=== AHEADARC Agent ===
Tags: ai, mcp, abilities-api, blocks, workflow
Requires at least: 6.9
Requires PHP: 8.1
Stable tag: 1.0.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Agent-native page operations for AHEADARC Theme.

== Features ==

* Machine-readable design contract and theme tokens
* Read-only page structure audit
* MCP-visible, permission-checked change proposals
* Administrator-only approval screen
* Optimistic concurrency using SHA-256 content checksums
* WordPress revision created before an approved change is applied
* Persistent proposal and approval log
* Closed input/output JSON Schemas for every public Ability
* Fixed Core block allowlist and capability-independent candidate sanitization

The plugin registers WordPress Abilities under the `aheadarc-theme/*` namespace and the `aheadarc-theme-agent` category. Returned Ability errors use the `aheadarc_*` prefix. Install the official WordPress MCP Adapter to expose them to an MCP client. Agent-facing abilities cannot publish or directly update a page.

== Security model ==

Use a dedicated WordPress user with only the capabilities it needs. Every public Ability rejects unknown input fields and validates successful output. The agent can inspect pages and create change sets only from the fixed Core block allowlist. Candidate markup is sanitized independently of user capabilities, canonicalized, checksummed and stored for review. Applying a change requires a logged-in administrator, a WordPress nonce and explicit diff confirmation. The candidate and target checksums are revalidated immediately before a revision is created and the approved change is applied.

== License ==

GPL-2.0-or-later. See LICENSE.
