@sakupa/mcp 0.3.0 → 0.4.0

package/dist/bin.js

@@ -1057,7 +1057,7 @@ async function analyzeProject(projectDir, opts = {}) {
 
 // src/project-file.ts
 import { chmodSync, existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
-import { join as join2 } from "node:path";
+import { dirname, join as join2 } from "node:path";
 var SITE_DIR = ".sakupa";
 var SITE_FILE = "site.json";
 function siteFilePath(projectDir) {
@@ -1100,9 +1100,22 @@ function writeSiteFile(projectDir, file) {
   } catch {
   }
 }
+function isInsideGitRepo(projectDir) {
+  let dir = projectDir;
+  for (; ; ) {
+    if (existsSync(join2(dir, ".git"))) return true;
+    const parent = dirname(dir);
+    if (parent === dir) return false;
+    dir = parent;
+  }
+}
+function credentialGitReminder(projectDir) {
+  if (!isInsideGitRepo(projectDir)) return "";
+  return '\nNOTE: this project is inside a git repository. The management credential in .sakupa/site.json is the key to this site \u2014 do NOT commit it to a PUBLIC repository (add ".sakupa/" to .gitignore yourself if you want to keep it out of version control).';
+}
 
 // src/version.ts
-var MCP_VERSION = "0.3.0";
+var MCP_VERSION = "0.4.0";
 var CLIENT_TYPE = "sakupa-mcp";
 
 // src/tools/context.ts
@@ -1318,7 +1331,7 @@ Files uploaded: ${uploaded2} (${finalized2.totalBytes} bytes)
 ` + (finalized2.expiresAt ? `Expires at: ${finalized2.expiresAt}
 ` : "") + `
 This is a FREE temporary preview: it stays live for ${FREE_SITE_TTL_HOURS} hours. Deploying again or calling refresh_site extends the validity; subscribing the site (subscribe_site) makes this URL permanent. The management credential was saved to .sakupa/site.json \u2014 keep that file: it is the only way to manage this site.
-` + (finalized2.warnings.length > 0 ? `
+` + credentialGitReminder(ctx.projectDir) + (finalized2.warnings.length > 0 ? `
 Warnings:
 ${JSON.stringify(finalized2.warnings, null, 2)}` : "")
           );
@@ -1449,9 +1462,11 @@ Once payment confirms, the site becomes permanent on its current URL. Binding a
   server.registerTool(
     "bind_domain",
     {
-      description: "Bind a custom domain to this subscribed site \u2014 an OPTIONAL extra serving surface; the permanent {shortId}.sakupa.com URL keeps working alongside it. Requires an ACTIVE subscription (subscribe_site). Ownership is proven ONLY by DNS control of the registered apex domain \u2014 payment never grants ownership. A binding request never reserves the hostname: whoever proves DNS control first gets it, and unverified requests expire after 72 hours. Call again with verificationId to check progress.",
+      description: "Bind a custom domain to this subscribed site \u2014 an OPTIONAL extra serving surface; the permanent {shortId}.sakupa.com URL keeps working alongside it. The binding unit is the APEX domain: binding example.com automatically includes www.example.com (both serve the same content, one apex TXT verification covers both), and one site binds at most ONE apex domain \u2014 a second domain needs a second subscribed site. Requires an ACTIVE subscription (subscribe_site). Ownership is proven ONLY by DNS control of the apex \u2014 payment never grants ownership. A binding request never reserves the domain: whoever proves DNS control first gets it, and unverified requests expire after 72 hours. Call again with verificationId to check progress.",
       inputSchema: {
-        hostname: z.string().describe('Hostname to bind, e.g. "example.com" or "www.example.com".'),
+        hostname: z.string().describe(
+          'Domain to bind: the apex ("example.com") or its www form ("www.example.com") \u2014 both mean the same unit. Other subdomains cannot be bound.'
+        ),
         verificationId: z.string().optional().describe("Check an existing DNS verification instead of starting a new one.")
       }
     },
@@ -1466,7 +1481,7 @@ Once payment confirms, the site becomes permanent on its current URL. Binding a
           return text(
             `DNS verification ${res2.verificationId}: ${res2.status}
 ${res2.message}
-` + (res2.provisioningJobId ? `Provisioning started (job ${res2.provisioningJobId}). HTTPS certificate and serving setup are in progress; check again with bind_domain + verificationId later.
+` + (res2.provisioningJobId ? `Provisioning started (job ${res2.provisioningJobId}). HTTPS certificates and serving setup are in progress; check again with bind_domain + verificationId later.
 ` : "") + (res2.pendingDnsRecords.length > 0 ? `
 DNS records still required:
 ${JSON.stringify(res2.pendingDnsRecords, null, 2)}` : "")
@@ -1477,18 +1492,16 @@ ${JSON.stringify(res2.pendingDnsRecords, null, 2)}` : "")
           hostname: args.hostname
         };
         const res = await ctx.client.bindDomain(site.credential, req);
-        const servingHint = res.isApex ? `"${res.hostname}" is an apex domain: your DNS provider must support ALIAS, ANAME, CNAME flattening, or alias records to point it at the assigned CDN domain.` : `"${res.hostname}" is a subdomain: create a CNAME record pointing it at the assigned CDN domain once provisioning completes.`;
         return text(
-          `Domain binding started for ${res.hostname}.
+          `Domain binding started for ${res.apexDomain} (includes: ${res.includedHostnames.join(", ")} \u2014 both will serve this site).
 
 1. Prove control of ${res.apexDomain} by creating this DNS record:
    name:  ${res.verificationRecord.name}
    type:  ${res.verificationRecord.type}
    value: ${res.verificationRecord.value}
-   Ownership comes ONLY from DNS control; paying never grants it. This request does not reserve the hostname \u2014 the first verified request wins, and this challenge expires after 72 hours.
+   Ownership comes ONLY from DNS control; paying never grants it. This request does not reserve the domain \u2014 the first verified request wins, and this challenge expires after 72 hours.
 
-2. Serving DNS (after verification): ${servingHint}
-   Server guidance: ${res.servingInstructions}
+2. Serving DNS (after verification): ${res.servingInstructions}
 
 Then run bind_domain again with verificationId: "${res.verificationId}" to check verification and start provisioning.`
         );
@@ -1593,7 +1606,7 @@ Site: ${res.siteId} (hostnames: ${res.boundHostnames.join(", ") || "(none)"})
 Previous credentials revoked: ${res.revokedPreviousCredentials ? "YES" : "no (preserved on request)"}
 
 A NEW management credential was written to .sakupa/site.json in this project \u2014 this project now manages the site.
-
+` + credentialGitReminder(ctx.projectDir) + `
 Download the current site content (signed URL):
 ${res.archiveUrl}`
         );

package/dist/index.js

@@ -1,5 +1,5 @@
 // src/version.ts
-var MCP_VERSION = "0.3.0";
+var MCP_VERSION = "0.4.0";
 var CLIENT_TYPE = "sakupa-mcp";
 
 // ../core/dist/domain/constants.js
@@ -673,7 +673,7 @@ var HttpApiClient = class {
 
 // src/project-file.ts
 import { chmodSync, existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
-import { join } from "node:path";
+import { dirname, join } from "node:path";
 var SITE_DIR = ".sakupa";
 var SITE_FILE = "site.json";
 function siteFilePath(projectDir) {
@@ -722,6 +722,19 @@ function deleteSiteFile(projectDir) {
     rmSync(path, { force: true });
   }
 }
+function isInsideGitRepo(projectDir) {
+  let dir = projectDir;
+  for (; ; ) {
+    if (existsSync(join(dir, ".git"))) return true;
+    const parent = dirname(dir);
+    if (parent === dir) return false;
+    dir = parent;
+  }
+}
+function credentialGitReminder(projectDir) {
+  if (!isInsideGitRepo(projectDir)) return "";
+  return '\nNOTE: this project is inside a git repository. The management credential in .sakupa/site.json is the key to this site \u2014 do NOT commit it to a PUBLIC repository (add ".sakupa/" to .gitignore yourself if you want to keep it out of version control).';
+}
 
 // src/analyze/analyzer.ts
 import { promises as fs } from "node:fs";
@@ -1366,7 +1379,7 @@ Files uploaded: ${uploaded2} (${finalized2.totalBytes} bytes)
 ` + (finalized2.expiresAt ? `Expires at: ${finalized2.expiresAt}
 ` : "") + `
 This is a FREE temporary preview: it stays live for ${FREE_SITE_TTL_HOURS} hours. Deploying again or calling refresh_site extends the validity; subscribing the site (subscribe_site) makes this URL permanent. The management credential was saved to .sakupa/site.json \u2014 keep that file: it is the only way to manage this site.
-` + (finalized2.warnings.length > 0 ? `
+` + credentialGitReminder(ctx.projectDir) + (finalized2.warnings.length > 0 ? `
 Warnings:
 ${JSON.stringify(finalized2.warnings, null, 2)}` : "")
           );
@@ -1497,9 +1510,11 @@ Once payment confirms, the site becomes permanent on its current URL. Binding a
   server.registerTool(
     "bind_domain",
     {
-      description: "Bind a custom domain to this subscribed site \u2014 an OPTIONAL extra serving surface; the permanent {shortId}.sakupa.com URL keeps working alongside it. Requires an ACTIVE subscription (subscribe_site). Ownership is proven ONLY by DNS control of the registered apex domain \u2014 payment never grants ownership. A binding request never reserves the hostname: whoever proves DNS control first gets it, and unverified requests expire after 72 hours. Call again with verificationId to check progress.",
+      description: "Bind a custom domain to this subscribed site \u2014 an OPTIONAL extra serving surface; the permanent {shortId}.sakupa.com URL keeps working alongside it. The binding unit is the APEX domain: binding example.com automatically includes www.example.com (both serve the same content, one apex TXT verification covers both), and one site binds at most ONE apex domain \u2014 a second domain needs a second subscribed site. Requires an ACTIVE subscription (subscribe_site). Ownership is proven ONLY by DNS control of the apex \u2014 payment never grants ownership. A binding request never reserves the domain: whoever proves DNS control first gets it, and unverified requests expire after 72 hours. Call again with verificationId to check progress.",
       inputSchema: {
-        hostname: z.string().describe('Hostname to bind, e.g. "example.com" or "www.example.com".'),
+        hostname: z.string().describe(
+          'Domain to bind: the apex ("example.com") or its www form ("www.example.com") \u2014 both mean the same unit. Other subdomains cannot be bound.'
+        ),
         verificationId: z.string().optional().describe("Check an existing DNS verification instead of starting a new one.")
       }
     },
@@ -1514,7 +1529,7 @@ Once payment confirms, the site becomes permanent on its current URL. Binding a
           return text(
             `DNS verification ${res2.verificationId}: ${res2.status}
 ${res2.message}
-` + (res2.provisioningJobId ? `Provisioning started (job ${res2.provisioningJobId}). HTTPS certificate and serving setup are in progress; check again with bind_domain + verificationId later.
+` + (res2.provisioningJobId ? `Provisioning started (job ${res2.provisioningJobId}). HTTPS certificates and serving setup are in progress; check again with bind_domain + verificationId later.
 ` : "") + (res2.pendingDnsRecords.length > 0 ? `
 DNS records still required:
 ${JSON.stringify(res2.pendingDnsRecords, null, 2)}` : "")
@@ -1525,18 +1540,16 @@ ${JSON.stringify(res2.pendingDnsRecords, null, 2)}` : "")
           hostname: args.hostname
         };
         const res = await ctx.client.bindDomain(site.credential, req);
-        const servingHint = res.isApex ? `"${res.hostname}" is an apex domain: your DNS provider must support ALIAS, ANAME, CNAME flattening, or alias records to point it at the assigned CDN domain.` : `"${res.hostname}" is a subdomain: create a CNAME record pointing it at the assigned CDN domain once provisioning completes.`;
         return text(
-          `Domain binding started for ${res.hostname}.
+          `Domain binding started for ${res.apexDomain} (includes: ${res.includedHostnames.join(", ")} \u2014 both will serve this site).
 
 1. Prove control of ${res.apexDomain} by creating this DNS record:
    name:  ${res.verificationRecord.name}
    type:  ${res.verificationRecord.type}
    value: ${res.verificationRecord.value}
-   Ownership comes ONLY from DNS control; paying never grants it. This request does not reserve the hostname \u2014 the first verified request wins, and this challenge expires after 72 hours.
+   Ownership comes ONLY from DNS control; paying never grants it. This request does not reserve the domain \u2014 the first verified request wins, and this challenge expires after 72 hours.
 
-2. Serving DNS (after verification): ${servingHint}
-   Server guidance: ${res.servingInstructions}
+2. Serving DNS (after verification): ${res.servingInstructions}
 
 Then run bind_domain again with verificationId: "${res.verificationId}" to check verification and start provisioning.`
         );
@@ -1641,7 +1654,7 @@ Site: ${res.siteId} (hostnames: ${res.boundHostnames.join(", ") || "(none)"})
 Previous credentials revoked: ${res.revokedPreviousCredentials ? "YES" : "no (preserved on request)"}
 
 A NEW management credential was written to .sakupa/site.json in this project \u2014 this project now manages the site.
-
+` + credentialGitReminder(ctx.projectDir) + `
 Download the current site content (signed URL):
 ${res.archiveUrl}`
         );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sakupa/mcp",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Sakupa MCP server: publish AI-made static sites from your AI tool. AI-made pages, live in seconds.",
   "type": "module",
   "main": "dist/index.js",