lets you nest a row that way, but the tools refused to write such a page back, so a page an agent could read came back as an invalid layout on save; nesting a row inside a column now works from the tools too.
- Fix: Divi fullwidth sections, along with groups, inner columns, and other container modules, can now be built and changed by AI agents, where a page holding one of these previously could not be edited at all. Specialty sections stay partly out of reach: their side-by-side columns cannot be created or replaced, so those writes are refused and the page has to be finished in the Divi builder.
- Fix: Creating an ACF field group now refuses a payload it does not recognize instead of storing it. A malformed or misspelled payload used to silently produce an empty field group with no title, no fields, and no location rules while still reporting success; it now comes back as an error naming the keys at fault.
- Fix: Creating or editing an ACF field group can no longer overwrite an unrelated post. A payload carrying a post id, the shape an agent gets from reading an existing group, used to make ACF rewrite that post instead of writing the field group; post ids in a field group payload are now ignored, and reading a field group's schema no longer includes one.
- Fix: A saved ACF field group is now read back and checked against what was asked for before the write is reported as done, so a group that did not fully persist comes back as an error instead of a false success.
- Fix: Creating an ACF field group that fails this new check is now rolled back, including any fields already written, without touching any other plugin's field groups.
- Fix: Editing an ACF field group that fails this new check is now reported rather than undone: the reply says what did not match and which fields the group holds afterwards, so you can decide what to do.
- Fix: Editing an ACF field group now requires the field group's key and refuses a post id. A number is not meaningless to ACF — it looks the post up by id — so a request that passed one could edit a field group it was never pointed at and then overwrite that group's key with the number, leaving the group unreachable by the key all of its fields still pointed at.
- Fix: The Mosaic tools work again on sites running the latest Mosaic. Mosaic changed where it keeps its classes, and on an updated site every Novamira Mosaic tool used to disappear without a word, including the setup check.
- Fix: Classes an AI agent applies to Mosaic elements now render with their styles, where they previously went into the element's plain CSS class list and lost their styling. A Mosaic class name sent to that plain list is now refused, and the design-system check flags any page that still carries one there.
- Fix: Renaming or deleting a Mosaic variable goes through Mosaic itself, so the variable's CSS name stays unique and a later save in the Mosaic editor no longer fails on a name left behind by an earlier change. Variable listings now also report the CSS variable name each one actually emits.
- Fix: The GenerateBlocks and GeneratePress build skills now send GenerateBlocks content, including GeneratePress Block Element bodies, through the Block Editor Queue and let GenerateBlocks produce each block's CSS itself. They previously told agents to hand-write block markup and CSS and to rebuild the page stylesheet by hand, which could leave blocks invalid in the editor or pages unstyled.
- Fix: Adding, editing or deleting a Fluent Forms field, or replacing a form's fields, no longer throws away the rest of what the form has stored. On a multi-step form the step configuration was silently deleted while the call still reported success, and the form kept rendering and submitting, so nothing pointed at the loss. Everything these tools do not change is now saved back exactly as it was.
- Fix: Tools whose inputs are all optional now accept omitted input through the WordPress abilities route and direct calls.
- Fix: When an AI agent gets a request wrong against the WordPress content tools or the Elementor page tools — an id that does not exist, a value the site will not accept, a page already in the trash, a featured image that is not an image — the reply now says the request was the problem, instead of reporting a server failure. Told the server had failed, an agent would keep retrying the same call unchanged rather than correcting it. Failures that really are the site's own are still reported as such.
- Minor fixes
v1.9.0
- New: Blocksy specialization (requires the Blocksy theme 2.1.47 or newer, with Blocksy Companion and Companion Pro also supported): AI agents can set up the theme's global design, per-page layout, header and footer, and Companion features. A companion skill walks agents through the workflows.
- Tweak: Divi modules are now written through the dedicated Divi tools, so what an agent builds saves and renders as expected.
- Tweak: Kadence pages on a site where the block editor cannot run now come back with that as the reason, so the agent reports it instead of working around it.
- Tweak: Novamira Pro specializations can now be turned on or off with their related abilities and skills from the Novamira Features page (requires Novamira 1.12.0 or newer).
- Tweak: Uninstalling Novamira Pro now deactivates its license and cleans up after itself, handing any Context instructions over to the base Novamira plugin and removing its own settings, caches, scheduled checks, and admin notices.
- Fix: Elementor pages now open in the editor showing the content an agent has just written, instead of an older editor autosave. Writes aimed at a revision or autosave id are refused with a message naming the parent post to target.
- Fix: An Elementor write that does not persist now comes back as an error instead of a success reply, so the agent can act on it rather than carry on with a page that never changed.
- Fix: Elementor content and styles that arrive in the wrong shape are now refused with a validation error that names the offending element and the shape expected there, instead of being saved as a style that does nothing.
- Fix: Divi 5 pages composed one section at a time now open complete in the Divi builder, which previously showed only the first section even though the front end rendered them all. Pages built before this release are put back together on the next write.
- Fix: The Divi 5 tools now appear on sites that run Divi through a child theme whose parent theme folder was renamed.
- Fix: Meta Box post types can now be kept off the public site while staying editable in wp-admin, through the standard WordPress visibility settings.
- Fix: The Code Snippets tools work again on Code Snippets 3.10 (free and Pro), and the supported older versions keep working unchanged. AI agents are also told when a snippet is locked, when an edit was not applied, and which snippets a deleted Pro condition was gating.
- Minor fixes
v1.8.3
- New: Spectra Blocks specialization (requires the Spectra Blocks plugin 0.0.8 or newer; the Spectra Blocks Pro add-on is detected when present). AI agents can check the install state and version pair, browse the block catalogue with its activation state, read the plugin settings including reCAPTCHA configuration and Global Block Styles, and inspect Popup Builder popups down to their block markup. A companion skill covers the workflows and keeps the legacy Spectra (UAGB) plugin clearly separate.
- Tweak: The Kadence, GenerateBlocks, and GeneratePress build skills now teach agents about editor-assigned block settings (per-block style IDs and layout markers). With the upcoming Novamira release the Block Editor Queue fills them in automatically at finalization; on Novamira 1.11.3 and earlier the skills instruct agents to supply them by hand, so composed blocks no longer save unstyled or with a row's columns collapsed while the queue reports success.
- Fix: The Spectra build and integration skills now walk agents through the real Block Editor Queue pipeline for composing uagb/* content, where they previously pointed at per-block editing tools that do not exist, stopping every Spectra page build at the first step. They also cover Spectra's editor-assigned block_id, so composed blocks no longer save unstyled on Novamira 1.11.3 and earlier.
- Minor fixes
v1.8.2
- New: Voxel specialization (requires the Voxel theme 1.7.8.3 or newer). AI agents can build a Voxel site's content model, create and edit listings, set up the templates each post type renders through, and read its commerce and community data
- Fix: WordPress admin pages keep loading normally on sites where the license status is refreshed while the page is being built, instead of ending in a critical error.
- Minor fixes
v1.8.1
- New: Oxygen 6 specialization (requires Oxygen 6.0 or newer): AI agents can build pages and templates, style them through the global design system, bind live content and loops, and manage form submissions. A companion skill walks agents through the workflow.
- Tweak: Feedback reports on Novamira now have a place to go: the agent points you to https://novamira.ai/feedback, where you send the report yourself after reviewing it. The agent also offers to prepare one when the same problem keeps coming back after it has genuinely tried to fix it, instead of waiting for you to ask.
- Minor fixes
v1.8.0
- New: Weglot specialization (requires Weglot 5.0 or newer). AI agents can set up the connection, configure the original and translated languages, style the language switcher, and control which pages are translated and under which web addresses. A companion skill covers the boundaries.
- Fix: AI agents can now call the tools that take no required input, whatever MCP client they run in. Those tools previously came back with an input error unless the client sent an empty object explicitly.
- Fix: The Elementor editor keeps working inside the Novamira Visual workspace on Elementor 4.1 and newer. Novamira Visual now turns off Elementor's editor isolation policy so the workspace can drive the editor, and site owners who prefer Elementor's isolation can restore it with the novamira/visual/use_elementor_document_isolation filter.
- Fix: Bricks operations that fail now come back to AI agents as real errors instead of replies that look like success, so an agent no longer carries on after a failed color palette, global class, variable, theme style, or dynamic data operation.
- Fix: Bricks template display conditions written by AI agents are always stored in the array form Bricks reads, on every supported Bricks version: recoverable scalar values are normalized to arrays with a warning, while malformed condition containers or entries are rejected with a clear error before anything is saved (Bricks 2.4 skips malformed scalar values entirely).
- Fix: Bricks code elements written by AI agents now honor the BRICKS_LOCK_CODE_SIGNATURES constant on sites that lock code-signature generation, on every supported Bricks version: a write that needs new code signatures comes back with a clear error naming the affected code elements and how to unlock. On Bricks 2.4 this also keeps unsigned code, which would render empty, off the page.
- Fix: Breakdance pages built by AI agents now come out styled without reopening the builder, because Breakdance's CSS cache is rebuilt after every write to the page.
- Fix: Breakdance element design controls are now fully visible to AI agents, including the grouped ones (the Posts Loop list, the Div layout and background) that previously came back as a single "Error" placeholder, so those elements can be styled instead of left at their defaults.
- Fix: Breakdance elements that cannot render until they are configured, such as a form element with no form picked or a checkout element outside checkout, no longer block later edits to the same page. The element is still added and the agent is told the page will not display it until it is set up.
- Fix: Breakdance raw code elements, and raw page content written straight into WordPress on a Breakdance site, now need your explicit confirmation before an AI agent writes them.
- Fix: Beaver Builder pages written by AI agents no longer fail just because the page contains a column group nested inside a column, a normal Beaver Builder structure that reads always accepted. Column group nodes now allow a row or a column as parent.
- Fix: Mosaic Builder design-system variables can now have their value set by AI agents (color, length, font, etc.), not just their name, so recoloring or restyling no longer requires deleting and recreating variables or falling back to inline styles.
- Fix: Mosaic Builder utility classes can now be styled by AI agents per state (hover, focus, etc.) and breakpoint directly, instead of falling back to raw PHP or database edits that could put the site in a critical error.
- Fix: Mosaic Builder HTML attributes (data-*, aria-*, role, etc.) written by AI agents now carry the identifier Mosaic's own validation expects, so they survive a theme export and import instead of silently disappearing.
- Fix: Mosaic Builder component instances can now have their per-instance override edited or cleared directly by AI agents, instead of falling back to raw database writes that could corrupt the design system.
v1.7.1
- Tweak: Fluent Forms listing and form building are cleaner for AI agents: listing notifications returns compact rows by default (expandable on request), listing submissions hides trashed entries and searches the IP and browser, and building a form now warns when a setting is passed at the wrong level or a form is left with no fields.
- Fix: If the license server was unreachable, admin pages could slow to a crawl. This no longer happens.
- Fix: Fluent Forms forms and fields built by AI agents now render reliably on the page and in the editor. Newly created forms, all field types (including Address, Name, and choice fields), field settings like placeholder, max length and number min/max/step, and the published or unpublished status now take effect instead of silently producing empty output.
- Fix: A range of Fluent Forms robustness fixes: notifications added by AI agents now send on submission without overwriting hand-made ones, per-form permission checks are enforced, confirmation redirects and email headers reject unsafe values, list filters written as text work, concurrent settings edits no longer overwrite each other, and listing or exporting large submission sets no longer risks exhausting memory.
- Minor fixes
v1.7.0
- New: Astra specialization (requires Astra 4.13.5+, free theme plus optional Astra Pro Addon). AI agents can edit the theme settings, color palettes, Header/Footer Builder, and per-page overrides, with more areas unlocked by Astra Pro; a companion skill covers the two tiers.
- New: Avada theme specialization (requires Avada 7.15+). AI agents can edit a curated set of Fusion Theme Options and manage the Global Colors and Global Typography presets; a companion skill covers the boundaries.
- New: Avada Fusion Slider support (requires Fusion Core 5.15.5 or newer, bundled with Avada). AI agents can list the site's sliders and edit their display settings and slides.
- New: OceanWP specialization (requires OceanWP 4.1+, plus the optional Ocean Extra companion). AI agents can edit a curated set of Customizer settings and per-page layout, and with Ocean Extra mount Library templates and turn the Ocean Extra modules on or off; a companion skill covers the boundaries.
- New: Spectra specialization (requires Spectra 2.19+, free plus Spectra Pro). AI agents can browse the block library, manage Popup Builder popups end to end, and turn individual blocks on or off; a companion skill covers the workflow.
- New: Spectra One specialization (requires Spectra One 1.2.2+). AI agents can edit the Global Styles, navigation, and template parts, apply a style variation, and export the whole design as a reusable snapshot.
- Tweak: WooCommerce abilities now register only when WooCommerce is active and at the minimum version, so sites without a store no longer list the WooCommerce category or its setup check.
- Tweak: The Bricks page-building skill now covers query filters and pagination, and the setup check reports whether Bricks' query filters are enabled.
- Tweak: Divi 5 content written by AI agents can no longer carry inline style attributes, since those cannot be edited from the Divi builder controls. The agent gets a clear error pointing to the module's native settings, and inline styles go through only with an explicit opt-in.
- Tweak: Bricks native dark mode can now be set up by AI agents (requires Bricks 2.2 or newer): palette colors accept a dark variant, and reading the palette reports whether the site is ready for Bricks' toggle-mode element.
- Tweak: Meta Box value writes by AI agents can now be scoped to a field group, so a field that does not belong to the group is declined up front instead of being saved as a stray custom field.
- Fix: Elementor pages that AI agents build now import cleanly on any Elementor site, so a page saved as a template moves between sites without errors.
- Fix: GeneratePress Elements now let AI agents read and set their display, exclude, and user conditions, completing the path to building an Element end to end.
- Fix: The Bricks page-building skill now teaches the correct query-loop grid pattern (the loop goes on the card, not the grid container), where Bricks previously rendered one grid per post.
- Fix: Bricks trees written by AI agents now keep parent and children references consistent in every case, and a write repairs any inconsistent link already stored on the page and says so in a warning.
- Fix: Meta Box field groups saved by AI agents no longer fail on Meta Box 2.6.0 and newer when a field carries datalist suggestions.
- Fix: Meta Box field-group reads by AI agents now return the values for every field in the group, where they previously came back empty.
- Fix: Meta Box post types and taxonomies created or edited by AI agents now get working permalinks right away, with no need to re-save the WordPress Permalinks screen.
- Fix: Breakdance Pro licenses are now recognized by AI agents, so a Pro site works with the Pro feature set instead of the free one.
- Fix: Breakdance elements now expose their Settings tab options to AI agents (custom CSS classes, display conditions, draft state), so those can be read and edited like any other element option.
- Fix: Breakdance template abilities now accept the post id in the same form the element abilities use, so AI agents no longer hit input errors when moving between templates and elements.
- Minor fixes
v1.6.2
- New: Bricksforge specialization (requires Bricksforge 3.1.8 or newer). AI agents can set up and manage the Bricksforge add-on for Bricks. They turn Bricksforge tools and custom elements on or off (Pro Forms, Popups, Maintenance Mode, Mega Menu, and more), and build Pro Forms through the Bricks page tools, with the field, choice, multi-step, condition, and layout details handled for them. They create and manage Bricksforge popups (opened on page load, click, or scroll, with a Bricks template as the content), and manage the Email Designer templates that restyle WordPress and WooCommerce emails: which emails each template replaces, its subject, whether it is active, and its theme. A companion skill teaches the form recipe and the Bricksforge specifics, and points agents to a live browser workspace for the visual parts (email layout, animations).
- Fix: Responsive style overrides (tablet and phone) that AI agents set on Divi 5 modules now take effect on the page. When an agent provides a breakpoint override, it is stored in the nested shape Divi 5 reads, whether the agent writes it as a nested object or as a single dotted path, so mobile and tablet spacing, sizing, and typography land as intended. This applies when editing a module, adding a module, and setting a page's content, and the agent is told the native nested shape so its next write matches what the builder stores.
- Minor fixes
v1.6.1
- New: Dynamic Shortcodes specialization (requires Dynamic Shortcodes 1.9.0 or newer). AI agents can build and troubleshoot Dynamic Shortcodes on your site: they can validate and compose shortcode strings, evaluate them against the live site to preview the real value, discover the fields available for each type, and create, edit, list, and delete reusable Power Shortcodes. A companion skill set teaches the syntax with real examples and shows how to place a Dynamic Shortcode inside each supported page builder (Elementor, Bricks, Breakdance, Oxygen, WPBakery, and the block and classic editors).
- New: AI agents can add interactions (motion) to Divi 5 modules. A trigger on a module (a click, hover, scroll, page load, mouse move, entering the viewport, form submit, or a responsive breakpoint change) runs an effect on it: toggle its visibility, scroll to it, or mirror the mouse for a parallax feel. Agents discover the available triggers and effects and set them per module, and the module stays editable in the Divi builder.
- Tweak: Divi 5 pages that AI agents build and style stay editable in the Divi builder. Agents style through Divi's native module settings, global presets, colors, and variables in a clear order, so a page opens and edits normally in Divi rather than relying on custom CSS. When an agent writes page content, the page stays marked as a Divi builder page, so its layout is preserved the first time it is opened for editing.
- Tweak: When an AI agent edits an Elementor page, only that page's compiled CSS is refreshed. Other pages keep their cached styles and any open editor canvas stays intact, and the site skips a full site-wide CSS recompile on every edit.
- Tweak: AI agents building pages with GenerateBlocks now confirm the finished page renders with its styles before treating the work as done, since GenerateBlocks generates the page CSS from the blocks.
- Fix: Elementor v4 Global Classes that AI agents create or edit now show their base styles as explicitly defined on the desktop class controls in the editor, the same way classes made by hand do. Agents write the base style variant with the "desktop" breakpoint the Elementor editor expects, so the values read as set on the class and stay easy to maintain in the Elementor UI.
- Fix: Breakdance color variables, global classes, and global settings that AI agents create or edit are now saved in Breakdance's native format, so they load correctly in the builder and stay editable in Breakdance's own design-system UI. Tokens saved by an earlier version are still read correctly and rewritten cleanly on the next change.
- Minor fixes
v1.6.0
- New: Novamira Visual support for Elementor and Bricks. Novamira Visual is the new live browser workspace in the free Novamira plugin where you watch your AI agent work on your site in real time. Inside it, AI agents can now build and edit Elementor and Bricks pages right in the open editor, so you watch the work happen. This is an early, experimental integration, separate from the standard Elementor and Bricks specializations, so the output is different. For development and staging sites. We would love your feedback in the community group: https://www.facebook.com/groups/novamira
- Minor fixes
v1.5.0
- New: Contact Form 7 specialization (requires Contact Form 7 5.8+). AI agents can list, read, create, edit, duplicate, and delete contact forms, and have a built-in reference of the Contact Form 7 form-tag syntax so they author fields correctly. Submitted entries are not included, because Contact Form 7 does not store them.
- New: WPForms specialization (Lite and Pro, requires WPForms 1.8+). AI agents can find forms, create and edit forms and their fields, and manage notifications and confirmations. With WPForms Pro they can also read and manage form entries.
- New: Gravity Forms specialization (requires Gravity Forms 2.7+). AI agents can find forms, create and edit forms and their fields, manage notifications and confirmations, and read and manage entries.
- New: Fluent Forms specialization (free and Pro, requires Fluent Forms 6.0+). AI agents can create and edit forms and their fields, manage form settings, notifications, and confirmations, and read submissions. With Fluent Forms Pro they can also work with payment transactions, subscriptions, draft submissions, and quiz reports.
- New: Formidable Forms specialization (free and Pro, requires Formidable Forms 6.0+). AI agents can create and edit forms, fields, and entries, manage notifications and form actions, and work with form styles. With Formidable Pro they can also read application data and Stripe payment information.
- New: Ninja Forms specialization (requires Ninja Forms 3.13+). AI agents can find, create, edit, duplicate, and delete forms, manage their fields and notifications, and read and delete submissions. Ninja forms can also be migrated to and from the other supported form plugins through the shared form format.
- New: Form migration playbook. A guided, confirmable workflow that helps AI agents move a form's structure from one supported form plugin to another, for example from Contact Form 7 to WPForms, using a shared form format as the common ground. It works across Contact Form 7, WPForms, Gravity Forms, Fluent Forms, Formidable Forms, and Ninja Forms. It covers the form structure only, not submitted entries.
- Fix: Meta Box specialization. Custom taxonomies created or edited by an AI agent are now attached to the post types it specifies, so they appear on the post edit screen and can be queried on the front end. The abilities store and read the post-type link the same way Meta Box's own registrar does, and reading a taxonomy back reflects its real attachment.
- Fix: Meta Box specialization. AI agents can now create, edit, and delete Meta Box relationships that connect your content, and the relationships are saved and stay editable in Meta Box, just like ones set up by hand. This applies when the Meta Box relationships builder is available.
- Tweak: Etch specialization. AI agents can now put hover and focus effects, responsive (mobile) styles, and rules for nested elements into an element's own class styles in Etch, so the whole design stays editable in Etch instead of in a separate global stylesheet. Agents can also create many class styles in one go, which makes styling a full page practical.
- Minor fixes
v1.4.1
- Tweak: Elementor pages and templates edited by AI agents now show their changes on the front end even with Elementor Pro's element cache enabled. When reading a page or template the agent can see whether a live element cache is in effect and when it expires, and it can clear the rendered-element cache for one or more documents, including nested templates (which cache independently), so a content or dynamic-data edit takes effect on the next view.
- Tweak: Bricks global variables created by AI agents now stay individually selectable in the Bricks editor. Agents create and edit them, along with the color palette, classes, and theme styles, through Bricks' own design-system tools, which give each entry a unique internal id, so selecting a variable in the editor affects only that variable.
- Tweak: Etch pages built by AI agents now keep their class-based styling editable in Etch. When an agent puts a class on an element that has a matching per-class style record, the abilities connect the record to the element, so the styling shows on the front end and stays editable in Etch's style editor.
- Fix: The two Bricks tools an AI agent reads first when building a page, the setup check and the theme-styles list, now declare a parameter in their input schema, so the agent can always call them.
- Fix: Bricks layout elements (section, container, block, div) built by AI agents are now stored the same way as the ones created in the Bricks builder, so Bricks and its builder add-ons handle them the same way. The page renders exactly as before.
- Fix: Code Snippets specialization. When an AI agent edits an active PHP snippet whose new code fails Code Snippets' on-save validation, the result now flags the snippet as deactivated and includes the validation error, so the agent sees why it went inactive and can fix the code or re-enable it.
- Minor fixes
v1.4.0
- New: Beaver Builder specialization (requires Beaver Builder 2.9+). AI agents can build and edit Beaver Builder pages end to end: the row, column, and module tree with native module settings and styling, query loops through the native Posts modules, and Beaver Themer theme layouts and dynamic data. They can also manage the site's Global Colors and global typography, and save and reuse templates, rows, and modules.
- New: JetEngine specialization. AI agents can now create, list, edit, and delete JetEngine custom post types, registered through JetEngine, so a type shows up under JetEngine → Post Types and behaves as a normal WordPress post type, letting an agent scaffold a content type and then fill it with posts (requires JetEngine 3.8.6.2+).
- Tweak: Etch pages built by AI agents now keep their styling editable inside Etch. Agents can create, edit, and delete the per-class CSS records that Etch surfaces in its style editor (the ones shown when you select a class on an element), so the section, component, button, and text styling lives on the element's own class records, editable in Etch's style editor (requires Etch 1.4.19 or newer).
- Tweak: AI agents can now use Divi 5's design system and advanced building features. They can create and reuse global module presets (and set per-module-type defaults), manage the brand color palette and reusable design variables (tokens for spacing, sizes, and more), set the site's global fonts, show or hide modules with display conditions, build Theme Builder templates (custom headers, footers, and body/archive/404 layouts) and control where they apply, and save sections, rows, modules, or whole pages to the Divi Library to reuse across pages, including live-linked Global items that update everywhere when edited. They can also set each module's advanced options (CSS ID and class, link, column gutter, text-shadow), and have clearer guidance for building query loops. Brand colors and tokens bind to modules through CSS variables, so changing one restyles every element that uses it.
- Fix: Disconnecting one item from another in a JetEngine relation via an AI agent now removes the link reliably.
- Fix: Bricks pages built by AI agents can now reliably show JetEngine values on native Bricks elements. JetEngine's dynamic tags appear when the agent lists Bricks' dynamic data, and the agent is pointed to the tag that renders correctly (applies when both Bricks and JetEngine are active).
- Fix: Etch pages edited by AI agents now keep an element's class (and any other HTML attributes the agent did not resend) when the agent changes just one attribute, so class-based styling keeps applying. Untouched attributes are preserved.
- Fix: Divi 5 rows with several columns built by AI agents now display their columns side by side. Laying out a row with multiple columns (a feature grid, stat counters, pricing tiers) produces an even multi-column layout automatically, and adding or removing a column rebalances it; deliberately uneven column widths are honored when set explicitly.
- Minor fixes
v1.3.1
- New: SeoPress and SeoPress Pro specialization (requires SeoPress 8.0+; redirects and structured-data schema require SeoPress Pro). AI agents can read and set the SEO of any page, post, category, or tag (the SEO title, meta description, canonical, and search-results visibility), and read your site-wide SEO settings. On SeoPress Pro they can also manage redirects and per-post structured-data schema.
- Tweak: Etch custom fields filled in by AI agents now show on the page immediately. Agents can set the per-post values of Etch's native custom fields, not just create the field definitions, so a value appears right away instead of only after the post is opened and saved in the Etch editor (requires Etch 1.5.0 or newer; older Etch is unaffected).
- Tweak: Etch custom fields created by AI agents can now use the date, time, and select (dropdown) types, in addition to text, textarea, number, and boolean (the three new types require Etch 1.5.0 or newer; on older Etch only the original four are offered, so nothing breaks).
- Tweak: Mosaic pages built by AI agents now stay inside the theme's design system, reusing utility classes and color and font variables instead of hardcoding colors and fonts as one-off custom CSS, and the agent can check its own work and correct anything that drifted outside the design system before finishing.
- Fix: Mosaic pages edited by AI agents now keep an element's existing styling when the agent updates just one part of it. A partial edit used to overwrite the whole element, wiping the classes, colors, fonts, and other settings the agent did not resend, and the same could reset a theme's global settings such as its font and spacing. Untouched settings are now preserved.
- Fix: Divi 5 pages built by AI agents now open in the Divi builder without being wiped. The agent marks the page as builder-built, so the first time it is opened Divi no longer runs its classic-content conversion, which used to replace the layout with an empty placeholder and set the original content aside.
- Fix: Divi 5 modules now display the dynamic content (such as the post title) that AI agents bind to a structured field, like a Blurb's title, instead of coming out blank, because the value is now placed in the field's text where Divi reads it.
- Fix: Elementor v4 global classes created by AI agents now show up styled in the editor itself, not only on the live page. They were written for the front end only, so opening the page in the Elementor editor could load slowly and unstyled with raw class ids showing; the classes are now mirrored into the editor's own context the way the Elementor editor does.
- Fix: Elementor v4 pages no longer fail to save when AI agents set an HTML anchor (CSS ID) on a section. The value used to be stored in a shape the editor rejected on Publish ("_cssid: invalid_value"), so the whole page could not be saved at all, even for unrelated edits; it is now stored as the plain string Elementor expects, and the same setting also works when an agent builds the layout in one pass.
- Fix: Elementor Global Color and Global Typography presets deleted by AI agents are now actually removed. The action used to report success while the entry stayed in the site's Elementor Kit and kept appearing, because the saved list was merged rather than replaced; deletions now persist.
- Minor fixes
v1.3.0
- New: Yoast SEO and Yoast SEO Premium specialization (requires Yoast SEO 21.0+; redirects require Yoast SEO Premium). AI agents can read and set the SEO of any page, post, category, or tag: the SEO title, meta description, focus keyphrase, canonical, social sharing preview, and whether it appears in search results, with the indexing choice always applied the right way so a page is never accidentally hidden from or forced into search results. They can also read your site-wide SEO settings, and on Premium create, edit, and remove redirects, including regex patterns.
- New: Rank Math SEO specialization (requires Rank Math 1.0.200+). AI agents can read and set the SEO of any page, post, category, or tag: the SEO title, meta description, focus keywords, canonical, cornerstone, social sharing preview, the schema type, and whether it appears in search results, with the indexing choice always applied the right way so a page is never accidentally hidden from or forced into search results. They can also read your site-wide SEO settings.
- New: All in One SEO specialization (requires All in One SEO 4.0+; term SEO and redirects require All in One SEO Pro). AI agents can read and set the SEO of any page, post, category, or tag: the SEO title, meta description, focus keyphrase, canonical, social sharing preview, cornerstone content, the schema type, and whether it appears in search results, with the indexing choice always applied the right way so a page is never accidentally hidden from or forced into search results. They can also read your site-wide SEO settings, and on Pro create, edit, and remove redirects, including regex patterns.
- Tweak: Custom instructions are now provided by the base Novamira plugin, with a Pro fallback only for sites that have not updated Novamira yet.
- Tweak: Bricks pages built by AI agents now stick to native Bricks elements and reusable global classes instead of reaching for raw Code elements or scattered, hard-to-edit custom CSS, and a raw code/HTML element is no longer added on its own during a build — using one now takes a deliberate, explicit opt-in.
- Minor fixes
v1.2.1
- Tweak: Breakdance pages built by AI agents now come out properly styled, because the agent can discover the available elements and their design controls instead of leaving them unstyled.
- Tweak: Breakdance pages can now be built or fully replaced by AI agents in a single pass, with element names validated and auto-corrected as the page is written, so a page comes out complete and editable instead of as a blank canvas or with "Missing Element" placeholders.
- Fix: Breakdance pages built by AI agents now place the correct elements (sections, columns, headings, the modern Image, query loops) instead of failing with "This element is missing" on the canvas, and no longer fall back to the deprecated Image V1. A mistyped or wrong-cased element name is auto-corrected, or rejected with a suggestion, so a page no longer ships broken.
- Fix: Breakdance template visibility conditions set by AI agents no longer corrupt the Breakdance Templates screen, and conditions configured in the Breakdance editor are now read back correctly instead of appearing empty.
- Fix: Breakdance templates built by AI agents can now be scoped to a custom post type, not just the built-in ones, because the right template type for each post type is now discoverable.
- Fix: Bricks pages built by AI agents now render Media Library SVGs and inline-code elements that previously saved but came out blank (inline code still requires Bricks code execution to be enabled, and the agent is now told clearly when it is off), and query loops on layout containers (block, div, section, container) no longer raise a spurious validation warning.
- Fix: Bricks theme styles built by AI agents now flag a setting placed outside its group, which previously saved but produced no styling, so the mistake is caught instead of silently doing nothing.
- Fix: Bricks pages edited by AI agents now keep every section's existing layout order. A change to one section no longer silently reorders the contents of other, untouched sections.
- Fix: Elementor pages built by AI agents in the new v4 editor now correctly attach Global Classes to an element, instead of producing a state the editor rejected with "classes: invalid value" when you went to save the page.
- Fix: ASE (Admin and Site Enhancements) Pro specialization. Custom field groups created by AI agents now register correctly with ASE, so their fields read and write values immediately, instead of the group saving but every field coming back empty.
- Minor fixes
v1.2.0
- Important: requires Novamira 1.6.0 or newer.
- New: Etch specialization (requires Etch 1.4.19+). AI agents can build and edit Etch pages end to end: element tree, reusable components, templates, loops, conditional visibility, dynamic data, and global styles, plus Etch registered post types, taxonomies, and custom fields.
- New: Divi 5 specialization (requires Divi 5.0+). AI agents can build and edit pages on Divi's new block based engine: module tree, sections and modules, design options, and loops over CMS content.
- New: Breakdance specialization (requires Breakdance 2.7+). AI agents can build and edit Breakdance pages: element tree, element and page settings, query loops, templates, and global blocks.
- New: Mosaic specialization (requires Mosaic 1.0.3+). AI agents can build and edit Mosaic pages end to end: element tree, loops, and the builder's design system.
- New: WPBakery Page Builder specialization (requires WPBakery Page Builder 6.5+). AI agents can build and edit pages end to end: element tree (including grid items), custom CSS, page settings, and templates with append, prepend, and replace modes; they can also register custom WPBakery elements.
- New: GeneratePress specialization (requires GeneratePress 3.0+; some abilities also need GenerateBlocks or GP Premium 2.0+). AI agents can build pages with GenerateBlocks and manage GeneratePress global styles and design tokens, with query loops for CMS content.
- New: Kadence specialization (requires the Kadence theme 1.2.0+). AI agents can build pages with Kadence Blocks and manage Kadence theme design settings.
- New: WooCommerce specialization (requires WooCommerce 9.0+). AI agents can discover and manage your catalog end to end: list and read products with rich filters, create and edit simple and variable products and their variations (pricing, stock, SKU, dimensions, images), organize categories, tags, global attributes, and shipping classes, and read store settings. Force deletes cascade safely to variations and attribute references.
- New: Code Snippets and Code Snippets Pro specializations (requires Code Snippets 3.6+). AI agents can list, read, create, edit, activate, deactivate, and delete PHP, JavaScript, CSS, and HTML snippets.
- Minor fixes
v1.1.2
- Fix: Meta Box specialization. Field groups created or edited by AI agents now open correctly in the MB Builder admin editor, with all choices on select / radio / checkbox-list / advanced-select / autocomplete fields preserved regardless of whether the agent supplies them as a `{value: label}` map or as a list of `{value, label}` objects. The list form used to collapse to a single empty-keyed entry in storage, hiding every choice except the last one.
- Tweak: Meta Box specialization. AI agents now detect which Meta Box extensions are installed (term meta, comment meta, user meta, group field, custom table) and refuse operations that would silently no-op without the right extension, naming which one is missing. When custom-table storage is in use, the agent is told to warn you that reads and writes through this integration do not address the custom table.
- Minor fixes
v1.1.1
- Fix: Elementor's Site Settings typography set by AI agents now scales smoothly with the screen size. Responsive sizes like `clamp()` used to be flattened to a single fixed value.
- Fix: Elementor v4 Global Variables of type "size" now accept fluid CSS expressions (`clamp()`, `calc()`, `min()`, `max()`, `var()`) when AI agents create or edit them, so fluid design tokens can live in one place instead of being inlined into every style that uses them.
- Fix: Bricks global classes set by AI agents now support the `%root%` placeholder in custom CSS, matching the Bricks editor convention. Custom CSS rules that used to be silently dropped now render correctly.
- Tweak: Bricks pages, theme styles, and global classes built by AI agents now follow the conventions a human would use in the editor: typed controls instead of opaque CSS, the conventional section > container > block-level nesting on content sections, and the semantic `p` tag for body text. Theme styles and classes built this way stay editable from the Bricks UI.
- Tweak: Bricks pages built by AI agents now use a Query Loop for sections that show repeated CMS content (blog grids, portfolio listings, services, team members, rentals, anything you manage from the WordPress admin), so the section updates as you add or edit entries. Static cards are still used for fixed UI sections like pricing tiers, feature pillars, and hero blocks.
- Tweak: Elementor pages built by AI agents now use a query widget for sections of repeated CMS content (blog grids, portfolio lists, services, team members, rentals, anything you manage from the WordPress admin), so the section updates as you add or edit entries. Works with Elementor Pro's Loop Grid or Posts widget, or third-party query widgets. Static widgets stay for fixed UI sections like pricing tiers, feature pillars, and hero blocks.
- Minor fixes
v1.1.0
- New: ACF specialization. AI agents can manage field groups and read and write field values on any post, user, or term (requires ACF 6.5+). With ACF Pro, also post types, taxonomies, and options pages registered through ACF.
- New: JetEngine specialization. AI agents can manage JetEngine meta boxes, options pages, and Custom Content Types (both the type definitions and the records inside them), with a dedicated workflow skill that activates when agents work on JetEngine (requires JetEngine 3.8.6.2+).
- New: Meta Box specialization. AI agents can manage field groups, custom post types and taxonomies, settings pages, and relationships, and read and write field values on any post, user, term, comment, or settings target. Includes a dedicated workflow skill (requires Meta Box 5.11.2+).
- New: Pods specialization. AI agents can model and populate Pods-defined Custom Post Types, Taxonomies, Advanced Content Types, Settings Pages, fields, groups, and items (requires Pods 3.2.1.1+).
- New: ACPT (Advanced Custom Post Types) specialization. AI agents can manage ACPT custom post types, taxonomies, meta groups, and option pages, and read and write field values on posts, terms, users, and option pages. Includes a dedicated workflow skill (requires ACPT 2.0.52+).
- New: ASE (Admin and Site Enhancements) Pro specialization. AI agents can manage custom field groups, custom post types, and custom taxonomies, and read and write field values on posts, terms, and options pages. Includes a dedicated workflow skill (requires ASE Pro 8.7+).
- New: AI agents now reason about post types, fields, taxonomies, options pages, and relationships using a shared vocabulary, so the way they talk and work stays consistent no matter which field plugin is in use.
- New: AI agents now have a guided workflow to follow when asked to move content from one field plugin to another.
- New: AI agents are now reliable at filling in Bricks dynamic data and Elementor dynamic tags from your field plugins, so widgets show the actual field value instead of literal text or an empty result.
- Minor fixes
v1.0.0
- New: "Novamira feedback" skill. When you ask the agent to share feedback on a Novamira tool (something that didn't behave as expected, an unclear result, a friction point), it composes a sanitized English report with no personal data, content, keys, or URLs, that you can review and send to Novamira support.
- Tweak: Bricks pages built by AI agents now reuse your site's existing styles instead of typing colors, sizes, and spacing into every element. Before adding anything the agent checks what's already there (Bricks variables, global classes, palette colors, theme styles), sets up only what's missing once, and uses those by name in the page. Change a color or a spacing value later and every page that uses it updates automatically.
- Tweak: AI agents now produce cleaner widget content in Elementor. Headings, buttons, and other text widgets get plain text instead of accidentally embedded HTML; rich-text widgets get only inline formatting (bold, italic, links); layout (alignment, width, typography, spacing) flows through each widget's own controls. The HTML widget remains the place for free-form HTML.
- Fix: Bricks header/footer templates built through Novamira Pro abilities now save their elements in the right area, so the Bricks editor shows them instead of opening empty.
- Fix: Building responsive Elementor pages through AI agents now works end-to-end. Asking the agent for tablet or mobile font sizes, padding, alignment, etc. used to silently produce only the desktop value, because the per-breakpoint values were rejected before reaching Elementor. They now persist and render in the right media queries.
- Fix: Elementor pages built by AI agents now produce readable class names on sections that have a natural name (hero, footer, pricing card), so the rendered HTML and CSS are inspectable in DevTools and stylable from custom CSS.
- Fix: The local-style chip in the Elementor editor for elements built by AI agents now shows "local" (matching Elementor's native convention), instead of a cryptic auto-generated id.
- Fix: When Elementor's Atomic Widgets experiment is turned off, the setup check now reflects that correctly and the agent falls back to the legacy widgets, instead of being told the atomic path is available and failing halfway through.
- Minor fixes
v1.0.0-rc1
- Fix: WordPress plugins page showing an update even if no update was present
- Fix: Elementor content reads now count all elements in the page tree, including children nested inside containers.
- Tweak: Clarify Elementor schema guidance to avoid broad style control dumps when narrower reads are enough.
- Minor fixes
v1.0.0-beta1
- 🎉 First release!
1.0.0-beta10
LatestFixed
- Novamira setup works on Kinsta. It used to stop every time with "Failed to determine the PHP version before plugin install.", because Kinsta reports whether a WP-CLI command succeeded but never what it printed. Setup now checks for an existing plugin and its activation from command results alone, takes the site URL from the environment's primary domain, and leaves the PHP check to WordPress, which refuses to install Novamira on PHP older than 8.0. For the same reason,
--ignore-requirementsis not accepted for Kinsta setup.
1.0.0-beta9
Tweak
- Hostinger Agency hosting websites now appear in Sites next to regular Hostinger hosting, detected automatically with the same API token. Hostinger does not let HQ install plugins on Agency sites, so install and activate Novamira in WordPress, turn on AI Abilities, then use Connect. Accounts without Agency hosting keep listing their sites as before. Thanks to AGENTUR.STUDIO for contributing the tweak.
Fixed
- A site can be added manually by typing just its domain, such as example.com. HQ connects over https://, where the form previously refused the address with "Please enter a URL" until a scheme was typed.
- One-click setup of Claude Code and Codex works again when the
novamira-hqterminal command is not enabled, as on a fresh Windows install. Before, they were registered with--v8-flags=--mcpinstead of--mcpand could not connect to HQ. Setting the client up again from HQ now replaces such a broken entry instead of reporting that one already exists.
1.0.0-beta8
Added
- SandyWP can now be connected with an API key. HQ lists your sandboxes with their status and expiry, can create new ones from the command line, and can set up Novamira on a ready sandbox by uploading and activating the official plugin, never overwriting a Novamira folder that is already there. HQ cannot turn on AI Abilities on SandyWP, so enable them manually in the Novamira settings in WordPress before connecting.
Tweak
- Sites running Novamira 1.12.10 and newer, which name the full-access OAuth scope
full_accessinstead ofmcp, can be set up and connected again. Novamira setup accepts them, and the bundled Novamira CLI is updated to 1.3.6 so login and existing connections keep working.
Fixed
- Rocket.net sites that have a staging site now show both in Sites: the production site is listed as live and its staging site appears beside it. Before, HQ listed a production site as staging and left its real staging site out.
1.0.0-beta7
Added
- Read Mode can now be turned on for a connected site from its menu in Sites, and from the Novamira Pro page after installing Pro. HQ first checks the site, then turns Read Mode on through Novamira Pro. It needs an up-to-date Novamira Pro with an active license. HQ does not turn Read Mode off: a WordPress administrator does that on the Read Mode page in the Novamira menu or with
wp novamira read-mode disable.
Changed
- The Windows installer and Novamira HQ for Windows are now signed by our company, Ovation S.r.l., so Windows and antivirus software can verify where they come from.
1.0.0-beta6
Added
- WHM servers can now be connected with a reseller's API token as well as root's: enter the reseller's user name as the WHM user. HQ then lists WordPress, creates and lists backups only for the accounts that reseller owns, and sets up Novamira with the temporary installer after your approval, since WHM's WP Toolkit does not accept reseller tokens. The reseller needs the list-accts privilege, and create-user-session for the installer; when one is missing, HQ names it.
Changed
- Windows releases now ship only the installer,
novamira-hq-setup-windows-x86_64.exe. The portablenovamira-hq-desktop-windows-x86_64.exeis no longer published; download the installer from https://novamira.ai/hq if your version does not offer the update.
1.0.0-beta5
Changed
- The bundled Novamira CLI is updated to 1.3.4. On Windows, a site profile that stores its credentials in a file can log in again after its stored credential is removed, including after a failed token refresh, instead of stopping with an internal error.
Added
- Configure your AI now includes Antigravity. Antigravity cannot add a local server by itself, so HQ gives you the configuration to paste into
~/.gemini/config/mcp_config.json. Antigravity, the Antigravity IDE and the agy CLI all read that file. - When Novamira HQ runs from a different place than before (moved, reinstalled, or installed after using the portable Windows app), Configure your AI lists the AI clients that still start the old location and offers the fix for each one. On macOS it also warns when Novamira HQ runs outside Applications.
- Windows now has an installer. It installs Novamira HQ for your user account in a fixed folder, adds it to the Start menu and to Installed apps, and updates replace the app in the same place, so AI clients you configured keep working. Uninstalling keeps your settings and credentials.
- cPanel hosting accounts can now be connected with the HTTPS cPanel address (panel URL), the cPanel username and an API token. HQ lists WordPress at the root of each domain, creates and lists whole-account backups (they count against the account's disk quota), and sets up Novamira: through WP Toolkit when the account has it, otherwise, after your approval, through a temporary installer that removes itself after one run; when Novamira is already installed, HQ uploads only that installer, no ZIP. Restoring backups, clearing caches and changing PHP are not available through cPanel's user API.
- WHM servers can now be connected with the HTTPS WHM address and a root API token. HQ lists WordPress at the root of every cPanel account's domains, creates and lists account backups, and installs Novamira through WHM's WP Toolkit or, with your approval, a temporary installer.
Fixed
- On Windows, Novamira HQ no longer stops at startup with "The application acknowledgement record is unreadable or unsafe" when the Windows user name (or the folder that holds HQ's data) contains letters outside ASCII, such as Ö, Ş or é. HQ passed those paths to its permission check in a form Windows PowerShell misread.
- On Windows, opening Novamira HQ from the Start menu no longer leaves a console or Windows Terminal window open beside the app.
- On macOS, Claude Code started from a terminal no longer stops with "suspended (tty input)" when it starts HQ's connector, and moving the mouse no longer prints stray characters at the prompt. HQ's lookup of the programs installed on the Mac took over the terminal and did not give it back.
1.0.0-beta4
Changed
- The bundled Novamira CLI is updated to 1.3.3. When
site-cli auth loginopens the browser it now also prints the authorization URL, so it can be opened in the browser where you are signed in to WordPress, and a login that times out explains how to retry.
Fixed
- In Sites, each hosting environment now shows as connected only when its own address has a WordPress connection. Before, a Plesk subdomain could borrow its parent domain's connection, and a Kinsta or WP Engine environment could borrow another environment's, so Install Novamira Pro and Disconnect acted on the wrong site. An environment connected under an address other than its own now shows as not connected until it is connected with its own address.
- On Linux, HQ now detects an installed
secret-tool, so hosting credentials and the Pro licence key save to the Secret Service instead of HQ reporting that the OS credential service is unavailable. - Cloudways accounts can now be connected. HQ sent the Access Token in a header Cloudways no longer accepts, so every attempt failed with HTTP 400 "Check the access token parameter" and the token never showed as used.
- Backup lists in Hosting tools and the restore backup menu now show when each backup was created as a readable date in your computer's time zone, with the zone named next to it, instead of a raw provider timestamp. If the time zone cannot be determined, dates are shown in UTC.
- Hosting tools reports now show file sizes in readable units, such as 683 KB, instead of raw byte counts, and long values such as backup file names wrap inside their column instead of overlapping the next one.
1.0.0-beta3
Added
- xCloud hosting accounts can now be connected with an API token. HQ lists WordPress sites and their staging sites, creates backups, purges the page cache, updates plugins and themes, and shows access logs and site events. Without a team, HQ uses the first team the token can access. The xCloud API cannot install plugins, create or push staging sites, or restore backups, so those actions stay unavailable for xCloud.
Fixed
- Connecting a site that is already connected, with or without a different name, now reuses the existing connection instead of adding the site twice.
- Local development sites on
*.localhostdomains can now be connected over HTTP, matching the bundled Novamira CLI. Sites on.localdomains connect over HTTPS, and HQ now explains how to enable it when plain HTTP is entered. - In the desktop app, site connections now trust certificates in the system trust store, such as the one Local installs for HTTPS
.localsites. - When a site cannot be reached or is not ready during connection, HQ now asks whether Novamira is installed and active. The message points to Setup Novamira only where the dashboard offers it for that site.
- File uploads through the HQ MCP connector now receive the temporary upload token needed to transfer the file, where it was previously hidden.
1.0.0-beta2
Added
- Plesk hosting accounts now list domains even without WP Toolkit. With WP Toolkit active, HQ can discover WordPress installations, set up Novamira Free, create and restore backups, and copy files or databases between selected installations, including across domains.
Tweak
- Connecting a site that is already ready for Novamira now opens authorization sooner.
Fixed
- Hosting account names now accept accented characters, and validation errors let you correct the details and retry.
- Windows desktop startup now works from shortcuts without administrator access or downloading native libraries at launch.
- Windows credential storage and site connection checks now work reliably, including when authorization verification takes longer to complete.
- macOS command registration now uses the signed standalone launcher, including after moving the app.
- Novamira setup now accepts WordPress development builds such as
7.2-alpha-63789when their numeric version meets the required minimum. - After connecting a hosting account, HQ now confirms verified access and links to Sites without showing an actions table that was not verified for that account.
- Windows onboarding can save its acknowledgement without running Novamira HQ as an administrator. Private storage retains the current user's ownership while its access rules are secured; write failures now show a useful message.
1.0.0-beta1
Added
- Initial
@novamira/hqpackage: hosting provisioning CLI and local dashboard. - The
hostingcommand tree and theconfighosting-profile commands: 70 subcommands over eight providers, all rendering the v1 envelope. - Focused contract tests freeze the v1 command surface.
hosting novamira setup: installs and activates the Novamira plugin over provider WP-CLI, enables the twonovamira_ai_abilities_*options, verifies the site against HQ's own copy of the site CLI's v1 compatibility matrix, and prints thenovamira auth login <url>handoff. HQ writes no site credential, stores no site profile, and creates no WordPress user, so the Go program's--username,--app-name,--site-profileand--replace-profileflags and itsrest_url/username/credential/site_profile/config_pathoutput fields are gone permanently.- The compatibility preflight: one public, unauthenticated
GET {siteUrl}/.well-known/oauth-protected-resourceper setup run, with noAuthorizationheader, same-origin manual redirects, a 256 KiB ceiling and a bounded retry band. A failed check fails the invocation and names the check;--no-compat-checkskips it and says so in the output. - The
server_unsupportederror code at exit 4, for a site that cannot run the plugin — its PHP version, its WordPress version, the installed plugin's version, its REST contract, its feature flags, or its published compatibility document. NOVAMIRA_HQ_ALLOW_INSECURE_HTTP=1accepts a plain-HTTP site URL that is not loopback, and a plain-HTTP loopback package registry; HQ never reads the site CLI'sNOVAMIRA_ALLOW_INSECURE_HTTP.- The local dashboard (
novamira-hq dashboard): loopback-only binding, a per-process mutation token carried in a header and never in a URL, a DNS-rebinding guard, and seven pages driven by Datastar over SSE. novamira-hq skills list | get [name] | path [name], over the two packaged bundlescoreandhosting. No HQ command writes a skill to disk: the Go program'sskills installandsetup, which hand-wrote an agent stub and symlinked~/.claude/skills/novamiraat it, are deleted rather than ported.novamira-hq doctor [--offline] [--fix]: nine ordered checks with apass/warn/failseverity and output-safe evidence. A produced report is a successful invocation whatever its status,--offlineperforms no network operation of any kind, and--fixmay only repair private-path permissions and create the state directory.novamira-hq update [--check]: npm-only self-update. It reads thelatestdist-tag of@novamira/hqover HTTPS — anonymously, carrying no cookie, token, profile, credential, provider or telemetry data — and installs withnpm install --global --ignore-scriptsor the Bun global equivalent. The Go program's GitHub release download,checksums.txtverification, archive extraction and in-place executable replacement are deleted, not ported, along with theupgradealias.- A background release notice, at most one registry request per 24 hours, cached in
state/update-check.jsonunder HQ's own namespace. It is suppressed — request and state write included — by--quiet,--json,NOVAMIRA_HQ_UPDATE_CHECK=0,dashboard,doctor --offline, and any invocation whose stderr is not a terminal. install.shandinstall.ps1, published as GitHub release assets. They install the package with--ignore-scripts, smoke-test it withnovamira-hq doctor --offline, and register the bundled agent skill through an exactly pinnedskills@1.5.18. They then install@novamira/cliglobally as a last step, so connected-state detection and the dashboard's Connect action work on a fresh machine. It is a separate global package and never a dependency of@novamira/hq:NOVAMIRA_HQ_SKIP_SITE_CLIskips the step, a failure is reported without failing the install, and neither script ever runs thenovamiraexecutable.- The installers add
/Applications/Novamira HQ.appon macOS when that folder is writable, otherwise falling back to~/Applications; a freedesktop menu entry under${XDG_DATA_HOME:-~/.local/share}/applicationson Linux; and a **Novamira HQ** shortcut in the current user's Start Menu on Windows. Opening one runsnovamira-hq dashboard --openusing the exact HQ entry point and Node.js executable resolved at install time. bun run package:acceptance: packs the tarball, installs it into a throwaway prefix and exercises the installed executable offline. It runs on Linux, macOS and Windows in CI, and again in the release job against the published version.
1.3.6
LatestTweak
auth loginsupports Novamira 1.12.10 and newer, which name the full-access OAuth scopefull_accessinstead ofmcp. Existing logins keep refreshing on those sites, anddoctorno longer reports the scope as unavailable.
1.3.5
Fixed
- Login and site commands now avoid failures caused by WordPress displaying error notices in their responses.
1.3.4
Fixed
- Windows profiles using file-based credentials can now log in again after their stored credential is removed, including after a failed token refresh. Missing credentials no longer cause an internal error.
1.3.3
Changed
- The installers can now set up the Novamira skill for Grok Build, MiniMax Code, Posit Assistant, Kimchi, fx, and Sarvam Code. They now require Node.js 22.20 or newer.
Fixed
auth loginnow prints the authorization URL and a waiting notice even when it opens the browser, so the URL can be opened in the browser where you are signed in to WordPress when the system browser is a different one. A login that times out now explains how to retry.- Bundled agent guidance now tells agents to read login output while it waits and relay the authorization URL, instead of blocking silently.
1.3.2
Fixed
- HTTP connections to local development sites using
*.localhostdomains were incorrectly rejected. - Site profile names now accept accented letters for login, selection, and management.
- Windows:
auth loginnow opens the system browser when started from a bundled desktop app, instead of leaving the authorization waiting without a browser. - Sites running WordPress development builds such as
7.2-alpha-63789can now connect when their numeric version meets the required minimum.
1.3.1
- Add managed command-prefix rendering for bundled core guidance, full references and JSON output. Embedded distributions can use
novamira-hq site-cliwhile preserving site-owned guidance and Ability identifiers. - Replace standalone update guidance with the distributor's update hint in managed mode.
1.3.0
Added
- Public
@novamira/cli/entrycallable entry point with a managed-distribution option that suppresses update checks and delegates updates to the distributor. - Offline compiled Deno acceptance for the entry point and bundled guide data.
- Deno diagnostics report the actual runtime instead of its Node compatibility version.
Fixed
auth loginrecovers a site whose OAuth client registration is gone, which happens when the plugin is reinstalled, the site is restored from a backup, or the registration is old enough to have been pruned. The login now confirms the site still holds the stored client before opening the browser, and registers a new one when it does not, instead of sending the browser to a page that answersUnknown client_id.while the CLI waits out its timeout.- Windows: Credential Manager operations now preserve PowerShell's
if/elseif/elsechain, fixing OAuth login failures after approval and failed credential reads and deletes. Windows CI now exercises a real credential write, read, replacement, and delete round trip.
1.2.0
Added
sites rename <name> <new-name>renames a site profile, moving its stored OAuth credentials with it and invalidating the old profile's cached Ability metadata. It never changes the site URL, origin, or grant, and it does not revoke remote access.- The installers run unattended: set
NOVAMIRA_AGENTto choose the agent that receives the Novamira skill, orNOVAMIRA_SKIP_SKILL=1to install only the CLI.
Fixed
- Linux: Secret Service credential storage is now detected when the installed
secret-tooldoes not support the non-portable--versionoption. - Windows: OAuth credentials with realistic access and refresh token lengths now fit within Credential Manager's credential-blob limit.
1.1.0
Added
auth login --deviceauthorizes with a device code instead of a local browser, for SSH sessions, containers, and any host whose browser cannot reach a loopback listener on the CLI. The CLI prints a verification URL on the site and a short user code, then polls until the code is approved; it opens no port and launches no browser. Sites that do not advertise the grant reportserver_unsupported, and the browser flow still works there.
1.0.3
Changed
- The core guide now keeps agents proactive: setup, discovery, and description run without narration, and the user is involved only for mutation approval, browser sign-in, a genuine ambiguity, or a failure they must act on.
Fixed
- Ability failures now show the actionable error message returned by WordPress instead of replacing it with a generic REST or schema-validation message.
- File-editing refusals such as identical strings, missing matches, and multiple matches now report a non-retryable validation error instead of an internal error.
discoverno longer stalls on sites with many Abilities; the whole discovery is cached in one batch.- Windows:
doctorinspects and repairs permissions in one helper process instead of one per target. - Windows: hardening no longer fails when
Set-Aclreports a missingSeSecurityPrivilegebut the permissions are already correct. - Windows: interrupted commands no longer leave
powershell.exerunning. - Windows: paths that are not plain ASCII, such as
C:\Users\José, are hardened and verified correctly. - The Ability cache stays within its size budget during a large discovery and reclaims abandoned temporary files.
doctorno longer fails when anothernovamiraprocess removes a lock file mid-check.- A discovery that fails part way keeps the records it already refreshed.
1.0.2
Changed
- Login now always grants full access, without access modes.
- The minimum compatible Novamira server version is now 1.11.1.
1.0.1
Fixed
- Windows:
auth loginfailed with an internal error after a successful browser sign-in and stored no profile. ([#1]) - Windows:
doctoralways reportedstorage.permissionsas failing, anddoctor --fixcould not repair it. - Windows: credential storage and browser launch failed when the CLI was run from a PowerShell 7 session.
NOVAMIRA_ALLOW_INSECURE_HTTPis now honored on every request path.- Reentrant profile locks fail immediately instead of stalling for the ten-second lock timeout.