Changelog

What's new in Novamira.

Release notes for Novamira and Novamira Pro.

v1.2.0

Latest
  • New: AI agents can now upload plugin, theme, media, and other large files more easily.
  • New: A "paste to your AI agent" block on the Configuration page lets you copy a short description and have your AI client set up the MCP server connection for you, instead of editing JSON config files by hand.
  • New: The Configuration page warns when AI Abilities are turned on against what looks like a production site, with a reminder to keep them on staging or development copies only.
  • New: If you already have a saved application password (for example from a password manager), a new field on the Configuration page lets you paste it directly and skip generating a new one.
  • New: Local HTTPS development sites with self-signed certificates are detected automatically, and the generated client configs include the small flag Node.js needs to accept the certificate.
  • New: When the site is on a local hostname over HTTP, the Application Passwords notice now explains the exact line to add to wp-config.php to enable them.
  • Tweak: Redesigned the Configuration page into three numbered cards (Enable AI Abilities, Application Password, Connect Your AI Client) so the setup reads top to bottom.
  • Tweak: The MCP endpoint is now /wp-json/mcp/novamira. The previous /wp-json/mcp/mcp-adapter-default-server keeps working for AI clients that are already connected, no action needed.
  • Tweak: Per-client JSON snippets are collapsed by default behind a "Need the JSON config for a specific client?" link, since most setups now use the paste-to-agent block.
  • Tweak: AI agents working with data-modeling plugins (ACF, JetEngine, Pods, ACPT, Meta Box, Toolset, CPT UI, WooCommerce, etc.) are now told to use the plugin's own UI or API instead of registering post types, taxonomies, or fields directly in PHP, avoiding broken slugs and labels later.
  • Fix: PHP notices about duplicate ability registration on every wp-cron tick no longer appear in the error log.
  • Minor Fixes

v1.1.2

  • New: Configuration instructions for the OpenAI Codex CLI MCP client.
  • Fix: The Novamira ON admin bar indicator now only appears for administrators who can manage Novamira settings.
  • Minor Fixes

v1.1.1

  • Improvement: The Configuration page now detects when Application Passwords have been disabled by a security plugin (e.g. Solid Security, Wordfence) and shows a clear explanation instead of the generic HTTPS/local-environment message.
  • Improvement: Moved the AI Abilities on/off switch to the top of the Configuration page making clear they are needed for the MCP to work.
  • Improvement: When an AI agent sends invalid input, the error message now includes the specific per-property details the agent needs to correct it — so the agent can fix its own mistake in one try instead of guessing or asking the user.
  • Minor Fixes

v1.1.0

  • Fix: Recursive directory listings no longer fail when a folder contains a broken shortcut (symlink) — the listing now skips over it gracefully and includes the rest of the results.
  • Improvement: AI agents now reliably receive site context and usage instructions, even on MCP clients that previously ignored them during connection setup.
  • Improvement: Updated the bundled MCP Adapter library to version 0.5.0.
  • Fix: Ability failures are now surfaced as proper errors instead of being masked by a success response.
  • Minor Fixes

v1.0.3

  • Fix: Sandbox crash detection failed to detect fatal errors thrown indirectly from WordPress core or third-party code called by a sandbox file.

v1.0.2

  • Fix: Sandbox crash detection now uses a shutdown handler instead of a file marker, eliminating false positives from concurrent requests and external code calling exit().
  • Fix: Execute-ability coerced empty parameters (`{}`) to `null`, causing "input is not of type object" validation errors for abilities with all-optional properties.
  • Remove: PHP syntax validation from write-file and edit-file abilities — the sandbox already catches syntax errors at runtime, making pre-write validation redundant.
  • Minor Fixes

v1.0.1

  • New: Configuration instructions for 7 additional MCP clients: Cline, Roo Code, Kilo Code, GitHub Copilot, Amazon Q, Gemini CLI, and Antigravity.
  • New: MCP server name now defaults to the site domain for easier multi-site setups.
  • New: MCP server instructions include site locale and multilingual context.
  • Fix: Admin page header spacing.

v1.0.0

  • 🎉 First stable release.

v1.0.0-rc4

  • New: Domain-locking for AI abilities — the site hostname is stored when abilities are enabled. If the domain changes (e.g. a staging database is restored on a different server), abilities automatically deactivate and an admin notice explains what happened.
  • New: MCP server instructions — AI agents now receive context about the WordPress environment (version, active plugins) during MCP initialization.
  • Minor fixes.

v1.0.0-rc3

  • Fix: Shell quoting in the Claude Code mcp add command — the MCP server URL and other env values were not properly quoted, causing syntax errors when pasting the generated command.

v1.0.0-rc2

  • Minor fixes.

v1.0.0-rc1

  • Release candidate for 1.0.
  • Eight abilities: execute-php, read-file, write-file, edit-file, delete-file, disable-file, enable-file, list-directory.
  • PHP sandbox with crash recovery and safe mode.